`gjɉUdZddlmZddlZddlZddlZddlZddlZddlZddl m Z m Z m Z ddl mZmZmZddlZddlmZmZmZddlmZddlmZej4eZd Zd Zdad e d <d a!da"de d<d a#d7dZ$d8dZ%d9dZ&d9dZ'd:dZ(d:dZ)d;dZ*ddZ.d?dZ/d?dZ0d@dZ1dAdZ2dBdZ3iZ4d e d!<ejjZ6dCd"Z7dDd#Z8dEdFd$Z9dGd%Z:dHdId&Z;dHdJd'ZdKdJd*Z?dHdNd+Z@dOd,ZA dP dQd-ZBdHdRd.ZCdHdSd/ZDdHdTd0ZEdHdUd1ZFdHdVd2ZGdHdUd3ZHdHdUd4ZI dW dXd5ZJdWdYd6ZKy)ZuCamofox browser backend — local anti-detection browser via REST API. Camofox-browser is a self-hosted Node.js server wrapping Camoufox (Firefox fork with C++ fingerprint spoofing). It exposes a REST API that maps 1:1 to our browser tool interface: accessibility snapshots with element refs, click/type/scroll by ref, screenshots, etc. When ``CAMOFOX_URL`` is set (e.g. ``http://localhost:9377``), the browser tools route through this module instead of the ``agent-browser`` CLI. Setup:: # Option 1: npm git clone https://github.com/jo-inc/camofox-browser && cd camofox-browser npm install && npm start # downloads Camoufox (~300MB) on first run # Option 2: Docker docker run -p 9377:9377 -e CAMOFOX_PORT=9377 jo-inc/camofox-browser Then set ``CAMOFOX_URL=http://localhost:9377`` in ``~/.hermes/.env``. For Docker Camofox, optionally set ``CAMOFOX_REWRITE_LOOPBACK_URLS=true`` so page URLs like ``http://127.0.0.1:3000`` are opened inside the container as ``http://host.docker.internal:3000``. ) annotationsN)AnyDictOptional) SplitResulturlsplit urlunsplit)cfg_get load_configread_raw_config)get_camofox_identity) tool_errori8 Optional[str]_vnc_urlF Optional[int]_cached_cmd_timeoutctrtSdat} t}t |dd}|t t |d}|a|S#t$r#}tjd|Yd}~|a|Sd}~wwxYw)aReturn ``browser.command_timeout`` from config, falling back to 30s. Mirrors :func:`tools.browser_tool._get_command_timeout` so both the local browser path and the Camofox path honour the same config knob. Result is cached after the first call. Tbrowsercommand_timeoutNz*Could not read browser.command_timeout: %s) _cmd_timeout_resolvedr_DEFAULT_TIMEOUTr r maxint Exceptionloggerdebug)resultcfgvalexcs H/root/.hermes/venv/lib/python3.12/site-packages/tools/browser_camofox.py_get_command_timeoutr$;s""  FHc9&78 ?S1%F! M H A3GG  MHs.A A4A//A4c`tjddj}|rdd|iSiS)z8Return Authorization header when CAMOFOX_API_KEY is set.CAMOFOX_API_KEY AuthorizationzBearer )osgetenvstrip)keys r# _auth_headersr-Ss5 ))%r * 0 0 2C 73%11 IcLtjddjdS)z:Return the configured Camofox server URL, or empty string. CAMOFOX_URLr'/)r)r*rstripr.r#get_camofox_urlr4[s 99]B ' . .s 33r.c ddlm}|jdi}t|tr-t |jddxsdj S y#t$rYywxYw)a.Persistent ``browser.cdp_url`` from config.yaml, or empty string. Read here (instead of importing ``browser_tool._get_cdp_override`` to avoid a circular import) so Camofox can yield to a config-based CDP override the same way it already yields to the ``BROWSER_CDP_URL`` env override. r)r rcdp_urlr')hermes_cli.configr get