@right-link/paperclip-plugin-codex-remote 0.3.1

package/dist/server/tailscale.js

@@ -0,0 +1,95 @@
+import { runAdapterExecutionTargetShellCommand, } from "@paperclipai/adapter-utils/execution-target";
+// Adapter-driven Tailscale bring-up.
+//
+// Ported from the Cloudflare bridge Worker's `ensureTailscale` +
+// `withTailscaleProxyEnv` so the sandbox provider/Worker can stay stock. The
+// sandbox image ships `tailscale` + the `tailscale-up` helper; the Tailscale
+// auth key arrives through the environment's env vars (Paperclip
+// `envVars` → adapter `config.env`); and codex_remote brings the tailnet up
+// itself before running Codex, then routes Codex's traffic through the
+// userspace proxy.
+const TAILSCALE_SOCKS_PROXY = "socks5://127.0.0.1:1055";
+const TAILSCALE_HTTP_PROXY = "http://127.0.0.1:1056";
+const TAILSCALE_PROXY_ENV = {
+    ALL_PROXY: TAILSCALE_SOCKS_PROXY,
+    all_proxy: TAILSCALE_SOCKS_PROXY,
+    HTTP_PROXY: TAILSCALE_HTTP_PROXY,
+    http_proxy: TAILSCALE_HTTP_PROXY,
+    HTTPS_PROXY: TAILSCALE_HTTP_PROXY,
+    https_proxy: TAILSCALE_HTTP_PROXY,
+};
+// Keep localhost direct so the Paperclip callback bridge (127.0.0.1) is never
+// routed through the tailnet proxy.
+const NO_PROXY_LOCAL = ["127.0.0.1", "localhost", "::1"];
+function nonEmpty(value) {
+    return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+export function readTailscaleAuthKey(envConfig) {
+    return nonEmpty(envConfig.TAILSCALE_AUTHKEY);
+}
+function mergeNoProxy(existing) {
+    const values = new Set((existing ?? "")
+        .split(",")
+        .map((value) => value.trim())
+        .filter(Boolean));
+    for (const value of NO_PROXY_LOCAL)
+        values.add(value);
+    return Array.from(values).join(",");
+}
+/**
+ * Mutates `env` in place to route outbound traffic through the sandbox's
+ * userspace-Tailscale proxy, leaving localhost direct. Mirrors the bridge
+ * Worker's `withTailscaleProxyEnv`.
+ */
+export function applyTailscaleProxyEnv(env) {
+    Object.assign(env, TAILSCALE_PROXY_ENV);
+    const noProxy = mergeNoProxy(env.NO_PROXY ?? env.no_proxy);
+    env.NO_PROXY = noProxy;
+    env.no_proxy = noProxy;
+}
+/**
+ * Brings up Tailscale inside a remote sandbox by running the image's
+ * `tailscale-up` helper with the auth key from the environment's env vars.
+ * No-op unless the target is a sandbox and `TAILSCALE_AUTHKEY` is set. Throws
+ * on failure so a misconfigured tailnet stops the run before Codex tries (and
+ * fails) to reach the model provider.
+ */
+export async function ensureSandboxTailscaleUp(input) {
+    const target = input.target;
+    if (!target || target.kind !== "remote" || target.transport !== "sandbox")
+        return false;
+    const authKey = readTailscaleAuthKey(input.envConfig);
+    if (!authKey)
+        return false;
+    const env = { TAILSCALE_AUTHKEY: authKey };
+    const hostname = nonEmpty(input.envConfig.TAILSCALE_HOSTNAME);
+    if (hostname)
+        env.TAILSCALE_HOSTNAME = hostname;
+    const extraArgs = nonEmpty(input.envConfig.TAILSCALE_EXTRA_ARGS);
+    if (extraArgs)
+        env.TAILSCALE_EXTRA_ARGS = extraArgs;
+    const script = [
+        "set -eu",
+        "if ! command -v tailscale-up >/dev/null 2>&1; then",
+        '  echo "tailscale-up helper not found in sandbox image" >&2',
+        "  exit 127",
+        "fi",
+        "tailscale-up",
+    ].join("\n");
+    const result = await runAdapterExecutionTargetShellCommand(input.runId, target, script, {
+        cwd: input.cwd,
+        env,
+        timeoutSec: Math.min(Math.max(input.timeoutSec, 1), 60),
+        graceSec: 5,
+        onLog: input.onLog,
+    });
+    if (result.timedOut) {
+        throw new Error("Timed out bringing up Tailscale in the sandbox before starting Codex.");
+    }
+    if ((result.exitCode ?? 1) !== 0) {
+        const detail = [result.stderr.trim(), result.stdout.trim()].filter(Boolean).join("\n");
+        throw new Error(`Failed to bring up Tailscale in the sandbox${detail ? `: ${detail}` : "."}`);
+    }
+    return true;
+}
+//# sourceMappingURL=tailscale.js.map

package/dist/server/tailscale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tailscale.js","sourceRoot":"","sources":["../../src/server/tailscale.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,GAEtC,MAAM,6CAA6C,CAAC;AAErD,qCAAqC;AACrC,EAAE;AACF,iEAAiE;AACjE,6EAA6E;AAC7E,6EAA6E;AAC7E,iEAAiE;AACjE,4EAA4E;AAC5E,uEAAuE;AACvE,mBAAmB;AAEnB,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AACxD,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAErD,MAAM,mBAAmB,GAA2B;IAClD,SAAS,EAAE,qBAAqB;IAChC,SAAS,EAAE,qBAAqB;IAChC,UAAU,EAAE,oBAAoB;IAChC,UAAU,EAAE,oBAAoB;IAChC,WAAW,EAAE,oBAAoB;IACjC,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,8EAA8E;AAC9E,oCAAoC;AACpC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AAEzD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAkC;IACrE,OAAO,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,QAA4B;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,QAAQ,IAAI,EAAE,CAAC;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,cAAc;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA2B;IAChE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3D,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;IACvB,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAO9C;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,GAAG,GAA2B,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC9D,IAAI,QAAQ;QAAE,GAAG,CAAC,kBAAkB,GAAG,QAAQ,CAAC;IAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACjE,IAAI,SAAS;QAAE,GAAG,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAEpD,MAAM,MAAM,GAAG;QACb,SAAS;QACT,oDAAoD;QACpD,6DAA6D;QAC7D,YAAY;QACZ,IAAI;QACJ,cAAc;KACf,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,MAAM,GAAG,MAAM,qCAAqC,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;QACtF,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG;QACH,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACvD,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/test.d.ts

@@ -0,0 +1,3 @@
+import type { AdapterEnvironmentTestContext, AdapterEnvironmentTestResult } from "@paperclipai/adapter-utils";
+export declare function testEnvironment(ctx: AdapterEnvironmentTestContext): Promise<AdapterEnvironmentTestResult>;
+//# sourceMappingURL=test.d.ts.map

package/dist/server/test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../../src/server/test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,6BAA6B,EAC7B,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AA2hBpC,wBAAsB,eAAe,CACnC,GAAG,EAAE,6BAA6B,GACjC,OAAO,CAAC,4BAA4B,CAAC,CAuXvC"}