apple-photos-mcp 2.1.1 → 2.1.2

package/docs/FULL-DISK-ACCESS.md

@@ -109,6 +109,41 @@ restart the MCP server (a fresh session, or quit/relaunch the host). If it worke
 before and broke after an update, re-check this list first — the grant was reset,
 not lost for good.
 
+### Still failing after granting every host app? Check whether TCC attributed it to `node` itself
+
+Every fix above assumes responsibility climbs from the subprocess up to *some*
+app — Claude Desktop, the nested Code bundle, or your terminal. On at least one
+confirmed setup it didn't: TCC attributed the check directly to the `node`
+binary, and none of the wrapper-app grants ever touched it, because
+responsibility never climbed past `node` to see them.
+
+Don't guess between the theories above — the macOS unified log is
+authoritative. Reproduce the failure while streaming:
+
+```
+log stream --style compact --predicate 'subsystem == "com.apple.TCC"' --info
+```
+
+Look for a line like:
+
+```
+Handling access request to kTCCServiceSystemPolicyAllFiles,
+from Sub:{/usr/local/bin/node}
+Resp:{TCCDProcess: identifier=node, pid=…, responsible_path=/usr/local/bin/node, binary_path=/usr/local/bin/node},
+ReqResult(Auth Right: Denied …)
+```
+
+If `Resp:` names `node` (not `claude.app`, not your terminal), grant FDA to the
+**node binary itself**: **+** → ⌘⇧G → type the exact path from `responsible_path`
+above (commonly `/usr/local/bin/node`, `/opt/homebrew/bin/node`, or a
+pinned-runtime path) → toggle on → fully quit and relaunch the host app.
+
+A stable, Developer-ID-signed Node build (check `codesign -dv $(which node)` —
+look for a real `TeamIdentifier`, not `flags=0x2(adhoc)`) keeps this grant
+across Node upgrades. An ad-hoc-signed build (common with some Homebrew
+formulae) gets a new code identity on every rebuild, so the grant can need
+re-doing after `brew upgrade`.
+
 ## Note: exporting iCloud-only originals also needs Photos automation
 
 Full Disk Access covers reading and querying the library, and exporting any

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-photos-mcp",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "description": "MCP server for Apple Photos - query, search, export, and inspect the macOS Photos library via Claude and other AI assistants, plus opt-in album/metadata write tools (read-only by default)",
   "type": "module",
   "main": "build/index.js",
@@ -73,7 +73,7 @@
   },
   "scripts": {
     "setup": "bash scripts/setup.sh",
-    "build": "tsc --noEmit && esbuild src/index.ts --bundle --platform=node --format=esm --outfile=build/index.js --banner:js=\"import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);\"",
+    "build": "tsc --noEmit && esbuild src/index.ts --bundle --platform=node --format=esm --target=node20 --outfile=build/index.js --banner:js=\"import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);\"",
     "start": "node build/index.js",
     "dev": "tsc --watch",
     "lint": "eslint src",
@@ -81,11 +81,13 @@
     "format": "prettier --write src",
     "format:check": "prettier --check src",
     "typecheck": "tsc --noEmit",
+    "sync:skills": "node scripts/sync-skills.mjs",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "test:integration": "vitest run --config vitest.integration.config.ts",
     "test:all": "vitest run && vitest run --config vitest.integration.config.ts",
-    "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin .agents/plugins codex .hermes-plugin .antigravity-plugin"
+    "version": "node scripts/sync-plugin-version.mjs && git add .claude-plugin .agents/plugins codex .hermes-plugin .antigravity-plugin",
+    "preinstall": "node -e \"const fs=require('fs');const ua=process.env.npm_config_user_agent||'';if(fs.existsSync('.git')&&!ua.startsWith('pnpm')){console.error('\\nThis repo uses pnpm. npm/yarn resolve dependencies off-lockfile and the committed bundle will mismatch CI.\\n\\n  corepack enable && pnpm install --frozen-lockfile\\n');process.exit(1)}\""
   }
 }

package/requirements.txt

@@ -1,5 +1,7 @@
-osxphotos>=0.69.0,<0.76
+# Exact-pinned (2026-07-20) so the sidecar environment is reproducible and
+# Dependabot's pip ecosystem can propose auditable bumps.
+osxphotos==0.75.9
 # Direct dependency of the opt-in write tools (also an osxphotos transitive
 # dep). Pinned because photos_reader.py uses its script_loader.run_script for
-# bulk album-id calls — keep the floor/ceiling in step when bumping.
-photoscript>=0.5.3,<0.6
+# bulk album-id calls — keep the two pins in step when bumping.
+photoscript==0.5.3