@scalebrowser/sdk 1.2.0 → 1.3.0

package/CHANGELOG.md

@@ -9,6 +9,66 @@ reconstructing it here would look like a record that had been kept all along.
 The daemon and the SDK version independently. An SDK release names the daemon
 version it was tested against wherever that matters.
 
+## 1.3.0 (2026-11-05)
+
+Tested against daemon 0.26.0. Nothing is removed or renamed: every change adds a
+method, a field or a value to a union. A daemon up to 0.25.x answers the new
+workflow, table and plan routes with 404 or leaves the new fields out.
+
+- **Plans**: an account without a subscription is on `free` now, and
+  `enterprise` is a plan too (`Account.plan`). `Account` gains `profile_limit` and
+  `workflow_limit` (absent when the plan has no cap) and `workflows_local`.
+- `ErrorCode.PlanLimit` (4014): the plan itself stops an action, for example a
+  fourth profile on Free, a schedule on Free or a workflow over the plan's
+  number. The error body's `plan_limit` names the limit, the allowed number, the
+  plan and whether the 7-day trial is still open. `ApiError.reason` carries the
+  case where one numeric code covers several.
+- **Workflows**, the whole surface the app's workflow editor uses, about ninety
+  methods: create, edit, rename and delete (`createWorkflow`, `editWorkflow`,
+  `renameWorkflow`, `deleteWorkflow`, `workflowDeletePreview`), versions and
+  publishing (`saveWorkflowVersion`, `publishWorkflow`, `listWorkflowVersions`,
+  `diffWorkflow`, `revertWorkflow`, `adoptWorkflowVersion`, `undoWorkflowBatch`),
+  runs (`startWorkflowRun`, `listWorkflowRuns`, `getWorkflowRun`,
+  `listWorkflowRunSteps`, `cancelWorkflowRun`, `forkWorkflowRun`,
+  `previewWorkflowRunFork`, `decideWorkflowRun`, run files), approvals
+  (`listWorkflowApprovals`, `decideWorkflowApproval`, the approval webhook),
+  triggers and switches (`workflowHooks`, `rotateWorkflowHook`,
+  `listWorkflowFires`, `listWorkflowSwitches`, `setWorkflowSwitch`,
+  `emergencyStopWorkflows`), variables, file access, repairs, readiness, usage,
+  the queue, node types and the settings schema, templates
+  (`workflowTemplates`, `instantiateTemplate`), sharing (`shareWorkflow`,
+  `importSharedWorkflow`, `revokeWorkflowShare`) and the machines a workflow runs
+  on (`workflowMachines`, `cancelWorkflowForward`).
+- **Tables**: `createTable`, `listTables`, `getTable`, `updateTable`, `editTable`,
+  `listTableRows`, `countTableRows`, `importTable`, `exportTable`, the trash
+  (`listTableTrash`, `restoreTables`) and `deleteTable`.
+- **Google Sheets**: `connectGoogle`, `listGoogleConnections`, `linkSheet` and
+  `disconnectGoogle`.
+- **Model sources for the AI steps**: `listAiSources`, `createAiSource`,
+  `updateAiSource`, `checkAiSource`, `deleteAiSource`, `getAiSettings`,
+  `putAiSettings` and `listAiInvocations`.
+- **White label**: `agencyClients`, `setAgencyDistribution`, `setAgencyAiKey`,
+  `setClientBriefMode`, `wlSharing` and `setWlSharing`.
+- A run, an activity and an agent run can now name `workflow` as their actor
+  (`RunActor`), and `workflows` is a tool group (`ToolGroupId`).
+
+- `revealInbox(profileId, { vault_password })`: the profile's bound mailbox for a
+  script, with every message, the code candidates in it and each link with its
+  full address. Behind the vault password, because a sign-in link IS the account.
+- `listPendingInterruptions(profileId, { targetId })`: what waits in a tab right
+  now. Operator locks and standing rules answer what they decide first, and those
+  come back under `already_answered`.
+- `respondInterruption(profileId, { interruption_id, choice })`: answer one the
+  way its own button would. A kind an operator lock decides is refused with 409.
+- `LifecycleEvent` lacked three events the daemon sends: `concurrency_rejected`,
+  `secret_changed` (the whole entry as `SecretRow`, never a value) and
+  `secret_gone`. A test compares the union with the daemon's own list, so a new
+  event can no longer be missing here.
+- `WorkflowSyncView.unsent` (`UnsentChange[]`): what this machine could not send
+  to its other machines, with the workflow, its size and since when. The daemon
+  now splits a large saved version into parts, so only a change above about 8 MB
+  lands here. Optional: a daemon up to 0.24.0 does not send it.
+
 ## 1.2.0 (2026-10-22)
 
