@scalebrowser/sdk 1.1.0 → 1.3.0

package/dist/index.js

@@ -31,7 +31,14 @@ var ErrorCode = {
    * the proxy): here the proxy is fine and the address is simply spoken for. Wait
    * for a term to run out, let the daemon draw again, or turn exclusivity off for
    * this profile. */
-  ExitAddressTaken: 4013
+  ExitAddressTaken: 4013,
+  /** The plan does not allow this: a 4th profile or workflow on Free, a schedule
+   * or webhook trigger on Free, or another feature the plan leaves out.
+   * Distinct from ConcurrencyLimit (4008 = too many browsers at once, free one or
+   * upgrade): here nothing is running too much, the plan itself stops it. The
+   * body's `plan_limit` names which limit, the allowed number, the plan and
+   * whether the 7-day trial is still open. */
+  PlanLimit: 4014
 };
 var CODE_LABELS = {
   4001: "Not found",
@@ -44,7 +51,8 @@ var CODE_LABELS = {
   4010: "Unauthorized",
   4011: "No account connected to this machine",
   4012: "This profile is open on another machine",
-  4013: "This exit address belongs to another profile"
+  4013: "This exit address belongs to another profile",
+  4014: "The plan does not allow this"
 };
 var ScalebrowserError = class extends Error {
   constructor(message) {
@@ -55,12 +63,15 @@ var ScalebrowserError = class extends Error {
 var ApiError = class extends ScalebrowserError {
   status;
   code;
+  /** The text code of the case, where the daemon names one. */
+  reason;
   body;
   constructor(status, body, fallbackMessage) {
     const label = body?.code ? CODE_LABELS[body.code] : void 0;
     super(body?.message || label || fallbackMessage || `Request failed (HTTP ${status})`);
     this.status = status;
     this.code = body?.code;
+    this.reason = body?.reason;
     this.body = body;
   }
   /** True for auth failures that must trigger re-authentication. */
@@ -251,6 +262,30 @@ var ControlApi = class extends ClientCore {
       query: { origin: params.origin, kind: params.kind, profile_id: params.profile_id }
     });
   }
+  /**
+   * What waits in a tab of a running profile. Operator locks and standing rules
+   * answer what they decide first; those come back under `already_answered`.
+   * Asking keeps the browser's prompts waiting for an answer for two minutes,
+   * instead of the browser refusing them on its own.
+   */
+  listPendingInterruptions(profileId, opts = {}) {
+    return this.request("GET", `/v1/profiles/${enc(profileId)}/interruptions`, void 0, {
+      query: { target_id: opts.targetId },
+      signal: opts.signal
+    });
+  }
+  /**
+   * Answer one prompt the way its own button would. A kind an operator lock
+   * decides is refused with 409: change the lock to answer it from here. A prompt
+   * that is gone comes back as `applied: false`, not as an error.
+   */
+  respondInterruption(profileId, body) {
+    return this.request(
+      "POST",
+      `/v1/profiles/${enc(profileId)}/interruptions/respond`,
+      body
+    );
+  }
   // ── Artifacts ──────────────────────────────────────────────────────────────
   /**
    * Hand the daemon a file so `interact action=upload` has something to attach.
@@ -490,6 +525,14 @@ var IdentityApi = class extends ClientCore {
   unbindInbox(profileId, channel) {
     return this.request("DELETE", `/v1/profiles/${enc(profileId)}/inbox/${enc(channel)}`);
   }
+  /**
+   * Read the profile's bound mailbox: the messages, the code candidates in each,
+   * and every link with its full address. Needs the vault password, because a
+   * sign-in link IS the account. Waits up to `timeout_ms` for the first message.
+   */
+  revealInbox(profileId, body) {
+    return this.request("POST", `/v1/profiles/${enc(profileId)}/inbox/reveal`, body);
+  }
   // ── Passkeys ───────────────────────────────────────────────────────────────
   /** What this profile can sign in to without a password. Metadata only. */
   listPasskeys(profileId, signal) {
@@ -582,1036 +625,1720 @@ var IdentityApi = class extends ClientCore {
   revealCookies(profileId, body) {
     return this.request("POST", `/v1/profiles/${enc(profileId)}/cookies/reveal`, body);
   }
-};
-
-// src/client-tasks.ts
-var TasksApi = class extends ClientCore {
-  // -- Tasks ------------------------------------------------------------------
-  //
-  // Fleet-wide by default, and deliberately so: the question this surface exists
-  // for is "what is outstanding across my twenty accounts", and a per-profile
-  // route would make a client ask it twenty times and sort the answers itself.
-  //
-  // None of these starts a browser. A task is a row, so reading the whole fleet's
-  // list costs nothing from the plan's concurrent-browser allowance. Reserve only
-  // the profiles that turn out to have work.
+  // ── Recorded requests ──────────────────────────────────────────────────────
   /**
-   * What is still to be done. No filter means every task of every profile.
-   *
-   * Pass `state: 'open'` for what is outstanding; without it, tasks finished
-   * within the last day are included too.
+   * The one door what a recorded request carried leaves through, and it needs the vault
+   * password: the full address with its query, every header value (`Cookie`,
+   * `Authorization`) and, on request, the body. The agent's `net_capture` answers by
+   * shape only. `seq` is the number it listed.
    */
-  listTasks(params, signal) {
-    return this.request("GET", "/v1/tasks", void 0, {
-      query: { ...params },
-      signal
-    });
+  revealRequest(profileId, seq, body) {
+    return this.request("POST", `/v1/profiles/${enc(profileId)}/network/${seq}/reveal`, body);
   }
-  /**
-   * Put the same task on one or many profiles, one row each.
-   *
-   * A task is a LINE, not a document: name the work and leave the material where
-   * it lives. `due_at` is a deadline, not a trigger; nothing runs by itself.
-   *
-   * Profiles that no longer exist come back in `missing` instead of failing the
-   * whole call.
-   */
-  createTasks(body) {
-    return this.request("POST", "/v1/tasks", body);
+};
+
+// src/client-presets.ts
+var PresetsApi = class extends ClientCore {
+  // ── Groups & presets ───────────────────────────────────────────────────────
+  listGroups(signal) {
+    return this.request("GET", "/v1/groups", void 0, { signal });
   }
-  /**
-   * Call a task off.
-   *
-   * Only a task nobody has claimed can be cancelled here. One an agent is working
-   * on right now is stopped by telling that agent, which is a channel that already
-   * reaches it; this surface answers `409` for it rather than pretending.
-   */
-  cancelTask(id) {
-    return this.request("PATCH", `/v1/tasks/${enc(id)}`, { state: "cancelled" });
+  getGroup(id, signal) {
+    return this.request("GET", `/v1/groups/${enc(id)}`, void 0, { signal });
   }
-  /** Remove a task outright. */
-  deleteTask(id) {
-    return this.request("DELETE", `/v1/tasks/${enc(id)}`);
+  createGroup(body) {
+    return this.request("POST", "/v1/groups", body);
   }
-  // -- Profile memory ---------------------------------------------------------
-  /**
-   * A profile's durable memory, the `PROFILE.md` at the top of its directory.
-   *
-   * `content` is `null` while nobody has written one: a profile starts with no
-   * file, not with an empty one.
-   */
-  getProfileMemory(profileId, signal) {
-    return this.request("GET", `/v1/profiles/${enc(profileId)}/memory`, void 0, {
-      signal
-    });
+  updateGroup(id, body) {
+    return this.request("PATCH", `/v1/groups/${enc(id)}`, body);
   }
-  /**
-   * Replace a profile's memory.
-   *
-   * Stored verbatim: no trimming, no appended newline, no line-ending
-   * translation. The last write wins and nothing warns, exactly as with a file
-   * two people can open.
-   */
-  putProfileMemory(profileId, content) {
-    return this.request("PUT", `/v1/profiles/${enc(profileId)}/memory`, { content });
+  deleteGroup(id) {
+    return this.request("DELETE", `/v1/groups/${enc(id)}`);
   }
-  /** Remove a profile's memory. Removing one that is not there is not an error. */
-  deleteProfileMemory(profileId) {
-    return this.request("DELETE", `/v1/profiles/${enc(profileId)}/memory`);
+  listPresets(signal) {
+    return this.request("GET", "/v1/presets", void 0, { signal });
   }
-};
-
-// src/client-runs.ts
-var RunsApi = class extends ClientCore {
-  // ── Agent runs ─────────────────────────────────────────────────────────────
-  /** Runs, newest first. Read-only, all of it. */
-  listRuns(params = {}, signal) {
-    return this.request("GET", "/v1/runs", void 0, {
-      query: { profile_id: params.profile_id, limit: params.limit, offset: params.offset },
-      signal
-    });
+  getPreset(id, signal) {
+    return this.request("GET", `/v1/presets/${enc(id)}`, void 0, { signal });
   }
-  /** One run. */
-  getRun(runId, signal) {
-    return this.request("GET", `/v1/runs/${enc(runId)}`, void 0, { signal });
+  createPreset(body) {
+    return this.request("POST", "/v1/presets", body);
   }
-  /** A run's steps, oldest first: the order they happened in. */
-  listRunSteps(runId, params = {}, signal) {
-    return this.request("GET", `/v1/runs/${enc(runId)}/steps`, void 0, {
-      query: { limit: params.limit, offset: params.offset },
-      signal
-    });
+  updatePreset(id, body) {
+    return this.request("PATCH", `/v1/presets/${enc(id)}`, body);
+  }
+  deletePreset(id) {
+    return this.request("DELETE", `/v1/presets/${enc(id)}`);
+  }
+  // ── Video presets ──────────────────────────────────────────────────────────
+  listVideoPresets(signal) {
+    return this.request("GET", "/v1/video-presets", void 0, { signal });
+  }
+  getVideoPreset(id, signal) {
+    return this.request("GET", `/v1/video-presets/${enc(id)}`, void 0, { signal });
+  }
+  /** The daemon validates `config` strictly and names the failing field path. */
+  createVideoPreset(body) {
+    return this.request("POST", "/v1/video-presets", body);
+  }
+  /** A built-in preset refuses edits. Duplicate it and edit the copy. */
+  updateVideoPreset(id, body) {
+    return this.request("PATCH", `/v1/video-presets/${enc(id)}`, body);
+  }
+  /** The only way to make a built-in preset yours: copy, then edit the copy. */
+  duplicateVideoPreset(id, body = {}) {
+    return this.request("POST", `/v1/video-presets/${enc(id)}/duplicate`, body);
+  }
+  deleteVideoPreset(id) {
+    return this.request("DELETE", `/v1/video-presets/${enc(id)}`);
+  }
+  /** One still of the sample film under an UNSAVED config, drawn by the daemon's own renderer.
+   *  `moment` wins over `frame`; both absent means the daemon's default moment. */
+  previewVideoPreset(body, signal) {
+    return this.request("POST", "/v1/video-presets/preview", body, { signal });
+  }
+  /** A clip of the sample film, blocking until it is encoded (the editor uses the SSE form of the
+   *  same route; a script waits). Fetch the bytes with `downloadVideoPresetClip`. */
+  previewVideoPresetClip(body, signal) {
+    return this.request("POST", "/v1/video-presets/preview/clip", body, { signal });
+  }
+  /** The clip's MP4 bytes. */
+  downloadVideoPresetClip(id, signal) {
+    return this.requestBytes("GET", `/v1/video-presets/preview/clip/${enc(id)}`, { signal });
   }
   /**
-   * The still taken at one step, as JPEG bytes.
-   *
-   * The picture shows a customer's account, so it is decrypted only on the way
-   * out and never cached anywhere shared.
+   * The values a preset's `constraints` may take. Ask rather than hardcode: the
+   * region list comes from the daemon's embedded persona model, so a pinned copy
+   * drifts the moment that model changes and every create 400s.
    */
-  getRunShot(runId, seq, signal) {
-    return this.requestBytes("GET", `/v1/runs/${enc(runId)}/shots/${seq}`, { signal });
-  }
-  /** What every running profile currently shows. */
-  getActivity(signal) {
-    return this.request("GET", "/v1/activity", void 0, { signal });
+  getPersonaConstraints(signal) {
+    return this.request(
+      "GET",
+      "/v1/persona/constraints",
+      void 0,
+      { signal }
+    );
   }
 };
 
-// src/client-videos.ts
-var VideosApi = class extends ClientCore {
-  // ── Videos ────────────────────────────────────────────────────────────────
-  /** One gallery page, newest first. Running renders are videos too. */
-  listVideos(params = {}, signal) {
-    return this.request("GET", "/v1/videos", void 0, {
+// src/client-profiles.ts
+var ProfilesApi = class extends ClientCore {
+  // ── Profiles ───────────────────────────────────────────────────────────────
+  listProfiles(params = {}, signal) {
+    return this.request("GET", "/v1/profiles", void 0, {
       query: {
-        q: params.q,
-        profile_id: params.profile_id,
-        run_id: params.run_id,
-        kind: params.kind,
-        preset: params.preset,
+        group: params.group,
         state: params.state,
-        page: params.page
+        q: params.q,
+        limit: params.limit,
+        offset: params.offset,
+        sort: params.sort,
+        order: params.order
       },
       signal
     });
   }
-  /** One video row, progress included while it renders. */
-  getVideo(videoId, signal) {
-    return this.request("GET", `/v1/videos/${enc(videoId)}`, void 0, { signal });
-  }
-  /** Rename. The title also lands in the MP4's metadata on the NEXT render. */
-  renameVideo(videoId, title, signal) {
-    return this.request("PATCH", `/v1/videos/${enc(videoId)}`, { title }, { signal });
-  }
   /**
-   * Delete a video (`raw: true` also purges its recording's raw material).
-   * A live share link is revoked first; 409 `job_running` while it renders.
+   * Every id matching `params`, unpaged: what "act on all matches" needs.
+   *
+   * `listProfiles` is paged, so acting on "everything" from it only ever covers the
+   * page you fetched. Asking for ids costs one request and no persona payloads.
