@apono-io/apono-mcp 0.1.2 → 0.2.0

package/lib/download.js

@@ -35,6 +35,17 @@ function getArch() {
   }
 }
 
+function validatePlatformArch(platform, arch) {
+  const unsupported = [
+    { platform: "windows", arch: "armv7" },
+  ];
+  for (const combo of unsupported) {
+    if (platform === combo.platform && arch === combo.arch) {
+      throw new Error(`Unsupported platform/architecture combination: ${platform}/${arch}`);
+    }
+  }
+}
+
 function getArchiveExtension() {
   return process.platform === "win32" ? "zip" : "tar.gz";
 }
@@ -164,6 +175,7 @@ async function ensureBinary() {
 
   const platformStr = getPlatform();
   const archStr = getArch();
+  validatePlatformArch(platformStr, archStr);
   const ext = getArchiveExtension();
   const archiveName = `apono-agentic-cli_${latestVersion}_${platformStr}_${archStr}.${ext}`;
   const downloadUrl = `${RELEASES_BASE_URL}/cli/v${latestVersion}/${archiveName}`;
@@ -189,8 +201,27 @@ async function ensureBinary() {
       throw new Error(`Binary not found in archive at ${extractedBinary}`);
     }
 
-    fs.copyFileSync(extractedBinary, BINARY_PATH);
-    fs.chmodSync(BINARY_PATH, 0o755);
+    // Write to a temp file then atomically rename to avoid corruption
+    // if multiple processes run concurrently.
+    const tmpBinary = BINARY_PATH + ".tmp." + process.pid;
+    fs.copyFileSync(extractedBinary, tmpBinary);
+    fs.chmodSync(tmpBinary, 0o755);
+
+    // Remove macOS quarantine attribute so Gatekeeper doesn't block the binary
+    if (process.platform === "darwin") {
+      try {
+        execFileSync("xattr", ["-d", "com.apple.quarantine", tmpBinary], { timeout: 5000 });
+      } catch {
+        // Ignore — attribute may not exist
+      }
+      try {
+        execFileSync("xattr", ["-d", "com.apple.provenance", tmpBinary], { timeout: 5000 });
+      } catch {
+        // Ignore
+      }
+    }
+
+    fs.renameSync(tmpBinary, BINARY_PATH);
 
     process.stderr.write(`Apono CLI v${latestVersion} installed to ${BINARY_PATH}\n`);
   } finally {

package/lib/paths.js

@@ -5,7 +5,7 @@ const os = require("os");
 
 const RELEASES_BASE_URL = "https://apono-agentic-releases.s3.amazonaws.com";
 
-const BINARY_DIR = path.join(os.homedir(), ".apono", "bin");
+const BINARY_DIR = path.join(os.homedir(), ".local", "bin");
 const BINARY_NAME = process.platform === "win32" ? "apono-agentic.exe" : "apono-agentic";
 const BINARY_PATH = path.join(BINARY_DIR, BINARY_NAME);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apono-io/apono-mcp",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Apono MCP server for Claude Code, Claude Desktop, and Cursor",
   "bin": {
     "apono-mcp": "./bin/run.js"