+ lHjTaRtz0tRt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIHt^RIHtHtHtHtHtHt^RIHtHt^RIHtHtHt^RIH t ]PB!]"4t#Rt$Rt%] PL!R 4t'R t(R t)R t*R t+Rt,Rt-^t.Rt/Rt0] PL!R4t1] PL!R] Pd4t3] PL!R] Pd4t4Rt5RRRllt6RRlt7RRRllt8RRlt9RRlt:R R!lt;R"R#lt<!R$R%]4t=R&R'lt>R(R)lt?R*R+lt@R,R-ltAR.R/ltBR0R1ltCR2R3ltDR4R5ltER6R7ltFR8R9ltGR:R;ltHR<R=ltIR>R?ltJR@RAltKRBRCltLRDREltMRFRGltNRRIRJlltORKRLltPRMRNltQRRORPlltRRQRRltSRRSRTlltTRRURVlltURRWRXlltVRYRZltWR[R\ltXRR]R^lltYR_R`ltZRaRblt[Rct\RdRelt]Rft^/t_]^k] P!4ta]P!]7RgRh^Ri4tc/td]^k/te]^k]f!4tg]^kRRjRkllthRlRmltiRnRoltjRpRqltkRrRsltlRtRultmR]-RRH3RvRwlltnRxtoRytpRztqR{trR|tsR}R~lttRRltuRRR]o]s,R,RRRRRRRRR/RRRRR/RRRR]-RR]- R]/ R2//RR.//tv^RIwHxtx]xP!RR]vR]G]uRR7R#)zUse the Browser Use CLI 3.0 (https://browser-use.com) for browser automation When browser.backend is "browser-use", the model gets ``browser_exec`` tool instead of default browser tools N)Path)AnyCallableDictList NamedTupleOptional)get_hermes_homehermes_home_key) daemon_envdaemon_identitynamespace_harness_dirs)is_truthy_value browser-useoffz ^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$_HERMES_BU_PRIVATE_BROWSER_HERMES_BU_BOT_DESKTOP_BROWSER _HERMES_BU_REAL_PROFILE_FALLBACK_HERMES_BU_LOCAL_FALLBACKa# hermes: pin this named session to its own tab (once per daemon process) def _hermes_ensure_own_tab(): import os as _os, tempfile as _tf _name = _os.environ.get("BU_NAME", "default") try: # Key the marker by the daemon's pid so a daemon restart (which # re-attaches to the first shared page) re-pins automatically, # while agent-driven tab switches mid-session are left alone. from browser_harness import _ipc as _bipc _dpid = _bipc.pid_path(_name).read_text().strip() or "0" except Exception: _dpid = "0" _uid = _os.getuid() if hasattr(_os, "getuid") else 0 _marker = _os.path.join( _tf.gettempdir(), "hermes-bu-owntab-%s-%s-%s" % (_uid, _name, _dpid) ) if _os.path.exists(_marker): return try: # Force a fresh target: new_tab() would REUSE a blank current tab, # which is exactly the tab a sibling daemon may also hold. _tid = cdp("Target.createTarget", url="about:blank").get("targetId") if _tid: switch_tab(_tid) except Exception: pass # best-effort: worst case is pre-fix behavior try: open(_marker, "w").close() except OSError: pass _hermes_ensure_own_tab() del _hermes_ensure_own_tab i,iiz[^A-Za-z0-9._-]+z4((?:[A-Za-z]:[\\/]|/)[^\s\"']+?\.(?:png|jpe?g|webp))zhttps?://[^\s'\"\\)]+cbV^8dQhR\.\3,R\R\R\/#)fndefault log_prefixreturn)rrstr)formats":/home/ubuntu/.hermes/hermes-agent/tools/browser_use_cli.py __annotate__rbs1xC 3CcV!4# \d*pT'd\PRY#4Rp?T#Rp?ii;i)zT``fn()``, or ``default`` on any exception (debug-logged when ``log_prefix`` is set).z%s: %sN) Exceptionloggerdebug)rrres&&& r_quietr&bs52t 2  LL: 1 N2s =8=c TV^8dQhR\R\R\R\R\/#)rmodulenamerrr)rr)rs"rrrls6aasa#aaaar c(aa\VV3RlW#4#)zCall ``module.name()`` resolved at call time (tests stub the module / patch the attribute); on any failure log ``log_prefix`` and return ``default``.cN<\\P!S4S4!4#N)getattr importlib import_module)r(r)sr_lazy_call..os')"9"9&"A4HJr )r&)r(r)rrsff&&r _lazy_callr2ls JG ``r c0V^8dQhR\R\/#)rcontextr)rbool)rs"rrrrsttSt$tr c$\RRRRV 24#)ztools.browser_camofoxis_camofox_modeFzCamofox activity check failedr2)r4s&r_camofox_activer9rs -/@%KhiphqIr ssr c$V^8dQhR\/#rrr5)rs"rrrvstttr c\RRRR4#)ztools.browser_tool_cloud_use_real_profileFz"real-profile consent lookup failedr8r r_real_profile_consentedr@vs 02EuNr ssr c4V^8dQhR\R\RR/#)renvcdprNdictr)rs"rrrzs&XXdXXXr cFYVPR4'dR&R#R&R#)uMExport a CDP endpoint under the BU_CDP_* contract (http(s) → URL, else WS). BU_CDP_URL BU_CDP_WSN)zhttp://zhttps://) startswith)rBrCs&&r _set_cdp_envrJzsTW'>?? Q[Qr c0V^8dQhR\R\/#)rrBrrEr5)rs"rrrs??d?t?r ch\VPR4;'gVPR44#)rHrG)r5get)rBs&r _has_cdp_envrOs'  $== (= >>r c V^8dQhR\R\\.\3,R\R\\.\3,R\R\ \,/#)rrBget_session_info cache_keyfail_msg no_cdp_msgr)rErrrr"r)rs"rrrsW  T XseSj5I VY "*I;+;"< JM RZ[^R_ r c\V!V4;'g/PR4;'gR4pT'gT#\Y4R# \dpT!T4uRp?#Rp?ii;i)z_Export the CDP endpoint from ``get_session_info(cache_key)``; error string on failure / no CDP.cdp_urlrN)rrNr"rJ)rBrQrRrSrTrCr%s&&&&& r_export_session_cdprWsd#I.44"99)DJJK   {s'A A A A*A%A*%A*c0a]tRt^toRtV3RltRtVtR#)_CodeUrlVerdictzRWhat one pass over a code blob's URL literals decided (see ``_code_url_verdict``).cB<V^8dQh/S[S[,;R&S[;R&#)rblocked local_sidecarrrr5)r __classdict__s"rr_CodeUrlVerdict.