agent-web-interface 4.4.0 → 4.5.0

package/dist/src/gateway/session-router.js

@@ -0,0 +1,177 @@
+/**
+ * Session Router
+ *
+ * Maps MCP connections to SessionController instances.
+ *
+ * - stdio mode: resolve(undefined) returns a single implicit SessionController
+ * - HTTP mode: resolve(sessionId) looks up by MCP session ID
+ *
+ * Each SessionController owns its own browser lifecycle, configured
+ * independently via BrowserSessionConfig.
+ *
+ * @module gateway/session-router
+ */
+import { SessionController } from '../session/session-controller.js';
+import { getLogger } from '../shared/services/logging.service.js';
+const logger = getLogger();
+const DEFAULT_IDLE_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes
+const DEFAULT_MAX_SESSIONS = 10;
+/**
+ * Maps MCP connections to SessionController instances.
+ */
+export class SessionRouter {
+    sessions = new Map();
+    implicitSession = null;
+    idleTimeoutMs;
+    maxSessions;
+    _onSessionDestroyed;
+    idleCheckTimer;
+    constructor(options) {
+        this.idleTimeoutMs = options?.idleTimeoutMs ?? DEFAULT_IDLE_TIMEOUT_MS;
+        this.maxSessions = options?.maxSessions ?? DEFAULT_MAX_SESSIONS;
+        this._onSessionDestroyed = options?.onSessionDestroyed;
+    }
+    /**
+     * Resolve an MCP session ID to a ToolContext (SessionController).
+     *
+     * - If mcpSessionId is undefined (stdio mode), returns the implicit session
+     * - If mcpSessionId is provided (HTTP mode), looks up by ID
+     */
+    resolve(mcpSessionId) {
+        if (mcpSessionId === undefined) {
+            return this.getOrCreateImplicitSession();
+        }
+        const session = this.sessions.get(mcpSessionId);
+        if (!session) {
+            throw new Error(`Session not found: ${mcpSessionId}`);
+        }
+        session.touch();
+        return session;
+    }
+    /**
+     * Create a new session for an MCP connection.
+     *
+     * @param mcpSessionId - MCP session ID from transport
+     * @returns The created SessionController
+     */
+    // eslint-disable-next-line @typescript-eslint/require-await -- Kept async for API contract with HttpGateway
+    async createSession(mcpSessionId) {
+        if (this.sessions.has(mcpSessionId)) {
+            throw new Error(`Session already exists: ${mcpSessionId}`);
+        }
+        if (this.sessions.size >= this.maxSessions) {
+            throw new Error(`Maximum concurrent sessions (${this.maxSessions}) reached. Close an existing session first.`);
+        }
+        const options = {
+            sessionId: mcpSessionId,
+        };
+        const controller = new SessionController(options);
+        this.sessions.set(mcpSessionId, controller);
+        logger.info('Session created', { sessionId: mcpSessionId });
+        this.startIdleCheck();
+        return controller;
+    }
+    /**
+     * Destroy a session and clean up resources.
+     */
+    async destroySession(mcpSessionId) {
+        const session = this.sessions.get(mcpSessionId);
+        if (!session)
+            return;
+        await session.close();
+        this.sessions.delete(mcpSessionId);
+        logger.info('Session destroyed', { sessionId: mcpSessionId });
+        // Notify the gateway layer so it can clean up transports / MCP servers
+        if (this._onSessionDestroyed) {
+            try {
+                await this._onSessionDestroyed(mcpSessionId);
+            }
+            catch (err) {
+                logger.error('onSessionDestroyed callback failed', err instanceof Error ? err : undefined, {
+                    sessionId: mcpSessionId,
+                });
+            }
+        }
+        if (this.sessions.size === 0) {
+            this.stopIdleCheck();
+        }
+    }
+    /**
+     * Get or create the implicit session for stdio mode.
