@kasenri/dsh-browser

Browser

社区 DeepSeek Harness 插件：通过 agent-browser 进行受控浏览器自动化（BrowserAutomationService + agent_browser 工具）。

目标 Profile

插件会安装到这里；不确定时保持 web。

npx -y @deepseek-ai/dsh plugin --profile web add github:KasenRi/dsh-browser#b307cebc5fa686b62f3cdefdb589ab123dc1bffe

兼容性与来源证明

Browser 以 @kasenri/dsh-browser 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。

DSH 兼容范围: *
运行环境: any
发布来源: github
Registry 更新时间: 2026/9/13

版本

0.1.0stable

2026/9/13

README

@kasenri/dsh-browser

This repository is an installable release mirror for @kasenri/dsh-browser 0.1.0. Canonical source: https://github.com/KasenRi/dsh-orbit-browser-plugins/tree/main/packages/browser Do not develop features here; publish changes from the canonical source monorepo. Community plugin for DeepSeek Harness (DSH). Not affiliated with or endorsed by DeepSeek.

Exposes controlled browser automation to DSH as a Cordis plugin:

a BrowserAutomationService on ctx.browserAutomation
a model-facing agent_browser tool that drives the agent-browser CLI

Harness native infrastructure (agents, tools, sessions)
        │
        ▼
@kasenri/dsh-browser
        │  BrowserAutomationService + agent_browser tool
        ▼
agent-browser CLI  →  Chromium / Chrome  (or an explicit CDP endpoint)

Requirements

Component	Tested with
`@deepseek-ai/dsh`	`0.1.5-rc.2`
`@deepseek-ai/cordis`	`4.0.2`
`agent-browser`	`0.33.2` (must be on `PATH`)
Node.js	`>= 22.19.0`
Browser	Chromium / Google Chrome (or an Electron/CDP debug endpoint)

DSH is in developer preview and evolves quickly; this package is tested with the versions above, not with every future DSH release.

Install

The stable install source is the dedicated GitHub distribution repository. This project does not use the npm Registry as a publication source:

dsh plugin --profile web add github:KasenRi/dsh-browser

The package declares a dsh.bundle patch, so dsh plugin add registers it as a profile layer automatically. Restart the profile (or start a new session) after installing.

The canonical source is maintained in the source monorepo. The source monorepo's versioned Release tarballs remain available for manual or offline fallback, but the Market uses this dedicated Git repository so updates can compare the locked commit with HEAD.

If agent-browser is not on PATH, point the plugin at an executable with the command config key, the executablePath config key, or the DSH_BROWSER_EXECUTABLE_PATH environment variable.

Tool input modes

agent_browser accepts exactly one of:

Mode	Purpose
`args`	Raw `agent-browser` argv (e.g. `["open", "https://…"]`, `["snapshot", "-i"]`).
`semanticAction`	Stable target: `action` + `locator`/`role`/`name`/`selector`.
`job`	Short deterministic multi-step batch (`steps`, `failFast`).
`qa`	Page QA preset (`url` or `attached`, expected text/selector, diagnostics).
`electron`	Explicit CDP attach: `{ action: "connect", port
`sourceLookup`	Candidate source locations from DOM/React evidence + bounded workspace scan.
`networkSourceLookup`	Failed-request evidence + candidate source/workspace hints.

Standard workflow: open → snapshot -i → use the current @refs → click/fill/select → snapshot -i again after the page changes.

Other options: stdin (only for batch, eval --stdin, auth save --password-stdin), outputPath (atomic 0600 write of the structured result), timeoutMs, sessionMode (auto | fresh).

What it protects

Stale refs — refs are page-scoped; mutations against refs that are not in the latest snapshot of the same target are blocked before any browser call.
Tab drift — an unexpected active-target change (including about:blank) invalidates refs and triggers exactly one deterministic recovery via tab list + tab <id>; ambiguity fails as tab-drift instead of guessing.
Artifacts — screenshots, downloads, PDFs, HAR/trace/record files are verified on disk (existence, size, type) before success is reported.
Secrets and protected state — .agent-browser state, password stores and cookie databases are blocked; credential-shaped values are redacted from all tool output.
Domain containment — when allowedDomains is configured, known URLs are preflighted, the managed context launches with upstream --allowed-domains, and the final URL is verified. CDP attach (electron/connect) is refused while containment is enabled, because it cannot be enforced on an existing browser context.
Human verification — CAPTCHA, OTP, passkey, WebAuthn and 2FA are never bypassed; the tool reports what it saw and stops.

Large outputs are compacted into a bounded preview plus a spill file instead of being pushed into the model context.

Configuration

Key	Default	Meaning
`command`	`agent-browser`	Executable to invoke.
`namespace`	—	Optional agent-browser namespace.
`executablePath`	`DSH_BROWSER_EXECUTABLE_PATH`	Chromium/Chrome executable for the managed context.
`timeoutMs`	`35000`	Default per-call subprocess timeout.
`maxOutputChars`	`8000`	Inline output budget before spilling.
`maxOutputLines`	`120`	Inline line budget before spilling.
`spillDir`	`~/.dsh/browser-artifacts`	Where compacted outputs are written.
`allowedDomains`	`[]`	Domain allowlist for strict containment.
`registerTool`	`true`	Register the `agent_browser` tool.

