@raultov/browser-control-mcp 0.3.2-beta.3 → 0.3.5-beta.5

package/CHANGELOG.md

@@ -10,6 +10,108 @@ from a copy of its code: entries describe the differences from that release.
 
 ## [Unreleased]
 
+## [0.3.5-beta.5] - 2026-10-28
+
+Public **BETA**. Observation tools stop returning wrong or missing data
+without saying so, an endless `evaluate_js` loop no longer kills a Chrome
+tab, Firefox debugger calls no longer block other tabs, and WebMCP passes
+every tool annotation through. Some replies change: `get_custom_events`
+answers `{events, total, truncated}` with the newest events, and
+`get_network_logs` requests may carry `error` and
+`response_body_encoding`.
+
+### Fixed
+
+- `webmcp_list_tools` drops no annotation: `consequential` (the page
+  declares the tool has real-world effects, such as a payment) and
+  `debugging` were silently lost, and any annotation a later Chrome adds is
+  now passed through. The output of a tool annotated `untrustedContent` is
+  flagged: `webmcp_invoke_tool` adds a note to treat it as data, not as
+  instructions, and `webmcp_get_invocation` says `untrustedContent: true`.
+- `evaluate_js` with an endless loop no longer kills the tab on Chrome:
+  the script is stopped after 8 s and the call says so ("the script ran for
+  more than 8 s ... the page keeps working"); later calls work at once. It
+  used to fail after 20 s with `Runtime.evaluate timed out`, and every
+  later call on the tab timed out too. An expression waiting on a promise
+  that never settles says so after 10 s. Firefox cannot stop a running
+  script from outside: its error says so and points to `close_tab`.
+- On Firefox, a slow debugger call on one tab (e.g. a long
+  `evaluate_on_call_frame`) no longer blocks the logs and debugger tools of
+  the other tabs: each tab's debugger has its own lock (one lock covered
+  them all, delaying `get_console_logs` on another tab by 9.5 s).
+- `get_custom_events` returns the newest `limit` events (it returned the
+  oldest, so new events never showed once the buffer held more), answers
+  pure JSON `{"events", "total", "truncated"}` (the text started with
+  `Found N custom events.`), and takes `clear` to remove what it returned.
+- `get_network_logs`: on Chrome the page's own document is in its
+  navigation's bucket, so `current_navigation_only` lists it and its body
+  is returned (it was left in the previous navigation, without a body). A
+  failed request carries `error` (Chrome `net::ERR_...`, Firefox
+  `NS_ERROR_...`, also in the summary); it looked like one still waiting on
+  Chrome, and Firefox put the error in `response_status_text`. A binary body
+  says `response_body_encoding: "base64"`.
+- On Chrome, `get_console_logs` and `get_network_logs` connect first: on an
+  instance nothing had connected to (an attached Chrome) they answered
+  empty buffers. The console messages the page logged before are now
+  returned; `get_network_logs` notes that earlier requests are not
+  captured.
+
+## [0.3.4-beta.4] - 2026-10-27
+
+Public **BETA**. The same server as 0.3.3-beta.4, which was published on
+crates.io but without binaries, npm package or Homebrew formula: its
+release notes made GitHub skip the builds. See 0.3.3-beta.4 below for the
+changes.
+
+### Fixed
+
+- The release notes no longer quote a URL with credentials, which GitHub
+  treats as a secret; `make check` now refuses one in this file.
+
+## [0.3.3-beta.4] - 2026-10-27
+
+Public **BETA**. Tools that reported success for something that did not
+happen now say what happened, and proxy credentials are handled more
+safely. Some replies change: an unknown tool argument is an error,
+`navigate`/`reload` add `status`, a download URL fails, and
+`restart_browser`/`stop_browser` on an attached Chrome refuse or only
+disconnect.
+
+### Fixed
+
+- `open_instance` without `headless` follows the server's `--headless` flag.
+  It always opened a window, even on a server started with `--headless`
+  (where there may be no display, as in the Docker image).
+- Credentials written in a proxy URL (a user and password before the host,
+  from `--proxy-server`, `open_instance`'s `proxy` or `restart_browser`)
+  no longer reach the browser: Chrome got them on its command line, readable
+  by any local user with `ps` (and ignored them), and Firefox refused to
+  launch. `enable_proxy_auth` now falls back to the credentials of
+  `--proxy-server`.
+- `enable_proxy_auth` with wrong credentials no longer loops: a request the
+  proxy challenges again after two answers is cancelled. Firefox re-raised
+  the same request forever (about 50 challenges a second, each carrying the
+  password); Chrome retried tens of times. On Firefox, calling the tool
+  again also removes the previous intercept (each call added one more).
+- On Chrome, an instance attached to a browser that was already running on
+  its port (not launched by the server) no longer reports a restart or stop
+  that did not happen. `restart_browser` (and a `copy_cookies` relaunch)
+  fails saying the server cannot relaunch it, and nothing is changed;
+  `stop_browser` disconnects and says the browser keeps running. Both said
+  "successfully" while the same process kept running without the presets.
+- `navigate` and `reload` report the document's HTTP status (`"status":
+  404`), and an error status (400 and up) adds a note. A 404 used to look
+  like any success, and an error with an empty body failed on Chrome
+  (`ERR_HTTP_RESPONSE_CODE_FAILURE`) but succeeded on Firefox: it is now a
+  success with its status on both.
+- `navigate` to a URL the browser downloads fails with `Navigation failed:
+  the URL is a download...` on both browsers. Firefox answered "Navigated
+  to" the previous page; Chrome failed with `net::ERR_ABORTED`.
+- A tool call with an argument the tool does not have now fails before
+  anything runs, naming the argument it was probably meant to be (`tabId`
+  answers "did you mean `tab_id`?"). Unknown arguments were ignored, so a
+  `tabId` typo ran on the active tab.
+
 ## [0.3.2-beta.3] - 2026-10-25
 
