safari-mcp 2.8.1 → 2.8.3

package/README.md

@@ -17,6 +17,7 @@
 [![MCP Registry](https://img.shields.io/badge/MCP-Registry-purple?logo=anthropic)](https://registry.modelcontextprotocol.io/)
 [![Glama](https://img.shields.io/badge/Glama-Listed-7c3aed)](https://glama.ai/mcp/servers/g0upg7gyex)
 [![Awesome MCP](https://img.shields.io/badge/Awesome%20MCP-Featured-ff69b4)](https://github.com/punkpeye/awesome-mcp-servers)
+[![Featured on HackerNoon](https://img.shields.io/badge/Featured%20on-HackerNoon-00FE9A?logo=hackernoon&logoColor=black)](https://hackernoon.com/i-had-to-reverse-engineer-react-shadow-dom-and-csp-to-automate-safari-without-chrome)
 [![Featured in CLI-Anything](https://img.shields.io/badge/Featured%20in-CLI--Anything-blueviolet)](https://github.com/HKUDS/CLI-Anything/pull/212)
 
 <a href="vscode:mcp/install?%7B%22safari-mcp%22%3A%7B%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22safari-mcp%22%5D%7D%7D"><img src="https://img.shields.io/badge/VS_Code-Install_Server-0078d4?logo=visual-studio-code&logoColor=white" alt="Install in VS Code"></a>
@@ -33,6 +34,8 @@
 
 > **TL;DR:** Use your real Safari with all your logins, cookies, and sessions. No headless browsers, no Chrome, no Puppeteer. Just native AppleScript + JavaScript on macOS — 60% less CPU/heat on Apple Silicon.
 
+> 📰 **Featured on HackerNoon:** [I Had to Reverse-Engineer React, Shadow DOM, and CSP to Automate Safari Without Chrome](https://hackernoon.com/i-had-to-reverse-engineer-react-shadow-dom-and-csp-to-automate-safari-without-chrome) — the three hardest technical problems behind Safari MCP and the code that solved them.
+
 ### 🤔 Why not just use Playwright or Chrome DevTools MCP?
 
 | Problem | Safari MCP Solution |
@@ -136,6 +139,8 @@ cd safari-mcp && npm install
 *4,000+ developers install Safari MCP every month. Less than 1% star it.*
 *If it saves you Chrome heat, give it back a click.*
 
+📰 **[Read the deep-dive on HackerNoon →](https://hackernoon.com/i-had-to-reverse-engineer-react-shadow-dom-and-csp-to-automate-safari-without-chrome)**
+
 </div>
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safari-mcp",
-  "version": "2.8.1",
+  "version": "2.8.3",
   "mcpName": "io.github.achiya-automation/safari-mcp",
   "description": "Safari browser automation for AI agents — native macOS, zero Chrome overhead. 80 tools via AppleScript + JavaScript.",
   "type": "module",

package/safari.js

@@ -156,7 +156,8 @@ let _activeTabIndex = null; // null = use front document (default)
 let _activeTabURL = null;   // URL-based tracking (stable even when tabs shift)
 let _lastResolveTime = 0;   // Cache: skip resolve if verified recently
 let _lastTabCount = null;   // Track tab count for smart cache invalidation
-const RESOLVE_CACHE_MS = 500; // Brief cache — invalidated on tab count change
+let _activeTabMarker = null; // window.__mcpTabMarker — survives same-tab navigation, bulletproof tab identity
+const RESOLVE_CACHE_MS = 100; // Brief cache — was 500, reduced to catch tabs added by user/popups (v2.8.3 fix)
 
 // ========== DIAGNOSTIC LOG ==========
 // File-based log for profile/focus issues — survives MCP restart, visible to user
@@ -331,7 +332,41 @@ export function setActiveTabURL(url) { _activeTabURL = url; _lastResolveTime = D
 
 // Resolve our tracked URL to current tab index — single combined osascript call
 async function resolveActiveTab() {
+  if (!_activeTabURL && !_activeTabMarker) return _activeTabIndex;
+
+  // Strategy 1: window.__mcpTabMarker (bulletproof — survives navigation, redirects, query changes)
+  // Only attempted if we have a marker AND a cached index hint
+  if (_activeTabMarker && _activeTabIndex) {
+    try {
+      const safeMarker = _activeTabMarker.replace(/'/g, "\\'");
+      // Single JS call: check cached index first, then walk all tabs to find marker
+      const checkScript = `(function(){return window.__mcpTabMarker==='${safeMarker}'?'1':'0'})()`;
+      const matchAtCached = await osascriptFast(
+        `tell application "Safari" to do JavaScript "${checkScript}" in tab ${_activeTabIndex} of ${getTargetWindowRef()}`
+      ).catch(() => '0');
+      if (String(matchAtCached).trim() === '1') return _activeTabIndex;
+      // Cached index doesn't match — scan all tabs for marker
+      const tabCountStr = await osascriptFast(
+        `tell application "Safari" to return count of tabs of ${getTargetWindowRef()}`
+      ).catch(() => '0');
+      const tabCount = Number(tabCountStr) || 0;
+      for (let i = tabCount; i >= 1; i--) {
+        const m = await osascriptFast(
+          `tell application "Safari" to do JavaScript "${checkScript}" in tab ${i} of ${getTargetWindowRef()}`
+        ).catch(() => '0');
+        if (String(m).trim() === '1') {
+          _activeTabIndex = i;
+          _lastTabCount = tabCount;
+          return i;
+        }
+      }
+      // Marker not found anywhere — page reloaded or tab closed
+      _activeTabMarker = null;
+    } catch { /* fall through to URL strategy */ }
+  }
+
   if (!_activeTabURL) return _activeTabIndex;
+
   try {
     const safeUrl = _activeTabURL.replace(/"/g, '\\"');
     const domain = _activeTabURL.replace(/^https?:\/\//, '').split('/')[0].replace(/"/g, '\\"');
@@ -2112,6 +2147,11 @@ export async function newTab(url = "") {
   _activeTabURL = url || null;
   _lastResolveTime = Date.now();
   _lastTabCount = Number(tabCount);  // Update tab count cache
+  // Set bulletproof tab marker — survives same-tab navigation, redirects, query changes (v2.8.3)
+  _activeTabMarker = `MCP_${SESSION_ID}_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;
+  await osascriptFast(
+    `tell application "Safari" to do JavaScript "window.__mcpTabMarker='${_activeTabMarker}'" in tab ${_activeTabIndex} of ${getTargetWindowRef()}`
+  ).catch(() => {});
   // Wait for page load if URL given
   if (url) {
     try {