@qoniai/qoni 0.4.4 → 0.5.1

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.5.1 - 2026-09-23
+
+### Fixed
+
+- Recheck access-key scope policy at token exchange before every SDK product
+  operation, including repeated calls with the same delegation token. Removing
+  a scope now blocks the next SDK operation instead of leaving a cached product
+  token usable until expiry.
+
+## 0.5.0 - 2026-09-17
+
+### Added
+
+- Let Do Anything callers select a server-managed Browserbase proxy by ID, choose
+  `off`, `all`, or `scoped` routing, and select a supported Browserbase compute
+  region with `browserProxy`.
+
+### Security
+
+- Reject proxy URLs, usernames, passwords, and any unknown proxy option locally.
+  Proxy credentials remain in the backend's private registry and never cross the
+  public SDK API.
+
 ## 0.4.4
 
 - Populate Do Anything `result.artifacts` from durable run files, including attached runs.

package/README.md

@@ -391,12 +391,22 @@ const context = await qoni.gumem.recall({
 const run = await qoni.doAnything.run({
   token,
   prompt: "Open https://en.wikipedia.org/wiki/Solid-state_battery and summarize its key advantages over lithium-ion.",
+  browserProxy: {
+    proxyId: "sg-static", // server-side registry id; never pass credentials here
+    mode: "scoped",       // off | all | scoped
+    region: "ap-southeast-1",
+  },
 });
 
 const status = await run.status(); // refresh the run's current state
 await run.cancel("User stopped the task"); // idempotent
 ```
 
+`browserProxy` affects only newly created Browserbase sessions. `region` selects
+Browserbase compute, while the registered proxy controls network egress. The SDK
+accepts only a proxy ID, mode, and region; operators manage proxy credentials in
+OpsConsole.
+
 ### Web Search
 
 ```ts
@@ -778,6 +788,9 @@ Common first-run errors:
 - Keep Qoni AK/SK on trusted servers only.
 - Do not expose delegation tokens to untrusted clients.
 - Request the smallest useful scope set for each Agent action.
+- Product methods exchange the delegation token on every call, so a change to
+  the access key's allowed scopes is checked before the next SDK operation.
+  Product tokens already obtained outside the SDK remain valid until expiry.
 - Prefer `interactive` mode for browser control, site login, long-running monitors, and sensitive artifacts.
 - Store `auditId`, `requestId`, and `traceId` with product logs when later investigation matters.
 - Rotate AK/SK through Qoni Console if a credential might have been exposed.

package/README.zh-CN.md

@@ -362,12 +362,21 @@ const context = await qoni.gumem.recall({
 const run = await qoni.doAnything.run({
   token,
   prompt: "打开 https://en.wikipedia.org/wiki/Solid-state_battery ，总结它相对锂离子电池的主要优势。",
+  browserProxy: {
+    proxyId: "sg-static", // 服务端代理注册表 ID；这里绝不传凭据
+    mode: "scoped",       // off | all | scoped
+    region: "ap-southeast-1",
+  },
 });
 
 const status = await run.status(); // 刷新并返回当前状态
 await run.cancel("用户停止任务"); // 幂等
 ```
 
+`browserProxy` 只影响新建的 Browserbase 会话。`region` 选择 Browserbase
+计算区域，注册代理决定网络出口。SDK 只接受代理 ID、模式和区域；代理账号密码由
+运维人员在 OpsConsole 管理。
+
 ### Web Search
 
 ```ts
@@ -708,6 +717,8 @@ try {
 - AK/SK 只保存在可信服务端。
 - 不要把 delegation token 暴露给不可信客户端。
 - 每次 Agent 行动只申请必要 scope。
+- SDK 的产品方法每次调用前都会重新兑换 delegation token，因此 AccessKey 的 scope
+  变更会在下一次 SDK 调用前重新校验。已经在 SDK 外取得的产品 token 仍会持续有效至过期。
 - 浏览器接管、站点登录、长期监控、敏感产物访问优先使用 `interactive`。
 - 在业务日志中记录 `auditId`、`requestId`、`traceId`，方便后续审计。
 - 如果怀疑 AK/SK 泄露，应在 Qoni Console 中轮换密钥。

