Garry Tan 89846594b0 fix: adopt main's headed-mode /health token serving ...

Our merge kept the old !tunnelActive guard which conflicted with
main's security-audit-r2 tests that require no currentUrl/currentMessage
in /health. Adopts main's approach: serve token conditionally based on
headed mode or chrome-extension origin. Updates server-auth tests.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 00:51:43 -07:00

..

activity.ts

feat: tab enforcement + POST /pair endpoint + activity attribution

2026-04-04 23:18:27 -07:00

browser-manager.ts

Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl

2026-04-06 00:48:02 -07:00

buffers.ts

feat: Phase 3.5 — cookie import, QA testing, team retro (v0.3.1) (#29)

2026-03-13 00:31:41 -07:00

bun-polyfill.cjs

fix: Windows support — Node.js server fallback for Playwright (#255)

2026-03-20 12:22:11 -07:00

cdp-inspector.ts

fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847)

2026-04-06 00:47:04 -07:00

cli.ts

Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl

2026-04-06 00:48:02 -07:00

commands.ts

feat: centralize content wrapping in handleCommandInternal response path

2026-04-05 11:06:50 -07:00

config.ts

fix: security wave 1 — 14 fixes for audit #783 (v0.15.7.0) (#810)

2026-04-04 22:12:04 -07:00

content-security.ts

test: comprehensive content security tests (47 tests)

2026-04-05 11:25:19 -07:00

cookie-import-browser.ts

feat: Wave 3 — community bug fixes & platform support (v0.11.6.0) (#359)

2026-03-23 22:15:23 -07:00

cookie-picker-routes.ts

fix: security wave 1 — 14 fixes for audit #783 (v0.15.7.0) (#810)

2026-04-04 22:12:04 -07:00

cookie-picker-ui.ts

feat: GStack Browser — double-click AI browser with anti-bot stealth (#695)

2026-04-04 10:17:05 -07:00

find-browse.ts

feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)

2026-03-19 18:20:50 -07:00

meta-commands.ts

Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl

2026-04-06 00:48:02 -07:00

platform.ts

fix: Windows support — Node.js server fallback for Playwright (#255)

2026-03-20 12:22:11 -07:00

read-commands.ts

fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847)

2026-04-06 00:47:04 -07:00

server.ts

fix: adopt main's headed-mode /health token serving

2026-04-06 00:51:43 -07:00

sidebar-agent.ts

fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847)

2026-04-06 00:47:04 -07:00

sidebar-utils.ts

fix: sidebar agent uses real tab URL instead of stale Playwright URL (v0.12.6.0) (#544)

2026-03-26 22:07:03 -06:00

snapshot.ts

Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl

2026-04-06 00:48:02 -07:00

token-registry.ts

fix: CSO security fixes — token leak, domain bypass, input validation

2026-04-04 23:37:36 -07:00

url-validation.ts

fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847)

2026-04-06 00:47:04 -07:00

welcome.html

feat: GStack Browser — double-click AI browser with anti-bot stealth (#695)

2026-04-04 10:17:05 -07:00

write-commands.ts

fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847)

2026-04-06 00:47:04 -07:00