Repository navigation
feat(harness): 8sync harness browser ego installs the official ego lite browser - #237
Merged
Merged
Conversation
…the official ego lite browser ego lite (citrolabs, https://lite.ego.app) lets agents drive the owner's own logged-in browser through `ego-browser` instead of bridging to a separate Chromium. Owner (2026-10-27): "harness nên cho ego-lite cài về window … làm control browser chuẩn hơn". - Windows x64: installer link read from the official citrolabs/ego-lite README (pinned fallback), only `https://cdn.ego.app/setup/windows/x64/` accepted, downloaded to a fresh temp dir, run only when Authenticode is Valid and the signer is CN=CITRO LABS PTE. LIMITED (unsigned needs EIGHTSYNC_EGO_ALLOW_UNSIGNED=1; any other signer never runs). - macOS prints the official .dmg link; Linux (no ego build yet) keeps `harness browser` on system Chromium. - The app installs `ego-browser` and its skill during onboarding, so 8sync writes no copy of the skill; `status` finds both, including a PATH entry the current terminal has not picked up. Evidence: - cargo test harness::ego: 3 passed - UAT on Windows 11: `8sync harness browser ego install` → signature Valid (CITRO LABS, Certum CA), installer exit 0; `status` finds ~/.local/share/ego/active_version_dir/ego-browser.exe and the skill in ~/.agents/skills and ~/.claude/skills. Gates: /sec (gitleaks staged: no leaks), /rules ALLOWED (agentic clause), /aup-audit no BLOCK (WARN: agent uses logged-in browser; vendor usagestats=1), ccc risk low, trail check no conflicts. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
8sync harness browser ego [install|status]installs the official ego lite browser (citrolabs, https://lite.ego.app). With it, agents drive the owner's logged-in browser throughego-browser.How it stays safe
https://cdn.ego.app/setup/windows/x64/is accepted.Validand the signer isCN=CITRO LABS PTE. LIMITED. An unsigned installer needsEIGHTSYNC_EGO_ALLOW_UNSIGNED=1. Any other signer never runs.ego-browserand the skill during onboarding.Evidence
cargo test harness::ego: 3 passed.status: findsego-browser.exeand the skill in~/.agents/skillsand~/.claude/skills.Not verified: macOS and Linux runtime behavior. Those code paths only print messages; CI covers the build on all 3 OS.
🤖 Generated with Claude Code