@mathismeadows/roamer-device-auth 1.5.7 → 1.5.9

package/macos-notifier.app/Contents/Info.plist

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>CFBundleDisplayName</key>
+    <string>Roamer MCP</string>
+    <key>CFBundleExecutable</key>
+    <string>roamer-mcp-notifier</string>
+    <key>CFBundleIdentifier</key>
+    <string>com.mathismeadows.roamer-mcp.notifier.v4</string>
+    <key>CFBundleIconFile</key>
+    <string>roamer-mcp-v4.icns</string>
+    <key>CFBundleName</key>
+    <string>Roamer MCP</string>
+    <key>CFBundlePackageType</key>
+    <string>APPL</string>
+    <key>CFBundleShortVersionString</key>
+    <string>1.0</string>
+    <key>CFBundleVersion</key>
+    <string>4</string>
+    <key>LSUIElement</key>
+    <true/>
+</dict>
+</plist>

package/macos-notifier.app/Contents/_CodeSignature/CodeResources

@@ -0,0 +1,150 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>files</key>
+	<dict>
+		<key>Resources/roamer-mcp-icon-v2.png</key>
+		<data>
+		2dM6CEL1wlYNq4xt+ecVt+BHGGE=
+		</data>
+		<key>Resources/roamer-mcp-v4.icns</key>
+		<data>
+		cQdIamkBe9J4DyIwSJnoMbrgdL4=
+		</data>
+		<key>Resources/roamer-mcp.icns</key>
+		<data>
+		cQdIamkBe9J4DyIwSJnoMbrgdL4=
+		</data>
+	</dict>
+	<key>files2</key>
+	<dict>
+		<key>Resources/roamer-mcp-icon-v2.png</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			MWFb39dsRLKc+Q+xfVR6joPIp/MVngghyYXAYyTUEQg=
+			</data>
+		</dict>
+		<key>Resources/roamer-mcp-v4.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			qx5IaaBZH5kHBh1t8Kb0XEpXM51aRZuMOvBIbQLqKsQ=
+			</data>
+		</dict>
+		<key>Resources/roamer-mcp.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			qx5IaaBZH5kHBh1t8Kb0XEpXM51aRZuMOvBIbQLqKsQ=
+			</data>
+		</dict>
+	</dict>
+	<key>rules</key>
+	<dict>
+		<key>^Resources/</key>
+		<true/>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^version.plist$</key>
+		<true/>
+	</dict>
+	<key>rules2</key>
+	<dict>
+		<key>.*\.dSYM($|/)</key>
+		<dict>
+			<key>weight</key>
+			<real>11</real>
+		</dict>
+		<key>^(.*/)?\.DS_Store$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>2000</real>
+		</dict>
+		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^.*</key>
+		<true/>
+		<key>^Info\.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^PkgInfo$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^[^/]+$</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^embedded\.provisionprofile$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^version\.plist$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+	</dict>
+</dict>
+</plist>

package/package.json

@@ -1,16 +1,17 @@
 {
   "name": "@mathismeadows/roamer-device-auth",
-  "version": "1.5.7",
+  "version": "1.5.9",
   "private": false,
   "mcpName": "com.mathismeadows/roamer-mcp",
   "type": "module",
   "description": "AUTH-14/AUTH-25/AUTH-38: stdio<->HTTP MCP proxy for Roamer MCP with two auth mechanisms, chosen per-machine by default-browser detection. Safari-default machines use a server-mediated device authorization flow (AUTH-25) since Safari's HTTPS-Only Mode blocks a loopback redirect; every other machine uses a standard direct loopback redirect instead. Both authenticate against RoamerMcp's own OAuth authorization server (AUTH-38). AUTH-54/55/57/58: sessions are cached per (client, identity) pair, with explicit login/logout/status subcommands to switch or inspect which identity a client is using.",
   "bin": {
-    "roamer-device-auth": "./roamer-device-auth.mjs"
+    "roamer-device-auth": "roamer-device-auth.mjs"
   },
   "main": "./roamer-device-auth.mjs",
   "files": [
-    "roamer-device-auth.mjs"
+    "roamer-device-auth.mjs",
+    "macos-notifier.app/"
   ],
   "publishConfig": {
     "access": "public"

package/roamer-device-auth.mjs

@@ -46,11 +46,11 @@ import {
 import { readFile, writeFile, mkdir, readdir, unlink } from "node:fs/promises";
 import { realpathSync, watch } from "node:fs";
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { dirname, join } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { createServer } from "node:http";
 import qrcode from "qrcode-terminal";
 
@@ -60,6 +60,13 @@ const ROAMER_MCP_URL = process.env.ROAMER_MCP_URL ?? "https://roamer-mcp.mathism
 const ROAMER_MCP_ORIGIN = new URL(ROAMER_MCP_URL).origin;
 
 const CACHE_DIR = join(homedir(), ".mcp-auth-device");
+const MACOS_NOTIFIER_PATH = join(
+  dirname(fileURLToPath(import.meta.url)),
+  "macos-notifier.app",
+  "Contents",
+  "MacOS",
+  "roamer-mcp-notifier",
+);
 
 // AUTH-51: every on-disk cache is namespaced per client slug — a null slug (the connecting
 // host sent no usable clientInfo.name) means "never persist": the caller gets a real
@@ -329,18 +336,25 @@ async function showDeviceCodeDialog(verificationUri, userCode) {
 // distinction someone needs in order to notice a stale identity is still active.
 async function notifySessionReused(clientSlug, identityLabel) {
   const clientLabel = clientSlug ?? "an unidentified client";
-  const message = identityLabel
+  const logMessage = identityLabel
     ? `Reused an existing Roamer MCP session for ${clientLabel} (${identityLabel}).`
     : `Reused an existing Roamer MCP session for ${clientLabel}.`;
-  try {
-    await execFileAsync("osascript", [
-      "-e",
-      `display notification "${message.replace(/"/g, '\\"')}" with title "Roamer MCP"`,
-    ]);
-  } catch {
-    // Best-effort, macOS-only — the stderr log line below is the fallback for every other OS.
+  if (process.platform === "darwin") {
+    try {
+      await execFileAsync("open", [
+        "-n",
+        "-W",
+        join(dirname(MACOS_NOTIFIER_PATH), "..", ".."),
+        "--args",
+        "Roamer MCP",
+        identityLabel ? `Connected as ${identityLabel}.` : "Connected using a saved session.",
+        `Client: ${clientLabel}`,
+      ]);
+    } catch {
+      // Best-effort — stderr remains the fallback if native notifications are unavailable.
+    }
   }
-  log(message);
+  log(logMessage);
 }
 
 // AUTH-54: identityKey defaults to null (the pre-AUTH-54 file shape) rather than being