skills/garrytan__gstack
1
0
Fork 0
mirror of https://github.com/garrytan/gstack.git synced 2026-09-14 18:41:42 +08:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 7e96fe299b fix: security wave 3 — 12 fixes, 7 contributors (v0.16.4.0) (#988) Garry Tan 2026-04-13 07:49:37 -10:00
  • 2741733367 chore: bump version and changelog (v0.16.4.0) #988 garrytan/security-wave-triage Garry Tan 2026-04-13 10:15:33 -07:00
  • 84593bb97a fix(security): block hex-encoded IPv4-mapped IPv6 metadata bypass Garry Tan 2026-04-13 09:42:16 -07:00
  • f93ffe56cc feat(security): add persistent command audit log Garry Tan 2026-04-13 09:40:42 -07:00
  • daf13d822c feat(security): pin JS/eval execution to cookie-imported origins Garry Tan 2026-04-13 09:39:36 -07:00
  • f348af4c93 feat(security): track cookie-imported domains and scope cookie imports Garry Tan 2026-04-13 09:38:31 -07:00
  • 9b65041d1c fix(security): learnings input validation + cross-project trust gate Garry Tan 2026-04-13 09:36:33 -07:00
  • 58bd7d19ef fix: remove duplicate recursive chmod on /tmp in Dockerfile.ci Garry Tan 2026-04-13 09:34:54 -07:00
  • fd7f30d53a fix(security): enforce frozen lockfile during setup Garry Tan 2026-04-13 09:34:40 -07:00
  • 8697ffa09b fix(security): restrict session file permissions to owner-only Garry Tan 2026-04-13 09:34:27 -07:00
  • d81229f9f2 fix(security): redact form fields with sensitive names, not just type=password Garry Tan 2026-04-13 09:34:13 -07:00
  • bc80c4fae5 fix(security): cookie-import path validation bypass + hardcoded /tmp Garry Tan 2026-04-13 09:33:48 -07:00
  • ffb56b556d fix(security): shell injection in bin/ scripts — use env vars instead of interpolation Garry Tan 2026-04-13 09:33:01 -07:00
  • 4b9fb4a3db fix(security): validateOutputPath symlink bypass — check file-level symlinks Garry Tan 2026-04-13 09:32:38 -07:00
  • c6e6a21d1a refactor: AI slop reduction with cross-model quality review (v0.16.3.0) (#941) Garry Tan 2026-04-10 17:13:15 -10:00
  • e4b80dd3f2 chore: bump version and changelog (v0.16.3.0) #941 garrytan/slop-reduction Garry Tan 2026-04-09 05:48:27 -10:00
  • a302593475 Merge remote-tracking branch 'origin/main' into garrytan/slop-reduction Garry Tan 2026-04-09 05:45:54 -10:00
  • 5364defe89 docs: design doc for slop-scan integration in /review and /ship Garry Tan 2026-04-09 05:45:17 -10:00
  • bc66e35c5d feat: slop-diff shows only NEW findings introduced on this branch Garry Tan 2026-04-09 05:42:10 -10:00
  • 52c73ba9ab chore: add slop-scan as diagnostic in test suite Garry Tan 2026-04-09 05:40:25 -10:00
  • 4590396af0 docs: add slop-scan usage guidelines to CLAUDE.md Garry Tan 2026-04-09 05:39:47 -10:00
  • a5c5dc68d6 revert: remove brittle string-matching catches in extension files Garry Tan 2026-04-09 05:17:54 -10:00
  • 12bf74a03d revert: remove brittle string-matching catches and alias comments in browser-manager Garry Tan 2026-04-09 05:17:54 -10:00
  • ad38e006f6 fix: use safeUnlinkQuiet in shutdown and cleanup paths Garry Tan 2026-04-09 05:17:54 -10:00
  • 6a857d41ba fix: restore isProcessAlive boolean semantics, add safeUnlinkQuiet, remove unused json() Garry Tan 2026-04-09 05:17:54 -10:00
  • 5f9246ac23 refactor: selective catches in Chrome extension files Garry Tan 2026-04-09 04:54:32 -10:00
  • b8c4e703c6 refactor: selective catches in write-commands, cdp-inspector, meta-commands, snapshot Garry Tan 2026-04-09 04:54:32 -10:00
  • fb24bb4a1c refactor: selective catches in gstack-global-discover Garry Tan 2026-04-09 04:54:31 -10:00
  • 4166a98831 refactor: replace empty catches and mark pass-through wrappers in browser-manager Garry Tan 2026-04-09 04:45:20 -10:00
  • 712af16138 refactor: replace empty catches with selective error handling in sidebar-agent Garry Tan 2026-04-09 04:45:15 -10:00
  • d2349d1491 chore: add slop-scan config to exclude vendor files Garry Tan 2026-04-09 04:41:49 -10:00
  • 1ea3e44931 refactor: remove unnecessary return await in content-security and read-commands Garry Tan 2026-04-09 04:41:46 -10:00
