deja-browser 0.1.1__tar.gz

deja_browser-0.1.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 deja-browser authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

deja_browser-0.1.1/PKG-INFO

@@ -0,0 +1,244 @@
+Metadata-Version: 2.4
+Name: deja-browser
+Version: 0.1.1
+Summary: The agent browser that remembers: a separate Chromium profile your AI agent drives over CDP, with site recipes so the second visit skips reading the page.
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/drpwchen/deja-browser
+Project-URL: Changelog, https://github.com/drpwchen/deja-browser/blob/main/CHANGELOG.md
+Project-URL: Issues, https://github.com/drpwchen/deja-browser/issues
+Keywords: browser-automation,cdp,ai-agent,claude-code,playwright,captcha
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Internet :: WWW/HTTP :: Browsers
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: playwright>=1.45
+Provides-Extra: stealth
+Requires-Dist: patchright; extra == "stealth"
+Provides-Extra: keyring
+Requires-Dist: keyring; extra == "keyring"
+Provides-Extra: audio
+Requires-Dist: faster-whisper; extra == "audio"
+Requires-Dist: av<19; extra == "audio"
+Provides-Extra: ocr
+Requires-Dist: ddddocr; extra == "ocr"
+Provides-Extra: dev
+Requires-Dist: pytest; extra == "dev"
+Dynamic: license-file
+
+# deja-browser
+
+*The agent browser that remembers.* (Formerly edge-recipes.)
+
+**A browser for your AI agent that is not your browser.** A separate Chromium profile your agent
+drives over CDP — with no telemetry, no extension in your everyday browser, and site *recipes*
+so the second visit to a site does not need to read the page at all.
+
+Works with any agent that can run shell commands (Claude Code, Codex CLI, Gemini CLI, Cursor,
+Aider, …) and from plain Python.
+
+> **Let your agent install it.** Tell it: *"Read
+> https://github.com/drpwchen/deja-browser/blob/main/AGENTS.md and set this up with me."* It will
+> ask you the few choices that matter, have you log in to your sites by hand, and run a smoke test.
+
+> **Status: early release (0.1).** Tested on Windows 11 (Edge), macOS on Apple Silicon (Chrome)
+> and Linux (headless Chromium, in the egress test). Feedback and recipes-in-the-wild welcome.
+
+## Why
+
+Browser-extension bridges for agents put an extension with full debugger access into the browser
+where you are logged in to everything, and some of them phone home with no way to turn it off.
+Browsers have also stopped letting you fence such extensions away from chosen sites. deja-browser
+takes the other route:
+
+- **Separation instead of a block list.** The agent gets its own profile. You log in there only to
+  the sites it should use. Your mail, bank and broker are simply not logged in.
+- **No telemetry, tested.** The tool makes no outbound connection of its own.
+  [`tests/egress/run.sh`](tests/egress/run.sh) runs every action and a full recipe cycle inside a
+  network namespace with only loopback, traces every `connect()` of the tool's processes, and
+  fails on anything that is not `127.0.0.1` (its `SELFTEST=1` mode proves the check catches a
+  deliberate connection). The only outbound features are ones you switch on: ntfy notifications
+  and the opt-in hCaptcha solver.
+- **No passwords in the browser.** On launch the profile's password, card and address autofill is
+  turned off, and a password-manager extension installed in it triggers a warning. Secrets the
+  agent may use stay in your OS keyring or password-manager CLI and are only named in recipes.
+- **Cheap to read.** Snapshots can be cut to one subtree, to interactive elements, or to lines
+  matching a word; screenshots and PDFs come back as file paths, never as inline images.
+- **Learn once, replay.** The first visit finds the JSON endpoint or the form; the recipe replays
+  it later, outside the browser when cookies are enough.
+
+## What it does
+
+- **Dedicated browser profile.** Drives any Chromium browser (Edge, Chrome, Chromium, Brave —
+  auto-detected) over CDP on `127.0.0.1` only, with its own user-data dir. Your everyday browser
+  profile is never touched. Kimi-WebBridge-compatible action names and return shapes, so scripts
+  written for that bridge port over.
+- **Named sessions.** Every task names a session; its tabs are tracked across processes and
+  `close_session` closes only those.
+- **API discovery.** `network_capture` records the requests one action triggers (bodies to files,
+  credential headers redacted) — the raw material for a recipe.
