dsh-builtin-browser 0.4.7 → 0.4.8

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-builtin-browser",
-  "version": "0.4.7",
-  "description": "Shared real browser plugin for DeepSeek Harness: install-and-use — a visible native browser the human can take over, driven by the agent over CDP. DOM-level interaction (React/Vue safe), per-task session isolation, cookie persistence (browser_auth), CAPTCHA detection, batch form fill (browser_fill), authenticated download, history/replay, action restriction",
+  "version": "0.4.8",
+  "description": "Shared real browser plugin for DeepSeek Harness: install-and-use — a visible native browser the human can take over, driven by the agent over CDP. DOM-level interaction (React/Vue safe), per-task session isolation, cookie persistence (dsh_browser_auth), CAPTCHA detection, batch form fill (dsh_browser_fill), authenticated download, history/replay, action restriction",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",

package/scripts/verify-host-compat.mjs

@@ -169,20 +169,20 @@ try {
 
 const exec = { agent: { id: 'verify-host-compat' } }
 try {
-  const value = await registered.get('browser_session').execute({}, exec)
-  ok('browser_session ran', value !== undefined, JSON.stringify(value).slice(0, 100))
+  const value = await registered.get('dsh_browser_session').execute({}, exec)
+  ok('dsh_browser_session ran', value !== undefined, JSON.stringify(value).slice(0, 100))
 } catch (error) {
-  ok('browser_session ran', false, String(error && error.message))
+  ok('dsh_browser_session ran', false, String(error && error.message))
 }
 
 try {
-  const tool = registered.get('browser_a11y')
+  const tool = registered.get('dsh_browser_a11y')
   const value = await tool.execute({}, exec)
   const text = JSON.stringify(tool.output.render({}, value))
-  ok('browser_a11y ran and rendered', value?.nodes?.length === 1, '')
+  ok('dsh_browser_a11y ran and rendered', value?.nodes?.length === 1, '')
   ok('its renderer emits the element selector', text.includes('#probe'), text.slice(0, 120))
 } catch (error) {
-  ok('browser_a11y ran', false, String(error && error.message))
+  ok('dsh_browser_a11y ran', false, String(error && error.message))
 }
 
 console.log('')

package/src/browser/types.ts

@@ -65,7 +65,7 @@ export interface BrowserScrollRequest {
 
 /** Press one named key (Enter, Tab, arrows, …). */
 export interface BrowserKeyRequest {
-  /** Key name from the supported set (see the browser_key tool). */
+  /** Key name from the supported set (see the dsh_browser_key tool). */
   readonly key: string
 }
 
@@ -361,7 +361,7 @@ export interface BrowserSnapshotElement {
   /**
    * True when the element lives inside an (same-origin) iframe: coordinates
    * are still top-document, but DOM selectors are frame-scoped — reach the
-   * element via `iframe.contentDocument` in browser_execute.
+   * element via `iframe.contentDocument` in dsh_browser_execute.
    */
   readonly frame?: boolean
 }

package/src/browser-electron/entry.ts

@@ -5,7 +5,7 @@
  * `ctx.electronViewHost`, that host is used (embedded, human-machine shared
  * view). Otherwise the plugin self-hosts: it spawns its own Electron child
  * (`host-main.js`) and drives it over a local TCP JSON-RPC socket, so
- * installing the plugin is enough for `browser_*` tools to work on any
+ * installing the plugin is enough for `dsh_browser_*` tools to work on any
  * surface.
  * @module dsh-browser/browser-electron
  */
@@ -48,7 +48,7 @@ export interface Config {
   /** Allow navigation only to HTTP(S) URLs. Default true. */
   readonly httpOnly?: boolean
   /**
-   * Directory `browser_download` save paths must resolve inside (prevents a
+   * Directory `dsh_browser_download` save paths must resolve inside (prevents a
    * prompt-injected agent from writing arbitrary machine paths). Default:
    * the user's Downloads folder; override to confine downloads elsewhere.
    */

package/src/browser-electron/history-store.ts

@@ -1,6 +1,6 @@
 /**
  * Persistent browsing history: which pages the shared browser actually visited,
- * kept independently from any session's operation log (`browser_history`) and
+ * kept independently from any session's operation log (`dsh_browser_history`) and
  * from the browser process's lifetime.
  *
  * It lives beside the browser profile (`$DSH_HOME/dsh-builtin-browser-host/

