߲jX UdZddlmZddlZddlZddlZddlmZmZm Z ddl m Z m Z ddl mZejeZdZhdZd d d d d d Zded<ddd ddZded<ddddAdZ ddlZddlmZdZdZdBdZdCdZ dDdZ!dEd Z"e"d!fd"d#fd$Z#dFd%Z$ dGd&Z% dHd'Z& dI dJd(Z'd)d*ed+d,d-d.d/d,idd0d1d-d2d/d-d3d/d4d5d6d7d8dgd9d:Z(ded;<dKd<Z)e jTd)d=e(d>e)d?@y#e$r dZeZdZYwxYw)LuRaw Chrome DevTools Protocol (CDP) passthrough tool ``browser_cdp``. Sends arbitrary CDP commands to the browser's DevTools WebSocket when a CDP URL is configured (``/browser connect`` → ``BROWSER_CDP_URL``, ``browser.cdp_url``, or a CDP-backed cloud session). Escape hatch for operations the main browser tools don't cover. Method reference: https://chromedevtools.github.io/devtools-protocol/ ) annotationsN)AnyDictOptional)registry tool_error)routed_browser_handlerz3https://chromedevtools.github.io/devtools-protocol/> Page.reloadPage.stopLoadingTarget.getTargetsBrowser.getVersionTarget.detachFromTarget Page.navigateTarget.attachToTarget))data)) bufferedData))screenshotData))responsebody)zPage.captureScreenshotzPage.printToPDFzNetwork.streamResourceContentzHeadlessExperimental.beginFramez"CacheStorage.requestCachedResponsezDict[str, tuple]_CDP_ALWAYS_BINARY_PATHS))r))postData)zNetwork.getResponseBodyzFetch.getResponseBodyzIO.readzNetwork.getRequestPostData_CDP_FLAGGED_BINARY_PATHS always_paths flagged_pathsc ddlm}t|tr ||dSt|tt frt |d|DSt|ts|S|jddu}d d}d d}i}|jD]l\}} |||xs |||xr|} t|tr ||dn|} t| tr| r| nt| |||||| || <n|S) uRedact browser-originated CDP result text; opaque bytes stay byte-identical. Exemptions come ONLY from the calling method's spec as exact result paths. Path suffixes propagate only into the matching subtree, so ``base64Encoded`` is honored solely as a sibling on the trusted carrier object — never as ambient trust a ``Runtime.evaluate`` by-value object could spoof. See #94138, #94142. r)redact_sensitive_textT)forcec32K|]}t|yw)N)_redact_cdp_output).0items ;/home/ubuntu/.hermes/hermes-agent/tools/browser_cdp_tool.py z%_redact_cdp_output..>sF-d3Fs base64Encodedc,tfd|DS)Nc3NK|]}t|dk(xr|dk(ywrNlenr"pkeys r$r%z3_redact_cdp_output..leaf..Cs)>13q6Q;.1Q43;.>s"%)anypathsr/s `r$leafz _redact_cdp_output..leafBs>>>>c,tfd|DS)Nc3XK|]!}t|dkDs|dk(s|dd#ywr)r+r-s r$r%z6_redact_cdp_output..descend..Es+HqSVaZAaDCKQqrUHs ** *)tupler1s `r$descendz#_redact_cdp_output..descendDsHEHHHr4r)r2r7r/strreturnbool)r2r7r/r9r:r7) agent.redactr isinstancer9listr7typedictgetitemsr!) valuerrrbase64_flaggedr3r8redactedr/r#opaqueout_keys r$r!r!0s3%$U$77%$'tE{FFFF eT " YY/47N?I!H[[]f TlC(YT--E-X.rzs!,Fs6::VbKcKigiGj,kr4zTBlocked: CDP Runtime.evaluate expression targets a private or internal address ({}).)rzRuntime.evaluatec ddlm}ddlm}|j|sytj |}|/|\}}|||xsi}|rt |j||S|tvr&|j|} | rt d| d|d|Sy#t$r } tjd| Yd} ~ yd} ~ wwxYw) a3Apply the browser SSRF/private-page guard to raw CDP calls. Raw CDP shares the cloud/private-network boundary of ``browser_snapshot`` / ``browser_console`` / ``browser_eval`` and must not become their bypass. Probes are best-effort; a probe failure never breaks local/custom CDP workflows. r) browser_tool)browser_tool_eval_policyNz9Blocked: page URL targets a private or internal address (z). Raw CDP method z, could expose private page content or state.z0browser_cdp: private-page guard probe failed: %s) toolsr|r}_eval_ssrf_guard_active_METHOD_PARAM_GUARDSrArkformat!