chromiumfish 0.2.0 → 0.2.1

package/README.md

@@ -62,13 +62,11 @@ and connects over CDP; `runTask` drives it from a plain-language goal.
 ```ts
 import { withAgent } from "chromiumfish";
 
-// LLM config from a nearby .env: OPENAI_API_BASE / OPENAI_API_KEY / OPENAI_API_MODEL
-const url = await withAgent({ typing: "human" }, (agent) =>
-  agent
-    .runTask("Search DuckDuckGo for 'chromiumfish' and give me the first result's URL.")
-    .then((r) => r.finalText),
+// LLM config: a nearby .env (OPENAI_API_*), or pass apiKey/apiBase/model here.
+const result = await withAgent({ typing: "human" }, (agent) =>
+  agent.runTask("Search DuckDuckGo for 'chromiumfish' and give me the first result's URL."),
 );
-console.log(url);
+console.log(result.finalText);
 ```
 
 `withAgent` shuts the browser down for you; use `launchAgent` directly if you
@@ -78,6 +76,7 @@ want to manage the lifecycle (`const { agent, close } = await launchAgent()`).
 |--------|---------|-------------|
 | `typing` | `"human"` | Typing speed: `"human"` (~75 WPM, natural), `"fast"`, `"instant"`, or a custom `[keyDown, keyUp, longMultiplier]` triple (numbers = ms). |
 | `model` | env | Model for the session (overrides `OPENAI_API_MODEL`); `runTask({ model })` overrides per task. |
+| `apiKey` / `apiBase` | env | LLM key / base URL (override `OPENAI_API_KEY` / `OPENAI_API_BASE`). |
 | `chrome` | `CHROME_BIN` / cached build | Path to the ChromiumFish binary. |
 | `port` | `9222` | DevTools remote-debugging port. |
 | `extraArgs` | — | Extra Chromium flags. |

package/dist/agent.d.ts

@@ -52,6 +52,10 @@ export interface LaunchAgentOptions {
     port?: number;
     /** Path to the ChromiumFish binary; defaults to CHROME_BIN env or the cached build. */
     chrome?: string;
+    /** LLM API key (overrides OPENAI_API_KEY). */
+    apiKey?: string;
+    /** LLM base URL (overrides OPENAI_API_BASE). */
+    apiBase?: string;
     /** Model for this session (overrides OPENAI_API_MODEL). */
     model?: string;
     /** Typing cadence: "human" (default), "fast", "instant", or a [keyDown, keyUp, multiplier] triple. */
@@ -72,9 +76,10 @@ export interface AgentSession {
 /**
  * Launch a local ChromiumFish with the AI agent layer and connect to it.
  *
- * LLM config is read from OPENAI_API_BASE / OPENAI_API_KEY / OPENAI_API_MODEL
- * (a nearby .env is loaded automatically). Prefer {@link withAgent} for
- * automatic cleanup, or remember to call the returned `close()`.
+ * LLM config can be passed in-script (`apiKey` / `apiBase` / `model`) or left to
+ * OPENAI_API_KEY / OPENAI_API_BASE / OPENAI_API_MODEL (a nearby .env is loaded
+ * automatically); an explicit option wins over the env var. Prefer {@link withAgent}
+ * for automatic cleanup, or remember to call the returned `close()`.
  */
 export declare function launchAgent(opts?: LaunchAgentOptions): Promise<AgentSession>;
 /**

