߲j dZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl m Z ddl mZmZmZmZmZmZddlmZddlmZej0eZdZdZej:d Zd Zd Z d Z!d Z"dZ#dZ$ej:dZ%ej:dejLZ'ej:dejLZ(dZ)dndegefdede*defdZ+de*de*dede*def dZ,dnde*de-fdZ.de-fdZ/d e0d!e*ddfd"Z1d e0de-fd#Z2d e0d$ee*gefd%e*d&ee3ge*fd'e*dee*f d(Z4d)e*dee*fd*Z5de0fd+Z6d,e*de*fd-Z7de0fd.Z8d/e0de-fd0Z9de*fd1Z:d/e0de-fd2Z;de-fd3Zdeee*fd6Z?dod7e@dee-e*ffd8ZAd9ee*dee*fd:ZBd;e*dee*efd,e*deee*effd?ZEde*fd@ZFdnd9ee*dAe*de*fdBZGdnd e0d9ee*dAe*dee*fdCZHdnd e0d9ee*dAe*dee*fdDZIdnd e0d9ee*dAe*dee*fdEZJdnd e0d9ee*dAe*dee*fdFZKd e0dGe-dee*fdHZLd e0d9ee*ddfdIZMd e0dJe*d9ee*dKe-dee*f dLZNde0fdMZOd7ede@fdNZPdOZQdpdPZRdQZSde!ddRfd)e*dJe*d7e@d9ee*dKe-f dSZTdTZUdUZVdVZWdWZXdXZYde*fdYZZde0fdZZ[d[eUeYzd\zd]d^d_d`d^dad`dbe!dce!dde#dedfdgd)gdhdiZ\ddjl]m^Z^e^jd[de\dkez_lazy_call..dsH')"9"9&"A4HJ)r)rrrrs`` r _lazy_callr&as JGU_ ``r%contextc$tdddd|S)Nztools.browser_camofoxis_camofox_modeFzCamofox activity check failedr&)r's r_camofox_activer+gs -/@%KhiphqIr ssr%ctddddS)Nztools.browser_tool_cloud_use_real_profileFz"real-profile consent lookup failedr*r%r_real_profile_consentedr/ks 02EuNr ssr%envcdpc8|||jdrd<yd<y)uMExport a CDP endpoint under the BU_CDP_* contract (http(s) → URL, else WS).)zhttp://zhttps:// BU_CDP_URL BU_CDP_WSN) startswith)r0r1s r _set_cdp_envr6osTWC'>? Q[Qr%c\t|jdxs|jdS)Nr4r3)boolget)r0s r _has_cdp_envr:ts$  $= (= >>r%get_session_info cache_keyfail_msg no_cdp_msgc t||xsijdxsd}|s|St||y#t$r}||cYd}~Sd}~wwxYw)z_Export the CDP endpoint from ``get_session_info(cache_key)``; error string on failure / no CDP.cdp_urlrN)strr9rr6)r0r;r<r=r>r1rs r_export_session_cdprBxs`#I.4"99)DJK c  {s(; AA AAcodec vddlm}tdt|tj |xsdDdS)zFReturn an error if a URL literal fails the built-in navigation checks.r)evaluate_url_safetyc3FK|]}|s|jddyw)errorzBlocked: unsafe URLN)r9).0errs r z'_blocked_url_in_code..s)BS~A"78Bs!!rN)tools.browser_toolrEnextmap_URL_REfindall)rCrEs r_blocked_url_in_coderPsD6 BCH[]d]l]lmqmwuw]xDyBDH IIr%cddlm}|}|jdd|jddt|j dd|d<|j dd|S) Nr)_build_browser_env PYTHONPATH PYTHONHOMEPATHrANONYMIZED_TELEMETRYfalse)rKrRpop_floor_subprocess_pathr9 setdefault)rRr0s r_base_subprocess_envr[sX5  CGGL$GGL$()<=CKNN)73 Jr%pathc tjdk(r|Stjt5ddlm}||xsdcdddS#1swYnxYw|xsdjtjDcgc]}|s| ncc}w}}tjj|tDcgc]2}|t|vstjj|s1|4ncc}wc}zS)aGuarantee core system dirs on the CLI subprocess PATH: profile workers (kanban bots, cron) can inherit a PATH of only version-manager dirs, and the uv binary's POSIX sh trampoline resolves ``dirname``/``realpath`` via PATH (exit 127 without /usr/bin). Reuses browser_tool's ``_merge_browser_path`` floor, else appends FHS bin dirs. Windows .cmd shims don't trampoline: no-op there.ntr)_merge_browser_pathrN)osr contextlibsuppressrtools.browser_tool_installr_splitpathsepjoin _FHS_BIN_DIRSsetr\isdir)r\r_ppartsds rrYrYs  ww$   Y '/B"4:2.///**2::6 <1!Q < o'B? d+s33  @!D s).. AAAA browser_cfgct|jddry ddlm}t |jdxsdj j|k(S#t$rYywxYw) u[True when the browser section selects the Nous Tool Gateway — by the current ``hermes tools`` picker row (``cloud_provider: nous``) or the pre-picker ``use_gateway: true`` flag. Reading only the legacy flag missed every picker-configured gateway, and the direct-API branch it fell into holds no credentials in managed mode (#108310). use_gatewayFrqTr)NOUS_MANAGED_PROVIDERcloud_providerr)r r9tools.tool_backend_helpersrzrrAstriplower)rwrzs r _use_gatewayrsj {}5uED {/06B 7 = = ? E E GK` `` sA"" A.