dsh-uni-browser 0.1.0-rc.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Xiang Bai
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,22 @@
+# dsh-uni-browser
+
+Persistent, named browser profiles for [DeepSeek Harness](https://github.com/deepseek-ai/DeepSeek-Harness), powered by a local [uni-browser](https://github.com/baixianger/uni-browser) daemon.
+
+## What it does
+
+- Registers named Camoufox or Chromium profiles in DSH Settings → Uni Browser.
+- Opens and stops profiles without losing their local cookies, localStorage, or IndexedDB.
+- Lets DSH agents navigate, snapshot, click, type, and press through uni-browser's audited action API.
+- Keeps browser passwords, cookies, and daemon tokens out of the DSH UI and tool parameters.
+
+## Prerequisite
+
+Start a local uni-browser daemon first. The plugin connects to its standard Unix socket (`$UNI_BROWSER_SOCKET`, then `$XDG_RUNTIME_DIR/uni-browser/uni.sock`, then `~/.uni-browser/uni.sock`). It does not start a browser automatically.
+
+## Login profiles
+
+Create a profile with **headless disabled**, open it, and sign in yourself in the visible browser. Later opens reuse the same managed profile directory. **Stop** retains it; **Forget** permanently removes it after confirmation.
+
+## Security boundary
+
+This first release is local-only. It uses uni-browser's NDJSON action plane rather than direct CDP/Juggler passthrough, so browser actions remain in uni-browser's audit trail.

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: dsh-uni-browser
+      name: dsh-uni-browser

package/lib/client.js

@@ -0,0 +1,20 @@
+window.__ModuleLoader__.load({
+  id: "dsh-uni-browser",
+  factory: (require) => {
+    const module = { exports: {} }; const exports = module.exports; const React = require("react"); const h = React.createElement; const inject = ["slots", "connection"];
+    function apply(ctx) {
+      const call = async (endpoint, args = {}) => { const response = await ctx.connection.rpc.call("/dsh-uni-browser", endpoint, { args }); if (!response?.ok) throw new Error(response?.error?.message ?? "Browser request failed"); return response.value; };
+      function BrowserSettings() {
+        const [profiles, setProfiles] = React.useState([]); const [health, setHealth] = React.useState(null); const [name, setName] = React.useState(""); const [engine, setEngine] = React.useState("camoufox"); const [error, setError] = React.useState(""); const [working, setWorking] = React.useState(false);
+        const refresh = React.useCallback(async () => { const [profileResult, healthResult] = await Promise.all([call("profiles"), call("health").catch(() => null)]); setProfiles(profileResult.profiles ?? []); setHealth(healthResult); setError(""); }, []);
+        React.useEffect(() => { void refresh().catch((cause) => setError(String(cause.message ?? cause))); }, [refresh]);
+        const create = async (event) => { event.preventDefault(); if (!name.trim() || working) return; setWorking(true); try { await call("create", { name: name.trim(), engine, headless: false }); setName(""); await refresh(); } catch (cause) { setError(String(cause.message ?? cause)); } finally { setWorking(false); } };
+        const operate = async (endpoint, id, confirm = undefined) => { setWorking(true); try { await call(endpoint, { id, ...(confirm === undefined ? {} : { confirm }) }); await refresh(); } catch (cause) { setError(String(cause.message ?? cause)); } finally { setWorking(false); } };
+        const field = { boxSizing: "border-box", minHeight: 38, border: "1px solid var(--dsw-alias-border-l2, #ddd)", borderRadius: 9, padding: "0 11px", background: "var(--dsw-alias-bg-layer-1, #fff)", color: "inherit" }; const button = { ...field, cursor: "pointer" };
+        return h("div", { style: { width: "min(720px, 100%)", padding: "8px 4px 48px" } }, h("div", { style: { marginBottom: 26 } }, h("h2", { style: { margin: "0 0 6px", fontSize: 22 } }, "Uni Browser"), h("p", { style: { margin: 0, color: "var(--dsw-alias-text-secondary, #777)", lineHeight: 1.5 } }, "Named browser profiles keep their local login state. DSH never displays passwords, cookies, or daemon tokens.")), error && h("p", { role: "alert", style: { padding: 10, borderRadius: 9, background: "rgba(210,48,48,.08)", color: "var(--dsw-alias-state-error-primary, #b42318)" } }, error), h("section", { style: { marginBottom: 28 } }, h("h3", { style: { margin: "0 0 6px", fontSize: 15 } }, "Local daemon"), h("p", { style: { margin: 0, color: health?.online ? "#228b5b" : "var(--dsw-alias-text-secondary, #777)", fontSize: 13 } }, health?.online ? `Online · ${health.socketPath}` : "Offline · start uni-browser daemon before opening a profile.")), h("section", { style: { marginBottom: 28 } }, h("h3", { style: { margin: "0 0 8px", fontSize: 15 } }, "New persistent profile"), h("form", { onSubmit: create, style: { display: "flex", gap: 8, flexWrap: "wrap" } }, h("input", { value: name, onChange: (event) => setName(event.target.value), placeholder: "e.g. Research Camoufox", style: { ...field, flex: "1 1 240px" } }), h("select", { value: engine, onChange: (event) => setEngine(event.target.value), style: button }, h("option", { value: "camoufox" }, "Camoufox"), h("option", { value: "chromium" }, "Chromium")), h("button", { type: "submit", disabled: working || !name.trim(), style: button }, "Create"))), h("section", null, h("h3", { style: { margin: "0 0 10px", fontSize: 15 } }, "Registered profiles"), h("div", { style: { display: "grid", gap: 8 } }, profiles.map((profile) => h("div", { key: profile.id, style: { padding: "12px", borderRadius: 10, background: "var(--dsw-alias-bg-layer-2, #f6f7f8)" } }, h("div", { style: { display: "flex", justifyContent: "space-between", gap: 12 } }, h("div", null, h("strong", null, profile.name), h("div", { style: { color: "var(--dsw-alias-text-secondary, #777)", fontSize: 12, marginTop: 3 } }, `${profile.engine} · ${profile.active ? "Running" : "Stopped"}`)), h("div", { style: { display: "flex", gap: 6 } }, h("button", { type: "button", disabled: working, onClick: () => operate(profile.active ? "close" : "open", profile.id), style: button }, profile.active ? "Stop" : "Open"), h("button", { type: "button", disabled: working, onClick: () => { if (window.confirm(`Forget ${profile.name}? Its local login state will be deleted.`)) void operate("forget", profile.id, true); }, style: { ...button, color: "var(--dsw-alias-state-error-primary, #b42318)" } }, "Forget"))))), profiles.length === 0 && h("p", { style: { color: "var(--dsw-alias-text-secondary, #777)", fontSize: 13 } }, "No profiles registered yet."))));
+      }
+      ctx.slots.inject("settings.section", () => ctx.slots.register({ name: "settings.section", id: "uni-browser", order: 36, label: () => "Uni Browser" }, BrowserSettings));
+    }
+    exports.apply = apply; exports.inject = inject; return module.exports;
+  }
+});

package/lib/index.js

@@ -0,0 +1,101 @@
+import { defineTool } from "@deepseek-ai/dsh-tools";
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import net from "node:net";
+
+export const name = "dsh-uni-browser";
+export const inject = ["connection", "tools"];
+
+const safeId = (value) => String(value).trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+
+export class UniBrowserClient {
+  constructor(config = {}) { this.socketPath = config.socketPath ?? process.env.UNI_BROWSER_SOCKET ?? join(process.env.XDG_RUNTIME_DIR ?? join(homedir(), ".uni-browser"), "uni.sock"); }
+  async call(action, session = "default", params = {}) {
+    const id = crypto.randomUUID(); const request = `${JSON.stringify({ id, action, session, params })}\n`;
+    return new Promise((resolve, reject) => {
+      let buffer = ""; let settled = false;
+      const socket = net.createConnection(this.socketPath);
+      const fail = (error) => { if (!settled) { settled = true; reject(new Error(`uni-browser daemon unavailable at ${this.socketPath}: ${error.message}`)); } socket.destroy(); };
+      socket.setTimeout(10_000, () => fail(new Error("request timed out")));
+      socket.once("error", fail);
+      socket.on("connect", () => socket.write(request));
+      socket.on("data", (chunk) => {
+        buffer += chunk.toString("utf8"); let newline;
+        while ((newline = buffer.indexOf("\n")) >= 0) {
+          const line = buffer.slice(0, newline); buffer = buffer.slice(newline + 1); if (!line.trim()) continue;
+          let response; try { response = JSON.parse(line); } catch { continue; }
+          if (response.id !== id || typeof response.success !== "boolean") continue;
+          settled = true; socket.end();
+          if (response.success) resolve(response.data ?? {}); else reject(new Error(response.error ?? `uni-browser rejected ${action}`));
+          return;
+        }
+      });
+    });
+  }
+}
+
+export class ProfileStore {
+  constructor(config = {}) {
+    this.root = config.root ?? join(homedir(), ".dsh", "dsh-uni-browser");
+    this.path = config.path ?? join(this.root, "profiles.json");
+    this.profilesRoot = config.profilesRoot ?? join(this.root, "profiles");
+    this.state = { version: 1, profiles: [] }; this.ready = this.#load();
+  }
+  async #load() { try { const parsed = JSON.parse(await readFile(this.path, "utf8")); if (parsed?.version === 1 && Array.isArray(parsed.profiles)) this.state = parsed; } catch (error) { if (error?.code !== "ENOENT") throw error; } }
