{"version":"2.1.239","anchor":"grove-voice-design-and-bridge-calls-switch-to-explicit-crede","canonical_anchor":"grove-voice-design-and-bridge-calls-switch-to-explicit-crede","heading":"Grove, voice, design and bridge calls switch to explicit credentials behind a startup switch","tier":"internal","area":"Auth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.239\/e\/grove-voice-design-and-bridge-calls-switch-to-explicit-crede","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.239","markdown":"### Grove, voice, design and bridge calls switch to explicit credentials behind a startup switch\n\nSeveral internal services now receive login credentials directly instead of grabbing whatever token is lying around.\n\n**What**\n\nA build-wide switch, pinned once at startup, decides whether these call sites pass an explicit credentials object or fall back to reading ambient OAuth tokens. Affected: Grove settings and notice, voice stream, design session auth, bridge session fetch and patch, peer listing, tips prewarm.\n\n**Details**\n\n- Grove's cached fetchers now key on `\"account\"` and `\"config\"` instead of sharing one entry.\n- Startup also primes the credential-storage decision from a cached feature flag and loads remote settings earlier.\n- Related telemetry name: `tengu_windows_credman`.\n\n**Evidence**\n\n`tengu_windows_credman`\n\n- Flag `tengu_windows_credman`: Off in both readings (read for one account on one subscription tier against v2.1.239; this account: off, anonymous baseline: off, compiled default: not a boolean we can read)\n- Area: Auth\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 3\/5"}