agent-web-interface 4.4.0 → 4.5.1

package/dist/src/gateway/session-router.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Session Router
+ *
+ * Maps MCP connections to SessionController instances.
+ *
+ * - stdio mode: resolve(undefined) returns a single implicit SessionController
+ * - HTTP mode: resolve(sessionId) looks up by MCP session ID
+ *
+ * Each SessionController owns its own browser lifecycle, configured
+ * independently via BrowserSessionConfig.
+ *
+ * @module gateway/session-router
+ */
+import { SessionController } from '../session/session-controller.js';
+import type { ToolContext } from '../tools/tool-context.types.js';
+/**
+ * Session Router configuration.
+ */
+export interface SessionRouterOptions {
+    /** Session idle timeout in ms (default: 30 minutes) */
+    idleTimeoutMs?: number;
+    /** Maximum concurrent sessions (default: 10) */
+    maxSessions?: number;
+    /**
+     * Called after a session is destroyed (e.g., by idle eviction).
+     * Allows the gateway layer to clean up associated resources
+     * (transports, MCP servers) that the router does not own.
+     */
+    onSessionDestroyed?: (sessionId: string) => void | Promise<void>;
+}
+/**
+ * Maps MCP connections to SessionController instances.
+ */
+export declare class SessionRouter {
+    private readonly sessions;
+    private implicitSession;
+    private readonly idleTimeoutMs;
+    private readonly maxSessions;
+    private _onSessionDestroyed?;
+    private idleCheckTimer?;
+    constructor(options?: SessionRouterOptions);
+    /**
+     * Resolve an MCP session ID to a ToolContext (SessionController).
+     *
+     * - If mcpSessionId is undefined (stdio mode), returns the implicit session
+     * - If mcpSessionId is provided (HTTP mode), looks up by ID
+     */
+    resolve(mcpSessionId?: string): ToolContext;
+    /**
+     * Create a new session for an MCP connection.
+     *
+     * @param mcpSessionId - MCP session ID from transport
+     * @returns The created SessionController
+     */
+    createSession(mcpSessionId: string): Promise<SessionController>;
+    /**
+     * Destroy a session and clean up resources.
+     */
+    destroySession(mcpSessionId: string): Promise<void>;
+    /**
+     * Get or create the implicit session for stdio mode.
+     */
+    private getOrCreateImplicitSession;
+    /**
+     * Get the number of active sessions.
+     */
+    get sessionCount(): number;
+    /**
+     * Register a callback invoked after a session is destroyed.
+     */
+    setOnSessionDestroyed(cb: (sessionId: string) => void | Promise<void>): void;
+    /**
+     * Shut down all sessions and clean up.
+     */
+    shutdown(): Promise<void>;
+    private startIdleCheck;
+    private stopIdleCheck;
+    private evictIdleSessions;
+}
+//# sourceMappingURL=session-router.d.ts.map

package/dist/src/gateway/session-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-router.d.ts","sourceRoot":"","sources":["../../../src/gateway/session-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,iBAAiB,EAAiC,MAAM,kCAAkC,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAKlE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAKD;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,eAAe,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,mBAAmB,CAAC,CAA8C;IAC1E,OAAO,CAAC,cAAc,CAAC,CAAiC;gBAE5C,OAAO,CAAC,EAAE,oBAAoB;IAM1C;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,WAAW;IAc3C;;;;;OAKG;IAEG,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAwBrE;;OAEG;IACG,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBzD;;OAEG;IACH,OAAO,CAAC,0BAA0B;IAQlC;;OAEG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED;;OAEG;IACH,qBAAqB,CAAC,EAAE,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAI5E;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB/B,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,aAAa;YAOP,iBAAiB;CA4BhC"}

