@paperclipai/server 2026.830.0-canary.8 → 2026.830.0-nightly.0

package/dist/build-info.json

@@ -1,3 +1,3 @@
 {
-  "commit": "6d358e646"
+  "commit": "fd7cb77d8"
 }

package/dist/vendor/paperclip-runner/drivers/native-mcp.d.ts

@@ -0,0 +1,7 @@
+export interface NativeMcpLaunchBinding {
+    name: string;
+    url: string;
+    token: string;
+}
+export declare function nativeMcpLaunchBinding(environment?: NodeJS.ProcessEnv): NativeMcpLaunchBinding | null;
+//# sourceMappingURL=native-mcp.d.ts.map

package/dist/vendor/paperclip-runner/drivers/native-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-mcp.d.ts","sourceRoot":"","sources":["../../src/drivers/native-mcp.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,sBAAsB,CACpC,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,sBAAsB,GAAG,IAAI,CAgC/B"}

package/dist/vendor/paperclip-runner/drivers/native-mcp.js

@@ -0,0 +1,29 @@
+export function nativeMcpLaunchBinding(environment = process.env) {
+    const name = environment.PAPERCLIP_NATIVE_MCP_NAME?.trim();
+    const url = environment.PAPERCLIP_NATIVE_MCP_URL?.trim();
+    const token = environment.PAPERCLIP_NATIVE_MCP_TOKEN?.trim();
+    if (!name && !url && !token)
+        return null;
+    if (!name
+        || !url
+        || !token
+        || token.length < 32
+        || token.length > 4096
+        || url.length > 2048) {
+        throw new Error("assigned native MCP launch binding is incomplete");
+    }
+    if (!/^[a-zA-Z0-9_.-]{1,128}$/.test(name)) {
+        throw new Error("assigned native MCP name is invalid");
+    }
+    const endpoint = new URL(url);
+    if (endpoint.username || endpoint.password || endpoint.hash) {
+        throw new Error("assigned native MCP endpoint contains forbidden URL data");
+    }
+    if (endpoint.protocol !== "https:"
+        && !(endpoint.protocol === "http:"
+            && ["127.0.0.1", "localhost"].includes(endpoint.hostname))) {
+        throw new Error("assigned native MCP endpoint requires HTTPS or loopback HTTP");
+    }
+    return { name, url: endpoint.toString(), token };
+}
+//# sourceMappingURL=native-mcp.js.map

package/dist/vendor/paperclip-runner/drivers/native-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-mcp.js","sourceRoot":"","sources":["../../src/drivers/native-mcp.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,sBAAsB,CACpC,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,MAAM,IAAI,GAAG,WAAW,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,WAAW,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,WAAW,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACzC,IACE,CAAC,IAAI;WACF,CAAC,GAAG;WACJ,CAAC,KAAK;WACN,KAAK,CAAC,MAAM,GAAG,EAAE;WACjB,KAAK,CAAC,MAAM,GAAG,IAAI;WACnB,GAAG,CAAC,MAAM,GAAG,IAAI,EACpB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,KAAK,QAAQ;WAC3B,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO;eAC7B,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC"}

package/dist/vendor/paperclip-runner/drivers/runtime-context-materializer.d.ts

@@ -0,0 +1,16 @@
+import type { NativeRuntimeContextSnapshot } from "../contracts/runtime-context.js";
+import type { NativeMcpLaunchBinding } from "./native-mcp.js";
+export declare function materializeNativeRuntimeSkills(context: NativeRuntimeContextSnapshot | null, skillsHome: string, dependencies?: {
+    /** Internal test seam for failed staging cleanup coverage. */
+    removeTree?: (path: string) => Promise<void>;
+    /** Internal test seam for publication failure coverage. */
+    renameTree?: (source: string, destination: string) => Promise<void>;
+}): Promise<void>;
+export declare function prepareIsolatedCodexHome(input: {
+    context: NativeRuntimeContextSnapshot | null;
+    codexHome: string;
+    sourceCodexHome?: string | null;
+    nativeMcp?: NativeMcpLaunchBinding | null;
+    apiKey?: string | null;
+}): Promise<void>;
+//# sourceMappingURL=runtime-context-materializer.d.ts.map

