@redpop/apple-mail-actions-mcp 0.0.0-placeholder.0 → 0.3.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Martin Alker
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,5 +1,229 @@
-# @redpop/apple-mail-actions-mcp
+# apple-mail-actions-mcp
 
-Placeholder. This version contains no code and reserves the package name so that trusted
-publishing can be set up. Install a later version once it is released:
-https://github.com/redpop/apple-mail-mcp
+An [MCP](https://modelcontextprotocol.io) server with one tool, `move_messages`. It moves
+messages to another mailbox of the same account in Apple Mail. It is the companion of
+[`@redpop/apple-mail-mcp`](../../README.md), the read-only server. That package stays read-only;
+all moving code lives here.
+
+**macOS only.** Status: not published yet. The install commands below apply from the first
+release; until then, build it from source.
+
+## What it does
+
+Claude looks at your mailbox with the read server, proposes a folder for some messages, and
+you confirm. Then Claude calls `move_messages` with message ids and target mailbox ids. The
+package only moves messages. It does not send, draft, delete, flag, create folders, read mail
+or move between accounts.
+
+```
+"Which of these invoices belong in the Accounting folder? Move the ones you are sure about."
+```
+
+The server asks Claude to show the proposal first, with the choices move all, move some,
+adjust first or move none. That is a request in the server instructions, not a lock. The lock
+is that the tool is not marked read-only, so your client asks before each call, but only in a
+mode that asks.
+
+**Do not choose "Always allow" for this tool.** It turns that confirmation off, and a
+malicious mail could then make the model move messages without you seeing it.
+
+**Use a mode that asks.** In Claude Desktop and Cowork, the Auto mode does not ask: an
+automated check blocks only actions it flags as risky, otherwise Claude moves without asking,
+even though the tool is set to "Needs approval". Choose Manual for conversations that may move
+mail. In a test on 2026-11-11, Auto moved a message right after a "yes" in the chat, with no
+prompt; Manual asked. In Claude Code, modes that approve tools on their own, such as auto mode
+or skipping permissions, have the same effect.
+
+## What you need beside it
+
+This package needs the read server beside it. The read server lists mailboxes and finds
+messages; this server only takes the ids it returns. Install `@redpop/apple-mail-mcp` first
+and give it Full Disk Access as its README describes.
+
+Two settings must match across both servers, because neither server sees the other's
+configuration:
+
+- `APPLE_MAIL_ACCOUNTS` is required here. If it is empty, every call fails with
+  `CONFIG_INVALID`; moving is never enabled for all accounts. Use the same list in the read
+  server.
+- Set `APPLE_MAIL_EXCLUDE_MAILBOXES` in both servers. A mailbox hidden in the read server but
+  not here would still be a possible target.
+
+Junk and trash are not visible by default, in either server.
+
+## What it moves, and what it refuses
+
+Targets are all visible mailboxes except trash, junk, drafts, sent and "all mail". Sources
+must be visible under the same rules, so junk and trash are not sources by default. Further
+targets can be forbidden with `APPLE_MAIL_MOVE_EXCLUDE_TARGETS`.
+
+Each message gets one status. `moved` means the index of Mail shows it in the target and no
+longer in the source. `moved_unverified` means the move was requested but the index did not
+confirm it within 10 seconds. Both describe the local state in Mail, not the mail server.
+`failed` and the `skipped_*` statuses say why a message did not move; nothing was changed for
+those.
+
+Message ids are valid for the current index only. After Mail rebuilds a mailbox, or after a
+`skipped_not_found` status, search again and use the new ids.
+
+Messages are skipped, never moved, in these cases:
+
+- The message looks like a security mail (verification code, password reset, sign-in link).
+  The check looks at the subject only; the message text is not read. `APPLE_MAIL_SHOW_SECURITY_MAILS` does not lift it.
+- The message was moved in the last 5 minutes. Rapid back and forth can create a copy on the
+  mail server, so each moved message is locked for 5 minutes, across processes. Moves you make
+  yourself in Mail are not known to the lock.
+- The message is visible in several mailboxes and `sourceMailboxId` does not pick one.
+- The message has no Message-ID header in Mail's index. On macOS 15 Mail does not store it, so
+  the tool cannot move anything there. `doctor` says so.
