scotthuang 37af50f3db fix(browser): keep user tabs open on SSRF-denied reads (#78874) ...

Summary:
- Split browser SSRF quarantine from tab closure so read-only browser operations do not close user-owned tabs on policy denial.
- Keep OpenClaw-initiated navigation/create paths closing blocked tabs, and add regression coverage for both contracts.
- Update changelog with contributor credit.

Verification:
- pnpm test extensions/browser/src/browser/pw-session.assert-navigation-safety.test.ts extensions/browser/src/browser/pw-tools-core.snapshot.navigate-guard.test.ts
- pnpm test extensions/browser/src/browser/pw-tools-core.browser-ssrf-guard.test.ts extensions/browser/src/browser/pw-tools-core.snapshot.test.ts
- Exact-head CI success: 25535578610
- Exact-head Real behavior proof success: 25536652326

Thanks @scotthuang.

2026-05-08 08:13:04 +01:00

..

acpx

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

active-memory

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

alibaba

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

amazon-bedrock

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

amazon-bedrock-mantle

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

anthropic

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

anthropic-vertex

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

arcee

fix(arcee): disable tools for Trinity thinking

2026-05-07 14:28:33 +01:00

azure-speech

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

bonjour

test: guard extension callback captures

2026-05-08 06:34:45 +01:00

brave

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

browser

fix(browser): keep user tabs open on SSRF-denied reads (#78874)

2026-05-08 08:13:04 +01:00

byteplus

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

canvas

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

cerebras

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

chutes

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

cloudflare-ai-gateway

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

codex

perf: lazy load memory embedding runtime

2026-05-08 05:39:13 +01:00

comfy

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

copilot-proxy

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

deepgram

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

deepinfra

test: clarify deepinfra model catalog assertions

2026-05-08 07:42:50 +01:00

deepseek

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

device-pair

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

diagnostics-otel

feat(agents): implement state-aware failover and lane suspension

2026-05-07 18:34:05 -05:00

diagnostics-prometheus

feat: add user input blocking lifecycle gates (#75035)

2026-05-06 11:41:04 +00:00

diffs

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

discord

test: clarify discord unresolved allowlist assertion

2026-05-08 07:08:03 +01:00

document-extract

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

duckduckgo

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

elevenlabs

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

exa

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

fal

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

feishu

test: tighten function-shape assertions

2026-05-08 06:19:37 +01:00

file-transfer

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

firecrawl

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

fireworks

fix: strip unsupported Fireworks tool schema keywords

2026-05-07 13:46:46 +01:00

github-copilot

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

google

test: tighten helper assertion guards

2026-05-08 06:56:38 +01:00

google-meet

test: clarify google meet export mime assertions

2026-05-08 07:55:39 +01:00

googlechat

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

gradium

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

groq

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

huggingface

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

image-generation-core

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

imessage

feat(imessage): add native imsg message actions

2026-05-08 05:34:22 +01:00

inworld

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

irc

test: clarify irc chunk length assertion

2026-05-08 07:54:36 +01:00

kilocode

test: clarify kilocode model catalog assertions

2026-05-08 07:53:39 +01:00

kimi-coding

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

line

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

litellm

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

llm-task

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

lmstudio

test: remove redundant lmstudio stream assertion

2026-05-08 08:12:46 +01:00

lobster

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

matrix

test: finish exact function assertion cleanup

2026-05-08 06:38:25 +01:00

mattermost

test: clarify mattermost websocket patch assertion

2026-05-08 07:58:56 +01:00

media-understanding-core

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

memory-core

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

memory-lancedb

perf: lazy load memory embedding runtime

2026-05-08 05:39:13 +01:00

memory-wiki

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

microsoft

refactor: stage external output writes through fs-safe

2026-05-07 06:05:24 +01:00

microsoft-foundry

test: clarify foundry refresh rejection assertion

2026-05-08 07:49:58 +01:00

migrate-claude

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

migrate-hermes

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

minimax

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

mistral

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

moonshot

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

msteams

test: clarify msteams attachment url assertions

2026-05-08 08:02:20 +01:00

nextcloud-talk

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

nostr

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

nvidia

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

ollama

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

open-prose

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

openai

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

opencode

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

opencode-go

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

openrouter

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

openshell

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

perplexity

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

phone-control

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

qa-channel

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qa-lab

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qa-matrix

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qianfan

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

qqbot

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

qwen

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

runway

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

searxng

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

senseaudio

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

sglang

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

signal

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

skill-workshop

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

slack

test: finish exact function assertion cleanup

2026-05-08 06:38:25 +01:00

speech-core

test(channels): drop bluebubbles fixture assumptions

2026-05-07 12:53:01 -07:00

stepfun

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

synology-chat

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

synthetic

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

talk-voice

feat: declare startup plugin imports explicitly

2026-04-28 04:33:47 +01:00

tavily

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

telegram

test: guard extension callback captures

2026-05-08 06:34:45 +01:00

tencent

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

test-support

refactor: trim test support helper exports

2026-05-01 12:02:22 +01:00

thread-ownership

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

tlon

test: fix strict CI gates

2026-05-08 05:56:38 +01:00

together

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

tokenjuice

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

tts-local-cli

refactor: stage external output writes through fs-safe

2026-05-07 06:05:24 +01:00

twitch

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

venice

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

vercel-ai-gateway

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

video-generation-core

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

vllm

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

voice-call

test: clarify voice call webhook concurrency assertions

2026-05-08 07:52:16 +01:00

volcengine

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

voyage

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

vydra

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

web-readability

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

webhooks

fix: share plugin runtime helpers

2026-05-08 00:28:43 +01:00

whatsapp

test: invoke whatsapp setup validators

2026-05-08 06:31:10 +01:00

xai

test: tighten function-shape assertions

2026-05-08 06:19:37 +01:00

xiaomi

test: make suites safe without isolation (#78834)

2026-05-07 08:43:29 +01:00

zai

chore: bump version to 2026.5.6

2026-05-06 09:47:34 +01:00

zalo

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00

zalouser

test: clarify zalouser chunk length assertion

2026-05-08 08:00:18 +01:00

.npmignore

…

AGENTS.md

fix(memory-lancedb): declare apache-arrow peer

2026-05-04 00:30:02 +01:00

CLAUDE.md

…

music-generation-providers.live.test.ts

refactor: remove legacy agent dir resolver

2026-05-05 20:07:49 +01:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

Add WhatsApp live QA lane (#77704)

2026-05-05 12:09:28 -07:00

video-generation-providers.live.test.ts

test: tighten assertions and harness coverage

2026-05-08 05:28:12 +01:00