package/dist/vendor/paperclip-runner/drivers/runtime-context-materializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-context-materializer.d.ts","sourceRoot":"","sources":["../../src/drivers/runtime-context-materializer.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAyH9D,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,4BAA4B,GAAG,IAAI,EAC5C,UAAU,EAAE,MAAM,EAClB,YAAY,GAAE;IACZ,8DAA8D;IAC9D,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,2DAA2D;IAC3D,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChE,GACL,OAAO,CAAC,IAAI,CAAC,CAsEf;AAuBD,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,OAAO,EAAE,4BAA4B,GAAG,IAAI,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+ChB"}

package/dist/vendor/paperclip-runner/drivers/runtime-context-materializer.js

@@ -0,0 +1,229 @@
+import { randomUUID } from "node:crypto";
+import { constants } from "node:fs";
+import { chmod, cp, lstat, mkdir, open, readdir, rename, rm, writeFile, } from "node:fs/promises";
+import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+async function assertSafeTree(root, child = "") {
+    const directory = child ? join(root, child) : root;
+    const directoryStat = await lstat(directory);
+    if (directoryStat.isSymbolicLink()) {
+        throw new Error(`runtime context asset contains a symlink: ${child || "."}`);
+    }
+    if (!directoryStat.isDirectory()) {
+        throw new Error("runtime context asset root must be a directory");
+    }
+    for (const entry of await readdir(directory, { withFileTypes: true })) {
+        const childRelative = child ? `${child}/${entry.name}` : entry.name;
+        const stat = await lstat(join(root, childRelative));
+        if (stat.isSymbolicLink()) {
+            throw new Error(`runtime context asset contains a symlink: ${childRelative}`);
+        }
+        if (stat.isDirectory())
+            await assertSafeTree(root, childRelative);
+        else if (!stat.isFile()) {
+            throw new Error(`runtime context asset contains an unsupported file: ${childRelative}`);
+        }
+    }
+}
+function safeMaterializationTarget(root, runtimeName) {
+    const segments = runtimeName.split("/");
+    if (runtimeName.startsWith("/")
+        || runtimeName.includes("\\")
+        || runtimeName.includes("\0")
+        || segments.some((segment) => /[<>:"|?*\u0000-\u001f\u007f]/u.test(segment))
+        || segments.some((segment) => !segment || segment === "." || segment === "..")
+        || segments.some((segment) => !segment.replace(/[ .]+$/u, ""))
+        || segments.some(isWin32ReservedPathSegment)) {
+        throw new Error("runtime context skill name must be a safe relative path");
+    }
+    const target = resolve(root, runtimeName);
+    const relation = relative(resolve(root), target);
+    if (relation === ""
+        || relation === ".."
+        || relation.startsWith(`..${sep}`)
+        || isAbsolute(relation)) {
+        throw new Error("runtime context skill name must stay inside the skills home");
+    }
+    return target;
+}
+function isWin32ReservedPathSegment(segment) {
+    const basename = segment
+        .normalize("NFC")
+        .split(".", 1)[0]
+        .replace(/[ .]+$/u, "")
+        .toUpperCase();
+    return /^(?:CON|PRN|AUX|NUL|CONIN\$|CONOUT\$|COM[1-9¹²³]|LPT[1-9¹²³])$/u.test(basename);
+}
+function portableRuntimeNameKey(runtimeName) {
+    // Skill assignments must remain unambiguous when the same context is moved
+    // between the case-sensitive Linux runner and the case-insensitive default