package/dist/src/gateway/session-router.js

@@ -0,0 +1,177 @@
+/**
+ * Session Router
+ *
+ * Maps MCP connections to SessionController instances.
+ *
+ * - stdio mode: resolve(undefined) returns a single implicit SessionController
+ * - HTTP mode: resolve(sessionId) looks up by MCP session ID
+ *
+ * Each SessionController owns its own browser lifecycle, configured
+ * independently via BrowserSessionConfig.
+ *
+ * @module gateway/session-router
+ */
+import { SessionController } from '../session/session-controller.js';
+import { getLogger } from '../shared/services/logging.service.js';
+const logger = getLogger();
+const DEFAULT_IDLE_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes
+const DEFAULT_MAX_SESSIONS = 10;
+/**
+ * Maps MCP connections to SessionController instances.
+ */
+export class SessionRouter {
+    sessions = new Map();
+    implicitSession = null;
+    idleTimeoutMs;
+    maxSessions;
+    _onSessionDestroyed;
+    idleCheckTimer;
+    constructor(options) {
+        this.idleTimeoutMs = options?.idleTimeoutMs ?? DEFAULT_IDLE_TIMEOUT_MS;
+        this.maxSessions = options?.maxSessions ?? DEFAULT_MAX_SESSIONS;
+        this._onSessionDestroyed = options?.onSessionDestroyed;
+    }
+    /**
+     * Resolve an MCP session ID to a ToolContext (SessionController).
+     *
+     * - If mcpSessionId is undefined (stdio mode), returns the implicit session
+     * - If mcpSessionId is provided (HTTP mode), looks up by ID
+     */
+    resolve(mcpSessionId) {
+        if (mcpSessionId === undefined) {
+            return this.getOrCreateImplicitSession();
+        }
+        const session = this.sessions.get(mcpSessionId);
+        if (!session) {
+            throw new Error(`Session not found: ${mcpSessionId}`);
+        }
+        session.touch();
+        return session;
+    }
+    /**
+     * Create a new session for an MCP connection.
+     *
+     * @param mcpSessionId - MCP session ID from transport
+     * @returns The created SessionController
+     */
+    // eslint-disable-next-line @typescript-eslint/require-await -- Kept async for API contract with HttpGateway
+    async createSession(mcpSessionId) {
+        if (this.sessions.has(mcpSessionId)) {
+            throw new Error(`Session already exists: ${mcpSessionId}`);
+        }
+        if (this.sessions.size >= this.maxSessions) {
+            throw new Error(`Maximum concurrent sessions (${this.maxSessions}) reached. Close an existing session first.`);
+        }
+        const options = {
+            sessionId: mcpSessionId,
+        };
+        const controller = new SessionController(options);
+        this.sessions.set(mcpSessionId, controller);
+        logger.info('Session created', { sessionId: mcpSessionId });
+        this.startIdleCheck();
+        return controller;
+    }
+    /**
+     * Destroy a session and clean up resources.
+     */
+    async destroySession(mcpSessionId) {
+        const session = this.sessions.get(mcpSessionId);
+        if (!session)
+            return;
+        await session.close();
+        this.sessions.delete(mcpSessionId);
+        logger.info('Session destroyed', { sessionId: mcpSessionId });
+        // Notify the gateway layer so it can clean up transports / MCP servers
+        if (this._onSessionDestroyed) {
+            try {
+                await this._onSessionDestroyed(mcpSessionId);
+            }
+            catch (err) {
+                logger.error('onSessionDestroyed callback failed', err instanceof Error ? err : undefined, {
+                    sessionId: mcpSessionId,
+                });
+            }
+        }
+        if (this.sessions.size === 0) {
+            this.stopIdleCheck();
+        }
+    }
+    /**
+     * Get or create the implicit session for stdio mode.
+     */
+    getOrCreateImplicitSession() {
+        this.implicitSession ??= new SessionController({
+            sessionId: 'stdio',
+        });
+        this.implicitSession.touch();
+        return this.implicitSession;
+    }
+    /**
+     * Get the number of active sessions.
+     */
+    get sessionCount() {
+        return this.sessions.size + (this.implicitSession ? 1 : 0);
+    }
+    /**
+     * Register a callback invoked after a session is destroyed.
+     */
+    setOnSessionDestroyed(cb) {
+        this._onSessionDestroyed = cb;
+    }
+    /**
+     * Shut down all sessions and clean up.
+     */
+    async shutdown() {
+        this.stopIdleCheck();
+        const closePromises = [];
+        for (const session of this.sessions.values()) {
+            closePromises.push(session.close());
+        }
+        if (this.implicitSession) {
+            closePromises.push(this.implicitSession.close());
+            this.implicitSession = null;
+        }
+        await Promise.all(closePromises);
+        this.sessions.clear();
+    }
+    // ---------------------------------------------------------------------------
+    // Idle session cleanup
+    // ---------------------------------------------------------------------------
+    startIdleCheck() {
+        if (this.idleCheckTimer)
+            return;
+        this.idleCheckTimer = setInterval(() => {
+            void this.evictIdleSessions();
+        }, 60_000); // Check every minute
+        this.idleCheckTimer.unref();
+    }
+    stopIdleCheck() {
+        if (this.idleCheckTimer) {
+            clearInterval(this.idleCheckTimer);
+            this.idleCheckTimer = undefined;
+        }
+    }
+    async evictIdleSessions() {
+        const now = Date.now();
+        const toEvict = [];
+        for (const [id, session] of this.sessions) {
+            if (now - session.lastActivity > this.idleTimeoutMs) {
+                toEvict.push(id);
+            }
+        }
+        if (toEvict.length === 0)
+            return;
+        // Evict in parallel — each destroySession operates on a distinct session
+        const results = await Promise.allSettled(toEvict.map((id) => {
+            logger.info('Evicting idle session', { sessionId: id });
+            return this.destroySession(id);
+        }));
+        for (let i = 0; i < results.length; i++) {
+            const result = results[i];
+            if (result.status === 'rejected') {
+                logger.error('Failed to evict session', result.reason instanceof Error ? result.reason : undefined, { sessionId: toEvict[i] });
+            }
+        }
+    }
+}
+//# sourceMappingURL=session-router.js.map