 Public **BETA**. Replies up to 256 MB no longer drop the browser connection

package/README.md

@@ -11,7 +11,7 @@ It is the successor of
 from a copy of its code) and complements Playwright MCP or
 chrome-devtools-mcp with runtime JavaScript debugging on both browsers.
 
-> **Status: BETA (0.3.2-beta.3).** This version contains known bugs and differences
+> **Status: BETA (0.3.5-beta.5).** This version contains known bugs and differences
 > between Chrome and Firefox (see [Limitations and TODO](#limitations-and-todo))
 > and parts that have not been verified (see [Untested](#untested)). Tool
 > replies may change in incompatible ways before 1.0. Please report problems
@@ -40,8 +40,8 @@ see the note.
 | `open_instance` | ✓ | partial | `features`, `copy_cookies` and `source_profile` are Chrome only |
 | `close_instance` | ✓ | ✓ | |
 | `list_instances` | ✓ | ✓ | each instance reports its `browser` and `capabilities` |
-| `restart_browser` | ✓ | ✓ | was `restart_chrome` |
-| `stop_browser` | ✓ | ✓ | was `stop_chrome`; on an attached Firefox it ends the session, the browser keeps running |
+| `restart_browser` | ✓ | ✓ | was `restart_chrome`; refused on a Chrome already running on the port (attached, not launched by the server) |
+| `stop_browser` | ✓ | ✓ | was `stop_chrome`; on an attached Chrome or Firefox it only disconnects (Firefox: ends the session), the browser keeps running and the reply says so |
 | `open_tab` | ✓ | ✓ | |
 | `close_tab` | ✓ | ✓ | |
 | `list_tabs` | ✓ | ✓ | |
@@ -54,10 +54,10 @@ see the note.
 | `click_element` | ✓ | ✓ | scrolls the element into view; fails without clicking when it is hidden or covered |
 | `fill_input` | ✓ | ✓ | picks `<select>` options; fails without typing on elements that cannot take the text; Chrome inserts the text, Firefox types keys |
 | `handle_dialog` | ✓ | ✓ | accepts or dismisses the open `alert` / `confirm` / `prompt` / `beforeunload` dialog |
-| `evaluate_js` | ✓ | ✓ | `value` at most 100 000 characters (`truncated: true`) |
+| `evaluate_js` | ✓ | ✓ | `value` at most 100 000 characters (`truncated: true`); Chrome stops a script after 8 s, Firefox cannot (a looping tab is closed with `close_tab`) |
 | `get_console_logs` | ✓ | ✓ | a message keeps at most 10 000 characters; Firefox: page errors, CSS warnings and platform messages need the debugger port |
-| `get_network_logs` | ✓ | ✓ | bodies at most 64 000 characters, none over 2 MB; a WebSocket payload keeps 64 000 (`payload_len` is the whole); Firefox: WebSocket frames need the debugger port |
