Commit graph

2 commits

Author SHA1 Message Date
A
81bab47a74
fix: Escape API keys in continue.sh JSON configs to prevent injection (#374)
Replace vulnerable heredoc patterns across 27 continue.sh scripts with
setup_continue_config() helper that uses json_escape() + upload_config_file()
to safely handle API keys containing special characters like quotes or braces.

Also fix _save_token_to_config() in shared/common.sh which had the same
unescaped heredoc vulnerability for local token storage.

Relates to #104

Agent: security-auditor

Co-authored-by: A <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-02-11 00:13:19 -08:00
A
58dda2a3a0
feat: Implement latitude/continue.sh (#328)
Add Continue agent support for Latitude.sh cloud provider.

- Install Continue CLI via npm
- Configure OpenRouter API key
- Create ~/.continue/config.json with OpenRouter provider
- Launch interactive TUI mode

Agent: gap-filler-latitude-continue

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
2026-02-10 19:16:44 -08:00