+- **Recipes with a tier ladder** (cheapest first, falls through on failure, records what worked):
+  - `http` — plain HTTP outside the browser, with cookies read live from the browser (never stored)
+  - `page` — `fetch()` inside a tab on the site (native cookies, Cloudflare clearance, CSRF)
+  - `script` — the recipe's own JavaScript in the page (DOM read / form fill)
+- **Shape checks.** Every response is compared with the JSON shape recorded at verify time; a
+  mismatch is reported as *stale*, never returned as data.
+- **Write guard.** Recipes with side effects (`"writes": true`) only run with `--allow-write`.
+- **Secrets by name.** Recipes reference `{secret:NAME}`; values are resolved in-process and are
+  never printed or returned, and never typed into a refused host.
+- **CAPTCHA gate.** Waits for Turnstile / Cloudflare to clear, then tries one trusted checkbox
+  click. Local solvers (reCAPTCHA audio via `faster-whisper`, text CAPTCHAs via `ddddocr`) run only
+  if you install those extras; the hCaptcha solver only if you enable it. Otherwise it notifies you.
+- **Guard rails.** `navigate` and recipes refuse mail, account sign-in, banking, brokerage and
+  payment hosts (built-in list, extendable); recipes also refuse ticketing / rail-booking hosts by
+  default. These stop accidents, not attackers — see *Safety model*.
+
+## Options at a glance
+
+| | Options | Notes |
+|---|---|---|
+| OS | Windows, macOS, Linux | Linux tested headless only |
+| Browser | Edge, Chrome, Chromium, Brave, any Chromium (`[browser] executable`) | no Firefox / Safari (no CDP) |
+| Driver | `patchright` (extra `stealth`, used when installed), `playwright` | patchright passes more bot checks |
+| Secrets | `keyring` (default), `command`, `env`, `python` | `command` runs 1Password `op`, Bitwarden `bw`, macOS `security`, `pass`, … |
+| Notifications | ntfy URL, any command, stderr (default) | for "a human is needed" |
+| CAPTCHA extras | `audio` (local), `ocr` (local), hCaptcha solver (cloud, opt-in) | none installed by default |
+| Agents | anything with a shell; Agent Skills folder in `skills/deja-browser/` | Python API: `from deja_browser.browser import wb` |
+
+## Safety model
+
+What protects you is **separation**: the agent profile is never logged in to mail, banking or
+brokerage, and stores no passwords. The refused-host list is a guard rail: it stops an agent from
+navigating there by mistake and keeps stored secrets from being typed into those sites, but a page
+script can still redirect the tab, and an agent with shell access can edit your config. Treat it
+as a seat belt, not a lock.
+
+Password managers: do not install their extension in the agent profile — while unlocked it can
+fill any saved password for whatever is driving the page. To let the agent log in to a few
+low-risk sites by itself, give it a dedicated vault through the password manager's CLI
+(`[secrets] backend = "command"`, see `config.example.toml`). 1Password service accounts can be
+limited to one vault; an unlocked Bitwarden CLI can read the whole vault.
+
+Two things no tool can change: the browser vendor's own services (e.g. Safe Browsing / SmartScreen
+URL checks) still apply to the agent profile, and whatever page content your agent reads goes to
+its model provider. Keep sensitive pages (health records, personal data) out of agent sessions.
+
+## Install
+
+Requires Python ≥ 3.11 and a Chromium-based browser.
+
+```sh
+pip install "deja-browser[stealth,keyring]"   # recommended: patchright driver + OS keyring secrets
+pip install "deja-browser[audio,ocr]"         # reCAPTCHA audio (faster-whisper), text CAPTCHAs (ddddocr)
+pip install -e ".[dev]"                       # from a clone: core + pytest
+python -m playwright install-deps  # Linux only, if system libraries are missing
+```
+
+`deja-browser` uses your installed browser; it does not need `playwright install`.