_CDP_PRIVATE_PAGE_ALLOWED_METHODS_current_page_private_urlrarbrc) task_idrfrvrupolicyguardprobetemplateliteral blocked_urlrds r$_browser_cdp_private_guardrsN,<--g6$((0  #OE8B "-G 8&AA : : ::7CK"[\g[hi228;g!ijprr  N GMM Ns#BAB&-B B>B99B>c@ KtJddlm}tj|fdddd||4d{ d d  fd }||xsid}|rb|d |d d dd |d{}d |vrt d|d |j dij d} | s t d| |d<||d|d{}d |vrt d|d |j dicdddd{S777@7 #1d{7swYyxYww)zMake a single CDP call. With ``target_id``, ``Target.attachToTarget(flatten=True)`` multiplexes a page-level session over the browser-level WebSocket; without it ``method`` runs at browser level.Nr)loopback_connect_kwargs)max_size open_timeout close_timeout ping_intervalr*cKdzc}jtjd|i|d{tjj z} |tjj z }|dkrt d|tjtjj|d{}|jd|k(r|S77!w)Nr*idrz Timed out timeout) sendjsondumpsrKrLtime TimeoutErrorloadswait_forrecvrA) reqwhatcall_iddeadline remainingmsgnext_idrwss r$_sendz_cdp_call.._sends&! GW''$**dG%;s%;<= = =//16687BH$w'?'?'A'F'F'HH >&D6':;;jjw'7'7 9'U!UV774=G+J  > "Vs"4C5C1BC5C3 C53C5)rfrvrT)targetIdflattenzattaching to target errorzTarget.attachToTarget failed: rV sessionIdz0Target.attachToTarget did not return a sessionIdzwaiting for response to z CDP error: )rrqrr9r:rq) websocketsagent.proxy_bypassrconnectrMrA) ws_urlrfrv target_idrrrrr session_idrrs ` @@r$ _cdp_callrse  !! !:!!&Y4g]^04Y8OPV8WY%%\^ *06#RSS2.22;?J"#UVV)C #!9&BCC c>S\N;< <wwx$?%%%&BD9%%%%si4DDD+D (D)AD D*D / D;D<DD D D DD DDc  ddlm}|j |}|td|dS|j j }tfd|j d g|j d xsgDd} | D|j5|jj } ddd | jnd} | td d S| j d } | std dS|j} | | js tdS ddl m} | |j||xsi| || }|tdt S|j#|dz}t)j*d|| |j diddS#t$r}td|dcYd}~Sd}~wwxYw#1swYxYw#t$r4}tdt%|j&d|t cYd}~Sd}~wwxYw)zHRoute a CDP call through the live supervisor session for an OOPIF frame.r)SUPERVISOR_REGISTRYz!CDP supervisor is not available: zp. frame_id routing requires a running supervisor attached via /browser connect or an active Browserbase session.Nz'No CDP supervisor is attached for task=z. Call browser_navigate or /browser connect first so the supervisor can attach. Once attached, browser_snapshot will populate frame_tree with frame_ids you can pass here.c3RK|]}|s|jdk(s| yw)frame_idN)rA)r"frs r$r%z._browser_cdp_via_supervisor..s%lqaeeT^N_ckNkls '''topchildrenz frame_id zP not found in supervisor state. Call browser_snapshot to see current frame_tree.rz is not an out-of-process iframe (no dedicated CDP session). For same-origin iframes, use `browser_cdp(method='Runtime.evaluate', params={'expression': "document.querySelector('iframe').contentDocument.title"})` at the top-level page instead.zKCDP supervisor loop is not running. Try reconnecting with /browser connect.)safe_schedule_threadsafe)rrz0CDP call via supervisor failed: loop unavailablerhrz CDP call via supervisor failed: : TrV)successrfrrrVF ensure_ascii)tools.browser_supervisorrrarrAsnapshot frame_treenext _state_lock_framesto_dict_looprNagent.async_utilsr_cdprirVr?__name__rr)rrrfrvrrrd supervisortree frame_inforaw child_sidrXrfut result_msgs ` r$_browser_cdp_via_supervisorrs_h@ %((1JCG;OWWX X    + +D+/lTXXe_D(<(BDlnr,tJ  # # 3$$((2C 3&)oS[[]4 Ih\2MMN N|,I Ih\2yyz z   D |4??,ghhq>& OOFFLbYPWO XZ^` ;P[gh hZZ! Z4  ::$&h^g!