Garry TanandClaude Fable 5 7c309f7817 fix(security): terminal-agent uses the shared PTY cookie parser ...

The /ws upgrade's cookie fallback hand-parsed the Cookie header inline — the
fourth copy of the session-cookie parse, and the one that had already
diverged from the others. Parsing now goes through extractPtyCookie;
validation deliberately stays against the agent's own in-process validTokens
map (the server's registry lives in a different process). The ws-handler pin
test now pins the shared-parser call instead of the raw cookie-name literal.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-14 21:12:21 -07:00

..

bin

feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)

2026-03-19 18:20:50 -07:00

scripts

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

src

fix(security): terminal-agent uses the shared PTY cookie parser

2026-08-14 21:12:21 -07:00

test

fix(security): terminal-agent uses the shared PTY cookie parser

2026-08-14 21:12:21 -07:00

PLAN-snapshot-dropdown-interactive.md

fix: snapshot -i auto-detects dropdown/popover interactive elements (#845)

2026-04-05 22:57:45 -07:00

SKILL.md

v1.62.0.0 feat: plan-mode auto-select at the review scope gate (#2533)

2026-08-12 11:12:28 -07:00

SKILL.md.tmpl

v1.57.8.0 feat: browse js/eval --out render-to-file (canonical Chromium for offline rendering) (#1929)

2026-06-09 21:02:30 -07:00