chrome-bridge-mcp 1.8.0 → 1.10.0

package/README.md

@@ -1,10 +1,10 @@
 # Chrome Bridge
 
-![License: MIT](https://img.shields.io/badge/license-MIT-green) ![Node 18+](https://img.shields.io/badge/node-%E2%89%A518-brightgreen) ![Chrome 135+](https://img.shields.io/badge/chrome-%E2%89%A5135-blue) ![Tests](https://img.shields.io/badge/tests-109%20unit%20%2B%20e2e-brightgreen) [![Chrome Web Store](https://img.shields.io/badge/web%20store-published-blue)](https://chromewebstore.google.com/detail/chrome-bridge-for-claude/bioknpaeahidbelaljjohjofiloeodmb)
+![License: MIT](https://img.shields.io/badge/license-MIT-green) ![Node 18+](https://img.shields.io/badge/node-%E2%89%A518-brightgreen) ![Chrome 135+](https://img.shields.io/badge/chrome-%E2%89%A5135-blue) ![Tests](https://img.shields.io/badge/tests-131%20unit%20%2B%20e2e-brightgreen) [![Chrome Web Store](https://img.shields.io/badge/web%20store-published-blue)](https://chromewebstore.google.com/detail/chrome-bridge-for-claude/bioknpaeahidbelaljjohjofiloeodmb)
 
 **Chrome Bridge is an MCP server that connects Claude Code to your real, logged-in Chrome browser — measured 2.75× fewer turns and 2.28× lower cost than the official "Claude in Chrome" extension on a form-filling task, with ~3× the toolset and no paid plan.**
 
-By using a local WebSocket bridge and a specialized Chrome extension, Chrome Bridge provides 59 web-development tools (navigation, DOM inspection, visual regression, audits, network mocking) and a dedicated headless instance for CI. It is self-hosted, local-only, and requires no paid plan.
+By using a local WebSocket bridge and a specialized Chrome extension, Chrome Bridge provides 60 web-development tools (navigation, DOM inspection, visual regression, audits, network mocking) and a dedicated headless instance for CI. It is self-hosted, local-only, and requires no paid plan.
 
 ## Why Chrome Bridge?
 
@@ -31,12 +31,12 @@ unfavourable ones) and the harness limits are in
 - **Honest caveat:** per *turn*, Chrome Bridge costs slightly more than Claude in Chrome (41,985 vs 36,613 cache-read tokens; $0.0373 vs $0.0337). The win is in the number of turns.
 
 ### 2. Feature Comparison
-Chrome Bridge ships 59 specialized tools (30 core by default) compared to ~20 in Claude in Chrome. It is also the only automation that drives the real host Chrome on ChromeOS/Crostini.
+Chrome Bridge ships 60 specialized tools (31 core by default) compared to ~20 in Claude in Chrome. It is also the only automation that drives the real host Chrome on ChromeOS/Crostini.
 
 | | Chrome Bridge | Claude in Chrome | Chrome DevTools MCP | Playwright MCP |
 |---|---|---|---|---|
 | **ChromeOS / Crostini** | **Yes** (real host) | No | Container only | Container only |
-| **Tools** | **59** (30 core) | ~20 | ~50 | 23 core (71 total) |
+| **Tools** | **60** (31 core) | ~20 | ~50 | 23 core (71 total) |
 | **Requires Paid Plan** | **No** | Yes (Pro+) | No | No |
 | **Network Mocking** | **Yes** (stub/headers) | No | No | Yes |
 | **Visual Regression** | **Yes** (`screenshot_diff`) | No | No | No |
@@ -63,7 +63,7 @@ Claude Code calls `navigate` (returning clickable element refs), `accessibility_
 