+"!=?MR TTS h=cUCggh hh 3 30 q| dS#ttf$rd } YwxYw#t&j($r} t d| d| |cYd} ~ Sd} ~ wt(t*f$r } t t| |cYd} ~ Sd} ~ wt,$r} t d|d| d|cYd} ~ Sd} ~ wt.$rE} t0j3dt dt| jd| |cYd} ~ Sd} ~ wwxYw)uSend a raw CDP command (see ``CDP_DOCS_URL``). ``target_id`` attaches a fresh stateless connection to a tab; ``frame_id`` (OOPIF from ``browser_snapshot.frame_tree``) routes through the supervisor's live WebSocket instead — the only reliable way to evaluate inside an iframe where fresh per-call connections hit signed-URL expiry (Browserbase). Both paths share the same private-page/SSRF guard. Returns JSON ``{"success": True, "method", "result"}`` or ``{"error": ...}``.default)rrfrv)rrrfrvrz/'method' is required (e.g. 'Target.getTargets')rzfThe 'websockets' Python package is required but not installed. Install it with: pip install websocketszNo CDP endpoint is available. Run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or set 'browser.cdp_url' in config.yaml. The Camofox backend is REST-only and does not expose CDP.)zws://zwss://z%CDP endpoint is not a WebSocket URL: u. Expected ws://... or wss://... — the /browser connect resolver should have rewritten this. Check that a Chromium-family browser is actually listening on the debug port.z%'params' must be an object/dict, got >@g?gr@zCDP call timed out after zs: )rfNz"WebSocket error talking to CDP at ruE. The browser may have disconnected — try '/browser connect' again.zbrowser_cdp unexpected errorzUnexpected error: Trr)rrfrVrFr) rrr=r9rri _WS_AVAILABLEre startswithr@r?rfloat TypeError ValueErrormaxminr[rrKrrMrHrarb exceptionr!rrArrr)rfrvrrrreffective_task_idblockedendpoint call_params safe_timeoutrVrdpayloads r$ browser_cdprs ,9,5Fv^d^jhjk N*3Dx`f28'K K FC0KVbcc DE E$&H JT`b b   2 3A(NMMN N#),BK k4 (A${BSB\B\A]^__(1B6ZefG)0uW~d sC e45L [Ih YP\]^+/&L^599&"E/33FB?MABG(  ::gE 22+ z "    ]5l^3seLU[\\ , '3#c(622 [>xj3%PKKSY[ [ [78.tCy/A/A.B"SEJSYZZ[sf*FFFFI%*G<I%I%G/)I%/ I%;HI% I% :I I% I%ruSend a raw Chrome DevTools Protocol (CDP) command. Escape hatch for browser operations not covered by browser_navigate, browser_click, browser_console, etc. **Requires a reachable CDP endpoint.** Available when the user has run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or when 'browser.cdp_url' is set in config.yaml. Not currently wired up for cloud backends (Browserbase, Browser Use, Firecrawl) — those expose CDP per session but live-session routing is a follow-up. Camofox is REST-only and will never support CDP. If the tool is in your toolset at all, a CDP endpoint is already reachable. **CDP method reference:** u — use an available documentation lookup or extraction tool on a method's URL (e.g. '/tot/Page/#method-handleJavaScriptDialog') to look up parameters and return shape. **Common patterns:** - List tabs: method='Target.getTargets', params={} - Handle a native JS dialog: method='Page.handleJavaScriptDialog', params={'accept': true, 'promptText': ''}, target_id= - Get all cookies: method='Network.getAllCookies', params={} - Eval in a specific tab: method='Runtime.evaluate', params={'expression': '...', 'returnByValue': true}, target_id= - Set viewport for a tab: method='Emulation.setDeviceMetricsOverride', params={'width': 1280, 'height': 720, 'deviceScaleFactor': 1, 'mobile': false}, target_id= **Usage rules:** - Browser-level methods (Target.