+
+## Quick start
+
+```sh
+deja-cdp launch                    # start the dedicated browser; log in to sites by hand if needed
+deja-cdp navigate '{"url": "https://example.com"}' --session demo
+deja-cdp evaluate '{"code": "document.title"}' --session demo
+deja-cdp close_session '{}' --session demo
+
+deja-browser verify draft.json '{"q": "rust"}'   # try every tier, print shape + preview
+deja-browser save draft.json                     # only after a passing verify of this draft
+deja-browser run hn.algolia.com/search '{"q": "rust"}'
+deja-browser list
+deja-browser gate https://example.com/login      # open a URL, clear any challenge, report
+```
+
+From Python:
+
+```python
+from deja_browser.browser import wb
+wb("navigate", {"url": "https://example.com"}, session="task")
+wb("snapshot", {"max_chars": 4000}, session="task")
+wb("close_session", {}, session="task")
+```
+
+`deja-cdp --help` and `deja-browser --help` list every action and the full recipe format.
+
+## Recipe format (abridged)
+
+```json
+{
+  "version": 1,
+  "name": "search",
+  "description": "Hacker News full-text search (example)",
+  "entry_url": "https://hn.algolia.com/",
+  "params": [{"name": "q", "required": true}],
+  "request": {"method": "GET", "url": "https://hn.algolia.com/api/v1/search?query={q}"},
+  "pick": {"path": "hits", "fields": ["title", "url"], "limit": 20},
+  "writes": false
+}
+```
+
+No recipes ship with the package — you (or your agent) build them per site. Recipes are stored as `<recipes dir>/<host>/<name>.json` and addressed as `<host>/<name>`.
+
+## Configuration
+
+Optional. Copy `config.example.toml` to:
+
+| OS | Path |
+|---|---|
+| Windows | `%APPDATA%\deja-browser\config.toml` |
+| macOS | `~/Library/Application Support/deja-browser/config.toml` |
+| Linux | `~/.config/deja-browser/config.toml` |
+
+or point `DEJA_BROWSER_CONFIG` at a file. It covers the browser executable and profile, the
+recipes directory, extra denied hosts, the secret backend (`keyring` / `env` / `python`), and
+notifications (an ntfy URL or any command; default is stderr).
+
+## hCaptcha solver (opt-in, cloud)
+
+Off by default. When enabled, the CAPTCHA gate hands hCaptcha to
+[hcaptcha-challenger](https://github.com/QIN2DIM/hcaptcha-challenger), which asks Google Gemini to
+answer the challenge. **This sends the cropped challenge image to Google** under your own API key
+(not the page, not cookies). hcaptcha-challenger is GPL-3.0 and is not bundled — install it
+yourself:
+
+```sh
+pip install "hcaptcha-challenger @ git+https://github.com/QIN2DIM/hcaptcha-challenger@28ee79b"
+keyring set deja-browser GEMINI_API_KEY        # or your configured secret backend
+```
+
+```toml
+[captcha]
+hcaptcha_solver = "gemini"
+```
+
+Best effort: on the public demo the "drag the missing item into the grid" type passed 13/15, the
+hexagon shape-matching type 1/5 (small samples). Failures fall through to the human step.
+
+## Acceptable use
+
+This is a personal automation tool for sites and accounts you are entitled to use. Respect each
+site's terms of service and rate limits. Do not use it for ticket scalping, mass account
+creation, credential stuffing, or to defeat protections on systems you do not own. Ticket and
+rail-booking sites are refused by default: several jurisdictions criminalise automated ticket
+purchase (e.g. Taiwan's Railway Act art. 65). `[recipes] allow_ticket_hosts` can lift that; we
+recommend you don't, and the decision and its consequences are yours. The project
+does not integrate paid CAPTCHA-solving services and will not.
+
+## Tests
+
+```sh
+python -m pytest -q               # pure functions; no browser, no network
+sudo PY=$(which python) tests/egress/run.sh            # Linux: no outbound connection (needs strace)
+sudo PY=$(which python) SELFTEST=1 tests/egress/run.sh # must FAIL: proves the check catches one
+```
+
+## License
+
+MIT — see `LICENSE`. Optional dependencies keep their own licenses; GPL-licensed packages are
+never vendored into this repository.

deja_browser-0.1.1/README.md

@@ -0,0 +1,210 @@
+# deja-browser
+
+*The agent browser that remembers.* (Formerly edge-recipes.)
+
+**A browser for your AI agent that is not your browser.** A separate Chromium profile your agent
+drives over CDP — with no telemetry, no extension in your everyday browser, and site *recipes*
+so the second visit to a site does not need to read the page at all.
+
+Works with any agent that can run shell commands (Claude Code, Codex CLI, Gemini CLI, Cursor,
+Aider, …) and from plain Python.
