Skip to main content
The CDN script installs one browser global: window.Dubot.

Properties and inspection

Initialization

init(options?)

Initializes identity, configuration, placements, Resource Center, Guidance resume, analytics, and the optional action channel. Returns Promise<void>. Await it before programmatic launches. Missing client tokens, configuration-fetch failures, duplicate calls, and calls after destroy() are reported in the console and can resolve without a working surface. Verify the rendered result and Network responses; resolution does not prove identity acceptance or successful rendering. The client token is read from the SDK script URL and is not an init() option. All other initialization options are optional. Omitting mode defaults programmatic rendering to bubble; configured placements keep their own presentation. An identical repeated call does not remount placements. A new token with otherwise unchanged options refreshes identity in place. Other changed options can restart initialization. Pass the complete intended configuration when reinitializing; init() is not a partial-update method. See token renewal and account changes.

Wizards and Resource Center

The two presentation fields use different public values: These methods use the current environment’s configuration: the saved draft in a browser-extension Test session, or the published version in Production. They do not publish configuration.

Host state

Each action has tool_id: string, input_schema: object, and execute(input): unknown | Promise<unknown>. Each static Resource Center callback has id: string and execute(): unknown | Promise<unknown>. See SDK actions for complete examples and the separate governance requirements.

Guidance

The returned session has stop(), optional guidanceSessionId, and a done promise that resolves to an outcome containing { status, detail }, where status is completed, stopped, or error and detail is a string. done resolves on failure as well; inspect its status instead of relying on a rejection. stop() returns void. Goal-based runs require workspace enablement and a controlled evaluation; see Guidance availability and guide compatibility.

End-user MCP action channel

These methods return no grants or no-op when the SDK does not have both userId and identityToken. They belong to the controlled-rollout end-user action channel. Each grant contains string fields id, clientId, clientName, workspaceId, sub, and createdAt. An empty list alone does not distinguish no grants from a rejected HTTP request; inspect the Network response when troubleshooting.

Lifecycle

destroy()

Tears down the installed instance. It is safe to call more than once and terminal for that instance. Returns void. Reload the full page before initializing a fresh instance; reinserting the script into the same document does not revive it.
setAuthoringMode() exists for the Dubot browser extension’s authoring isolation. It is not a host-application integration API.
For runtime diagnosis, see Troubleshoot the browser SDK.