+    // filesystems on macOS or Windows. NFC also catches composed/decomposed
+    // aliases, while per-segment trimming matches Win32's treatment of trailing
+    // dots and spaces before either spelling reaches the staging tree.
+    return runtimeName
+        .normalize("NFC")
+        .split("/")
+        .map((segment) => segment.replace(/[ .]+$/u, ""))
+        .join("/")
+        .toLowerCase();
+}
+async function protectStagedTree(root) {
+    const rootHandle = await open(root, constants.O_RDONLY
+        | (constants.O_NOFOLLOW ?? 0)
+        | (constants.O_DIRECTORY ?? 0));
+    try {
+        const opened = await rootHandle.stat();
+        if (!opened.isDirectory()) {
+            throw new Error("staged runtime context root must be a directory");
+        }
+        // Keep directories owner-writable so the private staging tree can be
+        // removed without a second path-based chmod traversal.
+        await rootHandle.chmod(0o700);
+        for (const entry of await readdir(root, { withFileTypes: true })) {
+            const child = join(root, entry.name);
+            if (entry.isDirectory()) {
+                await protectStagedTree(child);
+                continue;
+            }
+            const childHandle = await open(child, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+            try {
+                const openedChild = await childHandle.stat();
+                if (!openedChild.isFile()) {
+                    throw new Error("staged runtime context asset must be a regular file");
+                }
+                await childHandle.chmod(openedChild.mode & 0o555);
+            }
+            finally {
+                await childHandle.close();
+            }
+        }
+    }
+    finally {
+        await rootHandle.close();
+    }
+}
+export async function materializeNativeRuntimeSkills(context, skillsHome, dependencies = {}) {
+    const removeTree = dependencies.removeTree ??
+        ((path) => rm(path, { recursive: true, force: true }));
+    const renameTree = dependencies.renameTree ?? rename;
+    if (context) {
+        const runtimeNames = new Set();
+        for (const skill of context.skills) {
+            safeMaterializationTarget(skillsHome, skill.runtimeName);
+            const runtimeName = portableRuntimeNameKey(skill.runtimeName);
+            if (runtimeNames.has(runtimeName)) {
+                throw new Error("runtime context skill names must not overlap");
+            }
+            runtimeNames.add(runtimeName);
+        }
+        for (const runtimeName of runtimeNames) {
+            const segments = runtimeName.split("/");
+            for (let length = 1; length < segments.length; length += 1) {
+                if (runtimeNames.has(segments.slice(0, length).join("/"))) {
+                    throw new Error("runtime context skill names must not overlap");
+                }
+            }
+        }
+        for (const skill of context.skills) {
+            await assertSafeTree(skill.bundle.rootPath);
+        }
+    }
+    const skillsHomeExists = await lstat(skillsHome).then(() => true, (error) => {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    });
+    if (skillsHomeExists) {
+        throw new Error("runtime context skills home must be a fresh destination");
+    }
+    const parent = dirname(skillsHome);
+    const nonce = randomUUID();
+    const stagingHome = join(parent, `.paperclip-skills-staging-${nonce}`);
+    await mkdir(parent, { recursive: true, mode: 0o700 });
+    await chmod(parent, 0o700);
+    await mkdir(stagingHome, { mode: 0o700 });
