chrome-devtools-mcp-for-extension 0.18.1 → 0.18.3

package/build/src/profile-resolver.js

@@ -48,7 +48,25 @@ export function resolveUserDataDir(opts) {
         clientId = sanitize(detected);
         console.error(`[profiles] Auto-detected client from parent process: ${clientId}`);
     }
-    // 0) CI detection → ephemeral session directory (unless MCP_PERSIST_PROFILES)
+    // 0a) MCP_SHARED_PROFILE → shared profile across all projects
+    //     - Uses a single profile for all projects to avoid re-login
+    if (opts.env.MCP_SHARED_PROFILE === 'true') {
+        const key = 'shared';
+        const p = projectProfilePath(key, clientId, channel);
+        const result = {
+            path: p,
+            reason: 'MCP_USER_DATA_DIR', // Treat as explicit user choice
+            projectKey: key,
+            projectName: 'shared',
+            hash: '00000000',
+            clientId,
+            channel,
+        };
+        console.error(`[profiles] resolved(MCP_SHARED_PROFILE): ${result.path} (client=${clientId})`);
+        console.error(`[profiles] ℹ️  Using shared profile - login state persists across all projects`);
+        return result;
+    }
+    // 0b) CI detection → ephemeral session directory (unless MCP_PERSIST_PROFILES)
     //    - This happens before other priorities to keep CI clean by default.
     if (isCI(opts.env) && !opts.env.MCP_PERSIST_PROFILES) {
         const sessionId = `${process.pid}-${Date.now()}`;

package/build/src/tools/gemini-web.js

@@ -181,27 +181,30 @@ export const askGeminiWeb = defineTool({
             response.appendResponseLine('質問を送信中...');
             // Input text using the textbox element
             // Gemini uses a textbox with role="textbox" or a div with contenteditable
+            // NOTE: Gemini has Trusted Types CSP, so we cannot use innerHTML directly
             const questionSent = await page.evaluate((questionText) => {
+                // Helper to clear element content without innerHTML (CSP-safe)
+                const clearElement = (el) => {
+                    while (el.firstChild) {
+                        el.removeChild(el.firstChild);
+                    }
+                };
                 // Try textbox first (Gemini's current implementation)
                 const textbox = document.querySelector('[role="textbox"]');
                 if (textbox) {
                     textbox.focus();
-                    // Clear existing content
-                    textbox.innerHTML = '';
-                    // Insert text
-                    const p = document.createElement('p');
-                    p.textContent = questionText;
-                    textbox.appendChild(p);
+                    // Clear existing content (CSP-safe)
+                    clearElement(textbox);
+                    // Insert text using textContent (CSP-safe)
+                    textbox.textContent = questionText;
                     textbox.dispatchEvent(new Event('input', { bubbles: true }));
                     return true;
                 }
                 // Fallback to contenteditable
                 const editor = document.querySelector('div[contenteditable="true"]');
                 if (editor) {
-                    editor.innerHTML = '';
-                    const p = document.createElement('p');
-                    p.textContent = questionText;
-                    editor.appendChild(p);
+                    clearElement(editor);
+                    editor.textContent = questionText;
                     editor.dispatchEvent(new Event('input', { bubbles: true }));
                     return true;
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chrome-devtools-mcp-for-extension",
-  "version": "0.18.1",
+  "version": "0.18.3",
   "description": "MCP server for Chrome extension development with Web Store automation. Fork of chrome-devtools-mcp with extension-specific tools.",
   "type": "module",
   "bin": "./scripts/cli.mjs",