+
+> **Let your agent install it.** Tell it: *"Read
+> https://github.com/drpwchen/deja-browser/blob/main/AGENTS.md and set this up with me."* It will
+> ask you the few choices that matter, have you log in to your sites by hand, and run a smoke test.
+
+> **Status: early release (0.1).** Tested on Windows 11 (Edge), macOS on Apple Silicon (Chrome)
+> and Linux (headless Chromium, in the egress test). Feedback and recipes-in-the-wild welcome.
+
+## Why
+
+Browser-extension bridges for agents put an extension with full debugger access into the browser
+where you are logged in to everything, and some of them phone home with no way to turn it off.
+Browsers have also stopped letting you fence such extensions away from chosen sites. deja-browser
+takes the other route:
+
+- **Separation instead of a block list.** The agent gets its own profile. You log in there only to
+  the sites it should use. Your mail, bank and broker are simply not logged in.
+- **No telemetry, tested.** The tool makes no outbound connection of its own.
+  [`tests/egress/run.sh`](tests/egress/run.sh) runs every action and a full recipe cycle inside a
+  network namespace with only loopback, traces every `connect()` of the tool's processes, and
+  fails on anything that is not `127.0.0.1` (its `SELFTEST=1` mode proves the check catches a
+  deliberate connection). The only outbound features are ones you switch on: ntfy notifications
+  and the opt-in hCaptcha solver.
+- **No passwords in the browser.** On launch the profile's password, card and address autofill is
+  turned off, and a password-manager extension installed in it triggers a warning. Secrets the
+  agent may use stay in your OS keyring or password-manager CLI and are only named in recipes.
+- **Cheap to read.** Snapshots can be cut to one subtree, to interactive elements, or to lines
+  matching a word; screenshots and PDFs come back as file paths, never as inline images.
+- **Learn once, replay.** The first visit finds the JSON endpoint or the form; the recipe replays
+  it later, outside the browser when cookies are enough.
+
+## What it does
+
+- **Dedicated browser profile.** Drives any Chromium browser (Edge, Chrome, Chromium, Brave —
+  auto-detected) over CDP on `127.0.0.1` only, with its own user-data dir. Your everyday browser
+  profile is never touched. Kimi-WebBridge-compatible action names and return shapes, so scripts
+  written for that bridge port over.
+- **Named sessions.** Every task names a session; its tabs are tracked across processes and
+  `close_session` closes only those.
+- **API discovery.** `network_capture` records the requests one action triggers (bodies to files,
+  credential headers redacted) — the raw material for a recipe.
+- **Recipes with a tier ladder** (cheapest first, falls through on failure, records what worked):
+  - `http` — plain HTTP outside the browser, with cookies read live from the browser (never stored)
+  - `page` — `fetch()` inside a tab on the site (native cookies, Cloudflare clearance, CSRF)
+  - `script` — the recipe's own JavaScript in the page (DOM read / form fill)
+- **Shape checks.** Every response is compared with the JSON shape recorded at verify time; a
+  mismatch is reported as *stale*, never returned as data.
+- **Write guard.** Recipes with side effects (`"writes": true`) only run with `--allow-write`.
+- **Secrets by name.** Recipes reference `{secret:NAME}`; values are resolved in-process and are
+  never printed or returned, and never typed into a refused host.
+- **CAPTCHA gate.** Waits for Turnstile / Cloudflare to clear, then tries one trusted checkbox
+  click. Local solvers (reCAPTCHA audio via `faster-whisper`, text CAPTCHAs via `ddddocr`) run only
+  if you install those extras; the hCaptcha solver only if you enable it. Otherwise it notifies you.
+- **Guard rails.** `navigate` and recipes refuse mail, account sign-in, banking, brokerage and
+  payment hosts (built-in list, extendable); recipes also refuse ticketing / rail-booking hosts by
+  default. These stop accidents, not attackers — see *Safety model*.
