߲jdZddlZddlmZmZddlmZdZde dee fdZ d e dee fd Z dd e d ee de fd Z d edefdZy)u Snapshot post-processing for the browser tools: truncate-and-store of oversized accessibility trees, model-boundary secret redaction, screenshot-path recovery. Facade-owned state is read through ``_bt`` (``tools.browser_tool``, resolved per call) — no import cycle. N)AnyOptional)origin)z6Screenshot saved to ['\"](?P/[^'\"]+?\.png)['\"]z0Screenshot saved to (?P/\S+?\.png)(?:\s|$)z(?P/\S+?\.png)(?:\s|$)textreturnc|sytD]O}tj||}|s|jdj j d}|sM|cSy)zHExtract a screenshot file path from agent-browser human-readable output.Npathz'")_SCREENSHOT_PATH_PATTERNSresearchgroupstrip)rpatternmatchr s @/home/ubuntu/.hermes/hermes-agent/tools/browser_tool_snapshot.py"_extract_screenshot_path_from_textrsY , '4( ;;v&,,.44U;D   snapshot_textc  ddl}ddlm}ddlm}||d}t |t jkDr6|dt jdt jdd t |dd z}dd lm }m }|d d }||d|j|jdjdd}|d|dz } || |ddt| S#t$r*} t j j#d| Yd} ~ yd} ~ wwxYw)uWrite a full snapshot to cache/web and return its path (None on failure — best-effort). Mirrors ``web_tools._store_full_text``: cache/web is mounted read-only into remote backends, so read_file can page through the complete tree on any backend. The stored copy is force-redacted (page-rendered secrets must not hit disk unmasked) and named by content hash so identical snapshots dedupe. rN)get_hermes_dirredact_sensitive_textTforcez [... stored copy truncated at ,z chars of z ...])ensure_spill_dirwrite_text_exclusivez cache/web web_cacheF)privatezutf-8 zbrowser-snapshot-z.txt)r overwritez)Failed to store full browser snapshot: %s)hashlibhermes_constantsr agent.redactrlen_btMAX_STORED_SNAPSHOT_CHARStools.spill_safetyrrsha256encode hexdigeststr Exceptionloggerdebug) rr"rrcontentrr cache_dirdigestr excs r_store_full_snapshotr4!s 36' TB w<#77 766676s7T7TUV6WX'l1%U,,  N"; < E2w 78BBDSbI.vhd;; T7ETJ4y  DcJsCC D # DD  max_charsc L|tj}t||kr|St|}|rddlm}||}|j d}g}d}tdt|xsdz|dz}|D]=}|t|zdz||z kDrn$|j||t|dzz }?t|t|z } | dkDrA|r*t|dz} |jd| d |d | d n|jd| d dj|S) u:Truncate a snapshot at line boundaries (never mid-element) to ``max_chars``. Defaults to ``browser.snapshot_threshold``. The full snapshot is stored to cache/web and the appended note tells the agent how to page through it with read_file — element refs beyond the cut are in the file, not lost. r)to_agent_visible_cache_path nz [... u9 more lines truncated — full snapshot: read_file path="z " offset=z limit=200]z= more lines truncated, use browser_snapshot for full content]) r&get_browser_snapshot_thresholdr%r4tools.credential_filesr7splitminappendjoin) rr5 stored_pathr7linesresultcharsreserveline remaining next_lines r_truncate_snapshotrKEsH668  =Y&&}5KF1+>    %EF E#K-2.. Q?G 3t9 q 9w#6 6  d TQ  E S[(I1} F aI MM)%##.-y ;P  MMGI;.kl m 99V rvaluec~ddlm}t|tr ||dSt|tr|Dcgc] }t |c}St|t rt d|DSt|tr6|jDcic]\}}t |t |c}}S|Scc}wcc}}w)zForce-redact secrets in browser-originated data (snapshots, console, eval results can carry page-rendered keys/cookies/tokens). Tool output is a model boundary, so this applies even when global log redaction is disabled.rrTrc32K|]}t|ywN)_redact_browser_output).0items r z)_redact_browser_output..zsDd+D1Ds) r$r isinstancer,listrPtupledictitems)rLrrRkeys rrPrPos3%$U$77%9>?&t,??%DeDDD%[`[f[f[hiicSW&s+-CD-IIii L @js B4B9rO)__doc__r typingrrtools.browser_tool_originrr&r r,rr4intrKrPrrr_s~  3 S Xc] !! !H'c'hsm's'T##r