@oya-ai/cli 1.0.103 → 1.0.105

package/README.md

@@ -7,7 +7,7 @@
 <p align="center">
   <a href="https://www.npmjs.com/package/@oya-ai/cli"><img src="https://img.shields.io/npm/v/@oya-ai/cli?color=39ed35&label=@oya-ai/cli&logo=npm" alt="NPM Version"></a>
   <a href="https://github.com/OyadotAI/oya-browser/blob/main/packages/cli/LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue.svg?color=39ed35" alt="License: MIT"></a>
-  <a href="https://nodejs.org"><img src="https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen.svg" alt="Node Version"></a>
+  <a href="https://nodejs.org"><img src="https://img.shields.io/badge/node-%3E%3D20.0.0-brightgreen.svg" alt="Node Version"></a>
 </p>
 
 ---
@@ -165,7 +165,7 @@ In automated pipelines (GitHub Actions, GitLab CI, Docker), use flags or environ
 
 ```bash
 export OYA_API_KEY="oya_live_..."
-export OYA_BASE_URL="https://browser.getoya.ai"
+export OYA_BASE_URL="https://oyabrowser.com"
 
 # Non-interactive launch with JSON output
 oya start --provider browserbase --persona auto --json

package/dist/index.js

@@ -472,7 +472,7 @@ async function locateRepo() {
 
 // src/install/llm.ts
 var LLM_PRESETS = {
-  anthropic: { base: "https://api.anthropic.com/v1", model: "claude-sonnet-4-5", label: "Anthropic (Claude)" },
+  anthropic: { base: "https://api.anthropic.com/v1", model: "claude-sonnet-5", label: "Anthropic (Claude)" },
   openai: { base: "https://api.openai.com/v1", model: "gpt-4o-mini", label: "OpenAI" },
   gemini: {
     base: "https://generativelanguage.googleapis.com/v1beta/openai",
@@ -548,7 +548,7 @@ async function judge(res, spin, baseUrl, model) {
     return `${baseUrl} rejected that key (HTTP ${res.status}).`;
   }
   if (res.ok) await confirmModel(res, spin, model);
-  else spin.fail(`could not verify (HTTP ${res.status}) \u2014 continuing anyway`);
+  else spin.fail(`could not verify (HTTP ${res.status}), continuing anyway`);
   return null;
 }
 async function confirmModel(res, spin, model) {
@@ -565,7 +565,7 @@ async function verifyLlm(baseUrl, key, model) {
   try {
     return await judge(await probe(baseUrl, key, model), spin, baseUrl, model);
   } catch (err) {
-    spin.fail(`could not reach it (${err.message}) \u2014 continuing anyway`);
+    spin.fail(`could not reach it (${err.message}), continuing anyway`);
     return null;
   }
 }
@@ -644,7 +644,7 @@ function isPostgresUrl(v) {
     const url = new URL(v);
     if (!["postgres:", "postgresql:"].includes(url.protocol)) return "Must start with postgres://";
   } catch {
-    return "That is not a connection string \u2014 postgres://user:pass@host:5432/db";
+    return "That is not a connection string, postgres://user:pass@host:5432/db";
   }
 }
 async function pick(preset, heading, question, options) {
@@ -667,7 +667,7 @@ async function askPostgres(s) {
   s.migrateUrl = s.secrets.DATABASE_URL;
 }
 function sqliteNotes() {
-  note("SQLite means API-key auth only \u2014 email sign-in needs Supabase.");
+  note("SQLite means API-key auth only, email sign-in needs Supabase.");
   note("The dashboard still works: sign in with the API key printed at the end.");
 }
 async function askDatabase(s) {
@@ -710,7 +710,7 @@ function checkPublicUrl(v) {
     const url = new URL(v);
     if (!["http:", "https:"].includes(url.protocol)) return "Must be http:// or https://";
   } catch {
-    return "That is not a URL \u2014 try http://localhost:3100";
+    return "That is not a URL, try http://localhost:3100";
   }
 }
 async function askPublicUrl(s) {
@@ -789,7 +789,7 @@ function envCheck(root) {
   const envPath = join2(root, ".env");
   if (!existsSync2(envPath)) return [];
