mcp-browser-extension 0.9.28 → 0.9.30

package/extension-dist/background.js

@@ -162,7 +162,13 @@
     // All three are page CONTENT and gate exactly like the reads above.
     "frames_list",
     "observers",
-    "print_pdf"
+    "print_pdf",
+    // The page's accessibility tree, its cookies (session secrets), and its
+    // web storage are content too. A storage write is refused in safe mode by
+    // the extension's storage handler; the domain gate here covers every op.
+    "snapshot",
+    "get_cookies",
+    "storage"
   ]);
   var MUTATE_CONTENT = /* @__PURE__ */ new Set([
     "click",
@@ -171,7 +177,8 @@
     "press",
     "hover",
     "scroll",
-    "fill_form"
+    "fill_form",
+    "select_option"
   ]);
   var NAVIGATION = /* @__PURE__ */ new Set([
     "navigate",
@@ -188,7 +195,8 @@
     return MUTATE_CONTENT.has(method) || NAVIGATION.has(method) || TAB_MUTATE.has(method);
   }
   function isUrlGated(method) {
-    return READ_CONTENT.has(method) || MUTATE_CONTENT.has(method) || NAVIGATION.has(method) || method === "eval" || method === "upload_file";
+    return READ_CONTENT.has(method) || MUTATE_CONTENT.has(method) || NAVIGATION.has(method) || method === "eval" || method === "upload_file" || // Gated on where the bytes come from: the URL when one is given, else the tab.
+    method === "download_file";
   }
   function hostOf(url) {
     try {
@@ -377,6 +385,11 @@
         const t = labelledby.split(/\s+/).map((id) => document.getElementById(id)?.innerText ?? "").join(" ").trim();
         if (t) return t;
       }
+      const labels = el.labels;
+      if (labels && labels.length > 0) {
+        const t = Array.from(labels).map((l) => l.innerText).join(" ").replace(/\s+/g, " ").trim();
+        if (t) return t;
+      }
       const ph = el.getAttribute("placeholder");
       if (ph) return ph.trim();
       const title = el.getAttribute("title");
@@ -405,8 +418,9 @@
     };
     const seen = /* @__PURE__ */ new Set();
     const candidates = [];
+    const cap = Math.max(max * 2, max + 50);
     const collect = (root) => {
-      if (candidates.length >= max) return;
+      if (candidates.length >= cap) return;
       let matched;
       try {
         matched = root.querySelectorAll(sel);
@@ -414,7 +428,7 @@
         matched = [];
       }
       for (let i = 0; i < matched.length; i++) {
-        if (candidates.length >= max) break;
+        if (candidates.length >= cap) break;
         const el = matched[i];
         if (seen.has(el)) continue;
         seen.add(el);
@@ -427,7 +441,7 @@
         hosts = [];
       }
       for (let i = 0; i < hosts.length; i++) {
-        if (candidates.length >= max) break;
+        if (candidates.length >= cap) break;
         const sr = hosts[i].shadowRoot;
         if (sr) collect(sr);
       }
@@ -491,7 +505,7 @@
         if (picked.length >= max) break;
         picked.push(read(el));
       }
-      truncated = els.length > picked.length;
+      truncated = els.length > picked.length || candidates.length >= cap;
     }
     const nodes = [];
     let n = 0;
@@ -632,6 +646,15 @@
           el2.click();
           return { found: true };
         }
+        case "check": {
+          if (!el2) return { found: false };
+          const box = el2;
+          if (box.checked !== (a.checked !== false)) {
+            el2.scrollIntoView({ block: "center" });
+            el2.click();
+          }
+          return { found: true, checked: box.checked };
+        }
         case "type": {
           if (!el2) return { found: false };
           if (el2.isContentEditable) {
