dsh-tabbit 0.2.0

package/README.md

@@ -0,0 +1,106 @@
+# tabbit-browser for DeepSeek Harness
+
+**English** | [简体中文](README.zh-CN.md)
+
+![Tabbit Browser for DeepSeek Harness](tabbit-for-dsh.png?v=2)
+
+A plugin for DeepSeek Harness (DSH) that gives the agent control over your Tabbit Browser: real pages, real login state, and real interactions, driven through `tabbit-cli` — the task-isolated Playwright CLI owned by the browser itself. Use it for web automation, information extraction, QA, and benchmarks.
+
+## What you get
+
+| Component | Description |
+| --------- | ----------- |
+| `tabbit-browser` skill | The working guide for browser automation: persistent task spaces, locators and waits, screenshots, receipts and recovery. Discovered and loaded automatically with the plugin — no separate skill install. The model loads it via `skill({ name: "tabbit-browser" })` or `/tabbit-browser`. |
+| `tabbit_browser_install` tool | Environment preflight: detects installed stable Tabbit editions, requires version `1.9.0` or newer, and verifies the `tabbit-cli` resident runtime. When Tabbit is missing or outdated, it starts a DSH background job that downloads the region-appropriate installer. |
+| `tabbit_plugin_update` tool | Plugin update check: compares the installed plugin version with the published changelog at most once a day, silently skips offline failures, and records a version the user declined. When a newer release exists, the skill loads with an update notice showing what the new version added. |
+
+## Installation
+
+### 1. Check or install DeepSeek Harness
+
+Check whether DSH is already installed:
+
+```sh
+dsh --version
+```
+
+If the command prints a version number, continue to the next step. If it is not found, install it for your operating system.
+
+#### macOS
+
+Install Node.js 20 or newer, then install DSH:
+
+```sh
+brew install node
+npm install -g @deepseek-ai/dsh
+```
+
+#### Windows
+
+Install Node.js LTS in PowerShell:
+
+```powershell
+winget install OpenJS.NodeJS.LTS
+```
+
+Reopen PowerShell after the installation, then install DSH:
+
+```powershell
+npm install -g @deepseek-ai/dsh
+```
+
+Run `dsh --version` again to confirm DSH works.
+
+### 2. Install the tabbit-browser plugin
+
+```sh
+dsh plugin --profile web add github:Tabbit-Browser/dsh-plugin
+```
+
+### 3. Start DSH
+
+```sh
+dsh web
+```
+
+## How it works
+
+After installation, the bundle automatically registers its skill provider. The model loads the skill via `skill({ name: "tabbit-browser" })` or `/tabbit-browser`. Before the first browser operation in a task, the skill calls `tabbit_browser_install`:
+
+- **`ready`** — a stable Tabbit edition at `1.9.0` or newer is installed and the runtime is running; the agent continues with the `tabbit-cli` workflow.
+- **`restart-required`** — the installed version is sufficient, but the `tabbit-cli` runtime is not running; the user is asked to restart Tabbit Browser once.
+- **`background`** — no stable edition is installed, or none reaches `1.9.0`; the tool starts a DSH background job that reads the operating system's configured region (macOS reads the system locale, Windows calls the system region API) and downloads the matching stable installer: the domestic build from `tabbit.com` for mainland China, or the international build from `tabbit.ai` for every other or unknown region. It selects the right Windows x64, macOS Apple Silicon, or macOS Intel package, saves it to the user's `Downloads` folder, reports download progress, and notifies the absolute installer path on completion.
+
+The environment check also:
+
+- Treats the runtime as available when multiple Tabbit instances are running; the agent sets `TABBIT_PLAYWRIGHT_INSTANCE` from the CLI's hint instead of reporting the instance ambiguity as an unavailable runtime.
+- Diagnoses the DSH sandbox mode required to invoke the CLI on the current platform: Windows reports `cliSandboxMode: danger-full-access`, other platforms report `default`.
+- Caches a successful environment check per agent session and re-checks only after a Runtime/launcher failure or an installation change, via `refresh: true`.
+
+## Requirements
+
+- A stable Tabbit Browser at version `1.9.0` or newer: either the international `Tabbit` or the domestic `Tabbit Browser` — installing either one is enough. If it is missing or outdated, the plugin downloads the installer for you.
+- The current DSH profile provides `ctx.skills`, `ctx.tools`, and `ctx.jobs` together with the corresponding model tools.
+- `dsh-tool-jobs` provides background job control and completion notifications for the current agent.
