| name | ha-browser |
| description | Hope Agent browser automation — the standard `status → tabs → snapshot → act` loop, stale-ref recovery rules, and what to do when login / 2FA / captcha / camera-prompt / dialog blocks progress. Load this skill whenever you reach for the `browser` tool. Trigger on: user asks the agent to open / control / click / scrape / log into / verify something in a web app ('open X and click Y', '打开 X 然后点击 Y', 'log into my Gmail', 'scrape this page', 'fill out the form on X'); user reports a flow that requires real browser context (cookies, JS-rendered content, OAuth). |
| version | 1.0.0 |
| author | Hope Agent |
| license | MIT |
| allowed-tools | ["browser","ask_user_question","read","job_status"] |
| status | active |
Hope Agent Browser — operating loop
The browser tool exposes 8 high-level actions. Default backend is Hope Agent's Chrome Extension + Native Messaging Host, which can control the user's real Chrome tabs after they install the extension and native host. If the extension is unavailable, generic browsing can fall back to the managed/user_attach CDP backend, but real Chrome tab/session tasks must fail closed and ask the user to install or enable the extension.
The standard loop
Run these in order; never skip a step. Browsers are stateful — assumptions get punished.
1. browser(action="status") # never operate blindly
2. browser(action="tabs", op="list") # know what's open before opening more
3. browser(action="tabs", op="new", url=...) # only if you actually need a fresh tab
4. browser(action="snapshot", format="role") # get fresh refs
5. browser(action="act", kind=..., ref=..., ...)
6. when in doubt → re-snapshot
When the user explicitly asks for their current Chrome, an already-open tab, their logged-in session, or browser extensions/cookies from their daily Chrome, use tabs.open_user_tabs and tabs.claim first. Do not launch a managed CDP profile and pretend it is the user's Chrome.
Real Chrome access uses the normal Hope Agent tool approval flow. tabs.open_user_tabs, tabs.claim, extension numeric-id tabs.select, observe.kind=downloads, control.download_cancel, and control.raw_cdp may ask unless the session policy, AllowAlways, Smart mode, or YOLO allows them.
A typical "fill the login form" flow is:
status → tabs.list → (already on the right tab? if not, tabs.select / tabs.new)
→ navigate.go url="https://app.example.com/login"
→ snapshot format=role # capture refs
→ act kind=fill ref=<email> text="me@..."
→ act kind=fill ref=<password> text="..."
→ act kind=click ref=<submit>
→ snapshot format=role # re-snapshot after navigation
→ verify expected element exists
Refs are tied to the snapshot
ref is only valid against the most recent snapshot.role for the active tab. The moment the page navigates, the DOM mutates (SPA route change, modal opens/closes), or you switch tab — refs are stale.
Re-snapshot when:
- you just called
navigate.go / .back / .forward / .reload
- you switched tab (
tabs.select)
- an
act returned an error that looks like "ref not found" / "no such element" / "detached"
- the URL bar in the snapshot output differs from what you expect
- a previous
act triggered an obvious UI change (modal, page transition, form expansion)
Stale-ref auto-recovery — what to expect
The tool tries one automatic recovery before bubbling up a stale-ref error: it re-snapshots, looks for an element with the same role and text (or a substring match) as the original ref, and retries with the new ref. On success the result string ends with (ref auto-recovered) so you know it kicked in. On failure you get the original error.
Practical rules:
- If a recovery happened, verify the next action's prerequisites freshly — a recovered ref means the DOM rearranged.
- If recovery fails, resnapshot manually and re-plan — don't keep hammering the same
act call.
- Recovery only kicks in for
act.kind. navigate, tabs.*, and control.* do not retry.
