Garry Tan dc356733ff feat(server): add pty-session-cookie module for the Terminal tab ... Mirrors `sse-session-cookie.ts` exactly. Mints short-lived 30-min HttpOnly cookies for authenticating the Terminal-tab WebSocket upgrade against the terminal-agent. Same TTL, same opportunistic-pruning shape, same "scoped tokens never valid as root" invariant. Two registries instead of one because the cookie names are different (`gstack_sse` vs `gstack_pty`) and the token spaces must not overlap. No callers yet — wired up in the next commit.		2026-04-25 12:33:28 -07:00
..
activity.ts	…
audit.ts	feat(browse): Puppeteer parity — load-html, screenshot --selector, viewport --scale, file:// (v1.1.0.0) (#1062)	2026-04-18 23:25:33 +08:00
browser-manager.ts	feat(browse): Puppeteer parity — load-html, screenshot --selector, viewport --scale, file:// (v1.1.0.0) (#1062)	2026-04-18 23:25:33 +08:00
buffers.ts	…
bun-polyfill.cjs	…
cdp-inspector.ts	…
cli.ts	feat(v1.4.0.0): /make-pdf — markdown to publication-quality PDFs (#1086)	2026-04-20 13:20:30 +08:00
commands.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
config.ts	…
content-security.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
cookie-import-browser.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
cookie-picker-routes.ts	community wave: 6 PRs + hardening (v0.18.1.0) (#1028)	2026-04-17 00:45:13 -07:00
cookie-picker-ui.ts	…
error-handling.ts	…
find-browse.ts	…
media-extract.ts	…
meta-commands.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
network-capture.ts	…
path-security.ts	…
platform.ts	…
pty-session-cookie.ts	feat(server): add pty-session-cookie module for the Terminal tab	2026-04-25 12:33:28 -07:00
read-commands.ts	…
security-bunnative.ts	feat(security): ML prompt injection defense for sidebar (v1.4.0.0) (#1089)	2026-04-20 22:18:37 +08:00
security-classifier.ts	v1.6.4.0: cut Haiku classifier FP from 44% to 23%, gate now enforced (#1135)	2026-04-23 10:23:40 -07:00
security.ts	v1.6.4.0: cut Haiku classifier FP from 44% to 23%, gate now enforced (#1135)	2026-04-23 10:23:40 -07:00
server.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
sidebar-agent.ts	feat(security): ML prompt injection defense for sidebar (v1.4.0.0) (#1089)	2026-04-20 22:18:37 +08:00
sidebar-utils.ts	…
snapshot.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
sse-session-cookie.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
tab-session.ts	feat(browse): Puppeteer parity — load-html, screenshot --selector, viewport --scale, file:// (v1.1.0.0) (#1062)	2026-04-18 23:25:33 +08:00
token-registry.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
tunnel-denial-log.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00
url-validation.ts	feat(browse): Puppeteer parity — load-html, screenshot --selector, viewport --scale, file:// (v1.1.0.0) (#1062)	2026-04-18 23:25:33 +08:00
welcome.html	…
write-commands.ts	security: tunnel dual-listener + SSRF + envelope + path wave (v1.6.0.0) (#1137)	2026-04-21 21:58:27 -07:00