-A.ctjd}t|tr |durtSdSt |xsdj jS)uConfigured browser backend key ("" = unset → default). YAML 1.1 parses an unquoted ``off`` as False — that must mean BACKEND_DISABLED, not "unset".backendFr)rvr9rsr8BACKEND_DISABLEDrAr}r~)raws rget_browser_backendrsV   ! !) ,C9CC9Nu r"rTWX[Xa_aTbThThTjTpTpTrrr%c t|tr|jdryt|jdxsdj j }|dvst |s tdryddlm }t|d dS) zTrue for pre-CLI direct-API Browser Use cloud configs. An explicit backend or a non-Browser-Use cloud_provider wins; Camofox is selected via env var, not cloud_provider, so a Camofox user with a stray BROWSER_USE_API_KEY keeps it.rFr{r>rr z during migrationr) get_secretBROWSER_USE_API_KEY) rsrtr9rAr}r~rr+agent.secret_scoperr8)rwproviderrs r"is_legacy_browser_use_cloud_configrsx k4 (KOOI,F;??#34:;AACIIKH**l;.G?[nKo-  0"5 66r%ctryt}|r |tk(Stt xs t duS)azTrue when the Browser Use CLI replaces the built-in browser stack. Browser Use mode is the DEFAULT: unset ``browser.backend`` ("") enables it whenever the CLI is runnable (installed binary or uvx); ``browser.backend: off`` keeps the built-in browser_* tools. Camofox always falls back to the built-in tools (Firefox, custom HTTP API, no CDP surface for the harness).FN)r+r _BACKEND_KEYrrv _find_cli)rs ris_browser_use_cli_modersQ !#G&-7l "H4VWhWj4k5GoxozCGpGHr%cj tsts tytt dz dz }t j t5dtj|jjz cxkrdkr nn dddydddt j t5|jjdd|jdddy#1swYYxYw#1swYyxYw#t$r }tj!d |Yd}~yd}~wwxYw) zOne-line notice when ``browser.backend`` is unset but the CLI is not runnable, so the session fell back to the built-in tools. Rate-limited to once per 24h via a stamp file.Ncachez.browser_use_default_noticeriQTparentsexist_okuBrowser Use CLI not found — using the built-in browser tools. Run `hermes tools` (Browser Automation → Browser Use) to install it, or `browser.backend: off` in config.yaml to silence this.z'browser-use downgrade notice failed: %s)rr+rrr rarbOSErrortimestatst_mtimeparentmkdirtouchrrr)stamprs rdefault_downgrade_noticers  O$59P_&''14QQ   ) DIIK%**,"7"77C)C     )  LL  td  ; KKM @    @  >BsXD 2D =C1D !D :.C=(D 1C:6D =DD D D2D--D2c@tttdz S)uV$HERMES_HOME/bin — where install.sh puts uv/uvx and install_cli() links browser-use.bin)rArr r.r%r_managed_bin_dirrs tO%&. //r%ctjdk(r>tjjd}|rt t |dz dz nd}n7t t tj jddz dz }td|fDcgc] }||s| }}dd fd d ffD]1\}}|D]'}tj|| }|s||ccS3ycc}w) uLocate the browser-use CLI, or None when it can't be run. MANAGED-FIRST: Hermes' own ``$HERMES_HOME/bin`` copy always wins so every session drives one Hermes-controlled binary; PATH and the user-level tool dir (~/.local/bin, or uv's %APPDATA%/uv/bin on Windows — Desktop/TUI workers may start with a minimal PATH that omits it) are fallbacks; uvx zero-install (same probe order) is last.r^APPDATAuvrN~z.localr c|gSr r.bs rr$z_find_cli..s!r%uvxc |dgS)Nr r.rs rr$z_find_cli..s !]I[r%r\) r`renvironr9rArr\ expanduserrshutilwhich)appdatauser_binrj probe_pathsrargv probe_pathfounds rrrs  ww$**..+8?3tG}t+e34TtBGG..s34x?