agent-board-runner 0.1.0 → 0.1.2

package/README.md

@@ -58,3 +58,17 @@ Only needed to override the defaults — see `.env.example`.
 - `node-pty` is a native module — if `npm install` fails building it, install your platform's
   usual native build toolchain (e.g. `build-essential`/Xcode Command Line Tools/Visual Studio
   Build Tools) and retry.
+
+## Known limitation: OAuth login inside a review preview
+
+Moving a card into "revisao" tunnels that project's own dev server through its own Quick
+Tunnel, with a fresh random `*.trycloudflare.com` subdomain every time. If the project you're
+reviewing signs in through a hosted auth provider (Supabase Auth, Auth0, etc.), the post-login
+redirect will likely bounce back to `localhost` instead of the tunnel URL — the new subdomain
+was never allow-listed with that provider.
+
+Fix it once per project, in that project's own auth provider (not in Agent Board): add a
+wildcard entry to its redirect URL allow list, e.g. on Supabase, Authentication > URL
+Configuration > Additional Redirect URLs > `https://*.trycloudflare.com/**`. Providers without
+wildcard support in that allow list (e.g. Firebase Auth) don't have an equivalent fix without
+extra infrastructure.