`gjji UdZddlmZddlZddlZddlZddlmZmZm Z ddl m Z m Z ejeZdZhdZd-dZ ddlZdd lmZd Zd Zd.d Zd/dZ d0dZ d1dZ d2dZ d3 d4dZddedddddddid dddddddd d!d"d#d$dgd%d&Z de!d'<d5d(Z"e jFdd)e d*e"d+,y#e$r dZeZd ZYwxYw)6u Raw Chrome DevTools Protocol (CDP) passthrough tool. Exposes a single tool, ``browser_cdp``, that sends arbitrary CDP commands to the browser's DevTools WebSocket endpoint. Works when a CDP URL is configured — either via ``/browser connect`` (sets ``BROWSER_CDP_URL``) or ``browser.cdp_url`` in ``config.yaml`` — or when a CDP-backed cloud provider session is active. This is the escape hatch for browser operations not covered by the main browser tool surface (``browser_navigate``, ``browser_click``, ``browser_console``, etc.) — handling native dialogs, iframe-scoped evaluation, cookie/network control, low-level tab management, etc. Method reference: https://chromedevtools.github.io/devtools-protocol/ ) annotationsN)AnyDictOptional)registry tool_errorz3https://chromedevtools.github.io/devtools-protocol/> Page.reloadPage.stopLoadingTarget.getTargetsBrowser.getVersionTarget.detachFromTarget Page.navigateTarget.attachToTargetclddlm}t|tr ||dSt|tr|Dcgc] }t |c}St|t rt d|DSt|tr-|jDcic]\}}|t |c}}S|Scc}wcc}}w)z>Redact browser-originated CDP result data before returning it.r)redact_sensitive_textT)forcec32K|]}t|yw)N)_redact_cdp_output).0items I/root/.hermes/venv/lib/python3.12/site-packages/tools/browser_cdp_tool.py z%_redact_cdp_output..6s@$'-@s) agent.redactr isinstancestrlistrtupledictitems)valuerrkeys rrr-s2%$U$77%5:;T"4(;;%@%@@@%?D{{}M)#t'--MM L <Ns B+B0)WebSocketExceptionTFch tj}|rj|jrZddl}|j j d5}|jtj|}|jcdddStj|S#t$rd}YwxYw#1swY/xYw)zJRun an async coroutine from a sync handler, safe inside or outside a loop.Nr) max_workers) asyncioget_running_loop RuntimeError is_runningconcurrent.futuresfuturesThreadPoolExecutorsubmitrunresult)coroloop concurrentpoolfutures r _run_asyncr5Ns'') !!    2 2q 2 A #T[[d3F==? # # ;;t    # #sB0B( B%$B%(B1c ddlm}|xsdjS#t$r }tj d|Yd}~yd}~wwxYw)aRReturn the normalized CDP WebSocket URL, or empty string if unavailable. Delegates to ``tools.browser_tool._get_cdp_override`` so precedence stays consistent with the rest of the browser tool surface: 1. ``BROWSER_CDP_URL`` env var (live override from ``/browser connect``) 2. ``browser.cdp_url`` in ``config.yaml`` r)_get_cdp_overridez/browser_cdp: failed to resolve CDP endpoint: %sN)tools.browser_toolr7strip Exceptionloggerdebug)r7excs r_resolve_cdp_endpointr?csC8!#)r0022  FLs! A AA methodc4td|d|d|tS)Nz9Blocked: page URL targets a private or internal address (z). Raw CDP method z, could expose private page content or state.r@cdp_docs)r CDP_DOCS_URL) blocked_urlr@s r_private_page_guard_errorrFus2  =*6*5! !  Dict[str, Any]cZ ddlm}|j|sy|dk(rjt|xsij dxsdj }|r8|j |s|j|std|d|t S|d k(rKt|xsij d xsd}|j|}|rtd |d|t S|tvr|j|}|r t||Sy#t$r }tj!d |Yd}~yd}~wwxYw)aApply the browser SSRF/private-page guard to raw CDP calls. ``browser_cdp`` is intentionally an escape hatch, but it still shares the same cloud/private-network boundary as ``browser_snapshot``, ``browser_console`` and ``browser_eval``. If a cloud browser has landed on a private/internal URL (for example via a prior eval navigation), raw CDP calls like ``Runtime.evaluate`` or ``DOM.getDocument`` must not become the sibling bypass for the guarded browser tools. r) browser_toolNrurlr8zDBlocked: CDP Page.navigate target is a private or internal address (z).rBzRuntime.evaluate expressionzPBlocked: CDP Runtime.evaluate expression targets a private or internal address (z0browser_cdp: private-page guard probe failed: %s)toolsrJ_eval_ssrf_guard_activergetr:_is_always_blocked_url _is_safe_urlrrD_expression_targets_private_url!