paperclipai/paperclip · error

adapterEnv must not contain BOOTSTRAP_TOKEN (reserved key)

Error message

adapterEnv must not contain BOOTSTRAP_TOKEN (reserved key)

What it means

Error "adapterEnv must not contain BOOTSTRAP_TOKEN (reserved key)" thrown in paperclipai/paperclip.

Source

Thrown at packages/plugins/sandbox-providers/kubernetes/src/secret-manager.ts:20

export interface CreatePerRunSecretInput {
  namespace: string;
  secretName: string;
  runId: string;
  ownerKind: string;
  ownerApiVersion: string;
  ownerName: string;
  ownerUid: string;
  bootstrapToken: string;
  adapterEnv: Record<string, string>;
}

export async function createPerRunSecret(clients: KubeClients, input: CreatePerRunSecretInput): Promise<void> {
  if (!input.ownerUid) {
    throw new Error("createPerRunSecret requires a non-empty ownerUid");
  }
  if ("BOOTSTRAP_TOKEN" in input.adapterEnv) {
    throw new Error("adapterEnv must not contain BOOTSTRAP_TOKEN (reserved key)");
  }
  await clients.core.createNamespacedSecret({
    namespace: input.namespace,
    body: {
      apiVersion: "v1",
      kind: "Secret",
      type: "Opaque",
      metadata: {
        name: input.secretName,
        namespace: input.namespace,
        labels: {
          "paperclip.io/run-id": input.runId,
          "paperclip.io/managed-by": "paperclip-k8s-plugin",
        },
        ownerReferences: [
          {
            apiVersion: input.ownerApiVersion,
            kind: input.ownerKind,

View on GitHub (pinned to 120ae5428f)

Solutions

1. Remove BOOTSTRAP_TOKEN from adapterEnv; it is reserved and set by the orchestrator.

When it happens

Trigger: Thrown at packages/plugins/sandbox-providers/kubernetes/src/secret-manager.ts:20 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of paperclipai/paperclip@120ae5428f (2026-08-18). Data as JSON: /api/errors/5bf628ed44e8fd36. Report an issue: GitHub.