+ lHjYha0t$Rt^RIHt^RIt^RIt^RIt^RIHtH t H t ^RI H t H t ^RIHt]P !]4tRt0RQmtRRRR RRR RSR RTR RU/tR ]R&RRVRRVRRRRRW/tR ]R&RRXRRXR^/RRllt^RIt^RIHtRtRtRRlt RR lt!R!R"lt"R#R$lt#R]#R%3R&R'R(3/t$R)R*lt%R+R,lt&R-R.lt'RYR/R0llt(R1R2R3R4] R52R6R7R8R9R:R7R;R3RRR3R?/R@R7R;R3RA/RBR7R;R3RC/RDR7RERF^R3RG//RHR:.//t)RI]RJ&RKRLlt*] PV!R2RM])RN]*RORP7R# ]d Rt]tRtLi;i)ZuRaw Chrome DevTools Protocol (CDP) passthrough tool ``browser_cdp``. Sends arbitrary CDP commands to the browser's DevTools WebSocket when a CDP URL is configured (``/browser connect`` → ``BROWSER_CDP_URL``, ``browser.cdp_url``, or a CDP-backed cloud session). Escape hatch for operations the main browser tools don't cover. Method reference: https://chromedevtools.github.io/devtools-protocol/ ) annotationsN)AnyDictOptional)registry tool_error)routed_browser_handlerz3https://chromedevtools.github.io/devtools-protocol/ Page.navigatezPage.captureScreenshotzPage.printToPDFzNetwork.streamResourceContentzHeadlessExperimental.beginFramez"CacheStorage.requestCachedResponsezdict[str, tuple]_CDP_ALWAYS_BINARY_PATHSzNetwork.getResponseBodyzFetch.getResponseBodyzIO.readzNetwork.getRequestPostData_CDP_FLAGGED_BINARY_PATHS always_paths flagged_paths_depthc ,V^8dQhRRRRRRRRRR/#) valuerr tupler rintreturn)formats";/home/ubuntu/.hermes/hermes-agent/tools/browser_cdp_tool.py __annotate__r0s<11 11 1  1  1c a^RIHpHpHpSV8dV#\ V\ 4'd V!VRR7#\ V\ \34'd\V4!V3RlV44#\ V\4'gV#VPR4RJpRRlpRR lp /p VP4FwrV!W4;'gV!W+4;'dTp \ V \ 4'd V!V RR7MT p\ V \ 4'd V 'dT M!\V V !W4V !W+4S^,R 7W&K V #) uRedact browser-originated CDP result text; opaque bytes stay byte-identical. Exemptions come ONLY from the calling method's spec as exact result paths. Path suffixes propagate only into the matching subtree, so ``base64Encoded`` is honored solely as a sibling on the trusted carrier object — never as ambient trust a ``Runtime.evaluate`` by-value object could spoof. ``_depth`` stops a page-controlled tree from raising RecursionError. The unread remainder is replaced, not returned raw. See #94138, #94142. )REDACT_WALK_DEPTH_MARKERREDACT_WALK_MAX_DEPTHredact_sensitive_textT)forcec3L<"TFp\VS^,R7xK R#5i))rN)_redact_cdp_output).0itemrs& r %_redact_cdp_output..Ms# DID tFQJ 7 7Es!$ base64Encodedc$V^8dQhRRRRRR/#)rpathsrkeystrrboolr)rs"rr(_redact_cdp_output..__annotate__Ss!??E???rcxa\;QJdV3RlV4F 'gK R# R#!V3RlV44#)c3h<"TF'p\V4^8H;'d V^,S8HxK) R#5i)r Nlenr"pr)s& rr$3_redact_cdp_output..leaf..Ts,>13q6Q;..1Q43;.s22TF)anyr(r)s&frleaf _redact_cdp_output..leafSs,s>>ss>s>s>>>>rc$V^8dQhRRRRRR/#)rr(rr)r*rr)rs"rrr,Us&IIuI3I5Ircha\;QJd.V3RlV4FNK 5#!V3RlV44#)c3z<"TF0p\V4^8gKV^,S8XgK%VR,xK2 R#5i)r :r NNNr/r1s& rr$6_redact_cdp_output..descend..Vs/HEqSVaZUAaDCKUQrUUEs ; ;;)rr5s&frdescend#_redact_cdp_output..descendUs%uHEHuHuHEHHHr)r r r) agent.redactrrr isinstancer*listrtypedictgetitemsr!)rr