@browserless.io/mcp 1.6.0 → 1.6.1

package/README.md

@@ -1,10 +1,6 @@
 # Browserless MCP Server
 
-<div align="center">
-
-[![MCP Badge](https://lobehub.com/badge/mcp/browserless-browserless-mcp?style=plastic)](https://lobehub.com/mcp/browserless-browserless-mcp)
-
-</div>
+[![MCP Badge](https://lobehub.com/badge/mcp/browserless-browserless-mcp?style=for-the-badge)](https://lobehub.com/mcp/browserless-browserless-mcp)
 
 MCP (Model Context Protocol) server for [Browserless.io](https://browserless.io) — expose the Browserless smart scraper API to LLM clients like Claude Desktop, Cursor, VS Code, and Windsurf.
 

package/build/src/lib/amplitude.d.ts

@@ -1,3 +1,15 @@
+export interface AmplitudeEvent {
+    event_type: string;
+    time: number;
+    session_id?: number;
+    event_properties: Record<string, unknown> & {
+        token: string;
+    };
+}
+/**
+ * Simple djb2 hash — matches the enterprise repo's session ID hashing.
+ */
+export declare function djb2(str: string): number;
 export declare class AmplitudeHelper {
     private sqsClient?;
     private queueUrl?;

package/build/src/lib/amplitude.js

@@ -1,5 +1,15 @@
 import { SQSClient, SendMessageBatchCommand, } from '@aws-sdk/client-sqs';
 import { randomUUID } from 'node:crypto';
+/**
+ * Simple djb2 hash — matches the enterprise repo's session ID hashing.
+ */
+export function djb2(str) {
+    let hash = 5381;
+    for (let i = 0; i < str.length; i++) {
+        hash = (hash * 33) ^ str.charCodeAt(i);
+    }
+    return hash >>> 0;
+}
 export class AmplitudeHelper {
     sqsClient;
     queueUrl;
@@ -23,10 +33,7 @@ export class AmplitudeHelper {
         this.initialized = true;
     }
     async send(eventName, sessionId, properties) {
-        if (!this.enabled ||
-            !this.initialized ||
-            !this.sqsClient ||
-            !this.queueUrl) {
+        if (!this.enabled || !this.initialized || !this.sqsClient || !this.queueUrl) {
             return false;
         }
         const event = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@browserless.io/mcp",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "description": "MCP (Model Context Protocol) server for the Browserless.io browser automation platform",
   "author": "browserless.io",
   "license": "SSPL-1.0",
@@ -45,7 +45,6 @@
     "build/src/**/*.d.ts",
     "build/src/**/*.md",
     "bin/*",
-    "patches/**",
     "README.md"
   ],
   "scripts": {
@@ -59,7 +58,6 @@
     "coverage": "npm run build && c8 --reporter=text --reporter=html --reporter=lcov --check-coverage --lines 80 --branches 70 --functions 80 mocha",
     "start": "node build/src/index.js",
     "start:http": "TRANSPORT=httpStream PORT=8080 node build/src/index.js",
-    "postinstall": "patch-package",
     "prepack": "npm run build",
     "prepare": "husky",
     "prettier": "prettier '{src,test,bin,.github}/**/*.{js,ts,json,yml,yaml,md}' --log-level error --write"
@@ -74,7 +72,6 @@
     "@aws-sdk/client-sqs": "^3.1053.0",
     "fastmcp": "^4.0.0",
     "ioredis": "^5.10.1",
-    "patch-package": "^8.0.1",
     "ws": "^8.21.0",
     "zod": "^4.4.3"
   },
@@ -105,7 +102,8 @@
     "mocha": {
       "diff": "^8.0.3",
       "minimatch": "^10.2.1",
-      "glob": "^11.0.0"
+      "glob": "^11.0.0",
+      "serialize-javascript": "^7.0.5"
     }
   }
 }

package/build/src/lib/schema-fields.d.ts

@@ -1,10 +0,0 @@
-import { z } from 'zod';
-/**
- * Build the schema for an optional profile field. The NUL refinement protects
- * the session-key separator used in agent-client.ts — a profile name
- * containing NUL could otherwise collide with another key.
- *
- * Dependency-clean (zod only) so it can be shared by the server tools and the
- * published `@browserless.io/mcp/schemas` surface without pulling in fastmcp.
- */
-export declare function profileField(whenLoaded: string, extra?: string): z.ZodOptional<z.ZodString>;

