feat: content security — 4-layer prompt injection defense for pair-agent#815

Merged

garrytan merged 53 commits intomainfrom

garrytan/openclaw-browser-ctrl

Apr 6, 2026

Commits on Apr 4, 2026

feat: token registry for multi-agent browser access

garrytan
and
claude
committed
feat: integrate token registry + scoped auth into browse server

garrytan
and
claude
committed
feat: ngrok tunnel integration + @ngrok/ngrok dependency

garrytan
and
claude
committed

Commits on Apr 5, 2026

feat: tab isolation for multi-agent browser access

garrytan
and
claude
committed
feat: tab enforcement + POST /pair endpoint + activity attribution

garrytan
and
claude
committed
feat: pair-agent CLI command + instruction block generator

garrytan
and
claude
committed
test: tab isolation + instruction block generator tests

garrytan
and
claude
committed
merge: resolve conflicts with main (adopt chrome-extension origin gating)
garrytan
committed
chore: bump version and changelog (v0.15.9.0)

garrytan
and
claude
committed
fix: CSO security fixes — token leak, domain bypass, input validation

garrytan
and
claude
committed
feat: /pair-agent skill — syntactic sugar for browser sharing

garrytan
and
claude
committed
docs: remote browser access reference for paired agents

garrytan
and
claude
committed
feat: improved instruction block with snapshot→@ref pattern

garrytan
and
claude
committed
feat: smart ngrok detection + auto-tunnel in pair-agent

garrytan
and
claude
committed
feat: on-demand tunnel start via POST /tunnel/start

garrytan
and
claude
committed
fix: pair-agent skill must output the instruction block verbatim

garrytan
and
claude
committed
fix: scoped tokens rejected on /command — auth gate ordering bug

garrytan
and
claude
committed
feat: pair-agent auto-launches headed mode before pairing

garrytan
and
claude
committed
test: comprehensive tests for auth ordering, tunnel, ngrok, headed mode

garrytan
and
claude
committed
fix: chain scope bypass + /health info leak when tunneled

garrytan
and
claude
committed
docs: tout /pair-agent as headline feature in CHANGELOG + README

garrytan
and
claude
committed
docs: expand /pair-agent, /design-shotgun, /design-html in README

garrytan
and
claude
committed
refactor: split handleCommand into handleCommandInternal + HTTP wrapper

garrytan
and
claude
committed
feat: add content-security.ts with datamarking, envelope, and filter hooks

garrytan
and
claude
committed
feat: centralize content wrapping in handleCommandInternal response path

garrytan
and
claude
committed
feat: hidden element stripping for scoped token text extraction

garrytan
and
claude
committed
feat: snapshot split output format for scoped tokens

garrytan
and
claude
committed
feat: add SECURITY section to pair-agent instruction block

garrytan
and
claude
committed
test: add 4 prompt injection test fixtures

garrytan
and
claude
committed
test: comprehensive content security tests (47 tests)

garrytan
and
claude
committed
fix: pair-agent skill compliance + fix all 16 pre-existing test failures

garrytan
and
claude
committed
Merge remote-tracking branch 'origin/main' into garrytan/openclaw-browser-ctrl
garrytan
committed
chore: bump version and changelog (v0.15.12.0)

garrytan
and
claude
committed
fix: E2E exit reason precedence + worktree prune race condition

garrytan
and
claude
committed

Commits on Apr 6, 2026