@attson/atwebpilot-mcp 0.0.19

package/dist/index.js

@@ -0,0 +1,1467 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+// ../coordinator/src/types.ts
+var QUOTA_DEFAULTS = {
+  max_steps_per_session: 200,
+  max_dangerous_per_session: 50
+};
+
+// ../coordinator/src/clock.ts
+var DefaultClock = class {
+  now() {
+    return Date.now();
+  }
+};
+var DefaultIdGen = class {
+  counter = 0;
+  next(prefix = "") {
+    this.counter += 1;
+    return `${prefix}${prefix ? "_" : ""}${Date.now().toString(36)}_${this.counter}`;
+  }
+};
+
+// ../shared/src/url-pattern.ts
+var SPECIAL = /[.+?^${}()|[\]\\]/g;
+var PLACEHOLDER_DOUBLE = "
";
+var PLACEHOLDER_SINGLE = "";
+function compilePattern(pattern) {
+  const replaced = pattern.replace(/\*\*/g, PLACEHOLDER_DOUBLE).replace(/\*/g, PLACEHOLDER_SINGLE);
+  const escaped = replaced.replace(SPECIAL, "\\$&");
+  const expanded = escaped.replace(new RegExp(PLACEHOLDER_DOUBLE, "g"), ".*").replace(new RegExp(PLACEHOLDER_SINGLE, "g"), "[^/]*");
+  return new RegExp(`^${expanded}$`);
+}
+function matchesAny(url, patterns) {
+  return patterns.some((p) => compilePattern(p).test(url));
+}
+
+// ../coordinator/src/worker-registry.ts
+var WorkerRegistry = class {
+  constructor(clock) {
+    this.clock = clock;
+  }
+  clock;
+  workers = /* @__PURE__ */ new Map();
+  register(w) {
+    if (this.workers.has(w.id)) {
+      throw new Error(`Worker ${w.id} already registered`);
+    }
+    this.workers.set(w.id, { ...w, connected_at: this.clock.now() });
+  }
+  unregister(id) {
+    this.workers.delete(id);
+  }
+  get(id) {
+    return this.workers.get(id);
+  }
+  list() {
+    return [...this.workers.values()];
+  }
+  heartbeat(id) {
+    const w = this.workers.get(id);
+    if (!w) return;
+    this.workers.set(id, { ...w, last_heartbeat_at: this.clock.now() });
+  }
+  /**
+   * Pick workers whose saved_tools have any url_pattern matching the given URL.
+   * When labels are provided, workers carrying any matching label sort first.
+   */
+  pickForUrl(url, preferLabels = []) {
+    const all = this.list();
+    const matching = all.filter(
+      (w) => w.saved_tools.some((t) => matchesAny(url, t.url_pattern))
+    );
+    if (preferLabels.length === 0) return matching;
+    return matching.sort((a, b) => labelScore(b, preferLabels) - labelScore(a, preferLabels));
+  }
+};
+function labelScore(w, prefer) {
+  let score = 0;
+  for (const l of prefer) if (w.labels.has(l)) score += 1;
+  return score;
+}
+
+// ../shared/src/protocol/version.ts
+var PROTOCOL_VERSION = 1;
+var SESSION_IDLE_TIMEOUT_MS = 30 * 60 * 1e3;
+var ORPHAN_RECOVERY_MS = 5 * 60 * 1e3;
+var NONCE_REPLAY_WINDOW_MS = 5 * 60 * 1e3;
+
+// ../shared/src/protocol/envelope.ts
+import { z } from "zod";
+var EnvelopeFields = {
+  nonce: z.string().min(1),
+  ts: z.number().int().nonnegative(),
+  protocol_version: z.number().int().positive()
+};
+var EnvelopeSchema = z.object(EnvelopeFields);
+
+// ../shared/src/protocol/errors.ts
+import { z as z2 } from "zod";
+var ErrorCodes = [
+  // ProtocolError (request itself is broken; not retryable)
+  "SessionNotFound",
+  "SessionExpired",
+  "InvalidArgs",
+  "PermissionDenied",
+  "ToolHashMismatch",
+  "ProtocolVersionMismatch",
+  "ReplayDetected",
+  // WorkerError (browser-side failure; often retryable)
+  "WorkerDisconnected",
+  "TabClosed",
+  "NavigationLost",
+  "PageScriptError",
+  // CoordinatorError (internal)
+  "WorkerBusy",
+  "QueueFull",
+  "InternalError",
+  // Quota
+  "SessionExhausted",
+  "DangerousQuotaExceeded"
+];
+var ErrorBodySchema = z2.object({
+  code: z2.enum(ErrorCodes),
+  message: z2.string(),
+  retryable: z2.boolean(),
+  retry_after_ms: z2.number().int().nonnegative().optional(),
+  audit_id: z2.string().optional(),
+  /** machine-readable extra context, e.g. {denied_capability: "submit:form"} */
+  hints: z2.record(z2.unknown()).optional()
+});
+
+// ../shared/src/protocol/messages.ts
+import { z as z4 } from "zod";
+
+// ../shared/src/protocol/chat-event.ts
+import { z as z3 } from "zod";
+var ChatSessionStatusSchema = z3.enum([
+  "idle",
+  "streaming",
+  "awaiting",
+  "running",
+  "done",
+  "error",
+  "aborted"
+]);
+var JsonValue = z3.lazy(
+  () => z3.union([
+    z3.string(),
+    z3.number(),
+    z3.boolean(),
+    z3.null(),
+    z3.array(JsonValue),
+    z3.record(JsonValue)
+  ])
+);
+var ToolUsePartSchema = z3.object({
+  type: z3.literal("tool_use"),
+  id: z3.string(),
+  name: z3.string(),
+  input: JsonValue
+});
+var SessionEndStatus = z3.enum(["done", "aborted", "max_rounds", "error"]);
+var ChatSessionEventSchema = z3.discriminatedUnion("type", [
+  z3.object({ type: z3.literal("round_start"), round: z3.number().int() }),
+  z3.object({ type: z3.literal("text_delta"), text: z3.string() }),
+  z3.object({ type: z3.literal("tool_use_start"), id: z3.string(), name: z3.string() }),
+  z3.object({ type: z3.literal("tool_use_input_delta"), id: z3.string(), partial_json: z3.string() }),
+  z3.object({ type: z3.literal("tool_use_end"), id: z3.string(), input: JsonValue }),
+  z3.object({ type: z3.literal("assistant_turn_end"), toolUses: z3.array(ToolUsePartSchema) }),
+  z3.object({ type: z3.literal("tool_running"), id: z3.string() }),
+  z3.object({ type: z3.literal("tool_done"), id: z3.string(), output: JsonValue, ms: z3.number() }),
+  z3.object({ type: z3.literal("tool_error"), id: z3.string(), error: z3.string(), ms: z3.number() }),
+  z3.object({ type: z3.literal("tool_skipped"), id: z3.string() }),
+  z3.object({ type: z3.literal("usage"), input_tokens: z3.number().int(), output_tokens: z3.number().int() }),
+  z3.object({ type: z3.literal("continuation_nudge"), round: z3.number().int(), attempt: z3.number().int() }),
+  z3.object({ type: z3.literal("stream_error"), error: z3.string() }),
+  z3.object({ type: z3.literal("exception"), error: z3.string() }),
+  z3.object({
+    type: z3.literal("session_end"),
+    status: SessionEndStatus,
+    lastOutput: JsonValue.nullable(),
+    reason: z3.string().optional()
+  })
+]);
+
+// ../shared/src/protocol/messages.ts
+var StepSchema = z4.object({
+  tool: z4.string(),
+  args: z4.unknown()
+});
+var HelloSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("HELLO"),
+  worker_id: z4.string().min(1),
+  fingerprint: z4.object({
+    ext_hash: z4.string(),
+    os: z4.string(),
+    chrome: z4.string()
+  }),
+  capabilities: z4.array(z4.string()),
+  attended: z4.boolean(),
+  available_tabs: z4.array(
+    z4.object({
+      tab_id: z4.string(),
+      url: z4.string(),
+      title: z4.string().optional()
+    })
+  ),
+  saved_tools: z4.array(
+    z4.object({
+      id: z4.string(),
+      version: z4.number().int().nonnegative(),
+      hash: z4.string(),
+      url_pattern: z4.array(z4.string()),
