human-browser 4.3.0 → 4.3.2

package/SKILL.md

@@ -369,7 +369,9 @@ await page.keyboard.press('Enter'); // most reliable
 
 Use when a site's login or form requires CAPTCHA.
 
-**2captcha API key:** set `TWOCAPTCHA_KEY` env var (get yours from 2captcha.com dashboard)
+**Cloud / agent runtime (recommended):** the `solve_captcha` tool is auto-registered in the agent runner. The agent calls it when it detects a challenge — no setup, no separate captcha account. Quota comes with your `HUMANBROWSER_API_TOKEN` plan, with a free trial fallback for unauthenticated users.
+
+**Custom 2captcha key (optional override):** set `CAPTCHA_API_KEY` (or legacy `TWOCAPTCHA_KEY`) env var if you want to use your own 2captcha balance instead of the bundled one.
 
 ### reCAPTCHA v2 (checkbox/invisible)
 ```js
@@ -858,3 +860,29 @@ const result = await runOnCloudSync({
 });
 console.log(result.text); // throws if state is failed/canceled
 ```
+
+### Raw A2A (any language, no SDK)
+
+The endpoint is plain JSON-RPC 2.0 over HTTPS at `POST /a2a`. Any A2A-aware client (LangGraph, CrewAI, Google ADK, hand-rolled `curl`) can drive it. Use `message/stream` for live SSE, or `message/send` + `tasks/get` for plain request/response.
+
+```bash
+# Submit a task (non-streaming) — returns immediately with taskId + viewerUrl
+curl -sX POST https://agent.humanbrowser.cloud/a2a \
+  -H "Authorization: Bearer $HUMANBROWSER_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "jsonrpc":"2.0","id":1,"method":"message/send",
+    "params":{"message":{"role":"user","parts":[{"kind":"text","text":"Open ifconfig.me and report the IP"}]}}
+  }'
+# → { "result": { "id": "task_...", "status": { "state": "submitted" }, "metadata": { "viewerUrl": "..." } } }
+
+# Poll until terminal
+curl -sX POST https://agent.humanbrowser.cloud/a2a \
+  -H "Authorization: Bearer $HUMANBROWSER_API_TOKEN" \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc":"2.0","id":2,"method":"tasks/get","params":{"id":"task_..."}}'
+```
+
+For live streaming, swap `message/send` → `message/stream` and read the response as `text/event-stream`. Each frame is a JSON-RPC notification carrying a `Task`, `TaskStatusUpdateEvent` or `TaskArtifactUpdateEvent` — exactly what `runOnCloud()` parses internally.
+
+> **Note on multi-turn**: the A2A spec describes an `input-required` state for tasks that need follow-up input. The current cloud build runs every task to terminal in one shot — multi-turn resumption is reserved in the protocol but not yet wired up server-side. Use `tasks/cancel` and submit a fresh task if you need to redirect.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "human-browser",
-  "version": "4.3.0",
+  "version": "4.3.2",
   "description": "Stealth browser for AI agents. Bypasses Cloudflare, DataDome, PerimeterX. Residential IPs from 10+ countries. iPhone 15 Pro fingerprint. Drop-in Playwright replacement — launchHuman() just works.",
   "keywords": [
     "browser-automation",