+     */
+    getOrCreateImplicitSession() {
+        this.implicitSession ??= new SessionController({
+            sessionId: 'stdio',
+        });
+        this.implicitSession.touch();
+        return this.implicitSession;
+    }
+    /**
+     * Get the number of active sessions.
+     */
+    get sessionCount() {
+        return this.sessions.size + (this.implicitSession ? 1 : 0);
+    }
+    /**
+     * Register a callback invoked after a session is destroyed.
+     */
+    setOnSessionDestroyed(cb) {
+        this._onSessionDestroyed = cb;
+    }
+    /**
+     * Shut down all sessions and clean up.
+     */
+    async shutdown() {
+        this.stopIdleCheck();
+        const closePromises = [];
+        for (const session of this.sessions.values()) {
+            closePromises.push(session.close());
+        }
+        if (this.implicitSession) {
+            closePromises.push(this.implicitSession.close());
+            this.implicitSession = null;
+        }
+        await Promise.all(closePromises);
+        this.sessions.clear();
+    }
+    // ---------------------------------------------------------------------------
+    // Idle session cleanup
+    // ---------------------------------------------------------------------------
+    startIdleCheck() {
+        if (this.idleCheckTimer)
+            return;
+        this.idleCheckTimer = setInterval(() => {
+            void this.evictIdleSessions();
+        }, 60_000); // Check every minute
+        this.idleCheckTimer.unref();
+    }
+    stopIdleCheck() {
+        if (this.idleCheckTimer) {
+            clearInterval(this.idleCheckTimer);
+            this.idleCheckTimer = undefined;
+        }
+    }
+    async evictIdleSessions() {
+        const now = Date.now();
+        const toEvict = [];
+        for (const [id, session] of this.sessions) {
+            if (now - session.lastActivity > this.idleTimeoutMs) {
+                toEvict.push(id);
+            }
+        }
+        if (toEvict.length === 0)
+            return;
+        // Evict in parallel — each destroySession operates on a distinct session
+        const results = await Promise.allSettled(toEvict.map((id) => {
+            logger.info('Evicting idle session', { sessionId: id });
+            return this.destroySession(id);
+        }));
+        for (let i = 0; i < results.length; i++) {
+            const result = results[i];
+            if (result.status === 'rejected') {
+                logger.error('Failed to evict session', result.reason instanceof Error ? result.reason : undefined, { sessionId: toEvict[i] });
+            }
+        }
+    }
+}
+//# sourceMappingURL=session-router.js.map

package/dist/src/gateway/session-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-router.js","sourceRoot":"","sources":["../../../src/gateway/session-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,iBAAiB,EAAiC,MAAM,kCAAkC,CAAC;AAEpG,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAElE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAkB3B,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAC7D,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;GAEG;AACH,MAAM,OAAO,aAAa;IACP,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,eAAe,GAA6B,IAAI,CAAC;IACxC,aAAa,CAAS;IACtB,WAAW,CAAS;IAC7B,mBAAmB,CAA+C;IAClE,cAAc,CAAkC;IAExD,YAAY,OAA8B;QACxC,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,uBAAuB,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,oBAAoB,CAAC;QAChE,IAAI,CAAC,mBAAmB,GAAG,OAAO,EAAE,kBAAkB,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,YAAqB;QAC3B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,YAAY,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,4GAA4G;IAC5G,KAAK,CAAC,aAAa,CAAC,YAAoB;QACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,WAAW,6CAA6C,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA6B;YACxC,SAAS,EAAE,YAAY;SACxB,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAE5C,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,YAAoB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QAE9D,uEAAuE;QACvE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE;oBACzF,SAAS,EAAE,YAAY;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,0BAA0B;QAChC,IAAI,CAAC,eAAe,KAAK,IAAI,iBAAiB,CAAC;YAC7C,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,EAA+C;QACnE,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,aAAa,GAAoB,EAAE,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAEtE,cAAc;QACpB,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB;QACjC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,yEAAyE;QACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACjB,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CACH,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CACV,yBAAyB,EACzB,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAC1D,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAC1B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/src/http-entry.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+/**
+ * HTTP Entry Point
+ *
+ * Starts the MCP server with Streamable HTTP transport for multi-agent access.
