S0yora 6ff3238e8d fix(oauth): address Trae review feedback (loopback origin, stream cleanup, scripts) ...

- Restrict the /authorize postMessage and the modal listener to the loopback
  origin pair (localhost + 127.0.0.1) instead of "*"/single-origin. The dashboard
  runs on localhost while Trae forces the callback onto 127.0.0.1, so a single
  window.location.origin target silently dropped the success message (popup never
  closed). Addresses CWE-359 without breaking the cross-loopback flow.
- TraeExecutor: cancel the SSE reader on completion, abort upfront when the caller
  signal is already aborted, and accept string elements in array message content.
- Move ad-hoc dev scripts to scripts/ad-hoc/ per the repo style guide.

2026-05-31 16:20:32 +03:00

..

parseCallback.ts

feat(oauth): add Trae SOLO provider (work/code modes)

2026-05-31 04:38:22 +03:00

route.ts

fix(oauth): address Trae review feedback (loopback origin, stream cleanup, scripts)

2026-05-31 16:20:32 +03:00