slybrowser 0.1.0__tar.gz

slybrowser-0.1.0/.gitignore

@@ -0,0 +1,115 @@
+# Secrets and local configuration
+.env
+.env.*
+!.env.example
+*.key
+*.pem
+*.pfx
+secrets/
+
+# Editors and operating systems
+.idea/
+.vscode/
+.DS_Store
+Thumbs.db
+
+# Node.js
+node_modules/
+dist/
+coverage/
+*.tsbuildinfo
+
+# Python
+.venv/
+venv/
+__pycache__/
+*.py[cod]
+.pytest_cache/
+.ruff_cache/
+*.egg-info/
+
+# .NET
+**/bin/
+**/obj/
+TestResults/
+
+# Java
+**/target/
+packages/java/$out
+
+# Browser binaries, test evidence, and private Chromium source
+artifacts/
+tests/detection/browsers.local.json
+private/
+vendor/chromium/
+/packages/license-service/
+/website/
+/memory/
+/docs/business-model-*.md
+/docs/product-feedback-*.md
+*.exe
+*.dll
+*.pdb
+*.dSYM/
+
+# Repository-root Linux runtime bundle used only for local packaged-browser QA.
+# Keep these entries anchored so similarly named SDK/documentation files remain visible.
+/BUILD-INFO.txt
+/MEIPreload/
+/chrome
+/chrome_100_percent.pak
+/chrome_200_percent.pak
+/chrome_crashpad_handler
+/chromedriver
+/headless_command_resources.pak
+/icudtl.dat
+/libEGL.so
+/libGLESv2.so
+/libVkICD_mock_icd.so
+/libVkLayer_khronos_validation.so
+/libqt5_shim.so
+/libqt6_shim.so
+/libvk_swiftshader.so
+/locales/
+/resources.pak
+/resources/
+/slybrowser
+/snapshot_blob.bin
+/v8_context_snapshot.bin
+
+# Temporary release files
+.cache/
+tmp/
+release-staging/
+
+# Local authorization-service state and generated credentials
+*.sqlite
+*.sqlite-shm
+*.sqlite-wal
+*.authorization.json
+
+# Local AI-agent instructions, state, and temporary output.
+/AGENTS.md
+/AGENTS.override.md
+/CLAUDE.md
+/.codex/
+/.claude/
+/.cursor/
+/.continue/
+/.aider/
+/.windsurf/
+/.agent/
+/.agents/
+/.ai/
+/memory/hot-cache.md
+/memory/open-loops.md
+**/codex-clipboard-*
+**/*-ai-scratch.*
+**/*-agent-scratch.*
+**/*-codex-scratch.*
+**/*-ai-transcript.*
+**/*-agent-transcript.*
+**/*-codex-transcript.*
+**/*.ai.tmp
+**/*.agent.tmp
+**/*.codex.tmp