%GH/14BUaiST1UKU%}5?[7\]# d% #JLLJ7EE{" ##  Vs  C'"C' timeout_sc tt}tjd|}|rdd|dfSdttfd}t |dd xstjd }|sy it jd d i} t|jdd||d< tj|dddgdddd||tj}|j$dk7rSdj'|j(xs|j*xsdj-j/dd}dd|fSt1} | rt3| dk7ry dd!| ddfS#t$r!}tjd||Yd}~d}~wwxYw#tj $r dd|dfcYSt"$r}dd|fcYd}~Sd}~wwxYw)"uInstall the browser-use CLI via ``uv tool install`` (managed uv via ``ensure_uv`` → uv on PATH), linking the binary into ``$HERMES_HOME/bin`` (``UV_TOOL_BIN_DIR``) so ``_find_cli()`` resolves it for every profile. Returns ``(ok, message)``; never raises. MANAGED-FIRST: only the managed copy short-circuits — a browser-use on PATH is a user-level side install and must not block provisioning the canonical copy (version drift).r rTz#browser-use CLI already installed ()rc>ddlm}t|xsdxsdS)Nr ensure_uvr)hermes_cli.managed_uvrrArs r _managed_uvz install_cli.._managed_uvs39;$"%--r%Nz Managed uv bootstrap unavailabler)Fzuv is not available and could not be bootstrapped. Install uv (https://docs.astral.sh/uv/) and run `uv tool install browser-use`. UV_NO_CONFIG1rUV_TOOL_BIN_DIRzCould not prepare %s: %stoolinstallutf-8replace)capture_outputtextencodingerrorsr0timeoutstdinFz.`uv tool install browser-use` timed out after sz-Failed to run `uv tool install browser-use`: r rz&`uv tool install browser-use` failed: )Fuzinstall reported success but the browser-use binary is still not resolvable — run `uv tool install browser-use` manuallyzbrowser-use CLI installed ()rrrrrArr`rrrrrr subprocessrunDEVNULLTimeoutExpiredr returncoderfstderrstdoutr} splitlinesrlen) rbin_dirmanagedruv_binr0rresulttailrs r install_clirs  Gll=w7G:7)1EEE.#.K'I J `fll[_N`F ^ -RZZ - -C= W D48!( JM J[_fju|'0c9T^TfTfhAyy&-->6==>BEEGRRTUWUXYZ?vFFF KE CJ!OE .uQxj: ::% = /!<<=  $ $TFykQRSSS JEaSIIIJs<;!E/F E>E99E>F7F7&F2,F72F7task_idctjjdrtjdS tj dt |xsdddxsd}t tdz dz dz |z }|jd d t |S#t$r }tjd |Yd}~yd}~wwxYw) zCStable per-task scratch dir that persists across browser_exec callsBH_AGENT_WORKSPACE_rNPrr workspaceTrz&browser_exec workspace unavailable: %s) r`rr9_TASK_ID_SAFE_REsubrArr rrrr)rsafer\rs r_workspace_dirr9s zz~~*+zz.//##CW-A )BCCRHUIO%&0=@;NQUU 4$ /4y  =qAsA&B C$B??Crsincecttj|xsdD]K} tjj |r)tjj ||dz k\r|cSMy#t$rYZwxYw)znLast screenshot path printed during this exec that exists and was written after the exec started, or None.rrN)reversed_IMAGE_PATH_RErOr`r\isfilegetmtimer)rrr\s r_find_screenshotrGsu// "=> ww~~d#(8(8(>%!)(K     sAA22 A>=A>rc" ddlm}m}m}ddlm}|sy|t |d||d}tj|d }|d z}d||dd d |d dd|idgdS#t$r } tjd| Yd} ~ yd} ~ wwxYw)z?Build a multimodal tool result attaching path for vision modelsr)_EMBED_MAX_DIMENSION_resize_image_for_vision#_should_use_native_vision_fast_path)resolve_embed_target_bytesNz image/pngT) mime_typemax_base64_bytes max_dimension force_jpegF) ensure_asciiuS The screenshot from this call is attached — inspect it with your native vision.)screenshot_path native_visionr)typer image_urlurl)rr) _multimodal text_summarymetacontentz:Native screenshot attach failed (falling back to text): %s) tools.vision_toolsrrr!tools.vision_tools_history_budgetrrjsondumpsrrr) rr\rrrrdata_urlrattachedrs r_native_screenshot_resultrSs g gP24,DJ+=W=Y:N[_azz&u5qq#TW[nrCs%+X>diksct@uvx