This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixed multiple reliability bugs and added visibility spoofing for backgrounded tabs.
Full changelog
Fixed
safari_evaluateresolves async scripts —await/.then()/ leadingasyncscripts no longer return(undefined). AppleScriptdo JavaScriptnever awaits a Promise, so async work is now started into a page global and polled from the Node side. The shared sync/async normalizer also no longer crashes on a trailing})(), and an un-awaitedfetch(is no longer misclassified as async.safari_wait_foractually waits — its in-page async wait loop returned immediately (do JavaScriptdoes not await); the wait loop now runs on the Node side, re-checking each tick.safari_clickno longer false-reports success — synthetic clicks dropped byevent.isTrusted-gated handlers (Clutch, G2, Cloudflare-class WAFs) are detected via a page fingerprint and escalated to a real OS-level CGEvent click.navigateno longer returns a stale page as success — a cold/crashed helper daemon could makeset URLsilently no-op; navigate now retries via the daemon-independentosascriptsubprocess and throws a clear error if the page still did not move.- Tab targeting no longer drifts to the user's tab during concurrent browsing —
window.nameidentity marker survives navigation, single-call resolution, fail-safe re-anchor.
Added
- Visibility spoofing keeps backgrounded automation tabs rendering —
document.visibilityStateis pinned tovisibleso SPAs (e.g. the Meta developer console) don't blank out.
Full Changelog: https://github.com/achiya-automation/safari-mcp/compare/v2.10.10...v2.11.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About achiya-automation/safari-mcp
Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.
Related context
Related tools
Earlier breaking changes
- v2.10.5 npm audit gate now fails build on high or critical advisories.
Beta — feedback welcome: [email protected]