@qoniai/qoni 0.4.4 → 0.5.1

package/dist/index.d.cts

@@ -739,6 +739,15 @@ interface SnapshotAction {
 interface RunLimits {
     maxDurationMinutes?: number;
 }
+type BrowserbaseRegion = "us-west-2" | "us-east-1" | "eu-central-1" | "ap-southeast-1";
+interface BrowserProxyOptions {
+    /** Server-side proxy registry id. Credentials never enter the SDK call. */
+    proxyId?: string;
+    /** `off` uses datacenter egress; `all` proxies all requests; `scoped` uses admin patterns. */
+    mode?: "off" | "all" | "scoped";
+    /** Browserbase compute region. This is separate from the proxy's IP geography. */
+    region?: BrowserbaseRegion;
+}
 interface DoAnythingRunOptions {
     /** Delegation token — passed once here; the returned handle holds it. */
     token: string;
@@ -752,6 +761,8 @@ interface DoAnythingRunOptions {
      */
     session?: SessionRef;
     profileId?: string;
+    /** Applies when this run creates a new Browserbase session. */
+    browserProxy?: BrowserProxyOptions;
     keepAlive?: boolean;
     allowedActions?: string[];
     skills?: string[];
@@ -1242,7 +1253,6 @@ declare class Qoni {
     private readonly secretKey;
     private readonly host;
     private runtimeConfigPromise?;
-    private readonly productTokenCache;
     private genAuthAdminTokenCache?;
     readonly gumem: ReturnType<typeof createGumemNamespace>;
     readonly genauth: ReturnType<typeof createGenAuthNamespace>;
@@ -1384,4 +1394,4 @@ declare const QoniScopeBundles: {
     readonly TRACK: readonly ["webagent.track:read", "webagent.track:manage"];
 };
 
-export { type Action, type ActionKind, ActionKinds, type Artifact, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };
+export { type Action, type ActionKind, ActionKinds, type Artifact, type BrowserProxyOptions, type BrowserbaseRegion, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };

package/dist/index.d.ts

@@ -739,6 +739,15 @@ interface SnapshotAction {
 interface RunLimits {
     maxDurationMinutes?: number;
 }
+type BrowserbaseRegion = "us-west-2" | "us-east-1" | "eu-central-1" | "ap-southeast-1";
+interface BrowserProxyOptions {
+    /** Server-side proxy registry id. Credentials never enter the SDK call. */
+    proxyId?: string;
+    /** `off` uses datacenter egress; `all` proxies all requests; `scoped` uses admin patterns. */
+    mode?: "off" | "all" | "scoped";
+    /** Browserbase compute region. This is separate from the proxy's IP geography. */
+    region?: BrowserbaseRegion;
+}
 interface DoAnythingRunOptions {
     /** Delegation token — passed once here; the returned handle holds it. */
     token: string;
@@ -752,6 +761,8 @@ interface DoAnythingRunOptions {
      */
     session?: SessionRef;
     profileId?: string;
+    /** Applies when this run creates a new Browserbase session. */
+    browserProxy?: BrowserProxyOptions;
     keepAlive?: boolean;
     allowedActions?: string[];
     skills?: string[];
@@ -1242,7 +1253,6 @@ declare class Qoni {
     private readonly secretKey;
     private readonly host;
     private runtimeConfigPromise?;
-    private readonly productTokenCache;
     private genAuthAdminTokenCache?;
     readonly gumem: ReturnType<typeof createGumemNamespace>;
     readonly genauth: ReturnType<typeof createGenAuthNamespace>;
@@ -1384,4 +1394,4 @@ declare const QoniScopeBundles: {
     readonly TRACK: readonly ["webagent.track:read", "webagent.track:manage"];
 };
 
-export { type Action, type ActionKind, ActionKinds, type Artifact, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };
+export { type Action, type ActionKind, ActionKinds, type Artifact, type BrowserProxyOptions, type BrowserbaseRegion, type CaptureOptions, type ClarificationPayload, type CompleteDelegateAgentInput, type CompleteDelegateTokenInput, type ConfirmationPayload, type CoreRunEvent, type DeepResearchAttachOptions, type DeepResearchEvent, type DeepResearchRunOptions, type DelegateAgentInput, type DelegateAgentResponse, type DelegateAgentTokenResponse, type DelegateTokenInput, type DelegateTokenInteractiveInput, type DelegateTokenResponse, type DelegateTokenResult, type DelegateTokenSilentInput, type DelegateTokenSilentResponse, type DelegationMode, type DelegationTokenResponse, type DoAnythingAttachOptions, type DoAnythingEvent, type DoAnythingRunOptions, type DoAnythingSnapshot, type GenAuthAccessTokenInput, type GenAuthAdminToken, type GenAuthAdminTokenOverrideInput, type GenAuthDelegationIntrospectionInput, type GenAuthUserCreateBatchInput, type GenAuthUserCreateInput, type GenAuthUserDeleteBatchInput, type GenAuthUserGetBatchInput, type GenAuthUserGetInput, type GenAuthUserListInput, type GenAuthUserUpdateInput, type Interaction, type InteractionEvidence, InteractionHandle, type InteractionPayloadByType, type InteractionSite, type InteractionStatus, InteractionStatuses, type InteractionType, InteractionTypes, type InteractiveDelegationResponse, type JsonObject, type MonitorEvent, type MonitorEventsOptions, MonitorHandle, type MonitorRunsOptions, Qoni, QoniAuthError, QoniDelegationRequiredError, QoniError, type QoniErrorCode, type QoniErrorOptions, type QoniEvent, type QoniEventType, QoniEventTypes, type QoniMeta, type QoniOptions, QoniPermissionDeniedError, type QoniProduct, type QoniProductName, QoniProductScopes, QoniRateLimitError, type QoniResponse, type QoniRuntimeConfig, type QoniSSEEvent, QoniScopeBundles, QoniScopes, QoniTimeoutError, QoniTokenExpiredError, QoniUpstreamError, QoniValidationError, type RawRequestInput, type RunDoneData, type RunEvent, type RunEventsOptions, RunHandle, type RunImage, type RunLimits, type RunMessageData, type RunReconnectInfo, type RunResult, type RunScreenshotData, type RunStatus, type RunWaitOptions, type RuntimeTokenInput, type SessionRef, type SiteLoginPayload, type SnapshotAction, type SnapshotImage, type TakeControlPayload, type TokenInput, type TrackAttachOptions, type TrackCreateOptions, type WaitKind, type WaitPayload, type WebSearchAttachOptions, type WebSearchEvent, type WebSearchRunOptions, buildAuthorization, buildSignature, buildStringToSign };