r rrrrbase64_flaggedr6r<redactedr)r#opaqueout_keys&$$d rr!r!0s+& &&''%$U$77%$''E{ DI    eT " " YY/47N?I!H[[] l(YYT--E-X-X.rs",Fs6::VbKcKiKigiGj,krzTBlocked: CDP Runtime.evaluate expression targets a private or internal address ({}).c(V^8dQhRRRRRRRR/#)rtask_idr*rjryrzrrqr)rs"rrrs)3^Xerc^RIHp^RIHpVPV4'gR#\P V4pVe:VwrgT!Y2;'g/4pV'd\ VPV4V4#V\9d.VPV4p V 'd\ RV RV: R2V4#R# \d"p \PRT 4Rp ? R#Rp ? ii;i)a#Apply the browser SSRF/private-page guard to raw CDP calls. Raw CDP shares the cloud/private-network boundary of ``browser_snapshot`` / ``browser_console`` / ``browser_eval`` and must not become their bypass. Probes are best-effort; a probe failure never breaks local/custom CDP workflows. ) browser_tool)browser_tool_eval_policyNz9Blocked: page URL targets a private or internal address (z). Raw CDP method z, could expose private page content or state.z0browser_cdp: private-page guard probe failed: %s) toolsrr_eval_ssrf_guard_active_METHOD_PARAM_GUARDSrCrnr!_CDP_PRIVATE_PAGE_ALLOWED_METHODS_current_page_private_urlrcrdre) rrjryrxpolicyguardprobetemplateliteral blocked_urlrfs $$$ r_browser_cdp_private_guardrsN,<--g66$((0  #OEB "-G 8&AA : : ::7CK"[\g[hi228;g!ijprr  N GMM Ns4"B3'B3B3B39#B3B33 C>CCc 0V^8dQhRRRRRRRRRR R R/#) rws_urlr*rjryrz target_idrqtimeoutfloatrr)rs"rrrs9'%'%C'%'%n'%Q^'%"'%'5'%rc aa a "\fQh^RIHp\P!V3RRRSR^RR/V!V4B;_uu_4GRjxL o ^o RV VV 3RllpR TR T;'g//pV'dqV!R R R R VR R//RV 24GRjxL pRV9d\ RVR, 24hVP R/4P R4p V 'g \ R4hWR&V!VRV 24GRjxL pRV9d\ RVR, 24hVP R/4uuRRR4GRjxL #LLLHL +GRjxL 'giR#;i5i)zMake a single CDP call. With ``target_id``, ``Target.attachToTarget(flatten=True)`` multiplexes a page-level session over the browser-level WebSocket; without it ``method`` runs at browser level.N)loopback_connect_kwargsmax_size open_timeout close_timeout ping_intervalc$V^8dQhRRRRRR/#)rreqrzwhatr*rr)rs"rr_cdp_call..__annotate__s!  ^ 3 > rc<"SS^,upoSP\P!RV/VC44GRjxL \P!4P 4S,pV\P!4P 4, pV^8:d\ RV 24h\P!\P!SP4VR7GRjxL 4pVPR4V8XgKV#LL$5i)r idNz Timed out r) sendjsondumpsrLrMtime TimeoutErrorloadswait_forrecvrC) rrcall_iddeadline remainingmsgnext_idrwss && r_send_cdp_call.._sends&! GW''$**dG%;s%;<= = =//16687BH$w'?'?'A'F'F'HH >&D6':;;jjw'7'7 9'U!UV774=G+J > "Vs(9D DB'D $D %D D  D rjryTarget.attachToTargettargetIdflattenTzattaching to target errorzTarget.attachToTarget failed: rW sessionIdz0Target.attachToTarget did not return a sessionIdzwaiting for response to z CDP error: ) websocketsagent.proxy_bypassrconnectrNrC) rrjryrrrrrr session_idrrs &&&&f @@r _cdp_callrs  !! !:!!&Y4YgY]^Y04Y8OPV8WYYY\^   (6<#RSS2.22;?J"#UVV) #!9&BCC c>S\N;< <wwx$?YYY&BD9YYYYsAED5E %D=1D=D7 AD=D=0D911D=" E/D;0E7D=9D=;E=E E E E  Ec 0V^8dQhRRRRRRRRRRR R/#) rrr*frame_idrjryOptional[dict[str, Any]]rrrr)rs"rrrsA/T/T/T/TS/TRj/T)./T36/Trca^RIHpTP T4pTf\RT: R24#TP 4P p\T3RlTP R4.TP R 4;'g.O4R4p T fOTP;_uu_4TPP S4p RRR4X eT P4MRp T f\R S: R 24#T P R 4p T 'g\R S: R 24#TPp T eT P4'g \R4#^RI Hp T !TPY#;'g/YR7T 4pTf\R\ R7#TP#T^,R7p\(P*!RRRTRSR T RTP R/4/RR7# \dp\RT R24uRp?