isinstancedictstrr+r)r browser_cfgs r#_config_cdp_urlr=`sn 5%'++Ir: k4 ({y"5;<BBD D )     sAA A*)A*ctjddjrytryt t S)uTrue when Camofox backend is configured and no CDP override is active. A CDP override takes priority over Camofox so the browser tools operate on the real CDP browser (and a CDP backend is treated as non-local for SSRF checks) instead of being silently routed to Camofox. The override may come from the ``BROWSER_CDP_URL`` env var (set by ``/browser connect``) OR a persistent ``browser.cdp_url`` in config.yaml — both are honored, matching ``browser_tool._get_cdp_override()``'s precedence. (Previously only the env var suppressed Camofox, so ``CAMOFOX_URL`` + a config CDP override still routed navigation through Camofox.) BROWSER_CDP_URLr'F)r)r*r+r=boolr4r3r.r#is_camofox_moderArs6 yy"B'--/ ! ""r.ct}|sy tj|dd}|jdk(rntsh |j }|jd}t |tr4d|cxkrdkr)nn&d d lm }||}|jxsd }d |d |a da|jdk(S#ttf$rY"wxYw#t$rYywxYw)z'Verify the Camofox server is reachable.Fz/healthrtimeoutvncPortir)urlparse localhostzhttp://:T)r4requestsr8 status_code_vnc_url_checkedjsonr9r urllib.parserHhostnamer ValueErrorKeyErrorr)urlrespdatavnc_portrHparsedhosts r#check_camofox_availablerYs  C ||se7OQ7   s "+; yy{88I.h,h1G%1G5%c]F!??9kD!(az:H $ 3&&)   s5/C A%B5$C 5CC CC CCc.ts ttS)z>Return the VNC URL if the Camofox server exposes one, or None.)rMrYrr3r.r# get_vnc_urlr[s ! Or.c tjdijdi}t |t r|SiS#t$r"}tj d|icYd}~Sd}~wwxYw)z>Return the ``browser.camofox`` config block, or an empty dict.rcamofoxz7camofox config check failed, defaulting to disabled: %sN)r r8rrwarningr9r:) camofox_cfgr"s r#_get_camofox_configr`se!m'' 26::9bI %[$7;?R? PRUV s*A A+ A& A+&A+cFttjdS)alReturn whether Hermes-managed persistence is enabled for Camofox. When enabled, sessions use a stable profile-scoped userId so the Camofox server can map it to a persistent browser profile directory. When disabled (default), each session gets a random userId (ephemeral). Controlled by ``browser.camofox.managed_persistence`` in config.yaml. managed_persistence)r@r`r8r3r.r#_managed_persistence_enabledrcs #%))*?@ AAr.cvtjddjxs,t|j dxsdj}|sytjddjxs:t|j dxsdjxs d|xsddd }||d S) zReturn an externally configured Camofox identity, if one is set. Integrations that own the visible Camofox browser can set a shared user ID so Hermes operates in the same browser profile instead of creating a separate private session. CAMOFOX_USER_IDr'user_idNCAMOFOX_SESSION_KEY session_keytask_default)rfrhr)r*r+r;r8)task_idr_rfrhs r#_camofox_identity_overridernsii)2.446g#kooi>X>^\^:_:e:e:gG  ',224 1 {}-3 4 : : < 1 G(y#2./ 0 { ;;r.ctj|djj}|sy|dvry|dvrytj d||y)Nr'>1onyestrueT>0noofffalseFz"Ignoring invalid boolean env %s=%r)r)r*r+lowerrr)nameraws r# _env_flagr{sV ))D"  # # % + + -C  (( )) LL5tSA r.cTtd}||St|jdS)z@Return whether Hermes should recover an existing Camofox