+ * Use `--transport http --port 3000` to enable.
+ *
+ * Each HTTP client connection gets its own McpServer + SessionController pair,
+ * providing full session isolation for concurrent AI agents. Each session owns
+ * its own browser instance, configured independently via navigate tool params.
+ *
+ * @module http-entry
+ */
+/**
+ * HTTP mode main entry point.
+ *
+ * Called from index.ts when `--transport http` is passed.
+ */
+export declare function main(): Promise<void>;
+//# sourceMappingURL=http-entry.d.ts.map

package/dist/src/http-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-entry.d.ts","sourceRoot":"","sources":["../../src/http-entry.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;GAWG;AAaH;;;;GAIG;AACH,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA0F1C"}

package/dist/src/http-entry.js

@@ -0,0 +1,112 @@
+#!/usr/bin/env node
+/**
+ * HTTP Entry Point
+ *
+ * Starts the MCP server with Streamable HTTP transport for multi-agent access.
+ * Use `--transport http --port 3000` to enable.
+ *
+ * Each HTTP client connection gets its own McpServer + SessionController pair,
+ * providing full session isolation for concurrent AI agents. Each session owns
+ * its own browser instance, configured independently via navigate tool params.
+ *
+ * @module http-entry
+ */
+import http from 'node:http';
+import express from 'express';
+import { getServerConfig } from './server/server-config.js';
+import { SessionRouter } from './gateway/session-router.js';
+import { HttpGateway } from './gateway/http-gateway.js';
+import { sendJsonRpcError } from './gateway/json-rpc-errors.js';
+import { getLogger } from './shared/services/logging.service.js';
+import { cleanupTempFiles } from './lib/temp-file.js';
+const logger = getLogger();
+/**
+ * HTTP mode main entry point.
+ *
+ * Called from index.ts when `--transport http` is passed.
+ */
+export async function main() {
+    const config = getServerConfig();
+    const port = config.port;
+    const host = process.env.HTTP_HOST ?? '127.0.0.1';
+    const router = new SessionRouter();
+    const gateway = new HttpGateway({ router });
+    const app = express();
+    // Allowed origins for DNS rebinding protection (MCP spec MUST requirement).
+    const allowedOriginHosts = new Set(['localhost', '127.0.0.1', '[::1]', host]);
+    app.use('/mcp', express.json(), (req, res, next) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            try {
+                const originUrl = new URL(origin);
+                if (!allowedOriginHosts.has(originUrl.hostname)) {
+                    sendJsonRpcError(res, 403, -32000, 'Forbidden: Origin not allowed');
+                    return;
+                }
+            }
+            catch {
+                sendJsonRpcError(res, 403, -32000, 'Forbidden: Invalid Origin header');
+                return;
+            }
+        }
+        next();
+    });
+    // MCP endpoint
+    app.all('/mcp', async (req, res) => {
+        try {
+            if (req.method === 'POST') {
+                await gateway.handlePost(req, res);
+            }
+            else if (req.method === 'GET') {
+                await gateway.handleGet(req, res);
+            }
+            else if (req.method === 'DELETE') {
+                await gateway.handleDelete(req, res);
+            }
+            else {
+                sendJsonRpcError(res, 405, -32000, 'Method not allowed');
+            }
+        }
+        catch (err) {
+            logger.error('MCP request error', err instanceof Error ? err : undefined);
+            if (!res.headersSent) {
+                sendJsonRpcError(res, 500, -32603, 'Internal server error');
+            }
+        }
+    });
+    // Health endpoint
+    app.get('/health', (_req, res) => {
+        res.json({ status: 'ok', sessions: gateway.sessionCount });
+    });
+    const server = http.createServer(app);
+    await new Promise((resolve) => {
+        server.listen(port, host, () => {
+            logger.info(`HTTP MCP server listening on ${host}:${port}`);
