Conversation
Bind browser subresource calls to a browser session's base_url and expose raw HTTP through fetch so metro-routed access feels like normal JavaScript networking. Made-with: Cursor
Fail fast when browser-scoped clients do not have a session base_url, route subresource calls through the browser session base directly, and clean up browser-vm wording. Made-with: Cursor
Fail fast when browser-scoped clients are missing a browser session base_url, route subresource calls through the session base consistently, and keep lint output clean. Made-with: Cursor
Replace the handwritten Node browser-scoped façade with deterministic generated bindings from the browser resource graph, and enforce regeneration during lint and build. Made-with: Cursor
Route direct-to-VM browser requests through the shared client cache so the SDK no longer needs the generated browser session wrapper layer. Made-with: Cursor
Trim the node browser routing changes down to the cache/interceptor shape from PR #100 and remove the leftover browser-scoped example and priming surface. Made-with: Cursor
Shorten the browserRouting allowlist field to subresources so the direct-to-VM configuration reads more cleanly without changing behavior. Made-with: Cursor
Keep the node browser-routing example showing both direct subresource routing and the cache-backed /curl/raw path. Made-with: Cursor
Bring back the cache-backed browser fetch helper so raw HTTP stays on the SDK's language-native surface instead of falling through to manual /curl/raw requests. Made-with: Cursor
Remove the unnecessary generated resource and dependency diffs from the node branch and keep BrowserRouteCache.set() as a direct assignment without trimming user input. Made-with: Cursor
Tighten the browser routing files to the repo's formatter expectations so the node CI lint job passes cleanly again. Made-with: Cursor
Split browser.fetch into its own helper, remove unused browser transport code, and simplify withOptions cache sharing so the routing layer stays easier to reason about. Made-with: Cursor
|
Firetiger deploy monitoring skipped This PR didn't match the auto-monitor filter configured on your GitHub connection:
Reason: This is an automated release PR with only internal chores; it does not modify API endpoints (packages/api/cmd/api/) or Temporal workflows (packages/api/lib/temporal). To monitor this PR anyway, reply with |
|
🧪 Testing To try out this version of the SDK: Expires at: Mon, 25 May 2026 16:30:16 GMT |
Remove the public browser routing constructor knobs and read direct-to-VM subresource rollout from KERNEL_BROWSER_ROUTING_SUBRESOURCES instead, defaulting to curl while leaving browser.fetch cache-backed.
Keep the routing wrapper from stripping runtime-specific fetch init options when requests fall through or route directly to the VM, and share the browser fetch helpers so routed methods stay type-safe and covered by regression tests. Made-with: Cursor
e66387d to
b96b5e6
Compare
b96b5e6 to
db820d1
Compare
Only parse cloned JSON responses for browser metadata endpoints so unrelated API calls don't pay the route cache warm-up cost, and cover the regression with a focused routing fetch test. Made-with: Cursor
Drop cached browser routing entries after successful DELETE /browsers/:id responses so stale base URLs are not reused, and cover both the success and failure paths in the routing tests. Made-with: Cursor
Restore the generated internal types file so browser routing changes stay in custom code only. Move joinURL into lib and keep browser.fetch limited to the SDK's existing HTTPMethod union. Made-with: Cursor
Restore src/internal/types.ts byte-for-byte to the generated base version. This drops the file from the PR so browser routing changes stay out of generated code. Made-with: Cursor
Warm the browser route cache from browser pool acquire responses and evict released sessions after successful pool releases. Keep this behavior in the routing middleware so generated resource methods stay untouched. Made-with: Cursor
feat: add browser routing cache
db820d1 to
2b2e3ca
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 2b2e3ca. Configure here.
2b2e3ca to
65288d8
Compare

Automated Release PR
0.51.0 (2026-04-25)
Full Changelog: v0.50.0...v0.51.0
Features
Bug Fixes
Chores
Documentation
Refactors
This pull request is managed by Stainless's GitHub App.
The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.
For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.
🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions
Note
Medium Risk
Wraps the client’s underlying
fetchto conditionally reroute certain/browsers/{session}/{subresource}calls to per-browserbase_urlhosts and to maintain an in-memory routing cache, which can affect all SDK requests if misconfigured. Also adds a newbrowsers.fetch()raw HTTP helper that depends on cached routing state, introducing new runtime behavior and error cases.Overview
Adds browser-scoped routing to the SDK’s HTTP layer. The
Kernelclient now maintains a sharedBrowserRouteCacheand wraps itsfetchviacreateRoutingFetch()to sniff browser create/list/pool-acquire JSON responses for{session_id, base_url, jwt}and then directly route allowlisted browser subresource requests to the browser VMbase_url(injectingjwtand strippingAuthorization). Cache entries are evicted on successful browser delete and browser pool release, and the routed subresources are controlled viaKERNEL_BROWSER_ROUTING_SUBRESOURCES(defaultcurl, empty disables routing).Adds a new raw HTTP helper and exports.
browsers.fetch()issues HTTP requests through the browser VM via/curl/rawusing cached routing info, and the package exportsBrowserRouteCache,BrowserRoute, andBrowserFetchInit; an example and Jest coverage are added. Also updates managed auth connection types withbrowser_session_idandlast_auth_check_at(and clarifies/deprecateslast_auth_at), plus version bumps and minor bootstrap env var robustness.Reviewed by Cursor Bugbot for commit 65288d8. Bugbot is set up for automated code reviews on this repo. Configure here.