48c0347921
fix: in the browser extension s tabs action route the ( #310 ) ( #63332 )
...
* fix: in the browser extension s tabs action route the (#310 )
* fix(browser): fail closed for tab close and CDP redirects
* fix(browser): sanitize tab SSRF policy errors
* chore(changelog): add browser tabs action policy enforcement entry
* fix(browser): differentiate CDP endpoint blocks from navigation blocks in error mapping
Split SsrFBlockedError handling so navigation-target policy failures
(from assertBrowserNavigationAllowed) surface as 'browser navigation
blocked by policy' while CDP endpoint policy failures (from
assertCdpEndpointAllowed) surface as 'browser endpoint blocked by
policy'. Both stay sanitized so raw policy details still do not leak
to callers.
- Add BrowserCdpEndpointBlockedError (extends BrowserError, 400).
- assertCdpEndpointAllowed now catches SsrFBlockedError and rethrows
as BrowserCdpEndpointBlockedError so the route error mapping can
route endpoint vs navigation failures to the right user-facing
message without inspecting stack strings.
- toBrowserErrorResponse: raw SsrFBlockedError now maps to the
navigation-blocked message; endpoint-blocked errors are handled by
the existing BrowserError branch and keep the endpoint-blocked
message.
- Update tests that exercised the endpoint path to assert the new
error class instead of the raw SSRF message.
* fix(browser): move SSRF check after cache hit and thread ssrfPolicy through tryTerminateExecutionViaCdp
- connectBrowser: move assertCdpEndpointAllowed after cache lookup so
transient DNS failures don't break active cached sessions.
- tryTerminateExecutionViaCdp: accept ssrfPolicy and run
assertCdpEndpointAllowed before HTTP/WS I/O so the terminate path
doesn't bypass SSRF policy enforcement.
- forceDisconnectPlaywrightForTarget: thread ssrfPolicy through to
tryTerminateExecutionViaCdp.
* fix(browser): drop redundant pre-Playwright SSRF checks so cached sessions survive DNS blips
Remove assertProfileCdpEndpointAllowed() calls that precede
Playwright-backed tab operations (listPagesViaPlaywright,
focusPageByTargetIdViaPlaywright, closePageByTargetIdViaPlaywright)
since connectBrowser already runs the check on cache miss.
Keep the checks before raw CDP HTTP calls (fetchJson/fetchOk for
/json/list, /json/activate, /json/close) where there is no
connection cache.
Add comment on fetchCdpChecked explaining why redirect blocking
covers all CDP HTTP paths, not just probes.
2026-04-10 10:03:16 -06:00
9f864c9ade
fix: guard browser control fetches
2026-04-10 12:46:26 +01:00
0e54440ecc
fix(cycles): remove browser cli and tlon runtime seams
2026-04-10 11:45:28 +01:00
f096fc4406
Browser: unify /act route action execution and contract errors ( #63977 )
...
* Browser: unify agent act route execution and contracts
* Browser tests: lock act error codes and dedupe harness dispatch
* Browser tests: slim act harness dispatch map
* Browser act: enforce top-level targetId match
* Browser tests: cover missing act error codes
* Browser act: restore wait cap and reject zero resize dims
* Docs: document /act error contract
* Browser act: lock selector precedence and positive resize validation
* Browser act: restore interaction cap and harden contract tests
* docs: note browser act contract consolidation (#63977 ) (thanks @joshavant)
2026-04-09 22:54:33 -05:00
33ad806a14
Browser: consolidate duplicate helper surfaces via facade delegation ( #63957 )
...
* Plugin SDK: route browser helper surfaces through browser facade
* Browser doctor flow: add facade path regression and export parity guards
* Contracts: dedupe browser facade parity checks without reducing coverage
* Browser tests: restore host-inspection semantics coverage in extension
* fix: add changelog note for browser facade consolidation (#63957 ) (thanks @joshavant)
2026-04-09 19:49:04 -05:00
8cf02e7c47
fix(ci): clear check-additional follow-up regressions ( #63934 )
...
* fix(ci): route messaging temp files through openclaw tmp dir
* fix(ci): clear qa-lab follow-up guardrails
* fix(ci): own-check ACP fallback resolvers
* fix(ci): preserve memory-core write error causes
* fix(ci): narrow qa-channel boundary alias
* fix(test): type memory-core dreaming api stubs
2026-04-09 23:47:59 +01:00
766a676d48
test: update browser and reply mocks for direct imports
2026-04-09 05:52:07 +01:00
b1724f8b5f
fix(browser): auto-generate browser control auth token for none/trusted-proxy modes [AI] ( #63280 )
...
* fix: address issue
* fix: address review feedback
* fix: finalize issue changes
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
2026-04-09 09:55:24 +05:30
0c278bb93c
refactor: break runtime import cycles
2026-04-09 03:56:22 +01:00
f2c0482d3c
fix: surface delayed browser navigation blocks
2026-04-09 00:42:52 +01:00
c62a39c7a1
fix: restore main ci
2026-04-08 23:30:18 +01:00
5f5b3d733b
fix(browser): re-check interaction-driven navigations ( #63226 )
...
