@raultov/browser-control-mcp 0.3.5-beta.5 → 0.3.6-beta.6

package/CHANGELOG.md

@@ -10,6 +10,80 @@ from a copy of its code: entries describe the differences from that release.
 
 ## [Unreleased]
 
+## [0.3.6-beta.6] - 2026-10-29
+
+Public **BETA**. `fill_input` types the same way on both browsers,
+`evaluate_js` gives objects the same value and names their class,
+`inspect_dom` reads shadow roots and same-origin iframes, network logs
+carry cookies and no longer wait on open streams, and raw commands that
+would break the server's capture are refused. Some behaviour changes:
+`fill_input` presses a key per character (about 1 ms each on Chrome),
+`evaluate_js` values are their `JSON.stringify` form, `inspect_dom`
+returns more HTML, and `send_cdp_command` refuses `*.disable` of the
+captured domains and `Browser.close`.
+
+### Fixed
+
+- `set_breakpoint` on Chrome fails for a line with no code at or after it
+  in the loaded script with that URL, saying where the script ends, and
+  sets nothing (as Firefox does). It answered `resolved: false`, which the
+  description explains as "until a script with that URL loads", for a
+  script that was loaded already: the breakpoint never fired.
+
+- `inspect_dom` includes open shadow roots (as `<template
+  shadowrootmode="open">`) and the documents of same-origin iframes (each
+  after an `<!-- iframe <src>: -->` comment), and notes the cross-origin
+  iframes it cannot read. Text inside a web component or an iframe was
+  reported as not found.
+
+- `get_network_logs` asks for a response body only once the response
+  finished loading, and the reply notes the ones still loading (an open
+  event stream). On Firefox an open server-sent events stream made every
+  call wait 10 s for its body; now it answers at once. Each body waits at
+  most 2 s.
+
+- `get_network_logs` on Chrome returns the `Cookie` and `Set-Cookie`
+  headers (redacted unless `include_sensitive_headers: true`): Chrome
+  reports them only in its ExtraInfo events, which were ignored, so they
+  were missing even when asked for. On Firefox a repeated header (several
+  `Set-Cookie`) keeps every value, joined by newlines as on Chrome; only
+  the last one was kept.
+
+- `capture_screenshot` checks `format` before capturing: `png`, `jpeg`
+  (or `jpg`) and `webp`, any case; anything else fails saying so. Firefox
+  answered a PNG labelled `image/gif` (or `image/jpg`), and Chrome a raw
+  `Invalid image format`. The reply's MIME type is the one of the image's
+  bytes.
+
+- `send_cdp_command` refuses the commands that silently stopped what the
+  server captures (`Network.disable`, `Page.disable`, `Runtime.disable`,
+  `Log.disable`, `Debugger.disable`) or closed the browser
+  (`Browser.close`), saying what depends on them; `Network.disable` used to
+  leave `get_network_logs` empty without a word. `Fetch.enable` is sent with
+  a note that requests now pause until answered.
+
+- `evaluate_js` (and `evaluate_on_call_frame`) gives an object or array the
+  same `value` on both browsers: what `JSON.stringify` gives (`toJSON`
+  counts, functions drop out), and an object that is not a plain one has
+  its class in `description`. `navigator` and `new URL(...)` answered `{}`
+  without a word; now `{"value": {}, "description": "Navigator"}` and
+  `{"value": "<href>", "description": "URL"}`. Nested functions were `{}`
+  on Chrome and `{"type": "function"}` on Firefox, and `location` was `{}`
+  on Firefox.
+
+- `fill_input` types the same way on both browsers: Chrome now presses a
+  key per character, as Firefox did, so the page's keydown and keyup
+  handlers run and can cancel a key (a field refusing `a` got `abc` on
+  Chrome and `bc` on Firefox; now `bc` on both). Newlines and tabs are
+  inserted as text on both (as a key, Chrome pressed Tab and the rest of
+  the text left the field). Typing takes about 1 ms per character, so a
+  very long text is slower on Chrome than before.
+- `fill_input` on Firefox types a long text in batches of 500 characters:
+  20 000 characters timed out half typed, now they take about 20 s.
+- `fill_input` fires `change` once, as for a user: the browser fires it
+  when the field loses focus, and when the window has no focus (Firefox
+  headless, which never fired it) the fill fires it at the end.
+
 ## [0.3.5-beta.5] - 2026-10-28
 
 Public **BETA**. Observation tools stop returning wrong or missing data

package/README.md

@@ -11,7 +11,7 @@ It is the successor of
 from a copy of its code) and complements Playwright MCP or
 chrome-devtools-mcp with runtime JavaScript debugging on both browsers.
 
