Peter Steinberger 2d319961d5 fix(browser): block interaction-triggered navigation SSRF (#104254) ...

* fix(browser): guard interaction navigation requests

* fix(browser): preserve pages on blocked navigation

* fix(browser): enforce interaction navigation policy

* test(browser): type navigation guard fixtures

* fix(browser): execute guarded wait predicates

* style(browser): satisfy interaction lint

* fix(browser): guard hover drag and scroll navigation

* fix(browser): type policy check outcomes

* test(browser): type navigation guard mocks

* fix(browser): preserve proxy policy for guarded interactions

* fix(browser): carry navigation policy through actions

* fix(browser): retain policy for existing-session guards

* fix(browser): guard existing-session waits

* test(browser): avoid shadowed guard pages

* fix(browser): expose scroll action to agents

* fix(browser): disable speculative managed preconnects

* docs(browser): bound managed preconnect hardening

* fix(browser): keep wait behavior outside interaction guards

* chore(browser): leave release notes to release automation

* fix(browser): guard all interaction navigations

2026-07-11 04:30:33 -07:00

..

acp-agents-setup.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

acp-agents.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

agent-send.md

fix(agent): preserve explicit recipient sessions (#101507)

2026-07-07 10:07:13 +01:00

apply-patch.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

brave-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

browser-control.md

fix(browser): prevent stale handles from switching duplicate-URL tabs (#103816)

2026-07-10 17:40:14 +01:00

browser-linux-troubleshooting.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

browser-login.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

browser-wsl2-windows-remote-cdp-troubleshooting.md

fix(browser): diagnose empty WSL2 Chrome replies (#100590)

2026-07-06 07:42:02 +01:00

browser.md

fix(browser): block interaction-triggered navigation SSRF (#104254)

2026-07-11 04:30:33 -07:00

btw.md

feat(control-ui): selection popup with More details and Ask in side chat via /btw (#104205)

2026-07-11 01:42:17 -07:00

capability-cookbook.md

…

chrome-extension.md

feat(browser): pair the Chrome extension directly to a remote gateway (#101127)

2026-07-07 04:31:52 +01:00

clawhub.md

…

code-execution.md

fix(xai): require consent for cross-provider billed tools (#97629)

2026-07-10 05:30:23 +01:00

creating-skills.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

diffs.md

feat(diffs): changed-files summary nav for multi-file patch diffs (#100753)

2026-07-06 16:55:56 +01:00

duckduckgo-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

elevated.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

exa-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

exec-approvals-advanced.md

fix(exec): auto-approve recognized read-only boolean flags on default safe bins (#88953)

2026-07-10 10:53:56 +01:00

exec-approvals.md

docs(cli): clarify that exec-policy show and approvals get exclude per-session /exec overrides (#94999)

2026-07-11 02:58:37 -07:00

exec.md

fix(codex): require human approval for app-server commands (#103457)

2026-07-10 08:07:18 +01:00

firecrawl.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

gemini-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

goal.md

feat(ui): redesign session goal into interactive composer pill with elapsed time and /goal edit (#100736)

2026-07-06 09:42:49 +01:00

grok-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

image-generation.md

fix(xai): align image and video capability contracts (#103384)

2026-07-10 06:06:50 +01:00

index.md

feat: render inline web chat widgets via capability-gated show_widget tool (#101840)

2026-07-09 12:29:50 +01:00

kimi-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

llm-task.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

lobster.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

loop-detection.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

media-overview.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

minimax-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

multi-agent-sandbox-tools.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

music-generation.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

ollama-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

parallel-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

pdf.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

permission-modes.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

perplexity-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

plugin.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

reactions.md

fix(channels): honor configured read target policies (#99905)

2026-07-10 22:29:37 -05:00

searxng-search.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

show-widget.md

feat: carry gateway client capabilities through the CLI loopback backend (#102835)

2026-07-09 15:09:09 +01:00

skill-workshop.md

feat(skills): add lifecycle curator for workshop-created skills (#101214)

2026-07-07 03:25:44 +01:00

skills-config.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

skills.md

fix(skills): preserve compact prompt descriptions (#88426)

2026-07-09 20:23:05 +01:00

slash-commands.md

fix(mcp): keep server config private in groups (#103502)

2026-07-10 08:09:48 +01:00

steer.md

fix(agents): simplify subagent completion handoff

2026-05-23 13:50:08 +01:00

subagents.md

fix(agents): apply stale-run liveness check to aborted subagent orphan recovery (#90817)

2026-07-10 21:56:57 +01:00

tavily.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

thinking.md

fix(anthropic): delegate adaptive Claude CLI effort (#103815)

2026-07-10 17:57:50 +01:00

tokenjuice.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

tool-search.md

fix(computer): prevent stale, replayed, and post-cancel desktop actions (#103422)

2026-07-10 06:47:56 +01:00

trajectory.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

tts.md

fix(xai): discover TTS voices dynamically (#103446)

2026-07-10 07:05:45 +01:00

video-generation.md

fix(xai): align image and video capability contracts (#103384)

2026-07-10 06:06:50 +01:00

web-fetch.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

web.md

fix(xai): validate x_search handle filters (#103393)

2026-07-10 08:02:18 +01:00