    */
-  deleteVideo(videoId, opts = {}, signal) {
-    return this.request("DELETE", `/v1/videos/${enc(videoId)}`, void 0, {
-      query: { raw: opts.raw },
+  listProfileIds(params = {}, signal) {
+    return this.request("GET", "/v1/profiles/ids", void 0, {
+      query: {
+        group: params.group,
+        state: params.state,
+        q: params.q,
+        sort: params.sort,
+        order: params.order
+      },
       signal
     });
   }
-  /** Cancel a queued or rendering video. `done` stays done (409). */
-  cancelVideo(videoId, signal) {
-    return this.request("POST", `/v1/videos/${enc(videoId)}/cancel`, void 0, {
+  /**
+   * How many profiles match `params`, split by runtime state. One request, and
+   * its size does not grow with the fleet.
+   *
+   * `listProfiles` is paged and answers a bare array, so counting what came back
+   * counts the page. `listProfileIds` carries the same total but ships an
+   * identifier per profile to do it, and cannot split by state at all.
+   *
+   * `params.state` is ignored here on purpose: a caller labelling every state is
+   * sitting in one of them.
+   */
+  countProfiles(params = {}, signal) {
+    return this.request("GET", "/v1/profiles/count", void 0, {
+      query: { group: params.group, q: params.q },
       signal
     });
   }
-  /** Render a failed or cancelled video again: same id, new job. */
-  rerenderVideo(videoId, body = {}, signal) {
-    return this.request("POST", `/v1/videos/${enc(videoId)}/renders`, body, { signal });
+  getProfile(id, signal) {
+    return this.request("GET", `/v1/profiles/${enc(id)}`, void 0, { signal });
   }
-  /** A short-lived fetchable address for one asset (default the video). */
-  videoAccess(videoId, asset, signal) {
-    return this.request(
-      "POST",
-      `/v1/videos/${enc(videoId)}/access`,
-      asset ? { asset } : {},
-      { signal }
-    );
+  createProfile(body) {
+    return this.request("POST", "/v1/profiles", body);
   }
-  /** One asset's bytes, through a freshly minted grant. */
-  async downloadVideoFile(videoId, asset = "video", signal) {
-    const grant = await this.videoAccess(videoId, asset, signal);
-    const grantParam = new URL(grant.url, "http://x").searchParams.get("grant") ?? "";
-    return this.requestBytes("GET", `/v1/videos/${enc(videoId)}/file`, {
-      query: { asset, grant: grantParam },
-      signal
-    });
+  updateProfile(id, body) {
+    return this.request("PATCH", `/v1/profiles/${enc(id)}`, body);
   }
-  /** What recordings and videos cost on disk, plus the caps. */
-  videosStorage(signal) {
-    return this.request("GET", "/v1/videos/storage", void 0, { signal });
+  deleteProfile(id) {
+    return this.request("DELETE", `/v1/profiles/${enc(id)}`);
   }
-  // ── Recordings ────────────────────────────────────────────────────────────
-  /** Recordings, newest first. The row outlives its raw bytes. */
-  listRecordings(params = {}, signal) {
-    return this.request("GET", "/v1/recordings", void 0, {
-      query: { profile_id: params.profile_id },
-      signal
-    });
+  /** Start a profile → CDP ws endpoint. Errors: 4002/4003/4005/4006/4008. */
+  startProfile(id, body = {}) {
+    return this.request("POST", `/v1/profiles/${enc(id)}/start`, body);
   }
-  getRecording(recordingId, signal) {
-    return this.request("GET", `/v1/recordings/${enc(recordingId)}`, void 0, {
-      signal
-    });
+  stopProfile(id) {
+    return this.request("POST", `/v1/profiles/${enc(id)}/stop`, {});
+  }
+  /** Drop the profile's lease, the operator's way out.
+   *
+   *  An agent releases with its handle; this call needs none. The daemon stops
+   *  the browser first when one is still up, then lets the lease go, so a dead
+   *  session cannot park the profile until its TTL runs out. `released: false`
+   *  is an honest no-op: there was nothing to let go. */
+  releaseProfile(id) {
+    return this.request("POST", `/v1/profiles/${enc(id)}/release`, {});
+  }
+  /** Ask for a profile that is open on another machine of this account.
+   *
+   *  Closes nothing here and nothing there: the control plane revokes the holder's
+   *  right, the holder closes its own browser at its next heartbeat. Start only
+   *  after this answered `free`. Errors: 4012 when it is held elsewhere. */
+  takeoverProfile(id) {
+    return this.request("POST", `/v1/profiles/${enc(id)}/takeover`, {});
+  }
+  // ── Bulk (PRD §D2) ───────────────────────────────────────────────────────
+  bulkCreateProfiles(body) {
+    return this.request("POST", "/v1/bulk/profiles", body);
   }
   /**
-   * Purge a recording's RAW material; the row stays forever
-   * (`raw_purged_at`). 409 `job_running` while a render of it is open.
+   * Start a batch. `headless` is the ONE visibility decision for the run; omitted
+   * means headless, the right default for an unattended client. The daemon stops at
+   * the machine's capacity limit and reports how far it got (`started` /
+   * `remaining` / `stopped_reason`) instead of failing every remaining id.
    */
-  deleteRecordingRaw(recordingId, signal) {
-    return this.request("DELETE", `/v1/recordings/${enc(recordingId)}`, void 0, {
-      signal
-    });
+  bulkStart(ids, headless) {
+    return this.request("POST", "/v1/bulk/start", { ids, headless });
   }
-  /** A NEW video from this recording (the same body the `video` tool takes). */
-  renderRecording(recordingId, body = {}, signal) {
-    return this.request("POST", `/v1/recordings/${enc(recordingId)}/renders`, body, {
-      signal
-    });
+  bulkStop(ids) {
+    return this.request("POST", "/v1/bulk/stop", { ids });
   }
-  // ── Codecs ────────────────────────────────────────────────────────────────
-  /** What this machine can encode with. The hardware list is PROBED, not read
-   *  off the binary: `h264_nvenc` is always listed and fails without a driver. */
-  getCodecs(signal) {
-    return this.request("GET", "/v1/codecs", void 0, { signal });
+  bulkDelete(ids) {
+    return this.request("POST", "/v1/bulk/delete", { ids });
   }
-  /** Turn Cisco's OpenH264 on or off. The hardware encoders are not switchable. */
-  setCodecEnabled(codec, enabled, signal) {
-    return this.request("PUT", `/v1/codecs/${enc(codec)}`, { enabled }, { signal });
+  bulkAssignProxy(ids, proxyId) {
+    return this.request("POST", "/v1/bulk/assign-proxy", { ids, proxy_id: proxyId });
   }
-  // -- Sharing ----------------------------------------------------------------
-  /** Make a finished video public. Measures every file, asks the control plane
-   *  for permission, uploads, and has the result confirmed. */
-  share(videoId, body = {}, signal) {
-    return this.request("POST", `/v1/videos/${enc(videoId)}/share`, body, {
-      signal
-    });
+  /**
+   * Give every id exactly this set of extensions.
+   *
+   * It REPLACES rather than adds, the same shape as assigning a proxy: picking a
+   * set for a batch states what those profiles carry. An empty list is a
+   * legitimate "none". An id the library does not hold refuses the whole call.
+   */
+  bulkAssignExtensions(ids, extRefs) {
+    return this.request("POST", "/v1/bulk/assign-extensions", { ids, ext_refs: extRefs });
   }
-  /** The share ORDER as this machine knows it. How many people watched and
-   *  whether the link still lives is read from the control plane, not from
-   *  here: a number carried along would be wrong the moment another machine
-   *  revoked. */
-  shareStatus(videoId, signal) {
-    return this.request(
-      "GET",
-      `/v1/videos/${enc(videoId)}/share`,
-      void 0,
-      { signal }
-    );
+  // ── Live detector audit ─────────────────────────────────────────────────────
+  //
+  // Drives the profile's OWN running browser through ~15 third-party fingerprint
+  // sites and keeps what each one saw. The profile must be RUNNING; the run takes
+  // minutes, so `startAudit` returns immediately and you poll `getAudit`.
+  /** Queue a run → the status right after queueing. `409` if not running / already running. */
+  startAudit(profileId) {
+    return this.request("POST", `/v1/profiles/${enc(profileId)}/audit`);
   }
-  /** Revoke the link. The files fall at once; the order stays until the control
-   *  plane confirms. */
-  revokeShare(videoId, signal) {
-    return this.request("DELETE", `/v1/videos/${enc(videoId)}/share`, void 0, {
+  /** State plus the last stored report. */
+  getAudit(profileId, signal) {
+    return this.request("GET", `/v1/profiles/${enc(profileId)}/audit`, void 0, {
       signal
     });
   }
-  // -- Media ------------------------------------------------------------------
-  /** Files a preset points at: background image, music bed, subtitle font. */
-  listMedia(kind, signal) {
-    return this.request("GET", "/v1/media", void 0, {
-      query: { kind },
+  // ── Exit-address exclusivity ────────────────────────────────────────────────
+  /** Which exit addresses this profile owns, and how far the rule reaches.
+   *
+   * `scope` is `'machine'` while this computer has no account key. That is the
+   * ordinary state of a second machine until sync is unlocked there once, and it is
+   * reported rather than hidden: believing the rule spans three machines when it
+   * spans one is worse than knowing. */
+  getExitStatus(profileId, signal) {
+    return this.request("GET", `/v1/profiles/${enc(profileId)}/exit`, void 0, {
       signal
     });
   }
-  /** Upload one file. The body IS the file; `name` and `mime` ride in the query. */
-  uploadMedia(kind, name, mime, bytes, signal) {
-    return this.request("POST", "/v1/media", bytes, {
-      query: { kind, name, mime },
-      signal
-    });
+  // ── Session bundles ─────────────────────────────────────────────────────────
+  exportSession(profileId, body) {
+    return this.request("POST", `/v1/profiles/${enc(profileId)}/session/export`, body);
   }
-  /** Remove a file. Refuses with 409 while a preset still points at it. */
-  deleteMedia(id, signal) {
-    return this.request("DELETE", `/v1/media/${enc(id)}`, void 0, { signal });
+  importSession(profileId, body) {
+    return this.request("POST", `/v1/profiles/${enc(profileId)}/session/import`, body);
   }
-  /** The file itself. */
-  mediaFile(id, signal) {
-    return this.requestBytes("GET", `/v1/media/${enc(id)}/file`, { signal });
+  // ── Trusted input ──────────────────────────────────────────────────────────
+  sendInput(profileId, body) {
+    return this.request("POST", `/v1/profiles/${enc(profileId)}/input`, body);
   }
-  // -- Voice providers --------------------------------------------------------
-  /** Which speech providers have a key. The key itself never comes back: the
-   *  answer carries a hint, and that is on purpose. */
-  listTtsProviders(signal) {
-    return this.request("GET", "/v1/tts-providers", void 0, { signal });
+};
+
+// src/client-proxies.ts
+var ProxiesApi = class extends ClientCore {
+  // ── Proxies (credentials write-only) ────────────────────────────────────────
+  /** The list carries `used_by` per row; `getProxy` below does not. */
+  listProxies(signal) {
+    return this.request("GET", "/v1/proxies", void 0, { signal });
   }
-  /** Store a key, or rename one. Leaving `apiKey` out keeps the stored key.
-   *
-   *  `apiKey` may also be a secret reference (`{{sb:...}}`), which is what an
-   *  agent gets back after fetching a key from the provider's own site: it is
-   *  not allowed to read the value. A reference needs `profileId`, because the
-   *  value belongs to one profile and there is nothing to open without it.
+  getProxy(id, signal) {
+    return this.request("GET", `/v1/proxies/${enc(id)}`, void 0, { signal });
+  }
+  createProxy(body) {
+    return this.request("POST", "/v1/proxies", body);
+  }
+  updateProxy(id, body) {
+    return this.request("PATCH", `/v1/proxies/${enc(id)}`, body);
+  }
+  deleteProxy(id) {
+    return this.request("DELETE", `/v1/proxies/${enc(id)}`);
+  }
+  /** Health + geo check (exit-ip/country/healthy + JA4↔JA4T verdict). */
+  checkProxy(id) {
+    return this.request("POST", `/v1/proxies/${enc(id)}/check`, {});
+  }
+  /**
+   * Probe a proxy config WITHOUT persisting it: validate before you commit.
+   * Pass `id` (and omit the credentials) to probe an existing proxy's stored,
+   * write-only credentials in an edit form.
    */
-  putTtsProvider(provider, body, signal) {
-    return this.request(
-      "PUT",
-      `/v1/tts-providers/${enc(provider)}`,
-      { api_key: body.apiKey, label: body.label, profile_id: body.profileId },
-      { signal }
-    );
+  checkProxyConfig(body) {
+    return this.request("POST", "/v1/proxies/check", body);
   }
-  /** Call the provider once for real, and record that the key works.
+};
+
+// src/client-tasks.ts
+var TasksApi = class extends ClientCore {
+  // -- Tasks ------------------------------------------------------------------
+  //
+  // Fleet-wide by default, and deliberately so: the question this surface exists
+  // for is "what is outstanding across my twenty accounts", and a per-profile
+  // route would make a client ask it twenty times and sort the answers itself.
+  //
+  // None of these starts a browser. A task is a row, so reading the whole fleet's
+  // list costs nothing from the plan's concurrent-browser allowance. Reserve only
+  // the profiles that turn out to have work.
+  /**
+   * What is still to be done. No filter means every task of every profile.
    *
-   *  Costs one short sentence of the account's own quota. Until this runs, a
-   *  provider row says `verified_at: null`, which means untested rather than
-   *  broken.
+   * Pass `state: 'open'` for what is outstanding; without it, tasks finished
+   * within the last day are included too.
