feat: add Chrome extension browser relay

src/browser/client-fetch.ts

@@ -1,4 +1,24 @@
 import { extractErrorCode, formatErrorMessage } from "../infra/errors.js";
+import { loadConfig } from "../config/config.js";
+import { resolveBrowserConfig } from "./config.js";
+
+let cachedConfigToken: string | null | undefined = undefined;
+
+function getBrowserControlToken(): string | null {
+  const env = process.env.CLAWDBOT_BROWSER_CONTROL_TOKEN?.trim();
+  if (env) return env;
+
+  if (cachedConfigToken !== undefined) return cachedConfigToken;
+  try {
+    const cfg = loadConfig();
+    const resolved = resolveBrowserConfig(cfg.browser);
+    const token = resolved.controlToken?.trim() || "";
+    cachedConfigToken = token ? token : null;
+  } catch {
+    cachedConfigToken = null;
+  }
+  return cachedConfigToken;
+}
 
 function unwrapCause(err: unknown): unknown {
   if (!err || typeof err !== "object") return null;
@@ -43,7 +63,23 @@ export async function fetchBrowserJson<T>(
   const t = setTimeout(() => ctrl.abort(), timeoutMs);
   let res: Response;
   try {
-    res = await fetch(url, { ...init, signal: ctrl.signal } as RequestInit);
+    const token = getBrowserControlToken();
+    const mergedHeaders = (() => {
+      if (!token) return init?.headers;
+      const h = new Headers(init?.headers ?? {});
+      if (!h.has("Authorization")) {
+        h.set("Authorization", `Bearer ${token}`);
+      }
+      return h;
+    })();
+    res = await fetch(
+      url,
+      {
+        ...init,
+        ...(mergedHeaders ? { headers: mergedHeaders } : {}),
+        signal: ctrl.signal,
+      } as RequestInit,
+    );
   } catch (err) {
     throw enhanceBrowserFetchError(url, err, timeoutMs);
   } finally {