safari-pilot 0.1.24 → 0.1.28

package/README.md

@@ -4,7 +4,7 @@
 
 Safari Pilot gives Claude Code direct control of Safari through AppleScript and a persistent Swift daemon — no Chrome, no Playwright, no third-party code touching your browser. Your real Safari, with all your logins, automated natively.
 
-> **74 tools** | **3 engine tiers** | **92x faster than raw AppleScript** | **9 security layers** | **macOS 12+**
+> **82 tools** | **3 engine tiers** | **92x faster than raw AppleScript** | **9 security layers** | **macOS 14+ recommended** (12+ minimum)
 
 ---
 
@@ -91,7 +91,8 @@ Without the extension, Safari Pilot still works for ~80% of use cases (navigatio
 
 ### System Requirements
 
-- **macOS 12.0 (Monterey)** or later
+- **macOS 14.0 (Sonoma)** or later — recommended; required for the extension engine (the daemon's HTTP poll server uses Hummingbird, which requires macOS 14+)
+- **macOS 12.0 (Monterey)** — minimum; daemon + AppleScript engines work, extension features are unavailable
 - **Safari** (pre-installed on every Mac)
 - **Node.js 20+**
 
@@ -119,7 +120,7 @@ Monitor news.ycombinator.com for any post about our company
 Open my X.com bookmarks and extract the top 5 posts with author profiles
 ```
 
-## Tool Catalog (74 Tools)
+## Tool Catalog (82 Tools)
 
 ### Navigation (7)
 `safari_navigate` | `safari_navigate_back` | `safari_navigate_forward` | `safari_reload` | `safari_new_tab` | `safari_close_tab` | `safari_list_tabs`
@@ -127,15 +128,21 @@ Open my X.com bookmarks and extract the top 5 posts with author profiles
 ### Interaction (11)
 `safari_click` | `safari_double_click` | `safari_fill` | `safari_select_option` | `safari_check` | `safari_hover` | `safari_type` | `safari_press_key` | `safari_scroll` | `safari_drag` | `safari_handle_dialog`
 
+### File Upload (1)
+`safari_file_upload` — programmatic upload to standard `<input type=file>` elements, including hidden inputs behind `<label>` (use `force: true`). 25 MiB / file × 4 / call. Path B architecture: out-of-band byte transport via daemon staging → extension fetch. Does NOT support drag-and-drop dropzones, custom pickers, or native OS dialogs.
+
 ### Extraction (7)
 `safari_snapshot` | `safari_get_text` | `safari_get_html` | `safari_get_attribute` | `safari_evaluate` | `safari_take_screenshot` | `safari_get_console_messages`
 
-### Network (8)
-`safari_list_network_requests` | `safari_get_network_request` | `safari_intercept_requests` | `safari_network_throttle` | `safari_network_offline` | `safari_mock_request` | `safari_websocket_listen` | `safari_websocket_filter`
+### Network (10)
+`safari_list_network_requests` | `safari_get_network_request` | `safari_intercept_requests` | `safari_network_throttle` | `safari_network_offline` | `safari_mock_request` | `safari_websocket_listen` | `safari_websocket_filter` | `safari_dump_har` | `safari_route_from_har`
 
 ### Storage (11)
 `safari_get_cookies` | `safari_set_cookie` | `safari_delete_cookie` | `safari_storage_state_export` | `safari_storage_state_import` | `safari_local_storage_get` | `safari_local_storage_set` | `safari_session_storage_get` | `safari_session_storage_set` | `safari_idb_list` | `safari_idb_get`
 
+### Authentication (2)
+`safari_authenticate` | `safari_clear_authentication` — HTTP Basic auth via DNR header injection (extension required).
+
 ### Shadow DOM (2)
 `safari_query_shadow` | `safari_click_shadow`
 
@@ -160,9 +167,18 @@ Open my X.com bookmarks and extract the top 5 posts with author profiles
 ### Compound Workflows (4)
 `safari_test_flow` | `safari_monitor_page` | `safari_paginate_scrape` | `safari_media_control`
 
+### Downloads (1)
+`safari_wait_for_download` — wait for download triggered by a click, capture metadata + optional `saveAs`.
+
+### PDF (1)
+`safari_export_pdf` — export the frontmost Safari tab as a PDF via WKWebView.
+
 ### Wait (1)
 `safari_wait_for` — 7 condition types: selector, selectorHidden, text, textGone, urlMatch, networkidle, function
 
+### Diagnostics (2)
+`safari_extension_health` | `safari_extension_debug_dump` — observability for the extension engine. Read-only; safe to call any time.
+
 ### System (2)
 `safari_health_check` | `safari_emergency_stop`
 
@@ -290,19 +306,27 @@ bash scripts/build-extension.sh
 ### Testing
 
 ```bash
-# All tests
-npm test
+# Default — unit tests, no Safari required
+npm test                    # 398 unit tests
+npm run test:unit           # alias for above
 
-# By category
-npm run test:unit          # 777 tests, no Safari needed
-npm run test:integration   # Multi-component workflows
-npm run test:security      # 27 security-focused tests
-npm run test:e2e           # Against real Safari (optional)
+# Real Safari required (production stack must be running)
+npm run test:e2e            # ~30 e2e tests across 12+ files
+npm run test:e2e:harness    # 5 tests requiring DEBUG_HARNESS build (auto-rebuilds release after)
 
-# Swift daemon tests
-cd daemon && swift run SafariPilotdTests
+# Both
+npm run test:all            # unit + e2e
+
+# Swift daemon (real Swift types, mocked at NSAppleScript boundary only)
+cd daemon && swift test     # 153 tests
 ```
 
+**Test policy:**
+- Unit tests (`test/unit/`) cover pure logic; can mock Node boundaries (`fs`, `net`, `child_process`) but never internal modules.
+- E2E tests (`test/e2e/`) spawn a real MCP server, drive Safari through the real stack, and use ZERO mocks (enforced by pre-commit hook). They fail closed on any `vi.mock` or direct `import from '../../src/'`.
+- The harness-dependent tests (`t21`, `t22`, `t27`, `t44`, `t55a`) require `SAFARI_PILOT_TEST_MODE=1` build markers stripped from production. `npm run test:e2e:harness` automates the test build → run → release-rebuild flow. Local-only (refuses on CI).
+- See `CLAUDE.md` "End-to-End Testing (HARD RULES)" for the full contract.
+
 ### Adding a New Tool
 
 1. Add the handler to the appropriate module in `src/tools/`
@@ -310,6 +334,31 @@ cd daemon && swift run SafariPilotdTests
 3. Write tests in `test/unit/tools/`
 4. The server auto-registers tools from all modules in `initialize()`
 5. Add the tool name to `skills/safari-pilot/SKILL.md` allowed-tools
+6. If touching `extension/*` or `daemon/Sources/*`, follow `CLAUDE.md` "Extension Build: Hard Rules" — version bump in lockstep, ditto with metadata-stripping flags, run `bash scripts/pre-tag-check.sh` before any tag push.