+            console.error(`HTTP MCP server listening on http://${host}:${port}/mcp`);
+            resolve();
+        });
+    });
+    const shutdown = async (signal) => {
+        console.error(`Shutting down... (${signal})`);
+        // Hard deadline — if graceful shutdown hangs, force exit
+        const deadline = setTimeout(() => {
+            console.error('Graceful shutdown timed out after 10s, forcing exit');
+            process.exit(1);
+        }, 10_000);
+        deadline.unref();
+        try {
+            // Shut down gateway sessions first (closes MCP servers + transports + browsers)
+            await gateway.shutdown();
+            await cleanupTempFiles();
+            server.close();
+            process.exit(0);
+        }
+        catch (err) {
+            console.error('Error during shutdown:', err);
+            process.exit(1);
+        }
+    };
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+}
+//# sourceMappingURL=http-entry.js.map

package/dist/src/http-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-entry.js","sourceRoot":"","sources":["../../src/http-entry.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAE3B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,WAAW,CAAC;IAElD,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAE9E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChD,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,eAAe;IACf,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAChC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAEtC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,CAAC,uCAAuC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC;YACzE,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAE9C,yDAAyD;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,IAAI,CAAC;YACH,gFAAgF;YAChF,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,gBAAgB,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/src/index.d.ts

@@ -4,14 +4,5 @@
  *
  * Main entry point - initializes the MCP server with Puppeteer-based browser automation.
  */
-import { SessionStore } from './server/session-store.js';
-import { SessionWorkerBinding } from './session/session-worker-binding.js';
-/**
- * Get the SessionStore instance for use in tool handlers.
- */
-export declare function getSessionStore(): SessionStore;
-/**
- * Get the SessionWorkerBinding instance.
- */
-export declare function getSessionBinding(): SessionWorkerBinding;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAUH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAsB,MAAM,qCAAqC,CAAC;AAgB/F;;GAEG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAE9C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,oBAAoB,CAExD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG"}

package/dist/src/index.js

@@ -5,66 +5,11 @@
  * Main entry point - initializes the MCP server with Puppeteer-based browser automation.
  */
 import { BrowserAutomationServer } from './server/mcp-server.js';
-import { initServerConfig, getSessionManager, getServerConfig, ensureBrowserForTools, isSessionManagerInitialized, } from './server/server-config.js';
-import { SessionStore } from './server/session-store.js';
-import { SessionWorkerBinding } from './session/session-worker-binding.js';
-import { getLogger } from './shared/services/logging.service.js';
+import { initServerConfig } from './server/server-config.js';
 import { cleanupTempFiles } from './lib/temp-file.js';
-const logger = getLogger();
-/** Module-level session store for tenant isolation */
-const sessionStore = new SessionStore();
-/** Isolation mode from environment (default: 'context') */
-const isolationMode = process.env.ISOLATION_MODE === 'process' ? 'process' : 'context';
-/** Session-to-worker binding adapter */
-const sessionBinding = new SessionWorkerBinding(isolationMode);
-/**
- * Get the SessionStore instance for use in tool handlers.
- */
-export function getSessionStore() {
-    return sessionStore;
-}
-/**
- * Get the SessionWorkerBinding instance.