tab ID.CAMOFOX_ADOPT_EXISTING_TABadopt_existing_tabr{r@r8r_ env_values r#_adopt_existing_tab_enabledrs.67I   45 66r.cTtd}||St|jdS)aLReturn whether loopback navigation URLs should be rewritten for Docker. ``CAMOFOX_URL`` itself often points at a host-published Docker port such as ``http://127.0.0.1:9377``. That is correct for Hermes talking to the Camofox control API, but a page URL like ``http://127.0.0.1:3000`` is opened by the browser *inside* the Docker container. In that context loopback points at the container, not the host running the web app. The rewrite is opt-in because non-Docker Camofox installs run the browser on the host, where loopback URLs are already correct. CAMOFOX_REWRITE_LOOPBACK_URLSrewrite_loopback_urlsrrs r#_loopback_rewrite_enabledrs09:I   78 99r.ctjddjxs0t|j dxsdjxsdS)z=Return the host alias used when rewriting loopback page URLs.CAMOFOX_LOOPBACK_HOST_ALIASr'loopback_host_aliaszhost.docker.internalrl)r_s r#_loopback_rewrite_hostrsN /4::< " {45; < B B D " !r.c|sy|jjdj}|dvry ddl}|j|jS#t $rYywxYw)z:Return True for localhost/127.0.0.0/8/::1-style hostnames.Fz[]>localhost.localdomainrITrN)r+rx ipaddress ip_address is_loopbackrQ)rPrXrs r#_is_loopback_hostnamerse  >>  ! !$ ' - - /D 55##D)555 sA A"!A"c t}t|s|dfS t|}|jdvst |j s|dfSt|}|s|dfSd}|jr/|j}|jr|d|jz }|dz }d|vr|jdsd|dn|}|jrd|jnd}tt|j||||j|j|j }||j xsd|||dfS#t$r|dfcYSwxYw) zRewrite loopback page URLs for Docker-hosted Camofox, if configured. Returns ``(rewritten_url, metadata)``. ``metadata`` is present only when a rewrite happened so the tool result can disclose the change to the model. N>httphttpsr'rJ@[])fromto original_url rewritten_url)r`rrrQschemerrPrusernamepassword startswithportr rpathqueryfragment)rSr_rWaliasuserinfo host_part port_part rewrittens r#!_rewrite_loopback_url_for_camofoxr s_ &'K $[ 1Dy#}}--5J6??5[Dy "; /E DyH ?? ?? !FOO,- -HC #u U5E5Ec5J!E7! PUI%+[[!FKK=!bIFMMhZ {9+#F U[UaUacicrcrsI %2"  + Dys D22 EEzDict[str, Dict[str, Any]] _sessionsc |jds|jds|Sts|S tdd|didjdg}t |tr|s|S|jd }|Dcgc](}t |tr|jd |k(r|*}}|xs!|Dcgc]}t |ts|c}}|r|d nd }t |tr|jdnd }t |tr-|r+||d<tj d||jd|S#t$r2}tj d |jd||cYd }~Sd }~wwxYwcc}wcc}w)a0Attach process-local state to an already-open managed Camofox tab. Some integrations own the visible Camofox tab outside Hermes. Gateway restarts can leave this module's in-memory session cache empty even though Camofox still has that tab, so rehydrate tab_id before creating a new tab. tab_idr~/tabsuserIdrfr)paramsrDtabsz&Camofox tab adoption failed for %s: %sNrh listItemIdtabIdz&Adopted existing Camofox tab %s for %s) r8r4_getrrrr9listr:r;) sessionrr"rhtab matching_tabs candidateslatestrs r#_adopt_existing_tabr=sj{{8GKK0D$E  GXwy/A$BANRRSY[]^ dD !