x  QSTUsA%A A%% B.B  Bc2ddlm}m}|dS|S)u``""`` outside a served-profile scope (every legacy key stays byte-identical); under a multiplexed turn, the routed profile's home key — one profile's browser must never be handed to another that happens to use the same session name or task id (#110032).rget_hermes_home_overridehermes_home_keyr)hermes_constantsr r rs r_served_profile_tagr isK)+32J9JJr% session_namecF|rd|n|xsd}t}|r|d|S|S)zeSession-cache key for a backend browser: named sessions get their own; served profiles get their own.z bu-named-zbrowser-exec-default@)r )rr keytags r_backend_cache_keyrqs7(4Il^ $7;\F\C  C cU!C5>)c)r%c ddlm}ddlm}|sy t||t||dd}| d|t<|S#t$r }t j d|Yd}~yd}~wwxYw) a(Point the harness at a Hermes-spawned ``lightpanda serve`` (``browser.engine: lightpanda`` and nothing of higher precedence claimed the session). Each cache key gets its own process via the legacy ``_get_session_info()`` (cache, reaper, atexit): private browser, own-tab preamble skipped.r_get_session_info)_using_lightpanda_engineNz browser engine lookup failed: %scd|dS)Nz!Lightpanda could not be started: un Set browser.engine to auto to use local Chrome, or switch backends via `hermes tools` → Browser Automation.r.)rs rr$z)_resolve_lightpanda_cdp..s6qc:hhr%z\Lightpanda session returned no CDP endpoint. Set browser.engine to auto to use local Chrome.r) tools.browser_tool_sessionr&tools.browser_tool_lightpanda_fallbackrrrrrBr_PRIVATE_BROWSER_SENTINEL)r0rr rrrrIs r_resolve_lightpanda_cdprxs{@S')*   27L I if  C  {), %& J  7;s> A'A""A'c ddlm}ddlm}|t||ddg|d  }|xsijd r5t|xsijd xsijd xsdnd}|sd|xsijdxsddSt||d|t<y#t$r }t j d|Yd}~yd}~wwxYw)uPoint the harness at Hermes' packaged Chromium, launched through agent-browser for this cache key — the same browser the built-in tools drive. Left alone, the harness discovers the user's INSTALLED Chrome on its default profile, which needs the chrome://inspect toggle + an Allow popup per run and is blocked outright on Chrome >=136; on a headless box it just reports ``chrome-not-running``. ``get cdp-url`` runs through ``_run_browser_command`` (legacy cache, inactivity reaper, atexit, Chromium preflight/auto-install) on EVERY call: it launches the browser cold, follows a relaunch, and refreshes the agent-browser daemon's idle timer, which never sees the harness's direct CDP traffic.r)_run_browser_command)_get_open_command_timeoutz+managed chromium resolution unavailable: %sNr9zcdp-urlT) first_openrsuccessdatacdpUrlrz(The local browser could not be started: rGz&agent-browser returned no CDP endpointuW Run `hermes tools` → Browser Automation to (re)install Chromium, or switch backends.r) rrrKrrrrrr9rAr6r)r0rr rrrresr1s r_resolve_managed_chromium_cdpr%sC@ 1'<H%R[Q\'@D'Q SCGJybooV_F`# rv&,"11(;Ar BfhC :CI2??7;S;W;AAii jc%(C!"   BAFs B-- C6CCcTt|||}|s t|r|St|||S)z_Local engine (no provider / override): ``browser.engine: lightpanda`` or the packaged Chromium.)rr:r%)r0rr rIs r_resolve_local_engine_cdpr's. !#w =C l3 (g| DDr%c H t|ry ddlm}ddlm}ddlm}t|d}|r t||yt|dd}| t|||Stt|d dxsdjj!