chrome-bridge-mcp 1.23.2 → 1.23.4

package/README.md

@@ -42,6 +42,16 @@ element refs, `click(ref="n1")` follows with no discovery turn in between.
 > instead: an unpacked extension is dropped on every reboot, because the
 > container isn't mounted when Chrome starts.
 
+> **On Windows** `install.sh` does not run from PowerShell or cmd. Use the
+> plugin path below (`claude plugin marketplace add frsorrentino/chrome-bridge`,
+> then `claude plugin install chrome-bridge@chrome-bridge`) with the extension
+> from the Web Store, or run `install.sh` from Git Bash. The plugin's error
+> log hooks run in Git Bash, as Claude Code runs every hook, and need Python
+> 3.8+ as `python3`, `python` or `py` (the Microsoft Store `python3` alias is
+> skipped); without Python they stay silent and the tools work the same. For
+> launch mode see `CHROME_BRIDGE_BROWSER` below: Google Chrome cannot load the
+> extension there, Microsoft Edge can.
+
 `install.sh` registers the MCP server with `--scope user`. To do it by hand:
 `claude mcp add --scope user chrome-bridge node /path/to/server/index.js`.
 For `execute_js`, enable **Allow user scripts** in `chrome://extensions` →
@@ -138,6 +148,12 @@ isolated sessions or CI:
 node server/index.js --launch --headless
 ```
 
+It looks for Chromium, Microsoft Edge, Brave and last Google Chrome in their
+standard paths on Linux, macOS and Windows; `CHROME_BRIDGE_BROWSER` picks
+another binary. Google Chrome 137+ ignores `--load-extension`, so the
+extension never connects in it: use Chromium, Edge, Brave or Chrome for
+Testing.
+
 Pair it with `session_record` + `replay` for smoke tests with no model in the
 loop. In launch mode `execute_js` falls back to `new Function` when the
 user-script toggle isn't available.
@@ -186,6 +202,7 @@ Environment variables, each with a matching CLI flag:
 | `CHROME_BRIDGE_CAPS` / `--caps` | `core` | `core`, `audits`, `visual`, `network`, `storage`, `dom`, `files`, `all`. `install.sh` uses `all` |
 | `CHROME_BRIDGE_NO_JS` / `--no-js` | unset | No arbitrary JavaScript in the page: `execute_js` and `modify_dom` leave the schema, `wait_for(condition=function)` and `javascript:`/`data:` URLs are refused. `get_status` reports `js_evaluation` |
 | `CHROME_BRIDGE_READ_ROOT` / `--read-root` | unset | Where `upload_file` may read from. Unset: any file except keys and credentials (`~/.ssh`, `~/.aws`, `~/.gnupg`, `.env*`, `id_*`, `*.pem`, `*.key`, …), symlinks resolved first. Set: only files under this directory, whatever their name — the way to upload a certificate key on purpose |
+| `CHROME_BRIDGE_BROWSER` | unset | Launch mode only: the browser binary, e.g. `C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe`. Unset: the first of Chromium, Edge, Brave, Google Chrome found in the standard paths (on Linux Chromium, then Google Chrome). Google Chrome 137+ cannot load the extension |
 | `CHROME_BRIDGE_OBSERVE` | unset | `off` stops the local error log below. The plugin sets `hook`: its hooks keep the log and the server stays out of it |
 | `CHROME_BRIDGE_WRITE_ROOT` / `--write-root` | unset | Every path the model chooses (`save_to`, `output_path`, exports) must be under this directory, checked before the browser does any work; the server's own state under `~/.config/chrome-bridge` stays writable. The CLI is your shell and is not restricted |
 

package/extension/lib/command-outcome.js

@@ -0,0 +1,57 @@
+/**
+ * Esiti dei comandi che prima si fidavano di un valore di ripiego.