_CDP_PRIVATE_PAGE_ALLOWED_METHODS_current_page_private_urlrFr;r<r=) task_idr@paramsbt target_urlrLblocked_literalrEr>s r_browser_cdp_private_guardrZsI%N,))'2 _ $fl//6<"=CCEJ))*5z2!))3 B8!)  ' 'fl// =CDJ @@LO!44C3DBH!)  : :66w?K0fEE  N  GMM  Ns*DA.D AD&D D* D%%D*c ~KtJtj|d|dd4d{}d}d}|r3|}|dz }|jtj|d|dddd{t j j|z} | t j jz } | d krtd |t j|j| d{} tj| } | jd |k(rDd | vrtd| d | jdijd}|s tdn|} |dz }| ||xsid}|r||d<|jtj|d{t j j|z} | t j jz } | d krtd|t j|j| d{} tj| } | jd | k(r8d | vrtd| d | jdicdddd{S7p72777q7#1d{7swYyxYww)uMake a single CDP call, optionally attaching to a target first. When ``target_id`` is provided, we call ``Target.attachToTarget`` with ``flatten=True`` to multiplex a page-level session over the same browser-level WebSocket, then send ``method`` with that ``sessionId``. When ``target_id`` is None, ``method`` is sent at browser level — which works for ``Target.*``, ``Browser.*``, ``Storage.*`` and a few other globally-scoped domains. N)max_size open_timeout close_timeout ping_intervalr$rT)targetIdflatten)idr@rVrzTimed out attaching to target timeoutrcerrorzTarget.attachToTarget failed: r/ sessionIdz0Target.attachToTarget did not return a sessionIdz"Timed out waiting for response to z CDP error: ) websocketsconnectsendjsondumpsr&r'time TimeoutErrorwait_forrecvloadsrOr()ws_urlr@rV target_idrewsnext_id session_id attach_iddeadline remainingrawmsgcall_idreqs r _cdp_callr~s  !! !!! E-E- $(  I qLG'' '"9/8T"J  //16687BH$w'?'?'A'F'F'HH >&8 D$,,RWWY JJjjo774=I-#~* 7#;#;#=#B#B#DDIA~"8A ((IFFC**S/Cwwt}'c>&S\N'CDDwwx,KE-E-E-tuE-  K2 'GAE-E-E-E-s'J=JJ==J(*J+B J(5J6B1J('J"(B J(2J$3AJ( J=J&J=J(J=J(J("J($J(&J=(J:.J1 /J:6J=cr ddlm}|j |td|dSj }|j j d}d} |r|j d |k(r|} n=|j j d gxsgD]} | j d |k(s| } n| Bj5jj |} ddd | j} | td |d S| j d std |dSj} | | js tdSfd} ddl m }|| | }|tdtS|jdz}d||j did}t%j&|dS#t$r}td|dcYd}~Sd}~wwxYw#1swYxYw#t$r4}tdt!|j"d|tcYd}~Sd}~wwxYw)a\Route a CDP call through the live supervisor session for an OOPIF frame. Looks up the frame in the supervisor's snapshot, extracts its child ``cdp_session_id``, and dispatches ``method`` with that sessionId via the supervisor's already-connected WebSocket (using ``asyncio.run_coroutine_threadsafe`` onto the supervisor loop). r)SUPERVISOR_REGISTRYz!CDP supervisor is not available: zp. frame_id routing requires a running supervisor attached via /browser connect or an active Browserbase session.Nz'No CDP supervisor is attached for task=z. Call browser_navigate or /browser connect first so the supervisor can attach. Once attached, browser_snapshot will populate frame_tree with frame_ids you can pass here.topframe_idchildrenz frame_id zP not found in supervisor state. Call browser_snapshot to see current frame_tree.rvz is not an out-of-process iframe (no dedicated CDP session). For same-origin iframes, use `browser_cdp(method='Runtime.evaluate', params={'expression': "document.querySelector('iframe').contentDocument.title"})` at the top-level page instead.zKCDP supervisor loop is not running. Try reconnecting with /browser connect.cRKjxsid{S7w)N)rvre)_cdp) child_sidr@rV supervisorresr_do_cdpz,_browser_cdp_via_supervisor.._do_cdpis7__  Lb  %    s '%')safe_schedule_threadsafez0CDP call via supervisor failed: loop unavailablerCrdz CDP call via supervisor failed: : Tr/)successr@rrvr/F ensure_ascii)tools.browser_supervisorrr;rrOsnapshot frame_tree _state_lock_framesto_dict_loopr)agent.async_utilsrrDr/type__name__rkrl)rUrr@rVrerr>snapr frame_infochildrzr1rrfut result_msgpayloadrrs ``` @@r_browser_cdp_via_supervisorrs @%((1J5g[A; <      D //  e $C+/J swwz"h. __((R8>B Eyy$0"    # # 3$$((2C 3 ?J|$? @  |,I |$- .     