__annotate__s#c] r r?N)__name__ __module__ __qualname____firstlineno____doc____annotate_func____static_attributes____classdictcell__)r^s@rrYrYs\r rYc0V^8dQhR\R\/#)rcoder)rrY)rs"rrrs 0 0C 0O 0r c^RIHpHpRp\P T;'gR4FFpV!V4pT;'gTpV!WER7pV'gK*\ VP RR4V4u# \ RV4#)aQOne pass over the code's URL literals: the blocking error, if any, and whether the call must run on the hybrid LOCAL sidecar. Each URL's routing predicate is evaluated ONCE and feeds both answers: it resolves DNS unmemoised, so a rebinding host evaluated twice could relax the private-address floor and still route to the cloud provider.)_hybrid_routes_locallyevaluate_url_safetyFr) auto_localerrorzBlocked: unsafe URLN)tools.browser_toolrkrl_URL_REfindallrYrN)rirkrlr\url routes_localerrs& r_code_url_verdictrust OMtzzr*-c2 %55 !#? 3"37774I#JMZ Z + 4 //r c$V^8dQhR\/#r;rE)rs"rrrsdr c^RIHpV!4pVPRR4\4pV'dW!R&MVPRR4\ VP RR44VR&VP RR4\V\44V#) )_build_browser_env PYTHONHOMEN PYTHONPATHPATHrANONYMIZED_TELEMETRYfalse) rorzpop_harness_site_dir_floor_subprocess_pathrN setdefaultr _served_profile_tag)rzrBsite_dirs r_base_subprocess_envrsy5  C GGL$ "H$L  d#()<=CKNN)733 3 56 Jr c0V^8dQhR\R\/#)rpathrr)rs"rrrs k k k kr c ^\PR8XdV#\P!\4;_uu_4^RIHpT!T;'gR4uuRRR4# +'giM;iT;'gRP\P4Uu.uFq"'gK TNK Muupipp\PPT\Uu.uF=qD\T49gK\PPT4'gK;TNK? Muupiup,4#)zKeep system commands reachable from profile workers with a minimal PATH. Browser subprocesses may launch shell helpers; version-manager-only paths omit /usr/bin. Reuse the shared browser PATH floor on POSIX. nt)_merge_browser_pathrN)osr) contextlibsuppressr"tools.browser_tool_installrsplitpathsepjoin _FHS_BIN_DIRSsetrisdir)rrppartsds& rrrs  ww$   Y ' 'B"4::2. ( ' ' '**2::6 <61!QQ6 o'B? d++s33  @!D s/44 A!AA!A!c0V^8dQhR\R\/#r browser_cfgrrL)rs"rrrs a ad at ar c\VPR4RR7'dR#^RIHp\ TPR4;'gR4P 4P4T8H# \dR#i;i)uOTrue when the browser section selects the Nous Tool Gateway — by the current ``hermes tools`` picker row (``cloud_provider: nous``) or the pre-picker ``use_gateway: true`` flag. Reading only the legacy flag missed every picker-configured gateway, and the direct-API branch it fell into holds no credentials in managed mode (#108310). use_gatewayFrT)NOUS_MANAGED_PROVIDERcloud_providerr)rrNtools.tool_backend_helpersrr"rstriplower)rrs& r _use_gatewayrsp {}5uEED {/066B 7 = = ? E E GK` `` sA// A>=A>c$V^8dQhR\/#r;r)rs"rrrsssSsr c\4PR4p\V\4'dVRJd\#R#\ T;'gR4P 4P4#)uConfigured browser backend key ("" = unset → default). YAML 1.1 parses an unquoted ``off`` as False — that must mean BACKEND_DISABLED, not "unset".backendFr)rrNrr5BACKEND_DISABLEDrrr)raws rget_browser_backendrs\   ! !) ,C9CC9N9Nu r"rTWX[XaXa_aTbThThTjTpTpTrrr c(V^8dQhR\RR/#)renabledrNr<)rs"rrrs  $ 4 r c^RIHpHp^RIHpV!4pV'd\ M\ VPR/4R&V!V4V!4R#)z``/browser use [off]`` on every surface: persist ``browser.backend`` for the current profile and drop cached tool availability. A live agent keeps its tools (prompt cache); the next one built gets the swap.) load_config save_config)invalidate_check_fn_cacherrN)rrrtools.registryr _BACKEND_KEYrr)rrrrconfigs& rset_browser_use_moders;;8 ]FBI,O_Fi$Y/r c0V^8dQhR\R\/#rrL)rs"rrrs & &D &T &r cJ\V\4'dVPR4'dR#\VPR4;'gR4P 4P 4pVR9g#\ V4'g\R4'dR#\4#)zTrue for pre-CLI direct-API Browser Use cloud configs. An explicit backend or a non-Browser-Use cloud_provider wins; Camofox is selected via env var, not cloud_provider, so a Camofox user with a stray BROWSER_USE_API_KEY keeps it.rFrrz during migration>rr) rrErNrrrrr9_browser_use_api_key_set)rproviders& r"is_legacy_browser_use_cloud_configrsz k4 ( (KOOI,F,F;??#34::;AACIIKH**l;.G.G?[nKoKo # %%r c$V^8dQhR\/#r;r<)rs"rrrs77$7r c2^RIHp\V!RR44#)zBROWSER_USE_API_KEY for the served profile: the only credential Hermes autospawns BU cloud with. Profile-scoped so a multiplexed secondary never inherits the default's cloud mode. get_secretBROWSER_USE_API_KEYr)agent.secret_scoperr5rs rrrs.  0"5 66r c$V^8dQhR\/#r;r<)rs"rrrsHHHr c\4'dR#\4pV'd V\8H#\\ 44;'g \ 4RJ#)arTrue when the Browser Use CLI replaces the built-in browser stack. Browser Use mode is the DEFAULT: unset ``browser.backend`` ("") enables it whenever browser-harness is importable (a core dependency); ``browser.backend: off`` keeps the built-in browser_* tools. Camofox always falls back to the built-in tools (Firefox, custom HTTP API, no CDP surface for the harness).FN)r9rrrr _find_cli)rs ris_browser_use_cli_modersZ !