+ *
+ * Due casi osservati nel test Windows del 27/09/2026, validi su ogni OS:
+ * - `click #checkout-button` con `query_dom` a count 0 rispondeva
+ *   `{"clicked":true}` (type_text, hover e press_key allo stesso modo): la
+ *   funzione iniettata lancia «Element not found», `executeScript` risolve
+ *   con `result` undefined e il ripiego `?? { clicked: true }` lo
+ *   trasformava in un successo.
+ * - `navigate` verso una porta chiusa rispondeva `{url, title}` senza errore:
+ *   la scheda mostra la pagina d'errore di Chrome, che arriva comunque a
+ *   status 'complete'. L'errore vero passa solo da webNavigation.onErrorOccurred.
+ */
+
+/**
+ * Risultato di click, type_text, hover e press_key: senza un risultato della
+ * funzione iniettata il comando non è avvenuto, qualunque sia il motivo. Tutte
+ * e quattro rispondevano con un successo di ripiego ({clicked|typed|hovered|
+ * pressed: true}) su un selettore che non trova niente.
+ */
+export function elementOutcome(results, selector) {
+  const first = results?.[0];
+  if (first?.result != null) return first.result;
+  if (first?.error?.message) throw new Error(first.error.message);
+  if (!selector) throw new Error('The page returned no result for the command');
+  throw new Error(`Element not found: ${selector} (no element matches; check it with query_dom)`);
+}
+
+/**
+ * net::ERR_ABORTED non è un fallimento da riferire: è un download, una
+ * risposta 204 o una navigazione sostituita da un'altra.
+ */
+export function isReportableNavError(details) {
+  return details?.frameId === 0 && !!details.error && details.error !== 'net::ERR_ABORTED';
+}
+
+/**
+ * Raccoglie gli errori di rete del frame principale, per scheda, dal momento
+ * della chiamata. Va aperta PRIMA di tabs.create/tabs.update: un rifiuto di
+ * connessione in locale arriva in pochi millisecondi, prima che l'id della
+ * scheda nuova sia noto.
+ */
+export function watchNavErrors(onErrorOccurred) {
+  const byTab = new Map();
+  const listener = (details) => {
+    if (isReportableNavError(details)) byTab.set(details.tabId, details);
+  };
+  onErrorOccurred.addListener(listener);
+  return {
+    errorFor: (tabId) => byTab.get(tabId) ?? null,
+    stop: () => onErrorOccurred.removeListener(listener),
+  };
+}
+
+export function navErrorMessage(details, tabId) {
+  return `${details.error} loading ${details.url} (tab ${tabId} shows the browser's error page)`;
+}

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Chrome Bridge for Claude Code",
-  "version": "1.23.0",
+  "version": "1.23.4",
   "description": "Bridge your browser to Claude Code: 60 token-efficient web-dev automation tools over a local WebSocket. ChromeOS included.",
   "homepage_url": "https://github.com/frsorrentino/chrome-bridge",
   "minimum_chrome_version": "135",

package/extension/service-worker.js

@@ -12,6 +12,7 @@ import { createPacer } from './lib/capture-pacing.js';
 import { computeTiles } from './lib/tile-layout.js';
 import { classifyDownload } from './lib/download-state.js';
 import { findTextInPage } from './lib/find-text.js';
+import { elementOutcome, watchNavErrors, navErrorMessage } from './lib/command-outcome.js';
 const { pushError } = globalThis.__cbTelemetry;
 
 const DEFAULT_PORT = 8765;
@@ -779,29 +780,40 @@ async function cmdGetTabs({ include_windows = false, ended } = {}) {
 async function cmdNavigate({ url, tab_id }) {
   if (!url) throw new Error('Missing required parameter: url');
 
-  // Senza tab_id esplicito: apri SEMPRE in una nuova scheda (attiva) per non
-  // sovrascrivere la scheda/sessione corrente dell'utente. Con tab_id: naviga
-  // quella scheda specifica.