D |4??,       >&wy$7 ;B% ZZ! Z4 ..2. G ::gE 22w  /u5# $   : 3 3b  .tCy/A/A.B"SE J!   sMGG,&G9G9 G)G$G)$G),G69 H6)H1+H61H6c |xsd}|r&t|||xsi}|r|St|||||S|rt|tst dt St s t dSt}|st dt S|jdst d |d S|xsi} t| ts!t d t| jSt||| }|r|S |r t|nd } td t!| d} t#t%||| || } d|t5| d} |r|| d<t7j8| dS#ttf$rd } YowxYw#t&j($r} t d| d| |cYd} ~ Sd} ~ wt($r } t t| |cYd} ~ Sd} ~ wt*$r } t t| |cYd} ~ Sd} ~ wt,$r} t d|d| d|cYd} ~ Sd} ~ wt.$rE} t0j3dt dt| jd| |cYd} ~ Sd} ~ wwxYw)unSend a raw CDP command. See ``CDP_DOCS_URL`` for method documentation. Args: method: CDP method name, e.g. ``"Target.getTargets"``. params: Method-specific parameters; defaults to ``{}``. target_id: Optional target/tab ID for page-level methods. When set, we first attach to the target (``flatten=True``) and send ``method`` with the resulting ``sessionId``. Uses a fresh stateless CDP connection. frame_id: Optional cross-origin (OOPIF) iframe ``frame_id`` from ``browser_snapshot.frame_tree.children[]``. When set (and the frame is an OOPIF with a live session tracked by the CDP supervisor), routes the call through the supervisor's existing WebSocket — which is how you Runtime.evaluate *inside* an iframe on backends where per-call fresh CDP connections would hit signed-URL expiry (Browserbase) or expensive reattach. timeout: Seconds to wait for the call to complete. task_id: Task identifier for supervisor lookup. When ``frame_id`` is set, this identifies which task's supervisor to use; the handler will default to ``"default"`` otherwise. Returns: JSON string ``{"success": True, "method": ..., "result": {...}}`` on success, or ``{"error": "..."}`` on failure. default)rUr@rV)rUrr@rVrez/'method' is required (e.g. 'Target.getTargets')rzfThe 'websockets' Python package is required but not installed. Install it with: pip install websocketszNo CDP endpoint is available. Run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or set 'browser.cdp_url' in config.yaml. The Camofox backend is REST-only and does not expose CDP.)zws://zwss://z%CDP endpoint is not a WebSocket URL: u. Expected ws://... or wss://... — the /browser connect resolver should have rewritten this. Check that a Chromium-family browser is actually listening on the debug port.z%'params' must be an object/dict, got >@g?gr@zCDP call timed out after zs: )r@Nz"WebSocket error talking to CDP at ruE. The browser may have disconnected — try '/browser connect' again.zbrowser_cdp unexpected errorzUnexpected error: T)rr@r/rsFr)rZrrrrrD _WS_AVAILABLEr? startswithrrrfloat TypeError ValueErrormaxminr5r~r&rnr(r"r;r< exceptionrrkrl)r@rVrsrrerUeffective_task_idblockedendpoint call_params safe_timeoutr/r>rs r browser_cdprsB ,9-%   3#c(622 3#c(622  0 "SEBN N   78 c!3!3 4Bse <   sx*EE,E)(E),I?FI I#F>8I> I G%I% I1H I I:IIIruSend a raw Chrome DevTools Protocol (CDP) command. Escape hatch for browser operations not covered by browser_navigate, browser_click, browser_console, etc. **Requires a reachable CDP endpoint.** Available when the user has run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or when 'browser.cdp_url' is set in config.yaml. Not currently wired up for cloud backends (Browserbase, Browser Use, Firecrawl) — those expose CDP per session but live-session routing is a follow-up. Camofox is REST-only and will never support CDP. If the tool is in your toolset at all, a CDP endpoint is already reachable. **CDP method reference:** u — use web_extract on a method's URL (e.g. '/tot/Page/#method-handleJavaScriptDialog') to look up parameters and return shape. **Common patterns:** - List tabs: method='Target.getTargets', params={} - Handle a native JS dialog: method='Page.handleJavaScriptDialog', params={'accept': true, 'promptText': ''}, target_id= - Get all cookies: method='Network.getAllCookies', params={} - Eval in a specific tab: method='Runtime.evaluate', params={'expression': '...', 'returnByValue': true}, target_id= - Set viewport for a tab: method='Emulation.setDeviceMetricsOverride', params={'width': 1280, 'height': 720, 'deviceScaleFactor': 1, 'mobile': false}, target_id= **Usage rules:** - Browser-level methods (Target.