[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M718GD5FQ37XHZDMHRCZH0GK":3,"skill-same:01M718GD5FQ37XHZDMHRCZH0GK":208},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":56,"commitSha":57,"skillDirectory":58,"forksCount":59,"repositoryHtmlUrl":60,"repositoryHomepageUrl":6,"ownerHtmlUrl":61,"ownerBlogUrl":62,"ownerDescription":6,"updatedAt":63,"install":64,"resources":77},"01M718GD5FQ37XHZDMHRCZH0GK","zoom-cobrowse-sdk",null,"Reference skill for Zoom Cobrowse SDK. Use after routing to a collaborative-support workflow when implementing browser co-browsing, annotation tools, privacy masking, remote assist, or PIN-based session sharing.","anthropics\u002Fknowledge-work-plugins","anthropics","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F76263028?v=4","01M697XGDPXJAVQ8391V2BCYTE","Anthropic","01M7188MPC48111TN566QNQE3X",35563,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"zoom cobrowse sdk","sdk","cobrowse sdk","zoom","reference skill","for","browse","annotation","Tools","screen","co","support","customer","browser","browsing","workflow","when","false","remote","implementing","2026-11-10 10:12:30",false,"---\nname: zoom-cobrowse-sdk\ndescription: \"Reference skill for Zoom Cobrowse SDK. Use after routing to a collaborative-support workflow when implementing browser co-browsing, annotation tools, privacy masking, remote assist, or PIN-based session sharing.\"\nuser-invocable: false\ntriggers:\n  - \"cobrowse\"\n  - \"co-browse\"\n  - \"collaborative browsing\"\n  - \"agent assist\"\n  - \"customer support screen share\"\n  - \"zoom cobrowse\"\n---\n\n# Zoom Cobrowse SDK - Web Development\n\nBackground reference for collaborative browsing on the web with Zoom Cobrowse SDK. Use this after the support workflow is clear and you need implementation detail.\n\n**Official Documentation**: https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F  \n**API Reference**: https:\u002F\u002Fmarketplacefront.zoom.us\u002Fsdk\u002Fcobrowse\u002F  \n**Quickstart Repository**: https:\u002F\u002Fgithub.com\u002Fzoom\u002FCobrowseSDK-Quickstart  \n**Auth Endpoint Sample**: https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample\n\n## Quick Links\n\n**New to Cobrowse SDK? Follow this path:**\n\n1. **[Get Started Guide](get-started.md)** - Complete setup from credentials to first session\n2. **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Understanding customer and agent flows\n3. **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - Token generation and security\n4. **[Customer Integration](examples\u002Fcustomer-integration.md)** - Integrate SDK into your website\n5. **[Agent Integration](examples\u002Fagent-integration.md)** - Set up agent portal (iframe or npm)\n\n**Core Concepts:**\n- **[Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)** - Customer vs Agent architecture\n- **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - PIN generation, connection, reconnection\n- **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - SDK Key vs API Key, role_type, claims\n- **[Distribution Methods](concepts\u002Fdistribution-methods.md)** - CDN vs npm (BYOP)\n\n**Features:**\n- **[Annotation Tools](examples\u002Fannotations.md)** - Drawing, highlighting, pointer tools\n- **[Privacy Masking](examples\u002Fprivacy-masking.md)** - Hide sensitive fields from agents\n- **[Remote Assist](examples\u002Fremote-assist.md)** - Agent can scroll customer's page\n- **[Multi-Tab Persistence](examples\u002Fmulti-tab-persistence.md)** - Session continues across tabs\n- **[BYOP Mode](examples\u002Fbyop-custom-pin.md)** - Bring Your Own PIN with npm integration\n\n**Troubleshooting:**\n- **[Common Issues](troubleshooting\u002Fcommon-issues.md)** - Quick diagnostics and solutions\n- **[Error Codes](troubleshooting\u002Ferror-codes.md)** - Complete error reference\n- **[CORS and CSP](troubleshooting\u002Fcors-csp.md)** - Cross-origin and security policy configuration\n- **[Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)** - Supported browsers and limitations\n- **[5-Minute Runbook](RUNBOOK.md)** - Fast preflight checks before deep debugging\n\n**Reference:**\n- **[API Reference](references\u002Fapi-reference.md)** - Complete SDK methods and events\n- **[Settings Reference](references\u002Fsettings-reference.md)** - All initialization settings\n- **Integrated Index** - see the section below in this file\n\n## SDK Overview\n\nThe Zoom Cobrowse SDK is a JavaScript library that provides:\n\n- **Real-Time Co-Browsing**: Agent sees customer's browser activity live\n- **PIN-Based Sessions**: Secure 6-digit PIN for customer-to-agent connection\n- **Annotation Tools**: Drawing, highlighting, vanishing pen, rectangle, color picker\n- **Privacy Masking**: CSS selector-based masking of sensitive form fields\n- **Remote Assist**: Agent can scroll customer's page (with consent)\n- **Multi-Tab Persistence**: Session continues when customer opens new tabs\n- **Auto-Reconnection**: Session recovers from page refresh (2-minute window)\n- **Session Events**: Real-time events for session state changes\n- **HTTPS Required**: Secure connections (HTTP only works on loopback\u002Flocal development hosts)\n- **No Plugins**: Pure JavaScript, no browser extensions needed\n\n## Two Roles Architecture\n\nCobrowse has **two distinct roles**, each with different integration patterns:\n\n| Role | role_type | Integration | JWT Required | Purpose |\n|------|-----------|-------------|--------------|---------|\n| **Customer** | 1 | Website integration (CDN or npm) | Yes | User who shares their browser session |\n| **Agent** | 2 | Iframe (CDN) or npm (BYOP only) | Yes | Support staff who views\u002Fassists customer |\n\n**Key Insight**: Customer and agent use **different integration methods** but the same JWT authentication pattern.\n\n## Read This First (Critical)\n\nFor customer\u002Fagent demos, treat the PIN from customer SDK event `pincode_updated` as the only user-facing PIN.\n\n- Show one clearly labeled value in UI (for example, **Support PIN**).\n- Use that same PIN for agent join.\n- Do not expose provisional\u002Fdebug PINs from backend pre-start records to users.\n\nIf these rules are ignored, agent desk often fails with `Pincode is not found` \u002F code `30308`.\n\n### Typical Production Flow (Most Common)\n\nThis is the flow most teams implement first, and what users usually expect in demos:\n\n1. **Customer starts session first** (`role_type=1`)\n   - Backend creates\u002Frecords session\n   - Backend returns customer JWT\n   - Customer SDK starts and receives a PIN\n2. **Agent joins second** (`role_type=2`)\n   - Agent enters customer PIN\n   - Backend validates PIN and session state\n   - Backend returns agent JWT\n   - Agent opens Zoom-hosted desk iframe (or custom npm agent UI in BYOP)\n\nIf a demo only has one generic \"session\" user, it is incomplete for real cobrowse operations.\n\n## Prerequisites\n\n### Platform Requirements\n\n- **Supported Browsers**:\n  - Chrome 80+ ✓\n  - Firefox 78+ ✓\n  - Safari 14+ ✓\n  - Edge 80+ ✓\n  - Internet Explorer ✗ (not supported)\n\n- **Network Requirements**:\n  - HTTPS required (HTTP works on loopback\u002Flocal development hosts only)\n  - Allow cross-origin requests to `*.zoom.us`\n  - CSP headers must allow Zoom domains (see [CORS and CSP guide](troubleshooting\u002Fcors-csp.md))\n\n- **Third-Party Cookies**:\n  - Must enable third-party cookies for refresh reconnection\n  - Privacy mode may limit certain features\n\n### Zoom Account Requirements\n\n1. **Zoom Workplace Account** with SDK Universal Credit\n2. **Video SDK App** created in Zoom Marketplace\n3. **Cobrowse SDK Credentials** from the app's Cobrowse tab\n\n**Note**: Cobrowse SDK is a **feature of Video SDK** (not a separate product).\n\n### Credentials Overview\n\nYou'll receive **4 credentials** from Zoom Marketplace → Video SDK App → Cobrowse tab:\n\n| Credential | Type | Used For | Exposure Safe? |\n|------------|------|----------|----------------|\n| **SDK Key** | Public | CDN URL, JWT `app_key` claim | ✓ Yes (client-side) |\n| **SDK Secret** | Private | Sign JWTs | ✗ No (server-side only) |\n| **API Key** | Private | REST API calls (optional) | ✗ No (server-side only) |\n| **API Secret** | Private | REST API calls (optional) | ✗ No (server-side only) |\n\n**Critical**: SDK Key is **public** (embedded in CDN URL), but SDK Secret must **never** be exposed client-side.\n\n## Quick Start\n\n### Step 1: Get SDK Credentials\n\n1. Go to [Zoom Marketplace](https:\u002F\u002Fmarketplace.zoom.us\u002F)\n2. Open your **Video SDK App** (or create one)\n3. Navigate to the **Cobrowse** tab\n4. Copy your credentials:\n   - SDK Key\n   - SDK Secret\n   - API Key (optional)\n   - API Secret (optional)\n\n### Step 2: Set Up Token Server\n\nDeploy a server-side endpoint to generate JWTs. Use the official sample:\n\n```bash\ngit clone https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample.git\ncd cobrowsesdk-auth-endpoint-sample\nnpm install\n\n# Create .env file\ncat > .env \u003C\u003C EOF\nZOOM_SDK_KEY=your_sdk_key_here\nZOOM_SDK_SECRET=your_sdk_secret_here\nPORT=4000\nEOF\n\nnpm start\n```\n\n**Token endpoint:**\n```javascript\n\u002F\u002F POST https:\u002F\u002FYOUR_TOKEN_SERVICE_BASE_URL\n{\n  \"role\": 1,           \u002F\u002F 1 = customer, 2 = agent\n  \"userId\": \"user123\",\n  \"userName\": \"John Doe\"\n}\n\n\u002F\u002F Response\n{\n  \"token\": \"eyJhbGciOiJIUzI1NiIs...\"\n}\n```\n\n### Step 3: Customer Side Integration (CDN)\n\n```html\n\u003C!DOCTYPE html>\n\u003Chtml>\n\u003Chead>\n  \u003Ctitle>Customer - Cobrowse Demo\u003C\u002Ftitle>\n  \u003Cscript type=\"module\">\n    const ZOOM_SDK_KEY = 'YOUR_SDK_KEY';\n    \n    \u002F\u002F Load SDK from CDN\n    (function(r, a, b, f, c, d) {\n      r[f] = r[f] || { init: function() { r.ZoomCobrowseSDKInitArgs = arguments }};\n      var fragment = a.createDocumentFragment();\n      function loadJs(url) {\n        c = a.createElement(b);\n        d = a.getElementsByTagName(b)[0];\n        c[\"async\"] = false;\n        c.src = url;\n        fragment.appendChild(c);\n      }\n      loadJs(`https:\u002F\u002Fus01-zcb.zoom.us\u002Fstatic\u002Fresource\u002Fsdk\u002F${ZOOM_SDK_KEY}\u002Fjs\u002F2.13.2`);\n      d.parentNode.insertBefore(fragment, d);\n    })(window, document, \"script\", \"ZoomCobrowseSDK\");\n  \u003C\u002Fscript>\n\u003C\u002Fhead>\n\u003Cbody>\n  \u003Ch1>Customer Support\u003C\u002Fh1>\n  \u003Cbutton id=\"cobrowse-btn\" disabled>Loading...\u003C\u002Fbutton>\n  \n  \u003C!