@raultov/browser-control-mcp 0.11.0-beta.17 → 0.11.0-beta.18

package/CHANGELOG.md

@@ -10,6 +10,72 @@ from a copy of its code: entries describe the differences from that release.
 
 ## [Unreleased]
 
+## [0.11.0-beta.18] - 2026-11-03
+
+Public **BETA**. Consistency fixes on both browsers. `webmcp_cancel_invocation`
+cancels a pending WebMCP invocation; `webmcp_invoke_tool` waits 10 s by
+default (`timeout_ms`), takes no `frameId` when one frame has the tool, and
+`webmcp_list_tools` is compact. Tab tools behave the same on Chrome and
+Firefox (`close_tab` defaults to the active tab, one rule for the next active
+tab, `list_tabs` in tab order, Chrome registers its first tab after
+`restart_browser`). Chrome `search_scripts` no longer counts or searches the
+server's snippets or a previous page's scripts; `resume` and the other
+debugger tools word "not paused" the same on both browsers. Chrome `emulate`
+measures the page once a resize landed. Behaviour changes: `webmcp_list_tools`
+answers `{frameId, tools}`; `webmcp_invoke_tool` waits 10 s instead of 30 s.
+
+### Added
+
+- `webmcp_cancel_invocation` (`--enable-webmcp`, Chrome) cancels a pending
+  WebMCP invocation with `WebMCP.cancelInvocation`; one Chrome no longer
+  knows (its page navigated away) is marked `Canceled`. (#73)
+
+### Fixed
+
+- Chrome: `emulate` measures what the page sees once a resize (or a reset)
+  landed: the next `resize` event or two animation frames, at most 500 ms.
+  Chrome answers the override before the renderer resizes, so the reply
+  could hold the previous size on a fresh instance. (#74)
+- Debugger tools no longer leak internals (#66):
+  - Chrome: `search_scripts` neither counts nor searches the server's own
+    snippets nor the scripts of a page the tab left. Its script list was
+    never cleared on navigation: after a change of process Chrome reuses
+    script ids, so a stale entry named the server's outline snippet, and a
+    page with 5 scripts counted 38. The list is now cleared when the page's
+    contexts are, and scripts created over the protocol (no URL and no
+    stack) are left out; a page's own `eval` stays.
+  - `search_scripts` with `debug` answers JSON (`{scripts, errors}`), not
+    Rust's `Debug` format.
+  - Chrome `evaluate_on_call_frame` on a page that is not paused fails with
+    `the debugger is not paused`, as on Firefox and as `step_over`.
+  - `resume` on a page that is not paused answers `The debugger was not
+    paused: nothing to resume.` with `{paused: false}` on both browsers
+    (Firefox failed with `wrongState`, Chrome answered either way).
+  - Firefox RDP failures say `Firefox (RDP) protocol error in <request>`;
+    they were labelled BiDi.
+- Tab tools behave the same on both browsers (#69):
+  - `close_tab` without `tab_id` closes the active tab, as every other tool
+    omitting it acts on it (it failed with `missing field \`tab_id\``).
+  - Closing the active tab activates the most recently active tab still
+    open, else the newest one (by number: `tab-10` after `tab-9`). Chrome
+    picked an arbitrary tab when none had been active, Firefox the highest
+    id as text.
+  - `list_tabs` lists the tabs by number on both browsers.
+  - After `restart_browser`, Chrome registers the new browser's first tab
+    (it listed none until the next call), as Firefox does.
+- WebMCP tools are easier to drive (#73):
+  - `webmcp_invoke_tool` waits 10 s by default (it blocked 30 s), or
+    `timeout_ms` (at most 60 000); the pending reply says how to poll or
+    cancel the invocation. `frameId` is optional when one frame registers
+    the tool (a clear error names the frames otherwise).
+  - A pending invocation whose page navigated away carries a `note` in
+    `webmcp_get_invocation` and `webmcp_list_invocations` (it showed
+    `Pending` forever).
+  - `webmcp_list_invocations` takes `status` in any case.
+  - `webmcp_list_tools` is compact JSON: `{frameId, tools}` with the frame
+    once when shared, no empty `required` and no false annotations (on
+    knot.kz, 789 tokens instead of ~1700).
+
 ## [0.11.0-beta.17] - 2026-11-02
 
 Public **BETA**. Fixes found probing the debugger, tab and raw protocol tools

package/README.md

@@ -13,7 +13,7 @@ It is the successor of
 from a copy of its code) and complements Playwright MCP or
 chrome-devtools-mcp with runtime JavaScript debugging on both browsers.
 
