v0.3.0 — iframe document targeting

Chrome Browser Control 0.3.0 adds safe, exact-document iframe control while keeping existing top-frame calls backward compatible.

Highlights:

• Discover operable same-origin and permitted cross-origin frame documents with list_frames.
• Pass documentId to DOM observation and action tools, including snapshot, click, type, scroll, query_elements, wait_for, and perform_actions.
• Keep snapshot refs document-scoped so iframe navigation or replacement cannot redirect an action to the wrong document.
• Return stable DOCUMENT_STALE, DOCUMENT_POLICY_DENIED, DOCUMENT_HOST_PERMISSION_DENIED, and DOCUMENT_UNSUPPORTED failures without unsafe fallback.
• Redact blocked and unsupported frame identity, and enforce Allowed Origins independently for each iframe URL.

Notes:

• Omitting documentId preserves top-frame behavior.
• navigate and screenshot remain tab-level operations.
• Iframe bounds use frameViewport coordinates and are not screenshot crop coordinates.
• Cross-origin iframe control requires that iframe origin in Allowed Origins.

Upgrade:
npm install -g chrome-browser-control@0.3.0
cbctl setup

After setup, reload the unpacked extension in Chrome. Restart the chrome_browser_control MCP host so it loads the updated tool schemas. browser_status should report 24 registered tools.

Verification:

• 216 automated tests passed.
• TypeScript and extension syntax build passed.
• Public npm artifact installed and ran successfully via npx.
• Compact snapshot benchmark reduction: 82.45%.