package/dist/src/gateway/session-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-router.js","sourceRoot":"","sources":["../../../src/gateway/session-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,iBAAiB,EAAiC,MAAM,kCAAkC,CAAC;AAEpG,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAElE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAkB3B,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAC7D,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC;;GAEG;AACH,MAAM,OAAO,aAAa;IACP,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,eAAe,GAA6B,IAAI,CAAC;IACxC,aAAa,CAAS;IACtB,WAAW,CAAS;IAC7B,mBAAmB,CAA+C;IAClE,cAAc,CAAkC;IAExD,YAAY,OAA8B;QACxC,IAAI,CAAC,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,uBAAuB,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,oBAAoB,CAAC;QAChE,IAAI,CAAC,mBAAmB,GAAG,OAAO,EAAE,kBAAkB,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,YAAqB;QAC3B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,YAAY,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,4GAA4G;IAC5G,KAAK,CAAC,aAAa,CAAC,YAAoB;QACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,WAAW,6CAA6C,CAC9F,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA6B;YACxC,SAAS,EAAE,YAAY;SACxB,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAE5C,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,YAAoB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;QAE9D,uEAAuE;QACvE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE;oBACzF,SAAS,EAAE,YAAY;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,0BAA0B;QAChC,IAAI,CAAC,eAAe,KAAK,IAAI,iBAAiB,CAAC;YAC7C,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,EAA+C;QACnE,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,aAAa,GAAoB,EAAE,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAEtE,cAAc;QACpB,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB;QACjC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,yEAAyE;QACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACjB,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CACH,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,CAAC,KAAK,CACV,yBAAyB,EACzB,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAC1D,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAC1B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/src/http-entry.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+/**
+ * HTTP Entry Point
+ *
+ * Starts the MCP server with Streamable HTTP transport for multi-agent access.
+ * Use `--transport http --port 3000` to enable.
+ *
+ * Each HTTP client connection gets its own McpServer + SessionController pair,
+ * providing full session isolation for concurrent AI agents. Each session owns
+ * its own browser instance, configured independently via navigate tool params.
+ *
+ * @module http-entry
+ */
+/**
+ * HTTP mode main entry point.
+ *
+ * Called from index.ts when `--transport http` is passed.
+ */
+export declare function main(): Promise<void>;
+//# sourceMappingURL=http-entry.d.ts.map

package/dist/src/http-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-entry.d.ts","sourceRoot":"","sources":["../../src/http-entry.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;GAWG;AAaH;;;;GAIG;AACH,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CA0F1C"}

