@openclaw/diffs 2026.10.5-beta.4 → 2026.10.10-beta.2

package/README.md

@@ -224,7 +224,7 @@ diff --git a/src/example.ts b/src/example.ts
 - Viewer HTML and metadata are ephemeral SQLite plugin blobs. The URL token is returned to the caller while SQLite stores only its SHA-256 hash.
 - Rendered PNG/PDF files remain temporary materializations in `$TMPDIR/openclaw-diffs` because delivery APIs require a file path. No JSON metadata sidecars are written or imported.
 - Default viewer URLs use `gateway.publicOrigin` when configured, then the existing bind-aware Gateway fallback. Plugin `viewerBaseUrl` and per-call `baseUrl` take precedence.
-- If `gateway.trustedProxies` includes loopback for a same-host proxy (for example Tailscale Serve), raw `127.0.0.1` viewer requests without forwarded client-IP headers fail closed by design.
+- If `gateway.trustedProxies` includes loopback for a same-host proxy (for example Tailscale Serve), raw `127.0.0.1` viewer requests without forwarded client-IP headers are rejected by design.
 - In that topology, prefer `mode=file` / `mode=both` for attachments, or intentionally enable remote viewers and set plugin `viewerBaseUrl` (or pass a proxy/public `baseUrl`) when you need a shareable viewer URL.
 - Remote viewer misses are throttled to reduce token-guess abuse.
 - PNG or PDF rendering requires a Chromium-compatible browser. Set `browser.executablePath` if auto-detection is not enough.

package/dist/.setup/{browser.runtime-BfvyJ76b.mjs → browser.runtime-DP8xInXM.mjs}

@@ -1,4 +1,4 @@
-import { a as getServedViewerAsset, i as getServedLanguagePackViewerAsset, n as VIEWER_ASSET_PREFIX, t as LANGUAGE_PACK_VIEWER_ASSET_PREFIX } from "./viewer-assets-C646cpoV.mjs";
+import { a as getServedViewerAsset, i as getServedLanguagePackViewerAsset, n as VIEWER_ASSET_PREFIX, t as LANGUAGE_PACK_VIEWER_ASSET_PREFIX } from "./viewer-assets-D_VrsDqE.mjs";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { constants } from "node:fs";
 import path from "node:path";
@@ -9,13 +9,11 @@ import os from "node:os";
 import { chromium } from "playwright-core";
 //#region extensions/diffs/src/browser.runtime.ts
 const BROWSER_IDLE_MS = 3e4;
-const SHARED_BROWSER_KEY = "__default__";
 const IMAGE_SIZE_LIMIT_ERROR = "Diff frame did not render within image size limits.";
 const PDF_REFERENCE_PAGE_HEIGHT_PX = 1056;
 const MAX_PDF_PAGES = 50;
 const LOCAL_VIEWER_BASE_HREF = "http://127.0.0.1/plugins/diffs/view/local/local";
 let sharedBrowserState = null;
-let executablePathCache = null;
 var PlaywrightDiffScreenshotter = class {
 	constructor(params) {
 		this.config = params.config;
@@ -209,27 +207,6 @@ function injectBaseHref(html) {
 	return html.replace("<head>", `<head><base href="${LOCAL_VIEWER_BASE_HREF}" />`);
 }
 async function resolveBrowserExecutablePath(config) {
-	const cacheKey = JSON.stringify({
-		configPath: config.browser?.executablePath?.trim() || "",
-		env: [
-			process.env.OPENCLAW_BROWSER_EXECUTABLE_PATH ?? "",
-			process.env.BROWSER_EXECUTABLE_PATH ?? "",
-			process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH ?? ""
-		],
-		path: process.env.PATH ?? ""
-	});
-	if (executablePathCache?.key === cacheKey) return await executablePathCache.valuePromise;
-	const valuePromise = resolveBrowserExecutablePathUncached(config).catch((error) => {
-		if (executablePathCache?.valuePromise === valuePromise) executablePathCache = null;
-		throw error;
-	});
-	executablePathCache = {
-		key: cacheKey,
-		valuePromise
-	};
-	return await valuePromise;
-}
-async function resolveBrowserExecutablePathUncached(config) {
 	const configPath = config.browser?.executablePath?.trim();
 	if (configPath) {
 		await assertExecutable(configPath, "browser.executablePath");
@@ -244,33 +221,26 @@ async function resolveBrowserExecutablePathUncached(config) {
 	for (const candidate of await collectExecutableCandidates()) if (await isExecutable(candidate)) return candidate;
 }
 async function acquireSharedBrowser(config) {
-	const executablePath = await resolveBrowserExecutablePath(config);
-	const desiredKey = executablePath || SHARED_BROWSER_KEY;
-	if (sharedBrowserState && sharedBrowserState.key !== desiredKey) await closeSharedBrowser();
 	if (!sharedBrowserState) {
-		const browserPromise = chromium.launch({
+		const browserPromise = resolveBrowserExecutablePath(config).then((executablePath) => chromium.launch({
 			headless: true,
 			...executablePath ? { executablePath } : {},
 			args: ["--disable-dev-shm-usage"]
-		}).then((browser) => {
-			if (sharedBrowserState?.browserPromise === browserPromise) {
-				sharedBrowserState.browser = browser;
-				browser.on("disconnected", () => {
-					if (sharedBrowserState?.browser === browser) {
-						clearIdleTimer(sharedBrowserState);
-						sharedBrowserState = null;
-					}
-				});
-			}
+		})).then((browser) => {
+			browser.on("disconnected", () => {
+				if (sharedBrowserState?.browserPromise === browserPromise) {
+					clearIdleTimer(sharedBrowserState);
+					sharedBrowserState = null;
+				}
+			});
 			return browser;
 		}).catch((error) => {
-			if (sharedBrowserState?.browserPromise === browserPromise) sharedBrowserState = null;
+			sharedBrowserState = null;
 			throw error;
 		});
 		sharedBrowserState = {
 			browserPromise,
 			idleTimer: null,
-			key: desiredKey,
 			users: 0
 		};
 	}
@@ -278,13 +248,10 @@ async function acquireSharedBrowser(config) {
 	const state = sharedBrowserState;
 	const browser = await state.browserPromise;
 	state.users += 1;
-	let released = false;
 	return {
 		browser,
 		release: async () => {
-			if (released) return;
-			released = true;
-			state.users = Math.max(0, state.users - 1);
+			state.users -= 1;
 			if (state.users === 0) scheduleIdleBrowserClose(state);
 		}
 	};
@@ -306,7 +273,7 @@ async function closeSharedBrowser() {
 	if (!state) return;
 	sharedBrowserState = null;
 	clearIdleTimer(state);
-	await (state.browser ?? await state.browserPromise.catch(() => null))?.close().catch(() => {});
+	await (await state.browserPromise.catch(() => null))?.close().catch(() => {});
 }
 async function collectExecutableCandidates() {
 	const candidates = /* @__PURE__ */ new Set();

