߲j0dZddlmZddlZddlmZmZddlmZ ddl m Z ddl mZmZddlmZdd lmZdd lmZdd lmZdd lmZdd lmZddZddZddZ d dZ!ddZ"ddZ#d!dZ$d!dZ%d"dZ&d!dZ'd#dZ(d!dZ)d!dZ*d!dZ+d!dZ,y)$u)Cloud browser provider resolution (explicit browser.cloud_provider, auto-detect, per-profile cache), backend/engine selection and headed-mode flags. Split out of ``tools/browser_tool.py``. Facade-owned state is read through ``_bt`` (``tools.browser_tool``, resolved per call) — no import cycle.) annotationsN)CallableOptional)BrowserProvider) get_provider)get_hermes_home_overridehermes_home_key)BrowserUseBrowserProvider)BrowserbaseBrowserProvider) normalize_browser_cloud_provideris_truthy_value) origin_module)browser_tool_cdpct|St||st||dt|||t||S)aProcess-lifetime cache on ``_bt``: the resolved flag is set BEFORE computing, then the final value is stored. Under a routed profile (HERMES_HOME override, multiplexed gateway) the slot is NOT consulted: every ``_memo`` here caches a ``browser.*`` config read, and one process-wide slot would hand the launch profile's engine/headed/private-URL policy to every other profile (same rule as ``_allow_private_urls``). T)rgetattrsetattr)_bt resolved_attr cache_attrcomputes =/home/ubuntu/.hermes/hermes-agent/tools/browser_tool_cloud.py_memorsF !-y 3 &]D)Z+ 3 ##c ddlm}|y#t$r.}tjj d|Yd}~yd}~wwxYw)zbIdempotently trigger plugin discovery (standalone scripts/tests may never import ``model_tools``).r)_ensure_plugins_discoveredz/Browser plugin discovery failed (non-fatal): %sN)hermes_cli.pluginsr Exception_originloggerdebug)rexcs r_ensure_browser_plugins_loadedr#$s@WA"$ W PRUVVWs  A$AAct}t}|j5|js!d|_|j j  |j|}||f}||j vr7|j ||_d|_||_|jcdddSd|_d|_t}|j|}||k7r|jrZ||_|j Dcgc] }|d|k(s |c}D]}|j j|d ||j |<|cdddScc}w#1swYyxYw)z9Return the provider cached for the active Hermes profile.NT)scopeFr) rr _cloud_provider_cache_lock_cloud_provider_resolved_cached_cloud_provider_scope_cached_cloud_providersclear_browser_registry_generation_cached_cloud_provider _resolve_cloud_provider_uncachedpop)rr%before_generation cache_keyresolvedafter_generationkey stale_keys r_get_cloud_providerr5-sh )C  E ' '++/3C ,  ' ' - - / # @ @u @ M  12IC777-0-H-H-S*/3,38011*.C &+0C (79H"??e?L  $44++380141L1L!`#PSTUPVZ_P_#!`EI//33ItDE9A++I61*"a+s+BE+AE< E  E 4E EEct} tt|}|ddlm}t |dd|dd|S#t $rt $r!|jjd|d YywxYw) zBuild the provider named by ``browser.cloud_provider``. Strict: an unregistered name raises ``ValueError`` (never a silent reroute to auto-detect); any other instantiation error is logged and yields None so the next call retries. Nr)selection_errorbrowser'zlno registered browser plugin has that name (install the corresponding plugin or fix the config key spelling)zIFailed to instantiate explicit cloud_provider %r; will retry on next callTexc_info) rr#_registry_get_browser_providertools.tool_backend_helpersr7 ValueErrorrr warning) provider_keyrr1r7s r$_instantiate_explicit_cloud_providerrALs )C&(1,?   B_Q|nA.~    fht@D Es5A0A54A5ct} ttfD]}|}|js|cS y#t$r |j j ddYywxYw)zAuto-detect: Browser Use, then Browserbase; never raises. Third-party plugins are only reachable via explicit ``browser.cloud_provider: ``. z!Cloud provider auto-detect failedTr:N)rr r is_availablerr r!)rclsfallback_providers r_autodetect_cloud_providerrFdss )CM-/IJ )C #  --/(( )  M rr r!rF)rr1r@rH browser_cfges rr-r-ts  )C/3HLM5%'++Ir: k4 (-=-L;KOOL\<]^L33-1*/3,v%, ;LIHL0-/!)C#'C  % %%  M H!LLMsAB0.B00C(C##C(c\t}tj xr tduS)zCReturn True when the browser tool will use a local browser backend.N)r_cdp_get_cdp_override_rawr5rs r_is_local_moderWs) )C))+ + M0C0E0MMrct}tjry|jryt yddlm}|ddjjdvS)uTrue when the browser runs locally AND the terminal is also local. SSRF protection only matters when the browser can reach networks the terminal cannot (cloud backends, containerized terminals). A CDP override is never trusted as local (that Chrome may live off-host) and MUST be checked before the Camofox short-circuit; ``_is_local_mode`` treats overrides the same way — keep the two in agreement. FTr) terminal_env TERMINAL_ENVrJ)rJ) rrTrU_is_camofox_moder5tools.terminal_scoperYstriplower)rrYs r_is_local_backendr`s^ )C !!