package/dist/index.js

@@ -1146,6 +1146,34 @@ var PLATFORM_DECIDED_RUN_OPTIONS = [
   "outputSchema",
   "cacheScript"
 ];
+var BROWSERBASE_REGIONS = /* @__PURE__ */ new Set([
+  "us-west-2",
+  "us-east-1",
+  "eu-central-1",
+  "ap-southeast-1"
+]);
+function validateBrowserProxyOptions(value) {
+  if (value === void 0) return;
+  if (!isJsonObject(value)) {
+    throw new QoniValidationError("browserProxy must be an object");
+  }
+  const allowed = /* @__PURE__ */ new Set(["proxyId", "mode", "region"]);
+  const extras = Object.keys(value).filter((key) => !allowed.has(key));
+  if (extras.length > 0) {
+    throw new QoniValidationError(
+      `browserProxy does not accept ${extras.join(", ")} \u2014 credentials stay server-side`
+    );
+  }
+  if (value.proxyId !== void 0 && (typeof value.proxyId !== "string" || !/^[a-z0-9][a-z0-9._-]{0,63}$/.test(value.proxyId))) {
+    throw new QoniValidationError("browserProxy.proxyId is invalid");
+  }
+  if (value.mode !== void 0 && !["off", "all", "scoped"].includes(String(value.mode))) {
+    throw new QoniValidationError("browserProxy.mode must be off, all, or scoped");
+  }
+  if (value.region !== void 0 && (typeof value.region !== "string" || !BROWSERBASE_REGIONS.has(value.region))) {
+    throw new QoniValidationError("browserProxy.region is not supported");
+  }
+}
 function createDoAnythingNamespace(transport) {
   const api = {
     createSession: (input) => transport.webAgentJson("POST", "/do_anything/sessions", input.token, {
@@ -1308,6 +1336,7 @@ function createDoAnythingNamespace(transport) {
       if (!prompt || typeof prompt !== "string") {
         throw new QoniValidationError("doAnything.run requires a prompt string");
       }
+      validateBrowserProxyOptions(rest.browserProxy);
       const unsupported = PLATFORM_DECIDED_RUN_OPTIONS.filter(
         (key) => rest[key] !== void 0
       );
@@ -1359,8 +1388,13 @@ function normalizeDoAnythingRunInput(input) {
     profileId: "profile_id",
     keepAlive: "keep_alive",
     allowedActions: "allowed_actions",
-    maxDurationMinutes: "max_duration_minutes"
+    maxDurationMinutes: "max_duration_minutes",
+    browserProxy: "browser_proxy"
   });
+  const browserProxy = body.browser_proxy;
+  if (isJsonObject(browserProxy)) {
+    body.browser_proxy = renameKeys2(browserProxy, { proxyId: "proxy_id" });
+  }
   return body;
 }
 function normalizeDoAnythingInterveneInput(input) {
@@ -2032,7 +2066,6 @@ var Qoni = class {
   secretKey;
   host;
   runtimeConfigPromise;
-  productTokenCache = /* @__PURE__ */ new Map();
   genAuthAdminTokenCache;
   gumem;
   genauth;
@@ -2503,9 +2536,6 @@ var Qoni = class {
     const runtimeToken = requiredRuntimeToken(token);
     if (!isQoniDelegationToken(runtimeToken)) return runtimeToken;
     const scopes = [...requiredScopes || []].sort();
-    const cacheKey = [service, runtimeToken, scopes.join(" ")].join(":");
-    const cached = this.productTokenCache.get(cacheKey);
-    if (cached && cached.expiresAt > Date.now() + 3e4) return cached.token;
     const response = await this.signedPost("/api/v3/eak/token-exchange", {
       subjectToken: runtimeToken,
       resource: service === "gumem" ? "gumem" : "webagent",
@@ -2520,10 +2550,6 @@ var Qoni = class {
         "Qoni product token exchange response did not include an access token"
       );
     }
-    this.productTokenCache.set(cacheKey, {
-      token: accessToken,
-      expiresAt: Date.now() + Math.max(0, readExpiresIn(payload) ?? 3600) * 1e3
-    });
     return accessToken;
   }
   async genauthAdminTokenFor() {