package/dist/.setup/{viewer-assets-C646cpoV.mjs → viewer-assets-D_VrsDqE.mjs}

@@ -25,25 +25,20 @@ function createViewerAssetHandler(prefix, relativePaths, optional = false) {
 	const loaderPath = `${prefix}viewer.js`;
 	const runtimePath = `${prefix}viewer-runtime.js`;
 	let cache = null;
-	const loadRuntimeAssets = async (runtimeUrl) => {
-		const cached = cache;
+	const loadRuntimeAssets = async () => {
+		const runtimeUrl = await resolveRuntimeFileUrl(relativePaths);
 		const runtimeFilePath = fileURLToPath(runtimeUrl);
-		const runtimeStat = await fs.stat(runtimeFilePath);
-		if (cached && cached.mtimeMs === runtimeStat.mtimeMs) return cached;
 		const runtimeBody = await fs.readFile(runtimeFilePath);
 		const hash = crypto.createHash("sha1").update(runtimeBody).digest("hex").slice(0, 12);
-		cache = {
-			mtimeMs: runtimeStat.mtimeMs,
+		return {
 			runtimeBody,
 			loaderBody: `import "${VIEWER_RUNTIME_RELATIVE_IMPORT_PATH}?v=${hash}";\n`
 		};
-		return cache;
 	};
 	return async (pathname) => {
 		if (pathname !== loaderPath && pathname !== runtimePath) return null;
 		try {
-			const runtimeUrl = await resolveRuntimeFileUrl(relativePaths);
-			const assets = await loadRuntimeAssets(runtimeUrl);
+			const assets = cache ??= await loadRuntimeAssets();
 			return {
 				body: pathname === loaderPath ? assets.loaderBody : assets.runtimeBody,
 				contentType: "text/javascript; charset=utf-8"