   const mode = (statSync(envPath).mode & PERMISSION_BITS).toString(OCTAL);
-  return [{ ok: true, label: ".env exists \u2014 keeping its OYA_PROFILE_SECRET and API keys", detail: `mode ${mode}` }];
+  return [{ ok: true, label: ".env exists, keeping its OYA_PROFILE_SECRET and API keys", detail: `mode ${mode}` }];
 }
 var psqlCheck = async () => ({
   ok: await has("psql"),
@@ -832,12 +832,12 @@ var SECRET_KEYS = /* @__PURE__ */ new Set([
 ]);
 var SECTIONS = [
   ["Server", ["PORT", "OYA_UI_MODE", "OYA_DATA_DIR"]],
-  ["Tenant keys \u2014 each is an identity; add more from the dashboard", ["API_KEYS"]],
+  ["Tenant keys, each is an identity; add more from the dashboard", ["API_KEYS"]],
   ["Host operations: /metrics, drain, fleet provision", ["OYA_OPERATOR_TOKEN", "OYA_METRICS_TOKEN"]],
   ["Credentials at rest. Lose this and every stored cookie, proxy and TOTP seed is unreadable", ["OYA_PROFILE_SECRET"]],
   ["Database", ["SUPABASE_URL", "SUPABASE_SERVICE_KEY", "DATABASE_URL", "OYA_RECORDING_BUCKET"]],
   [
-    "Agent LLM. A private or http base URL is operator-only: the dashboard and\n# POST /config/host reject one, on purpose \u2014 tenants can set that field too",
+    "Agent LLM. A private or http base URL is operator-only: the dashboard and\n# POST /config/host reject one, on purpose, tenants can set that field too",
     ["OPENAI_API_KEY", "OPENAI_BASE_URL", "CHAT_MODEL"]
   ],
   ["Browser fleet", ["OYA_BROWSER_PROVIDER", "OYA_FLEET_RUNTIME", "OYA_PUBLIC_WS_URL", "OYA_CDP_WS_URL"]],
@@ -883,7 +883,7 @@ function sectionLines(values, placed) {
   return lines;
 }
 function renderEnv(values, extra) {
-  const lines = ["# Written by `oya install`. Re-run it, or edit by hand \u2014 both are fine.", ""];
+  const lines = ["# Written by `oya install`. Re-run it, or edit by hand, both are fine.", ""];
   const placed = /* @__PURE__ */ new Set();
   lines.push(...sectionLines(values, placed));
   const leftover = Object.keys(values).filter((k) => !placed.has(k) && values[k]);
@@ -1078,7 +1078,7 @@ var EGRESS = [
   // is what makes per-session egress policy and budgets enforceable.
   // `app: server` is the label k8s/base/server.yaml gives the control plane;
   // the empty namespaceSelector lets the browsers live in their own namespace.
-  // A control plane OUTSIDE the cluster is not matched by any pod selector —
+  // A control plane OUTSIDE the cluster is not matched by any pod selector,
   // add an ipBlock rule here for that case, or the pods will resolve DNS and
   // then fail to enrol.
   { to: [{ namespaceSelector: {}, podSelector: { matchLabels: { app: "server" } } }] }
@@ -1106,7 +1106,7 @@ async function provisionK8sFleet(root, a) {
   const policyPath = savePolicy(root, fleet.namespace);
   await apply(networkPolicy(fleet.namespace, POLICY_NAME), root);
   console.log(`  applied namespace ${fleet.namespace} and NetworkPolicy ${POLICY_NAME}`);
-  console.log(`  policy written to ${policyPath} \u2014 review it; it is your egress boundary`);
+  console.log(`  policy written to ${policyPath}, review it; it is your egress boundary`);
   return pinned;
 }
 
@@ -1157,7 +1157,7 @@ function printPreflight(checks) {
 ${style.bold("  Preflight")}`);
   for (const c of checks) {
     const mark = c.ok ? icon.ok : c.fatal ? icon.fail : icon.warn;
-    console.log(`  ${mark} ${c.label}${c.detail ? style.grey(`  \u2014 ${c.detail}`) : ""}`);
+    console.log(`  ${mark} ${c.label}${c.detail ? style.grey(` , ${c.detail}`) : ""}`);
   }
 }
 var row = (k, v) => console.log(`  ${style.grey(k.padEnd(PLAN_LABEL_WIDTH))}${v}`);
