߲j5? dZddlZddlZddlZddlZddlZddlmZmZddl m Z ddl m Z ddlmZddlmZddlmZdd lmZd Zd$d Zd ed efdZd efdZdededed eej<fdZded eefdZ ded eefdZ!ded eefdZ"d eded efdZ#ded dfdZ$dZ%d eefdZ&ded efdZ'deded eee(eeffd Z)d!e(ded eeeeeffd"Z*d e+fd#Z,y)%uReal-profile local browsing: snapshot the user's default Chromium profile into a hermes-owned copy, launch the real browser binary on it, and attach agent-browser. State (``_REAL_PROFILE_SESSION``, ``_real_profile_cdp_lock``, ``_real_profile_cdp_cache``, ``_real_profile_chrome_procs``) lives in ``tools.browser_tool``; it is read through ``_bt`` (resolved per call — never import ``tools.browser_tool`` at import time). N)OptionalTuple)loopback_request_kwargs) origin_module)browser_tool_cloud)browser_tool_install) browser_tool_lightpanda_fallback)browser_tool_sessionz$browser.use_real_profile is on, but returncddlm}t}|jr0||jj d|jr/yy)zTerminate real-browser processes launched for real-profile sessions (idempotent, atexit-safe); agent-browser only ATTACHED to them, so its own session cleanup never kills them.r) _terminatezreal-profile chrome)whatN)tools.browser_lightpandar _origin_real_profile_chrome_procspop)r _bts D/home/ubuntu/.hermes/hermes-agent/tools/browser_tool_real_profile.py_terminate_real_profile_chromers<4 )C ( (311557>ST  ( (http_cdpc"ddlm}||dS)z=True when an ``http://host:port`` CDP discovery root answers.r) _cdp_readyg?)timeout)rr)rrs r_cdp_http_readyr"s3 h ,,rct}tj|j}tj|}|j dd|S)uPReaper-visible socket dir + ``owner_pid`` claim like every other lane (agent-browser's default dir is invisible to the reaper — #100855). The daemon-side idle timeout is dropped: Chrome is launched by Hermes, not the daemon, so a self-exiting daemon would leave Chrome holding the copy dir under the next snapshot overlay.AGENT_BROWSER_IDLE_TIMEOUT_MSN)r_session_prepare_session_socket_dir_REAL_PROFILE_SESSION_agent_browser_command_envr)r socket_direnvs r_real_profile_daemon_envr$(sE )C55c6O6OPJ  - -j 9CGG +T2 Jr session_namecmd log_labelc t} tj} t j gt j|d||dddddttjS#t$rYywxYw#tjtf$r'}|jjd||Yd}~yd}~wwxYw) zeRun ``agent-browser --session ``; None when agent-browser is missing or the run fails.N --sessionTutf-8replacecapture_outputtextencodingerrorsrr#stdinzreal-profile %s failed: %s)r_install_find_agent_browserFileNotFoundError subprocessrunr_agent_browser_argvr$DEVNULLSubprocessErrorOSErrorloggerdebug)r%r'r&r browser_cmdes r_agent_browser_session_cmdr@4s )C224 ~~k < <[ Ik;kXdkgjk-1wW`jl":"/ A;:A;>B>B99B>ct|ddd}|2tjd|jxsdj nd}|rd|j d SdS) zZHTTP CDP discovery root of an agent-browser session (from its ``ws://`` cdp-url), or None.getzcdp-urlz get cdp-urlr'Nzws://127\.0\.0\.1:(\d+)/http://127.0.0.1:)r@researchstdoutstripgroup)r%procms r_agent_browser_get_cdprNDs[ %lE9P] ^DOSO_ - 0Ar/H/H/JKeiA/0 qwwqzl +:d:rdata_dirc ttjj|dd5}|j j cdddS#1swYyxYw#t $rYywxYw)zUFirst line of Chrome's ``DevToolsActivePort`` in ``data_dir`` (None when unreadable).DevToolsActivePortr*r0N)openospathjoinreadlinerJr;)rOfhs r_read_devtools_portrYKs\ "'',,x)=> Q )UW;;=&&( ) ) ) s.+A!A A!AA!A!! A-,A-c P ttjj|dd5}|j j |j j }}dddjrjdsyd|} ddl }t|j|dfd d it|jjd xsd }|j|r|SdS#1swYxYw#t $rYywxYw#t$rYywxYw) aHTTP CDP root of a Chrome still running on ``data_dir``, or None. ``DevToolsActivePort`` outlives a crashed Chrome and its port can be recycled by another local CDP server, so the file's browser id (line 2) must match what ``/json/version`` reports before it is trusted.rQr*rRNz/devtools/browser/rErz /json/versionrwebSocketDebuggerUrlrD)rSrTrUrVrWrJr;isdigit startswithrequestsstrrBrjson Exceptionendswith)rOrXport browser_pathrr_ws_urls r_surviving_chrome_cdprgTs "'',,x)=> Q NUW!