#Rp?ii;i +'giELG;i \d5p\R\%T4P& RT 2\ R7uRp?#Rp?ii;i)zHRoute a CDP call through the live supervisor session for an OOPIF frame.)SUPERVISOR_REGISTRYz!CDP supervisor is not available: zp. frame_id routing requires a running supervisor attached via /browser connect or an active Browserbase session.Nz'No CDP supervisor is attached for task=z. Call browser_navigate or /browser connect first so the supervisor can attach. Once attached, browser_snapshot will populate frame_tree with frame_ids you can pass here.c3j<"TF(q'gK VPR4S8XgK$VxK* R#5i)rN)rC)r"frs& rr$._browser_cdp_via_supervisor..s+lDqaeeT^N_ckNkDs 33 3topchildrenz frame_id zP not found in supervisor state. Call browser_snapshot to see current frame_tree.rz is not an out-of-process iframe (no dedicated CDP session). For same-origin iframes, use `browser_cdp(method='Runtime.evaluate', params={'expression': "document.querySelector('iframe').contentDocument.title"})` at the top-level page instead.zKCDP supervisor loop is not running. Try reconnecting with /browser connect.)safe_schedule_threadsafe)rrz0CDP call via supervisor failed: loop unavailablerlrz CDP call via supervisor failed: : successTrjrrWF ensure_ascii)tools.browser_supervisorrrcrrCsnapshot frame_treenext _state_lock_framesto_dict_looprOagent.async_utilsr_cdprmrWrA__name__rr)rrrjryrrrf supervisortree frame_inforaw child_sidrYrfut result_msgs&f&&& r_browser_cdp_via_supervisorrslh@ %((1JCG;OWWX X    + +D+/lTXXe_D(<(B(BDlnr,tJ  # # #$$((2C$&)oS[[]4 Ih\2MMN N|,I Ih\2yyz z   D |4??,,ghhq>& OOFLLbYO XZ^` ;P[gh hZZ! Z4  ::y$&*hP\^g"!=?MR TTS h=cUCggh hh$ # #0 q=3P]=3il=3rc fT;'gRpV'd0\Y`T;'g/R7pV'dV#\WcVWR7#V'd\V\4'g\ R\ R7#\ 'g \ R4#\4pV'g\ R\ R7#VPR4'g\ RV: R 24#T;'g/p \V \4'g"\ R \V 4P 24#\W`V R7pV'dV#V'd \V4MR p \R \!V R 44p \#\%WWV 44p RRRTR\3T \4P7TR 4\8P7TR 4R7/p T'dY-R&\:P<!T RR7# \\3dR p Li;i \&dp \ RT RT 2TR7uRp ? #Rp ? i\(d!p \ \T 4TR7uRp ? #Rp ? i\*dp \ RT RT R2TR7uRp ? #Rp ? i\,dFp \.P1R4\ R\T 4P RT 2TR7uRp ? #Rp ? ii;i)!uSend a raw CDP command (see ``CDP_DOCS_URL``). ``target_id`` attaches a fresh stateless connection to a tab; ``frame_id`` (OOPIF from ``browser_snapshot.frame_tree``) routes through the supervisor's live WebSocket instead — the only reliable way to evaluate inside an iframe where fresh per-call connections hit signed-URL expiry (Browserbase). Both paths share the same private-page/SSRF guard. Returns JSON ``{"success": True, "method", "result"}`` or ``{"error": ...}``.default)rrjry)rrrjryrz/'method' is required (e.g. 'Target.getTargets')rzTThe 'websockets' Python package is required but not installed. Run: hermes pm repairzNo CDP endpoint is available. Run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or set 'browser.cdp_url' in config.yaml. The Camofox backend is REST-only and does not expose CDP.z%CDP endpoint is not a WebSocket URL: u. Expected ws://... or wss://... — the /browser connect resolver should have rewritten this. Check that a Chromium-family browser is actually listening on the debug port.z%'params' must be an object/dict, got >@g?gr@zCDP call timed out after zs: )rjNz"WebSocket error talking to CDP at ruE. The browser may have disconnected — try '/browser connect' again.zbrowser_cdp unexpected errorzUnexpected error: rTrjrW)r r rFr)zws://zwss://r)rrr?r*rrm _WS_AVAILABLErg startswithrBrArr TypeError ValueErrormaxminr\rrrNrIrcrd exceptionr!r rCr rr)rjryrrrreffective_task_idblockedendpoint call_params safe_timeoutrWrfpayloads&&&&&& r browser_cdprs ,,9,5F^d^j^jhjk N*3D`f28K K FC00KVbcc =23 3$&H JT`b b   2 3 3A(NMMN N#),,BK k4 ( (A${BSB\B\A]^__(1BZefG)0uW~d sC e45L [Ih P\]^ )$&(L^599&"E/33FB?MABG(  ::gE 22+ z "  ]5l^3seLU[\\ 3#c(622 [>xj3%PKKSY[ [ [78.tCy/A/A.B"SEJSYZZ[s~/G7 GG*G'&G'* J05H J0 J0J0H60J06 J0J0IJ0 J0*J0+:J+%J0+J0namer descriptionuSend a raw Chrome DevTools Protocol (CDP) command. Escape hatch for browser operations not covered by browser_navigate, browser_click, browser_console, etc. **Requires a reachable CDP endpoint.** Available when the user has run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or when 'browser.cdp_url' is set in config.yaml. Not currently wired up for cloud backends (Browserbase, Browser Use, Firecrawl) — those expose CDP per session but live-session routing is a follow-up. Camofox is REST-only and will never support CDP. If the tool is in your toolset at all, a CDP endpoint is already reachable. **CDP method reference:** u — use an available documentation lookup or extraction tool on a method's URL (e.g. '/tot/Page/#method-handleJavaScriptDialog') to look up parameters and return shape. **Common patterns:** - List tabs: method='Target.getTargets', params={} - Handle a native JS dialog: method='Page.handleJavaScriptDialog', params={'accept': true, 'promptText': ''}, target_id= - Get all cookies: method='Network.getAllCookies', params={} - Eval in a specific tab: method='Runtime.evaluate', params={'expression': '...', 'returnByValue': true}, target_id= - Set viewport for a tab: method='Emulation.setDeviceMetricsOverride', params={'width': 1280, 'height': 720, 'deviceScaleFactor': 1, 'mobile': false}, target_id= **Usage rules:** - Browser-level methods (Target.*, Browser.*, Storage.*): omit target_id and frame_id. - Page-level methods (Page.*, Runtime.*, DOM.*, Emulation.*, Network.* scoped to a tab): pass target_id from Target.getTargets. - **Cross-origin iframe scope** (Runtime.evaluate inside an OOPIF, Page.* targeting a frame target, etc.): pass frame_id from the browser_snapshot frame_tree output. This routes through the CDP supervisor's live connection — the only reliable way on Browserbase where stateless CDP calls hit signed-URL expiry. - Each stateless call (without frame_id) is independent — sessions and event subscriptions do not persist between calls. For stateful workflows, prefer the dedicated browser tools or use frame_id routing. parametersrAobject propertiesrjstringz]CDP method name, e.g. 'Target.getTargets', 'Runtime.evaluate', 'Page.handleJavaScriptDialog'.ryadditionalPropertieszaMethod-specific parameters as a JSON object. Omit or pass {} for methods that take no parameters.rzOptional. Target/tab ID from Target.getTargets result (each entry's 'targetId'). Use for page-level methods at the top-level tab scope. Mutually exclusive with frame_id.raOptional. Out-of-process iframe (OOPIF) frame_id from browser_snapshot.frame_tree.children[] where is_oopif=true. When set, routes the call through the CDP supervisor's live session for that iframe. Essential for Runtime.evaluate inside cross-origin iframes, especially on Browserbase where fresh per-call CDP connections can't keep up with signed URL rotation. For same-origin iframes, use parent contentWindow/contentDocument from Runtime.evaluate at the top-level page instead.rnumberrz)Timeout in seconds (default 30, max 300).requiredrzBROWSER_CDP_SCHEMAcV^8dQhRR/#)rrr+r)rs"rrrs J JD Jrc^RIHp^RIHp\T!4;'dT!44# \d"p\ P RT4Rp?R#Rp?ii;i)a<Availability check: offered only when a static CDP URL is set (Camofox is REST-only; the default local agent-browser hides its CDP port; cloud per-session ``cdp_url`` isn't surfaced). Raw (no-I/O) gate: check_fns run at every startup, and resolving the endpoint over HTTP here would block launch on a stale endpoint.)_get_cdp_override_raw)check_browser_requirementsz1browser_cdp check: browser_tool import failed: %sNF)rartools.browser_tool_installr ImportErrorrdrer+)rrrfs r_browser_cdp_checkrsN @I *,HH1F1H II  H#Ns - AAAz browser-cdpc laa\RSVV3RlSPR4SPR4R7#)rc <\SPRR4SPR4SPR4SPR4SPRR4SPR4R7#) rjr`ryrrrrr)rjryrrrr)rrCargskwsrr..sZ88Hb)$((82DPTPXPXYdPeXXj)488It3LVXV\V\]fVg rrr)fallbackrr)rrCrsflrrrs.5t y!bff\.B  ru🧪)rtoolsetschemahandlercheck_fnemoji> Page.reloadr Page.stopLoadingTarget.getTargetsBrowser.getVersionrTarget.detachFromTarget))data)) bufferedData))screenshotData))responsebody))r))postDatar)NNNrN),__conditional_annotations____doc__ __future__rrLrloggingtypingrrrtools.registryrrtools.browser_extension_routerr getLoggerrrdrmrr __annotations__r r!rwebsockets.exceptionsrIrrrcr\rgrnrvrrrrrrrrregister)rs@rr's3# &&/A   8 $D %!l,=|#%9;\^t(*A.*|-Dl |9;K/+ 11 1  1j8M E7 O.`bkoq8'%T/Td=3B M %&2N3 > vxor vxr;QSWYfsv &(Mce =*, )RHst " XJ'E7&N7t J      o J"Ms8 D!! D10D1