+      description: z4.string().optional()
+    })
+  ),
+  labels: z4.array(z4.string())
+});
+var PingSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("PING")
+});
+var TabReadySchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("TAB_READY"),
+  session_id: z4.string(),
+  tab_id: z4.string(),
+  current_url: z4.string()
+});
+var ProgressSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("PROGRESS"),
+  req_id: z4.string(),
+  partial: z4.unknown()
+});
+var ResultSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("RESULT"),
+  req_id: z4.string(),
+  ok: z4.boolean(),
+  return: z4.unknown().optional(),
+  error: ErrorBodySchema.optional()
+});
+var SessionEventSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("SESSION_EVENT"),
+  session_id: z4.string(),
+  kind: z4.enum(["navigated", "tab_closed", "audit"]),
+  payload: z4.unknown()
+});
+var StateSnapshotSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("STATE_SNAPSHOT"),
+  last_session_states: z4.array(
+    z4.object({
+      session_id: z4.string(),
+      tab_id: z4.string(),
+      state: z4.string()
+    })
+  )
+});
+var WelcomeSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("WELCOME"),
+  server_time: z4.number(),
+  heartbeat_interval_ms: z4.number().int().positive(),
+  server_pubkey_pin: z4.string().optional()
+});
+var PongSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("PONG"),
+  echo_nonce: z4.string()
+});
+var OpenTabSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("OPEN_TAB"),
+  session_id: z4.string(),
+  url: z4.string(),
+  reuse_if_match: z4.array(z4.string()).optional()
+});
+var ExecSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("EXEC"),
+  req_id: z4.string(),
+  session_id: z4.string(),
+  tab_id: z4.string(),
+  step: StepSchema
+});
+var CloseSessionSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("CLOSE_SESSION"),
+  session_id: z4.string()
+});
+var LlmStreamEventSchema = z4.discriminatedUnion("type", [
+  z4.object({ type: z4.literal("text_delta"), text: z4.string() }),
+  z4.object({ type: z4.literal("tool_use_start"), id: z4.string(), name: z4.string() }),
+  z4.object({ type: z4.literal("tool_use_input_delta"), id: z4.string(), partial_json: z4.string() }),
+  z4.object({ type: z4.literal("tool_use_end"), id: z4.string(), input: z4.unknown() }),
+  z4.object({
+    type: z4.literal("message_end"),
+    usage: z4.object({
+      input_tokens: z4.number().int(),
+      output_tokens: z4.number().int()
+    }).optional(),
+    stop_reason: z4.string().optional()
+  }),
+  z4.object({ type: z4.literal("error"), error: z4.string() })
+]);
+var StartChatSessionSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("START_CHAT_SESSION"),
+  session_id: z4.string().min(1),
+  user_prompt: z4.string(),
+  tab_id: z4.string().optional(),
+  mock_llm: z4.object({
+    rounds: z4.array(z4.array(LlmStreamEventSchema))
+  }).optional(),
+  settings_override: z4.object({
+    maxRounds: z4.number().int().positive().optional(),
+    maxContinuationNudges: z4.number().int().nonnegative().optional()
+  }).optional()
+});
+var AbortSessionSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("ABORT_SESSION"),
+  session_id: z4.string().min(1)
+});
+var ReadSidepanelStateSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("READ_SIDEPANEL_STATE"),
+  req_id: z4.string().min(1),
+  tab_id: z4.string().min(1)
+});
+var ChatEventSchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("CHAT_EVENT"),
+  session_id: z4.string().min(1),
+  event: ChatSessionEventSchema
+});
+var SidepanelStateReplySchema = z4.object({
+  ...EnvelopeFields,
+  type: z4.literal("SIDEPANEL_STATE_REPLY"),
+  req_id: z4.string().min(1),
+  found: z4.boolean(),
+  snapshot: z4.object({
+    status: ChatSessionStatusSchema,
+    messagesCount: z4.number().int().nonnegative(),
+    attachedTabs: z4.array(z4.object({
+      tabId: z4.number().int(),
+      source: z4.string(),
+      lastSeenUrl: z4.string()
+    })),
+    lastSystemNote: z4.string().optional()
+  }).optional()
+});
+var ClientToServerSchema = z4.discriminatedUnion("type", [
+  HelloSchema,
+  PingSchema,
+  TabReadySchema,
+  ProgressSchema,
+  ResultSchema,
+  SessionEventSchema,
+  StateSnapshotSchema,
+  ChatEventSchema,
+  SidepanelStateReplySchema
+]);
+var ServerToClientSchema = z4.discriminatedUnion("type", [
+  WelcomeSchema,
+  PongSchema,
+  OpenTabSchema,
+  ExecSchema,
+  CloseSessionSchema,
+  StartChatSessionSchema,
+  AbortSessionSchema,
+  ReadSidepanelStateSchema
+]);
+var ProtocolMessageSchema = z4.union([ClientToServerSchema, ServerToClientSchema]);
+
+// ../coordinator/src/session-manager.ts
+var SessionManager = class {
+  constructor(clock, idGen) {
+    this.clock = clock;
+    this.idGen = idGen;
+  }
+  clock;
+  idGen;
+  sessions = /* @__PURE__ */ new Map();
+  open(input) {
+    const id = this.idGen.next("session");
+    const now = this.clock.now();
+    const s = {
+      id,
+      ai_client_fingerprint: input.ai_client_fingerprint,
+      worker_id: input.worker_id,
+      tab_id: input.tab_id,
+      scope: input.scope,
+      state: "active",
+      created_at: now,
+      last_activity_at: now,
+      idle_timeout_ms: input.idle_timeout_ms ?? SESSION_IDLE_TIMEOUT_MS,
+      step_count: 0,
+      dangerous_count: 0
+    };
+    this.sessions.set(id, s);
+    return s;
+  }
+  get(id) {
+    return this.sessions.get(id);
+  }
+  list() {
+    return [...this.sessions.values()];
+  }
+  /** Record activity on a session, increment counters. Throws if not active. */
+  touch(id, opts) {
+    const s = this.sessions.get(id);
+    if (!s) throw new Error(`Session ${id} not found`);
+    if (s.state !== "active") throw new Error(`Session ${id} not active (state=${s.state})`);
+    const next = {
+      ...s,
+      last_activity_at: this.clock.now(),
+      step_count: s.step_count + 1,
+      dangerous_count: s.dangerous_count + (opts.dangerous ? 1 : 0)
+    };
+    this.sessions.set(id, next);
+  }
+  close(id) {
+    this.transition(id, "closed");
+  }
+  fail(id, code, message) {
+    const s = this.sessions.get(id);
+    if (!s) return;
+    this.sessions.set(id, { ...s, state: "error", error: { code, message } });
+  }
+  /** Mark all sessions belonging to a worker as paused (worker dropped). */
+  pauseByWorker(worker_id) {
+    const ids = [];
+    for (const s of this.sessions.values()) {
+      if (s.worker_id === worker_id && s.state === "active") {
+        this.sessions.set(s.id, { ...s, state: "paused" });
+        ids.push(s.id);
+      }
+    }
+    return ids;
+  }
+  /**
+   * When a worker reconnects, resume sessions present in last_session_states;
+   * any paused sessions NOT in the snapshot become error (worker lost them).