slybrowser-0.1.0/PKG-INFO

@@ -0,0 +1,154 @@
+Metadata-Version: 2.5
+Name: slybrowser
+Version: 0.1.0
+Summary: Python SDK and CLI for SlyBrowser
+Project-URL: Homepage, https://slybrowser.com
+Project-URL: Repository, https://github.com/virtualfanc/slybrowser
+Project-URL: Issues, https://github.com/virtualfanc/slybrowser/issues
+Project-URL: Documentation, https://github.com/virtualfanc/slybrowser#readme
+Author: SlyBrowser contributors
+License-Expression: MIT
+Keywords: browser-automation,playwright,slybrowser,webdriver
+Classifier: Development Status :: 3 - Alpha
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Requires-Python: >=3.10
+Requires-Dist: cryptography>=44
+Requires-Dist: platformdirs>=4.3
+Provides-Extra: playwright
+Requires-Dist: playwright<1.63,>=1.62; extra == 'playwright'
+Description-Content-Type: text/markdown
+
+# SlyBrowser for Python
+
+The default `launch()` backend is SlyBrowser's project-built W3C WebDriver. Place
+`chromedriver.exe` (`chromedriver` on Unix) beside the browser, pass
+`driver_executable=...`, or set `SLYBROWSER_WEBDRIVER_PATH`.
+
+```python
+from slybrowser import launch
+
+with launch(browser_executable, short_lived_lease, humanize=True) as browser:
+    browser.get("https://example.test")
+    print(browser.title)
+```
+
+The SDK never downloads or selects another driver. Install the optional Playwright
+adapter with `pip install slybrowser[playwright]` and call `launch_playwright(...)`
+only when that transport is explicitly required. Production packages require the exact
+hash-matched browser and driver as sibling files, and each process consumes a separate
+temporary copy of the short-lived signed lease. Humanize for the default path executes
+natively in Sly WebDriver.
+
+## Playwright adapter
+
+```python
+from playwright.sync_api import sync_playwright
+from slybrowser import launch_playwright
+
+with sync_playwright() as playwright:
+    browser = launch_playwright(
+        playwright,
+        browser_executable,
+        short_lived_lease,
+        framework_version="1.62.0",
+    )
+```
+
+The adapter forces the authorized SlyBrowser executable, rejects Playwright's own
+browser path, and validates the binding line. `launch_playwright_async`,
+`launch_playwright_persistent` and its async equivalent follow the same contract.
+When `humanize=True` is set, the SDK writes a short-lived
+`--sly-humanize-config` native control file for the browser process. The Python SDK
+does not install a Playwright-side movement substitute; unsupported browser builds
+must fail closed at the native capability gate.
+
+## Install and launch the latest authorized release
+
+Current release archives use 7z. Install `7z` (or `7zz` on Unix-like systems), or set `SLYBROWSER_7Z_PATH` to the executable before using the automatic installer.
+
+`launch_latest()` reserves one plan slot, verifies the signed short lease and latest
+compatible Stable manifest, downloads the protected ZIP, validates both runtime
+executables and maintains a heartbeat until the browser closes.
+
+```python
+from playwright.sync_api import sync_playwright
+from slybrowser import launch_latest, launch_latest_playwright
+
+with launch_latest(
+    "account.authorization.json",
+    license_trusted_keys={"license-prod-v1": license_public_key},
+    release_trusted_keys={"release-prod-v1": release_public_key},
+    humanize=True,
+) as browser:
+    print(browser.license_runtime)
+    browser.get("https://example.test")
+
+with sync_playwright() as playwright:
+    browser = launch_latest_playwright(
+        playwright,
+        "account.authorization.json",
+        license_trusted_keys={"license-prod-v1": license_public_key},
+        release_trusted_keys={"release-prod-v1": release_public_key},
+        framework_version="1.62.0",
+    )
+    try:
+        print(browser.license_runtime["versionAudit"])
+    finally:
+        browser.close()
+```
+
+The authorized Playwright launchers reserve and release the same concurrency slot as
+`launch_latest(...)`, expose `license_runtime["versionAudit"]`, and fail closed if
+Playwright reports a launched browser version that does not exactly match the signed
+selected release. Use `launch_latest_playwright_persistent(...)`,
+`launch_latest_playwright_async(...)` or
+`launch_latest_playwright_persistent_async(...)` for the matching profile and runtime
+style.
+
+For the CLI, provide base64url raw 32-byte Ed25519 keys through
+`SLYBROWSER_LICENSE_PUBLIC_KEYS_JSON` and `SLYBROWSER_RELEASE_PUBLIC_KEYS_JSON`, then
+run:
+
+```text
+slybrowser install --authorization account.authorization.json [--cache DIR] [--kernel-major 150|latest] [--update-kernel]
+```
+
+## Import a paid license file on Windows
+
+After checkout, import the encrypted v2 license file once on the Windows machine
+that will run SlyBrowser:
+
+```text
+set SLYBROWSER_LICENSE_FILE_PUBLIC_KEYS_JSON={"license-file-prod-v1":"BASE64URL_RAW_ED25519_PUBLIC_KEY"}
+slybrowser license import --input account.slybrowser-license.json --output account.slybrowser-sealed-license.json --passphrase YOUR_PASSPHRASE
+```
+
+The sealed file uses Windows DPAPI current-user protection and can be used anywhere
+an authorization file is accepted, including `launch_latest(...)` and the authorized
+Playwright helpers. You do not need to pass the license-file passphrase again, but
+the sealed file is still a local credential and must not be committed, logged, or
+shared.
+
+## Redacted license diagnostics
+
+Use `license info` when a customer needs support without exposing their credential:
+
+```text
+slybrowser license info --authorization account.slybrowser-sealed-license.json [--kernel-major 150|latest] [--update-kernel]
+```
+
+The command contacts the authorization service through `Authorization: License ...`
+and prints only redacted diagnostics: plan, effective plan, paid-through time,
+feature set, active/available browser-process concurrency, selected release state,
+update availability and `stableErrorCode`. It does not print the license key,
+session tokens, download tickets, email, PayNow identifiers, profile paths or service
+access URL.
+
+Without `--update-kernel`, the CLI keeps updates closed: it reuses the current
+authorized local candidate when one exists and asks the service for an exact grant.
+Use `--update-kernel` to actively move to the newest authorized Stable release in
+the selected major range.
+
+The authorization file is a credential and must not be committed or logged. See
+`docs/authorized-release-service.md` for the public authorization and release flow.