 ## Token-Efficient Design
 
-- **Compact Schemas**: 30 core tools use ≈3.9k tokens of schemas (vs Playwright MCP's ~4.6k). Specialized groups (audits, visual, network, storage, dom, files) are opt-in via `--caps`.
+- **Opt-in Surface**: 31 core tools cost ≈7.4k tokens of `tools/list`, all 60 cost ≈14.1k; specialized groups (audits, visual, network, storage, dom, files) are opt-in via `--caps`. That core figure was ≈3.8k in 1.8.0 and roughly doubled in 1.10.0: MCP annotations on every tool, rewritten descriptions, and a documented `.describe()` on all 254 parameters (coverage went from 35% to 100%). The trade is deliberate and it is not free — on the form benchmark it adds ≈8% to the cache-read tokens per turn — but the measured advantage was never prefix size, it was round trips: 2.75× fewer turns. Playwright MCP's 23 core tools measured ≈4.6k in July 2026, so on prefix size alone it is the leaner one. Measure ours with `npm run measure`.
 - **Act-from-Result**: Tools attach a capped preview of interactive elements with short refs. Actions only report a `page_changed` delta when the URL or title actually changes.
 - **Optimized Media**: Screenshots are downscaled to ≤1568px. Full-page captures are sliced into readable segments.
 - **Zero-Token Escape Hatches**: The [CLI](#cli) skips MCP schemas entirely, and recorded flows [replay](#launch-mode-headless--ci) without any model in the loop.
@@ -84,7 +84,7 @@ Claude Code  <--stdio-->  MCP Server  <--WebSocket :8765-->  Chrome Extension
 
 The **MCP Server** (Node.js) handles the protocol and tool logic. The **Chrome Extension** (MV3) executes commands via Chrome APIs. User scripts (`execute_js`) run via `chrome.userScripts.execute()`, requiring the "Allow user scripts" toggle in extension settings.
 
-## Tools (59 total)
+## Tools (60 total)
 
 ### Core & Navigation (7)
 `get_status`, `get_tabs`, `create_tab`, `navigate`, `tab_action`, `get_frames`, `screenshot`.
@@ -95,8 +95,8 @@ The **MCP Server** (Node.js) handles the protocol and tool logic. The **Chrome E
 ### DOM & Inspection (11)
 `read_page`, `extract`, `get_page_info`, `query_dom`, `modify_dom`, `find_text`, `get_interactives`, `inject_css`, `highlight_elements`, `watch_dom`, `measure_spacing`.
 
-### Debugging & Network (8)
-`execute_js`, `read_console`, `monitor_network`, `monitor_websocket`, `network_rules` (block/redirect/stub/headers), `get_performance`, `web_vitals`, `list_event_listeners`.
+### Debugging & Network (9)
+`execute_js`, `read_console`, `monitor_network`, `monitor_websocket`, `network_rules` (block/redirect/stub/headers), `http_request` (sent with the user's session cookies), `get_performance`, `web_vitals`, `list_event_listeners`.
 
 ### Visual & Responsive (7)
 `element_screenshot`, `full_page_screenshot`, `screenshot_diff`, `viewport_resize`, `set_zoom`, `emulate_media`, `set_geolocation`.
@@ -132,7 +132,7 @@ Configure the server via environment variables (or the matching CLI flags):
 - `CHROME_BRIDGE_PORT`: Default `8765`.
 - `CHROME_BRIDGE_HOST` / `--host`: Bind address, default `127.0.0.1`. Set to `0.0.0.0` **only** where the browser lives outside the container (ChromeOS/Crostini port-forward) — and pair it with a token.
 - `CHROME_BRIDGE_TOKEN`: Shared secret required on both `ext_init` and `relay_init`. Strongly recommended whenever the bind is not loopback.
-- `CHROME_BRIDGE_CAPS` / `--caps`: Tool groups to load (`core`, `audits`, `visual`, `network`, `storage`, `dom`, `files`, or `all`). `install.sh` registers with `all`; the bare server defaults to `core` (30 tools). `get_status` reports `caps_active` and `caps_available`.
+- `CHROME_BRIDGE_CAPS` / `--caps`: Tool groups to load (`core`, `audits`, `visual`, `network`, `storage`, `dom`, `files`, or `all`). `install.sh` registers with `all`; the bare server defaults to `core` (31 tools). `get_status` reports `caps_active` and `caps_available`.
 
