browser-cli

Automatisation/browser-cli

Fork 0

Files

T

History

daniel156161 c1a5ef9dd7

Testing / test (push) Successful in 41s

Details

Package Extension / package-extension (push) Successful in 35s

Details

Build & Publish Package / publish (push) Successful in 46s

Details

feat: token-auth removal, security hardening, Stripe-style compat layer (v0.9.2)

- Remove token auth entirely; only Ed25519 pubkey auth or --no-auth
- Add 32 MB message-size cap in serve and client (DoS protection)
- Set Unix socket to 0o600 after bind in native_host (multi-user hardening)
- Enforce browser-cli/VERSION user-agent on all TCP connections
- Add PROTOCOL_MIN_CLIENT check (>= 0.9.0) server- and client-side
- Include server_version + min_client_version in challenge frame
- Add browser_cli/version_manager.py: parse_version, get_installed_version
- Add browser_cli/compat.py: Stripe-style versioning layer with adapt_request
  / adapt_response hooks; baseline 0.9.2, no shims needed yet
- Fix BrowserCLI key handling: no Path() wrap for agent specs
- Fix _multi_browser_targets() to forward key to remote_browser_targets()

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-02 21:59:46 +02:00

conftest.py

allow to ask for remote host profiles and save token on first connection for later use

2026-05-01 19:07:04 +02:00

test_api.py

feat: token-auth removal, security hardening, Stripe-style compat layer (v0.9.2)

2026-05-02 21:59:46 +02:00

test_cli.py

feat: token-auth removal, security hardening, Stripe-style compat layer (v0.9.2)

2026-05-02 21:59:46 +02:00

test_client.py

feat: token-auth removal, security hardening, Stripe-style compat layer (v0.9.2)