-- Sensitive fields - will be masked from agent -->\n  \u003Clabel>SSN: \u003Cinput type=\"text\" class=\"pii-mask\" placeholder=\"XXX-XX-XXXX\">\u003C\u002Flabel>\n  \u003Clabel>Credit Card: \u003Cinput type=\"text\" class=\"pii-mask\" placeholder=\"XXXX-XXXX-XXXX-XXXX\">\u003C\u002Flabel>\n  \n  \u003Cscript type=\"module\">\n    let sessionRef = null;\n    \n    const settings = {\n      allowAgentAnnotation: true,\n      allowCustomerAnnotation: true,\n      piiMask: {\n        maskCssSelectors: \".pii-mask\",\n        maskType: \"custom_input\"\n      }\n    };\n    \n    ZoomCobrowseSDK.init(settings, function({ success, session, error }) {\n      if (success) {\n        sessionRef = session;\n        \n        \u002F\u002F Listen for PIN code\n        session.on(\"pincode_updated\", (payload) => {\n          console.log(\"PIN Code:\", payload.pincode);\n          \u002F\u002F IMPORTANT: this is the PIN agent should use\n          alert(`Share this PIN with agent: ${payload.pincode}`);\n        });\n        \n        \u002F\u002F Listen for session events\n        session.on(\"session_started\", () => console.log(\"Session started\"));\n        session.on(\"agent_joined\", () => console.log(\"Agent joined\"));\n        session.on(\"agent_left\", () => console.log(\"Agent left\"));\n        session.on(\"session_ended\", () => console.log(\"Session ended\"));\n        \n        document.getElementById(\"cobrowse-btn\").disabled = false;\n        document.getElementById(\"cobrowse-btn\").innerText = \"Start Cobrowse Session\";\n      } else {\n        console.error(\"SDK init failed:\", error);\n      }\n    });\n    \n    document.getElementById(\"cobrowse-btn\").addEventListener(\"click\", async () => {\n      \u002F\u002F Fetch JWT from your server\n      const response = await fetch(\"https:\u002F\u002FYOUR_TOKEN_SERVICE_BASE_URL\", {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application\u002Fjson\" },\n        body: JSON.stringify({\n          role: 1,\n          userId: \"customer_\" + Date.now(),\n          userName: \"Customer\"\n        })\n      });\n      const { token } = await response.json();\n      \n      \u002F\u002F Start cobrowse session\n      sessionRef.start({ sdkToken: token });\n    });\n  \u003C\u002Fscript>\n\u003C\u002Fbody>\n\u003C\u002Fhtml>\n```\n\n### Step 4: Agent Side Integration (Iframe)\n\n```html\n\u003C!DOCTYPE html>\n\u003Chtml>\n\u003Chead>\n  \u003Ctitle>Agent Portal\u003C\u002Ftitle>\n\u003C\u002Fhead>\n\u003Cbody>\n  \u003Ch1>Agent Portal\u003C\u002Fh1>\n  \u003Ciframe \n    id=\"agent-iframe\"\n    width=\"1024\" \n    height=\"768\"\n    allow=\"autoplay *; camera *; microphone *; display-capture *; geolocation *;\"\n  >\u003C\u002Fiframe>\n  \n  \u003Cscript>\n    async function connectAgent() {\n      \u002F\u002F Fetch JWT from your server\n      const response = await fetch(\"https:\u002F\u002FYOUR_TOKEN_SERVICE_BASE_URL\", {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application\u002Fjson\" },\n        body: JSON.stringify({\n          role: 2,\n          userId: \"agent_\" + Date.now(),\n          userName: \"Support Agent\"\n        })\n      });\n      const { token } = await response.json();\n      \n      \u002F\u002F Load Zoom agent portal\n      const iframe = document.getElementById(\"agent-iframe\");\n      iframe.src = `https:\u002F\u002Fus01-zcb.zoom.us\u002Fsdkapi\u002Fzcb\u002Fframe-templates\u002Fdesk?access_token=${token}`;\n    }\n    \n    connectAgent();\n  \u003C\u002Fscript>\n\u003C\u002Fbody>\n\u003C\u002Fhtml>\n```\n\n### Step 5: Test the Integration\n\n1. Open **two separate browsers** (or incognito + normal)\n2. **Customer browser**: Open customer page, click \"Start Cobrowse Session\"\n3. **Customer browser**: Note the 6-digit PIN displayed\n4. **Agent browser**: Open agent page, enter the PIN code\n5. **Both browsers**: Session connects, agent can see customer's page\n6. **Test features**: Annotations, data masking, remote assist\n\n## Key Features\n\n### 1. Annotation Tools\n\nBoth customer and agent can draw on the shared screen:\n\n```javascript\nconst settings = {\n  allowAgentAnnotation: true,      \u002F\u002F Agent can draw\n  allowCustomerAnnotation: true    \u002F\u002F Customer can draw\n};\n```\n\n**Available tools**:\n- Pen (persistent)\n- Vanishing pen (disappears after 4 seconds)\n- Rectangle\n- Color picker\n- Eraser\n- Undo\u002FRedo\n\n### 2. Privacy Masking\n\nHide sensitive fields from agents using CSS selectors:\n\n```javascript\nconst settings = {\n  piiMask: {\n    maskType: \"custom_input\",           \u002F\u002F Mask specific fields\n    maskCssSelectors: \".pii-mask, #ssn\", \u002F\u002F CSS selectors\n    maskHTMLAttributes: \"data-sensitive=true\" \u002F\u002F HTML attributes\n  }\n};\n```\n\n**Supported masking**:\n- Text nodes ✓\n- Form inputs ✓\n- Select elements ✓\n- Images ✗ (not supported)\n- Links ✗ (not supported)\n\n### 3. Remote Assist\n\nAgent can scroll the customer's page:\n\n```javascript\nconst settings = {\n  remoteAssist: {\n    enable: true,\n    enableCustomerConsent: true,        \u002F\u002F Customer must approve\n    remoteAssistTypes: ['scroll_page'], \u002F\u002F Only scroll supported\n    requireStopConfirmation: false      \u002F\u002F Confirmation when stopping\n  }\n};\n```\n\n### 4. Multi-Tab Session Persistence\n\nSession continues when customer opens new tabs:\n\n```javascript\nconst settings = {\n  multiTabSessionPersistence: {\n    enable: true,\n    stateCookieKey: '$$ZCB_SESSION$$'  \u002F\u002F Cookie key (base64 encoded)\n  }\n};\n```\n\n## Session Lifecycle\n\n### Customer Flow\n\n1. **Load SDK** → CDN script loads `ZoomCobrowseSDK`\n2. **Initialize** → `ZoomCobrowseSDK.init(settings, callback)`\n3. **Fetch JWT** → Request token from your server (role_type=1)\n4. **Start Session** → `session.start({ sdkToken })`\n5. **PIN Generated** → `pincode_updated` event fires\n6. **Share PIN** → Customer gives 6-digit PIN to agent\n7. **Agent Joins** → `agent_joined` event fires\n8. **Session Active** → Real-time synchronization begins\n9. **End Session** → `session.end()` or agent leaves\n\n### Agent Flow\n\n1. **Fetch JWT** → Request token from your server (role_type=2)\n2. **Load Iframe** → Point to Zoom agent portal with token\n3. **Enter PIN** → Agent inputs customer's 6-digit PIN\n4. **Connect** → `session_joined` event fires\n5. **View Session** → Agent sees customer's browser\n6. **Use Tools** → Annotations, remote assist, zoom\n7. **Leave Session** → Click \"Leave Cobrowse\" button\n\n### Session Recovery (Auto-Reconnect)\n\nWhen customer refreshes the page:\n\n```javascript\nZoomCobrowseSDK.init(settings, function({ success, session, error }) {\n  if (success) {\n    const sessionInfo = session.getSessionInfo();\n    \n    \u002F\u002F Check if session is recoverable\n    if (sessionInfo.sessionStatus === 'session_recoverable') {\n      session.join();  \u002F\u002F Auto-rejoin previous session\n    } else {\n      \u002F\u002F Start new session\n      session.start({ sdkToken });\n    }\n  }\n});\n```\n\n**Recovery window**: 2 minutes. After 2 minutes, session ends.\n\n## Critical Gotchas and Best Practices\n\n### ⚠️ CRITICAL: SDK Secret Must Stay Server-Side\n\n**Problem**: Developers often accidentally embed SDK Secret in frontend code.\n\n**Solution**:\n- ✓ **SDK Key** → Safe to expose (embedded in CDN URL)\n- ✗ **SDK Secret** → Never expose (use for JWT signing server-side)\n\n```javascript\n\u002F\u002F ❌ WRONG - Secret exposed in frontend\nconst jwt = signJWT(payload, 'YOUR_SDK_SECRET');  \u002F\u002F Security risk!\n\n\u002F\u002F ✅ CORRECT - Secret stays on server\nconst response = await fetch('\u002Fapi\u002Ftoken', {\n  method: 'POST',\n  body: JSON.stringify({ role: 1, userId, userName })\n});\nconst { token } = await response.json();\n```\n\n### SDK Key vs API Key (Different Purposes!)\n\n| Credential | Used For | JWT Claim |\n|------------|----------|-----------|\n| **SDK Key** | CDN URL, JWT `app_key` | `app_key: \"SDK_KEY\"` |\n| **API Key** | REST API calls (optional) | Not used in JWT |\n\n**Common mistake**: Using API Key instead of SDK Key in JWT `app_key` claim.\n\n### Session Limits\n\n| Limit | Value | What Happens |\n|-------|-------|--------------|\n| Customers per session | 1 | Error 1012: `SESSION_CUSTOMER_COUNT_LIMIT` |\n| Agents per session | 5 | Error 1013: `SESSION_AGENT_COUNT_LIMIT` |\n| Active sessions per browser | 1 | Error 1004: `SESSION_COUNT_LIMIT` |\n| PIN code length | 10 chars max | Error 1008: `SESSION_PIN_INVALID_FORMAT` |\n\n### Session Timeout Behavior\n\n| Event | Timeout | What Happens |\n|-------|---------|--------------|\n| Agent waiting for customer | 3 minutes | Session ends automatically |\n| Page refresh reconnection | 2 minutes | Session ends if not reconnected |\n| Reconnection attempts | 2 times max | Session ends after 2 failed attempts |\n\n### HTTPS Requirement\n\n**Problem**: SDK doesn't load on HTTP sites.\n\n**Solution**:\n- Production: Use HTTPS ✓\n- Development: Use a loopback host for local HTTP testing ✓\n- Development: Use a local HTTPS endpoint with a trusted\u002Fself-signed cert if required ✓\n\n### Third-Party Cookies Required\n\n**Problem**: Refresh reconnection doesn't work.\n\n**Solution**: Enable third-party cookies in browser settings.\n\n**Affected scenarios**:\n- Browser privacy mode\n- Safari with \"Prevent cross-site tracking\" enabled\n- Chrome with \"Block third-party cookies\" enabled\n\n### Distribution Method Confusion\n\n| Method | Use Case | Agent Integration | BYOP Required |\n|--------|----------|-------------------|---------------|\n| **CDN** | Most use cases | Zoom-hosted iframe | No (auto PIN) |\n| **npm** | Custom agent UI, full control | Custom npm integration | Yes (required) |\n\n**Key Insight**: If you want **npm** integration, you **must** use BYOP (Bring Your Own PIN) mode.\n\n### Cross-Origin Iframe Handling\n\n**Problem**: Cobrowse doesn't work in cross-origin iframes.\n\n**Solution**: Inject SDK snippet into cross-origin iframes:\n\n```html\n\u003Cscript>\nconst ZOOM_SDK_KEY = \"YOUR_SDK_KEY_HERE\";\n\n(function(r,a,b,f,c,d){r[f]=r[f]||{init:function(){r.ZoomCobrowseSDKInitArgs=arguments}};\nvar fragment=a.createDocumentFragment();function loadJs(url) {c=a.createElement(b);d=a.getElementsByTagName(b)[0];c.async=false;c.src=url;fragment.appendChild(c);};\nloadJs('https:\u002F\u002Fus01-zcb.zoom.us\u002Fstatic\u002Fresource\u002Fsdk\u002F${ZOOM_SDK_KEY}\u002Fjs');d.parentNode.insertBefore(fragment,d);})(window,document,'script','ZoomCobrowseSDK');\n\u003C\u002Fscript>\n```\n\n**Same-origin iframes**: No extra setup needed.