#!4!4!6 8K8K8M,D N <<>!8!89M!N"4&)H\X\\XJm"<mamKbckKlmdfSS!78?<>@|48>$> N N  s;+D =C>*D AD>DD DD D%$D%ctjd|xsd}t|xrt||j dk(S)zTrue when the CDP endpoint's browser runs on ``data_dir`` (DevToolsActivePort match proves it is our profile copy, not a throwaway temp dir a raced/stale launch fell back to).:(\d+)rDrF)rGrHboolrYrK)rrOrMs r_cdp_on_data_dirrkis: )X^,A 7 B*84 BBrc t|ddy)zHBest-effort close of an agent-browser session (stale/wrong-dir cleanup).closez session closerCN)r@)r%s r_agent_browser_close_sessionrnps|WPr) z--remote-debugging-port=0z--no-first-runz--no-default-browser-checkz--disable-background-networkingz--disable-component-updatez--disable-default-appsz--disable-hang-monitorz--disable-popup-blockingz--disable-prompt-on-repostz--disable-syncz--disable-features=Translatez--no-startup-windowcBddlm}| tdzS||k(r tdzSy)aFail-closed message when the default browser can't be used, else None. A pre-release channel lives in a profile dir we don't resolve; normalizing to the stable family would drive a DIFFERENT profile/account (wrong-principal bug), so refuse rather than guess. r)UNSUPPORTED_CHANNELNzyour default browser is not a supported Chromium browser (Chrome, Edge, Brave, Brave Origin, Chromium). Real-profile browsing requires a Chromium default; set one or turn the toggle off.zyour default browser is a pre-release Chromium channel (Beta / Dev / Canary), which real-profile browsing does not support. Set your default to a stable Chrome / Edge / Brave / Brave Origin / Chromium, or turn the toggle off.)hermes_cli.browser_connectrp_RP)browserrps r _real_profile_unsupported_reasonrt}sD ?~~ %%bb c rerrcjddlm}|r"|j|r|t|ddzSt|S)zUser-facing message for a failed profile snapshot; a locked profile adds the approved-close command, which the agent must ASK the user about first (it quits their browser).r)_PROFILE_LOCKED_PREFIXNu To close it (only after the user approves — it quits their browser and loses unsaved tabs), run: `hermes browser close-profile`, then retry.)rqrwr^lenrr)rurws r_real_profile_snapshot_errorrysHB s~~45C./015pp qU3%=r real_binarycopy_dirc t} tjtjj |d|d|gt }ttjjdxstjjd}tjr!|s0tjjdr|jd t!j"|t j$t j$t j$d|j'}|j,j|t/j0d z}t/j0|kr~t3|xsd }|j5r t7|d fS|j9t;d t*d zfSt/j<dt/j0|kr~t;d t*dzfS#t $rYwxYw#t j(t f$r}d t*d |fcYd }~Sd }~wwxYw)aLaunch the user's REAL browser binary on the profile COPY; return (debug_port, error). agent-browser's own launch force-adds --use-mock-keychain / --password-store=basic, which makes macOS Chrome drop every keychain-encrypted cookie (signed-out copy); launching the real binary ourselves keeps the OS keychain path intact and agent-browser attaches via ``--cdp ``. Headless by default (a focus-stealing window defeats a background capability); Chrome's NEW headless shares the profile's cookie store (legacy --headless does not). browser.headed / AGENT_BROWSER_HEADED opts into a window, except on a display-less Linux host (launch would die). rQz--user-data-dir=DISPLAYWAYLAND_DISPLAYlinuxz--headless=newT)rIstderrr2start_new_sessionr#Nthe launch failed: g>@rDzJChrome exited during startup (another instance may hold the profile copy).g?z\the real-profile browser did not expose a debug port in time. Retry, or turn the toggle off.)rrTunlinkrUrVr;_REAL_PROFILE_CHROME_FLAGSrjenvironrB_cloud_is_headed_modesysplatformr^appendr6Popenr9_build_browser_envr:rrrtime monotonicrYr]intpollrsleep) rzr{r chrome_argv _has_display chrome_procr?deadlinelines r_launch_real_profile_chromers )C  "'',,x)=>?"28* =[@Z[K y1VRZZ^^DU5VWL  " " $,cll>U>UV]>^+,4 &&{:;M;MV`VhVh-7-?