-> **Status: BETA (0.11.0-beta.17).** This version contains known bugs and differences
+> **Status: BETA (0.11.0-beta.18).** This version contains known bugs and differences
 > between Chrome and Firefox (see [Limitations and TODO](#limitations-and-todo))
 > and parts that have not been verified (see [Untested](#untested)). Tool
 > replies may change in incompatible ways before 1.0. Please report problems
@@ -117,11 +117,11 @@ see the note.
 | `open_instance` | ✓ | partial | `features`, `copy_cookies` and `source_profile` are Chrome only |
 | `close_instance` | ✓ | ✓ | |
 | `list_instances` | ✓ | ✓ | each instance reports its `browser` and `capabilities` |
-| `restart_browser` | ✓ | ✓ | was `restart_chrome`; refused on a Chrome already running on the port (attached, not launched by the server) |
+| `restart_browser` | ✓ | ✓ | was `restart_chrome`; refused on a Chrome already running on the port (attached, not launched by the server); the new browser's first page is registered as a tab |
 | `stop_browser` | ✓ | ✓ | was `stop_chrome`; on an attached Chrome or Firefox it only disconnects (Firefox: ends the session), the browser keeps running and the reply says so |
 | `open_tab` | ✓ | ✓ | the new tab becomes the active one, in front |
-| `close_tab` | ✓ | ✓ | the next active tab is brought to the front |
-| `list_tabs` | ✓ | ✓ | |
+| `close_tab` | ✓ | ✓ | `tab_id` defaults to the active tab; the most recently active open tab (else the newest) becomes active and is brought to the front |
+| `list_tabs` | ✓ | ✓ | tabs in the order they were opened (`tab-2` before `tab-10`) |
 | `switch_tab` | ✓ | ✓ | |
 | `navigate` | ✓ | ✓ | `history: "back"` or `"forward"` instead of `url` moves one entry in the tab's history and waits for the page to load (also when it comes from the back-forward cache, which fires no `load`); at either end it fails without moving; a URL the browser saves instead of opening (a download: `Content-Disposition: attachment`, or a type such as CSV) fails saying so, and the tab stays where it was; a page behind HTTP authentication (401) fails at once naming its scheme and realm and how to log in (credentials in the URL, `http://user:password@host/path`, which the browser keeps for the session); a page that pauses at a breakpoint or opens a dialog while loading fails at once naming it (see `resume`, `handle_dialog`) |
 | `reload` | ✓ | ✓ | a pause, a dialog or HTTP authentication while loading fails at once, as with `navigate` |
@@ -156,19 +156,20 @@ see the note.
 | `audit_page` | ✓ | ✓ | `perf` group; accessibility (images without alt, fields, buttons and links without a name, `html lang`, heading order, duplicate ids, broken `aria-labelledby`/`aria-describedby`, `tabindex` > 0, targets under 24×24 px too close to another, text contrast under WCAG AA), SEO (title, meta description, viewport, vague link text, uncrawlable links, canonical, `noindex`) and best practices (doctype and quirks mode, HTTPS, mixed content, distorted images, console errors); the same script on both browsers; each failing check lists its first 10 elements with a snapshot ref, a selector, its start tag and a detail (the contrast ratio, the size...), then the ids that passed or did not apply; `categories` narrows it; not checked: text over background images or gradients, iframes, closed shadow roots, response headers |
 | `set_breakpoint` | ✓ | partial | Firefox: by URL only (no `script_id` / `script_hash`) |
 | `remove_breakpoint` | ✓ | ✓ | |
-| `resume` | ✓ | ✓ | |
+| `resume` | ✓ | ✓ | on a page that is not paused: `The debugger was not paused: nothing to resume.` with `{paused: false}` |
 | `step_over` | ✓ | ✓ | |
 | `evaluate_on_call_frame` | ✓ | ✓ | |
-| `search_scripts` | ✓ | ✓ | a long line's preview is 100 characters on each side of the match; inline scripts and modules included; frames of another origin too (Chrome ids such as `2.17`) |
+| `search_scripts` | ✓ | ✓ | a long line's preview is 100 characters on each side of the match; inline scripts and modules included, the server's own evaluations left out; `debug` answers `{scripts, errors}` as JSON; frames of another origin too (Chrome ids such as `2.17`) |
 | `pause_on_load` | ✓ | ✗ | TODO on Firefox, see [Limitations and TODO](#limitations-and-todo) |
 | `enable_proxy_auth` | ✓ | partial | needs `--proxy-server`; a request the proxy rejects twice is cancelled; untested on Firefox against a real proxy |
 | `send_cdp_command` | ✓ | ✗ | `raw` group; raw Chrome DevTools Protocol; refuses `Network`/`Page`/`Runtime`/`Log`/`Debugger.disable` and `Browser.close`; `Fetch.enable` comes with a note |
 | `send_bidi_command` | ✗ | ✓ | `raw` group; raw WebDriver BiDi; refuses `session.new`, `session.end`, `browser.close` |
 | `send_rdp_request` | ✗ | ✓ | `raw` group; raw Firefox RDP request to an actor (`thread`, `console`, `root` shortcuts); the event packets that actor sends afterwards go to `get_custom_events` (at most 16 actors watched) |
-| `webmcp_list_tools` | ✓ | ✗ | needs `--enable-webmcp`; WebMCP is a Chrome testing feature; every annotation Chrome reports is listed (`readOnly`, `consequential`, `untrustedContent`, `debugging`, `autosubmit`, newer ones as they are) |
-| `webmcp_invoke_tool` | ✓ | ✗ | needs `--enable-webmcp`; a tool answering in MCP shape (`{content, isError}`) gives its own text and image blocks, and its `isError` makes the reply an error; other output comes as JSON; the output of an `untrustedContent` tool comes with a note to treat it as data |
-| `webmcp_get_invocation` | ✓ | ✗ | needs `--enable-webmcp` |
-| `webmcp_list_invocations` | ✓ | ✗ | needs `--enable-webmcp` |
+| `webmcp_list_tools` | ✓ | ✗ | needs `--enable-webmcp`; WebMCP is a Chrome testing feature; every annotation Chrome reports is listed (`readOnly`, `consequential`, `untrustedContent`, `debugging`, `autosubmit`, newer ones as they are); compact JSON `{frameId, tools}` (`frameId` once when the tools share it), without empty `required` or false annotations |
+| `webmcp_invoke_tool` | ✓ | ✗ | needs `--enable-webmcp`; `frameId` optional when one frame registers the tool; waits `timeout_ms` (default 10 000, at most 60 000) for the answer, then says how to poll or cancel it; a tool answering in MCP shape (`{content, isError}`) gives its own text and image blocks, and its `isError` makes the reply an error; other output comes as JSON; the output of an `untrustedContent` tool comes with a note to treat it as data |
+| `webmcp_get_invocation` | ✓ | ✗ | needs `--enable-webmcp`; a pending invocation whose page navigated away carries a `note` |
+| `webmcp_list_invocations` | ✓ | ✗ | needs `--enable-webmcp`; `status` in any case |
+| `webmcp_cancel_invocation` | ✓ | ✗ | needs `--enable-webmcp`; cancels a pending invocation (`WebMCP.cancelInvocation`); one Chrome no longer knows (its page is gone) is marked `Canceled` |
 