+
+### Releasing a new version
+
+The release pipeline is automated via `.github/workflows/release.yml` on tag push. Before tagging, run the local SOP gate:
+
+```bash
+# 1. Bump versions in lockstep
+#    Edit package.json + extension/manifest.json (must match)
+
+# 2. Rebuild extension if extension/* changed
+bash scripts/build-extension.sh
+
+# 3. Local install rehearsal
+open "bin/Safari Pilot.app"     # verify in Safari Settings
+
+# 4. Mandatory pre-tag check (mirrors every CI verify step)
+bash scripts/pre-tag-check.sh   # must print "ALL CHECKS PASSED"
+
+# 5. Commit, tag, push
+git tag -a v0.1.X -m "..."
+git push origin main && git push origin v0.1.X
+```
+
+The pre-tag check catches: AppleDouble (`._*`) metadata in zip, codesign --deep --strict failures, missing entitlements, version mismatch, dangling tag, prepublish hook misconfiguration, unit test regressions. It runs in seconds and saves CI round-trips.
 
 ## What Safari Pilot Does NOT Replace
 

package/bin/Safari Pilot.app/Contents/Info.plist

@@ -23,13 +23,13 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.1.24</string>
+	<string>0.1.28</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>202605031834</string>
+	<string>202605050412</string>
 	<key>DTCompiler</key>
 	<string>com.apple.compilers.llvm.clang.1_0</string>
 	<key>DTPlatformBuild</key>

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/Info.plist

@@ -19,13 +19,13 @@
 	<key>CFBundlePackageType</key>
 	<string>XPC!</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.1.24</string>
+	<string>0.1.28</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>202605031834</string>
+	<string>202605050412</string>
 	<key>DTCompiler</key>
 	<string>com.apple.compilers.llvm.clang.1_0</string>
 	<key>DTPlatformBuild</key>

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/Resources/background.js

@@ -22,6 +22,12 @@ let wakePending = false;
 // initialize() is awaiting a fetch promise that will never resolve, and
 // its `finally` never runs to clear isWakeRunning).
 let pollLoopController = null;
+// T73: timestamp of the last successful httpPoll resolution. Updated inside
+// pollLoop's success try-block, read by supersedePollLoop to skip the abort
+// cascade when the prior pollLoop is healthy. Default 0 → first supersede
+// after extension load always runs (correct: there's nothing to be healthy
+// about yet).
+let lastSuccessfulPoll = 0;
 
 // ─── Tab Cache ──────────────────────────────────────────────────────────────
 // Safari's browser.tabs.query({}) returns [] when called from alarm-triggered
@@ -82,6 +88,72 @@ browser.tabs.onRemoved.addListener((tabId) => {
   saveTabCache();
 });
 
+// T79: clear tab-scoped selectorPack storage on tab close. Keys live under
+// prefix `sp_pack_<tabId>_<name>`. Multiple listeners can be added to the
+// same event; this one runs independently of the tab-cache listener above.
+browser.tabs.onRemoved.addListener(async (tabId) => {
+  try {
+    const all = await browser.storage.local.get(null);
+    const toRemove = Object.keys(all).filter((k) => k.startsWith('sp_pack_' + tabId + '_'));
+    if (toRemove.length > 0) {
+      await browser.storage.local.remove(toRemove);
+      emitTrace('__cleanup__', 'selector_pack_cleared', { layer: 'extension-bg', data: { tabId, count: toRemove.length } });
+    }
+  } catch (e) {
+    emitTrace('__cleanup__', 'selector_pack_clear_failed', { layer: 'extension-bg', data: { tabId, error: e && e.message ? e.message : String(e) } });
+  }
+});
+
+// T79 Cluster D: re-inject persisted packs into window.__sp_pack on every
+// completed navigation. Runs purely from the extension-bg context — no MCP
+// command involved. Reads sp_pack_<tabId>_<name> keys and re-injects each
+// via the same storage-bus execute_script flow used everywhere else.
+browser.tabs.onUpdated.addListener(async (tabId, changeInfo) => {
+  if (changeInfo.status !== 'complete') return;
+  let stored;
+  try {
+    stored = await browser.storage.local.get(null);
+  } catch (e) {
+    emitTrace('__rehydrate__', 'pack_rehydrate_storage_get_failed', { layer: 'extension-bg', data: { tabId, error: e && e.message ? e.message : String(e) } });
+    return;
+  }
+  const prefix = 'sp_pack_' + tabId + '_';
+  const keys = Object.keys(stored).filter((k) => k.startsWith(prefix));
+  if (keys.length === 0) return;
+  for (const key of keys) {
+    const name = key.slice(prefix.length);
+    const body = stored[key];
+    if (typeof body !== 'string' || !body) continue;
+    const injectionScript =
+      'window.__sp_pack=window.__sp_pack||{};' +
+      'try{' +
+        'window.__sp_pack[' + JSON.stringify(name) + ']=new Function(\'root\',\'arg\',' + JSON.stringify(body) + ');' +
+        'return JSON.stringify({ok:true,rehydrated:true});' +
+      '}catch(e){' +
+        'return JSON.stringify({ok:false,error:e&&e.message?e.message:String(e)});' +
+      '}';
+    const rehydrateCmdId = '__rehydrate_' + tabId + '_' + name + '_' + Date.now();
+    const cmdKey = 'sp_cmd_' + rehydrateCmdId;
+    const storageCmd = {
+      commandId: rehydrateCmdId,
+      tabId,
+      method: 'execute_script',
+      params: { script: injectionScript, commandId: rehydrateCmdId },
+      timestamp: Date.now(),
+      deadline: Date.now() + 5000,
+    };
+    try {
+      await browser.storage.local.set({ [cmdKey]: storageCmd });
+      emitTrace(rehydrateCmdId, 'pack_rehydrated', { layer: 'extension-bg', data: { tabId, name } });
+      // Fire-and-forget — content-isolated picks it up, runs the injection.
+      // Cleanup the cmd key after a short delay to keep storage lean.
+      setTimeout(() => { browser.storage.local.remove([cmdKey, 'sp_result_' + rehydrateCmdId]).catch(() => {}); }, 6000);
+    } catch (e) {
+      emitTrace(rehydrateCmdId, 'pack_rehydrate_failed', { layer: 'extension-bg', data: { tabId, name, error: e && e.message ? e.message : String(e) } });
+    }
+  }
+});
+
 // ─── HTTP IPC to daemon ─────────────────────────────────────────────────────
 const HTTP_URL = 'http://127.0.0.1:19475';
 
@@ -471,6 +543,98 @@ async function executeCommand(cmd) {
     return result;
   }
 
+  // T79 Cluster D: selectorPack register/unregister sentinels.
+  // Pack registration writes both to (a) page-scope window.__sp_pack[name] for
+  // immediate use AND (b) browser.storage.local sp_pack_<tabId>_<name>=body for
+  // persistence across navigations. The tabs.onUpdated listener below
+  // re-injects (a) from (b) on every navigation. The existing tabs.onRemoved
+  // listener cleans up (b) on tab close.
