@lonk1989/webclaw
DeepSeek Harness community plugin for deterministic browser RPA driven by Chinese natural-language recipes (English vocabulary planned later).
Cordis plugin id: webclaw (fiber id in patch). npm package: @lonk1989/webclaw.
What this is
- Task tools:
webclaw_probe / webclaw_run / webclaw_inspect_params / webclaw_accounts_status / webclaw_freeze / webclaw_list_recipes / webclaw_import / webclaw_status / webclaw_human_reply / webclaw_cancel
- Bundled Skill: replay (default) → param form when
参数…= → freeze / author only for new sites
- Local library: workspace
recipes/*.webclaw (or WEBCLAW_HOME/recipes)
- Preview/edit: DSH Files + sidebar plain text + open-in-app (no custom viewer)
- Spawns local webclaw-lite (CDP; shared browser across probe/run)
What this is not
- Not Playwright / CSS-selector MCP
- Does not register
ctx.browserUse
- Not a cloud skill store
Install
cd /path/to/deepseek-harness
pnpm add @lonk1989/webclaw
# or: dsh plugin --profile web add @lonk1989/webclaw
- insert:
- id: webclaw
name: '@lonk1989/webclaw'
config:
# defaults: ensureOnBoot true → download lite (Windows / macOS arm64)
registerSkill: true
recipesRel: recipes
# Optional overrides:
# binaryPath: 'C:/path/to/webclaw-lite.exe' # or '/path/to/webclaw-lite'
# liteBaseUrl: 'https://cdn.example.com/webclaw/v0.1.8' # tried first
# systems: # private DSH fork only — real login URLs, no passwords
# - id: ehr
# name: EHR系统
# url: https://example.com/ehr-login
webclaw-lite binary (Windows / macOS)
You do not need to install lite by hand when using the defaults on Windows x64 or macOS Apple Silicon (arm64):
- Plugin boot (and first tool call) downloads the matching Release asset for this package version (
webclaw-lite-windows-x64.exe or webclaw-lite-macos-arm64)
- Sources (in order): non-GitHub
liteBaseUrl → WEBCLAW_LITE_MIRRORS → built-in mirrors (ghfast.top, then mirror.ghproxy.com) → official GitHub (last, so CN users are not stuck waiting on a dead GitHub)
- Verifies the companion
.sha256, then installs to %LOCALAPPDATA%\webclaw\bin\webclaw-lite.exe (Windows) or ~/.webclaw/bin/webclaw-lite (macOS)
- Runs
webclaw-lite install (Chrome probe + marker)
Each source times out after ~60s before the next. Set WEBCLAW_LITE_MIRRORS to comma-separated release dirs or proxy prefixes if you need extra fallbacks.
macOS Gatekeeper: unsigned downloads may be quarantined. Clear with:
xattr -d com.apple.quarantine ~/.webclaw/bin/webclaw-lite
macOS Intel (x64) / Linux: set binaryPath to a locally built binary, or build from runtime/ (x64 asset name is reserved; CI does not publish it yet).
Manual installers (optional):
# Windows
irm https://raw.githubusercontent.com/lonk1989/webclaw-oss/main/static/webclaw-lite/install.ps1 | iex
# macOS / Linux
curl -fsSL https://raw.githubusercontent.com/lonk1989/webclaw-oss/main/static/webclaw-lite/install.sh | bash
Model experience
- Default / replay: user pastes a full recipe or points at
.webclaw → webclaw_run — never probe step-by-step
- 参数 form: prefab
参数公司=…，参数月份=… are placeholders users usually must edit (see examples/整理6月考勤.webclaw) → first webclaw_run returns needParams → show one editable table (no verbal Q&A) → user edits → second webclaw_run with paramsConfirmed=true + params JSON.「用默认」only if the user explicitly asks. Config: requireParamConfirm (default true)
- New unknown site (no complete recipe):
webclaw_probe → short webclaw_run → webclaw_freeze
- User opens
recipes/*.webclaw in Files — Client tints the icon and shows a log-style preview
- Uploaded
.webclaw: recipePath once (with param confirm if needed), or webclaw_import into the library
Site accounts / passwords (local only)
DSH sends chat to the model over the network. Do not put site passwords in recipes or chat.
Deploy overlay: seed login URLs (no passwords)
Private DSH forks can prefill id / name / URL on boot (OSS catalog only has placeholder URLs):
config:
systems:
- id: ehr
name: EHR系统
# Prefer the real SSO entry (Feishu/Lark). Password not required.
url: https://your-corp/login?sso=lark&next=%2F%23%23%2Findex
- id: old-mes
name: 旧MES系统
url: https://your-corp-mes-login/
This runs webclaw-lite accounts ensure and never writes passwords. Keep real URLs in your private patch, not in public OSS. For Feishu SSO, URL alone is enough — do not ask users for passwords.
User credentials (once per machine) — settings form
Open Settings → 网站账号 in DSH (local Host must be on this machine). The form talks to a loopback-only service (127.0.0.1:19229 by default); passwords are written into the webclaw vault (DPAPI on Windows; obfuscated storage on macOS) and never enter chat or the model.
Fallback launchers (no PATH needed; created on plugin boot):
Windows: %LOCALAPPDATA%\webclaw\bin\webclaw-accounts.cmd
macOS: ~/.webclaw/bin/webclaw-accounts
Config knobs: accountsUi (default true), accountsUiPort (default 19229).
Recipes keep alias login only, e.g. 登录EHR系统. Use the SSO login URL in the vault when the corp site supports Feishu/Lark SSO. Missing password does not block opening the site; the login step opens the URL, handles authorize when needed, and only asks for vault passwords on a classic username/password form. The agent must never invent accounts set --password or ask you to paste a password into chat.
License
MIT
