cdp-toolkit 1.9.5 → 1.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cdp-toolkit",
-  "version": "1.9.5",
+  "version": "1.10.0",
   "description": "A lightweight chrome-devtools-mcp alternative: an MCP server + CLI that drives the tabs you name, one target per call over one direct WebSocket, with a bounded timeout on every call, so a stuck page can't wedge your agent or force a /mcp restart. Chrome over CDP and Firefox over WebDriver BiDi, with tools a backend can't run absent from tools/list rather than throwing mid-task. 45 tools including built-in network mocking, a cookie group, tab leases with human-activity detection, real HTML5 drag-and-drop, raw mouse/scroll dispatch, downloads, permission grants, and tab-to-video screen recording so several agents can drive one browser without stealing each other's tabs or a human's. No Puppeteer, no all-target fan-out.",
   "type": "module",
   "license": "MIT",

package/src/bidi/client.ts

@@ -88,6 +88,17 @@ export class BidiConnection {
     return this.refCount;
   }
 
+  /**
+   * True while this connection still has a live socket. Goes false once the
+   * socket closes (ws.onclose) or dispose() runs — both set `closed` and
+   * reject all in-flight calls. getConnection uses this to skip and evict a
+   * dead cached connection so the next call re-dials a fresh session instead
+   * of reusing a socket that can only reject with "connection not open".
+   */
+  get isOpen(): boolean {
+    return !this.closed && this.ws !== undefined;
+  }
+
   connect(): Promise<this> {
     return new Promise((resolve, reject) => {
       const ws = new WebSocket(this.wsUrl);

package/src/bidi/driver.ts

@@ -322,7 +322,13 @@ const BIDI_CAPABILITIES: ReadonlySet<Capability> = new Set<Capability>([
 const connections = new Map<string, BidiConnection>();
 async function getConnection(endpoint: string, timeoutMs?: number): Promise<BidiConnection> {
   const existing = connections.get(endpoint);
-  if (existing) { existing.retain(); return existing; }
+  if (existing && existing.isOpen) { existing.retain(); return existing; }
+  // A cached connection whose socket has died (ws.onclose fired) can only reject every
+  // send() with "connection not open" — reusing it would strand the endpoint permanently.
+  // Evict it so the code below re-dials and creates a fresh BiDi session. No cleanup is
+  // needed: a dead connection already had `closed` set and rejectAll() cleared its per-call
+  // timers, and BidiConnection holds no heartbeat/keepalive resource to leak (see client.ts).
+  if (existing) connections.delete(endpoint);
   // Firefox 153's default unhandledPromptBehavior is "dismiss": a page-blocking alert()/confirm()
   // gets auto-dismissed before handleDialog() ever runs, and Firefox's own userPromptOpened event
   // reports handler:"dismiss" on it (verified: a bare session.new left "no such alert" on the very

package/src/bidi/launch.ts

@@ -22,7 +22,7 @@
  * node:os and node:path.
  */
 import { spawn, type ChildProcess } from "node:child_process";
-import { mkdtempSync, rmSync } from "node:fs";
+import { existsSync, mkdtempSync, rmSync } from "node:fs";
 import { createConnection, createServer } from "node:net";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -58,7 +58,14 @@ function resolveBinary(): string {
     "firefox",
   ];
   for (const c of candidates) {
-    if (c) return c;
+    if (!c) continue;
+    // An ABSOLUTE candidate (FIREFOX_BIN, the macOS app path) is only usable if it exists on this
+    // box — otherwise the hardcoded macOS path would win on Linux and shadow the "firefox" PATH
+    // fallback, yielding ENOENT at spawn. A bare name like "firefox" is not a filesystem path, so
+    // let spawn resolve it against PATH.
+    const isAbsolute = c.startsWith("/");
+    if (isAbsolute && !existsSync(c)) continue;
+    return c;
   }
   throw new Error(
     "Firefox binary not found. Tried FIREFOX_BIN env var, " +