Two Paths
For most cases, build an external adapter plugin. It’s cleaner, independently versioned, and doesn’t require modifying Paperclip’s source. See External Adapters for the full guide.
The rest of this page covers the shared internals that both paths use.
Package Structure
Step 1: Root Metadata
src/index.ts is imported by all three consumers. Keep it dependency-free.
Step 2: Server Execute
src/server/execute.ts is the core. It receives an AdapterExecutionContext and returns an AdapterExecutionResult.
Key responsibilities:
- Read config using safe helpers (
asString,asNumber, etc.) from@paperclipai/adapter-utils/server-utils - Build environment with
buildPaperclipEnv(agent)plus context vars - Resolve session state from
runtime.sessionParams - Render prompt with
renderTemplate(template, data) - Spawn the process with
runChildProcess()or call viafetch() - Parse output for usage, costs, session state, errors
- Handle unknown session errors (retry fresh, set
clearSession: true)
Available Helpers
AdapterExecutionContext
AdapterExecutionResult
Step 3: Environment Test
src/server/test.ts validates the adapter config before running.
Return structured diagnostics:
Step 4: UI Module (Built-in Only)
For built-in adapters registered in Paperclip’s source:parse-stdout.ts— converts stdout lines toTranscriptEntry[]for the run viewerbuild-config.ts— converts form values toadapterConfigJSON- Config fields React component in
ui/src/adapters/<name>/config-fields.tsx
ui-parser.ts instead. See the UI Parser Contract.
Step 5: CLI Module
format-event.ts — pretty-prints stdout for paperclipai run --watch using picocolors.
Step 6: Register (Built-in Only)
Add the adapter to all three registries:server/src/adapters/registry.tsui/src/adapters/registry.tscli/src/adapters/registry.ts
Session Persistence
If your agent runtime supports conversation continuity across heartbeats:- Return
sessionParamsfromexecute()(e.g.,{ sessionId: "abc123" }) - Read
runtime.sessionParamson the next wake to resume - Optionally implement a
sessionCodecfor validation and display
Capability Flags
Adapters can declare what “local” capabilities they support by setting optional fields on theServerAdapterModule. The server and UI use these flags to decide which features to enable for agents using the adapter (instructions bundle editor, skills sync, JWT auth, etc.).
These flags are exposed via
GET /api/adapters in a capabilities object, along with a derived supportsSkills flag (true when listSkills or syncSkills is defined).
Example
false for all capabilities.
Skills Injection
Make Paperclip skills discoverable to your agent runtime without writing to the agent’s working directory:- Best: tmpdir + flag — create tmpdir, symlink skills, pass via CLI flag, clean up after
- Acceptable: global config dir — symlink to the runtime’s global plugins directory
- Acceptable: env var — point a skills path env var at the repo’s
skills/directory - Last resort: prompt injection — include skill content in the prompt template
Cross-run workspace persistence (no-remote-git contract)
The local execution-workspace cwd is the only persistence boundary across runs. No adapter may depend on a git remote for cross-run state. The supported round-trip:- Per-run, on the remote side.
prepareWorkspaceForSshExecution(inpackages/adapter-utils/src/ssh.ts) git-bundles the local worktree and ships it to the run’s remote dir. Nogit remoteis set anywhere; the bundle is the transport. - End-of-run, in the adapter’s
finallyblock. The adapter invokesrestoreRemoteWorkspace(e.g. claude-local’sexecute.ts), which callsrestoreWorkspaceFromSshExecution→exportGitWorkspaceFromSsh→integrateImportedGitHead. Remote commits made during the run land back in the local Mac worktree with nogit pushand no remote configured.
- Never
git pushfrom adapter or runtime code. Operator-supplied configuration may opt in, but the default contract is no remote operations. - Never assume a remote exists. The local cwd is the source of truth between runs.
- Surface restore failures. A failed sync-back must propagate as a run-level error, not a silent warning. The heartbeat records a
workspace_finalizerow (succeeded/failed) aroundadapter.executeso dependent issues do not wake on a stale worktree.
packages/adapter-utils/src/ssh-fixture.test.ts: it asserts git remote is empty before and after the round-trip and that a remote-only commit still lands locally via restore alone.
Security
- Treat agent output as untrusted (parse defensively, never execute)
- Inject secrets via environment variables, not prompts
- Configure network access controls if the runtime supports them
- Always enforce timeout and grace period
- The UI parser module runs in a browser sandbox — zero runtime imports, no side effects
Next Steps
- External Adapters — build a standalone adapter plugin
- UI Parser Contract — ship a custom run-log parser
- How Agents Work — the heartbeat lifecycle