apple-icloud-mcp 0.3.5 → 0.3.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/.claude-plugin/marketplace.json +2 -2
  2. package/.claude-plugin/plugin.json +1 -1
  3. package/README.md +5 -3
  4. package/THIRD_PARTY_NOTICES.md +48 -48
  5. package/dist/bundle.js +1829 -1135
  6. package/dist/errors.js +32 -15
  7. package/dist/http.js +3 -3
  8. package/dist/mail/smtp.js +3 -3
  9. package/dist/tools/_confirm.js +68 -119
  10. package/dist/version.js +1 -1
  11. package/package.json +12 -8
  12. package/server.json +2 -2
package/.claude-plugin/marketplace.json CHANGED
@@ -6,7 +6,7 @@
6
6
  },
7
7
  "metadata": {
8
8
  "description": "Unofficial Apple Music, iCloud Calendar/Contacts/Mail, Apple Maps and WeatherKit tools for Claude Code",
9
- "version": "0.3.5"
9
+ "version": "0.3.7"
10
10
  },
11
11
  "plugins": [
12
12
  {
@@ -14,7 +14,7 @@
14
14
  "displayName": "Apple iCloud",
15
15
  "source": "./",
16
16
  "description": "Apple Music playlists and library, iCloud Calendar, Contacts and Mail, Apple Maps, WeatherKit and iTunes search for Claude via MCP — runs anywhere, no Mac required. Unofficial; not affiliated with Apple.",
17
- "version": "0.3.5",
17
+ "version": "0.3.7",
18
18
  "author": {
19
19
  "name": "Chris Chall"
20
20
  },
package/.claude-plugin/plugin.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "apple-icloud",
3
3
  "displayName": "Apple iCloud",
4
- "version": "0.3.5",
4
+ "version": "0.3.7",
5
5
  "description": "Apple Music playlists and library, iCloud Calendar, Contacts and Mail, Apple Maps, WeatherKit and iTunes search for Claude via MCP — runs anywhere, no Mac required. Unofficial; not affiliated with Apple.",
6
6
  "author": {
7
7
  "name": "Chris Chall"
package/README.md CHANGED
@@ -244,7 +244,7 @@ read in `DISPLAY_TZ` — so are calendar events stored without a time zone of th
244
244
  ## Tools
245
245
 
246
246
  <!-- TOOLS:START -->
247
- 58 tools. **Mode** is the lowest [`APPLE_WRITE_MODE`](#write-protection-apple_write_mode) that registers the tool; **Confirm** marks tools that ask first ([details](#confirmation-mcp_confirm_mode)); 🌐 marks Apple Music tools that need [web-player mode](#apple-music--web-player-mode-opt-in-unofficial).
247
+ 59 tools. **Mode** is the lowest [`APPLE_WRITE_MODE`](#write-protection-apple_write_mode) that registers the tool; **Confirm** marks tools that ask first ([details](#confirmation-mcp_confirm_mode)); 🌐 marks Apple Music tools that need [web-player mode](#apple-music--web-player-mode-opt-in-unofficial).
248
248
 
249
249
  ### Health
250
250
 
@@ -372,7 +372,7 @@ target changed in between.
372
372
  | `MCP_CONFIRM_MODE` | `ask-user` (default — the model must get your OK before repeating the call), `auto` (the model may confirm after reviewing the preview), `refuse` (never). Unknown values mean `refuse`. |
373
373
  | `MCP_CONFIRM_ELICITATION` | `on` (default) or `off`. `off` never shows a prompt, so every client gets the two-step flow under `MCP_CONFIRM_MODE`. Set it for a client that says it can prompt but never does (the gated call hangs — opencode 2.0.x). Any other value stays `on` (with a stderr warning). |
374
374
  | `MCP_CONFIRM_TTL_SECONDS` | How long a token is valid (default 600). |
375
- | `MCP_CONFIRM_SECRET` | Token signing key; random per process by default (on mcp-host, the host's per-child `MCP_HOST_CONFIRM_SECRET` beside an absolute `MCP_DATA_DIR` is used instead). Set it so a token survives a restart; spent tokens are recorded on disk (`confirm-spent.json`), so none can be replayed (unless `APPLE_STATE_CACHE=false` or the directory is unwritable — a warning says so). |
375
+ | `MCP_CONFIRM_SECRET` | Token signing key; random per process by default (on mcp-host, the host's per-child `MCP_HOST_CONFIRM_SECRET` beside an absolute `MCP_DATA_DIR` is used instead). Set it so a token survives a restart; spent tokens are recorded on disk (mcp-utils' shared store, `$MCP_DATA_DIR/.mcp-confirm/spent/`, or `~/.apple-icloud-mcp/confirm-spent/` without an absolute `MCP_DATA_DIR`), so none can be replayed. With `APPLE_STATE_CACHE=false` they are remembered by the process only (a warning says so); if the directory cannot be written, confirmed writes are refused rather than risk a replay. |
376
376
 