++m,K  c4 SWW\%:k%I M P$"P3*S$:O3"PJ)Z^tF$.vt$-E;5F F= E8'E3-E83E8c|xsd}t5|tvrtt|cdddSt}t ||}|r|dd|ddt |d}nmt |jdr#t|}|dd|ddt |d}n0dtjjdd dd |dd d d d}|t|<t|cdddS#1swYyxYw) zGet or create a camofox session for the given task. When managed persistence is enabled, uses a deterministic userId derived from the Hermes profile so the Camofox server can map it to the same persistent browser profile across restarts. rjNrfrhT)rfrrhmanagedr~rbhermes_ rirkF) _sessions_lockrrr`rnrr@r8r uuiduuid4hex)rmr_identity_overrideridentitys r# _get_sessionrcs"G  , i &y'9: , ,*+ 6w L ,Y70?&A+&N G+//"78 9+G4H#I.' 6&A+&N G%TZZ\%5%5cr%:$;<!&ws|n5 &+ G% '"7+A , , ,sC+B0C++C4ct|}|dr|St}tj|d|d|d|dt t }|j |j}|jd|d<|S)z rr^vnc_urlz]Browser is visible via VNC. Share this link with the user so they can watch the browser live.vnc_hint /snapshotrrsnapshotr)SNAPSHOT_SUMMARIZE_THRESHOLD_truncate_snapshot refsCount element_countzNavigation failed: FrzCannot connect to Camofox at z. Is the server running? Start with: npm start (in camofox-browser dir) or: docker run -p 9377:9377 -e CAMOFOX_PORT=9377 jo-inc/camofox-browserrerror)rrrrrK HTTPErrorresponserLrr^r8r[rtools.browser_toolrrlenrrNdumpsrConnectionErrorr4r;) rSrm browser_url rewrite_inforrUervnc snap_data snapshot_textrrs r#camofox_navigatersL1$Ec$J! \w'x !';7G{3D WX./y9&y1+F$88E;/XXgr*  &)F? #$0F= !B'(\$-?,@B 9 m  #F9 T :   *+95 ')"45I&MM*b9M =!$@@ 2= A !.F: &/mmK&CF? #zz&!!e%% ::)ajj.D.D.KNN0) )-GH%)';?G"&{;D ^      D/s3UCC  # # zz4_5F4GH__   1#a&%001s0F&D AF&(A#F F& F3AF F&FF& F# F&"F##F&&H29GH2:H2 H2H-'H2-H2cddlm}m}||xsdsy||d|d}|sytjdd|d |d d d S) uReturn a blocked payload when the current Camofox page is private/internal. Mirrors the eval-path guard added for ``_camofox_eval`` (browser_tool.py): Camofox snapshot / vision / image-extraction all read current page state, so on a non-local backend they can leak the content of an intranet/metadata page the terminal itself can't reach. The gate matches ``browser_snapshot`` / ``browser_vision`` — only active when the SSRF guard applies (non-local backend, not a local sidecar, ``allow_private_urls`` unset). Fail-open on probe failure, matching the sibling guards. Imports are deferred to call time because ``browser_tool`` imports this module; importing it at module load would create a circular import. r)!_camofox_current_page_private_url_eval_ssrf_guard_activerjNrrfFz9Blocked: page URL targets a private or internal address (z). Refusing to z# on this page in this browser mode.r) ensure_ascii)rrrrNr)rrmactionrr blocked_urls r#_camofox_private_page_blockr=sm #7#7i 83GH4EwyGYZK  :: }OF84  r.c t|}|ds tddSt||d}|r|Std|ddd|d i }|j d d }|j d d}ddlm}m} m} t||kDr|r | ||}n| |}tjd||dS#t$r } tt| dcYd} ~ Sd} ~ wwxYw)z-Get accessibility tree snapshot from Camofox.r0No browser session. Call browser_navigate first.Frzread a page snapshotrrrrfrrr'rr)r_extract_relevant_contentrT)rrrN)rrrrr8rrrrrrNrrr;) fullrm user_taskrblockedrUr