@@ -1194,7 +1194,7 @@ var ANSWERS_FILE = "oya-install.json";
 async function gather(configPath2) {
   const root = await locateRepo();
   const preset = configPath2 ? JSON.parse(readFileSync2(configPath2, "utf8")) : {};
-  banner("Oya Browser \u2014 self-host install", root);
+  banner("Oya Browser, self-host install", root);
   if (configPath2) note(`replaying ${configPath2}`);
   steps(configPath2 ? 0 : INTERVIEW_STEPS);
   return { root, ...await interview(preset, !!configPath2) };
@@ -1234,7 +1234,7 @@ function writeFiles(p) {
   writeFileSync3(join5(p.root, ANSWERS_FILE), JSON.stringify(p.answers, null, JSON_INDENT) + "\n");
   success(`wrote ${p.envPath}`);
   if (p.existing.OYA_PROFILE_SECRET) return;
-  warn("OYA_PROFILE_SECRET was generated \u2014 back it up.");
+  warn("OYA_PROFILE_SECRET was generated, back it up.");
   note("Without it, stored cookies, proxy credentials and TOTP seeds cannot be decrypted.");
 }
 async function provisionK8s(p) {
@@ -1268,7 +1268,7 @@ import { join as join6, dirname as dirname2 } from "path";
 // src/constants.ts
 var ARGV_SKIP = 2;
 var JSON_INDENT2 = 2;
-var DEFAULT_BASE_URL = "https://browser.getoya.ai";
+var DEFAULT_BASE_URL = "https://oyabrowser.com";
 var CONFIG_FILE_MODE = 384;
 var LsColumns = {
   /** Provider name. */
@@ -1364,6 +1364,7 @@ async function cmdLogin(flags2) {
   save({ apiKey, baseUrl });
   console.log(`
 \u2705 Signed in to ${baseUrl}. Saved to ${configPath}`);
+  console.log("   Scripts using @oya-ai/browser read this file too, so `new Oya()` needs no environment.");
   console.log("   Next: `oya init` to pick your model and browser provider.");
 }
 
@@ -1381,7 +1382,27 @@ var OyaError = class extends Error {
     this.body = body;
   }
 };
-var DEFAULT_BASE_URL2 = "https://browser.getoya.ai";
+var node = () => globalThis.process;
+function builtin(name) {
+  const get = node()?.getBuiltinModule;
+  return typeof get === "function" ? get.call(node(), name) ?? null : null;
+}
+function configFile() {
+  const os = builtin("node:os");
+  const home = node()?.env?.OYA_CONFIG_HOME || (os ? `${os.homedir()}/.oya` : null);
+  return home ? `${home}/config.json` : null;
+}
+function savedConfig() {
+  try {
+    const fs = builtin("node:fs");
+    const file2 = configFile();
+    if (!fs || !file2 || !fs.existsSync(file2)) return {};
+    return JSON.parse(fs.readFileSync(file2, "utf8"));
+  } catch {
+    return {};
+  }
+}
+var DEFAULT_BASE_URL2 = "https://oyabrowser.com";
 var DEFAULT_TIMEOUT_MS = 6e4;
 var START_TIMEOUT_MS = 12e4;
 var READY_TIMEOUT_MS2 = 12e4;
@@ -1427,10 +1448,31 @@ var Http = class {
   fetchImpl;
   /** Sends one request and returns the parsed answer, or throws an OyaError when it failed. */
   async request(method, path, body, timeoutMs = this.timeoutMs, headers = {}) {
-    const init = requestInit(method, body, timeoutMs, { Authorization: `Bearer ${this.apiKey}`, ...headers });
-    return readAnswer2(await this.fetchImpl(`${this.baseUrl}${path}`, init), `${method} ${path}`, this.baseUrl);
+    const res = await this.send(`${this.baseUrl}${path}`, this.init(method, body, timeoutMs, headers), timeoutMs);
+    return readAnswer2(res, `${method} ${path}`, this.baseUrl);
+  }
+  /** The fetch options for one call, with this client's key on them. */
+  init(method, body, timeoutMs, headers) {
+    return requestInit(method, body, timeoutMs, { Authorization: `Bearer ${this.apiKey}`, ...headers });
+  }
+  /**
+   * fetch's own failures say only "fetch failed" or "The operation was
+   * aborted", which leaves a reader guessing at the address, the port and
+   * whether anything is listening. Say which it was.