\n\n## Known Limitations\n\n### Synchronization Limits\n\n**Not synchronized**:\n- HTML5 Canvas elements\n- WebGL content\n- Audio and Video elements\n- Shadow DOM\n- PDF rendered with Canvas\n- Web Components\n\n**Partially synchronized**:\n- Drop-down boxes (only selected result)\n- Date pickers (only selected result)\n- Color pickers (only selected result)\n\n### Rendering Limits\n\n- High-resolution images may be compressed\n- Different screen sizes may cause CSS media query differences\n- Cross-origin images may not render (CORS restrictions)\n- Cross-origin fonts may not render (CORS restrictions)\n\n### Masking Limits\n\n**Supported**:\n- Text nodes ✓\n- Form inputs ✓\n- Select elements ✓\n\n**Not supported**:\n- `\u003Cimg>` elements ✗\n- Links ✗\n\n## Complete Documentation Library\n\nThis skill includes comprehensive guides organized by category:\n\n### Core Concepts\n- **[Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)** - Customer vs Agent architecture\n- **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Complete flow from start to end\n- **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - Token structure and signing\n- **[Distribution Methods](concepts\u002Fdistribution-methods.md)** - CDN vs npm (BYOP)\n\n### Examples\n- **[Customer Integration](examples\u002Fcustomer-integration.md)** - Complete customer-side setup\n- **[Agent Integration](examples\u002Fagent-integration.md)** - Iframe and npm agent setups\n- **[Annotations](examples\u002Fannotations.md)** - Drawing tools configuration\n- **[Privacy Masking](examples\u002Fprivacy-masking.md)** - Field masking patterns\n- **[Remote Assist](examples\u002Fremote-assist.md)** - Agent page control\n- **[Multi-Tab Persistence](examples\u002Fmulti-tab-persistence.md)** - Cross-tab sessions\n- **[BYOP Custom PIN](examples\u002Fbyop-custom-pin.md)** - Custom PIN codes\n\n### References\n- **[API Reference](references\u002Fapi-reference.md)** - Complete SDK methods and events\n- **[Settings Reference](references\u002Fsettings-reference.md)** - All initialization settings\n- **[Error Codes](references\u002Ferror-codes.md)** - Complete error reference\n- **[Session Events](references\u002Fsession-events.md)** - All event types\n\n### Troubleshooting\n- **[Common Issues](troubleshooting\u002Fcommon-issues.md)** - Quick diagnostics\n- **[Error Codes](troubleshooting\u002Ferror-codes.md)** - Error code reference\n- **[CORS and CSP](troubleshooting\u002Fcors-csp.md)** - Cross-origin configuration\n- **[Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)** - Browser support\n\n## Resources\n\n- **Official Docs**: https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F\n- **API Reference**: https:\u002F\u002Fmarketplacefront.zoom.us\u002Fsdk\u002Fcobrowse\u002F\n- **Quickstart Repo**: https:\u002F\u002Fgithub.com\u002Fzoom\u002FCobrowseSDK-Quickstart\n- **Auth Endpoint Sample**: https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample\n- **Dev Forum**: https:\u002F\u002Fdevforum.zoom.us\u002F\n- **Developer Blog**: https:\u002F\u002Fdevelopers.zoom.us\u002Fblog\u002F?category=zoom-cobrowse-sdk\n\n---\n\n**Need help?** Start with Integrated Index section below for complete navigation.\n\n---\n\n## Integrated Index\n\n_This section was migrated from `SKILL.md`._\n\n**Complete navigation guide for all Cobrowse SDK documentation.**\n\n## Getting Started (Start Here!)\n\nIf you're new to Zoom Cobrowse SDK, follow this learning path:\n\n1. **[SKILL.md](SKILL.md)** - Main overview and quick start\n2. **[5-Minute Runbook](RUNBOOK.md)** - Preflight checks for common failures\n3. **[Get Started Guide](get-started.md)** - Step-by-step setup from credentials to first session\n4. **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Understand the complete customer and agent flow\n5. **[Customer Integration](examples\u002Fcustomer-integration.md)** - Integrate SDK into your website\n6. **[Agent Integration](examples\u002Fagent-integration.md)** - Set up agent portal\n\n## Core Concepts\n\nFoundational concepts you need to understand:\n\n- **[Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)** - Customer (role_type=1) vs Agent (role_type=2) architecture\n- **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Complete flow: init → start → PIN → connect → end\n- **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - Token structure, signing, SDK Key vs API Key\n- **[Distribution Methods](concepts\u002Fdistribution-methods.md)** - CDN vs npm (BYOP mode)\n\n## Examples and Patterns\n\nComplete working examples for common scenarios:\n\n### Session Management\n- **[Customer Integration](examples\u002Fcustomer-integration.md)** - Complete customer-side implementation (CDN and npm)\n- **[Agent Integration](examples\u002Fagent-integration.md)** - Iframe and npm agent setup patterns\n- **[Session Events](examples\u002Fsession-events.md)** - Handle all session lifecycle events\n- **[Auto-Reconnection](examples\u002Fauto-reconnection.md)** - Page refresh and session recovery\n\n### Features\n- **[Annotation Tools](examples\u002Fannotations.md)** - Enable drawing, highlighting, vanishing pen\n- **[Privacy Masking](examples\u002Fprivacy-masking.md)** - Mask sensitive fields with CSS selectors\n- **[Remote Assist](examples\u002Fremote-assist.md)** - Agent can scroll customer's page\n- **[Multi-Tab Persistence](examples\u002Fmulti-tab-persistence.md)** - Session continues across browser tabs\n- **[BYOP Custom PIN](examples\u002Fbyop-custom-pin.md)** - Bring Your Own PIN with npm integration\n\n## References\n\nComplete API and configuration references:\n\n### SDK Reference\n- **[API Reference](references\u002Fapi-reference.md)** - All SDK methods and interfaces\n  - ZoomCobrowseSDK.init()\n  - session.start()\n  - session.join()\n  - session.end()\n  - session.on()\n  - session.getSessionInfo()\n  \n- **[Settings Reference](references\u002Fsettings-reference.md)** - All initialization settings\n  - allowAgentAnnotation\n  - allowCustomerAnnotation\n  - piiMask\n  - remoteAssist\n  - multiTabSessionPersistence\n\n- **[Session Events Reference](references\u002Fsession-events.md)** - All event types\n  - pincode_updated\n  - session_started\n  - session_ended\n  - agent_joined\n  - agent_left\n  - session_error\n  - session_reconnecting\n  - remote_assist_started\n  - remote_assist_stopped\n\n### Error Reference\n- **[Error Codes](references\u002Ferror-codes.md)** - Complete error code reference\n  - 1001-1017: Session errors\n  - 2001: Token errors\n  - 9999: Service errors\n\n### Official Documentation\n- **[Get Started](references\u002Fget-started.md)** - Official get started documentation (crawled)\n- **[Features](references\u002Ffeatures.md)** - Official features documentation (crawled)\n- **[Authorization](references\u002Fauthorization.md)** - Official JWT authorization docs (crawled)\n- **[API Documentation](references\u002Fapi.md)** - Crawled API reference docs\n\n## Troubleshooting\n\nQuick diagnostics and common issue resolution:\n\n- **[Common Issues](troubleshooting\u002Fcommon-issues.md)** - Quick fixes for frequent problems\n  - SDK not loading\n  - Token generation fails\n  - Agent can't connect\n  - Fields not masked\n  - Session doesn't reconnect after refresh\n\n- **[Error Codes](troubleshooting\u002Ferror-codes.md)** - Error code lookup and solutions\n  - Session start\u002Fjoin failures (1001, 1011, 1016)\n  - Session limit errors (1002, 1004, 1012, 1013, 1015)\n  - PIN code errors (1006, 1008, 1009, 1010)\n  - Token errors (2001)\n\n- **[CORS and CSP](troubleshooting\u002Fcors-csp.md)** - Cross-origin and Content Security Policy setup\n  - Access-Control-Allow-Origin headers\n  - Content-Security-Policy headers\n  - Cross-origin iframe handling\n  - Same-origin iframe handling\n\n- **[Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)** - Browser requirements and limitations\n  - Supported browsers (Chrome 80+, Firefox 78+, Safari 14+, Edge 80+)\n  - Internet Explorer not supported\n  - Privacy mode limitations\n  - Third-party cookie requirements\n\n## By Use Case\n\nFind documentation by what you're trying to do:\n\n### I want to...\n\n**Set up cobrowse for the first time:**\n- [Get Started Guide](get-started.md)\n- [JWT Authentication](concepts\u002Fjwt-authentication.md)\n- [Customer Integration](examples\u002Fcustomer-integration.md)\n- [Agent Integration](examples\u002Fagent-integration.md)\n\n**Add annotation tools:**\n- [Annotation Tools Example](examples\u002Fannotations.md)\n- [Settings Reference - allowAgentAnnotation](references\u002Fsettings-reference.md#allowa gentannotation)\n- [Settings Reference - allowCustomerAnnotation](references\u002Fsettings-reference.md#allowcustomerannotation)\n\n**Hide sensitive data from agents:**\n- [Privacy Masking Example](examples\u002Fprivacy-masking.md)\n- [Settings Reference - piiMask](references\u002Fsettings-reference.md#piimask)\n\n**Let agents control customer's page:**\n- [Remote Assist Example](examples\u002Fremote-assist.md)\n- [Settings Reference - remoteAssist](references\u002Fsettings-reference.md#remoteassist)\n\n**Use custom PIN codes:**\n- [BYOP Custom PIN Example](examples\u002Fbyop-custom-pin.md)\n- [JWT Authentication - enable_byop](concepts\u002Fjwt-authentication.md#enable-byop)\n\n**Handle page refreshes:**\n- [Auto-Reconnection Example](examples\u002Fauto-reconnection.md)\n- [Session Lifecycle - Recovery](concepts\u002Fsession-lifecycle.md#session-recovery)\n\n**Integrate with npm (not CDN):**\n- [BYOP Custom PIN Example](examples\u002Fbyop-custom-pin.md)\n- [Distribution Methods](concepts\u002Fdistribution-methods.md#npm-integration)\n\n**Debug session connection issues:**\n- [Common Issues](troubleshooting\u002Fcommon-issues.md)\n- [Error Codes](troubleshooting\u002Ferror-codes.md)\n- [Session Events - session_error](examples\u002Fsession-events.md#session-error)\n\n**Configure CORS and CSP headers:**\n- [CORS and CSP Guide](troubleshooting\u002Fcors-csp.md)\n- [Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)\n\n## By Error Code\n\nQuick lookup for error code solutions:\n\n### Session Errors\n- **1001** (SESSION_START_FAILED) → [Error Codes](troubleshooting\u002Ferror-codes.md#1001-session-start-failed)\n- **1002** (SESSION_CONNECTING_IN_PROGRESS) → [Error Codes](troubleshooting\u002Ferror-codes.md#1002-session-connecting-in-progress)\n- **1004** (SESSION_COUNT_LIMIT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1004-session-count-limit)\n- **1011** (SESSION_JOIN_FAILED) → [Error Codes](troubleshooting\u002Ferror-codes.md#1011-session-join-failed)\n- **1012** (SESSION_CUSTOMER_COUNT_LIMIT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1012-session-customer-count-limit)\n- **1013** (SESSION_AGENT_COUNT_LIMIT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1013-session-agent-count-limit)\n- **1015** (SESSION_DUPLICATE_USER) → [Error Codes](troubleshooting\u002Ferror-codes.md#1015-session-duplicate-user)\n- **1016** (NETWORK_ERROR) → [Error Codes](troubleshooting\u002Ferror-codes.md#1016-network-error)\n- **1017** (SESSION_CANCELING_IN_PROGRESS) → [Error Codes](troubleshooting\u002Ferror-codes.md#1017-session-canceling-in-progress)\n\n### PIN Errors\n- **1006** (SESSION_JOIN_PIN_NOT_FOUND) → [Error Codes](troubleshooting\u002Ferror-codes.md#1006-session-join-pin-not-found)\n- **1008** (SESSION_PIN_INVALID_FORMAT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1008-session-pin-invalid-format)\n- **1009** (SESSION_START_PIN_REQUIRED) → [Error Codes](troubleshooting\u002Ferror-codes.md#1009-session-start-pin-required)\n- **1010** (SESSION_START_PIN_CONFLICT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1010-session-start-pin-conflict)\n\n### Auth Errors\n- **2001** (TOKEN_INVALID) → [Error Codes](troubleshooting\u002Ferror-codes.md#2001-token-invalid)\n\n### Service