browse 0.9.5 → 0.9.6

package/README.md

@@ -277,10 +277,19 @@ export BROWSERBASE_API_KEY=bb_live_...
 
 Local driver commands (`--local`) work without an API key.
 
+`browse` also auto-loads a `.env` file from the current directory on startup, and prints a
+one-time deprecation warning to stderr when it actually pulls a variable from `.env` this way.
+This is deprecated because a CLI used across many unrelated projects can silently pick up a
+stale key from the wrong project's `.env`; a future release will disable auto-loading by
+default so `browse` only reads `process.env`. Set `BROWSE_LOAD_DOTENV=0` (or `false`/`no`) to
+opt out of `.env` auto-loading now, ahead of that change, or `BROWSE_LOAD_DOTENV=1` to keep
+auto-loading with no warning.
+
 | Variable | Description |
 |----------|-------------|
 | `BROWSERBASE_API_KEY` | Enables `--remote` sessions and all `browse cloud` / `functions` commands |
 | `BROWSE_SESSION` | Default session name (alternative to `-s, --session`) |
+| `BROWSE_LOAD_DOTENV` | Controls `.env` auto-loading: unset = load + warn once (default, deprecated), `0`/`false`/`no` = skip loading, anything else = load silently |
 
 ## Links
 

package/bin/run.js

@@ -1,5 +1,31 @@
 #!/usr/bin/env node
-import "dotenv/config";
+import { config as loadDotenvConfig } from "dotenv";
+
+// `BROWSE_LOAD_DOTENV` controls whether `browse` auto-loads a `.env` file
+// from the current working directory. This is deprecated: a future release
+// will flip the default to "off" so `browse` only reads `process.env`,
+// matching how most CLIs used across many unrelated projects behave. Until
+// then we keep loading `.env` by default (unset behaves exactly as before)
+// but warn once when we actually pull a value from it, so users relying on
+// the implicit default get a heads-up before the default changes.
+const dotenvToggle = process.env.BROWSE_LOAD_DOTENV;
+const dotenvOptedOut =
+  dotenvToggle !== undefined &&
+  ["0", "false", "no"].includes(dotenvToggle.toLowerCase());
+
+if (!dotenvOptedOut) {
+  const keysBeforeLoad = new Set(Object.keys(process.env));
+  const { parsed } = loadDotenvConfig();
+  const appliedFromDotenv = Object.keys(parsed ?? {}).filter(
+    (key) => !keysBeforeLoad.has(key),
+  );
+
+  if (appliedFromDotenv.length > 0 && dotenvToggle === undefined) {
+    console.error(
+      `[browse] Loaded ${appliedFromDotenv.join(", ")} from .env. Auto-loading .env is deprecated and will be disabled by default in a future release -- export these variables in your shell instead, or set BROWSE_LOAD_DOTENV=1 to keep this behavior explicitly once that happens. Set BROWSE_LOAD_DOTENV=0 to opt out today. Run \`browse doctor\` to check for conflicts with your shell environment.`,
+    );
+  }
+}
 
 globalThis.oclif = {
   ...globalThis.oclif,

package/dist/commands/cloud/sessions/logs.js

@@ -1,19 +1,46 @@
-import { Args } from "@oclif/core";
+import { Args, Flags } from "@oclif/core";
 import { createBrowserbaseClient, outputJson, withBrowserbaseApi, } from "../../../lib/cloud/api.js";
 import { apiCommonFlags, toApiOptions } from "../../../lib/cloud/flags.js";
+import { reduceLogs } from "../../../lib/cloud/reduce-logs.js";
 import { BrowseCommand } from "../../../base.js";
 export default class SessionsLogs extends BrowseCommand {
     static description = "Get Browserbase session logs.";
-    static examples = ["browse cloud sessions logs <session-id>"];
+    static examples = [
+        "browse cloud sessions logs <session-id>",
+        "browse cloud sessions logs <session-id> --only-errors",
+        "browse cloud sessions logs <session-id> --only-errors --failed-requests",
+    ];
     static args = {
         id: Args.string({ required: true, description: "Session ID." }),
     };
-    static flags = { ...apiCommonFlags };
+    static flags = {
+        ...apiCommonFlags,
+        "only-errors": Flags.boolean({
+            description: "Return only the high-signal error records (console errors/exceptions, HTTP 4xx/5xx, network failures) instead of the full CDP firehose.",
+            default: false,
+        }),
+        "failed-requests": Flags.boolean({
+            description: "With --only-errors, narrow to failed / error-status network requests only.",
+            default: false,
+            dependsOn: ["only-errors"],
+        }),
+    };
     async run() {
         const { args, flags } = await this.parse(SessionsLogs);
         await withBrowserbaseApi("sessions", async () => {
             const client = createBrowserbaseClient(toApiOptions(flags));
-            outputJson(await client.sessions.logs.list(args.id));
+            const raw = await client.sessions.logs.list(args.id);
+            if (flags["only-errors"]) {
+                const arr = Array.isArray(raw)
+                    ? raw
+                    : (raw?.data ?? []);
+                outputJson(reduceLogs(arr, {
+                    failedRequests: flags["failed-requests"],
+                }));
+            }
+            else {
+                outputJson(raw);
+            }
         });
     }
 }

