Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
218 lines
8.0 KiB
TypeScript
218 lines
8.0 KiB
TypeScript
import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
|
|
/**
|
|
* Browser plugin registration helpers. This file keeps registration lazy while
|
|
* advertising Browser tools, services, node-host commands, and audits.
|
|
*/
|
|
import type {
|
|
AnyAgentTool,
|
|
OpenClawPluginApi,
|
|
OpenClawPluginNodeHostCommand,
|
|
OpenClawPluginSecurityAuditCollector,
|
|
OpenClawPluginService,
|
|
OpenClawPluginToolContext,
|
|
OpenClawPluginToolFactory,
|
|
} from "openclaw/plugin-sdk/plugin-entry";
|
|
import {
|
|
BROWSER_REQUEST_GATEWAY_METHOD,
|
|
BROWSER_REQUEST_GATEWAY_SCOPE,
|
|
} from "./src/browser-gateway-contract.js";
|
|
import { BrowserToolSchema } from "./src/browser-tool.schema.js";
|
|
|
|
const EAGER_BROWSER_CONTROL_SERVICE_ENV = "OPENCLAW_EAGER_BROWSER_CONTROL_SERVER";
|
|
|
|
const loadBrowserRegistrationRuntimeModule = createLazyRuntimeModule(
|
|
() => import("./register.runtime.js"),
|
|
);
|
|
|
|
function isTruthyEnvValue(value: string | undefined): boolean {
|
|
return /^(?:1|true|yes|on)$/iu.test(value?.trim() ?? "");
|
|
}
|
|
|
|
function deriveChatTypeFromSessionKey(
|
|
sessionKey: string | undefined,
|
|
): "direct" | "group" | "channel" | undefined {
|
|
const tokens = new Set(sessionKey?.toLowerCase().split(":").filter(Boolean) ?? []);
|
|
if (tokens.has("group")) {
|
|
return "group";
|
|
}
|
|
if (tokens.has("channel")) {
|
|
return "channel";
|
|
}
|
|
if (tokens.has("direct") || tokens.has("dm")) {
|
|
return "direct";
|
|
}
|
|
return undefined;
|
|
}
|
|
|
|
const BROWSER_CLI_DESCRIPTOR = {
|
|
name: "browser",
|
|
description: "Manage OpenClaw's dedicated browser (Chrome/Chromium)",
|
|
hasSubcommands: true,
|
|
};
|
|
|
|
function createLazyBrowserTool(opts?: {
|
|
sandboxBridgeUrl?: string;
|
|
allowHostControl?: boolean;
|
|
agentSessionKey?: string;
|
|
agentDir?: string;
|
|
workspaceDir?: string;
|
|
activeModel?: {
|
|
provider?: string;
|
|
model?: string;
|
|
};
|
|
mediaScope?: {
|
|
sessionKey?: string;
|
|
channel?: string;
|
|
chatType?: string;
|
|
};
|
|
}): AnyAgentTool {
|
|
const targetDefault = opts?.sandboxBridgeUrl ? "sandbox" : "host";
|
|
const hostHint =
|
|
opts?.allowHostControl === false ? "Host target blocked by policy." : "Host target allowed.";
|
|
return {
|
|
label: "Browser",
|
|
name: "browser",
|
|
description: [
|
|
"Control the browser via OpenClaw's browser control server (status/start/stop/profiles/tabs/open/snapshot/screenshot/actions).",
|
|
"Browser choice: omit profile by default for the isolated OpenClaw-managed browser (`openclaw`).",
|
|
'For the logged-in user browser, use profile="user". A supported Chromium-based browser (v144+) must be running on the selected host or browser node. Use only when existing logins/cookies matter and the user is present.',
|
|
'For profile="user" or other existing-session profiles, omit timeoutMs on act:type, evaluate, hover, scrollIntoView, drag, select, and fill; that driver rejects per-call timeout overrides for those actions.',
|
|
'When a node-hosted browser proxy is available, the tool may auto-route to it. Pin a node with node=<id|name> or target="node".',
|
|
"When using refs from snapshot (e.g. e12), keep the same tab: prefer passing targetId from the snapshot response into subsequent actions (act/click/type/etc). For tab operations, targetId also accepts tabId handles (t1) and labels from action=tabs.",
|
|
"For multi-step browser work, login checks, stale refs, duplicate tabs, or Google Meet flows, use the bundled browser-automation skill when it is available.",
|
|
'For stable, self-resolving refs across calls, use snapshot with refs="aria" (Playwright aria-ref ids). Default refs="role" are role+name-based.',
|
|
"Use snapshot+act for UI automation. Avoid act:wait by default; use only in exceptional cases when no reliable UI state exists.",
|
|
`target selects browser location (sandbox|host|node). Default: ${targetDefault}.`,
|
|
hostHint,
|
|
].join(" "),
|
|
parameters: BrowserToolSchema,
|
|
execute: async (toolCallId, args, signal, onUpdate) => {
|
|
const { createBrowserTool } = await loadBrowserRegistrationRuntimeModule();