-  if (!tab_id) {
-    const newTab = await chrome.tabs.create({ url, active: true });
-    // Se la pagina è già 'complete' (es. cache) non aspettare il listener
-    if (newTab.status !== 'complete') {
-      await waitForComplete(newTab.id);
+  // La pagina d'errore di Chrome (connessione rifiutata, DNS) arriva a
+  // 'complete' come una pagina vera: l'errore si legge solo qui.
+  const navErrors = watchNavErrors(chrome.webNavigation.onErrorOccurred);
+  try {
+    // Senza tab_id esplicito: apri SEMPRE in una nuova scheda (attiva) per non
+    // sovrascrivere la scheda/sessione corrente dell'utente. Con tab_id: naviga
+    // quella scheda specifica.
+    if (!tab_id) {
+      const newTab = await chrome.tabs.create({ url, active: true });
+      // Se la pagina è già 'complete' (es. cache) non aspettare il listener
+      if (newTab.status !== 'complete') {
+        await waitForComplete(newTab.id);
+      }
+      const failed = navErrors.errorFor(newTab.id);
+      if (failed) throw new Error(navErrorMessage(failed, newTab.id));
+      const createdTab = await chrome.tabs.get(newTab.id);
+      return { url: createdTab.url, title: createdTab.title, tabId: newTab.id };
     }
-    const createdTab = await chrome.tabs.get(newTab.id);
-    return { url: createdTab.url, title: createdTab.title, tabId: newTab.id };
-  }
 
-  const tabId = await resolveTabId(tab_id);
+    const tabId = await resolveTabId(tab_id);
 
-  // Registra il listener PRIMA di tabs.update: una navigazione veloce (cache)
-  // può emettere 'complete' prima che il listener esista
-  const done = waitForComplete(tabId);
-  await chrome.tabs.update(tabId, { url });
-  await done;
+    // Registra il listener PRIMA di tabs.update: una navigazione veloce (cache)
+    // può emettere 'complete' prima che il listener esista
+    const done = waitForComplete(tabId);
+    await chrome.tabs.update(tabId, { url });
+    await done;
 
-  const updatedTab = await chrome.tabs.get(tabId);
-  return { url: updatedTab.url, title: updatedTab.title, tabId };
+    const failed = navErrors.errorFor(tabId);
+    if (failed) throw new Error(navErrorMessage(failed, tabId));
+    const updatedTab = await chrome.tabs.get(tabId);
+    return { url: updatedTab.url, title: updatedTab.title, tabId };
+  } finally {
+    navErrors.stop();
+  }
 }
 
 async function cmdScreenshot({ tab_id }) {
@@ -907,7 +919,7 @@ async function cmdClick({ selector, tab_id, frame_id, force = false, button = 'l
     world: 'MAIN',
   });
 
-  return results?.[0]?.result ?? { clicked: true };
+  return elementOutcome(results, selector);
 }
 
 async function cmdTypeText({ selector, text, mode = 'set', tab_id, frame_id }) {
@@ -982,7 +994,7 @@ async function cmdTypeText({ selector, text, mode = 'set', tab_id, frame_id }) {
     world: 'MAIN',
   });
 
-  return results?.[0]?.result ?? { typed: true };
+  return elementOutcome(results, selector);
 }
 
 // Impronta per page_changed: pochi interi letti nell'ISOLATED world (nessuna
@@ -3331,7 +3343,7 @@ async function cmdHover({ selector, tab_id, frame_id }) {
     args: [selector],
     world: 'MAIN',
   });
-  return results?.[0]?.result ?? { hovered: true };
+  return elementOutcome(results, selector);
 }
 
 // --- press_key ---
@@ -3398,7 +3410,7 @@ async function cmdPressKey({ key, selector, ctrl = false, shift = false, alt = f
     args: [key, selector || null, { ctrl, shift, alt, meta }],
     world: 'MAIN',
   });
-  return results?.[0]?.result ?? { pressed: true };
+  return elementOutcome(results, selector);
 }
 
 // --- get_frames ---

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "chrome-bridge-mcp",
   "mcpName": "io.github.frsorrentino/chrome-bridge",
-  "version": "1.23.2",
+  "version": "1.23.4",
   "type": "module",
   "description": "Chrome Bridge by frsorrentino: MCP server that lets Claude Code borrow a tab from your own logged-in Chrome and hand it back — logins, 2FA and CAPTCHAs stay with you (handoff). 60 tools; about half the cost of Claude in Chrome, measured; ChromeOS included.",
   "main": "server/index.js",

package/server/index.js

@@ -13,7 +13,7 @@ import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'
 import { WSManager } from './ws-manager.js';
 import { registerTools } from './tools.js';
 import { createObserver } from './observe.js';
-import { launchBrowser } from './launcher.js';
+import { BRANDED_CHROME_HINT, launchBrowser } from './launcher.js';
 import { DEFAULT_PORT, VERSION } from './protocol.js';
 
 // Launch mode: browser dedicato (profilo effimero + estensione unpacked).
