Add paperclip (ct)

CHANGELOG.md

@@ -480,26 +480,8 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-06-08
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - changedetection: migrate Python install to uv venv [@ferr079](https://github.com/ferr079) ([#14995](https://github.com/community-scripts/ProxmoxVE/pull/14995))
-
 ## 2026-06-07
 
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Immich: use actual installed PostgreSQL version for vchord package [@MickLesk](https://github.com/MickLesk) ([#14989](https://github.com/community-scripts/ProxmoxVE/pull/14989))
-
-  - #### 🔧 Refactor
-
-    - Navidrome: remove genereic filebrowser addon setup [@MickLesk](https://github.com/MickLesk) ([#14991](https://github.com/community-scripts/ProxmoxVE/pull/14991))
-
 ## 2026-06-06
 
 ### 🆕 New Scripts

ct/changedetection.sh

@@ -34,32 +34,13 @@ function update_script() {
 
   NODE_VERSION="24" setup_nodejs
 
-  VENV_PATH="/opt/changedetection/.venv"
+  msg_info "Updating ${APP}"
-  CHANGEDETECTION_BIN="${VENV_PATH}/bin/changedetection.io"
+  $STD pip3 install changedetection.io --upgrade --break-system-packages --ignore-installed typing_extensions
+  msg_ok "Updated ${APP}"
 
-  PYTHON_VERSION="3.13" setup_uv
+  msg_info "Updating Playwright"
-
+  $STD pip3 install playwright --upgrade --break-system-packages
-  if [[ ! -d "$VENV_PATH" || ! -x "$CHANGEDETECTION_BIN" ]]; then
+  msg_ok "Updated Playwright"
-    msg_info "Migrating to uv/venv"
-    rm -rf "$VENV_PATH"
-    $STD uv venv --clear "$VENV_PATH"
-    $STD "$VENV_PATH/bin/python" -m ensurepip --upgrade
-    $STD "$VENV_PATH/bin/python" -m pip install --upgrade pip
-    $STD "$VENV_PATH/bin/python" -m pip install changedetection.io playwright
-    msg_ok "Migrated to uv/venv"
-  else
-    msg_info "Updating ${APP}"
-    $STD "$VENV_PATH/bin/python" -m pip install --upgrade changedetection.io playwright
-    msg_ok "Updated ${APP}"
-  fi
-
-  SERVICE_FILE="/etc/systemd/system/changedetection.service"
-  if ! grep -q "${VENV_PATH}/bin/changedetection.io" "$SERVICE_FILE"; then
-    msg_info "Updating systemd service"
-    sed -i "s|^ExecStart=.*|ExecStart=${VENV_PATH}/bin/changedetection.io -d /opt/changedetection -p 5000|" "$SERVICE_FILE"
-    $STD systemctl daemon-reload
-    msg_ok "Updated systemd service"
-  fi
 
   if [[ -f /etc/systemd/system/browserless.service ]]; then
     msg_info "Updating Browserless (Patience)"

ct/flowiseai.sh

@@ -29,7 +29,7 @@ function update_script() {
     exit
   fi
 
-  NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
+  NODE_VERSION="20" NODE_MODULE="pnpm" setup_nodejs
 
   msg_info "Updating FlowiseAI (this may take some time)"
   systemctl stop flowise

ct/headers/paperclip

@@ -0,0 +1,6 @@
+    ____                             ___     
+   / __ \____ _____  ___  __________/ (_)___ 
+  / /_/ / __ `/ __ \/ _ \/ ___/ ___/ / / __ \
+ / ____/ /_/ / /_/ /  __/ /  / /__/ / / /_/ /
+/_/    \__,_/ .___/\___/_/   \___/_/_/ .___/ 
+           /_/                      /_/      