+- The current DSH profile provides a Bash/Shell tool running on the same host machine as Tabbit Browser.
+- The shell's execution environment can reach the Browser-owned Runtime Service.
+- On Windows, DSH's `read-only` and `workspace-write` restricted tokens cannot write to the Runtime named pipe. The skill first runs the normal `tabbit-cli tasks` connection probe and requests no permission at all when it succeeds. Only when the Browser, launcher, and Runtime processes are all detected but the connection returns `BROWSER_RUNTIME_UNAVAILABLE` does it ask the user to switch the current DSH session to Full Permission — and it then stops the task immediately, without retrying or continuing browser operations.
+
+## Notes and limitations
+
+- Mainland China uses the domestic `tabbit.com` download source; all other regions use the international `tabbit.ai` source.
+- The background download reports progress and notifies the absolute installer path when it finishes. It never opens the `.dmg`/`.exe` automatically.
+- Development builds are not detected.
+- The plugin does not provide native browser tools such as `tabbit_browser_evaluate`.
+- If DSH's Bash runs in a sandbox such as E2B or a remote container that cannot access the local GUI browser, this skill cannot make Tabbit automation work there.
+
+## Development
+
+```sh
+npm test
+npm pack --dry-run
+```
+
+## License
+
+MIT

package/README.zh-CN.md

@@ -0,0 +1,107 @@
+# tabbit-browser for DeepSeek Harness
+
+[English](README.md) | **简体中文**
+
+![Tabbit Browser for DeepSeek Harness](tabbit-for-dsh.png?v=2)
+
+这是一个为 DeepSeek Harness（DSH）打造的插件。安装后，DSH 中的 Agent 获得控制 Tabbit 浏览器的能力：通过 `tabbit-cli`——Tabbit 浏览器自带的、任务隔离的 Playwright CLI——操作真实网页、复用真实登录态，完成网页自动化、信息提取、QA 与基准测试等任务。
+
+## 插件内容
+
+| 组件 | 说明 |
+| ---- | ---- |
+| `tabbit-browser` skill | 浏览器自动化工作指南：持久化任务空间、locator 与等待、截图、回执与恢复。随插件安装自动发现和加载，无需单独安装。模型通过 `skill({ name: "tabbit-browser" })` 或 `/tabbit-browser` 加载。 |
+| `tabbit_browser_install` 工具 | 环境预检：检测已安装的正式版 Tabbit、要求版本 ≥ `1.9.0`、检查 `tabbit-cli` 常驻运行时；未安装或版本过低时，创建 DSH 后台任务按地区下载对应安装包。 |
+| `tabbit_plugin_update` 工具 | 插件更新检查：每天至多一次对比本地插件版本与仓库发布的 CHANGELOG，离线失败时静默跳过，并可记录用户已拒绝的版本。存在新版本时，skill 会附带更新提示加载，展示新版本的新增功能。 |
+
+## 安装
+
+### 1. 检查并安装 DeepSeek Harness
+
+先检查本地是否已经安装 DSH：
+
+```sh
+dsh --version
+```
+
+如果命令能够正常输出版本号，直接进入下一步。如果提示找不到命令，请根据操作系统安装。
+
+#### macOS
+
+安装 Node.js 20 或更高版本，然后安装 DSH：
+
+```sh
+brew install node
+npm install -g @deepseek-ai/dsh
+```
+
+#### Windows
+
+在 PowerShell 中安装 Node.js LTS：
+
+```powershell
+winget install OpenJS.NodeJS.LTS
+```
+
+安装完成后重新打开 PowerShell，再安装 DSH：
+
+```powershell
+npm install -g @deepseek-ai/dsh
+```
+
+安装后再次运行 `dsh --version`，确认 DSH 可以正常使用。
+
+### 2. 安装 tabbit-browser 插件
+
+```sh
+dsh plugin --profile web add github:Tabbit-Browser/dsh-plugin
+```
+
+### 3. 启动 DSH
+
+```sh
+dsh web
+```
+
+## 工作原理
+
+安装插件后，bundle 会自动加载 Skill Provider，模型可通过 `skill({ name: "tabbit-browser" })` 或 `/tabbit-browser` 加载说明。在任务中的第一次浏览器操作之前，skill 会先调用 `tabbit_browser_install` 做环境预检：