 Run `node tools/measure-schema.mjs` to see the exact schema cost of the active set.
 

package/extension/manifest.json

@@ -1,8 +1,8 @@
 {
   "manifest_version": 3,
   "name": "Chrome Bridge for Claude Code",
-  "version": "1.8.0",
-  "description": "Bridge your browser to Claude Code: 59 token-efficient web-dev automation tools over a local WebSocket. ChromeOS included.",
+  "version": "1.10.0",
+  "description": "Bridge your browser to Claude Code: 60 token-efficient web-dev automation tools over a local WebSocket. ChromeOS included.",
   "homepage_url": "https://github.com/frsorrentino/chrome-bridge",
   "minimum_chrome_version": "135",
   "permissions": [

package/extension/service-worker.js

@@ -423,6 +423,8 @@ async function executeCommand(msg) {
       return await cmdManageDownloads(params);
     case 'save_page':
       return await cmdSavePage(params);
+    case 'http_request':
+      return await cmdHttpRequest(params);
     case 'set_zoom':
       return await cmdSetZoom(params);
     case 'http_auth':
@@ -2177,12 +2179,12 @@ async function cmdWatchDom({ selector = 'body', attributes = true, childList = t
 
 // --- emulate_media ---
 
-async function cmdEmulateMedia({ colorScheme, reducedMotion, printMode = false, reset = false, tab_id }) {
+async function cmdEmulateMedia({ colorScheme, reducedMotion, printMode = false, user_agent = null, reset = false, tab_id }) {
   const tabId = await resolveTabId(tab_id);
 
   const results = await chrome.scripting.executeScript({
     target: { tabId },
-    func: (cs, rm, print, doReset) => {
+    func: (cs, rm, print, ua, doReset) => {
       const STYLE_ID = '__chromeBridge_media';
       const META_ID = '__chromeBridge_colorScheme';
 
@@ -2196,6 +2198,15 @@ async function cmdEmulateMedia({ colorScheme, reducedMotion, printMode = false,
           window.matchMedia = window.__chromeBridge_origMatchMedia;
           delete window.__chromeBridge_origMatchMedia;
         }
+        // navigator.userAgent è stato ridefinito con un getter: per tornare
+        // all'originale va rimossa la proprietà own, così riemerge quella del
+        // prototipo.
+        if (window.__chromeBridge_uaPatched) {
+          for (const prop of ['userAgent', 'appVersion', 'platform']) {
+            try { delete navigator[prop]; } catch { /* proprietà non configurabile: si prosegue */ }
+          }
+          delete window.__chromeBridge_uaPatched;
+        }
         return { reset: true };
       }
 
@@ -2261,9 +2272,26 @@ async function cmdEmulateMedia({ colorScheme, reducedMotion, printMode = false,
         meta.remove();
       }
 
+      // navigator.userAgent non è scrivibile: va ridefinita come getter sull'
+      // istanza, che precede quella del prototipo. Vale per il JS della pagina,
+      // non per l'header della richiesta (quello è network_rules).
+      if (ua) {
+        for (const [prop, value] of [
+          ['userAgent', ua],
+          ['appVersion', ua.replace(/^Mozilla\//, '')],
+          ['platform', /iPhone|iPad|Android/i.test(ua) ? 'iPhone' : navigator.platform],
+        ]) {
+          try {
+            Object.defineProperty(navigator, prop, { get: () => value, configurable: true });
+          } catch { /* alcune pagine congelano navigator: si prosegue */ }
+        }
+        window.__chromeBridge_uaPatched = true;
+        overrides.userAgent = ua;
+      }
+
       return { emulated: overrides };
     },
-    args: [colorScheme || null, reducedMotion || null, printMode, reset],
+    args: [colorScheme || null, reducedMotion || null, printMode, user_agent, reset],
     world: 'MAIN',
   });
   return results?.[0]?.result ?? {};
@@ -3440,6 +3468,46 @@ async function cmdManageDownloads({ action, timeout = 30000, limit = 10 }) {
 
