local-mcp 3.0.226 → 3.0.228

package/download.js

@@ -493,148 +493,4 @@ async function ensureSlackProxy() {
   }
 }
 
-/**
- * Downloads local-mcp-helper on first install only.
- * CRITICAL: never replaces an existing helper binary — the helper owns
- * Calendar/Contacts/Reminders TCC grants via its cdhash. Replacing the
- * binary silently resets those grants and users would have to re-authorize.
- * @returns {Promise<string|null>} Path to the binary, or null if it fails
- */
-async function ensureHelper() {
-  const binPath = path.join(CACHE_DIR, 'local-mcp-helper')
-
-  // Already installed — never replace. Stable cdhash = stable TCC grants.
-  if (fs.existsSync(binPath)) return binPath
-
-  const info = await getLatestBinary()
-  const version = info.version
-  const arch = process.arch === 'arm64' ? 'darwin-arm64' : 'darwin-x64'
-  const url = `https://download.local-mcp.com/local-mcp-helper-${version}-${arch}.tar.gz`
-  process.stderr.write(`\nDownloading local-mcp-helper v${version}...\n`)
-
-  fs.mkdirSync(CACHE_DIR, { recursive: true })
-  const tarPath = path.join(CACHE_DIR, `local-mcp-helper-${version}.tar.gz`)
-
-  try {
-    await downloadFile(url, tarPath)
-    const stat = fs.statSync(tarPath)
-    if (stat.size < 1000) { fs.unlinkSync(tarPath); throw new Error(`Incomplete download (${stat.size} bytes)`) }
-
-    extractTar(tarPath, CACHE_DIR)
-    fs.unlinkSync(tarPath)
-
-    if (!fs.existsSync(binPath)) throw new Error('local-mcp-helper not found after extraction')
-    fs.chmodSync(binPath, 0o755)
-    // Do NOT codesign: the pre-built binary's cdhash must remain exactly as
-    // distributed. Codesigning a fresh binary produces the same cdhash only
-    // when the content is identical, but we want the CI-signed cdhash to be
-    // the canonical identity used in TCC grants.
-
-    fs.writeFileSync(path.join(CACHE_DIR, '.helper-version'), version, 'utf8')
-    process.stderr.write(`  local-mcp-helper installed at ${binPath}\n`)
-    return binPath
-  } catch (err) {
-    try { if (fs.existsSync(tarPath)) fs.unlinkSync(tarPath) } catch {}
-    process.stderr.write(`  (local-mcp-helper not available: ${err.message})\n`)
-    return null
-  }
-}
-
-/**
- * Downloads local-mcp-jxa-runner on first install only.
- * CRITICAL: never replaces an existing jxa-runner binary — the runner owns
- * Automation (JXA) TCC grants for Mail, Messages, Safari, etc. via its cdhash.
- * Replacing the binary silently resets those grants and users would have to
- * re-authorize in System Settings → Privacy & Security → Automation.
- * @returns {Promise<string|null>} Path to the binary, or null if it fails
- */
-async function ensureJXARunner() {
-  const binPath = path.join(CACHE_DIR, 'local-mcp-jxa-runner')
-
-  // Already installed — never replace. Stable cdhash = stable TCC grants.
-  if (fs.existsSync(binPath)) return binPath
-
-  const info = await getLatestBinary()
-  const version = info.version
-  const arch = process.arch === 'arm64' ? 'darwin-arm64' : 'darwin-x64'
-  const url = `https://download.local-mcp.com/local-mcp-jxa-runner-${version}-${arch}.tar.gz`
-  process.stderr.write(`\nDownloading local-mcp-jxa-runner v${version}...\n`)
-
-  fs.mkdirSync(CACHE_DIR, { recursive: true })
-  const tarPath = path.join(CACHE_DIR, `local-mcp-jxa-runner-${version}.tar.gz`)
-
-  try {
-    await downloadFile(url, tarPath)
-    const stat = fs.statSync(tarPath)
-    if (stat.size < 1000) { fs.unlinkSync(tarPath); throw new Error(`Incomplete download (${stat.size} bytes)`) }
-
-    extractTar(tarPath, CACHE_DIR)
-    fs.unlinkSync(tarPath)
-
-    if (!fs.existsSync(binPath)) throw new Error('local-mcp-jxa-runner not found after extraction')
-    fs.chmodSync(binPath, 0o755)
-    // Do NOT codesign: the pre-built binary's cdhash must remain exactly as
-    // distributed so the Automation TCC entry stays valid permanently.
-