Errors\n- **9999** (UNDEFINED) → [Error Codes](troubleshooting\u002Ferror-codes.md#9999-undefined)\n\n## Official Resources\n\nExternal documentation and samples:\n\n- **Official Docs**: https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F\n- **API Reference**: https:\u002F\u002Fmarketplacefront.zoom.us\u002Fsdk\u002Fcobrowse\u002F\n- **Quickstart Repo**: https:\u002F\u002Fgithub.com\u002Fzoom\u002FCobrowseSDK-Quickstart\n- **Auth Endpoint Sample**: https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample\n- **Dev Forum**: https:\u002F\u002Fdevforum.zoom.us\u002F\n- **Developer Blog**: https:\u002F\u002Fdevelopers.zoom.us\u002Fblog\u002F?category=zoom-cobrowse-sdk\n\n## Documentation Structure\n\n```\ncobrowse-sdk\u002F\n├── SKILL.md                    # Main skill entry point\n├── SKILL.md                    # This file - complete navigation\n├── get-started.md              # Step-by-step setup guide\n│\n├── concepts\u002F                   # Core concepts\n│   ├── two-roles-pattern.md\n│   ├── session-lifecycle.md\n│   ├── jwt-authentication.md\n│   └── distribution-methods.md\n│\n├── examples\u002F                   # Working examples\n│   ├── customer-integration.md\n│   ├── agent-integration.md\n│   ├── annotations.md\n│   ├── privacy-masking.md\n│   ├── remote-assist.md\n│   ├── multi-tab-persistence.md\n│   ├── byop-custom-pin.md\n│   ├── session-events.md\n│   └── auto-reconnection.md\n│\n├── references\u002F                 # API and config references\n│   ├── api-reference.md        # SDK methods\n│   ├── settings-reference.md   # Init settings\n│   ├── session-events.md       # Event types\n│   ├── error-codes.md          # Error reference\n│   ├── get-started.md          # Official docs (crawled)\n│   ├── features.md             # Official docs (crawled)\n│   ├── authorization.md        # Official docs (crawled)\n│   └── api.md                  # API docs (crawled)\n│\n└── troubleshooting\u002F            # Problem resolution\n    ├── common-issues.md\n    ├── error-codes.md\n    ├── cors-csp.md\n    └── browser-compatibility.md\n```\n\n## Search Tips\n\n**Find by keyword:**\n- \"annotation\" → [Annotation Tools](examples\u002Fannotations.md)\n- \"mask\" or \"privacy\" → [Privacy Masking](examples\u002Fprivacy-masking.md)\n- \"PIN\" or \"custom PIN\" → [BYOP Custom PIN](examples\u002Fbyop-custom-pin.md)\n- \"JWT\" or \"token\" → [JWT Authentication](concepts\u002Fjwt-authentication.md)\n- \"error\" → [Error Codes](troubleshooting\u002Ferror-codes.md)\n- \"CORS\" or \"CSP\" → [CORS and CSP](troubleshooting\u002Fcors-csp.md)\n- \"iframe\" → [Agent Integration](examples\u002Fagent-integration.md)\n- \"npm\" → [Distribution Methods](concepts\u002Fdistribution-methods.md), [BYOP](examples\u002Fbyop-custom-pin.md)\n- \"refresh\" or \"reconnect\" → [Auto-Reconnection](examples\u002Fauto-reconnection.md)\n- \"agent\" → [Agent Integration](examples\u002Fagent-integration.md), [Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)\n- \"customer\" → [Customer Integration](examples\u002Fcustomer-integration.md), [Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)\n\n---\n\n**Not finding what you need?** Check the [Official Documentation](https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F) or ask on the [Dev Forum](https:\u002F\u002Fdevforum.zoom.us\u002F).\n\n## Environment Variables\n\n- See [references\u002Fenvironment-variables.md](references\u002Fenvironment-variables.md) for standardized `.env` keys and where to find each value.\n","# Zoom Cobrowse SDK - Web Development\n\nBackground reference for collaborative browsing on the web with Zoom Cobrowse SDK. Use this after the support workflow is clear and you need implementation detail.\n\n**Official Documentation**: https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F  \n**API Reference**: https:\u002F\u002Fmarketplacefront.zoom.us\u002Fsdk\u002Fcobrowse\u002F  \n**Quickstart Repository**: https:\u002F\u002Fgithub.com\u002Fzoom\u002FCobrowseSDK-Quickstart  \n**Auth Endpoint Sample**: https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample\n\n## Quick Links\n\n**New to Cobrowse SDK? Follow this path:**\n\n1. **[Get Started Guide](get-started.md)** - Complete setup from credentials to first session\n2. **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Understanding customer and agent flows\n3. **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - Token generation and security\n4. **[Customer Integration](examples\u002Fcustomer-integration.md)** - Integrate SDK into your website\n5. **[Agent Integration](examples\u002Fagent-integration.md)** - Set up agent portal (iframe or npm)\n\n**Core Concepts:**\n- **[Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)** - Customer vs Agent architecture\n- **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - PIN generation, connection, reconnection\n- **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - SDK Key vs API Key, role_type, claims\n- **[Distribution Methods](concepts\u002Fdistribution-methods.md)** - CDN vs npm (BYOP)\n\n**Features:**\n- **[Annotation Tools](examples\u002Fannotations.md)** - Drawing, highlighting, pointer tools\n- **[Privacy Masking](examples\u002Fprivacy-masking.md)** - Hide sensitive fields from agents\n- **[Remote Assist](examples\u002Fremote-assist.md)** - Agent can scroll customer's page\n- **[Multi-Tab Persistence](examples\u002Fmulti-tab-persistence.md)** - Session continues across tabs\n- **[BYOP Mode](examples\u002Fbyop-custom-pin.md)** - Bring Your Own PIN with npm integration\n\n**Troubleshooting:**\n- **[Common Issues](troubleshooting\u002Fcommon-issues.md)** - Quick diagnostics and solutions\n- **[Error Codes](troubleshooting\u002Ferror-codes.md)** - Complete error reference\n- **[CORS and CSP](troubleshooting\u002Fcors-csp.md)** - Cross-origin and security policy configuration\n- **[Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)** - Supported browsers and limitations\n- **[5-Minute Runbook](RUNBOOK.md)** - Fast preflight checks before deep debugging\n\n**Reference:**\n- **[API Reference](references\u002Fapi-reference.md)** - Complete SDK methods and events\n- **[Settings Reference](references\u002Fsettings-reference.md)** - All initialization settings\n- **Integrated Index** - see the section below in this file\n\n## SDK Overview\n\nThe Zoom Cobrowse SDK is a JavaScript library that provides:\n\n- **Real-Time Co-Browsing**: Agent sees customer's browser activity live\n- **PIN-Based Sessions**: Secure 6-digit PIN for customer-to-agent connection\n- **Annotation Tools**: Drawing, highlighting, vanishing pen, rectangle, color picker\n- **Privacy Masking**: CSS selector-based masking of sensitive form fields\n- **Remote Assist**: Agent can scroll customer's page (with consent)\n- **Multi-Tab Persistence**: Session continues when customer opens new tabs\n- **Auto-Reconnection**: Session recovers from page refresh (2-minute window)\n- **Session Events**: Real-time events for session state changes\n- **HTTPS Required**: Secure connections (HTTP only works on loopback\u002Flocal development hosts)\n- **No Plugins**: Pure JavaScript, no browser extensions needed\n\n## Two Roles Architecture\n\nCobrowse has **two distinct roles**, each with different integration patterns:\n\n| Role | role_type | Integration | JWT Required | Purpose |\n|------|-----------|-------------|--------------|---------|\n| **Customer** | 1 | Website integration (CDN or npm) | Yes | User who shares their browser session |\n| **Agent** | 2 | Iframe (CDN) or npm (BYOP only) | Yes | Support staff who views\u002Fassists customer |\n\n**Key Insight**: Customer and agent use **different integration methods** but the same JWT authentication pattern.\n\n## Read This First (Critical)\n\nFor customer\u002Fagent demos, treat the PIN from customer SDK event `pincode_updated` as the only user-facing PIN.\n\n- Show one clearly labeled value in UI (for example, **Support PIN**).\n- Use that same PIN for agent join.\n- Do not expose provisional\u002Fdebug PINs from backend pre-start records to users.\n\nIf these rules are ignored, agent desk often fails with `Pincode is not found` \u002F code `30308`.\n\n### Typical Production Flow (Most Common)\n\nThis is the flow most teams implement first, and what users usually expect in demos:\n\n1. **Customer starts session first** (`role_type=1`)\n   - Backend creates\u002Frecords session\n   - Backend returns customer JWT\n   - Customer SDK starts and receives a PIN\n2. **Agent joins second** (`role_type=2`)\n   - Agent enters customer PIN\n   - Backend validates PIN and session state\n   - Backend returns agent JWT\n   - Agent opens Zoom-hosted desk iframe (or custom npm agent UI in BYOP)\n\nIf a demo only has one generic \"session\" user, it is incomplete for real cobrowse operations.\n\n## Prerequisites\n\n### Platform Requirements\n\n- **Supported Browsers**:\n  - Chrome 80+ ✓\n  - Firefox 78+ ✓\n  - Safari 14+ ✓\n  - Edge 80+ ✓\n  - Internet Explorer ✗ (not supported)\n\n- **Network Requirements**:\n  - HTTPS required (HTTP works on loopback\u002Flocal development hosts only)\n  - Allow cross-origin requests to `*.zoom.us`\n  - CSP headers must allow Zoom domains (see [CORS and CSP guide](troubleshooting\u002Fcors-csp.md))\n\n- **Third-Party Cookies**:\n  - Must enable third-party cookies for refresh reconnection\n  - Privacy mode may limit certain features\n\n### Zoom Account Requirements\n\n1. **Zoom Workplace Account** with SDK Universal Credit\n2. **Video SDK App** created in Zoom Marketplace\n3. **Cobrowse SDK Credentials** from the app's Cobrowse tab\n\n**Note**: Cobrowse SDK is a **feature of Video SDK** (not a separate product).\n\n### Credentials Overview\n\nYou'll receive **4 credentials** from Zoom Marketplace → Video SDK App → Cobrowse tab:\n\n| Credential | Type | Used For | Exposure Safe? |\n|------------|------|----------|----------------|\n| **SDK Key** | Public | CDN URL, JWT `app_key` claim | ✓ Yes (client-side) |\n| **SDK Secret** | Private | Sign JWTs | ✗ No (server-side only) |\n| **API Key** | Private | REST API calls (optional) | ✗ No (server-side only) |\n| **API Secret** | Private | REST API calls (optional) | ✗ No (server-side only) |\n\n**Critical**: SDK Key is **public** (embedded in CDN URL), but SDK Secret must **never** be exposed client-side.\n\n## Quick Start\n\n### Step 1: Get SDK Credentials\n\n1. Go to [Zoom Marketplace](https:\u002F\u002Fmarketplace.zoom.us\u002F)\n2. Open your **Video SDK App** (or create one)\n3. Navigate to the **Cobrowse** tab\n4. Copy your credentials:\n   - SDK Key\n   - SDK Secret\n   - API Key (optional)\n   - API Secret (optional)\n\n### Step 2: Set Up Token Server\n\nDeploy a server-side endpoint to generate JWTs. Use the official sample:\n\n```bash\ngit clone https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample.git\ncd cobrowsesdk-auth-endpoint-sample\nnpm install\n\n# Create .env file\ncat > .env \u003C\u003C EOF\nZOOM_SDK_KEY=your_sdk_key_here\nZOOM_SDK_SECRET=your_sdk_secret_here\nPORT=4000\nEOF\n\nnpm start\n```\n\n**Token endpoint:**\n```javascript\n\u002F\u002F POST https:\u002F\u002FYOUR_TOKEN_SERVICE_BASE_URL\n{\n  \"role\": 1,           \u002F\u002F 1 = customer, 2 = agent\n  \"userId\": \"user123\",\n  \"userName\": \"John Doe\"\n}\n\n\u002F\u002F Response\n{\n  \"token\": \"eyJhbGciOiJIUzI1NiIs...