slybrowser-0.1.0/README.md

@@ -0,0 +1,133 @@
+# SlyBrowser for Python
+
+The default `launch()` backend is SlyBrowser's project-built W3C WebDriver. Place
+`chromedriver.exe` (`chromedriver` on Unix) beside the browser, pass
+`driver_executable=...`, or set `SLYBROWSER_WEBDRIVER_PATH`.
+
+```python
+from slybrowser import launch
+
+with launch(browser_executable, short_lived_lease, humanize=True) as browser:
+    browser.get("https://example.test")
+    print(browser.title)
+```
+
+The SDK never downloads or selects another driver. Install the optional Playwright
+adapter with `pip install slybrowser[playwright]` and call `launch_playwright(...)`
+only when that transport is explicitly required. Production packages require the exact
+hash-matched browser and driver as sibling files, and each process consumes a separate
+temporary copy of the short-lived signed lease. Humanize for the default path executes
+natively in Sly WebDriver.
+
+## Playwright adapter
+
+```python
+from playwright.sync_api import sync_playwright
+from slybrowser import launch_playwright
+
+with sync_playwright() as playwright:
+    browser = launch_playwright(
+        playwright,
+        browser_executable,
+        short_lived_lease,
+        framework_version="1.62.0",
+    )
+```
+
+The adapter forces the authorized SlyBrowser executable, rejects Playwright's own
+browser path, and validates the binding line. `launch_playwright_async`,
+`launch_playwright_persistent` and its async equivalent follow the same contract.
+When `humanize=True` is set, the SDK writes a short-lived
+`--sly-humanize-config` native control file for the browser process. The Python SDK
+does not install a Playwright-side movement substitute; unsupported browser builds
+must fail closed at the native capability gate.
+
+## Install and launch the latest authorized release
+
+Current release archives use 7z. Install `7z` (or `7zz` on Unix-like systems), or set `SLYBROWSER_7Z_PATH` to the executable before using the automatic installer.
+
+`launch_latest()` reserves one plan slot, verifies the signed short lease and latest
+compatible Stable manifest, downloads the protected ZIP, validates both runtime
+executables and maintains a heartbeat until the browser closes.
+
+```python
+from playwright.sync_api import sync_playwright
+from slybrowser import launch_latest, launch_latest_playwright
+
+with launch_latest(
+    "account.authorization.json",
+    license_trusted_keys={"license-prod-v1": license_public_key},
+    release_trusted_keys={"release-prod-v1": release_public_key},
+    humanize=True,
+) as browser:
+    print(browser.license_runtime)
+    browser.get("https://example.test")
+
+with sync_playwright() as playwright:
+    browser = launch_latest_playwright(
+        playwright,
+        "account.authorization.json",
+        license_trusted_keys={"license-prod-v1": license_public_key},
+        release_trusted_keys={"release-prod-v1": release_public_key},
+        framework_version="1.62.0",
+    )
+    try:
+        print(browser.license_runtime["versionAudit"])
+    finally:
+        browser.close()
+```
+
+The authorized Playwright launchers reserve and release the same concurrency slot as
+`launch_latest(...)`, expose `license_runtime["versionAudit"]`, and fail closed if
+Playwright reports a launched browser version that does not exactly match the signed
+selected release. Use `launch_latest_playwright_persistent(...)`,
