safari-mcp 2.7.12 → 2.7.14

package/README.md

@@ -437,6 +437,10 @@ xcodebuild -project "xcode/Safari MCP/Safari MCP.xcodeproj" \
 APP_PATH=$(find ~/Library/Developer/Xcode/DerivedData/Safari_MCP-*/Build/Products/Release -name "Safari MCP.app" -maxdepth 2 | head -1)
 codesign --sign - --force --deep "$APP_PATH"
 
+# 4. Re-sign safari-helper with the Apple Events entitlement
+# (helps macOS surface the TCC Automation prompt reliably)
+codesign --sign - --force --entitlements safari-helper.entitlements safari-helper
+
 # 4. Open the app (needed once so Safari registers the extension)
 open "$APP_PATH"
 ```
@@ -490,6 +494,7 @@ That call registers the Terminal app in the Automation database and then trigger
 |-------|-----|
 | "AppleScript error" | Enable "Allow JavaScript from Apple Events" in Safari → Develop |
 | "Not authorized to send Apple events to Safari" | Grant Automation → Safari to your IDE (see above) |
+| "Not authorized" after `npm update` | Updating changes the binary's cdhash — macOS silently revokes Automation permission. Re-run the `osascript` one-liner above to re-grant it |
 | Screenshots empty | Grant Screen Recording permission to Terminal/VS Code |
 | Tab not found | Call `safari_list_tabs` to refresh tab indices |
 | Hebrew keyboard issues | All typing uses JS events — immune to keyboard layout |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safari-mcp",
-  "version": "2.7.12",
+  "version": "2.7.14",
   "mcpName": "io.github.achiya-automation/safari-mcp",
   "description": "Safari browser automation for AI agents — native macOS, zero Chrome overhead. 80 tools via AppleScript + JavaScript.",
   "type": "module",
@@ -61,6 +61,7 @@
     "safari.js",
     "mcp-helpers.js",
     "safari-helper",
+    "safari-helper.entitlements",
     "safari-helper.swift",
     "extension/",
     "glama.json",

package/safari-helper.entitlements

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.automation.apple-events</key>
+	<true/>
+</dict>
+</plist>

package/safari.js

@@ -1560,7 +1560,12 @@ export async function pressKey({ key, modifiers = [] }) {
       if (!prevented) {
         if ('${safeKey}' === 'Enter') {
           if (el.tagName === 'INPUT') { el.form && el.form.dispatchEvent(new Event('submit',{bubbles:true})); }
-          else { document.execCommand('insertLineBreak'); }
+          else if (el.tagName === 'TEXTAREA') { document.execCommand('insertLineBreak'); }
+          else if (el.isContentEditable && ${shiftKey}) { document.execCommand('insertLineBreak'); }
+          // ContentEditable + Enter (no Shift): do NOT insertLineBreak.
+          // Modern editors (Discord Slate, Slack, Notion, Medium) handle Enter
+          // in their own keydown listener to trigger submit/send/newBlock.
+          // insertLineBreak would double-act: the app submits AND we add a newline.
         } else if ('${safeKey}' === 'Tab') {
           var focusable = [...document.querySelectorAll('input,textarea,select,button,a,[tabindex]')].filter(function(e){return e.tabIndex>=0;});
           var idx = focusable.indexOf(el);