feat: wire qoder into the download API allowlist

Add qoder to FILE_DOWNLOAD_PROVIDER_CONFIG_DIRS so the download endpoint
accepts /api/download/skill/qoder/* and resolves to dist/qoder/.qoder/.
Without this, the website install surface returned 400 Invalid provider
even though qoder was a first-class harness everywhere else.

Cover the new provider with two assertions in download-validation.test.js
(allowlist + path resolution).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Vinaywho
2026-04-28 16:00:30 +05:30
co-authored by Claude Opus 4.7
parent 7cfa7759f5
commit c812d76b6f
2 changed files with 12 additions and 0 deletions
+1
View File
@@ -8,6 +8,7 @@ export const FILE_DOWNLOAD_PROVIDER_CONFIG_DIRS = Object.freeze({
kiro: '.kiro',
opencode: '.opencode',
pi: '.pi',
qoder: '.qoder',
});
export const FILE_DOWNLOAD_PROVIDERS = Object.freeze(