* fix(browser): guard interaction-driven navigations
* fix(browser): avoid rechecking unchanged interaction urls
* fix(browser): guard delayed interaction navigations
* fix(browser): guard interaction-driven navigations for full action duration
* fix(browser): avoid waiting on interaction grace timer
* fix(browser): ignore same-document hash-only URL changes in navigation guard
* fix(browser): dedupe interaction nav guards
* fix(browser): guard same-URL reloads in interaction navigation listeners
* docs(changelog): add interaction navigation guard entry
* fix(browser): drop duplicate ssrfPolicy props
* fix(browser): tighten interaction navigation guards
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-08 13:39:07 -06:00
dafcaf9d69
fix(browser): harden browser control override loading ( #62663 )
...
* fix(browser): harden browser control overrides
* fix(lint): prepare boundary artifacts for extension oxlint
* docs(changelog): add browser override hardening entry
* fix(lint): avoid duplicate boundary prep
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-08 13:24:47 -06:00
a5737f83af
refactor: dedupe browser navigation guard tests
2026-04-08 15:58:45 +01:00
95e397a266
refactor: dedupe repeated test helpers
2026-04-08 09:58:22 +01:00
aaa88398bf
refactor: dedupe browser trimmed readers
2026-04-08 00:09:41 +01:00
1868f301ed
refactor: dedupe browser trimmed readers
2026-04-08 00:09:41 +01:00
7897fb9c84
refactor: dedupe locale lowercase helpers
2026-04-07 22:57:52 +01:00
5b090561fb
refactor: dedupe browser whatsapp qa lowercase helpers
2026-04-07 20:58:01 +01:00
e5aae5e056
fix(browser): align browser.proxy profile mutation guards ( #60489 )
...
* fix(browser): block proxy profile mutations
* docs(changelog): add browser proxy guard entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-07 13:00:21 -06:00
14ec1ac50f
fix(browser): harden SSRF redirect guard against non-navigation document hops [AI] ( #62355 )
...
* fix: address issue
* fix: address PR review feedback
* docs(changelog): add browser redirect SSRF entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-07 11:37:31 -06:00
049acf23cb
fix(browser): guard interaction-driven navigations
2026-04-07 10:03:12 -07:00
9314bb7180
refactor: dedupe extension lowercase helpers
2026-04-07 15:12:32 +01:00
dfe1ef9041
Browser: remove timer dependency from proxy tests
2026-04-07 15:07:57 +01:00
47563305a2
Tests: isolate full-suite state leaks
2026-04-07 14:39:28 +01:00
cb28d8d6b8
refactor: dedupe browser and memory lowercase helpers
2026-04-07 13:44:41 +01:00
2f51dfca01
test: speed up browser auth auto-token test
2026-04-07 11:57:25 +01:00
5de04bc1d5
refactor: dedupe extension lowercase query helpers
2026-04-07 11:18:18 +01:00
4dc16e1567
refactor: dedupe lowercase normalizer readers
2026-04-07 11:18:18 +01:00
424b65b697
refactor: dedupe bluebubbles and zalouser readers
2026-04-07 08:40:34 +01:00
808c34b374
refactor: dedupe browser route readers
2026-04-07 06:07:14 +01:00
8c8c5fa635
refactor: dedupe browser cli readers
2026-04-07 06:07:13 +01:00
4dbe8f9f66
refactor: dedupe browser string readers
2026-04-07 05:06:55 +01:00
2f115bc645
refactor: dedupe reader helpers
2026-04-07 05:06:54 +01:00
59eb291c6e
refactor: dedupe string list helpers
2026-04-07 05:06:54 +01:00
69f4022950
refactor: dedupe browser and memory host error helpers
2026-04-07 05:06:53 +01:00
899f490c9c
refactor: dedupe shared string predicates
2026-04-07 02:03:33 +01:00
a88f240311
refactor: dedupe shared record coercers
2026-04-07 02:03:33 +01:00
59ccea334d
refactor: dedupe exported record guards
2026-04-07 02:03:33 +01:00
f16e9364d2
refactor: dedupe browser string helper
2026-04-07 00:21:12 +01:00
8e3c597e80
refactor: dedupe browser security string helper
2026-04-06 22:54:48 +01:00
b7e249fc08
refactor: dedupe browser setup record guard
2026-04-06 22:54:48 +01:00
58c670acc2
refactor: dedupe browser record helper
2026-04-06 22:54:47 +01:00
591347113e
refactor(deadcode): prune extension test shims
2026-04-06 17:26:25 +01:00
ce87d5e242
refactor(deadcode): remove extension wrapper shims
2026-04-06 17:18:03 +01:00
6067f2d9ad
chore(plugins): drop dead channel test any suppressions
2026-04-06 15:45:18 +01:00
e4fa414ed0
refactor(browser): remove remote tab harness any cast
2026-04-06 15:37:46 +01:00
987bbe6545
test(browser): assert remote CDP retry timeouts correctly
2026-04-06 15:22:23 +01:00
2a1a49bd41
fix(browser): retry remote CDP websocket readiness before failing
...
Remote browser profiles can pass HTTP reachability while Browser.getVersion on the CDP websocket is still warming up right after restart. Add one retry in ensureBrowserAvailable for remote CDP profiles and cover it with a regression test.
Fixes #57397
Co-authored-by: ThanhNguyxn <thanhnguyentuan2007@gmail.com >
2026-04-06 15:22:23 +01:00
4b2d528345
fix(plugins): finish channel lint cleanup
2026-04-06 14:48:35 +01:00
Devin Robison