Garry Tan 52226dafe2 fix: restore token in /health for localhost extension auth ... The CSO security fix stripped the token from /health to prevent leaking when tunneled. But the extension needs it to authenticate on localhost. Now returns token only when not tunneled (safe: localhost-only path). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-05 17:58:24 -07:00
..
bin	feat: multi-agent support — gstack works on Codex, Gemini CLI, and Cursor (v0.9.0) (#226)	2026-03-19 18:20:50 -07:00
scripts	fix: Windows support — Node.js server fallback for Playwright (#255)	2026-03-20 12:22:11 -07:00
src	fix: restore token in /health for localhost extension auth	2026-04-05 17:58:24 -07:00
test	test: comprehensive content security tests (47 tests)	2026-04-05 11:25:19 -07:00
SKILL.md	feat: OpenClaw integration v2 — prompt is the bridge (v0.15.9.0) (#816)	2026-04-05 02:23:59 -07:00
SKILL.md.tmpl	feat: sidebar CSS inspector + per-tab agents (v0.13.9.0) (#650)	2026-03-30 12:51:05 -06:00