safari-mcp 2.7.13 → 2.7.15

package/README.md

@@ -437,6 +437,10 @@ xcodebuild -project "xcode/Safari MCP/Safari MCP.xcodeproj" \
 APP_PATH=$(find ~/Library/Developer/Xcode/DerivedData/Safari_MCP-*/Build/Products/Release -name "Safari MCP.app" -maxdepth 2 | head -1)
 codesign --sign - --force --deep "$APP_PATH"
 
+# 4. Re-sign safari-helper with the Apple Events entitlement
+# (helps macOS surface the TCC Automation prompt reliably)
+codesign --sign - --force --entitlements safari-helper.entitlements safari-helper
+
 # 4. Open the app (needed once so Safari registers the extension)
 open "$APP_PATH"
 ```
@@ -490,6 +494,7 @@ That call registers the Terminal app in the Automation database and then trigger
 |-------|-----|
 | "AppleScript error" | Enable "Allow JavaScript from Apple Events" in Safari → Develop |
 | "Not authorized to send Apple events to Safari" | Grant Automation → Safari to your IDE (see above) |
+| "Not authorized" after `npm update` | Updating changes the binary's cdhash — macOS silently revokes Automation permission. Re-run the `osascript` one-liner above to re-grant it |
 | Screenshots empty | Grant Screen Recording permission to Terminal/VS Code |
 | Tab not found | Call `safari_list_tabs` to refresh tab indices |
 | Hebrew keyboard issues | All typing uses JS events — immune to keyboard layout |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safari-mcp",
-  "version": "2.7.13",
+  "version": "2.7.15",
   "mcpName": "io.github.achiya-automation/safari-mcp",
   "description": "Safari browser automation for AI agents — native macOS, zero Chrome overhead. 80 tools via AppleScript + JavaScript.",
   "type": "module",
@@ -61,6 +61,7 @@
     "safari.js",
     "mcp-helpers.js",
     "safari-helper",
+    "safari-helper.entitlements",
     "safari-helper.swift",
     "extension/",
     "glama.json",

package/safari-helper.entitlements

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.automation.apple-events</key>
+	<true/>
+</dict>
+</plist>

package/safari.js

@@ -1578,9 +1578,30 @@ export async function pressKey({ key, modifiers = [] }) {
         }
       }
       el.dispatchEvent(new KeyboardEvent('keyup', opts));
+      // ContentEditable + Enter: check if the app actually handled it.
+      // If editor content didn't change (no submit, no newline), the JS
+      // keydown was ignored (isTrusted:false). Signal for native fallback.
+      if ('${safeKey}' === 'Enter' && el.isContentEditable && !${shiftKey} && !prevented) {
+        return '__ENTER_NOT_HANDLED__';
+      }
       return 'OK';
     })()`
   );
+
+  // Fallback for ContentEditable Enter that wasn't handled by JS keydown:
+  // apps like Discord/Slack require isTrusted:true. Briefly activate Safari
+  // (~50ms), send real keystroke, then immediately restore the previous
+  // frontmost app. The visual flash is imperceptible (<100ms total).
+  if (result === '__ENTER_NOT_HANDLED__') {
+    const savedApp = await saveFrontmostApp();
+    await osascript(`tell application "Safari" to activate`);
+    await new Promise(r => setTimeout(r, 80));
+    await osascript(`tell application "System Events" to keystroke return`);
+    await new Promise(r => setTimeout(r, 50));
+    await restoreFocusIfStolen(savedApp);
+    return `Pressed: enter (native fallback — brief activate+restore)`;
+  }
+
   return `Pressed: ${modifiers.length ? modifiers.join("+") + "+" : ""}${key}`;
 }