-> **Status: BETA (0.3.5-beta.5).** This version contains known bugs and differences
+> **Status: BETA (0.3.6-beta.6).** This version contains known bugs and differences
 > between Chrome and Firefox (see [Limitations and TODO](#limitations-and-todo))
 > and parts that have not been verified (see [Untested](#untested)). Tool
 > replies may change in incompatible ways before 1.0. Please report problems
@@ -49,10 +49,10 @@ see the note.
 | `navigate` | ✓ | ✓ | |
 | `reload` | ✓ | ✓ | |
 | `scroll` | ✓ | ✓ | reports the window positions before and after |
-| `inspect_dom` | ✓ | ✓ | at most 100 000 characters without `query` (cut in the page) |
-| `capture_screenshot` | ✓ | ✓ | `full_page` at most 16 384 px per side (a text note says when cut) |
+| `inspect_dom` | ✓ | ✓ | includes open shadow roots and same-origin iframes (cross-origin ones are noted); at most 100 000 characters without `query` (cut in the page) |
+| `capture_screenshot` | ✓ | ✓ | `format` `png`, `jpeg` (or `jpg`) or `webp`; `full_page` at most 16 384 px per side (a text note says when cut) |
 | `click_element` | ✓ | ✓ | scrolls the element into view; fails without clicking when it is hidden or covered |
-| `fill_input` | ✓ | ✓ | picks `<select>` options; fails without typing on elements that cannot take the text; Chrome inserts the text, Firefox types keys |
+| `fill_input` | ✓ | ✓ | picks `<select>` options; fails without typing on elements that cannot take the text; types key by key on both (key handlers run; newlines and tabs inserted as text), about 1 ms per character; `change` on leaving the field, or at the end when the window has no focus |
 | `handle_dialog` | ✓ | ✓ | accepts or dismisses the open `alert` / `confirm` / `prompt` / `beforeunload` dialog |
 | `evaluate_js` | ✓ | ✓ | `value` at most 100 000 characters (`truncated: true`); Chrome stops a script after 8 s, Firefox cannot (a looping tab is closed with `close_tab`) |
 | `get_console_logs` | ✓ | ✓ | a message keeps at most 10 000 characters; Firefox: page errors, CSS warnings and platform messages need the debugger port |
@@ -68,7 +68,7 @@ see the note.
 | `search_scripts` | ✓ | ✓ | a long line's preview is 100 characters on each side of the match |
 | `pause_on_load` | ✓ | ✗ | TODO on Firefox, see [Limitations and TODO](#limitations-and-todo) |
 | `enable_proxy_auth` | ✓ | partial | needs `--proxy-server`; a request the proxy rejects twice is cancelled; untested on Firefox against a real proxy |
-| `send_cdp_command` | ✓ | ✗ | raw Chrome DevTools Protocol |
+| `send_cdp_command` | ✓ | ✗ | raw Chrome DevTools Protocol; refuses `Network`/`Page`/`Runtime`/`Log`/`Debugger.disable` and `Browser.close`; `Fetch.enable` comes with a note |
 | `send_bidi_command` | ✗ | ✓ | raw WebDriver BiDi; refuses `session.new`, `session.end`, `browser.close` |
 | `send_rdp_request` | ✗ | ✓ | raw Firefox RDP request to an actor (`thread`, `console`, `root` shortcuts) |
 | `webmcp_list_tools` | ✓ | ✗ | needs `--enable-webmcp`; WebMCP is a Chrome testing feature; every annotation Chrome reports is listed (`readOnly`, `consequential`, `untrustedContent`, `debugging`, `autosubmit`, newer ones as they are) |
@@ -295,7 +295,11 @@ claude mcp add browser-control-mcp -- npx -y @raultov/browser-control-mcp
   `null`, `node`, `date`, `map`...), `value` is the JSON form and is `null`
   when there is none (functions, DOM nodes, symbols, `NaN`, bigints,
   maps...), `description` then says what it was (Chrome describes functions
-  by their source, Firefox only as `function`). A thrown exception or a
+  by their source, Firefox only as `function`). An object or array's
+  `value` is what `JSON.stringify` gives, on both browsers (`toJSON` counts:
+  a `URL` is its `href`; nested functions drop out), and an object that is
+  not a plain one has its class in `description` (`navigator`:
+  `{"value": {}, "description": "Navigator"}`). A thrown exception or a
   rejected promise fails with what was thrown and its 1-based line and
   column, e.g. `ReferenceError: x is not defined (line 1, column 1)`.
   A `value` over 100 000 characters is not returned whole: a string keeps

package/npm-shrinkwrap.json

@@ -19,7 +19,7 @@
       "hasInstallScript": true,
       "license": "MIT",
       "name": "@raultov/browser-control-mcp",
-      "version": "0.3.5-beta.5"
+      "version": "0.3.6-beta.6"
     },
     "node_modules/detect-libc": {
       "engines": {
@@ -48,5 +48,5 @@
     }
   },
   "requires": true,
-  "version": "0.3.5-beta.5"
+  "version": "0.3.6-beta.6"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "artifactDownloadUrls": [
-    "https://github.com/raultov/browser-control-mcp/releases/download/v0.3.5-beta.5"
+    "https://github.com/raultov/browser-control-mcp/releases/download/v0.3.6-beta.6"
   ],
   "author": "raultov <raultov@protonmail.com>",
   "bin": {
@@ -92,7 +92,7 @@
       "zipExt": ".tar.xz"
     }
   },
-  "version": "0.3.5-beta.5",
+  "version": "0.3.6-beta.6",
   "volta": {
     "node": "18.14.1",
     "npm": "9.5.0"