From 94e998c5c9fc034465d7ce73e4cbea6032507fda Mon Sep 17 00:00:00 2001
From: TheLast <thelast@TPLink>
Date: Wed, 28 Jan 2026 02:13:19 +0200
Subject: [PATCH] HA add-on: log redacted auth-profiles.json summary on startup

---
 papur-addon/run.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/papur-addon/run.sh b/papur-addon/run.sh
index 53d13b3..580c9e3 100644
--- a/papur-addon/run.sh
+++ b/papur-addon/run.sh
@@ -102,6 +102,18 @@ echo "Telegram dmPolicy=${DM_POLICY}${ALLOW_FROM_RAW:+ (allowFrom=${ALLOW_FROM_R
 echo "Telegram allowFrom JSON: ${ALLOW_FROM_JSON:-<none>}"
 
 # Connectivity sanity checks (do NOT print the token)
+# Auth store debug (redacted): never print tokens
+AUTH_STORE="/data/.clawdbot/agents/main/agent/auth-profiles.json"
+if [ -f "$AUTH_STORE" ]; then
+  echo "Auth store present at $AUTH_STORE"
+  echo "Auth store summary (redacted):"
+  jq -r '"version="+((.version//"?")|tostring),
+         "profiles="+(((.profiles//{})|keys|join(","))),
+         "providers="+(((.profiles//{})|to_entries|map(.value.provider // "?")|unique|join(",")))' "$AUTH_STORE" 2>/dev/null || echo "(could not parse auth store JSON)"
+else
+  echo "Auth store not found at $AUTH_STORE"
+fi
+
 echo "Sanity check: DNS + Telegram API reachability"
 if curl -fsS --max-time 10 https://api.telegram.org/ >/dev/null; then
   echo "OK: api.telegram.org reachable"