unbrowse 9.3.8 → 9.3.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unbrowse",
-  "version": "9.3.8",
+  "version": "9.3.10",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/unbrowse-ai/unbrowse.git"

package/runtime/cli.js

@@ -5020,7 +5020,7 @@ var init_cached_resolution = __esm(() => {
 });
 
 // .tmp-runtime-src/build-info.generated.ts
-var BUILD_RELEASE_VERSION = "9.3.8", BUILD_GIT_SHA = "b6b3ccddbddb", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjgiLCJnaXRfc2hhIjoiYjZiM2NjZGRiZGRiIiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUBiNmIzY2NkZGJkZGIiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE1VDA4OjA4OjEzLjIwOVoifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "_Iq92fuWcstPs_AVWy9QRA1dfWknSpisW8xHV-wUuW4", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
+var BUILD_RELEASE_VERSION = "9.3.10", BUILD_GIT_SHA = "af8f07846fbb", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjEwIiwiZ2l0X3NoYSI6ImFmOGYwNzg0NmZiYiIsImNvZGVfaGFzaCI6IjVkOWViZjYxOWM2MSIsInRyYWNlX3ZlcnNpb24iOiI1ZDllYmY2MTljNjFAYWY4ZjA3ODQ2ZmJiIiwiaXNzdWVkX2F0IjoiMjAyNi0wNi0xNVQwOTo1NToxMy40MTZaIn0", BUILD_RELEASE_MANIFEST_SIGNATURE = "l1iGjuqMzW6Ohn0tN6_Ws5HyYXhzdZWLIrKB4hzlg8U", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
 
 // .tmp-runtime-src/version.ts
 import { createHash as createHash4 } from "crypto";
@@ -172947,6 +172947,12 @@ async function executeEndpoint(skill, endpoint, params = {}, projection, options
     }
   })();
   await reloadExecutionAuthState(skill, epDomain, authHeaders, cookies);
+  if (options?.authHeaders) {
+    for (const [k, v] of Object.entries(options.authHeaders)) {
+      if (typeof v === "string" && v.length > 0)
+        authHeaders[k] = v;
+    }
+  }
   log("exec", `auth_tokens check: ${endpoint.auth_tokens?.length ?? 0} bindings on ${endpoint.endpoint_id}`);
   if (endpoint.auth_tokens?.length) {
     try {
@@ -173234,6 +173240,9 @@ async function executeEndpoint(skill, endpoint, params = {}, projection, options
     let last2 = { data: null, status: 0, response_headers: {} };
     for (const replayUrl2 of replayUrls) {
       const replayHeaders = buildStructuredReplayHeaders(url, replayUrl2, headers);
+      if (bodyOverride && typeof bodyOverride === "object" && endpoint.method !== "GET" && endpoint.method !== "HEAD" && !replayHeaders["content-type"] && !replayHeaders["Content-Type"]) {
+        replayHeaders["content-type"] = "application/json";
+      }
       log("exec", `server-fetch: ${endpoint.method} ${replayUrl2.substring(0, 200)} csrf-token=${(replayHeaders["csrf-token"] || "none").substring(0, 20)}... hdrs=${Object.keys(replayHeaders).length} cookies=${replayHeaders["cookie"]?.length ?? 0}chars`);
       const res = await fetch(replayUrl2, {
         method: endpoint.method,
@@ -189474,7 +189483,7 @@ async function registerRoutes(app) {
   app.post("/v1/skills/:skill_id/execute", { config: { rateLimit: ROUTE_LIMITS["/v1/skills/:skill_id/execute"] } }, async (req, reply) => {
     const clientScope = clientScopeFor(req);
     const { skill_id } = req.params;
-    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id } = req.body;
+    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id, auth_headers } = req.body;
     let skill = getRecentLocalSkill(skill_id, clientScope);
     if (!skill) {
       const { findExistingSkillForDomain: findLocal } = await Promise.resolve().then(() => (init_client(), exports_client));
@@ -189574,7 +189583,7 @@ async function registerRoutes(app) {
     try {
       const executeDeadlineMs = Number(process.env.UNBROWSE_EXECUTE_TIMEOUT_MS) || 60000;
       const endpointIdForTrace = typeof execParams.endpoint_id === "string" ? execParams.endpoint_id : "";
-      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope }), executeDeadlineMs, () => {
+      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers }), executeDeadlineMs, () => {
         const now = new Date().toISOString();
         return {
           trace: {
@@ -189642,7 +189651,7 @@ async function registerRoutes(app) {
           }
         }
         if (recovered) {
-          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope });
+          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers });
         }
       }
       saveTrace(execResult.trace);
@@ -207587,6 +207596,17 @@ async function cmdExecute(flags) {
       body.method = flags.method.toUpperCase();
     if (typeof flags.session === "string")
       body.session_id = flags.session;
+    {
+      const rawHeaders = Array.isArray(flags.header) ? flags.header : typeof flags.header === "string" ? [flags.header] : [];
+      const authHeaders = {};
+      for (const h of rawHeaders) {
+        const idx = h.indexOf(":");
+        if (idx > 0)
+          authHeaders[h.slice(0, idx).trim()] = h.slice(idx + 1).trim();
+      }
+      if (Object.keys(authHeaders).length > 0)
+        body.auth_headers = authHeaders;
+    }
     if (flags.intent ?? flags.task)
       body.intent = flags.intent ?? flags.task;
     if (flags["dry-run"])

