@browserbridge/bbx 1.0.0 → 1.1.0

package/packages/protocol/src/protocol.js

@@ -19,7 +19,7 @@ import {
   DEFAULT_WAIT_TIMEOUT_MS,
 } from './defaults.js';
 import { BridgeError, ERROR_CODES, getErrorRecovery } from './errors.js';
-import { BRIDGE_METHODS, createBridgeMethodGroups } from './registry.js';
+import { BRIDGE_METHODS, METHOD_SET, createBridgeMethodGroups } from './registry.js';
 
 /** @typedef {import('./types.js').AccessibilityTreeParams} AccessibilityTreeParams */
 /** @typedef {import('./types.js').BridgeFailureResponse} BridgeFailureResponse */
@@ -28,6 +28,7 @@ import { BRIDGE_METHODS, createBridgeMethodGroups } from './registry.js';
 /** @typedef {import('./types.js').BridgeRequest} BridgeRequest */
 /** @typedef {import('./types.js').BridgeSuccessResponse} BridgeSuccessResponse */
 /** @typedef {import('./types.js').CheckedActionParams} CheckedActionParams */
+/** @typedef {import('./types.js').CdpDispatchKeyEventParams} CdpDispatchKeyEventParams */
 /** @typedef {import('./types.js').ConsoleParams} ConsoleParams */
 /** @typedef {import('./types.js').DomQueryParams} DomQueryParams */
 /** @typedef {import('./types.js').DragParams} DragParams */
@@ -41,6 +42,7 @@ import { BRIDGE_METHODS, createBridgeMethodGroups } from './registry.js';
 /** @typedef {import('./types.js').NetworkParams} NetworkParams */
 /** @typedef {import('./types.js').NormalizedAccessibilityTreeParams} NormalizedAccessibilityTreeParams */
 /** @typedef {import('./types.js').NormalizedCheckedAction} NormalizedCheckedAction */
+/** @typedef {import('./types.js').NormalizedCdpDispatchKeyEventParams} NormalizedCdpDispatchKeyEventParams */
 /** @typedef {import('./types.js').NormalizedConsoleParams} NormalizedConsoleParams */
 /** @typedef {import('./types.js').NormalizedDomQuery} NormalizedDomQuery */
 /** @typedef {import('./types.js').NormalizedDragParams} NormalizedDragParams */
@@ -114,8 +116,8 @@ export function createRequest({ id, method, tabId = null, params = {}, meta = {}
     params,
     meta: {
       protocol_version: PROTOCOL_VERSION,
-      ...meta
-    }
+      ...meta,
+    },
   });
 }
 
@@ -133,8 +135,8 @@ export function createSuccess(id, result, meta = {}) {
     error: null,
     meta: {
       protocol_version: PROTOCOL_VERSION,
-      ...meta
-    }
+      ...meta,
+    },
   };
 }
 
@@ -156,12 +158,12 @@ export function createFailure(id, code, message, details = null, meta = {}) {
       code,
       message,
       details,
-      ...(recovery && { recovery })
+      ...(recovery && { recovery }),
     },
     meta: {
       protocol_version: PROTOCOL_VERSION,
-      ...meta
-    }
+      ...meta,
+    },
   };
 }
 
@@ -180,45 +182,142 @@ export function validateBridgeRequest(request) {
     throw new BridgeError(ERROR_CODES.INVALID_REQUEST, 'Request id must be a non-empty string.');
   }
 
-  if (typeof candidate.method !== 'string' || !METHODS.includes(/** @type {BridgeMethod} */ (candidate.method))) {
-    throw new BridgeError(ERROR_CODES.INVALID_REQUEST, `Unsupported method: ${String(candidate.method)}`);
+  if (
+    typeof candidate.method !== 'string' ||
+    !METHOD_SET.has(/** @type {BridgeMethod} */ (candidate.method))
+  ) {
+    throw new BridgeError(
+      ERROR_CODES.INVALID_REQUEST,
+      `Unsupported method: ${String(candidate.method)}`
+    );
+  }
+
+  if (
+    candidate.meta != null &&
+    (typeof candidate.meta !== 'object' || Array.isArray(candidate.meta))
+  ) {
+    throw new BridgeError(ERROR_CODES.INVALID_REQUEST, 'Request meta must be an object.');
   }
 
