paperclipai/paperclip · error · AggregateError

Failed to create scoped network egress policy and release it

Error message

Failed to create scoped network egress policy and release its workload

What it means

Error "Failed to create scoped network egress policy and release its workload" thrown in paperclipai/paperclip.

Source

Thrown at packages/plugins/sandbox-providers/kubernetes/src/scoped-network-egress.ts:90

      includeBaseRules: false,
      ownerReferences: [input.ownerReference],
    });
    await input.clients.networking.createNamespacedNetworkPolicy({ namespace: input.namespace, body: manifest as never });
  }
  return name;
}

export async function createScopedNetworkEgressPolicyOrReleaseWorkload(
  input: Parameters<typeof createScopedNetworkEgressPolicy>[0],
  releaseWorkload: () => Promise<void>,
): Promise<string | null> {
  try {
    return await createScopedNetworkEgressPolicy(input);
  } catch (policyError) {
    try {
      await releaseWorkload();
    } catch (releaseError) {
      throw new AggregateError(
        [policyError, releaseError],
        "Failed to create scoped network egress policy and release its workload",
      );
    }
    throw policyError;
  }
}

export function appendNetworkEgressDenyHint(stderr: string, grant: ScopedNetworkEgressGrant): string {
  if (!/(could not resolve host|network is unreachable|connection timed out|failed to connect|temporary failure in name resolution)/i.test(stderr)) {
    return stderr;
  }
  const allowed = [...grant.allowFqdns, ...grant.allowCidrs];
  const detail = allowed.length > 0 ? ` Current task grant: ${allowed.join(", ")}.` : " No task-scoped destinations are granted.";
  return `${stderr.trimEnd()}\nPaperclip network policy denied or could not route this request.${detail} Request access through ${NETWORK_EGRESS_GRANT_PATH}.\n`;
}

View on GitHub (pinned to 120ae5428f)

Solutions

1. Check RBAC permissions and NetworkPolicy support in the cluster; inspect controller errors and retry.

When it happens

Trigger: Thrown at packages/plugins/sandbox-providers/kubernetes/src/scoped-network-egress.ts:90 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of paperclipai/paperclip@120ae5428f (2026-08-18). Data as JSON: /api/errors/2d03b1bad75920c0. Report an issue: GitHub.