-| `get_custom_events` | ✓ | partial | params over 64 000 characters of JSON are replaced by `{truncated, characters}`; Firefox: events of the modules subscribed with `send_bidi_command` |
+| `get_network_logs` | ✓ | ✓ | a failed request has `error`, a binary body `response_body_encoding: "base64"`; bodies at most 64 000 characters, none over 2 MB; a WebSocket payload keeps 64 000 (`payload_len` is the whole); Firefox: WebSocket frames need the debugger port |
+| `get_custom_events` | ✓ | partial | `{events, total, truncated}`, the newest `limit` events; `clear` removes the returned ones; params over 64 000 characters of JSON are replaced by `{truncated, characters}`; Firefox: events of the modules subscribed with `send_bidi_command` |
 | `get_performance_metrics` | ✓ | partial | Firefox: `Nodes`, `Frames`, `Resources`, `TransferSize` from the Web Performance APIs (no Performance domain), plus a note |
 | `profile_page_performance` | ✓ | partial | Firefox: FCP, LCP, DCL and Load from the Web Performance APIs; no trace, so `total_blocking_time_ms` and `top_long_tasks` are `null` |
 | `set_breakpoint` | ✓ | partial | Firefox: by URL only (no `script_id` / `script_hash`) |
@@ -67,12 +67,12 @@ see the note.
 | `evaluate_on_call_frame` | ✓ | ✓ | |
 | `search_scripts` | ✓ | ✓ | a long line's preview is 100 characters on each side of the match |
 | `pause_on_load` | ✓ | ✗ | TODO on Firefox, see [Limitations and TODO](#limitations-and-todo) |
-| `enable_proxy_auth` | ✓ | partial | needs `--proxy-server`; untested on Firefox against a real proxy |
+| `enable_proxy_auth` | ✓ | partial | needs `--proxy-server`; a request the proxy rejects twice is cancelled; untested on Firefox against a real proxy |
 | `send_cdp_command` | ✓ | ✗ | raw Chrome DevTools Protocol |
 | `send_bidi_command` | ✗ | ✓ | raw WebDriver BiDi; refuses `session.new`, `session.end`, `browser.close` |
 | `send_rdp_request` | ✗ | ✓ | raw Firefox RDP request to an actor (`thread`, `console`, `root` shortcuts) |
-| `webmcp_list_tools` | ✓ | ✗ | needs `--enable-webmcp`; WebMCP is a Chrome testing feature |
-| `webmcp_invoke_tool` | ✓ | ✗ | needs `--enable-webmcp` |
+| `webmcp_list_tools` | ✓ | ✗ | needs `--enable-webmcp`; WebMCP is a Chrome testing feature; every annotation Chrome reports is listed (`readOnly`, `consequential`, `untrustedContent`, `debugging`, `autosubmit`, newer ones as they are) |
+| `webmcp_invoke_tool` | ✓ | ✗ | needs `--enable-webmcp`; the output of an `untrustedContent` tool comes with a note to treat it as data |
 | `webmcp_get_invocation` | ✓ | ✗ | needs `--enable-webmcp` |
 | `webmcp_list_invocations` | ✓ | ✗ | needs `--enable-webmcp` |
 