 After `click_element`, `hover`, `drag`, `fill_input`, `fill_form` and
 `press_key` the server waits for the page to settle before answering: until its DOM
@@ -617,8 +618,9 @@ incompatible:
 - Firefox WebSocket frames and page errors need the Firefox debugger port
   (WebDriver BiDi has no WebSocket frame events); binary frames are reported
   as Firefox gives them, not base64 as on Chrome.
-- `webmcp_list_tools`, `webmcp_invoke_tool`, `webmcp_get_invocation` and
-  `webmcp_list_invocations` are Chrome only (a Chrome testing feature).
+- `webmcp_list_tools`, `webmcp_invoke_tool`, `webmcp_get_invocation`,
+  `webmcp_list_invocations` and `webmcp_cancel_invocation` are Chrome only
+  (a Chrome testing feature).
 - `send_cdp_command` is Chrome only; `send_bidi_command` and
   `send_rdp_request` are Firefox only.
 - Cookie import (`--allow-cookie-import`) and launch presets (`features`) are

package/npm-shrinkwrap.json

@@ -19,7 +19,7 @@
       "hasInstallScript": true,
       "license": "MIT",
       "name": "@raultov/browser-control-mcp",
-      "version": "0.11.0-beta.17"
+      "version": "0.11.0-beta.18"
     },
     "node_modules/detect-libc": {
       "engines": {
@@ -48,5 +48,5 @@
     }
   },
   "requires": true,
-  "version": "0.11.0-beta.17"
+  "version": "0.11.0-beta.18"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "artifactDownloadUrls": [
-    "https://github.com/raultov/browser-control-mcp/releases/download/v0.11.0-beta.17"
+    "https://github.com/raultov/browser-control-mcp/releases/download/v0.11.0-beta.18"
   ],
   "author": "raultov <raultov@protonmail.com>",
   "bin": {
@@ -92,7 +92,7 @@
       "zipExt": ".tar.xz"
     }
   },
-  "version": "0.11.0-beta.17",
+  "version": "0.11.0-beta.18",
   "volta": {
     "node": "18.14.1",
     "npm": "9.5.0"