377
377
  ## Environment variables
378
378
 
@@ -498,7 +498,9 @@ source checkout, `node dist/index.js doctor` also reads the repo's `.env`.
498
498
  - `mail-login.json` — which IMAP login form iCloud accepted;
499
499
  - `icloud-rejected.json` — salted digests of rejected Apple ID/password pairs and when, so a revoked
500
500
  password is not re-sent for 24 hours even after a restart;
501
- - `confirm-spent.json` — digests of used confirmation tokens, so none can be replayed after a restart.
501
+ - `confirm-spent/` — one file per used confirmation token (its random id and expiry), so none can be replayed
502
+ after a restart. Hosted with an absolute `MCP_DATA_DIR`, this lives in mcp-utils' shared
503
+ `$MCP_DATA_DIR/.mcp-confirm/spent/` instead.
502
504
 
503
505
  Delete the directory to remove them, or set `APPLE_STATE_CACHE=false` to never write them (the latch and the
504
506
  spent-token record then last only as long as the process, and a warning says so).
package/THIRD_PARTY_NOTICES.md CHANGED
@@ -22,7 +22,7 @@ MPL-2.0 is a file-level license: it covers ical.js's own files and does not exte
22
22
 
23
23
  | Package | Version | License | Source |
24
24
  |---|---|---|---|
25
- | @chrischall/mcp-utils | 3.0.0 | MIT | https://github.com/chrischall/mcp-utils |
25
+ | @chrischall/mcp-utils | 3.3.0 | MIT | https://github.com/chrischall/mcp-utils |
26
26
  | @esbuild/aix-ppc64 | 0.28.2 | MIT | — |
27
27
  | @esbuild/android-arm | 0.28.2 | MIT | — |
28
28
  | @esbuild/android-arm64 | 0.28.2 | MIT | — |
@@ -52,33 +52,33 @@ MPL-2.0 is a file-level license: it covers ical.js's own files and does not exte
52
52
  | @modelcontextprotocol/core | 2.3.1 | Apache-2.0 | https://github.com/modelcontextprotocol/typescript-sdk |
53
53
  | @modelcontextprotocol/server | 2.3.1 | Apache-2.0 | https://github.com/modelcontextprotocol/typescript-sdk |
54
54
  | @pinojs/redact | 0.4.0 | MIT | https://github.com/pinojs/redact |
55
- | @rolldown/binding-android-arm-eabi | 1.2.12 | MIT | — |
56
- | @rolldown/binding-android-arm64 | 1.2.12 | MIT | — |
57
- | @rolldown/binding-darwin-arm64 | 1.2.12 | MIT | — |
58
- | @rolldown/binding-darwin-x64 | 1.2.12 | MIT | — |
59
- | @rolldown/binding-freebsd-x64 | 1.2.12 | MIT | — |
60
- | @rolldown/binding-linux-arm-gnueabihf | 1.2.12 | MIT | — |
61
- | @rolldown/binding-linux-arm64-gnu | 1.2.12 | MIT | — |
62
- | @rolldown/binding-linux-arm64-musl | 1.2.12 | MIT | — |
63
- | @rolldown/binding-linux-ppc64-gnu | 1.2.12 | MIT | — |
64
- | @rolldown/binding-linux-s390x-gnu | 1.2.12 | MIT | — |
65
- | @rolldown/binding-linux-x64-gnu | 1.2.12 | MIT | https://github.com/rolldown/rolldown |
66
- | @rolldown/binding-linux-x64-musl | 1.2.12 | MIT | — |
67
- | @rolldown/binding-openharmony-arm64 | 1.2.12 | MIT | — |
68
- | @rolldown/binding-win32-arm64-msvc | 1.2.12 | MIT | — |
69
- | @rolldown/binding-win32-x64-msvc | 1.2.12 | MIT | — |
55
+ | @rolldown/binding-android-arm-eabi | 1.2.14 | MIT | — |
56
+ | @rolldown/binding-android-arm64 | 1.2.14 | MIT | — |
57
+ | @rolldown/binding-darwin-arm64 | 1.2.14 | MIT | — |
58
+ | @rolldown/binding-darwin-x64 | 1.2.14 | MIT | — |
59
+ | @rolldown/binding-freebsd-x64 | 1.2.14 | MIT | — |
60
+ | @rolldown/binding-linux-arm-gnueabihf | 1.2.14 | MIT | — |
61
+ | @rolldown/binding-linux-arm64-gnu | 1.2.14 | MIT | — |
62
+ | @rolldown/binding-linux-arm64-musl | 1.2.14 | MIT | — |
63
+ | @rolldown/binding-linux-ppc64-gnu | 1.2.14 | MIT | — |
64
+ | @rolldown/binding-linux-s390x-gnu | 1.2.14 | MIT | — |
65
+ | @rolldown/binding-linux-x64-gnu | 1.2.14 | MIT | https://github.com/rolldown/rolldown |
