mirror of
https://github.com/saphid/frame-control.git
synced 2026-10-25 20:01:52 +01:00
saphidandClaude Opus 5.5
adefdf4398
Opt-in: paste an itch.io API key under My itch.io purchases in the store's sources dialog. It is checked with GET /profile, saved 0600 in the app data dir (itch-account.json), and only ever sent to api.itch.io as a Bearer header. A new "itch.io (my purchases)" source lists owned Android games (/profile/owned-keys, all pages), labelled "Owned on itch.io"; installs pick the best Android upload (/games/ID/uploads) and download it through /uploads/ID/download into the normal APK install path. A refused key is never saved, or is deleted if itch.io later revokes it; rate limits and network errors stay per-source and readable. The key is kept out of URLs, errors, logs, API responses and the page. Tests use recorded JSON and a fake HTTPS layer under urllib's real opener. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>