This is something I have been working on, on and off, for about a year but now I feel that it is stable enough to release. It really only has two tool sets, an execute tool for arbitrary code, and a bash tool, both of which run 100% in browser.

As of now it's free and you can use your ChatGPT subscription or an OpenAI endpoint. There is an optional companion PWA that allows you to drive the extension from your phone and click captchas for it remotely, which I might charge for in the future. But for now it's free and optional. The extension itself has no backend and does not collect any data.

The hard part is MV3 extensions do everything they can to make sure your extension does not take up too much memory or run too long. So I rewrote durable objects in javascript to make it so that the agents in the extension can safely recover from their process randomly restarting constantly. each "agent" is an web-worker with a sqlite database and unique address.

All the things I don't have to solve because the agent lives in a chrome extension:

a) Identity - it inherits the chrome profile it lives in. It can ride your profile or you can give it its own and sandbox it with chrome enterprise.

b) File system isolation - Each Rook extension gets its own private file system (opfs) which it can execute bash over. You can also mount local files via the file system access APIs and have the agent copy files between them.

c) Sandboxing - extensions come with a sandbox api which allows the model to author arbitrary js safely. You can control the browser level allowed hosts in chrome enterprise as well.

d) Browser use - the model just writes playwright and webmcp code in its sandbox. This works really well and is what SOTA computer use harnesses do.

e) Scheduler/routines - you can set recurring work in your extension since extensions ship with their own alarms api.

f) Channels - Slack and Discord let you connect to the extension directly via websocket so I don't need a proxy server or backend.

I use this for basically everything these days and have ~8 unique browser profiles running on a single mac studio at all times. They are designed to take a task and work for extended periods of time.

Cheers!

Ukraine Delta Software

The Generative AI Learning Penalty: Evidence from Chinese Secondary Education

Hundreds missing and many feared dead after flash flood hits Nepal-China border

Positional Encodings and Group Theory – 3Blue1Brown and Alok Puranik [video]

MAA Limits AIME (American Invitational Mathematics Exam) to 13 and Older

Ask HN: What's your career plan for the next few years?

Wush is a command line tool that lets you easily transfer files and open shells

At least 15 companies are selling antibodies using faked validation data

Proton Global Outage

Open Sourced R-Lens

Americans see EU Tech [video]

Thoughts on LLM Pair Programming

Gender Ideology Arms Left- Wing Authoritarian Psychology [pdf]

Proton Global Outage

Show HN: Tumble: A dice-rolling puzzle game

The story on why OpenAI agents hacked Hugging Face

TRISO (reasonably safe nuclear) fuel

An interactive introduction to the spanning tree protocol

The Ship of Theseus and behavior drift

Brief independent investigation of OpenAI / Hugging Face hacking incident

Show HN: Rook – A multi-Agent harness that lives 100% in a browser extension

GitHub Publishes IPv6 Addresses for Git SSH remotes

A benchmark for safely measuring container breakout capabilities

Florida Catholics slap down state AG by rejecting religious vaccine exemptions

Amazon to Buy 2M Nvidia Chips for Data Center Build-Out

Facebook, Insta owner Meta settles social media addiction case for $25B

A free API that joins six Dutch government datasets into one REST endpoint

How AI Is Being Used to Dilute Hip Hop

Sumitomo Electric – 6912-fiber count Ribbon Slotted-Core Fiber Optic cables

In Craft We Trust

How do I learn robotics in 2026/2027?

Comments

Ukraine Delta Software

The Generative AI Learning Penalty: Evidence from Chinese Secondary Education

Hundreds missing and many feared dead after flash flood hits Nepal-China border

Positional Encodings and Group Theory – 3Blue1Brown and Alok Puranik [video]

MAA Limits AIME (American Invitational Mathematics Exam) to 13 and Older

Ask HN: What's your career plan for the next few years?

Wush is a command line tool that lets you easily transfer files and open shells

At least 15 companies are selling antibodies using faked validation data

Proton Global Outage

Open Sourced R-Lens

Americans see EU Tech [video]

Thoughts on LLM Pair Programming

Gender Ideology Arms Left- Wing Authoritarian Psychology [pdf]

Proton Global Outage

Show HN: Tumble: A dice-rolling puzzle game

The story on why OpenAI agents hacked Hugging Face

TRISO (reasonably safe nuclear) fuel

An interactive introduction to the spanning tree protocol

The Ship of Theseus and behavior drift

Brief independent investigation of OpenAI / Hugging Face hacking incident

Show HN: Rook – A multi-Agent harness that lives 100% in a browser extension

GitHub Publishes IPv6 Addresses for Git SSH remotes

A benchmark for safely measuring container breakout capabilities

Florida Catholics slap down state AG by rejecting religious vaccine exemptions

Amazon to Buy 2M Nvidia Chips for Data Center Build-Out

Facebook, Insta owner Meta settles social media addiction case for $25B

A free API that joins six Dutch government datasets into one REST endpoint

How AI Is Being Used to Dilute Hip Hop

Sumitomo Electric – 6912-fiber count Ribbon Slotted-Core Fiber Optic cables

In Craft We Trust