Add HS256 JWT-based authentication for local adapters (claude_local, codex_local) so agents authenticate automatically without manual API key configuration. The server mints short-lived JWTs per heartbeat run and injects them as PAPERCLIP_API_KEY. The auth middleware verifies JWTs alongside existing static API keys. Includes: CLI onboard/doctor JWT secret management, env command for deployment, config path resolution from ancestor directories, dotenv loading on server startup, event payload secret redaction, multi-status issue filtering, and adapter transcript parsing for thinking/user message kinds. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| plans | ||
| spec | ||
| CLIPHUB.md | ||
| DATABASE.md | ||
| DEVELOPING.md | ||
| GOAL.md | ||
| PRODUCT.md | ||
| SPEC-implementation.md | ||
| SPEC.md | ||
| TASKS-mcp.md | ||
| TASKS.md | ||