-    fs.writeFileSync(path.join(CACHE_DIR, '.jxa-runner-version'), version, 'utf8')
-    process.stderr.write(`  local-mcp-jxa-runner installed at ${binPath}\n`)
-    return binPath
-  } catch (err) {
-    try { if (fs.existsSync(tarPath)) fs.unlinkSync(tarPath) } catch {}
-    process.stderr.write(`  (local-mcp-jxa-runner not available: ${err.message})\n`)
-    return null
-  }
-}
-
-async function _ensureTrayWindows() {
-  const info = await getLatestBinary()
-  const version = info.version
-  const binDir = path.join(process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local'), 'local-mcp', 'bin')
-  const trayPath = path.join(binDir, 'lmcp-tray.exe')
-  const verFile = path.join(binDir, '.tray-version')
-
-  if (fs.existsSync(trayPath) && fs.existsSync(verFile)) {
-    if (fs.readFileSync(verFile, 'utf8').trim() === version) return trayPath
-  }
-
-  const url = `https://download.local-mcp.com/lmcp-tray.exe?v=${version}`
-  process.stderr.write(`\nDescargando tray v${version}...\n`)
-  fs.mkdirSync(binDir, { recursive: true })
-
-  // Download to a temp file first — if the tray is running, the exe is locked
-  // and we can't write directly to it (EBUSY). Download first, then kill, then replace.
-  const tmpPath = trayPath + '.tmp'
-  try { if (fs.existsSync(tmpPath)) fs.unlinkSync(tmpPath) } catch {}
-  await downloadFile(url, tmpPath)
-
-  // Kill the running tray (if any) before replacing the binary
-  try { execSync('taskkill /F /IM lmcp-tray.exe /T', { stdio: 'ignore' }) } catch {}
-  // Give Windows a moment to release the file handle
-  await new Promise(r => setTimeout(r, 500))
-
-  // Replace the old binary with the downloaded one
-  try { if (fs.existsSync(trayPath)) fs.unlinkSync(trayPath) } catch {}
-  fs.renameSync(tmpPath, trayPath)
-
-  const stat = fs.statSync(trayPath)
-  if (stat.size < 100000) {
-    try { fs.unlinkSync(trayPath) } catch {}
-    throw new Error(`Tray download incomplete (${stat.size} bytes)`)
-  }
-
-  fs.writeFileSync(verFile, version, 'utf8')
-
-  // Auto-start on login
-  const startupDir = path.join(process.env.APPDATA || '', 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup')
-  if (fs.existsSync(startupDir)) {
-    fs.writeFileSync(path.join(startupDir, 'LMCP Tray.cmd'), `@echo off\r\nstart "" "${trayPath}"`, 'ascii')
-  }
-
-  // Launch tray now (use cmd start on Windows for proper detach)
-  try { execSync(`start "" "${trayPath}"`, { stdio: 'ignore', shell: true }) } catch {}
-
-  process.stderr.write(`  Tray installed at ${trayPath}\n`)
-  return trayPath
-}
-
-module.exports = { ensureBinary, ensureRuntime, ensureTray, ensureTeamsProxy, ensureSlackProxy, ensureHelper, ensureJXARunner, CACHE_DIR, TRAY_DIR }
+module.exports = { ensureBinary, ensureRuntime, ensureTray, ensureTeamsProxy, ensureSlackProxy, CACHE_DIR, TRAY_DIR }

package/index.js

@@ -154,12 +154,10 @@ async function main() {
 
   async function ensureDarwinComponents() {
     if (process.platform !== 'darwin') return
-    const { ensureTray, ensureTeamsProxy, ensureHelper, ensureJXARunner } = require('./download')
+    const { ensureTray, ensureTeamsProxy } = require('./download')
     await Promise.all([
       ensureTray().catch((e) => { process.stderr.write(`[LMCP] Tray install failed: ${e.message}\n`) }),
       ensureTeamsProxy().catch((e) => { process.stderr.write(`[LMCP] teams-proxy install failed: ${e.message}\n`) }),
-      ensureHelper().catch((e) => { process.stderr.write(`[LMCP] helper install failed: ${e.message}\n`) }),
-      ensureJXARunner().catch((e) => { process.stderr.write(`[LMCP] jxa-runner install failed: ${e.message}\n`) }),
     ])
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-mcp",
-  "version": "3.0.226",
+  "version": "3.0.228",
   "description": "LMCP — connect Claude Desktop, Cursor, Windsurf to Mail, Calendar, Contacts, Teams, OneDrive on macOS. Privacy-first: all data stays on your Mac.",
   "main": "index.js",
   "bin": {