Bohdan Triapitsyn b09614fd68 refactor(quota): secure managed provider credentials (#2160) ...

- add shared owner-only credential storage for OpenCode Go, Ollama Cloud, and Cursor
- validate credentials before atomic writes using 0700 directories and 0600 files
- replace provider-specific credential routes with an allowlisted lifecycle API
- stop automatically reading Ollama's legacy cookie file
- stop reading or modifying Cursor's database during regular quota requests
- add explicit one-time Cursor credential import without mutating Cursor storage
- persist refreshed Cursor credentials only in OpenChamber-managed storage
- add Ollama Cloud and Cursor credential controls to provider settings
- preserve OpenCode Go tracking through the shared credential flow
- add VS Code credential management and Cursor quota parity
- reject authentication redirects, enforce request timeouts, and fail on unparseable usage pages
- mask stored secrets in API responses and extend quota security coverage
- update quota provider documentation

2026-07-12 16:21:38 +03:00

..

client-auth

feat: pairing v2 — one-tap trusted devices over LAN and private relay (#2103)

2026-07-10 00:12:33 +03:00

dictation

feat(voice): first-class voice input and local TTS across web, desktop, and mobile (#2018)

2026-07-04 02:48:07 +03:00

event-stream

fix: recover mobile and sync state after resume

2026-07-01 18:32:24 +03:00

fs

fix: handle non-ISO-8859-1 characters in fetch headers and Content-Disposition (#1673)

2026-06-23 19:49:44 +03:00

git

fix(git): don't log an error when status is requested for a deleted directory

2026-06-29 01:53:47 +03:00

github

fix(github): skip PR status resolution for a directory that no longer exists

2026-06-29 02:05:26 +03:00

magic-prompts

feat: expand magic prompts coverage and split generation prompts (#835)

2026-04-07 22:51:14 +03:00

notifications

feat: persist permission auto-accept on server (#2158)

2026-07-12 15:03:16 +03:00

opencode

feat: persist permission auto-accept on server (#2158)

2026-07-12 15:03:16 +03:00

permission-auto-accept

feat: persist permission auto-accept on server (#2158)

2026-07-12 15:03:16 +03:00

preview

fix(preview): rewrite inline module scripts in proxy HTML responses (#1470)

2026-06-09 19:04:50 +03:00

projects

feat: session goals - server-driven goal loop with independent small-model audit (#2148)

2026-07-12 01:23:22 +03:00

quota

refactor(quota): secure managed provider credentials (#2160)

2026-07-12 16:21:38 +03:00

relay

feat(desktop): multi-transport hosts with relay fallback, card-style services dropdown

2026-07-10 12:24:50 +03:00

scheduled-tasks

feat: file-backed goal objectives + compaction accounting fixes

2026-07-12 02:49:56 +03:00

security

feat(voice): first-class voice input and local TTS across web, desktop, and mobile (#2018)

2026-07-04 02:48:07 +03:00

session-assist

feat: split session recap and suggestion settings

2026-07-06 22:54:31 +03:00

session-folders

fix(sessions): isolate folder save temp files (#1195)

2026-05-12 11:10:06 +03:00

session-goal

feat: file-backed goal objectives + compaction accounting fixes

2026-07-12 02:49:56 +03:00

skills-catalog

chore: remove dead code (59 unused files + ~125 unused exports) (#1835)

2026-06-26 19:27:53 +03:00

small-model

feat: small-model utility calls on existing OpenCode providers (#2049)

2026-07-05 23:19:10 +03:00

terminal

chore: remove dead code (59 unused files + ~125 unused exports) (#1835)

2026-06-26 19:27:53 +03:00

text

chore: remove dead code (59 unused files + ~125 unused exports) (#1835)

2026-06-26 19:27:53 +03:00

tts

fix(tts): allow remote custom provider URLs on desktop runtime (#1439)

2026-06-08 19:15:54 +03:00

tunnels

fix: restore CLI and quota provider startup (#1857)

2026-06-27 09:19:24 +03:00

ui-auth

feat: pairing v2 — one-tap trusted devices over LAN and private relay (#2103)

2026-07-10 00:12:33 +03:00

cloudflare-tunnel.js

chore: remove dead code (59 unused files + ~125 unused exports) (#1835)

2026-06-26 19:27:53 +03:00

ngrok-tunnel.js

fix: improve Windows tunnel support

2026-06-05 15:01:22 +03:00

ngrok-tunnel.test.js

fix: improve Windows tunnel support

2026-06-05 15:01:22 +03:00

package-manager.js

feat: support mobile update checks

2026-07-07 13:39:50 +03:00

package-manager.test.js

fix: restore update command helpers (#1857)

2026-06-28 09:58:45 +03:00

path-realpath-cache.js

fix: resolve symlinks in project directory paths (#1316)

2026-05-24 15:46:11 +03:00

path-realpath-cache.test.js

fix: resolve symlinks in project directory paths (#1316)

2026-05-24 15:46:11 +03:00

realtime-proxy.js

feat(desktop): proxy realtime requests with runtime headers

2026-06-30 01:21:42 +03:00

realtime-proxy.test.js

feat(desktop): proxy realtime requests with runtime headers

2026-06-30 01:21:42 +03:00