+   */
+  resumeByWorker(worker_id, restoredIds) {
+    for (const s of this.sessions.values()) {
+      if (s.worker_id !== worker_id || s.state !== "paused") continue;
+      if (restoredIds.has(s.id)) {
+        this.sessions.set(s.id, { ...s, state: "active", last_activity_at: this.clock.now() });
+      } else {
+        this.sessions.set(s.id, {
+          ...s,
+          state: "error",
+          error: { code: "WorkerDisconnected", message: "Lost during worker disconnect" }
+        });
+      }
+    }
+  }
+  /** Orphan all sessions whose AI client just disconnected. */
+  orphan(ai_client_fingerprint) {
+    const ids = [];
+    const now = this.clock.now();
+    for (const s of this.sessions.values()) {
+      if (s.ai_client_fingerprint === ai_client_fingerprint && s.state === "active") {
+        this.sessions.set(s.id, { ...s, state: "orphan", orphaned_at: now });
+        ids.push(s.id);
+      }
+    }
+    return ids;
+  }
+  /** Re-claim orphaned sessions when same AI client reconnects within window. */
+  recover(ai_client_fingerprint) {
+    const ids = [];
+    const now = this.clock.now();
+    for (const s of this.sessions.values()) {
+      if (s.state !== "orphan" || s.ai_client_fingerprint !== ai_client_fingerprint) continue;
+      if (s.orphaned_at !== void 0 && now - s.orphaned_at <= ORPHAN_RECOVERY_MS) {
+        this.sessions.set(s.id, {
+          ...s,
+          state: "active",
+          last_activity_at: now,
+          orphaned_at: void 0
+        });
+        ids.push(s.id);
+      }
+    }
+    return ids;
+  }
+  /**
+   * Periodic housekeeping. Returns ids whose state changed.
+   *   - active too long idle → expired
+   *   - orphan past ORPHAN_RECOVERY_MS → closed
+   */
+  tick() {
+    const now = this.clock.now();
+    const changed = [];
+    for (const s of this.sessions.values()) {
+      if (s.state === "active" && now - s.last_activity_at >= s.idle_timeout_ms) {
+        this.sessions.set(s.id, { ...s, state: "expired" });
+        changed.push(s.id);
+      } else if (s.state === "orphan" && s.orphaned_at !== void 0 && now - s.orphaned_at > ORPHAN_RECOVERY_MS) {
+        this.sessions.set(s.id, { ...s, state: "closed" });
+        changed.push(s.id);
+      }
+    }
+    return changed;
+  }
+  /** Quota snapshot for get_quota MCP tool. */
+  quota(id) {
+    const s = this.sessions.get(id);
+    if (!s) return void 0;
+    const now = this.clock.now();
+    const ms_until_expiry = Math.max(0, s.idle_timeout_ms - (now - s.last_activity_at));
+    return {
+      max_steps: QUOTA_DEFAULTS.max_steps_per_session,
+      steps_used: s.step_count,
+      max_dangerous: QUOTA_DEFAULTS.max_dangerous_per_session,
+      dangerous_used: s.dangerous_count,
+      ms_until_expiry
+    };
+  }
+  transition(id, target) {
+    const s = this.sessions.get(id);
+    if (!s) return;
+    this.sessions.set(id, { ...s, state: target });
+  }
+};
+
+// ../coordinator/src/catalog.ts
+var Catalog = class {
+  constructor(registry) {
+    this.registry = registry;
+  }
+  registry;
+  /**
+   * Aggregate saved_tools across all workers and return those whose url_pattern
+   * matches the given URL. Entries with conflicting hashes are flagged so the
+   * UI / AI client can warn before invocation.
