@tekmidian/pai 0.65.2 → 0.66.0

package/dist/hooks/worker-guard.mjs

@@ -7584,6 +7584,13 @@ function decideWorkerGitGuard(command, isWorker, cwd, worktreesRoot) {
   return { blocked: false };
 }
 
+// src/workers/browser-tools.ts
+var BROWSER_SERVER = /chrome|browsr|browser|playwright|puppeteer/i;
+function isBrowserTool(name) {
+  const server = /^mcp__(.+?)(__|$)/.exec(name)?.[1] ?? name;
+  return BROWSER_SERVER.test(server) && (name.startsWith("mcp__") || !name.includes("__"));
+}
+
 // src/hooks/ts/lib/worker-guard.ts
 var deny = (reason) => ({ decision: "deny", reason });
 var ALLOW = { decision: "allow" };
@@ -7795,6 +7802,9 @@ function decideWorkerGuard(input, env, ctx) {
   if (env.PAI_WORKER !== "1") return ALLOW;
   const tool = input.tool_name;
   const ti = input.tool_input ?? {};
+  if (env.PAI_WORKER_NO_BROWSER === "1" && tool?.startsWith("mcp__") && isBrowserTool(tool)) {
+    return deny(`${tool} blocked: this worker runs with --no-browser`);
+  }
   if (tool === "Bash") {
     return typeof ti.command === "string" ? decideCommand(ti.command, ctx()) : ALLOW;
   }