package/dist/agent.js

@@ -350,12 +350,13 @@ function loadDotenv() {
 /**
  * Launch a local ChromiumFish with the AI agent layer and connect to it.
  *
- * LLM config is read from OPENAI_API_BASE / OPENAI_API_KEY / OPENAI_API_MODEL
- * (a nearby .env is loaded automatically). Prefer {@link withAgent} for
- * automatic cleanup, or remember to call the returned `close()`.
+ * LLM config can be passed in-script (`apiKey` / `apiBase` / `model`) or left to
+ * OPENAI_API_KEY / OPENAI_API_BASE / OPENAI_API_MODEL (a nearby .env is loaded
+ * automatically); an explicit option wins over the env var. Prefer {@link withAgent}
+ * for automatic cleanup, or remember to call the returned `close()`.
  */
 export async function launchAgent(opts = {}) {
-    const { port = 9222, model = "", typing = "human", loadDotenv: doDotenv = true, extraArgs = [], timeoutMs = 30_000 } = opts;
+    const { port = 9222, apiKey = "", apiBase = "", model = "", typing = "human", loadDotenv: doDotenv = true, extraArgs = [], timeoutMs = 30_000 } = opts;
     if (doDotenv)
         loadDotenv();
     let chrome = opts.chrome ?? process.env.CHROME_BIN;
@@ -372,8 +373,8 @@ export async function launchAgent(opts = {}) {
         typingFlag(typing),
         "--no-first-run",
         "--no-default-browser-check",
-        `--agent-llm-url=${process.env.OPENAI_API_BASE ?? ""}`,
-        `--agent-llm-key=${process.env.OPENAI_API_KEY ?? ""}`,
+        `--agent-llm-url=${apiBase || (process.env.OPENAI_API_BASE ?? "")}`,
+        `--agent-llm-key=${apiKey || (process.env.OPENAI_API_KEY ?? "")}`,
         `--agent-model=${model || (process.env.OPENAI_API_MODEL ?? "")}`,
         ...extraArgs,
     ];

package/dist/version.d.ts

@@ -6,9 +6,9 @@
  * SDK downloads by default; override it with `CHROMIUMFISH_VERSION`.
  */
 /** SDK package version (kept in sync with package.json). */
-export declare const SDK_VERSION = "0.1.4";
+export declare const SDK_VERSION = "0.2.1";
 /** Default ChromiumFish browser build to fetch. Matches src/chrome/VERSION. */
-export declare const DEFAULT_BROWSER_VERSION = "150.0.7844";
+export declare const DEFAULT_BROWSER_VERSION = "149.0.7827.115";
 /** Public repo hosting the release assets. */
 export declare const RELEASE_REPO = "arman-bd/chromiumfish";
 /**
@@ -30,7 +30,7 @@ export declare const GEOIP_FALLBACK_VERSION = "2026.06";
  * Reject version strings that aren't a plain build tag. Versions are
  * interpolated into filesystem cache paths and release URLs, so a crafted
  * value like `../../../etc` would escape the cache dir (path traversal).
- * Real tags are digits, dots, and hyphens (e.g. "150.0.7844", "2026.06",
+ * Real tags are digits, dots, and hyphens (e.g. "149.0.7827.115", "2026.06",
  * "latest").
  */
 export declare function assertSafeVersion(version: string): string;

package/dist/version.js

@@ -6,9 +6,9 @@
  * SDK downloads by default; override it with `CHROMIUMFISH_VERSION`.
  */
 /** SDK package version (kept in sync with package.json). */
-export const SDK_VERSION = "0.1.4";
+export const SDK_VERSION = "0.2.1";
 /** Default ChromiumFish browser build to fetch. Matches src/chrome/VERSION. */
-export const DEFAULT_BROWSER_VERSION = "150.0.7844";
+export const DEFAULT_BROWSER_VERSION = "149.0.7827.115";
 /** Public repo hosting the release assets. */
 export const RELEASE_REPO = "arman-bd/chromiumfish";
 /**
@@ -30,7 +30,7 @@ export const GEOIP_FALLBACK_VERSION = "2026.06";
  * Reject version strings that aren't a plain build tag. Versions are
  * interpolated into filesystem cache paths and release URLs, so a crafted
  * value like `../../../etc` would escape the cache dir (path traversal).
- * Real tags are digits, dots, and hyphens (e.g. "150.0.7844", "2026.06",
+ * Real tags are digits, dots, and hyphens (e.g. "149.0.7827.115", "2026.06",
  * "latest").
  */
 export function assertSafeVersion(version) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chromiumfish",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Stealth Chromium build with a drop-in Playwright harness — fetches and launches the ChromiumFish browser.",
   "type": "module",
   "main": "./dist/index.js",