+- The source and target are the same, or in different accounts.
+- The account is not supported. Only mailbox.org has been tested. Other IMAP providers are
+  untested: they run without a refusal, so limit `APPLE_MAIL_ACCOUNTS` to accounts you
+  are willing to try. Gmail, Exchange and local folders are refused.
+- A folder name differs from another folder of the account only in case, or contains control
+  characters.
+
+Moves run one after another, never in parallel, and are never retried: a failed move may have
+arrived halfway.
+
+A folder that never held a message is not in Mail's index, so it does not appear in
+`list_mailboxes` and cannot be a target. Put one message in it by hand first.
+
+Subfolders and INBOX have had one manual test: on 2026-11-04, on macOS 27 with one IMAP
+account at mailbox.org, one test mail was moved to a subfolder and back, and one test mail to
+INBOX and back, 60 seconds apart, with no copy in the webmail. These were single test mails,
+not a series.
+
+## Requirements
+
+- macOS 26 or later to move mail. The server starts on macOS 15, but Mail there does not store
+  the Message-ID header, so every move is refused with `skipped_no_message_id`; the server
+  never moves a message it cannot identify by its Message-ID. Verified with a real mailbox
+  only on macOS 27 with Mail 16 and one mailbox.org account.
+- Node.js 22.16 or newer in the 22 line, or 24 and newer.
+- The read server `@redpop/apple-mail-mcp` at the same version, with Full Disk Access.
+- Mail must be running. The server never starts it; without it the call fails with
+  `MAIL_NOT_RUNNING`.
+
+## Install
+
+**Claude Code, as a plugin:**
+
+```
+/plugin install apple-mail-actions-mcp --marketplace redpop/apple-mail-mcp
+npx -y @redpop/apple-mail-actions-mcp setup
+```
+
+**Claude Code without the plugin:**
+
+```bash
+claude mcp add apple-mail-actions \
+  -e APPLE_MAIL_ACCOUNTS=work@example.com \
+  -e APPLE_MAIL_EXCLUDE_MAILBOXES=Archive \
+  -- npx -y @redpop/apple-mail-actions-mcp
+npx -y @redpop/apple-mail-actions-mcp setup
+```
+
+**Claude Desktop and Cowork:** the release will carry an `.mcpb` bundle with the same settings
+page. Claude Desktop does not switch it on after the install, because the accounts setting is
+required; enter the accounts, save, and switch it on under Settings > Extensions. The plugin does not work in Cowork, which starts a plugin's local server inside its Linux
+virtual machine, away from Mail, or in the desktop chat, which ignores such servers.
+
+`setup` first runs the setup of the read server (Full Disk Access for its helper), then asks
+macOS for the Automation permission of "Mail MCP Actions" to control Mail. Mail must be
+running for the dialog to appear. The permission goes to that small app alone, not to Claude,
+your terminal or Node. It can be switched off under System Settings > Privacy & Security >
+Automation.
+
+## Configuration
+
+Set these in the environment of the server. They cannot be changed through tool parameters.
+An invalid value does not stop the server; every call then fails with `CONFIG_INVALID` naming
+the setting. The server reads them once, at startup: restart the client after a change.
+
+| Variable | Default | Meaning |
+|---|---|---|
+| `APPLE_MAIL_ACCOUNTS` | required | Comma-separated allowlist of accounts, by UUID, address or name. Empty is an error, not "all accounts". |
+| `APPLE_MAIL_INCLUDE_JUNK` | `false` | Treat mailboxes with the junk role as visible. Same meaning as in the read server. |
+| `APPLE_MAIL_INCLUDE_TRASH` | `false` | Treat mailboxes with the trash role as visible. Same meaning as in the read server. |
+| `APPLE_MAIL_EXCLUDE_MAILBOXES` | empty | Comma-separated mailboxes to hide, by name or by path with `/`. Set it in both servers. |
+| `APPLE_MAIL_MAX_MOVES` | `25` | Upper bound for the number of messages in one call (1 to 100). |
+| `APPLE_MAIL_MOVE_EXCLUDE_TARGETS` | empty | Comma-separated mailboxes that are never a target, by name or by path with `/`. |
+| `APPLE_MAIL_ACTIONS_PATH` | not set | Development only: path to a Dev or Ad hoc build of the Actions app. A bundle with the release bundle id is refused. |
+
+The settings of the read server that do not appear here, for example body search, do not affect
+this package.