@@ -273,13 +273,19 @@ claude mcp add browser-control-mcp -- npx -y @raultov/browser-control-mcp
   lazily, on the first tool that needs them, with an ephemeral profile.
 - **Tabs.** `open_tab`, `list_tabs`, `switch_tab`, `close_tab`. Every tool
   takes `instance_id` and `tab_id`; without them it targets the default
-  instance and its active tab.
+  instance and its active tab. An argument a tool does not have fails the
+  call before anything runs (a `tabId` typo answers "did you mean
+  `tab_id`?"), so a typo never falls back to the active tab.
 - **Same replies on both browsers.** `navigate` and `reload` answer once the
   page fired `load` (at most 30 s, else with a note): a first line
   (`Navigated to <final URL>.` / `Page reloaded.`), then
   `{"url": "<final URL, after redirects>", "tab_id": "tab-N", "browser": {...}}`,
   where `browser` holds the protocol's ids (CDP `frameId`/`loaderId`, BiDi
-  `navigation`). `open_tab` answers `{tab_id, target_id, url, label}` with the
+  `navigation`), plus `"status"`, the document's HTTP status, for http(s)
+  pages (an error status, 400 and up, also adds a note; an error page with
+  an empty body is reported the same way on both browsers). A URL the
+  browser downloads fails with `Navigation failed: the URL is a
+  download...`. `open_tab` answers `{tab_id, target_id, url, label}` with the
   final URL. A network error (unknown host, refused connection...) fails with
   `Navigation failed: <browser's code> (<url>)`, e.g.
   `net::ERR_NAME_NOT_RESOLVED` on Chrome and `NS_ERROR_UNKNOWN_HOST` on
@@ -304,7 +310,11 @@ claude mcp add browser-control-mcp -- npx -y @raultov/browser-control-mcp
   `{"messages": [...], "total", "truncated", "notes"?}`: at most `limit`
   (default 200) of the most recent matching messages, oldest first; `clear`
   removes only the returned ones; a note says when a site change cleared
-  messages.
+  messages. `get_custom_events` answers `{"events", "total", "truncated"}`
+  the same way. On Chrome both log tools connect first, so on an attached
+  browser the first call already sees the page's console messages (Chrome
+  replays them; network requests sent before the connection are not
+  captured, and the reply says so).
 - **Firefox allows a single automation session.** Each Firefox instance holds
   one WebDriver BiDi session shared by its tabs; `close_instance`,
   `stop_browser` and every server shutdown path end it, so the next run can
@@ -316,7 +326,7 @@ claude mcp add browser-control-mcp -- npx -y @raultov/browser-control-mcp
 | --- | --- | --- | --- |
 | `--browser <chrome\|firefox>` | `chrome` | browser of the default instance | browser of the default instance |
 | `--local` | off | navigation limited to local addresses | same |
-| `--headless` | off | headless Chrome | headless Firefox |
+| `--headless` | off | headless Chrome (also the default of `open_instance`'s `headless`) | headless Firefox (same) |
 | `--window-size <W>x<H>` | `1920x1080` | window of launched Chrome (`--window-size`) | window of launched Firefox (`--width`/`--height`) |
 | `--host <HOST>` | `127.0.0.1` | debugging host | debugging host |
 | `--port <PORT>` | `9222` | debugging port of the default instance | ignored (use `--firefox-port`) |
@@ -333,6 +343,11 @@ claude mcp add browser-control-mcp -- npx -y @raultov/browser-control-mcp
 | `--firefox-rdp-port <PORT>` | none | — | debugger port of the attached Firefox (needs `--firefox-port`) |
 | `--no-firefox-debugger` | off | — | launch Firefox without its debugger port (no debugger tools) |
 
