Jjji UdZddlmZddlZddlZddlZddlmZmZm Z ddl m Z m Z ej eZdZhdZd=d Z ddlZdd lmZd Zn#e$r dZeZdZYnwxYwdZd>dZd?dZd@dZdAdZdBd!Z dCdDd#Zd$d%ed&d'd(d)d*d'd+id d,d(d-d*d(d.d*d/d0d1d2d3dgd4d5Z de!d6<dEd8Z"e j#d$d9e d:e"d;<dS)Fu Raw Chrome DevTools Protocol (CDP) passthrough tool. Exposes a single tool, ``browser_cdp``, that sends arbitrary CDP commands to the browser's DevTools WebSocket endpoint. Works when a CDP URL is configured — either via ``/browser connect`` (sets ``BROWSER_CDP_URL``) or ``browser.cdp_url`` in ``config.yaml`` — or when a CDP-backed cloud provider session is active. This is the escape hatch for browser operations not covered by the main browser tool surface (``browser_navigate``, ``browser_click``, ``browser_console``, etc.) — handling native dialogs, iframe-scoped evaluation, cookie/network control, low-level tab management, etc. Method reference: https://chromedevtools.github.io/devtools-protocol/ ) annotationsN)AnyDictOptional)registry tool_errorz3https://chromedevtools.github.io/devtools-protocol/> Page.reloadPage.stopLoadingTarget.getTargetsBrowser.getVersionTarget.detachFromTarget Page.navigateTarget.attachToTargetvaluerreturncZddlm}t|tr ||dSt|tr d|DSt|t rt d|DSt|t rd|DS|S)z>Redact browser-originated CDP result data before returning it.r)redact_sensitive_textT)forcec,g|]}t|S_redact_cdp_output.0items z&_redact_cdp_output..4s!;;;T"4((;;;c34K|]}t|VdS)Nrrs r z%_redact_cdp_output..6s+@@$'--@@@@@@rc4i|]\}}|t|Srr)rkeyrs r z&_redact_cdp_output..8s'MMM)#t'--MMMr) agent.redactr isinstancestrlisttupledictitems)rrs rrr-s222222%8$$U$7777%<;;U;;;;%A@@%@@@@@@%NMMu{{}}MMMM Lr)WebSocketExceptionTFcz tj}n#t$rd}YnwxYw|r|rkddl}|jd5}|tj|}| cdddS#1swxYwYtj|S)zJRun an async coroutine from a sync handler, safe inside or outside a loop.Nr) max_workers) asyncioget_running_loop RuntimeError is_runningconcurrent.futuresfuturesThreadPoolExecutorsubmitrunresult)coroloop concurrentpoolfutures r _run_asyncr>Ns'))  #!!#!!!!   2 2q 2 A A #T[[d33F==?? # # # # # # # # # # # # # # # # ;t  s %%4BB"%B"r&c ddlm}|pdS#t$r&}td|Yd}~dSd}~wwxYw)aRReturn the normalized CDP WebSocket URL, or empty string if unavailable. Delegates to ``tools.browser_tool._get_cdp_override`` so precedence stays consistent with the rest of the browser tool surface: 1. ``BROWSER_CDP_URL`` env var (live override from ``/browser connect``) 2. ``browser.cdp_url`` in ``config.yaml`` r)_get_cdp_overridez/browser_cdp: failed to resolve CDP endpoint: %sN)tools.browser_toolr@strip Exceptionloggerdebug)r@excs r_resolve_cdp_endpointrHcsz888888!!##)r00222  FLLLrrrrrs#& AAA blocked_urlmethodc>td|d|d|tS)Nz9Blocked: page URL targets a private or internal address (z). Raw CDP method z, could expose private page content or state.rJcdp_docs)r CDP_DOCS_URL)rIrJs r_private_page_guard_errorrOusE  !  ! !+1 ! ! !    rtask_idparamsDict[str, Any] Optional[str]c ddlm}||sdS|dkrt|pidpd}|rE||s||std|d|t S|d krXt|pid pd}| |}|rtd |d|t S|tvr'| |}|rt||Sn2#t$r%}td |Yd}~nd}~wwxYwdS)aApply the browser SSRF/private-page guard to raw CDP calls. ``browser_cdp`` is intentionally an escape hatch, but it still shares the same cloud/private-network boundary as ``browser_snapshot``, ``browser_console`` and ``browser_eval``. If a cloud browser has landed on a private/internal URL (for example via a prior eval navigation), raw CDP calls like ``Runtime.evaluate`` or ``DOM.getDocument`` must not become the sibling bypass for the guarded browser tools. r) browser_toolNrurlrAzDBlocked: CDP Page.navigate target is a private or internal address (z).rLzRuntime.evaluate expressionzPBlocked: CDP Runtime.evaluate expression targets a private or internal address (z0browser_cdp: private-page guard probe failed: %s)toolsrU_eval_ssrf_guard_activer&getrC_is_always_blocked_url _is_safe_urlrrN_expression_targets_private_url!_CDP_PRIVATE_PAGE_ALLOWED_METHODS_current_page_private_urlrOrDrErF) rPrJrQbt target_urlrWblocked_literalrIrGs r_browser_cdp_private_guardrcs%N,,,,,,))'22 4 _ $ $fl//66<"==CCEEJ ))*55 z22 "8)3888!)  ' ' 'fl// ==CDDJ @@LLO !H4CHHH!)  : : :66w??K F0fEEE NNN  GMMMMMMMMN 4s*D3BD3$AD3/D33 E"=EE"ws_url target_idtimeoutfloatc KtJtj|d|dd4d{V }d}d}|rW|}|dz }|tj|d|dddd{Vt j|z} | t jz } | d krtd |t j | | d{V} tj | } | d |krWd | vrtd| d | di d}|stdn|} |dz }| ||pid}|r||d<|tj|d{Vt j|z} | t jz } | d krtd|t j | | d{V} tj | } | d | krDd | vrtd| d | dicdddd{VS#1d{VswxYwYdS)uMake a single CDP call, optionally attaching to a target first. When ``target_id`` is provided, we call ``Target.attachToTarget`` with ``flatten=True`` to multiplex a page-level session over the same browser-level WebSocket, then send ``method`` with that ``sessionId``. When ``target_id`` is None, ``method`` is sent at browser level — which works for ``Target.*``, ``Browser.*``, ``Storage.*`` and a few other globally-scoped domains. N)max_size open_timeout close_timeout ping_intervalr-rT)targetIdflatten)idrJrQrzTimed out attaching to target rfrperrorzTarget.attachToTarget failed: r8 sessionIdz0Target.attachToTarget did not return a sessionIdz"Timed out waiting for response to z CDP error: ) websocketsconnectsendjsondumpsr/r0time TimeoutErrorwait_forrecvloadsrZr1)rdrJrQrerfwsnext_id session_id attach_iddeadline remainingrawmsgcall_idreqs r _cdp_callrs8  ! ! !! E-E-E-E-E-E-E-E- $(   I qLG'' '"9/8T"J"J       /1166887BH $w'?'A'A'F'F'H'HH >>&DDD$,RWWYY JJJJJJJJJjoo774==I--#~~*KS\KK"%2!6!6!:!:;!G!GJ%*N% ,1 l    *)C ggdjoo&&&&&&&&&+--2244w> - 7#;#=#=#B#B#D#DDIA~~"AAA (IFFFFFFFFFC*S//Cwwt}}''c>>&'CS\'C'CDDDwwx,,KE-E-E-E-E-E-E-E-E-E-E-E-E-E-t -uE-E-E-E-E-E-E-E-E-E-E-E-E-E-E-E-sJKK K!$K!frame_idOptional[Dict[str, Any]]c ddlm}n*#t$r}td|dcYd}~Sd}~wwxYw||td|dS}|jd}d} |r|d |kr|} n=|jd gpgD]} | d |kr| } n | Oj5j|} dddn #1swxYwY| | } | td |d S| d std |dSj } | | stdSfd} ddl m }|| | }|tdtS|dz}nE#t$r8}tdt!|jd|tcYd}~Sd}~wwxYwd||did}t%j|dS)a\Route a CDP call through the live supervisor session for an OOPIF frame. Looks up the frame in the supervisor's snapshot, extracts its child ``cdp_session_id``, and dispatches ``method`` with that sessionId via the supervisor's already-connected WebSocket (using ``asyncio.run_coroutine_threadsafe`` onto the supervisor loop). r)SUPERVISOR_REGISTRYz!CDP supervisor is not available: zp. frame_id routing requires a running supervisor attached via /browser connect or an active Browserbase session.Nz'No CDP supervisor is attached for task=z. Call browser_navigate or /browser connect first so the supervisor can attach. Once attached, browser_snapshot will populate frame_tree with frame_ids you can pass here.toprchildrenz frame_id zP not found in supervisor state. Call browser_snapshot to see current frame_tree.rz is not an out-of-process iframe (no dedicated CDP session). For same-origin iframes, use `browser_cdp(method='Runtime.evaluate', params={'expression': "document.querySelector('iframe').contentDocument.title"})` at the top-level page instead.zKCDP supervisor loop is not running. Try reconnecting with /browser connect.cJKpid{VS)N)rrf)_cdp) child_sidrJrQ supervisorrfsr_do_cdpz,_browser_cdp_via_supervisor.._do_cdpisP__  Lb  %         r)safe_schedule_threadsafez0CDP call via supervisor failed: loop unavailablerMrqz CDP call via supervisor failed: : Tr8)successrJrrr8F ensure_ascii)tools.browser_supervisorrrDrrZsnapshot frame_tree _state_lock_framesto_dict_loopr2agent.async_utilsrrNr8type__name__rwrx)rPrrJrQrfrrGsnapr frame_infochildrr:rrfut result_msgpayloadrrs ``` @@r_browser_cdp_via_supervisorrs @@@@@@@     $ $ $ $         %((11J B  Eyy$$00" 1  # 3 3$((22C 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 ?J @ @ @ @   |,,I    . . . .     D |4??,,|               >>>>>>&&wwyy$77 ;B% ZZ! Z44     JtCyy/A J JS J J!          ..2.. G :gE 2 2 22sJ 50556DD!$D!31G?%G?? I -H<6I<I>@c |pd}|r,t|||pi}|r|St|||||S|rt|tst dt St st dSt}|st dt S|dst d |d S|pi} t| ts$t d t| j St||| }|r|S |rt|nd } n#ttf$rd } YnwxYwtd t!| d} t#t%||| || } n#t&j$r!} t d| d| |cYd} ~ Sd} ~ wt($r(} t t| |cYd} ~ Sd} ~ wt*$r(} t t| |cYd} ~ Sd} ~ wt,$r"} t d|d| d|cYd} ~ Sd} ~ wt.$rM} t0dt dt| j d| |cYd} ~ Sd} ~ wwxYwd|t5| d} |r|| d<t7j| dS)unSend a raw CDP command. See ``CDP_DOCS_URL`` for method documentation. Args: method: CDP method name, e.g. ``"Target.getTargets"``. params: Method-specific parameters; defaults to ``{}``. target_id: Optional target/tab ID for page-level methods. When set, we first attach to the target (``flatten=True``) and send ``method`` with the resulting ``sessionId``. Uses a fresh stateless CDP connection. frame_id: Optional cross-origin (OOPIF) iframe ``frame_id`` from ``browser_snapshot.frame_tree.children[]``. When set (and the frame is an OOPIF with a live session tracked by the CDP supervisor), routes the call through the supervisor's existing WebSocket — which is how you Runtime.evaluate *inside* an iframe on backends where per-call fresh CDP connections would hit signed-URL expiry (Browserbase) or expensive reattach. timeout: Seconds to wait for the call to complete. task_id: Task identifier for supervisor lookup. When ``frame_id`` is set, this identifies which task's supervisor to use; the handler will default to ``"default"`` otherwise. Returns: JSON string ``{"success": True, "method": ..., "result": {...}}`` on success, or ``{"error": "..."}`` on failure. default)rPrJrQ)rPrrJrQrfz/'method' is required (e.g. 'Target.getTargets')rzfThe 'websockets' Python package is required but not installed. Install it with: pip install websocketszNo CDP endpoint is available. Run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or set 'browser.cdp_url' in config.yaml. The Camofox backend is REST-only and does not expose CDP.)zws://zwss://z%CDP endpoint is not a WebSocket URL: u. Expected ws://... or wss://... — the /browser connect resolver should have rewritten this. Check that a Chromium-family browser is actually listening on the debug port.z%'params' must be an object/dict, got rg?gr@zCDP call timed out after zs: )rJNz"WebSocket error talking to CDP at ruE. The browser may have disconnected — try '/browser connect' again.zbrowser_cdp unexpected errorzUnexpected error: T)rrJr8reFr)rcrr%r&rrN _WS_AVAILABLErH startswithr)rrrg TypeError ValueErrormaxminr>rr/rzr1r+rDrE exceptionrrwrx)rJrQrerrfrPeffective_task_idblockedendpoint call_params safe_timeoutr8rGrs r browser_cdprsXB ,9 -% > > > >          333#c((6222222222 333#c((6222222222     N N NS N N N            7888 <c!3 < G!J! J.H J JH;5J; JAJ JJruSend a raw Chrome DevTools Protocol (CDP) command. Escape hatch for browser operations not covered by browser_navigate, browser_click, browser_console, etc. **Requires a reachable CDP endpoint.** Available when the user has run '/browser connect' to attach to a running Chrome, Brave, Chromium, or Edge browser, or when 'browser.cdp_url' is set in config.yaml. Not currently wired up for cloud backends (Browserbase, Browser Use, Firecrawl) — those expose CDP per session but live-session routing is a follow-up. Camofox is REST-only and will never support CDP. If the tool is in your toolset at all, a CDP endpoint is already reachable. **CDP method reference:** u — use web_extract on a method's URL (e.g. '/tot/Page/#method-handleJavaScriptDialog') to look up parameters and return shape. **Common patterns:** - List tabs: method='Target.getTargets', params={} - Handle a native JS dialog: method='Page.handleJavaScriptDialog', params={'accept': true, 'promptText': ''}, target_id= - Get all cookies: method='Network.getAllCookies', params={} - Eval in a specific tab: method='Runtime.evaluate', params={'expression': '...', 'returnByValue': true}, target_id= - Set viewport for a tab: method='Emulation.setDeviceMetricsOverride', params={'width': 1280, 'height': 720, 'deviceScaleFactor': 1, 'mobile': false}, target_id= **Usage rules:** - Browser-level methods (Target.*, Browser.*, Storage.*): omit target_id and frame_id. - Page-level methods (Page.*, Runtime.*, DOM.*, Emulation.*, Network.* scoped to a tab): pass target_id from Target.getTargets. - **Cross-origin iframe scope** (Runtime.evaluate inside an OOPIF, Page.* targeting a frame target, etc.): pass frame_id from the browser_snapshot frame_tree output. This routes through the CDP supervisor's live connection — the only reliable way on Browserbase where stateless CDP calls hit signed-URL expiry. - Each stateless call (without frame_id) is independent — sessions and event subscriptions do not persist between calls. For stateful workflows, prefer the dedicated browser tools or use frame_id routing.objectstringz]CDP method name, e.g. 'Target.getTargets', 'Runtime.evaluate', 'Page.handleJavaScriptDialog'.)r descriptionzaMethod-specific parameters as a JSON object. Omit or pass {} for methods that take no parameters.)rr propertiesadditionalPropertieszOptional. Target/tab ID from Target.getTargets result (each entry's 'targetId'). Use for page-level methods at the top-level tab scope. Mutually exclusive with frame_id.aOptional. Out-of-process iframe (OOPIF) frame_id from browser_snapshot.frame_tree.children[] where is_oopif=true. When set, routes the call through the CDP supervisor's live session for that iframe. Essential for Runtime.evaluate inside cross-origin iframes, especially on Browserbase where fresh per-call CDP connections can't keep up with signed URL rotation. For same-origin iframes, use parent contentWindow/contentDocument from Runtime.evaluate at the top-level page instead.numberz)Timeout in seconds (default 30, max 300).)rrr)rJrQrerrf)rrrequired)namer parametersBROWSER_CDP_SCHEMAboolc ddlm}m}n3#t$r&}td|Yd}~dSd}~wwxYw|sdSt |S)u*Availability check for browser_cdp. The tool is only offered when the Python side can actually reach a CDP endpoint right now — meaning a static URL is set via ``/browser connect`` (``BROWSER_CDP_URL``) or ``browser.cdp_url`` in ``config.yaml``. Backends that do *not* currently expose CDP to us — Camofox (REST-only), the default local agent-browser mode (Playwright hides its internal CDP port), and cloud providers whose per-session ``cdp_url`` is not yet surfaced — are gated out so the model doesn't see a tool that would reliably fail. Cloud-provider CDP routing is a follow-up. Kept in a thin wrapper so the registration statement stays at module top level (the tool-discovery AST scan only picks up top-level ``registry.register(...)`` calls). r)r@check_browser_requirementsz1browser_cdp check: browser_tool import failed: %sNF)rBr@r ImportErrorrErFr)r@rrGs r_browser_cdp_checkr}s"           H#NNNuuuuu & % ' 'u !!## $ $$s ;6;z browser-cdpc t|dd|d|d|d|dd|d S) NrJrArQrerrfrrP)rJrQrerrfrP)rrZ)argskws rrss{xx"%%xx!!((;''*%%D))y!!    ru🧪)rtoolsetschemahandlercheck_fnemoji)rrrr)rr&)rIr&rJr&rr&)rPr&rJr&rQrRrrS) rdr&rJr&rQrRrerSrfrgrrR) rPr&rr&rJr&rQrrfrgrr&)NNNrN)rJr&rQrrerSrrSrfrgrPrSrr&)rr)$__doc__ __future__rr/rwloggingtypingrrrtools.registryrr getLoggerrrErNr^rrtwebsockets.exceptionsr+rrrDr>rHrOrcrrrr__annotations__rregisterrrrrs #""""" &&&&&&&&&&////////  8 $ $D  % % %!    "888888MMJ"MMM   *$5555zW-W-W-W-@k3k3k3k3`(,#"! I3I3I3I3I3d % &2% % % P!I!C!(,! ! 5 !? S0 0 bJg44U_&_&____D%%%%<      s A AA