RomanNum3ral
/
paperclip
mirror of https://github.com/paperclipai/paperclip.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ci(runner): build breadth provider artifacts

This commit is contained in:
Dotta 2026-09-03 06:29:30 -05:00
parent 9fa19b3bd5
commit 2ab3463deb
2 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/runner-full-stack-e2e.yml vendored
View File

@ -330,11 +330,11 @@ jobs:
run: pnpm --filter @paperclipai/paperclip-eval-kernel build
- name: Build local JS-backed provider artifacts
if: matrix.environmentId == 'local' && (matrix.profileId == 'runner-opencode' || startsWith(matrix.profileId, 'runner-acpx-'))
if: matrix.environmentId == 'local' && (matrix.profileId == 'runner-opencode' || startsWith(matrix.profileId, 'runner-acpx-') || matrix.suiteId == 'openrouter-model-breadth')
run: pnpm --filter @paperclipai/paperclip-runner build:typescript
- name: Qualify local provider Node interpreter
if: matrix.environmentId == 'local' && (matrix.profileId == 'runner-opencode' || startsWith(matrix.profileId, 'runner-acpx-'))
if: matrix.environmentId == 'local' && (matrix.profileId == 'runner-opencode' || startsWith(matrix.profileId, 'runner-acpx-') || matrix.suiteId == 'openrouter-model-breadth')
run: |
node <<'NODE'
const fs = require("node:fs");

16
tests/runner-e2e/workflow-security.test.ts
View File

@ -117,6 +117,22 @@ describe("public repository paid workflow security", () => {
}
});
it("prepares every local JS-backed provider before paid execution", async () => {
const workflow = await readFile(
path.join(repositoryRoot, ".github/workflows/runner-full-stack-e2e.yml"),
"utf8",
);
const jsBackedLocalCondition =
"matrix.environmentId == 'local' && (matrix.profileId == 'runner-opencode' || startsWith(matrix.profileId, 'runner-acpx-') || matrix.suiteId == 'openrouter-model-breadth')";
expect(workflow).toContain("Build local JS-backed provider artifacts");
expect(workflow).toContain("Qualify local provider Node interpreter");
expect(workflow.split(jsBackedLocalCondition)).toHaveLength(3);
expect(workflow).toContain(
"pnpm --filter @paperclipai/paperclip-runner build:typescript",
);
});
it("uses environment-scoped OIDC for a no-delete history publisher", async () => {
const workflow = await readFile(
path.join(repositoryRoot, ".github/workflows/runner-full-stack-e2e.yml"),