+  //
+  // Body must be a string already validated upstream by validatePackBody (the
+  // MCP-side selector-pack tool). The extension does NOT re-validate — it
+  // trusts that ANY script that reaches this sentinel passed validation.
+  // Single source of truth on the MCP side avoids drift.
+  if (typeof cmd.script === 'string' && cmd.script.startsWith('__SP_PACK_')) {
+    const colonIdx = cmd.script.indexOf(':');
+    const sentinel = colonIdx > 0 ? cmd.script.slice(0, colonIdx) : cmd.script;
+    let parsed = {};
+    if (colonIdx > 0) {
+      try { parsed = JSON.parse(cmd.script.slice(colonIdx + 1)); }
+      catch (e) {
+        const result = { ok: false, error: { name: 'PACK_PARAM_PARSE', message: `Failed to parse pack params: ${e?.message ?? String(e)}` } };
+        await updatePendingEntry(commandId, { status: 'completed', result });
+        return result;
+      }
+    }
+
+    const name = parsed.name;
+    const body = parsed.body;
+    if (typeof name !== 'string' || !name) {
+      const result = { ok: false, error: { name: 'PACK_INVALID_NAME', message: 'pack sentinel requires non-empty name' } };
+      await updatePendingEntry(commandId, { status: 'completed', result });
+      return result;
+    }
+
+    const storageKey = 'sp_pack_' + tab.id + '_' + name;
+
+    if (sentinel === '__SP_PACK_REGISTER__') {
+      if (typeof body !== 'string' || !body) {
+        const result = { ok: false, error: { name: 'PACK_INVALID_BODY', message: 'pack register sentinel requires non-empty body' } };
+        await updatePendingEntry(commandId, { status: 'completed', result });
+        return result;
+      }
+      try {
+        // Persist for re-injection on navigation.
+        await browser.storage.local.set({ [storageKey]: body });
+      } catch (e) {
+        const result = { ok: false, error: { name: 'PACK_STORAGE_WRITE_FAILED', message: e?.message ?? String(e) } };
+        await updatePendingEntry(commandId, { status: 'completed', result });
+        return result;
+      }
+      // Inject into page now via the standard storage-bus execute path. The
+      // page-side evaluator (content-main.js) wraps scripts in `new
+      // Function(script)()`, so the script must use a top-level `return` —
+      // an IIFE expression statement would have its result discarded.
+      // Embed name + body via JSON.stringify so quotes / backslashes survive
+      // the round-trip without bespoke escaping.
+      const injectionScript =
+        'window.__sp_pack=window.__sp_pack||{};' +
+        'try{' +
+          'window.__sp_pack[' + JSON.stringify(name) + ']=new Function(\'root\',\'arg\',' + JSON.stringify(body) + ');' +
+          'return JSON.stringify({ok:true,name:' + JSON.stringify(name) + '});' +
+        '}catch(e){' +
+          'return JSON.stringify({ok:false,error:e&&e.message?e.message:String(e)});' +
+        '}';
+      // Replace cmd.script and fall through to the regular execute path so
+      // the inject runs through the storage-bus content-script flow.
+      cmd.script = injectionScript;
+      emitTrace(commandId, 'pack_registered', { layer: 'extension-bg', data: { tabId: tab.id, name, bodyBytes: body.length } });
+      // Fall through — the regular execute path runs `cmd.script` in-page.
+    } else if (sentinel === '__SP_PACK_UNREGISTER__') {
+      try {
+        await browser.storage.local.remove([storageKey]);
+      } catch (e) {
+        const result = { ok: false, error: { name: 'PACK_STORAGE_REMOVE_FAILED', message: e?.message ?? String(e) } };
+        await updatePendingEntry(commandId, { status: 'completed', result });
+        return result;
+      }
+      const removalScript =
+        'var __removed=false;' +
+        'if(window.__sp_pack&&window.__sp_pack[' + JSON.stringify(name) + ']){' +
+          'delete window.__sp_pack[' + JSON.stringify(name) + '];' +
+          '__removed=true;' +
+        '}' +
+        'return JSON.stringify({ok:true,removed:__removed});';
+      cmd.script = removalScript;
+      emitTrace(commandId, 'pack_unregistered', { layer: 'extension-bg', data: { tabId: tab.id, name } });
+      // Fall through — regular execute path runs the removal.
+    } else {
+      const r = { ok: false, error: { name: 'UNKNOWN_PACK_SENTINEL', message: `Unknown pack sentinel: ${sentinel}` } };
+      await updatePendingEntry(commandId, { status: 'completed', result: r });
+      return r;
+    }
+  }
+
   // T55a: validate frameId at dispatch time. Missing frame → fast-fail
   // before any storage-bus traffic. Re-resolve frame.url so content-isolated.js's
   // mutation guard has the authoritative value when comparing to location.href.
@@ -790,12 +954,32 @@ async function pollLoop(abortSignal) {
   const BACKOFF_MS = [0, 250, 500, 1000, 2000];
   const MAX_ATTEMPTS = 5;
   let attempts = 0;
+  // T72: pre-launch the FIRST /poll fetch BEFORE entering the while loop so
+  // a fetch is always in flight by the time the loop body runs. Combined
+  // with the in-loop reassignment below, this guarantees that MV3's event
+  // page never sees an idle moment between iterations — preventing the
+  // suspension that drove T71's 80% multi-file e2e sweep flake rate. The
+  // in-flight variable is awaited inside the existing BACKOFF_MS retry
+  // ladder so cold-start fetch errors still hit the retry path.
+  let inflightPoll = httpPoll(abortSignal);
   // T60: honor the abort signal threaded from pollLoopController so a fresh
   // alarm wake can forcibly stop a prior pollLoop instance — even one whose
   // fetch is wedged from event-page suspension recovery.
   while (!(abortSignal && abortSignal.aborted)) {
     try {
-      const data = await httpPoll(abortSignal);
+      const data = await inflightPoll;
+      // T73: mark this pollLoop as healthy. supersedePollLoop reads this
+      // timestamp on each keepalive alarm and skips the abort cascade when
+      // recent (<30s). Set BEFORE the next-fetch reassignment so a successful
+      // resolution is recorded even if the next httpPoll throws synchronously.
+      lastSuccessfulPoll = Date.now();
+      // T72: kick the NEXT /poll fetch IMMEDIATELY — before processing this
+      // batch's commands — so a fetch is in flight while executeCommand
+      // runs. The MV3 event page stays alive on the in-flight fetch even
+      // when a tool call takes seconds (e.g. safari_navigate waiting for
+      // page load). Without this, a long-running executeCommand can let
+      // the page suspend before the next /poll iteration starts.
+      inflightPoll = httpPoll(abortSignal);
       if (attempts > 0) {
         emitTrace('__pollloop__', 'pollloop_recovered', { attempts });
         attempts = 0;
@@ -816,8 +1000,13 @@ async function pollLoop(abortSignal) {
       // TimeoutError = the per-fetch 10 s timeout fired with no command —
       // this is the NORMAL idle case (the daemon long-polls up to 5 s).