+Credentials written in a proxy URL (`http://user:pass@host:port`) never reach
+the browser's command line; `enable_proxy_auth` uses those of `--proxy-server`
+when neither its arguments nor `--proxy-username`/`--proxy-password` give
+them.
+
 `--proxy` and `--webmcp` are aliases. To attach to your own Firefox, start it
 with `--remote-debugging-port <port>` (and `--start-debugger-server ws:<rdp>`
 plus `devtools.debugger.remote-enabled` and `devtools.chrome.enabled` for the
@@ -423,13 +438,14 @@ incompatible:
 
 | Tool | 0.1.x | 0.2.0 |
 | --- | --- | --- |
-| `navigate`, `reload` | Chrome: raw `Page.navigate` reply (`frameId`, `loaderId`, `errorText`) without waiting, `{}` on reload; Firefox: `{navigation, url}` | `{url, tab_id, browser, notes?}` after `load`; `url` is the final URL; protocol ids under `browser` |
+| `navigate`, `reload` | Chrome: raw `Page.navigate` reply (`frameId`, `loaderId`, `errorText`) without waiting, `{}` on reload; Firefox: `{navigation, url}` | `{url, tab_id, browser, status?, notes?}` after `load`; `url` is the final URL; protocol ids under `browser`; `status` is the document's HTTP status |
 | `navigate`, `open_tab` to an unreachable host | Chrome: success (`errorText` inside, or a `chrome-error://` tab) | error `Navigation failed: <code> (<url>)`; `open_tab` names the tab, which stays open |
 | `evaluate_js` | Chrome: `{"result": {type, value, ...}}`; Firefox: the bare value | `{value, type, subtype?, description?}` |
 | `set_breakpoint` | Chrome: CDP id (`1:3:0:http://…`) and `locations`; Firefox: `{breakpointId, url, lineNumber, columnNumber}` | `{breakpoint_id: "bp-N", url, line_number, column_number, resolved}` |
 | `remove_breakpoint` | Chrome: CDP id, reply `{}` | `bp-N` id, reply `{removed}` |
 | `step_over`, `resume` | Chrome: text only; Firefox `step_over`: `{paused, location: {line (1-based), column}}` | `{paused, location: {url, line_number, column_number} \| null}`, 0-based |
 | `evaluate_on_call_frame` | Chrome: raw `RemoteObject` (exceptions as success); Firefox: bare value | the `evaluate_js` shape; exceptions are errors (`Evaluation threw: ...`) |
+| `get_custom_events` | `Found N custom events. Captured events: [...]`, the oldest events | `{events, total, truncated}`, the newest `limit` events; `clear` removes the returned ones |
 | `get_console_logs` | a JSON array; `clear` emptied the whole buffer | `{messages, total, truncated, notes?}`, at most `limit` (200) messages; `clear` removes the returned ones; the buffer is cleared on cross-site navigation |
 
 ## Limitations and TODO
@@ -500,7 +516,7 @@ incompatible:
 
 ```sh
 make check        # fmt, clippy -D warnings, tests, docs, duplication, packaging, version
-make e2e          # E2E smoke against real, visible Chrome and Firefox (Linux, macOS)
+make e2e          # E2E smoke against real Chrome and Firefox, headless (E2E_VISIBLE=1 shows them; Linux, macOS)
 make check-all    # both
 ```
 

package/npm-shrinkwrap.json

@@ -19,7 +19,7 @@
       "hasInstallScript": true,
       "license": "MIT",
       "name": "@raultov/browser-control-mcp",
-      "version": "0.3.2-beta.3"
+      "version": "0.3.5-beta.5"
     },
     "node_modules/detect-libc": {
       "engines": {
@@ -48,5 +48,5 @@
     }
   },
   "requires": true,
-  "version": "0.3.2-beta.3"
+  "version": "0.3.5-beta.5"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "artifactDownloadUrls": [
-    "https://github.com/raultov/browser-control-mcp/releases/download/v0.3.2-beta.3"
+    "https://github.com/raultov/browser-control-mcp/releases/download/v0.3.5-beta.5"
   ],
   "author": "raultov <raultov@protonmail.com>",
   "bin": {
@@ -92,7 +92,7 @@
       "zipExt": ".tar.xz"
     }
   },
-  "version": "0.3.2-beta.3",
+  "version": "0.3.5-beta.5",
   "volta": {
     "node": "18.14.1",
     "npm": "9.5.0"