Private TypeSafe configuration
The local backend reads ../private/typesafe.json (outside the static website root) on each TypeSafe request:
{
"apiKey": "",
"model": ""
}
On the Mac Studio this is /Users/achieve/AIM-STEP/private/typesafe.json. Fill apiKey with the real key. Leave model empty to retain the previously available model or select the first available model; alternatively set an exact model name returned by TypeSafe. Keep the directory mode 700 and file mode 600, and never copy this file into the website or commit it. The parent project ignores private/. Replace the key in this one file to rotate it; no backend restart is needed. Refresh the tool page after changing the configured model.
Title/abstract screening and Full-text assess connect automatically through the local backend. The key is added only by the server and is not returned to the browser. The existing Mac Studio connection/SSH tunnel is still required. A missing key produces a configuration error instead of using a local model. Eligibility criteria and Search strategy continue using local models.
