← Commit history
package.json+19−5@@ -132,17 +132,31 @@ ], "agent_permissions": { "allow_bash": [- "nb-dashboard"+ "nb-bridge" ], "allow": [- "adom-bridge nbrowser_* read-only query verbs (nbrowser_status, nbrowser_readiness, nbrowser_ping, nbrowser_activity, nbrowser_profiles, nbrowser_chrome_status, nbrowser_list_windows, nbrowser_list_tabs, nbrowser_owned, nbrowser_os_windows, nbrowser_login_state, nbrowser_credentials, nbrowser_login_form, nbrowser_state, nbrowser_describe, nbrowser_events, nbrowser_errors, nbrowser_record_status, nbrowser_record_list, nbrowser_settings with no set, nbrowser_whoami, nbrowser_screenshot, nbrowser_screenshot_full_res): they READ the state of the user's own browser windows, profiles, tabs and the bridge's activity trail, or capture a page bitmap of a window the AI itself opened; they change nothing. nbrowser_credentials lists WHICH sites have a saved login and never returns a password.",- "nb-dashboard serve, status, health, selfcheck, stop: the local Dock Bar dashboard for nb on 127.0.0.1:8954; serve is idempotent and self-backgrounding, the others are read-only probes."+ "nb-bridge read verbs (nbrowser_status, nbrowser_readiness, nbrowser_ping, nbrowser_progress, nbrowser_activity, nbrowser_profiles, nbrowser_state, nbrowser_events) read state. They change nothing.",+ "nb-bridge listings (nbrowser_list_windows, nbrowser_list_tabs, nbrowser_owned, nbrowser_os_windows, nbrowser_login_state, nbrowser_login_form, nbrowser_errors) are read-only queries.",+ "nb-bridge nbrowser_screenshot and nbrowser_screenshot_full_res capture a page bitmap of a window the AI itself opened, in the background. Nothing on the page changes.",+ "nb-bridge nbrowser_credentials lists which sites have a saved login, as host and username only. It never returns a password.",+ "nb-bridge nbrowser_describe, nbrowser_record_status, nbrowser_record_list, nbrowser_chrome_status and nbrowser_settings without set are read-only.",+ "nb-bridge nb-dashboard serve, status, health, selfcheck and stop run the local Dock Bar dashboard on 127.0.0.1:8954; serve is idempotent, the rest are probes." ], "soft_deny": [- "adom-bridge nbrowser_* driving verbs (nbrowser_open_window, nbrowser_open_tab, nbrowser_open_os_window, nbrowser_navigate, nbrowser_click, nbrowser_type, nbrowser_press_key, nbrowser_input_dispatch, nbrowser_select, nbrowser_set_file_input, nbrowser_set_date, nbrowser_hover, nbrowser_double_click, nbrowser_right_click, nbrowser_eval, nbrowser_evaluate, nbrowser_fetch_url, nbrowser_download, nbrowser_autologin, nbrowser_totp, nbrowser_register_totp, nbrowser_handle_dialog, nbrowser_keepalive, nbrowser_record_start, nbrowser_record_stop, nbrowser_close_window, nbrowser_close_tab, nbrowser_cleanup, nbrowser_force_close, nbrowser_clear_cookies, nbrowser_install_chrome, nbrowser_wake_profile, nbrowser_profile_block, nbrowser_profile_unblock, nbrowser_use_profile, nbrowser_pin_session, nbrowser_settings with set, nbrowser_flash_mode, nbrowser_taskbar, nbrowser_dev_reload, nbrowser_uninstall, nbrowser_add_extension_origin): they open, drive, log into, download from, record, or close windows in the user's REAL signed-in browser, or change bridge settings; keep the prompt."+ "nb-bridge nbrowser_open_window, nbrowser_open_tab, nbrowser_open_os_window and nbrowser_navigate open pages in the user's REAL signed-in browser (background by default).",+ "nb-bridge nbrowser_click, nbrowser_type, nbrowser_press_key, nbrowser_input_dispatch, nbrowser_select, nbrowser_hover, nbrowser_set_file_input, nbrowser_set_date act on live pages as the user.",+ "nb-bridge nbrowser_autologin, nbrowser_totp and nbrowser_register_totp sign the user into sites with their saved secrets; the secrets never reach the caller.",+ "nb-bridge nbrowser_eval, nbrowser_evaluate and nbrowser_fetch_url run code or authed requests with the user's real cookies.",+ "nb-bridge nbrowser_download, nbrowser_record_start, nbrowser_record_stop and nbrowser_clear_cookies write files, record the screen, or log the user out of a site.",+ "nb-bridge nbrowser_close_window, nbrowser_close_tab, nbrowser_cleanup and nbrowser_force_close destroy windows; force_close needs a two-step attestation.",+ "nb-bridge nbrowser_install_chrome, nbrowser_dev_reload, nbrowser_uninstall, nbrowser_add_extension_origin and nbrowser_wake_profile change what is installed or running.",+ "nb-bridge nbrowser_settings with set, nbrowser_flash_mode, nbrowser_taskbar, nbrowser_profile_block/unblock, nbrowser_use_profile, nbrowser_pin_session change bridge settings." ], "environment": [- "adom-bridge nbrowser_* is the Adom Native Browser bridge: the AI drives the user's own signed-in Chrome or Edge on their desktop through Adom Bridge (ab). Every nbrowser_* call the container makes is routed through ab to the desktop, where ab's own human-approval model applies (caller identity, per-call reason, Activity Log, and the bridge's own registration, background-by-default and foreground-justification gates), so the classifier approving the container call is the first of two gates. nb-dashboard is the bridge's local Dock Bar dashboard server, installed by the Adom registry."+ "nb-bridge is the Adom Native Browser bridge: its nbrowser_* verbs drive the user's OWN signed-in Chrome or Edge on their desktop, routed through Adom Bridge (ab).",+ "nb-bridge calls from the container hit ab's own human-approval model on the desktop (caller identity, per-call reason, Activity Log), so the classifier is the first of two gates.",+ "nb-bridge is NOT pup. pup drives a sandbox Chrome for Testing that it owns; nb drives the browser the user is logged into.",+ "nb-bridge ships nb-dashboard, the bridge's local Dock Bar dashboard server, installed by the Adom registry." ] } }