+
+- **`ready`** — 已安装 `1.9.0` 或更高版本的正式版 Tabbit 且运行时正在运行，Agent 继续通过 `tabbit-cli` 操作浏览器。
+- **`restart-required`** — 已安装的版本达标，但 `tabbit-cli` 常驻运行时未运行，提示用户重启一次 Tabbit 浏览器。
+- **`background`** — 未安装任何正式版，或版本低于 `1.9.0`；工具会创建 DSH 后台任务，读取系统地区（macOS 读取系统地区，Windows 调用系统地区 API），中国大陆下载国内正式版安装包，其他地区或无法识别地区时下载国际正式版安装包；自动选择对应的 Windows x64、macOS Apple Silicon 或 macOS Intel 包，保存到用户的 `Downloads` 目录，下载过程会输出进度，完成后 DSH 会通知安装包的绝对路径。
+
+环境检查还会：
+
+- 多个 Tabbit 实例同时运行时，仍判定 Runtime 可用；模型根据 CLI 提示设置 `TABBIT_PLAYWRIGHT_INSTANCE`，不会把实例选择歧义误报为 Runtime 未运行。
+- 诊断当前平台调用 CLI 所需的 DSH sandbox mode；Windows 返回 `cliSandboxMode: danger-full-access`，其他平台返回 `default`。
+- 按 Agent session 缓存成功的环境检查；仅在 Runtime/launcher 失败或安装变化后通过 `refresh: true` 主动失效并重新检查。
+
+## 前提
+
+- 需要 `1.9.0` 或更高版本的正式版 Tabbit 浏览器。国际版 `Tabbit` 和国内版 `Tabbit Browser` 均支持，安装任意一个即可；如果未安装或版本过低，插件会自动下载对应安装包。
+- 当前 DSH profile 已提供 `ctx.skills`、`ctx.tools`、`ctx.jobs` 以及对应模型工具。
+- `dsh-tool-jobs` 已为当前 Agent 提供后台任务控制和完成通知。
+- 当前 DSH profile 已提供运行在 Tabbit Browser 所在宿主机的 Bash/Shell 工具。
+- Shell 的执行环境可以访问 Browser-owned Runtime Service。
+- Windows 上 DSH 的 `read-only` 与 `workspace-write` 限制令牌无法写入 Runtime 命名管道。Skill 先正常执行 `tabbit-cli tasks` 连接探测；成功时完全不询问权限。仅当 Browser、launcher 和 Runtime 进程均已检测到但连接返回 `BROWSER_RUNTIME_UNAVAILABLE` 时，才要求用户把当前 DSH 会话切换到 Full Permission，并立即停止当前任务，不重试或继续浏览器操作。
+
+## 行为说明与限制
+
+- 中国大陆使用 `tabbit.com` 国内版下载源，其他地区使用 `tabbit.ai` 国际版下载源。
+- 后台下载会输出进度，完成后通知安装包的绝对路径，但不会自动打开 `.dmg` 或 `.exe`。
+- 不会检测开发版。
+- 不提供 `tabbit_browser_evaluate` 等原生浏览器工具。
+
+如果 DSH 的 Bash 运行在 E2B、远程容器或无法访问本机 GUI Browser 的沙箱中，本 Skill 不会使 Tabbit 自动化变得可用。
+
+## 开发验证
+
+```sh
+npm test
+npm pack --dry-run
+```
+
+## 许可证
+
+MIT

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: skill-tabbit-browser
+      name: tabbit-browser

package/index.js

@@ -0,0 +1,352 @@
+import { readFile } from 'node:fs/promises'
+import { fileURLToPath } from 'node:url'
+import { createDownloadJob, detectTabbit } from './installer.js'
+import { checkPluginUpdate, dismissUpdate } from './update-check.js'
+
+const PROVIDER_NAME = 'tabbit-browser-bundled-skill'
+const SKILL_NAME = 'tabbit-browser'
+const SKILL_DESCRIPTION = 'Control the user\'s Tabbit Browser through its Browser-owned, task-isolated Playwright CLI and runtime helpers. Use for Tabbit browser automation, website interaction, extraction, QA, and benchmarks, including stable-browser version checks, runtime-process checks, and background installer download when Tabbit is absent or outdated; never silently fall back to another browser automation backend.'
+const SKILL_URL = new URL('./skills/tabbit-browser/SKILL.md', import.meta.url)
+const RESOURCE_BASE = {
+  kind: 'directory',
+  path: fileURLToPath(new URL('./skills/tabbit-browser/', import.meta.url)),
+}
+const INVOCATION = { modelInvocable: true, userInvocable: true }
+
+// DSH reserves rank 600 for skills shipped inside a package.
