openclaw-navigator 5.3.0 → 5.3.2

package/cli.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 /**
- * openclaw-navigator v5.2.0
+ * openclaw-navigator v5.3.2
  *
  * One-command bridge + tunnel for the Navigator browser.
  * Starts a local bridge, creates a Cloudflare tunnel automatically,
@@ -966,11 +966,13 @@ function handleRequest(req, res) {
     return;
   }
 
-  // ── Fallback: proxy unmatched paths → OC Web UI (for static assets) ──
-  // The web UI at localhost:4000 may serve assets at /_next/*, /static/*, etc.
-  // These don't start with /ui/ but still need to reach the web UI server.
+  // ── Fallback: proxy unmatched paths → OC Web UI ──────────────────────
+  // Catches /login, /_next/*, /static/*, /favicon.ico, etc.
+  // MUST apply the same cookie/redirect/forwarded-header treatment as /ui/*
+  // or login won't work (session cookies get lost through the tunnel).
   {
     const targetURL = `${path}${url.search}`;
+    const incomingHost = req.headers.host || "localhost";
 
     const proxyOpts = {
       hostname: "127.0.0.1",
@@ -980,14 +982,38 @@ function handleRequest(req, res) {
       headers: {
         ...req.headers,
         host: `127.0.0.1:${ocUIPort}`,
+        "x-forwarded-host": incomingHost,
+        "x-forwarded-proto": activeTunnelURL ? "https" : "http",
+        "x-forwarded-for": req.socket.remoteAddress || "127.0.0.1",
       },
     };
 
     const proxyReq = httpRequest(proxyOpts, (proxyRes) => {
       const headers = { ...proxyRes.headers };
+
+      // CORS
       headers["access-control-allow-origin"] = "*";
       headers["access-control-allow-methods"] = "GET, POST, PUT, DELETE, OPTIONS";
-      headers["access-control-allow-headers"] = "Content-Type, Authorization";
+      headers["access-control-allow-headers"] = "Content-Type, Authorization, Cookie";
+      headers["access-control-allow-credentials"] = "true";
+
+      // Fix redirects — strip localhost prefix so browser stays on tunnel URL
+      if (headers.location) {
+        headers.location = headers.location
+          .replace(`http://127.0.0.1:${ocUIPort}`, "")
+          .replace(`http://localhost:${ocUIPort}`, "");
+      }
+
+      // Fix cookies — remove domain restriction + secure flag for tunnel access
+      if (headers["set-cookie"]) {
+        const cookies = Array.isArray(headers["set-cookie"])
+          ? headers["set-cookie"]
+          : [headers["set-cookie"]];
+        headers["set-cookie"] = cookies.map((c) =>
+          c.replace(/;\s*domain=[^;]*/gi, "").replace(/;\s*secure/gi, ""),
+        );
+      }
+
       res.writeHead(proxyRes.statusCode ?? 502, headers);
       proxyRes.pipe(res, { end: true });
     });
@@ -1248,7 +1274,7 @@ module.exports = {
     });
 
     gwSocket.on("error", (err) => {
-      console.log(`  ${DIM}WS proxy: gateway unreachable — ${err.message}${RESET}`);
+      warn(`WS proxy: gateway on port ${ocGatewayPort} unreachable — ${err.message}`);
       socket.destroy();
     });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-navigator",
-  "version": "5.3.0",
+  "version": "5.3.2",
   "description": "One-command bridge + tunnel for the Navigator browser — works on any machine, any OS",
   "keywords": [
     "browser",