+`launch_latest_playwright_async(...)` or
+`launch_latest_playwright_persistent_async(...)` for the matching profile and runtime
+style.
+
+For the CLI, provide base64url raw 32-byte Ed25519 keys through
+`SLYBROWSER_LICENSE_PUBLIC_KEYS_JSON` and `SLYBROWSER_RELEASE_PUBLIC_KEYS_JSON`, then
+run:
+
+```text
+slybrowser install --authorization account.authorization.json [--cache DIR] [--kernel-major 150|latest] [--update-kernel]
+```
+
+## Import a paid license file on Windows
+
+After checkout, import the encrypted v2 license file once on the Windows machine
+that will run SlyBrowser:
+
+```text
+set SLYBROWSER_LICENSE_FILE_PUBLIC_KEYS_JSON={"license-file-prod-v1":"BASE64URL_RAW_ED25519_PUBLIC_KEY"}
+slybrowser license import --input account.slybrowser-license.json --output account.slybrowser-sealed-license.json --passphrase YOUR_PASSPHRASE
+```
+
+The sealed file uses Windows DPAPI current-user protection and can be used anywhere
+an authorization file is accepted, including `launch_latest(...)` and the authorized
+Playwright helpers. You do not need to pass the license-file passphrase again, but
+the sealed file is still a local credential and must not be committed, logged, or
+shared.
+
+## Redacted license diagnostics
+
+Use `license info` when a customer needs support without exposing their credential:
+
+```text
+slybrowser license info --authorization account.slybrowser-sealed-license.json [--kernel-major 150|latest] [--update-kernel]
+```
+
+The command contacts the authorization service through `Authorization: License ...`
+and prints only redacted diagnostics: plan, effective plan, paid-through time,
+feature set, active/available browser-process concurrency, selected release state,
+update availability and `stableErrorCode`. It does not print the license key,
+session tokens, download tickets, email, PayNow identifiers, profile paths or service
+access URL.
+
+Without `--update-kernel`, the CLI keeps updates closed: it reuses the current
+authorized local candidate when one exists and asks the service for an exact grant.
+Use `--update-kernel` to actively move to the newest authorized Stable release in
+the selected major range.
+
+The authorization file is a credential and must not be committed or logged. See
+`docs/authorized-release-service.md` for the public authorization and release flow.

slybrowser-0.1.0/pyproject.toml

@@ -0,0 +1,41 @@
+[build-system]
+requires = ["hatchling>=1.27"]
+build-backend = "hatchling.build"
+
+[project]
+name = "slybrowser"
+version = "0.1.0"
+description = "Python SDK and CLI for SlyBrowser"
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+authors = [{ name = "SlyBrowser contributors" }]
+keywords = ["slybrowser", "webdriver", "playwright", "browser-automation"]
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3 :: Only",
+]
+dependencies = [
+  "cryptography>=44",
+  "platformdirs>=4.3",
+]
+
+[project.optional-dependencies]
+playwright = ["playwright>=1.62,<1.63"]
+
+[project.urls]
+Homepage = "https://slybrowser.com"
+Repository = "https://github.com/virtualfanc/slybrowser"
+Issues = "https://github.com/virtualfanc/slybrowser/issues"
+Documentation = "https://github.com/virtualfanc/slybrowser#readme"
+
+[project.scripts]
+slybrowser = "slybrowser.cli:main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/slybrowser"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "-ra"