package/build/src/lib/schema-fields.js

@@ -1,27 +0,0 @@
-import { z } from 'zod';
-// NUL is the session-key separator (KEY_SEP) in agent-client.ts. Computed via
-// fromCharCode so the literal control character never appears in source.
-const NUL = String.fromCharCode(0);
-/**
- * Build the schema for an optional profile field. The NUL refinement protects
- * the session-key separator used in agent-client.ts — a profile name
- * containing NUL could otherwise collide with another key.
- *
- * Dependency-clean (zod only) so it can be shared by the server tools and the
- * published `@browserless.io/mcp/schemas` surface without pulling in fastmcp.
- */
-export function profileField(whenLoaded, extra = '') {
-    const description = `Optional name of an authentication profile to hydrate into the browser ${whenLoaded}. ` +
-        "The profile's cookies, localStorage, and IndexedDB are restored into the session before the request runs. " +
-        'The profile must already exist for the API token in use — create one with Browserless.saveProfile in a live agent session first.' +
-        extra;
-    return z
-        .string()
-        .trim()
-        .min(1)
-        .refine((v) => !v.includes(NUL), {
-        message: 'profile must not contain NUL characters',
-    })
-        .optional()
-        .describe(description);
-}

package/build/src/lib/supabase-token-patch.d.ts

@@ -1,6 +0,0 @@
-/**
- * Patch `globalThis.fetch` to extend `expires_in` on Supabase OAuth token
- * responses so clients don't thrash refresh against the ~60s default. Global
- * because FastMCP's OAuthProxy has no fetch hook; matched origin/path-exact.
- */
-export declare function installSupabaseTokenTtlPatch(supabaseUrl: string, ttlSeconds: number): void;

package/build/src/lib/supabase-token-patch.js

@@ -1,33 +0,0 @@
-/**
- * Patch `globalThis.fetch` to extend `expires_in` on Supabase OAuth token
- * responses so clients don't thrash refresh against the ~60s default. Global
- * because FastMCP's OAuthProxy has no fetch hook; matched origin/path-exact.
- */
-export function installSupabaseTokenTtlPatch(supabaseUrl, ttlSeconds) {
-    const supabaseOrigin = new URL(supabaseUrl).origin;
-    const TOKEN_PATHNAME = '/auth/v1/oauth/token';
-    const originalFetch = globalThis.fetch;
-    globalThis.fetch = async (...args) => {
-        const response = await originalFetch(...args);
-        const url = typeof args[0] === 'string'
-            ? args[0]
-            : args[0] instanceof URL
-                ? args[0].toString()
-                : args[0].url;
-        const reqUrl = new URL(url);
-        if (!response.ok ||
-            reqUrl.origin !== supabaseOrigin ||
-            reqUrl.pathname !== TOKEN_PATHNAME) {
-            return response;
-        }
-        const body = (await response.json());
-        if (typeof body.expires_in === 'number' && body.expires_in < ttlSeconds) {
-            body.expires_in = ttlSeconds;
-        }
-        return new Response(JSON.stringify(body), {
-            status: response.status,
-            statusText: response.statusText,
-            headers: response.headers,
-        });
-    };
-}

package/patches/mcp-proxy+6.4.0.patch

@@ -1,31 +0,0 @@
-diff --git a/node_modules/mcp-proxy/dist/stdio-CyOk7u4Q.mjs b/node_modules/mcp-proxy/dist/stdio-CyOk7u4Q.mjs
-index bfd727e..3350845 100644
---- a/node_modules/mcp-proxy/dist/stdio-CyOk7u4Q.mjs
-+++ b/node_modules/mcp-proxy/dist/stdio-CyOk7u4Q.mjs
-@@ -15479,6 +15479,10 @@ const handleStreamRequest = async ({ activeTransports, authenticate, authMiddlew
- 		const sessionId = req.headers["mcp-session-id"];
- 		const activeTransport = sessionId ? activeTransports[sessionId] : void 0;
- 		if (!sessionId) {
-+			if (stateless) {
-+				res.writeHead(405, { Allow: "POST" }).end("Method Not Allowed");
-+				return true;
-+			}
- 			res.writeHead(400).end("No sessionId");
- 			return true;
- 		}
-diff --git a/node_modules/mcp-proxy/src/startHTTPServer.ts b/node_modules/mcp-proxy/src/startHTTPServer.ts
-index 80e8cb7..ac051a1 100644
---- a/node_modules/mcp-proxy/src/startHTTPServer.ts
-+++ b/node_modules/mcp-proxy/src/startHTTPServer.ts
-@@ -686,6 +686,11 @@ const handleStreamRequest = async <T extends ServerLike>({
-       | undefined = sessionId ? activeTransports[sessionId] : undefined;
- 
-     if (!sessionId) {
-+      if (stateless) {
-+        res.writeHead(405, { Allow: "POST" }).end("Method Not Allowed");
-+
-+        return true;
-+      }
-       res.writeHead(400).end("No sessionId");
- 
-       return true;