@scalebrowser/sdk 0.2.0 → 0.4.0

package/dist/index.js

@@ -15,7 +15,17 @@ var ErrorCode = {
    * Distinct from Capacity (4003 = this machine is full, wait): the caller's move
    * is to stop a running browser anywhere or upgrade the plan. */
   ConcurrencyLimit: 4008,
-  Unauthorized: 4010
+  Unauthorized: 4010,
+  /** No account is connected to this machine, so nothing may run (DEC-014).
+   * Distinct from Unauthorized (4010 = the daemon's own bearer token is wrong, so
+   * re-read the token): 4011 means the machine needs to be signed in, and no token
+   * a client holds can substitute for that. Connect it in the desktop app. */
+  NotSignedIn: 4011,
+  /** This ONE profile is open on another machine of the same account (DEC-015).
+   * Distinct from ConcurrencyLimit (4008 = the plan is full, buy more or free any
+   * browser): the caller's move here costs nothing. Close it on that machine, or
+   * take it over from the app running there. */
+  ProfileInUse: 4012
 };
 var CODE_LABELS = {
   4001: "Not found",
@@ -25,7 +35,9 @@ var CODE_LABELS = {
   4005: "Launch preflight failed",
   4006: "Profile already running",
   4008: "Concurrent-browser limit reached (subscription-wide)",
-  4010: "Unauthorized"
+  4010: "Unauthorized",
+  4011: "No account connected to this machine",
+  4012: "This profile is open on another machine"
 };
 var ScalebrowserError = class extends Error {
   constructor(message) {
@@ -127,7 +139,7 @@ var ClientCore = class {
     return text ? JSON.parse(text) : void 0;
   }
   /**
-   * A route that answers with bytes, not JSON — artifacts and run stills.
+   * A route that answers with bytes, not JSON: artifacts and run stills.
    *
    * Separate from {@link ClientCore.request} rather than a flag on it, because the two
    * differ in the error path as well: a failed byte fetch still answers JSON,
@@ -203,11 +215,12 @@ function enc(id) {
 }
 
