@oya-ai/browser 1.0.70 → 1.0.71

package/dist/index.cjs

@@ -223,6 +223,29 @@ var Browser = class {
     );
     return `${this.http.baseUrl}/api/live/${this.id}?ticket=${encodeURIComponent(ticket)}`;
   }
+  /**
+   * A shareable link to this browser's live view, for handing to a person or
+   * embedding in your own app. The token rides in the URL fragment, so it never
+   * reaches a server log or Referer header. `control: true` lets whoever opens
+   * it take over and act in the browser; otherwise it is view-only. The link
+   * expires (default one hour) and is revocable with `revokeShare(id)`.
+   *
+   * The credential is scoped to this one browser: it cannot see or touch the
+   * rest of your project. Anyone holding the link has that access until it
+   * expires or you revoke it, so treat it like a password.
+   */
+  async shareUrl({ control = false, expiresInSeconds = 3600 } = {}) {
+    const c = await this.http.request(
+      "POST",
+      `/api/control/sessions/${encodeURIComponent(this.id)}/share`,
+      { control, expiresIn: expiresInSeconds }
+    );
+    return { url: `${this.http.baseUrl}/live/${encodeURIComponent(this.id)}#t=${encodeURIComponent(c.token)}`, id: c.id, expiresAt: c.expiresAt };
+  }
+  /** Revoke a link from `shareUrl()` before it expires, by the id it returned. */
+  async revokeShare(id) {
+    await this.http.request("DELETE", `/api/control/credentials/${encodeURIComponent(id)}`);
+  }
   /** Counters, health and the last 50 things this browser did. */
   status() {
     return this.http.request("GET", `/api/browsers/${this.id}`);

package/dist/index.d.cts

@@ -349,6 +349,27 @@ declare class Browser {
      * 60 seconds. Mint one per viewer — the first connection spends it.
      */
     liveStreamUrl(): Promise<string>;
+    /**
+     * A shareable link to this browser's live view, for handing to a person or
+     * embedding in your own app. The token rides in the URL fragment, so it never
+     * reaches a server log or Referer header. `control: true` lets whoever opens
+     * it take over and act in the browser; otherwise it is view-only. The link
+     * expires (default one hour) and is revocable with `revokeShare(id)`.
+     *
+     * The credential is scoped to this one browser: it cannot see or touch the
+     * rest of your project. Anyone holding the link has that access until it
+     * expires or you revoke it, so treat it like a password.
+     */
+    shareUrl({ control, expiresInSeconds }?: {
+        control?: boolean;
+        expiresInSeconds?: number;
+    }): Promise<{
+        url: string;
+        id: string;
+        expiresAt: number | null;
+    }>;
+    /** Revoke a link from `shareUrl()` before it expires, by the id it returned. */
+    revokeShare(id: string): Promise<void>;
     /** Counters, health and the last 50 things this browser did. */
     status(): Promise<BrowserDetail>;
     /**

package/dist/index.d.ts

@@ -349,6 +349,27 @@ declare class Browser {
      * 60 seconds. Mint one per viewer — the first connection spends it.
      */
     liveStreamUrl(): Promise<string>;
+    /**
+     * A shareable link to this browser's live view, for handing to a person or
+     * embedding in your own app. The token rides in the URL fragment, so it never
+     * reaches a server log or Referer header. `control: true` lets whoever opens
+     * it take over and act in the browser; otherwise it is view-only. The link
+     * expires (default one hour) and is revocable with `revokeShare(id)`.
+     *
+     * The credential is scoped to this one browser: it cannot see or touch the
+     * rest of your project. Anyone holding the link has that access until it
+     * expires or you revoke it, so treat it like a password.
+     */
+    shareUrl({ control, expiresInSeconds }?: {
+        control?: boolean;
+        expiresInSeconds?: number;
+    }): Promise<{
+        url: string;
+        id: string;
+        expiresAt: number | null;
+    }>;
+    /** Revoke a link from `shareUrl()` before it expires, by the id it returned. */
+    revokeShare(id: string): Promise<void>;
     /** Counters, health and the last 50 things this browser did. */
     status(): Promise<BrowserDetail>;
     /**

package/dist/index.js

@@ -194,6 +194,29 @@ var Browser = class {
     );
     return `${this.http.baseUrl}/api/live/${this.id}?ticket=${encodeURIComponent(ticket)}`;
   }
+  /**
+   * A shareable link to this browser's live view, for handing to a person or
+   * embedding in your own app. The token rides in the URL fragment, so it never
+   * reaches a server log or Referer header. `control: true` lets whoever opens
+   * it take over and act in the browser; otherwise it is view-only. The link
+   * expires (default one hour) and is revocable with `revokeShare(id)`.
+   *
+   * The credential is scoped to this one browser: it cannot see or touch the
+   * rest of your project. Anyone holding the link has that access until it
+   * expires or you revoke it, so treat it like a password.
+   */
+  async shareUrl({ control = false, expiresInSeconds = 3600 } = {}) {
+    const c = await this.http.request(
+      "POST",
+      `/api/control/sessions/${encodeURIComponent(this.id)}/share`,
+      { control, expiresIn: expiresInSeconds }
+    );
+    return { url: `${this.http.baseUrl}/live/${encodeURIComponent(this.id)}#t=${encodeURIComponent(c.token)}`, id: c.id, expiresAt: c.expiresAt };
+  }
+  /** Revoke a link from `shareUrl()` before it expires, by the id it returned. */
+  async revokeShare(id) {
+    await this.http.request("DELETE", `/api/control/credentials/${encodeURIComponent(id)}`);
+  }
   /** Counters, health and the last 50 things this browser did. */
   status() {
     return this.http.request("GET", `/api/browsers/${this.id}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oya-ai/browser",
-  "version": "1.0.70",
+  "version": "1.0.71",
   "description": "Rotate thousands of browsers behind one API — personas, proxies, stealth, CAPTCHA and MFA.",
   "license": "MIT",
   "homepage": "https://browser.getoya.ai",