@wrongstack/tools 0.305.1 → 0.306.0

package/dist/browser/index.js

@@ -329,8 +329,8 @@ var BrowserNetworkGuardProxy = class {
       upstream.on("error", () => writeProxyError(response, 502, "Bad Gateway"));
       request2.on("aborted", () => upstream.destroy());
       request2.pipe(upstream);
-    } catch {
-      writeProxyError(response, 403, "Blocked by browser network policy");
+    } catch (error) {
+      writeProxyError(response, 403, policyBlockMessage(error));
     }
   }
   async forwardConnect(request2, client, head) {
@@ -354,8 +354,8 @@ var BrowserNetworkGuardProxy = class {
         pipeDuplexPair(upstream, client);
       });
       client.once("close", () => upstream.destroy());
-    } catch {
-      client.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n");
+    } catch (error) {
+      client.end(rawForbiddenResponse(policyBlockMessage(error)));
     }
   }
   async forwardUpgrade(request2, client, head) {
@@ -396,9 +396,9 @@ var BrowserNetworkGuardProxy = class {
       });
       client.once("close", () => upstream?.destroy());
       upstream.end();
-    } catch {
+    } catch (error) {
       upstream?.destroy();
-      client.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\n\r\n");
+      client.end(rawForbiddenResponse(policyBlockMessage(error)));
     }
   }
   resolve(rawUrl) {
@@ -438,6 +438,18 @@ function writeProxyError(response, status, message) {
   response.writeHead(status, { "content-type": "text/plain", connection: "close" });
   response.end(message);
 }
+function policyBlockMessage(error) {
+  const reason = error instanceof Error ? error.message : String(error);
+  return reason ? `Blocked by browser network policy: ${reason}` : "Blocked by browser network policy";
+}
+function rawForbiddenResponse(message) {
+  return `HTTP/1.1 403 Forbidden\r
+Content-Type: text/plain\r
+Content-Length: ${Buffer.byteLength(message)}\r
+Connection: close\r
+\r
+` + message;
+}
 
 // src/browser/manager.ts
 var DEFAULT_OPERATION_TIMEOUT_MS = 3e4;
@@ -665,7 +677,15 @@ var BrowserSessionManager = class {
       if (relative2.startsWith("..") || path2.isAbsolute(relative2)) {
         throw new Error("browser: upload files must stay inside the project root");
       }
-      const realFile = await fs2.realpath(absolute);
+      let realFile;
+      try {
+        realFile = await fs2.realpath(absolute);
+      } catch (error) {
+        if (error?.code === "ENOENT") {
+          throw new Error(`browser: upload file not found: ${file}`);
+        }
+        throw error;
+      }
       const realRelative = path2.relative(realRoot, realFile);
       if (realRelative.startsWith("..") || path2.isAbsolute(realRelative)) {
         throw new Error("browser: upload files must not escape the project root through a symlink");
@@ -930,7 +950,7 @@ var sessionIdSchema = {
 };
 var browserOpenTool = {
   name: "browser_open",
-  description: "Open an isolated first-party Playwright browser session, optionally navigating to a URL.",
+  description: "Open an isolated first-party Playwright browser session, optionally navigating to a URL. Private/localhost origins are blocked by default; enable specific origins via the WRONGSTACK_BROWSER_PRIVATE_ORIGINS env allowlist.",
   usageHint: "browser_open({ url?, width?, height?, trace? })",
   permission: "confirm",
   mutating: true,
@@ -983,7 +1003,7 @@ var browserStatusTool = {
 };
 var browserNavigateTool = {
   name: "browser_navigate",
-  description: "Navigate an owned browser session to an approved http(s) URL.",
+  description: "Navigate an owned browser session to an approved http(s) URL. Private/localhost origins are blocked by default; enable specific origins via the WRONGSTACK_BROWSER_PRIVATE_ORIGINS env allowlist.",
   usageHint: "browser_navigate({ sessionId, url })",
   permission: "confirm",
   mutating: true,

package/dist/browser/types.d.ts

@@ -48,7 +48,13 @@ export interface BrowserOpenOptions {
 }
 export interface BrowserManagerOptions {
     artifactRoot: string;
-    /** Allow navigation to private/loopback addresses (localhost, 127.0.0.1, etc.). True by default. */
+    /**
+     * Allow navigation to private/loopback addresses (localhost, 127.0.0.1,
+     * etc.). FALSE by default (WS-074) — private targets are blocked unless
+     * individually allowlisted via `allowedPrivateOrigins`, which is populated
+     * from the WRONGSTACK_BROWSER_PRIVATE_ORIGINS env var (comma-separated
+     * origins, e.g. "http://localhost:3000,http://127.0.0.1:8080").
+     */
     allowPrivateHosts?: boolean | undefined;
     allowedPrivateOrigins?: string[] | undefined;
     headless?: boolean | undefined;