Browser automationSecurity
Accounts and credentials
Resolve social-account sessions and service credentials without embedding them in trajectories or browser bundles.
Accounts and credentials — contract and behavior
- Supabase service-role access belongs only in the worker process and is used for queue and account-session resolution.
- getSocialAccount and resolveAccountSession centralize account lookup so trajectories do not invent a second credential path.
- Model-routing credentials remain separate from social-account cookies and platform sessions.
- Logs, screenshots, HAR, NetLog, and merged recordings can contain sensitive session evidence and require restricted retention.