openclaw/extensions/browser
Zee Zheng 8be581cbf8
fix(browser): allow inbound media uploads
Allow the browser upload tool to resolve OpenClaw-managed inbound media refs such as `media://inbound/<id>` and sandbox-relative `media/inbound/<id>` while preserving the existing upload-root path contract.

Keep upload-root files ahead of sandbox-relative inbound fallback, reject nested absolute inbound media files, and validate raw `media://` paths before URL normalization so traversal-shaped refs cannot resolve to direct media ids.

Verification:
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=verbose`
- `OPENCLAW_VITEST_MAX_WORKERS=1 node scripts/run-vitest.mjs extensions/browser/src/browser/paths.test.ts --reporter=dot`
- `OPENCLAW_HEAVY_CHECK_LOCK_SCOPE=worktree node scripts/run-tsgo.mjs -p test/tsconfig/tsconfig.extensions.test.json --incremental --tsBuildInfoFile .artifacts/tsgo-cache/extensions-test.tsbuildinfo`
- `pnpm lint --threads=8`
- `.agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main`
- `git diff --check`
- GitHub PR checks on be08e6c8a8: dependency-guard, check-lint, check-test-types, check-additional-extension-bundled, checks-fast-contracts-plugins-a, checks-fast-contracts-plugins-b all passed.

Fixes #83544.

Co-authored-by: Zee Zheng <zheng.zuo0@gmail.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-30 23:49:07 +01:00
..
skills/browser-automation docs(browser): explain actionable aria snapshot refs 2026-04-25 09:51:34 +01:00
src fix(browser): allow inbound media uploads 2026-05-30 23:49:07 +01:00
browser-bridge.ts
browser-cdp.ts
browser-config.ts fix(plugin-sdk): align browser tab cleanup type exports 2026-04-25 03:53:21 +01:00
browser-control-auth.ts
browser-doctor.ts fix(doctor): archive legacy clawd browser profile residue (#83230) 2026-05-17 19:45:03 -07:00
browser-host-inspection.ts
browser-maintenance.ts
browser-profiles.ts fix: align browser profile facade exports 2026-04-25 08:46:13 +01:00
browser-runtime-api.ts
cli-metadata.ts fix(browser): lazy-load browser CLI runtime 2026-04-25 11:40:20 +01:00
index.test.ts perf: reduce gateway startup sidecar overhead 2026-05-28 17:05:19 +01:00
index.ts
openclaw.plugin.json fix: enforce plugin tool manifest contracts 2026-05-02 06:21:08 +01:00
package.json chore(release): bump version to 2026.5.30 2026-05-30 06:49:13 +01:00
plugin-registration.ts perf(browser): cache registration runtime import 2026-05-30 13:00:30 +02:00
register.runtime.ts fix(browser): lazy-load browser CLI runtime 2026-04-25 11:40:20 +01:00
runtime-api.ts refactor: narrow extension runtime api barrels 2026-04-27 20:34:35 +01:00
setup-api.ts refactor: reduce plugin sdk surface 2026-05-10 12:37:10 +01:00
test-fetch.ts perf: slim browser tab tests 2026-04-23 21:07:11 +01:00
test-support.ts refactor: reduce plugin sdk surface 2026-05-10 12:37:10 +01:00
tsconfig.json fix(ci): restore extension package boundary excludes 2026-04-29 00:57:08 -07:00