privilegedescalation/org
12
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Use Paperclip secret_ref for OPENROUTER_API_KEY instead of plain text

Browse Source 
Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
Chris Farhood
2026-03-20 06:46:31 -04:00
parent 043a0b23ca
commit f7d36d96b4
1 changed files with 2 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
engineering/regina/CONFIG.md
+2 -6
View File
@@ -34,7 +34,7 @@
"cwd": "/paperclip/privilegedescalation/agents/engineering/regina",
"env": {
"HOME": { "type": "plain", "value": "/paperclip/privilegedescalation/agents/engineering/regina" },
"OPENROUTER_API_KEY": { "type": "plain", "value": "<REDACTED - restore from pg-fix-regina-env2.sh>" },
"OPENROUTER_API_KEY": { "type": "secret_ref", "secretId": "d843133a-0702-4f44-b8e8-43249879995f" },
"GITHUB_APP_ID_REGINA": { "type": "plain", "value": "3097914" },
"GITHUB_PEM_PATH_REGINA": { "type": "plain", "value": "/paperclip/secrets/github-pems/privilegedescalation.pem" }
},
@@ -42,16 +42,12 @@
}
```
> **OPENROUTER_API_KEY** is redacted here. The full env block including the key is stored in
> `/Users/cpfarhood/Downloads/pg-fix-regina-env2.sh` on the operator's machine. Run that script after
> any UI save to restore Regina's env + model.
## Capabilities
Owns QA, PR review, regression testing, and CI health monitoring for Privileged Escalation repos. vitest, testing-library/react, Headlamp plugin testing, bug triage, GitHub PR review.
## Known Issues
- **Env + model wipe on UI save**: Every time Regina's config is saved via the Paperclip UI, both `env` and `model` are wiped. Run `pg-fix-regina-env2.sh` after any UI save.
- **Env + model wipe on UI save**: Every time Regina's config is saved via the Paperclip UI, both `env` and `model` may be wiped. Restore via DB patch after any UI save.
- **Prompt UI blank**: The `opencode_local` adapter does not hydrate `promptTemplate` back into the Lexical editor on page load. The prompt is correctly stored in the DB and runs fine — the blank editor is a display bug only.
- **No `instructionsFilePath`**: The `opencode_local` adapter does not support file-based prompt loading. The prompt must be restored via DB patch (see COMPANY.md).