safari-mcp 2.7.7 → 2.7.9

package/README.md

@@ -426,13 +426,22 @@ The extension requires a one-time build with Xcode (free, included with macOS).
 # 1. Clone the repo (the npm package does not include the Xcode project)
 git clone https://github.com/achiya-automation/safari-mcp.git
 cd safari-mcp
+
+# 2. Build the extension
 xcodebuild -project "xcode/Safari MCP/Safari MCP.xcodeproj" \
   -scheme "Safari MCP (macOS)" -configuration Release build
 
-# 2. Find and open the built app
-open ~/Library/Developer/Xcode/DerivedData/Safari_MCP-*/Build/Products/Release/Safari\ MCP.app
+# 3. Ad-hoc sign the built app so Safari will load it
+# (xcodebuild without a signing identity produces a bundle Safari silently rejects)
+APP_PATH=$(find ~/Library/Developer/Xcode/DerivedData/Safari_MCP-*/Build/Products/Release -name "Safari MCP.app" -maxdepth 2 | head -1)
+codesign --sign - --force --deep "$APP_PATH"
+
+# 4. Open the app (needed once so Safari registers the extension)
+open "$APP_PATH"
 ```
 
+Alternatively, open `xcode/Safari MCP/Safari MCP.xcodeproj` directly in Xcode, select your Apple ID under Signing & Capabilities, and click Run. A free personal Apple Developer account is sufficient for local use.
+
 Then in Safari:
 1. Safari → Settings → Advanced → enable **Show features for web developers**
 2. Safari → Develop → **Allow Unsigned Extensions** (required each Safari restart)
@@ -456,8 +465,21 @@ Safari MCP needs these one-time permissions:
 | Permission | Where | Why |
 |-----------|-------|-----|
 | JavaScript from Apple Events | Safari → Develop menu | Required for `do JavaScript` |
-| Screen Recording | System Settings → Privacy | Required for `safari_screenshot` |
-| Accessibility | System Settings → Privacy | Required for `safari_save_pdf` only |
+| Automation → Safari | System Settings → Privacy & Security → Automation | Required for all AppleScript-backed tools |
+| Screen Recording | System Settings → Privacy & Security → Screen Recording | Required for `safari_screenshot` |
+| Accessibility | System Settings → Privacy & Security → Accessibility | Required for `safari_save_pdf` only |
+
+### Granting Automation → Safari (important for IDE users)
+
+macOS TCC grants Automation permission to the **parent process** that spawns the MCP server, not to `safari-mcp` itself. So you need to grant **Automation → Safari** to the app that runs Claude Code / Cursor / Windsurf — typically **Visual Studio Code** or **Terminal**.
+
+If the permission dialog never appears automatically, run this command once from a Terminal that already has Automation permission:
+
+```bash
+osascript -e 'tell application "Safari" to get URL of current tab of window 1'
+```
+
+That call registers the Terminal app in the Automation database and then triggers the prompt for Safari. After you approve it, subsequent MCP calls from any child process chain will work.
 
 ---
 
@@ -466,6 +488,7 @@ Safari MCP needs these one-time permissions:
 | Issue | Fix |
 |-------|-----|
 | "AppleScript error" | Enable "Allow JavaScript from Apple Events" in Safari → Develop |
+| "Not authorized to send Apple events to Safari" | Grant Automation → Safari to your IDE (see above) |
 | Screenshots empty | Grant Screen Recording permission to Terminal/VS Code |
 | Tab not found | Call `safari_list_tabs` to refresh tab indices |
 | Hebrew keyboard issues | All typing uses JS events — immune to keyboard layout |

package/extension/background.js

@@ -724,6 +724,11 @@ async function handleCommand(type, payload) {
             try {
               let view = pmEl.pmViewDesc && pmEl.pmViewDesc.view;
               if (!view) { const keys = Object.keys(pmEl); for (let i=0;i<keys.length;i++) { const o=pmEl[keys[i]]; if(o&&o.state&&o.dispatch){view=o;break;} } }
+              // Walk React Fiber tree to find EditorView (LinkedIn, Tiptap-React, etc.)
