3 Commits

Author	SHA1	Message	Date
decolua	8e04fe1734	feat(oauth): zed/trae/windsurf providers + harden callback proxies ... - zed live model discovery; codebuddy-intl handler; remove duplicate workbuddy - split oauth providers.js into per-provider files (facade re-export) - fold 5 standard refresh providers into config-driven generic - hide trae/windsurf from registry (no tool calling support) - fix login-CSRF + SSRF on trae/windsurf/zed local callback proxies via loopback-origin guard + strict state validation + apiOrigins allowlist - move zed RSA private key transit to POST body; redact proxy logs Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-25 17:25:19 +07:00
ryanngit	59b7828237	fix(grok-cli): align Grok Build with current subscription protocol (#2590)	2026-07-16 15:33:19 +07:00
Fadjrir Herlambang	a11937cdd6	feat(grok-cli): add Grok CLI / Grok Build provider with OAuth device-code flow (#2502) ... New OAuth provider routing through cli-chat-proxy.grok.com (OpenAI Responses API), distinct from xai (api.x.ai) and grok-web (cookie SSO): - Registry + GrokCliExecutor: Chat Completions -> Responses transform, CLI fingerprint headers, virtual effort models grok-4.5-{low,medium,high} - OAuth device-code flow (auth.x.ai) with no-PKCE, shared xAI token refresh - store=false multi-turn continuity via reasoning encrypted_content - Quota tracker: on-demand window + prepaid balance on dashboard - Connection test: 402 spending-limit = soft success (auth OK, out of credits) - Alias/oauth/provider baselines + unit tests	2026-07-10 11:47:08 +07:00