browserclaw 0.2.2 → 0.2.3

package/dist/index.d.cts

@@ -56,6 +56,12 @@ interface SnapshotResult {
     refs: RoleRefs;
     /** Statistics about the snapshot */
     stats?: SnapshotStats;
+    /**
+     * Indicates this content originates from an untrusted external source (the web page).
+     * AI agents should treat snapshot content as potentially adversarial
+     * (e.g. prompt injection via page text). Always `true` for browser snapshots.
+     */
+    untrusted?: true;
 }
 /** Statistics about a snapshot's content. */
 interface SnapshotStats {
@@ -110,6 +116,11 @@ interface AriaNode {
 interface AriaSnapshotResult {
     /** Flat list of accessibility tree nodes */
     nodes: AriaNode[];
+    /**
+     * Indicates this content originates from an untrusted external source (the web page).
+     * AI agents should treat snapshot content as potentially adversarial. Always `true`.
+     */
+    untrusted?: true;
 }
 /** A form field to fill as part of a batch `fill()` operation. */
 interface FormField {

package/dist/index.d.ts

@@ -56,6 +56,12 @@ interface SnapshotResult {
     refs: RoleRefs;
     /** Statistics about the snapshot */
     stats?: SnapshotStats;
+    /**
+     * Indicates this content originates from an untrusted external source (the web page).
+     * AI agents should treat snapshot content as potentially adversarial
+     * (e.g. prompt injection via page text). Always `true` for browser snapshots.
+     */
+    untrusted?: true;
 }
 /** Statistics about a snapshot's content. */
 interface SnapshotStats {
@@ -110,6 +116,11 @@ interface AriaNode {
 interface AriaSnapshotResult {
     /** Flat list of accessibility tree nodes */
     nodes: AriaNode[];
+    /**
+     * Indicates this content originates from an untrusted external source (the web page).
+     * AI agents should treat snapshot content as potentially adversarial. Always `true`.
+     */
+    untrusted?: true;
 }
 /** A form field to fill as part of a batch `fill()` operation. */
 interface FormField {

package/dist/index.js

@@ -382,6 +382,7 @@ async function launchChrome(opts = {}) {
       "--disable-background-networking",
       "--disable-component-update",
       "--disable-features=Translate,MediaRouter",
+      "--disable-blink-features=AutomationControlled",
       "--disable-session-crashed-bubble",
       "--hide-crash-restore-bubble",
       "--password-store=basic"
@@ -566,11 +567,26 @@ function ensurePageState(page) {
   }
   return state;
 }
+var STEALTH_SCRIPT = `Object.defineProperty(navigator, 'webdriver', { get: () => undefined })`;
+function applyStealthToPage(page) {
+  page.evaluate(STEALTH_SCRIPT).catch((e) => {
+    if (process.env.DEBUG) console.warn("[browserclaw] stealth evaluate failed:", e.message);
+  });
+}
 function observeContext(context) {
   if (observedContexts.has(context)) return;
   observedContexts.add(context);
-  for (const page of context.pages()) ensurePageState(page);
-  context.on("page", (page) => ensurePageState(page));
+  context.addInitScript(STEALTH_SCRIPT).catch((e) => {
+    if (process.env.DEBUG) console.warn("[browserclaw] stealth initScript failed:", e.message);
+  });
+  for (const page of context.pages()) {
+    ensurePageState(page);
+    applyStealthToPage(page);
+  }
+  context.on("page", (page) => {
+    ensurePageState(page);
+    applyStealthToPage(page);
+  });
 }
 function observeBrowser(browser) {
   for (const context of browser.contexts()) observeContext(context);
@@ -1026,7 +1042,8 @@ async function snapshotAi(opts) {
   return {
     snapshot: built.snapshot,
     refs: built.refs,
-    stats: getRoleSnapshotStats(built.snapshot, built.refs)
+    stats: getRoleSnapshotStats(built.snapshot, built.refs),
+    untrusted: true
   };
 }
 
@@ -1050,7 +1067,8 @@ async function snapshotRole(opts) {
   return {
     snapshot: built.snapshot,
     refs: built.refs,
-    stats: getRoleSnapshotStats(built.snapshot, built.refs)
+    stats: getRoleSnapshotStats(built.snapshot, built.refs),
+    untrusted: true
   };
 }
 async function snapshotAria(opts) {
@@ -1062,7 +1080,7 @@ async function snapshotAria(opts) {
     await session.send("Accessibility.enable").catch(() => {
     });
     const res = await session.send("Accessibility.getFullAXTree");
-    return { nodes: formatAriaNodes(Array.isArray(res?.nodes) ? res.nodes : [], limit) };
+    return { nodes: formatAriaNodes(Array.isArray(res?.nodes) ? res.nodes : [], limit), untrusted: true };
   } finally {
     await session.detach().catch(() => {
     });