Pinchtab Files

Changelog

• [2b4095] Merge branch 'main' into codex/upload-shadow-root-selector
• [059980] Merge branch 'main' into dependabot/npm_and_yarn/npm/js-yaml-4.2.0
• [2af0e5] Merge branch 'main' into feat/file-scheme-opt-in
• [232db9] Merge pull request [#589] from pinchtab/feat/cloakbrowser-support
• [a7fcfd] Merge pull request [#590] from pinchtab/dependabot/npm_and_yarn/npm/js-yaml-4.2.0
• [a3bdb9] Merge pull request [#592] from chaochaoweb3/codex/upload-shadow-root-selector
• [1e0737] Merge pull request [#593] from pinchtab/fix/openclaw-security-bump
• [9519b8] Merge pull request [#594] from pinchtab/feat/file-scheme-opt-in
• [3276e8] Merge pull request [#596] from pinchtab/fix/record-encode-mp4-webm-585
• [06c30f] Merge pull request [#598] from pinchtab/feat/screencast-interactivity
• [e2af8d] Merge pull request [#599] from pinchtab/fix/e2e-cloak-ghostchrome-stock-image
• [547461] Merge pull request [#600] from pinchtab/fix/e2e-cloak-stock-tag
• [af1b55] Merge pull request [#601] from pinchtab/fix/browser-discovery-doctor-and-docs
• [e6e7de] chore(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 in /npm
• [a622c9] feat: add cloak browser support and browser abstraction
• [0d57b2] feat: add opt-in file:// navigation scheme gated by security.allowFileScheme
• [011663] feat: add target-aware browser orchestration
• [ef8994] feat: cloakbrowser support basics
• [291ea7] feat: cloakbrowser support with provider runtime abstraction
• [52d075] feat: forward held modifiers through the screencast pointer path
• [d1f97b] feat: harden humanized click dialogs and stealth provider routing
• [c2d5b5] feat: keep the screencast stream alive and more responsive
• [0e3ca0] feat: route /capture and pinchtab_capture per-browser
• [2b2298] feat: silent-drop recovery + stealth-score measurement tooling
• [d2f72d] feat: support held-modifier keyboard chords through the live input path
• [ae4a17] fix upload selectors in shadow roots
• [0ac312] fix: actionable IDPI block, clean server restart, and config show allowlist
• [34fe19] fix: align doctor, mcp tools, and cli with browser abstraction
• [1b3df6] fix: align health auth and browser preflight
• [a6829b] fix: build cloak provider image with --load so compose can find it locally
• [954ed5] fix: build stock e2e image outside cloak override
• [38545e] fix: build stock pinchtab image for keep-stock services in cloak e2e lane
• [c8d820] fix: bump openclaw to 2026.6.9 and fix declaration-emit type error
• [998330] fix: coordinate per-tab fetch domain between routes, credentials listeners, and proxy auth
• [c05966] fix: disable --in-process-gpu by default to avoid chrome 148 headless crash
• [918cc4] fix: dispatch modifier keys as key events instead of literal text
• [2501e0] fix: enforce attach allowlist on legacy CDP path and split runtime init
• [d85103] fix: fail fast on new-tab creation under memory pressure instead of hanging 60s
• [ca9e99] fix: fail fast with the browser cause on the api proxy path, not an opaque 503
• [e7577a] fix: harden orchestrator target selection and fallback routing
• [f157bd] fix: improve browser discovery, doctor diagnostics, and setup docs
• [c58028] fix: keep fromSurface=true for scale and beyondViewport captures
• [f39e3d] fix: keep headless screencast on polling for reliable frames
• [6457e0] fix: keep last step record per id in opt merge-reports and verify-answers
• [eaa516] fix: mask sensitive config values and annotate trusted subprocess launches
• [afb29a] fix: pin legacy-vs-targets config precedence and align conflict warning
• [fff21d] fix: pin smoke-plugin agent model to current sonnet and list available models
• [5db678] fix: record valid mp4/webm and honor gif scale at full resolution
• [d33697] fix: reset reconnect budget on manual screencast retry
• [5b7a93] fix: resolve plain css selectors inside open shadow roots
• [b08e72] fix: satisfy react-hooks/exhaustive-deps in useActivityDerivation
• [5abb8d] fix: scale screencast clicks into the css viewport
• [e22a3d] fix: smoother onboarding from persona testing (session autostart, help, allowlist, hints)
• [0fb369] fix: trust all rfc1918 ranges in smoke-config trustedResolveCIDRs
• [993b6e] fix: two-phase static-first navigate, credentials coordination, and nav guard hardening
• [2897f1] fix: validate unknown browser names before running-browser conflict check
• [ff0353] fix: warn when a running server enforces stale security config (m4)
• [80254f] refactor: browser routing around provider runtimes
• [44299b] refactor: finish browser abstraction cleanup
• [b8efe4] refactor: finish chrome-to-browser rename across tests and handlers
• [a16946] refactor: remove redundant comments across codebase
• [21c231] refactor: rename ensureChrome to ensureBrowser and thread effective config
• [d23906] refactor: route upload through the provider runtime abstraction
• [f0eb2d] refactor: split chrome instance and ghost-chrome adapter into focused files
• [41ae6e] test: add docker soak/stability lane and persona onboarding lane
• [3556cf] test: add e2e for upload into a file input in an open shadow root
• [2544a5] test: align chrome launch-contract test with headless-gated UA pinning
• [e415c3] test: align screencast tile tests with new defaults and auto-reconnect
• [c7281d] test: silence screencast retry fallback noise
• [58055f] test: use awk not python3 in screencast e2e (runner lacks python3)
• [a23e7b] test: verify typing lands after a scaled screencast click