-  const meta = candidate.meta && typeof candidate.meta === 'object'
-    ? /** @type {Record<string, unknown>} */ (candidate.meta)
-    : {};
+  const meta =
+    candidate.meta && typeof candidate.meta === 'object'
+      ? /** @type {Record<string, unknown>} */ (candidate.meta)
+      : {};
   if (candidate.session_id != null) {
-    throw new BridgeError(ERROR_CODES.INVALID_REQUEST, 'session_id is no longer supported. Use tab_id or window-scoped default routing.');
+    throw new BridgeError(
+      ERROR_CODES.INVALID_REQUEST,
+      'session_id is no longer supported. Use tab_id or window-scoped default routing.'
+    );
   }
   const parsedTabId = Number(candidate.tab_id);
 
+  const method = /** @type {BridgeMethod} */ (candidate.method);
+  const params =
+    candidate.params && typeof candidate.params === 'object'
+      ? /** @type {Record<string, unknown>} */ (candidate.params)
+      : {};
+
   return {
     id: candidate.id,
-    method: /** @type {BridgeMethod} */ (candidate.method),
+    method,
     tab_id: Number.isFinite(parsedTabId) && parsedTabId > 0 ? parsedTabId : null,
-    params: candidate.params && typeof candidate.params === 'object'
-      ? /** @type {Record<string, unknown>} */ (candidate.params)
-      : {},
+    params: normalizeRequestParams(method, params),
     meta: {
       ...meta,
-      protocol_version: typeof meta.protocol_version === 'string'
-        ? meta.protocol_version
-        : PROTOCOL_VERSION,
+      protocol_version:
+        typeof meta.protocol_version === 'string' ? meta.protocol_version : PROTOCOL_VERSION,
       token_budget: typeof meta.token_budget === 'number' ? meta.token_budget : null,
-      source: meta.source === 'cli' || meta.source === 'mcp' ? meta.source : undefined
-    }
+      source: meta.source === 'cli' || meta.source === 'mcp' ? meta.source : undefined,
+    },
   };
 }
 
+/**
+ * Normalize request params early so malformed payloads fail at the shared
+ * protocol boundary before daemon or extension dispatch.
+ *
+ * @param {BridgeMethod} method
+ * @param {Record<string, unknown>} params
+ * @returns {Record<string, unknown>}
+ */
+function normalizeRequestParams(method, params) {
+  switch (method) {
+    case 'dom.query':
+      return normalizeDomQuery(params);
+    case 'page.evaluate':
+      return normalizeEvaluateParams(params);
+    case 'page.get_console':
+      return normalizeConsoleParams(params);
+    case 'page.wait_for_load_state':
+      return normalizeWaitForLoadStateParams(params);
+    case 'page.get_storage':
+      return normalizeStorageParams(params);
+    case 'page.get_text':
+      return normalizePageTextParams(params);
+    case 'page.get_network':
+      return normalizeNetworkParams(params);
+    case 'navigation.navigate':
+    case 'navigation.reload':
+    case 'navigation.go_back':
+    case 'navigation.go_forward':
+      return normalizeNavigationAction(params);
+    case 'dom.wait_for':
+      return normalizeWaitForParams(params);
+    case 'dom.find_by_text':
+      return normalizeFindByTextParams(params);
+    case 'dom.find_by_role':
+      return normalizeFindByRoleParams(params);
+    case 'dom.get_html':
+      return normalizeGetHtmlParams(params);
+    case 'dom.get_accessibility_tree':
+      return normalizeAccessibilityTreeParams(params);
+    case 'styles.get_computed':
+    case 'styles.get_matched_rules':
+      return normalizeStyleQuery(params);
+    case 'viewport.scroll':
+      return normalizeViewportAction(params);
+    case 'viewport.resize':
+      return normalizeViewportResizeParams(params);
+    case 'input.click':
+    case 'input.focus':
+    case 'input.type':
+    case 'input.press_key':
+      return normalizeInputAction(params);
+    case 'cdp.dispatch_key_event':
+      return normalizeCdpDispatchKeyEventParams(params);
+    case 'input.set_checked':
+      return normalizeCheckedAction(params);
+    case 'input.select_option':
+      return normalizeSelectAction(params);
+    case 'input.hover':
+      return normalizeHoverParams(params);
+    case 'input.drag':
+      return normalizeDragParams(params);
+    case 'patch.apply_styles':
+    case 'patch.apply_dom':
+    case 'patch.list':
+    case 'patch.rollback':
+    case 'patch.commit_session_baseline':
+      return normalizePatchOperation(params);
+    case 'tabs.create':
+      return normalizeTabCreateParams(params);
+    case 'tabs.close':
+      return normalizeTabCloseParams(params);
+    default:
+      return params;
+  }
+}
+
 /**
  * @param {DomQueryParams} [params={}]
  * @returns {NormalizedDomQuery}
  */
 export function normalizeDomQuery(params = {}) {
   return {
-    selector: typeof params.selector === 'string' && params.selector.trim() ? params.selector : 'body',
+    selector:
+      typeof params.selector === 'string' && params.selector.trim() ? params.selector : 'body',
     withinRef: typeof params.withinRef === 'string' ? params.withinRef : null,
-    budget: applyBudget(params)
+    budget: applyBudget(params),
   };
 }
 
