Gate auth file copying behind copy_auth flag with WARNING log [#20]

_resolve_user_data_dir() now only calls _copy_auth_files() when
self.config.copy_auth is True. A WARNING is logged in all 3 copy paths
explaining the security implications (CWE-522).

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: 2 people

operator_use/web/browser/service.py

@@ -341,7 +341,12 @@ def _resolve_user_data_dir(self) -> str:
         if self.config.use_system_profile:
             # Always copy to a fresh temp dir — never touch the real profile
             tmp = tempfile.mkdtemp(prefix='web-use-profile-')
-            if system_profile:
+            if system_profile and self.config.copy_auth:
+                logger.warning(
+                    "Browser auth data copy enabled (copy_auth=True) — "
+                    "the agent has access to all browser cookies and login sessions. "
+                    "Set browser.copy_auth=false to use a clean isolated profile."
+                )
                 self._copy_auth_files(system_profile, tmp)
             return tmp
 
@@ -354,11 +359,20 @@ def _resolve_user_data_dir(self) -> str:
             if is_real_profile:
                 # Treat the same as use_system_profile — avoid lock conflict
                 tmp = tempfile.mkdtemp(prefix='web-use-profile-')
-                self._copy_auth_files(str(custom), tmp)
+                if self.config.copy_auth:
+                    logger.warning(
+                        "Browser auth data copy enabled (copy_auth=True) — "
+                        "the agent has access to all browser cookies and login sessions."
+                    )
+                    self._copy_auth_files(str(custom), tmp)
                 return tmp
 
-            # Custom path: seed on first run only
-            if not (custom / 'Default').exists() and system_profile:
+            # Custom path: seed on first run only — requires copy_auth opt-in
+            if not (custom / 'Default').exists() and system_profile and self.config.copy_auth:
+                logger.warning(
+                    "Browser auth data copy enabled (copy_auth=True) — "
+                    "seeding custom profile from real Chrome profile."
+                )
                 self._copy_auth_files(system_profile, str(custom))
 
             custom.mkdir(parents=True, exist_ok=True)