- */
-export function getSessionBinding() {
-    return sessionBinding;
-}
-import { initializeToolContext, 
-// Tool handlers
-listPages, closePage, closeSession, navigate, goBack, goForward, reload, captureSnapshot, findElements, getNodeDetails, scrollElementIntoView, scrollPage, click, type, press, select, hover, drag, wheel, getFormUnderstanding, getFieldContext, takeScreenshot, inspectCanvas, 
-// Input schemas only (all outputs are XML strings now)
-ListPagesInputSchema, ClosePageInputSchema, CloseSessionInputSchema, NavigateInputSchema, GoBackInputSchema, GoForwardInputSchema, ReloadInputSchema, CaptureSnapshotInputSchema, FindElementsInputSchema, GetNodeDetailsInputSchema, ScrollElementIntoViewInputSchemaBase, ScrollPageInputSchema, ClickInputSchemaBase, TypeInputSchemaBase, PressInputSchema, SelectInputSchemaBase, HoverInputSchemaBase, DragInputSchemaBase, WheelInputSchemaBase, GetFormUnderstandingInputSchema, GetFieldContextInputSchema, TakeScreenshotInputSchemaBase, InspectCanvasInputSchemaBase, } from './tools/index.js';
-/**
- * Wrap a tool handler with lazy browser initialization.
- * Works with both sync and async handlers - sync return values are automatically
- * wrapped in a resolved promise by the async function.
- * Includes error context logging when browser initialization fails.
- */
-function withLazyInit(handler, toolName) {
-    return async (input) => {
-        try {
-            await ensureBrowserForTools();
-        }
-        catch (error) {
-            const config = getServerConfig();
-            const mode = config.autoConnect
-                ? 'autoConnect'
-                : config.browserUrl || config.wsEndpoint
-                    ? 'connect'
-                    : 'launch';
-            logger.error('Browser initialization failed during tool execution', error instanceof Error ? error : undefined, {
-                tool: toolName,
-                mode,
-                headless: config.headless,
-                autoConnect: config.autoConnect,
-                browserUrl: config.browserUrl,
-                wsEndpoint: config.wsEndpoint,
-            });
-            throw error;
-        }
-        return handler(input);
-    };
-}
+import { VERSION } from './shared/version.js';
+import { SessionRouter } from './gateway/session-router.js';
+import { registerAllTools } from './tools/tool-registration.js';
 /**
  * Initialize all services and start the server
  */
@@ -72,183 +17,35 @@ function initializeServer() {
     // Parse CLI arguments and initialize server configuration
     initServerConfig(process.argv.slice(2));
     // Create MCP server shell
-    // Note: Don't pass tools/logging capabilities - McpServer registers them automatically
-    // when tools are registered via .tool() or .registerTool()
     const server = new BrowserAutomationServer({
         name: 'agent-web-interface',
-        version: '3.0.0',
-    });
-    // Wire SessionStore to MCP lifecycle events
-    server.on('session:start', (event) => {
-        const { clientInfo } = event;
-        const sessionId = sessionStore.createSession(clientInfo?.name ?? 'unknown', clientInfo);
-        const session = sessionStore.getSession(sessionId);
-        // Route session start through the isolation binding.
-        // Browser init is lazy (first tool call), so context creation may fail here
-        // if the browser isn't launched yet. That's OK — the tool's withLazyInit
-        // will ensure the browser is ready before any real work happens.
