Agustin Rivera 8dfbf3268b fix(browser): gate sandbox noVNC helper auth ...

Require bridge auth before /sandbox/novnc token redemption and keep the noVNC observer URL out of model-visible prompt context.

Local verification:
- pnpm test extensions/browser/src/browser/bridge-server.auth.test.ts src/agents/sanitize-for-prompt.test.ts src/agents/pi-embedded-runner.buildembeddedsandboxinfo.test.ts

Note: pnpm check currently fails on latest main in unrelated files (src/agents/tools/message-tool.ts and src/gateway/mcp-http.test.ts), outside this PR diff.

Thanks @eleqtrizit.

Co-authored-by: eleqtrizit <31522568+eleqtrizit@users.noreply.github.com>

2026-04-10 18:01:26 +01:00

..

src

fix(browser): gate sandbox noVNC helper auth

2026-04-10 18:01:26 +01:00

browser-bridge.ts

refactor: split browser sdk imports for sandbox and audit

2026-04-03 16:39:47 +01:00

browser-cdp.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-config.ts

Browser: consolidate duplicate helper surfaces via facade delegation (#63957)

2026-04-09 19:49:04 -05:00

browser-control-auth.ts

Browser: consolidate duplicate helper surfaces via facade delegation (#63957)

2026-04-09 19:49:04 -05:00

browser-doctor.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-host-inspection.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-maintenance.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-profiles.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

browser-runtime-api.ts

refactor: route plugin sdk through extension barrels

2026-03-27 13:46:16 +00:00

cli-metadata.ts

perf(plugins): trim channel boundary core imports

2026-04-08 08:52:52 +01:00

index.test.ts

test: speed up browser plugin entry tests

2026-04-07 19:59:46 +01:00

index.ts

test: speed up browser plugin entry tests

2026-04-07 19:59:46 +01:00

openclaw.plugin.json

refactor: add browser plugin runtime package

2026-03-26 22:20:39 +00:00

package.json

chore: bump version to 2026.4.10

2026-04-09 03:56:22 +01:00

plugin-registration.ts

Browser: align plugin registration mutability

2026-04-07 23:52:55 +01:00

register.runtime.ts

refactor: move browser runtime seams behind plugin metadata

2026-04-05 23:13:14 +01:00

runtime-api.ts

refactor: route plugin sdk facades through extension barrels

2026-03-27 20:47:36 +00:00

setup-api.ts

refactor: dedupe extension lowercase readers

2026-04-07 12:18:01 +01:00

test-support.ts

fix(browser): route test support through sdk testing

2026-04-04 01:07:28 +09:00

tsconfig.json

chore(plugins): bulk add package boundary tsconfig rollout

2026-04-07 08:48:23 +01:00