@agentvault/playwright

Private test build — not on npm. Install it straight from this site.

Install

With Bun:

bun add https://this-site.invalid/sdk/agentvault-playwright.tgz

With npm / pnpm / yarn:

npm install https://this-site.invalid/sdk/agentvault-playwright.tgz

The commands above still read this-site.invalid, and this page deliberately does not fill it in for you. It is a static file: nothing hands it the origin this deployment is configured to serve on, so all it could use is the hostname your request happened to arrive under — and if that were someone else's, the command would fetch and execute their code on your machine. A person reading their own address bar can tell the difference; this script cannot.

So replace https://this-site.invalid with the origin shown in your address bar, once you are satisfied it is the deployment you meant to visit — but only if that origin is https://, or a local server on localhost / 127.0.0.1. If your address bar shows http:// on any other host, do not substitute it: the tarball would arrive over a channel anyone on the path can rewrite, and these commands EXECUTE what arrives. Reach this page over https:// first, then copy the origin from there. The dashboard's Overview page shows the same commands already filled in, if you would rather copy them from there.

JavaScript is off, so the commands above still read this-site.invalid. Replace https://this-site.invalid with the origin in your address bar — but only if that origin is https://, or a local server on localhost / 127.0.0.1 (where you should keep its http:// and its port, since nothing is listening on 443). The tarball is served from this deployment, so a PR preview installs its own build. If the address bar shows http:// on anything other than a local address, do not build the command from it. These bytes are unpacked and executed on your machine, and over plaintext whoever is on the network path chooses what runs — so a working command would be worse than none. Open the deployment over HTTPS and use that origin instead. (The script below is stricter still: it fills the commands in only for a LOOPBACK address, and leaves the placeholder alone on every deployed host — including this one. See the note in that script for why.)

Configure

Set these before running your agent:

export SELF_AGENT_PAY_API_KEY=<your agent key from the dashboard>
export SELF_AGENT_PAY_PROXY_URL=wss://<proxy host>/v1
export SELF_AGENT_PAY_API_URL=https://<your-deployment>.convex.site

Use

import { chromium, listTokens } from "@agentvault/playwright";

const catalog = await listTokens();
const browser = await chromium.launch();
const page = await browser.newPage();
// fill checkout forms with catalog tokens; the proxy substitutes real values
await browser.close();

Full API, the token grammar, and the rules of engagement are documented in the package README (bundled in the tarball). Questions? Ping the team.