+const BUNDLED_SKILL_RANK = 600
+
+const candidate = {
+  name: SKILL_NAME,
+  description: SKILL_DESCRIPTION,
+  invocation: INVOCATION,
+  provider: PROVIDER_NAME,
+  source: 'bundled',
+  resourceBase: RESOURCE_BASE,
+  rank: BUNDLED_SKILL_RANK,
+  locator: SKILL_URL,
+}
+
+export function formatUpdateNotice({ currentVersion, latestVersion, changelog }) {
+  return [
+    `> **Plugin update available**: tabbit-browser ${latestVersion} (installed ${currentVersion}).`,
+    changelog ? `> New in ${latestVersion}: ${changelog}` : null,
+    '> Show the offered version and these changes to the user, then ask whether to update now.',
+    '> If they agree, tell them to rerun the install command below over the current install and restart the DSH session afterwards:',
+    '> ```bash',
+    '> dsh plugin --profile web add github:Tabbit-Browser/dsh-plugin',
+    '> ```',
+    `> If they decline, call \`tabbit_plugin_update\` with \`dismiss: "${latestVersion}"\`, then continue the task.`,
+  ]
+    .filter(Boolean)
+    .join('\n')
+}
+
+async function prependUpdateNotice(content, checkUpdate) {
+  let update
+  try {
+    update = await checkUpdate()
+  } catch {
+    return content
+  }
+  if (update?.status !== 'update-available') return content
+  return `${formatUpdateNotice(update)}\n\n${content}`
+}
+
+export function createSkillProvider({ checkUpdate = checkPluginUpdate } = {}) {
+  return {
+    name: PROVIDER_NAME,
+    list: () => Promise.resolve([candidate]),
+    async get(selected) {
+      if (selected.name !== SKILL_NAME) return undefined
+      const source = await readFile(SKILL_URL, 'utf8')
+      return {
+        name: SKILL_NAME,
+        description: SKILL_DESCRIPTION,
+        invocation: INVOCATION,
+        provider: PROVIDER_NAME,
+        source: 'bundled',
+        resourceBase: RESOURCE_BASE,
+        path: fileURLToPath(SKILL_URL),
+        content: await prependUpdateNotice(stripFrontmatter(source), checkUpdate),
+      }
+    },
+  }
+}
+
+function stripFrontmatter(source) {
+  if (!source.startsWith('---\n')) return source
+  const end = source.indexOf('\n---\n', 4)
+  return end === -1 ? source : source.slice(end + 5)
+}
+
+export const name = 'tabbit-browser'
+export const inject = ['skills', 'tools', 'jobs']
+
+export function describeCliSandbox(platform = process.platform) {
+  if (platform === 'win32') {
+    return {
+      cliSandboxMode: 'default',
+      cliSandboxReason: 'Invoke tabbit-cli normally. Only if its Runtime connection probe returns BROWSER_RUNTIME_UNAVAILABLE while Tabbit Browser and the Runtime process are detected, ask the user to change the current DSH session to Full Permission and stop the task.',
+    }
+  }
+  return {
+    cliSandboxMode: 'default',
+    cliSandboxReason: 'The default DSH sandbox mode can invoke tabbit-cli on this platform.',
+  }
+}
+
+function withCliSandboxGuidance(message, platform) {
+  const diagnosis = describeCliSandbox(platform)
+  return {
+    ...diagnosis,
+    message,
+  }
+}
+
+export function apply(ctx, options = {}) {
+  ctx.skills.registerProvider(() => createSkillProvider(options))
+  registerInstallerTool(ctx)
+  registerUpdateTool(ctx, options)
+}
+
+function messageForUpdate(update) {
+  if (update.status === 'update-available') {
+    const changes = update.changelog || 'see the release notes'
+    return `tabbit-browser ${update.latestVersion} is available (installed ${update.currentVersion}). New in this version: ${changes}. Ask the user whether to update now.`
+  }
+  if (update.status === 'current') {
+    return `The tabbit-browser plugin is up to date (${update.currentVersion}).`
+  }
+  return 'Could not determine the latest tabbit-browser plugin version. The check stays silent for a day before retrying.'