@@ -644,9 +667,24 @@
           const node = el2;
           if (!node) return { found: false };
           node.focus();
-          const next = (a.clear ? "" : node.value ?? "") + (a.text ?? "");
-          setValue(node, next);
+          if (a.keyEvents) {
+            if (a.clear) setValue(node, "");
+            for (const ch of a.text ?? "") {
+              const ev = { key: ch, bubbles: true, cancelable: true };
+              const go = node.dispatchEvent(new KeyboardEvent("keydown", ev));
+              if (go && node.dispatchEvent(new KeyboardEvent("keypress", ev))) setValue(node, (node.value ?? "") + ch);
+              node.dispatchEvent(new KeyboardEvent("keyup", ev));
+            }
+          } else {
+            setValue(node, (a.clear ? "" : node.value ?? "") + (a.text ?? ""));
+          }
           node.dispatchEvent(new Event("change", { bubbles: true }));
+          if (a.pressEnter) {
+            const ev = { key: "Enter", code: "Enter", keyCode: 13, which: 13, bubbles: true, cancelable: true };
+            const go = node.dispatchEvent(new KeyboardEvent("keydown", ev)) && node.dispatchEvent(new KeyboardEvent("keypress", ev));
+            node.dispatchEvent(new KeyboardEvent("keyup", ev));
+            if (go && node instanceof HTMLInputElement && node.form) node.form.requestSubmit();
+          }
           return { found: true };
         }
         case "focus": {
@@ -1153,6 +1191,7 @@
       const u = cmd.params.url;
       return typeof u === "string" ? u : "";
     }
+    if (cmd.method === "download_file" && typeof cmd.params.url === "string") return cmd.params.url;
     return observedTabUrl(cmd, tab);
   }
   async function observedTabUrl(cmd, tab) {
@@ -1202,23 +1241,41 @@
       done = resolve;
     });
     const isTop = (d) => d.tabId === tabId && d.frameId === 0 && d.timeStamp >= start - 1;
+    let started = false;
+    let startUrl = "";
+    let committed = false;
+    const reached = () => {
+      if (waitUntil === "networkidle") setTimeout(done, NETWORK_QUIET_MS);
+      else done();
+    };
+    const onBefore = (d) => {
+      if (!isTop(d)) return;
+      started = true;
+      startUrl = d.url;
+      committed = false;
+    };
+    const onCommitted = (d) => {
+      if (isTop(d)) committed = true;
+    };
     const onDom = (d) => {
-      if (isTop(d) && waitUntil === "domcontentloaded") done();
+      if (isTop(d) && committed && waitUntil === "domcontentloaded") done();
     };
     const onCompleted = (d) => {
-      if (!isTop(d)) return;
-      if (waitUntil === "networkidle") setTimeout(done, NETWORK_QUIET_MS);
-      else done();
+      if (isTop(d) && committed) reached();
     };
     const onSameDoc = (d) => {
       if (isTop(d)) done();
     };
     const onError = (d) => {
-      if (isTop(d)) done();
+      if (!isTop(d) || !started) return;
+      if (/ERR_ABORTED/.test(d.error) && d.url !== startUrl) return;
+      done();
     };
     const onUpdated = (id, info) => {
-      if (id === tabId && info.status === "complete") done();
+      if (id === tabId && info.status === "complete" && committed) reached();
     };
+    chrome.webNavigation.onBeforeNavigate.addListener(onBefore);
+    chrome.webNavigation.onCommitted.addListener(onCommitted);
     chrome.webNavigation.onDOMContentLoaded.addListener(onDom);
     chrome.webNavigation.onCompleted.addListener(onCompleted);
     chrome.webNavigation.onHistoryStateUpdated.addListener(onSameDoc);
@@ -1226,6 +1283,8 @@
     chrome.webNavigation.onErrorOccurred.addListener(onError);
     chrome.tabs.onUpdated.addListener(onUpdated);