\"\n}\n```\n\n### Step 3: Customer Side Integration (CDN)\n\n```html\n\u003C!DOCTYPE html>\n\u003Chtml>\n\u003Chead>\n  \u003Ctitle>Customer - Cobrowse Demo\u003C\u002Ftitle>\n  \u003Cscript type=\"module\">\n    const ZOOM_SDK_KEY = 'YOUR_SDK_KEY';\n    \n    \u002F\u002F Load SDK from CDN\n    (function(r, a, b, f, c, d) {\n      r[f] = r[f] || { init: function() { r.ZoomCobrowseSDKInitArgs = arguments }};\n      var fragment = a.createDocumentFragment();\n      function loadJs(url) {\n        c = a.createElement(b);\n        d = a.getElementsByTagName(b)[0];\n        c[\"async\"] = false;\n        c.src = url;\n        fragment.appendChild(c);\n      }\n      loadJs(`https:\u002F\u002Fus01-zcb.zoom.us\u002Fstatic\u002Fresource\u002Fsdk\u002F${ZOOM_SDK_KEY}\u002Fjs\u002F2.13.2`);\n      d.parentNode.insertBefore(fragment, d);\n    })(window, document, \"script\", \"ZoomCobrowseSDK\");\n  \u003C\u002Fscript>\n\u003C\u002Fhead>\n\u003Cbody>\n  \u003Ch1>Customer Support\u003C\u002Fh1>\n  \u003Cbutton id=\"cobrowse-btn\" disabled>Loading...\u003C\u002Fbutton>\n  \n  \u003C!-- Sensitive fields - will be masked from agent -->\n  \u003Clabel>SSN: \u003Cinput type=\"text\" class=\"pii-mask\" placeholder=\"XXX-XX-XXXX\">\u003C\u002Flabel>\n  \u003Clabel>Credit Card: \u003Cinput type=\"text\" class=\"pii-mask\" placeholder=\"XXXX-XXXX-XXXX-XXXX\">\u003C\u002Flabel>\n  \n  \u003Cscript type=\"module\">\n    let sessionRef = null;\n    \n    const settings = {\n      allowAgentAnnotation: true,\n      allowCustomerAnnotation: true,\n      piiMask: {\n        maskCssSelectors: \".pii-mask\",\n        maskType: \"custom_input\"\n      }\n    };\n    \n    ZoomCobrowseSDK.init(settings, function({ success, session, error }) {\n      if (success) {\n        sessionRef = session;\n        \n        \u002F\u002F Listen for PIN code\n        session.on(\"pincode_updated\", (payload) => {\n          console.log(\"PIN Code:\", payload.pincode);\n          \u002F\u002F IMPORTANT: this is the PIN agent should use\n          alert(`Share this PIN with agent: ${payload.pincode}`);\n        });\n        \n        \u002F\u002F Listen for session events\n        session.on(\"session_started\", () => console.log(\"Session started\"));\n        session.on(\"agent_joined\", () => console.log(\"Agent joined\"));\n        session.on(\"agent_left\", () => console.log(\"Agent left\"));\n        session.on(\"session_ended\", () => console.log(\"Session ended\"));\n        \n        document.getElementById(\"cobrowse-btn\").disabled = false;\n        document.getElementById(\"cobrowse-btn\").innerText = \"Start Cobrowse Session\";\n      } else {\n        console.error(\"SDK init failed:\", error);\n      }\n    });\n    \n    document.getElementById(\"cobrowse-btn\").addEventListener(\"click\", async () => {\n      \u002F\u002F Fetch JWT from your server\n      const response = await fetch(\"https:\u002F\u002FYOUR_TOKEN_SERVICE_BASE_URL\", {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application\u002Fjson\" },\n        body: JSON.stringify({\n          role: 1,\n          userId: \"customer_\" + Date.now(),\n          userName: \"Customer\"\n        })\n      });\n      const { token } = await response.json();\n      \n      \u002F\u002F Start cobrowse session\n      sessionRef.start({ sdkToken: token });\n    });\n  \u003C\u002Fscript>\n\u003C\u002Fbody>\n\u003C\u002Fhtml>\n```\n\n### Step 4: Agent Side Integration (Iframe)\n\n```html\n\u003C!DOCTYPE html>\n\u003Chtml>\n\u003Chead>\n  \u003Ctitle>Agent Portal\u003C\u002Ftitle>\n\u003C\u002Fhead>\n\u003Cbody>\n  \u003Ch1>Agent Portal\u003C\u002Fh1>\n  \u003Ciframe \n    id=\"agent-iframe\"\n    width=\"1024\" \n    height=\"768\"\n    allow=\"autoplay *; camera *; microphone *; display-capture *; geolocation *;\"\n  >\u003C\u002Fiframe>\n  \n  \u003Cscript>\n    async function connectAgent() {\n      \u002F\u002F Fetch JWT from your server\n      const response = await fetch(\"https:\u002F\u002FYOUR_TOKEN_SERVICE_BASE_URL\", {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application\u002Fjson\" },\n        body: JSON.stringify({\n          role: 2,\n          userId: \"agent_\" + Date.now(),\n          userName: \"Support Agent\"\n        })\n      });\n      const { token } = await response.json();\n      \n      \u002F\u002F Load Zoom agent portal\n      const iframe = document.getElementById(\"agent-iframe\");\n      iframe.src = `https:\u002F\u002Fus01-zcb.zoom.us\u002Fsdkapi\u002Fzcb\u002Fframe-templates\u002Fdesk?access_token=${token}`;\n    }\n    \n    connectAgent();\n  \u003C\u002Fscript>\n\u003C\u002Fbody>\n\u003C\u002Fhtml>\n```\n\n### Step 5: Test the Integration\n\n1. Open **two separate browsers** (or incognito + normal)\n2. **Customer browser**: Open customer page, click \"Start Cobrowse Session\"\n3. **Customer browser**: Note the 6-digit PIN displayed\n4. **Agent browser**: Open agent page, enter the PIN code\n5. **Both browsers**: Session connects, agent can see customer's page\n6. **Test features**: Annotations, data masking, remote assist\n\n## Key Features\n\n### 1. Annotation Tools\n\nBoth customer and agent can draw on the shared screen:\n\n```javascript\nconst settings = {\n  allowAgentAnnotation: true,      \u002F\u002F Agent can draw\n  allowCustomerAnnotation: true    \u002F\u002F Customer can draw\n};\n```\n\n**Available tools**:\n- Pen (persistent)\n- Vanishing pen (disappears after 4 seconds)\n- Rectangle\n- Color picker\n- Eraser\n- Undo\u002FRedo\n\n### 2. Privacy Masking\n\nHide sensitive fields from agents using CSS selectors:\n\n```javascript\nconst settings = {\n  piiMask: {\n    maskType: \"custom_input\",           \u002F\u002F Mask specific fields\n    maskCssSelectors: \".pii-mask, #ssn\", \u002F\u002F CSS selectors\n    maskHTMLAttributes: \"data-sensitive=true\" \u002F\u002F HTML attributes\n  }\n};\n```\n\n**Supported masking**:\n- Text nodes ✓\n- Form inputs ✓\n- Select elements ✓\n- Images ✗ (not supported)\n- Links ✗ (not supported)\n\n### 3. Remote Assist\n\nAgent can scroll the customer's page:\n\n```javascript\nconst settings = {\n  remoteAssist: {\n    enable: true,\n    enableCustomerConsent: true,        \u002F\u002F Customer must approve\n    remoteAssistTypes: ['scroll_page'], \u002F\u002F Only scroll supported\n    requireStopConfirmation: false      \u002F\u002F Confirmation when stopping\n  }\n};\n```\n\n### 4. Multi-Tab Session Persistence\n\nSession continues when customer opens new tabs:\n\n```javascript\nconst settings = {\n  multiTabSessionPersistence: {\n    enable: true,\n    stateCookieKey: '$$ZCB_SESSION$$'  \u002F\u002F Cookie key (base64 encoded)\n  }\n};\n```\n\n## Session Lifecycle\n\n### Customer Flow\n\n1. **Load SDK** → CDN script loads `ZoomCobrowseSDK`\n2. **Initialize** → `ZoomCobrowseSDK.init(settings, callback)`\n3. **Fetch JWT** → Request token from your server (role_type=1)\n4. **Start Session** → `session.start({ sdkToken })`\n5. **PIN Generated** → `pincode_updated` event fires\n6. **Share PIN** → Customer gives 6-digit PIN to agent\n7. **Agent Joins** → `agent_joined` event fires\n8. **Session Active** → Real-time synchronization begins\n9. **End Session** → `session.end()` or agent leaves\n\n### Agent Flow\n\n1. **Fetch JWT** → Request token from your server (role_type=2)\n2. **Load Iframe** → Point to Zoom agent portal with token\n3. **Enter PIN** → Agent inputs customer's 6-digit PIN\n4. **Connect** → `session_joined` event fires\n5. **View Session** → Agent sees customer's browser\n6. **Use Tools** → Annotations, remote assist, zoom\n7. **Leave Session** → Click \"Leave Cobrowse\" button\n\n### Session Recovery (Auto-Reconnect)\n\nWhen customer refreshes the page:\n\n```javascript\nZoomCobrowseSDK.init(settings, function({ success, session, error }) {\n  if (success) {\n    const sessionInfo = session.getSessionInfo();\n    \n    \u002F\u002F Check if session is recoverable\n    if (sessionInfo.sessionStatus === 'session_recoverable') {\n      session.join();  \u002F\u002F Auto-rejoin previous session\n    } else {\n      \u002F\u002F Start new session\n      session.start({ sdkToken });\n    }\n  }\n});\n```\n\n**Recovery window**: 2 minutes. After 2 minutes, session ends.\n\n## Critical Gotchas and Best Practices\n\n### ⚠️ CRITICAL: SDK Secret Must Stay Server-Side\n\n**Problem**: Developers often accidentally embed SDK Secret in frontend code.\n\n**Solution**:\n- ✓ **SDK Key** → Safe to expose (embedded in CDN URL)\n- ✗ **SDK Secret** → Never expose (use for JWT signing server-side)\n\n```javascript\n\u002F\u002F ❌ WRONG - Secret exposed in frontend\nconst jwt = signJWT(payload, 'YOUR_SDK_SECRET');  \u002F\u002F Security risk!\n\n\u002F\u002F ✅ CORRECT - Secret stays on server\nconst response = await fetch('\u002Fapi\u002Ftoken', {\n  method: 'POST',\n  body: JSON.stringify({ role: 1, userId, userName })\n});\nconst { token } = await response.json();\n```\n\n### SDK Key vs API Key (Different Purposes!)\n\n| Credential | Used For | JWT Claim |\n|------------|----------|-----------|\n| **SDK Key** | CDN URL, JWT `app_key` | `app_key: \"SDK_KEY\"` |\n| **API Key** | REST API calls (optional) | Not used in JWT |\n\n**Common mistake**: Using API Key instead of SDK Key in JWT `app_key` claim.\n\n### Session Limits\n\n| Limit | Value | What Happens |\n|-------|-------|--------------|\n| Customers per session | 1 | Error 1012: `SESSION_CUSTOMER_COUNT_LIMIT` |\n| Agents per session | 5 | Error 1013: `SESSION_AGENT_COUNT_LIMIT` |\n| Active sessions per browser | 1 | Error 1004: `SESSION_COUNT_LIMIT` |\n| PIN code length | 10 chars max | Error 1008: `SESSION_PIN_INVALID_FORMAT` |\n\n### Session Timeout Behavior\n\n| Event | Timeout | What Happens |\n|-------|---------|--------------|\n| Agent waiting for customer | 3 minutes | Session ends automatically |\n| Page refresh reconnection | 2 minutes | Session ends if not reconnected |\n| Reconnection attempts | 2 times max | Session ends after 2 failed attempts |\n\n### HTTPS Requirement\n\n**Problem**: SDK doesn't load on HTTP sites.\n\n**Solution**:\n- Production: Use HTTPS ✓\n- Development: Use a loopback host for local HTTP testing ✓\n- Development: Use a local HTTPS endpoint with a trusted\u002Fself-signed cert if required ✓\n\n### Third-Party Cookies Required\n\n**Problem**: Refresh reconnection doesn't work.\n\n**Solution**: Enable third-party cookies in browser settings.