package/dist/src/http-entry.js

@@ -0,0 +1,112 @@
+#!/usr/bin/env node
+/**
+ * HTTP Entry Point
+ *
+ * Starts the MCP server with Streamable HTTP transport for multi-agent access.
+ * Use `--transport http --port 3000` to enable.
+ *
+ * Each HTTP client connection gets its own McpServer + SessionController pair,
+ * providing full session isolation for concurrent AI agents. Each session owns
+ * its own browser instance, configured independently via navigate tool params.
+ *
+ * @module http-entry
+ */
+import http from 'node:http';
+import express from 'express';
+import { getServerConfig } from './server/server-config.js';
+import { SessionRouter } from './gateway/session-router.js';
+import { HttpGateway } from './gateway/http-gateway.js';
+import { sendJsonRpcError } from './gateway/json-rpc-errors.js';
+import { getLogger } from './shared/services/logging.service.js';
+import { cleanupTempFiles } from './lib/temp-file.js';
+const logger = getLogger();
+/**
+ * HTTP mode main entry point.
+ *
+ * Called from index.ts when `--transport http` is passed.
+ */
+export async function main() {
+    const config = getServerConfig();
+    const port = config.port;
+    const host = process.env.HTTP_HOST ?? '127.0.0.1';
+    const router = new SessionRouter();
+    const gateway = new HttpGateway({ router });
+    const app = express();
+    // Allowed origins for DNS rebinding protection (MCP spec MUST requirement).
+    const allowedOriginHosts = new Set(['localhost', '127.0.0.1', '[::1]', host]);
+    app.use('/mcp', express.json(), (req, res, next) => {
+        const origin = req.headers.origin;
+        if (origin) {
+            try {
+                const originUrl = new URL(origin);
+                if (!allowedOriginHosts.has(originUrl.hostname)) {
+                    sendJsonRpcError(res, 403, -32000, 'Forbidden: Origin not allowed');
+                    return;
+                }
+            }
+            catch {
+                sendJsonRpcError(res, 403, -32000, 'Forbidden: Invalid Origin header');
+                return;
+            }
+        }
+        next();
+    });
+    // MCP endpoint
+    app.all('/mcp', async (req, res) => {
+        try {
+            if (req.method === 'POST') {
+                await gateway.handlePost(req, res);
+            }
+            else if (req.method === 'GET') {
+                await gateway.handleGet(req, res);
+            }
+            else if (req.method === 'DELETE') {
+                await gateway.handleDelete(req, res);
+            }
+            else {
+                sendJsonRpcError(res, 405, -32000, 'Method not allowed');
+            }
+        }
+        catch (err) {
+            logger.error('MCP request error', err instanceof Error ? err : undefined);
+            if (!res.headersSent) {
+                sendJsonRpcError(res, 500, -32603, 'Internal server error');
+            }
+        }
+    });
+    // Health endpoint
+    app.get('/health', (_req, res) => {
+        res.json({ status: 'ok', sessions: gateway.sessionCount });
+    });
+    const server = http.createServer(app);
+    await new Promise((resolve) => {
+        server.listen(port, host, () => {
+            logger.info(`HTTP MCP server listening on ${host}:${port}`);
+            console.error(`HTTP MCP server listening on http://${host}:${port}/mcp`);
+            resolve();
+        });
+    });
+    const shutdown = async (signal) => {
+        console.error(`Shutting down... (${signal})`);
+        // Hard deadline — if graceful shutdown hangs, force exit
+        const deadline = setTimeout(() => {
+            console.error('Graceful shutdown timed out after 10s, forcing exit');
+            process.exit(1);
+        }, 10_000);
+        deadline.unref();
+        try {
+            // Shut down gateway sessions first (closes MCP servers + transports + browsers)
+            await gateway.shutdown();
+            await cleanupTempFiles();
+            server.close();
+            process.exit(0);
+        }
+        catch (err) {
+            console.error('Error during shutdown:', err);
+            process.exit(1);
+        }
+    };
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+}
+//# sourceMappingURL=http-entry.js.map

package/dist/src/http-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-entry.js","sourceRoot":"","sources":["../../src/http-entry.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAE3B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,WAAW,CAAC;IAElD,MAAM,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAE9E,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAClC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChD,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,eAAe;IACf,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAChC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC1E,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAEtC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,CAAC,uCAAuC,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC;YACzE,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,qBAAqB,MAAM,GAAG,CAAC,CAAC;QAE9C,yDAAyD;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,IAAI,CAAC;YACH,gFAAgF;YAChF,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,gBAAgB,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/src/index.d.ts

@@ -4,14 +4,5 @@
  *
  * Main entry point - initializes the MCP server with Puppeteer-based browser automation.
  */
-import { SessionStore } from './server/session-store.js';
-import { SessionWorkerBinding } from './session/session-worker-binding.js';
-/**
- * Get the SessionStore instance for use in tool handlers.
- */
-export declare function getSessionStore(): SessionStore;
-/**
- * Get the SessionWorkerBinding instance.
- */
-export declare function getSessionBinding(): SessionWorkerBinding;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAUH,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAsB,MAAM,qCAAqC,CAAC;AAgB/F;;GAEG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAE9C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,oBAAoB,CAExD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG"}