chrome-bridge-mcp 1.21.0 → 1.22.0

package/README.md

@@ -218,10 +218,18 @@ count.
   session id and the names of the last three tools called.
 - **Never kept:** parameter values — no URLs, selectors, typed text or page
   content.
-- **Nothing leaves your computer** unless you say yes. With the plugin, after a
-  few errors have piled up Claude may offer, at a natural moment, to send them
-  as one GitHub issue: it shows you the anonymized text first and sends it only
-  after your confirmation. The server alone never sends or offers anything.
+- **Nothing leaves your computer** unless you say yes. With the plugin, once
+  a few errors have piled up (or one has waited a few days, or one is marked
+  as a defect), a line at the end of a turn tells you so, and Claude may offer,
+  at a natural moment, to send them as one GitHub issue: it shows you the
+  anonymized text first, then asks with buttons (from your GitHub, or not now)
+  and sends only what you chose. `/chrome-bridge:observe send` does the same
+  on demand; `list`, `mark` and `add` read and triage the log. The server
+  alone never sends or offers anything.
+- **Security observations** (a read or write outside the perimeter, a secret
+  exposed, unwanted code execution, data leaving the computer) never enter a
+  public issue: `/chrome-bridge:observe send --security` prepares a private
+  vulnerability report for the maintainers, see [SECURITY.md](SECURITY.md).
 - **Turn it off:** `{"enabled": false}` in `~/.config/claude-observe/config.json`
   (every plugin that uses claude-observe), or `CHROME_BRIDGE_OBSERVE=off` for
   the server. Keep the log but stop the offers: `{"propose": false}`.

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Chrome Bridge for Claude Code",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "description": "Bridge your browser to Claude Code: 60 token-efficient web-dev automation tools over a local WebSocket. ChromeOS included.",
   "homepage_url": "https://github.com/frsorrentino/chrome-bridge",
   "minimum_chrome_version": "135",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "chrome-bridge-mcp",
   "mcpName": "io.github.frsorrentino/chrome-bridge",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "type": "module",
   "description": "Chrome Bridge by frsorrentino: MCP server that gives Claude Code your real, logged-in Chrome — 60 tools, 2.75× fewer turns than Claude in Chrome, ChromeOS included.",
   "main": "server/index.js",

package/server/observe.js

@@ -152,7 +152,7 @@ function applyRecord(recs, id, fields, example, now) {
     };
     recs.push(r);
   } else {
-    for (const k of ['workaround', 'class', 'note', 'context']) if (fields[k]) r[k] = fields[k];
+    for (const k of ['workaround', 'class', 'note', 'context', 'security', 'severity']) if (fields[k]) r[k] = fields[k];
     if (r.status === 'done' && String(fields.source || '').startsWith('hook')) r.status = 'new';
   }
   r.count = Number(r.count || 0) + (example != null || !r.count ? 1 : 0);

package/server/protocol.js

@@ -93,7 +93,7 @@ export const MessageType = Object.freeze({
 });
 
 // Versione
-export const VERSION               = '1.21.0';
+export const VERSION               = '1.22.0';
 
 // Configurazione
 export const DEFAULT_PORT          = 8765;