@solarisdk/browser 0.1.0 → 0.1.1

package/README.md

@@ -1,6 +1,6 @@
 # @solarisdk/browser
 
-Official client SDK for [Solari Browser](https://solaribrowser.com) — managed,
+Official client SDK for [Solari Browser](https://getsolari.com) — managed,
 stealth-hardened browsers as an API.
 
 ## Install
@@ -85,7 +85,7 @@ page is detected mid-session — no client-side retry required.
 await solari.launch({ stealth: true, proxy: "smart" });
 ```
 
-See the [Solari docs](https://docs.solaribrowser.com) for the full proxy,
+See the [Solari docs](https://docs.getsolari.com) for the full proxy,
 stealth, captcha, and profile reference.
 
 ## Errors

package/dist/browser-session.d.ts

@@ -11,7 +11,8 @@ export declare class BrowserSession {
     get id(): string;
     /** Plan-tier deadline (ISO 8601 UTC); session auto-releases at this point. */
     get expiresAt(): string;
-    /** Resolved proxy credentials, when a proxy was requested. */
+    /** Resolved proxy confirmation (country/tier/timezone — no credentials),
+     *  when a proxy was requested. */
     get proxy(): Session["proxy"];
     /** Playwright wire-protocol endpoint (loopback-wrapped). */
     get wsEndpoint(): string;

package/dist/browser-session.js

@@ -16,7 +16,8 @@ export class BrowserSession {
     get expiresAt() {
         return this.session.expiresAt;
     }
-    /** Resolved proxy credentials, when a proxy was requested. */
+    /** Resolved proxy confirmation (country/tier/timezone — no credentials),
+     *  when a proxy was requested. */
     get proxy() {
         return this.session.proxy;
     }

package/dist/index.d.ts

@@ -56,13 +56,23 @@ export interface ProxyRequest {
     /** US-only city pin (e.g. "los_angeles"). */
     city?: string;
 }
-/** Resolved proxy credentials returned on the session response. */
+/**
+ * Coarse confirmation of the proxy the gateway resolved for a session.
+ *
+ * Carries NO credentials by design. Egress is applied server-side (the pool
+ * attaches the upstream to your session), so a caller never dials the proxy
+ * and never needs its address or account. Earlier builds returned the
+ * upstream `server`/`username`/`password` here; that was a disclosure of our
+ * proxy vendor's account and has been removed.
+ */
 export interface ResolvedProxyConfig {
-    server: string;
-    username: string;
-    password: string;
+    /** Timezone matching the egress country — pass to `newContext({ timezoneId })`
+     *  if you build your own context and want Intl/Date to line up. */
     timezoneId: string;
+    /** Egress country actually resolved (lowercase ISO code). */
     country: string;
+    /** Tier that actually served the session. A `tier: "mobile"` request can
+     *  degrade to residential; compare against what you asked for. */
     tier?: "residential" | "static" | "mobile";
 }
 export interface Session {
@@ -75,7 +85,8 @@ export interface Session {
     expiresAt: string;
     /** `undefined` = no profile attached; `null` = profile exists but empty. */
     storageState?: StorageState | null;
-    /** Present only when a managed proxy was requested. */
+    /** Present only when a managed proxy was requested. Confirmation only
+     *  (country/tier/timezone) — egress is applied server-side. */
     proxy?: ResolvedProxyConfig;
 }
 export interface Profile {
@@ -124,7 +135,7 @@ export interface LaunchOptions extends CreateSessionOptions {
     /** Hard upper bound on the post-connect probe in ms. Default 2000. */
     probeTimeoutMs?: number;
 }
-export type SolariErrorCode = "FeatureRequiresPlan" | "ConcurrencyLimitExceeded" | "PlanLimitExceeded" | "BrowserUnhealthy";
+export type SolariErrorCode = "FeatureRequiresPlan" | "ConcurrencyLimitExceeded" | "PlanLimitExceeded" | "BrowserUnhealthy" | "InvalidSessionId";
 export declare class SolariError extends Error {
     readonly status?: number | undefined;