@@ -234,12 +333,15 @@ export function normalizeStyleQuery(params = {}) {
   );
   const elementRef = String(params.elementRef || target.elementRef || '');
   if (!elementRef && !target.selector) {
-    throw new BridgeError(ERROR_CODES.INVALID_REQUEST, 'elementRef or target is required for style queries.');
+    throw new BridgeError(
+      ERROR_CODES.INVALID_REQUEST,
+      'elementRef or target is required for style queries.'
+    );
   }
   return {
     elementRef,
     target,
-    properties: Array.isArray(params.properties) ? params.properties.filter(Boolean) : []
+    properties: Array.isArray(params.properties) ? params.properties.filter(Boolean) : [],
   };
 }
 
@@ -250,7 +352,7 @@ export function normalizeStyleQuery(params = {}) {
 function normalizeTarget(target) {
   return {
     elementRef: typeof target?.elementRef === 'string' ? target.elementRef : undefined,
-    selector: typeof target?.selector === 'string' ? target.selector : undefined
+    selector: typeof target?.selector === 'string' ? target.selector : undefined,
   };
 }
 
@@ -259,9 +361,7 @@ function normalizeTarget(target) {
  * @returns {NormalizedInputAction}
  */
 export function normalizeInputAction(params = {}) {
-  const button = params.button === 'middle' || params.button === 'right'
-    ? params.button
-    : 'left';
+  const button = params.button === 'middle' || params.button === 'right' ? params.button : 'left';
 
   return {
     target: normalizeTarget(
@@ -277,7 +377,55 @@ export function normalizeInputAction(params = {}) {
     key: typeof params.key === 'string' ? params.key : '',
     modifiers: Array.isArray(params.modifiers)
       ? params.modifiers.filter((modifier) => typeof modifier === 'string' && modifier.trim())
-      : []
+      : [],
+  };
+}
+
+/**
+ * @param {CdpDispatchKeyEventParams} [params={}]
+ * @returns {NormalizedCdpDispatchKeyEventParams}
+ */
+export function normalizeCdpDispatchKeyEventParams(params = {}) {
+  if (typeof params.key !== 'string' || !params.key.trim()) {
+    throw new BridgeError(ERROR_CODES.INVALID_REQUEST, 'key must be a non-empty string.');
+  }
+
+  if (
+    params.modifiers != null &&
+    typeof params.modifiers !== 'number' &&
+    !Array.isArray(params.modifiers)
+  ) {
+    throw new BridgeError(
+      ERROR_CODES.INVALID_REQUEST,
+      'modifiers must be an array of Alt, Control, Meta, Shift or a bitmask 0-15.'
+    );
+  }
+
+  if (
+    typeof params.modifiers === 'number' &&
+    (!Number.isInteger(params.modifiers) || params.modifiers < 0 || params.modifiers > 15)
+  ) {
+    throw new BridgeError(
+      ERROR_CODES.INVALID_REQUEST,
+      'modifiers must be an array of Alt, Control, Meta, Shift or a bitmask 0-15.'
+    );
+  }
+
+  if (Array.isArray(params.modifiers)) {
+    for (const modifier of params.modifiers) {
+      if (typeof modifier !== 'string' || !['Alt', 'Control', 'Meta', 'Shift'].includes(modifier)) {
+        throw new BridgeError(
+          ERROR_CODES.INVALID_REQUEST,
+          'modifiers must contain only Alt, Control, Meta, or Shift.'
+        );
+      }
+    }
+  }
+
+  return {
+    key: params.key,
+    code: typeof params.code === 'string' ? params.code.trim() : '',
+    modifiers: params.modifiers ?? [],
   };
 }
 
@@ -292,7 +440,7 @@ export function normalizeCheckedAction(params = {}) {
         ? /** @type {{ elementRef?: string, selector?: string }} */ (params.target)
         : undefined
     ),
-    checked: params.checked !== false
+    checked: params.checked !== false,
   };
 }
 
