safari-pilot 0.1.3 → 0.1.24

package/.claude-plugin/commands/start.md

@@ -0,0 +1,41 @@
+---
+name: start
+description: Start the Safari Pilot daemon (idempotent — safe to call if already running)
+allowed-tools: Bash
+---
+
+Start the SafariPilotd daemon process. This is idempotent — if the daemon is already running, report its PID and exit.
+
+## Steps
+
+1. Check if the daemon is already running:
+   ```bash
+   pgrep -f SafariPilotd
+   ```
+
+2. **If already running**, report the PID and exit:
+   > Safari Pilot daemon already running (PID: {pid})
+
+3. **If not running**, start it:
+   ```bash
+   DAEMON_BIN="${CLAUDE_PLUGIN_ROOT}/bin/SafariPilotd"
+   DATA_DIR="${HOME}/.safari-pilot"
+   mkdir -p "$DATA_DIR"
+   "$DAEMON_BIN" --daemon >> "$DATA_DIR/daemon.log" 2>&1 &
+   echo $! > "$DATA_DIR/daemon.pid"
+   ```
+
+4. Verify it started (check PID is alive):
+   ```bash
+   kill -0 $(cat ~/.safari-pilot/daemon.pid) 2>/dev/null
+   ```
+
+5. Report the result:
+   > Safari Pilot daemon started (PID: {pid})
+   >
+   > The Safari extension is managed separately in Safari > Settings > Extensions.
+
+## If the daemon binary is missing
+
+Report:
+> SafariPilotd not found at {path}. Run `npm install` in the safari-pilot directory to build it, or install Xcode Command Line Tools if Swift is not available.

package/.claude-plugin/commands/stop.md

@@ -0,0 +1,57 @@
+---
+name: stop
+description: Stop the Safari Pilot daemon gracefully
+allowed-tools: Bash
+---
+
+Stop the SafariPilotd daemon process. Attempts graceful SIGTERM shutdown, falls back to SIGKILL if needed.
+
+## Steps
+
+1. Find the daemon PID from the PID file or process list:
+   ```bash
+   PID_FILE="${HOME}/.safari-pilot/daemon.pid"
+   if [ -f "$PID_FILE" ]; then
+     PID=$(cat "$PID_FILE")
+   else
+     PID=$(pgrep -f SafariPilotd)
+   fi
+   ```
+
+2. **If PID was found**, verify the process is actually alive:
+   ```bash
+   kill -0 "$PID" 2>/dev/null
+   ```
+   If the process is not alive, clean up the stale PID file and report:
+   ```bash
+   rm -f "${HOME}/.safari-pilot/daemon.pid"
+   ```
+   > Safari Pilot daemon is not running (cleaned up stale PID file).
+
+3. **If no PID was found or process is dead**, report and exit:
+   > Safari Pilot daemon is not running.
+
+4. **If running**, send SIGTERM for graceful shutdown:
+   ```bash
+   kill "$PID" 2>/dev/null
+   ```
+
+5. Wait up to 3 seconds for the process to exit:
+   ```bash
+   for i in 1 2 3; do
+     kill -0 "$PID" 2>/dev/null || break
+     sleep 1
+   done
+   ```
+
+6. Check if it stopped:
+   - **If stopped**: clean up the PID file and report:
+     ```bash
+     rm -f "${HOME}/.safari-pilot/daemon.pid"
+     ```
+     > Safari Pilot daemon stopped (was PID: {pid})
+   - **If still running after 3s**: report the fallback command:
+     > Daemon did not stop gracefully. To force kill: `kill -9 {pid}`
+
+7. Always note:
+   > The Safari extension remains active independently in Safari > Settings > Extensions.

package/.claude-plugin/plugin.json

@@ -6,6 +6,10 @@
   "license": "MIT",
   "homepage": "https://github.com/RTinkslinger/safari-pilot",
   "components": {
+    "commands": [
+      "commands/start.md",
+      "commands/stop.md"
+    ],
     "mcpServers": {
       "safari": {
         "command": "node",

package/README.md

@@ -69,7 +69,13 @@ The extension unlocks advanced features that are impossible without it.
 6. Set to **"Allow on all websites"** when prompted
 7. Click **"Manage Profiles"** and enable for your active profile
 
