@tekmidian/pai 0.65.2 → 0.66.1

package/dist/hooks/worker-guard.mjs

@@ -7584,6 +7584,13 @@ function decideWorkerGitGuard(command, isWorker, cwd, worktreesRoot) {
   return { blocked: false };
 }
 
+// src/workers/browser-tools.ts
+var BROWSER_SERVER = /chrome|browsr|browser|playwright|puppeteer/i;
+function isBrowserTool(name) {
+  const server = /^mcp__(.+?)(__|$)/.exec(name)?.[1] ?? name;
+  return BROWSER_SERVER.test(server) && (name.startsWith("mcp__") || !name.includes("__"));
+}
+
 // src/hooks/ts/lib/worker-guard.ts
 var deny = (reason) => ({ decision: "deny", reason });
 var ALLOW = { decision: "allow" };
@@ -7705,6 +7712,8 @@ function gitSub(args) {
   }
   return null;
 }
+var PATTERN_KILL = /* @__PURE__ */ new Set(["pkill", "killall"]);
+var PATTERN_KILL_REASON = "pattern-based process kill blocked: kill only what you started, by PID (`cmd & echo $! > /tmp/x.pid`, then `kill $(cat /tmp/x.pid)`), never by name or pattern; other workers' command lines contain your spec text";
 function decideSegment(seg, st, ctx) {
   const words = stripPrefix(seg.words);
   const [cmd, ...args] = words;
@@ -7719,6 +7728,9 @@ function decideSegment(seg, st, ctx) {
     return decideCommand(args[1], { ...ctx, cwd: st.cwd });
   }
   const pos = args.filter((a) => !isFlag(a));
+  if (PATTERN_KILL.has(cmd) || cmd === "xargs" && args.includes("kill") || cmd === "kill" && /pgrep|pidof/.test(args.join(" "))) {
+    return deny(PATTERN_KILL_REASON);
+  }
   if (cmd === "cd") {
     const p = pos[0] ? abs(pos[0], st.cwd, ctx.home) : null;
     if (!p) return ALLOW;
@@ -7795,6 +7807,9 @@ function decideWorkerGuard(input, env, ctx) {
   if (env.PAI_WORKER !== "1") return ALLOW;
   const tool = input.tool_name;
   const ti = input.tool_input ?? {};
+  if (env.PAI_WORKER_NO_BROWSER === "1" && tool?.startsWith("mcp__") && isBrowserTool(tool)) {
+    return deny(`${tool} blocked: this worker runs with --no-browser`);
+  }
   if (tool === "Bash") {
     return typeof ti.command === "string" ? decideCommand(ti.command, ctx()) : ALLOW;
   }