    */
-  verifyTtsProvider(provider, signal) {
-    return this.request(
-      "POST",
-      `/v1/tts-providers/${enc(provider)}/verify`,
-      void 0,
-      { signal }
-    );
-  }
-  /** Forget a provider's key. */
-  deleteTtsProvider(provider, signal) {
-    return this.request("DELETE", `/v1/tts-providers/${enc(provider)}`, void 0, {
+  listTasks(params, signal) {
+    return this.request("GET", "/v1/tasks", void 0, {
+      query: { ...params },
       signal
     });
   }
-};
-
-// src/events.ts
-var MAX_BACKOFF_MS = 15e3;
-function subscribeEvents(params, handlers) {
-  const controller = new AbortController();
-  const fetchImpl = params.fetch ?? globalThis.fetch;
-  let closed = false;
-  let attempt = 0;
-  let lastSeq = null;
-  let everConnected = false;
-  const setStatus = (s) => handlers.onStatus?.(s);
-  const resync = (dropped) => handlers.onEvent({ type: "resync", dropped, at: Math.floor(Date.now() / 1e3) });
-  const deliver = (event) => {
-    if (typeof event.seq === "number") {
-      if (lastSeq !== null && event.seq > lastSeq + 1) resync(event.seq - lastSeq - 1);
-      lastSeq = event.seq;
-    }
-    handlers.onEvent(event);
-  };
-  async function connect() {
-    while (!closed) {
-      setStatus("connecting");
-      try {
-        const headers = { Accept: "text/event-stream" };
-        if (params.token) headers["Authorization"] = `Bearer ${params.token}`;
-        const res = await fetchImpl(`${params.baseUrl}/v1/events`, {
-          headers,
-          signal: controller.signal
-        });
-        if (res.status === 401) {
-          params.onUnauthorized?.();
-          break;
-        }
-        if (!res.ok || !res.body) {
-          throw new NetworkError(`event stream failed (HTTP ${res.status})`);
-        }
-        attempt = 0;
-        setStatus("open");
-        lastSeq = null;
-        if (everConnected) resync(0);
-        everConnected = true;
-        await pump(res.body, deliver, controller.signal);
-      } catch {
-        if (closed || controller.signal.aborted) break;
-      }
-      if (closed) break;
-      setStatus("connecting");
-      attempt += 1;
-      const delay2 = Math.min(MAX_BACKOFF_MS, 500 * 2 ** Math.min(attempt, 5));
-      await sleep(delay2, controller.signal);
-    }
-    setStatus("closed");
+  /**
+   * Put the same task on one or many profiles, one row each.
+   *
+   * A task is a LINE, not a document: name the work and leave the material where
+   * it lives. `due_at` is a deadline, not a trigger; nothing runs by itself.
+   *
+   * Profiles that no longer exist come back in `missing` instead of failing the
+   * whole call.
+   */
+  createTasks(body) {
+    return this.request("POST", "/v1/tasks", body);
   }
-  void connect();
-  return () => {
-    closed = true;
-    controller.abort();
-  };
-}
-async function pump(body, onEvent, signal) {
-  const reader = body.getReader();
-  const decoder = new TextDecoder();
-  let buffer = "";
-  try {
-    while (!signal.aborted) {
-      const { value, done } = await reader.read();
-      if (done) break;
-      buffer += decoder.decode(value, { stream: true });
-      let sep;
-      while ((sep = indexOfFrameEnd(buffer)) !== -1) {
-        const frame = buffer.slice(0, sep);
-        buffer = buffer.slice(sep).replace(/^(\r?\n){1,2}/, "");
-        const event = parseSseFrame(frame);
-        if (event) onEvent(event);
-      }
-    }
-  } finally {
-    void reader.cancel().catch(() => {
+  /**
+   * Call a task off.
+   *
+   * Only a task nobody has claimed can be cancelled here. One an agent is working
+   * on right now is stopped by telling that agent, which is a channel that already
+   * reaches it; this surface answers `409` for it rather than pretending.
+   */
+  cancelTask(id) {
+    return this.request("PATCH", `/v1/tasks/${enc(id)}`, { state: "cancelled" });
+  }
+  /** Remove a task outright. */
+  deleteTask(id) {
+    return this.request("DELETE", `/v1/tasks/${enc(id)}`);
+  }
+  // -- Profile memory ---------------------------------------------------------
+  /**
+   * A profile's durable memory, the `PROFILE.md` at the top of its directory.
+   *
+   * `content` is `null` while nobody has written one: a profile starts with no
+   * file, not with an empty one.
+   */
+  getProfileMemory(profileId, signal) {
+    return this.request("GET", `/v1/profiles/${enc(profileId)}/memory`, void 0, {
+      signal
     });
   }
-}
-function indexOfFrameEnd(buffer) {
-  const lf = buffer.indexOf("\n\n");
-  const crlf = buffer.indexOf("\r\n\r\n");
-  if (lf === -1) return crlf;
-  if (crlf === -1) return lf;
-  return Math.min(lf, crlf);
-}
-function parseSseFrame(frame) {
-  const dataLines = [];
-  for (const line of frame.split(/\r?\n/)) {
-    if (line.startsWith("data:")) dataLines.push(line.slice(5).replace(/^ /, ""));
+  /**
+   * Replace a profile's memory.
+   *
+   * Stored verbatim: no trimming, no appended newline, no line-ending
+   * translation. The last write wins and nothing warns, exactly as with a file
+   * two people can open.
+   */
+  putProfileMemory(profileId, content) {
+    return this.request("PUT", `/v1/profiles/${enc(profileId)}/memory`, { content });
   }
-  if (dataLines.length === 0) return null;
-  const payload = dataLines.join("\n");
-  if (!payload || payload === "[DONE]") return null;
-  try {
-    return JSON.parse(payload);
-  } catch {
-    return null;
+  /** Remove a profile's memory. Removing one that is not there is not an error. */
+  deleteProfileMemory(profileId) {
+    return this.request("DELETE", `/v1/profiles/${enc(profileId)}/memory`);
   }
-}
-function eventStream(params) {
-  const buffer = [];
-  const waiters = [];
-  let done = false;
-  const unsubscribe = subscribeEvents(params, {
-    onEvent: (event) => {
-      const waiter = waiters.shift();
-      if (waiter) waiter({ value: event, done: false });
-      else buffer.push(event);
-    }
-  });
-  const finish = () => {
-    if (!done) {
-      done = true;
-      unsubscribe();
-      for (const w of waiters.splice(0)) w({ value: void 0, done: true });
-    }
-    return { value: void 0, done: true };
-  };
-  return {
-    next() {
-      const next = buffer.shift();
-      if (next !== void 0) return Promise.resolve({ value: next, done: false });
-      if (done) return Promise.resolve({ value: void 0, done: true });
-      return new Promise((resolve) => waiters.push(resolve));
-    },
-    return() {
-      return Promise.resolve(finish());
-    },
-    [Symbol.asyncIterator]() {
-      return this;
-    }
-  };
-}
-function sleep(ms, signal) {
-  return new Promise((resolve) => {
-    if (signal.aborted) return resolve();
-    const t = setTimeout(resolve, ms);
-    signal.addEventListener(
-      "abort",
-      () => {
-        clearTimeout(t);
-        resolve();
+};
+
+// src/client-runs.ts
+var RunsApi = class extends ClientCore {
+  // ── Agent runs ─────────────────────────────────────────────────────────────
+  /** Runs, newest first. Read-only, all of it. */
+  listRuns(params = {}, signal) {
+    return this.request("GET", "/v1/runs", void 0, {
+      query: { profile_id: params.profile_id, limit: params.limit, offset: params.offset },
+      signal
+    });
+  }
+  /** One run. */
+  getRun(runId, signal) {
+    return this.request("GET", `/v1/runs/${enc(runId)}`, void 0, { signal });
+  }
+  /** A run's steps, oldest first: the order they happened in. */
+  listRunSteps(runId, params = {}, signal) {
+    return this.request("GET", `/v1/runs/${enc(runId)}/steps`, void 0, {
+      query: { limit: params.limit, offset: params.offset },
+      signal
+    });
+  }
+  /**
+   * The still taken at one step, as JPEG bytes.
+   *
+   * The picture shows a customer's account, so it is decrypted only on the way
+   * out and never cached anywhere shared.
+   */
+  getRunShot(runId, seq, signal) {
+    return this.requestBytes("GET", `/v1/runs/${enc(runId)}/shots/${seq}`, { signal });
+  }
+  /** What every running profile currently shows. */
+  getActivity(signal) {
+    return this.request("GET", "/v1/activity", void 0, { signal });
+  }
+};
+
+// src/client-videos.ts
+var VideosApi = class extends ClientCore {
+  // ── Videos ────────────────────────────────────────────────────────────────
+  /** One gallery page, newest first. Running renders are videos too. */
+  listVideos(params = {}, signal) {
+    return this.request("GET", "/v1/videos", void 0, {
+      query: {
+        q: params.q,
+        profile_id: params.profile_id,
+        run_id: params.run_id,
+        kind: params.kind,
+        preset: params.preset,
+        state: params.state,
+        page: params.page
       },
-      { once: true }
+      signal
+    });
+  }
+  /** One video row, progress included while it renders. */
+  getVideo(videoId, signal) {
+    return this.request("GET", `/v1/videos/${enc(videoId)}`, void 0, { signal });
+  }
+  /** Rename. The title also lands in the MP4's metadata on the NEXT render. */
+  renameVideo(videoId, title, signal) {
+    return this.request("PATCH", `/v1/videos/${enc(videoId)}`, { title }, { signal });
+  }
+  /**
+   * Delete a video (`raw: true` also purges its recording's raw material).
+   * A live share link is revoked first; 409 `job_running` while it renders.
+   */
+  deleteVideo(videoId, opts = {}, signal) {
+    return this.request("DELETE", `/v1/videos/${enc(videoId)}`, void 0, {
+      query: { raw: opts.raw },
+      signal
+    });
+  }
+  /** Cancel a queued or rendering video. `done` stays done (409). */
+  cancelVideo(videoId, signal) {
+    return this.request("POST", `/v1/videos/${enc(videoId)}/cancel`, void 0, {
+      signal
+    });
+  }
+  /** Render a failed or cancelled video again: same id, new job. */
+  rerenderVideo(videoId, body = {}, signal) {
+    return this.request("POST", `/v1/videos/${enc(videoId)}/renders`, body, { signal });
+  }
+  /** A short-lived fetchable address for one asset (default the video). */
+  videoAccess(videoId, asset, signal) {
+    return this.request(
+      "POST",
+      `/v1/videos/${enc(videoId)}/access`,
+      asset ? { asset } : {},
+      { signal }
     );
-  });
-}
-var CdpConnection = class {
-  #ws;
-  #nextId = 0;
-  #pending = /* @__PURE__ */ new Map();
-  #subscribers = /* @__PURE__ */ new Set();
-  #closeListeners = /* @__PURE__ */ new Set();
-  #closeReason = null;
-  constructor(ws) {
-    this.#ws = ws;
-    ws.on("message", (data) => this.#onMessage(data));
-    ws.on("close", () => this.#onClose(new CdpError(-1, "CDP connection closed")));
-    ws.on("error", (err) => this.#onClose(new NetworkError("CDP connection error", err)));
   }
-  request(method, params, sessionId) {
-    if (this.#closeReason) return Promise.reject(this.#closeReason);
-    const id = ++this.#nextId;
-    const frame = { id, method };
-    if (params !== void 0) frame["params"] = params;
-    if (sessionId !== void 0) frame["sessionId"] = sessionId;
-    return new Promise((resolve, reject) => {
-      this.#pending.set(id, { resolve, reject });
-      this.#ws.send(JSON.stringify(frame), (err) => {
-        if (err) {
-          this.#pending.delete(id);
-          reject(new NetworkError("failed to send CDP command", err));
-        }
-      });
+  /** One asset's bytes, through a freshly minted grant. */
+  async downloadVideoFile(videoId, asset = "video", signal) {
+    const grant = await this.videoAccess(videoId, asset, signal);
+    const grantParam = new URL(grant.url, "http://x").searchParams.get("grant") ?? "";
+    return this.requestBytes("GET", `/v1/videos/${enc(videoId)}/file`, {
+      query: { asset, grant: grantParam },
+      signal
     });
   }
-  subscribe(cb) {
-    this.#subscribers.add(cb);
-    return () => this.#subscribers.delete(cb);
+  /** What recordings and videos cost on disk, plus the caps. */
+  videosStorage(signal) {
+    return this.request("GET", "/v1/videos/storage", void 0, { signal });
   }
-  /** Register a callback fired once when the connection closes (immediately if
-   *  it already has); event streams use this to end instead of hanging. */
-  onClose(cb) {
-    if (this.#closeReason) {
-      cb();
-      return () => {
-      };
-    }
-    this.#closeListeners.add(cb);
-    return () => this.#closeListeners.delete(cb);
+  // ── Recordings ────────────────────────────────────────────────────────────
+  /** Recordings, newest first. The row outlives its raw bytes. */
+  listRecordings(params = {}, signal) {
+    return this.request("GET", "/v1/recordings", void 0, {
+      query: { profile_id: params.profile_id },
+      signal
+    });
   }
-  close() {
-    this.#ws.close();
+  getRecording(recordingId, signal) {
+    return this.request("GET", `/v1/recordings/${enc(recordingId)}`, void 0, {
+      signal
+    });
   }
-  get closed() {
-    return this.#closeReason !== null;
+  /**
+   * Purge a recording's RAW material; the row stays forever
+   * (`raw_purged_at`). 409 `job_running` while a render of it is open.
