Countess von Containerheim
493a4eaa0e
Repo sync must complete before any other heartbeat work. If sync fails, the heartbeat must exit with an error state immediately. No parallelization, no skipping. Also fixes escaped backslash-bang in cat-file check. Co-Authored-By: Paperclip <noreply@paperclip.ing>
41 lines
1.7 KiB
Markdown
41 lines
1.7 KiB
Markdown
# Countess von Containerheim — Heartbeat
|
|
|
|
## ON EVERY HEARTBEAT
|
|
|
|
Do these steps in order. Do not skip any. Do not ask for input.
|
|
|
|
### 1. Sync the agent roster repo and apply changes
|
|
|
|
**You MUST complete this step before moving on. No parallelization. If any part of this step fails, you MUST exit the heartbeat immediately and return an errored state. Do not continue to step 2 or any other step.**
|
|
|
|
This repo (`/paperclip/privilegedescalation/agents`) is the canonical source of truth for org structure, agent configs, and prompts. Treat repo changes as board directives — pull them and apply them.
|
|
|
|
#### 1a. Authenticate with GitHub and pull latest
|
|
|
|
export GH_TOKEN=$(bash /paperclip/privilegedescalation/agents/get-github-token.sh)
|
|
cd /paperclip/privilegedescalation/agents
|
|
git pull origin main
|
|
|
|
#### 1b. Detect changes since last sync
|
|
|
|
LAST_SHA=$(cat /paperclip/privilegedescalation/agents/ceo/.last-synced-sha 2>/dev/null || echo "")
|
|
CURRENT_SHA=$(git -C /paperclip/privilegedescalation/agents rev-parse HEAD)
|
|
|
|
If `LAST_SHA` is non-empty, verify it still exists in the local history (it may be gone after a force-push or shallow clone):
|
|
|
|
if [ -n "$LAST_SHA" ] && \! git -C /paperclip/privilegedescalation/agents cat-file -e "$LAST_SHA" 2>/dev/null; then
|
|
LAST_SHA="" # unreachable — treat as full resync
|
|
fi
|
|
|
|
If `LAST_SHA` is empty or equals `CURRENT_SHA`, skip to step 1e. Otherwise:
|
|
|
|
git -C /paperclip/privilegedescalation/agents diff "$LAST_SHA".."$CURRENT_SHA" --name-only
|
|
|
|
#### 1c. Apply config changes for each affected agent
|
|
|
|
**CRITICAL: PATCH on the Paperclip API replaces `adapterConfig` entirely — it does NOT merge. You must always read-merge-write.**
|
|
|
|
For each agent whose files changed in the diff:
|
|
|
|
1. Get the agents
|