Add HS256 JWT-based authentication for local adapters (claude_local, codex_local) so agents authenticate automatically without manual API key configuration. The server mints short-lived JWTs per heartbeat run and injects them as PAPERCLIP_API_KEY. The auth middleware verifies JWTs alongside existing static API keys. Includes: CLI onboard/doctor JWT secret management, env command for deployment, config path resolution from ancestor directories, dotenv loading on server startup, event payload secret redaction, multi-status issue filtering, and adapter transcript parsing for thinking/user message kinds. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
17 lines
478 B
TypeScript
17 lines
478 B
TypeScript
import fs from "node:fs";
|
|
import { paperclipConfigSchema, type PaperclipConfig } from "@paperclip/shared";
|
|
import { resolvePaperclipConfigPath } from "./paths.js";
|
|
|
|
export function readConfigFile(): PaperclipConfig | null {
|
|
const configPath = resolvePaperclipConfigPath();
|
|
|
|
if (!fs.existsSync(configPath)) return null;
|
|
|
|
try {
|
|
const raw = JSON.parse(fs.readFileSync(configPath, "utf-8"));
|
|
return paperclipConfigSchema.parse(raw);
|
|
} catch {
|
|
return null;
|
|
}
|
|
}
|