When to stop and ask the user
These five situations are blocking — do not guess your way through them. Call ask_user_question and wait.
| Signal in the snapshot or error | What you must do |
|---|
| Login form / email + password / "Sign in" button | Ask the user to sign in, or supply credentials via the right channel. Never type credentials you guessed. |
| 2FA / OTP code prompt | Ask the user for the code (they have the device). |
| CAPTCHA / "I'm not a robot" | Ask the user to solve it. Do not attempt to bypass. |
| Camera / microphone / notification permission prompt | Ask the user — that's a system dialog only they can answer. |
| Browser-native file picker or download confirmation | If you triggered it, control.handle_dialog. If it's a host-driven save dialog, ask the user. |
When you have to stop, the right call is roughly:
ask_user_question({
reason: "Browser flow requires you",
questions: [{ q: "I see a CAPTCHA on https://...; please solve it, then say 'continue'.", ... }]
})
Tab discipline
Multi-tab work loses refs more than anything else. Two rules keep you sane:
- Name your tabs as soon as you open them. Right after
tabs.new, jot the target_id and the URL/role in your reasoning ("tab A11C = github, tab B22D = jira"). Always pass target_id explicitly to tabs.select instead of relying on "active".
- One snapshot per action burst per tab. Don't snapshot tab A, switch to tab B for two ops, switch back to A, and reuse the old A refs. Re-snapshot when you come back.
Real Chrome tabs
Use the extension-backed tab lease protocol whenever the task depends on the user's real Chrome state:
status
tabs.open_user_tabs
tabs.claim target_id="<chrome-tab-id>"
snapshot / act / observe
tabs.finalize
Rules:
tabs.claim takes temporary control of a real user tab. Release it with tabs.release or tabs.finalize when the task ends.tabs.select with a numeric extension tab id also activates and controls that real Chrome tab. Prefer tabs.claim when your intent is explicit takeover; use tabs.select for tab switching after you know the target id.tabs.finalize for a claimed user tab must not close the tab by default; it releases Hope Agent control.tabs.new creates a Hope-controlled automation tab. tabs.finalize closes agent-created tabs unless their target id is listed in keep.- If a tab is already claimed by another Hope session, do not steal it unless the user explicitly asked to take over; then pass
steal:true.
- If the extension is missing or disabled, real Chrome tasks are blocked. Tell the user to open Settings -> Browser and install/enable the Chrome Extension + Native Host. Generic browsing may continue with CDP fallback, but that is an isolated Hope Agent browser, not the user's current Chrome.
When NOT to use browser
Browser automation is the most expensive tool you have — every step is round-trips, every snapshot is a 30KB blob, every screenshot is a hundred KBs. Don't reach for it when something cheaper works:
- Public web content →
web_fetch (HTML/Markdown) or web_search first. Open a browser only if the page is JS-rendered, gated by cookies, or you genuinely need to interact (click, fill).
- One-shot file download →
web_fetch saves bytes; browser.snapshot pdf is only for the rendered DOM-as-PDF case.
- API call → if the site has an API and you can hit it with
exec curl or web_fetch, do that — no browser needed.
Common pitfalls
- Two snapshots in a row without anything in between: you wasted a turn. Snapshot once, then
act a few times, then re-snapshot.
act.kind=fill with a ref that points to a <div> instead of <input>: the snapshot output annotates role; check it before filling. Use evaluate to inspect the DOM if unsure.- Trusting the URL on a redirect-heavy site: after
navigate.go, the page may bounce through several URLs. Re-snapshot after navigation, do not assume the URL in your navigate.go argument matches the current page.
- Forgetting
observe: when something silently fails, observe.kind=console and observe.kind=page_errors often surface the cause for free. In the extension backend those streams are filtered to the active controlled tab. observe.kind=downloads reads Chrome download activity and follows normal approval policy.
Common CDP error strings
"Cannot find context with specified id" / "detached" / "no such element" — stale ref or page replaced. Recovery: re-snapshot."selected page closed" — active tab was closed externally. Recovery: tabs.list → tabs.select on a live tab.
