9router/open-sse/providers
decolua 8e04fe1734 feat(oauth): zed/trae/windsurf providers + harden callback proxies
- zed live model discovery; codebuddy-intl handler; remove duplicate workbuddy
- split oauth providers.js into per-provider files (facade re-export)
- fold 5 standard refresh providers into config-driven generic
- hide trae/windsurf from registry (no tool calling support)
- fix login-CSRF + SSRF on trae/windsurf/zed local callback proxies
  via loopback-origin guard + strict state validation + apiOrigins allowlist
- move zed RSA private key transit to POST body; redact proxy logs

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-25 17:25:19 +07:00
..
models fix(kiro): deliver system prompt natively, add Opus 4.5/4.7/4.8, tolerate dash version ids (#2366) 2026-07-05 17:34:04 +07:00
registry feat(oauth): zed/trae/windsurf providers + harden callback proxies 2026-07-25 17:25:19 +07:00
capabilities.js # v0.5.40 (2026-07-20) 2026-07-20 17:21:41 +07:00
index.js feat(headroom): add proxy lifecycle management + dashboard UI 2026-06-20 10:09:50 +07:00
pricing.js feat(providers): add Gemini 3.6 Flash and Gemini 3.5 Flash Lite models 2026-07-23 15:48:23 +07:00
REGISTRY_TEMPLATE.js refactor(open-sse): registry consolidation + DRY media/oauth/adhoc cleanup 2026-06-14 13:15:48 +07:00
schema.js refactor(open-sse): registry consolidation + DRY media/oauth/adhoc cleanup 2026-06-14 13:15:48 +07:00
shared.js feat(gemini): add Gemini 3.6 Flash tier routing and 3.5 Flash Lite 2026-07-23 16:34:24 +07:00
thinkingLevels.js fix(kiro): normalize dashboard thinking intensity models 2026-07-23 16:27:06 +07:00