+
+## Options at a glance
+
+| | Options | Notes |
+|---|---|---|
+| OS | Windows, macOS, Linux | Linux tested headless only |
+| Browser | Edge, Chrome, Chromium, Brave, any Chromium (`[browser] executable`) | no Firefox / Safari (no CDP) |
+| Driver | `patchright` (extra `stealth`, used when installed), `playwright` | patchright passes more bot checks |
+| Secrets | `keyring` (default), `command`, `env`, `python` | `command` runs 1Password `op`, Bitwarden `bw`, macOS `security`, `pass`, … |
+| Notifications | ntfy URL, any command, stderr (default) | for "a human is needed" |
+| CAPTCHA extras | `audio` (local), `ocr` (local), hCaptcha solver (cloud, opt-in) | none installed by default |
+| Agents | anything with a shell; Agent Skills folder in `skills/deja-browser/` | Python API: `from deja_browser.browser import wb` |
+
+## Safety model
+
+What protects you is **separation**: the agent profile is never logged in to mail, banking or
+brokerage, and stores no passwords. The refused-host list is a guard rail: it stops an agent from
+navigating there by mistake and keeps stored secrets from being typed into those sites, but a page
+script can still redirect the tab, and an agent with shell access can edit your config. Treat it
+as a seat belt, not a lock.
+
+Password managers: do not install their extension in the agent profile — while unlocked it can
+fill any saved password for whatever is driving the page. To let the agent log in to a few
+low-risk sites by itself, give it a dedicated vault through the password manager's CLI
+(`[secrets] backend = "command"`, see `config.example.toml`). 1Password service accounts can be
+limited to one vault; an unlocked Bitwarden CLI can read the whole vault.
+
+Two things no tool can change: the browser vendor's own services (e.g. Safe Browsing / SmartScreen
+URL checks) still apply to the agent profile, and whatever page content your agent reads goes to
+its model provider. Keep sensitive pages (health records, personal data) out of agent sessions.
+
+## Install
+
+Requires Python ≥ 3.11 and a Chromium-based browser.
+
+```sh
+pip install "deja-browser[stealth,keyring]"   # recommended: patchright driver + OS keyring secrets
+pip install "deja-browser[audio,ocr]"         # reCAPTCHA audio (faster-whisper), text CAPTCHAs (ddddocr)
+pip install -e ".[dev]"                       # from a clone: core + pytest
+python -m playwright install-deps  # Linux only, if system libraries are missing
+```
+
+`deja-browser` uses your installed browser; it does not need `playwright install`.
+
+## Quick start
+
+```sh
+deja-cdp launch                    # start the dedicated browser; log in to sites by hand if needed
+deja-cdp navigate '{"url": "https://example.com"}' --session demo
+deja-cdp evaluate '{"code": "document.title"}' --session demo
+deja-cdp close_session '{}' --session demo
+
+deja-browser verify draft.json '{"q": "rust"}'   # try every tier, print shape + preview
+deja-browser save draft.json                     # only after a passing verify of this draft
+deja-browser run hn.algolia.com/search '{"q": "rust"}'
+deja-browser list
+deja-browser gate https://example.com/login      # open a URL, clear any challenge, report
+```
+
+From Python:
+
+```python
+from deja_browser.browser import wb
+wb("navigate", {"url": "https://example.com"}, session="task")
+wb("snapshot", {"max_chars": 4000}, session="task")
+wb("close_session", {}, session="task")
+```
+
+`deja-cdp --help` and `deja-browser --help` list every action and the full recipe format.
+
+## Recipe format (abridged)
+
+```json
+{
+  "version": 1,
+  "name": "search",
+  "description": "Hacker News full-text search (example)",
+  "entry_url": "https://hn.algolia.com/",
+  "params": [{"name": "q", "required": true}],
+  "request": {"method": "GET", "url": "https://hn.algolia.com/api/v1/search?query={q}"},
+  "pick": {"path": "hits", "fields": ["title", "url"], "limit": 20},
+  "writes": false
+}
+```
+
+No recipes ship with the package — you (or your agent) build them per site. Recipes are stored as `<recipes dir>/<host>/<name>.json` and addressed as `<host>/<name>`.
+
+## Configuration
+
+Optional. Copy `config.example.toml` to:
+
+| OS | Path |
+|---|---|
+| Windows | `%APPDATA%\deja-browser\config.toml` |
+| macOS | `~/Library/Application Support/deja-browser/config.toml` |
+| Linux | `~/.config/deja-browser/config.toml` |
+
+or point `DEJA_BROWSER_CONFIG` at a file. It covers the browser executable and profile, the
+recipes directory, extra denied hosts, the secret backend (`keyring` / `env` / `python`), and
+notifications (an ntfy URL or any command; default is stderr).