66
+ | @rolldown/binding-linux-x64-musl | 1.2.14 | MIT | — |
67
+ | @rolldown/binding-openharmony-arm64 | 1.2.14 | MIT | — |
68
+ | @rolldown/binding-win32-arm64-msvc | 1.2.14 | MIT | — |
69
+ | @rolldown/binding-win32-x64-msvc | 1.2.14 | MIT | — |
70
70
  | @xmldom/xmldom | 0.9.12 | MIT | https://github.com/xmldom/xmldom |
71
- | @zone-eu/mailsplit | 5.4.20 | (MIT OR EUPL-1.1+) | https://github.com/zone-eu/mailsplit |
71
+ | @zone-eu/mailsplit | 5.4.21 | (MIT OR EUPL-1.1+) | https://github.com/zone-eu/mailsplit |
72
72
  | atomic-sleep | 1.0.0 | MIT | https://github.com/davidmarkclements/atomic-sleep |
73
- | dotenv | 18.0.6 | BSD-2-Clause | https://github.com/motdotla/dotenv |
73
+ | dotenv | 18.0.8 | BSD-2-Clause | https://github.com/motdotla/dotenv |
74
74
  | encoding-japanese | 2.4.0 | MIT | https://github.com/polygonplanet/encoding.js |
75
75
  | fsevents | 2.3.3 | MIT | — |
76
76
  | ical.js | 2.2.1 | MPL-2.0 | https://github.com/kewisch/ical.js |
77
77
  | iconv-lite | 0.7.3 | MIT | https://github.com/pillarjs/iconv-lite |
78
- | imapflow | 2.2.10 | MIT | https://github.com/postalsys/imapflow |
78
+ | imapflow | 2.4.2 | MIT | https://github.com/postalsys/imapflow |
79
79
  | ip-address | 10.7.2 | MIT | https://github.com/beaugunderson/ip-address |
80
- | libbase64 | 1.3.2 | MIT | https://github.com/nodemailer/libbase64 |
81
- | libmime | 5.4.7 | MIT | https://github.com/nodemailer/libmime |
80
+ | libbase64 | 1.3.3 | MIT | https://github.com/nodemailer/libbase64 |
81
+ | libmime | 5.4.8 | MIT | https://github.com/nodemailer/libmime |
82
82
  | libqp | 2.1.2 | MIT | https://github.com/nodemailer/libqp |
83
83
  | lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | — |
84
84
  | lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | — |
@@ -91,12 +91,12 @@ MPL-2.0 is a file-level license: it covers ical.js's own files and does not exte
91
91
  | lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | — |
92
92
  | lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | — |
93
93
  | lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | — |
94
- | nodemailer | 10.0.16 | MIT-0 | https://github.com/nodemailer/nodemailer |
94
+ | nodemailer | 10.1.1 | MIT-0 | https://github.com/nodemailer/nodemailer |
95
95
  | on-exit-leak-free | 2.1.2 | MIT | https://github.com/mcollina/on-exit-or-gc |
96
96
  | pino | 10.3.1 | MIT | https://github.com/pinojs/pino |
97
97
  | pino-abstract-transport | 3.0.0 | MIT | https://github.com/pinojs/pino-abstract-transport |
98
98
  | pino-std-serializers | 7.1.0 | MIT | https://github.com/pinojs/pino-std-serializers |
99
- | postal-mime | 4.0.5 | MIT-0 | https://github.com/postalsys/postal-mime |
99
+ | postal-mime | 4.0.6 | MIT-0 | https://github.com/postalsys/postal-mime |
100
100
  | process-warning | 5.1.0 | MIT | https://github.com/fastify/process-warning |
101
101
  | quick-format-unescaped | 4.0.4 | MIT | https://github.com/davidmarkclements/quick-format |
102
102
  | real-require | 0.2.0 | MIT | https://github.com/pinojs/real-require |
@@ -109,11 +109,11 @@ MPL-2.0 is a file-level license: it covers ical.js's own files and does not exte
109
109
  | split2 | 4.2.0 | ISC | https://github.com/mcollina/split2 |
110
110
  | thread-stream | 4.2.0 | MIT | https://github.com/mcollina/thread-stream |
111
111
  | timezones-ical-library | 2.3.2 | Apache-2.0 | https://github.com/add2cal/timezones-ical-library |
112
- | zod | 4.6.5 | MIT | https://github.com/colinhacks/zod |
112
+ | zod | 4.6.7 | MIT | https://github.com/colinhacks/zod |
113
113
 
