Function readToken

apps/local/src/auth.ts:38–47

(path: string)

const mintToken = (): string => randomBytes(32).toString("base64url");

const readToken = (path: string): string | null => {
  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: reading an optional on-disk secret file that may be absent or malformed
  try {
    // oxlint-disable-next-line executor/no-json-parse -- boundary: the secret file is a tiny {"token"} blob outside the Effect graph (used by the plain Bun/Electron boot path)
    const parsed = JSON.parse(readFileSync(path, "utf8")) as { readonly token?: unknown };
    return typeof parsed.token === "string" && parsed.token.length > 0 ? parsed.token : null;
  } catch {
    return null;
  }
};

const writeToken = (dataDir: string, token: string): string => {
  const dir = serverControlDir(dataDir);