+
+## hCaptcha solver (opt-in, cloud)
+
+Off by default. When enabled, the CAPTCHA gate hands hCaptcha to
+[hcaptcha-challenger](https://github.com/QIN2DIM/hcaptcha-challenger), which asks Google Gemini to
+answer the challenge. **This sends the cropped challenge image to Google** under your own API key
+(not the page, not cookies). hcaptcha-challenger is GPL-3.0 and is not bundled — install it
+yourself:
+
+```sh
+pip install "hcaptcha-challenger @ git+https://github.com/QIN2DIM/hcaptcha-challenger@28ee79b"
+keyring set deja-browser GEMINI_API_KEY        # or your configured secret backend
+```
+
+```toml
+[captcha]
+hcaptcha_solver = "gemini"
+```
+
+Best effort: on the public demo the "drag the missing item into the grid" type passed 13/15, the
+hexagon shape-matching type 1/5 (small samples). Failures fall through to the human step.
+
+## Acceptable use
+
+This is a personal automation tool for sites and accounts you are entitled to use. Respect each
+site's terms of service and rate limits. Do not use it for ticket scalping, mass account
+creation, credential stuffing, or to defeat protections on systems you do not own. Ticket and
+rail-booking sites are refused by default: several jurisdictions criminalise automated ticket
+purchase (e.g. Taiwan's Railway Act art. 65). `[recipes] allow_ticket_hosts` can lift that; we
+recommend you don't, and the decision and its consequences are yours. The project
+does not integrate paid CAPTCHA-solving services and will not.
+
+## Tests
+
+```sh
+python -m pytest -q               # pure functions; no browser, no network
+sudo PY=$(which python) tests/egress/run.sh            # Linux: no outbound connection (needs strace)
+sudo PY=$(which python) SELFTEST=1 tests/egress/run.sh # must FAIL: proves the check catches one
+```
+
+## License
+
+MIT — see `LICENSE`. Optional dependencies keep their own licenses; GPL-licensed packages are
+never vendored into this repository.

deja_browser-0.1.1/pyproject.toml

@@ -0,0 +1,49 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "deja-browser"
+version = "0.1.1"
+description = "The agent browser that remembers: a separate Chromium profile your AI agent drives over CDP, with site recipes so the second visit skips reading the page."
+readme = "README.md"
+keywords = ["browser-automation", "cdp", "ai-agent", "claude-code", "playwright", "captcha"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Operating System :: Microsoft :: Windows",
+    "Operating System :: MacOS",
+    "Operating System :: POSIX :: Linux",
+    "Programming Language :: Python :: 3",
+    "Topic :: Internet :: WWW/HTTP :: Browsers",
+]
+license = "MIT"
+requires-python = ">=3.11"
+dependencies = ["playwright>=1.45"]
+
+[project.urls]
+Homepage = "https://github.com/drpwchen/deja-browser"
+Changelog = "https://github.com/drpwchen/deja-browser/blob/main/CHANGELOG.md"
+Issues = "https://github.com/drpwchen/deja-browser/issues"
+
+[project.optional-dependencies]
+stealth = ["patchright"]          # default driver when installed (hides Runtime.enable)
+keyring = ["keyring"]             # default secret backend
+audio = ["faster-whisper", "av<19"]   # reCAPTCHA audio; faster-whisper 1.2.1 passes av.open(metadata_errors=), removed in av 19
+ocr = ["ddddocr"]                 # text-image CAPTCHAs
+# hCaptcha (GPL-3.0, optional, installed by the user). PyPI 0.19.0 fails the drag challenges;
+# the tested build is git 28ee79b. Not installable from PyPI as an extra until upstream releases.
+# pip install "hcaptcha-challenger @ git+https://github.com/QIN2DIM/hcaptcha-challenger@28ee79b"
+dev = ["pytest"]
+
+[project.scripts]
+deja-browser = "deja_browser.recipe:main"
+deja-cdp = "deja_browser.browser:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["src"]

deja_browser-0.1.1/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

deja_browser-0.1.1/src/deja_browser/__init__.py

@@ -0,0 +1,2 @@
+"""deja-browser: learn a site's data path once in a real browser, replay it without reading the page."""
+__version__ = "0.1.1"