@@ -108,6 +108,8 @@ async function main() {
       throw new Error(`--launch requires a dedicated port, but ${wsManager.port} is owned by another chrome-bridge. Unset CHROME_BRIDGE_PORT (ephemeral) or pick a free one.`);
     }
     browser = await launchBrowser({ port: wsManager.port, headless: HEADLESS });
+    // Il Chrome brandizzato parte ma resta muto: l'errore di connessione dice perche'
+    if (browser.branded) wsManager.notConnectedHint = BRANDED_CHROME_HINT;
   }
 
   // 3. Registra i tool MCP (filtrati per capability)

package/server/launcher.js

@@ -11,17 +11,50 @@ import { spawn } from 'node:child_process';
 import { cp, mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
+import { dirname, join, win32 } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const EXTENSION_SRC = join(dirname(fileURLToPath(import.meta.url)), '..', 'extension');
 
-const BROWSER_CANDIDATES = [
-  '/usr/bin/chromium',
-  '/usr/bin/chromium-browser',
-  '/usr/bin/google-chrome',
-  '/usr/bin/google-chrome-stable',
-];
+/**
+ * Percorsi standard per piattaforma. Chromium, Edge e Brave prima di Google
+ * Chrome: il Chrome brandizzato dalla 137 ignora --load-extension, parte ma
+ * l'estensione non si connette mai (test Windows del 27/09: Chrome 155 muto,
+ * Edge 154 connesso in meno di 6 s).
+ */
+export function browserCandidates(platform = process.platform, env = process.env) {
+  if (platform === 'win32') {
+    const bases = [env.LOCALAPPDATA, env.PROGRAMFILES, env['PROGRAMFILES(X86)']].filter(Boolean);
+    return [
+      ['Chromium', 'Application', 'chrome.exe'],
+      ['Microsoft', 'Edge', 'Application', 'msedge.exe'],
+      ['BraveSoftware', 'Brave-Browser', 'Application', 'brave.exe'],
+      ['Google', 'Chrome', 'Application', 'chrome.exe'],
+    ].flatMap((parts) => bases.map((b) => win32.join(b, ...parts)));
+  }
+  if (platform === 'darwin') {
+    return [
+      '/Applications/Chromium.app/Contents/MacOS/Chromium',
+      '/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge',
+      '/Applications/Brave Browser.app/Contents/MacOS/Brave Browser',
+      '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+    ];
+  }
+  return [
+    '/usr/bin/chromium',
+    '/usr/bin/chromium-browser',
+    '/usr/bin/google-chrome',
+    '/usr/bin/google-chrome-stable',
+  ];
+}
+
+/** Google Chrome brandizzato (non Chromium, non Chrome for Testing). */
+export function isBrandedChrome(path) {
+  return /google[\\/ _-]?chrome/i.test(path) && !/for[ _-]?testing/i.test(path);