114
114
  ## License and notice texts
115
115
 
116
- ### @chrischall/mcp-utils@3.0.0
116
+ ### @chrischall/mcp-utils@3.3.0
117
117
 
118
118
  - License: MIT
119
119
  - Source: https://github.com/chrischall/mcp-utils
@@ -784,92 +784,92 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
784
784
  SOFTWARE.
785
785
  ```
786
786
 
787
- ### @rolldown/binding-android-arm-eabi@1.2.12
787
+ ### @rolldown/binding-android-arm-eabi@1.2.14
788
788
 
789
789
  - License: MIT
790
790
 
791
791
  _An optional dependency that was not installed where this file was generated; see its package on npm._
792
792
 
793
- ### @rolldown/binding-android-arm64@1.2.12
793
+ ### @rolldown/binding-android-arm64@1.2.14
794
794
 
795
795
  - License: MIT
796
796
 
797
797
  _An optional dependency that was not installed where this file was generated; see its package on npm._
798
798
 
799
- ### @rolldown/binding-darwin-arm64@1.2.12
799
+ ### @rolldown/binding-darwin-arm64@1.2.14
800
800
 
801
801
  - License: MIT
802
802
 
803
803
  _An optional dependency that was not installed where this file was generated; see its package on npm._
804
804
 
805
- ### @rolldown/binding-darwin-x64@1.2.12
805
+ ### @rolldown/binding-darwin-x64@1.2.14
806
806
 
807
807
  - License: MIT
808
808
 
809
809
  _An optional dependency that was not installed where this file was generated; see its package on npm._
810
810
 
811
- ### @rolldown/binding-freebsd-x64@1.2.12
811
+ ### @rolldown/binding-freebsd-x64@1.2.14
812
812
 
813
813
  - License: MIT
814
814
 
815
815
  _An optional dependency that was not installed where this file was generated; see its package on npm._
816
816
 
817
- ### @rolldown/binding-linux-arm-gnueabihf@1.2.12
817
+ ### @rolldown/binding-linux-arm-gnueabihf@1.2.14
818
818
 
819
819
  - License: MIT
820
820
 
821
821
  _An optional dependency that was not installed where this file was generated; see its package on npm._
822
822
 
823
- ### @rolldown/binding-linux-arm64-gnu@1.2.12
823
+ ### @rolldown/binding-linux-arm64-gnu@1.2.14
824
824
 
825
825
  - License: MIT
826
826
 
827
827
  _An optional dependency that was not installed where this file was generated; see its package on npm._
828
828
 
829
- ### @rolldown/binding-linux-arm64-musl@1.2.12
829
+ ### @rolldown/binding-linux-arm64-musl@1.2.14
830
830
 
831
831
  - License: MIT
832
832
 
833
833
  _An optional dependency that was not installed where this file was generated; see its package on npm._
834
834
 
835
- ### @rolldown/binding-linux-ppc64-gnu@1.2.12
835
+ ### @rolldown/binding-linux-ppc64-gnu@1.2.14
836
836
 
837
837
  - License: MIT
838
838
 
839
839
  _An optional dependency that was not installed where this file was generated; see its package on npm._
840
840
 
841
- ### @rolldown/binding-linux-s390x-gnu@1.2.12
841
+ ### @rolldown/binding-linux-s390x-gnu@1.2.14
842
842
 
843
843
  - License: MIT
844
844
 
845
845
  _An optional dependency that was not installed where this file was generated; see its package on npm._
846
846
 
847
- ### @rolldown/binding-linux-x64-gnu@1.2.12
847
+ ### @rolldown/binding-linux-x64-gnu@1.2.14
848
848
 
849
849
  - License: MIT
850
850
  - Source: https://github.com/rolldown/rolldown
851
851
 
852
852
  _This package ships no license file; its package.json declares MIT._
853
853
 
854
- ### @rolldown/binding-linux-x64-musl@1.2.12
854
+ ### @rolldown/binding-linux-x64-musl@1.2.14
855
855
 
856
856
  - License: MIT
857
857
 
858
858
  _An optional dependency that was not installed where this file was generated; see its package on npm._
859
859
 
860
- ### @rolldown/binding-openharmony-arm64@1.2.12
860
+ ### @rolldown/binding-openharmony-arm64@1.2.14
861
861
 
862
862
  - License: MIT
863
863
 
864
864
  _An optional dependency that was not installed where this file was generated; see its package on npm._
865
865
 
866
- ### @rolldown/binding-win32-arm64-msvc@1.2.12
866
+ ### @rolldown/binding-win32-arm64-msvc@1.2.14
867
867
 
868
868
  - License: MIT
869
869
 
870
870
  _An optional dependency that was not installed where this file was generated; see its package on npm._
871
871
 
872
- ### @rolldown/binding-win32-x64-msvc@1.2.12
872
+ ### @rolldown/binding-win32-x64-msvc@1.2.14
873
873
 
874
874
  - License: MIT
875
875
 
@@ -893,7 +893,7 @@ The above copyright notice and this permission notice shall be included in all c
893
893
  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
894
894
  ```
895
895
 