     const cleanup = () => {
+      chrome.webNavigation.onBeforeNavigate.removeListener(onBefore);
+      chrome.webNavigation.onCommitted.removeListener(onCommitted);
       chrome.webNavigation.onDOMContentLoaded.removeListener(onDom);
       chrome.webNavigation.onCompleted.removeListener(onCompleted);
       chrome.webNavigation.onHistoryStateUpdated.removeListener(onSameDoc);
@@ -1246,6 +1305,20 @@
       cancel: cleanup
     };
   }
+  async function historyStep(tabId, step) {
+    const went = await execInTab(
+      tabId,
+      (d) => {
+        const nav = window.navigation;
+        const can = nav ? d < 0 ? nav.canGoBack : nav.canGoForward : d < 0 && history.length > 1;
+        if (can) history.go(d);
+        return can;
+      },
+      [step],
+      "MAIN"
+    ).catch(() => false);
+    return went === true;
+  }
   function resolveSelector(cmd) {
     const s = cmd.params.selector;
     if (typeof s === "string" && s.length > 0) return s;
@@ -1299,17 +1372,41 @@
     dbgSessions.set(tabId, { detachTimer: null });
   }
   var DETACHED_RE = /not attached|no target with given id|detached/i;
-  async function withDebugger(tabId, fn) {
+  var DEBUGGER_OP_MS = 2e4;
+  async function withinMs(work, ms, what, onExpire) {
+    let timer;
+    const expired = new Promise((_, reject) => {
+      timer = setTimeout(() => {
+        onExpire?.();
+        reject(new CmdError("TIMEOUT", `${what} within ${ms / 1e3}s; it may be showing a dialog (alert/confirm), busy, or not painting`));
+      }, ms);
+    });
+    try {
+      return await Promise.race([work, expired]);
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  function withDeadline(tabId, work, ms) {
+    return withinMs(work, ms, "Chrome did not answer for the page", () => {
+      forgetDebugger(tabId);
+      chrome.debugger.detach({ tabId }).catch(() => void 0);
+    });
+  }
+  async function withDebugger(tabId, fn, timeoutMs = DEBUGGER_OP_MS) {
     return locks.run(`dbg:${tabId}`, async () => {
       const target = { tabId };
-      await ensureAttached(tabId);
+      const once = async () => {
+        await ensureAttached(tabId);
+        return fn(target);
+      };
       try {
-        return await fn(target);
+        return await withDeadline(tabId, once(), timeoutMs);
       } catch (err) {
+        if (err instanceof CmdError && err.code === "TIMEOUT") throw err;
         if (!DETACHED_RE.test(String(err?.message ?? err))) throw err;
         forgetDebugger(tabId);
-        await ensureAttached(tabId);
-        return await fn(target);
+        return await withDeadline(tabId, once(), timeoutMs);
       } finally {
         scheduleDetach(tabId);
       }
@@ -1334,9 +1431,15 @@
       }
       await chrome.debugger.sendCommand(t, "Input.insertText", { text });
       if (!pressEnter) return;
-      for (const type of ["keyDown", "keyUp"]) {
-        await chrome.debugger.sendCommand(t, "Input.dispatchKeyEvent", { type, key: "Enter", code: "Enter", windowsVirtualKeyCode: 13 });
-      }
+      await chrome.debugger.sendCommand(t, "Input.dispatchKeyEvent", {
+        type: "keyDown",
+        key: "Enter",
+        code: "Enter",
+        windowsVirtualKeyCode: 13,
+        text: "\r",
+        unmodifiedText: "\r"
+      });
+      await chrome.debugger.sendCommand(t, "Input.dispatchKeyEvent", { type: "keyUp", key: "Enter", code: "Enter", windowsVirtualKeyCode: 13 });
     });
     return true;
   }
@@ -1371,7 +1474,7 @@
     };
   }
   async function screenshotViaDebugger(tabId, fullPage, enc, selector, frameIds) {
