Claude in Chrome keeps secret-filling and page code apart

Claude in Chrome, which lets Claude control your Chrome browser, now applies more checks:

• Fill tools, which put secrets such as passwords into a page, are refused once code has run in a page in the same session, and the reverse is refused too.
• A browser_batch call (one call bundling several browser actions) is rejected if it contains another browser_batch or an action it does not recognise.
• Calls that need a permission check are refused when Claude Code cannot confirm which browser the tab belongs to.
• The check that the browser's helper program is still running gets a second try when the connection is relayed.

The first rule applies only where secret-filling tools are available.