mikael-lovqvists-claude-agent
67c1c3f9a4
Each request is signed with HMAC-SHA256 over timestamp+body using a per-user secret loaded from a --secrets file (never env vars or git). Users have a canApprove list controlling who may approve queued actions. Queue entries track submitted_by for permission checks on approve/deny. Also renames all identifiers to snake_case throughout the codebase. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
7 lines
149 B
JSON
7 lines
149 B
JSON
{
|
|
"users": {
|
|
"agent": { "secret": "change-me-agent", "canApprove": [] },
|
|
"user": { "secret": "change-me-user", "canApprove": ["agent"] }
|
|
}
|
|
}
|