896
- ### @zone-eu/mailsplit@5.4.20
896
+ ### @zone-eu/mailsplit@5.4.21
897
897
 
898
898
  - License: (MIT OR EUPL-1.1+)
899
899
  - Source: https://github.com/zone-eu/mailsplit
@@ -1113,7 +1113,7 @@ OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE
1113
1113
  OR OTHER DEALINGS IN THE SOFTWARE.
1114
1114
  ```
1115
1115
 
1116
- ### dotenv@18.0.6
1116
+ ### dotenv@18.0.8
1117
1117
 
1118
1118
  - License: BSD-2-Clause
1119
1119
  - Source: https://github.com/motdotla/dotenv
@@ -1620,7 +1620,7 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
1620
1620
  WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
1621
1621
  ```
1622
1622
 
1623
- ### imapflow@2.2.10
1623
+ ### imapflow@2.4.2
1624
1624
 
1625
1625
  - License: MIT
1626
1626
  - Source: https://github.com/postalsys/imapflow
@@ -1675,7 +1675,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
1675
1675
  THE SOFTWARE.
1676
1676
  ```
1677
1677
 
1678
- ### libbase64@1.3.2
1678
+ ### libbase64@1.3.3
1679
1679
 
1680
1680
  - License: MIT
1681
1681
  - Source: https://github.com/nodemailer/libbase64
@@ -1704,7 +1704,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
1704
1704
  THE SOFTWARE.
1705
1705
  ```
1706
1706
 
1707
- ### libmime@5.4.7
1707
+ ### libmime@5.4.8
1708
1708
 
1709
1709
  - License: MIT
1710
1710
  - Source: https://github.com/nodemailer/libmime
@@ -2205,7 +2205,7 @@ _An optional dependency that was not installed where this file was generated; se
2205
2205
 
2206
2206
  _An optional dependency that was not installed where this file was generated; see its package on npm._
2207
2207
 
2208
- ### nodemailer@10.0.16
2208
+ ### nodemailer@10.1.1
2209
2209
 
2210
2210
  - License: MIT-0
2211
2211
  - Source: https://github.com/nodemailer/nodemailer
@@ -2341,7 +2341,7 @@ The above copyright notice and this permission notice shall be included in all c
2341
2341
  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
2342
2342
  ```
2343
2343
 
2344
- ### postal-mime@4.0.5
2344
+ ### postal-mime@4.0.6
2345
2345
 
2346
2346
  - License: MIT-0
2347
2347
  - Source: https://github.com/postalsys/postal-mime
@@ -2899,7 +2899,7 @@ SOFTWARE.
2899
2899
  limitations under the License.
2900
2900
  ```
2901
2901
 
2902
- ### zod@4.6.5
2902
+ ### zod@4.6.7
2903
2903
 
2904
2904
  - License: MIT
2905
2905
  - Source: https://github.com/colinhacks/zod