-    const measured = await measurePage(tabId, selector, frameIds);
+    const measured = await withinMs(measurePage(tabId, selector, frameIds), DEBUGGER_OP_MS, "the page did not answer");
     if (!measured) throw new CmdError("CDP_ERROR", "could not read page dimensions");
     if (selector && measured.missing) throw new CmdError("SELECTOR_NOT_FOUND", `no element for selector: ${selector}`);
     const plan = planScreenshot(measured.dims, { fullPage, element: measured.element, scale: enc.scale });
@@ -1403,19 +1506,28 @@
   }
   async function screenshotViaVisibleTab(tabId, fullPage, enc) {
     let t = await chrome.tabs.get(tabId);
+    let restore;
     if (!t.active) {
+      const [previous] = await chrome.tabs.query({ active: true, windowId: t.windowId });
+      restore = previous?.id;
       await chrome.tabs.update(tabId, { active: true });
-      await chrome.windows.update(t.windowId, { focused: true }).catch(() => void 0);
       await delay(150);
       t = await chrome.tabs.get(tabId);
     }
+    try {
+      return await captureActiveTab(tabId, t.windowId, fullPage, enc);
+    } finally {
+      if (restore !== void 0) await chrome.tabs.update(restore, { active: true }).catch(() => void 0);
+    }
+  }
+  async function captureActiveTab(tabId, windowId, fullPage, enc) {
     const dims = await execInTab(
       tabId,
       () => ({ w: window.innerWidth, h: window.innerHeight, full: document.documentElement.scrollHeight }),
       []
     );
     const dataUrl = await chrome.tabs.captureVisibleTab(
-      t.windowId,
+      windowId,
       enc.format === "jpeg" ? { format: "jpeg", quality: enc.quality } : { format: "png" }
     );
     const viewportH = dims?.h ?? 0;
@@ -1483,6 +1595,43 @@
       this.getPolicy = getPolicy;
     }
     getPolicy;
+    /** The absolute URL a link (or img/source) element points at, for a download
+     *  by element. Gated like a download by URL: the router only checked the tab
+     *  the link sits in, and the link can lead to any site. */
+    async linkTarget(cmd) {
+      const id = await targetTab(cmd);
+      const sel = requireSelector(cmd);
+      const frameIds = await this.frames(cmd, id);
+      if (!await waitForSelector(id, sel, frameIds)) throw new CmdError("SELECTOR_NOT_FOUND", `no element for selector: ${sel}`);
+      const url = await execInTab(
+        id,
+        (s) => {
+          const el = document.querySelector(s);
+          const raw = el?.getAttribute("href") ?? el?.getAttribute("src");
+          try {
+            return raw ? new URL(raw, document.baseURI).href : "";
+          } catch {
+            return "";
+          }
+        },
+        [sel],
+        void 0,
+        frameIds
+      );
+      if (!url) throw new CmdError("DOWNLOAD_FAILED", `the element ${sel} has no href or src to download`);
+      this.assertAllowed(url, "download_file");
+      return url;
+    }
+    allowed(url, method) {
+      const policy = this.getPolicy();
+      return !!policy && evaluatePolicy(url, method, policy).ok;
+    }
+    /** Gate a URL the router could not see (it gates the tab, not arguments). */
+    assertAllowed(url, method) {
+      const policy = this.getPolicy();
+      const verdict = policy ? evaluatePolicy(url, method, policy) : { ok: false, reason: "no policy has arrived yet" };
+      if (!verdict.ok) throw new CmdError("POLICY_DENIED", verdict.reason);
+    }
     /**
      * Resolve `frameId` / `allFrames` params into the frame ids an injection may
      * touch, dropping any whose own URL the policy does not allow for this method.