+
+## Install from source
+
+You need the Xcode Command Line Tools and an Apple Development certificate for a build that
+keeps its permission across rebuilds.
+
+```bash
+git clone https://github.com/redpop/apple-mail-mcp.git
+cd apple-mail-mcp
+npm ci
+npm run build && npm run build:helper
+npm run build --workspace packages/actions && npm run build:helper --workspace packages/actions
+```
+
+Then follow the README of the read server for its helper, and grant Automation with
+`node packages/actions/dist/index.js setup`, with `APPLE_MAIL_ACTIONS_PATH` and
+`APPLE_MAIL_HELPER_PATH` pointing at the Dev bundles in each `bin/` directory. Never sign
+these builds with a Developer ID.
+
+Put these variables in front of the command instead of exporting them. An exported
+`APPLE_MAIL_*` variable stays in the shell, and every MCP server that a client started from
+that shell inherits it: an exported `APPLE_MAIL_ACCOUNTS` also limits the read server to those
+accounts. If you exported them, run `unset` on them before you start the client.
+
+## Diagnostics
+
+```bash
+npx -y @redpop/apple-mail-actions-mcp doctor
+```
+
+`doctor` runs the checks of the read server, then checks the Actions app and its signature,
+the Automation permission, whether Mail is running, whether the Message-ID column exists and
+which accounts are supported. Without `--verbose` it names no accounts or addresses. Exit code
+1 means at least one check failed.
+
+## Privacy Policy
+
+This policy covers the server and the Actions app, as published on npm and in the GitHub
+releases. It adds to the policy of the read server.
+
+### What is collected
+
+Nothing is collected by the author or by any service. The server has no telemetry, and neither
+the server nor the app opens a network connection. The app never sees mail content. It receives
+a message number, a Message-ID and the names of an account and two mailboxes, and returns a
+status.
+
+### How it is used and stored
+
+When your AI client calls `move_messages`, the app asks Mail to move the messages you named. The
+server writes one file, `move-locks.json`, under
+`~/Library/Application Support/apple-mail-mcp/`, directory 0700, file 0600. It holds the
+internal message numbers of recently moved messages and the time their lock ends. No names or
+subjects.
+
+### Sharing with third parties
+
+Nothing is shared. Mail itself synchronizes the move with your mail server, as it does for a move
+you make by hand. The statuses of a call go back to your AI client.
+
+### Retention
+
+Entries leave the lock file after 5 minutes at the next move. Delete the file at any time. The
+server never deletes or changes anything under `~/Library/Mail` itself; the moves are Mail's.
+
+### Contact
+
+Questions about this policy: open an issue at
+<https://github.com/redpop/apple-mail-mcp/issues>. Security problems: report them privately as
+[`SECURITY.md`](./SECURITY.md#reporting-a-vulnerability) describes.
+
+## License
+
+MIT, see [`LICENSE`](./LICENSE).

package/SECURITY.md

@@ -0,0 +1,87 @@
+# Security
+
+This covers `@redpop/apple-mail-actions-mcp`. The threat model of the read server, including
+prompt injection and what a mailbox holds, is in the
+[root `SECURITY.md`](../../SECURITY.md) and applies here too.
+
+## What the package can do
+
+One tool, `move_messages`, moves messages between mailboxes of one account. The signed app
+"Mail MCP Actions" does the move by asking Mail through Apple Events. It has the Automation
+permission for Mail and no Full Disk Access. It has a fixed set of commands (`hello`,
+`permission`, `request-permission`, `move`) and no command to list, read or delete mail.
+It never sees mail content: it gets a message number, a Message-ID and names, and returns a
+status or an error number. It holds no credentials and opens no network connection.
+
+What limits the server:
+
+- **Settings come from the environment, never from tool parameters.** The account list, the
+  limit per call and the forbidden targets cannot be widened by the model, so an injected mail
+  cannot widen them.