+              if (!view) {
+                const fk = Object.keys(pmEl).find(function(k){return k.startsWith("__reactFiber$")||k.startsWith("__reactInternalInstance$");});
+                if (fk) { let fiber = pmEl[fk]; for (let d=0;d<20&&fiber;d++) { const props = fiber.memoizedProps||(fiber.stateNode&&fiber.stateNode.props); if(props) { const v = props.editorView||props.view; if(v&&v.state&&v.dispatch){view=v;break;} } fiber=fiber.return; } }
+              }
               if (view && view.state && view.dispatch) {
                 const { state } = view;
                 const doc = state.doc;
@@ -743,6 +748,14 @@ async function handleCommand(type, payload) {
               }
             } catch (e) { /* fall through */ }
           }
+          // ProseMirror detected but no view found — use char-by-char with beforeinput
+          if (!ceResult && pmEl) {
+            try {
+              el.focus();
+              (window.__mcpClosureType || function(){})(value, el);
+              ceResult = "Filled contenteditable (ProseMirror char-by-char, " + value.length + " chars)";
+            } catch (e) { /* fall through */ }
+          }
 
           // === Draft.js: use React fiber to access EditorState ===
           if (!ceResult) {
@@ -822,6 +835,7 @@ async function handleCommand(type, payload) {
           if (!ceResult) {
             document.execCommand("selectAll", false, null);
             document.execCommand("delete", false, null);
+            el.dispatchEvent(new InputEvent("beforeinput", { inputType: "insertText", data: value, bubbles: true, cancelable: true }));
             document.execCommand("insertText", false, value);
             ceResult = "Filled contenteditable";
           }

package/extension/popup/popup.html

@@ -37,42 +37,6 @@
       <span class="slider"></span>
     </label>
   </div>
-  <script>
-    // Inline script — cannot be cached separately by Safari
-    function setStatus(c, t, i) {
-      document.getElementById("statusDot").className = "dot " + c;
-      document.getElementById("statusText").textContent = t;
-      document.getElementById("info").textContent = i;
-    }
-    async function getVal(k, d) {
-      try { const r = await browser.storage.local.get(k); return r[k] !== undefined ? r[k] : d; }
-      catch { return d; }
-    }
-    async function check() {
-      const on = await getVal("mcpEnabled", true);
-      document.getElementById("enableToggle").checked = on;
-      if (!on) { setStatus("paused", "Paused", "Toggle to resume"); return; }
-      // Ask background script for real-time status first
-      try {
-        const resp = await browser.runtime.sendMessage({ action: "getStatus" });
-        if (resp) {
-          if (resp.connected) { setStatus("connected", "Connected", "Port 9224"); return; }
-          if (!resp.enabled) { setStatus("paused", "Paused", "Toggle to resume"); return; }
-        }
-      } catch {}
-      // Fallback: read from storage
-      const s = await getVal("mcpStatus", null);
-      if (s === "connected") setStatus("connected", "Connected", "Port 9224");
-      else if (s === "paused") setStatus("paused", "Paused", "Toggle to resume");
-      else if (s === "checking") setStatus("checking", "Connecting...", "Trying port 9224...");
-      else setStatus("disconnected", "Not connected", "Start the MCP server to connect");
-    }
-    document.getElementById("enableToggle").addEventListener("change", async (e) => {
-      await browser.storage.local.set({ mcpEnabled: e.target.checked });
-      try { browser.runtime.sendMessage({ action: "setEnabled", enabled: e.target.checked }); } catch {}
-      setTimeout(check, 500);
-    });
-    check();
-  </script>
+  <script src="popup.js"></script>
 </body>
 </html>

package/extension/popup/popup.js

@@ -0,0 +1,34 @@
+function setStatus(c, t, i) {
+  document.getElementById("statusDot").className = "dot " + c;
+  document.getElementById("statusText").textContent = t;
+  document.getElementById("info").textContent = i;
+}
+async function getVal(k, d) {