+   */
+  deleteRecordingRaw(recordingId, signal) {
+    return this.request("DELETE", `/v1/recordings/${enc(recordingId)}`, void 0, {
+      signal
+    });
   }
-  #onMessage(data) {
-    let frame;
-    try {
-      frame = JSON.parse(rawToString(data));
-    } catch {
-      return;
-    }
-    if (typeof frame.id === "number") {
-      const pending = this.#pending.get(frame.id);
-      if (!pending) return;
-      this.#pending.delete(frame.id);
-      if (frame.error) pending.reject(new CdpError(frame.error.code, frame.error.message, frame.error.data));
-      else pending.resolve(frame.result);
-      return;
-    }
-    if (typeof frame.method === "string") {
-      const event = { method: frame.method, params: frame.params ?? {}, sessionId: frame.sessionId };
-      for (const cb of [...this.#subscribers]) cb(event);
-    }
+  /** A NEW video from this recording (the same body the `video` tool takes). */
+  renderRecording(recordingId, body = {}, signal) {
+    return this.request("POST", `/v1/recordings/${enc(recordingId)}/renders`, body, {
+      signal
+    });
+  }
+  // ── Codecs ────────────────────────────────────────────────────────────────
+  /** What this machine can encode with. The hardware list is PROBED, not read
+   *  off the binary: `h264_nvenc` is always listed and fails without a driver. */
+  getCodecs(signal) {
+    return this.request("GET", "/v1/codecs", void 0, { signal });
+  }
+  /** Turn Cisco's OpenH264 on or off. The hardware encoders are not switchable. */
+  setCodecEnabled(codec, enabled, signal) {
+    return this.request("PUT", `/v1/codecs/${enc(codec)}`, { enabled }, { signal });
+  }
+  // -- Sharing ----------------------------------------------------------------
+  /** Make a finished video public. Measures every file, asks the control plane
+   *  for permission, uploads, and has the result confirmed. */
+  share(videoId, body = {}, signal) {
+    return this.request("POST", `/v1/videos/${enc(videoId)}/share`, body, {
+      signal
+    });
+  }
+  /** The share ORDER as this machine knows it. How many people watched and
+   *  whether the link still lives is read from the control plane, not from
+   *  here: a number carried along would be wrong the moment another machine
+   *  revoked. */
+  shareStatus(videoId, signal) {
+    return this.request(
+      "GET",
+      `/v1/videos/${enc(videoId)}/share`,
+      void 0,
+      { signal }
+    );
+  }
+  /** Revoke the link. The files fall at once; the order stays until the control
+   *  plane confirms. */
+  revokeShare(videoId, signal) {
+    return this.request("DELETE", `/v1/videos/${enc(videoId)}/share`, void 0, {
+      signal
+    });
+  }
+  // -- Media ------------------------------------------------------------------
+  /** Files a preset points at: background image, music bed, subtitle font. */
+  listMedia(kind, signal) {
+    return this.request("GET", "/v1/media", void 0, {
+      query: { kind },
+      signal
+    });
+  }
+  /** Upload one file. The body IS the file; `name` and `mime` ride in the query. */
+  uploadMedia(kind, name, mime, bytes, signal) {
+    return this.request("POST", "/v1/media", bytes, {
+      query: { kind, name, mime },
+      signal
+    });
+  }
+  /** Remove a file. Refuses with 409 while a preset still points at it. */
+  deleteMedia(id, signal) {
+    return this.request("DELETE", `/v1/media/${enc(id)}`, void 0, { signal });
+  }
+  /** The file itself. */
+  mediaFile(id, signal) {
+    return this.requestBytes("GET", `/v1/media/${enc(id)}/file`, { signal });
+  }
+  // -- Voice providers --------------------------------------------------------
+  /** Which speech providers have a key. The key itself never comes back: the
+   *  answer carries a hint, and that is on purpose. */
+  listTtsProviders(signal) {
+    return this.request("GET", "/v1/tts-providers", void 0, { signal });
+  }
+  /** Store a key, or rename one. Leaving `apiKey` out keeps the stored key.
+   *
+   *  `apiKey` may also be a secret reference (`{{sb:...}}`), which is what an
+   *  agent gets back after fetching a key from the provider's own site: it is
+   *  not allowed to read the value. A reference needs `profileId`, because the
+   *  value belongs to one profile and there is nothing to open without it.
+   */
+  putTtsProvider(provider, body, signal) {
+    return this.request(
+      "PUT",
+      `/v1/tts-providers/${enc(provider)}`,
+      { api_key: body.apiKey, label: body.label, profile_id: body.profileId },
+      { signal }
+    );
+  }
+  /** Call the provider once for real, and record that the key works.
+   *
+   *  Costs one short sentence of the account's own quota. Until this runs, a
+   *  provider row says `verified_at: null`, which means untested rather than
+   *  broken.
+   */
+  verifyTtsProvider(provider, signal) {
+    return this.request(
+      "POST",
+      `/v1/tts-providers/${enc(provider)}/verify`,
+      void 0,
+      { signal }
+    );
   }
-  #onClose(reason) {
-    if (this.#closeReason) return;
-    this.#closeReason = reason;
-    for (const [, pending] of this.#pending) pending.reject(reason);
-    this.#pending.clear();
-    this.#subscribers.clear();
-    for (const cb of [...this.#closeListeners]) cb();
-    this.#closeListeners.clear();
+  /** Forget a provider's key. */
+  deleteTtsProvider(provider, signal) {
+    return this.request("DELETE", `/v1/tts-providers/${enc(provider)}`, void 0, {
+      signal
+    });
   }
 };
-function rawToString(data) {
-  if (typeof data === "string") return data;
-  if (Buffer.isBuffer(data)) return data.toString("utf8");
-  if (Array.isArray(data)) return Buffer.concat(data).toString("utf8");
-  return Buffer.from(data).toString("utf8");
-}
-var CdpSession = class _CdpSession {
-  #conn;
-  sessionId;
-  #client;
-  #profileId;
-  #isolatedContextId;
-  constructor(conn, sessionId, client, profileId) {
-    this.#conn = conn;
-    this.sessionId = sessionId;
-    this.#client = client;
-    this.#profileId = profileId;
-  }
-  /** Send a raw CDP command and await its result (by id). */
-  send(method, params) {
-    return this.#conn.request(method, params, this.sessionId);
+
+// src/client-tables.ts
+var TablesApi = class extends ClientCore {
+  /**
+   * The tables a workflow uses, before deleting it: those only it uses (what
+   * `deleteWorkflow(id, { tables: 'trash' })` takes to the bin) and those another
+   * workflow uses too.
+   */
+  workflowDeletePreview(workflowId, signal) {
+    return this.request(
+      "GET",
+      `/v1/workflows/${enc(workflowId)}/delete-preview`,
+      void 0,
+      { signal }
+    );
   }
-  /** Register a callback for a CDP event scoped to this session. Returns unsubscribe. */
-  on(method, callback) {
-    return this.#conn.subscribe((event) => {
-      if (event.method === method && event.sessionId === this.sessionId) callback(event.params);
-    });
+  /** Every table outside the bin. */
+  listTables(signal) {
+    return this.request("GET", "/v1/tables", void 0, { signal });
   }
-  /** `for await (const event of session.events())` over this session's CDP events. */
-  events() {
-    return scopedEventStream(this.#conn, this.sessionId);
+  /** A local table with its first columns. */
+  createTable(body) {
+    return this.request("POST", "/v1/tables", body);
   }
-  /** Attach to a page target, returning a page-bound child session. */
-  async attachToPage(opts = {}) {
-    let targetId = opts.targetId;
-    if (opts.create) {
-      const created = await this.send("Target.createTarget", { url: opts.url ?? "about:blank" });
-      targetId = created.targetId;
-    } else if (!targetId) {
-      const { targetInfos } = await this.send("Target.getTargets");
-      const page = targetInfos.find((t) => t.type === "page");
-      if (page) {
-        targetId = page.targetId;
-      } else {
-        const created = await this.send("Target.createTarget", { url: opts.url ?? "about:blank" });
-        targetId = created.targetId;
-      }
-    }
-    const { sessionId } = await this.send("Target.attachToTarget", { targetId, flatten: true });
-    return new _CdpSession(this.#conn, sessionId, this.#client, this.#profileId);
+  getTable(id, signal) {
+    return this.request("GET", `/v1/tables/${enc(id)}`, void 0, { signal });
   }
-  /** Navigate the page; optionally wait for load. Never calls `Runtime.enable`. */
-  async navigate(url, opts = {}) {
-    const res = await this.send("Page.navigate", { url });
-    if (res.errorText) throw new CdpError(-1, `navigation failed: ${res.errorText}`);
-    if (opts.wait !== false) await this.#waitForLoad(opts.timeout ?? 3e4);
-    return res;
+  /** Rename, describe or change the delete rule. */
+  updateTable(id, body) {
+    return this.request("PATCH", `/v1/tables/${enc(id)}`, body);
   }
-  /** Evaluate a JS expression in the page (or an isolated world) and return its value. */
-  async evaluate(expression, opts = {}) {
-    const params = {
-      expression,
-      awaitPromise: opts.awaitPromise ?? true,
-      returnByValue: opts.returnByValue ?? true
-    };
-    if (opts.isolated) params["contextId"] = await this.#isolatedContext();
-    const res = await this.send("Runtime.evaluate", params);
-    if (res.exceptionDetails) {
-      throw new CdpError(-1, res.exceptionDetails.text || res.exceptionDetails.exception?.description || "evaluate exception");
-    }
-    return res.result.value;
+  /** To the bin for 30 days. */
+  deleteTable(id) {
+    return this.request("DELETE", `/v1/tables/${enc(id)}`);
   }
-  /** Create an isolated world for the (main) frame and return its execution context id. */
-  async createIsolatedWorld(frameId, worldName = "__sb") {
-    let frame = frameId;
-    if (!frame) {
-      const { frameTree } = await this.send("Page.getFrameTree");
-      frame = frameTree.frame.id;
-    }
-    const { executionContextId } = await this.send("Page.createIsolatedWorld", {
-      frameId: frame,
-      worldName,
-      grantUniveralAccess: false
+  /** One page of rows in order, with the total. */
+  listTableRows(id, params, signal) {
+    const { where, ...rest } = params ?? {};
+    return this.request("GET", `/v1/tables/${enc(id)}/rows`, void 0, {
+      query: { ...rest, ...where ? { where: JSON.stringify(where) } : {} },
+      signal
     });
-    return executionContextId;
-  }
-  // ── Humanized trusted input (routes through the daemon) ────────────────────
-  humanizeMove(x, y, opts = {}) {
-    return this.#input({ action: "move", x, y, width: opts.width });
   }
-  humanizeClick(x, y, opts = {}) {
-    return this.#input({
-      action: "click",
-      x,
-      y,
-      button: opts.button ?? "left",
-      click_count: opts.clickCount ?? 1,
-      width: opts.width
+  /** How many rows the table has outside the bin. */
+  countTableRows(id, signal) {
+    return this.request("GET", `/v1/tables/${enc(id)}/rows`, void 0, {
+      query: { count_only: true },
+      signal
     });
   }
+  /** Ops in order, one result each. */
+  editTable(id, body) {
+    return this.request("POST", `/v1/tables/${enc(id)}/edit`, body);
+  }
   /**
-   * B5: humanized move to the CENTRE of an element box, with the box width fed to the
-   * daemon's Fitts-law approach so the pointer lands *within* the element (not on a
-   * fixed corner). Pass a `getBoundingClientRect()`-shaped box.
+   * Bring a file into a table: CSV (encoding and delimiter recognised), XLSX,
+   * XLS or ODS, at most 10 MB, its first row naming the columns. A column
+   * matches by name; a name the table lacks becomes a new column. The rows stay
+   * invisible until the import is complete.
    */
-  humanizeMoveToElement(box) {
-    return this.humanizeMove(box.x + box.width / 2, box.y + box.height / 2, { width: box.width });
+  importTable(id, file, params) {
+    return this.request("POST", `/v1/tables/${enc(id)}/import`, file, {
+      query: { ...params }
+    });
   }
-  /** B5: humanized click at the centre of an element box (see {@link humanizeMoveToElement}). */
-  humanizeClickElement(box, opts = {}) {
-    return this.humanizeClick(box.x + box.width / 2, box.y + box.height / 2, { ...opts, width: box.width });
+  /** The whole table as a file to save: CSV (UTF-8 with a byte order mark) or XLSX. */
+  exportTable(id, format = "csv", signal) {
+    return this.requestBytes("GET", `/v1/tables/${enc(id)}/export`, { query: { format }, signal });
   }
-  humanizeType(text) {
-    return this.#input({ action: "type", text });
+  /** The tables in the bin. */
+  listTableTrash(signal) {
+    return this.request("GET", "/v1/tables/trash", void 0, { signal });
   }
-  humanizeScroll(x, y, opts = {}) {
-    return this.#input({ action: "scroll", x, y, delta_x: opts.deltaX ?? 0, delta_y: opts.deltaY ?? 0 });
+  /** Take tables back out of the bin. */
+  restoreTables(ids) {
+    return this.request("POST", "/v1/tables/trash/restore", { ids });
   }
-  /** Close the underlying CDP connection. */
-  close() {
-    this.#conn.close();
+  /** The Google accounts connected for linked sheets. Never a token. */
+  async listGoogleConnections(signal) {
+    const r = await this.request("GET", "/v1/connections/google", void 0, { signal });
+    return r.connections;
   }
-  #input(body) {
-    if (!this.#client || !this.#profileId) {
-      return Promise.reject(
-        new CdpError(-1, "humanize requires a CDP session created via client.connectCdp(result, profileId)")
-      );
-    }
-    return this.#client.sendInput(this.#profileId, { ...body, humanize: true });
+  /**
+   * Start connecting a Google account: open `auth_url` in the default browser;
+   * the connection appears once the person agreed there.