#G&-7l "H4VWhWj4k5G5GoxozCGpGHr c:V^8dQhR\\,/#r;rr)rs"rrrs(3-r c(\4'g\4'g \4eR#\\ 44R, R, p\ P !4p\ P!\4;_uu_4^WP4P, u;8:dR8dMM RRR4R#RRR4\ P!\4;_uu_4VPPRRR7VP4\P!WV34RRR4R# +'giL;i +'giR#;i \ d"p\"P%RT4Rp?R#Rp?ii;i) zOne-line notice when ``browser.backend`` is unset but the CLI is not runnable, so the session fell back to the built-in tools. Rate-limited to once per 24h via a stamp file.Ncachez.browser_use_default_noticeTparentsexist_okubrowser-harness is missing from Hermes's Python environment — using the built-in browser tools. Run `hermes update` to re-sync it, or set `browser.backend: off` in config.yaml to silence this.z'browser-use downgrade notice failed: %siQ)rr9rrr timerrOSErrorstatst_mtimeparentmkdirtouchrutimer"r#r$)stampnowr%s rdefault_downgrade_noticers  O$5$59P_&''14QQiik   ) )C**,///;);* ) )  ) ) LL  td  ; KKM HHU#J '*s* )* )s  >BsZ,E%AE%2D>:E%*E%.AE4E%> E E% E" E%"E%% F0F  Fc:V^8dQhR\\,/#r;r)rs"rrr(s::8C=:r c\PPR4pVeVP'gR#\ \ VP4P 4PP4#)zLThe site dir Hermes's interpreter imports ``browser_harness`` from, or None.browser_harnessN)r.util find_specoriginrrresolver)specs rrr(sP >> # #$5 6D |4;;; tDKK ((*1188 99r cPV^8dQhR\\\,,/#r;)rlistr)rs"rrr0s998DI&9r cD\4fR#\PRR.#)zThe Browser Use CLI's engine (browser-harness) is a core dependency of Hermes's own venv, so every install, the Desktop bundle included, runs it on the current interpreter.Nz-mzbrowser_harness.run)rsys executabler?r rrr0s"" NND"7 88r c\V^8dQhR\\,R\\,/#)rtask_idrr)rs"rrr8s"  HSM hsm r c\PPR4'd\PR,#\P R\ T;'gR44R,;'gRp\ \44R, R, R, V, pVPRRR 7\ V4# \d"p\PR T4R p?R #R p?ii;i) zCStable per-task scratch dir that persists across browser_exec callsBH_AGENT_WORKSPACE_r:NPNrr workspaceTrz&browser_exec workspace unavailable: %sN) renvironrN_TASK_ID_SAFE_REsubrrr rr"r#r$)rsaferr%s& r_workspace_dirr8s zz~~*++zz.//##CW-A-A )BCCHUUIO%&0=@;NQUU 4$ /4y  =qAs$CC5AC C1C,,C1cRV^8dQhR\R\R\\,/#)rstdoutsincer)rfloatr)rs"rrrFs%  S  8C= r c6\\PT;'gR44FZp\PP V4'd2\PP V4V^, 8dVu#KZK\ R# \dKni;i)zjLast screenshot path printed during this exec that exists and was written after the exec started, or None.rN)reversed_IMAGE_PATH_RErqrrisfilegetmtimer)rrrs&& r_find_screenshotrFs}// "=> ww~~d##(8(8(>%!)(K )L#?    sAB  BBc V^8dQhR\\\3,R\R\\\\3,,/#)rresultrr)rErrr)rs"rrrRs9d38nCHTRUWZRZ^D\r c L^RIHpHpHp^RIHpV!4'gR#V!\ V4RV!4VRR7p\P!VRR7pVR ,pR RR VR R VRR/RRRRV/RRRRV//./# \d"p \PRT 4Rp ? R#Rp ? ii;i)z?Build a multimodal tool result attaching path for vision models)_EMBED_MAX_DIMENSION_resize_image_for_vision#_should_use_native_vision_fast_path)resolve_embed_target_bytesNz image/pngT) mime_typemax_base64_bytes max_dimension force_jpegF) ensure_asciiuS The screenshot from this call is attached — inspect it with your native vision. _multimodal text_summarymetascreenshot_path native_visioncontenttypetext image_urlrrz:Native screenshot attach failed (falling back to text): %s) tools.vision_toolsrrr!tools.vision_tools_history_budgetr rjsondumpsr"r#r$) rrrrrr data_urlrattachedr%s && r_native_screenshot_resultrRs g gP244,DJ+=W=Y:N[_azz&u5qqt^T6DUW[]lnrCsVVVX>Vadiksct@uvx x  QSTUsA7AA77 B#BB#c$V^8dQhR\/#r;r)rs"rrrhsKKSKr c6^RIHpHpV!4fR#V!4#)u``""`` outside a served-profile scope (every legacy key stays byte-identical); under a multiplexed turn, the routed profile's home key — one profile's browser must never be handed to another that happens to use the same session name or task id (#110032).get_hermes_home_overrider r)hermes_constantsr"r r!s rrrhsK)+32J9JJr Fc^V^8dQhR\\,R\R\R\/#)rr session_namesidecarrr])rs"rrrps.// /S/PT/ad/r cV'dRV 2M T;'gRp\4pV'dV RV 2MTpV'dV R2#T#)zSession-cache key for a backend browser: named sessions get their own; served profiles get their own. ``sidecar`` appends the hybrid ``::local`` suffix, which makes ``_get_session_info`` build local Chromium even when a cloud provider is configured.z bu-named-zbrowser-exec-default@z::local)r)rr%r&keytags&&& r_backend_cache_keyr+psK)5Il^ $7;\;\F\C  CSE3%.SC%cU'?.3.r c0V^8dQhR\R\/#)rr)rr)rs"rrrzs..s.s.r c.RT;'gR 2R,#)aBU_NAME of the harness daemon serving the hybrid local sidecar. The daemon reads BU_CDP_* once at spawn and outlives the call, so sharing the cloud route's daemon would relay a private URL to the cloud browser it is already attached to. User session names cannot start with ``_``._local_r:N@Nr?)r)s&r_sidecar_daemon_namer0zsT&&Y' ( --r c4V^8dQhR\R\RR/#)rrBr)rNrD)rs"rrrs!