package/dist/index.cjs

@@ -1194,6 +1194,34 @@ var PLATFORM_DECIDED_RUN_OPTIONS = [
   "outputSchema",
   "cacheScript"
 ];
+var BROWSERBASE_REGIONS = /* @__PURE__ */ new Set([
+  "us-west-2",
+  "us-east-1",
+  "eu-central-1",
+  "ap-southeast-1"
+]);
+function validateBrowserProxyOptions(value) {
+  if (value === void 0) return;
+  if (!isJsonObject(value)) {
+    throw new QoniValidationError("browserProxy must be an object");
+  }
+  const allowed = /* @__PURE__ */ new Set(["proxyId", "mode", "region"]);
+  const extras = Object.keys(value).filter((key) => !allowed.has(key));
+  if (extras.length > 0) {
+    throw new QoniValidationError(
+      `browserProxy does not accept ${extras.join(", ")} \u2014 credentials stay server-side`
+    );
+  }
+  if (value.proxyId !== void 0 && (typeof value.proxyId !== "string" || !/^[a-z0-9][a-z0-9._-]{0,63}$/.test(value.proxyId))) {
+    throw new QoniValidationError("browserProxy.proxyId is invalid");
+  }
+  if (value.mode !== void 0 && !["off", "all", "scoped"].includes(String(value.mode))) {
+    throw new QoniValidationError("browserProxy.mode must be off, all, or scoped");
+  }
+  if (value.region !== void 0 && (typeof value.region !== "string" || !BROWSERBASE_REGIONS.has(value.region))) {
+    throw new QoniValidationError("browserProxy.region is not supported");
+  }
+}
 function createDoAnythingNamespace(transport) {
   const api = {
     createSession: (input) => transport.webAgentJson("POST", "/do_anything/sessions", input.token, {
@@ -1356,6 +1384,7 @@ function createDoAnythingNamespace(transport) {
       if (!prompt || typeof prompt !== "string") {
         throw new QoniValidationError("doAnything.run requires a prompt string");
       }
+      validateBrowserProxyOptions(rest.browserProxy);
       const unsupported = PLATFORM_DECIDED_RUN_OPTIONS.filter(
         (key) => rest[key] !== void 0
       );
@@ -1407,8 +1436,13 @@ function normalizeDoAnythingRunInput(input) {
     profileId: "profile_id",
     keepAlive: "keep_alive",
     allowedActions: "allowed_actions",
-    maxDurationMinutes: "max_duration_minutes"
+    maxDurationMinutes: "max_duration_minutes",
+    browserProxy: "browser_proxy"
   });
+  const browserProxy = body.browser_proxy;
+  if (isJsonObject(browserProxy)) {
+    body.browser_proxy = renameKeys2(browserProxy, { proxyId: "proxy_id" });
+  }
   return body;
 }
 function normalizeDoAnythingInterveneInput(input) {
@@ -2080,7 +2114,6 @@ var Qoni = class {
   secretKey;
   host;
   runtimeConfigPromise;
-  productTokenCache = /* @__PURE__ */ new Map();
   genAuthAdminTokenCache;
   gumem;
   genauth;
@@ -2551,9 +2584,6 @@ var Qoni = class {
     const runtimeToken = requiredRuntimeToken(token);
     if (!isQoniDelegationToken(runtimeToken)) return runtimeToken;
     const scopes = [...requiredScopes || []].sort();
-    const cacheKey = [service, runtimeToken, scopes.join(" ")].join(":");
-    const cached = this.productTokenCache.get(cacheKey);
-    if (cached && cached.expiresAt > Date.now() + 3e4) return cached.token;
     const response = await this.signedPost("/api/v3/eak/token-exchange", {
       subjectToken: runtimeToken,
       resource: service === "gumem" ? "gumem" : "webagent",
@@ -2568,10 +2598,6 @@ var Qoni = class {
         "Qoni product token exchange response did not include an access token"
       );
     }
-    this.productTokenCache.set(cacheKey, {
-      token: accessToken,
-      expiresAt: Date.now() + Math.max(0, readExpiresIn(payload) ?? 3600) * 1e3
-    });
     return accessToken;
   }
   async genauthAdminTokenFor() {