+   */
+  connectGoogle(body = {}) {
+    return this.request("POST", "/v1/connections/google", body);
   }
-  async #isolatedContext() {
-    if (this.#isolatedContextId === void 0) this.#isolatedContextId = await this.createIsolatedWorld();
-    return this.#isolatedContextId;
+  /** Disconnect and revoke at Google; a connection a table still uses stays as revoked. */
+  async disconnectGoogle(id) {
+    const r = await this.request("DELETE", `/v1/connections/google/${enc(id)}`);
+    return r.connections;
   }
-  async #waitForLoad(timeout) {
-    const deadline = Date.now() + timeout;
-    for (; ; ) {
-      const ready = await this.evaluate("document.readyState");
-      if (ready === "complete") return;
-      if (Date.now() > deadline) throw new CdpError(-1, "navigation wait timed out");
-      await delay(50);
-    }
+  /**
+   * Link a table to a sheet: open `auth_url` in the default browser, where Google
+   * shows its own file picker; the link appears once the person picked the sheet.
+   */
+  linkSheet(connectionId, body) {
+    return this.request("POST", `/v1/connections/google/${enc(connectionId)}/link`, body);
   }
 };
-async function openCdpSession(url, options = {}) {
-  const headers = {};
-  if (options.token) headers["Authorization"] = `Bearer ${options.token}`;
-  const ws = new WebSocket(url, { headers, handshakeTimeout: options.openTimeout ?? 3e4 });
-  await waitForOpen(ws);
-  const conn = new CdpConnection(ws);
-  const root = new CdpSession(conn, void 0, options.client, options.profileId);
-  if (options.autoAttach === false) return root;
-  return root.attachToPage({ create: options.createTarget ?? false, url: options.targetUrl });
-}
-function waitForOpen(ws) {
-  return new Promise((resolve, reject) => {
-    const onOpen = () => {
-      cleanup();
-      resolve();
-    };
-    const onError = (err) => {
-      cleanup();
-      reject(new NetworkError("CDP websocket failed to open", err));
-    };
-    const cleanup = () => {
-      ws.off("open", onOpen);
-      ws.off("error", onError);
-    };
-    ws.on("open", onOpen);
-    ws.on("error", onError);
-  });
-}
-function scopedEventStream(conn, sessionId) {
-  const buffer = [];
-  const waiters = [];
-  let done = false;
-  const unsubscribe = conn.subscribe((event) => {
-    if (event.sessionId !== sessionId) return;
-    const waiter = waiters.shift();
-    if (waiter) waiter({ value: event, done: false });
-    else buffer.push(event);
-  });
-  let offClose = () => {
-  };
-  const finish = () => {
-    if (!done) {
-      done = true;
-      unsubscribe();
-      offClose();
-      for (const w of waiters.splice(0)) w({ value: void 0, done: true });
-    }
-    return { value: void 0, done: true };
-  };
-  offClose = conn.onClose(() => {
-    finish();
-  });
-  return {
-    next() {
-      const next = buffer.shift();
-      if (next !== void 0) return Promise.resolve({ value: next, done: false });
-      if (done) return Promise.resolve({ value: void 0, done: true });
-      return new Promise((resolve) => waiters.push(resolve));
-    },
-    return() {
-      return Promise.resolve(finish());
-    },
-    [Symbol.asyncIterator]() {
-      return this;
-    }
-  };
-}
-function delay(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 
-// src/client.ts
-var DEFAULT_CAPACITY = {
-  max_concurrent: 64,
-  ram_budget_mb: 24576,
-  vram_budget_mb: null
-};
-var ScalebrowserClient = class extends ClientCore {
-  // ── Profiles ───────────────────────────────────────────────────────────────
-  listProfiles(params = {}, signal) {
-    return this.request("GET", "/v1/profiles", void 0, {
-      query: {
-        group: params.group,
-        state: params.state,
-        q: params.q,
-        limit: params.limit,
-        offset: params.offset,
-        sort: params.sort,
-        order: params.order
-      },
+// src/client-workflows.ts
+var WorkflowsApi = class extends ClientCore {
+  // -- Definitions --------------------------------------------------------------
+  /** Every workflow, by name. */
+  listWorkflows(signal) {
+    return this.request("GET", "/v1/workflows", void 0, { signal });
+  }
+  /** An empty workflow. Its draft starts at revision 0. */
+  createWorkflow(body) {
+    return this.request("POST", "/v1/workflows", body);
+  }
+  /** A workflow in full: summary, draft document and the findings of the checks. */
+  getWorkflow(id, params, signal) {
+    return this.request("GET", `/v1/workflows/${enc(id)}`, void 0, {
+      query: { ...params },
+      signal
+    });
+  }
+  /** What a field of one node may point at: the steps that run before it and the workflow's scopes. */
+  getWorkflowReferenceSources(id, node, signal) {
+    return this.request("GET", `/v1/workflows/${enc(id)}/reference-sources`, void 0, {
+      query: { node },
+      signal
+    });
+  }
+  renameWorkflow(id, name) {
+    return this.request("PATCH", `/v1/workflows/${enc(id)}`, { name });
+  }
+  /** Delete a workflow with its draft, versions and runs. */
+  deleteWorkflow(id, params) {
+    return this.request("DELETE", `/v1/workflows/${enc(id)}`, void 0, {
+      query: { ...params }
+    });
+  }
+  /**
+   * Apply a batch of edit ops to the draft, as a person. The batch applies whole
+   * or not at all; graph findings come back as `diagnostics`, not as a refusal.
+   *
+   * While another machine of the account edits this workflow the daemon answers
+   * 409 with `reason: workflow_edit_locked` and the holder's name.
+   */
+  editWorkflow(id, body) {
+    return this.request("POST", `/v1/workflows/${enc(id)}/edit`, body);
+  }
+  /**
+   * Move a part of the draft into a workflow of its own, published at once. One
+   * "Run Workflow" step stands where the part was, and later steps read its
+   * result. The part needs one line in, one line out, no trigger, both ends of
+   * every pair and no step that writes a variable; otherwise the daemon answers
+   * 422 with `reason: extract_invalid` and the sentence why in `why`.
+   * `base_rev` must be the draft's revision, else 409.
+   */
+  extractWorkflow(id, body) {
+    return this.request("POST", `/v1/workflows/${enc(id)}/extract`, body);
+  }
+  // -- Versions -----------------------------------------------------------------
+  /** The versions, newest first. */
+  listWorkflowVersions(id, signal) {
+    return this.request("GET", `/v1/workflows/${enc(id)}/versions`, void 0, {
       signal
     });
   }
+  /** One version whole, with its graph document; a version of another workflow is 404. */
+  getWorkflowVersion(id, versionId, signal) {
+    return this.request(
+      "GET",
+      `/v1/workflows/${enc(id)}/versions/${enc(versionId)}`,
+      void 0,
+      { signal }
+    );
+  }
   /**
-   * Every id matching `params`, unpaged: what "act on all matches" needs.
-   *
-   * `listProfiles` is paged, so acting on "everything" from it only ever covers the
-   * page you fetched. Asking for ids costs one request and no persona payloads.
+   * Save the draft as a version. The same content twice is one version. A draft
+   * with a hard finding (a cycle, an open region) answers 422 with the findings.
    */
-  listProfileIds(params = {}, signal) {
-    return this.request("GET", "/v1/profiles/ids", void 0, {
-      query: {
-        group: params.group,
-        state: params.state,
-        q: params.q,
-        sort: params.sort,
-        order: params.order
-      },
+  saveWorkflowVersion(id, body) {
+    return this.request("POST", `/v1/workflows/${enc(id)}/versions`, body ?? {});
+  }
+  /** Publish a version; `null` withdraws. Schedules, agents and every profile use what is published. */
+  publishWorkflow(id, versionId) {
+    return this.request("POST", `/v1/workflows/${enc(id)}/publish`, {
+      version_id: versionId
+    });
+  }
+  /**
+   * Restore a version: the draft takes its content back as one batch, and that
+   * content is saved as a new version. Publishing it is a step of its own.
+   */
+  revertWorkflow(id, body) {
+    return this.request("POST", `/v1/workflows/${enc(id)}/revert`, body);
+  }
+  /**
+   * Take one batch of the draft back, as a person: its restore ops become a new
+   * batch, which can itself be undone. With the `batch_id` that
+   * `adoptWorkflowVersion` answered it takes an applied repair back. A batch
+   * undone already, or one a later batch changed over (`reason: undo_conflict`),
+   * answers 409; a batch the draft never had, 404.
+   */
+  undoWorkflowBatch(id, batchId) {
+    return this.request("POST", `/v1/workflows/${enc(id)}/batches/${enc(batchId)}/undo`);
+  }
+  /** What changed from one version to another; without `to`, against the draft. */
+  diffWorkflow(id, params, signal) {
+    return this.request("GET", `/v1/workflows/${enc(id)}/diff`, void 0, {
+      query: { ...params },
       signal
     });
   }
+  // -- Variables ----------------------------------------------------------------
+  /** Every variable with its values; a secret value only as `{ withheld }`. */
+  listWorkflowVariables(id, signal) {
+    return this.request("GET", `/v1/workflows/${enc(id)}/variables`, void 0, {
+      signal
+    });
+  }
+  /** Set a value; a `secret` variable's value is stored sealed and never shown again. */
+  setWorkflowVariable(id, varId, body) {
+    return this.request("PUT", `/v1/workflows/${enc(id)}/variables/${enc(varId)}`, body);
+  }
+  /** The stored value in plain, behind the vault password. */
+  revealWorkflowVariable(id, varId, body) {
+    return this.request(
+      "POST",
+      `/v1/workflows/${enc(id)}/variables/${enc(varId)}/reveal`,
+      body
+    );
+  }
+  // -- Catalog ------------------------------------------------------------------
+  /** The newest version of every node type. */
+  listNodeTypes(params, signal) {
+    return this.request("GET", "/v1/node-types", void 0, {
+      query: { ...params },
+      signal
+    });
+  }
+  /** One node type: `click` for its newest version, `click@1` for a given one. */
+  getNodeType(type, signal) {
+    return this.request("GET", `/v1/node-types/${enc(type)}`, void 0, { signal });
+  }
   /**
-   * How many profiles match `params`, split by runtime state. One request, and
-   * its size does not grow with the fleet.
-   *
-   * `listProfiles` is paged and answers a bare array, so counting what came back
-   * counts the page. `listProfileIds` carries the same total but ships an
-   * identifier per profile to do it, and cannot split by state at all.
+   * The workflow's own settings, shaped like a node type's schema: one property
+   * per setting a run reads, keyed by the dotted path `set_workflow_settings`
+   * takes (`repair.rights`), `x-human-only` where only a person changes it.
+   */
+  getWorkflowSettingsSchema(signal) {
+    return this.request("GET", "/v1/workflow-settings-schema", void 0, { signal });
+  }
+};
+
+// src/client-workflow-runs.ts
+var WorkflowRunsApi = class extends ClientCore {
+  // -- Runs ---------------------------------------------------------------------
+  /**
+   * Start a run. With `wait` the request holds up to that many seconds (at most
+   * 110) and answers with the result of a run that succeeded in that time.
+   * Without a free profile the run waits in the queue, by default for an hour.
    *
-   * `params.state` is ignored here on purpose: a caller labelling every state is
-   * sitting in one of them.
+   * A start of the published version (the default) where nothing is published
+   * answers 409 with `reason: no_published_version`; `{ version: 'draft' }` runs
+   * the draft. A copy from a link nobody trusted yet answers 409 with
+   * `reason: code_trust_required`. A `run_on` no single machine carries answers
+   * 422 with `reason: run_on_unknown`; a draft test run naming another machine
+   * answers 422 with `reason: run_on_local_only`.
    */
-  countProfiles(params = {}, signal) {
-    return this.request("GET", "/v1/profiles/count", void 0, {
-      query: { group: params.group, q: params.q },
+  startWorkflowRun(id, body, params) {
+    return this.request("POST", `/v1/workflows/${enc(id)}/runs`, body ?? {}, {
+      query: { ...params }
+    });
+  }
+  /** Runs, newest first. */
+  listWorkflowRuns(params, signal) {
+    return this.request("GET", "/v1/workflow-runs", void 0, {
+      query: { ...params },
       signal
     });
   }
-  getProfile(id, signal) {
-    return this.request("GET", `/v1/profiles/${enc(id)}`, void 0, { signal });
+  /** One run with the state of every node. */
+  getWorkflowRun(runId, params, signal) {
+    return this.request("GET", `/v1/workflow-runs/${enc(runId)}`, void 0, {
+      query: { ...params },
+      signal
+    });
   }
-  createProfile(body) {
-    return this.request("POST", "/v1/profiles", body);
+  /** The steps of a run with what went in and what came out. */
+  listWorkflowRunSteps(runId, params, signal) {
+    return this.request("GET", `/v1/workflow-runs/${enc(runId)}/steps`, void 0, {
+      query: { ...params },
+      signal
+    });
   }
-  updateProfile(id, body) {
-    return this.request("PATCH", `/v1/profiles/${enc(id)}`, body);
+  /** This machine's folder boundary for file blocks. */
+  getWorkflowFileAccess(signal) {
+    return this.request("GET", "/v1/workflow-file-access", void 0, { signal });
   }
-  deleteProfile(id) {
-    return this.request("DELETE", `/v1/profiles/${enc(id)}`);
+  /** Switch "only granted folders" on or off for this machine. */
+  setWorkflowFileAccess(onlyGrantedFolders) {
+    return this.request("PUT", "/v1/workflow-file-access", {
+      only_granted_folders: onlyGrantedFolders
+    });
   }
-  /** Start a profile → CDP ws endpoint. Errors: 4002/4003/4005/4006/4008. */
-  startProfile(id, body = {}) {
-    return this.request("POST", `/v1/profiles/${enc(id)}/start`, body);
+  /** Grant a folder (a file's path grants its folder) for reading or writing. */
+  grantWorkflowFolder(path, mode, via) {
+    return this.request("POST", "/v1/workflow-file-access/folders", { path, mode, via });
   }
-  stopProfile(id) {
-    return this.request("POST", `/v1/profiles/${enc(id)}/stop`, {});
+  /** Take a folder off the list. */
+  ungrantWorkflowFolder(path) {
+    return this.request("DELETE", "/v1/workflow-file-access/folders", void 0, {
+      query: { path }
+    });
   }
-  /** Drop the profile's lease, the operator's way out.