       // Pre-T22 this killed the loop, requiring an alarm to re-arm: bug.
+      // T72: re-arm the inflight fetch before continuing so the next iter
+      // has a fetch to await (otherwise we'd await a stale resolved value).
       if (err.name === 'TimeoutError') {
         attempts = 0;
+        if (!(abortSignal && abortSignal.aborted)) {
+          inflightPoll = httpPoll(abortSignal);
+        }
         continue;
       }
       attempts++;
@@ -829,6 +1018,11 @@ async function pollLoop(abortSignal) {
       const baseMs = BACKOFF_MS[Math.min(attempts, BACKOFF_MS.length - 1)];
       const jitter = Math.random() * 250;
       await new Promise((r) => setTimeout(r, baseMs + jitter));
+      // T72: re-arm after backoff so the next iter awaits a fresh fetch
+      // rather than the (already-rejected) prior one.
+      if (!(abortSignal && abortSignal.aborted)) {
+        inflightPoll = httpPoll(abortSignal);
+      }
     }
   }
   emitTrace('__pollloop__', 'pollloop_aborted', { reason: 'signal_aborted_pre_iter' });
@@ -837,7 +1031,32 @@ async function pollLoop(abortSignal) {
 // T60: idempotent supersede. Aborts any prior pollLoop instance (releasing
 // stuck fetches) and starts a fresh one with a new AbortController. The
 // previous loop returns via its AbortError catch; this one runs free.
+//
+// T73: skip the abort cascade when the prior pollLoop is healthy. A healthy
+// pollLoop has resolved an httpPoll within the last 30s — its in-flight
+// /poll is registered in the daemon's waitingPolls and ready to fast-path
+// the next execute. Aborting it kills that registration; commands queued
+// during the supersede transition wait until the new pollLoop establishes
+// a fresh waitingPoll AND a new execute arrives — observed as a 10s gap in
+// e2e sweeps (T72-partial validation, 40% residual flake rate). Skipping
+// preserves the daemon-side registration through the keepalive nudge.
+//
+// 30s threshold rationale: daemon long-poll holds 5s normally; bursts of
+// activity reset lastSuccessfulPoll on every resolution. Idle systems with
+// no commands resolve every 5s (TimeoutError doesn't update the timestamp,
+// but the SUCCESS try-block does — and 204 responses count as success here:
+// they reach the resolution point in pollLoop). 30s gives 6x headroom.
 function supersedePollLoop(reason) {
+  // T73 health check — skip when prior pollLoop is alive AND has resolved
+  // recently. Only the unhealthy path (wedged fetch, never-resolved poll,
+  // or first-load) goes through the abort+restart cascade.
+  if (pollLoopController && lastSuccessfulPoll > 0 && Date.now() - lastSuccessfulPoll < 30_000) {
+    emitTrace('__pollloop__', 'pollloop_supersede_skipped', {
+      reason,
+      sinceLastPollMs: Date.now() - lastSuccessfulPoll,
+    });
+    return;
+  }
   if (pollLoopController) {
     try { pollLoopController.abort(); } catch { /* ignore */ }
   }

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/Resources/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Safari Pilot",
-  "version": "0.1.24",
+  "version": "0.1.28",
   "description": "Native Safari automation for AI agents",
   "permissions": [
     "activeTab",

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/_CodeSignature/CodeResources

@@ -6,7 +6,7 @@
 	<dict>
 		<key>Resources/background.js</key>
 		<data>
-		EfU46b8UhO6kbuDbXm4OmUTSPYA=
+		S+yhMSyT4yM0o29NjtVWT9pto7E=
 		</data>
 		<key>Resources/build.config.js</key>
 		<data>
@@ -46,7 +46,7 @@
 		</data>
 		<key>Resources/manifest.json</key>
 		<data>
-		ddWr2VcPW3Z6yh+d9OYtkFXrbJI=
+		N9cYkZyI/ckF3TWIR2w2ujwqOSQ=
 		</data>
 		<key>Resources/native/SafariWebExtensionHandler.swift</key>
 		<data>
@@ -59,7 +59,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			SQH/U7ba1WUn8mA/L86c18vZYkrgktstFu5rvfNWMK8=
+			wGGys1VHHjcourMlcj2w6IUjnjahEI8V1cj6WRb+/lU=
 			</data>
 		</dict>
 		<key>Resources/build.config.js</key>
@@ -129,7 +129,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Kz43qkUZwVRigVDVso531Bn1o1oW0TUoFfL7GF+oWpo=
+			Vh4l0sBEAXf+Jc3DaBwYM5wwB9LUiM1LhuR2p1VYK/4=
 			</data>
 		</dict>
 		<key>Resources/native/SafariWebExtensionHandler.swift</key>

package/bin/Safari Pilot.app/Contents/_CodeSignature/CodeResources

@@ -18,15 +18,15 @@
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/Info.plist</key>
 		<data>
-		24wt8BICLppM5oDAunyJiqKG+Ns=
+		Lk+CPfhfIGRA8ShZZFI+A0rJ2Fk=
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/MainMenu.nib</key>
 		<data>
-		BINyoRyPY+Yacu4QIfgj0vK0I0c=
+		gfejsxd2k48cV+t1Ave1GMgeWeU=
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/NSWindowController-B8D-0N-5wS.nib</key>
 		<data>
-		3mInKCWD+C6LI7RNH49sedCbgwo=
+		9ykXQmnGGwCAJL2MPMLC7qPCpkQ=
 		</data>
 		<key>Resources/Base.lproj/Main.storyboardc/XfG-lQ-9wD-view-m2S-Jp-Qdl.nib</key>
 		<data>
@@ -51,7 +51,7 @@
 		<dict>
 			<key>cdhash</key>
 			<data>
-			XruSftTDnGYDUY+ZeW8N2M8oLoE=
+			bWtJ8Gsg4i9gGuKEQ4SYB+FcDso=
 			</data>
 			<key>requirement</key>
 			<string>anchor apple generic and identifier "com.safari-pilot.app.Extension" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = V37WLKRXUJ)</string>
@@ -81,21 +81,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qVeY4D+fbP7JEwv1n85ZAqd2romyT1Ffoz/a/dBG9Oc=
+			8J9pOXoi9UK5I6qZRMloMaWPxQoW+OciXbGvdnqtq0Q=
 			</data>
 		</dict>
 		<key>Resources/Base.lproj/Main.storyboardc/MainMenu.nib</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			Zs70xyx+1AhDvMcjFgGmZ5SlohsV/ijDn5DiPJX0gUo=
+			pXqB05PG+ZwnFVMoJVsDjhgig8YjRG8grrBPWsZG/YI=
 			</data>
 		</dict>
 		<key>Resources/Base.lproj/Main.storyboardc/NSWindowController-B8D-0N-5wS.nib</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			RsJOKk3V8PxtqyeGin8uKDP9U629uGXL0/RBWj7V8bc=
+			LAAQ0mIs7zxLtn87eO30xhqHEkEP/lblzyrpTD3gv0s=
 			</data>
 		</dict>
 		<key>Resources/Base.lproj/Main.storyboardc/XfG-lQ-9wD-view-m2S-Jp-Qdl.nib</key>

package/dist/aria.js

@@ -15,6 +15,10 @@
  * Safe for use in `querySelector()` or tool parameters.