@@ -315,9 +463,9 @@ export function normalizeSelectAction(params = {}) {
       : [],
     indexes: Array.isArray(params.indexes)
       ? params.indexes
-        .map((index) => Number(index))
-        .filter((index) => Number.isInteger(index) && index >= 0)
-      : []
+          .map((index) => Number(index))
+          .filter((index) => Number.isInteger(index) && index >= 0)
+      : [],
   };
 }
 
@@ -335,7 +483,7 @@ export function normalizeViewportAction(params = {}) {
     top: Number.isFinite(Number(params.top)) ? Number(params.top) : 0,
     left: Number.isFinite(Number(params.left)) ? Number(params.left) : 0,
     behavior: params.behavior === 'smooth' ? 'smooth' : 'auto',
-    relative: Boolean(params.relative)
+    relative: Boolean(params.relative),
   };
 }
 
@@ -362,7 +510,7 @@ export function normalizeNavigationAction(params = {}) {
   return {
     url,
     waitForLoad: params.waitForLoad !== false,
-    timeoutMs: clampInt(params.timeoutMs, 500, 120_000, 15_000)
+    timeoutMs: clampInt(params.timeoutMs, 500, 120_000, 15_000),
   };
 }
 
@@ -373,17 +521,19 @@ export function normalizeNavigationAction(params = {}) {
 export function normalizePatchOperation(params = {}) {
   return {
     patchId: typeof params.patchId === 'string' ? params.patchId : null,
-    target: params.target && typeof params.target === 'object'
-      ? /** @type {Record<string, unknown>} */ (params.target)
-      : {},
+    target:
+      params.target && typeof params.target === 'object'
+        ? /** @type {Record<string, unknown>} */ (params.target)
+        : {},
     operation: typeof params.operation === 'string' ? params.operation : null,
     name: typeof params.name === 'string' ? params.name : null,
-    declarations: params.declarations && typeof params.declarations === 'object'
-      ? /** @type {Record<string, string>} */ (params.declarations)
-      : {},
+    declarations:
+      params.declarations && typeof params.declarations === 'object'
+        ? /** @type {Record<string, string>} */ (params.declarations)
+        : {},
     value: params.value ?? null,
     important: Boolean(params.important),
-    verify: Boolean(params.verify)
+    verify: Boolean(params.verify),
   };
 }
 
@@ -403,7 +553,7 @@ export function normalizeEvaluateParams(params = {}) {
     expression,
     awaitPromise: Boolean(params.awaitPromise),
     timeoutMs: clampInt(params.timeoutMs, 100, 30_000, 5_000),
-    returnByValue: params.returnByValue !== false
+    returnByValue: params.returnByValue !== false,
   };
 }
 
@@ -416,7 +566,7 @@ export function normalizeConsoleParams(params = {}) {
   return {
     level: validLevels.includes(String(params.level ?? '')) ? String(params.level) : 'all',
     clear: Boolean(params.clear),
-    limit: clampInt(params.limit, 1, 200, 50)
+    limit: clampInt(params.limit, 1, 200, 50),
   };
 }
 
@@ -432,7 +582,7 @@ export function normalizeWaitForParams(params = {}) {
     state: validStates.includes(String(params.state ?? ''))
       ? /** @type {'attached' | 'detached' | 'visible' | 'hidden'} */ (String(params.state))
       : 'attached',
-    timeoutMs: clampInt(params.timeoutMs, 100, 30_000, 5_000)
+    timeoutMs: clampInt(params.timeoutMs, 100, 30_000, 5_000),
   };
 }
 
@@ -445,7 +595,7 @@ export function normalizeFindByTextParams(params = {}) {
     text: typeof params.text === 'string' ? params.text : '',
     exact: Boolean(params.exact),
     selector: typeof params.selector === 'string' && params.selector.trim() ? params.selector : '*',
-    maxResults: clampInt(params.maxResults, 1, 50, 10)
+    maxResults: clampInt(params.maxResults, 1, 50, 10),
   };
 }
 
@@ -458,7 +608,7 @@ export function normalizeFindByRoleParams(params = {}) {
     role: typeof params.role === 'string' ? params.role : '',
     name: typeof params.name === 'string' ? params.name : '',
     selector: typeof params.selector === 'string' && params.selector.trim() ? params.selector : '*',
-    maxResults: clampInt(params.maxResults, 1, 50, 10)
+    maxResults: clampInt(params.maxResults, 1, 50, 10),
   };
 }
 