>>4>c>d>r cb^RIHpV!V4pV'dVP\V4R#R#)zThe session layer decides real profile vs fresh browser once per key; carry its note (if it fell back) so the result reports the browser this call actually drives.)real_profile_noteN)tools.browser_tool_sessionr3r_REAL_PROFILE_FALLBACK_SENTINEL)rBr)r3notes&& r_export_real_profile_noter7s(= S !D  6= r c V^8dQhR\R\\,R\R\R\\,/#rrBrr%r&rrErrr5)rs"rrrs9 S%)6>smr c (^RIHp^RIHpV!4'gR#\Y\YT4RR4pTf)RT\&RT\&\T\YT44T# \d"p\ P RT4Rp?R#Rp?ii;i)a Point the harness at a Hermes-spawned ``lightpanda serve`` (``browser.engine: lightpanda`` and nothing of higher precedence claimed the session). Each cache key gets its own process via the legacy ``_get_session_info()`` (cache, reaper, atexit): private browser, own-tab preamble skipped._get_session_info)_using_lightpanda_engineNz browser engine lookup failed: %scRV R2#)z!Lightpanda could not be started: un Set browser.engine to auto to use local Chrome, or switch backends via `hermes tools` → Browser Automation.r?)r%s&rr0)_resolve_lightpanda_cdp..s6qc:hhr z\Lightpanda session returned no CDP endpoint. Set browser.engine to auto to use local Chrome.1) r4r=&tools.browser_tool_lightpanda_fallbackr>r"r#r$rWr+_PRIVATE_BROWSER_SENTINEL_BOT_DESKTOP_BROWSER_SENTINELr7)rBrr%r&r=r>r%rts&&&& r_resolve_lightpanda_cdprEs @S'))*  27' R if  C  {), %&-0 )*!#'9'QX'YZ J  7;sA%% B0B  Bc0V^8dQhR\R\/#)rrCrr)rs"rrrsCCr c^RIHpV!4'gV#^RIHpHp^RIHpHp^RIH pV!V4pVPR 9gVP'gV#VPRR7pVfV#VPWPVPV4R7p V!VPR V 2R 74# \ d#p \"P%R T 4TuRp ? #Rp ? ii;i) aA CDP endpoint agent-browser reported from INSIDE the terminal backend's sandbox is that sandbox's loopback: unreachable from this host (Docker bridge / ssh remote). The harness, the vault supervisor and ``browser_exec`` all connect from here, so forward the port over the sandbox's exec stream and hand them the local end. Chromium's DevTools accepts any loopback ``Host`` header, port included.)_browser_in_sandbox)urlsplit urlunsplit)runtime sandbox_host)streamsT)createN)userz 127.0.0.1:)netlocz#sandbox CDP forward unavailable: %s)z 127.0.0.1 localhost)r4rH urllib.parserIrJtools.bot_desktoprKrLtools.environmentsrMhostnameport _sandbox_env forward_port _user_for_replacer"r#r$) rCrHrIrJ _bd_runtimerLrMrsandboxlocalr%s & r_reach_sandbox_cdpr^s B"$$J5J.  >>!; ;5:::J**$*7 ?J$$Wjj|?U?UV]?^$_%..*UG0D.EFF  :A> s;B9B9AB9B9B92AB99 C&C!C&!C&c V^8dQhR\R\\,R\R\R\\,/#r9r:)rs"rrrs:thsmSV+/=136; on a headless box it just reports ``chrome-not-running``. ``get cdp-url`` runs through ``_run_browser_command`` (legacy cache, inactivity reaper, atexit, Chromium preflight/auto-install) on EVERY call: it launches the browser cold, follows a relaunch, and refreshes the agent-browser daemon's idle timer, which never sees the harness's direct CDP traffic.)_run_browser_command)_get_open_command_timeoutz+managed chromium resolution unavailable: %sNrNzcdp-urlT) first_opentimeoutsuccessdatacdpUrlrz(The local browser could not be started: rnz&agent-browser returned no CDP endpointuW Run `hermes tools` → Browser Automation to (re)install Chromium, or switch backends.rA)r4rarorbr"r#r$r+rNrr^rJrCrDr7) rBrr%r&rarbr%resrCs &&&& r_resolve_managed_chromium_cdprjsC@ 1'QSX[dZe'@D'Q SCGJyybooV_F`F`# rv&,,"11(;AAr BfhC :CII2??7;S;;W;AAii j S !C%(C!"),C%&c#5gW#UV   BAFs D D3D..D3c V^8dQhR\R\\,R\R\R\\,/#r9r:)rs"rrrs@NN4N(3-NsN'+N8@ Nr ch\WW#4pV'g\V4'dV#\WW#4#)zvLocal engine (no provider / override, or the hybrid sidecar): ``browser.engine: lightpanda`` or the packaged Chromium.)rErOrj)rBrr%r&rts&&&& r_resolve_local_engine_cdprms/ "# FC l3 (| MMr c V^8dQhR\R\\,R\R\R\\,/#)rrBrr%force_local_sidecarrr:)rs"rrrs@HHdHXc]H#H.2H?G}Hr c a a a\V4'dR#^RIHp^RIHo ^RIHp\TR4pT'd\Y4R#T'd\YTRR7#\TRR 4pTf \YT4#\\TR R4;'gR4P4P!4p T \"8Xd5\%\'44'g\)4'd R T\*&R#\-T4P.o /oR T T3R llp \1Y \3Y4T 3RlRS R24p T 'dJSP5R4'd3\P7RS SP5R44\9YT4#T fT'd R T\*&T # \d"p\PRT4Rp?R#Rp?ii;i)uPoint the harness at the configured backend's CDP endpoint; error string on failure. Precedence: (1) ``BU_CDP_WS``/``BU_CDP_URL`` already in env (operator override); (2) ``BROWSER_CDP_URL`` env / ``browser.cdp_url`` (``/browser connect``); (3) a cloud provider via the legacy ``_get_session_info()`` so browser_exec shares the SAME session machinery (per-task cache, expiry, reaper, atexit); (4) the local engine — ``browser.engine: lightpanda`` or Hermes' packaged Chromium via agent-browser (never the harness's own discovery of the user's installed Chrome); (5) BU direct-API configs WITH ``BROWSER_USE_API_KEY`` → None (checked before (3)): the CLI reaches BU cloud natively (BU_AUTOSPAWN); a keyless ``browser-use`` provider (managed-gateway autodetect, or a selection missing its key) takes (3). ``session_name`` (BU_NAME) keys the session cache so each name gets its OWN browser — what makes named sessions concurrent-safe. ``force_local_sidecar`` skips step (3): the call runs on the local engine under the ``::local`` cache key (hybrid routing; see ``_hybrid_routes_locally``). It sits BELOW the two operator overrides, and the sidecar verdict never fires while a CDP override is set.N_get_cloud_providerr<)_get_cdp_overridez/browser_tool backend resolution unavailable: %srT)r&zCloud provider lookup failedr)rAc0V^8dQhR\R\/#)rr)rrrE)rs"rr*_resolve_backend_cdp..__annotate__s34r cJ<SPS!V4;'g/4S#r,)update)r)r=sessions&r _session_info+_resolve_backend_cdp.._session_infos"(-334r c<RS RV R2#)Cloud browser provider z failed to provide a session: u^. Fix the provider configuration or switch backends via `hermes tools` → Browser Automation.r?)r% provider_names&rr0&_resolve_backend_cdp..s ,]O;YZ[Y\]rrr r}zw returned no CDP endpoint, so Browser Use mode cannot drive it. Switch to the built-in browser tools for this provider.fallback_from_cloudzCbrowser_exec: %s failed (%s); using local Chromium for this sessionfallback_reason)rOtools.browser_tool_cloudrrr4r=tools.browser_tool_cdprsr"r#r$r&rJrmrr-rrrrrrrCrr`rWr+rNwarningrj)rBrr%rorrrsr%overrider provider_keyrzrtr=r~rys&&&& @@@r_resolve_backend_cdprs"C@@<',HS#(|TRR)41OPH(|DDwx4::;AACIIKL|#L9J9L,M,MRjRlRl), %&N++MG  .wE s !-1S S  C w{{011 \$gkk2C&D F,S<HH {|), %& Jc  FJsF!! G ,GG cRV^8dQhR\R\R\\,/#)rrB force_localr)rEr5rr)rs"rrr/s%4dx}r c\4'd\V4'dR#^RIHp^RIHp^RIHp\TR4'dR#T'g2\T\44f\\44'dR#T!4wrgT'dT'g\Y4RT\ &T;'gR# \d"p\PRT4Rp?R#Rp?ii;i)uQPoint the harness at the user's real-profile copy-browser (a SNAPSHOT of their default Chromium profile, hermes_cli.browser_connect) when consented. Two ways in: the effective backend is already local (no provider, CDP override, or legacy BU cloud config) → silent upgrade; or ``force_local`` (consent-gated ``local`` arg) → the user's browser even under a cloud backend. Operator overrides (BU_CDP_* env, /browser connect, ``browser.cdp_url``) own the session either way. A launch error is returned; ``_route_backend`` then falls back to the normal backend and reports it, never silently.N)_get_cdp_override_rawrq)_real_profile_cdpz/real-profile backend resolution unavailable: %srrA)r@rOrrrrrtools.browser_tool_real_profilerr"r#r$r&objectrrrJrD)rBrrrrrr%rCrts&& r_resolve_real_profile_cdpr/s # $ $ S(9(9@@E#R(( F#6AMABSBUVV "HC 3S-0 )* ;;$  FJsB== C)C$$C)cJV^8dQhR\R\\,RR/#)rrBrrN)rErr)rs"rrrMs*XX$X#X4Xr cDVPR4;'gVPR4pV'gR#^RIHp^RIHpHpV!4wrgTP T;'gRV!V4WgR7R# \d"p\PRT4Rp?R#Rp?ii;i) a)Attach the per-task CDP supervisor to the browser this exec drives so ``browser_vault`` fill has a secret-capable WebSocket (never argv) into the SAME browser. Only CDP-routed backends expose an endpoint; BU direct-cloud (BU_AUTOSPAWN) does not, and the vault tools report ``supervisor_required``.rHrGN)SUPERVISOR_REGISTRY)_get_dialog_policy_config_resolve_cdp_overrider)rrV dialog_policydialog_timeout_sz:browser_exec: CDP supervisor attach failed (non-fatal): %s) rNtools.browser_supervisorrrrr get_or_startr"r#r$) rBrrCrrrpolicy timeout_sexcs && r_attach_vault_supervisorrMs ''+  7 7#'',"7C X@[57((1E1EIOdehOi7= ) [ X QSVWWXs*A3!A33 B>BBcV^8dQhR\R\R\\,R\R\R\R\\,/#)rrBryrr]ro real_profiler)rErrr5)rs"rrr^sSIIIsIXc]I4I(,IDHIT\]`TaIr cBV'd \WR7MRpV'd$\V4'g\4'gR#V'dJ\V4'g9V'g V'g)V'd^RIHpV!V4V\ &RV\ &Rp\WVVR7#)a9Resolve where the harness connects; returns an error string or None. Real-profile consent runs BEFORE provider resolution so a hit short-circuits the cloud path via the BU_CDP_* env contract. Named sessions compose with the backend: BU_NAME namespaces