chrome-bridge-mcp 1.23.2 → 1.23.3

package/README.md

@@ -42,6 +42,16 @@ element refs, `click(ref="n1")` follows with no discovery turn in between.
 > instead: an unpacked extension is dropped on every reboot, because the
 > container isn't mounted when Chrome starts.
 
+> **On Windows** `install.sh` does not run from PowerShell or cmd. Use the
+> plugin path below (`claude plugin marketplace add frsorrentino/chrome-bridge`,
+> then `claude plugin install chrome-bridge@chrome-bridge`) with the extension
+> from the Web Store, or run `install.sh` from Git Bash. The plugin's error
+> log hooks run in Git Bash, as Claude Code runs every hook, and need Python
+> 3.8+ as `python3`, `python` or `py` (the Microsoft Store `python3` alias is
+> skipped); without Python they stay silent and the tools work the same. For
+> launch mode see `CHROME_BRIDGE_BROWSER` below: Google Chrome cannot load the
+> extension there, Microsoft Edge can.
+
 `install.sh` registers the MCP server with `--scope user`. To do it by hand:
 `claude mcp add --scope user chrome-bridge node /path/to/server/index.js`.
 For `execute_js`, enable **Allow user scripts** in `chrome://extensions` →
@@ -138,6 +148,12 @@ isolated sessions or CI:
 node server/index.js --launch --headless
 ```
 
+It looks for Chromium, Microsoft Edge, Brave and last Google Chrome in their
+standard paths on Linux, macOS and Windows; `CHROME_BRIDGE_BROWSER` picks
+another binary. Google Chrome 137+ ignores `--load-extension`, so the
+extension never connects in it: use Chromium, Edge, Brave or Chrome for
+Testing.
+
 Pair it with `session_record` + `replay` for smoke tests with no model in the
 loop. In launch mode `execute_js` falls back to `new Function` when the
 user-script toggle isn't available.
@@ -186,6 +202,7 @@ Environment variables, each with a matching CLI flag:
 | `CHROME_BRIDGE_CAPS` / `--caps` | `core` | `core`, `audits`, `visual`, `network`, `storage`, `dom`, `files`, `all`. `install.sh` uses `all` |
 | `CHROME_BRIDGE_NO_JS` / `--no-js` | unset | No arbitrary JavaScript in the page: `execute_js` and `modify_dom` leave the schema, `wait_for(condition=function)` and `javascript:`/`data:` URLs are refused. `get_status` reports `js_evaluation` |
 | `CHROME_BRIDGE_READ_ROOT` / `--read-root` | unset | Where `upload_file` may read from. Unset: any file except keys and credentials (`~/.ssh`, `~/.aws`, `~/.gnupg`, `.env*`, `id_*`, `*.pem`, `*.key`, …), symlinks resolved first. Set: only files under this directory, whatever their name — the way to upload a certificate key on purpose |
+| `CHROME_BRIDGE_BROWSER` | unset | Launch mode only: the browser binary, e.g. `C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe`. Unset: the first of Chromium, Edge, Brave, Google Chrome found in the standard paths (on Linux Chromium, then Google Chrome). Google Chrome 137+ cannot load the extension |
 | `CHROME_BRIDGE_OBSERVE` | unset | `off` stops the local error log below. The plugin sets `hook`: its hooks keep the log and the server stays out of it |
 | `CHROME_BRIDGE_WRITE_ROOT` / `--write-root` | unset | Every path the model chooses (`save_to`, `output_path`, exports) must be under this directory, checked before the browser does any work; the server's own state under `~/.config/chrome-bridge` stays writable. The CLI is your shell and is not restricted |
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "chrome-bridge-mcp",
   "mcpName": "io.github.frsorrentino/chrome-bridge",
-  "version": "1.23.2",
+  "version": "1.23.3",
   "type": "module",
   "description": "Chrome Bridge by frsorrentino: MCP server that lets Claude Code borrow a tab from your own logged-in Chrome and hand it back — logins, 2FA and CAPTCHAs stay with you (handoff). 60 tools; about half the cost of Claude in Chrome, measured; ChromeOS included.",
   "main": "server/index.js",

package/server/index.js

@@ -13,7 +13,7 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { WSManager } from './ws-manager.js';
 import { registerTools } from './tools.js';
 import { createObserver } from './observe.js';
-import { launchBrowser } from './launcher.js';
+import { BRANDED_CHROME_HINT, launchBrowser } from './launcher.js';
 import { DEFAULT_PORT, VERSION } from './protocol.js';
 
 // Launch mode: browser dedicato (profilo effimero + estensione unpacked).