package/runtime/mcp.js

@@ -36178,7 +36178,7 @@ var init_cached_resolution = __esm(() => {
 });
 
 // .tmp-runtime-src/build-info.generated.ts
-var BUILD_RELEASE_VERSION = "9.3.8", BUILD_GIT_SHA = "b6b3ccddbddb", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjgiLCJnaXRfc2hhIjoiYjZiM2NjZGRiZGRiIiwiY29kZV9oYXNoIjoiNWQ5ZWJmNjE5YzYxIiwidHJhY2VfdmVyc2lvbiI6IjVkOWViZjYxOWM2MUBiNmIzY2NkZGJkZGIiLCJpc3N1ZWRfYXQiOiIyMDI2LTA2LTE1VDA4OjA4OjEzLjIwOVoifQ", BUILD_RELEASE_MANIFEST_SIGNATURE = "_Iq92fuWcstPs_AVWy9QRA1dfWknSpisW8xHV-wUuW4", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
+var BUILD_RELEASE_VERSION = "9.3.10", BUILD_GIT_SHA = "af8f07846fbb", BUILD_CODE_HASH = "5d9ebf619c61", BUILD_RELEASE_MANIFEST_BASE64 = "eyJzY2hlbWFfdmVyc2lvbiI6MSwicmVsZWFzZV92ZXJzaW9uIjoiOS4zLjEwIiwiZ2l0X3NoYSI6ImFmOGYwNzg0NmZiYiIsImNvZGVfaGFzaCI6IjVkOWViZjYxOWM2MSIsInRyYWNlX3ZlcnNpb24iOiI1ZDllYmY2MTljNjFAYWY4ZjA3ODQ2ZmJiIiwiaXNzdWVkX2F0IjoiMjAyNi0wNi0xNVQwOTo1NToxMy40MTZaIn0", BUILD_RELEASE_MANIFEST_SIGNATURE = "l1iGjuqMzW6Ohn0tN6_Ws5HyYXhzdZWLIrKB4hzlg8U", BUILD_DEFAULT_BACKEND_URL = "https://beta-api.unbrowse.ai", BUILD_DEFAULT_PROFILE = "";
 