+  async #save() { await mkdir(this.root, { recursive: true }); const temp = `${this.path}.${crypto.randomUUID()}.tmp`; await writeFile(temp, `${JSON.stringify(this.state, null, 2)}\n`, { mode: 0o600 }); await rename(temp, this.path); await chmod(this.path, 0o600); }
+  async list() { await this.ready; return this.state.profiles.map((profile) => ({ ...profile })); }
+  async create({ name, engine = "camoufox", headless = false }) {
+    await this.ready; const id = safeId(name); if (!id) throw new Error("profile name must contain letters or numbers");
+    if (!["camoufox", "chromium"].includes(engine)) throw new Error("engine must be camoufox or chromium");
+    if (this.state.profiles.some((profile) => profile.id === id)) throw new Error(`profile ${id} already exists`);
+    const profile = { id, name: String(name).trim(), engine, headless: Boolean(headless), session: `dsh-${id}`, createdAt: Date.now() };
+    this.state.profiles.push(profile); await this.#save(); return { ...profile };
+  }
+  async get(id) { await this.ready; const profile = this.state.profiles.find((item) => item.id === safeId(id)); if (!profile) throw new Error(`unknown browser profile: ${id}`); return profile; }
+  profileDir(profile) { return join(this.profilesRoot, profile.id); }
+  async forget(id) { await this.ready; const profile = await this.get(id); await rm(this.profileDir(profile), { recursive: true, force: true }); this.state.profiles = this.state.profiles.filter((item) => item.id !== profile.id); await this.#save(); return profile; }
+}
+
+export class DshUniBrowser {
+  constructor(config = {}) { this.client = config.client ?? new UniBrowserClient(config); this.store = config.store ?? new ProfileStore(config); }
+  async health() { const data = await this.client.call("daemon.ping"); return { online: Boolean(data.pong), socketPath: this.client.socketPath }; }
+  async profiles() {
+    const profiles = await this.store.list(); let active = new Set(); let online = false;
+    try { const data = await this.client.call("session.list"); active = new Set((data.sessions ?? []).map(String)); online = true; } catch {}
+    return profiles.map((profile) => ({ ...profile, active: active.has(profile.session), daemonOnline: online }));
+  }
+  async create(input) { return this.store.create(input); }
+  async open(id) { const profile = await this.store.get(id); await mkdir(this.store.profileDir(profile), { recursive: true }); const data = await this.client.call("session.create", profile.session, { engine: profile.engine, headless: profile.headless, user_data_dir: this.store.profileDir(profile), audit: true }); return { profile, data }; }
+  async close(id) { const profile = await this.store.get(id); const data = await this.client.call("session.close", profile.session, { purge: false }); return { profile, data }; }
+  async forget(id, confirm) { if (confirm !== true) throw new Error("forgetting a profile permanently deletes its login state; pass confirm: true"); const profile = await this.store.get(id); try { await this.client.call("session.close", profile.session, { purge: false }); } catch {} return this.store.forget(profile.id); }
+  async action(id, action, params = {}) { const profile = await this.store.get(id); return this.client.call(action, profile.session, params); }
+}
+
+const profileOutput = { schema: { type: "object", additionalProperties: false, properties: { id: { type: "string", required: true }, name: { type: "string", required: true }, engine: { type: "string", required: true }, session: { type: "string", required: true } } }, render: (_args, value) => [{ type: "text", text: `${value.name} (${value.engine})` }] };
+
+export function apply(ctx, config) {
+  const browser = new DshUniBrowser(config); ctx.provide("dshUniBrowser", browser);
+  ctx.connection.rpc.handle("/dsh-uni-browser", async (endpoint, payload) => {
+    const args = payload?.args ?? {};
+    if (endpoint === "health") return { ok: true, value: await browser.health() };
+    if (endpoint === "profiles") return { ok: true, value: { profiles: await browser.profiles() } };
+    if (endpoint === "create") return { ok: true, value: await browser.create(args) };
+    if (endpoint === "open") return { ok: true, value: await browser.open(args.id) };
+    if (endpoint === "close") return { ok: true, value: await browser.close(args.id) };
+    if (endpoint === "forget") return { ok: true, value: await browser.forget(args.id, args.confirm) };
+    throw new Error(`unknown dsh-uni-browser endpoint: ${endpoint}`);
+  }, { authority: "trusted-host" });
+  ctx.tools.register(defineTool({ name: "uni_browser_profiles", description: "List registered persistent uni-browser profiles. Use a profile id explicitly before browser actions.", parameters: {}, output: { schema: { type: "array", items: { type: "object" } }, render: (_args, value) => [{ type: "text", text: JSON.stringify(value) }] }, async execute() { return browser.profiles(); } }));
