feat(agent): action handler hardening — duration caps, JS escape, timeout guards

- Cap LLM-controlled durations: Wait/ClickHold ≤30s, SetViewport ≤8K, OpenPage ≤20 URLs
- Add js_escape() for safe querySelector/KeyboardEvent interpolation (defense in depth)
- Replace raw page.evaluate() with eval_with_timeout in Fill/Type/Clear actions
- Check Fill type_str result instead of swallowing errors
- WaitForNavigation: use PageWaitStrategy::Load instead of fixed sleep(1000ms)
- Navigate: wrap page.goto() with 30s timeout to prevent indefinite blocking
- Screenshot: wrap page.screenshot() with 15s timeout in both capture methods
- Semaphore: replace .ok() with match + log::warn on closed semaphore (5 sites)
- Log level: upgrade extraction/fetch/synthesis failure logs from debug to warn

chore(release): 2.45.28

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: j-mendez

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "spider"
-version = "2.45.27"
+version = "2.45.28"
 authors = ["j-mendez <jeff@spider.cloud>"]
 description = "A web crawler and scraper, building blocks for data curation workloads."
 repository = "https://github.com/spider-rs/spider"
@@ -120,11 +120,11 @@ features = ["serde", "headers", "dynamic-versions"]
 
 [dependencies.spider_agent_types]
 path = "../spider_agent_types"
-version = "2.45.27"
+version = "2.45.28"
 
 [dependencies.spider_agent]
 path = "../spider_agent"
-version = "2.45.27"
+version = "2.45.28"
 optional = true
 default-features = false
 

spider/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "spider_agent"
-version = "2.45.27"
+version = "2.45.28"
 authors = ["j-mendez <jeff@spider.cloud>"]
 description = "A concurrent-safe multimodal agent for web automation and research."
 repository = "https://github.com/spider-rs/spider"
@@ -28,8 +28,8 @@ parking_lot = "0.12"
 base64 = "0.22"
 
 # Extracted types and HTML processing
-spider_agent_types = { version = "2.45.27", path = "../spider_agent_types" }
-spider_agent_html = { version = "2.45.27", path = "../spider_agent_html" }
+spider_agent_types = { version = "2.45.28", path = "../spider_agent_types" }
+spider_agent_html = { version = "2.45.28", path = "../spider_agent_html" }
 
 # HTML processing (still needed for engine internals)
 lol_html = "2"

spider_agent/Cargo.toml

@@ -302,12 +302,12 @@ impl Agent {
                             });
                         }
                         Err(e) => {
-                            log::debug!("Extraction failed for {}: {}", result.url, e);
+                            log::warn!("Extraction failed for {}: {}", result.url, e);
                         }
                     }
                 }
                 Err(e) => {
-                    log::debug!("Fetch failed for {}: {}", result.url, e);
+                    log::warn!("Fetch failed for {}: {}", result.url, e);
                 }
             }
         }
@@ -320,7 +320,7 @@ impl Agent {
                     Some(summary)
                 }
                 Err(e) => {
-                    log::debug!("Synthesis failed: {}", e);
+                    log::warn!("Synthesis failed: {}", e);
                     None
                 }
             }
@@ -1249,4 +1249,5 @@ mod tests {
         assert!(tools.contains(&"spider_cloud_ai_browser".to_string()));
         assert!(tools.contains(&"spider_cloud_ai_links".to_string()));
     }
+
 }