chore(deps): bump tauri-plugin-mcp-bridge from 0.12.0 to 0.13.0 in /src-tauri

[dependabot]

Bumps tauri-plugin-mcp-bridge from 0.12.0 to 0.13.0.

Release notes

Sourced from tauri-plugin-mcp-bridge's releases.

Release 0.13.0

tauri-plugin-mcp-bridge

Added

• Include the bridge package version in backend state responses.
• Return screenshot image and CSS viewport dimensions with native captures.
• Add focus, minimize, and maximize window commands.

Fixed

• Convert physical window dimensions to CSS pixels using the platform scale factor.

Fixed

• Capture Linux screenshots through WebKitGTK's native visible-region snapshot API instead of falling back to JavaScript.

@​hypothesi/tauri-mcp-server

Added

• Return structured element details, optional computed styles, match counts, and nth disambiguation from webview_find_element.
• Add hover and right-click interactions plus focus, minimize, and maximize window actions.
• Report plugin/server versions and screenshot pixel-to-CSS scale metadata.
• Add console log level filtering and bounded output controls.

Changed

• Route application IPC commands through the target webview so Tauri capability rules still apply.
• Fold webview_get_styles into webview_find_element and remove the unused keyboard injection script.
• Reject ambiguous text interactions with candidate details instead of silently choosing the first match.

Fixed

• Re-inject the __MCP__ helper once after a page reload or HMR update.
• Preserve multiline and quoted text during keyboard input.
• Report whether JavaScript timeouts came from the script, transport, or an unresponsive webview.

Fixed

• webview_screenshot only uses the interactive Screen Capture API fallback when allowScreenCapture is explicitly enabled.
• Constrain html2canvas fallback output to the visible viewport instead of allocating a full-document canvas.
• Keep bridge WebSockets alive with ping/pong heartbeats and reconnect stale cached sessions when driver_session start is called again.

@​hypothesi/tauri-mcp-cli

Changed

... (truncated)

Changelog

Sourced from tauri-plugin-mcp-bridge's changelog.

[0.13.0] - 2026-08-28

Added

• webview_find_element: Returns structured JSON with geometry, text, accessible name, attributes, visibility, interactability, optional computed styles, and optional truncated outerHTML. Includes totalMatches and truncated fields. Supports nth, limit, properties, visibleOnly, and includeHtml options.
• webview_interact: New hover and right-click actions. Ambiguous text selectors now throw an error listing candidates instead of silently clicking the first match. Supports nth parameter for disambiguation.
• webview_keyboard type action: Supports nth parameter for disambiguation.
• manage_window: New focus, minimize, and maximize actions (desktop only, requires tauri-plugin-mcp-bridge 0.13.0+).
• webview_screenshot: Reports image pixel dimensions, CSS viewport dimensions, and scale factor.
• driver_session start/status: Reports pluginVersion and serverVersion with mismatch warning.
• ipc_execute_command: Now invokes any application Tauri command via window.__TAURI_INTERNALS__.invoke, not only bridge commands.
• read_logs: New level filter and maxChars/maxCharsPerEntry character budgets with dropped-entry summary.
• webview_execute_js: Accepts timeout parameter (ms). Timeout errors now identify which layer timed out (transport, script self-race, or Rust eval) and include liveness probe result.

Changed

• webview_find_element replaces webview_get_styles; computed styles available via properties option.
• Text selector resolution (resolveRef): Prefers exact matches over substring, innermost elements, and interactive ancestors. Filters out non-rendered elements (<title>, <script>, display:none, etc.).
• webview_execute_js timeout errors now name the timing-out layer and include a liveness probe result.
• Multi-line text typing now works (uses JSON.stringify for escaping).
• webview_interact and webview_keyboard type action: Ambiguous text selectors throw an error listing up to 5 candidates with tag, text, and rect; nth parameter required for disambiguation.
• focus action uses the same ambiguity rules as interact.
• read_logs now applies character budget and per-entry truncation inside the webview; returns dropped-count summary line.

Fixed

• Self-healing __MCP__ helper: Page reload/HMR now triggers exactly one re-injection and retry before failing.
• webview_interact no longer clicks at (0,0) when text selector matches only hidden/non-rendered elements.
• ipc_execute_command now works for application commands, not only bridge commands.
• read_logs character budget prevents token-limit failures; level filter works.
• webview_execute_js timeout is configurable; timeout errors identify the layer.
• Multi-line typing in webview_keyboard type action works correctly.
• webview_screenshot scale factor reported so CSS pixel clicks land correctly.
• Version mismatch warning on connect prevents silent plugin/server incompatibility.
• Ambiguous text selectors in interact, keyboard, find_element, focus now throw instead of silently acting on first match.

Removed

• webview_get_styles tool and get-styles.js script (0 calls in 3,131). Functionality folded into webview_find_element.
• Dead keyboard.js script (never invoked).

Breaking Changes

• webview_get_styles tool removed. Use webview_find_element with properties option instead.
• Text selector behavior changed: exact matches rank above substrings; innermost elements preferred; non-rendered elements filtered out. May affect existing scripts relying on old XPath-based matching.
• webview_interact, webview_keyboard type, webview_find_element, focus with ambiguous text selectors now throw instead of acting on first match. Pass nth to disambiguate.

Commits

• 4451b2b chore: version bump: v0.13.0
• 02b94e8 fix: allow raw CLI tool arguments
• ecbe4ad feat: expand Tauri automation diagnostics
• 157e648 Merge pull request #37 from okhsunrog/agent/safe-viewport-screenshot-fallback
• 2505e0a Merge branch 'main' into agent/safe-viewport-screenshot-fallback
• deef401 Merge pull request #42 from Hushlor/fix/websocket-heartbeat
• 554b070 Merge pull request #40 from Hushlor/fix/console-log-lines
• 1cb33ae fix: recover stale WebSocket sessions
• bec96fb fix: respect console log line limit
• 012b389 fix: make screenshot capture safe and bounded
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)