-   *
-   *  An agent releases with its handle; this call needs none. The daemon stops
-   *  the browser first when one is still up, then lets the lease go, so a dead
-   *  session cannot park the profile until its TTL runs out. `released: false`
-   *  is an honest no-op: there was nothing to let go. */
-  releaseProfile(id) {
-    return this.request("POST", `/v1/profiles/${enc(id)}/release`, {});
+  /** The fast mode's domain list, empty by default. */
+  listWorkflowFastDomains(signal) {
+    return this.request("GET", "/v1/workflow-fast-domains", void 0, { signal });
   }
-  /** Ask for a profile that is open on another machine of this account.
-   *
-   *  Closes nothing here and nothing there: the control plane revokes the holder's
-   *  right, the holder closes its own browser at its next heartbeat. Start only
-   *  after this answered `free`. Errors: 4012 when it is held elsewhere. */
-  takeoverProfile(id) {
-    return this.request("POST", `/v1/profiles/${enc(id)}/takeover`, {});
+  /** Put a domain on the fast mode's list, or switch it on again after it switched itself off. */
+  putWorkflowFastDomain(domain) {
+    return this.request("PUT", `/v1/workflow-fast-domains/${enc(domain)}`);
   }
-  // ── Bulk (PRD §D2) ───────────────────────────────────────────────────────
-  bulkCreateProfiles(body) {
-    return this.request("POST", "/v1/bulk/profiles", body);
+  /** Take a domain off the fast mode's list. */
+  deleteWorkflowFastDomain(domain) {
+    return this.request("DELETE", `/v1/workflow-fast-domains/${enc(domain)}`);
   }
   /**
-   * Start a batch. `headless` is the ONE visibility decision for the run; omitted
-   * means headless, the right default for an unattended client. The daemon stops at
-   * the machine's capacity limit and reports how far it got (`started` /
-   * `remaining` / `stopped_reason`) instead of failing every remaining id.
+   * What this machine can do for a planned start that wakes it: sleep model, wake timers,
+   * the wake task, autostart and sign-in, each with its reason. A fix runs at the machine,
+   * from the app's card, because Windows asks for an administrator's confirmation.
    */
-  bulkStart(ids, headless) {
-    return this.request("POST", "/v1/bulk/start", { ids, headless });
+  getWorkflowReadiness(signal) {
+    return this.request("GET", "/v1/workflow-readiness", void 0, { signal });
   }
-  bulkStop(ids) {
-    return this.request("POST", "/v1/bulk/stop", { ids });
+  /** The approvals of this machine waiting for an answer, oldest first. */
+  async listWorkflowApprovals(signal) {
+    const out = await this.request("GET", "/v1/workflow-approvals", void 0, {
+      signal
+    });
+    return out.approvals;
   }
-  bulkDelete(ids) {
-    return this.request("POST", "/v1/bulk/delete", { ids });
+  /** Decide an approval from the app; the first valid decision counts. */
+  decideWorkflowApproval(id, body) {
+    return this.request("POST", `/v1/workflow-approvals/${enc(id)}/decide`, body);
   }
-  bulkAssignProxy(ids, proxyId) {
-    return this.request("POST", "/v1/bulk/assign-proxy", { ids, proxy_id: proxyId });
+  /**
+   * The account's approval webhook. Your system answers an announced approval with an
+   * API key that carries `approvals:decide`, at the `answer_url` the announcement names.
+   */
+  getApprovalWebhook(signal) {
+    return this.request("GET", "/v1/workflow-approval-webhook", void 0, { signal });
+  }
+  /** Set the approval webhook for every machine of the account; `url: null` clears it. */
+  setApprovalWebhook(body) {
+    return this.request("PUT", "/v1/workflow-approval-webhook", body);
+  }
+  /** The files a run keeps (screenshots, PDFs), without their bytes. */
+  listWorkflowRunFiles(runId, signal) {
+    return this.request("GET", `/v1/workflow-runs/${enc(runId)}/files`, void 0, {
+      signal
+    });
+  }
+  /** One file a run keeps, as bytes to save. */
+  getWorkflowRunFile(runId, fileId, signal) {
+    return this.requestBytes("GET", `/v1/workflow-runs/${enc(runId)}/files/${enc(fileId)}`, { signal });
+  }
+  /** Cancel a run that has not ended. An ended run answers 409. */
+  cancelWorkflowRun(runId) {
+    return this.request("POST", `/v1/workflow-runs/${enc(runId)}/cancel`);
   }
   /**
-   * Give every id exactly this set of extensions.
+   * Cancel a start that went to the machine its profile lives on, by the
+   * `forward_ref` its start answered. Not yet fetched there, it ends
+   * `cancelled` at once; fetched, it stays `sent` until that machine reports
+   * its end. An ended one answers as it ended.
+   */
+  cancelWorkflowForward(forwardRef) {
+    return this.request("POST", `/v1/workflow-forwards/${enc(forwardRef)}/cancel`);
+  }
+  /**
+   * Answer a halted run: an effect that may have landed stopped it. `done` counts
+   * it as sent and the run goes on without sending again, `retry` sends once
+   * more, `abort` ends the run. A run that does not stand halted answers 409.
+   * With `row_key`, answer one row to check instead: `done`, `retry` (the next
+   * run takes the row again) or `ignore`.
+   */
+  decideWorkflowRun(runId, body) {
+    return this.request("POST", `/v1/workflow-runs/${enc(runId)}/decide`, body);
+  }
+  /** What "run from step X" of a run would do: seeded, stale and coming nodes. */
+  previewWorkflowRunFork(runId, body) {
+    return this.request("POST", `/v1/workflow-runs/${enc(runId)}/fork-preview`, body);
+  }
+  /**
+   * Start "run from step X" of a run: the same trigger's run, the outputs before
+   * the node taken from the source, nothing of them run again.
+   */
+  forkWorkflowRun(runId, body) {
+    return this.request("POST", `/v1/workflow-runs/${enc(runId)}/fork`, body);
+  }
+  /** This machine's ended runs per workflow, profile or day, with the success rate. */
+  getWorkflowUsage(params, signal) {
+    return this.request("GET", "/v1/workflow-usage", void 0, {
+      query: { ...params },
+      signal
+    });
+  }
+  /** The runs that wait, each with why: queued ones with their place in the dispatch order. */
+  getWorkflowQueue(signal) {
+    return this.request("GET", "/v1/workflow-queue", void 0, { signal });
+  }
+  /**
+   * Planned, queued and skipped starts of "Schedule Window" triggers, oldest
+   * moment first, each with its reason.
+   */
+  listWorkflowFires(params = {}, signal) {
+    return this.request("GET", "/v1/workflow-fires", void 0, {
+      query: { ...params },
+      signal
+    });
+  }
+  // -- Switches -----------------------------------------------------------------
+  /** Every switch that was ever flipped; a switch without a row is on. */
+  listWorkflowSwitches(signal) {
+    return this.request("GET", "/v1/workflow-switches", void 0, { signal });
+  }
+  /**
+   * Flip a switch. A profile switch turned off ends that profile's begun runs at
+   * once; its queued runs wait until it is on again.
+   */
+  setWorkflowSwitch(body) {
+    return this.request("PUT", "/v1/workflow-switches", body);
+  }
+  /**
+   * Stop everything: the account switch off and every begun run ended. Nothing
+   * starts until the account switch is on again.
+   */
+  emergencyStopWorkflows() {
+    return this.request("POST", "/v1/workflow-switches/emergency-stop");
+  }
+};
+
+// src/client-workflow-ai.ts
+var WorkflowAiApi = class extends ClientCore {
+  /** A repair's fixes, newest first; with `workflowId` those of one workflow. */
+  listWorkflowRepairs(workflowId, signal) {
+    return this.request("GET", "/v1/workflow-repairs", void 0, {
+      signal,
+      query: workflowId ? { workflow_id: workflowId } : void 0
+    });
+  }
+  /** The repair's key figures per version and node; 7 days unless `days` (1 to 365) says otherwise. */
+  getWorkflowRepairMetrics(workflowId, days, signal) {
+    return this.request("GET", "/v1/workflow-repair-metrics", void 0, {
+      signal,
+      query: days === void 0 ? { workflow_id: workflowId } : { workflow_id: workflowId, days: String(days) }
+    });
+  }
+  /** One fix with the attempts that made or used it. */
+  getWorkflowRepair(id, signal) {
+    return this.request("GET", `/v1/workflow-repairs/${enc(id)}`, void 0, { signal });
+  }
+  /**
+   * Take a published fix back: a version `rollback` is published at once, the draft is left
+   * as it is; an element changed since the repair stays and is named.
+   */
+  revertWorkflowRepair(id) {
+    return this.request("POST", `/v1/workflow-repairs/${enc(id)}/revert`);
+  }
+  /**
+   * Take a repair's version over into the draft as one batch of the repair (one undo takes it
+   * back); a node a person changed since the repair's base is left and named.
+   */
+  adoptWorkflowVersion(workflowId, versionId) {
+    return this.request("POST", `/v1/workflows/${enc(workflowId)}/adopt`, {
+      version_id: versionId
+    });
+  }
+  /** Every model source with this machine's health, by label; never a key. */
+  listAiSources(signal) {
+    return this.request("GET", "/v1/ai-sources", void 0, { signal });
+  }
+  /** Add a model source; its key is written once and never read back. */
+  createAiSource(body) {
+    return this.request("POST", "/v1/ai-sources", body);
+  }
+  /** Change a model source or replace its key. */
+  updateAiSource(id, body) {
+    return this.request("PATCH", `/v1/ai-sources/${enc(id)}`, body);
+  }
+  /** Remove a model source. */
+  deleteAiSource(id) {
+    return this.request("DELETE", `/v1/ai-sources/${enc(id)}`);
+  }
+  /** Check an API source now: its health, and what the model takes when it
+   *  answers (a few small paid calls). A coding agent is not checked here yet. */
+  checkAiSource(id) {
+    return this.request("POST", `/v1/ai-sources/${enc(id)}/check`);
+  }
+  /** The account's model settings: default order and subscription limits. */
+  getAiSettings(signal) {
+    return this.request("GET", "/v1/ai-settings", void 0, { signal });
+  }
+  /** Set the default order (existing sources only) and the subscription limits. */
+  putAiSettings(body) {
+    return this.request("PUT", "/v1/ai-settings", body);
+  }
+  /** The model calls of runs, newest first. */
+  listAiInvocations(params = {}, signal) {
+    return this.request("GET", "/v1/ai-invocations", void 0, {
+      signal,
+      query: { ...params }
+    });
+  }
+};
+
+// src/client-workflow-sync.ts
+var WorkflowSyncApi = class extends ClientCore {
+  /**
+   * Every published workflow with a "Webhook" trigger, with the address to enter in
+   * Zapier, Make or your own system, and the counts of held and expired calls.
+   */
+  async workflowHooks(signal) {
+    const out = await this.request("GET", "/v1/workflow-hooks", void 0, { signal });
+    return out.hooks;
+  }
+  /** A new address for the workflow; the old one stops taking calls. */
+  rotateWorkflowHook(workflowId) {
+    return this.request("POST", `/v1/workflow-hooks/${enc(workflowId)}/rotate`);
+  }
+  /**
+   * This machine and every machine that is home to a profile, with the home of
+   * each profile: the binding a start names in `run_on`. Empty without an account.
+   */
+  workflowMachines(signal) {
+    return this.request("GET", "/v1/workflow-sync/machines", void 0, { signal });
+  }
+};
+
+// src/client-workflow-shares.ts
+var WorkflowSharesApi = class extends ClientCore {
+  /**
+   * Share a workflow by link. The link carries the published version, else the
+   * newest saved one, or the version named in `versionId`; the draft is never
+   * shared. Tables, variable values and secrets stay on this machine.
    *
-   * It REPLACES rather than adds, the same shape as assigning a proxy: picking a
-   * set for a batch states what those profiles carry. An empty list is a
-   * legitimate "none". An id the library does not hold refuses the whole call.
+   * A refusal answers with a `reason`: `share_needs_version` (nothing is saved
+   * yet), `share_unavailable` (no account is connected), `share_refused` or
+   * `share_offline` (the account's server said no, or could not be reached).
    */
-  bulkAssignExtensions(ids, extRefs) {
-    return this.request("POST", "/v1/bulk/assign-extensions", { ids, ext_refs: extRefs });
+  shareWorkflow(workflowId, opts = {}) {
+    return this.request("POST", "/v1/workflow-shares", {
+      workflow_id: workflowId,
+      ...opts.versionId !== void 0 ? { version_id: opts.versionId } : {}
+    });
   }
-  // ── Groups & presets ───────────────────────────────────────────────────────
-  listGroups(signal) {
-    return this.request("GET", "/v1/groups", void 0, { signal });
+  /**
+   * Open a link into a copy in this account. The copy keeps its sender's name
+   * and asks a person's trust before its first start. A link that opens
+   * nothing answers 400 with `reason: workflow_share_bad_link`; a revoked one
+   * 404 with `workflow_share_revoked`; one from a newer Scalebrowser 422 with
+   * `share_newer_format`.
+   */
+  importSharedWorkflow(link) {
+    return this.request("POST", "/v1/workflow-shares/import", { link });
   }
-  getGroup(id, signal) {
-    return this.request("GET", `/v1/groups/${enc(id)}`, void 0, { signal });
+  /**
+   * Stop a link from making new copies. Copies already made stay. Named for the
+   * workflow because `revokeShare` already withdraws a shared video.