refs_countrrrrs r#camofox_snapshotr _s$1w'x PZ_` `-gw@VW NWX&'y 1gi01  88J+XXk1-   x=7 74XyI-h7zz '   1#a&%001s(B2B2BB22 C;CCCc^ t|}|ds tddSt||d}|r|S|jd}t d|dd|d |d }t j d ||jd d dS#t$r }tt|dcYd}~Sd}~wwxYw)z$Click an element by ref via Camofox.rrFrclickrrz/clickrf)rrefTrSr')rclickedrSN) rrrlstriprrNrr8rr;)rrmrr  clean_refrUrs r# camofox_clickrs1w'x PZ_` `-gwH NJJsO WX&'v .y)) < zz 88E2&   1#a&%001s(BBAB B, B'!B,'B,c t|}|ds tddSt||d}|r|S|jd}t d|dd|d ||d d d lm}m}|d d|ixsid}d||d} || |} tj| S#t$r-} d dlm}t|t| |dcYd} ~ Sd} ~ wwxYw)z-Type text into an element by ref via Camofox.rrFrtyperrz/typerf)rrtextr)%redact_browser_typed_text_for_displayredact_tool_args_for_display browser_typerT)rtypedelement)rN) rrrrr agent.displayrrrNrrr;) rrrmrr rrr display_textrrs r# camofox_typers$^w'x PZ_` `-gwG NJJsO  WX&'u -y))T J  5^fd^TZXZ\bc  "  94Hzz(## ^G?AMW\]]^s(BBA(B C""C C Cc t|}|ds tddStd|dd|d|dtjd |d S#t $r }tt |dcYd }~Sd }~wwxYw) zScroll the page via Camofox.rrFrrz/scrollrf)r directionT)rscrolledN)rrrrNrrr;)r!rmrrs r#camofox_scrollr#s 1w'x PZ_` ` WX&'w /y) B zzd BCC 1#a&%001s"A0A A9A4.A94A9c t|}|ds tddStd|ddd|di}tjd |j d d d S#t $r }tt|dcYd }~Sd }~wwxYw)zNavigate back via Camofox.rrFrrz/backrrfTrSr')rrSN)rrrrNrr8rr;)rmrrUrs r# camofox_backr%s 1w'x PZ_` `WX&'u - wy) * zzd488E23FGHH 1#a&%001s"A?A B(B=BBc t|}|ds tddSt||d}|r|Std|dd|d|d t j d |d S#t $r }tt|dcYd }~Sd }~wwxYw) z!Press a keyboard key via Camofox.rrFrpressrz/pressrf)rr,T)rpressedN)rrrrrNrrr;)r,rmrr rs r# camofox_pressr)s1w'x PZ_` `-gwH N WX&'v .y)# 6 zzds;<< 1#a&%001s'A!A!0A!! B *B?B B c t|}|stjdddStd|dtjdddS#t$r,}tjddt |dcYd}~Sd}~wwxYw)z&Close the browser session via Camofox.T)rclosedz /sessions/rf)rr+r^N)rrNrrrr;)rmrrs r# camofox_closer,s P(::$$?@ @+, - zzdd;<< Pzzdds1vNOOPs"$A(A B!B:BBc t|}|ds tddSt||d}|r|Sddl}t d|dd d |d i }|j d d}g}|j d}t|D]\}} | j} | jds(|jd| } | r| jdnd} d} |dzt|kr9|jd||dzj}|r|jd} | s| s|j| | dtjd|t|dS#t $r }tt#|dcYd}~Sd}~wwxYw)zGet images on the current page via Camofox. Extracts image information from the accessibility tree snapshot, since Camofox does not expose a dedicated /images endpoint. rrFrzextract page imagesrNrrrrfrrr' )z- img zimg zimg\s+"([^"]*)"rGz /url:\s*(\S+))srcaltT)rimagescount)rrrrerr8split enumerater+rsearchgrouprappendrNrrr;)rmrr r3rUrr1linesilinestripped alt_matchr0r/ url_matchrs r#camofox_get_imagesr?s *1w'x PZ_` `-gw@UV NWX&'y 1gi01 88J+ t$ ' E93E>9E>c t|}|ds tddSt||d}|r|Std|ddd|d i }d d lm}|d z }|j ddt|dtjjdddz }t|d5} | j|jdddtj|jj!d} d} |r2 t#d|ddd|d i } d| j%dddd} d dlm} | | } d dlm}d|| } t1}t3|ddi }t5|j%d!d"}t5|j%d#d$}|d&d'|d(d)d*d+| id,gd-gd||.}|j6r5|j6d j8jxsdj;nd}d dlm} | |}t=j>d||d/S#1swY`xYw#t&$rY wxYw#t&$rd%}d$}YwxYw#t&$r }tt|dcYd}~Sd}~wwxYw)0zrs2#   &&::CC<%   8 $ -&*])04 $#&2@ B<& 7:$ &Z(* $)!#L(,V,,*N1bDCG04'1 -'19<'1T16&^R 1 1 1( P01f49,0^1)^158^1Br.