+  try { const r = await browser.storage.local.get(k); return r[k] !== undefined ? r[k] : d; }
+  catch { return d; }
+}
+async function check() {
+  const on = await getVal("mcpEnabled", true);
+  document.getElementById("enableToggle").checked = on;
+  if (!on) { setStatus("paused", "Paused", "Toggle to resume"); return; }
+  // Ask background script for real-time status first
+  try {
+    const resp = await browser.runtime.sendMessage({ action: "getStatus" });
+    if (resp) {
+      if (resp.connected) { setStatus("connected", "Connected", "Port 9224"); return; }
+      if (!resp.enabled) { setStatus("paused", "Paused", "Toggle to resume"); return; }
+    }
+  } catch {}
+  // Fallback: read from storage
+  const s = await getVal("mcpStatus", null);
+  if (s === "connected") setStatus("connected", "Connected", "Port 9224");
+  else if (s === "paused") setStatus("paused", "Paused", "Toggle to resume");
+  else if (s === "checking") setStatus("checking", "Connecting...", "Trying port 9224...");
+  else setStatus("disconnected", "Not connected", "Start the MCP server to connect");
+}
+document.getElementById("enableToggle").addEventListener("change", async (e) => {
+  await browser.storage.local.set({ mcpEnabled: e.target.checked });
+  try { browser.runtime.sendMessage({ action: "setEnabled", enabled: e.target.checked }); } catch {}
+  setTimeout(check, 500);
+});
+check();

package/index.js

@@ -147,7 +147,7 @@ let _lastMemoryWarningTime = 0;
 
 function _getWebKitMemoryMB() {
   try {
-    const pids = execFileSync("pgrep", ["-Ef", "WebKit|WebContent"], { encoding: "utf8" }).trim();
+    const pids = execFileSync("pgrep", ["-f", "WebKit|WebContent"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
     if (!pids) return 0;
     const pidList = pids.split("\n").join(",");
     const psOut = execFileSync("ps", ["-p", pidList, "-o", "rss="], { encoding: "utf8" }).trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safari-mcp",
-  "version": "2.7.7",
+  "version": "2.7.9",
   "mcpName": "io.github.achiya-automation/safari-mcp",
   "description": "Safari browser automation for AI agents — native macOS, zero Chrome overhead. 80 tools via AppleScript + JavaScript.",
   "type": "module",
@@ -71,5 +71,9 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
     "ws": "^8.19.0"
+  },
+  "overrides": {
+    "hono": "^4.12.12",
+    "@hono/node-server": "^1.19.13"
   }
 }

package/safari.js

@@ -1131,7 +1131,12 @@ export async function fill({ selector, value, ref }) {
   const result = await runJS(
     `(function(){try{var el=document.querySelector('${sel}');if(!el){var q=function(r){var a=r.querySelectorAll('*');for(var i=0;i<a.length;i++){if(a[i].shadowRoot){el=a[i].shadowRoot.querySelector('${sel}');if(el)return el;el=q(a[i].shadowRoot);if(el)return el;}}return null;};el=q(document);}if(!el)return 'Element not found: ${sel}';el.focus();if(el.isContentEditable||el.getAttribute('contenteditable')==='true'){` +
     // ProseMirror detection
-    `var pm=el.closest('.ProseMirror')||el.querySelector('.ProseMirror');if(pm){try{var v=null;if(pm.pmViewDesc&&pm.pmViewDesc.view)v=pm.pmViewDesc.view;else if(pm.cmView&&pm.cmView.view)v=pm.cmView.view;else{var keys=Object.keys(pm);for(var ki=0;ki<keys.length;ki++){var o=pm[keys[ki]];if(o&&o.state&&o.dispatch){v=o;break;}}}if(v&&v.state&&v.dispatch){var doc=v.state.doc;var hasContent=doc.textContent&&doc.textContent.trim().length>0;if(hasContent){var endPos=doc.content.size>1?doc.content.size-1:doc.content.size;v.dispatch(v.state.tr.insertText(' ${val}',endPos));v.focus();return 'Filled CE (ProseMirror append)';}else{var tr=v.state.tr;tr.replaceWith(0,doc.content.size,v.state.schema.text('${val}'));v.dispatch(tr);v.focus();return 'Filled CE (ProseMirror replace)';}}}catch(e){}}` +
+    `var pm=el.closest('.ProseMirror')||el.querySelector('.ProseMirror');if(pm){try{var v=null;if(pm.pmViewDesc&&pm.pmViewDesc.view)v=pm.pmViewDesc.view;else if(pm.cmView&&pm.cmView.view)v=pm.cmView.view;else{var keys=Object.keys(pm);for(var ki=0;ki<keys.length;ki++){var o=pm[keys[ki]];if(o&&o.state&&o.dispatch){v=o;break;}}}` +