+- **Accounts are an allowlist.** An empty `APPLE_MAIL_ACCOUNTS` makes every call fail.
+- **Targets exclude trash, junk, drafts, sent and "all mail".** Sources must be visible under
+  the policy of the read server's rules.
+- **Nothing is deleted or sent.** The worst a move does is put a message in the wrong
+  folder; moving it back works with the same tool once the 5-minute lock has ended.
+- **The message is checked before the move.** The app finds the message by number and compares
+  its Message-ID with the one the server read from the index. It moves only if both agree.
+- **No raw scripts.** Account and folder names are never put into script text unchecked.
+- **Moves are locked for 5 minutes, one at a time, never retried.**
+- **The client asks, in a mode that asks.** `move_messages` is not marked read-only, so a client
+  asks before each call. If you set "Always allow" for the tool, that is gone; do not. A mode
+  that approves tools on its own removes it too: in Claude Desktop and Cowork, Auto moves without
+  asking when its automated check does not flag the action, even for a tool set to "Needs
+  approval" (tested 2026-11-11). Use Manual there, and no auto-approving mode in Claude Code.
+
+## Residual risks
+
+### Any local process can run the app
+
+Any program running as your macOS user can start the Actions app and send it `move`
+commands directly, as long as the Automation permission exists. The server's policy lives in
+Node, not in the app. Such a program could move any message it can identify, in any account
+that Mail holds, into any folder, trash included. The damage is limited to moving:
+the app cannot read, send, delete or flag mail, and a moved message can be moved back. If your
+threat model includes hostile programs under your account, this package does not defend
+against them. The permission can be switched off in System Settings > Privacy & Security >
+Automation.
+
+Mail's own permission model is the reason for the shape: the grant attaches to the app because
+it re-launches itself as its own responsible process. The permission does not go to Claude,
+your terminal or Node.
+
+### Any local process can switch the grant off
+
+As with the read helper, a program of your user can build an ad-hoc bundle with the release
+bundle id and run it. macOS then turns the grant off. The server is blind until you switch it
+on again. Local builds use their own bundle ids. The server starts a bundle with the release id
+only if its signature verifies against the project's Developer ID requirement, and starts a Dev
+or Ad hoc bundle only when `APPLE_MAIL_ACTIONS_PATH` points at it; it refuses any other bundle id.
+
+### The security-mail check looks at the subject only
+
+Messages that look like security mails are never moved. The check is the same heuristic as in
+the read server, applied to the subject only. The message text is not read, and the sender address does not change the result. It does not load the body: the body
+check also flags ordinary mail with a word like "code" and would block normal moves, and it
+could not judge mail that was never downloaded. So a security mail with a harmless subject
+can be moved, to a folder you allow. Moving does not read it or send it anywhere. The check
+is a safety net, not a guarantee.
+
+### Status means the local state, not the server
+
+A status describes the local state in Mail, not the server. `moved` says that the index of Mail shows the message in the target and not in the source. Mail
+then synchronizes with the server. If that fails, or if Mail creates a copy on the server
+(rapid back and forth can), the status does not know. Check in the webmail if it matters.
+
+### Untested providers
+
+Only mailbox.org has been tested. Other IMAP providers run without a refusal and may behave
+differently, for example by keeping a copy. Limit `APPLE_MAIL_ACCOUNTS` to accounts you are
+willing to try.
+
+## Reporting a vulnerability
+
+Please report security problems privately through GitHub Security Advisories:
+<https://github.com/redpop/apple-mail-mcp/security/advisories/new>. Do not open a public issue
+for them. Include the macOS version, the output of `doctor` and steps to reproduce. Please do
+not attach real mail.