the harness daemon (IPC socket, log, pid) and on provider backends additionally keys its own cloud browser. ``force_local_sidecar`` (a call carrying a private URL) declines the cloud provider for the hybrid local sidecar; unlike ``local`` (the consent-gated real-profile browser) it never touches the user's profile.)rNulocal=true was requested but browser.use_real_profile is off. Enable it in config.yaml (browser.use_real_profile: true) or the desktop Settings → Browser section, then retry.)real_profile_fallback_noterAT)r%ro)rrOr@rrr5_LOCAL_FALLBACK_SENTINELr)rBryrr]rorrp_errrs&&&&&& r_route_backendr^sCO &s >TXF \#&&/F/H/Hl  \#&&F,  R3Mf3UC/ 0(+ $%" 74G IIr c$V^8dQhR\/#r;rw)rs"rrr{s t tT tr cZRRlp\PR8Xd\V/R4#RR/#)aPopen kwargs starting the CLI in its own process group (a new session on POSIX) so a timeout can take down every process that inherited the capture pipes, not just the CLI child. Windows also hides the console the .cmd shim would flash (as browser_tool does).c$V^8dQhR\/#r;rw)rs"rr)_group_popen_kwargs..__annotate__s##D#r c^RIHp\P!4pV;P\P ,unRV!4\ \R^4,RV/#)rywindows_hide_flags creationflagsCREATE_NEW_PROCESS_GROUP startupinfo)hermes_cli._subprocess_compatr subprocess STARTUPINFOdwFlagsSTARTF_USESHOWWINDOWr-)rsis r_flags#_group_popen_kwargs.._flagssOD  # # % j555 !3!5 Lfhi8j!jr# #r rzWindows hide-flags unavailablestart_new_sessionT)rr)r&)rs r_group_popen_kwargsr{s1# DF77d?6&"> ?sYlnrXssr c0V^8dQhR\R\/#)rrr)rint)rs"rrrs""c"c"r c\\\\V4\44# \ \ 3d \u#i;ir,)max_MIN_TIMEOUT_Sminr_MAX_TIMEOUT_S TypeError ValueError_DEFAULT_TIMEOUT_S)rs&r_clamp_timeoutrs9">3s9~~#FGG z ""!!"s&)AAg$@cV^8dQhRR/#rrNr?)rs"rrrs , ,T ,r cV\PR8Xd^RIHp\P !\ \P4;_uu_4\P!RRRR\VP4.\PRRRR ^ R V!4R 7 R R R 4R #\P !\\4;_uu_4\P!VP\ P"4R R R 4R # +'giR #;i +'giR #;i) uSIGKILL the CLI's whole process group (POSIX; ``start_new_session`` made pgid == pid) or, on Windows, its process tree via ``taskkill /T /F`` — the only group-wide kill it offers.rrtaskkillz/Tz/Fz/PIDTutf-8replaceF)stdincapture_outputrencodingerrorsrecheckrN)rr)rrrrrrSubprocessErrorrunrpidDEVNULLProcessLookupErrorPermissionErrorkillpgsignalSIGKILL)procrs& r_kill_cli_process_grouprs ww$D  **D*D E E NNJdFCMJR\RdRd*.TGT]gi!&6H6J LF    / A A $((FNN+ B A F E  A A As A D 0D D  D( c"\P!V3R\PR\PR\PRRRRRR R V/\4BpVP WR 7wrV\P!YPYV4# \P dl\ T4\P!\P 4;_uu_4TP \R 7R R R 4h +'gih;ii;i)uRun the CLI in its own process group and kill the whole group on timeout. ``subprocess.run`` only kills the direct child on ``TimeoutExpired``; a grandchild that inherited the stdout/stderr pipes (browser_harness daemon / Chrome helper) is orphaned still holding them, and on Windows ``run()``'s unbounded post-kill ``communicate()`` then blocks on pipe EOF forever — so the tool call, plus its activity heartbeat, wedges (#106244). rrstderrrTrrrrrB)inputrerdN) rPopenPIPEr communicateTimeoutExpiredrrr_POST_KILL_DRAIN_SCompletedProcess returncode)cmdrirBrerrrs&&&& r_run_cli_killing_process_grouprs     ?? +5?? CM??   # ,5 ;> BUBW D)))F  & &sOOV LL  $ $%  !:!: ; ;   %7  8< < ; s%BA DC:1 D: D  Dztools.browser_tool_cdplive_cdp_generationz!live CDP generation lookup failedc>V^8dQhR\\,RR/#)rhome_keyrNr)rs"rrrs8C=Dr ca\;_uu_4\V3Rl\P444pVFp\P VR4K RRR4\ X4R# +'giL;i)zStop every harness daemon this process drove (only ``home_key``'s when given), through the harness's own identity-checked ``--reload``; the next browser_exec respawns one on the endpoint it resolves then.c3B<"TFwrSRV39gKVxK R#5ir,r?).0r)homers& r 'stop_harness_daemons..s%b.EVZ\`UaIa.Es  N)_driven_daemons_locksorted_driven_daemonsitemsr_reload_daemons)rdaemonsr)sf rstop_harness_daemonsrsV  bo.C.C.EbbC   T * G  s AA,, A< cV^8dQhRR/#rr?)rs"rrrs```r c :V'd \4MRpV'gR#\4pVFXp\P!