} | t"k(rt%t's d |t(<yt+|j, t/||t1|| fd d d } | |r d |t(<| S#t$r }tjd|Yd}~yd}~wwxYw)u-Point the harness at the configured backend's CDP endpoint; error string on failure. Precedence: (1) ``BU_CDP_WS``/``BU_CDP_URL`` already in env (operator override); (2) ``BROWSER_CDP_URL`` env / ``browser.cdp_url`` (``/browser connect``); (3) a cloud provider via the legacy ``_get_session_info()`` so browser_exec shares the SAME session machinery (per-task cache, expiry, reaper, atexit); (4) the local engine — ``browser.engine: lightpanda`` or Hermes' packaged Chromium via agent-browser (never the harness's own discovery of the user's installed Chrome); (5) BU direct-API configs → None: the CLI reaches BU cloud natively (BU_AUTOSPAWN). ``session_name`` (BU_NAME) keys the session cache so each name gets its OWN browser — what makes named sessions concurrent-safe. Nr_get_cloud_providerr)_get_cdp_overridez/browser_tool backend resolution unavailable: %srzCloud provider lookup failedrrcdd|dS)NCloud browser provider z failed to provide a session: u^. Fix the provider configuration or switch backends via `hermes tools` → Browser Automation.r.)r provider_names rr$z&_resolve_backend_cdp..s",]O;YZ[Y\]rrr%r-zw returned no CDP endpoint, so Browser Use mode cannot drive it. Switch to the built-in browser tools for this provider.)r:tools.browser_tool_cloudr*rrtools.browser_tool_cdpr+rrrrr6r'rAr!r}r~rrrvrr__name__rBr) r0rr r*rr+roverrider provider_keyrIr.s @r_resolve_backend_cdpr4s/C@@<',HS(#)41OPH(g|DD wx4:;AACIIKL|#L9J9L,M), %&N++M   27L I s !-1S S  C {|), %& JA  FJsC88 D!DD! force_localcZtr t|ry ddlm}ddlm}ddlm}t|dry|s(t|tttry|\}}|r|s t|||xsdS#t$r }tjd|Yd}~yd}~wwxYw)uJPoint the harness at the user's real-profile copy-browser (a SNAPSHOT of their default Chromium profile, hermes_cli.browser_connect) when consented. Two ways in: the effective backend is already local (no provider, CDP override, or legacy BU cloud config) → silent upgrade; or ``force_local`` (consent-gated ``local`` arg) → the user's browser even under a cloud backend. Operator overrides (BU_CDP_* env, /browser connect, ``browser.cdp_url``) own the session either way. Fail closed: a launch error is returned so a consented user is never silently downgraded.Nr)_get_cdp_override_rawr))_real_profile_cdpz/real-profile backend resolution unavailable: %sr)r/r:r0r7r/r*tools.browser_tool_real_profiler8rrrrobjectrrvr6)r0r5r7r*r8rr1rIs r_resolve_real_profile_cdpr;s # $ S(9@@E#R( F#6AMABSBUV "HC 3S# ;$  FJsB B* B%%B*c|jdxs|jd}|sy ddlm}ddlm}m}|\}}|j |xsd||||y#t$r }tjd |Yd}~yd}~wwxYw) a1Attach the per-task CDP supervisor to the browser this exec drives so ``browser_vault_fill`` has a secret-capable WebSocket (never argv) into the SAME browser. Only CDP-routed backends expose an endpoint; BU direct-cloud (BU_AUTOSPAWN) does not, and the vault tools report ``supervisor_required``.r4r3Nr)SUPERVISOR_REGISTRY)_get_dialog_policy_config_resolve_cdp_overrider)rr@ dialog_policydialog_timeout_sz:browser_exec: CDP supervisor attach failed (non-fatal): %s) r9tools.browser_supervisorr=r0r>r? get_or_startrrr) r0rr1r=r>r?policyrexcs r_attach_vault_supervisorrFs ''+  7#'',"7C X@[57 ((1EIOdehOi7=PY ) [ X QSVWWXs7A!! B *BB sessionlocalcpt||}|r|S|rt|s