chromeflow 0.12.3 → 0.12.4

package/bin/chromeflow.mjs

@@ -24764,6 +24764,7 @@ var PROMOTE_AT_SUCCESS = 2;
 var DEMOTE_AT_FAILS = 1;
 var PRUNE_AT_FAILS = 2;
 var PROVISIONAL_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
+var MAX_PROVISIONAL_PER_ORIGIN = 20;
 var ATOM_KEYS = ["tool", "target", "selector", "recovered_via", "signal", "verification", "clear_first", "fragile", "reason"];
 function originKey(url) {
   if (!url) return void 0;
@@ -24972,9 +24973,28 @@ var FlowStore = class {
       for (const atom of buf) this.upsert(k, [atom], null);
     }
     this.lastAutosaved = { key: k, sig: signatureOf(buf) };
+    this.capProvisional(k);
     this.pruneExpired();
     this.persist();
   }
+  /**
+   * Backstop against unbounded growth on high-cardinality pages. A search-results
+   * or feed page produces a fresh per-instance selector on every action (a person's
+   * name, a post id), so each autosave is a distinct signature that can never dedup,
+   * never recur, and never promote — it just piles up one dead provisional per action.
+   * The notability gate already screens most of these out; this caps whatever slips
+   * through. Trusted flows are never evicted; only the oldest provisional overflow is.
+   */
+  capProvisional(k) {
+    const flows = this.data.origins[k];
+    if (!flows) return;
+    const provisional = flows.filter((f) => f.tier === "provisional");
+    if (provisional.length <= MAX_PROVISIONAL_PER_ORIGIN) return;
+    const doomed = new Set(
+      [...provisional].sort((a, b) => Date.parse(a.last_verified) - Date.parse(b.last_verified)).slice(0, provisional.length - MAX_PROVISIONAL_PER_ORIGIN)
+    );
+    this.data.origins[k] = flows.filter((f) => !doomed.has(f));
+  }
   /** Flush every buffered origin. Call on shutdown and for single-origin sessions. */
   flushAll() {
     for (const k of [...this.buffer.keys()]) this.autoCommit(k);
@@ -26250,7 +26270,7 @@ Current URL: ${activeTab.url}`;
       const nowUrl = r.after_url ?? r.before_url;
       const usedUntil = !!(until_selector || until_url_contains || until_text_contains || until_url_changes);
       const verification = until_url_changes ? "until_url_changes=true" : until_selector ? `until_selector=${JSON.stringify(until_selector)}` : until_url_contains ? `until_url_contains=${JSON.stringify(until_url_contains)}` : until_text_contains ? `until_text_contains=${JSON.stringify(until_text_contains)}` : expect_submit ? "expect_submit=true" : void 0;
-      if (r.success && (r.recovered_via || r.navigated || usedUntil)) {
+      if (r.success && (r.recovered_via || r.navigated)) {
         flowStore.observe({
           tool: "click_element",
           target: textHint ?? `selector=${selector}`,
@@ -26259,7 +26279,7 @@ Current URL: ${activeTab.url}`;
           signal: r.navigated ? "navigated" : until_url_changes ? "until_url_change" : usedUntil ? "until_*" : r.recovered_via,
           verification,
           fragile: isFragileSelector(selector),
-          reason: r.recovered_via ? `click recovered via ${r.recovered_via}` : r.navigated ? "navigating submit/link" : "verified terminal click"
+          reason: r.recovered_via ? `click recovered via ${r.recovered_via}` : "navigating submit/link"
         }, actionUrl);
       }
       flowStore.noteUrl(nowUrl);
@@ -26632,7 +26652,7 @@ function registerFlowTools(server, bridge, flowStore) {
 }
 
 // packages/mcp-server/src/index.ts
-var PACKAGE_VERSION = true ? "0.12.3" : "dev";
+var PACKAGE_VERSION = true ? "0.12.4" : "dev";
 main().catch((err) => {
   console.error("[chromeflow] Fatal error:", err);
   process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chromeflow",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "description": "MCP server for chromeflow \u2014 lets Claude Code or Codex CLI drive your real Chrome browser with sessions intact. Plugin install recommended; npx chromeflow for manual MCP wiring.",
   "type": "module",
   "main": "./bin/chromeflow.mjs",