Sonarly Claude Code 38c6fb2015 fix(billing): add credit check to queued message flush and stream-agent-chat job ...

https://sonarly.com/issue/24307?type=bug

Users can consume unlimited AI credits beyond their assigned limit through two bypass paths: queued messages that auto-flush without any billing check, and the inherent race condition where the credit cap flag is set asynchronously by Stripe webhooks after usage has already occurred.

2026-04-12 09:43:21 +00:00

..

create-twenty-app

Bump twenty-sdk, twenty-client-sdk, create-twenty-app to 1.22.0-canary.3 (#19587)

2026-04-11 16:04:46 +02:00

twenty-apps

Use app's own OAuth credentials for CoreApiClient generation (#19563)

2026-04-11 11:24:28 +02:00

twenty-cli

1774 extensibility v1 create an exhaustive documentation readme or dedicated section in twenty contributing doc (#16751)

2025-12-22 15:19:11 +01:00

twenty-client-sdk

Bump twenty-sdk, twenty-client-sdk, create-twenty-app to 1.22.0-canary.3 (#19587)

2026-04-11 16:04:46 +02:00

twenty-companion

Migrate twenty-companion from npm to yarn workspaces (#18946)

2026-03-25 10:45:43 +01:00

twenty-docker

Improve getting started doc (#19138)

2026-04-01 20:39:44 +00:00

twenty-docs

i18n - docs translations (#19529)

2026-04-10 00:29:03 +02:00

twenty-e2e-testing

fix: use Redis metadata version for GraphQL response cache key (#19111)

2026-03-30 15:01:54 +02:00

twenty-emails

i18n - translations (#18956)

2026-03-25 14:23:30 +01:00

twenty-front

Convert AI chat state atoms to component family states (#19585)

2026-04-12 07:39:12 +02:00

twenty-front-component-renderer

[Apps] Fix - app-synced object should be searchable (#19206)

2026-04-02 17:14:37 +00:00

twenty-oxlint-rules

add workspaceId to indirect entities (#19522)

2026-04-09 19:30:28 +00:00

twenty-sdk

Bump twenty-sdk, twenty-client-sdk, create-twenty-app to 1.22.0-canary.3 (#19587)

2026-04-11 16:04:46 +02:00

twenty-server

fix(billing): add credit check to queued message flush and stream-agent-chat job

2026-04-12 09:43:21 +00:00

twenty-shared

Remove IS_USAGE_ANALYTICS_ENABLED feature flag (#19566)

2026-04-10 19:12:33 +02:00

twenty-ui

Object icon visual parity (#19374)

2026-04-10 10:14:20 +00:00

twenty-utils

Refactor dependency graph for SDK, client-sdk and create-app (#18963)

2026-03-26 10:56:52 +00:00

twenty-website

Add AI as a public feature flag in the Lab (#19277)

2026-04-02 15:56:27 +00:00

twenty-website-new

halftone v2 (#19573)

2026-04-11 10:00:24 +00:00

twenty-zapier

Deprecate legacy RICH_TEXT field metadata type (#18623)

2026-03-13 17:25:40 +01:00