+  ctx.tools.register(defineTool({ name: "uni_browser_profile_create", description: "Register a named persistent browser profile. The user logs in manually after opening it; no passwords or cookies are supplied to this tool.", parameters: { name: { type: "string", required: true }, engine: { type: "string", required: false, description: "camoufox or chromium; defaults to camoufox." }, headless: { type: "boolean", required: false, description: "Use false when a human must log in visibly." } }, output: profileOutput, async execute(args) { return browser.create(args); } }));
+  ctx.tools.register(defineTool({ name: "uni_browser_open", description: "Start a registered browser profile and restore its local login state. Use a headed profile for human login or approval flows.", parameters: { profile: { type: "string", required: true } }, output: { schema: { type: "object" }, render: (_args, value) => [{ type: "text", text: `Opened ${value.profile.name}` }] }, async execute(args) { return browser.open(args.profile); } }));
+  ctx.tools.register(defineTool({ name: "uni_browser_close", description: "Stop a browser profile without deleting its cookies or other persistent login state.", parameters: { profile: { type: "string", required: true } }, output: { schema: { type: "object" }, render: (_args, value) => [{ type: "text", text: `Stopped ${value.profile.name}; profile data remains.` }] }, async execute(args) { return browser.close(args.profile); } }));
+  ctx.tools.register(defineTool({ name: "uni_browser_forget", description: "Permanently delete a browser profile and all of its local login state. Use only after the user explicitly asks to forget it.", parameters: { profile: { type: "string", required: true }, confirm: { type: "boolean", required: true } }, output: profileOutput, async execute(args) { return browser.forget(args.profile, args.confirm); } }));
+  for (const [name, action, parameters, description] of [
+    ["uni_browser_navigate", "page.navigate", { profile: { type: "string", required: true }, url: { type: "string", required: true } }, "Navigate an open browser profile to a URL."],
+    ["uni_browser_snapshot", "page.snapshot", { profile: { type: "string", required: true } }, "Read the accessibility snapshot of an open browser profile."],
+    ["uni_browser_click", "page.click", { profile: { type: "string", required: true }, selector: { type: "string", required: true }, humanized: { type: "boolean", required: false } }, "Click a CSS selector in an open browser profile."],
+    ["uni_browser_type", "page.type", { profile: { type: "string", required: true }, selector: { type: "string", required: true }, text: { type: "string", required: true }, humanized: { type: "boolean", required: false } }, "Type text into a CSS selector in an open browser profile."],
+    ["uni_browser_press", "page.press", { profile: { type: "string", required: true }, key: { type: "string", required: true } }, "Press a key in an open browser profile."]
+  ]) ctx.tools.register(defineTool({ name, description, parameters, output: { schema: { type: "object" }, render: (_args, value) => [{ type: "text", text: JSON.stringify(value) }] }, async execute(args) { const { profile, ...params } = args; return browser.action(profile, action, params); } }));
+}

package/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "dsh-uni-browser",
+  "version": "0.1.0-rc.0",
+  "description": "Persistent, auditable uni-browser profiles for DeepSeek Harness.",
+  "type": "module",
+  "main": "./lib/index.js",
+  "exports": { ".": "./lib/index.js", "./client": "./lib/client.js", "./cordis.patch.yml": "./cordis.patch.yml", "./package.json": "./package.json" },
+  "dsh": { "client": { "inject": ["@deepseek-ai/dsh-client-runtime", "@deepseek-ai/dsh-client-ui-settings"], "platform": "web" }, "bundle": { "patch": "./cordis.patch.yml" } },
+  "files": ["lib/", "docs/", "README.md", "LICENSE", "cordis.patch.yml"],
+  "scripts": { "check": "node --check lib/index.js && node --check lib/client.js && npm pack --dry-run", "test": "node --test test/**/*.test.mjs" },
+  "keywords": ["deepseek-harness", "dsh", "browser", "camoufox", "chromium", "uni-browser"],
+  "author": "Xiang Bai",
+  "license": "MIT",
+  "repository": { "type": "git", "url": "git+https://github.com/baixianger/dsh-uni-browser.git" },
+  "homepage": "https://github.com/baixianger/dsh-uni-browser#readme",
+  "engines": { "node": ">=22" },
+  "publishConfig": { "access": "public", "tag": "next" },
+  "peerDependencies": { "@deepseek-ai/dsh-tools": ">=0.1.0-rc.5", "react": "^18.2.0" },
+  "devDependencies": { "@deepseek-ai/dsh-tools": "^0.1.0-rc.7" }
+}