+}
+
+export const BRANDED_CHROME_HINT = 'Google Chrome 137+ ignores --load-extension, so launch mode cannot load the extension into it:'
+  + ' set CHROME_BRIDGE_BROWSER to Chromium, Microsoft Edge, Brave or Chrome for Testing';
 
 export function findBrowser() {
   if (process.env.CHROME_BRIDGE_BROWSER) {
@@ -30,9 +63,10 @@ export function findBrowser() {
     }
     return process.env.CHROME_BRIDGE_BROWSER;
   }
-  const found = BROWSER_CANDIDATES.find((p) => existsSync(p));
+  const candidates = browserCandidates();
+  const found = candidates.find((p) => existsSync(p));
   if (!found) {
-    throw new Error(`No Chromium/Chrome binary found (tried: ${BROWSER_CANDIDATES.join(', ')}). Set CHROME_BRIDGE_BROWSER.`);
+    throw new Error(`No Chromium-based browser found (tried: ${candidates.join(', ')}). Set CHROME_BRIDGE_BROWSER to Chromium, Edge, Brave or Chrome for Testing.`);
   }
   return found;
 }
@@ -93,5 +127,7 @@ export async function launchBrowser({ port, headless = false }) {
   };
 
   console.error(`[chrome-bridge] launched ${browser}${headless ? ' (headless)' : ''} pid=${proc.pid}, ws port ${port}`);
-  return { pid: proc.pid, stop };
+  const branded = isBrandedChrome(browser);
+  if (branded) console.error(`[chrome-bridge] warning: ${BRANDED_CHROME_HINT}`);
+  return { pid: proc.pid, stop, branded };
 }

package/server/observe.js

@@ -40,12 +40,51 @@ const DEFAULTS = { enabled: true, dir: '', max_records: 2000, max_days: 90 };
 // \w di Python è Unicode: qui lo stesso insieme, esplicito.
 const W = '[\\p{L}\\p{N}_]';
 
+// Una home in qualunque forma, come observe.py (claude-observe d3fa492, invio
+// anonimo da Windows): C:\Users\x, C:/Users/x, /c/Users/x, /mnt/c/Users/x,
+// /cygdrive/c/Users/x, \\?\C:\Users\x, i \\ dentro JSON, /home/x, /Users/x.
+const SEP = '[\\\\/]+';
+const DRIVE = '(?:(?:[\\\\/]{2}\\?[\\\\/]+)?\\b[a-z]:|/mnt/[a-z]|/cygdrive/[a-z]|/[a-z](?=[\\\\/]))';
+const SEG = '[^\\\\/\\s"\'`<>|:*?,;()\\[\\]]';
+// il nome della cartella puo' avere spazi: con gli spazi solo se dopo viene un separatore
+const HOME_ANY_RE = new RegExp(`${DRIVE}?${SEP}(?:users|home|documents and settings)${SEP}(?:${SEG}+(?: ${SEG}+)+(?=[\\\\/])|${SEG}+)`, 'giu');
+const reEscape = (x) => x.replace(/[.*+?^${}()|[\]\\/]/gu, '\\$&');
+
+// Le home di questa macchina senza distinzione di separatore, unita' e
+// maiuscole (anche una USERPROFILE fuori da Users), e il nome utente come
+// segmento di percorso.