package/bin/Mail MCP Actions.app/Contents/Info.plist

@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleIdentifier</key>
+  <string>io.github.redpop.apple-mail-mcp.mail-actions</string>
+  <key>CFBundleName</key>
+  <string>Mail MCP Actions</string>
+  <key>CFBundleDisplayName</key>
+  <string>Mail MCP Actions</string>
+  <key>CFBundleExecutable</key>
+  <string>mail-actions</string>
+  <key>CFBundleIconFile</key>
+  <string>AppIcon</string>
+  <key>CFBundlePackageType</key>
+  <string>APPL</string>
+  <key>CFBundleShortVersionString</key>
+  <string>0.3.2</string>
+  <key>CFBundleVersion</key>
+  <string>0.3.2</string>
+  <key>LSMinimumSystemVersion</key>
+  <string>15.0</string>
+  <key>NSAppleEventsUsageDescription</key>
+  <string>Moves messages between folders in Apple Mail when you confirm it.</string>
+  <key>LSUIElement</key>
+  <true/>
+</dict>
+</plist>

package/bin/Mail MCP Actions.app/Contents/_CodeSignature/CodeResources

@@ -0,0 +1,128 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>files</key>
+	<dict>
+		<key>Resources/AppIcon.icns</key>
+		<data>
+		E9KEMJn1uUwhssgjN+4uU5ZYdpA=
+		</data>
+	</dict>
+	<key>files2</key>
+	<dict>
+		<key>Resources/AppIcon.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			GT2ygd05uo0+IBsX1vwkfZQ0HNjYcREuoPCNFAL6mNY=
+			</data>
+		</dict>
+	</dict>
+	<key>rules</key>
+	<dict>
+		<key>^Resources/</key>
+		<true/>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^version.plist$</key>
+		<true/>
+	</dict>
+	<key>rules2</key>
+	<dict>
+		<key>.*\.dSYM($|/)</key>
+		<dict>
+			<key>weight</key>
+			<real>11</real>
+		</dict>
+		<key>^(.*/)?\.DS_Store$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>2000</real>
+		</dict>
+		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^.*</key>
+		<true/>
+		<key>^Info\.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^PkgInfo$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^[^/]+$</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^embedded\.provisionprofile$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^version\.plist$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+	</dict>
+</dict>
+</plist>

package/dist/bundle.js

@@ -0,0 +1,85 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { readBundleId, TEAM_ID } from '@redpop/apple-mail-mcp/dist/signing.js';
+import { createStdioRunner } from '@redpop/apple-mail-mcp/dist/stdioRunner.js';
+import { ActionsError } from './errors.js';
+// Die IDs stehen auch in packages/actions/swift/build.sh; tests/signing.test.ts prueft, dass sie passen.
+export const RELEASE_BUNDLE_ID = 'io.github.redpop.apple-mail-mcp.mail-actions';
+export const DEV_BUNDLE_ID = RELEASE_BUNDLE_ID + '.dev';
+export const ADHOC_BUNDLE_ID = RELEASE_BUNDLE_ID + '.adhoc';
+export const RELEASE_REQUIREMENT = `identifier "${RELEASE_BUNDLE_ID}" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] exists and certificate leaf[subject.OU] = "${TEAM_ID}"`;
+/** Mehr als die 2 Minuten, nach denen ein Apple Event selbst aufgibt: Sonst gaelte ein noch laufender Zug als tot. */
+export const ACTIONS_TIMEOUTS = { firstRequestMs: 130_000, requestMs: 130_000 };
+const defaultExec = (file, args) => execFileSync(file, args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+/** Wo das Bundle im ausgelieferten Paket liegt (gleich fuer src/ und dist/). */
+export function packagedActionsBundle() {
+    return fileURLToPath(new URL('../bin/Mail MCP Actions.app', import.meta.url));
+}
+export function resolveActionsBundle(config) {
+    return config.actionsPath ?? packagedActionsBundle();
+}
+export function actionsExecutable(bundle) {
+    return `${bundle}/Contents/MacOS/mail-actions`;
+}
+/**
+ * Signaturgatter vor dem ersten Start, nach dem Muster von checkBundle im Lesepaket. Der Override erlaubt nur
+ * Dev- und Ad-hoc-Bundles: Eine Release-ID per Override waere ein fremder Build mit der Freigabe des Nutzers.