ct/paperclip.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Fabian Pulch (fpulch)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/paperclipai/paperclip
+
+APP="Paperclip"
+var_tags="${var_tags:-ai;automation;dev-tools}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-8192}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/paperclip-ai ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "paperclip-ai" "paperclipai/paperclip"; then
+    msg_info "Stopping Service"
+    systemctl stop paperclip
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Configuration"
+    cp /opt/paperclip-ai/.env /opt/paperclip.env.bak
+    msg_ok "Backed up Configuration"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "paperclip-ai" "paperclipai/paperclip" "tarball"
+
+    msg_info "Restoring Configuration"
+    mv /opt/paperclip.env.bak /opt/paperclip-ai/.env
+    msg_ok "Restored Configuration"
+
+    msg_info "Rebuilding Paperclip"
+    cd /opt/paperclip-ai
+    export HUSKY=0
+    export NODE_OPTIONS="--max-old-space-size=8192"
+    $STD pnpm install --frozen-lockfile
+    $STD pnpm build
+    unset NODE_OPTIONS
+    msg_ok "Rebuilt Paperclip"
+
+    msg_info "Updating Agent CLIs"
+    $STD npm install -g \
+      @anthropic-ai/claude-code@latest \
+      @openai/codex@latest
+    msg_ok "Updated Agent CLIs"
+
+    msg_info "Running Database Migrations"
+    set -a && source /opt/paperclip-ai/.env && set +a
+    $STD pnpm db:migrate
+    msg_ok "Ran Database Migrations"
+
+    msg_info "Starting Service"
+    systemctl start paperclip
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3100${CL}"

install/changedetection-install.sh

@@ -43,16 +43,19 @@ $STD apt-get install -y \
   ca-certificates
 msg_ok "Installed Dependencies"
 
-PYTHON_VERSION="3.13" setup_uv
+msg_info "Setup Python3"
+$STD apt-get install -y \
+  python3 \
+  python3-dev \
+  python3-pip
+rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
+msg_ok "Setup Python3"
 
 NODE_VERSION="24" setup_nodejs
 
 msg_info "Installing Change Detection"
-mkdir -p /opt/changedetection
+mkdir /opt/changedetection
-$STD uv venv --clear /opt/changedetection/.venv
+$STD pip3 install changedetection.io
-$STD /opt/changedetection/.venv/bin/python -m ensurepip --upgrade
-$STD /opt/changedetection/.venv/bin/python -m pip install --upgrade pip
-$STD /opt/changedetection/.venv/bin/python -m pip install changedetection.io
 cat <<EOF >/opt/changedetection/.env
 WEBDRIVER_URL=http://127.0.0.1:4444/wd/hub
 PLAYWRIGHT_DRIVER_URL=ws://localhost:3000/chrome?launch=eyJkZWZhdWx0Vmlld3BvcnQiOnsiaGVpZ2h0Ijo3MjAsIndpZHRoIjoxMjgwfSwiaGVhZGxlc3MiOmZhbHNlLCJzdGVhbHRoIjp0cnVlfQ==&blockAds=true
@@ -61,7 +64,7 @@ msg_ok "Installed Change Detection"
 
 msg_info "Installing Browserless & Playwright"
 mkdir /opt/browserless
-$STD /opt/changedetection/.venv/bin/python -m pip install playwright
+$STD python3 -m pip install playwright
 $STD git clone https://github.com/browserless/chrome /opt/browserless
 $STD npm ci --include=optional --include=dev --prefix /opt/browserless
 $STD /opt/browserless/node_modules/playwright-core/cli.js install --with-deps &>/dev/null
@@ -118,7 +121,7 @@ Wants=browserless.service
 Type=simple
 EnvironmentFile=/opt/changedetection/.env
 WorkingDirectory=/opt/changedetection
-ExecStart=/opt/changedetection/.venv/bin/changedetection.io -d /opt/changedetection -p 5000
+ExecStart=changedetection.io -d /opt/changedetection -p 5000
 
 [Install]
 WantedBy=multi-user.target

install/flowiseai-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y build-essential python3-dev
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="24" setup_nodejs
+NODE_VERSION="20" setup_nodejs
 
 msg_info "Installing FlowiseAI (Patience)"
 $STD npm install -g flowise \

install/immich-install.sh

@@ -149,13 +149,10 @@ msg_ok "Installed packages from Debian Testing repo"
 setup_uv
 PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
 