Choosing profile.op=launch profile=
profile=managed → automation, scrapers, anything that should NOT inherit
the user's login state. Ephemeral runner under
~/.hope-agent/browser/managed-runner/, OS-picked
debug port. This is the default — omit `profile=`
to get it.
profile=user_attach → routine work where you DO want a persistent Hope Agent
CDP profile (sign in once, keep the cookies, reuse
extensions inside that Hope Agent browser).
Lives at ~/.hope-agent/browser/user-attach/, pinned
to port 9222. This is the recommended way to maintain
"the user's hope-agent browser" — populate the logins
once and reuse them. No extra approval — same risk
profile as managed.
profile=<other> → user-defined profiles in AppConfig.browser.profiles
(per-profile user-data-dir / port / executable /
headless / extra args). Treat them like user_attach
in terms of persistence assumption.
The legacy target=managed|user_attach parameter is gone — only profile=<name>
is accepted now for CDP lifecycle operations. A previous target=system option
was removed; do not try to attach CDP to the user's default Chrome profile. When
the user wants their real daily Chrome with current logins, use the extension
path (tabs.open_user_tabs → tabs.claim) or ask them to install/enable the
extension if it is missing.
When Chrome / Chromium is missing entirely
If profile.op=launch fails with "No Chrome / Chromium found...", suggest
ONE of:
- Install Google Chrome system-wide (best user experience).
- Run
browser(action="profile", op="install_runtime") — downloads a
pinned Chromium snapshot (~150 MB) into ~/.hope-agent/browser/runtime/.
This is an async job; poll job_status for progress, or check the
settings → Browser doctor banner.
- Pass
executable_path explicitly if the user has a custom Chrome build.
Quick reference — full action surface
browser(action="status")
browser(action="profile", op="list")
browser(action="profile", op="launch", profile="managed", headless=false)
browser(action="profile", op="launch", profile="user_attach")
browser(action="profile", op="install_runtime") # ← async, downloads Chromium
browser(action="profile", op="connect", url="http://127.0.0.1:9222")
browser(action="profile", op="disconnect")
browser(action="tabs", op="list")
browser(action="tabs", op="new", url="https://...")
browser(action="tabs", op="select", target_id="<id>")
browser(action="tabs", op="close", target_id="<id>")
browser(action="tabs", op="open_user_tabs") # extension-only, real Chrome
browser(action="tabs", op="claim", target_id="<id>", steal=false)
browser(action="tabs", op="release", target_id="<id>")
browser(action="tabs", op="finalize")
browser(action="tabs", op="finalize", keep=["<agent-tab-id>"]) # keep Hope-created tabs open
browser(action="navigate", op="go", url="https://...")
browser(action="navigate", op="back" | "forward" | "reload")
browser(action="snapshot", format="role")
browser(action="snapshot", format="screenshot", image_format="jpeg", full_page=false)
browser(action="snapshot", format="screenshot", annotate=true)
browser(action="snapshot", format="pdf", paper_format="a4")
browser(action="act", kind="click", ref=N)
browser(action="act", kind="dblclick", ref=N)
browser(action="act", kind="fill", ref=N, text="...") # clears the field then sets value
browser(action="act", kind="hover", ref=N)
browser(action="act", kind="drag", ref=N, target_ref=M)
browser(action="act", kind="select", ref=N, values=["..."])
browser(action="act", kind="press", key="Enter") # one keypress on the focused element
browser(action="act", kind="upload", ref=N, file_path="/path/to/file")
browser(action="observe", kind="console" | "network" | "page_errors" | "downloads", since=<unix-millis>)
browser(action="control", op="resize", width=1280, height=720)
browser(action="control", op="scroll", direction="down", amount=500)
browser(action="control", op="wait_for", text="...", timeout=30000)
browser(action="control", op="handle_dialog", accept=true, dialog_text="...")
browser(action="control", op="evaluate", expression="document.title")
browser(action="control", op="download_cancel", download_id=7) # normal tool approval
browser(action="control", op="raw_cdp", method="Accessibility.getFullAXTree", params={}) # normal tool approval; advanced path, params are not payload-scanned
