From 6d65800173cffe7b3348a6d350a727f9ffeb3265 Mon Sep 17 00:00:00 2001 From: gsxdsm Date: Sat, 14 Mar 2026 15:41:22 -0700 Subject: [PATCH] Register secret-ref format in AJV for validating Paperclip secret UUIDs --- server/src/services/plugin-config-validator.ts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/server/src/services/plugin-config-validator.ts b/server/src/services/plugin-config-validator.ts index 9e064572..e1330940 100644 --- a/server/src/services/plugin-config-validator.ts +++ b/server/src/services/plugin-config-validator.ts @@ -34,6 +34,9 @@ export function validateInstanceConfig( // ajv-formats v3 default export is a FormatsPlugin object; call it as a plugin. const applyFormats = (addFormats as any).default ?? addFormats; applyFormats(ajv); + // Register the secret-ref format used by plugin manifests to mark fields that + // hold a Paperclip secret UUID rather than a raw value. + ajv.addFormat("secret-ref", /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i); const validate = ajv.compile(schema); const valid = validate(configJson);