     readonly cause?: unknown | undefined;

package/dist/index.js

@@ -15,7 +15,7 @@ export class SolariError extends Error {
     }
 }
 const REGION_URLS = {
-    "us-west": "https://api.solaribrowser.com",
+    "us-west": "https://api.getsolari.com",
 };
 const DEFAULT_REGION = "us-west";
 const DEFAULT_MAX_ATTEMPTS = 2;
@@ -120,6 +120,39 @@ class ProfilesResource {
         };
     }
 }
+/**
+ * Classify a DELETE /sessions/:id response. Returns null when the
+ * release genuinely succeeded (or was a no-op), or the failure detail.
+ *
+ * Why 404 is not blanket-success here: the gateway acks 204 for any
+ * authentic session id, including one whose session is already gone —
+ * the handler is idempotent by design and never consults the pool
+ * before acking. So a 404 does NOT mean "already released"; it means
+ * the gateway *refused* the id (malformed, forged, or another org's)
+ * and released nothing, leaving the pool slot held until orphan-grace.
+ * Treating that as success is what made expired-session-id releases
+ * leak slots silently.
+ *
+ * A bare 404 with no `code` is still tolerated: that's a pre-
+ * InvalidSessionId gateway, where 404 may legitimately mean the session
+ * is already gone. Only a 404 the gateway explicitly marked
+ * `InvalidSessionId` is surfaced as a failure.
+ */
+async function releaseRejection(res) {
+    if (res.ok)
+        return null;
+    const body = await res.text().catch(() => "");
+    let code;
+    try {
+        const parsed = JSON.parse(body);
+        if (typeof parsed?.code === "string")
+            code = parsed.code;
+    }
+    catch { }
+    if (res.status === 404 && code !== "InvalidSessionId")
+        return null;
+    return { body, code };
+}
 class SessionsResource {
     client;
     constructor(client) {
@@ -182,11 +215,12 @@ class SessionsResource {
     /** Fire-and-forget release. Use `releaseAndWait` for confirmation. */
     release(id) {
         this.client._unregisterSession(id);
-        void this.client.request("DELETE", `/sessions/${encodeURIComponent(id)}`).then((res) => {
-            if (!res.ok && res.status !== 404) {
-                res.text().catch(() => "").then((body) => {
-                    console.warn(`[Solari] DELETE /sessions/${id} returned ${res.status}: ${body}`);
-                });
+        void this.client.request("DELETE", `/sessions/${encodeURIComponent(id)}`).then(async (res) => {
+            const rejection = await releaseRejection(res);
+            if (rejection) {
+                console.warn(`[Solari] DELETE /sessions/${id} returned ${res.status}: ` +
+                    `${rejection.body} — session was NOT released; its pool ` +
+                    `slot stays held until the server-side grace timer reaps it`);
             }
         }, (err) => {
             console.warn(`[Solari] DELETE /sessions/${id} failed (fire-and-forget):`, err);
@@ -195,9 +229,9 @@ class SessionsResource {
     async releaseAndWait(id) {
         this.client._unregisterSession(id);
         const res = await this.client.request("DELETE", `/sessions/${encodeURIComponent(id)}`);
-        if (!res.ok && res.status !== 404) {
-            const body = await res.text().catch(() => "");
-            throw new SolariError(`Solari DELETE /sessions/${id} failed: ${res.status} ${body}`, res.status);
+        const rejection = await releaseRejection(res);
+        if (rejection) {
+            throw new SolariError(`Solari DELETE /sessions/${id} failed: ${res.status} ${rejection.body}`, res.status, undefined, rejection.code);
         }
     }
     /** Presigned URL for the session's replay. Available ~1-3s after `releaseAndWait`. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solarisdk/browser",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Official client SDK for Solari Browser.",
   "license": "Apache-2.0",
   "type": "module",