 // .tmp-runtime-src/version.ts
 import { createHash as createHash3 } from "crypto";
@@ -106870,6 +106870,12 @@ async function executeEndpoint(skill, endpoint, params = {}, projection, options
     }
   })();
   await reloadExecutionAuthState(skill, epDomain, authHeaders, cookies);
+  if (options?.authHeaders) {
+    for (const [k, v] of Object.entries(options.authHeaders)) {
+      if (typeof v === "string" && v.length > 0)
+        authHeaders[k] = v;
+    }
+  }
   log("exec", `auth_tokens check: ${endpoint.auth_tokens?.length ?? 0} bindings on ${endpoint.endpoint_id}`);
   if (endpoint.auth_tokens?.length) {
     try {
@@ -107157,6 +107163,9 @@ async function executeEndpoint(skill, endpoint, params = {}, projection, options
     let last2 = { data: null, status: 0, response_headers: {} };
     for (const replayUrl2 of replayUrls) {
       const replayHeaders = buildStructuredReplayHeaders(url, replayUrl2, headers);
+      if (bodyOverride && typeof bodyOverride === "object" && endpoint.method !== "GET" && endpoint.method !== "HEAD" && !replayHeaders["content-type"] && !replayHeaders["Content-Type"]) {
+        replayHeaders["content-type"] = "application/json";
+      }
       log("exec", `server-fetch: ${endpoint.method} ${replayUrl2.substring(0, 200)} csrf-token=${(replayHeaders["csrf-token"] || "none").substring(0, 20)}... hdrs=${Object.keys(replayHeaders).length} cookies=${replayHeaders["cookie"]?.length ?? 0}chars`);
       const res = await fetch(replayUrl2, {
         method: endpoint.method,
@@ -139874,7 +139883,7 @@ async function registerRoutes(app) {
   app.post("/v1/skills/:skill_id/execute", { config: { rateLimit: ROUTE_LIMITS["/v1/skills/:skill_id/execute"] } }, async (req, reply) => {
     const clientScope = clientScopeFor(req);
     const { skill_id } = req.params;
-    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id } = req.body;
+    const { params, projection, confirm_unsafe, confirm_third_party_terms, dry_run, intent, context_url, session_id, auth_headers } = req.body;
     let skill = getRecentLocalSkill(skill_id, clientScope);
     if (!skill) {
       const { findExistingSkillForDomain: findLocal } = await Promise.resolve().then(() => (init_client2(), exports_client2));
@@ -139974,7 +139983,7 @@ async function registerRoutes(app) {
     try {
       const executeDeadlineMs = Number(process.env.UNBROWSE_EXECUTE_TIMEOUT_MS) || 60000;
       const endpointIdForTrace = typeof execParams.endpoint_id === "string" ? execParams.endpoint_id : "";
-      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope }), executeDeadlineMs, () => {
+      let execResult = await withExecuteDeadline(executeSkill(skill, execParams, projection, { confirm_unsafe: effectiveConfirmUnsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers }), executeDeadlineMs, () => {
         const now = new Date().toISOString();
         return {
           trace: {
@@ -140042,7 +140051,7 @@ async function registerRoutes(app) {
           }
         }
         if (recovered) {
-          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope });
+          execResult = await executeSkill(skill, execParams, projection, { confirm_unsafe, confirm_third_party_terms, dry_run, intent, contextUrl: context_url, client_scope: clientScope, authHeaders: auth_headers });
         }
       }
       saveTrace(execResult.trace);

package/vendor/kuri/manifest.json

@@ -2,7 +2,7 @@
   "repo_url": "https://github.com/justrach/kuri.git",
   "branch": "adding-extensions",
   "source_sha": "149881254046a20778f642b69f20f0c6468f6fb4",
-  "built_at": "2026-06-15T07:49:42.329Z",
+  "built_at": "2026-06-15T09:37:01.720Z",
   "binaries": {
     "darwin-arm64": {
       "zig_target": "aarch64-macos",
@@ -21,11 +21,11 @@
     },
     "linux-x64": {
       "zig_target": "x86_64-linux",
-      "sha256": "afeb7be07284a7aa84eb0ab532166b1ccf4f1ebdbe289b6d5b98c284a7f82c70"
+      "sha256": "135e3d36d09af49c5e488ab399f7a6c4271cb8a57c547287fbad492eb886a0b6"
     },
     "win-x64": {
       "zig_target": "x86_64-windows-gnu",
-      "sha256": "a2428a63e9c881b32875d71c766397fb7bb771f901284fb5ed54430836f80991",
+      "sha256": "19de0449a106d38e77625816a8033d4641d0c5dac040179fee28ea5adc594310",
       "source": "pre-staged"
     }
   },
@@ -33,22 +33,22 @@
     "darwin-arm64": {
       "zig_target": "aarch64-macos",
       "lib": "libkuri_ffi.dylib",
-      "sha256": "8817997af2c42fc0a0cae00651c6892c437fbd4ab78860af442786bd475d24ff"
+      "sha256": "c4ecfca37cabaf3d7f1788ae41a46af78d725b9aebd47e868e4451b3c6cca196"
     },
     "darwin-x64": {
       "zig_target": "x86_64-macos",
       "lib": "libkuri_ffi.dylib",
-      "sha256": "dd8b62e581a51784a2b17b8cf21b2cd3fe98a070f97ef34c071f94030478da04"
+      "sha256": "f88547a053815bf9b6b54db606f9d71f78a67cae9ea59fc1329728ac7496f0bb"
     },
     "linux-arm64": {
       "zig_target": "aarch64-linux",
       "lib": "libkuri_ffi.so",
-      "sha256": "5c8991c9a751f9f509a4d34ed7d139a7206f5484c92118f0d2cb49e1c690c60e"
+      "sha256": "c311172e6d38b34fe18dfee3f3746cbd9b7a0b437ca286561cacacaab98e07b7"
     },
     "linux-x64": {
       "zig_target": "x86_64-linux",
       "lib": "libkuri_ffi.so",
-      "sha256": "875e7e160723d71742982b62f88e5c1a7c5c6325f4eae616233238e74e1d5885"
+      "sha256": "f02f65ca1d27fc35f7be1006cccf7264d51978a397524198eeb70d2c502e9f9f"
     }
   }
 }