+    // React Fiber walk for ProseMirror view (LinkedIn, Tiptap-React)
+    `if(!v){var fk=Object.keys(pm).find(function(k){return k.startsWith('__reactFiber$')||k.startsWith('__reactInternalInstance$');});if(fk){var fiber=pm[fk];for(var d=0;d<20&&fiber;d++){var props=fiber.memoizedProps||(fiber.stateNode&&fiber.stateNode.props);if(props){var pv=props.editorView||props.view;if(pv&&pv.state&&pv.dispatch){v=pv;break;}}fiber=fiber.return;}}}` +
+    `if(v&&v.state&&v.dispatch){var doc=v.state.doc;var hasContent=doc.textContent&&doc.textContent.trim().length>0;if(hasContent){var endPos=doc.content.size>1?doc.content.size-1:doc.content.size;v.dispatch(v.state.tr.insertText(' ${val}',endPos));v.focus();return 'Filled CE (ProseMirror append)';}else{var tr=v.state.tr;tr.replaceWith(0,doc.content.size,v.state.schema.text('${val}'));v.dispatch(tr);v.focus();return 'Filled CE (ProseMirror replace)';}}}catch(e){}}` +
+    // ProseMirror detected but no view — use char-by-char with beforeinput
+    `if(pm&&!v){return '__PM_CHARBYCHAR__';}` +
     // Closure/Medium detection — signal for native paste
     `var isClosure=Object.keys(el).some(function(k){return k.startsWith('closure_uid_');})||location.hostname.includes('medium.com');if(isClosure){return '__CLOSURE_NATIVE_PASTE__';}` +
     // Synthetic ClipboardEvent paste — works on ProseMirror, TipTap, Slate, and most modern editors
@@ -1143,6 +1148,42 @@ export async function fill({ selector, value, ref }) {
     `var t=el._valueTracker;if(t)t.setValue('');var proto=el.tagName==='TEXTAREA'?window.HTMLTextAreaElement.prototype:window.HTMLInputElement.prototype;var s=Object.getOwnPropertyDescriptor(proto,'value');if(s&&s.set){s.set.call(el,'${val}');}else{el.value='${val}';}el.dispatchEvent(new Event('input',{bubbles:true}));el.dispatchEvent(new Event('change',{bubbles:true}));el.dispatchEvent(new Event('blur',{bubbles:true}));el.dispatchEvent(new Event('focusout',{bubbles:true}));el.focus();return 'Filled: '+el.value.substring(0,50);}catch(e){return 'ERR: '+e.message;}})()`
   );
 
+  // ProseMirror editor with no view access: use char-by-char with beforeinput events
+  if (result === "__PM_CHARBYCHAR__") {
+    const rawValue = value;
+    const lines = rawValue.split('\n');
+    const charInserts = lines.map((line, i) => {
+      const escaped = line.replace(/\\/g, '\\\\').replace(/'/g, "\\'");
+      let cmds = '';
+      if (i > 0) {
+        cmds += `t.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',keyCode:13,code:'Enter',bubbles:true,cancelable:true}));`;
+        cmds += `t.dispatchEvent(new InputEvent('beforeinput',{inputType:'insertParagraph',bubbles:true,cancelable:true}));`;
+        cmds += `document.execCommand('insertParagraph');`;
+        cmds += `t.dispatchEvent(new InputEvent('input',{inputType:'insertParagraph',bubbles:true}));`;
+        cmds += `t.dispatchEvent(new KeyboardEvent('keyup',{key:'Enter',keyCode:13,code:'Enter',bubbles:true}));`;
+      }
+      if (escaped.length > 0) {
+        // Insert text in one beforeinput + execCommand, then fire input
+        cmds += `t.dispatchEvent(new InputEvent('beforeinput',{data:'${escaped}',inputType:'insertText',bubbles:true,cancelable:true}));`;
+        cmds += `document.execCommand('insertText',false,'${escaped}');`;
+        cmds += `t.dispatchEvent(new InputEvent('input',{data:'${escaped}',inputType:'insertText',bubbles:true}));`;
+      }
+      return cmds;
+    }).join('');
+
+    const fillResult = await runJS(
+      `(function(){` +
+      `var el=document.querySelector('${selector.replace(/\\/g, "\\\\").replace(/'/g, "\\'")}');` +
+      `if(!el)return 'Element not found';` +
+      `el.focus();el.click();` +
+      `var t=document.activeElement||el;` +
+      charInserts +
+      `return 'Filled CE (ProseMirror char-by-char)';` +
+      `})()`
+    );
+    return fillResult;
+  }
+
   // Closure/Medium editor: insert line-by-line via execCommand in small batches
   // No focus stealing, no System Events, no clipboard manipulation.
   // Medium's Closure editor accepts execCommand('insertText') for individual lines