  • 11e56e9a10 refactor: extract isProcessAlive and replace try/catches in cli.ts Garry Tan 2026-04-09 04:41:43 -10:00
  • 591cd766be refactor: replace defensive try/catches in server.ts with utilities Garry Tan 2026-04-09 04:41:37 -10:00
  • 2468a25aa1 refactor: add error-handling utility module with selective catches Garry Tan 2026-04-09 04:41:32 -10:00
  • dbd7aee5b6 feat: relationship closing — office-hours adapts to repeat users (v0.16.2.0) (#937) Garry Tan 2026-04-08 22:21:28 -10:00
  • 766f496905 chore: bump version and changelog (v0.16.2.0) #937 garrytan/relationship-closing Garry Tan 2026-04-08 22:04:11 -10:00
  • 00a48192af Merge remote-tracking branch 'origin/main' into garrytan/relationship-closing Garry Tan 2026-04-08 22:02:54 -10:00
  • 2a7a7c4685 feat: relationship closing — office-hours adapts to repeat users Garry Tan 2026-04-08 22:02:24 -10:00
  • 8bc2fca89a feat: add builder profile helper for office-hours relationship closing Garry Tan 2026-04-08 22:02:19 -10:00
  • b34cfcce70 fix: sync package.json version with VERSION file Garry Tan 2026-04-08 22:02:14 -10:00
  • a7593d70ef fix: cookie picker auth token leak (v0.15.17.0) (#904) Garry Tan 2026-04-08 10:10:13 -07:00
  • 664085ed2a chore: merge main, re-bump version (v0.16.1.0) #904 garrytan/cookie-picker-auth-leak Garry Tan 2026-04-08 07:02:33 -10:00
  • b73f364411 feat: browser data platform for AI agents (v0.16.0.0) (#907) Garry Tan 2026-04-08 00:41:55 -07:00
  • fa22799b56 Merge branch 'main' into garrytan/team-supabase-store #78 garrytan/team-supabase-store Garry Tan 2026-04-07 20:47:07 -10:00
  • ac84b38b5f chore: bump version and changelog (v0.16.0.0) #907 garrytan/browser-media-scraping Garry Tan 2026-04-07 20:40:42 -10:00
  • 6b17a67a61 fix: resolve merge conflict in meta-commands.ts Garry Tan 2026-04-07 20:30:23 -10:00
  • d519678916 merge: incorporate origin/main into community-mode branch #416 garrytan/community-mode Garry Tan 2026-04-07 20:29:53 -10:00
  • 4da6cfbf59 docs: regenerate SKILL.md with Extraction category Garry Tan 2026-04-07 20:27:27 -10:00
  • c74a51e110 fix: browse-snapshot E2E turn budget too tight (7 → 9) Garry Tan 2026-04-07 20:22:20 -10:00
  • d295335d2c test: add data platform tests and media fixture Garry Tan 2026-04-07 19:06:47 -10:00
  • 511419fb85 feat: add screenshot --base64 for inline image return Garry Tan 2026-04-07 19:05:16 -10:00
  • ae3c7d1f54 feat: add network response body capture (--capture/--export/--bodies) Garry Tan 2026-04-07 19:04:44 -10:00
  • ffb3996dbf feat: add scroll --times N for automated repeated scrolling Garry Tan 2026-04-07 19:03:58 -10:00
  • da30faae85 feat: add GET /file endpoint for remote agent file retrieval Garry Tan 2026-04-07 19:03:21 -10:00
  • c1581c9b0a feat: add download, scrape, and archive commands Garry Tan 2026-04-07 19:02:34 -10:00
  • cc63edb006 feat: add media and data commands for page content extraction Garry Tan 2026-04-07 19:01:09 -10:00
  • a6e0277fc4 feat: default paired agents to full access, split SCOPE_CONTROL Garry Tan 2026-04-07 18:58:56 -10:00
  • 73f5d0b77d refactor: extract path-security.ts shared module Garry Tan 2026-04-07 18:56:46 -10:00
  • 7f38058b7f chore: bump version and changelog (v0.15.17.0) Garry Tan 2026-04-07 18:50:08 -10:00
  • d6e3d9b14e Merge remote-tracking branch 'origin/main' into garrytan/cookie-picker-auth-leak Garry Tan 2026-04-07 18:49:48 -10:00
  • 360bb2e192 fix: cookie picker auth token leak (CVE — CVSS 7.8) Garry Tan 2026-04-07 18:49:45 -10:00
  • 9d34baa973 fix: gstack-slug produces deterministic slugs across sessions (#897) Jared Friedman 2026-04-07 18:42:13 -07:00
  • 1868636f49 refactor: extract TabSession for per-tab state isolation (v0.15.16.0) (#873) Garry Tan 2026-04-07 00:23:36 -07:00
  • fe1f16cb46 chore: bump version and changelog (v0.15.16.0) #873 garrytan/browser-batch-multitab Garry Tan 2026-04-06 23:01:07 -07:00
  • eb417f0735 docs: move batch endpoint plan into BROWSER.md as feature documentation Garry Tan 2026-04-06 22:58:34 -07:00
