@apono-io/apono-mcp 0.1.4 → 0.2.1

package/lib/download.js

@@ -35,6 +35,17 @@ function getArch() {
   }
 }
 
+function validatePlatformArch(platform, arch) {
+  const unsupported = [
+    { platform: "windows", arch: "armv7" },
+  ];
+  for (const combo of unsupported) {
+    if (platform === combo.platform && arch === combo.arch) {
+      throw new Error(`Unsupported platform/architecture combination: ${platform}/${arch}`);
+    }
+  }
+}
+
 function getArchiveExtension() {
   return process.platform === "win32" ? "zip" : "tar.gz";
 }
@@ -164,6 +175,7 @@ async function ensureBinary() {
 
   const platformStr = getPlatform();
   const archStr = getArch();
+  validatePlatformArch(platformStr, archStr);
   const ext = getArchiveExtension();
   const archiveName = `apono-agentic-cli_${latestVersion}_${platformStr}_${archStr}.${ext}`;
   const downloadUrl = `${RELEASES_BASE_URL}/cli/v${latestVersion}/${archiveName}`;
@@ -189,23 +201,28 @@ async function ensureBinary() {
       throw new Error(`Binary not found in archive at ${extractedBinary}`);
     }
 
-    fs.copyFileSync(extractedBinary, BINARY_PATH);
-    fs.chmodSync(BINARY_PATH, 0o755);
+    // Write to a temp file then atomically rename to avoid corruption
+    // if multiple processes run concurrently.
+    const tmpBinary = BINARY_PATH + ".tmp." + process.pid;
+    fs.copyFileSync(extractedBinary, tmpBinary);
+    fs.chmodSync(tmpBinary, 0o755);
 
     // Remove macOS quarantine attribute so Gatekeeper doesn't block the binary
     if (process.platform === "darwin") {
       try {
-        execFileSync("xattr", ["-d", "com.apple.quarantine", BINARY_PATH], { timeout: 5000 });
+        execFileSync("xattr", ["-d", "com.apple.quarantine", tmpBinary], { timeout: 5000 });
       } catch {
         // Ignore — attribute may not exist
       }
       try {
-        execFileSync("xattr", ["-d", "com.apple.provenance", BINARY_PATH], { timeout: 5000 });
+        execFileSync("xattr", ["-d", "com.apple.provenance", tmpBinary], { timeout: 5000 });
       } catch {
         // Ignore
       }
     }
 
+    fs.renameSync(tmpBinary, BINARY_PATH);
+
     process.stderr.write(`Apono CLI v${latestVersion} installed to ${BINARY_PATH}\n`);
   } finally {
     fs.rmSync(tmpDir, { recursive: true, force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apono-io/apono-mcp",
-  "version": "0.1.4",
+  "version": "0.2.1",
   "description": "Apono MCP server for Claude Code, Claude Desktop, and Cursor",
   "bin": {
     "apono-mcp": "./bin/run.js"