License

MIT

README

@kasenri/dsh-browser

This repository is an installable release mirror for @kasenri/dsh-browser 0.1.0. Canonical source: https://github.com/KasenRi/dsh-orbit-browser-plugins/tree/main/packages/browser Do not develop features here; publish changes from the canonical source monorepo. Community plugin for DeepSeek Harness (DSH). Not affiliated with or endorsed by DeepSeek.

Exposes controlled browser automation to DSH as a Cordis plugin:

a BrowserAutomationService on ctx.browserAutomation
a model-facing agent_browser tool that drives the agent-browser CLI

Harness native infrastructure (agents, tools, sessions)
        │
        ▼
@kasenri/dsh-browser
        │  BrowserAutomationService + agent_browser tool
        ▼
agent-browser CLI  →  Chromium / Chrome  (or an explicit CDP endpoint)

Requirements

Component	Tested with
`@deepseek-ai/dsh`	`0.1.5-rc.2`
`@deepseek-ai/cordis`	`4.0.2`
`agent-browser`	`0.33.2` (must be on `PATH`)
Node.js	`>= 22.19.0`
Browser	Chromium / Google Chrome (or an Electron/CDP debug endpoint)

DSH is in developer preview and evolves quickly; this package is tested with the versions above, not with every future DSH release.

Install

The stable install source is the dedicated GitHub distribution repository. This project does not use the npm Registry as a publication source:

dsh plugin --profile web add github:KasenRi/dsh-browser

The package declares a dsh.bundle patch, so dsh plugin add registers it as a profile layer automatically. Restart the profile (or start a new session) after installing.

If agent-browser is not on PATH, point the plugin at an executable with the command config key, the executablePath config key, or the DSH_BROWSER_EXECUTABLE_PATH environment variable.

Tool input modes

agent_browser accepts exactly one of:

Mode	Purpose
`args`	Raw `agent-browser` argv (e.g. `["open", "https://…"]`, `["snapshot", "-i"]`).
`semanticAction`	Stable target: `action` + `locator`/`role`/`name`/`selector`.
`job`	Short deterministic multi-step batch (`steps`, `failFast`).
`qa`	Page QA preset (`url` or `attached`, expected text/selector, diagnostics).
`electron`	Explicit CDP attach: `{ action: "connect", port
`sourceLookup`	Candidate source locations from DOM/React evidence + bounded workspace scan.
`networkSourceLookup`	Failed-request evidence + candidate source/workspace hints.

Standard workflow: open → snapshot -i → use the current @refs → click/fill/select → snapshot -i again after the page changes.

Other options: stdin (only for batch, eval --stdin, auth save --password-stdin), outputPath (atomic 0600 write of the structured result), timeoutMs, sessionMode (auto | fresh).

What it protects

Stale refs — refs are page-scoped; mutations against refs that are not in the latest snapshot of the same target are blocked before any browser call.
Tab drift — an unexpected active-target change (including about:blank) invalidates refs and triggers exactly one deterministic recovery via tab list + tab <id>; ambiguity fails as tab-drift instead of guessing.
Artifacts — screenshots, downloads, PDFs, HAR/trace/record files are verified on disk (existence, size, type) before success is reported.
Secrets and protected state — .agent-browser state, password stores and cookie databases are blocked; credential-shaped values are redacted from all tool output.
Domain containment — when allowedDomains is configured, known URLs are preflighted, the managed context launches with upstream --allowed-domains, and the final URL is verified. CDP attach (electron/connect) is refused while containment is enabled, because it cannot be enforced on an existing browser context.
Human verification — CAPTCHA, OTP, passkey, WebAuthn and 2FA are never bypassed; the tool reports what it saw and stops.

Large outputs are compacted into a bounded preview plus a spill file instead of being pushed into the model context.

Configuration

Key	Default	Meaning
`command`	`agent-browser`	Executable to invoke.
`namespace`	—	Optional agent-browser namespace.
`executablePath`	`DSH_BROWSER_EXECUTABLE_PATH`	Chromium/Chrome executable for the managed context.
`timeoutMs`	`35000`	Default per-call subprocess timeout.
`maxOutputChars`	`8000`	Inline output budget before spilling.
`maxOutputLines`	`120`	Inline line budget before spilling.
`spillDir`	`~/.dsh/browser-artifacts`	Where compacted outputs are written.
`allowedDomains`	`[]`	Domain allowlist for strict containment.
`registerTool`	`true`	Register the `agent_browser` tool.

License

MIT

Browser

兼容性与来源证明

版本

相关插件

Browser

README

@kasenri/dsh-browser

Requirements

Install

Tool input modes

What it protects

Configuration

License

兼容性与来源证明

版本

相关插件

相关插件

相关插件

README

@kasenri/dsh-browser

Requirements

Install

Tool input modes

What it protects

Configuration

License