\n\n**Affected scenarios**:\n- Browser privacy mode\n- Safari with \"Prevent cross-site tracking\" enabled\n- Chrome with \"Block third-party cookies\" enabled\n\n### Distribution Method Confusion\n\n| Method | Use Case | Agent Integration | BYOP Required |\n|--------|----------|-------------------|---------------|\n| **CDN** | Most use cases | Zoom-hosted iframe | No (auto PIN) |\n| **npm** | Custom agent UI, full control | Custom npm integration | Yes (required) |\n\n**Key Insight**: If you want **npm** integration, you **must** use BYOP (Bring Your Own PIN) mode.\n\n### Cross-Origin Iframe Handling\n\n**Problem**: Cobrowse doesn't work in cross-origin iframes.\n\n**Solution**: Inject SDK snippet into cross-origin iframes:\n\n```html\n\u003Cscript>\nconst ZOOM_SDK_KEY = \"YOUR_SDK_KEY_HERE\";\n\n(function(r,a,b,f,c,d){r[f]=r[f]||{init:function(){r.ZoomCobrowseSDKInitArgs=arguments}};\nvar fragment=a.createDocumentFragment();function loadJs(url) {c=a.createElement(b);d=a.getElementsByTagName(b)[0];c.async=false;c.src=url;fragment.appendChild(c);};\nloadJs('https:\u002F\u002Fus01-zcb.zoom.us\u002Fstatic\u002Fresource\u002Fsdk\u002F${ZOOM_SDK_KEY}\u002Fjs');d.parentNode.insertBefore(fragment,d);})(window,document,'script','ZoomCobrowseSDK');\n\u003C\u002Fscript>\n```\n\n**Same-origin iframes**: No extra setup needed.\n\n## Known Limitations\n\n### Synchronization Limits\n\n**Not synchronized**:\n- HTML5 Canvas elements\n- WebGL content\n- Audio and Video elements\n- Shadow DOM\n- PDF rendered with Canvas\n- Web Components\n\n**Partially synchronized**:\n- Drop-down boxes (only selected result)\n- Date pickers (only selected result)\n- Color pickers (only selected result)\n\n### Rendering Limits\n\n- High-resolution images may be compressed\n- Different screen sizes may cause CSS media query differences\n- Cross-origin images may not render (CORS restrictions)\n- Cross-origin fonts may not render (CORS restrictions)\n\n### Masking Limits\n\n**Supported**:\n- Text nodes ✓\n- Form inputs ✓\n- Select elements ✓\n\n**Not supported**:\n- `\u003Cimg>` elements ✗\n- Links ✗\n\n## Complete Documentation Library\n\nThis skill includes comprehensive guides organized by category:\n\n### Core Concepts\n- **[Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)** - Customer vs Agent architecture\n- **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Complete flow from start to end\n- **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - Token structure and signing\n- **[Distribution Methods](concepts\u002Fdistribution-methods.md)** - CDN vs npm (BYOP)\n\n### Examples\n- **[Customer Integration](examples\u002Fcustomer-integration.md)** - Complete customer-side setup\n- **[Agent Integration](examples\u002Fagent-integration.md)** - Iframe and npm agent setups\n- **[Annotations](examples\u002Fannotations.md)** - Drawing tools configuration\n- **[Privacy Masking](examples\u002Fprivacy-masking.md)** - Field masking patterns\n- **[Remote Assist](examples\u002Fremote-assist.md)** - Agent page control\n- **[Multi-Tab Persistence](examples\u002Fmulti-tab-persistence.md)** - Cross-tab sessions\n- **[BYOP Custom PIN](examples\u002Fbyop-custom-pin.md)** - Custom PIN codes\n\n### References\n- **[API Reference](references\u002Fapi-reference.md)** - Complete SDK methods and events\n- **[Settings Reference](references\u002Fsettings-reference.md)** - All initialization settings\n- **[Error Codes](references\u002Ferror-codes.md)** - Complete error reference\n- **[Session Events](references\u002Fsession-events.md)** - All event types\n\n### Troubleshooting\n- **[Common Issues](troubleshooting\u002Fcommon-issues.md)** - Quick diagnostics\n- **[Error Codes](troubleshooting\u002Ferror-codes.md)** - Error code reference\n- **[CORS and CSP](troubleshooting\u002Fcors-csp.md)** - Cross-origin configuration\n- **[Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)** - Browser support\n\n## Resources\n\n- **Official Docs**: https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F\n- **API Reference**: https:\u002F\u002Fmarketplacefront.zoom.us\u002Fsdk\u002Fcobrowse\u002F\n- **Quickstart Repo**: https:\u002F\u002Fgithub.com\u002Fzoom\u002FCobrowseSDK-Quickstart\n- **Auth Endpoint Sample**: https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample\n- **Dev Forum**: https:\u002F\u002Fdevforum.zoom.us\u002F\n- **Developer Blog**: https:\u002F\u002Fdevelopers.zoom.us\u002Fblog\u002F?category=zoom-cobrowse-sdk\n\n---\n\n**Need help?** Start with Integrated Index section below for complete navigation.\n\n---\n\n## Integrated Index\n\n_This section was migrated from `SKILL.md`._\n\n**Complete navigation guide for all Cobrowse SDK documentation.**\n\n## Getting Started (Start Here!)\n\nIf you're new to Zoom Cobrowse SDK, follow this learning path:\n\n1. **[SKILL.md](SKILL.md)** - Main overview and quick start\n2. **[5-Minute Runbook](RUNBOOK.md)** - Preflight checks for common failures\n3. **[Get Started Guide](get-started.md)** - Step-by-step setup from credentials to first session\n4. **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Understand the complete customer and agent flow\n5. **[Customer Integration](examples\u002Fcustomer-integration.md)** - Integrate SDK into your website\n6. **[Agent Integration](examples\u002Fagent-integration.md)** - Set up agent portal\n\n## Core Concepts\n\nFoundational concepts you need to understand:\n\n- **[Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)** - Customer (role_type=1) vs Agent (role_type=2) architecture\n- **[Session Lifecycle](concepts\u002Fsession-lifecycle.md)** - Complete flow: init → start → PIN → connect → end\n- **[JWT Authentication](concepts\u002Fjwt-authentication.md)** - Token structure, signing, SDK Key vs API Key\n- **[Distribution Methods](concepts\u002Fdistribution-methods.md)** - CDN vs npm (BYOP mode)\n\n## Examples and Patterns\n\nComplete working examples for common scenarios:\n\n### Session Management\n- **[Customer Integration](examples\u002Fcustomer-integration.md)** - Complete customer-side implementation (CDN and npm)\n- **[Agent Integration](examples\u002Fagent-integration.md)** - Iframe and npm agent setup patterns\n- **[Session Events](examples\u002Fsession-events.md)** - Handle all session lifecycle events\n- **[Auto-Reconnection](examples\u002Fauto-reconnection.md)** - Page refresh and session recovery\n\n### Features\n- **[Annotation Tools](examples\u002Fannotations.md)** - Enable drawing, highlighting, vanishing pen\n- **[Privacy Masking](examples\u002Fprivacy-masking.md)** - Mask sensitive fields with CSS selectors\n- **[Remote Assist](examples\u002Fremote-assist.md)** - Agent can scroll customer's page\n- **[Multi-Tab Persistence](examples\u002Fmulti-tab-persistence.md)** - Session continues across browser tabs\n- **[BYOP Custom PIN](examples\u002Fbyop-custom-pin.md)** - Bring Your Own PIN with npm integration\n\n## References\n\nComplete API and configuration references:\n\n### SDK Reference\n- **[API Reference](references\u002Fapi-reference.md)** - All SDK methods and interfaces\n  - ZoomCobrowseSDK.init()\n  - session.start()\n  - session.join()\n  - session.end()\n  - session.on()\n  - session.getSessionInfo()\n  \n- **[Settings Reference](references\u002Fsettings-reference.md)** - All initialization settings\n  - allowAgentAnnotation\n  - allowCustomerAnnotation\n  - piiMask\n  - remoteAssist\n  - multiTabSessionPersistence\n\n- **[Session Events Reference](references\u002Fsession-events.md)** - All event types\n  - pincode_updated\n  - session_started\n  - session_ended\n  - agent_joined\n  - agent_left\n  - session_error\n  - session_reconnecting\n  - remote_assist_started\n  - remote_assist_stopped\n\n### Error Reference\n- **[Error Codes](references\u002Ferror-codes.md)** - Complete error code reference\n  - 1001-1017: Session errors\n  - 2001: Token errors\n  - 9999: Service errors\n\n### Official Documentation\n- **[Get Started](references\u002Fget-started.md)** - Official get started documentation (crawled)\n- **[Features](references\u002Ffeatures.md)** - Official features documentation (crawled)\n- **[Authorization](references\u002Fauthorization.md)** - Official JWT authorization docs (crawled)\n- **[API Documentation](references\u002Fapi.md)** - Crawled API reference docs\n\n## Troubleshooting\n\nQuick diagnostics and common issue resolution:\n\n- **[Common Issues](troubleshooting\u002Fcommon-issues.md)** - Quick fixes for frequent problems\n  - SDK not loading\n  - Token generation fails\n  - Agent can't connect\n  - Fields not masked\n  - Session doesn't reconnect after refresh\n\n- **[Error Codes](troubleshooting\u002Ferror-codes.md)** - Error code lookup and solutions\n  - Session start\u002Fjoin failures (1001, 1011, 1016)\n  - Session limit errors (1002, 1004, 1012, 1013, 1015)\n  - PIN code errors (1006, 1008, 1009, 1010)\n  - Token errors (2001)\n\n- **[CORS and CSP](troubleshooting\u002Fcors-csp.md)** - Cross-origin and Content Security Policy setup\n  - Access-Control-Allow-Origin headers\n  - Content-Security-Policy headers\n  - Cross-origin iframe handling\n  - Same-origin iframe handling\n\n- **[Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)** - Browser requirements and limitations\n  - Supported browsers (Chrome 80+, Firefox 78+, Safari 14+, Edge 80+)\n  - Internet Explorer not supported\n  - Privacy mode limitations\n  - Third-party cookie requirements\n\n## By Use Case\n\nFind documentation by what you're trying to do:\n\n### I want to...\n\n**Set up cobrowse for the first time:**\n- [Get Started Guide](get-started.md)\n- [JWT Authentication](concepts\u002Fjwt-authentication.md)\n- [Customer Integration](examples\u002Fcustomer-integration.md)\n- [Agent Integration](examples\u002Fagent-integration.md)\n\n**Add annotation tools:**\n- [Annotation Tools Example](examples\u002Fannotations.md)\n- [Settings Reference - allowAgentAnnotation](references\u002Fsettings-reference.md#allowa gentannotation)\n- [Settings Reference - allowCustomerAnnotation](references\u002Fsettings-reference.md#allowcustomerannotation)\n\n**Hide sensitive data from agents:**\n- [Privacy Masking Example](examples\u002Fprivacy-masking.md)\n- [Settings Reference - piiMask](references\u002Fsettings-reference.md#piimask)\n\n**Let agents control customer's page:**\n- [Remote Assist Example](examples\u002Fremote-assist.md)\n- [Settings Reference - remoteAssist](references\u002Fsettings-reference.md#remoteassist)\n\n**Use custom PIN codes:**\n- [BYOP Custom PIN Example](examples\u002Fbyop-custom-pin.md)\n- [JWT Authentication - enable_byop](concepts\u002Fjwt-authentication.md#enable-byop)\n\n**Handle page refreshes:**\n- [Auto-Reconnection Example](examples\u002Fauto-reconnection.md)\n- [Session Lifecycle - Recovery](concepts\u002Fsession-lifecycle.md#session-recovery)\n\n**Integrate with npm (not CDN):**\n- [BYOP Custom PIN Example](examples\u002Fbyop-custom-pin.md)\n- [Distribution Methods](concepts\u002Fdistribution-methods.md#npm-integration)\n\n**Debug session connection issues:**\n- [Common Issues](troubleshooting\u002Fcommon-issues.md)\n- [Error Codes](troubleshooting\u002Ferror-codes.md)\n- [Session Events - session_error](examples\u002Fsession-events.md#session-error)\n\n**Configure