# (2  0 6 6 8 > > @M QQrc@tdfd }tdd|S)a Return the browser engine: ``auto`` (no ``--engine`` flag), ``lightpanda`` or ``chrome``. ``browser.engine`` first, then ``AGENT_BROWSER_ENGINE``, then ``auto``; cached. Lightpanda is faster on navigation but has no graphical renderer (no screenshots). c :jdddd}|dk(r@tjjddj j xs|}hd}||vr7j jd|d jt|d}|S) Nengineautoc|r@t|jr't|jjSdS)Nrdstrr^r_vs rz6_get_browser_engine..compute..s3XY^abc^d^j^j^lc!flln>R>R>Trxrzbrowser.engine from configAGENT_BROWSER_ENGINEr[>rdchrome lightpandaz=Unknown browser engine %r (valid: %s), falling back to 'auto'z, ) _browser_cfgosenvironrNr^r_r r?joinsorted)rc_VALID_ENGINESrs rrz$_get_browser_engine..computes!!(F4x{WX V ZZ^^$:B?EEGMMOYSYF9  ' JJ  ^`fhlhqhqrxzHsIiJ KF r_browser_engine_resolved_cached_browser_enginereturnrgrrrrs @r_get_browser_enginerzs& )C  02JG TTrc@tdfd }tdd|S)zfTrue when the browser should launch headed: ``browser.headed``, else ``AGENT_BROWSER_HEADED``; cached.cjdddd}|xs>tjjddj j dvS)NheadedFc\|dSt|jjdvS)NFtrue1yesrfrhs rrjz2_is_headed_mode..compute..s5aiUUXYZU[UaUaUcUiUiUkpDVDrzbrowser.headed from configAGENT_BROWSER_HEADEDr[r)rnrorprNr^r_)r}rs rrz _is_headed_mode..computesX!!(E4DFbck(>CIIKQQSWkkkr_headed_mode_resolved_cached_headed_moderwboolrxrys @r_is_headed_moders% )Cl -/Dg NNrc^t}|dk7xr|j xr tS)zqTrue when ``--engine`` should be added: explicit (non-``auto``) engine on a non-cloud, non-camofox local session.rd)rr\rW)rcrs r_should_inject_enginers- )C V  OC$8$8$: : O~?OOrc:ttddfdS)z``browser.auto_local_for_private_urls`` (default True), cached: route private/LAN URLs to a local sidecar even with a cloud provider.%_auto_local_for_private_urls_resolved#_cached_auto_local_for_private_urlscHjdjtdS)Nauto_local_for_private_urlsz'auto_local_for_private_urls from config)rnrrrVsrrjz._auto_local_for_private_urls..s(  !>@g@gimpYZrrxrVs@r_auto_local_for_private_urlsrs& )C  46[ Z rcBtjddtdS)aWhether the user consented to real-profile local browsing. Read on EVERY call: it is a consent switch (flipping it off must not need a restart) and each multiplexed profile must decide for itself. One YAML load per local session creation, so no hot-path cost. use_real_profileFzuse_real_profile from config)rrnrrr_use_real_profilers 9 ! !"4eTCa bbrcbt}t tSt|ddtS)a&Whether the browser may navigate to private/internal addresses (default False: SSRF protection on). Single-profile calls cache for the process lifetime; multiplexed profile turns (ContextVar-scoped config) resolve on every call so one profile's opt-out is never reused by another. _allow_private_urls_resolved_cached_allow_private_urls)rr_resolve_allow_private_urlsrrVs r_allow_private_urlsrs1 )C!-*,, 46RTo pprc@t}|jddddS)zARead the browser private-URL toggle from the active config scope.allow_private_urlsFct|dS)NF)defaultr rhs rrjz-_resolve_allow_private_urls..s?ST^cCdrzallow_private_urls from config)rrnrVs rrrs- )C   0%9dgG HHr)rrgrrgrzCallable[[], object])rwNone)rwOptional[CloudBrowserProvider])r@rgrwrrrv)rcrgrwr)-__doc__ __future__rrotypingrragent.browser_providerrCloudBrowserProvideragent.browser_registryrr<hermes_constantsrr $plugins.browser.browser_use.providerr $plugins.browser.browserbase.providerr r=r utilsrtools.browser_tool_originrrtoolsrrTrr#r5rArFr-rWr`rzrrrrrrrrrrsW# %JQFJKG!>* $W>0  '&TN R,U(OP c qHr