🚀 QonQrete v1.2.0 Released

March 17, 2026 | Major Release — Hassle-Free Bootstrap

This release is all about making QonQrete secure by default and dead simple to configure. API keys are now stored in your OS keychain, not in config files. Provider selection happens through your IDE. And we’ve added OpenRouter and Qwen support.

🔑 Secure API Key Management

No more API keys in settings.json. No more keys in terminal history. No more keys on disk.

VS Code: OS Keychain via SecretStorage

// Keys stored in OS keychain, not settings.json
await context.secrets.store('qonqrete.OPENAI_API_KEY', key);

// At runtime: injected into terminal environment
const env = await buildSecureEnvMap();  // Only stored secrets, not env vars
terminal.sendText(command, { env });

IntelliJ: PasswordSafe (Encrypted)

// Keys stored in IntelliJ's credential store
PasswordSafe.instance.set(attrs, Credentials(envKey, value))

// Terminal injection via export prefix
val exports = buildApiKeyExports()  // Only stored, not env

Priority Chain

Real environment variable (process.env) — Always wins
Stored secret (keychain) — Used if no env var
Error — Prompt to set key

🌐 New AI Providers

OpenRouter

Access 200+ models through a single API key:

anthropic/claude-sonnet-4
openai/gpt-4.1
google/gemini-2.5-pro
deepseek/deepseek-chat-v3
And many more…

Qwen (Re-implemented)

Now using DashScope’s OpenAI-compatible endpoint with streaming:

qwen-plus
qwen-turbo
qwen-max

Full Provider Matrix

Provider	Env Key	Status
OpenAI	`OPENAI_API_KEY`	✅
Anthropic	`ANTHROPIC_API_KEY`	✅
Google/Gemini	`GOOGLE_API_KEY`	✅
DeepSeek	`DEEPSEEK_API_KEY`	✅
Qwen	`QWEN_API_KEY`	✅
OpenRouter	`OPENROUTER_API_KEY`	✅

⚙️ IDE AI Configuration

New Set AI Configuration command in both IDEs:

Select agent — TasqLeveler, InstruQtor, ConstruQtor, InspeQtor
Choose provider — OpenAI, Anthropic, Gemini, DeepSeek, Qwen, OpenRouter
Pick or enter model — Suggestions auto-populated, custom supported
Set API keys — Stored securely with visual status indicator

┌──────────────────────────────────────────┐
│  QonQrete: AI Configuration              │
├──────────────────────────────────────────┤
│  $(beaker) tasqleveler  OpenAI / gpt-4o  │
│  $(beaker) instruqtor   OpenAI / gpt-4o  │
│  $(beaker) construqtor  Anthropic/sonnet │
│  $(beaker) inspeqtor    Gemini / 2.5-pro │
├──────────────────────────────────────────┤
│  $(key) OpenAI          ✓ Set            │
│  $(key) Anthropic       ✓ Set            │
│  $(key) Google          ✗ Not set        │
│  $(key) OpenRouter      ✓ Set            │
├──────────────────────────────────────────┤
│  $(check) Done                           │
└──────────────────────────────────────────┘

📦 Deploy to Workspace (Refined)

One-click install into .qonqrete/
Auto-adds to .gitignore
Version-tagged container images
Smart prompts for missing runtime/tasq

🔄 CI/CD Automation

GitHub Actions workflows for:

VS Code Extension — Build and publish VSIX
IntelliJ Plugin — Build and publish ZIP
Runtime — Package core distribution

Each release produces three artifacts that IDEs fetch on bootstrap.

🔐 Security Model

 ┌──────────────┐     ┌──────────────┐     ┌──────────────┐
 │   VS Code    │     │   IntelliJ   │     │   Terminal   │
 │              │     │              │     │              │
 │  Secrets API │     │ PasswordSafe │     │   ENV VARS   │
 └──────┬───────┘     └──────┬───────┘     └──────┬───────┘
        │                    │                    │
        └────────────────────┴────────────────────┘
                             │
                    ┌────────▼────────┐
                    │  Terminal Env   │
                    │  (per-session)  │
                    └────────┬────────┘
                             │
                    ┌────────▼────────┐
                    │   Container     │
                    │  (inherits env) │
                    └─────────────────┘

 ✓ Keys in OS keychain (encrypted at rest)
 ✓ Injected per-session (not persisted)
 ✓ Never in settings.json, never logged
 ✓ Env vars always take priority

💾 Backward Compatible

Old settings.json keys auto-migrated to secure storage
Legacy paths still detected
Existing workflows unchanged

Three clicks. Secure by default. Build with AI.

#QonQrete #v1.2.0 #SecureByDefault #OpenRouter #Qwen #LocalFirst

🚀 QonQrete v1.2.0 — Hassle-Free Bootstrap: Secure Keys, OpenRouter, Qwen