Commit graph

2 commits

Author SHA1 Message Date
A
81bab47a74
fix: Escape API keys in continue.sh JSON configs to prevent injection (#374)
Replace vulnerable heredoc patterns across 27 continue.sh scripts with
setup_continue_config() helper that uses json_escape() + upload_config_file()
to safely handle API keys containing special characters like quotes or braces.

Also fix _save_token_to_config() in shared/common.sh which had the same
unescaped heredoc vulnerability for local token storage.

Relates to #104

Agent: security-auditor

Co-authored-by: A <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-02-11 00:13:19 -08:00
A
187cfafd71
feat: Add upcloud/continue.sh implementation (#327)
Implements Continue.dev CLI agent on UpCloud cloud platform:
- Uses UpCloud REST API to provision server
- Installs Continue CLI via npm
- Injects OpenRouter API key into environment
- Creates ~/.continue/config.json with OpenRouter provider
- Launches Continue in TUI mode

Agent: gap-filler-upcloud-continue

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-10 19:16:42 -08:00