@@ -476,7 +626,7 @@ export function normalizeGetHtmlParams(params = {}) {
     elementRef: String(params.elementRef || target.elementRef || ''),
     target,
     outer: Boolean(params.outer),
-    maxLength: clampInt(params.maxLength, 32, 50_000, 2000)
+    maxLength: clampInt(params.maxLength, 32, 50_000, 2000),
   };
 }
 
@@ -491,7 +641,7 @@ export function normalizeHoverParams(params = {}) {
         ? /** @type {{ elementRef?: string, selector?: string }} */ (params.target)
         : undefined
     ),
-    duration: clampInt(params.duration, 0, 5_000, 0)
+    duration: clampInt(params.duration, 0, 5_000, 0),
   };
 }
 
@@ -512,7 +662,7 @@ export function normalizeDragParams(params = {}) {
         : undefined
     ),
     offsetX: Number.isFinite(Number(params.offsetX)) ? Number(params.offsetX) : 0,
-    offsetY: Number.isFinite(Number(params.offsetY)) ? Number(params.offsetY) : 0
+    offsetY: Number.isFinite(Number(params.offsetY)) ? Number(params.offsetY) : 0,
   };
 }
 
@@ -523,7 +673,7 @@ export function normalizeDragParams(params = {}) {
 export function normalizeStorageParams(params = {}) {
   return {
     type: params.type === 'session' ? 'session' : 'local',
-    keys: Array.isArray(params.keys) ? params.keys.filter((k) => typeof k === 'string') : null
+    keys: Array.isArray(params.keys) ? params.keys.filter((k) => typeof k === 'string') : null,
   };
 }
 
@@ -534,7 +684,7 @@ export function normalizeStorageParams(params = {}) {
 export function normalizeWaitForLoadStateParams(params = {}) {
   return {
     waitForLoad: params.waitForLoad !== false,
-    timeoutMs: clampInt(params.timeoutMs, 500, 120_000, 15_000)
+    timeoutMs: clampInt(params.timeoutMs, 500, 120_000, 15_000),
   };
 }
 
@@ -543,7 +693,8 @@ export function normalizeWaitForLoadStateParams(params = {}) {
  * @returns {NormalizedTabCreateParams}
  */
 export function normalizeTabCreateParams(params = {}) {
-  const url = typeof params.url === 'string' && params.url.trim() ? params.url.trim() : 'about:blank';
+  const url =
+    typeof params.url === 'string' && params.url.trim() ? params.url.trim() : 'about:blank';
   if (url !== 'about:blank') {
     try {
       const parsed = new URL(url);
@@ -560,7 +711,7 @@ export function normalizeTabCreateParams(params = {}) {
   }
   return {
     url,
-    active: params.active !== false
+    active: params.active !== false,
   };
 }
 
@@ -583,7 +734,7 @@ export function normalizeTabCloseParams(params = {}) {
 export function normalizeAccessibilityTreeParams(params = {}) {
   return {
     maxDepth: clampInt(params.maxDepth, 1, 20, DEFAULT_A11Y_MAX_DEPTH),
-    maxNodes: clampInt(params.maxNodes, 10, 5000, DEFAULT_A11Y_MAX_NODES)
+    maxNodes: clampInt(params.maxNodes, 10, 5000, DEFAULT_A11Y_MAX_NODES),
   };
 }
 
@@ -595,9 +746,10 @@ export function normalizeNetworkParams(params = {}) {
   return {
     clear: Boolean(params.clear),
     limit: clampInt(params.limit, 1, 500, DEFAULT_NETWORK_LIMIT),
-    urlPattern: typeof params.urlPattern === 'string' && params.urlPattern.trim()
-      ? params.urlPattern.trim()
-      : null
+    urlPattern:
+      typeof params.urlPattern === 'string' && params.urlPattern.trim()
+        ? params.urlPattern.trim()
+        : null,
   };
 }
 
@@ -607,7 +759,7 @@ export function normalizeNetworkParams(params = {}) {
  */
 export function normalizePageTextParams(params = {}) {
   return {
-    textBudget: clampInt(params.textBudget, 100, 100_000, DEFAULT_PAGE_TEXT_BUDGET)
+    textBudget: clampInt(params.textBudget, 100, 100_000, DEFAULT_PAGE_TEXT_BUDGET),
   };
 }
 