@@ -1551,6 +1700,7 @@
         }
         case "tab_new": {
           const url = typeof cmd.params.url === "string" ? cmd.params.url : void 0;
+          if (url !== void 0) this.assertAllowed(url, "navigate");
           const active = cmd.params.active !== false;
           const BLANK = /^(about:blank|chrome:\/\/newtab|chrome:\/\/new-tab-page|edge:\/\/newtab)/i;
           const claim = await locks.run("tab_new", async () => {
@@ -1565,14 +1715,14 @@
               claimedTabs.add(blank.id);
               return { id: blank.id, reused: true, needsNav: url !== void 0 };
             }
-            const created = await chrome.tabs.create({ url, active: false });
+            const created = await chrome.tabs.create({ url: url === void 0 ? void 0 : "about:blank", active: false });
             if (created.id === void 0) throw new CmdError("TARGET_GONE", "failed to create a tab");
             claimedTabs.add(created.id);
             await rememberOpenedByUs(created.id, present);
-            return { id: created.id, reused: false, needsNav: false };
+            return { id: created.id, reused: false, needsNav: url !== void 0 };
           });
           if (claim.needsNav) {
-            const nav = armNavigationWait(claim.id, "load");
+            const nav = armNavigationWait(claim.id, "load", 25e3);
             await chrome.tabs.update(claim.id, { url }).catch((err) => {
               nav.cancel();
               throw err;
@@ -1602,25 +1752,19 @@
           });
           await nav.wait();
           const t = await chrome.tabs.get(id);
-          return { url: t.url ?? url, title: t.title ?? "" };
-        }
-        case "back": {
-          const id = await targetTab2(cmd);
-          const nav = armNavigationWait(id, "load", 15e3);
-          const moved = await chrome.tabs.goBack(id).then(() => true, () => false);
-          if (moved) await nav.wait();
-          else nav.cancel();
-          const t = await chrome.tabs.get(id);
-          return { url: t.url ?? "", title: t.title ?? "" };
+          const landed = t.url ?? url;
+          return { url: landed, title: this.allowed(landed, "get_text") ? t.title ?? "" : "" };
         }
+        case "back":
         case "forward": {
           const id = await targetTab2(cmd);
+          const step = cmd.method === "back" ? -1 : 1;
           const nav = armNavigationWait(id, "load", 15e3);
-          const moved = await chrome.tabs.goForward(id).then(() => true, () => false);
+          const moved = await (step < 0 ? chrome.tabs.goBack(id) : chrome.tabs.goForward(id)).then(() => true, () => false) || await historyStep(id, step);
           if (moved) await nav.wait();
           else nav.cancel();
           const t = await chrome.tabs.get(id);
-          return { url: t.url ?? "", title: t.title ?? "" };
+          return { url: t.url ?? "", title: t.title ?? "", moved };
         }
         case "reload": {
           const id = await targetTab2(cmd);
@@ -1699,6 +1843,7 @@
           const t = await chrome.tabs.get(id);
           const url = typeof cmd.params.url === "string" ? cmd.params.url : t.url;
           if (!url) throw new CmdError("BAD_ARGS", "no url to read cookies for");
+          if (url !== t.url) this.assertAllowed(url, "get_cookies");
           const cookies = await chrome.cookies.getAll({ url });
           return {
             cookies: cookies.map((c) => ({
@@ -1719,6 +1864,9 @@
           const key = typeof cmd.params.key === "string" ? cmd.params.key : null;
           const value = typeof cmd.params.value === "string" ? cmd.params.value : null;
           const session = cmd.params.session === true;
+          if (op !== "get" && !this.getPolicy()?.enableMutations) {
+            throw new CmdError("POLICY_DENIED", `storage "${op}" changes the page and is disabled (safe-mode). Pass --enable-mutations to allow it.`);
+          }
           const frameIds = await this.frames(cmd, id);
           const out = await execOp(id, { op: "storage", storageOp: op, key, value, session }, frameIds);
           const { found: _found, frameId: _frameId, ...rest } = out;
@@ -1812,7 +1960,11 @@
             }
             return { ok: true };
           }
-          const out = await execOp(id, withWait({ op: "type", selector: sel, text, clear }), frameIds);
+          const out = await execOp(
+            id,