+}
+
+export function registerUpdateTool(ctx, {
+  checkUpdate = checkPluginUpdate,
+  dismiss = dismissUpdate,
+} = {}) {
+  ctx.tools.register({
+    name: 'tabbit_plugin_update',
+    description: 'Record that the user declined an offered tabbit-browser plugin version, or force a recheck of the published changelog. The skill already loads an update notice automatically when a newer version exists; call this tool only after the user declines an offered version, or after a plugin update or connectivity change.',
+    parameters: {
+      type: 'object',
+      properties: {
+        dismiss: {
+          type: 'string',
+          description: 'The offered version the user declined. The skill stops announcing this version; a newer release is announced again.',
+        },
+        refresh: {
+          type: 'boolean',
+          description: 'Skip the daily cache and the failure backoff and check the latest release again.',
+        },
+      },
+      additionalProperties: false,
+    },
+    output: {
+      schema: {
+        type: 'object',
+        properties: {
+          status: {
+            type: 'string',
+            enum: ['current', 'update-available', 'unknown', 'dismissed'],
+          },
+          message: { type: 'string' },
+          currentVersion: { type: 'string' },
+          latestVersion: { type: 'string' },
+          changelog: { type: 'string' },
+          dismissedVersion: { type: 'string' },
+        },
+        required: ['status', 'message'],
+        additionalProperties: false,
+      },
+      render: (_args, value) => [{ type: 'text', text: value.message }],
+    },
+    isConcurrencySafe: () => true,
+    async execute(args = {}) {
+      if (args.dismiss) {
+        await dismiss(args.dismiss)
+        return {
+          status: 'dismissed',
+          message: `Recorded that the user declined tabbit-browser ${args.dismiss}. The skill will stop announcing this version; a newer release will be announced again.`,
+          dismissedVersion: args.dismiss,
+        }
+      }
+      const update = await checkUpdate({ force: args.refresh === true })
+      return {
+        status: update.status,
+        message: messageForUpdate(update),
+        currentVersion: update.currentVersion,
+        ...(update.latestVersion ? { latestVersion: update.latestVersion } : {}),
+        ...(update.changelog ? { changelog: update.changelog } : {}),
+      }
+    },
+  })
+}
+
+export function registerInstallerTool(ctx, {
+  detect = detectTabbit,
+  hostPlatform = process.platform,
+} = {}) {
+  const activeJobs = new WeakMap()
+  const readyByOwner = new WeakMap()
+
+  ctx.tools.register({
+    name: 'tabbit_browser_install',
+    description: 'Check stable Tabbit editions, require version 1.9.0 or newer, verify the tabbit-cli launcher and Runtime process, and diagnose how to perform the session-scoped CLI connection probe. A successful detection result is cached for the calling agent session; set refresh only after a Runtime/launcher failure or installation change. Download the region-appropriate installer in the background when Tabbit is missing or outdated; otherwise report when the browser must be restarted once.',
+    parameters: {
+      type: 'object',
+      properties: {
+        refresh: {
+          type: 'boolean',
+          description: 'Discard this agent session\'s cached ready result and run every environment check again. Use only after a Runtime/launcher failure or installation change.',
+        },
+      },
+      additionalProperties: false,
+    },
+    output: {
+      schema: {
+        type: 'object',
+        properties: {
+          status: {
+            type: 'string',
+            enum: ['ready', 'restart-required', 'background'],
+          },
+          message: { type: 'string' },
+          cached: { type: 'boolean' },
+          jobId: { type: 'string' },
+          cliReady: { type: 'boolean' },
+          cliSandboxMode: {
+            type: 'string',
+            enum: ['default', 'danger-full-access'],
+          },
+          cliSandboxReason: { type: 'string' },
+          minimumVersion: { type: 'string' },
+          playwrightProcessRunning: { type: 'boolean' },
+          playwrightInstanceCount: { type: 'integer' },
+          playwrightRuntimeAmbiguous: { type: 'boolean' },
+          installations: {
+            type: 'array',
+            items: {
+              type: 'object',
+              properties: {
+                name: { type: 'string' },
+                edition: { type: 'string', enum: ['international', 'domestic'] },
+                channel: { type: 'string', const: 'stable' },
+                path: { type: 'string' },
+                executable: { type: 'string' },
+                version: { type: 'string' },
+                bundleId: { type: 'string' },
+                registryKey: { type: 'string' },
+              },
+              required: ['name', 'edition', 'channel'],
+              additionalProperties: false,
+            },
+          },
+        },
