mirror of
https://github.com/AgentSeal/codeburn.git
synced 2026-08-25 00:14:40 +00:00
3168699927
Snap Store review found the declaration requested each tool's entire root directory. Those roots hold configuration and, in several cases, credentials, and personal-files read is recursive, so the request granted read of every AI tool's credential store. Every path is now the subdirectory the provider actually opens: .claude/projects, .codex/sessions, .cline/data, .vibe/logs/session, .hermes/profiles, .mux/sessions and so on; two are single files (.forge/.forge.db, .zcode/cli/db/db.sqlite). The editor entries name only the extension folders that hold transcripts rather than the editor's whole configuration. No bare tool root remains. One credential file is requested openly instead of implicitly: .claude/.credentials.json, read-only, used to call Anthropic's usage endpoint for the live plan gauge. Codex's equivalent needs read-write on the Codex CLI's auth.json to rotate the token, so neither that file nor a Codex root is declared and the Codex live gauge is disabled under $SNAP. Codex usage and cost analytics are unaffected; they come from the session rollouts. Also declares five providers that were missing entirely and would have shown no data under the snap: opencode, crush, goose, kilo, kimi-code. Drops .lingtai, whose per-agent directory sits above the log folder and cannot be expressed without wildcards. Ports 4fe760aafe0492a674476c1ca64bf0dbdc673dde onto current main; the entries main gained since that commit are reconciled separately. |
||
|---|---|---|
| .. | ||
| quota | ||
| cli.test.ts | ||
| cli.ts | ||
| main.test.ts | ||
| main.ts | ||
| preload.ts | ||
| telemetry.test.ts | ||
| telemetry.ts | ||
| updates.test.ts | ||
| updates.ts | ||