@askjo/camofox-browser 1.8.4 → 1.8.7

package/README.md

@@ -412,7 +412,7 @@ To file crash reports in your own GitHub repo instead of `jo-inc/camofox-browser
 1. **Create a GitHub App** — [Settings → Developer settings → GitHub Apps → New](https://github.com/settings/apps/new)
    - Permissions: **Repository → Issues → Read & Write**
    - Uncheck **Webhook → Active** (not needed)
-   - Click **Generate a private key** — downloads a `.pem` file
+   - Click **Generate a key** — downloads a `.pem` file
    - Install the app on your target repo (Install App → select repo)
    - Note your **App ID** (number on the app's General page) and **Installation ID** (from the URL after installing: `github.com/settings/installations/{id}`)
 

package/lib/reporter.js

@@ -459,35 +459,15 @@ class RateLimiter {
 // Crash relay client
 // ============================================================================
 
-// Reports are sent to a Cloudflare Worker relay that holds the GitHub App
-// private key. No secrets are shipped in this package.
+// Reports are sent to a Cloudflare Worker relay. All credentials are
+// environment secrets on the relay — nothing sensitive ships in this package.
 //
 // Default relay: https://camofox-crash-relay.askjo.workers.dev
 // Override:      CAMOFOX_CRASH_REPORT_URL=https://your-own-relay/report
 //
 // The relay source lives at workers/crash-reporter/index.ts in this repo.
-// You can verify what the relay does:
-//   1. GET https://camofox-crash-relay.askjo.workers.dev/source → { commit, sha256 }
-//   2. Compare sha256 against: sha256sum workers/crash-reporter/index.ts
-//
-// --- BEGIN RELAY SOURCE (workers/crash-reporter/index.ts) ---
-// The full relay is a single Cloudflare Worker (~150 lines):
-//   POST /report  — validates payload, rate-limits by IP, deduplicates by
-//                   stack signature, mints a GitHub App JWT from env secrets,
-//                   and creates/comments on GitHub Issues.
-//   GET  /source  — returns { commit, sha256 } for verification.
-//   GET  /health  — returns { status: "ok" }.
-//
-// Env secrets (Cloudflare dashboard, never in code):
-//   GH_APP_ID, GH_INSTALL_ID, GH_PRIVATE_KEY
-//
-// Rate limit: 30 reports/IP/hour (in-memory sliding window).
-// Dedup: same signature skipped for 1 hour.
-// Payload validation: type must match known patterns, signature must be
-//   8-char hex, title ≤256 chars, body ≤64KB, labels ≤5 strings.
-//
+// Verify: GET /source returns { commit, sha256 } to compare against the repo.
 // Full source: https://github.com/jo-inc/camofox-browser/blob/main/workers/crash-reporter/index.ts
-// --- END RELAY SOURCE ---
 
 const DEFAULT_RELAY_URL = 'https://camofox-crash-relay.askjo.workers.dev/report';
 const FETCH_TIMEOUT_MS = 5000;

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "camofox-browser",
   "name": "Camofox Browser",
   "description": "Anti-detection browser automation for AI agents using Camoufox (Firefox-based)",
-  "version": "1.8.4",
+  "version": "1.8.7",
   "configSchema": {
     "type": "object",
     "properties": {
@@ -44,13 +44,31 @@
         "type": "number",
         "description": "Node.js V8 heap limit in MB",
         "default": 128
+      },
+      "apiKey": {
+        "type": "string",
+        "description": "Secret key for cookie import endpoint. Cookie import is disabled if unset. Set via CAMOFOX_API_KEY env var."
+      },
+      "accessKey": {
+        "type": "string",
+        "description": "If set, all routes (except /health) require Authorization: Bearer <key>. Set via CAMOFOX_ACCESS_KEY env var."
+      },
+      "crashReportEnabled": {
+        "type": "boolean",
+        "description": "Enable anonymized crash/hang reporting to the relay. Set false to disable all outbound crash reports.",
+        "default": true
+      },
+      "crashReportUrl": {
+        "type": "string",
+        "description": "Crash report relay endpoint. Override to point to a self-hosted relay. Set via CAMOFOX_CRASH_REPORT_URL env var.",
+        "default": "https://camofox-crash-relay.askjo.workers.dev/report"
       }
     },
     "additionalProperties": false
   },
   "telemetry": {
     "crashReporter": {
-      "description": "Anonymized crash/hang reports sent to a Cloudflare Worker relay. No secrets or private keys are shipped in this package.",
+      "description": "Anonymized crash/hang reports sent to a Cloudflare Worker relay. All credentials are environment secrets on the relay — nothing sensitive ships in this package.",
       "enabled": true,
       "optOut": "CAMOFOX_CRASH_REPORT_ENABLED=false",
       "relay": "https://camofox-crash-relay.askjo.workers.dev/report",
@@ -105,6 +123,21 @@
     "maxOldSpaceSize": {
       "label": "Node Heap Limit (MB)",
       "placeholder": "128"
+    },
+    "apiKey": {
+      "label": "Cookie Import API Key (CAMOFOX_API_KEY)",
+      "placeholder": "Leave empty to disable cookie import"
+    },
+    "accessKey": {
+      "label": "Global Access Key (CAMOFOX_ACCESS_KEY)",
+      "placeholder": "Leave empty for localhost-only access"
+    },
+    "crashReportEnabled": {
+      "label": "Enable Crash Reporting"
+    },
+    "crashReportUrl": {
+      "label": "Crash Report Relay URL",
+      "placeholder": "https://camofox-crash-relay.askjo.workers.dev/report"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askjo/camofox-browser",
-  "version": "1.8.4",
+  "version": "1.8.7",
   "description": "Headless browser automation server and OpenClaw plugin for AI agents - anti-detection, element refs, and session isolation",
   "type": "module",
   "main": "server.js",