 // --- save_page (MHTML via pageCapture) ---
 
+// --- http_request ---
+
+/**
+ * La fetch parte dal service worker, non dal server Node: con host permission
+ * `<all_urls>` e `credentials: 'include'` Chrome allega i cookie di sessione
+ * dell'utente. È l'unica differenza che conta — la stessa URL richiesta da Node
+ * restituisce la pagina di login.
+ */
+async function cmdHttpRequest({ url, method = 'GET', headers, body, binary = false }) {
+  if (!/^https?:\/\//i.test(String(url || ''))) {
+    throw new Error(`http_request needs an absolute http(s) URL, got "${url}"`);
+  }
+  const res = await fetch(url, {
+    method,
+    headers: headers && Object.keys(headers).length ? headers : undefined,
+    body: body ?? undefined,
+    credentials: 'include',
+    redirect: 'follow',
+  });
+
+  const outHeaders = {};
+  for (const [k, v] of res.headers.entries()) outHeaders[k] = v;
+  const common = {
+    status: res.status,
+    ok: res.ok,
+    // res.url riflette i redirect seguiti: senza, un 302 verso il login
+    // sembrerebbe una risposta della URL chiesta.
+    url: res.url,
+    content_type: res.headers.get('content-type') || '',
+    headers: outHeaders,
+  };
+
+  if (binary) {
+    const blob = await res.blob();
+    return { ...common, body_b64: await blobToBase64(blob), size: blob.size };
+  }
+  const text = await res.text();
+  return { ...common, body: text, size: text.length };
+}
+
 async function cmdSavePage({ tab_id }) {
   const tabId = await resolveTabId(tab_id);
   const blob = await new Promise((resolve, reject) => {

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "chrome-bridge-mcp",
   "mcpName": "io.github.frsorrentino/chrome-bridge",
-  "version": "1.8.0",
+  "version": "1.10.0",
   "type": "module",
-  "description": "MCP server with 59 tools for browser automation via Chrome extension. Works on ChromeOS/Crostini.",
+  "description": "MCP server with 60 tools for browser automation via Chrome extension. Works on ChromeOS/Crostini.",
   "main": "server/index.js",
   "bin": {
     "chrome-bridge-mcp": "server/index.js",

package/server/protocol.js

@@ -58,6 +58,7 @@ export const MessageType = Object.freeze({
   SET_GEOLOCATION:       'set_geolocation',
   MANAGE_DOWNLOADS:      'manage_downloads',
   SAVE_PAGE:             'save_page',
+  HTTP_REQUEST:          'http_request',
   SET_ZOOM:              'set_zoom',
   HTTP_AUTH:             'http_auth',
   GET_RESPONSE_HEADERS:  'get_response_headers',
@@ -80,7 +81,7 @@ export const MessageType = Object.freeze({
 });
 
 // Versione
-export const VERSION               = '1.8.0';
+export const VERSION               = '1.10.0';
 
 // Configurazione
 export const DEFAULT_PORT          = 8765;
@@ -129,6 +130,7 @@ export function getTimeout(type) {
     || type === MessageType.UPLOAD_FILE
     || type === MessageType.MANAGE_DOWNLOADS
     || type === MessageType.SAVE_PAGE
+    || type === MessageType.HTTP_REQUEST
     || type === MessageType.WAIT_FOR_FUNCTION
     || type === MessageType.SCROLL_UNTIL) return 60000;
   return COMMAND_TIMEOUT_MS;