tsyt|||S)asResolve where the harness connects; returns an error string or None. Real-profile consent runs BEFORE provider resolution so a hit short-circuits the cloud path via the BU_CDP_* env contract. Named sessions compose with the backend: BU_NAME namespaces the harness daemon (IPC socket, log, pid) and on provider backends additionally keys its own cloud browser.)r5ulocal=true was requested but browser.use_real_profile is off. Enable it in config.yaml (browser.use_real_profile: true) or the desktop Settings → Browser section, then retry.)r )r;r:r/r4)r0rGrrHrp_errs r_route_backendrKs= 's >F   \#&/F/Hl W7 CCr%c^dtfd}tjdk(r t|idSddiS)a Popen kwargs starting the CLI in its own process group (a new session on POSIX) so a timeout can take down every process that inherited the capture pipes, not just the CLI child. Windows also hides the console the .cmd shim would flash (as browser_tool does).rcddlm}tj}|xjtj zc_|t tddz|dS)Nrwindows_hide_flagsCREATE_NEW_PROCESS_GROUP) creationflags startupinfo)hermes_cli._subprocess_compatrOr STARTUPINFOdwFlagsSTARTF_USESHOWWINDOWr!)rOsis r_flagsz#_group_popen_kwargs.._flags%sJD  # # % j555 !3!5 Lfhi8j!j!# #r%r^zWindows hide-flags unavailablestart_new_sessionT)rtr`rr)rXs r_group_popen_kwargsrZ!s8#D# DF77d?6&"> ?sYlnrXssr%c tttt|tS#t t f$r tcYSwxYwr )max_MIN_TIMEOUT_Sminint_MAX_TIMEOUT_S TypeError ValueError_DEFAULT_TIMEOUT_S)rs r_clamp_timeoutrd.s9">3s9~~#FGG z ""!!"s&)AAg$@c tjdk(rddlm}t j t tj5tjddddt|jgtjddd d d d | dddyt j tt5tj|jt j"dddy#1swYyxYw#1swYyxYw)uSIGKILL the CLI's whole process group (POSIX; ``start_new_session`` made pgid == pid) or, on Windows, its process tree via ``taskkill /T /F`` — the only group-wide kill it offers.r^rrNtaskkillz/Tz/Fz/PIDTrr F)rrrrrrcheckrQN)r`rrSrOrarbrrSubprocessErrorrrApidrProcessLookupErrorPermissionErrorkillpgsignalSIGKILL)procrOs r_kill_cli_process_grouprq:s ww$D  **D*D E L NNJdFCMJR\RdRd*.TGT]gi!&6H6J L L    / A, $((FNN+,,  L ,,sA C+3/C7+C47Dc tj|ftjtjtjddd|dt} |j ||\}}tj||j||S#tj $r[t |tjtj 5|j tddd#1swYxYwwxYw)uRun the CLI in its own process group and kill the whole group on timeout. ``subprocess.run`` only kills the direct child on ``TimeoutExpired``; a grandchild that inherited the stdout/stderr pipes (browser_harness daemon / Chrome helper) is orphaned still holding them, and on Windows ``run()``'s unbounded post-kill ``communicate()`` then blocks on pipe EOF forever — so the tool call, plus its activity heartbeat, wedges (#106244). Trr)rrrrrrr0)inputrr N) rPopenPIPErZ communicaterrqrarb_POST_KILL_DRAIN_SCompletedProcessr)cmdrCr0rrprrs r_run_cli_killing_process_grouprzHs     ??:??:?? GI3 BUBW D))g)F  & &sDOOVV LL  $ $%  !:!: ; 9   %7  8 9  9 s%B AC8 C+" C8+C4 0C8Fcjddlm}ddlm}m}|r|j s|dSt |}|r||St} | s|dSt} |r&tj|s |d|dS|| d<t| ||t|} | r|| St| || jtd } |r | s t |z}t#|} | r| | d <d | vrt%t'rd | d <t)|}t+j*} t-| || |}|j6dk(|j6||j8dd}| r| |d<|r||d<||j:xsdj d}t=|t>kDr |d t>dz}|r||d<tA|j8|}|r||d<tC||}||S||S#t.j0$r|d |dt2dcYSt4$r}|d|cYd }~Sd }~wwxYw)zBRun Python code through the browser-use CLI, and return its outputr)redact_sensitive_text) tool_error tool_resultz~No code provided. Pass Python that uses the pre-imported helpers, e.g. new_tab("https://example.com") then print(page_info()).zbrowser-use CLI not found on PATH, and uvx is unavailable for a zero-install run. Install it with `uv tool install browser-use` (or `pipx install browser-use`), then run `browser-use --doctor` to verify the setup.zInvalid session name zA: use 1-64 letters, digits, dashes, or underscores (e.g. 