 Two fixes in the CDP driver, both measured against a real browser, and three

package/README.md

@@ -98,14 +98,18 @@ Every `/v1` endpoint is a typed method on `ScalebrowserClient`:
 - **Sessions**: `exportSession`, `importSession`
 - **Mailboxes**: `listInboxes`, `createInbox`, `updateInbox`, `deleteInbox`,
   `getInboxBindings`, `bindInbox`, `unbindInbox`, which is where a profile's
-  confirmation codes arrive
+  confirmation codes arrive. `revealInbox` reads them: every message, the code
+  candidates in it and each link with its full address, behind the vault password
+  because a sign-in link IS the account
 - **Passkeys**: `listPasskeys`, `deletePasskey`. Metadata only: the private key
   has no field and no endpoint
 - **Agent runs**: `listRuns`, `getRun`, `listRunSteps`, `getRunShot`,
   `getActivity`. Read-only, all of it
 - **Interruptions**: `listInterruptionLocks`, `setInterruptionLock`,
   `listInterruptionRules`, `setInterruptionRule`, `deleteInterruptionRule`: who
-  may answer when the browser asks something
+  may answer when the browser asks something. `listPendingInterruptions` shows what
+  waits in a tab right now and `respondInterruption` answers it; a kind an
+  operator lock decides is refused (409)
 - **Artifacts**: `putArtifact` (hand the daemon a file to upload later),
   `getArtifact` (fetch a screenshot, download or saved PDF as bytes)
 - **Tasks and memory**: `listTasks`, `createTasks`, `cancelTask`, `deleteTask`,
@@ -133,6 +137,49 @@ Every `/v1` endpoint is a typed method on `ScalebrowserClient`:
   optional MCP tool groups agents see), `getConnection` (which installation
   answered: its data directory and its binary)
 - **Input**: `sendInput`
+- **Workflows**: `listWorkflows`, `getWorkflow`, `createWorkflow`, `editWorkflow`,
+  `renameWorkflow`, `deleteWorkflow`, `workflowDeletePreview`, `extractWorkflow`.
+  `extractWorkflow` moves a part of the draft into a workflow of its own
+- **Workflow versions**: `listWorkflowVersions`, `getWorkflowVersion`,
+  `saveWorkflowVersion`, `publishWorkflow`, `diffWorkflow`, `revertWorkflow`,
+  `adoptWorkflowVersion`, `undoWorkflowBatch`. Saving, publishing and going back
+- **Workflow runs**: `startWorkflowRun`, `listWorkflowRuns`, `getWorkflowRun`,
+  `listWorkflowRunSteps`, `listWorkflowRunFiles`, `getWorkflowRunFile`,
+  `cancelWorkflowRun`, `forkWorkflowRun`, `previewWorkflowRunFork`,
+  `decideWorkflowRun`, `getWorkflowQueue`, `getWorkflowUsage`,
+  `getWorkflowReadiness`. A fork runs again from a chosen step and keeps the outputs
+  before it
+- **Approvals**: `listWorkflowApprovals`, `decideWorkflowApproval`,
+  `getApprovalWebhook`, `setApprovalWebhook`. Steps that wait for a person
+- **Triggers and switches**: `workflowHooks`, `rotateWorkflowHook`,
+  `listWorkflowFires`, `listWorkflowSwitches`, `setWorkflowSwitch`,
+  `emergencyStopWorkflows`. Schedules and webhooks need a paid plan (4014 on Free)
+- **Variables and files**: `listWorkflowVariables`, `setWorkflowVariable`,
+  `revealWorkflowVariable`, `getWorkflowFileAccess`, `setWorkflowFileAccess`,
+  `grantWorkflowFolder`, `ungrantWorkflowFolder`, `listWorkflowFastDomains`,
+  `putWorkflowFastDomain`, `deleteWorkflowFastDomain`. A secret variable is shown
+  again only through `revealWorkflowVariable`, behind the vault password
+- **Repairs**: `listWorkflowRepairs`, `getWorkflowRepair`, `revertWorkflowRepair`,
+  `getWorkflowRepairMetrics`. The fixes the repair made when a step broke
+- **Building blocks**: `listNodeTypes`, `getNodeType`, `getWorkflowSettingsSchema`,
+  `getWorkflowReferenceSources`, `workflowTemplates`, `instantiateTemplate`
+- **Sharing and machines**: `shareWorkflow`, `importSharedWorkflow`,
+  `revokeWorkflowShare`, `workflowMachines`, `cancelWorkflowForward`.
+  `workflowMachines` names the machine each profile lives on; a start sent there can
+  be cancelled
+- **Tables**: `countTableRows`, `createTable`, `deleteTable`, `editTable`,
+  `exportTable`, `getTable`, `importTable`, `listTableRows`, `listTableTrash`,
+  `listTables`, `restoreTables`, `updateTable`. The data a workflow reads and
+  writes, with a trash
+- **Google Sheets**: `connectGoogle`, `disconnectGoogle`, `linkSheet`,
+  `listGoogleConnections`. Linked with Google's own picker; on Free only through
+  your own Google Cloud project
+- **Model sources**: `checkAiSource`, `createAiSource`, `deleteAiSource`,
+  `getAiSettings`, `listAiInvocations`, `listAiSources`, `putAiSettings`,
+  `updateAiSource`. The keys and models behind the AI steps
+- **White label**: `agencyClients`, `setAgencyAiKey`, `setAgencyDistribution`,
+  `setClientBriefMode`, `setWlSharing`, `wlSharing`. For an Enterprise agency and
+  its clients
 - **Metrics / Account / Health**: `getMetrics`, `getAccount`, `health`, `ready`.
   The first two answer 404 on a daemon without them, which the SDK treats as
   information rather than as an error: metrics are then derived from profile
@@ -141,7 +188,7 @@ Every `/v1` endpoint is a typed method on `ScalebrowserClient`:
 
 `setToken` swaps the bearer token on a live client.
 
-Errors map to typed exceptions carrying the daemon's numeric code (4001–4013):
+Errors map to typed exceptions carrying the daemon's numeric code (4001–4014; 4014 is a plan limit, with `plan_limit` in its body):
 
 ```ts
 import { ApiError, ErrorCode } from '@scalebrowser/sdk';