-?SW]`]s]s]uw ""))+6~~$&H .. X %"8,2 <<>t9d? "     ) * ,kkk k 4 .. X %#$ uu uu/      & & 04u/s3334s03H AH HHI 4 II I rdc t} tj}gt j |d|jdt|dd} tj|dddd |jd ttj }|j"dk7r^|j$xs|j&xsdj)j+}dtd|r|dfSd|j"fSt-|j}t/|} | 5t1j2d|xsdx} r| j5d| k7rd| }|s dtdzfS|dfS#t$r}dtd|fcYd}~Sd}~wwxYw#tj$rdtd zfcYStjt f$r}dtd |fcYd}~Sd}~wwxYw)aMake agent-browser ATTACH to the running Chrome (never launch its own); returns ``(http_cdp, error)``. The daemon may answer with the endpoint of a browser IT spawned (throwaway temp profile); the DevToolsActivePort OUR Chrome wrote is authoritative on disagreement. Nz;the local browser engine (agent-browser) is not installed: r)z--cdprSz about:blankTr*r+) first_openr-zOthe real-profile browser took too long to start. Retry, or turn the toggle off.rrrDz*the real-profile browser failed to start: zexit rirFrEzethe real-profile browser started without exposing a devtools endpoint. Retry, or turn the toggle off.)rr3r4r5rrrr8r r`r6r7_get_open_command_timeoutr$r9TimeoutExpiredr:r; returncoderrIrJ splitlinesrNrYrGrHrK) rdr{rr>r?argvrLtailcdpour_portrMs r%_attach_agent_browser_to_real_profilers" )C\224  7X ) )+ 6 7  7SE^E^ 7  7Y 7 & 7(5 7D4~~d4dW]f&)&C&Ct&C&TZrZt$.$6$68 ! 0t{{0b779DDFuFSWtBxFwxxx_deietetdu]vFwxxx !:!: ;C"8,Hbii 39"&E!E!E177ST:YaKa!(, SCCC C 9+ \uWXYWZ[[[\  $ $mSllll  & & 04u/s3334sBE/AF/ F8 F F FG!2G! GG!G!c t}tjs+ ddlm}||jjddytjr dtdzfSddlm }m}m}m}|j"5|jj%d}|r7t'|r,t)j*|j,|dfcdddS|jjdd|}t/|} | r d| fcdddS||} t1|j,} | r3t'| r(t3| | r| |jd<| dfcdddS| rt5|j,t7| } | rst9t;| j=d d d | \} }| s d|fcdddS| |jd<|j j?d | | | dfcdddS||\} }|s| sdtA|fcdddS||}|dtd |d fcdddStC|| \}}| d|fcdddSt9|| \} }| s d|fcdddS| |jd<|j j?d|| | | dfcdddS#t $r'}|j jd|Yd}~d}~wwxYw#1swYyxYw)aResolve ``(cdp_url, error)`` for consented real-profile browsing. Snapshot -> launch real binary on the copy -> return its HTTP CDP endpoint. The copy is a non-default dir, so it sidesteps the Chrome >=136 default-profile remote-debugging block and never contends with the user's running browser. One shared agent-browser session is reused across calls (cached, re-validated). ``(None, message)`` fail-closed; ``(None, None)`` when consent is off. r)cleanup_real_profile_snapshotsz.real-profile cleanup-on-consent-off failed: %sNr)NNzbrowser.engine is set to 'lightpanda', which cannot load a real Chromium profile. Set browser.engine to 'auto' or 'chrome' to use real-profile browsing, or turn the toggle off.)chromium_executabledetect_default_chromiumreal_profile_copy_dirsnapshot_real_profile:rFz8real-profile: re-attached to surviving Chrome at %s (%s)zthe real browser binary for 'z:' could not be found. Reinstall it or turn the toggle off.z,real-profile browser ready for %s at %s (%s))"rr_use_real_profilerqrrbr<r=_real_profile_cdp_cacher_lp_using_lightpanda_enginerrrrrr_real_profile_cdp_lockrBrrrr rtrNrkrnrgrrrsplitinforyr)rrr?rrrrcachedrs unsupportedr{existing survivingrrurzrds r_real_profile_cdprs3 )C  # # % R Q * , ##''t4 ##%cwwx xZZ # #3,,007 of-  0 01J1J K4< 33 ##''t4)+6w? $33")1)#*C*CD 16FxQY6Z19C ' ' .T>+33,  ()B)B C *(3 0K+8 K(K##K(+K4)r N)-__doc__rTrGr6rrtypingrragent.proxy_bypassrtools.browser_tool_originrrtoolsrrrr3r rr rrrrr`rjrdictr$CompletedProcessr@rNrYrgrkrnrrtryrrrtuplerrrrs  "6>.292,U-c-d- $  S   PXYcYtYtPu  ;;#;#(3-?C?HSM?*CsCcCdCQsQtQ #"cc$vS$vC$vE(SV-YabeYfJfDg$vNsuXVY]\deh\iMiGjBP5Pr