'r7k2').BU_NAMENr BU_AUTOSPAWNrz!browser-use exec timed out after zGs. The daemon may still be working; retry with a larger timeout_s (max u), or split the work into several calls that append to workspace files — anything already written to the workspace is preserved.z"Failed to launch browser-use CLI: T)force)r! exit_codeoutputrrGru … (stderr truncated)rr)" agent.redactr|tools.registryr}r~r}rPrr[ _SESSION_REmatchrKr8rFrXr_OWN_TAB_PREAMBLErrrvrdrrzrrr`rrrrr_STDERR_CAP_CHARSrr)rCrGrrrHr|r}r~blockedryr0 route_errprivate_browserrrstartedrprrr screenshotnatives r browser_execr^s36 tzz|]^ ^"4(G'"" +C QR R  C  ) 5g[AFFG G IsGWd5kBI)$$S'*gg7>O 4'w'I$- !S %GHYH[%\!NY'GiikGD-c4gF??a'__' 4@F '{#y "DKK$52#<#<#>d KF 6{&&**+.HH !x!$++w7J$. !*6:>  M v ;  $ $s=gYG::H9IJrrs s D>qcBCCDs$"G--&H2H2 H-'H2-H2u|Drive a real web browser via the Browser Use CLI: `code` runs as full Python (stdlib available) with pre-imported browser helpers; stdout comes back in the result. Start `code` with a one-line comment describing the step for the user in plain language, max 60 chars (e.g. `# Searching Amazon for paper towels`) — the UI shows it as the step label. STATE: the browser session and workspace persist across calls; Python variables do NOT (fresh interpreter each call). The workspace dir is $BH_AGENT_WORKSPACE (also `workspace` in every result); functions defined in agent_helpers.py there are auto-imported into every call. For multi-item tasks ('all N products / every entry'), append each batch to a JSON/CSV file in the workspace, then read it back and aggregate in code — dedupe/count/sort with Python, not in your head — and verify the collected count against what was asked before answering. Batch each sub-procedure (navigate, wait, extract, act) into one call — do not spend a call per action — but for long extractions prefer several medium calls that append to workspace files over one giant call, so progress survives timeouts.u  Screenshots are attached to your context automatically: when the exec output contains a capture_screenshot() path, the image arrives with this tool's result and you inspect it directly with your own vision — never send browser screenshots to a separate vision tool.u  Your model cannot view images, so work text-first: page_info() for state, js() for reading/extracting DOM text, fill_input(selector, text) for inputs, and js("document.querySelector('…').click()") for clicks — skip the screenshot-driven workflow described below.u The local engine is Lightpanda (no graphical renderer, one page per session): capture_screenshot() is unavailable, so work text-first; navigate with new_tab(url) exactly once, then goto_url(url) for every later navigation — a second new_tab() fails with TargetAlreadyLoaded.u HELPERS (pre-imported): new_tab(url) opens/navigates (use for the FIRST navigation), goto_url(url) navigates the current tab, wait_for_load() after navigation, page_info() summarizes the current page state, js(expr) evaluates a JS expression and returns its value (js('document.title'); wrap function bodies as js('(() => {...