yuna amelia 82999c021f fix(oauth): return 410 Gone for retired windsurf/devin-cli PKCE actions ...

start-callback-server, authorize, and poll-callback (GET + POST) now
return 410 Gone with a pointer to /import-token. The 410 short-circuit
runs before auth so the response is honest about the action being
permanently gone, not gated. Codex PKCE flow unchanged.

Tests: 5 new assertions cover GET + POST 410 paths and a Codex
regression check.

2026-05-29 12:59:17 +08:00

..

benchmarks

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

e2e

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

fixtures/cursor

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

golden-set

feat(compression): expand caveman parity and MCP metadata compression

2026-05-03 09:14:20 -03:00

helpers

feat(auth): enforce dashboard sessions for management routes

2026-04-17 16:45:27 -03:00

integration

fix: allow rate-limited provider connections after transient 429s (with unit & integration tests)

2026-05-27 09:49:24 -03:00

live

fix(security): resolve CodeQL ReDoS + URL sanitization alerts

2026-05-17 07:43:32 -03:00

load

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

manual

Release v3.8.0 (#2073)

2026-05-10 00:55:06 -03:00

security

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

translator

chore: apply PR 1495 and update changelog

2026-04-21 21:12:29 -03:00

unit

fix(oauth): return 410 Gone for retired windsurf/devin-cli PKCE actions

2026-05-29 12:59:17 +08:00

scratch_test.mjs

refactor: implement path utilities, add custom date formatting, improve type safety, and unify database imports

2026-04-21 21:10:48 -03:00