  */
 export function buildRefSelector(ref) {
+    // T78: passthrough for fully-qualified data-sp-ref selectors so callers can
+    // hand in either the bare ref or the resolved selector form.
+    if (ref.startsWith('[data-sp-ref='))
+        return ref;
     return '[data-sp-ref="' + ref + '"]';
 }
 /**

package/dist/aria.js.map

@@ -1 +1 @@
-{"version":3,"file":"aria.js","sourceRoot":"","sources":["../src/aria.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAwBH,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,OAAO,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,2CAA2C;IAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,yCAAyC,GAAG,GAAG,GAAG,OAAO,CAAC;AACnE,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA2B,EAAE;IAC9D,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IACnD,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACtC,sDAAsD;IACtD,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa;QACvC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;QACnE,CAAC,CAAC,EAAE,CAAC;IAEP,2EAA2E;IAC3E,8DAA8D;IAC9D,OAAO,CACL,qBAAqB,GAAG,QAAQ,GAAG,GAAG;QACtC,uBAAuB,GAAG,aAAa,GAAG,GAAG;QAC7C,4BAA4B,GAAG,aAAa,GAAG,KAAK;QACpD,qBAAqB,GAAG,MAAM,GAAG,KAAK;QACtC,yBAAyB;QACzB,sBAAsB;QACtB,mEAAmE;QACnE,sEAAsE;QACtE,uCAAuC;QACvC,4BAA4B;QAC5B,uCAAuC;QAEvC,sEAAsE;QACtE,iCAAiC;QAC/B,qCAAqC;QACrC,2DAA2D;QAC3D,qCAAqC;QACrC,wBAAwB;QAExB,oCAAoC;QACpC,wBAAwB;QACtB,iDAAiD;QACjD,sGAAsG;QACtG,6CAA6C;QAC7C,uCAAuC;QACvC,wCAAwC;QACxC,6CAA6C;QAC7C,4CAA4C;QAC5C,+GAA+G;QAC/G,mCAAmC;QACnC,mBAAmB;QACrB,GAAG;QAEH,SAAS;QACT,yBAAyB;QACvB,8HAA8H;QAC9H,oBAAoB;QACtB,GAAG;QAEH,UAAU;QACV,uEAAuE;QAEvE,SAAS;QACT,sBAAsB;QACpB,mCAAmC;QACnC,wCAAwC;QACxC,eAAe;QACjB,GAAG;QAEH,WAAW;QACX,qHAAqH;QAErH,sDAAsD;QACtD,uBAAuB;QACrB,yFAAyF;QACzF,mBAAmB;QACrB,GAAG;QAEH,2DAA2D;QAC3D,0BAA0B;QACxB,2FAA2F;QAC3F,mBAAmB;QACrB,GAAG;QAEH,kBAAkB;QAClB,mBAAmB;QACjB,uBAAuB;QACvB,2BAA2B;QAC3B,qBAAqB;QACrB,wBAAwB;QACxB,qBAAqB;QACrB,qBAAqB;QACrB,sBAAsB;QACtB,qBAAqB;QACrB,0BAA0B;QAC1B,qBAAqB;QACrB,oBAAoB;QACpB,mBAAmB;QACnB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,mBAAmB;QACnB,sBAAsB;QACtB,eAAe;QACf,sBAAsB;QACtB,qBAAqB;QACrB,qBAAqB;QACrB,mBAAmB;QACnB,mBAAmB;QACnB,4BAA4B;QAC5B,qBAAqB;QACrB,mBAAmB;QACnB,sBAAsB;QACtB,sBAAsB;QACtB,sBAAsB;QACtB,eAAe;QACf,wBAAwB;QACxB,uBAAuB;QACvB,cAAc;QACd,cAAc;QAChB,IAAI;QACJ,4CAA4C;QAE5C,WAAW;QACX,mBAAmB;QACrB,GAAG;QAEH,wEAAwE;QACxE,wEAAwE;QACxE,8DAA8D;QAC9D,mCAAmC;QACjC,+CAA+C;QAC/C,4FAA4F;QAC5F,iCAAiC;QACjC,gDAAgD;QAChD,kCAAkC;QAClC,mCAAmC;QACnC,sBAAsB;QACtB,uCAAuC;QACvC,0BAA0B;QAC1B,mDAAmD;QACnD,sCAAsC;QACtC,oBAAoB;QACpB,0CAA0C;QACxC,2CAA2C;QAC3C,yCAAyC;QAC3C,GAAG;QACH,kBAAkB;QAClB,sDAAsD;QACtD,mBAAmB;QACjB,uCAAuC;QACvC,qBAAqB;QACrB,6CAA6C;QAC3C,iDAAiD;QACjD,oFAAoF;QACtF,GAAG;QACH,kCAAkC;QACpC,GAAG;QACH,wEAAwE;QACxE,kCAAkC;QAClC,qFAAqF;QACnF,yCAAyC;QACzC,2DAA2D;QAC7D,GAAG;QACH,YAAY;QACd,GAAG;QAEH,wEAAwE;QACxE,6BAA6B;QAC3B,yFAAyF;QAC3F,GAAG;QAEH,wEAAwE;QACxE,mCAAmC;QACjC,qCAAqC;QACrC,wCAAwC;QACxC,0DAA0D;QAC1D,oCAAoC;QACpC,iGAAiG;QACjG,0DAA0D;QAC1D,0DAA0D;QAC1D,oCAAoC;QACpC,uFAAuF;QACvF,yBAAyB;QACzB,6DAA6D;QAC7D,0BAA0B;QACxB,6EAA6E;QAC7E,6EAA6E;QAC7E,kEAAkE;QACpE,IAAI;QACJ,0CAA0C;QAC1C,kBAAkB;QAClB,wCAAwC;QACxC,mEAAmE;QACnE,uCAAuC;QACvC,gDAAgD;QAChD,eAAe;QACjB,GAAG;QAEH,wEAAwE;QACxE,2BAA2B;QACzB,kBAAkB;QAClB,kDAAkD;QAClD,sDAAsD;QACpD,iDAAiD;QACnD,wDAAwD;QACtD,mDAAmD;QACrD,GAAG;QACH,WAAW;QACX,2FAA2F;QAC3F,WAAW;QACX,oGAAoG;QACpG,UAAU;QACV,iGAAiG;QACjG,WAAW;QACX,2FAA2F;QAC3F,mBAAmB;QACnB,qCAAqC;QACrC,yCAAyC;QACzC,mBAAmB;QACjB,+BAA+B;QACjC,sDAAsD;QACpD,+CAA+C;QACjD,GAAG;QACH,SAAS;QACT,4DAA4D;QAC5D,WAAW;QACX,2FAA2F;QAC3F,WAAW;QACX,2FAA2F;QAC3F,gBAAgB;QAClB,GAAG;QAEH,wEAAwE;QACxE,8BAA8B;QAC5B,wCAAwC;QACxC,gDAAgD;QAChD,iBAAiB;QACf,gEAAgE;QAChE,kBAAkB;QACpB,GAAG;QACH,mBAAmB;QACnB,iCAAiC;QACjC,sCAAsC;QACtC,sDAAsD;QACtD,aAAa;QACf,GAAG;QAEH,wEAAwE;QACxE,+BAA+B;QAC7B,gBAAgB;QAChB,kDAAkD;QAChD,wCAAwC;QACtC,qCAAqC;QACvC,GAAG;QACL,GAAG;QACH,qBAAqB;QACvB,GAAG;QAEH,wEAAwE;QACxE,gCAAgC;QAC9B,wCAAwC;QACxC,qCAAqC;QACrC,oCAAoC;QAEpC,uCAAuC;QACvC,kDAAkD;QAElD,6EAA6E;QAC7E,wBAAwB;QACtB,6DAA6D;QAC7D,yCAAyC;QAC3C,GAAG;QAEH,wBAAwB;QACxB,WAAW;QACX,uGAAuG;QACrG,yBAAyB;QAC3B,UAAU;QACR,8BAA8B;QAChC,GAAG;QACH,oCAAoC;QACpC,8BAA8B;QAC9B,4CAA4C;QAC5C,oDAAoD;QAEpD,oEAAoE;QACpE,oBAAoB;QACpB,qDAAqD;QACrD,oCAAoC;QACpC,iBAAiB;QACf,gDAAgD;QAC9C,wBAAwB;QACxB,8BAA8B;QAC5B,mDAAmD;QACnD,gDAAgD;QAC9C,oCAAoC;QAClC,oDAAoD;QACpD,0CAA0C;QAC5C,GAAG;QACL,GAAG;QACL,UAAU;QACR,0CAA0C;QAC1C,0CAA0C;QAC5C,GAAG;QACL,GAAG;QACL,GAAG;QAEH,iEAAiE;QACjE,0DAA0D;QAC1D,oFAAoF;QACpF,kBAAkB;QAChB,iEAAiE;QACjE,gEAAgE;QAChE,gDAAgD;QAChD,kJAAkJ;QAClJ,cAAc;QAChB,GAAG;QAEH,mDAAmD;QACnD,wEAAwE;QACtE,gDAAgD;QAChD,kJAAkJ;QAClJ,yCAAyC;QAC3C,GAAG;QAEH,yCAAyC;QACzC,sCAAsC;QAEtC,yEAAyE;QACzE,iGAAiG;QAC/F,qBAAqB;QACvB,GAAG;QAEH,iDAAiD;QACjD,2CAA2C;QAC3C,sDAAsD;QACtD,wCAAwC;QAExC,gEAAgE;QAChE,iDAAiD;QAC/C,oBAAoB;QAClB,gDAAgD;QAChD,yHAAyH;QAC3H,GAAG;QACH,cAAc;QAChB,GAAG;QAEH,UAAU;QACR,0BAA0B;QAC1B,aAAa;QACb,iBAAiB;QACjB,WAAW;QACX,qBAAqB;QACrB,6BAA6B;QAC7B,WAAW;QACX,SAAS;QACT,wBAAwB;QAC1B,IAAI;QACN,GAAG;QAEH,wEAAwE;QACxE,2CAA2C;QACzC,uBAAuB;QACvB,kBAAkB;QAClB,iDAAiD;QAEjD,uCAAuC;QACvC,2DAA2D;QAC3D,kBAAkB;QAChB,iGAAiG;QACjG,8CAA8C;QAChD,GAAG;QAEH,uBAAuB;QACvB,qBAAqB;QACrB,+BAA+B;QAC7B,yDAAyD;QAC3D,GAAG;QACH,iDAAiD;QAC/C,0BAA0B;QAC1B,4BAA4B;QAC5B,wBAAwB;QACtB,gCAAgC;QAClC,6BAA6B;QAC3B,2BAA2B;QAC7B,2CAA2C;QACzC,sCAAsC;QACxC,GAAG;QACL,GAAG;QAEH,MAAM;QACN,kDAAkD;QAElD,WAAW;QACX,oDAAoD;QAClD,2FAA2F;QAC7F,GAAG;QAEH,sDAAsD;QACtD,uFAAuF;QACrF,oDAAoD;QACpD,4BAA4B;QAC9B,GAAG;QAEH,qBAAqB;QAErB,mBAAmB;QACnB,wDAAwD;QACtD,mEAAmE;QACnE,uCAAuC;QACzC,GAAG;QAEH,2BAA2B;QAC7B,GAAG;QAEH,wEAAwE;QACxE,oCAAoC;QAClC,yBAAyB;QACzB,gCAAgC;QAChC,sCAAsC;QACtC,qBAAqB;QACrB,+BAA+B;QAC7B,yDAAyD;QAC3D,GAAG;QACH,qDAAqD;QACrD,mCAAmC;QACnC,kDAAkD;QAChD,oBAAoB;QACpB,qDAAqD;QACnD,+CAA+C;QAC/C,8BAA8B;QAChC,GAAG;QACL,GAAG;QACH,aAAa;QACf,GAAG;QAEH,wEAAwE;QACxE,6DAA6D;QAC7D,gEAAgE;QAChE,oDAAoD;QAClD,4DAA4D;QAC5D,iDAAiD;QACjD,uDAAuD;QACzD,GAAG;QAEH,+FAA+F;QAC/F,gIAAgI;QAEhI,uCAAuC;QAEvC,cAAc;QACd,2BAA2B;QAC3B,+BAA+B;QAC/B,4BAA4B;QAC1B,oBAAoB;QACpB,qBAAqB;QACrB,gDAAgD;QAChD,6EAA6E;QAC/E,GAAG;QACH,oCAAoC;QAEpC,mBAAmB;QACnB,8BAA8B;QAC5B,sEAAsE;QACxE,UAAU;QACR,gEAAgE;QAClE,GAAG;QAEH,UAAU;QACR,yBAAyB;QACzB,4BAA4B;QAC5B,wBAAwB;QACxB,iCAAiC;QACjC,yCAAyC;QACzC,oBAAoB;QACtB,IAAI,CACL,CAAC;AACJ,CAAC"}
+{"version":3,"file":"aria.js","sourceRoot":"","sources":["../src/aria.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAwBH,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,GAAG,CAAC;IAChD,OAAO,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,2CAA2C;IAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,yCAAyC,GAAG,GAAG,GAAG,OAAO,CAAC;AACnE,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA2B,EAAE;IAC9D,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACtC,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IACnD,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACtC,sDAAsD;IACtD,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa;QACvC