+   */
+  listFor(url) {
+    const byId = /* @__PURE__ */ new Map();
+    for (const w of this.registry.list()) {
+      for (const t of w.saved_tools) {
+        if (!matchesAny(url, t.url_pattern)) continue;
+        const existing = byId.get(t.id);
+        if (!existing) {
+          byId.set(t.id, {
+            id: t.id,
+            version: t.version,
+            hash: t.hash,
+            url_pattern: t.url_pattern,
+            description: t.description,
+            provided_by_workers: [w.id],
+            conflicting_hashes: false
+          });
+        } else {
+          existing.provided_by_workers = [.../* @__PURE__ */ new Set([...existing.provided_by_workers, w.id])];
+          if (existing.hash !== t.hash) existing.conflicting_hashes = true;
+        }
+      }
+    }
+    return [...byId.values()];
+  }
+  lookup(tool_id, url) {
+    return this.listFor(url).find((e) => e.id === tool_id);
+  }
+};
+
+// ../shared/src/capability/catalog.ts
+var CAPABILITIES = [
+  "read:dom",
+  "read:image",
+  "read:storage",
+  "nav:tab",
+  "interact:form",
+  "submit:form",
+  "upload:file",
+  "httpRequest:no-cookie",
+  "httpRequest:cookied",
+  "runJS:scanned",
+  "runJS:unsafe",
+  "tab:open"
+];
+var IMPLICIT_CAPABILITIES = /* @__PURE__ */ new Set([
+  "read:dom",
+  "read:image",
+  "nav:tab"
+]);
+var DANGEROUS_CAPABILITIES = /* @__PURE__ */ new Set([
+  "read:storage",
+  "submit:form",
+  "upload:file",
+  "httpRequest:cookied",
+  "runJS:unsafe"
+]);
+function isCapability(s) {
+  return CAPABILITIES.includes(s);
+}
+
+// ../shared/src/capability/tool-mapping.ts
+function capabilityForTool(tool, opts) {
+  switch (tool) {
+    case "snapshotDOM":
+    case "querySelector":
+    case "querySelectorAll":
+    case "extractText":
+    case "extractFormState":
+    case "getValue":
+      return "read:dom";
+    case "extractImages":
+      return "read:image";
+    case "readStorage":
+      return "read:storage";
+    case "hover":
+    case "focus":
+    case "scroll":
+    case "waitFor":
+      return "nav:tab";
+    case "click":
+    case "fillInput":
+    case "setCheckbox":
+    case "selectOption":
+      return "interact:form";
+    case "submitForm":
+      return "submit:form";
+    case "uploadFile":
+      return "upload:file";
+    case "httpRequest":
+      return opts?.httpCookied ? "httpRequest:cookied" : "httpRequest:no-cookie";
+    default: {
+      const _exhaustive = tool;
+      throw new Error(`capabilityForTool: unknown tool ${_exhaustive}`);
+    }
+  }
+}
+function capabilityForRunJs(unsafe) {
+  return unsafe ? "runJS:unsafe" : "runJS:scanned";
+}
+
+// ../shared/src/capability/algebra.ts
+function union(a, b) {
+  const out = new Set(a);
+  for (const c of b) out.add(c);
+  return out;
+}
+function effectiveScope(requested) {
+  return union(requested, IMPLICIT_CAPABILITIES);
+}
+function scopeCovers(requested, required) {
+  return effectiveScope(requested).has(required);
+}
+
+// ../coordinator/src/dispatcher.ts
+var Dispatcher = class {
+  constructor(sessions) {
+    this.sessions = sessions;
+  }
+  sessions;
+  validate(input) {
+    const session = this.sessions.get(input.session_id);
+    if (!session) return fail("SessionNotFound", `Session ${input.session_id} not found`);
+    if (session.state === "expired")
+      return fail("SessionExpired", `Session ${input.session_id} is expired`);
+    if (session.state !== "active")
+      return fail("InternalError", `Session ${input.session_id} state=${session.state}`);
+    const required = input.kind === "extension_tool" ? capabilityForTool(input.tool, { httpCookied: input.httpCookied }) : capabilityForRunJs(input.unsafe);
+    if (!scopeCovers(session.scope, required)) {
+      return fail("PermissionDenied", `Capability ${required} not in session scope`, {
+        denied_capability: required
+      });
+    }
+    const dangerous = DANGEROUS_CAPABILITIES.has(required);
+    if (session.step_count >= QUOTA_DEFAULTS.max_steps_per_session) {
+      return fail(
+        "SessionExhausted",
+        `Session reached max_steps=${QUOTA_DEFAULTS.max_steps_per_session}`
+      );
+    }
+    if (dangerous && session.dangerous_count >= QUOTA_DEFAULTS.max_dangerous_per_session) {
+      return fail(
+        "DangerousQuotaExceeded",
+        `Session exceeded max_dangerous=${QUOTA_DEFAULTS.max_dangerous_per_session}`
+      );
+    }
+    return { ok: true, required_capability: required, dangerous };
+  }
+};
+function fail(code, message, hints) {
+  return {
+    ok: false,
+    error: {
+      code,
+      message,
+      retryable: code === "WorkerBusy" || code === "QueueFull" || code === "InternalError",
+      hints
+    }
+  };
+}
+
+// ../coordinator/src/coordinator.ts
+var Coordinator = class {
+  sessions;
+  workers;
+  catalog;
+  dispatcher;
+  hub;
+  constructor(deps) {
+    this.hub = deps.hub;
+    this.sessions = new SessionManager(deps.clock, deps.idGen);
+    this.workers = new WorkerRegistry(deps.clock);
+    this.catalog = new Catalog(this.workers);
+    this.dispatcher = new Dispatcher(this.sessions);
+  }
+  // === Worker lifecycle ===
+  registerWorker(w) {
+    this.workers.register(w);
+    this.sessions.resumeByWorker(w.id, /* @__PURE__ */ new Set(
+      /* will be filled from STATE_SNAPSHOT later */
+    ));
+  }
+  unregisterWorker(id) {
+    this.workers.unregister(id);
+    this.sessions.pauseByWorker(id);
+  }
+  heartbeatWorker(id) {
+    this.workers.heartbeat(id);
+  }
+  // === Session lifecycle ===
+  openSession(input) {
+    return this.sessions.open(input);
+  }
+  closeSession(id) {
+    this.sessions.close(id);
+  }
+  // === Tool calls ===
+  validateCall(input) {
+    return this.dispatcher.validate(input);
+  }
+  /** Apply quota side-effects after a successful validation. Call before sending EXEC. */
+  recordCall(session_id, dangerous) {
+    this.sessions.touch(session_id, { dangerous });
+  }
+  // === Catalog & quota ===
+  listToolsForSession(session_id) {
+    const s = this.sessions.get(session_id);
+    if (!s) return void 0;
+    const worker = this.workers.get(s.worker_id);
+    if (!worker) return [];
