Add safe key-display usage centralization guard

Co-authored-by: Shri Sukhani <shrisukhani@users.noreply.github.com>

Author: cursoragent

CONTRIBUTING.md

@@ -197,6 +197,7 @@ This runs lint, format checks, compile checks, tests, and package build.
   - `tests/test_request_helper_transport_boundary.py` (request-helper transport boundary enforcement through shared model request helpers),
   - `tests/test_request_wrapper_internal_reuse.py` (request-wrapper internal reuse of shared model request helpers across profile/team/extension/computer-action modules),
   - `tests/test_response_parse_usage_boundary.py` (centralized `parse_response_model(...)` usage boundary enforcement),
+  - `tests/test_safe_key_display_helper_usage.py` (safe mapping-key display helper usage centralization),
   - `tests/test_schema_injection_helper_usage.py` (shared schema injection helper usage enforcement in payload builders),
   - `tests/test_session_operation_metadata_import_boundary.py` (session operation-metadata import boundary enforcement),
   - `tests/test_session_operation_metadata_usage.py` (session manager operation-metadata usage enforcement),

tests/test_architecture_marker_usage.py

@@ -129,6 +129,7 @@
     "tests/test_computer_action_payload_helper_usage.py",
     "tests/test_computer_action_request_helper_usage.py",
     "tests/test_computer_action_request_internal_reuse.py",
+    "tests/test_safe_key_display_helper_usage.py",
     "tests/test_schema_injection_helper_usage.py",
     "tests/test_session_operation_metadata_import_boundary.py",
     "tests/test_session_operation_metadata_usage.py",

tests/test_safe_key_display_helper_usage.py

@@ -0,0 +1,34 @@
+from pathlib import Path
+
+import pytest
+
+from tests.guardrail_ast_utils import collect_name_call_lines, read_module_ast
+
+pytestmark = pytest.mark.architecture
+
+HYPERBROWSER_ROOT = Path(__file__).resolve().parents[1] / "hyperbrowser"
+ALLOWED_SAFE_KEY_DISPLAY_CALL_FILES = {
+    Path("mapping_utils.py"),
+    Path("client/managers/list_parsing_utils.py"),
+}
+
+
+def _python_files() -> list[Path]:
+    return sorted(HYPERBROWSER_ROOT.rglob("*.py"))
+
+
+def test_safe_key_display_usage_is_centralized():
+    violations: list[str] = []
+
+    for path in _python_files():
+        relative_path = path.relative_to(HYPERBROWSER_ROOT)
+        module = read_module_ast(path)
+        helper_calls = collect_name_call_lines(module, "safe_key_display_for_error")
+        if not helper_calls:
+            continue
+        if relative_path in ALLOWED_SAFE_KEY_DISPLAY_CALL_FILES:
+            continue
+        for line in helper_calls:
+            violations.append(f"{relative_path}:{line}")
+
+    assert violations == []