@@ -108,6 +108,8 @@ async function main() {
       throw new Error(`--launch requires a dedicated port, but ${wsManager.port} is owned by another chrome-bridge. Unset CHROME_BRIDGE_PORT (ephemeral) or pick a free one.`);
     }
     browser = await launchBrowser({ port: wsManager.port, headless: HEADLESS });
+    // Il Chrome brandizzato parte ma resta muto: l'errore di connessione dice perche'
+    if (browser.branded) wsManager.notConnectedHint = BRANDED_CHROME_HINT;
   }
 
   // 3. Registra i tool MCP (filtrati per capability)

package/server/launcher.js

@@ -11,17 +11,50 @@ import { spawn } from 'node:child_process';
 import { cp, mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, win32 } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const EXTENSION_SRC = join(dirname(fileURLToPath(import.meta.url)), '..', 'extension');
 
-const BROWSER_CANDIDATES = [
-  '/usr/bin/chromium',
-  '/usr/bin/chromium-browser',
-  '/usr/bin/google-chrome',
-  '/usr/bin/google-chrome-stable',
-];
+/**
+ * Percorsi standard per piattaforma. Chromium, Edge e Brave prima di Google
+ * Chrome: il Chrome brandizzato dalla 137 ignora --load-extension, parte ma
+ * l'estensione non si connette mai (test Windows del 27/09: Chrome 155 muto,
+ * Edge 154 connesso in meno di 6 s).
+ */
+export function browserCandidates(platform = process.platform, env = process.env) {
+  if (platform === 'win32') {
+    const bases = [env.LOCALAPPDATA, env.PROGRAMFILES, env['PROGRAMFILES(X86)']].filter(Boolean);
+    return [
+      ['Chromium', 'Application', 'chrome.exe'],
+      ['Microsoft', 'Edge', 'Application', 'msedge.exe'],
+      ['BraveSoftware', 'Brave-Browser', 'Application', 'brave.exe'],
+      ['Google', 'Chrome', 'Application', 'chrome.exe'],
+    ].flatMap((parts) => bases.map((b) => win32.join(b, ...parts)));
+  }
+  if (platform === 'darwin') {
+    return [
+      '/Applications/Chromium.app/Contents/MacOS/Chromium',
+      '/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge',
+      '/Applications/Brave Browser.app/Contents/MacOS/Brave Browser',
+      '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+    ];
+  }
+  return [
+    '/usr/bin/chromium',
+    '/usr/bin/chromium-browser',
+    '/usr/bin/google-chrome',
+    '/usr/bin/google-chrome-stable',
+  ];
+}
+
+/** Google Chrome brandizzato (non Chromium, non Chrome for Testing). */
+export function isBrandedChrome(path) {
+  return /google[\\/ _-]?chrome/i.test(path) && !/for[ _-]?testing/i.test(path);
+}
+
+export const BRANDED_CHROME_HINT = 'Google Chrome 137+ ignores --load-extension, so launch mode cannot load the extension into it:'
+  + ' set CHROME_BRIDGE_BROWSER to Chromium, Microsoft Edge, Brave or Chrome for Testing';
 
 export function findBrowser() {
   if (process.env.CHROME_BRIDGE_BROWSER) {
@@ -30,9 +63,10 @@ export function findBrowser() {
     }
     return process.env.CHROME_BRIDGE_BROWSER;
   }
-  const found = BROWSER_CANDIDATES.find((p) => existsSync(p));
+  const candidates = browserCandidates();
+  const found = candidates.find((p) => existsSync(p));
   if (!found) {
-    throw new Error(`No Chromium/Chrome binary found (tried: ${BROWSER_CANDIDATES.join(', ')}). Set CHROME_BRIDGE_BROWSER.`);
+    throw new Error(`No Chromium-based browser found (tried: ${candidates.join(', ')}). Set CHROME_BRIDGE_BROWSER to Chromium, Edge, Brave or Chrome for Testing.`);
   }
   return found;
 }
@@ -93,5 +127,7 @@ export async function launchBrowser({ port, headless = false }) {
   };
 
   console.error(`[chrome-bridge] launched ${browser}${headless ? ' (headless)' : ''} pid=${proc.pid}, ws port ${port}`);
-  return { pid: proc.pid, stop };
+  const branded = isBrandedChrome(browser);
+  if (branded) console.error(`[chrome-bridge] warning: ${BRANDED_CHROME_HINT}`);
+  return { pid: proc.pid, stop, branded };
 }

package/server/observe.js

@@ -40,12 +40,51 @@ const DEFAULTS = { enabled: true, dir: '', max_records: 2000, max_days: 90 };
 // \w di Python è Unicode: qui lo stesso insieme, esplicito.
 const W = '[\\p{L}\\p{N}_]';
 
+// Una home in qualunque forma, come observe.py (claude-observe d3fa492, invio
+// anonimo da Windows): C:\Users\x, C:/Users/x, /c/Users/x, /mnt/c/Users/x,
+// /cygdrive/c/Users/x, \\?\C:\Users\x, i \\ dentro JSON, /home/x, /Users/x.
+const SEP = '[\\\\/]+';
+const DRIVE = '(?:(?:[\\\\/]{2}\\?[\\\\/]+)?\\b[a-z]:|/mnt/[a-z]|/cygdrive/[a-z]|/[a-z](?=[\\\\/]))';
+const SEG = '[^\\\\/\\s"\'`<>|:*?,;()\\[\\]]';
+// il nome della cartella puo' avere spazi: con gli spazi solo se dopo viene un separatore
+const HOME_ANY_RE = new RegExp(`${DRIVE}?${SEP}(?:users|home|documents and settings)${SEP}(?:${SEG}+(?: ${SEG}+)+(?=[\\\\/])|${SEG}+)`, 'giu');
+const reEscape = (x) => x.replace(/[.*+?^${}()|[\]\\/]/gu, '\\$&');
+
+// Le home di questa macchina senza distinzione di separatore, unita' e
+// maiuscole (anche una USERPROFILE fuori da Users), e il nome utente come
+// segmento di percorso.