*, Browser.*, Storage.*): omit target_id and frame_id. - Page-level methods (Page.*, Runtime.*, DOM.*, Emulation.*, Network.* scoped to a tab): pass target_id from Target.getTargets. - **Cross-origin iframe scope** (Runtime.evaluate inside an OOPIF, Page.* targeting a frame target, etc.): pass frame_id from the browser_snapshot frame_tree output. This routes through the CDP supervisor's live connection — the only reliable way on Browserbase where stateless CDP calls hit signed-URL expiry. - Each stateless call (without frame_id) is independent — sessions and event subscriptions do not persist between calls. For stateful workflows, prefer the dedicated browser tools or use frame_id routing.objectstringz]CDP method name, e.g. 'Target.getTargets', 'Runtime.evaluate', 'Page.handleJavaScriptDialog'.)r descriptionzaMethod-specific parameters as a JSON object. Omit or pass {} for methods that take no parameters.)rr propertiesadditionalPropertieszOptional. Target/tab ID from Target.getTargets result (each entry's 'targetId'). Use for page-level methods at the top-level tab scope. Mutually exclusive with frame_id.aOptional. Out-of-process iframe (OOPIF) frame_id from browser_snapshot.frame_tree.children[] where is_oopif=true. When set, routes the call through the CDP supervisor's live session for that iframe. Essential for Runtime.evaluate inside cross-origin iframes, especially on Browserbase where fresh per-call CDP connections can't keep up with signed URL rotation. For same-origin iframes, use parent contentWindow/contentDocument from Runtime.evaluate at the top-level page instead.numberz)Timeout in seconds (default 30, max 300).)rrr)r@rVrsrre)rrrequired)namer parametersBROWSER_CDP_SCHEMAc ddlm}m}|syt |S#t$r }tj d|Yd}~yd}~wwxYw)u*Availability check for browser_cdp. The tool is only offered when the Python side can actually reach a CDP endpoint right now — meaning a static URL is set via ``/browser connect`` (``BROWSER_CDP_URL``) or ``browser.cdp_url`` in ``config.yaml``. Backends that do *not* currently expose CDP to us — Camofox (REST-only), the default local agent-browser mode (Playwright hides its internal CDP port), and cloud providers whose per-session ``cdp_url`` is not yet surfaced — are gated out so the model doesn't see a tool that would reliably fail. Cloud-provider CDP routing is a follow-up. Kept in a thin wrapper so the registration statement stays at module top level (the tool-discovery AST scan only picks up top-level ``registry.register(...)`` calls). r)r7check_browser_requirementsz1browser_cdp check: browser_tool import failed: %sNF)r9r7r ImportErrorr<r=bool)r7rr>s r_browser_cdp_checkr}sJ"  & ' !# $$  H#Ns" A AA z browser-cdpc t|jdd|jd|jd|jd|jdd|jd S) Nr@r8rVrsrrerrU)r@rVrsrrerU)rrO)argskws rrsW{xx"%xx!((;'*%D)y!  rGu🧪)rtoolsetschemahandlercheck_fnemoji)r rreturnr)rr)rErr@rrr)rUrr@rrVrHr Optional[str]) rrrr@rrVrHrsrrerrrH) rUrrrr@rrVOptional[Dict[str, Any]]rerrr)NNNrN)r@rrVrrsrrrrerrUrrr)rr)$__doc__ __future__rr&rkloggingtypingrrrtools.registryrr getLoggerrr<rDrSrrhwebsockets.exceptionsr"rrr;r5r?rFrZr~rrr__annotations__rregisterrGrrsh # &&/   8 $D  %! "8M *$5 5 5  5  5zW- W- W- W- W-  W-  W-@k3 k3k3 k3 % k3  k3  k3`(,#"! I3 I3 $I3I3 I3  I3  I3 I3d  %&2N3% P!I!C!(,! ! 5 !? S0 bJg4U_&N_D%<     qJ"Ms C)) C76C7