@kaitranntt/ccs 7.79.1-dev.17 → 7.79.1-dev.18

package/lib/mcp/ccs-browser-server.cjs

@@ -639,7 +639,7 @@ function getTools() {
             },
           },
           priority: { type: 'integer' },
-          action: { type: 'string', enum: ['continue', 'fail', 'fulfill'] },
+          action: { type: 'string', enum: getInterceptActionEnum() },
           statusCode: { type: 'integer', minimum: 100, maximum: 599 },
           responseHeaders: {
             type: 'array',
@@ -1292,9 +1292,30 @@ function parseOptionalPageId(toolArgs) {
     : '';
 }
 
+function getBrowserInterceptFulfillMode() {
+  return String(process.env.CCS_BROWSER_INTERCEPT_FULFILL_MODE || 'disabled').trim() === 'enabled'
+    ? 'enabled'
+    : 'disabled';
+}
+
+function isBrowserInterceptFulfillEnabled() {
+  return getBrowserInterceptFulfillMode() === 'enabled';
+}
+
+function getInterceptActionEnum() {
+  return isBrowserInterceptFulfillEnabled()
+    ? ['continue', 'fail', 'fulfill']
+    : ['continue', 'fail'];
+}
+
 function parseInterceptAction(value) {
+  if (value === 'fulfill' && !isBrowserInterceptFulfillEnabled()) {
+    throw new Error(
+      'action fulfill is disabled by CCS_BROWSER_INTERCEPT_FULFILL_MODE=disabled; set it to enabled only for trusted local testing'
+    );
+  }
   if (value !== 'continue' && value !== 'fail' && value !== 'fulfill') {
-    throw new Error('action must be one of: continue, fail, fulfill');
+    throw new Error(`action must be one of: ${getInterceptActionEnum().join(', ')}`);
   }
   return value;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kaitranntt/ccs",
-  "version": "7.79.1-dev.17",
+  "version": "7.79.1-dev.18",
   "description": "Claude Code Switch - Instant profile switching between Claude, GLM, Kimi, and more",
   "keywords": [
     "cli",