-The extension is signed with Developer ID and notarized by Apple — it persists permanently across Safari restarts. No "Allow Unsigned Extensions" needed.
+The extension is signed with Developer ID and notarized by Apple — it persists permanently across Safari restarts.
+
+> **Troubleshooting:** If Safari shows **"Safari detected an app or service that interfered with clicking"** when you try to enable the extension, this is a Safari security feature triggered by other apps on your Mac that have Accessibility, Screen Recording, or Input Monitoring permissions (e.g., terminal emulators, screen sharing tools, window managers). To work around it:
+> 1. Go to **Safari > Develop > Allow Unsigned Extensions** (check it temporarily)
+> 2. Enable Safari Pilot in **Safari > Settings > Extensions**
+> 3. Quit and reopen Safari
+> 4. Optionally uncheck "Allow Unsigned Extensions" — the notarized extension stays enabled
 
 **What the extension adds:**
 
@@ -133,8 +139,8 @@ Open my X.com bookmarks and extract the top 5 posts with author profiles
 ### Shadow DOM (2)
 `safari_query_shadow` | `safari_click_shadow`
 
-### Frames (3)
-`safari_list_frames` | `safari_switch_frame` | `safari_eval_in_frame`
+### Frames (2)
+`safari_list_frames` | `safari_eval_in_frame`
 
 ### Permissions & Overrides (6)
 `safari_permission_get` | `safari_permission_set` | `safari_override_geolocation` | `safari_override_timezone` | `safari_override_locale` | `safari_override_useragent`
@@ -224,11 +230,11 @@ Safari Pilot runs on your local machine with access to your real browser session
 
 **Domain Policy** — Per-domain rate limits prevent runaway automation. Banking and financial domains flagged as untrusted by default.
 
-**Rate Limiter + Circuit Breaker** — Global limit of 120 actions/minute. Circuit breaker trips after 5 consecutive errors, backs off for 120 seconds.
+**Rate Limiter + Circuit Breaker** — Configurable via `safari-pilot.config.json`. Defaults: 120 actions/minute, circuit breaker trips at 5 errors with 120s cooldown.
 
 **IDPI Scanner** — Indirect Prompt Injection defense. Scans extracted text for 9 known injection patterns.
 
-**Kill Switch** — `safari_emergency_stop` immediately halts all automation. One command, full stop.
+**Kill Switch** — `safari_emergency_stop` immediately halts all automation. Configurable auto-activation on error threshold.
 
 **Human Approval** — Sensitive actions (OAuth consent, financial forms, downloads) flagged for explicit approval.
 
@@ -238,6 +244,34 @@ Safari Pilot runs on your local machine with access to your real browser session
 
 **No Credential Access** — Safari Pilot **never** accesses the macOS Keychain. Authentication works through real browser interaction.
 
+## Configuration
+
+All security settings are tunable via `safari-pilot.config.json` in the package root:
+
+```json
+{
+  "schemaVersion": "1.0",
+  "rateLimit": { "maxActionsPerMinute": 120, "windowMs": 60000 },
+  "circuitBreaker": { "errorThreshold": 5, "windowMs": 60000, "cooldownMs": 120000 },
+  "domainPolicy": { "defaultMaxActionsPerMinute": 60, "blocked": [], "trusted": [] },
+  "killSwitch": { "autoActivation": false, "maxErrors": 5, "windowSeconds": 60 },
+  "audit": { "maxEntries": 10000, "logPath": "~/.safari-pilot/audit.log" },
+  "daemon": { "timeoutMs": 30000 },
+  "healthCheck": { "timeoutMs": 3000 }
+}
+```
+
+Missing file → all defaults. Partial file → deep-merge with defaults. Sensitive domain protections (banking, PayPal, etc.) cannot be overridden via config.
+
+Set `SAFARI_PILOT_CONFIG` env var to use a custom config path.
+
+### Daemon Lifecycle
+
+```bash
+/safari-pilot start   # Start daemon, report PID (idempotent)
+/safari-pilot stop    # Graceful shutdown with SIGKILL fallback
+```
+
 ## Development
 
 ### Building from Source
@@ -246,11 +280,10 @@ Safari Pilot runs on your local machine with access to your real browser session
 # TypeScript server
 npm run build
 
-# Swift daemon
-cd daemon && swift build -c release
-cp .build/release/SafariPilotd ../bin/
+# Swift daemon (rebuild + atomic swap + launchctl restart)
+bash scripts/update-daemon.sh
 
