decoluaandClaude Fable 5 8e04fe1734 feat(oauth): zed/trae/windsurf providers + harden callback proxies ...

- zed live model discovery; codebuddy-intl handler; remove duplicate workbuddy
- split oauth providers.js into per-provider files (facade re-export)
- fold 5 standard refresh providers into config-driven generic
- hide trae/windsurf from registry (no tool calling support)
- fix login-CSRF + SSRF on trae/windsurf/zed local callback proxies
  via loopback-origin guard + strict state validation + apiOrigins allowlist
- move zed RSA private key transit to POST body; redact proxy logs

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-25 17:25:19 +07:00

..

auth

fix(auth): avoid stale redirects after auth changes

2026-06-26 11:39:49 +07:00

cli-tools

feat(cli-tools): configure Grok Build subagent models

2026-07-19 13:35:38 +07:00

combos

…

headroom

feat(headroom): activate/uninstall extras + fix interpreter detection

2026-07-10 17:32:45 +07:00

health

Fix tunnel health check

2026-05-21 14:30:59 +07:00

init

chore: add buildOutput RTK filter, drop legacy cloud sync, internal cleanup

2026-05-16 10:54:41 +07:00

keys

…

locale

…

mcp/[plugin]

feat(cowork): re-enable Claude Cowork with preset-only stdio MCP

2026-06-08 15:35:37 +07:00

media-providers/tts

feat: add minimax tts support (#1043)

2026-05-13 15:34:10 +07:00

models

feat(cli-tools): configure Grok Build subagent models

2026-07-19 13:35:38 +07:00

oauth

feat(oauth): zed/trae/windsurf providers + harden callback proxies

2026-07-25 17:25:19 +07:00

pricing

fix(translator): ESM-safe registry + tool-id pairing + responses max_tokens; add real-creds tests

2026-06-15 11:38:43 +07:00

provider-nodes

feat(validate): implement SSRF guard for remote requests and protect sensitive settings

2026-06-20 10:41:47 +07:00

providers

fix(cursor): HTTP/2 AgentService support + version bump to 3.12.17

2026-07-20 15:39:55 +07:00

proxy-pools

feat(proxy-pools): add support for deno deploy relays and fix layout overflow issues in proxy pools dashboard (#1437)

2026-05-26 11:21:49 +07:00

pxpipe

feat(pxpipe): PXPIPE token saver — multimodal prompt compression (#2465)

2026-07-10 16:10:42 +07:00

settings

perf(startup): skip inactive background services

2026-07-16 12:09:48 +07:00

shutdown

…

tags

…

translator

fix(console-log): initialize capture at server boot + prevent SSE proxy buffering

2026-07-23 16:06:21 +07:00

tunnel

perf(startup): skip inactive background services

2026-07-16 12:09:48 +07:00

usage

fix: DB backup on schema change, MCP child cleanup, codex models, usage providers OOM

2026-07-10 13:08:58 +07:00

v1

feat(oauth): zed/trae/windsurf providers + harden callback proxies

2026-07-25 17:25:19 +07:00

v1beta/models

fix(gemini): validate native model id to block path traversal

2026-06-26 11:01:24 +07:00

version

refactor(api): implement caching for tunnel and version status endpoints

2026-07-09 15:08:30 +07:00