+    const tabUrl = worker.available_tabs.find((t) => t.tab_id === s.tab_id)?.url ?? "";
+    return this.catalog.listFor(tabUrl);
+  }
+  quotaFor(session_id) {
+    return this.sessions.quota(session_id);
+  }
+  // === Periodic housekeeping ===
+  tick() {
+    const expired_sessions = this.sessions.tick();
+    return { expired_sessions };
+  }
+};
+
+// src/loopback-ws-hub.ts
+import { WebSocketServer, WebSocket } from "ws";
+var HEARTBEAT_INTERVAL_MS = 2e4;
+var LoopbackWSHub = class {
+  constructor(opts) {
+    this.opts = opts;
+    this.execTimeoutMs = opts.execTimeoutMs ?? 3e4;
+    this.wss = new WebSocketServer({
+      port: opts.port,
+      path: "/worker",
+      handleProtocols: (protocols) => [...protocols][0] ?? false
+    });
+    this.wss.on("connection", (socket, req) => this.onConnection(socket, req));
+  }
+  opts;
+  wss;
+  byWorker = /* @__PURE__ */ new Map();
+  workerOf = /* @__PURE__ */ new Map();
+  pending = /* @__PURE__ */ new Map();
+  msgHandlers = [];
+  disconnectHandlers = [];
+  execTimeoutMs;
+  ready() {
+    return new Promise((resolve) => {
+      const addr = this.wss.address();
+      if (addr) return resolve(addr.port);
+      this.wss.on(
+        "listening",
+        () => resolve(this.wss.address().port)
+      );
+    });
+  }
+  close() {
+    for (const p of this.pending.values()) {
+      clearTimeout(p.timer);
+      p.reject(new Error("hub closing"));
+    }
+    this.pending.clear();
+    for (const socket of this.wss.clients) {
+      socket.terminate();
+    }
+    return new Promise((resolve) => this.wss.close(() => resolve()));
+  }
+  tokenOk(req) {
+    if (!this.opts.token) return true;
+    const offered = String(req.headers["sec-websocket-protocol"] ?? "").split(",").map((s) => s.trim());
+    return offered.includes(`bearer.${this.opts.token}`);
+  }
+  onConnection(socket, req) {
+    if (!this.tokenOk(req)) {
+      socket.close(4401, "bad token");
+      return;
+    }
+    socket.on("message", (raw) => this.onMessageRaw(socket, raw.toString()));
+    socket.on("close", () => this.onSocketClose(socket));
+    socket.on("error", () => {
+    });
+  }
+  onMessageRaw(socket, raw) {
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch {
+      return;
+    }
+    const r = ClientToServerSchema.safeParse(parsed);
+    if (!r.success) return;
+    const msg = r.data;
+    if (msg.type === "HELLO") {
+      const existingSocket = this.byWorker.get(msg.worker_id);
+      if (existingSocket && existingSocket !== socket) {
+        this.workerOf.delete(existingSocket);
+        for (const [req_id, p] of [...this.pending]) {
+          if (p.worker_id === msg.worker_id) {
+            clearTimeout(p.timer);
+            this.pending.delete(req_id);
+            p.reject(new Error(`worker ${msg.worker_id} reconnected, exec cancelled`));
+          }
+        }
+        existingSocket.terminate();
+      }
+      this.byWorker.set(msg.worker_id, socket);
+      this.workerOf.set(socket, msg.worker_id);
+      this.rawSend(socket, {
+        type: "WELCOME",
+        nonce: this.opts.idGen.next("nonce"),
+        ts: this.opts.clock.now(),
+        protocol_version: PROTOCOL_VERSION,
+        server_time: this.opts.clock.now(),
+        heartbeat_interval_ms: HEARTBEAT_INTERVAL_MS
+      });
+      for (const h of this.msgHandlers) h(msg.worker_id, msg);
+      return;
+    }
+    if (msg.type === "RESULT") {
+      const p = this.pending.get(msg.req_id);
+      if (p) {
+        clearTimeout(p.timer);
+        this.pending.delete(msg.req_id);
+        p.resolve(msg);
+      }
+      return;
+    }
+    const wid = this.workerOf.get(socket);
+    if (wid) {
+      for (const h of this.msgHandlers) h(wid, msg);
+    }
+  }
+  onSocketClose(socket) {
+    const wid = this.workerOf.get(socket);
+    if (!wid) return;
+    this.workerOf.delete(socket);
+    this.byWorker.delete(wid);
+    for (const [req_id, p] of [...this.pending]) {
+      if (p.worker_id === wid) {
+        clearTimeout(p.timer);
+        this.pending.delete(req_id);
+        p.reject(new Error(`worker ${wid} disconnected`));
+      }
+    }
+    for (const h of this.disconnectHandlers) h(wid);
+  }
+  rawSend(socket, msg) {
+    const r = ServerToClientSchema.safeParse(msg);
+    if (!r.success) {
+      console.error("[hub] outgoing failed schema", r.error);
+      return;
+    }
+    if (socket.readyState === WebSocket.OPEN) {
+      socket.send(JSON.stringify(msg));
+    }
+  }
+  exec(worker_id, params) {
+    const socket = this.byWorker.get(worker_id);
+    if (!socket)
+      return Promise.reject(new Error(`worker ${worker_id} not connected`));
+    const req_id = this.opts.idGen.next("req");
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        this.pending.delete(req_id);
+        reject(
+          new Error(`EXEC ${req_id} timeout after ${this.execTimeoutMs}ms`)
+        );
+      }, this.execTimeoutMs);
+      this.pending.set(req_id, { resolve, reject, timer, worker_id });
+      this.rawSend(socket, {
+        type: "EXEC",
+        nonce: this.opts.idGen.next("nonce"),
+        ts: this.opts.clock.now(),
+        protocol_version: PROTOCOL_VERSION,
+        req_id,
+        session_id: params.session_id,
+        tab_id: params.tab_id,
+        step: { tool: params.step.tool, args: params.step.args }
+      });
+      if (this.byWorker.get(worker_id) !== socket) {
+        clearTimeout(timer);
+        this.pending.delete(req_id);
+        reject(new Error(`worker ${worker_id} disconnected`));
+      }
+    });
+  }
+  async send(worker_id, msg) {
+    const socket = this.byWorker.get(worker_id);
+    if (!socket) throw new Error(`worker ${worker_id} not connected`);
+    this.rawSend(socket, msg);
+  }
+  onMessage(handler) {
+    this.msgHandlers.push(handler);
+  }
+  onDisconnect(handler) {
+    this.disconnectHandlers.push(handler);
+  }
+  connectedWorkers() {
+    return [...this.byWorker.keys()];
+  }
+  // Intentionally fire-and-forget: actual cleanup (byWorker/workerOf removal and
+  // pending-exec rejection) happens asynchronously via the socket's close event.
+  // v1 callers do not await this method.