+   */
+  revokeWorkflowShare(shareId) {
+    return this.request("POST", `/v1/workflow-shares/${enc(shareId)}/revoke`);
   }
-  createGroup(body) {
-    return this.request("POST", "/v1/groups", body);
+  /** The ready-made starting points. */
+  workflowTemplates(signal) {
+    return this.request("GET", "/v1/workflow-templates", void 0, { signal });
   }
-  updateGroup(id, body) {
-    return this.request("PATCH", `/v1/groups/${enc(id)}`, body);
+  /** Make a workflow from a template; `name` replaces the template's own. */
+  instantiateTemplate(templateId, opts = {}) {
+    return this.request(
+      "POST",
+      `/v1/workflow-templates/${enc(templateId)}/instantiate`,
+      opts.name !== void 0 ? { name: opts.name } : {}
+    );
   }
-  deleteGroup(id) {
-    return this.request("DELETE", `/v1/groups/${enc(id)}`);
+};
+
+// src/client-workflow-agency.ts
+var WorkflowAgencyApi = class extends ClientCore {
+  /**
+   * On a client app: what is shared with the agency, and the end-to-end mode
+   * (`brief_mode`), which the agency switches and this call only shows. Before an
+   * activation `activated` is `false` and `agency` is `null`.
+   */
+  wlSharing(signal) {
+    return this.request("GET", "/v1/wl/sharing", void 0, { signal });
   }
-  listPresets(signal) {
-    return this.request("GET", "/v1/presets", void 0, { signal });
+  /**
+   * On a client app: change what is shared with the agency. A scope left out
+   * stays as it is; turning one off withdraws it from then on, and what the
+   * agency already saw stays seen. Answers the state after the change.
+   *
+   * Before the app is connected to an agency this answers 409 with
+   * `reason: wl_not_activated`.
+   */
+  setWlSharing(body) {
+    return this.request("PUT", "/v1/wl/sharing", body);
   }
-  getPreset(id, signal) {
-    return this.request("GET", `/v1/presets/${enc(id)}`, void 0, { signal });
+  /** On an agency: its end customers, with the mode each one's machine reported last. */
+  async agencyClients(signal) {
+    const out = await this.request("GET", "/v1/agency/clients", void 0, { signal });
+    return out.clients;
   }
-  createPreset(body) {
-    return this.request("POST", "/v1/presets", body);
+  /**
+   * On an agency: hand the published version of each workflow to a client. The
+   * client's app adopts each one as its own published copy. A workflow that was
+   * never published answers 409; publish it first.
+   */
+  setAgencyDistribution(clientId, workflowIds) {
+    return this.request("PUT", "/v1/agency/distribution", {
+      client_id: clientId,
+      workflow_ids: workflowIds
+    });
+  }
+  /**
+   * On an agency: switch the end-to-end mode of one client. Only the agency can;
+   * the client's own app shows the mode and cannot change it.
+   */
+  setClientBriefMode(clientId, mode) {
+    return this.request(
+      "PUT",
+      `/v1/agency/clients/${enc(clientId)}/brief-mode`,
+      { mode }
+    );
+  }
+  /**
+   * On an agency: set the model key its clients' apps use. Write-only: the
+   * daemon keeps it and sends it, sealed, to every active client, and nothing
+   * reads it back. Saving a key again sends it again. With `kind`, each client
+   * turns it into a model source marked `agency`.
+   */
+  setAgencyAiKey(key, options = {}) {
+    const body = { key };
+    if (options.kind !== void 0) body.kind = options.kind;
+    if (options.model !== void 0) body.model = options.model;
+    if (options.baseUrl !== void 0) body.base_url = options.baseUrl;
+    return this.request("PUT", "/v1/agency/ai-key", body);
+  }
+};
+
+// src/events.ts
+var MAX_BACKOFF_MS = 15e3;
+function subscribeEvents(params, handlers) {
+  const controller = new AbortController();
+  const fetchImpl = params.fetch ?? globalThis.fetch;
+  let closed = false;
+  let attempt = 0;
+  let lastSeq = null;
+  let everConnected = false;
+  const setStatus = (s) => handlers.onStatus?.(s);
+  const resync = (dropped) => handlers.onEvent({ type: "resync", dropped, at: Math.floor(Date.now() / 1e3) });
+  const deliver = (event) => {
+    if (typeof event.seq === "number") {
+      if (lastSeq !== null && event.seq > lastSeq + 1) resync(event.seq - lastSeq - 1);
+      lastSeq = event.seq;
+    }
+    handlers.onEvent(event);
+  };
+  async function connect() {
+    while (!closed) {
+      setStatus("connecting");
+      try {
+        const headers = { Accept: "text/event-stream" };
+        if (params.token) headers["Authorization"] = `Bearer ${params.token}`;
+        const res = await fetchImpl(`${params.baseUrl}/v1/events`, {
+          headers,
+          signal: controller.signal
+        });
+        if (res.status === 401) {
+          params.onUnauthorized?.();
+          break;
+        }
+        if (!res.ok || !res.body) {
+          throw new NetworkError(`event stream failed (HTTP ${res.status})`);
+        }
+        attempt = 0;
+        setStatus("open");
+        lastSeq = null;
+        if (everConnected) resync(0);
+        everConnected = true;
+        await pump(res.body, deliver, controller.signal);
+      } catch {
+        if (closed || controller.signal.aborted) break;
+      }
+      if (closed) break;
+      setStatus("connecting");
+      attempt += 1;
+      const delay2 = Math.min(MAX_BACKOFF_MS, 500 * 2 ** Math.min(attempt, 5));
+      await sleep(delay2, controller.signal);
+    }
+    setStatus("closed");
   }
-  updatePreset(id, body) {
-    return this.request("PATCH", `/v1/presets/${enc(id)}`, body);
+  void connect();
+  return () => {
+    closed = true;
+    controller.abort();
+  };
+}
+async function pump(body, onEvent, signal) {
+  const reader = body.getReader();
+  const decoder = new TextDecoder();
+  let buffer = "";
+  try {
+    while (!signal.aborted) {
+      const { value, done } = await reader.read();
+      if (done) break;
+      buffer += decoder.decode(value, { stream: true });
+      let sep;
+      while ((sep = indexOfFrameEnd(buffer)) !== -1) {
+        const frame = buffer.slice(0, sep);
+        buffer = buffer.slice(sep).replace(/^(\r?\n){1,2}/, "");
+        const event = parseSseFrame(frame);
+        if (event) onEvent(event);
+      }
+    }
+  } finally {
+    void reader.cancel().catch(() => {
+    });
   }
-  deletePreset(id) {
-    return this.request("DELETE", `/v1/presets/${enc(id)}`);
+}
+function indexOfFrameEnd(buffer) {
+  const lf = buffer.indexOf("\n\n");
+  const crlf = buffer.indexOf("\r\n\r\n");
+  if (lf === -1) return crlf;
+  if (crlf === -1) return lf;
+  return Math.min(lf, crlf);
+}
+function parseSseFrame(frame) {
+  const dataLines = [];
+  for (const line of frame.split(/\r?\n/)) {
+    if (line.startsWith("data:")) dataLines.push(line.slice(5).replace(/^ /, ""));
   }
-  // ── Video presets ──────────────────────────────────────────────────────────
-  listVideoPresets(signal) {
-    return this.request("GET", "/v1/video-presets", void 0, { signal });
+  if (dataLines.length === 0) return null;
+  const payload = dataLines.join("\n");
+  if (!payload || payload === "[DONE]") return null;
+  try {
+    return JSON.parse(payload);
+  } catch {
+    return null;
   }
-  getVideoPreset(id, signal) {
-    return this.request("GET", `/v1/video-presets/${enc(id)}`, void 0, { signal });
+}
+function eventStream(params) {
+  const buffer = [];
+  const waiters = [];
+  let done = false;
+  const unsubscribe = subscribeEvents(params, {
+    onEvent: (event) => {
+      const waiter = waiters.shift();
+      if (waiter) waiter({ value: event, done: false });
+      else buffer.push(event);
+    }
+  });
+  const finish = () => {
+    if (!done) {
+      done = true;
+      unsubscribe();
+      for (const w of waiters.splice(0)) w({ value: void 0, done: true });
+    }
+    return { value: void 0, done: true };
+  };
+  return {
+    next() {
+      const next = buffer.shift();
+      if (next !== void 0) return Promise.resolve({ value: next, done: false });
+      if (done) return Promise.resolve({ value: void 0, done: true });
+      return new Promise((resolve) => waiters.push(resolve));
+    },
+    return() {
+      return Promise.resolve(finish());
+    },
+    [Symbol.asyncIterator]() {
+      return this;
+    }
+  };
+}
+function sleep(ms, signal) {
+  return new Promise((resolve) => {
+    if (signal.aborted) return resolve();
+    const t = setTimeout(resolve, ms);
+    signal.addEventListener(
+      "abort",
+      () => {
+        clearTimeout(t);
+        resolve();
+      },
+      { once: true }
+    );
+  });
+}
+
+// src/cdp-connection.ts
+var CdpConnection = class {
+  #ws;
+  #nextId = 0;
+  #pending = /* @__PURE__ */ new Map();
+  #subscribers = /* @__PURE__ */ new Set();
+  #closeListeners = /* @__PURE__ */ new Set();
+  #closeReason = null;
+  constructor(ws) {
+    this.#ws = ws;
+    ws.on("message", (data) => this.#onMessage(data));
+    ws.on("close", () => this.#onClose(new CdpError(-1, "CDP connection closed")));
+    ws.on("error", (err) => this.#onClose(new NetworkError("CDP connection error", err)));
   }
-  /** The daemon validates `config` strictly and names the failing field path. */
-  createVideoPreset(body) {
-    return this.request("POST", "/v1/video-presets", body);
+  request(method, params, sessionId) {
+    if (this.#closeReason) return Promise.reject(this.#closeReason);
+    const id = ++this.#nextId;
+    const frame = { id, method };
+    if (params !== void 0) frame["params"] = params;
+    if (sessionId !== void 0) frame["sessionId"] = sessionId;
+    return new Promise((resolve, reject) => {
+      this.#pending.set(id, { resolve, reject });
+      this.#ws.send(JSON.stringify(frame), (err) => {
+        if (err) {
+          this.#pending.delete(id);
+          reject(new NetworkError("failed to send CDP command", err));
+        }
+      });
+    });
   }
-  /** A built-in preset refuses edits. Duplicate it and edit the copy. */
-  updateVideoPreset(id, body) {
-    return this.request("PATCH", `/v1/video-presets/${enc(id)}`, body);
+  subscribe(cb) {
+    this.#subscribers.add(cb);
+    return () => this.#subscribers.delete(cb);
   }
-  /** The only way to make a built-in preset yours: copy, then edit the copy. */
-  duplicateVideoPreset(id, body = {}) {
-    return this.request("POST", `/v1/video-presets/${enc(id)}/duplicate`, body);
+  /** Register a callback fired once when the connection closes (immediately if
+   *  it already has); event streams use this to end instead of hanging. */
+  onClose(cb) {
+    if (this.#closeReason) {
+      cb();
+      return () => {
+      };
+    }
+    this.#closeListeners.add(cb);
+    return () => this.#closeListeners.delete(cb);
   }
-  deleteVideoPreset(id) {
-    return this.request("DELETE", `/v1/video-presets/${enc(id)}`);
+  close() {
+    this.#ws.close();
   }
-  /** One still of the sample film under an UNSAVED config, drawn by the daemon's own renderer.
-   *  `moment` wins over `frame`; both absent means the daemon's default moment. */
-  previewVideoPreset(body, signal) {
-    return this.request("POST", "/v1/video-presets/preview", body, { signal });
+  get closed() {
+    return this.#closeReason !== null;
   }
-  /** A clip of the sample film, blocking until it is encoded (the editor uses the SSE form of the
-   *  same route; a script waits). Fetch the bytes with `downloadVideoPresetClip`. */
-  previewVideoPresetClip(body, signal) {
-    return this.request("POST", "/v1/video-presets/preview/clip", body, { signal });
+  #onMessage(data) {
+    let frame;
+    try {
+      frame = JSON.parse(rawToString(data));
+    } catch {
+      return;
+    }
+    if (typeof frame.id === "number") {
+      const pending = this.#pending.get(frame.id);
+      if (!pending) return;
+      this.#pending.delete(frame.id);
+      if (frame.error) pending.reject(new CdpError(frame.error.code, frame.error.message, frame.error.data));
+      else pending.resolve(frame.result);
+      return;
+    }
+    if (typeof frame.method === "string") {
+      const event = { method: frame.method, params: frame.params ?? {}, sessionId: frame.sessionId };
+      for (const cb of [...this.#subscribers]) cb(event);
+    }
   }
-  /** The clip's MP4 bytes. */
-  downloadVideoPresetClip(id, signal) {
-    return this.requestBytes("GET", `/v1/video-presets/preview/clip/${enc(id)}`, { signal });
+  #onClose(reason) {
+    if (this.#closeReason) return;
+    this.#closeReason = reason;
+    for (const [, pending] of this.#pending) pending.reject(reason);
+    this.#pending.clear();
+    this.#subscribers.clear();
+    for (const cb of [...this.#closeListeners]) cb();
+    this.#closeListeners.clear();
   }
-  /**
-   * The values a preset's `constraints` may take. Ask rather than hardcode: the
-   * region list comes from the daemon's embedded persona model, so a pinned copy
-   * drifts the moment that model changes and every create 400s.