package/src/browser-electron/host-main.ts

@@ -41,7 +41,7 @@ import { dirname, join } from 'node:path'
 // several Electron instances sharing Roaming\Electron fight over the GPU
 // cache/session locks, which can leave the window without a display surface
 // (capturePage then fails). A dedicated userData also persists cookies across
-// host restarts (on top of browser_auth). Must run before app is ready.
+// host restarts (on top of dsh_browser_auth). Must run before app is ready.
 try {
   const base = process.env.DSH_HOME ?? app.getPath('appData')
   app.setPath('userData', join(base, 'dsh-builtin-browser-host'))
@@ -769,7 +769,7 @@ async function handle(op: string, msg: { id: number; viewId?: string; windowId?:
         const entry = win?.views.get(viewId)
         if (win === undefined || entry === undefined) throw new Error(`focus: unknown view ${viewId}`)
         // Keys go to the view that holds web focus. A view that was never
-        // clicked holds none, so the FIRST browser_key of a session was dropped
+        // clicked holds none, so the FIRST dsh_browser_key of a session was dropped
         // by the renderer while CDP still answered the dispatch with success —
         // and `document.hasFocus()` inside the page even read true.
         const contents = entry.webContentsView.webContents
@@ -881,7 +881,7 @@ async function handle(op: string, msg: { id: number; viewId?: string; windowId?:
           throw new Error('capture produced no image (view not painted)')
         }
         // The measured size travels with the image. Without it the native path — which is the
-        // default self-hosted one — could never answer `browser_screenshot`'s width/height,
+        // default self-hosted one — could never answer `dsh_browser_screenshot`'s width/height,
         // because the seam's only channel was {base64, mime} and the provider had nothing to
         // forward. The caller's `maxWidth`/`maxHeight` are applied here, so this is the only
         // place that knows what came back.

package/src/browser-electron/provider.ts

@@ -393,7 +393,7 @@ export interface ElectronBrowserProviderConfig {
    */
   readonly contentMaxChars?: number
   /**
-   * Directory `browser_download` save paths must resolve inside (prevents a
+   * Directory `dsh_browser_download` save paths must resolve inside (prevents a
    * prompt-injected agent from writing arbitrary machine paths). Default:
    * `~/Downloads`. NOTE: this default is a convenience, not a security
    * boundary — on Windows it may resolve to OneDrive/redirected paths;
@@ -477,7 +477,7 @@ export function layoutSize(metrics: Record<string, unknown>): { width: number; h
 }
 