CORS and CSP headers:**\n- [CORS and CSP Guide](troubleshooting\u002Fcors-csp.md)\n- [Browser Compatibility](troubleshooting\u002Fbrowser-compatibility.md)\n\n## By Error Code\n\nQuick lookup for error code solutions:\n\n### Session Errors\n- **1001** (SESSION_START_FAILED) → [Error Codes](troubleshooting\u002Ferror-codes.md#1001-session-start-failed)\n- **1002** (SESSION_CONNECTING_IN_PROGRESS) → [Error Codes](troubleshooting\u002Ferror-codes.md#1002-session-connecting-in-progress)\n- **1004** (SESSION_COUNT_LIMIT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1004-session-count-limit)\n- **1011** (SESSION_JOIN_FAILED) → [Error Codes](troubleshooting\u002Ferror-codes.md#1011-session-join-failed)\n- **1012** (SESSION_CUSTOMER_COUNT_LIMIT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1012-session-customer-count-limit)\n- **1013** (SESSION_AGENT_COUNT_LIMIT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1013-session-agent-count-limit)\n- **1015** (SESSION_DUPLICATE_USER) → [Error Codes](troubleshooting\u002Ferror-codes.md#1015-session-duplicate-user)\n- **1016** (NETWORK_ERROR) → [Error Codes](troubleshooting\u002Ferror-codes.md#1016-network-error)\n- **1017** (SESSION_CANCELING_IN_PROGRESS) → [Error Codes](troubleshooting\u002Ferror-codes.md#1017-session-canceling-in-progress)\n\n### PIN Errors\n- **1006** (SESSION_JOIN_PIN_NOT_FOUND) → [Error Codes](troubleshooting\u002Ferror-codes.md#1006-session-join-pin-not-found)\n- **1008** (SESSION_PIN_INVALID_FORMAT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1008-session-pin-invalid-format)\n- **1009** (SESSION_START_PIN_REQUIRED) → [Error Codes](troubleshooting\u002Ferror-codes.md#1009-session-start-pin-required)\n- **1010** (SESSION_START_PIN_CONFLICT) → [Error Codes](troubleshooting\u002Ferror-codes.md#1010-session-start-pin-conflict)\n\n### Auth Errors\n- **2001** (TOKEN_INVALID) → [Error Codes](troubleshooting\u002Ferror-codes.md#2001-token-invalid)\n\n### Service Errors\n- **9999** (UNDEFINED) → [Error Codes](troubleshooting\u002Ferror-codes.md#9999-undefined)\n\n## Official Resources\n\nExternal documentation and samples:\n\n- **Official Docs**: https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F\n- **API Reference**: https:\u002F\u002Fmarketplacefront.zoom.us\u002Fsdk\u002Fcobrowse\u002F\n- **Quickstart Repo**: https:\u002F\u002Fgithub.com\u002Fzoom\u002FCobrowseSDK-Quickstart\n- **Auth Endpoint Sample**: https:\u002F\u002Fgithub.com\u002Fzoom\u002Fcobrowsesdk-auth-endpoint-sample\n- **Dev Forum**: https:\u002F\u002Fdevforum.zoom.us\u002F\n- **Developer Blog**: https:\u002F\u002Fdevelopers.zoom.us\u002Fblog\u002F?category=zoom-cobrowse-sdk\n\n## Documentation Structure\n\n```\ncobrowse-sdk\u002F\n├── SKILL.md                    # Main skill entry point\n├── SKILL.md                    # This file - complete navigation\n├── get-started.md              # Step-by-step setup guide\n│\n├── concepts\u002F                   # Core concepts\n│   ├── two-roles-pattern.md\n│   ├── session-lifecycle.md\n│   ├── jwt-authentication.md\n│   └── distribution-methods.md\n│\n├── examples\u002F                   # Working examples\n│   ├── customer-integration.md\n│   ├── agent-integration.md\n│   ├── annotations.md\n│   ├── privacy-masking.md\n│   ├── remote-assist.md\n│   ├── multi-tab-persistence.md\n│   ├── byop-custom-pin.md\n│   ├── session-events.md\n│   └── auto-reconnection.md\n│\n├── references\u002F                 # API and config references\n│   ├── api-reference.md        # SDK methods\n│   ├── settings-reference.md   # Init settings\n│   ├── session-events.md       # Event types\n│   ├── error-codes.md          # Error reference\n│   ├── get-started.md          # Official docs (crawled)\n│   ├── features.md             # Official docs (crawled)\n│   ├── authorization.md        # Official docs (crawled)\n│   └── api.md                  # API docs (crawled)\n│\n└── troubleshooting\u002F            # Problem resolution\n    ├── common-issues.md\n    ├── error-codes.md\n    ├── cors-csp.md\n    └── browser-compatibility.md\n```\n\n## Search Tips\n\n**Find by keyword:**\n- \"annotation\" → [Annotation Tools](examples\u002Fannotations.md)\n- \"mask\" or \"privacy\" → [Privacy Masking](examples\u002Fprivacy-masking.md)\n- \"PIN\" or \"custom PIN\" → [BYOP Custom PIN](examples\u002Fbyop-custom-pin.md)\n- \"JWT\" or \"token\" → [JWT Authentication](concepts\u002Fjwt-authentication.md)\n- \"error\" → [Error Codes](troubleshooting\u002Ferror-codes.md)\n- \"CORS\" or \"CSP\" → [CORS and CSP](troubleshooting\u002Fcors-csp.md)\n- \"iframe\" → [Agent Integration](examples\u002Fagent-integration.md)\n- \"npm\" → [Distribution Methods](concepts\u002Fdistribution-methods.md), [BYOP](examples\u002Fbyop-custom-pin.md)\n- \"refresh\" or \"reconnect\" → [Auto-Reconnection](examples\u002Fauto-reconnection.md)\n- \"agent\" → [Agent Integration](examples\u002Fagent-integration.md), [Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)\n- \"customer\" → [Customer Integration](examples\u002Fcustomer-integration.md), [Two Roles Pattern](concepts\u002Ftwo-roles-pattern.md)\n\n---\n\n**Not finding what you need?** Check the [Official Documentation](https:\u002F\u002Fdevelopers.zoom.us\u002Fdocs\u002Fcobrowse-sdk\u002F) or ask on the [Dev Forum](https:\u002F\u002Fdevforum.zoom.us\u002F).\n\n## Environment Variables\n\n- See [references\u002Fenvironment-variables.md](references\u002Fenvironment-variables.md) for standardized `.env` keys and where to find each value.\n",{"name":5,"triggers":49,"description":7,"user-invocable":45},[50,51,52,53,54,55],"cobrowse","co-browse","collaborative browsing","agent assist","customer support screen share","zoom cobrowse","main","e605d8ddbfb688da57dfaaceebd93f12a64ef1d3","partner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk",3935,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins","https:\u002F\u002Fgithub.com\u002Fanthropics","https:\u002F\u002Fanthropic.com","2026-11-13 04:18:26",{"source":8,"skillName":5,"commands":65,"prompt":75,"zipAvailable":76},[66,69,72],{"tool":67,"command":68},"npx","npx skills add anthropics\u002Fknowledge-work-plugins --skill zoom-cobrowse-sdk",{"tool":70,"command":71},"bunx","bunx skills add anthropics\u002Fknowledge-work-plugins --skill zoom-cobrowse-sdk",{"tool":73,"command":74},"pnpm","pnpm dlx skills add anthropics\u002Fknowledge-work-plugins --skill zoom-cobrowse-sdk","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002FSKILL.md",true,[78,84,88,92,96,100,104,108,112,116,120,124,128,132,136,140,144,148,152,156,160,164,168,172,176,180,184,188,192,196,200,204],{"path":79,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":82,"sourceHtmlUrl":83},"concepts\u002Fdistribution-methods.md","REFERENCE","参考文档",348,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fconcepts\u002Fdistribution-methods.md",{"path":85,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":86,"sourceHtmlUrl":87},"concepts\u002Fjwt-authentication.md",362,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fconcepts\u002Fjwt-authentication.md",{"path":89,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":90,"sourceHtmlUrl":91},"concepts\u002Fsession-lifecycle.md",360,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fconcepts\u002Fsession-lifecycle.md",{"path":93,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":94,"sourceHtmlUrl":95},"concepts\u002Ftwo-roles-pattern.md",1389,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fconcepts\u002Ftwo-roles-pattern.md",{"path":97,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":98,"sourceHtmlUrl":99},"examples\u002Fagent-integration.md",217,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fagent-integration.md",{"path":101,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":102,"sourceHtmlUrl":103},"examples\u002Fannotations.md",224,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fannotations.md",{"path":105,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":106,"sourceHtmlUrl":107},"examples\u002Fauto-reconnection.md",213,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fauto-reconnection.md",{"path":109,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":110,"sourceHtmlUrl":111},"examples\u002Fbyop-custom-pin.md",223,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fbyop-custom-pin.md",{"path":113,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":114,"sourceHtmlUrl":115},"examples\u002Fcustomer-integration.md",222,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fcustomer-integration.md",{"path":117,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":118,"sourceHtmlUrl":119},"examples\u002Fmulti-tab-persistence.md",228,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fmulti-tab-persistence.md",{"path":121,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":122,"sourceHtmlUrl":123},"examples\u002Fprivacy-masking.md",218,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fprivacy-masking.md",{"path":125,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":126,"sourceHtmlUrl":127},"examples\u002Fremote-assist.md",231,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fremote-assist.md",{"path":129,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":130,"sourceHtmlUrl":131},"examples\u002Fsession-events.md",220,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fexamples\u002Fsession-events.md",{"path":133,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":134,"sourceHtmlUrl":135},"get-started.md",14944,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Fget-started.md",{"path":137,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":138,"sourceHtmlUrl":139},"references\u002Fapi-official.md",1676,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fapi-official.md",{"path":141,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":142,"sourceHtmlUrl":143},"references\u002Fapi-reference.md",117,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fapi-reference.md",{"path":145,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":146,"sourceHtmlUrl":147},"references\u002Fapi.md",74,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fapi.md",{"path":149,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":150,"sourceHtmlUrl":151},"references\u002Fauthorization-official.md",2001,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fauthorization-official.md",{"path":153,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":154,"sourceHtmlUrl":155},"references\u002Fauthorization.md",104,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fauthorization.md",{"path":157,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":158,"sourceHtmlUrl":159},"references\u002Fenvironment-variables.md",778,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fenvironment-variables.md",{"path":161,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":162,"sourceHtmlUrl":163},"references\u002Ferror-codes.md",190,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