-        sessionBinding
-            .onSessionStart(sessionId, getSessionManager())
-            .then((result) => {
-            if (result.browserContext) {
-                session.browser_context = result.browserContext;
-            }
-        })
-            .catch((err) => {
-            logger.error('Failed to initialize session isolation', err instanceof Error ? err : undefined, { sessionId, isolationMode });
-        });
+        version: VERSION,
     });
-    server.on('session:end', () => {
-        const session = sessionStore.getDefaultSession();
-        if (session) {
-            sessionBinding.onSessionEnd(session.session_id);
-            void sessionStore.destroySession(session.session_id);
-        }
-    });
-    // Initialize session manager and tools
-    const session = getSessionManager();
-    initializeToolContext(session);
-    // ============================================================================
-    // SESSION TOOLS
-    // ============================================================================
-    server.registerTool('list_pages', {
-        title: 'List Pages',
-        description: 'List all open browser pages with their page_id, URL, and title.',
-        inputSchema: ListPagesInputSchema.shape,
-    }, withLazyInit(listPages, 'list_pages'));
-    server.registerTool('close_page', {
-        title: 'Close Page',
-        description: 'Close a browser tab. Use list_pages first to get the page_id.',
-        inputSchema: ClosePageInputSchema.shape,
-    }, withLazyInit(closePage, 'close_page'));
-    server.registerTool('close_session', {
-        title: 'Close Session',
-        description: 'Close the entire browser and clear all state.',
-        inputSchema: CloseSessionInputSchema.shape,
-    }, withLazyInit(closeSession, 'close_session'));
-    // ============================================================================
-    // NAVIGATION TOOLS
-    // ============================================================================
-    server.registerTool('navigate', {
-        title: 'Navigate',
-        description: 'Go to a URL. Returns page snapshot with interactive elements.',
-        inputSchema: NavigateInputSchema.shape,
-    }, withLazyInit(navigate, 'navigate'));
-    server.registerTool('go_back', {
-        title: 'Go Back',
-        description: 'Go back one page in browser history.',
-        inputSchema: GoBackInputSchema.shape,
-    }, withLazyInit(goBack, 'go_back'));
-    server.registerTool('go_forward', {
-        title: 'Go Forward',
-        description: 'Go forward one page in browser history.',
-        inputSchema: GoForwardInputSchema.shape,
-    }, withLazyInit(goForward, 'go_forward'));
-    server.registerTool('reload', {
-        title: 'Reload',
-        description: 'Refresh the current page.',
-        inputSchema: ReloadInputSchema.shape,
-    }, withLazyInit(reload, 'reload'));
-    server.registerTool('snapshot', {
-        title: 'Snapshot',
-        description: 'Re-capture the page state without performing any action. Use when the page may have changed on its own (timers, live updates, animations).',
-        inputSchema: CaptureSnapshotInputSchema.shape,
-    }, withLazyInit(captureSnapshot, 'snapshot'));
-    // ============================================================================
-    // OBSERVATION TOOLS
-    // ============================================================================
-    server.registerTool('find', {
-        title: 'Find',
-        description: 'Search for interactive elements OR read page text content. Filter by `kind` (button, link, textbox, canvas), `label` (case-insensitive substring match), or `region` (header, main, footer).',
-        inputSchema: FindElementsInputSchema.shape,
-    }, withLazyInit(findElements, 'find'));
-    server.registerTool('get_element', {
-        title: 'Get Element',
-        description: 'Get complete details for one element: exact position, size, state, attributes.',
-        inputSchema: GetNodeDetailsInputSchema.shape,
-    }, withLazyInit(getNodeDetails, 'get_element'));
-    server.registerTool('screenshot', {
-        title: 'Screenshot',
-        description: 'Capture a screenshot of the current page or a specific element.',
-        inputSchema: TakeScreenshotInputSchemaBase.shape,
-    }, withLazyInit(takeScreenshot, 'screenshot'));
-    // ============================================================================
-    // INTERACTION TOOLS
-    // ============================================================================
-    server.registerTool('scroll_to', {
-        title: 'Scroll To',
-        description: 'Scroll until a specific element is visible in the viewport.',
-        inputSchema: ScrollElementIntoViewInputSchemaBase.shape,
-    }, withLazyInit(scrollElementIntoView, 'scroll_to'));
-    server.registerTool('scroll', {
-        title: 'Scroll',
-        description: 'Scroll the viewport up or down by pixels.',
-        inputSchema: ScrollPageInputSchema.shape,