+function homeRes(env = process.env) {
+  const homes = [...new Set([homedir(), env.USERPROFILE || '', env.HOME || ''])];
+  const pats = [];
+  for (const h of homes.sort((a, b) => b.length - a.length)) {
+    let parts = h.split(/[\\/]+/u).filter((x) => x && x !== '?');
+    if (!parts.length) continue;
+    const drive = parts.length > 1 ? /^([A-Za-z]):?$/u.exec(parts[0]) : null;
+    let head = '';
+    if (drive && (parts[0].endsWith(':') || parts[0].length === 1)) {
+      const d = drive[1];
+      head = `(?:(?:[\\\\/]{2}\\?[\\\\/]+)?\\b${d}:|/mnt/${d}|/cygdrive/${d}|/${d}(?=[\\\\/]))`;
+      parts = parts.slice(1);
+    }
+    pats.push(head + parts.map((x) => SEP + reEscape(x)).join(''));
+  }
+  const names = new Set(homes.filter(Boolean).map((h) => basename(h.replace(/\\/gu, '/').replace(/\/+$/u, ''))));
+  for (const k of ['USERNAME', 'USER', 'LOGNAME']) names.add(env[k] || '');
+  const list = [...names].filter((n) => n.length >= 2 && !['users', 'home'].includes(n.toLowerCase())).sort((a, b) => b.length - a.length);
+  return [
+    pats.map((p) => new RegExp(`${p}(?![^\\\\/\\s"'\`<>|:*?,;()\\[\\]])`, 'giu')),
+    list.length ? new RegExp(`(?<=[\\\\/])(?:${list.map(reEscape).join('|')})(?=[\\\\/\\s"'\`<>|:*?,;()\\[\\]]|$)`, 'giu') : null,
+  ];
+}
+const [HOME_RES, USER_SEG_RE] = homeRes();
+
 export function scrub(text, limit = 300) {
   let t = String(text ?? '');
-  const home = homedir();
-  if (home && home !== '/') t = t.split(home).join('~');
   t = t.replace(new RegExp(`(?:${W}|[.+-])+@(?:${W}|-)+\\.(?:${W}|[.-])+`, 'gu'), '<EMAIL>');
   t = t.replace(/(https?:\/\/[^/\s?#"'»]+)[^\s"'»]*/gu, '$1/…');
+  for (const r of HOME_RES) t = t.replace(r, '~');
+  t = t.replace(HOME_ANY_RE, '~');
+  if (USER_SEG_RE) t = t.replace(USER_SEG_RE, '<USER>');
   t = t.replace(/\b(token|password|passwd|secret|api[_-]?key|authorization|bearer)("?\s*[:=]\s*|\s+)\S+/giu, '$1$2<SECRET>');
   t = t.replace(/\b(value_after|value|text)("?\s*[:=]?\s*)("[^"]*"|'[^']*'|«[^»]*»)/giu, '$1$2<STR>');
   t = t.replace(/\b(?=[A-Za-z0-9_\-+/]*\d)(?=[A-Za-z0-9_\-+/]*[A-Za-z])[A-Za-z0-9_\-+/=]{24,}\b/gu, '<SECRET>');

package/server/protocol.js

@@ -93,7 +93,7 @@ export const MessageType = Object.freeze({
 });
 
 // Versione
-export const VERSION               = '1.23.2';
+export const VERSION               = '1.23.4';
 
 // Configurazione
 export const DEFAULT_PORT          = 8765;

package/server/ws-manager.js

@@ -42,6 +42,8 @@ export class WSManager {
     // arrivava prima che il Chrome appena avviato si collegasse (4 run su 10
     // del benchmark del 27/09/2026), e il modello si arrendeva o indagava.
     this.connectWaitMs = opts.connectWait ?? (Number(process.env.CHROME_BRIDGE_CONNECT_WAIT_MS) || 10000);
+    // Launch mode con un browser che non puo' caricare l'estensione: sostituisce il consiglio generico
+    this.notConnectedHint = null;
     this.stopped = false;
     this.mode = null;            // 'primary' | 'relay'
     this.relayExtConnected = undefined;  // relay mode: stato estensione riportato dal primary
@@ -115,7 +117,7 @@ export class WSManager {
           `Chrome extension not connected (server ${this.mode} on ${this.host}:${this.port}`
           + `${this.mode === 'relay' ? ', reached through another chrome-bridge instance' : ''}`
           + `, waited ${Math.round(this.connectWaitMs / 1000)}s)`
-          + ' — open Chrome, check the chrome-bridge extension is enabled and its port matches',
+          + ` — ${this.notConnectedHint || 'open Chrome, check the chrome-bridge extension is enabled and its port matches'}`,
         );
       }
       return this._send(type, params);