 // src/client-control.ts
-var SELF_HOSTED = {
+var NO_ACCOUNT = {
   licensed: false,
+  signed_in: false,
   running_local: 0,
   profiles_local: 0,
-  permits_launch: true
+  permits_launch: false
 };
 var ControlApi = class extends ClientCore {
   // ── Interruptions ──────────────────────────────────────────────────────────
@@ -244,7 +257,7 @@ var ControlApi = class extends ClientCore {
     });
   }
   /**
-   * Fetch one artifact's bytes — a screenshot, a download, a saved PDF.
+   * Fetch one artifact's bytes: a screenshot, a download, a saved PDF.
    *
    * A miss is a plain 404 whether the id never existed, expired, or belonged to
    * a released lease: the caller's next move is the same in all three cases.
@@ -257,14 +270,14 @@ var ControlApi = class extends ClientCore {
    * Licence state for display. The launch gate stays the authority on starts.
    *
    * A daemon predating the route answers 404, and that is not an error worth
-   * throwing: it means "self-hosted, no control plane", which is exactly what
-   * `licensed: false` says. Same shape of tolerance as {@link getMetrics}.
+   * throwing, but it is read pessimistically: nothing can be shown to be
+   * connected or permitted. Same shape of tolerance as {@link getMetrics}.
    */
   async getAccount(signal) {
     try {
       return await this.request("GET", "/v1/account", void 0, { signal });
     } catch (err) {
-      if (err instanceof ApiError && err.status === 404) return { ...SELF_HOSTED };
+      if (err instanceof ApiError && err.status === 404) return { ...NO_ACCOUNT };
       throw err;
     }
   }
@@ -272,7 +285,7 @@ var ControlApi = class extends ClientCore {
   health(signal) {
     return this.request("GET", "/health", void 0, { signal });
   }
-  /** "Can it serve?" Local facts only — the control plane is deliberately not consulted. */
+  /** "Can it serve?" Local facts only; the control plane is deliberately not consulted. */
   ready(signal) {
     return this.request("GET", "/health/ready", void 0, { signal });
   }
@@ -284,7 +297,7 @@ var ExtensionsApi = class extends ClientCore {
   //
   // Upload a `.crx`; the daemon lifts its public key out of the CRX header and
   // writes it into the unpacked `manifest.json`, so every profile loads the
-  // package under its CANONICAL Web-Store id. A key-less package is refused — it
+  // package under its CANONICAL Web-Store id. A key-less package is refused, since it
   // would take a path-derived id, identical across the fleet.
   /** The library, newest first. */
   listLibraryExtensions(signal) {
@@ -297,7 +310,7 @@ var ExtensionsApi = class extends ClientCore {
   uploadExtension(crx) {
     return this.request("POST", "/v1/extensions", crx);
   }
-  /** One library entry — the most recently added version. */
+  /** One library entry: the most recently added version. */
   getLibraryExtension(id, signal) {
     return this.request("GET", `/v1/extensions/${enc(id)}`, void 0, { signal });
   }
@@ -308,7 +321,7 @@ var ExtensionsApi = class extends ClientCore {
   /**
    * Remove ONE stocked version.
    *
-   * Assignments survive — they name the extension, not the version — unless this
+   * Assignments survive, because they name the extension and not the version, unless this
    * was the last version, in which case they go with it.
    */
   deleteLibraryExtensionVersion(id, version) {
@@ -347,14 +360,14 @@ var IdentityApi = class extends ClientCore {
   // ── Platform credentials ────────────────────────────────────────────────────
   //
   // Stored logins, so an agent can sign a profile into a platform WITHOUT ever
-  // holding the password — the daemon decrypts and types it. Only `revealCredential`
+  // holding the password: the daemon decrypts and types it. Only `revealCredential`
   // and the bundle calls return plaintext, and every one of them needs the vault
   // password: the bearer token alone is not enough, because the MCP agent layer
   // authenticates with exactly the same one.
   //
   // `platform` is whatever you have: the service's domain ("discord.com"), its
   // name ("Discord") or a host under it ("www.discord.com"). The daemon resolves
-  // all of them to ONE key — the registrable domain — and every response echoes
+  // all of them to ONE key (the registrable domain), and every response echoes
   // that key, so `listCredentials` and a later `deleteCredential` agree. Pass a
   // whole sign-in URL only to the MCP tools: here the platform is a path segment,
   // and a `/` in it is refused rather than read as a path.
@@ -370,7 +383,7 @@ var IdentityApi = class extends ClientCore {
   /**
    * Store or update one login.
    *
-   * An omitted secret keeps its stored value rather than clearing it — an edit form
+   * An omitted secret keeps its stored value rather than clearing it, because an edit form
    * never saw the password in the clear, so it cannot resend one; delete the row to
    * remove a credential. `totp_secret` may be pasted exactly as a site presents it
    * (grouped, lower case): it is normalised and test-decoded by the daemon, so a
@@ -403,7 +416,7 @@ var IdentityApi = class extends ClientCore {
    *
    * `password` is deliberately separate from the vault password: a backup gets
    * handed to another machine, and that must not also hand over daemon access. This
-   * is the answer to a lost master key — a daemon-generated password exists nowhere
+   * is the answer to a lost master key: a daemon-generated password exists nowhere
    * else.
    */
   exportCredentials(profileId, vaultPassword, password) {
@@ -475,6 +488,72 @@ var IdentityApi = class extends ClientCore {
   deletePasskey(profileId, credentialId) {
     return this.request("DELETE", `/v1/profiles/${enc(profileId)}/passkeys/${enc(credentialId)}`);