+   */
+  async send(url, init, timeoutMs) {
+    try {
+      return await this.fetchImpl(url, init);
+    } catch (err) {
+      throw new OyaError(unreachable(this.baseUrl, timeoutMs, err), 0, { error: String(err?.message) });
+    }
   }
 };
+function unreachable(baseUrl, timeoutMs, err) {
+  const cause = err?.name === "TimeoutError" || /abort/i.test(String(err?.message));
+  if (cause) return `No answer from ${baseUrl} within ${timeoutMs}ms. Is it reachable, and is the call this slow?`;
+  return `Could not reach ${baseUrl}. Is the server running, and is OYA_BASE_URL right?`;
+}
 function requestInit(method, body, timeoutMs, headers) {
   const json = body === void 0 ? {} : { "Content-Type": "application/json" };
   const payload = body === void 0 ? void 0 : JSON.stringify(body);
@@ -1457,13 +1499,12 @@ function failure(call2, status, payload, baseUrl) {
 }
 var env = (name) => globalThis.process?.env?.[name];
 function createHttp(options) {
-  const apiKey = options.apiKey || env("OYA_API_KEY");
-  if (!apiKey) {
-    throw new Error("No API key. Pass { apiKey } or set OYA_API_KEY \u2014 run `oya login` to get one.");
-  }
-  const baseUrl = (options.baseUrl || env("OYA_BASE_URL") || DEFAULT_BASE_URL2).replace(/\/+$/, "");
+  const saved = savedConfig();
+  const apiKey = options.apiKey || env("OYA_API_KEY") || saved.apiKey;
+  if (!apiKey) throw new Error("No API key. Pass { apiKey }, set OYA_API_KEY, or run `npx @oya-ai/cli login`.");
+  const baseUrl = (options.baseUrl || env("OYA_BASE_URL") || saved.baseUrl || DEFAULT_BASE_URL2).replace(/\/+$/, "");
   const fetchImpl = options.fetch || globalThis.fetch;
-  if (!fetchImpl) throw new Error("No fetch available \u2014 pass { fetch } or use Node 18+.");
+  if (!fetchImpl) throw new Error("No fetch available, pass { fetch } or use Node 18+.");
   return new Http(baseUrl, apiKey, options.timeoutMs ?? DEFAULT_TIMEOUT_MS, fetchImpl.bind(globalThis));
 }
 var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -1557,10 +1598,8 @@ var Browser = class {
   constructor(http, info, autoCaptcha) {
     this.http = http;
     this.autoCaptcha = autoCaptcha;
-    this.id = info.id;
-    this.provider = info.provider;
-    this.persona = info.persona;
-    this.cdpUrl = info.cdpUrl;
+    ({ id: this.id, provider: this.provider, persona: this.persona, cdpUrl: this.cdpUrl } = info);
+    this.reused = info.reused === true;
   }
   http;
   autoCaptcha;
@@ -1572,6 +1611,8 @@ var Browser = class {
   persona;
   /** Point Playwright, Puppeteer or browser-use here. */
   cdpUrl;
+  /** True when `start()` handed over a browser that was already running, such as the desktop app. */
+  reused;
   /** Runs one browser command; a command that ran and failed throws. */
   async command(action, params = {}, timeoutMs) {
     const path = `/api/browsers/${this.id}/command`;
@@ -1723,7 +1764,7 @@ var Browser = class {
   /**
    * The SSE stream of JPEG frames, for embedding in your own UI. EventSource
    * cannot set headers, so the URL carries a connection ticket: single use,
-   * 60 seconds. Mint one per viewer — the first connection spends it.
+   * 60 seconds. Mint one per viewer, the first connection spends it.
    */
   async liveStreamUrl() {
     const path = `/api/control/sessions/${encodeURIComponent(this.id)}/ticket`;
@@ -1759,13 +1800,14 @@ var Browser = class {
    * CDP session is handed back to its provider, a desktop browser disconnects.
    */
   stop() {
+    if (this.reused) return Promise.resolve({ id: this.id, ok: true, reused: true });
     return this.http.request("POST", `/api/browsers/${this.id}/stop`, {}, STOP_TIMEOUT_MS);
   }
   /** `await using browser = await oya.browser.start()` stops it however the block exits, errors included. */
   async [Symbol.asyncDispose]() {
     await this.stop();
   }
-  /** @deprecated use stop() — close() only dropped the socket, and a cloud browser redialled. */
+  /** @deprecated use stop(), close() only dropped the socket, and a cloud browser redialled. */
   async close() {
     await this.stop();
   }
@@ -1922,11 +1964,11 @@ var identityCalls = (http) => ({
   /** One persona. */
   get: (id) => http().request("GET", `/api/personas/${id}`),
   /**
-   * Create an identity. The device — platform, timezone, locale — is chosen
+   * Create an identity. The device, platform, timezone, locale, is chosen
    * here and fixed for its life; `preview()` shows what a choice produces.
