zcode-switch 1.6.0

About zcode-switch

Z·SWITCH (zcode-switch) is a Tauri 2 desktop tool for one-click switching between multiple ZCode accounts, with live quota display. Only the login identity changes — projects, sessions, settings and plugins all stay untouched.

Features

• Save / switch accounts: snapshots the credentials + config file pair, atomic replacement; the current login is auto-preserved before any switch — accounts are never lost
• Add accounts: OAuth login for new accounts inside the tool (BigModel / z.ai entries), never touching the current login
• Quota display: inline plan quota and reset time per account row, multi-plan grouping, staggered polling
• Claim promotions: one-click claim for eligible promotions (GUI captcha)
• Encrypted import / export: .zsb bundle, PBKDF2(100k) + AES-256-GCM password encryption
• Bilingual UI: one-click switch in Settings — main window, tray, error messages and CLI output all covered; first run follows your OS language
• Tray / autostart / CLI automation

Security design

• Local first: all data stays on your machine; no telemetry, no remote storage; quota queries go directly to official endpoints
• No account loss: the current login is auto-preserved before switching if not yet saved; file writes go through a temp file + atomic rename
• Path traversal protection: account id whitelist ([A-Za-z0-9-]); delete/read cannot escape the account store directory
• Encrypted export: PBKDF2-HMAC-SHA256 (100k iterations) + AES-256-GCM, random salt/nonce; wrong password simply fails, no plaintext traces (unit-test asserted)
• Credentials decrypted locally only: enc:v1 decryption is used solely to display username/email; export files are password-encrypted