  • 0d32262a79 Merge remote-tracking branch 'origin/main' into garrytan/browser-batch-multitab Garry Tan 2026-04-06 22:41:40 -07:00
  • 3856689b10 fix: harden codex-review E2E — extract SKILL.md section, bump maxTurns to 25 Garry Tan 2026-04-06 22:41:26 -07:00
  • 6cc094cd41 fix: pair-agent tunnel drops after 15s (v0.15.15.1) (#868) Garry Tan 2026-04-06 17:21:35 -07:00
  • a3307f04fb Merge remote-tracking branch 'origin/main' into garrytan/browser-batch-multitab Garry Tan 2026-04-06 17:04:41 -07:00
  • 4ce00371d8 test: add batch endpoint integration tests Garry Tan 2026-04-06 16:55:47 -07:00
  • d479b48fa6 feat: add POST /batch endpoint for parallel multi-tab execution Garry Tan 2026-04-06 16:53:51 -07:00
  • c3785e09cc refactor: update handler signatures to use TabSession Garry Tan 2026-04-06 16:51:49 -07:00
  • 3d1a4f8c0a test: regression tests for pair-agent tunnel fixes #868 garrytan/fix-pair-agent Garry Tan 2026-04-06 16:47:57 -07:00
  • 9f45acb074 refactor: extract TabSession from BrowserManager for per-tab state Garry Tan 2026-04-06 16:46:30 -07:00
  • fcb37d5cfe fix: newtab blocked by tab ownership check for scoped tokens Garry Tan 2026-04-06 16:28:22 -07:00
  • 3d53a7595f chore: bump version and changelog (v0.15.15.1) Garry Tan 2026-04-06 16:25:23 -07:00
  • 830e2bf1db Merge remote-tracking branch 'origin/main' into garrytan/fix-pair-agent Garry Tan 2026-04-06 16:24:13 -07:00
  • 05d1a50e70 fix: pair-agent server dies 15s after CLI exits Garry Tan 2026-04-06 16:23:10 -07:00
  • ad47077040 fix: remove stray domains reference crashing connect command Garry Tan 2026-04-06 16:23:05 -07:00
  • 47b3ee2ced fix: auto-symlink into ~/.claude/skills/ when cloned elsewhere (#865) Evan Solomon 2026-04-06 14:54:28 -07:00
  • 8ca950f6f1 feat: content security — 4-layer prompt injection defense for pair-agent (#815) Garry Tan 2026-04-06 14:41:06 -07:00
  • 114924c91e fix: improve snapshot flags docs completeness for LLM judge #815 garrytan/openclaw-browser-ctrl Garry Tan 2026-04-06 08:36:41 -07:00
  • 89846594b0 fix: adopt main's headed-mode /health token serving Garry Tan 2026-04-06 00:51:43 -07:00
  • 27d141f357 Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl Garry Tan 2026-04-06 00:48:02 -07:00
  • 03973c2fab fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847) Garry Tan 2026-04-06 00:47:04 -07:00
  • 3acbd4a15d revert: remove batch commands CHANGELOG entry and VERSION bump Garry Tan 2026-04-06 00:41:14 -07:00
  • 100c406e10 feat: add --domain flag to pair-agent CLI for domain restrictions Garry Tan 2026-04-06 00:34:34 -07:00
  • 001ba59be0 refactor: checkTabAccess uses options object, add own-only tab policy Garry Tan 2026-04-06 00:34:32 -07:00
  • c797feb7b3 Merge remote-tracking branch 'origin/main' into garrytan/security-wave-5 #847 garrytan/security-wave-5 Garry Tan 2026-04-06 00:29:26 -07:00
  • 7cf7f6e76e chore: regenerate pair-agent/SKILL.md after main merge Garry Tan 2026-04-06 00:27:33 -07:00
  • 8fd73ec983 Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl Garry Tan 2026-04-06 00:26:53 -07:00
  • 170be8dee8 chore: bump VERSION to 0.15.14.0, add CHANGELOG entry for batch endpoint Garry Tan 2026-04-06 00:26:25 -07:00
  • b3d064aabb fix: gstack-team-init detects and removes vendored copies (#848) Garry Tan 2026-04-06 00:26:20 -07:00
  • 70918919ce Merge remote-tracking branch 'origin/main' into garrytan/security-wave-5 Garry Tan 2026-04-06 00:25:58 -07:00
  • 11d3928463 Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl Garry Tan 2026-04-06 00:25:52 -07:00
  • 2e3aeaf3ac refactor: consolidate Hermes into generic HTTP option in pair-agent Garry Tan 2026-04-06 00:25:05 -07:00
  • 21f2a449eb fix: correct CHANGELOG date from 2026-04-06 to 2026-04-05 Garry Tan 2026-04-06 00:25:01 -07:00
  • cd8aa92393 chore: bump version and changelog (v0.15.14.0) #848 garrytan/fix-team-setup Garry Tan 2026-04-06 00:23:23 -07:00
  • d7ccdf37c4 fix: gstack-team-init detects and removes vendored copies in team mode Garry Tan 2026-04-06 00:23:16 -07:00