v3.8.8

Changes Made

1. Tightened API-key auth handling so API-key providers require explicit { "type": "api", "key": "..." } auth fallback entries and surface invalid/malformed auth in diagnostics instead of silently using ambiguous entries.
2. Fixed Zhipu provider detection so zhipuai-coding-plan is recognized in provider lists, runtime ids, and auth lookup via #99, thanks @SUCHMOKUO.
3. Improved /quota_status diagnostics with maintainer announcement counts/config, provider auth source/path details, and DeepSeek balance diagnostics.
4. Made bundled maintainer announcements provider-aware across the TUI, /quota_status, toast fallback, and /quota_announcements, so provider-targeted notices only appear when the provider is actually detected or enabled.
5. Hardened malformed issue auto-closing to validate bug/feature templates, required checkboxes, placeholder content, and acceptance criteria while skipping maintainer-authored issues.
6. Updated docs and tests around Node.js requirements, provider setup, auth diagnostics, quota surfaces, installer choices, and TUI rendering behavior.

New Features

1. Added DeepSeek on-demand balance support from GET https://api.deepseek.com/user/balance, including DEEPSEEK_API_KEY, trusted config, and OpenCode auth fallback support via #97, thanks @JamieDF.
2. Added a collapsible TUI sidebar quota panel with persisted ▶ Quota / ▼ Quota state and detailed all-windows expansion via #96, thanks @mengfanbo123.
3. Added bundled maintainer announcements with TUI home/toast notices, /quota_announcements, /quota_status visibility, opt-out config, and bundled Gemini CLI / Copilot feedback notices.

Breaking Changes

1. Node.js 18 is no longer supported; the package now requires Node.js >=20.

Full Changelog: v3.8.7...v3.8.8