+function homeRes(env = process.env) {
+  const homes = [...new Set([homedir(), env.USERPROFILE || '', env.HOME || ''])];
+  const pats = [];
+  for (const h of homes.sort((a, b) => b.length - a.length)) {
+    let parts = h.split(/[\\/]+/u).filter((x) => x && x !== '?');
+    if (!parts.length) continue;
+    const drive = parts.length > 1 ? /^([A-Za-z]):?$/u.exec(parts[0]) : null;
+    let head = '';
+    if (drive && (parts[0].endsWith(':') || parts[0].length === 1)) {
+      const d = drive[1];
+      head = `(?:(?:[\\\\/]{2}\\?[\\\\/]+)?\\b${d}:|/mnt/${d}|/cygdrive/${d}|/${d}(?=[\\\\/]))`;
+      parts = parts.slice(1);
+    }
+    pats.push(head + parts.map((x) => SEP + reEscape(x)).join(''));
+  }
+  const names = new Set(homes.filter(Boolean).map((h) => basename(h.replace(/\\/gu, '/').replace(/\/+$/u, ''))));
+  for (const k of ['USERNAME', 'USER', 'LOGNAME']) names.add(env[k] || '');
+  const list = [...names].filter((n) => n.length >= 2 && !['users', 'home'].includes(n.toLowerCase())).sort((a, b) => b.length - a.length);
+  return [
+    pats.map((p) => new RegExp(`${p}(?![^\\\\/\\s"'\`<>|:*?,;()\\[\\]])`, 'giu')),
+    list.length ? new RegExp(`(?<=[\\\\/])(?:${list.map(reEscape).join('|')})(?=[\\\\/\\s"'\`<>|:*?,;()\\[\\]]|$)`, 'giu') : null,
+  ];
+}
+const [HOME_RES, USER_SEG_RE] = homeRes();
+
 export function scrub(text, limit = 300) {
   let t = String(text ?? '');
-  const home = homedir();
-  if (home && home !== '/') t = t.split(home).join('~');
   t = t.replace(new RegExp(`(?:${W}|[.+-])+@(?:${W}|-)+\\.(?:${W}|[.-])+`, 'gu'), '<EMAIL>');
   t = t.replace(/(https?:\/\/[^/\s?#"'»]+)[^\s"'»]*/gu, '$1/…');
+  for (const r of HOME_RES) t = t.replace(r, '~');
+  t = t.replace(HOME_ANY_RE, '~');
+  if (USER_SEG_RE) t = t.replace(USER_SEG_RE, '<USER>');
   t = t.replace(/\b(token|password|passwd|secret|api[_-]?key|authorization|bearer)("?\s*[:=]\s*|\s+)\S+/giu, '$1$2<SECRET>');
   t = t.replace(/\b(value_after|value|text)("?\s*[:=]?\s*)("[^"]*"|'[^']*'|«[^»]*»)/giu, '$1$2<STR>');
   t = t.replace(/\b(?=[A-Za-z0-9_\-+/]*\d)(?=[A-Za-z0-9_\-+/]*[A-Za-z])[A-Za-z0-9_\-+/=]{24,}\b/gu, '<SECRET>');

package/server/protocol.js

@@ -93,7 +93,7 @@ export const MessageType = Object.freeze({
 });
 
 // Versione
-export const VERSION               = '1.23.2';
+export const VERSION               = '1.23.3';
 
 // Configurazione
 export const DEFAULT_PORT          = 8765;

package/server/ws-manager.js

@@ -42,6 +42,8 @@ export class WSManager {
     // arrivava prima che il Chrome appena avviato si collegasse (4 run su 10
     // del benchmark del 27/09/2026), e il modello si arrendeva o indagava.
     this.connectWaitMs = opts.connectWait ?? (Number(process.env.CHROME_BRIDGE_CONNECT_WAIT_MS) || 10000);
+    // Launch mode con un browser che non puo' caricare l'estensione: sostituisce il consiglio generico
+    this.notConnectedHint = null;
     this.stopped = false;
     this.mode = null;            // 'primary' | 'relay'
     this.relayExtConnected = undefined;  // relay mode: stato estensione riportato dal primary
@@ -115,7 +117,7 @@ export class WSManager {
           `Chrome extension not connected (server ${this.mode} on ${this.host}:${this.port}`
           + `${this.mode === 'relay' ? ', reached through another chrome-bridge instance' : ''}`
           + `, waited ${Math.round(this.connectWaitMs / 1000)}s)`
-          + ' — open Chrome, check the chrome-bridge extension is enabled and its port matches',
+          + ` — ${this.notConnectedHint || 'open Chrome, check the chrome-bridge extension is enabled and its port matches'}`,
         );
       }
       return this._send(type, params);