*, Browser.*, Storage.*): omit target_id and frame_id. - Page-level methods (Page.*, Runtime.*, DOM.*, Emulation.*, Network.* scoped to a tab): pass target_id from Target.getTargets. - **Cross-origin iframe scope** (Runtime.evaluate inside an OOPIF, Page.* targeting a frame target, etc.): pass frame_id from the browser_snapshot frame_tree output. This routes through the CDP supervisor's live connection — the only reliable way on Browserbase where stateless CDP calls hit signed-URL expiry. - Each stateless call (without frame_id) is independent — sessions and event subscriptions do not persist between calls. For stateful workflows, prefer the dedicated browser tools or use frame_id routing.objectstringz]CDP method name, e.g. 'Target.getTargets', 'Runtime.evaluate', 'Page.handleJavaScriptDialog'.)r? descriptionzaMethod-specific parameters as a JSON object. Omit or pass {} for methods that take no parameters.)r? propertiesadditionalPropertiesrzOptional. Target/tab ID from Target.getTargets result (each entry's 'targetId'). Use for page-level methods at the top-level tab scope. Mutually exclusive with frame_id.aOptional. Out-of-process iframe (OOPIF) frame_id from browser_snapshot.frame_tree.children[] where is_oopif=true. When set, routes the call through the CDP supervisor's live session for that iframe. Essential for Runtime.evaluate inside cross-origin iframes, especially on Browserbase where fresh per-call CDP connections can't keep up with signed URL rotation. For same-origin iframes, use parent contentWindow/contentDocument from Runtime.evaluate at the top-level page instead.numberz)Timeout in seconds (default 30, max 300).)r?rr)rfrvrrr)r?rrequired)namer parametersBROWSER_CDP_SCHEMAc ddlm}ddlm}t|xr|S#t$r }t j d|Yd}~yd}~wwxYw)aHAvailability check: offered only when a static CDP URL is set (Camofox is REST-only; the default local agent-browser hides its CDP port; cloud per-session ``cdp_url`` isn't surfaced). Raw (no-I/O) gate: check_fns run at every startup, and resolving the endpoint over HTTP here would block launch on a stale endpoint.r)_get_cdp_override_raw)check_browser_requirementsz1browser_cdp check: browser_tool import failed: %sNF)r_rtools.browser_tool_installr ImportErrorrbrcr;)rrrds r$_browser_cdp_checkr~sK @I *,H1F1H II  H#Ns ' AA  Az browser-cdpc jtdfdjdjdS)Nrc tjddjdjdjdjddjd S) Nrfr^rvrrrrr)rfrvrrrr)rrAargskwsr$rzz..s\88Hb)$((82DPTPXPXYdPeXXj)488It3LVXV\V\]fVg r4rr)fallbackrr)r rArs``r$rzrzs05t y!bff\.B  r4u🧪)rtoolsetschemahandlercheck_fnemoji)rCrrr7rr7r:r)r:r9)rjr9rfr9r:r9)ror9r: Optional[str])rurrvrqr:r)rr9rfr9rvrqr:r) rr9rfr9rvrqrrrrr:rq) rr9rr9rfr9rvOptional[Dict[str, Any]]rrr:r9)NNNrN)rfr9rvrrrrrrrrrr:r9)r:r;)+__doc__ __future__rrKrloggingtypingrrrtools.registryrrtools.browser_extension_routerr getLoggerrrbrirr__annotations__rr!rwebsockets.exceptionsrHrrrar[rerkrprxrrrrrrrregisterrr4r$rs# &&/A   8 $D %!+|%9^t*A.* ,l;K/+ =?WY@8M E7 O/`bkoq8'%"'%'5'%T/T)./T36/Tdbf`d=3'=39>=3P]=3il=3B  %&2N3 @'or'rSWsv"*ce"**,!)RHst "J'E7&N7t J     o J"Ms( C== D  D