ZacharyZhang-NY
a2de132083
Root cause of the recurring 401: a revoked key was hardcoded in startup-recovery.ts and onboarding-service.ts and reseeded into composio_settings on every launch, and the interim fix shipped cred.txt as a visible file under resources/. - electron.vite.config.ts reads the gitignored cred.txt at build time and injects the key into the main-process bundle as __COMPOSIO_API_KEY__; no credential file is packaged and the key is not user-visible or configurable. The renderer bundle never sees it. - Delete both hardcoded-key seeders; migration 046 purges stored api_key and never-read toolkits rows while keeping entity_id and auth_config state. - Stop shipping composio_settings in the renderer snapshot.
45 lines
861 B
YAML
45 lines
861 B
YAML
appId: ai.agentcompany.desktop
|
|
productName: AgentCompany
|
|
icon: resources/icon.png
|
|
directories:
|
|
output: release
|
|
buildResources: resources
|
|
files:
|
|
- out/**/*
|
|
- package.json
|
|
- resources/icon.png
|
|
asar: true
|
|
mac:
|
|
category: public.app-category.business
|
|
icon: resources/icon-mac.png
|
|
hardenedRuntime: true
|
|
gatekeeperAssess: false
|
|
entitlements: resources/entitlements.mac.plist
|
|
entitlementsInherit: resources/entitlements.mac.plist
|
|
target:
|
|
- target: dmg
|
|
arch:
|
|
- x64
|
|
- arm64
|
|
- target: zip
|
|
arch:
|
|
- x64
|
|
- arm64
|
|
win:
|
|
icon: resources/icon.ico
|
|
target:
|
|
- target: nsis
|
|
arch:
|
|
- x64
|
|
artifactName: ${productName}-${version}-${arch}.${ext}
|
|
linux:
|
|
category: Office
|
|
target:
|
|
- target: AppImage
|
|
arch:
|
|
- x64
|
|
- target: deb
|
|
arch:
|
|
- x64
|
|
publish: null
|