})()') — a bare '() => {...}' returns the function itself, uncalled), fill_input(selector, text) types into inputs, click_at_xy(x, y) clicks viewport coordinates, capture_screenshot() saves and prints a screenshot path, cdp('Domain.method', **kwargs) is raw CDP — cdp('Accessibility.getFullAXTree')['nodes'] lists every element's role/name/backendDOMNodeId (filter in Python before printing; it is thousands of nodes), then cdp('DOM.getBoxModel', backendNodeId=n) gives click coordinates. ensure_real_tab() recovers from a stale/internal tab. Login walls: never guess credentials; see the vault note below if present, otherwise stop and ask the user.ctdddddrttztzStdddd }t|rtzStzS) zCHeader tailored to whether the active model can see images nativelyz&tools.browser_tool_lightpanda_fallbacklightpanda_engine_status)Frz$lightpanda engine status unavailablerztools.vision_toolsrFr)r& _HEADER_BASE_HEADER_TEXT_ONLY_HEADER_LIGHTPANDA_HEADER_VISION)visions r_description_headerrsZ: KK9J KKr%cdttzi}tr0ttdd}dddd|d<itdd|i|d<|S) N description parameters propertiesbooleanFu3Drive the user's own local browser (a Hermes-managed copy of their real default-Chromium profile, logins/cookies included) instead of the configured cloud browser backend. Use when the user asks to act as themselves — their accounts, their sessions. No-op when the backend is already local. Default false.rrrrH)r_HELPERS_DIGESTr/rtBROWSER_EXEC_SCHEMA) overridespropss r_dynamic_schema_overridesrsn$&9&;o&MNI (6|DE%p g#]%8%F"\ V["\ , r%rz\ (The browser-use CLI is not installed yet. Install it with `uv tool install browser-use`.)r:stringziPython code to execute using the pre-imported browser helpers. Use print(...) for any data you need back.)rruNamed isolated browser session — its own daemon and (on cloud backends) own browser, so concurrent tasks don't share tabs. Reuse the same name on every related call; omit for the shared default session.integerz4Max seconds to wait for the code to finish (default z, max z).r)rCrGr)rrrequired)rrr)registryc t|jdd|jddxsd|jdt|jdt|jddS) NrCrrGrrrHF)rCrGrrrH)rr9rcr8)argskws rr$r$sX| XXfb !488Ir+B+Hb((;(:;RVVIEV488GU+, r%u🌐)rtoolsetschemahandlercheck_fndynamic_schema_overridesemoji)r)iX)rN)`__doc__rar"rloggingr`rerrnrrpathlibrtypingrrrrrr r r utilsr getLoggerr1rrrcompilerrrrcr]r`rr IGNORECASErrNrgrArr&r8r+r/rtr6r:rrBrPr[rYrvrrrrrrrr_rrfloatrrr rrr%r'r4r;rFrKrZrdrwrqrzrrrrrrrrrrrregisterr.r%rrs    ==,!   8 $ bjj<= 9 !F2::12SUWUbUbc "**-r}} =_ xC 3Casa#aaaa tSt$tttXdXXX ?d?t? T XseSj5I VY "*I;+;"< JM RZ[^R_ IsIx}I d" k k k4 ad at asSs 7D 7T 7HH(3-(0#0 8DI&&';3';tSy)9';T HSM hsm  S  8C= d38nCHTRUWZRZ^D\,KSK* *S*#* SZbcfZg.thsmSV`hil`m2E4E(3-EsE\deh\iE1d1Xc]1#1W_`cWd1h4dx}:X$X#X4X" D Ds DXc] D4 DT\]`Ta D tT t"c"c" ,M,,.@R*.eMsMSM#M"3-M7;Mb 5 "YxT YLSL4&  ?2vw%7bc (:HI"+8J+_`r_ssy{IzJJL*MN H  *$     %6  r%