codex-control-chrome-mcp 1.4.1 → 1.4.2

package/CHANGELOG.md

@@ -6,6 +6,12 @@ This project follows semantic versioning.
 
 ## [Unreleased]
 
+## [1.4.2] - 2026-11-11
+
+### Fixed
+
+- `attach` now carries `networkPolicy: { constraints: [] }`. Extension 1.26.1102.11740 passes `e.networkPolicy` to `ar.getInstance().attach(tabId, e.networkPolicy)`, and that installer reads `options.timeoutMs` before any validation, so a request without the field threw `Cannot read properties of undefined (reading 'timeoutMs')` and the debugger never attached. Every CDP tool (`chrome_navigate`, `chrome_evaluate`, `chrome_screenshot`, `chrome_cdp_send`, `chrome_attach_tab`) failed on it. Empty constraints normalize to `defaultAction: "allow"` with no rules, and the installer returns before touching declarativeNetRequest, so the field adds no policy side effect. Verified against the live extension: plain `attach` fails, `attach` with the empty policy succeeds, `Page.navigate` and `Runtime.evaluate` run.
+
 ## [1.4.1] - 2026-07-04
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-control-chrome-mcp",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "MCP server and native host bridge for controlling Chrome through the Codex Chrome extension.",
   "license": "MIT",
   "type": "module",

package/src/mcp-server.js

@@ -347,7 +347,13 @@ export function registerTools(server, runtime) {
  * doubles as a liveness probe that surfaces a stale attach as "not attached".
  */
 async function ensureAttached(runtime, tabId) {
-  await runtime.request("attach", { tabId });
+  // The extension's attach handler passes `networkPolicy` straight to its
+  // declarativeNetRequest policy installer, which reads `options.timeoutMs`
+  // before checking anything. Omitting the field throws a TypeError and the
+  // attach never happens. Empty constraints normalize to defaultAction "allow"
+  // with no rules, which the installer returns from without installing
+  // anything, so this keeps the request free of side effects.
+  await runtime.request("attach", { tabId, networkPolicy: { constraints: [] } });
   try {
     await executeCdp(runtime, {
       tabId,