unbrowse 9.3.7 → 9.3.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unbrowse",
-  "version": "9.3.7",
+  "version": "9.3.9",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/unbrowse-ai/unbrowse.git"

package/runtime/cli.js

@@ -5020,7 +5020,7 @@ var init_cached_resolution = __esm(() => {
 });
 
 // .tmp-runtime-src/build-info.generated.ts
-var BUILD_RELEASE_VERSION = "9.3.7", BUILD_GIT_SHA = "47b0fe9e117a", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjciLCJnaXRfc2hhIjoiNDdiMGZlOWUxMTdhIiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUA0N2IwZmU5ZTExN2EiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE1VDA3OjI4OjQ3LjEwNloifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "MUndpRmLz2Zj74Zil7niMwoNPEyE5Uu4CgPB-U8iWx8", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
+var BUILD_RELEASE_VERSION = "9.3.9", BUILD_GIT_SHA = "65f0a4a43779", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjkiLCJnaXRfc2hhIjoiNjVmMGE0YTQzNzc5IiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUA2NWYwYTRhNDM3NzkiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE1VDA5OjAyOjAyLjkzNloifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "qwiNcOf5Ns6uVB8dJAjwWDGlxaF1AfcsDFvVXhstcG0", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
 
 // .tmp-runtime-src/version.ts
 import { createHash as createHash4 } from "crypto";
@@ -172947,6 +172947,12 @@ async function executeEndpoint(skill, endpoint, params = {}, projection, options
     }
   })();
   await reloadExecutionAuthState(skill, epDomain, authHeaders, cookies);
+  if (options?.authHeaders) {
+    for (const [k, v] of Object.entries(options.authHeaders)) {
+      if (typeof v === "string" && v.length > 0)
+        authHeaders[k] = v;
+    }
+  }
   log("exec", `auth_tokens check: ${endpoint.auth_tokens?.length ?? 0} bindings on ${endpoint.endpoint_id}`);
   if (endpoint.auth_tokens?.length) {
     try {
@@ -189474,7 +189480,7 @@ async function registerRoutes(app) {
   app.post("/v1/skills/:skill_id/execute", { config: { rateLimit: ROUTE_LIMITS["/v1/skills/:skill_id/execute"] } }, async (req, reply) => {
     const clientScope = clientScopeFor(req);
     const { skill_id } = req.params;
-    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id } = req.body;
+    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id, auth_headers } = req.body;
     let skill = getRecentLocalSkill(skill_id, clientScope);
     if (!skill) {
       const { findExistingSkillForDomain: findLocal } = await Promise.resolve().then(() => (init_client(), exports_client));
@@ -189574,7 +189580,7 @@ async function registerRoutes(app) {
     try {
       const executeDeadlineMs = Number(process.env.UNBROWSE_EXECUTE_TIMEOUT_MS) || 60000;
       const endpointIdForTrace = typeof execParams.endpoint_id === "string" ? execParams.endpoint_id : "";
-      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope }), executeDeadlineMs, () => {
+      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers }), executeDeadlineMs, () => {
         const now = new Date().toISOString();
         return {
           trace: {
@@ -189642,7 +189648,7 @@ async function registerRoutes(app) {
           }
         }
         if (recovered) {
-          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope });
+          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers });
         }
       }
       saveTrace(execResult.trace);
@@ -201930,6 +201936,41 @@ function extractEmbeddedJsonBody(intent) {
   return;
 }
 
