New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

browser-pilot

Package Overview
Dependencies
Maintainers
1
Versions
18
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

browser-pilot

Lightweight CDP-based browser automation for Node.js, Bun, and Cloudflare Workers

latest
npmnpm
Version
0.0.18
Version published
Maintainers
1
Created
Source

browser-pilot

Docs npm version CI status TypeScript License

Automation-first CDP browser control for AI agents.

Browser Pilot now teaches one workflow model:

  • inspect the page
  • act in the browser
  • review structured business state
  • record a manual workflow
  • trace behavior over time
  • exercise voice/media and browser conditions

record and trace are two interfaces over the same capture system. record writes the canonical artifact. trace explains either a live session or a saved artifact.

Install

bun add browser-pilot
# or
npm install browser-pilot

For local Chrome on Chrome 144+:

# 1. Start Chrome normally
# 2. Open chrome://inspect/#remote-debugging
# 3. Enable remote debugging, then run:
bp connect

Tip: try plain bp connect first. Only add --channel or --user-data-dir if auto-discovery finds more than one eligible profile.

Use bp connect --channel beta or bp connect --user-data-dir <path> when more than one Chrome profile is eligible.

Legacy/manual fallback still works with a separate debug profile:

/Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome \
  --remote-debugging-port=9222 \
  --user-data-dir=/tmp/browser-pilot-profile

Choose the command by job

JobPrimary commands
Inspect page statesnapshot, page, forms, text, targets, diagnose
Review structured statereview
Act in the browserexec, run
Capture a human demorecord
Investigate behavior over timetrace
Exercise voice/mediaaudio
Change browser conditionsenv

Start with bp --help to see the routed command tree and bp --version to confirm the CLI build.

Use bp snapshot -i to find clickable/fillable refs, bp text for long-form copy, bp review for structured business outcomes, and bp diagnose when targeting fails. Use bp eval only as an escape hatch.

Golden path 1: automate a page

bp connect --name dev
bp exec -s dev '{"action":"goto","url":"https://example.com"}'
bp snapshot -i -s dev
bp exec -s dev '[
  {"action":"fill","selector":"ref:e5","value":"user@example.com"},
  {"action":"click","selector":"ref:e7"},
  {"action":"assertText","expect":"Welcome"}
]'

Use bp snapshot -i first. Refs are the default targeting strategy.

For reading or verification after actions:

bp text -s dev --selector main
bp review -s dev --json
bp diagnose -s dev 'submit'

Best practices from real usage:

  • bp page is a compact overview. It caches the refs it shows, but use bp snapshot -i when you need the full actionable list.
  • On commerce and content-heavy sites, scope reading with bp text --selector main to avoid nav, drawers, and footer noise.
  • bp review works best on confirmations, detail pages, tables, alerts, and key-value layouts. It is usually the wrong first read on catalog grids.
  • After bp trace start, begin with bp trace summary --view session before narrower views like console or ws.

Golden path 2: capture a manual workflow and derive automation

bp record -s demo --profile automation -f ./artifacts/demo.recording.json
# perform the flow manually, then stop with Ctrl+C
bp record summary ./artifacts/demo.recording.json
bp record derive ./artifacts/demo.recording.json -o workflow.json
bp run workflow.json

Do not start by opening the raw artifact. Use record summary, record inspect, or trace summary --view ... first.

Golden path 3: debug a realtime or voice session

bp connect --name realtime
bp trace start -s realtime --timeout 20000
# reproduce the issue in the app
bp trace summary -s realtime --view ws
bp trace summary -s realtime --view console

Voice workflow:

bp audio setup -s realtime
bp exec -s realtime '{"action":"goto","url":"https://my-voice-app.com"}'
bp audio check -s realtime
bp audio roundtrip -s realtime -i prompt.wav --transcribe -o response.wav
bp trace summary -s realtime --view voice

Golden path 4: exercise failure modes

bp env permissions grant -s realtime microphone
bp env network offline -s realtime --duration 5000
bp trace watch -s realtime --view ws --assert profile:reconnect --timeout 15000
bp env visibility hidden -s realtime

What is new in the model

  • One canonical artifact model with version: 2
  • One canonical trace event stream for recording, live trace, and session logs
  • Trace-backed waits and assertions in exec / run
  • listen preserved as a compatibility alias to trace tail
  • audio for active control, trace for explanation, env for browser-state controls

Cloud provider

When local Chrome is not available, Browser Use is the recommended cloud provider:

BROWSER_USE_API_KEY=bu_... bp connect --provider browser-use
const browser = await connect({
  provider: 'browser-use',
  apiKey: process.env.BROWSER_USE_API_KEY,
});

See Providers for BrowserBase, Browserless, and other options.

Programmatic example

import { connect } from 'browser-pilot';

const browser = await connect({ provider: 'generic' });
const page = await browser.page();

await page.batch([
  { action: 'goto', url: 'https://example.com/login' },
  { action: 'fill', selector: ['#email', 'input[type=email]'], value: 'user@example.com' },
  { action: 'submit', selector: 'form' },
  { action: 'assertUrl', expect: '/dashboard' },
]);

await browser.close();

Guides

Compatibility notes

  • Prefer --debug for transport logging. --trace still works as a legacy alias.
  • Prefer bp trace tail .... bp listen ... still works as a compatibility alias.

Keywords

browser

FAQs

Package last updated on 22 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts