jCdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl m Z ddlmZej eZGddZGdd ZGd d ZGd d ZGddZgdZy)aAdditional execution backends for Phase 7 Execution Layer. Provides browser automation, Git tooling, Docker/Podman container execution, MCP execution provider, and Open Interpreter bridge capabilities on top of the existing BubblewrapExecutionProvider sandbox. All backends integrate with the existing AuthorizedExecutionService security chain (identity -> scope -> policy -> approval -> audit). ) annotationsN)Path)AnycveZdZdZdddd d dZddZeddZd ddd  dd Zdd Z y)BrowserAutomationProvideraBrowser automation via headless Playwright/Chromium in sandbox. When Playwright is unavailable, reports capability_unavailable instead of faking browsing results - consistent with the security-first design where absence of evidence is not evidence of absence. NT)bubblewrap_providerheadlesstimeout_secondscX||_||_||_|j|_yN)r r r _check_playwright_playwright_available)selfr r r s U/home/oem/CyberBrain26-unified/src/cyberbrain26/execution_plane/execution_backends.py__init__z"BrowserAutomationProvider.__init__$s,$7   .%)%;%;%="cN tjdy#t$rYywxYw)N playwrightTF) importlib import_module ImportErrorrs rrz+BrowserAutomationProvider._check_playwright0s*   # #L 1  s  $$cy)Nbrowserrs r provider_namez'BrowserAutomationProvider.provider_name7sropen)actionselector input_textcDK|js|j|dddddS tjd}t |d}|4d{}|j j |j d{}|jd{} | j||jd z d{|| jd{d d } |dk(r| jd{| d<nv|dk(r5|r3| j||jd z d{d| d<|| d<n<|dk(r7|r5|r3| j|||jd z d{d| d<|| d<|jd{|jd| dcdddd{S7_74777777X787#1d{7swYyxYw#t $r:} t"j%d||j|dt'| dcYd} ~ Sd} ~ wwxYww)zNavigate to URL and optionally interact. Returns capability_unavailable if Playwright is not installed, rather than fabricating a browse result. capability_unavailablebrowsingz;Playwright not installed; browser automation not available.zplaywright missing)providerurlstatus capabilityreasonerrorzplaywright.async_apiasync_playwrightN)r itimeout completed)r&titler' screenshotclickrr typesuccessr%r'dataz Browser automation failed for %sfailed)r%r&r'r*)rrrrgetattrchromiumlaunchr new_pagegotor r/r0r1fillclose Exceptionlogger exceptionstr) rr&rr r!playwright_async_apir+prpage result_dataexcs rnavigatez"BrowserAutomationProvider.navigate;s))) ..2(W-  & #,#:#:;Q#R &';=OP ')  Q ! 1 14== 1 II$--//iiT-A-AD-HiIII#'::</)/ \)6:oo6G0GK -w&8**Xt7K7Kd7R*SSS,3K).6K +v%(z))Hj$BVBVY]B])^^^,2K).6K +mmo%% $ 2 2''-   I/I0 1HS_&+    6    ? E .."S   s H ,GF.G*G=F1>GF4'G=F7>GF9G6F;72G)F=*! > >  >  >#!% = = =  =  = =~rrceZdZdZdddd ddZeddZddZddd  dd Zdd Z ddd Z ddd Z dddZ y)GitToolingProviderzEGit operations wrapper: clone, pull, push, diff, commit, status, log.Ngit<r git_binaryr c.||_||_||_yr r[)rr r\r s rrzGitToolingProvider.__init__s$7 $.rcy)NrYrrs rrz GitToolingProvider.provider_namercDtj|jduSr )shutilwhichr\rs r_git_availablez!GitToolingProvider._git_availables||DOO,D88r) workspacecwdc@K|js |j|dd|jdddS|jg|}|r t|n|xst j } t j||t jjt jjdd{}t j|j|jd{\}}|j||jd k(rd nd |jd d |jd d |jdS77Y#t$r"|j|dd|jddcYSt $r$} |j|d t| dcYd} ~ Sd} ~ wwxYww)z-Run a git command and return captured output.r#rY not found on PATH.z git missing)r%commandr'r(r)r*)restdoutstderrNr,rr3r6utf-8replaceerrors)r%rhr'rirj return_coder-zGit command timed out after s)r%rhr'r*)rcrr\rAosgetcwdasynciocreate_subprocess_exec subprocessPIPEwait_for communicater returncodedecode TimeoutErrorr>) rrhrdrecmdworkdirresultrirjrFs rrunzGitToolingProvider.runs""$ .."2#!__--@A&  ))!#c( (@RYY[ "99))..)).. F $+#3#3""$d.B.B$NFF!.."'-'8'8A'=)8 -- -B -- -B%00     .."#78L8L7MQO     ..""S   shA%F(A E2E36E)E*AEFEE(F-F/F7FFFFFcFK|jd||gd{S7w)Ncloner)rrepo_url target_dirs rrzGitToolingProvider.clones"XXw*=>>>> !!cFK|jdg|d{S7w)Nr'rerrres rr'zGitToolingProvider.statuss!XXxjcX2222rcFK|jdg|d{S7w)Ndiffrrrs rrzGitToolingProvider.diffs!XXvhCX0000rcPK|jdd|dg|d{S7w)Nlogz --max-count=z--pretty=format:%H %srr)rre max_counts rrzGitToolingProvider.logs:XX l9+.0G Hc    s &$&)r rr\rAr rKrLrMrOrN)rhz list[str]rdrPrestr | Path | NonerLrQ)rrArrArLrQr )rerrLrQ)N )rerrrKrLrQ) rRrSrTrUrrVrrcrrr'rrrrrrXrXsO $(! /! / /  /  /9!%!% 44 4  4  4l?31 rrXcjeZdZdZddd d dZd dZeddZ ddd d  dd Zy)DockerPodmanProviderz>Container execution via Docker or Podman (rootless preferred).podmanx)runtimer cJ||_||_|j|_yr )rr _check_runtime_runtime_available)rrr s rrzDockerPodmanProvider.__init__s$  ."&"5"5"7rcDtj|jduSr )rarbrrs rrz#DockerPodmanProvider._check_runtimes||DLL)55rc |jdS)Nz -container)rrs rrz"DockerPodmanProvider.provider_names,,z**rNnone)rdnetworkc K|js-|j|dd|jd|jddS|jddd|g}|r|jd |d d d g|jd g|j ||r|j| t j |t jjt jjdd{}t j|j|jd{\}}|j|||jdk(rdnd|jdd|jdd|jdS77Z#t$r"|j|dd|jddcYSt$r$} |j|dt!| dcYd} ~ Sd} ~ wwxYww)z1Run a container with the given image and command.r# containerrgz missing)r%imager'r(r)r*rz--rmz --networkz-vz :/workspacez-wz /workspacez --memory=512m)rirjNr,rr3r6rkrlrm)r%rrhr'rirjror-z$Container execution timed out after rp)r%rr'r*)rrrextendappendrsrtrurvrwrxr ryrzr{r>rA) rrrhrdrr|r~rirjrFs r run_containerz"DockerPodmanProvider.run_containers&& ..2)!\\N*=> LL>2  ||UFKA  JJ ;7|L M O$% 5  JJw  "99))..))..F $+#3#3""$d.B.B$NFF!.."'-'8'8A'=)8 -- -B -- -B%00    ..#?@T@T?UUVW     .."S   shBGA E;'E7(6E;E9AE;6G7E;9E;;(G#G%G-G GG GG)rrAr rKrLrMrNrOr ) rrArhzlist[str] | NonerdrPrrArLrQ) rRrSrTrUrrrVrrrrrrrsH  " 88 8  86++ %): !% ::":  :  : :rrcbeZdZdZdd d dZed dZ d dZd dZddZ dd Z y)MCPExecutionProviderzMCP (Model Context Protocol) execution provider. Exposes execution capabilities as MCP tools via stdio transport, enabling MCP-compatible clients to invoke sandboxed code execution through the standard MCP protocol surface. Nauthorized_servicec||_yr rrrs rrzMCPExecutionProvider.