   }
+  // ── Secret Layer ───────────────────────────────────────────────────────────
+  //
+  // Values a profile holds that no agent ever reads. Nothing here returns a
+  // value, and that is not an oversight: the wrapper below starts the command
+  // INSIDE the daemon precisely so that no route has to hand plaintext out.
+  /** The entries this profile keeps, with the placeholder that stands for each. */
+  listSecrets(profileId, signal) {
+    return this.request(
+      "GET",
+      `/v1/profiles/${enc(profileId)}/secrets`,
+      void 0,
+      { signal }
+    );
+  }
+  /** Change a title, a binding, or the state. Never the label. */
+  updateSecret(profileId, secretId, body) {
+    return this.request(
+      "PATCH",
+      `/v1/profiles/${enc(profileId)}/secrets/${enc(secretId)}`,
+      body
+    );
+  }
+  /** Delete an entry. The reply names the runs it appeared in. */
+  deleteSecret(profileId, secretId) {
+    return this.request(
+      "DELETE",
+      `/v1/profiles/${enc(profileId)}/secrets/${enc(secretId)}`
+    );
+  }
+  /**
+   * Filter a text you hold against this profile's values.
+   *
+   * The SDK path exists because censoring only makes sense where a MODEL is
+   * reading: your own code is not, and a placeholder in the middle of it would
+   * break parsing. So the daemon offers the filter as a call rather than
+   * applying it to a channel it does not own.
+   */
+  scrubText(profileId, text) {
+    return this.request(
+      "POST",
+      `/v1/profiles/${enc(profileId)}/secrets/scrub`,
+      { text }
+    );
+  }
+  /**
+   * Run a command with named values in its environment.
+   *
+   * The daemon starts the child, so no value crosses a socket. At least one
+   * `env` entry is required: without the rule an `npm publish` would carry every
+   * value of the profile.
+   */
+  runWithSecrets(profileId, body) {
+    return this.request(
+      "POST",
+      `/v1/profiles/${enc(profileId)}/secrets/run`,
+      body
+    );
+  }
+  /** Is the secret layer on? It is by default. */
+  getSecretLayer(signal) {
+    return this.request("GET", "/v1/secret-layer", void 0, { signal });
+  }
+  /** Turn the secret layer on or off for the whole daemon. */
+  setSecretLayer(enabled) {
+    return this.request("POST", "/v1/secret-layer", { enabled });
+  }
   // ── Cookies ────────────────────────────────────────────────────────────────
   /**
    * The one door a cookie VALUE leaves through, and it needs the vault password.
@@ -501,7 +580,7 @@ var RunsApi = class extends ClientCore {
   getRun(runId, signal) {
     return this.request("GET", `/v1/runs/${enc(runId)}`, void 0, { signal });
   }
-  /** A run's steps, oldest first — the order they happened in. */
+  /** A run's steps, oldest first: the order they happened in. */
   listRunSteps(runId, params = {}, signal) {
     return this.request("GET", `/v1/runs/${enc(runId)}/steps`, void 0, {
       query: { limit: params.limit, offset: params.offset },
@@ -706,7 +785,7 @@ var CdpConnection = class {
     return () => this.#subscribers.delete(cb);
   }
   /** Register a callback fired once when the connection closes (immediately if
-   *  it already has) — event streams use this to end instead of hanging. */
+   *  it already has); event streams use this to end instead of hanging. */
   onClose(cb) {
     if (this.#closeReason) {
       cb();
@@ -990,7 +1069,7 @@ var ScalebrowserClient = class extends ClientCore {
     });
   }
   /**
-   * Every id matching `params`, unpaged — what "act on all matches" needs.
+   * Every id matching `params`, unpaged: what "act on all matches" needs.
    *
    * `listProfiles` is paged, so acting on "everything" from it only ever covers the
    * page you fetched. Asking for ids costs one request and no persona payloads.
@@ -1026,6 +1105,14 @@ var ScalebrowserClient = class extends ClientCore {
   stopProfile(id) {
     return this.request("POST", `/v1/profiles/${enc(id)}/stop`, {});
   }
+  /** Ask for a profile that is open on another machine of this account.
+   *
+   *  Closes nothing here and nothing there: the control plane revokes the holder's
+   *  right, the holder closes its own browser at its next heartbeat. Start only
+   *  after this answered `free`. Errors: 4012 when it is held elsewhere. */
+  takeoverProfile(id) {
+    return this.request("POST", `/v1/profiles/${enc(id)}/takeover`, {});
+  }
   // ── Bulk (PRD §D2) ───────────────────────────────────────────────────────
   bulkCreateProfiles(body) {
     return this.request("POST", "/v1/bulk/profiles", body);
@@ -1123,7 +1210,7 @@ var ScalebrowserClient = class extends ClientCore {
     return this.request("POST", `/v1/proxies/${enc(id)}/check`, {});
   }
   /**
-   * Probe a proxy config WITHOUT persisting it — validate before you commit.
+   * Probe a proxy config WITHOUT persisting it: validate before you commit.
    * Pass `id` (and omit the credentials) to probe an existing proxy's stored,
    * write-only credentials in an edit form.
    */
@@ -1234,6 +1321,6 @@ var PROXY_KINDS = ["http", "socks5", "gateway"];
 var ROTATIONS = ["sticky", "rotating"];
 
 // src/index.ts
-var VERSION = "0.2.0";
+var VERSION = "0.3.0";
 
 export { ApiError, CdpError, CdpSession, DEFAULT_CAPACITY, ErrorCode, GEO_MODES, HOST_MODES, NetworkError, PROXY_KINDS, ROTATIONS, RUNTIME_STATES, ScalebrowserClient, ScalebrowserError, VERSION, deriveMetricsFromProfiles, errorMessage, eventStream, openCdpSession, parseSseFrame, subscribeEvents };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scalebrowser/sdk",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Official Node/TypeScript SDK for the Scalebrowser daemon — typed REST client + direct-CDP driver plane (nodriver-style, not Playwright).",
   "type": "module",
   "license": "MIT",