+    try {
+        for (const skill of context?.skills ?? []) {
+            const target = safeMaterializationTarget(stagingHome, skill.runtimeName);
+            await cp(skill.bundle.rootPath, target, {
+                recursive: true,
+                force: false,
+                errorOnExist: true,
+                dereference: false,
+                verbatimSymlinks: true,
+            });
+            await assertSafeTree(target);
+            await protectStagedTree(target);
+        }
+        // The caller supplies a new isolated home for each provider launch. Never
+        // move an existing assignment out of its canonical path: a failed bounded
+        // rollback cannot portably guarantee that name is restored on every
+        // filesystem. Publication therefore targets only a fresh destination.
+        await renameTree(stagingHome, skillsHome);
+    }
+    catch (error) {
+        await removeTree(stagingHome).catch(() => undefined);
+        throw error;
+    }
+}
+async function readSourceCodexAuth(sourceAuth) {
+    const handle = await open(sourceAuth, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0)).catch((error) => {
+        if (error.code === "ENOENT" || error.code === "ELOOP")
+            return null;
+        throw error;
+    });
+    if (!handle)
+        return null;
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile())
+            return null;
+        if (stat.size > 1024 * 1024) {
+            throw new Error("source Codex auth file exceeds the 1 MiB limit");
+        }
+        return await handle.readFile();
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function prepareIsolatedCodexHome(input) {
+    await materializeNativeRuntimeSkills(input.context, join(input.codexHome, "skills"));
+    const configPath = join(input.codexHome, "config.toml");
+    await rm(configPath, { force: true });
+    await writeFile(configPath, [
+        // Codex shell snapshots serialize the provider process environment. The
+        // native runner injects short-lived provider and MCP bindings, so a
+        // snapshot would turn ephemeral credentials into durable session state.
+        "[features]",
+        "shell_snapshot = false",
+        "",
+        ...(input.nativeMcp
+            ? [
+                `[mcp_servers.${JSON.stringify(input.nativeMcp.name)}]`,
+                `url = ${JSON.stringify(input.nativeMcp.url)}`,
+                `http_headers = { Authorization = ${JSON.stringify(`Bearer ${input.nativeMcp.token}`)} }`,
+                "",
+            ]
+            : []),
+    ].join("\n"), { mode: 0o600 });
+    const targetAuth = join(input.codexHome, "auth.json");
+    await rm(targetAuth, { force: true });
+    const apiKey = input.apiKey?.trim();
+    if (apiKey) {
+        // The pinned Codex app-server authenticates API-key automation through its
+        // login cache rather than the CLI-only CODEX_API_KEY path. Keep this file
+        // owner-only in the disposable session home.
+        await writeFile(targetAuth, JSON.stringify({ OPENAI_API_KEY: apiKey }), { mode: 0o600 });
+        await chmod(targetAuth, 0o600);
+        return;
+    }
+    const sourceHome = input.sourceCodexHome?.trim();
+    if (!sourceHome)
+        return;
+    const sourceAuth = await readSourceCodexAuth(join(sourceHome, "auth.json"));
+    if (!sourceAuth)
+        return;
+    await writeFile(targetAuth, sourceAuth, { mode: 0o600 });
+    await chmod(targetAuth, 0o600);
+}
+//# sourceMappingURL=runtime-context-materializer.js.map

