fix: normalize browser route cache session IDs

Store browser routes under a normalized session ID so cache lookups and deletes stay consistent when route data includes surrounding whitespace. Add a regression test to lock in the normalization behavior.

Made-with: Cursor

Author: rgarcia

src/kernel/lib/browser_routing/routing.py

@@ -43,17 +43,18 @@ def __init__(self) -> None:
         self._routes: dict[str, BrowserRoute] = {}
 
     def get(self, session_id: str) -> BrowserRoute | None:
-        return self._routes.get(session_id)
+        return self._routes.get(_normalize_session_id(session_id))
 
     def set(self, route: BrowserRoute) -> None:
-        self._routes[route.session_id] = BrowserRoute(
-            session_id=route.session_id.strip(),
+        normalized_session_id = _normalize_session_id(route.session_id)
+        self._routes[normalized_session_id] = BrowserRoute(
+            session_id=normalized_session_id,
             base_url=route.base_url.strip().rstrip("/") + "/",
             jwt=route.jwt.strip(),
         )
 
     def delete(self, session_id: str) -> None:
-        self._routes.pop(session_id, None)
+        self._routes.pop(_normalize_session_id(session_id), None)
 
     def values(self) -> list[BrowserRoute]:
         return list(self._routes.values())
@@ -80,6 +81,10 @@ def browser_route_from_browser(browser: Any) -> BrowserRoute | None:
     return BrowserRoute(session_id=session_id, base_url=base_url, jwt=jwt)
 
 
+def _normalize_session_id(session_id: str) -> str:
+    return session_id.strip()
+
+
 def rewrite_direct_vm_options(
     options: FinalRequestOptions,
     *,

tests/test_browser_routing.py

@@ -9,7 +9,12 @@
 
 from kernel import Kernel
 from kernel.lib.browser_routing.util import jwt_from_cdp_ws_url
-from kernel.lib.browser_routing.routing import browser_route_from_browser, browser_routing_config_from_env
+from kernel.lib.browser_routing.routing import (
+    BrowserRoute,
+    BrowserRouteCache,
+    browser_route_from_browser,
+    browser_routing_config_from_env,
+)
 
 base_url = os.environ.get("TEST_API_BASE_URL", "http://127.0.0.1:4010")
 api_key = "sk-123"
@@ -120,6 +125,26 @@ def test_browser_request_requires_cached_route() -> None:
             client.browsers.request("sess-1", "GET", "https://example.com")
 
 
+def test_browser_route_cache_normalizes_session_id_keys() -> None:
+    cache = BrowserRouteCache()
+    cache.set(
+        BrowserRoute(
+            session_id="  sess-1  ",
+            base_url=" http://browser-session.test/browser/kernel/ ",
+            jwt=" token-abc ",
+        )
+    )
+
+    route = cache.get("sess-1")
+    assert route is not None
+    assert route.session_id == "sess-1"
+    assert route.base_url == "http://browser-session.test/browser/kernel/"
+    assert route.jwt == "token-abc"
+
+    cache.delete("sess-1")
+    assert cache.get("sess-1") is None
+
+
 def test_browser_route_from_browser_requires_base_url_and_jwt() -> None:
     assert browser_route_from_browser({**_fake_browser(), "base_url": None}) is None
     assert browser_route_from_browser({**_fake_browser(), "cdp_ws_url": None}) is None