    */
   create: (options = {}) => http().request("POST", "/api/personas", options),
-  /** Name, concurrency cap and proxy hint. Never the device — clone for that. */
+  /** Name, concurrency cap and proxy hint. Never the device, clone for that. */
   update: (id, changes) => http().request("PUT", `/api/personas/${id}`, changes),
   /** A new persona of the same kind of device: same choices, fresh identity, empty jar. */
   clone: (id, options = {}) => http().request("POST", `/api/personas/${id}/clone`, options)
@@ -2083,7 +2125,7 @@ async function targetBrowser(oya, flags2) {
 
 // src/commands/init.ts
 var PRESETS = {
-  anthropic: { name: "Anthropic", model: "claude-sonnet-4-5" },
+  anthropic: { name: "Anthropic", model: "claude-sonnet-5" },
   openai: { name: "OpenAI", model: "gpt-4o-mini" },
   gemini: { name: "Gemini", model: "gemini-3.8-flash" },
   vertex: { name: "Gemini Enterprise", model: "gemini-2.5-flash" }
@@ -2137,7 +2179,7 @@ function signInHint(provider) {
   if (provider !== "oya-cloud" && provider !== "oya-selfhosted") return;
   console.log("\n\u2500\u2500 4. Sign in once, on your own machine \u2500\u2500");
   console.log("   Your remote browsers reuse the cookies from a desktop sign-in, so agents");
-  console.log("   arrive already logged in \u2014 as the same identity, from the same fingerprint.");
+  console.log("   arrive already logged in, as the same identity, from the same fingerprint.");
   console.log(`   Download the desktop browser: ${resolved().baseUrl}/downloads`);
 }
 async function interview2(oya) {
@@ -2219,7 +2261,7 @@ ${all.length} running.`);
 }
 function rmLine(x) {
   const removed = x.sandboxRemoved === true ? " (sandbox destroyed)" : "";
-  const note2 = x.sandboxRemoved === false ? " \u2014 sandbox NOT removed, check Oya Cloud" : removed;
+  const note2 = x.sandboxRemoved === false ? ", sandbox NOT removed, check Oya Cloud" : removed;
   return `${x.ok ? "\u2705" : "\u2717"} ${x.id}${note2}${x.error ? ` ${x.error}` : ""}`;
 }
 async function cmdRm(args2, flags2) {
@@ -2230,7 +2272,7 @@ async function cmdRm(args2, flags2) {
   console.log(`stopped ${r.stopped}`);
 }
 function activityLine(a) {
-  const error = a.error ? ` \u2014 ${a.error}` : "";
+  const error = a.error ? `, ${a.error}` : "";
   return `    ${a.ok ? "\xB7" : "\u2717"} ${a.action.padEnd(StatusColumns.ACTION)} ${a.summary}${error}  ${a.ms}ms`;
 }
 function printStatus(s) {
@@ -2335,7 +2377,7 @@ function personaLine(p) {
 var list = async (oya, _rest, flags2) => {
   const all = await oya.personas.list();
   out(flags2, all, () => {
-    if (!all.length) return console.log("No personas yet \u2014 `oya personas new`.");
+    if (!all.length) return console.log("No personas yet, `oya personas new`.");
     for (const p of all) console.log(personaLine(p));
   });
 };
@@ -2376,7 +2418,8 @@ async function cmdWhoami() {
 
 // src/commands/stealth.ts
 import { spawn as spawn4 } from "child_process";
-var spawnHarness = (flags2) => spawn4("node", ["test-stealth.js", ...flags2.live ? ["--live"] : []], {
+var HARNESS = "tests/integration/stealth.test.js";
+var spawnHarness = (flags2) => spawn4("node", [HARNESS, ...flags2.live ? ["--live"] : []], {
   cwd: process.env.OYA_SERVER_DIR || "server",
   stdio: "inherit"
 });
@@ -2453,7 +2496,7 @@ async function runControl(command2, args2, flags2) {
 }
 
 // src/help.ts
-var HELP = `oya \u2014 thousands of browsers, one API
+var HELP = `oya, thousands of browsers, one API
 
   oya install                     Stand up a self-hosted control plane
             [--dry-run] [--config oya-install.json]

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@oya-ai/cli",
-  "version": "1.0.103",
+  "version": "1.0.105",
   "description": "Command line for the Oya browser control plane.",
   "license": "MIT",
-  "homepage": "https://browser.getoya.ai",
+  "homepage": "https://oyabrowser.com",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/OyadotAI/oya-browser.git",
@@ -39,7 +39,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@oya-ai/browser": "1.0.103",
+    "@oya-ai/browser": "1.0.105",
     "@types/node": "^20.19.43",
     "tsup": "^8.0.0",
     "typescript": "^5.4.0"