@wrongstack/tools 0.296.4 → 0.298.0

package/dist/browser/index.js

@@ -6,8 +6,14 @@ import * as path from "node:path";
 import { atomicWrite, ulid } from "@wrongstack/core/utils";
 var ARTIFACT_RETENTION_MS = 7 * 24 * 60 * 60 * 1e3;
 var sweptRoots = /* @__PURE__ */ new Set();
+var MAX_SWEPT_ROOTS = 128;
 function sweepOldArtifacts(root) {
   if (sweptRoots.has(root)) return;
+  while (sweptRoots.size >= MAX_SWEPT_ROOTS) {
+    const oldest = sweptRoots.values().next().value;
+    if (oldest === void 0) break;
+    sweptRoots.delete(oldest);
+  }
   sweptRoots.add(root);
   void (async () => {
     const cutoff = Date.now() - ARTIFACT_RETENTION_MS;
@@ -441,7 +447,7 @@ var BrowserSessionManager = class {
   constructor(options, launcher = defaultLauncher) {
     this.launcher = launcher;
     this.artifacts = new BrowserArtifactStore(options.artifactRoot);
-    this.allowPrivateHosts = options.allowPrivateHosts ?? true;
+    this.allowPrivateHosts = options.allowPrivateHosts ?? false;
     this.allowedPrivateOrigins = options.allowedPrivateOrigins ?? [];
     this.networkProxy = new BrowserNetworkGuardProxy({
       allowPrivateHosts: this.allowPrivateHosts,
@@ -1017,6 +1023,9 @@ var browserScreenshotTool = {
   description: "Capture a page or element PNG and return sensitive artifact metadata with integrity hash.",
   usageHint: "browser_screenshot({ sessionId, fullPage?, selector? })",
   permission: "confirm",
+  // WS-046: the element/expression acted on, not the sessionId — a trust
+  // rule must distinguish clicking one control from another.
+  subjectKey: "selector",
   mutating: true,
   riskTier: "safe",
   capabilities: [ToolCapabilities.NET_OUTBOUND],
@@ -1046,6 +1055,9 @@ function selectorTool(name, description, run) {
     description,
     usageHint: `${name}({ sessionId, selector })`,
     permission: "confirm",
+    // WS-046: the element/expression acted on, not the sessionId — a trust
+    // rule must distinguish clicking one control from another.
+    subjectKey: "selector",
     mutating: true,
     riskTier: "standard",
     capabilities: [ToolCapabilities.NET_OUTBOUND],
@@ -1075,6 +1087,9 @@ var browserTypeTool = {
   description: "Fill an input in an owned browser session. Use secretEnv instead of text for credentials so values stay out of tool arguments and session audit.",
   usageHint: "browser_type({ sessionId, selector, text? | secretEnv? })",
   permission: "confirm",
+  // WS-046: the element/expression acted on, not the sessionId — a trust
+  // rule must distinguish clicking one control from another.
+  subjectKey: "selector",
   mutating: true,
   riskTier: "standard",
   capabilities: [ToolCapabilities.NET_OUTBOUND],
@@ -1109,6 +1124,9 @@ var browserSelectTool = {
   description: "Select an option in an owned browser session.",
   usageHint: "browser_select({ sessionId, selector, value })",
   permission: "confirm",
+  // WS-046: the element/expression acted on, not the sessionId — a trust
+  // rule must distinguish clicking one control from another.
+  subjectKey: "selector",
   mutating: true,
   riskTier: "standard",
   capabilities: [ToolCapabilities.NET_OUTBOUND],
@@ -1137,6 +1155,9 @@ var browserPressTool = {
   description: "Press a keyboard key in an owned browser session.",
   usageHint: "browser_press({ sessionId, key })",
   permission: "confirm",
+  // WS-046: the element/expression acted on, not the sessionId — a trust
+  // rule must distinguish clicking one control from another.
+  subjectKey: "key",
   mutating: true,
   riskTier: "standard",
   capabilities: [ToolCapabilities.NET_OUTBOUND],
@@ -1155,6 +1176,9 @@ var browserDragTool = {
   description: "Drag one element to another in an owned browser session.",
   usageHint: "browser_drag({ sessionId, from, to })",
   permission: "confirm",
+  // WS-046: the element/expression acted on, not the sessionId — a trust
+  // rule must distinguish clicking one control from another.
+  subjectKey: "from",
   mutating: true,
   riskTier: "standard",
   capabilities: [ToolCapabilities.NET_OUTBOUND],
@@ -1204,6 +1228,9 @@ var browserEvaluateTool = {
   description: "Evaluate bounded JavaScript in the page. Requires confirmation because page code is arbitrary.",
   usageHint: "browser_evaluate({ sessionId, expression })",
   permission: "confirm",
+  // WS-046: the element/expression acted on, not the sessionId — a trust
+  // rule must distinguish clicking one control from another.
+  subjectKey: "expression",
   mutating: true,
   riskTier: "destructive",
   capabilities: [ToolCapabilities.NET_OUTBOUND, ToolCapabilities.TOOL_MUTATE_ANY],
@@ -1226,6 +1253,9 @@ var browserUploadTool = {
   description: "Upload project-local files through a file input in an owned browser session.",
   usageHint: "browser_upload({ sessionId, selector, files })",
   permission: "confirm",
+  // WS-046: the element/expression acted on, not the sessionId — a trust
+  // rule must distinguish clicking one control from another.
+  subjectKey: "selector",
   mutating: true,
   riskTier: "destructive",
   capabilities: [ToolCapabilities.NET_OUTBOUND, ToolCapabilities.FS_READ],