local-mcp 3.0.100 → 3.0.102

package/download.js

@@ -151,12 +151,26 @@ async function ensureBinary() {
   // Asegurar que sea ejecutable
   fs.chmodSync(binPath, 0o755)
 
-  // Re-firmar ad-hoc con bundle identifier estable.
-  // --identifier da al binario una identidad TCC persistente aunque cambie la ruta de versión.
-  // Sin esto, macOS atribuye los permisos TCC al proceso padre (node) → diálogo cada reinicio.
+  // Clear quarantine separately — Node.js https downloads don't set it, but tar extraction
+  // on some macOS versions can inherit it from the archive. Non-critical.
+  try { execFileSync('xattr', ['-d', 'com.apple.quarantine', binPath], { stdio: 'pipe' }) } catch { /* no quarantine, fine */ }
+
+  // Preserve the Developer ID signature from the build pipeline.
+  // On macOS 26+ ad-hoc signatures (--sign -) don't create a stable TCC identity:
+  // each new CDHash is treated as a new app, triggering "node would like to access
+  // data from other apps" on every JXA call. Only fall back to ad-hoc if the binary
+  // has no valid signature at all (e.g. a dev build that was never properly signed).
+  // See: FB-74E468, FB-017B8E — permission prompt loop on macOS 26 beta.
+  let hasSig = false
   try {
-    execFileSync('codesign', ['--force', '--sign', '-', '--identifier', 'com.local-mcp.server', binPath], { stdio: 'pipe' })
-  } catch { /* no crítico */ }
+    execFileSync('codesign', ['--verify', binPath], { stdio: 'pipe' })
+    hasSig = true
+  } catch { /* no valid signature — apply ad-hoc fallback */ }
+  if (!hasSig) {
+    try {
+      execFileSync('codesign', ['--force', '--sign', '-', '--identifier', 'com.local-mcp.server', binPath], { stdio: 'pipe' })
+    } catch { /* non-critical */ }
+  }
 
   process.stderr.write(`  Listo en ${versionDir}\n`)
   return { binPath, versionDir, version }
@@ -201,7 +215,12 @@ async function ensureTeamsProxy() {
 
     if (!fs.existsSync(binPath)) throw new Error('teams-proxy no encontrado tras extraer')
     fs.chmodSync(binPath, 0o755)
-    try { execFileSync('codesign', ['--force', '--sign', '-', '--identifier', 'com.local-mcp.teams-proxy', binPath], { stdio: 'pipe' }) } catch { /* no crítico */ }
+    try { execFileSync('xattr', ['-d', 'com.apple.quarantine', binPath], { stdio: 'pipe' }) } catch {}
+    let tpHasSig = false
+    try { execFileSync('codesign', ['--verify', binPath], { stdio: 'pipe' }); tpHasSig = true } catch {}
+    if (!tpHasSig) {
+      try { execFileSync('codesign', ['--force', '--sign', '-', '--identifier', 'com.local-mcp.teams-proxy', binPath], { stdio: 'pipe' }) } catch { /* no crítico */ }
+    }
 
     fs.writeFileSync(verFile, version, 'utf8')
     process.stderr.write(`  teams-proxy instalado en ${binPath}\n`)
@@ -356,7 +375,12 @@ async function ensureSlackProxy() {
 
     if (!fs.existsSync(binPath)) throw new Error('slack-proxy not found after extraction')
     fs.chmodSync(binPath, 0o755)
-    try { execFileSync('codesign', ['--force', '--sign', '-', '--identifier', 'com.local-mcp.slack-proxy', binPath], { stdio: 'pipe' }) } catch { /* non-critical */ }
+    try { execFileSync('xattr', ['-d', 'com.apple.quarantine', binPath], { stdio: 'pipe' }) } catch {}
+    let spHasSig = false
+    try { execFileSync('codesign', ['--verify', binPath], { stdio: 'pipe' }); spHasSig = true } catch {}
+    if (!spHasSig) {
+      try { execFileSync('codesign', ['--force', '--sign', '-', '--identifier', 'com.local-mcp.slack-proxy', binPath], { stdio: 'pipe' }) } catch { /* non-critical */ }
+    }
 
     fs.writeFileSync(verFile, version, 'utf8')
     process.stderr.write(`  slack-proxy installed at ${binPath}\n`)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-mcp",
-  "version": "3.0.100",
+  "version": "3.0.102",
   "description": "LMCP — connect Claude Desktop, Cursor, Windsurf to Mail, Calendar, Contacts, Teams, OneDrive on macOS. Privacy-first: all data stays on your Mac.",
   "main": "index.js",
   "bin": {