-ACTUAL_PG_VERSION=$(ls /etc/postgresql/ 2>/dev/null | sort -V | tail -1)
-ACTUAL_PG_VERSION=${ACTUAL_PG_VERSION:-16}
-
 VCHORD_RELEASE="0.5.3"
-fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-${ACTUAL_PG_VERSION}-vchord_*_amd64.deb"
+fetch_and_deploy_gh_release "VectorChord" "tensorchord/VectorChord" "binary" "${VCHORD_RELEASE}" "/tmp" "postgresql-16-vchord_*_amd64.deb"
 
-sed -i "s/^#shared_preload.*/shared_preload_libraries = 'vchord.so'/" /etc/postgresql/${ACTUAL_PG_VERSION}/main/postgresql.conf
+sed -i "s/^#shared_preload.*/shared_preload_libraries = 'vchord.so'/" /etc/postgresql/16/main/postgresql.conf
 systemctl restart postgresql.service
 PG_DB_NAME="immich" PG_DB_USER="immich" PG_DB_GRANT_SUPERUSER="true" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
 

install/navidrome-install.sh

@@ -23,6 +23,11 @@ msg_info "Starting Navidrome"
 systemctl enable -q --now navidrome
 msg_ok "Started Navidrome"
 
+read -p "${TAB3}Do you want to install filebrowser addon? (y/n) " -n 1 -r
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+  bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/filebrowser.sh)"
+fi
+
 motd_ssh
 customize
 cleanup_lxc

