garrytan 85e8a7aaf5 D1: pin the terminal-agent /ws Origin to the gstack extension (#1324) ...

GSTACK_EXTENSION_ID moves to browse/src/extension-id.ts, shared by
/extension-token and the terminal agent's /ws gate. /ws now returns 403 for
every origin except the pinned extension. Forks override the ID with
gstack-config set browse_extension_id <id>, honored by both routes; the
BROWSE_EXTENSION_ID env var is no longer read. Test sites that used fake
extension IDs now use the pinned origin.

2026-10-03 20:37:03 +00:00

..

build-node-server.sh

v1.90.0.0 feat: make browser cookie imports explicit and safe (#2964)

2026-09-25 12:06:45 -04:00

extension-id.ts

D1: pin the terminal-agent /ws Origin to the gstack extension (#1324)

2026-10-03 20:37:03 +00:00