Ferror-codes.md",{"path":165,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":166,"sourceHtmlUrl":167},"references\u002Ffeatures-official.md",1925,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Ffeatures-official.md",{"path":169,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":170,"sourceHtmlUrl":171},"references\u002Ffeatures.md",89,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Ffeatures.md",{"path":173,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":174,"sourceHtmlUrl":175},"references\u002Fget-started-official.md",2003,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fget-started-official.md",{"path":177,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":178,"sourceHtmlUrl":179},"references\u002Fget-started.md",98,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fget-started.md",{"path":181,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":182,"sourceHtmlUrl":183},"references\u002Fsession-events.md",150,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fsession-events.md",{"path":185,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":186,"sourceHtmlUrl":187},"references\u002Fsettings-reference.md",193,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Freferences\u002Fsettings-reference.md",{"path":189,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":190,"sourceHtmlUrl":191},"RUNBOOK.md",2769,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002FRUNBOOK.md",{"path":193,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":194,"sourceHtmlUrl":195},"troubleshooting\u002Fbrowser-compatibility.md",227,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Ftroubleshooting\u002Fbrowser-compatibility.md",{"path":197,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":198,"sourceHtmlUrl":199},"troubleshooting\u002Fcommon-issues.md",2538,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Ftroubleshooting\u002Fcommon-issues.md",{"path":201,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":202,"sourceHtmlUrl":203},"troubleshooting\u002Fcors-csp.md",283,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Ftroubleshooting\u002Fcors-csp.md",{"path":205,"resourceType":80,"resourceTypeDesc":81,"sizeBytes":206,"sourceHtmlUrl":207},"troubleshooting\u002Ferror-codes.md",216,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fpartner-built\u002Fzoom-plugin\u002Fskills\u002Fcobrowse-sdk\u002Ftroubleshooting\u002Ferror-codes.md",[209,232,257,279,308,334],{"skillNo":210,"name":211,"nameZh":6,"description":212,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":213,"categories":214,"keywords":215,"publishedAt":44},"01M718Y97HCGW12Q53PSJDY03W","ticket-deflector","Reads a forwarded customer email or ticket, pulls order and refund status from a payments connector (PayPal, Square, or Stripe) or Shopify, account history from the CRM, and open tickets from a support desk (Zoho Desk), drafts a tone-matched reply in the owner's writing voice, and can issue a refund through the payments connector with explicit owner approval. With Shopify connected it also runs a proactive order-triage mode that surfaces orders needing attention — unfulfilled past the promised window, payment problems, pending refunds, stuck shipments — and drafts the next action for each before the customer has to ask. Use when the user says \"draft a response,\" \"answer this customer,\" \"where's my order,\" \"I want a refund,\" \"check my orders,\" or \"anything about to blow up.\"","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fsmall-business\u002Fskills\u002Fticket-deflector\u002FSKILL.md",[],[216,217,218,219,220,221,222,40,39,223,224,225,226,227,228,36,35,229,230,231],"ticket","ticket deflector","mode","up","payments","open","writing","ask","Connector","text","mail","window","next","crm","past","read",{"skillNo":233,"name":234,"nameZh":6,"description":235,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":236,"categories":237,"keywords":238,"publishedAt":44},"01M718Y55HFAN5705ME5VEDZ9K","tax-season-organizer","Prepares tax-season materials for the owner's accountant, not tax advice. US federal tax; a non-US business gets its closed-books packet instead. Two modes: (1) quarterly estimated tax from YTD net income in the ledger (MYOB, NetSuite, QuickBooks, Xero, or Zoho Books); (2) year-end 1099 prep, scanning the ledger, PayPal, and Stripe for contractors paid over USD 600 into a 1099-NEC list with missing W-9 flags.\nAny tax request routes first to \u002Ftax-prep, which confirms the books are closed and reconciled before running this skill. Use this skill directly only when the owner says the period's books are already closed: \"books are closed, now do the 1099s,\" \"run the quarterly estimate off the closed numbers,\" or \"just the contractor W-9 list.\"","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fsmall-business\u002Fskills\u002Ftax-season-organizer\u002FSKILL.md",[],[239,240,241,242,243,244,245,246,247,248,40,249,250,251,252,253,231,254,255,256],"tax season organizer","tax","us federal","which","netsuite","paid","end","usd","only","now","books","xero","scanning","run","request","flags","list","stripe",{"skillNo":258,"name":259,"nameZh":6,"description":260,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":261,"categories":262,"keywords":263,"publishedAt":44},"01M718Y13VVPHDD9NTDBVFJ2AZ","tax-prep","Prepares tax materials as a two-link chain — month-end-prep confirms the books are closed and reconciled first, then tax-season-organizer calculates the quarterly estimated payment or builds the year-end 1099-NEC list and accountant packet from those closed numbers. Requires a ledger (MYOB, NetSuite, QuickBooks, Xero, or Zoho Books); uses Gusto, PayPal, and Stripe when connected, else CSV upload. US federal tax math; a non-US business gets the closed-books packet. Prep material for a CPA, never tax advice, nothing filed. Trigger on \"quarterly taxes,\" \"estimated tax payment,\" \"how much should I set aside,\" \"1099s,\" \"1099-NEC,\" \"W-9s,\" \"year-end tax prep,\" \"get my books ready for my accountant,\" any phrasing that suggests a tax deadline is coming, or a question about net profit or YTD income that sounds like worry about a tax bill. An owner who says the period's books are already closed routes to tax-season-organizer directly.","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fsmall-business\u002Fskills\u002Ftax-prep\u002FSKILL.md",[],[264,240,265,266,241,267,268,243,269,270,271,272,273,29,274,245,275,276,277,278],"tax prep","prep","SET","as","ready","never","zoho books","get","chain","profit","trigger","material","question","paypal","business",{"skillNo":280,"name":281,"nameZh":6,"description":282,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":283,"categories":284,"keywords":290,"publishedAt":44},"01M718XWTWQZ01GYSG9T8RW8TW","speed-to-lead","Makes sure no inbound lead goes unanswered. Watches web forms, the shared inbox, and the CRM for new inquiries, qualifies each one against the owner's criteria, drafts a reply in the owner's voice with real meeting times for the owner to approve and send, routes anything hot to a human right away, and logs the whole thing to the CRM. Never sends on its own. Built to run on a schedule so overnight inquiries are drafted and sorted by morning, and works from forwarded or pasted inquiries when no connector is available. Use this whenever the owner is worried about inbound leads or response time — including phrasings like \"leads are going cold,\" \"did anyone answer that inquiry,\" \"I keep missing form submissions,\" \"nothing falls through the cracks,\" \"handle my inbound,\" \"respond to this lead,\" or \"we lose people because nobody gets back fast enough.\" Reach for it for a single unanswered inquiry as readily as for a standing setup.","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fsmall-business\u002Fskills\u002Fspeed-to-lead\u002FSKILL.md",[285],{"categoryNo":286,"categoryName":287,"taxonomyType":288,"taxonomyTypeDesc":289},"01JBSEEDCAT000000000000034","行政与办公人员","PROFESSION","适用职业",[291,292,293,294,295,296,269,297,298,299,300,301,302,303,40,304,305,224,306,307],"speed to lead","lead","speed","shared","back","cold","time","inbox","send","respond","new","web forms","people","schedule","logs","sure","human",{"skillNo":309,"name":310,"nameZh":6,"description":311,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":312,"categories":313,"keywords":317,"publishedAt":44},"01M718XQYMN1KY3TPS33967FK0","social-content-engine","Runs the owner's content operation as a standing thing rather than a one-off: keeps a rolling posting calendar, learns the owner's voice, generates on-brand Canva graphics, writes captions that sound like them, repurposes one asset into every channel format, and stages posts for approval instead of publishing on its own. Pulls product photos and prices from Shopify when connected; with no connectors, drafts the calendar and asset briefs for manual posting. Use this whenever the owner talks about posting, content, or social — including \"I need to post more,\" \"we've gone quiet on Instagram,\" \"what should we post this month,\" \"make the content,\" \"give me a month of posts,\" \"write this in my voice,\" \"repurpose this,\" or \"set up our content calendar.\" Reach for it for a single post as readily as for a full quarter. One handoff: a finished, approved campaign brief goes to canva-creator; this skill owns the standing operation.","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fsmall-business\u002Fskills\u002Fsocial-content-engine\u002FSKILL.md",[314],{"categoryNo":315,"categoryName":316,"taxonomyType":288,"taxonomyTypeDesc":289},"01JBSEEDCAT000000000000036","内容创作者",[318,319,320,321,322,323,266,324,325,326,327,219,328,40,329,330,331,231,332,333],"social","social content engine","engine","content engine","social content","content","brief","posts","Captions","prices","campaign","me","product","calendar","write","drafts",{"skillNo":335,"name":336,"nameZh":6,"description":337,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":338,"categories":339,"keywords":340,"publishedAt":44},"01M718XMPJVH0EVRVP998BVZPC","smb-router","The front door to the Small Business plugin. Listens to what the owner needs right now — vague or specific — and routes them to the best skill or slash command for the moment. Also serves as a guide: explains what's available, suggests what to try next, and adapts recommendations based on stored business context. Trigger whenever the owner asks \"what can you do,\" \"help me with my business,\" \"what should I focus on,\" \"I don't know where to start,\" or any open-ended business request that doesn't clearly match a single skill.","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Fblob\u002Fmain\u002Fsmall-business\u002Fskills\u002Fsmb-router\u002FSKILL.md",[],[341,342,343,267,344,29,274,345,221,346,248,278,347,348,349,350,351,329,352,228],"router","smb","smb router","do","front","single","you","vague","can","with","plugin","focus"]