+ lHj# aRt0tRt^RIt^RIt^RIt^RIHtHt^RIH t ^RI H t RRlt /t]^k]P!4tRRltR R lt/t]^kRR R lltR RltRRltRRltRRltRRltRRltR#)uUser-supplied CDP endpoint resolution (browser.cdp_url / real-profile), dialog-policy config and the per-task CDP supervisor lifecycle. Split out of ``tools/browser_tool.py``. Facade-owned state is read through ``_bt`` (``tools.browser_tool``, resolved per call) — no import cycle.N)OptionalTuple)loopback_request_kwargs) origin_modulec0V^8dQhR\R\/#)cdp_urlreturnstr)formats";/home/ubuntu/.hermes/hermes-agent/tools/browser_tool_cdp.py __annotate__rs##3#3#c \4pT;'gRP4pV'gR#VP4pRV9dV#TpVPR4'dVP R4^8Xd[VP R4P R^4R,P4'dRVPR^4R,9gV#VPR4'dRMRVPR^4^,,pVP4PR 4'dTMVP R4R ,pVPp^R I pVP!V3R ^ /\V4BpVP4VP4p \'T PR 4;'gR4P4p T 'd,TP"P)RT!T4T!T 44T #TP"P%RT!T44T# \ d=p TP"P%R T!T4T!T4T!T 44TuR p ? #R p ? ii;i)u Normalize a user-supplied CDP endpoint into a concrete websocket URL. Full ``ws://.../devtools/browser/...`` endpoints pass through; HTTP discovery roots and bare ``ws://host:port`` resolve via ``/json/version`` → ``webSocketDebuggerUrl`` (falls back to the raw value with a warning). z/devtools/browser/ws://:/zhttp://zhttps://z://z /json/versionNtimeoutz,Failed to resolve CDP endpoint %s via %s: %swebSocketDebuggerUrlzResolved CDP endpoint %s -> %szKCDP discovery at %s did not return webSocketDebuggerUrl; using raw endpoint)rzwss://)_originstriplower startswithcountrstriprsplitisdigitsplitendswith_sanitize_url_for_logsrequestsgetrraise_for_statusjson Exceptionloggerwarningr info) r_btrawlowered discovery_url version_urlsanr#responsepayloadexcws_urls & r _resolve_cdp_overrider5s )C ==b   !C iikGw& M-.. #!# 3(>(>sA(Fr(J(R(R(T(TY\dgdmdmnqstduvxdyYyJ&-&8&8&A&AzUXU^U^_dfgUhijUkk #0#6#6#8#A#A/#R#R-XeXlXlmpXquDYDK $ $C<< `R`;RS^;_`!!#--/34:: ; A A CF  8#c(CKP JJdfijufvw J  I3s8UXYdUegjkngop sAH## I*.1I%I*%I*c$V^8dQhR\/#rr r )r s"r rr:s : :3 :rc^RIHp^RIHpHpV!4fV!4'dR#\ ;_uu_4\ PV!4R4uuRRR4# +'giR#;i)aUThe current profile's live ``/browser connect`` endpoint, or "". On a multiplexed gateway a context with no profile bound (a bare ``threading.Thread`` or stdlib executor that did not copy the caller's context) answers "" rather than the launch profile's endpoint, the way ``get_secret`` fails closed. Single-profile processes are unchanged.)is_multiplex_active)get_hermes_home_overridehermes_home_keyNr)agent.secret_scoper9hermes_constantsr:r;_live_overrides_lock_live_overridesr$)r9r:r;s r live_cdp_overrider@:sG 7J!).A.C.C  ""?#4b9    s A A, c>V^8dQhR\\,RR/#)rurlr N)rr )r s"r rrHs" C Cx} C Crc^RIHpV!4p\;_uu_4V'd V\V&M\P VR4\ P V^4^,\ V&RRR4R# +'giR#;i)z`Set (or with a falsy ``url`` clear) the current profile's live endpoint and bump its generation.r;N)r=r;r>r?pop_live_generationsr$)rBr;keys& r set_live_cdp_overriderHHs\0  C   #&OC   T *!2!6!6sA!>!B#    s A A33 B cFV^8dQhR\\,R\/#)rhome_keyr )rr int)r s"r rrZs"GG(3-G3Grc^RIHp\;_uu_4\P T;'gV!4^4uuRRR4# +'giR#;i)zCThe current (or ``home_key``'s) profile's live-endpoint generation.rDN)r=r;r>rFr$)rJr;s& r live_cdp_generationrMZs50   $$X%B%B1BAF    s %A A c$V^8dQhR\/#r7r )r s"r rras ! !S !rc^RIHpHpHpV!4'd"V!4;'g/P R4pMV!R4pT;'gRP 4#)a``BROWSER_CDP_URL`` from this profile's secret scope. A routed profile (multiplex, or a scope bound for another home) reads only its own ``.env``: ``os.environ`` holds the launch profile's value. Single-profile reads fall through to ``os.environ`` as before (``get_secret``).)current_secret_scope get_secretserves_routed_profileBROWSER_CDP_URLr)r<rPrQrRr$r)rPrQrRvalues r env_cdp_urlrUasP[Z%'--2223DE,- KKR    rc$V^8dQhR\/#r7r )r s"r rrms @ @s @rc\4;'g \4pT;'g\4PRRRR4#)aReturn the *configured* CDP override without any network I/O. Precedence: this profile's live ``/browser connect``, then its ``BROWSER_CDP_URL`` (:func:`env_cdp_url`), then ``browser.cdp_url``. Is-it-configured gates (check_fns, ``_is_local_mode`` / ``_is_local_backend``, ``hermes doctor``) MUST use this, not :func:`_get_cdp_override`: its 10s HTTP discovery against a stale ``cdp_url`` would stall every startup's schema build with no error. rrcH\T;'gR4P4#)r)r r)vs&r '_get_cdp_override_raw..ws3qwwTV>?sBAC9(C9=C9C C9 C63C95C66C99D  D c(V^8dQhR\RR/#rtask_idr Nr )r s"r rrsccCcDcrc\4p\4pV'gqVP;_uu_4VPP V/4pRRR4\ XP R4;'gR4pV'd \ V4pV'gR#^RIHp\4wrgVPWWgR7R# +'giLy;i \d(pTPPRY4Rp?R#Rp?ii;i)uStart a CDP supervisor for ``task_id`` if an endpoint is reachable. Idempotent (``get_or_start`` skips an existing ``(task_id, cdp_url)`` and restarts on URL change), so safe on every navigate / ``/browser connect``. URL precedence: the CDP override, then the session's own ``cdp_url`` (cloud providers, e.g. Browserbase). Swallows all errors — a failed attach must not break the session; snapshots just lack ``pending_dialogs`` / ``frame_tree``. NrrSUPERVISOR_REGISTRY)r}rrkrlz8CDP supervisor attach for task=%s failed (non-fatal): %s)rra _cleanup_lock_active_sessionsr$r r5tools.browser_supervisorrrz get_or_startr'r(rq) r}r+r session_infomayberrtrur3s & r _ensure_cdp_supervisorrs )C!G     //33GR@LL$$Y/5526 +E2G c@57((Y_(|  c SU\bbcs#B?%C? C  DC??Dc(V^8dQhR\RR/#r|r )r s"r rrsgg#g$grc^RIHpVPV4R# \d0p\ 4P P RY4Rp?R#Rp?ii;i)zGStop the CDP supervisor for ``task_id`` if one exists. No-op otherwise.rz6CDP supervisor stop for task=%s failed (non-fatal): %sN)rrstopr'rr(rq)r}rr3s& r _stop_cdp_supervisorrsHg@  ) g WY`ffgs A$AAcV^8dQh/^\9d\\\3,;R&^\9d\\\3,;R&#)rr?rF)__conditional_annotations__rpr rK)r s"r rrsHWWj%$c3h$kWl'&4S>&mWr)N)r__doc__ contextlibos threadingtypingrragent.proxy_bypassrtools.browser_tool_originrrr5r?Lockr>r@rHrFrMrUr^rarzrrr)rs@r rs{W "6>#P#%$ ~~' : C%'&G ! @R?:c4gr