v0.4.0: host credential store and safer login handling

0.4.0

• Prefer the OpenCode auth store in the V1 loader; keep the legacy cache as a fallback.
• Log sanitized login failures and surface V2 errors with a descriptive message.
• Use a realistic credential expiry.
• Document V1/V2 storage and removal; pin the shared auth contract.

v0.3.0: OpenCode V2 subscription auth

Registers the Muse Code subscription method through the OpenCode V2 setup() entrypoint (fixes #7, thanks @martonbtoth). Includes the root index.js entrypoint for local directory installs and the @opencode/plugin v2 runtime dependency.

v0.2.0 — opencode v2 plugin format

opencode v2 loads plugins from the module's default export, which must carry an id and the server plugin function; v1 named exports are no longer accepted and fail with PluginModule.LoadError on every startup.

• default export { id: "muse-code-auth", server, setup() }
• accepted by opencode 1.18.29+ and 2.x alike
• devDependency @opencode-ai/plugin ^1.19.0 (v2-aligned types)

v0.1.2

Security hardening: the credential cache no longer persists the Meta OAuth access token (apiKey/accountId/email only). Re-run /connect once to refresh pre-0.1.2 caches.

opencode-muse-auth v0.1.1

Release for tag v0.1.1. Routes Meta Muse Spark through the reader's Muse Code monthly subscription via device-code login (no API key; owner-only cached credential). See the repo README and SECURITY.md for setup and the 401 rotation story.