+  async disconnect(worker_id, _reason) {
+    const socket = this.byWorker.get(worker_id);
+    if (socket) socket.close();
+  }
+};
+
+// src/mcp-server.ts
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { ListToolsRequestSchema, CallToolRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+
+// src/control-tools.ts
+var CONTROL_TOOLS = [
+  {
+    name: "list_tabs",
+    description: "\u5217\u51FA\u5F53\u524D\u8FDE\u5165\u7684\u6D4F\u89C8\u5668\uFF08worker\uFF09\u53EF\u7528\u7684\u6807\u7B7E\u9875\uFF1A[{tab_id,url,title}]\u3002\u5148\u8C03\u5B83\u62FF tab_id\u3002",
+    inputSchema: { type: "object", properties: {}, additionalProperties: false }
+  },
+  {
+    name: "open_session",
+    description: "\u4E3A\u67D0\u4E2A tab \u5F00\u4E00\u4E2A\u4F1A\u8BDD\uFF0C\u8FD4\u56DE session_id\uFF1B\u540E\u7EED browser_* \u5DE5\u5177\u90FD\u5E26\u8FD9\u4E2A session_id\u3002capabilities \u7701\u7565=\u6388\u4E88\u5168\u90E8\u80FD\u529B\u3002",
+    inputSchema: {
+      type: "object",
+      required: ["tab_id"],
+      properties: {
+        tab_id: { type: "string", description: "list_tabs \u8FD4\u56DE\u7684 tab_id" },
+        capabilities: { type: "array", items: { type: "string" }, description: "\u80FD\u529B\u57DF\u767D\u540D\u5355\uFF1B\u7701\u7565=\u5168\u90E8" },
+        idle_timeout_min: { type: "number", description: "\u8986\u76D6\u9ED8\u8BA4\u7A7A\u95F2\u8D85\u65F6\uFF08\u5206\u949F\uFF09" }
+      },
+      additionalProperties: false
+    }
+  },
+  {
+    name: "close_session",
+    description: "\u5173\u95ED\u4F1A\u8BDD\u3002",
+    inputSchema: { type: "object", required: ["session_id"], properties: { session_id: { type: "string" } }, additionalProperties: false }
+  },
+  {
+    name: "get_quota",
+    description: "\u67E5\u8BE2\u4F1A\u8BDD\u5269\u4F59\u9884\u7B97\uFF1Asteps/dangerous \u5DF2\u7528\u4E0E\u4E0A\u9650\u3001\u8DDD\u8FC7\u671F\u65F6\u95F4\u3002",
+    inputSchema: { type: "object", required: ["session_id"], properties: { session_id: { type: "string" } }, additionalProperties: false }
+  }
+];
+
+// ../shared/src/llm/builtin-tool-defs.ts
+var TOOL_DEFS = [
+  {
+    name: "snapshotDOM",
+    description: "\u9875\u9762 DOM \u6458\u8981\uFF1A\u8FD4\u56DE\u4ECE root \u5F00\u59CB\u7684\u7B80\u5316\u6811\uFF0C\u542B tag/id/classes/\u76F4\u63A5\u6587\u672C/children\u3002\u4F18\u5148\u5728\u6BCF\u6B21\u4EFB\u52A1\u5F00\u59CB\u7528\u4E00\u6B21\u4EE5\u4E86\u89E3\u7ED3\u6784\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        maxDepth: { type: "integer", default: 3 },
+        root: { type: "string", description: "\u53EF\u9009\u7684 CSS \u9009\u62E9\u5668\uFF1B\u627E\u4E0D\u5230\u65F6\u9000\u56DE\u5230 <html>" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      }
+    }
+  },
+  {
+    name: "querySelector",
+    description: "\u8FD4\u56DE\u9996\u4E2A\u5339\u914D\u5143\u7D20\u7684\u6D45\u5C42\u6458\u8981 (tag/id/classes/text/attrs)\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        root: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "querySelectorAll",
+    description: "\u8FD4\u56DE\u6240\u6709\u5339\u914D\u5143\u7D20\u7684\u6D45\u5C42\u6458\u8981\u6570\u7EC4\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        root: { type: "string" },
+        limit: { type: "integer" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "extractText",
+    description: "\u63D0\u53D6\u9009\u62E9\u5668\u547D\u4E2D\u7684\u5143\u7D20\u6587\u672C\u3002single=true \u8FD4\u56DE\u4E00\u4E2A\u5B57\u7B26\u4E32\uFF0C\u5426\u5219\u8FD4\u56DE\u6570\u7EC4\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        root: { type: "string" },
+        single: { type: "boolean" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "extractImages",
+    description: "\u5728 root \u8303\u56F4\u5185\u63D0\u53D6\u6240\u6709 <img> \u7684 src/data-src/srcset\uFF1BincludeBg=true \u65F6\u4E5F\u63D0\u53D6\u80CC\u666F\u56FE\u3002\u8FD4\u56DE {url, via}[].",
+    input_schema: {
+      type: "object",
+      properties: {
+        root: { type: "string" },
+        includeBg: { type: "boolean", default: false },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      }
+    }
+  },
+  {
+    name: "scroll",
+    description: "\u6EDA\u52A8\u9875\u9762\u3002to \u53EF\u4E3A 'bottom'|'top'|number\uFF1Bmax \u662F\u6EDA\u52A8\u6B21\u6570\uFF1BuntilSelector \u51FA\u73B0\u65F6\u63D0\u524D\u505C\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        to: { description: "'bottom' | 'top' | number" },
+        max: { type: "integer", default: 1 },
+        intervalMs: { type: "integer", default: 250 },
+        untilSelector: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["to"]
+    }
+  },
+  {
+    name: "waitFor",
+    description: "\u7B49\u5F85\u56FA\u5B9A ms\uFF0C\u6216\u7B49\u5F85\u9009\u62E9\u5668\u51FA\u73B0\uFF08\u5E26 timeoutMs \u515C\u5E95\uFF09\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        ms: { type: "integer" },
+        selector: { type: "string" },
+        timeoutMs: { type: "integer", default: 5e3 },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      }
+    }
+  },
+  {
+    name: "click",
+    description: "\u70B9\u51FB\u9009\u62E9\u5668\u547D\u4E2D\u7684\u5143\u7D20\u3002required=false \u65F6\u627E\u4E0D\u5230\u4E0D\u62A5\u9519\u3002\u9700\u8981\u4EBA\u5DE5\u5BA1\u9605\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        required: { type: "boolean", default: true },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "httpRequest",
+    description: "\u901A\u8FC7\u540E\u53F0\u4EE3\u7406\u53D1\u8BF7\u6C42\u3002withCredentials=true \u65F6\u5E26 cookie\uFF0C\u9700\u8981\u4EBA\u5DE5\u5BA1\u9605\uFF1B\u9ED8\u8BA4 omit\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        url: { type: "string" },
+        method: { type: "string", enum: ["GET", "POST", "PUT", "DELETE", "PATCH"], default: "GET" },
+        headers: { type: "object" },
+        body: { type: "string" },
+        withCredentials: { type: "boolean", default: false },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["url"]
+    }
+  },
+  {
+    name: "readStorage",
+    description: "\u8BFB localStorage \u6216 sessionStorage \u7684\u6307\u5B9A key\u3002\u9700\u8981\u4EBA\u5DE5\u5BA1\u9605\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        store: { type: "string", enum: ["local", "session"] },