+ */
+export function checkActionsBundle(bundle, opts) {
+    const exec = opts.exec ?? defaultExec;
+    if (!(opts.exists ?? existsSync)(bundle))
+        throw new ActionsError('ACTIONS_BUNDLE_MISSING');
+    let id;
+    try {
+        id = readBundleId(bundle, exec);
+    }
+    catch {
+        throw new ActionsError('ACTIONS_SIGNATURE_INVALID');
+    }
+    if (id === RELEASE_BUNDLE_ID) {
+        if (opts.override)
+            throw new ActionsError('ACTIONS_SIGNATURE_INVALID');
+        try {
+            exec('/usr/bin/codesign', ['--verify', '--strict', '--deep', `-R=${RELEASE_REQUIREMENT}`, bundle]);
+        }
+        catch {
+            throw new ActionsError('ACTIONS_SIGNATURE_INVALID');
+        }
+        return;
+    }
+    if (opts.override && (id === DEV_BUNDLE_ID || id === ADHOC_BUNDLE_ID))
+        return;
+    throw new ActionsError('ACTIONS_SIGNATURE_INVALID');
+}
+/**
+ * Ein Runner pro Serverprozess; das Gatter laeuft einmal vor dem ersten Start, auch ein Fehlschlag bleibt
+ * bis zum Prozessende stehen (wie createHelperRunner).
+ */
+export function createActionsRunner(config, deps = {}) {
+    const bundlePath = resolveActionsBundle(config);
+    const options = { debug: config.debug === true };
+    const inner = (deps.makeRunner ?? ((exe, opts) => createStdioRunner(exe, ACTIONS_TIMEOUTS, opts)))(actionsExecutable(bundlePath), options);
+    const check = deps.check ?? checkActionsBundle;
+    let gate;
+    return {
+        bundlePath,
+        run(command, payload) {
+            if (gate === undefined) {
+                try {
+                    check(bundlePath, { override: config.actionsPath !== null });
+                    gate = true;
+                }
+                catch (e) {
+                    gate = e;
+                }
+            }
+            if (gate !== true)
+                return Promise.reject(gate);
+            return inner.run(command, payload);
+        },
+        stop: () => inner.stop(),
+        helperVersion: () => inner.helperVersion(),
+    };
+}
+//# sourceMappingURL=bundle.js.map

package/dist/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,OAAO,EAAe,MAAM,wCAAwC,CAAA;AAC3F,OAAO,EAAE,iBAAiB,EAAiE,MAAM,4CAA4C,CAAA;AAE7I,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,yGAAyG;AACzG,MAAM,CAAC,MAAM,iBAAiB,GAAG,8CAA8C,CAAA;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,GAAG,MAAM,CAAA;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,GAAG,QAAQ,CAAA;AAE3D,MAAM,CAAC,MAAM,mBAAmB,GAC9B,eAAe,iBAAiB,2HAA2H,OAAO,GAAG,CAAA;AAEvK,sHAAsH;AACtH,MAAM,CAAC,MAAM,gBAAgB,GAAkB,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;AAE9F,MAAM,WAAW,GAAW,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;AAE7H,gFAAgF;AAChF,MAAM,UAAU,qBAAqB;IACnC,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAqB;IACxD,OAAO,MAAM,CAAC,WAAW,IAAI,qBAAqB,EAAE,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,GAAG,MAAM,8BAA8B,CAAA;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAA8E;IAC/H,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAA;IACrC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;IAC1F,IAAI,EAAU,CAAA;IACd,IAAI,CAAC;QACH,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,EAAE,KAAK,iBAAiB,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAA;QACtE,IAAI,CAAC;YACH,IAAI,CAAC,mBAAmB,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAA;QACrD,CAAC;QACD,OAAM;IACR,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,aAAa,IAAI,EAAE,KAAK,eAAe,CAAC;QAAE,OAAM;IAC7E,MAAM,IAAI,YAAY,CAAC,2BAA2B,CAAC,CAAA;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAqB,EACrB,IAAI,GAGA,EAAE;IAEN,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAA;IAChD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,EAAE,IAAkB,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAA;IAC9C,IAAI,IAAa,CAAA;IACjB,OAAO;QACL,UAAU;QACV,GAAG,CAAC,OAAO,EAAE,OAAO;YAClB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,KAAK,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC,CAAA;oBAC5D,IAAI,GAAG,IAAI,CAAA;gBACb,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAI,GAAG,CAAC,CAAA;gBACV,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC9C,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACpC,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE;QACxB,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE;KAC3C,CAAA;AACH,CAAC"}