apple-tools-mcp 3.1.0 → 3.2.0

package/README.md

@@ -455,3 +455,23 @@ MIT License. See [LICENSE](LICENSE).
 - [Model Context Protocol SDK](https://github.com/modelcontextprotocol/sdk)
 - [LanceDB](https://lancedb.com/)
 - [Hugging Face Transformers.js](https://github.com/huggingface/transformers.js)
+
+### Privacy checks for contributors
+
+Install Gitleaks, then enable the committed hook once in each clone:
+
+```sh
+git config core.hooksPath .githooks
+npm run scan:package
+```
+
+The hook scans staged changes and fails closed if Gitleaks is unavailable. CI scans
+all fetched Git history and the exact `npm pack --dry-run` file list. Release CI
+repeats the package scan before npm Trusted Publishing. Credential rules are
+extended with private home paths, relay email, private hostnames and phone shapes.
+Use neutral example paths and fictional 555 numbers in fixtures. A narrow
+exception covers the deliberately fake bearer token in authentication unit tests.
+
+Host-specific settings remain in `~/.apple-tools-mcp/config.json`; upgrading the
+global package preserves them. Permission examples derive from the current home
+and runtime Node binary, so no personal paths belong in the package.

package/lib/messageContact.js

@@ -23,7 +23,7 @@ function looksLikePhone(value) {
  * Build a predicate that matches message rows to a caller-supplied contact.
  *
  * Keeps the old raw substring match on sender / chatIdentifier, and adds:
- * - phone input matched on normalized digits (605-360-2675 == +16053602675)
+ * - phone input matched on normalized digits 202-555-0101 == +12025550101)
  * - email input matched exactly (case-insensitive)
  * - a name matched exactly (full name, first name, or nickname) against
  *   Contacts, then every phone and email on those contacts. No fuzzy name
@@ -90,7 +90,7 @@ export function createMessageContactMatcher(contact, { resolveExactName, normali
  * @param {(phone: string) => object|null} deps.resolvePhone
  * @param {(email: string) => object|null} deps.resolveEmail
  * @param {(contact: object) => string} deps.formatContact
- * @returns {string|null} e.g. "Dad (+16053602675)", "group chat \"Family\"", or null
+ * @returns {string|null} e.g. "Dad (+12025550101)", "group chat \"Family\"", or null
  */
 export function describeMessagePeer(row, { resolvePhone, resolveEmail, formatContact }) {
   const chatIdentifier = row.chatIdentifier || "";

package/lib/permissions.js

@@ -15,6 +15,7 @@
  */
 
 import fs from "fs";
+import os from "os";
 import path from "path";
 import { classifyAppleScriptError, SYSTEM_EVENTS_STICKY_DENY_GUIDANCE } from "./appleScript.js";
 import { probeMailAutomation, probeSystemEventsAutomation } from "./mailWrite.js";
@@ -26,10 +27,10 @@ import { detectLaunchAgentContext, hostAutomationAdvice } from "./writeRouting.j
 export const REQUIRED_SURFACES = ["Contacts", "Calendar", "Mail", "Messages", "System Events"];
 
 /** Mini ship-gate host example — not a universal path. */
-export const EXAMPLE_MINI_NODE = "/Users/petercoates/.local/node/bin/node";
+export const EXAMPLE_MINI_NODE = path.join(os.homedir(), ".local", "node", "bin", "node");
 
-/** MacBook Claude nvm example — not Homebrew. */
-export const EXAMPLE_MACBOOK_NVM_NODE = "/Users/petercoates/.nvm/versions/node/v22.21.1/bin/node";
+/** Current runtime binary; follows the selected Node installation on any host. */
+export const EXAMPLE_MACBOOK_NVM_NODE = process.execPath;
 
 export const GRANT_GRANTED = "granted";
 export const GRANT_MISSING = "missing";
@@ -264,7 +265,7 @@ function bannerLines(binary, version) {
     `Probing node binary: ${binary.execPath}`,
     "This is process.execPath — the node that is running this command.",
     `Mini example:     ${binary.miniExample}`,
-    `MacBook example:  ${binary.macbookExample}  (Claude nvm; not Homebrew)`,
+    `Runtime example: ${binary.macbookExample}  (current Node installation)`,
     "Invoke this command with the product node so Allow dialogs attach to it.",
     "",
     "Open System Settings → Privacy & Security → Automation on this Mac.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-tools-mcp",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "MCP server for semantic search and write actions across Apple Mail, Messages, Calendar, and Contacts. Speaks stdio (local) or bearer-token-authenticated Streamable HTTP (LAN / Tailscale).",
   "type": "module",
   "main": "index.js",
@@ -87,7 +87,8 @@
     "perf:regression": "vitest run tests/perf/regression.perf.test.js",
     "perf:lancedb": "vitest run tests/perf/lancedb.perf.test.js",
     "perf:background": "vitest run tests/perf/background-indexing.perf.test.js",
-    "perf:dates": "vitest run tests/perf/date-parsing.perf.test.js"
+    "perf:dates": "vitest run tests/perf/date-parsing.perf.test.js",
+    "scan:package": "node scripts/scan-package.js"
   },
   "dependencies": {
     "@huggingface/transformers": "^4.3.0",