-# Safari extension (requires Xcode)
+# Safari extension (Xcode archive → sign → notarize)
 bash scripts/build-extension.sh
 ```
 
@@ -261,16 +294,13 @@ bash scripts/build-extension.sh
 npm test
 
 # By category
-npm run test:unit          # 705 tests, no Safari needed
-npm run test:integration   # 372 tests, some need Safari
+npm run test:unit          # 777 tests, no Safari needed
+npm run test:integration   # Multi-component workflows
 npm run test:security      # 27 security-focused tests
-npm run test:e2e           # 31 tests against real Safari
+npm run test:e2e           # Against real Safari (optional)
 
 # Swift daemon tests
 cd daemon && swift run SafariPilotdTests
-
-# Canary deployment
-bash test/canary/install-test.sh
 ```
 
 ### Adding a New Tool
@@ -308,7 +338,7 @@ The daemon detects Safari crashes (error codes -600/-609) and retries with expon
 Safari Pilot is built from scratch — no code from third-party Safari MCP packages. Every line that touches your browser is first-party and auditable. We also add 9 security layers, a persistent Swift daemon (92x faster), and structured extraction tools.
 
 **Q: Does the Swift daemon run all the time?**
-Only when Claude Code is active. The LaunchAgent starts the daemon on demand and it shuts down with the session.
+The daemon starts on Claude Code session start (via the SessionStart hook) and stays running between sessions for fast restart. Use `/safari-pilot stop` to shut it down manually. The LaunchAgent auto-restarts it if it crashes.
 
 **Q: Do I need the Safari extension?**
 No — Safari Pilot works without it for ~80% of use cases. The extension adds Shadow DOM traversal, CSP bypass, dialog interception, and network mocking. Install it from the [GitHub Release](https://github.com/RTinkslinger/safari-pilot/releases/latest) if you need those features.

package/bin/Safari Pilot.app/Contents/Info.plist

@@ -23,29 +23,29 @@
 	<key>CFBundlePackageType</key>
 	<string>APPL</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.1.3</string>
+	<string>0.1.24</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>202604130112</string>
+	<string>202605031834</string>
 	<key>DTCompiler</key>
 	<string>com.apple.compilers.llvm.clang.1_0</string>
 	<key>DTPlatformBuild</key>
-	<string>25E236</string>
+	<string>25E251</string>
 	<key>DTPlatformName</key>
 	<string>macosx</string>
 	<key>DTPlatformVersion</key>
 	<string>26.4</string>
 	<key>DTSDKBuild</key>
-	<string>25E236</string>
+	<string>25E251</string>
 	<key>DTSDKName</key>
 	<string>macosx26.4</string>
 	<key>DTXcode</key>
-	<string>2640</string>
+	<string>2641</string>
 	<key>DTXcodeBuild</key>
-	<string>17E192</string>
+	<string>17E202</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>26.4</string>
 	<key>NSMainStoryboardFile</key>
@@ -53,6 +53,6 @@
 	<key>NSPrincipalClass</key>
 	<string>NSApplication</string>
 	<key>SFSafariWebExtensionConverterVersion</key>
-	<string>26.4</string>
+	<string>26.4.1</string>
 </dict>
 </plist>

package/bin/Safari Pilot.app/Contents/PlugIns/Safari Pilot Extension.appex/Contents/Info.plist

@@ -19,29 +19,29 @@
 	<key>CFBundlePackageType</key>
 	<string>XPC!</string>
 	<key>CFBundleShortVersionString</key>
-	<string>0.1.3</string>
+	<string>0.1.24</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
 	</array>
 	<key>CFBundleVersion</key>
-	<string>202604130112</string>
+	<string>202605031834</string>
 	<key>DTCompiler</key>
 	<string>com.apple.compilers.llvm.clang.1_0</string>
 	<key>DTPlatformBuild</key>
-	<string>25E236</string>
+	<string>25E251</string>
 	<key>DTPlatformName</key>
 	<string>macosx</string>
 	<key>DTPlatformVersion</key>
 	<string>26.4</string>
 	<key>DTSDKBuild</key>
-	<string>25E236</string>
+	<string>25E251</string>
 	<key>DTSDKName</key>
 	<string>macosx26.4</string>
 	<key>DTXcode</key>
-	<string>2640</string>
+	<string>2641</string>
 	<key>DTXcodeBuild</key>
-	<string>17E192</string>
+	<string>17E202</string>
 	<key>LSMinimumSystemVersion</key>
 	<string>10.14</string>
 	<key>NSExtension</key>