 /**
- * Map CDP cookies onto the shape `browser_auth` exports.
+ * Map CDP cookies onto the shape `dsh_browser_auth` exports.
  *
  * CDP reports a cookie as domain + path rather than a URL, and in seconds rather than
  * milliseconds, so both are converted. Entries missing a name, value or domain are
@@ -955,9 +955,9 @@ export class ElectronBrowserProvider implements BrowserProvider {
   /**
    * Page.navigate resolves at navigation COMMIT, not at load: the new document
    * is already current (so location.href and document.title are the new page's)
-   * while its DOM is still being parsed. browser_open snapshots immediately
+   * while its DOM is still being parsed. dsh_browser_open snapshots immediately
    * after navigating, which is why it could report the right title with zero
-   * interactive elements — and why a separate browser_snapshot right after
+   * interactive elements — and why a separate dsh_browser_snapshot right after
    * always found them.
    *
    * Wait — bounded, best-effort — for the new document to settle: readyState
@@ -1077,7 +1077,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
    *
    * A renderer only delivers key events to the view that holds web focus. A
    * view that was created but never clicked holds none — and `Input` events
-   * injected over CDP do not grant it — so the FIRST `browser_key` of a fresh
+   * injected over CDP do not grant it — so the FIRST `dsh_browser_key` of a fresh
    * session vanished inside the renderer while the command still answered
    * success. Hosts that cannot focus a view (a test double, a different shell
    * adapter) simply have no `focus`, and nothing changes for them.
@@ -1086,7 +1086,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
     if (handle.focus === undefined) return
     try {
       // Bounded, unlike the rest of this call: the child RPC has no timeout of its own,
-      // and this runs before typing, so an unresponsive child would hang browser_key for
+      // and this runs before typing, so an unresponsive child would hang dsh_browser_key for
       // good. A timeout is caught below exactly like any other focus failure, so the
       // best-effort contract is unchanged.
       await withTimeout(handle.focus(), 5_000, undefined, 'browser: focusing the view timed out')
@@ -1328,12 +1328,12 @@ export class ElectronBrowserProvider implements BrowserProvider {
       // A timeout leaves the wedged view in the session, so every later read would pay the same
       // 30 seconds again — and `terminatePage` only interrupts the running script, it does not
       // make the view readable. Replacing it is what turns a permanent loss into one bad call:
-      // the tab keeps the id the caller holds, and the next browser_open with the real URL
+      // the tab keeps the id the caller holds, and the next dsh_browser_open with the real URL
       // repopulates it.
       if (error instanceof Error && error.name === 'TimeoutError') {
         this.replaceTabWithBlank(s, tab)
         throw new BrowserError(
-          'browser: snapshot timed out; the stuck tab was reset to blank. Call browser_open with the real target URL before reading it again.',
+          'browser: snapshot timed out; the stuck tab was reset to blank. Call dsh_browser_open with the real target URL before reading it again.',
           'BROWSER_SNAPSHOT_TIMEOUT',
           { cause: error },
         )
@@ -1536,7 +1536,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
       if (error instanceof Error && error.name === 'TimeoutError') {
         this.replaceTabWithBlank(s, tab)
         throw new BrowserError(
-          'browser: a11y timed out; the stuck tab was reset to blank. Call browser_open with the real target URL before reading it again.',
+          'browser: a11y timed out; the stuck tab was reset to blank. Call dsh_browser_open with the real target URL before reading it again.',
           'BROWSER_A11Y_TIMEOUT',
           { cause: error },
         )
@@ -2003,7 +2003,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
       placeholder: f.placeholder ?? null,
       // A field with NO kind is a field with no kind FILTER: absent, not 'text'. Defaulting
       // it to 'text' here made `if (spec.kind)` above always true, so every unspecified
-      // field was narrowed to an <input> — browser_fill on a <textarea> reported
+      // field was narrowed to an <input> — dsh_browser_fill on a <textarea> reported
       // `no "text" control matched`, and a contenteditable could not match any kind at all.
       // The value stays a string or null (never undefined): the in-page check tests truthiness,
       // and JSON drops an undefined member entirely, which is the same thing here.
@@ -2138,7 +2138,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
             el.dispatchEvent(new Event('change', { bubbles: true }))
             out.push({ ok: true, method: 'select', target: describe(spec) })
           } else if (type === 'file') {
-            out.push({ ok: false, error: 'file inputs cannot be set from script; use browser_download or ask the human', target: describe(spec) })
+            out.push({ ok: false, error: 'file inputs cannot be set from script; use dsh_browser_download or ask the human', target: describe(spec) })
           } else if (type === 'checkbox') {
             const want = spec.value === true || spec.value === 'true' || spec.value === 'on'
             if (el.checked !== want) el.click()
@@ -2592,7 +2592,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
    * Refuse an action the settings have switched off.
    *
    * These switches belong to the OPERATOR. The settings document is written through the
-   * plugin's own panel and no tool can reach it, so — unlike `browser_restrict`, which the
+   * plugin's own panel and no tool can reach it, so — unlike `dsh_browser_restrict`, which the
    * model owns and can lift at will — a refusal here stands for as long as the setting does.
    * That is the point of them: a deployment can take page-script execution, downloads, or
    * login-state writes off the table without relying on the model's cooperation.
@@ -2619,7 +2619,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
 
   /**
    * Admit a caller-supplied save path for a file the browser writes to disk.
-   * ONE gate for both `browser_download` and `browser_screenshot`: the path
+   * ONE gate for both `dsh_browser_download` and `dsh_browser_screenshot`: the path
    * must be absolute, must resolve inside `downloadDir`, and must not already
    * exist. Without it a prompt-injected agent could write — or silently
    * replace — any file the DSH process can reach, which also escapes the file
@@ -3053,7 +3053,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
   }
 
   /**
-   * List persisted visits, newest first — what `browser_visited` reads back.
+   * List persisted visits, newest first — what `dsh_browser_visited` reads back.
    * @param options - result cap and an optional hostname filter.
    * @returns the matching visits, or an empty list when history is disabled.
    */
@@ -3200,7 +3200,7 @@ export class ElectronBrowserProvider implements BrowserProvider {
    *
    * A view whose renderer never commits cannot be read again: every evaluate into it runs out its
    * whole budget. Replacing it is what turns that from permanent into one bad call — the tab id
-   * callers hold stays valid, and the next `browser_open` with the real URL re-populates it.
+   * callers hold stays valid, and the next `dsh_browser_open` with the real URL re-populates it.
    *
    * The old view is destroyed AFTER the new one is in place, so a failure here cannot leave the
    * session holding a handle that is already gone.

package/src/browser-electron/remote-host.ts

@@ -1327,7 +1327,7 @@ class DeferredRemoteView implements ElectronViewHandle {
    * with "browser host is not running". Instead: drop the cache, rebuild the
    * view against a freshly spawned child, and retry the operation exactly
    * once — so sessions that survive a host death self-heal on their FIRST
-   * call after it, without a manual browser_reset_session. Page-level errors
+   * call after it, without a manual dsh_browser_reset_session. Page-level errors
    * are never retried (the view itself is fine).
    */
   private async withRecovery<T>(op: (view: RemoteView) => Promise<T>): Promise<T> {

package/src/browser-electron/settings-store.ts

@@ -55,15 +55,15 @@ export interface BrowserSettings {
    *
    * These are OPERATOR switches: the settings panel is not reachable from the model, so a
    * value here refuses whatever the model asks for, and no tool can lift it. That is what
-   * separates them from `browser_restrict`, which is the model's own soft guardrail. All
+   * separates them from `dsh_browser_restrict`, which is the model's own soft guardrail. All
    * three default to on, which is the documented out-of-the-box behaviour.
    */
   readonly actions: {
-    /** Run arbitrary page scripts in the active tab (`browser_execute`). */
+    /** Run arbitrary page scripts in the active tab (`dsh_browser_execute`). */
     readonly allowExecute: boolean
-    /** Download a URL to disk (`browser_download`). */
+    /** Download a URL to disk (`dsh_browser_download`). */
     readonly allowDownload: boolean
-    /** Write cookies — importing login state (`browser_auth` restore). */
+    /** Write cookies — importing login state (`dsh_browser_auth` restore). */
     readonly allowCredentialWrite: boolean
   }
 }

package/src/index.ts

@@ -3,7 +3,7 @@
  * pieces. The cordis.patch.yml rows reference subpath exports:
  *   - `dsh-builtin-browser/browser`          -> the ctx.browser seam (Service)
  *   - `dsh-builtin-browser/browser-electron` -> the Electron CDP provider
- *   - `dsh-builtin-browser/tool-browser`     -> the model-facing browser_* tools
+ *   - `dsh-builtin-browser/tool-browser`     -> the model-facing dsh_browser_* tools
  * The capability itself is composed by those rows; this root entry exists for
  * programmatic imports AND because the host's client-module scan identifies a
  * package's browser half through a loader row whose specifier resolves to the

package/src/tool-browser/element-fields.ts

@@ -8,9 +8,9 @@
  * and the tool's `output.schema` declared the properties. Nothing connected them, and the
  * result is this project's most repeatable bug:
  *
- *   - `browser_a11y`'s `selector` — computed by the provider, declared by the schema,
+ *   - `dsh_browser_a11y`'s `selector` — computed by the provider, declared by the schema,
  *     printed by the renderer, and dropped by the projection. 134 tests stayed green.
- *   - `browser_screenshot`'s `width`/`height` — measured by the provider, declared by the
+ *   - `dsh_browser_screenshot`'s `width`/`height` — measured by the provider, declared by the
  *     schema, and dropped by the projection. 172 tests stayed green. It was found a round
  *     later, by reading the three places that agree and noticing the fourth did not.
  *
@@ -33,7 +33,7 @@ interface FieldSpec {
 }
 
 /**
- * The fields of one entry in `browser_snapshot` / `browser_open`'s `elements`.
+ * The fields of one entry in `dsh_browser_snapshot` / `dsh_browser_open`'s `elements`.
  *
  * `selector` is the reason this file exists; see the header. It was added to the schema and
  * the projection separately, and only one of them landed.
@@ -49,7 +49,7 @@ const ELEMENT_FIELDS = {
 } as const satisfies Record<string, FieldSpec>
 
 /**
- * The fields of one entry in `browser_a11y`'s `nodes`.
+ * The fields of one entry in `dsh_browser_a11y`'s `nodes`.
  *
  * Different shape from an element on purpose: a role and an accessible name carry meaning a
  * tag and a label string do not, and `depth` is what renders the tree.
@@ -91,7 +91,7 @@ function project(fields: Record<string, FieldSpec>, source: Record<string, unkno
 }
 
 /**
- * The `elements` item schema for browser_snapshot and browser_open.
+ * The `elements` item schema for dsh_browser_snapshot and dsh_browser_open.
  *
  * Written as a literal rather than generated, because `defineTool` validates the output schema
  * against its own `ValueSchemaSpec` and a generated `Record<string, …>` is too wide to satisfy
@@ -114,7 +114,7 @@ export const ELEMENT_ITEM_SCHEMA = {
 } as const
 
 /**
- * The `nodes` item schema for browser_a11y.
+ * The `nodes` item schema for dsh_browser_a11y.
  *
  * Same reasoning as {@link ELEMENT_ITEM_SCHEMA}: literal for the type checker, table-backed by
  * test.