+            withWait({ op: "type", selector: sel, text, clear, keyEvents: cmd.params.keyEvents === true, pressEnter: cmd.params.pressEnter === true }),
+            frameIds
+          );
           if (!out.found) throw notFound(sel, out);
           return { ok: true, frameId: out.frameId };
         }
@@ -1834,7 +1986,7 @@
               const out = await execOp(
                 id,
                 withWait(
-                  typeof op.value === "boolean" ? { op: "click", selector: op.selector } : { op: "type", selector: op.selector, text: op.value, clear: true }
+                  typeof op.value === "boolean" ? { op: "check", selector: op.selector, checked: op.value } : { op: "type", selector: op.selector, text: op.value, clear: true }
                 ),
                 await this.frames(cmd, id)
               );
@@ -1849,15 +2001,25 @@
         case "press": {
           const id = await targetTab2(cmd);
           const key = String(cmd.params.key ?? "");
+          const modifiers = Array.isArray(cmd.params.modifiers) ? cmd.params.modifiers.map((m) => String(m).toLowerCase()) : [];
           await execInTab(
             id,
-            (k) => {
+            (k, mods) => {
+              const m = mods;
+              const has = (...names) => names.some((n) => m.includes(n));
+              const init = {
+                key: k,
+                bubbles: true,
+                cancelable: true,
+                ctrlKey: has("control", "ctrl"),
+                shiftKey: has("shift"),
+                altKey: has("alt", "option"),
+                metaKey: has("meta", "cmd", "command")
+              };
               const el = document.activeElement ?? document.body;
-              for (const type of ["keydown", "keypress", "keyup"]) {
-                el.dispatchEvent(new KeyboardEvent(type, { key: k, bubbles: true }));
-              }
+              for (const type of ["keydown", "keypress", "keyup"]) el.dispatchEvent(new KeyboardEvent(type, init));
             },
-            [key]
+            [key, modifiers]
           );
           return { ok: true };
         }
@@ -1903,7 +2065,7 @@
           try {
             return await screenshotViaDebugger(id, fullPage, enc, selector, frameIds);
           } catch (err) {
-            if (err instanceof CmdError && err.code === "SELECTOR_NOT_FOUND") throw err;
+            if (err instanceof CmdError && (err.code === "SELECTOR_NOT_FOUND" || err.code === "TIMEOUT")) throw err;
             return await screenshotViaVisibleTab(id, fullPage, enc);
           }
         }
@@ -1913,15 +2075,16 @@
           const expr = String(cmd.params.expression ?? "");
           const result = await execInTab(
             id,
-            (e) => {
+            async (e, wait) => {
               try {
-                const v = (0, eval)(e);
+                let v = (0, eval)(e);
+                if (wait && v && typeof v.then === "function") v = await v;
                 return { ok: true, value: v, type: typeof v };
               } catch (err) {
                 return { ok: false, error: String(err) };
               }
             },
-            [expr],
+            [expr, cmd.params.awaitPromise === true],
             "MAIN",
             await this.frames(cmd, id)
           );
@@ -1953,8 +2116,7 @@
         //    into the active task's downloads/). We wait for completion and report
         //    the absolute on-disk path so the server can relocate it. --
         case "download_file": {
-          const url = typeof cmd.params.url === "string" ? cmd.params.url : void 0;
-          if (!url) throw new CmdError("DOWNLOAD_FAILED", "the extension download path requires a url");
+          const url = typeof cmd.params.url === "string" ? cmd.params.url : await this.linkTarget(cmd);
           const name = sanitizeDownloadName(
             typeof cmd.params.suggestedName === "string" ? cmd.params.suggestedName : void 0
           );
@@ -2090,7 +2252,7 @@
           const data = await withDebugger(id, async (t2) => {
             const res = await chrome.debugger.sendCommand(t2, "Page.printToPDF", params);
             return res.data ?? "";
-          });
+          }, 25e3);
           if (!data) throw new CmdError("CDP_ERROR", "Chrome returned an empty PDF");
           const t = await chrome.tabs.get(id);
           return { dataBase64: data, mimeType: "application/pdf", url: t.url ?? "", title: t.title ?? "" };
