Garry Tan 480f4bb23d fix: require auth on cookie-picker data routes (CRITICAL-01) ... - Add Bearer token auth gate on all /cookie-picker/* data/action routes - GET /cookie-picker HTML page stays unauthenticated (UI shell) - Token embedded in served HTML for picker's fetch calls - CORS preflight now allows Authorization header		2026-03-27 22:13:48 -07:00
..
bin	feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)	2026-03-19 18:20:50 -07:00
scripts	fix: Windows support — Node.js server fallback for Playwright (#255)	2026-03-20 12:22:11 -07:00
src	fix: require auth on cookie-picker data routes (CRITICAL-01)	2026-03-27 22:13:48 -07:00
test	feat: community PRs — faster install, skill namespacing, uninstall, Codex fallback, Windows fix, Python patterns (v0.12.9.0) (#561)	2026-03-27 00:44:37 -06:00
SKILL.md	fix: security audit compliance — credentials, telemetry, bun pin, untrusted warning (v0.12.12.0) (#574)	2026-03-27 12:06:58 -06:00
SKILL.md.tmpl	feat: worktree isolation for E2E tests + infrastructure elegance (v0.11.12.0) (#425)	2026-03-23 23:05:22 -07:00