@@ -620,7 +772,7 @@ export function normalizeViewportResizeParams(params = {}) {
     width: clampInt(params.width, 320, 7680, DEFAULT_VIEWPORT_WIDTH),
     height: clampInt(params.height, 200, 4320, DEFAULT_VIEWPORT_HEIGHT),
     deviceScaleFactor: clampInt(params.deviceScaleFactor, 0, 4, 0),
-    reset: Boolean(params.reset)
+    reset: Boolean(params.reset),
   };
 }
 
@@ -641,24 +793,37 @@ export function createRuntimeContext() {
   return {
     v: PROTOCOL_VERSION,
     budgets: {
-      quick: { n: BUDGET_PRESETS.quick.maxNodes, d: BUDGET_PRESETS.quick.maxDepth, t: BUDGET_PRESETS.quick.textBudget },
-      normal: { n: BUDGET_PRESETS.normal.maxNodes, d: BUDGET_PRESETS.normal.maxDepth, t: BUDGET_PRESETS.normal.textBudget },
-      deep: { n: BUDGET_PRESETS.deep.maxNodes, d: BUDGET_PRESETS.deep.maxDepth, t: BUDGET_PRESETS.deep.textBudget }
+      quick: {
+        n: BUDGET_PRESETS.quick.maxNodes,
+        d: BUDGET_PRESETS.quick.maxDepth,
+        t: BUDGET_PRESETS.quick.textBudget,
+      },
+      normal: {
+        n: BUDGET_PRESETS.normal.maxNodes,
+        d: BUDGET_PRESETS.normal.maxDepth,
+        t: BUDGET_PRESETS.normal.textBudget,
+      },
+      deep: {
+        n: BUDGET_PRESETS.deep.maxNodes,
+        d: BUDGET_PRESETS.deep.maxDepth,
+        t: BUDGET_PRESETS.deep.textBudget,
+      },
     },
     methods: methodGroups,
     errors: {
-      ACCESS_DENIED: 'Browser Bridge is off for this window or the page is restricted; if access is off, the first denied call surfaces an Enable cue in the extension UI',
+      ACCESS_DENIED:
+        'Browser Bridge is off for this window or the page is restricted; if access is off, the first denied call surfaces an Enable cue in the extension UI',
       TAB_MISMATCH: 'Tab closed or not found',
       ELEMENT_STALE: 'Element removed from DOM - re-query',
       INVALID_REQUEST: 'Malformed method or params',
       TIMEOUT: 'Operation exceeded time limit',
       RATE_LIMITED: 'Too many requests - back off',
       INTERNAL_ERROR: 'Unexpected extension error',
-      EXTENSION_DISCONNECTED: 'Extension not connected to daemon - check Chrome'
+      EXTENSION_DISCONNECTED: 'Extension not connected to daemon - check Chrome',
     },
     tips: [
       'dom.query quick budget first; widen only if truncated',
-      'Reuse elementRef; don\'t re-query',
+      "Reuse elementRef; don't re-query",
       'Set attributeAllowlist for focused DOM reads',
       'patch.apply_styles before patch.apply_dom',
       'Verify with get_box_model not screenshots',
@@ -676,7 +841,7 @@ export function createRuntimeContext() {
       'performance.get_metrics for Core Web Vitals and load timing',
       'viewport.resize to test responsive layouts',
       'Prefer screenshot.capture_element, or a tight screenshot.capture_region when element capture cannot express the needed area',
-      'page.get_storage reads localStorage/sessionStorage without evaluate'
+      'page.get_storage reads localStorage/sessionStorage without evaluate',
     ],
     flow: [
       'health.ping',
@@ -686,7 +851,7 @@ export function createRuntimeContext() {
       'patch.apply_styles',
       'layout.get_box_model',
       'page.get_console',
-      'patch.rollback'
+      'patch.rollback',
     ],
     limits: {
       maxNodes: { min: 1, max: 250, default: DEFAULT_MAX_NODES },
@@ -699,7 +864,11 @@ export function createRuntimeContext() {
       a11yMaxNodes: { min: 10, max: 5000, default: DEFAULT_A11Y_MAX_NODES },
       networkLimit: { min: 1, max: 500, default: DEFAULT_NETWORK_LIMIT },
       consoleLimit: { min: 1, max: 200, default: DEFAULT_CONSOLE_LIMIT },
-      pageTextBudget: { min: 100, max: 100000, default: DEFAULT_PAGE_TEXT_BUDGET }
-    }
+      pageTextBudget: {
+        min: 100,
+        max: 100000,
+        default: DEFAULT_PAGE_TEXT_BUDGET,
+      },
+    },
   };
 }