+        key: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["store", "key"]
+    }
+  },
+  {
+    name: "fillInput",
+    description: "\u5F80 input/textarea/contenteditable \u586B\u503C\uFF1B\u89E6\u53D1 input/change \u4E8B\u4EF6\u4EE5\u517C\u5BB9 React/Vue\u3002clear=true\uFF08\u9ED8\u8BA4\uFF09\u4F1A\u5148\u6E05\u7A7A\u518D\u586B\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        value: { type: "string" },
+        clear: { type: "boolean", default: true },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector", "value"]
+    }
+  },
+  {
+    name: "setCheckbox",
+    description: "\u8BBE\u7F6E checkbox \u52FE\u9009\u72B6\u6001\uFF1B\u6D3E\u53D1 change \u4E8B\u4EF6\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        checked: { type: "boolean" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector", "checked"]
+    }
+  },
+  {
+    name: "selectOption",
+    description: "<select> \u5143\u7D20\u6309 value \u6216 label \u9009\u9879\u3002\u540C\u65F6\u7ED9\u4E24\u8005\u65F6\u4F18\u5148 value\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        value: { type: "string" },
+        label: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "submitForm",
+    description: "\u63D0\u4EA4 <form>\u3002\u4F1A\u89E6\u53D1\u670D\u52A1\u7AEF\u52A8\u4F5C\uFF08\u4E0B\u5355\u3001\u7559\u8A00\u7B49\uFF09\uFF0C\u9700\u8981\u5BA1\u9605\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string", default: "form" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      }
+    }
+  },
+  {
+    name: "hover",
+    description: "\u628A\u9F20\u6807\u60AC\u505C\u5728\u5143\u7D20\u4E0A\uFF08\u89E6\u53D1 mouseenter / mouseover / mousemove\uFF09\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "focus",
+    description: "\u628A\u7126\u70B9\u7ED9\u67D0\u5143\u7D20\uFF08\u89E6\u53D1 focus / focusin\uFF09\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "uploadFile",
+    description: "\u628A\u540E\u7AEF\u4EE3\u7406\u62C9\u5230\u7684\u6587\u4EF6\u586B\u5230 <input type=file>\u3002\u67D0\u4E9B\u7AD9\u70B9\u4F1A\u62D2\u7EDD\u5408\u6210 File\uFF08isTrusted \u6821\u9A8C\uFF09\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        url: { type: "string" },
+        filename: { type: "string" },
+        mime: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector", "url"]
+    }
+  },
+  {
+    name: "getValue",
+    description: "\u8BFB input/select/textarea/contenteditable \u7684\u5F53\u524D\u503C\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["selector"]
+    }
+  },
+  {
+    name: "extractFormState",
+    description: "\u628A <form> \u5185\u6240\u6709\u53EF\u586B\u5B57\u6BB5\u8BFB\u6210 {name: value} \u5BF9\u8C61\uFF08radio \u53D6\u9009\u4E2D\u503C\uFF1Bcheckbox \u591A\u9009\u53D6\u6570\u7EC4\uFF09\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        selector: { type: "string", default: "form" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      }
+    }
+  },
+  {
+    name: "runJS",
+    description: "\u5728 MAIN world \u6CE8\u5165\u5E76\u6267\u884C\u4E00\u6BB5 async \u51FD\u6570\u4F53\uFF08receives `ctx` = bindings\uFF09\u3002\u52A1\u5FC5\u4F7F\u7528 return \u8FD4\u56DE\u503C\u3002\u4EC5\u5728\u7ED3\u6784\u5316\u5DE5\u5177\u4E0D\u591F\u7528\u65F6\u4F7F\u7528\uFF0C\u4F1A\u7ECF\u8FC7\u9759\u6001\u626B\u63CF\u4E0E\u4EBA\u5DE5\u5BA1\u9605\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        source: { type: "string", description: "async function body" },
+        tabId: { type: "integer", description: "\u76EE\u6807 tab\u3002\u8981\u64CD\u4F5C\u975E\u672C\u4F1A\u8BDD tab \u624D\u586B\uFF0C\u4E14\u5FC5\u987B\u5DF2\u5728 attachedTabs\uFF08\u53EF\u8C03\u7528 attachTab \u7533\u8BF7\uFF09\u3002\u64CD\u4F5C\u672C\u4F1A\u8BDD tab \u8BF7\u6574\u4E2A\u4E0D\u5E26\u6B64\u5B57\u6BB5\uFF0C\u4E0D\u8981\u4F20 0 \u6216 null" }
+      },
+      required: ["source"]
+    }
+  },
+  {
+    name: "listTabs",
+    description: "\u5217\u51FA\u6240\u6709\u7A97\u53E3\u7684\u53EF\u8BBF\u95EE tab\uFF1B\u8FD4\u56DE [{tabId, windowId, url, title, attached, isCurrent}]\u3002\u4EC5\u5728\u4F60\u9700\u8981\u8BC6\u522B\u65B0 tab \u65F6\u8C03\u7528\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        windowId: { type: "integer", description: "\u4EC5\u8FD4\u56DE\u6B64\u7A97\u53E3\u7684 tab\uFF1B\u7701\u7565=\u5168\u90E8\u7A97\u53E3" }
+      }
+    }
+  },
+  {
+    name: "openTab",
+    description: "\u6253\u5F00\u65B0 tab\uFF0C\u6210\u529F\u540E\u81EA\u52A8\u52A0\u5165\u4F1A\u8BDD attachedTabs\uFF08source=ai-open\uFF09\u3002\u8FD4\u56DE {tabId, url, title}\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        url: { type: "string" },
+        active: { type: "boolean", default: false, description: "true=\u5207\u5230\u8BE5 tab" }
+      },
+      required: ["url"]
+    }
+  },
+  {
+    name: "attachTab",
+    description: "\u8BF7\u6C42\u628A\u67D0\u4E2A\u5DF2\u6253\u5F00\u7684 tab \u7EB3\u5165\u4F1A\u8BDD attachedTabs\uFF1B\u672A\u9884\u6279\u51C6\u65F6\u4F1A\u5411\u7528\u6237\u7D22\u53D6\u5BA1\u6279\u3002",
+    input_schema: {
+      type: "object",
+      properties: {
+        tabId: { type: "integer" },
+        reason: { type: "string", description: "\u5411\u7528\u6237\u89E3\u91CA\u4E3A\u4F55\u9700\u8981\u8BBF\u95EE\u8BE5 tab" }
+      },
+      required: ["tabId"]
+    }
+  },
+  {
+    name: "detachTab",
+    description: "\u4ECE\u4F1A\u8BDD attachedTabs \u79FB\u9664\u4E00\u4E2A tab\uFF1B\u4E0D\u5173\u95ED\u8BE5 tab\u3002",
+    input_schema: {
+      type: "object",
+      properties: { tabId: { type: "integer" } },
+      required: ["tabId"]
+    }
+  }
+];
+
+// src/tool-gen.ts
+var EXEC_TOOL_NAMES = [
+  "snapshotDOM",
+  "querySelector",
+  "querySelectorAll",
+  "extractText",
+  "extractImages",
+  "getValue",
+  "extractFormState",
+  "hover",
+  "focus",
+  "scroll",
+  "waitFor",
+  "click",
+  "fillInput",
+  "setCheckbox",
+  "selectOption",
+  "httpRequest",
+  "submitForm",
+  "uploadFile",
+  "readStorage"
+];
+function rebuildSchema(src) {
+  const s = src;
+  const properties = { ...s.properties ?? {} };
+  delete properties.tabId;