package/dist/lib/cloud/reduce-logs.js

@@ -0,0 +1,107 @@
+// Deterministic reducer for `browse cloud sessions logs --only-errors`.
+// Turns the raw CDP firehose (~hundreds of events per session) into the high-signal error slice:
+// console errors/warnings/asserts, uncaught exceptions, HTTP 4xx/5xx responses, and net-level load
+// failures. No LLM — pure allowlist + severity/status filter + field projection + dedupe + stack trim.
+function paramsOf(e) {
+    try {
+        const parsed = JSON.parse(e.request?.rawBody ?? "{}");
+        return parsed.params ?? {};
+    }
+    catch {
+        return {};
+    }
+}
+// Keep the message line + the app (`/src/`) stack frames; drop framework/vendor frames and hosts.
+function trimStack(s) {
+    return (s || "")
+        .split("\n")
+        .filter((l, i) => i === 0 || (/\/src\//.test(l) && !/node_modules|\.vite/.test(l)))
+        .slice(0, 4)
+        .map((l) => l
+        .replace(/https?:\/\/[^/)]+/g, "")
+        .replace(/\?[^):]*/, "")
+        .trim())
+        .join("\n");
+}
+export function reduceLogs(raw, opts = {}) {
+    const out = [];
+    const seen = new Set();
+    const push = (rec) => {
+        const k = JSON.stringify(rec);
+        if (!seen.has(k)) {
+            seen.add(k);
+            out.push(rec);
+        }
+    };
+    for (const e of raw) {
+        const p = paramsOf(e);
+        const m = e.method;
+        const responseStatus = p.response?.status;
+        let rec = null;
+        if (m === "Runtime.consoleAPICalled" &&
+            typeof p.type === "string" &&
+            ["error", "warning", "assert"].includes(p.type)) {
+            const text = (Array.isArray(p.args) ? p.args : [])
+                .map((a) => a && typeof a === "object" ? a.description || a.value || "" : "")
+                .filter(Boolean)
+                .join(" ");
+            if (text && !/^%[os]/.test(text))
+                rec = {
+                    kind: `console.${p.type}`,
+                    domain: "Runtime",
+                    severity: p.type,
+                    text: trimStack(text),
+                };
+        }
+        else if (m === "Runtime.exceptionThrown") {
+            rec = {
+                kind: "exception",
+                domain: "Runtime",
+                severity: "error",
+                text: trimStack(p.exceptionDetails?.exception?.description ??
+                    p.exceptionDetails?.text ??
+                    ""),
+            };
+        }
+        else if (m === "Log.entryAdded" &&
+            typeof p.entry?.level === "string" &&
+            ["error", "warning"].includes(p.entry?.level)) {
+            rec = {
+                kind: `log.${p.entry.level}`,
+                domain: "Log",
+                severity: p.entry.level,
+                text: p.entry.text,
+                url: p.entry.url,
+            };
+        }
+        else if (m === "Network.responseReceived" &&
+            typeof responseStatus === "number" &&
+            responseStatus >= 400) {
+            rec = {
+                kind: "network",
+                domain: "Network",
+                status: responseStatus,
+                url: p.response?.url,
+                type: p.type,
+            };
+        }
+        else if (m === "Network.loadingFailed" &&
+            p.errorText !== "net::ERR_ABORTED") {
+            rec = {
+                kind: "network.failed",
+                domain: "Network",
+                error: p.errorText,
+                type: p.type,
+            };
+        }
+        else {
+            continue; // everything else (byte-chunk / lifecycle events) is noise
+        }
+        if (!rec)
+            continue; // e.g. a console.error whose text was empty / formatting noise
+        if (opts.failedRequests && rec.domain !== "Network")
+            continue;
+        push(rec);
+    }
+    return out;
+}

package/dist/lib/driver/daemon/client.js

@@ -70,6 +70,12 @@ export async function stopDriverDaemon(session, force = false) {
         });
     }
     catch (error) {
+        if (!force &&
+            error instanceof CommandFailure &&
+            error.telemetry.resultCode === "daemon_not_running") {
+            await cleanupStoppedDaemonFiles(session);
+            return { stopped: false };
+        }
         if (!force)
             throw error;
         await cleanupDaemonFiles(session);
@@ -154,6 +160,10 @@ async function sendDriverRequest(session, request) {
             }
         });
         socket.on("error", (error) => {
+            if (isDaemonUnavailableError(error)) {
+                failRequest(daemonNotRunningError(session, request));
+                return;
+            }
             failRequest(error);
         });
         socket.on("end", () => {
@@ -219,6 +229,20 @@ async function cleanupStaleDaemonFiles(session) {
         return;
     await cleanupDaemonFiles(session, { includeLock: false });
 }
+async function cleanupStoppedDaemonFiles(session) {
+    const locked = await acquireLock(session);
+    if (!locked)
+        return;
+    try {
+        const status = await tryDriverStatus(session);
+        if (status?.session === session)
+            return;
+        await cleanupDaemonFiles(session, { includeLock: false });
+    }
+    finally {
+        await releaseLock(session);
+    }
+}
 async function acquireLock(session, timeoutMs = 10_000) {
     const lockPath = getLockPath(session);
     const start = Date.now();
@@ -281,3 +305,20 @@ async function removeStaleLock(lockPath) {
 function requestId() {
     return `${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;
 }
+function isDaemonUnavailableError(error) {
+    const code = error.code;
+    return code === "ECONNREFUSED" || code === "ENOENT";
+}
+function daemonNotRunningError(session, request) {
+    const sessionFlag = session === "default" ? "" : ` --session ${formatCommandArgument(session)}`;
+    const startCommand = request.type === "open"
+        ? `browse open ${formatCommandArgument(request.url)}${sessionFlag}`
+        : `browse open <url>${sessionFlag}`;
+    return new CommandFailure(`Driver daemon session "${session}" is not running. Start it with: ${startCommand}`, 1, { resultCode: "daemon_not_running" });
+}
+function formatCommandArgument(value) {
+    if (/^[A-Za-z0-9_./:@%+=,-]+$/.test(value))
+        return value;
+    const escaped = value.replaceAll("'", "'\"'\"'");
+    return `'${escaped}'`;
+}