__init__2s #5rcy)Nmcprrs rrz"MCPExecutionProvider.provider_name9r_rcK|dk(r|j|d{S|dk(r|j|d{S|dk(r|jSddd|d|jd d S7R76w) z&Handle an MCP tool invocation request. execute_codeN run_shelllist_capabilities2.0izMethod not found: codemessage request_idjsonrpcr*id) _execute_code _run_shell_list_capabilitiesget)rmethodparamss rhandle_mcp_requestz'MCPExecutionProvider.handle_mcp_request=s ^ #++F33 3 [ 00 0 ( (**, ,$3EfX1NO**\*  40sA3A/A3A15A31A3c ^dddddddiddiddid d d gd d dddddiddiddgd d giddS)Nr capabilitiesrz Execute code in isolated sandboxobjectr2stringinteger)rlanguager rr)r2 propertiesrequired)name description inputSchemarz%Run shell command in isolated sandbox)rhr rhzmcp-capabilitiesrr~rrrs rrz'MCPExecutionProvider._list_capabilitiesOs .'I$,)/(:-3X,>4:I3F+ *0(<( !,'N$,,2H+=4:I3F+*3 ( !:%?  rc K|jdd}|jdd}|jdd}|jsddd d |jd d S |jj|jd |||jdd|d{}d||jd dS7#t$r+}ddt |d |jd d cYd}~Sd}~wwxYww)Nrrpythonr rriz*No authorized execution service configuredrrridentitytask_idzmcp-taskrrrrr r)rrexecuter>rA)rrrrr-r~rFs rrz"MCPExecutionProvider._execute_coders zz&"%::j(3**.3&& "Kjj.   22::J/! 9j9 ' ;F! jj.   ""3xjj.   sIAC3AB< B:!B<9C3:B<< C0 C+%C0&C3+C00C3cLK|ji|ddid{S7w)Nrshell)r)rrs rrzMCPExecutionProvider._run_shells:'') ) )     s $"$rrrLrMrO)rrArrQrLrQ)rLrQ)rrQrLrQ) rRrSrTrUrrVrrrrrrrrrr*sk#'5 5  5      $! F$L rrc^eZdZdZdd d dZd dZed dZdd d dZdd Z y)OpenInterpreterBridgezOpen Interpreter bridge for natural-language-to-command execution. Bridges Open Interpreter's agent loop with CyberBrain26's security-gated execution providers, translating natural language requests into sandboxed code execution. Nrc<||_|j|_yr )r_check_open_interpreter _oi_availablers rrzOpenInterpreterBridge.__init__s #5!99;rc, ddl}y#t$rYywxYw)NrTF) interpreterr)rrs rrz-OpenInterpreterBridge._check_open_interpreters    s  cy)Nopen-interpreterrrs rrz#OpenInterpreterBridge.provider_names!r)rcdK|js|jdddddS|j|}||jdddddS |jj ||d d d d{}|jd |dS7#t $r#}|jdt |dcYd}~Sd}~wwxYww)z:Translate natural language to code and execute in sandbox.r#rzOpen Interpreter not installed.zopen-interpreter missing)r%r'r(r)r*Nz4Open Interpreter LLM not configured for translation.ztranslation unavailablerzoi-bridge-taskrrr3r4r6)r%r'r*)rr_translate_natural_languagerrr>rA)rnatural_languagerrr~rFs r interpretzOpenInterpreterBridge.interprets!! ..20;3  //0@A < ..20P2   22::!!( " ;F!..#   .."S  sHAB0#B*A?+B>B0?B B- B("B-#B0(B--B0c\|jj}d|vrd|vryd|vryy)zVery limited NL-to-code translation for demonstration. Only handles trivial cases; real Open Interpreter uses its own LLM. printhelloz+print("Hello from Open Interpreter bridge")z list filesz,import os; print('\n'.join(os.listdir('.')))N)striplower)rtextlowereds rrz1OpenInterpreterBridge._translate_natural_languages8 **,$$& g 'W"4@ 7 "BrrrNrO)rrArrrLrQ)rrArLrP) rRrSrTrUrrrVrrrrrrrrsj#'< <  <"" .. .  .` rr)rrXrrr)rU __future__rrshashlibrjsonloggingrqrarutimepathlibrtypingr getLoggerrRr?rrXrrr__all__rrrrs#      8 $``FW W tNNbr r jUUp r