- add /updates route and sidebar navigation entry
- show updates spotlight on Home, API Profiles, and CLIProxy pages
- export Updates page for lazy route loading consistency
- add data-driven catalog for support notices and CLI compatibility
- introduce Updates Center page with announcements, filtering, and search
- render reusable support cards and status badges for future expansions
- support POSIX -- terminator so dash-prefixed variant names remain positional
- export variant parser for direct unit tests
- add --target parsing coverage for API and cliproxy arg parsers
- resolve settings file from profile.settingsPath instead of reconstructing by name
- skip non-claude targets for local claude-api-key sync semantics
- add mapper regression tests for both behaviors
- add multi-target help examples for ccsd codex and ccsd agy
- document per-profile target defaults for API and CLIProxy profiles
- include dashboard parity notes for target configuration
- extend API client types with claude|droid target fields
- add default target selector in API profile create dialog
- show target badges in API profile list
- add --target parsing and validation in create/edit/remove flows
- show target in list/remove/edit UX and usage examples
- document target option in cliproxy help output
- validate target request payloads for create and update APIs
- pass target into single/composite service operations
- include target in variant API responses
- add target to variant create/update flows for single and composite modes
- persist target in unified config and legacy cliproxy entries
- include target in variant list/remove return payloads
- parse and validate --target claude|droid on api create flow
- show target in API and CLIProxy list tables and usage output
- add parser unit tests for target success and failure cases
- validate target payloads for profile create/update
- return target in profile list and create responses
- allow updating target independently from settings values
- add target fields to API profile and CLIProxy variant service types
- persist target in unified config and legacy profile_targets map
- expose target update API via updateApiProfileTarget
- add lock-held mutateUnifiedConfig read-modify-write path for config.yaml
- use atomic mutation in /api/settings/auth/antigravity-risk to prevent stale overwrites
- replace browser confirm with in-app 2-step banner + typed phrase validation
- verify saved AGY power-user value with post-save read before showing success
Refs #509
- change required acknowledgement phrase to "I ACCEPT RISK"
- apply typed phrase requirement to Gemini and Antigravity add-account flows
- keep CLI/server and UI phrase validation aligned
- update antigravity responsibility unit test
- collapse provider-specific warning variants into one shared card
- keep issue #509 as the single risk reference for both flows
- reuse cliproxy warning card space for Settings > Proxy pointer
- add safer error responses for settings/auth routes to avoid leaking internals
- guard sensitive AGY settings endpoints to localhost when dashboard auth is off
- validate start-route bodies and reject OAuth start in remote mode for consistency
- preserve cliproxy.kiro_no_incognito and token_refresh during config merges
- enforce AGY acknowledgement in remote auth-token run/auth command paths
- replace issue #622/#619 references with issue #509 across CLI and dashboard
- shorten acknowledgement phrase to "I ACCEPT AGY RISK" for faster typing
- rename acknowledgement payload field to reviewedIssue509 and update tests
Tam Nhu Tran