\\ P 4;_uu_4\.VORNR\W#4^4RRR4KZ R# +'giKo;i)Nz--reloadr) rrrrrrrrr )rrrBdaemons& rrrsp )+dC   C  **D*D E E *+=S+=*+=r:cCZ\^ _F E E E Es B  B cV^8dQhR\R\R\\,R\R\R\R\\\,\3,/#rrBryrr]r\ route_keyr)rErrr5tuple)rs"rrrs[ U UT UC U(3- U U]a U U#(#)<#= Ur c \WW#VV\9R7pVP\R4pV'd\P WW4Yd;'g \ VP\ R443#)z``_route_backend`` for one browser_exec call; returns ``(error, runs on the local sidecar)``. A real-profile fallback is remembered per route: the route keeps its fresh browser and the note waits until a result carries it (``_take_real_profile_note``).)rorN)r_real_profile_fallbackrr5rr5r)rBryrr]r\r route_errr6s&&&&&& r _route_execrsc sWQ^,5=S,SUI 772D 9D ))): TTtCGG4Ld,S'T TTr cV^8dQhR\R\R\\,R\R\R\R\\\\,\\ 3,/#r)rErrr5rr)rs"rrrsZ 2 2T 2C 2(3- 2PT 2'+ 28; 2@EdHUXM[_adFd@e 2r c \^4F@p\V4p\4p\WqW#WE4wrV 'g\4V8XgK@M XX X X3#)z``_route_exec`` on a copy of ``env`` -> ``(routed env, error, sidecar, generation)``, re-routed (at most 3 tries) when /browser connect published meanwhile; ``_reload_if_republished`` covers dispatch.)rangerE_live_generationr) rBryrr]r\r_attemptrouted generationrr&s &&&&&& r_route_exec_currentrsV!Hc%' ('-c (*j8   9gz 11r c4V^8dQhR\R\RR/#)rrBrrN)rEr)rs"rrrs!#$r c\4V8XdR#\V4p\;_uu_4\P VR4RRR4\ V.4R# +'giL;i)z`Stop this call's daemon if the profile published a new endpoint while it spawned on the old one.N)rr rrrr)rBrrs&& r_reload_if_republishedr sHZ' S !F  FD) VH  s A A( c0V^8dQhR\R\/#)rrrru)rs"rrrsKKsKtKr czV\9g V\9d/#\PV4R\V,/#)z[The fallback note for the first result this route returns after falling back, then nothing.real_profile_unavailable)r_real_profile_note_deliveredadd)rs&r_take_real_profile_noters7..)?[2[  $$Y/ &(>y(I JJr c jV^8dQhR\R\R\R\\,R\/#)rriryrrr])rrrr5)rs"rrrs<kkskSk#k"3-k7;kr c aaaaaa^RIHp^RIHoHpS'dSP 4'g S!R4#\ S4pVP'dS!VP4#\SV4p\PS4'd VPM\PVR4p \4oS'g S!R4#\4oV'd.\ P#V4'gS!RV: R24#VSR&\%SVS\'V4W4worp V 'd S!V 4#V 'd\)V4SR&V \V&\'SP+\,R 44p SP+\.R 4p V'dV 'g\0S,o\3S4pV'dVSR &R S9d\5\744'dR SR &\9V4o\:P:!4pR VVVVVV3RllpV 'd^RIHpV!RRR//V4pMV!4p\ASV 4RV9dRV9d VR,#V!V4#VR,pRVPB^8HRVPBRV!VPDRR7/pV'dVVR&V'dVVR&VPG\IV44T!VPJ;'gRP 4RR7p\MV4\N8dVR \NR,pV'dVVR&\QVPDV4pV'dVVR&\SVV4pVeV#V!V4#)zBRun Python code through the browser-use CLI, and return its output)redact_sensitive_text) tool_error tool_resultz~No code provided. Pass Python that uses the pre-imported helpers, e.g. new_tab("https://example.com") then print(page_info()).Fz_browser-harness is missing from Hermes's Python environment. Run `hermes update` to re-sync it.zInvalid session name zA: use 1-64 letters, digits, dashes, or underscores (e.g. 'r7k2').BU_NAMENr BU_AUTOSPAWNrAcFV^8dQhR\\\3,/#r;)rErr)rs"rr"browser_exec..__annotate__>sZZd38nZr c j<\SS4\;_uu_4\S4p\4\V&RRR4R\ SSSS4/# +'giL!;i \ PdRS!RS R\ R24/u#\dpRS!RT 24/uRp?#Rp?ii;i)Nr error_resultz!browser-use exec timed out after zGs. The daemon may still be working; retry with a larger timeout_s (max u), or split the work into several calls that append to workspace files — anything already written to the workspace is preserved.z"Failed to launch browser-use CLI: ) rrr r rrrrrr)rr%rrirBrrers rdispatchbrowser_exec..dispatch>s g. ! !$S)F&5&7OF #" Z:3c7ST T " ! (( "J3G9=00>/?@hh%   Z"J1STUSV/W$XY Y Zs5AA% A" %*B2B2B2 B-'B2-B2) run_fencedfeaturesr]Trrrf exit_codeoutput)forcerryru … (stderr truncated)rr)* agent.redactrrrrrrur[r+rpsearchr\_exec_route_is_sidecarrNrr _SESSION_REmatchrr5r0rrDrC_OWN_TAB_PREAMBLErrrrrr4rr rrrxrrlen_STDERR_CAP_CHARSrr)riryrrr]rrverdictrr\rrbot_desktop_browserprivate_browserrstartedrr dispatchedrrr screenshotnativerrBrersf&&f& @@@@r browser_execr2s36 tzz||]^ ^ %G'//**#7G4I-4^^D-A-AG))G]GaGabkmrGsM +C ?@ @  C  )) 5g[AFFG G I0C WgtE{M1F-C:)$$-g6I(59%sww'DdKLgg7>O 4'w'I$- !S %GHYH[%\%\!NY'GiikGZZ 9gt_ =xH Z 3 + Z Z 'n- -:&& f D 4??a'T__' 4@F '{#y MM))45 "DKK$5$52#<#<#>d KF 6{&&**+.HH !x!$++w7J$. !*6:>  M v r u|Drive a real web browser via the Browser Use CLI: `code` runs as full Python (stdlib available) with pre-imported browser helpers; stdout comes back in the result. Start `code` with a one-line comment describing the step for the user in plain language, max 60 chars (e.g. `# Searching Amazon for paper towels`) — the UI shows it as the step label. STATE: the browser session and workspace persist across calls; Python variables do NOT (fresh interpreter each call). The workspace dir is $BH_AGENT_WORKSPACE (also `workspace` in every result); functions defined in agent_helpers.py there are auto-imported into every call. For multi-item tasks ('all N products / every entry'), append each batch to a JSON/CSV file in the workspace, then read it back and aggregate in code — dedupe/count/sort with Python, not in your head — and verify the collected count against what was asked before answering. Batch each sub-procedure (navigate, wait, extract, act) into one call — do not spend a call per action — but for long extractions prefer several