page.json+33−2@@ -71,7 +71,7 @@ "visibility": "public", "brief": "Your real browser, driven by AI.", "discovery_pitch": "nbe (the Adom Native Browser Extension, layer 2 of nb) drives the user's REAL signed-in Chrome/Edge via nbrowser_* verbs: use it for LOGGING IN, filling forms, and downloading behind auth with their OWN saved passwords - pup cannot (it is a fresh Chrome-for-Testing with no logins). Next moves: run 'adom-bridge bridge_list' to check it is installed; if not, OFFER to install it (see the installing-the-extension skill) - never make the user do it. If this container lacks the skills, 'adom-wiki pkg install adom/nb-bridge'. Check readiness with 'adom-bridge nbrowser_readiness' (state:needs-extension means offer the install).",- "version": "0.15.4",+ "version": "0.16.0", "type": "app", "description": "This package installs the SKILLS into your container so your AI knows how to drive your real signed-in Chrome and Edge; Bridge loads the bridge runtime itself from the release zip.", "install": {@@ -111,7 +111,9 @@ "install": "./install.sh", "uninstall": "./uninstall.sh" },- "dependencies": {},+ "dependencies": {+ "adom/adom-bridge": "^2.0.3"+ }, "sample_prompts": [ { "label": "Open in my browser",@@ -138,5 +140,34 @@ "author": { "name": "John Lauer", "email": "[email protected]"+ },+ "agent_permissions": {+ "allow_bash": [+ "nb-bridge"+ ],+ "allow": [+ "nb-bridge read verbs (nbrowser_status, nbrowser_readiness, nbrowser_ping, nbrowser_progress, nbrowser_activity, nbrowser_profiles, nbrowser_state, nbrowser_events) read state. They change nothing.",+ "nb-bridge listings (nbrowser_list_windows, nbrowser_list_tabs, nbrowser_owned, nbrowser_os_windows, nbrowser_login_state, nbrowser_login_form, nbrowser_errors) are read-only queries.",+ "nb-bridge nbrowser_screenshot and nbrowser_screenshot_full_res capture a page bitmap of a window the AI itself opened, in the background. Nothing on the page changes.",+ "nb-bridge nbrowser_credentials lists which sites have a saved login, as host and username only. It never returns a password.",+ "nb-bridge nbrowser_describe, nbrowser_record_status, nbrowser_record_list, nbrowser_chrome_status and nbrowser_settings without set are read-only.",+ "nb-bridge nb-dashboard serve, status, health, selfcheck and stop run the local Dock Bar dashboard on 127.0.0.1:8954; serve is idempotent, the rest are probes."+ ],+ "soft_deny": [+ "nb-bridge nbrowser_open_window, nbrowser_open_tab, nbrowser_open_os_window and nbrowser_navigate open pages in the user's REAL signed-in browser (background by default).",+ "nb-bridge nbrowser_click, nbrowser_type, nbrowser_press_key, nbrowser_input_dispatch, nbrowser_select, nbrowser_hover, nbrowser_set_file_input, nbrowser_set_date act on live pages as the user.",+ "nb-bridge nbrowser_autologin, nbrowser_totp and nbrowser_register_totp sign the user into sites with their saved secrets; the secrets never reach the caller.",+ "nb-bridge nbrowser_eval, nbrowser_evaluate and nbrowser_fetch_url run code or authed requests with the user's real cookies.",+ "nb-bridge nbrowser_download, nbrowser_record_start, nbrowser_record_stop and nbrowser_clear_cookies write files, record the screen, or log the user out of a site.",+ "nb-bridge nbrowser_close_window, nbrowser_close_tab, nbrowser_cleanup and nbrowser_force_close destroy windows; force_close needs a two-step attestation.",+ "nb-bridge nbrowser_install_chrome, nbrowser_dev_reload, nbrowser_uninstall, nbrowser_add_extension_origin and nbrowser_wake_profile change what is installed or running.",+ "nb-bridge nbrowser_settings with set, nbrowser_flash_mode, nbrowser_taskbar, nbrowser_profile_block/unblock, nbrowser_use_profile, nbrowser_pin_session change bridge settings."+ ],+ "environment": [+ "nb-bridge is the Adom Native Browser bridge: its nbrowser_* verbs drive the user's OWN signed-in Chrome or Edge on their desktop, routed through Adom Bridge (ab).",+ "nb-bridge calls from the container hit ab's own human-approval model on the desktop (caller identity, per-call reason, Activity Log), so the classifier is the first of two gates.",+ "nb-bridge is NOT pup. pup drives a sandbox Chrome for Testing that it owns; nb drives the browser the user is logged into.",+ "nb-bridge ships nb-dashboard, the bridge's local Dock Bar dashboard server, installed by the Adom registry."+ ] } }