-   */
-  getPersonaConstraints(signal) {
-    return this.request(
-      "GET",
-      "/v1/persona/constraints",
-      void 0,
-      { signal }
-    );
+};
+function rawToString(data) {
+  if (typeof data === "string") return data;
+  if (Buffer.isBuffer(data)) return data.toString("utf8");
+  if (Array.isArray(data)) return Buffer.concat(data).toString("utf8");
+  return Buffer.from(data).toString("utf8");
+}
+
+// src/cdp.ts
+var CdpSession = class _CdpSession {
+  #conn;
+  sessionId;
+  #client;
+  #profileId;
+  constructor(conn, sessionId, client, profileId) {
+    this.#conn = conn;
+    this.sessionId = sessionId;
+    this.#client = client;
+    this.#profileId = profileId;
   }
-  // ── Proxies (credentials write-only) ────────────────────────────────────────
-  /** The list carries `used_by` per row; `getProxy` below does not. */
-  listProxies(signal) {
-    return this.request("GET", "/v1/proxies", void 0, { signal });
+  /** Send a raw CDP command and await its result (by id). */
+  send(method, params) {
+    return this.#conn.request(method, params, this.sessionId);
   }
-  getProxy(id, signal) {
-    return this.request("GET", `/v1/proxies/${enc(id)}`, void 0, { signal });
+  /** Register a callback for a CDP event scoped to this session. Returns unsubscribe. */
+  on(method, callback) {
+    return this.#conn.subscribe((event) => {
+      if (event.method === method && event.sessionId === this.sessionId) callback(event.params);
+    });
   }
-  createProxy(body) {
-    return this.request("POST", "/v1/proxies", body);
+  /** `for await (const event of session.events())` over this session's CDP events. */
+  events() {
+    return scopedEventStream(this.#conn, this.sessionId);
   }
-  updateProxy(id, body) {
-    return this.request("PATCH", `/v1/proxies/${enc(id)}`, body);
+  /** Attach to a page target, returning a page-bound child session. */
+  async attachToPage(opts = {}) {
+    let targetId = opts.targetId;
+    if (opts.create) {
+      const created = await this.send("Target.createTarget", { url: opts.url ?? "about:blank" });
+      targetId = created.targetId;
+    } else if (!targetId) {
+      const { targetInfos } = await this.send("Target.getTargets");
+      const page = targetInfos.find((t) => t.type === "page");
+      if (page) {
+        targetId = page.targetId;
+      } else {
+        const created = await this.send("Target.createTarget", { url: opts.url ?? "about:blank" });
+        targetId = created.targetId;
+      }
+    }
+    const { sessionId } = await this.send("Target.attachToTarget", { targetId, flatten: true });
+    return new _CdpSession(this.#conn, sessionId, this.#client, this.#profileId);
   }
-  deleteProxy(id) {
-    return this.request("DELETE", `/v1/proxies/${enc(id)}`);
+  /** Navigate the page; optionally wait for load. Never calls `Runtime.enable`. */
+  async navigate(url, opts = {}) {
+    const res = await this.send("Page.navigate", { url });
+    if (res.errorText) throw new CdpError(-1, `navigation failed: ${res.errorText}`);
+    if (opts.wait !== false) await this.#waitForLoad(opts.timeout ?? 3e4);
+    return res;
   }
-  /** Health + geo check (exit-ip/country/healthy + JA4↔JA4T verdict). */
-  checkProxy(id) {
-    return this.request("POST", `/v1/proxies/${enc(id)}/check`, {});
+  /** Evaluate a JS expression in the page (or an isolated world) and return its value. */
+  async evaluate(expression, opts = {}) {
+    const params = {
+      expression,
+      awaitPromise: opts.awaitPromise ?? true,
+      returnByValue: opts.returnByValue ?? true
+    };
+    if (opts.isolated) params["contextId"] = await this.createIsolatedWorld();
+    const res = await this.send("Runtime.evaluate", params);
+    if (res.exceptionDetails) {
+      throw new CdpError(-1, res.exceptionDetails.text || res.exceptionDetails.exception?.description || "evaluate exception");
+    }
+    return res.result.value;
   }
   /**
-   * Probe a proxy config WITHOUT persisting it: validate before you commit.
-   * Pass `id` (and omit the credentials) to probe an existing proxy's stored,
-   * write-only credentials in an edit form.
+   * Create an isolated world for the (main) frame and return its execution context id.
+   *
+   * The id belongs to the document that is loaded right now. After a navigation it
+   * names a context that no longer exists, so ask again instead of keeping it:
+   * Chrome hands back the same world for the same name, so asking costs one round
+   * trip.
    */
-  checkProxyConfig(body) {
-    return this.request("POST", "/v1/proxies/check", body);
+  async createIsolatedWorld(frameId, worldName = "__sb") {
+    let frame = frameId;
+    if (!frame) {
+      const { frameTree } = await this.send("Page.getFrameTree");
+      frame = frameTree.frame.id;
+    }
+    const { executionContextId } = await this.send("Page.createIsolatedWorld", {
+      frameId: frame,
+      worldName,
+      grantUniveralAccess: false
+    });
+    return executionContextId;
   }
-  // ── Live detector audit ─────────────────────────────────────────────────────
-  //
-  // Drives the profile's OWN running browser through ~15 third-party fingerprint
-  // sites and keeps what each one saw. The profile must be RUNNING; the run takes
-  // minutes, so `startAudit` returns immediately and you poll `getAudit`.
-  /** Queue a run → the status right after queueing. `409` if not running / already running. */
-  startAudit(profileId) {
-    return this.request("POST", `/v1/profiles/${enc(profileId)}/audit`);
+  // ── Humanized trusted input (routes through the daemon) ────────────────────
+  humanizeMove(x, y, opts = {}) {
+    return this.#input({ action: "move", x, y, width: opts.width });
   }
-  /** State plus the last stored report. */
-  getAudit(profileId, signal) {
-    return this.request("GET", `/v1/profiles/${enc(profileId)}/audit`, void 0, {
-      signal
+  humanizeClick(x, y, opts = {}) {
+    return this.#input({
+      action: "click",
+      x,
+      y,
+      button: opts.button ?? "left",
+      click_count: opts.clickCount ?? 1,
+      width: opts.width
     });
   }
-  // ── Exit-address exclusivity ────────────────────────────────────────────────
-  /** Which exit addresses this profile owns, and how far the rule reaches.
-   *
-   * `scope` is `'machine'` while this computer has no account key. That is the
-   * ordinary state of a second machine until sync is unlocked there once, and it is
-   * reported rather than hidden: believing the rule spans three machines when it
-   * spans one is worse than knowing. */
-  getExitStatus(profileId, signal) {
-    return this.request("GET", `/v1/profiles/${enc(profileId)}/exit`, void 0, {
-      signal
-    });
+  /**
+   * B5: humanized move to the CENTRE of an element box, with the box width fed to the
+   * daemon's Fitts-law approach so the pointer lands *within* the element (not on a
+   * fixed corner). Pass a `getBoundingClientRect()`-shaped box.
+   */
+  humanizeMoveToElement(box) {
+    return this.humanizeMove(box.x + box.width / 2, box.y + box.height / 2, { width: box.width });
   }
-  // ── Session bundles ─────────────────────────────────────────────────────────
-  exportSession(profileId, body) {
-    return this.request("POST", `/v1/profiles/${enc(profileId)}/session/export`, body);
+  /** B5: humanized click at the centre of an element box (see {@link humanizeMoveToElement}). */
+  humanizeClickElement(box, opts = {}) {
+    return this.humanizeClick(box.x + box.width / 2, box.y + box.height / 2, { ...opts, width: box.width });
   }
-  importSession(profileId, body) {
-    return this.request("POST", `/v1/profiles/${enc(profileId)}/session/import`, body);
+  humanizeType(text) {
+    return this.#input({ action: "type", text });
   }
-  // ── Trusted input ──────────────────────────────────────────────────────────
-  sendInput(profileId, body) {
-    return this.request("POST", `/v1/profiles/${enc(profileId)}/input`, body);
+  humanizeScroll(x, y, opts = {}) {
+    return this.#input({ action: "scroll", x, y, delta_x: opts.deltaX ?? 0, delta_y: opts.deltaY ?? 0 });
+  }
+  /** Close the underlying CDP connection. */
+  close() {
+    this.#conn.close();
+  }
+  #input(body) {
+    if (!this.#client || !this.#profileId) {
+      return Promise.reject(
+        new CdpError(-1, "humanize requires a CDP session created via client.connectCdp(result, profileId)")
+      );
+    }
+    return this.#client.sendInput(this.#profileId, { ...body, humanize: true });
+  }
+  // The poll reads in an isolated world: a page that wraps `document.readyState`
+  // sees a read from its own world, with a caller that is none of its scripts.
+  // While the new document commits, the world of the old one can vanish between
+  // asking for it and reading in it; the browser refuses that read with its own
+  // error code, and it is retried. A closed connection still fails at once.
+  async #waitForLoad(timeout) {
+    const deadline = Date.now() + timeout;
+    for (; ; ) {
+      const ready = await this.evaluate("document.readyState", { isolated: true }).catch((err) => {
+        if (err instanceof CdpError && err.code !== -1) return void 0;
+        throw err;
+      });
+      if (ready === "complete") return;
+      if (Date.now() > deadline) throw new CdpError(-1, "navigation wait timed out");
+      await delay(50);
+    }
   }
+};
+async function openCdpSession(url, options = {}) {
+  const headers = {};
+  if (options.token) headers["Authorization"] = `Bearer ${options.token}`;
+  const ws = new WebSocket(url, { headers, handshakeTimeout: options.openTimeout ?? 3e4 });
+  await waitForOpen(ws);
+  const conn = new CdpConnection(ws);
+  const root = new CdpSession(conn, void 0, options.client, options.profileId);
+  if (options.autoAttach === false) return root;
+  return root.attachToPage({ create: options.createTarget ?? false, url: options.targetUrl });
+}
+function waitForOpen(ws) {
+  return new Promise((resolve, reject) => {
+    const onOpen = () => {
+      cleanup();
+      resolve();
+    };
+    const onError = (err) => {
+      cleanup();
+      reject(new NetworkError("CDP websocket failed to open", err));
+    };
+    const cleanup = () => {
+      ws.off("open", onOpen);
+      ws.off("error", onError);
+    };
+    ws.on("open", onOpen);
+    ws.on("error", onError);
+  });
+}
+function scopedEventStream(conn, sessionId) {
+  const buffer = [];
+  const waiters = [];
+  let done = false;
+  const unsubscribe = conn.subscribe((event) => {
+    if (event.sessionId !== sessionId) return;
+    const waiter = waiters.shift();
+    if (waiter) waiter({ value: event, done: false });
+    else buffer.push(event);
+  });
+  let offClose = () => {
+  };
+  const finish = () => {
+    if (!done) {
+      done = true;
+      unsubscribe();
+      offClose();
+      for (const w of waiters.splice(0)) w({ value: void 0, done: true });
+    }
+    return { value: void 0, done: true };
+  };
+  offClose = conn.onClose(() => {
+    finish();
+  });
+  return {
+    next() {
+      const next = buffer.shift();
+      if (next !== void 0) return Promise.resolve({ value: next, done: false });
+      if (done) return Promise.resolve({ value: void 0, done: true });
+      return new Promise((resolve) => waiters.push(resolve));
+    },
+    return() {
+      return Promise.resolve(finish());
+    },
+    [Symbol.asyncIterator]() {
+      return this;
+    }
+  };
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+// src/client.ts
+var DEFAULT_CAPACITY = {
+  max_concurrent: 64,
+  ram_budget_mb: 24576,
+  vram_budget_mb: null
+};
+var ScalebrowserClient = class extends ClientCore {
   // ── Metrics (with graceful fallback) ────────────────────────────────────────
   async getMetrics(signal) {
     try {
@@ -1659,6 +2386,24 @@ var ScalebrowserClient = class extends ClientCore {
   async setExitRule(enabled, signal) {
     return this.request("PUT", "/v1/exit-rule", { enabled }, { signal });
   }
+  /**
+   * Which optional MCP tool groups agents on this machine see.
+   *
+   * Agents see the basic tools by default; video, tasks, profile management,
+   * the captcha helpers, the extras and the developer tools are one switch each.
+   */
+  async getAgentTools(signal) {
+    return this.request("GET", "/v1/agent-tools", void 0, { signal });
+  }
+  /**
+   * Turn one tool group on or off for every agent on this machine.
+   *
+   * It applies to the next tool list an agent asks for. A session that listed
+   * its tools before keeps that list until it reconnects.
+   */
+  async setAgentToolGroup(group, enabled, signal) {
+    return this.request("PUT", "/v1/agent-tools", { group, enabled }, { signal });
+  }
   // ── Events (SSE) ───────────────────────────────────────────────────────────
   /** Subscribe to lifecycle events. Returns an unsubscribe function. */
   subscribeEvents(handlers) {
@@ -1717,21 +2462,33 @@ function deriveMetricsFromProfiles(profiles) {
   };
 }
 applyMixins(ScalebrowserClient, [
+  ProfilesApi,
+  PresetsApi,
+  ProxiesApi,
   IdentityApi,
   RunsApi,
   VideosApi,
   ControlApi,
   ExtensionsApi,
-  TasksApi
+  TasksApi,
+  WorkflowsApi,
+  WorkflowRunsApi,
+  WorkflowAiApi,
+  WorkflowSyncApi,
+  WorkflowSharesApi,
+  WorkflowAgencyApi,
+  TablesApi
 ]);
 
+// src/types-proxies.ts
+var PROXY_KINDS = ["http", "socks5", "gateway"];
+var ROTATIONS = ["sticky", "rotating"];
+
 // src/types.ts
 var RUNTIME_STATES = ["stopped", "starting", "running", "crashed"];
 var GEO_MODES = ["strict_expected", "follow_exit", "off"];
-var PROXY_KINDS = ["http", "socks5", "gateway"];
-var ROTATIONS = ["sticky", "rotating"];
 
 // src/index.ts
-var VERSION = "1.1.0";
+var VERSION = "1.3.0";
 
 export { ApiError, CdpError, CdpSession, DEFAULT_CAPACITY, ErrorCode, GEO_MODES, NetworkError, PROXY_KINDS, ROTATIONS, RUNTIME_STATES, ScalebrowserClient, ScalebrowserError, VERSION, deriveMetricsFromProfiles, errorMessage, eventStream, openCdpSession, parseSseFrame, subscribeEvents };