9router/open-sse/services/usage
decolua 8e04fe1734 feat(oauth): zed/trae/windsurf providers + harden callback proxies
- zed live model discovery; codebuddy-intl handler; remove duplicate workbuddy
- split oauth providers.js into per-provider files (facade re-export)
- fold 5 standard refresh providers into config-driven generic
- hide trae/windsurf from registry (no tool calling support)
- fix login-CSRF + SSRF on trae/windsurf/zed local callback proxies
  via loopback-origin guard + strict state validation + apiOrigins allowlist
- move zed RSA private key transit to POST body; redact proxy logs

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-25 17:25:19 +07:00
..
claude.js fix: giảm spam 429 từ Claude OAuth usage endpoint 2026-06-17 11:42:20 +07:00
codebuddy-cn.js fix(codebuddy-cn): show bonus packs as one-time, not monthly-replenishing 2026-06-29 15:22:47 +07:00
codex.js feat(codex): show reset credit expiry details (#2290) 2026-07-03 15:07:45 +07:00
github.js refactor(app): DRY pass — split large files, extract shared utils 2026-06-14 19:31:09 +07:00
google.js fix(antigravity): align provider fingerprint with IDE Desktop 2.1.1 (#2389) 2026-07-08 10:17:47 +07:00
grok-cli.js feat(oauth): zed/trae/windsurf providers + harden callback proxies 2026-07-25 17:25:19 +07:00
kiro.js feat(kiro): add external_idp CLIProxyAPI import for Microsoft SSO 2026-06-26 11:42:05 +07:00
minimax.js refactor(app): DRY pass — split large files, extract shared utils 2026-06-14 19:31:09 +07:00
misc.js refactor(app): DRY pass — split large files, extract shared utils 2026-06-14 19:31:09 +07:00
shared.js refactor(app): DRY pass — split large files, extract shared utils 2026-06-14 19:31:09 +07:00