+  properties.session_id = { type: "string", description: "open_session \u8FD4\u56DE\u7684\u4F1A\u8BDD id\uFF08\u51B3\u5B9A\u76EE\u6807 worker \u4E0E tab\uFF09" };
+  const required = [.../* @__PURE__ */ new Set([...(s.required ?? []).filter((r) => r !== "tabId"), "session_id"])];
+  return { type: "object", properties, required };
+}
+function generateBrowserTools() {
+  const allow = new Set(EXEC_TOOL_NAMES);
+  return TOOL_DEFS.filter((t) => allow.has(t.name)).map((t) => ({
+    name: `browser_${t.name}`,
+    builtinTool: t.name,
+    description: t.description,
+    inputSchema: rebuildSchema(t.input_schema)
+  }));
+}
+
+// src/handlers.ts
+function singleWorkerId(c) {
+  const workers = c.workers.list();
+  if (workers.length === 0) throw new Error("\u6CA1\u6709\u6D4F\u89C8\u5668\u8FDE\u5165\uFF0C\u8BF7\u5728\u6269\u5C55\u8BBE\u7F6E\u9875\u586B ws://127.0.0.1:<port>/worker \u8FDE\u63A5");
+  if (workers.length > 1) throw new Error("\u68C0\u6D4B\u5230\u591A\u4E2A\u6D4F\u89C8\u5668\u8FDE\u5165\uFF1Bv1 \u4EC5\u652F\u6301\u5355 worker\uFF0C\u8BF7\u53EA\u4FDD\u7559\u4E00\u4E2A\u8FDE\u63A5");
+  return workers[0].id;
+}
+function handleListTabs(deps) {
+  const w = deps.coordinator.workers.get(singleWorkerId(deps.coordinator));
+  return { tabs: w.available_tabs };
+}
+function handleOpenSession(deps, args) {
+  const worker_id = singleWorkerId(deps.coordinator);
+  const tab_id = String(args.tab_id);
+  const requested = Array.isArray(args.capabilities) ? args.capabilities.map(String).filter(isCapability) : [];
+  const scope = new Set(requested.length ? requested : CAPABILITIES);
+  const idle_timeout_ms = typeof args.idle_timeout_min === "number" ? args.idle_timeout_min * 6e4 : void 0;
+  const s = deps.coordinator.openSession({ ai_client_fingerprint: "mcp-local", worker_id, tab_id, scope, idle_timeout_ms });
+  return { session_id: s.id };
+}
+function handleCloseSession(deps, args) {
+  deps.coordinator.closeSession(String(args.session_id));
+  return { ok: true };
+}
+function handleGetQuota(deps, args) {
+  const q = deps.coordinator.quotaFor(String(args.session_id));
+  if (!q) throw new Error(`session ${String(args.session_id)} not found`);
+  return q;
+}
+async function handleBrowserTool(deps, gen, args) {
+  const session_id = String(args.session_id);
+  const session = deps.coordinator.sessions.get(session_id);
+  if (!session) throw new Error(`session ${session_id} not found`);
+  const { session_id: _omit, ...toolArgs } = args;
+  const tool = gen.builtinTool;
+  const httpCookied = tool === "httpRequest" ? Boolean(toolArgs.withCredentials) : void 0;
+  const v = deps.coordinator.validateCall({ session_id, kind: "extension_tool", tool, httpCookied });
+  if (!v.ok) throw new Error(`${v.error.code}: ${v.error.message}`);
+  deps.coordinator.recordCall(session_id, v.dangerous);
+  const result = await deps.hub.exec(session.worker_id, { session_id, tab_id: session.tab_id, step: { tool, args: toolArgs } });
+  if (!result.ok) throw new Error(result.error ? `${result.error.code}: ${result.error.message}` : "EXEC failed");
+  return result.return ?? null;
+}
+
+// src/mcp-server.ts
+var BROWSER_TOOLS = generateBrowserTools();
+var BROWSER_BY_NAME = new Map(BROWSER_TOOLS.map((t) => [t.name, t]));
+function buildToolList() {
+  return [
+    ...CONTROL_TOOLS.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema })),
+    ...BROWSER_TOOLS.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema }))
+  ];
+}
+var ok = (data) => ({ content: [{ type: "text", text: JSON.stringify(data ?? null) }] });
+var fail2 = (message) => ({ content: [{ type: "text", text: message }], isError: true });
+async function dispatchCall(deps, name, args) {
+  try {
+    if (name === "list_tabs") return ok(handleListTabs(deps));
+    if (name === "open_session") return ok(handleOpenSession(deps, args));
+    if (name === "close_session") return ok(handleCloseSession(deps, args));
+    if (name === "get_quota") return ok(handleGetQuota(deps, args));
+    const gen = BROWSER_BY_NAME.get(name);
+    if (gen) return ok(await handleBrowserTool(deps, gen, args));
+    return fail2(`unknown tool: ${name}`);
+  } catch (e) {
+    return fail2(e instanceof Error ? e.message : String(e));
+  }
+}
+function createMcpServer(deps) {
+  const server = new Server({ name: "atwebpilot-mcp", version: "0.1.0" }, { capabilities: { tools: {} } });
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: buildToolList() }));
+  server.setRequestHandler(CallToolRequestSchema, async (req) => {
+    const args = req.params.arguments ?? {};
+    return dispatchCall(deps, req.params.name, args);
+  });
+  return server;
+}
+
+// src/wire.ts
+function helloToWorker(h, now) {
+  return {
+    id: h.worker_id,
+    fingerprint: h.fingerprint,
+    capabilities: new Set(h.capabilities.filter(isCapability)),
+    attended: h.attended,
+    labels: new Set(h.labels),
+    available_tabs: h.available_tabs,
+    saved_tools: h.saved_tools,
+    protocol_version: h.protocol_version,
+    connected_at: now,
+    last_heartbeat_at: now
+  };
+}
+function installWire(hub, coordinator, clock) {
+  hub.onMessage((worker_id, msg) => {
+    switch (msg.type) {
+      case "HELLO":
+        coordinator.unregisterWorker(msg.worker_id);
+        coordinator.registerWorker(helloToWorker(msg, clock.now()));
+        break;
+      case "PING":
+        coordinator.heartbeatWorker(worker_id);
+        break;
+      default:
+        break;
+    }
+  });
+  hub.onDisconnect((worker_id) => coordinator.unregisterWorker(worker_id));
+}
+
+// src/index.ts
+async function main() {
+  const port = Number(process.env.ATWEBPILOT_WS_PORT ?? 8787);
+  const token = process.env.ATWEBPILOT_WS_TOKEN || void 0;
+  const clock = new DefaultClock();
+  const idGen = new DefaultIdGen();
+  const hub = new LoopbackWSHub({ port, token, clock, idGen });
+  await hub.ready();
+  const coordinator = new Coordinator({ hub, clock, idGen });
+  installWire(hub, coordinator, clock);
+  const server = createMcpServer({ coordinator, hub });
+  await server.connect(new StdioServerTransport());
+  console.error(`[atwebpilot-mcp] ws://127.0.0.1:${port}/worker ready; stdio MCP connected`);
+}
+main().catch((e) => {
+  console.error("[atwebpilot-mcp] fatal", e);
+  process.exit(1);
+});