|
|
const tool = createBrowserTool(opts);
|
|
return await tool.execute(toolCallId, args, signal, onUpdate);
|
|
},
|
|
};
|
|
}
|
|
|
|
function createBrowserToolOptions(ctx: OpenClawPluginToolContext): {
|
|
sandboxBridgeUrl?: string;
|
|
allowHostControl?: boolean;
|
|
agentSessionKey?: string;
|
|
agentDir?: string;
|
|
workspaceDir?: string;
|
|
activeModel?: {
|
|
provider?: string;
|
|
model?: string;
|
|
};
|
|
mediaScope?: {
|
|
sessionKey?: string;
|
|
channel?: string;
|
|
chatType?: string;
|
|
};
|
|
} {
|
|
const mediaChannel = ctx.deliveryContext?.channel ?? ctx.messageChannel;
|
|
const mediaChatType = deriveChatTypeFromSessionKey(ctx.sessionKey);
|
|
return {
|
|
...(ctx.browser?.sandboxBridgeUrl ? { sandboxBridgeUrl: ctx.browser.sandboxBridgeUrl } : {}),
|
|
...(ctx.browser?.allowHostControl !== undefined
|
|
? { allowHostControl: ctx.browser.allowHostControl }
|
|
: {}),
|
|
...(ctx.sessionKey ? { agentSessionKey: ctx.sessionKey } : {}),
|
|
...(ctx.agentDir ? { agentDir: ctx.agentDir } : {}),
|
|
...(ctx.workspaceDir ? { workspaceDir: ctx.workspaceDir } : {}),
|
|
...(ctx.activeModel?.provider || ctx.activeModel?.modelId
|
|
? {
|
|
activeModel: {
|
|
provider: ctx.activeModel.provider,
|
|
model: ctx.activeModel.modelId,
|
|
},
|
|
}
|
|
: {}),
|
|
...(ctx.sessionKey || mediaChannel
|
|
? {
|
|
mediaScope: {
|
|
...(ctx.sessionKey ? { sessionKey: ctx.sessionKey } : {}),
|
|
...(mediaChannel ? { channel: mediaChannel } : {}),
|
|
...(mediaChatType ? { chatType: mediaChatType } : {}),
|
|
},
|
|
}
|
|
: {}),
|
|
};
|
|
}
|
|
|
|
/** Browser plugin reload policy. */
|
|
export const browserPluginReload = { restartPrefixes: ["browser"] };
|
|
|
|
/** Node-host command descriptors exposed by the Browser plugin. */
|
|
export const browserPluginNodeHostCommands: OpenClawPluginNodeHostCommand[] = [
|
|
{
|
|
command: "browser.proxy",
|
|
cap: "browser",
|
|
handle: async (paramsJSON) => {
|
|
const { runBrowserProxyCommand } = await loadBrowserRegistrationRuntimeModule();
|
|
return await runBrowserProxyCommand(paramsJSON);
|
|
},
|
|
},
|
|
];
|
|
|
|
/** Security audit collectors contributed by the Browser plugin. */
|
|
export const browserSecurityAuditCollectors: OpenClawPluginSecurityAuditCollector[] = [
|
|
async (ctx) => {
|
|
const { collectBrowserSecurityAuditFindings } = await loadBrowserRegistrationRuntimeModule();
|
|
return collectBrowserSecurityAuditFindings(ctx);
|
|
},
|
|
];
|
|
|
|
function createLazyBrowserPluginService(): OpenClawPluginService {
|
|
let service: OpenClawPluginService | null = null;
|
|
const loadService = async () => {
|
|
if (!service) {
|
|
const { createBrowserPluginService } = await loadBrowserRegistrationRuntimeModule();
|
|
service = createBrowserPluginService();
|
|
}
|
|
return service;
|
|
};
|
|
return {
|
|
id: "browser-control",
|
|
start: async (ctx) => {
|
|
if (!isTruthyEnvValue(process.env[EAGER_BROWSER_CONTROL_SERVICE_ENV])) {
|
|
return;
|
|
}
|
|
const loaded = await loadService();
|
|
await loaded.start(ctx);
|
|
},
|
|
stop: async (ctx) => {
|
|
if (!service) {
|
|
const { stopBrowserControlService } = await import("./src/control-service.js");
|
|
await stopBrowserControlService().catch(() => {});
|
|
return;
|
|
}
|
|
await service.stop?.(ctx);
|
|
},
|
|
};
|
|
}
|
|
|
|
/** Register Browser tool factories, CLI, gateway methods, services, and audits. */
|
|
export function registerBrowserPlugin(api: OpenClawPluginApi) {
|
|
api.registerTool(((ctx: OpenClawPluginToolContext) =>
|
|
createLazyBrowserTool(createBrowserToolOptions(ctx))) as OpenClawPluginToolFactory);
|
|
api.registerCli(
|
|
async ({ program }) => {
|
|
const { registerBrowserCli } = await import("./src/cli/browser-cli.js");
|
|
registerBrowserCli(program);
|
|
},
|
|
{ commands: ["browser"], descriptors: [BROWSER_CLI_DESCRIPTOR] },
|
|
);
|
|
api.registerGatewayMethod(
|
|
BROWSER_REQUEST_GATEWAY_METHOD,
|
|
async (opts) => {
|
|
const { handleBrowserGatewayRequest } = await loadBrowserRegistrationRuntimeModule();
|
|
return await handleBrowserGatewayRequest(opts);
|
|
},
|
|
{
|
|
scope: BROWSER_REQUEST_GATEWAY_SCOPE,
|
|
},
|
|
);
|
|
api.registerService(createLazyBrowserPluginService());
|
|
}
|