install/paperclip-install.sh

@@ -0,0 +1,162 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Fabian Pulch (fpulch)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/paperclipai/paperclip
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  git \
+  ripgrep
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="paperclip" PG_DB_USER="paperclip" setup_postgresql_db
+
+fetch_and_deploy_gh_release "paperclip-ai" "paperclipai/paperclip" "tarball"
+
+msg_info "Building Paperclip"
+cd /opt/paperclip-ai
+export HUSKY=0
+export NODE_OPTIONS="--max-old-space-size=8192"
+$STD pnpm install --frozen-lockfile
+$STD pnpm build
+unset NODE_OPTIONS
+msg_ok "Built Paperclip"
+
+msg_info "Installing Agent CLIs"
+$STD npm install -g \
+  @anthropic-ai/claude-code@latest \
+  @openai/codex@latest
+msg_ok "Installed Agent CLIs"
+
+msg_info "Configuring Paperclip"
+PAPERCLIP_HOME="/opt/paperclip-data"
+PAPERCLIP_CONFIG="${PAPERCLIP_HOME}/instances/default/config.json"
+
+mkdir -p /opt/paperclip-data
+mkdir -p /root/.claude /root/.codex
+BETTER_AUTH_SECRET=$(openssl rand -hex 32)
+cat <<EOF >/opt/paperclip-ai/.env
+DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@127.0.0.1:5432/${PG_DB_NAME}
+HOST=0.0.0.0
+PORT=3100
+SERVE_UI=true
+PAPERCLIP_HOME=${PAPERCLIP_HOME}
+PAPERCLIP_CONFIG=${PAPERCLIP_CONFIG}
+PAPERCLIP_INSTANCE_ID=default
+PAPERCLIP_DEPLOYMENT_MODE=authenticated
+PAPERCLIP_DEPLOYMENT_EXPOSURE=private
+PAPERCLIP_PUBLIC_URL=http://${LOCAL_IP}:3100
+BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
+EOF
+msg_ok "Configured Paperclip"
+
+msg_info "Running Database Migrations"
+set -a && source /opt/paperclip-ai/.env && set +a
+$STD pnpm db:migrate
+msg_ok "Ran Database Migrations"
+
+msg_info "Bootstrapping Paperclip"
+PAPERCLIP_ONBOARD_LOG=/opt/paperclip-ai/paperclip-onboard.log
+PAPERCLIP_BOOTSTRAP_LOG=/opt/paperclip-ai/paperclip-bootstrap.log
+
+for PAPERCLIP_ONBOARD_CMD in \
+  "pnpm paperclipai onboard --yes --bind lan" \
+  "pnpm paperclipai onboard --yes"; do
+  rm -f "$PAPERCLIP_ONBOARD_LOG"
+  setsid env \
+    PAPERCLIP_HOME="$PAPERCLIP_HOME" \
+    PAPERCLIP_CONFIG="$PAPERCLIP_CONFIG" \
+    bash -c 'cd /opt/paperclip-ai && exec "$@"' _ $PAPERCLIP_ONBOARD_CMD \
+    >"$PAPERCLIP_ONBOARD_LOG" 2>&1 &
+  PAPERCLIP_ONBOARD_PID=$!
+  for _ in {1..60}; do
+    if [[ -f "$PAPERCLIP_CONFIG" ]]; then
+      break
+    fi
+    if ! kill -0 "$PAPERCLIP_ONBOARD_PID" 2>/dev/null; then
+      break
+    fi
+    sleep 2
+  done
+  if kill -0 "$PAPERCLIP_ONBOARD_PID" 2>/dev/null; then
+    kill -- -"${PAPERCLIP_ONBOARD_PID}" >/dev/null 2>&1 || true
+    wait "$PAPERCLIP_ONBOARD_PID" 2>/dev/null || true
+  fi
+  [[ -f "$PAPERCLIP_CONFIG" ]] && break
+  if ! grep -q "unknown option '--bind'" "$PAPERCLIP_ONBOARD_LOG"; then
+    break
+  fi
+  msg_info "Retrying Paperclip Onboarding"
+done
+
+if [[ ! -f "$PAPERCLIP_CONFIG" ]]; then
+  msg_error "Failed to bootstrap Paperclip"
+  exit 1
+fi
+
+if grep -q 'authenticated' $PAPERCLIP_CONFIG; then
+  pnpm paperclipai auth bootstrap-ceo >"$PAPERCLIP_BOOTSTRAP_LOG" 2>&1 || true
+  PAPERCLIP_INVITE_URL=$(awk -F'Invite URL: ' '/Invite URL:/ {print $2; exit}' "$PAPERCLIP_BOOTSTRAP_LOG")
+  PAPERCLIP_INVITE_EXPIRY=$(awk -F'Expires: ' '/Expires:/ {print $2; exit}' "$PAPERCLIP_BOOTSTRAP_LOG")
+  if [[ -n "$PAPERCLIP_INVITE_URL" ]]; then
+    cat <<EOF >>~/paperclip.creds
+
+Paperclip Admin Invite
+Invite URL: ${PAPERCLIP_INVITE_URL}
+Expires: ${PAPERCLIP_INVITE_EXPIRY}
+EOF
+    msg_ok "Generated Paperclip CEO Invite"
+    echo -e "${INFO}${YW} Open this invite URL to finish Paperclip admin setup:${CL}"
+    echo -e "${TAB}${GATEWAY}${BGN}${PAPERCLIP_INVITE_URL}${CL}"
+    [[ -n "$PAPERCLIP_INVITE_EXPIRY" ]] && echo -e "${TAB}${INFO}${YW}Invite expires: ${PAPERCLIP_INVITE_EXPIRY}${CL}"
+  else
+    msg_warn "Paperclip authenticated mode is enabled, but no CEO invite was generated automatically"
+  fi
+else
+  msg_info "Paperclip Bootstrapped in Local Trusted Mode"
+fi
+rm -f "$PAPERCLIP_ONBOARD_LOG" "$PAPERCLIP_BOOTSTRAP_LOG"
+msg_ok "Bootstrapped Paperclip"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/paperclip.service
+[Unit]
+Description=Paperclip
+After=network.target postgresql.service
+Requires=postgresql.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/paperclip-ai
+EnvironmentFile=/opt/paperclip-ai/.env
+Environment=HOME=/root
+Environment=CODEX_HOME=/root/.codex
+Environment=PATH=/root/.local/bin:/usr/local/bin:/usr/bin:/bin
+Environment=DISABLE_AUTOUPDATER=1
+ExecStart=/usr/bin/env pnpm paperclipai run
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now paperclip
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc