+ lHjHRRt^RIt^RIt^RIt^RIt^RIt^RIHtHt^RI H t ^RI H t ^RIHt^RIHt^RIHt^RIHtR tR R ltR R ltRRltRRltRRltRRltRRltRRltRRlt RRlt!R*t"RRlt#R R!lt$R"R#lt%R$R%lt&R&R'lt'R(R)lt(R#)+uReal-profile local browsing: snapshot the user's default Chromium profile into a hermes-owned copy, launch the real browser binary on it, and attach agent-browser. State (``_REAL_PROFILE_SESSION``, ``_real_profile_cdp_lock``, ``_real_profile_cdp_cache``, ``_real_profile_chrome_procs``) lives in ``tools.browser_tool``; it is read through ``_bt`` (resolved per call — never import ``tools.browser_tool`` at import time). N)OptionalTuple)loopback_request_kwargs) origin_module)browser_tool_cloud)browser_tool_install) browser_tool_lightpanda_fallback)browser_tool_sessionz$browser.use_real_profile is on, but cV^8dQhRR/#)returnN)formats"D/home/ubuntu/.hermes/hermes-agent/tools/browser_tool_real_profile.py __annotate__rsUUUc^RIHp\4pVP'd%V!VPP 4RR7K6R#)zTerminate real-browser processes launched for real-profile sessions (idempotent, atexit-safe); agent-browser only ATTACHED to them, so its own session cleanup never kills them.) _terminatezreal-profile chrome)whatN)tools.browser_lightpandar_origin_real_profile_chrome_procspop)r_bts r_terminate_real_profile_chromers94 )C ( ( (311557>ST )rc0V^8dQhR\R\/#)r http_cdpr strbool)rs"rrr"s--c-d-rc"^RIHpV!VRR7#)z=True when an ``http://host:port`` CDP discovery root answers.) _cdp_readyg?timeout)rr!)rr!s& r_cdp_http_readyr$"s3 h ,,rc$V^8dQhR\/#r r tuple)rs"rrr(s  % rc\4p\P!VP4p\P!V4pVP RR4W!3#)ucReaper-visible socket dir + ``owner_pid`` claim like every other lane (agent-browser's default dir is invisible to the reaper — #100855). The daemon-side idle timeout is dropped: Chrome is launched by Hermes, not the daemon, so a self-exiting daemon would leave Chrome holding the copy dir under the next snapshot overlay. Returns ``(env, socket_dir)``.AGENT_BROWSER_IDLE_TIMEOUT_MSN)r_session_prepare_session_socket_dir_REAL_PROFILE_SESSION_agent_browser_command_envr)r socket_direnvs r_real_profile_daemon_envr1(sH )C55c6O6OPJ  - -j 9CGG +T2 ?rc\V^8dQhR\R\R\R\P/#)r argvr#tagr )listfloatr subprocessCompletedProcess)rs"rrr4s4\\T\E\\ HcHc\rcT\4wr4\PPVRV 24p\PPVRV 24p\P !WWB4pRpVP VR7\P!WV4wr\P!WV4V'd\P!W4h\P!WPWR7# \Pd&RpTP4TP 4Li;i)uORun an agent-browser CLI argv once, capturing output through temp files (not pipes). The CLI forks a resident daemon that inherits its stdio and outlives the CLI, so with pipe capture the CLI can exit while its output never reaches EOF: POSIX burns the whole timeout draining pipes on every call, and Windows' ``TimeoutExpired`` cleanup re-drains with no timeout, blocking past the outer tool deadline (#96731). Same pattern as ``_popen_agent_browser``: wait for the CLI alone — a grandchild holding the inherited file handles is harmless. Raises ``TimeoutExpired`` after killing the CLI._stdout__stderr_Fr"T)stdoutstderr)r1ospathjoinr+_popen_agent_browserwaitr7TimeoutExpiredkill_read_command_output_files_unlink_command_output_filesr8 returncode) r3r#r4r0r/ stdout_path stderr_pathproc timed_outr<r=s &&& r_capture_agent_browser_clirL4s/0OC'',,zXcU+; ``; None when agent-browser is missing or the run fails.N --sessionzrp- -r#r4zreal-profile %s failed: %s) r_install_find_agent_browserFileNotFoundErrorrLr+_agent_browser_argvreplacer7SubprocessErrorOSErrorloggerdebug)rNrPrOr browser_cmdes&$* r_agent_browser_session_cmdraOs )C224 ) Yh**;7 Y Yl YUX Yc)"3"3C"=!>?     & & 0 5yDs(Ar?r@readlinerkr\)rqfhs& r_read_devtools_portrzgsZ "'',,x)=> U UY[;;=&&(V U U U s.3A2A A2 A/ )A2/A22 BBcFV^8dQhR\R\\,/#rprc)rs"rrrps??C?HSM?rc \\PPVR4RR7;_uu_4pVP 4P 4VP 4P 4r2RRR4XP4'dXPR4'gR#RT 2p^RI p\TP!T R23R^/\T4BP4PR 4;'gR 4pTPT4'dT#R# +'giL;i \ dR#i;i \dR#i;i) aHTTP CDP root of a Chrome still running on ``data_dir``, or None. ``DevToolsActivePort`` outlives a crashed Chrome and its port can be recycled by another local CDP server, so the file's browser id (line 2) must match what ``/json/version`` reports before it is trusted.rsrtruNz/devtools/browser/rhz /json/versionr#webSocketDebuggerUrlrg)rwr>r?r@rxrkr\isdigit startswithrequestsrrerjson Exceptionendswith)rqryport browser_pathrrws_urls& r_surviving_chrome_cdprps "'',,x)=> U UY[!#!4!4!6 8K8K8M,V <<>>!8!89M!N!N"4&)HX\\XJm"<mamKbckKlmdfSS!78??<>@|448>$>V U  sG3D1 >?rc:V^8dQhR\\,/#r&)rr)rs"rrrs#rcZ^RIHpVf\R,#W8Xd\R,#R#)a%Why the default browser's profile can't be used (the session falls back to a fresh browser), else None. A pre-release channel lives in a profile dir we don't resolve; normalizing to the stable family would drive a DIFFERENT profile/account (wrong-principal bug), so refuse rather than guess. )UNSUPPORTED_CHANNELNzyour default browser is not a supported Chromium browser (Chrome, Edge, Brave, Brave Origin, Chromium). Real-profile browsing requires a Chromium default; set one or turn the toggle off.zyour default browser is a pre-release Chromium channel (Beta / Dev / Canary), which real-profile browsing does not support. Set your default to a stable Chrome / Edge / Brave / Brave Origin / Chromium, or turn the toggle off.)hermes_cli.browser_connectr_RP)browserrs& r _real_profile_unsupported_reasonrsA ?~~ %bb c rc0V^8dQhR\R\/#rr)rs"rrrsccrc^RIHpV'd-VPV4'dV\V4RR,#\ V 2#)zUser-facing message for a failed profile snapshot; a locked profile adds the approved-close command, which the agent must ASK the user about first (it quits their browser).)_PROFILE_LOCKED_PREFIXNu To close it (only after the user approves — it quits their browser and loses unsaved tabs), run: `hermes browser close-profile`; the next browser session then uses the profile.)rrrlenr)rrs& r_real_profile_snapshot_errorrsJB s~~455C./01599 :U3%=rc V^8dQhR\R\R\\\,\\,3,/#)r real_binarycopy_dirr )rr(rint)rs"rrrs<&v&vS&vC&vE(SV-YabeYfJfDg&vrc \4p\P!\PP VR44VRV 2.\ Op\P!4VP4p\VPR4;'gVPR44p\P!4'd.V'g7\PP!R4'dVP#R4\$P&!V\$P(\$P(\$P(RVR7pTP.P#T4\0P2!4R ,p\0P2!4T8d|\5T4;'gR p T P74'd\9T 4R 3#TP;4e\=4R \,R ,3#\0P>!R4K\=4R \,R,3# \ dELi;i \$P*\ 3dpR \, R T 23uR p?#R p?ii;i)aLaunch the user's REAL browser binary on the profile COPY; return (debug_port, error). agent-browser's own launch force-adds --use-mock-keychain / --password-store=basic, which makes macOS Chrome drop every keychain-encrypted cookie (signed-out copy); launching the real binary ourselves keeps the OS keychain path intact and agent-browser attaches via ``--cdp ``. Headless by default (a focus-stealing window defeats a background capability); Chrome's NEW headless shares the profile's cookie store (legacy --headless does not). browser.headed / AGENT_BROWSER_HEADED opts into a window, except on a display-less Linux host (launch would die). rsz--user-data-dir=DISPLAYWAYLAND_DISPLAYlinuxz--headless=newT)r<r=stdinstart_new_sessionr0Nthe launch failed: g>@rgzJChrome exited during startup (another instance may hold the profile copy).g?z\the real-profile browser did not expose a debug port in time. Retry, or turn the toggle off.) rr>unlinkr?r@r\_REAL_PROFILE_CHROME_FLAGSr+"_ensure_screen_for_headed_chromium_build_browser_envrre_cloud_is_headed_modesysplatformrappendr7PopenDEVNULLr[rrtime monotonicrzr~rpollrsleep) rrr chrome_argv browser_env _has_display chrome_procr`deadlinelines && r_launch_real_profile_chromers )C  "'',,x)=>?"28* =[@Z[K //1((*K  2XXkooFW6XYL  " " $ $,cll>U>UV]>^>^+,4 &&{:;M;MV`VhVh-7-?-?SW]hj ""))+6~~$&H .. X %"8,22 <<>>t9d? "     ) * ,kkk k 4"$ uu uu3      & & 04u/s3334s04H*?AH<* H98H9<I. I)#I.)I.c V^8dQhR\R\R\\\,\\,3,/#)r rrr )rrr(r)rs"rrrs7suXVY]\deh\iMiGjrc\4p\P!4p.\ P !T4ORNTPNRN\T4NRNRNp\YRPRR7R R 7pTP^8wduTP ;'gTP";'gR P%4P'4pR\ RT'd TR, 23#RTP 2 23#\)TP4p\+T4p T eE\,P.!RT;'gR 4;p 'dT P1^4T 8wdRT 2pT'gR\R,3#TR3# \dpR\ RT 23uRp?#Rp?ii;i \PdR\R ,3u#\P\3dpR\ R T 23uRp?#Rp?ii;i)a Make agent-browser ATTACH to the running Chrome (never launch its own); returns ``(http_cdp, error)``. The daemon may answer with the endpoint of a browser IT spawned (throwaway temp profile); the DevToolsActivePort OUR Chrome wrote is authoritative on disagreement. Nz;the local browser engine (agent-browser) is not installed: rRz--cdprwz about:blankT) first_openzrp-openrUzOthe real-profile browser took too long to start. Retry, or turn the toggle off.rrgz*the real-profile browser failed to start: zexit rrhzethe real-profile browser started without exposing a devtools endpoint. Retry, or turn the toggle off.)rrVrWrXrr+rYr-rrL_get_open_command_timeoutr7rCr[r\rGr=r<rk splitlinesrnrzrirjrl) rrrr_r`r3rJtailcdpour_portrms && r%_attach_agent_browser_to_real_profilers )C\224  7X ) )+ 6 7  7SE^E^ 7  7Y 7 & 7(5 7D4) 7747Hi  ! 00t{{00b779DDFuFSWtBxFwxxx_deietetdu]vFwxxx !:!: ;C"8,Hbii 399"&E!E!E177ST:YaKa!(, SCCC C 9+ \uWXYWZ[[[\  $ $mSllll  & & 04u/s3334sGE>F#> F  FF F #$G: G:"G:# G5/G:5G:c$V^8dQhR\/#r&r')rs"rrrs[-[-5[-rc~\4p\P!4'g-^RIHpV!4VPPRR4R#\P!4'dR\R,3#^RIH pHpHpHpVP"P%VP&R7'gR\R,3#VPP)R4pV'dP\+V4'd?\,P.!VP04VR3VP"P34#VPPRR4V!4p\5V4p V 'dRV 3VP"P34#V!V4p \7VP04p V 'dO\+V 4'd>\9W4'd-WPR&V R3VP"P34#V 'd\;VP04\=V 4p V 'd\?\AV PCR ^4^,4V 4wrV 'gRV3VP"P34#WPR&VP PER W4V R3VP"P34#V!V4wrV'g V 'g(R\GV43VP"P34#V!V4pVf)R\ R V R 23VP"P34#\IW4wppVfRV3VP"P34#\?VV 4wrV 'gRV3VP"P34#WPR&VP PER WV 4V R3VP"P34# \ d(pTP PRT4Rp?ELRp?ii;i TP"P34i;i)aResolve ``(cdp_url, error)`` for consented real-profile browsing. Snapshot -> launch real binary on the copy -> return its HTTP CDP endpoint. The copy is a non-default dir, so it sidesteps the Chrome >=136 default-profile remote-debugging block and never contends with the user's running browser. One shared agent-browser session is reused across calls (cached, re-validated). ``(None, message)`` when it can't (callers fall back to a fresh browser and report the message); ``(None, None)`` when consent is off. )cleanup_real_profile_snapshotsz.real-profile cleanup-on-consent-off failed: %sNrzbrowser.engine is set to 'lightpanda', which cannot load a real Chromium profile. Set browser.engine to 'auto' or 'chrome' to use real-profile browsing, or turn the toggle off.)chromium_executabledetect_default_chromiumreal_profile_copy_dirsnapshot_real_profiler"zthe real-profile browser is already being prepared by another call that has not finished. Retry after that call completes, or restart Hermes if it was abandoned.:z8real-profile: re-attached to surviving Chrome at %s (%s)zthe real browser binary for 'z:' could not be found. Reinstall it or turn the toggle off.z,real-profile browser ready for %s at %s (%s))NN)%rr_use_real_profilerrrr]r^_real_profile_cdp_cacher_lp_using_lightpanda_enginerrrrr_real_profile_cdp_lockacquire _REAL_PROFILE_CDP_LOCK_TIMEOUT_Srer$r+r,r-releaserrnrrrrrrsplitinforr)rrr`rrrrcachedr unsupportedrexisting survivingrrrrs r_real_profile_cdprs )C  # # % % R Q * , ##''t4 ##%%cwwx xZZ  % % - -44 .   2 2  5-,,007 of--  0 01J1J K4<^ ""**,] ##''t4)+6w? $R ""**,I)1)#*C*CD 116Fx6Z6Z19 ' ' .T>@ ""**,?  ()B)B C *(3 P .P ".P + P6PP P<) z--remote-debugging-port=0z--no-first-runz--no-default-browser-checkz--disable-background-networkingz--disable-component-updatez--disable-default-appsz--disable-hang-monitorz--disable-popup-blockingz--disable-prompt-on-repostz--disable-syncz--disable-features=Translatez--no-startup-window))__doc__r>rir7rrtypingrragent.proxy_bypassrtools.browser_tool_originrrtoolsrrrrVrrr r+rrr$r1rLrarnrzrrrrrrrrrrr rrrs  "6>.292,U- \6";?*CQ ?"&vRB[-r