@@ -2305,18 +2467,30 @@
     const tab = await chrome.tabs.get(tabId).catch(() => null);
     return !!tab?.url && evaluatePolicy(tab.url, "get_text", policy).ok;
   }
-  async function paint(tabId) {
+  var PAGE_WAIT_MS = 2e3;
+  async function bounded(work, fallback) {
+    let timer;
+    const late = new Promise((resolve) => {
+      timer = setTimeout(() => resolve(fallback), PAGE_WAIT_MS);
+    });
     try {
-      const [res] = await chrome.scripting.executeScript({ target: { tabId }, func: readPageTheme });
-      const css = borderCss(pickBorderColor(res?.result ?? { themeColor: "", background: "", prefersDark: false }));
-      await chrome.scripting.insertCSS({ target: { tabId }, css, origin: "USER" });
-      return css;
-    } catch {
-      return "";
+      return await Promise.race([work.catch(() => fallback), late]);
+    } finally {
+      clearTimeout(timer);
     }
   }
+  async function paint(tabId) {
+    const theme = await bounded(
+      chrome.scripting.executeScript({ target: { tabId }, func: readPageTheme }).then(([res]) => res?.result),
+      null
+    );
+    if (theme === null) return "";
+    const css = borderCss(pickBorderColor(theme ?? { themeColor: "", background: "", prefersDark: false }));
+    const ok = await bounded(chrome.scripting.insertCSS({ target: { tabId }, css, origin: "USER" }).then(() => true), false);
+    return ok ? css : "";
+  }
   async function unpaint(tabId, css) {
-    if (css) await chrome.scripting.removeCSS({ target: { tabId }, css, origin: "USER" }).catch(() => void 0);
+    if (css) await bounded(chrome.scripting.removeCSS({ target: { tabId }, css, origin: "USER" }), void 0);
   }
   var TabBorder = class {
     constructor(getPolicy) {
@@ -2393,7 +2567,7 @@
           if (left > 0) return void this.capturing.set(tabId, left);
           this.capturing.delete(tabId);
           if ((await loadMarked())[tabId] !== css) return;
-          await chrome.scripting.insertCSS({ target: { tabId }, css, origin: "USER" }).catch(() => void 0);
+          await bounded(chrome.scripting.insertCSS({ target: { tabId }, css, origin: "USER" }), void 0);
         });
       }
     }

package/extension-dist/manifest.json

@@ -1,8 +1,8 @@
 {
   "manifest_version": 3,
-  "name": "MCP Browser Extension",
-  "version": "0.9.26",
-  "description": "Lets your AI agent (Claude, Cursor, Codex) use the Chrome you are signed into, through a local MCP server. Deny-all by default.",
+  "name": "MCP Browser Extension – AI agent in your logged-in Chrome",
+  "version": "0.9.30",
+  "description": "Lets your AI agent use the Chrome you are signed into, through a local MCP server. Deny-all by default.",
   "homepage_url": "https://mcp-browser-extension.com",
   "minimum_chrome_version": "116",
   "icons": {

package/extension-dist/page-hook.js

@@ -83,6 +83,12 @@
         "error",
         (e) => {
           try {
+            const el = e.target;
+            if (el && el !== window && typeof el.tagName === "string") {
+              const src = el.currentSrc || el.src || el.href || "";
+              record("error", `Failed to load ${el.tagName.toLowerCase()}${src ? `: ${src}` : ""}`);
+              return;
+            }
             const err = e.error;
             const where = e.filename ? ` (${e.filename}:${e.lineno}:${e.colno})` : "";
             record("exception", `${e.message}${where}`, { stack: err?.stack });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mcp-browser-extension",
   "mcpName": "io.github.Mehmoodqureshi/mcp-browser-extension",
-  "version": "0.9.28",
+  "version": "0.9.30",
   "description": "Drive your real Chrome browser over MCP — real logins, real cookies. A stdio MCP server (CLI) plus an MV3 extension, driving Chrome via chrome.scripting/chrome.tabs. Multi-tab batch automation, accessibility snapshots, deny-all security by default.",
   "author": "Mehmood Ur Rehman Qureshi",
   "license": "MIT",
@@ -57,6 +57,7 @@
     "typecheck:ext": "tsc -p tsconfig.ext.json",
     "clean": "rimraf dist",
     "test": "npm run clean && npm run build && npm run build:ext && node --test dist/test/*.test.js",
+    "test:e2e": "npm run build && npm run build:ext && RUN_E2E=1 node --test --test-concurrency=1 dist/test/e2e/*.test.js",
     "test:hitl": "npm run build && node dist/hitl/index.js",
     "prepack": "npm run clean && npm run build && npm run build:ext"
   },