FreeComputerUse 0.2.23

This security patch prevents common OAuth and anti-CSRF transaction values from
appearing in model context or saved browser history.

What's new

Redact URL query and fragment values named state, nonce, csrf, xsrf,
or sid before storing traces, sending prompts, or displaying CLI/dashboard
history. Existing redaction for credentials, one-time codes, payment data and
bank identifiers remains in place.
Keep the original URL for browser navigation; redaction changes only the
recorded and provider-facing representation. Ordinary search values remain
available.

Requires Node.js 22.13+, npm, and an installed browser.

npm install --global free-computer-use@0.2.23
FCU_BROWSER_CHANNEL=chrome agent doctor
FCU_BROWSER_CHANNEL=chrome agent ui

Open http://127.0.0.1:4318. No provider key is needed for built-in reading,
link extraction, or the synthetic practice table.