-    }, withLazyInit(scrollPage, 'scroll'));
-    server.registerTool('click', {
-        title: 'Click Element',
-        description: 'Click an element or at viewport coordinates.',
-        inputSchema: ClickInputSchemaBase.shape,
-    }, withLazyInit(click, 'click'));
-    server.registerTool('type', {
-        title: 'Type Text',
-        description: 'Type text into an input field or text area.',
-        inputSchema: TypeInputSchemaBase.shape,
-    }, withLazyInit(type, 'type'));
-    server.registerTool('press', {
-        title: 'Press Key',
-        description: 'Press a keyboard key with optional modifiers.',
-        inputSchema: PressInputSchema.shape,
-    }, withLazyInit(press, 'press'));
-    server.registerTool('select', {
-        title: 'Select Option',
-        description: 'Choose an option from a dropdown menu by value or visible text.',
-        inputSchema: SelectInputSchemaBase.shape,
-    }, withLazyInit(select, 'select'));
-    server.registerTool('hover', {
-        title: 'Hover Element',
-        description: 'Move mouse over an element without clicking. Triggers hover menus and tooltips.',
-        inputSchema: HoverInputSchemaBase.shape,
-    }, withLazyInit(hover, 'hover'));
-    server.registerTool('drag', {
-        title: 'Drag',
-        description: 'Drag from one point to another.',
-        inputSchema: DragInputSchemaBase.shape,
-    }, withLazyInit(drag, 'drag'));
-    server.registerTool('wheel', {
-        title: 'Wheel',
-        description: 'Dispatch a mouse wheel event at specific coordinates. Use for scroll-to-zoom (with Control modifier) or horizontal scrolling.',
-        inputSchema: WheelInputSchemaBase.shape,
-    }, withLazyInit(wheel, 'wheel'));
-    // ============================================================================
-    // CANVAS INSPECTION TOOLS
-    // ============================================================================
-    server.registerTool('inspect_canvas', {
-        title: 'Inspect Canvas',
-        description: 'Analyze a canvas element: auto-detect the rendering library, query its scene graph, and return an annotated screenshot with coordinate grid overlay.',
-        inputSchema: InspectCanvasInputSchemaBase.shape,
-    }, withLazyInit(inspectCanvas, 'inspect_canvas'));
-    // ============================================================================
-    // FORM UNDERSTANDING TOOLS
-    // ============================================================================
-    server.registerTool('get_form', {
-        title: 'Get Form',
-        description: 'Analyze all forms on the page: fields, required inputs, validation rules, and field dependencies.',
-        inputSchema: GetFormUnderstandingInputSchema.shape,
-    }, withLazyInit(getFormUnderstanding, 'get_form'));
-    server.registerTool('get_field', {
-        title: 'Get Field',
-        description: 'Get detailed info about one form field: purpose, valid input formats, dependencies, and suggested values.',
-        inputSchema: GetFieldContextInputSchema.shape,
-    }, withLazyInit(getFieldContext, 'get_field'));
-    return server;
+    // Create session router (stdio mode — implicit single session)
+    const router = new SessionRouter();
+    // Register all browser automation tools
+    // Browser init is session-scoped: each SessionController owns its own
+    // SessionManager and lazily launches/connects via ctx.ensureBrowser().
+    registerAllTools(server, () => router.resolve());
+    return { server, router };
 }
 /**
  * Main entry point
  */
 async function main() {
     try {
-        const server = initializeServer();
+        // Check for HTTP transport mode before initializing the stdio server.
+        // We parse early to detect the transport flag, then delegate to http-entry.
+        const transportIdx = process.argv.indexOf('--transport');
+        const transportArg = transportIdx !== -1 ? process.argv[transportIdx + 1] : undefined;
+        const isHttp = transportArg === 'http' || process.env.TRANSPORT === 'http';
+        if (isHttp) {
+            // Initialize config first so http-entry can read it
+            initServerConfig(process.argv.slice(2));
+            const { main: httpMain } = await import('./http-entry.js');
+            return await httpMain();
+        }
+        const { server, router } = initializeServer();
         await server.start();
         // Handle shutdown gracefully
         const shutdown = (signal) => {
@@ -256,11 +53,7 @@ async function main() {
             void (async () => {
                 try {
                     await cleanupTempFiles();
-                    // Shutdown browser session first (only if initialized)
-                    if (isSessionManagerInitialized()) {
-                        const session = getSessionManager();
-                        await session.shutdown();
-                    }
+                    await router.shutdown();
                     await server.stop();
                     process.exit(0);
                 }