feat(herdr): add persistent workspace browser plugin and CLI

[antonvishal]

Summary

Adds @browserbasehq/herdr, providing:

• A Herdr plugin manifest (herdr-plugin.toml) enabling workspace-scoped browser actions (start, status, stop).
• A scoped CLI (herdr-browse) and agent skill (herdr-browse skills install|show) giving each workspace a persistent Browserbase context and each agent an isolated browser session.
• Automatic routing: local URLs (localhost, .test, .local) use clean local Chromium; external URLs use Browserbase.

Marketplace Topic Request

To list this plugin in the Herdr marketplace catalog, please add the herdr-plugin topic to the repository: https://herdr.dev/docs/marketplace/#get-your-plugin-listed

Testing

Tested locally:

• Linked and validated plugin inside Herdr (herdr plugin link packages/herdr, herdr plugin action invoke status).
• Verified local and cloud browser sessions, state persistence, context creation, and session cleanup.

Validation

• 22 tests pass (pnpm --filter @browserbasehq/herdr test)
• TypeScript checks pass (pnpm --filter @browserbasehq/herdr run check-types)
• ESLint passes (npx eslint packages/herdr)
• Build passes (pnpm run build:packages)
• git diff --check passes

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​vitest@​4.0.6
	npm/​browse@​0.9.6
	npm/​@​types/​node@​25.0.9

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @browserbasehq/stagehand is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: packages/herdr/package.json → npm/browse@0.9.6 → npm/@browserbasehq/stagehand@3.7.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@browserbasehq/stagehand@3.7.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report