+        required: ['status', 'message', 'cached', 'cliSandboxMode', 'cliSandboxReason'],
+        additionalProperties: false,
+      },
+      render: (_args, value) => [{ type: 'text', text: value.message }],
+    },
+    isConcurrencySafe: () => true,
+    async execute(args = {}, exec) {
+      const owner = exec.agent
+      if (owner && args.refresh === true) readyByOwner.delete(owner)
+      if (owner && args.refresh !== true) {
+        const cached = readyByOwner.get(owner)
+        if (cached) {
+          return {
+            ...cached,
+            cached: true,
+            message: 'Browser installation and Runtime-process detection reused this session\'s result. Run the normal tabbit-cli tasks connection probe to finish the environment check.',
+          }
+        }
+      }
+      const existingJobId = owner ? activeJobs.get(owner) : undefined
+      if (existingJobId) {
+        try {
+          const snapshot = ctx.jobs.get(existingJobId, owner)
+          if (snapshot.status === 'running' || snapshot.status === 'stopping') {
+            return {
+              status: 'background',
+              ...withCliSandboxGuidance(`Environment check failed: a Tabbit installer download is already running as ${existingJobId}.`, hostPlatform),
+              cached: false,
+              jobId: String(existingJobId),
+            }
+          }
+        } catch {
+          activeJobs.delete(owner)
+        }
+      }
+
+      const detected = await detect()
+      if (detected.recommendation === 'ready') {
+        const versions = detected.supportedInstallations
+          .map(item => `${item.name} ${item.version}`)
+          .join(', ')
+        const instanceNote = detected.playwrightRuntimeAmbiguous
+          ? ` Multiple Tabbit instances are running (${detected.playwrightInstanceCount}); set TABBIT_PLAYWRIGHT_INSTANCE before invoking tabbit-cli.`
+          : ''
+        const result = {
+          status: 'ready',
+          ...withCliSandboxGuidance(`Browser installation and Runtime-process detection passed${versions ? ` (${versions})` : ''}.${instanceNote} Run the normal tabbit-cli tasks connection probe to finish the environment check.`, detected.platform),
+          cached: false,
+          cliReady: detected.cliReady,
+          minimumVersion: detected.minimumVersion,
+          playwrightProcessRunning: detected.playwrightProcessRunning,
+          playwrightInstanceCount: detected.playwrightInstanceCount,
+          playwrightRuntimeAmbiguous: detected.playwrightRuntimeAmbiguous,
+          installations: detected.installations,
+        }
+        if (owner) readyByOwner.set(owner, result)
+        return result
+      }
+      if (detected.recommendation === 'restart-required') {
+        const versions = detected.supportedInstallations
+          .map(item => `${item.name} ${item.version}`)
+          .join(', ')
+        return {
+          status: 'restart-required',
+          ...withCliSandboxGuidance(`Environment check failed: ${versions} meets the minimum version ${detected.minimumVersion}, but the tabbit-cli Runtime is not running. Please restart Tabbit Browser once before using browser automation.`, detected.platform),
+          cached: false,
+          cliReady: detected.cliReady,
+          minimumVersion: detected.minimumVersion,
+          playwrightProcessRunning: false,
+          playwrightInstanceCount: detected.playwrightInstanceCount,
+          playwrightRuntimeAmbiguous: detected.playwrightRuntimeAmbiguous,
+          installations: detected.installations,
+        }
+      }
+
+      const downloadReason = detected.installations.length === 0
+        ? 'No stable Tabbit edition is installed.'
+        : `Installed stable Tabbit version(s) do not meet the minimum ${detected.minimumVersion}: ${detected.installations.map(item => `${item.name} ${item.version ?? 'unknown'}`).join(', ')}.`
+
+      let jobId
+      jobId = ctx.jobs.start({
+        kind: 'tabbit-installer',
+        label: 'Download the region-appropriate Tabbit installer',
+        outputLimitBytes: 16 * 1024,
+        owner,
+        run: () => createDownloadJob({
+          onSettled: () => {
+            if (owner && activeJobs.get(owner) === jobId) activeJobs.delete(owner)
+          },
+        }),
+      })
+      if (owner) activeJobs.set(owner, jobId)
+      return {
+        status: 'background',
+        ...withCliSandboxGuidance(`Environment check failed: ${downloadReason} Started the region-appropriate Tabbit installer download as ${jobId}. DSH will report progress and notify you when the installer is ready.`, detected.platform),
+        cached: false,
+        jobId: String(jobId),
+        cliReady: detected.cliReady,
+        minimumVersion: detected.minimumVersion,
+        playwrightProcessRunning: false,
+        playwrightInstanceCount: detected.playwrightInstanceCount,
+        playwrightRuntimeAmbiguous: detected.playwrightRuntimeAmbiguous,
+        installations: detected.installations,
+      }
+    },
+  })
+}