foxloop — an AI agent loop with approvals von Pooria

foxloop is the agent loop of the fox libraries: plan, call a tool through a gate, check the result, repeat. This add-on shows the loop at work in a sidebar.

Who it is for: developers who build browser agents and want to see each plan, gate decision and approval of a run.

What it does

• You type a goal for the current tab and click Run.
• A planner picks tools: read the page, fill fields, click, open an address, or do a form task.
• foxgate checks each call. Calls that can send a form wait for your Approve or Deny in the sidebar.
• The sidebar shows each plan, decision, result and the final check. A tamper-evident log (foxtrail) of the run stays in memory.
• The grants of a run cover the host of that tab only, and end with the run.

Planners

• Scripted (the default): replays a list of tool calls. No model.
• Ollama, llama-server or Underdog Saluki 27B on your computer. foxloop refuses Ollama model names that end in -cloud.
• A small model (Qwen3-0.6B) in the browser.
• Your own key for an OpenAI-compatible API or for Anthropic.

What leaves your computer, and when

• With the scripted, local or in-browser planners, page text stays on your computer.
• With your own key, the goal, the page text and the tool results go to the provider that you chose. This happens only after you tick "Send page text to this provider" and Firefox's data consent says yes. The key stays in session storage and is gone when Firefox closes.
• The in-browser model downloads its files from Hugging Face once. These requests hold no page text.
• foxloop has no server and sends nothing to its authors.

Permissions

• Access to all websites and scripting: read and act on the tab that you give a goal to.
• Storage and unlimited storage: settings and the in-browser model files stay in your browser.

The source code is MIT licensed.