bsk fill / bsk press ignore the OOPIF session and type into the parent frame #438

Prerequisites

• I searched existing issues/PRs; no open match for OOPIF Input.insertText / Input.dispatchKeyEvent routing.
• Nearby but different: [Enhancement] Record user interactions inside iframes / 录制无法捕获 iframe 内的页面报表筛选/搜索操作 #93 (recording inside iframes, closed), ChatGPT composer does not submit after successful fill and Enter #145 (ChatGPT composer after a successful fill, closed), [Bug] CLI/Ext 0.2.0: CDP connection lost after page-initiated navigation from form submit (Cannot access a chrome-extension:// URL of different extension) #177 (CDP lost after navigation, closed), fix(extension): restrict fill to editable controls and editor roots #301 (contenteditable descendants, merged).

Background

Refs for cross-frame nodes carry cdpSessionId, and resolveBackendNode puts that on cdpTarget.sessionId. DOM.focus already goes through cdpRunnerForTarget / sendToTarget. Fill and press then type with deps.cdp.send(tabId, "Input.*"), which always hits the root session.

Evidence

• Focus path uses nodeCdp (apps/extension/src/tools/interaction.ts around the fill DOM.focus call).
• Typing uses root deps.cdp.send for Input.dispatchKeyEvent / Input.insertText in fill, and the same for press key events.
• Same-process iframe tests create contentDocument frames (no child sessionId), so they cannot catch this.
• Mouse input on the root session is intentional (viewport coordinates). Keyboard / insertText are focus-routed.

How a user hits it

1. bsk observe a page whose text field lives in a cross-origin iframe (card widget, IdP login, embedded editor).
2. bsk fill @eN --value "…" focuses the child node, then Input.insertText hits the parent. Verification fails with fill_value_mismatch, or the parent page receives the text.
3. bsk press Enter --ref @eN reports success even when the child document never saw the key.

Expected

Input.* for a ref that carries cdpSessionId should use the same child session as DOM.focus.

I have a small fix + unit test ready and can open a PR if this sounds right to maintainers.