package/dist/vendor/paperclip-runner/drivers/runtime-context-materializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-context-materializer.js","sourceRoot":"","sources":["../../src/drivers/runtime-context-materializer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EACL,KAAK,EACL,EAAE,EACF,KAAK,EACL,KAAK,EACL,IAAI,EACJ,OAAO,EACP,MAAM,EACN,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAK9E,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,KAAK,GAAG,EAAE;IACpD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,aAAa,CAAC,cAAc,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,6CAA6C,KAAK,IAAI,GAAG,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,6CAA6C,aAAa,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,uDAAuD,aAAa,EAAE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY,EAAE,WAAmB;IAClE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IACE,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;WACxB,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1B,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;WAC1B,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;WACzE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;WAC3E,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;WAC3D,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACjD,IACE,QAAQ,KAAK,EAAE;WACZ,QAAQ,KAAK,IAAI;WACjB,QAAQ,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;WAC/B,UAAU,CAAC,QAAQ,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,MAAM,QAAQ,GAAG,OAAO;SACrB,SAAS,CAAC,KAAK,CAAC;SAChB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE;SACjB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,WAAW,EAAE,CAAC;IACjB,OAAO,iEAAiE,CAAC,IAAI,CAC3E,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAmB;IACjD,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,mEAAmE;IACnE,OAAO,WAAW;SACf,SAAS,CAAC,KAAK,CAAC;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;SAChD,IAAI,CAAC,GAAG,CAAC;SACT,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAC3B,IAAI,EACJ,SAAS,CAAC,QAAQ;UACd,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;UAC3B,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,CAAC,CACjC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,qEAAqE;QACrE,uDAAuD;QACvD,MAAM,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAC5B,KAAK,EACL,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CACjD,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;YACpD,CAAC;oBAAS,CAAC;gBACT,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAA4C,EAC5C,UAAkB,EAClB,YAAY,GAKR,EAAE;IAEN,MAAM,UAAU,GACd,YAAY,CAAC,UAAU;QACvB,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,MAAM,CAAC;IACrD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,yBAAyB,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9D,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC3D,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAC1D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CACnD,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,KAA4B,EAAE,EAAE;QAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,6BAA6B,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3B,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,yBAAyB,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACzE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE;gBACtC,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,KAAK;gBAClB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YACH,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7B,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,UAAkB;IACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,EACV,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CACjD,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACnE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACC,MAAM,8BAA8B,CAClC,KAAK,CAAC,OAAO,EACb,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAChC,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,CAAC,UAAU,EAAE;QAC1B,wEAAwE;QACxE,oEAAoE;QACpE,wEAAwE;QACxE,YAAY;QACZ,wBAAwB;QACxB,EAAE;QACF,GAAG,CAAC,KAAK,CAAC,SAAS;YACjB,CAAC,CAAC;gBACE,gBAAgB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;gBACvD,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;gBAC9C,oCAAoC,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI;gBACzF,EAAE;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,MAAM,EAAE,CAAC;QACX,2EAA2E;QAC3E,0EAA0E;QAC1E,6CAA6C;QAC7C,MAAM,SAAS,CACb,UAAU,EACV,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAC1C,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QACF,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paperclipai/server",
-  "version": "2026.830.0-canary.8",
+  "version": "2026.830.0-nightly.0",
   "license": "MIT",
   "homepage": "https://github.com/paperclipai/paperclip",
   "bugs": {
@@ -29,22 +29,22 @@
   "dependencies": {
     "@aws-sdk/client-s3": "^3.1115.0",
     "@opentelemetry/api": "^1.9.0",
-    "@paperclipai/adapter-claude-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-codex-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-cursor-cloud": "2026.830.0-canary.8",
-    "@paperclipai/adapter-cursor-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-gemini-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-grok-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-kimi-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-openclaw-gateway": "2026.830.0-canary.8",
-    "@paperclipai/adapter-opencode-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-pi-local": "2026.830.0-canary.8",
-    "@paperclipai/adapter-utils": "2026.830.0-canary.8",
-    "@paperclipai/db": "2026.830.0-canary.8",
-    "@paperclipai/hermes-paperclip-adapter": "2026.830.0-canary.8",
-    "@paperclipai/plugin-sdk": "2026.830.0-canary.8",
-    "@paperclipai/shared": "2026.830.0-canary.8",
-    "@paperclipai/skills-catalog": "2026.830.0-canary.8",
+    "@paperclipai/adapter-claude-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-codex-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-cursor-cloud": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-cursor-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-gemini-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-grok-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-kimi-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-openclaw-gateway": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-opencode-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-pi-local": "2026.830.0-nightly.0",
+    "@paperclipai/adapter-utils": "2026.830.0-nightly.0",
+    "@paperclipai/db": "2026.830.0-nightly.0",
+    "@paperclipai/hermes-paperclip-adapter": "2026.830.0-nightly.0",
+    "@paperclipai/plugin-sdk": "2026.830.0-nightly.0",
+    "@paperclipai/shared": "2026.830.0-nightly.0",
+    "@paperclipai/skills-catalog": "2026.830.0-nightly.0",
     "@vercel/connect": "0.6.1",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
@@ -68,7 +68,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@paperclipai/paperclip-runner": "2026.830.0-canary.8",
+    "@paperclipai/paperclip-runner": "2026.830.0-nightly.0",
     "@types/express": "^5.0.0",
     "@types/express-serve-static-core": "^5.1.3",
     "@types/jsdom": "^30.0.0",