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;QACnE,CAAC,CAAC,EAAE,CAAC;IAEP,2EAA2E;IAC3E,8DAA8D;IAC9D,OAAO,CACL,qBAAqB,GAAG,QAAQ,GAAG,GAAG;QACtC,uBAAuB,GAAG,aAAa,GAAG,GAAG;QAC7C,4BAA4B,GAAG,aAAa,GAAG,KAAK;QACpD,qBAAqB,GAAG,MAAM,GAAG,KAAK;QACtC,yBAAyB;QACzB,sBAAsB;QACtB,mEAAmE;QACnE,sEAAsE;QACtE,uCAAuC;QACvC,4BAA4B;QAC5B,uCAAuC;QAEvC,sEAAsE;QACtE,iCAAiC;QAC/B,qCAAqC;QACrC,2DAA2D;QAC3D,qCAAqC;QACrC,wBAAwB;QAExB,oCAAoC;QACpC,wBAAwB;QACtB,iDAAiD;QACjD,sGAAsG;QACtG,6CAA6C;QAC7C,uCAAuC;QACvC,wCAAwC;QACxC,6CAA6C;QAC7C,4CAA4C;QAC5C,+GAA+G;QAC/G,mCAAmC;QACnC,mBAAmB;QACrB,GAAG;QAEH,SAAS;QACT,yBAAyB;QACvB,8HAA8H;QAC9H,oBAAoB;QACtB,GAAG;QAEH,UAAU;QACV,uEAAuE;QAEvE,SAAS;QACT,sBAAsB;QACpB,mCAAmC;QACnC,wCAAwC;QACxC,eAAe;QACjB,GAAG;QAEH,WAAW;QACX,qHAAqH;QAErH,sDAAsD;QACtD,uBAAuB;QACrB,yFAAyF;QACzF,mBAAmB;QACrB,GAAG;QAEH,2DAA2D;QAC3D,0BAA0B;QACxB,2FAA2F;QAC3F,mBAAmB;QACrB,GAAG;QAEH,kBAAkB;QAClB,mBAAmB;QACjB,uBAAuB;QACvB,2BAA2B;QAC3B,qBAAqB;QACrB,wBAAwB;QACxB,qBAAqB;QACrB,qBAAqB;QACrB,sBAAsB;QACtB,qBAAqB;QACrB,0BAA0B;QAC1B,qBAAqB;QACrB,oBAAoB;QACpB,mBAAmB;QACnB,iBAAiB;QACjB,iBAAiB;QACjB,iBAAiB;QACjB,mBAAmB;QACnB,sBAAsB;QACtB,eAAe;QACf,sBAAsB;QACtB,qBAAqB;QACrB,qBAAqB;QACrB,mBAAmB;QACnB,mBAAmB;QACnB,4BAA4B;QAC5B,qBAAqB;QACrB,mBAAmB;QACnB,sBAAsB;QACtB,sBAAsB;QACtB,sBAAsB;QACtB,eAAe;QACf,wBAAwB;QACxB,uBAAuB;QACvB,cAAc;QACd,cAAc;QAChB,IAAI;QACJ,4CAA4C;QAE5C,WAAW;QACX,mBAAmB;QACrB,GAAG;QAEH,wEAAwE;QACxE,wEAAwE;QACxE,8DAA8D;QAC9D,mCAAmC;QACjC,+CAA+C;QAC/C,4FAA4F;QAC5F,iCAAiC;QACjC,gDAAgD;QAChD,kCAAkC;QAClC,mCAAmC;QACnC,sBAAsB;QACtB,uCAAuC;QACvC,0BAA0B;QAC1B,mDAAmD;QACnD,sCAAsC;QACtC,oBAAoB;QACpB,0CAA0C;QACxC,2CAA2C;QAC3C,yCAAyC;QAC3C,GAAG;QACH,kBAAkB;QAClB,sDAAsD;QACtD,mBAAmB;QACjB,uCAAuC;QACvC,qBAAqB;QACrB,6CAA6C;QAC3C,iDAAiD;QACjD,oFAAoF;QACtF,GAAG;QACH,kCAAkC;QACpC,GAAG;QACH,wEAAwE;QACxE,kCAAkC;QAClC,qFAAqF;QACnF,yCAAyC;QACzC,2DAA2D;QAC7D,GAAG;QACH,YAAY;QACd,GAAG;QAEH,wEAAwE;QACxE,6BAA6B;QAC3B,yFAAyF;QAC3F,GAAG;QAEH,wEAAwE;QACxE,mCAAmC;QACjC,qCAAqC;QACrC,wCAAwC;QACxC,0DAA0D;QAC1D,oCAAoC;QACpC,iGAAiG;QACjG,0DAA0D;QAC1D,0DAA0D;QAC1D,oCAAoC;QACpC,uFAAuF;QACvF,yBAAyB;QACzB,6DAA6D;QAC7D,0BAA0B;QACxB,6EAA6E;QAC7E,6EAA6E;QAC7E,kEAAkE;QACpE,IAAI;QACJ,0CAA0C;QAC1C,kBAAkB;QAClB,wCAAwC;QACxC,mEAAmE;QACnE,uCAAuC;QACvC,gDAAgD;QAChD,eAAe;QACjB,GAAG;QAEH,wEAAwE;QACxE,2BAA2B;QACzB,kBAAkB;QAClB,kDAAkD;QAClD,sDAAsD;QACpD,iDAAiD;QACnD,wDAAwD;QACtD,mDAAmD;QACrD,GAAG;QACH,WAAW;QACX,2FAA2F;QAC3F,WAAW;QACX,oGAAoG;QACpG,UAAU;QACV,iGAAiG;QACjG,WAAW;QACX,2FAA2F;QAC3F,mBAAmB;QACnB,qCAAqC;QACrC,yCAAyC;QACzC,mBAAmB;QACjB,+BAA+B;QACjC,sDAAsD;QACpD,+CAA+C;QACjD,GAAG;QACH,SAAS;QACT,4DAA4D;QAC5D,WAAW;QACX,2FAA2F;QAC3F,WAAW;QACX,2FAA2F;QAC3F,gBAAgB;QAClB,GAAG;QAEH,wEAAwE;QACxE,8BAA8B;QAC5B,wCAAwC;QACxC,gDAAgD;QAChD,iBAAiB;QACf,gEAAgE;QAChE,kBAAkB;QACpB,GAAG;QACH,mBAAmB;QACnB,iCAAiC;QACjC,sCAAsC;QACtC,sDAAsD;QACtD,aAAa;QACf,GAAG;QAEH,wEAAwE;QACxE,+BAA+B;QAC7B,gBAAgB;QAChB,kDAAkD;QAChD,wCAAwC;QACtC,qCAAqC;QACvC,GAAG;QACL,GAAG;QACH,qBAAqB;QACvB,GAAG;QAEH,wEAAwE;QACxE,gCAAgC;QAC9B,wCAAwC;QACxC,qCAAqC;QACrC,oCAAoC;QAEpC,uCAAuC;QACvC,kDAAkD;QAElD,6EAA6E;QAC7E,wBAAwB;QACtB,6DAA6D;QAC7D,yCAAyC;QAC3C,GAAG;QAEH,wBAAwB;QACxB,WAAW;QACX,uGAAuG;QACrG,yBAAyB;QAC3B,UAAU;QACR,8BAA8B;QAChC,GAAG;QACH,oCAAoC;QACpC,8BAA8B;QAC9B,4CAA4C;QAC5C,oDAAoD;QAEpD,oEAAoE;QACpE,oBAAoB;QACpB,qDAAqD;QACrD,oCAAoC;QACpC,iBAAiB;QACf,gDAAgD;QAC9C,wBAAwB;QACxB,8BAA8B;QAC5B,mDAAmD;QACnD,gDAAgD;QAC9C,oCAAoC;QAClC,oDAAoD;QACpD,0CAA0C;QAC5C,GAAG;QACL,GAAG;QACL,UAAU;QACR,0CAA0C;QAC1C,0CAA0C;QAC5C,GAAG;QACL,GAAG;QACL,GAAG;QAEH,iEAAiE;QACjE,0DAA0D;QAC1D,oFAAoF;QACpF,kBAAkB;QAChB,iEAAiE;QACjE,gEAAgE;QAChE,gDAAgD;QAChD,kJAAkJ;QAClJ,cAAc;QAChB,GAAG;QAEH,mDAAmD;QACnD,wEAAwE;QACtE,gDAAgD;QAChD,kJAAkJ;QAClJ,yCAAyC;QAC3C,GAAG;QAEH,yCAAyC;QACzC,sCAAsC;QAEtC,yEAAyE;QACzE,iGAAiG;QAC/F,qBAAqB;QACvB,GAAG;QAEH,iDAAiD;QACjD,2CAA2C;QAC3C,sDAAsD;QACtD,wCAAwC;QAExC,gEAAgE;QAChE,iDAAiD;QAC/C,oBAAoB;QAClB,gDAAgD;QAChD,yHAAyH;QAC3H,GAAG;QACH,cAAc;QAChB,GAAG;QAEH,UAAU;QACR,0BAA0B;QAC1B,aAAa;QACb,iBAAiB;QACjB,WAAW;QACX,qBAAqB;QACrB,6BAA6B;QAC7B,WAAW;QACX,SAAS;QACT,wBAAwB;QAC1B,IAAI;QACN,GAAG;QAEH,wEAAwE;QACxE,2CAA2C;QACzC,uBAAuB;QACvB,kBAAkB;QAClB,iDAAiD;QAEjD,uCAAuC;QACvC,2DAA2D;QAC3D,kBAAkB;QAChB,iGAAiG;QACjG,8CAA8C;QAChD,GAAG;QAEH,uBAAuB;QACvB,qBAAqB;QACrB,+BAA+B;QAC7B,yDAAyD;QAC3D,GAAG;QACH,iDAAiD;QAC/C,0BAA0B;QAC1B,4BAA4B;QAC5B,wBAAwB;QACtB,gCAAgC;QAClC,6BAA6B;QAC3B,2BAA2B;QAC7B,2CAA2C;QACzC,sCAAsC;QACxC,GAAG;QACL,GAAG;QAEH,MAAM;QACN,kDAAkD;QAElD,WAAW;QACX,oDAAoD;QAClD,2FAA2F;QAC7F,GAAG;QAEH,sDAAsD;QACtD,uFAAuF;QACrF,oDAAoD;QACpD,4BAA4B;QAC9B,GAAG;QAEH,qBAAqB;QAErB,mBAAmB;QACnB,wDAAwD;QACtD,mEAAmE;QACnE,uCAAuC;QACzC,GAAG;QAEH,2BAA2B;QAC7B,GAAG;QAEH,wEAAwE;QACxE,oCAAoC;QAClC,yBAAyB;QACzB,gCAAgC;QAChC,sCAAsC;QACtC,qBAAqB;QACrB,+BAA+B;QAC7B,yDAAyD;QAC3D,GAAG;QACH,qDAAqD;QACrD,mCAAmC;QACnC,kDAAkD;QAChD,oBAAoB;QACpB,qDAAqD;QACnD,+CAA+C;QAC/C,8BAA8B;QAChC,GAAG;QACL,GAAG;QACH,aAAa;QACf,GAAG;QAEH,wEAAwE;QACxE,6DAA6D;QAC7D,gEAAgE;QAChE,oDAAoD;QAClD,4DAA4D;QAC5D,iDAAiD;QACjD,uDAAuD;QACzD,GAAG;QAEH,+FAA+F;QAC/F,gIAAgI;QAEhI,uCAAuC;QAEvC,cAAc;QACd,2BAA2B;QAC3B,+BAA+B;QAC/B,4BAA4B;QAC1B,oBAAoB;QACpB,qBAAqB;QACrB,gDAAgD;QAChD,6EAA6E;QAC/E,GAAG;QACH,oCAAoC;QAEpC,mBAAmB;QACnB,8BAA8B;QAC5B,sEAAsE;QACxE,UAAU;QACR,gEAAgE;QAClE,GAAG;QAEH,UAAU;QACR,yBAAyB;QACzB,4BAA4B;QAC5B,wBAAwB;QACxB,iCAAiC;QACjC,yCAAyC;QACzC,oBAAoB;QACtB,IAAI,CACL,CAAC;AACJ,CAAC"}

package/dist/config.d.ts

@@ -31,6 +31,11 @@ export interface ExtensionConfig {
     enabled: boolean;
     killSwitchVersion: string;
 }
+export interface SelectorPackConfig {
+    /** T79: feature-flag for safari_register_selector / safari_unregister_selector tools.
+     *  Defaults to false. JS-injection surface — only enable for trusted environments. */
+    enabled: boolean;
+}
 export interface SafariPilotConfig {
     schemaVersion: string;
     rateLimit: RateLimitConfig;
@@ -41,6 +46,7 @@ export interface SafariPilotConfig {
     daemon: DaemonConfig;
     healthCheck: HealthCheckConfig;
     extension: ExtensionConfig;
+    selectorPack: SelectorPackConfig;
     screenshotPolicy?: {
         blockedPatterns?: string[];
     };

package/dist/config.js

@@ -37,6 +37,9 @@ export const DEFAULT_CONFIG = {
         enabled: true,
         killSwitchVersion: '0.1.5',
     },
+    selectorPack: {
+        enabled: false,
+    },
 };
 // ─── Deep merge ──────────────────────────────────────────────────────────────
 function isPlainObject(val) {
@@ -166,6 +169,12 @@ export function loadConfig(configPath) {
         // File not found or unreadable → use defaults silently
     }
     const merged = deepMerge(DEFAULT_CONFIG, userConfig);
+    // T79: selectorPack.enabled is a JS-injection-surface flag. Enforce strict
+    // boolean — anything other than literal `true` reverts to false (fail-safe).
+    const mergedRecord = merged;
+    const sp = mergedRecord['selectorPack'];
+    if (sp)
+        sp['enabled'] = sp['enabled'] === true;
     validate(merged);
     return deepFreeze(resolveConfigPaths(merged));
 }