medium calls that append to workspace files over one giant call, so progress survives timeouts.u  Screenshots are attached to your context automatically: when the exec output contains a capture_screenshot() path, the image arrives with this tool's result and you inspect it directly with your own vision — never send browser screenshots to a separate vision tool.u  Your model cannot view images, so work text-first: page_info() for state, js() for reading/extracting DOM text, fill_input(selector, text) for inputs, and js("document.querySelector('…').click()") for clicks — skip the screenshot-driven workflow described below.u The local engine is Lightpanda (no graphical renderer, one page per session): capture_screenshot() is unavailable, so work text-first; navigate with new_tab(url) exactly once, then goto_url(url) for every later navigation — a second new_tab() fails with TargetAlreadyLoaded.u HELPERS (pre-imported): new_tab(url) opens/navigates (use for the FIRST navigation), goto_url(url) navigates the current tab, wait_for_load() after navigation, page_info() summarizes the current page state, js(expr) evaluates a JS expression and returns its value (js('document.title'); wrap function bodies as js('(() => {...})()') — a bare '() => {...}' returns the function itself, uncalled), fill_input(selector, text) types into inputs, click_at_xy(x, y) clicks viewport coordinates, capture_screenshot() saves and prints a screenshot path, cdp('Domain.method', **kwargs) is raw CDP — cdp('Accessibility.getFullAXTree')['nodes'] lists every element's role/name/backendDOMNodeId (filter in Python before printing; it is thousands of nodes), then cdp('DOM.getBoxModel', backendNodeId=n) gives click coordinates. ensure_real_tab() recovers from a stale/internal tab. Login walls: never guess credentials; see the vault note below if present, otherwise stop and ask the user.c$V^8dQhR\/#r;r)rs"rrrsLLSLr c\RRRR4^,'d\\,\,#\RRRR4p\V'd \,#\,#) zCHeader tailored to whether the active model can see images nativelyz&tools.browser_tool_lightpanda_fallbacklightpanda_engine_statusFrz$lightpanda engine status unavailableztools.vision_toolsr)Fr)r2 _HEADER_BASE_HEADER_TEXT_ONLY_HEADER_LIGHTPANDA_HEADER_VISION)visions r_description_headerr;s_: KK9J KKr c$V^8dQhR\/#r;rw)rs"rrrs4r cR\4\,/p\4'd?\\R,R,4pRRRRRR/VR&/\R,CRV/CVR&V#) description parameters propertiesrbooleanrFu3Drive the user's own local browser (a Hermes-managed copy of their real default-Chromium profile, logins/cookies included) instead of the configured cloud browser backend. Use when the user asks to act as themselves — their accounts, their sessions. No-op when the backend is already local. Default false.r])r;_HELPERS_DIGESTr@rEBROWSER_EXEC_SCHEMA) overridespropss r_dynamic_schema_overridesrFsx$&9&;o&MNI  (6|DE Iy% p g#]%8%F"\ V["\ , r r)r2r>ur (The browser-use CLI is not installed yet. Install it with `hermes tools` (Browser Automation → Browser Use).)r?rrr@ristringziPython code to execute using the pre-imported browser helpers. Use print(...) for any data you need back.ryuNamed isolated browser session — its own daemon and (on cloud backends) own browser, so concurrent tasks don't share tabs. Reuse the same name on every related call; omit for the shared default session.rintegerrz4Max seconds to wait for the code to finish (default z, max z).required)registryc \VPRR4VPRR4;'gRVPR\4VPR4\VPRR44R7#)rirryrrr]F)riryrrr])r2rNrr5)argskws&,rr0r0sY| XXfb !488Ir+B+H+Hb((;(:;RVVIEV488GU+, r u🌐)r)toolsetschemahandlercheck_fndynamic_schema_overridesemojic8V^8dQh/^\9d(\\\R3,\3,;R&^\9d\\\3,;R&^\9d\\\3,;R&^\9d \ ;R&#)r.rr%rr)__conditional_annotations__rErrr5r)rs"rrrs~r10eCHos*+0s|-,S$Y,}@,+S#X+AB*)c)Cr )z/usr/local/sbinz/usr/local/binz /usr/sbinz/usr/binz/sbinz/bin)r)rF)FTr,){rUrdr functoolsr.importlib.utilrloggingrrerrr threadingrpathlibrtypingrrrrrrr#r r tools.browser_harness_dirsr r r utilsr getLoggerr`r#rrcompiler&rCrDr5rr(rrrr*r IGNORECASErrprr&r2r9r@rJrOrWrYrurrrrrrrrrrrrrrrrr+r0r7rEr^rjrmrrrrrrrrrrLockrpartialrr%rrrrrrrr rr2r6r9r7r8rBr;rFrCrrJregisterr)rUs@rres}     BB=ZZ!   8 $ jj<= 9!A"D6 !F::12SUWUbUbc **-r}} =_ a ttX ? j 0 & k as  &7H,:9  ,K/.>42:NHV<X"I: t" ,M0/10 ~~'$$Z1IK`bc%HJ+-,)++$'E)` U 2K,.@R*.ek^ 5 "YxT YL& NL?2MM VX}7bc -:HI &)Y8J'+_`r_ssy{IzJJL*MN VH  *$     %6  r