agent-first-http 0.11.0

Give your AI agent its own private browser — so it reads the real page, past logins and bot walls, without ever touching yours.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

{
  "$schema": "https://cmn.dev/schemas/v1/spore-core.json",
  "id": "agent-first-http",
  "name": "Agent-First HTTP",
  "version": "0.11.0",
  "domain": "agentfirstkit.com",
  "key": "ed25519.BwbSzqdDYyMN1pPW5snRk3afrJAovHn8aueMvDpfNKVw",
  "synopsis": "Give your AI agent its own private browser — so it reads the real page, past logins and bot walls, without ever touching yours.",
  "intent": [
    "Give AI agents a deterministic URL acquisition layer that reports status, final URL, headers, body artifacts, redirects, timing, and typed transport failures as structured JSONL instead of prose",
    "Focus on pages and web resources that are hard for agents to acquire through a simple shell fetch: JavaScript-rendered, cookie- or session-bound, bot-walled, or XHR-injected pages a plain HTTP request cannot turn into usable artifacts",
    "Preserve session identity for multi-step web workflows: scoped request defaults, concurrent requests, streaming bodies, downloads, and future browser-backed fetch state belong in one agent-readable session"
  ],
  "license": "MIT",
  "mutations": [
    "Drop the chrome-headless-shell backend: it shipped the same engine and CDP surface as chromium for an extra pinned download and an x86_64-only asymmetry, so --browser and 'container install --with' no longer accept it",
    "Move the runtime, builder, downloader, and test container images from Debian bookworm to trixie, including the matching KasmVNC package",
    "Install a managed browser policy in both container images so Chromium's unsupported-command-line-flag bar stops stealing viewport on the takeover display, changing no launch flag and no sandbox posture",
    "Fix takeover downloads landing nowhere: profile prefs now suppress the native save dialog and point downloads at the profile's own directory, replacing a host-level Browser.setDownloadBehavior that died with the throwaway connection that set it",
    "Correct the deployment guide's claim that --no-sandbox raises no warning bar, and record what does and does not suppress it",
    "Upgrade to agent-first-data 0.31.0, resolving bound registries through BoundOutcome and running invocations off the invocation itself",
    "Add a CLI test that drives every declared shape through its own handler with strict argument reads, so a handler asking for an id its shape cannot supply fails in test rather than silently projecting an empty string"
  ],
  "bonds": [
    {
      "relation": "depends_on",
      "uri": "cmn://agentfirstkit.com/b3.7Kf6i6HNpFxooXKQTCzfugkqq89rPCuM1mekg8hsKAQC",
      "id": "agent-first-data",
      "reason": "All request/response fields use Agent-First Data suffix conventions, and runtime protocol/log events are emitted on stdout only"
    }
  ],
  "tree": {
    "algorithm": "blob_tree_blake3_nfc",
    "exclude_names": [
      ".git",
      ".cmn"
    ],
    "follow_rules": [
      ".gitignore"
    ]
  }
}