+// .tmp-runtime-src/lib/extract-auth-header.ts
+var TOKEN = "([A-Za-z0-9][A-Za-z0-9._~+/=-]{5,})";
+var BEARER_RULES = [
+  new RegExp(`\\bbearer\\s+token\\s+${TOKEN}`, "i"),
+  new RegExp(`\\bbearer\\s+${TOKEN}`, "i"),
+  new RegExp(`\\b(?:auth(?:enticate|orization)?)\\s+(?:with\\s+)?token\\s+${TOKEN}`, "i")
+];
+var APIKEY_RULES = [
+  new RegExp(`\\b(?:api[- ]?key|apikey|x-api-key)\\s*[:=]?\\s+${TOKEN}`, "i")
+];
+function looksLikeToken(t) {
+  if (t.length >= 16)
+    return true;
+  if (/[0-9._~+/=-]/.test(t))
+    return true;
+  if (/[A-Z]/.test(t) && /[a-z]/.test(t))
+    return true;
+  return false;
+}
+function extractAuthHeader(intent) {
+  if (!intent)
+    return;
+  for (const re of BEARER_RULES) {
+    const m = intent.match(re);
+    if (m?.[1] && looksLikeToken(m[1]))
+      return `Authorization: Bearer ${m[1]}`;
+  }
+  for (const re of APIKEY_RULES) {
+    const m = intent.match(re);
+    if (m?.[1] && looksLikeToken(m[1]))
+      return `X-API-Key: ${m[1]}`;
+  }
+  return;
+}
+
 // .tmp-runtime-src/env/kuri-proxy-bridge.ts
 init_proxy_fetch();
 var __dirname = "/home/runner/work/unbrowse-dev/unbrowse-dev/.tmp-runtime-src/env";
@@ -206990,6 +207031,12 @@ async function cmdRun(args, flags, verb = "run") {
       ...oneHoleWriteBody ? { body: oneHoleWriteBody } : {}
     });
   }
+  if (url) {
+    const authHeader = typeof flags.header === "string" ? flags.header : extractAuthHeader(intent);
+    if (authHeader) {
+      return cmdFetch([], { ...flags, url, header: authHeader });
+    }
+  }
   const draftOnlyIntent = isDraftOnlyMutationIntent(intent);
   const resolveIntent = draftOnlyIntent ? draftOnlyReadIntent(intent) : intent;
   maybeShowContributionNotice();
@@ -207546,6 +207593,17 @@ async function cmdExecute(flags) {
       body.method = flags.method.toUpperCase();
     if (typeof flags.session === "string")
       body.session_id = flags.session;
+    {
+      const rawHeaders = Array.isArray(flags.header) ? flags.header : typeof flags.header === "string" ? [flags.header] : [];
+      const authHeaders = {};
+      for (const h of rawHeaders) {
+        const idx = h.indexOf(":");
+        if (idx > 0)
+          authHeaders[h.slice(0, idx).trim()] = h.slice(idx + 1).trim();
+      }
+      if (Object.keys(authHeaders).length > 0)
+        body.auth_headers = authHeaders;
+    }
     if (flags.intent ?? flags.task)
       body.intent = flags.intent ?? flags.task;
     if (flags["dry-run"])

package/runtime/mcp.js

@@ -36178,7 +36178,7 @@ var init_cached_resolution = __esm(() => {
 });
 
 // .tmp-runtime-src/build-info.generated.ts
-var BUILD_RELEASE_VERSION = "9.3.7", BUILD_GIT_SHA = "47b0fe9e117a", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjciLCJnaXRfc2hhIjoiNDdiMGZlOWUxMTdhIiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUA0N2IwZmU5ZTExN2EiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE1VDA3OjI4OjQ3LjEwNloifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "MUndpRmLz2Zj74Zil7niMwoNPEyE5Uu4CgPB-U8iWx8", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
+var BUILD_RELEASE_VERSION = "9.3.9", BUILD_GIT_SHA = "65f0a4a43779", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjkiLCJnaXRfc2hhIjoiNjVmMGE0YTQzNzc5IiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUA2NWYwYTRhNDM3NzkiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE1VDA5OjAyOjAyLjkzNloifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "qwiNcOf5Ns6uVB8dJAjwWDGlxaF1AfcsDFvVXhstcG0", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
 
 // .tmp-runtime-src/version.ts
 import { createHash as createHash3 } from "crypto";
@@ -106870,6 +106870,12 @@ async function executeEndpoint(skill, endpoint, params = {}, projection, options
     }
   })();
   await reloadExecutionAuthState(skill, epDomain, authHeaders, cookies);
+  if (options?.authHeaders) {
+    for (const [k, v] of Object.entries(options.authHeaders)) {
+      if (typeof v === "string" && v.length > 0)
+        authHeaders[k] = v;
+    }
+  }
   log("exec", `auth_tokens check: ${endpoint.auth_tokens?.length ?? 0} bindings on ${endpoint.endpoint_id}`);
   if (endpoint.auth_tokens?.length) {
     try {
@@ -139874,7 +139880,7 @@ async function registerRoutes(app) {
   app.post("/v1/skills/:skill_id/execute", { config: { rateLimit: ROUTE_LIMITS["/v1/skills/:skill_id/execute"] } }, async (req, reply) => {
     const clientScope = clientScopeFor(req);
     const { skill_id } = req.params;
-    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id } = req.body;
+    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id, auth_headers } = req.body;
     let skill = getRecentLocalSkill(skill_id, clientScope);
     if (!skill) {
       const { findExistingSkillForDomain: findLocal } = await Promise.resolve().then(() => (init_client2(), exports_client2));
@@ -139974,7 +139980,7 @@ async function registerRoutes(app) {
     try {
       const executeDeadlineMs = Number(process.env.UNBROWSE_EXECUTE_TIMEOUT_MS) || 60000;
       const endpointIdForTrace = typeof execParams.endpoint_id === "string" ? execParams.endpoint_id : "";
-      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope }), executeDeadlineMs, () => {
+      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers }), executeDeadlineMs, () => {
         const now = new Date().toISOString();
         return {
           trace: {
@@ -140042,7 +140048,7 @@ async function registerRoutes(app) {
           }
         }
         if (recovered) {
-          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope });
+          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers });
         }
       }
       saveTrace(execResult.trace);

package/vendor/kuri/manifest.json

@@ -2,7 +2,7 @@
   "repo_url": "https://github.com/justrach/kuri.git",
   "branch": "adding-extensions",
   "source_sha": "149881254046a20778f642b69f20f0c6468f6fb4",
-  "built_at": "2026-06-15T07:11:02.302Z",
+  "built_at": "2026-06-15T08:45:06.771Z",
   "binaries": {
     "darwin-arm64": {
       "zig_target": "aarch64-macos",
@@ -21,11 +21,11 @@
     },
     "linux-x64": {
       "zig_target": "x86_64-linux",
-      "sha256": "12d0fe904ebb2ba3ee7b373843e6265247a24ab4d25c1874f28ef1ff9db13bb1"
+      "sha256": "c95ba2aba85676900b9f80689d58d6b31b12cb6ad407cba0ef7d17ae1a505788"
     },
     "win-x64": {
       "zig_target": "x86_64-windows-gnu",
-      "sha256": "cef06cdc61b13fc79f12b21e7075e5de6cc6b0536fe5885e8166fcbeceaf5022",
+      "sha256": "6a5cdee00887bfe1ba84aab0aa99c6a5a500616c56f44ab7e45ae92c13b378fa",
       "source": "pre-staged"
     }
   },
@@ -33,22 +33,22 @@
     "darwin-arm64": {
       "zig_target": "aarch64-macos",
       "lib": "libkuri_ffi.dylib",
-      "sha256": "5b98514679b7308fdc94409ee531389237908847e3521508ebce07e3a5c98a76"
+      "sha256": "16efa027d0d1390cc010aafdb5277a2a83b7ac08920f3c06241fa6dfa9ba7cb3"
     },
     "darwin-x64": {
       "zig_target": "x86_64-macos",
       "lib": "libkuri_ffi.dylib",
-      "sha256": "e0427e2b5612cdcdf77956bd5d9f08ce323d875a48b781e1e471939206bbcd65"
+      "sha256": "64c129f0e8732991949fca700123d2cdc9847d4ee11881f68a83f639c1f5a399"
     },
     "linux-arm64": {
       "zig_target": "aarch64-linux",
       "lib": "libkuri_ffi.so",
-      "sha256": "fa04be637cf0366d90e71d248f733c99f1d5c32eebe798ede63e29a5d0fbf2f9"
+      "sha256": "c12b803d0189d86c47c9b376069237fe0f59eee1caef239da1795d4523803a92"
     },
     "linux-x64": {
       "zig_target": "x86_64-linux",
       "lib": "libkuri_ffi.so",
-      "sha256": "0042cad13aceb7da492edc61f4d28862dd1928b131197c176a0e957f1c0f21db"
+      "sha256": "be1dbcc8ae6835d2e600c30bd69d5ea168fee811d2d5ad5a5852fac95e10d843"
     }
   }
 }