v0.1.22

v0.1.22: unified browser_pointer with exact ref identity

v0.1.21

release: v0.1.21 make background typing opt-in

v0.1.20 — non-blocking typing + cancel

v0.1.20

• browser_type returns immediately ("typing started"), keyboard dispatch runs in background
• Long text (>= 30 chars) uses single CDP Input.insertText instead of char-by-char
• New browser_cancel_typing({page}) stops an in-flight typing task; already-typed characters remain
• One active typing token per page; starting a new type cancels the previous one
• INSERT_TEXT_THRESHOLD = 30

v0.1.19

release: v0.1.19 route OOPIF commands by target session

Carry the CDP session alongside iframe execution contexts. When Chrome Site Isolation moves a cross-origin frame into an OOPIF target, attach a flattened child session and route Page.createIsolatedWorld, Runtime.evaluate, and DOM commands through that owner session.

v0.1.18

release: v0.1.18 nested cross-origin iframe resolution

Resolve iframe DOM elements directly to CDP frame IDs before falling back to URL/name matching. Keep nested traversal relative to the current execution context across repeated cross-origin boundaries, support nameless frames, and release temporary Runtime object handles.

v0.1.17

release: v0.1.17 cross-origin iframe support

browser_iframe_click/fill now handle cross-origin iframes (not just
same-origin), with automatic CDP fallback (Page.getFrameTree +
Page.createIsolatedWorld) when contentDocument access is blocked by the
Same-Origin Policy. Both support nested iframes via a Playwright-style
" >> " chain in frame_selector.

Adds browser_iframe_read (outerHTML/innerText) reusing the same
resolution logic, and makes browser_snapshot always surface iframe
nodes (even nameless ones) instead of silently pruning them.

Ambiguous frame resolution (duplicate name/src across sibling iframes)
is now rejected as an error instead of silently picking the first
match, to avoid acting on the wrong origin. Known limitations (no
CSS-aware ">>" escaping, no redirect tracking for unnamed frames) are
documented on the tool args.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

v0.1.16

release: v0.1.16 cap managed output limits, fix README managed-mode docs

- Clamp caller-supplied maxLength/maxBytes to a configurable absolute
  ceiling (AB_MAX_OUTPUT_LIMIT, default 5 MB) so a managed-mode tenant
  can no longer request an unbounded response (e.g. usize::MAX) and
  degrade the shared process for other tenants.
- Fix README overstatement that managed mode keeps secrets "out of
  browser-rs entirely" (values still transit browser-rs memory; only
  the credential database/lookup logic stays external).
- Fix managed-mode setup instructions: AB_SPAWN_NONCE is required
  alongside AB_MANAGED/AB_HTTP_CAPABILITY, the secret broker pair is
  optional, and a stray '+' broke the sentence in Markdown.
- Replace inaccurate "unset any var to return to standalone" claim
  with the actual per-variable startup/interaction semantics.
- Bump workspace version to 0.1.16.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

v0.1.15

browser-rs v0.1.15

v0.1.14

Highlights

• Managed HTTP mode with HMAC-derived owner capabilities
• Owner-bound streamable HTTP and legacy SSE sessions
• Root-only /owners administration and per-session SSE message tokens
• Fail-closed AB_ALLOWED_TOOLS enforcement
• Optional Unix-socket secret broker for input transformation and output redaction
• Credential environment cleanup and graceful transport/browser shutdown

Standalone stdio and loopback HTTP defaults remain compatible unless managed
security is explicitly enabled.

Install

Latest release:

curl -fsSL https://raw.githubusercontent.com/maestrojeong/browser-rs-mcp/main/install.sh | sh

Pin v0.1.14:

AB_VERSION=v0.1.14 curl -fsSL https://raw.githubusercontent.com/maestrojeong/browser-rs-mcp/main/install.sh | sh

Prebuilt binaries and SHA-256 files are attached for macOS arm64 and Linux x64.

v0.1.13

Release v0.1.13