local-mcp 3.0.340 → 3.0.342

package/download.js

@@ -325,9 +325,15 @@ async function ensureTray() {
     return _ensureTrayWindows()
   }
 
-  // Respect explicit uninstall — don't resurrect tray if user ran `uninstall`
-  const uninstalledMarker = path.join(CACHE_DIR, '..', '.uninstalled')
-  if (fs.existsSync(uninstalledMarker)) return null
+  // Respect explicit uninstall — don't resurrect tray if user ran `uninstall`.
+  // Checks BOTH the runtime-dir copy and the durable App Support copy: a user who
+  // "cleaned up" with `rm -rf ~/.local/share/local-mcp` removes the runtime-dir copy,
+  // and only the durable one survives to stop a resurrection loop (FB-D1FA79).
+  const uninstalledMarkers = [
+    path.join(CACHE_DIR, '..', '.uninstalled'),
+    path.join(os.homedir(), 'Library', 'Application Support', 'Local MCP', '.uninstalled'),
+  ]
+  if (uninstalledMarkers.some((p) => { try { return fs.existsSync(p) } catch { return false } })) return null
 
   const info     = await getLatestBinary()
   const version  = info.version

package/index.js

@@ -18,6 +18,38 @@ const os    = require('os')
 const fs    = require('fs')
 const https = require('https')
 
+// ── Uninstall sentinels ───────────────────────────────────────────────────────
+// A `.uninstalled` sentinel marks a machine the user removed, so no respawn (an
+// AI client that still has `local-mcp` in its config re-spawning `npx local-mcp`)
+// resurrects it. We keep TWO copies and treat EITHER as "uninstalled":
+//   1. ~/.local/share/local-mcp/.uninstalled                  (runtime dir — legacy)
+//   2. ~/Library/Application Support/Local MCP/.uninstalled   (durable)
+// #2 exists because all three guards (the two below + ensureTray in download.js)
+// used to read ONLY the runtime-dir copy — so a user "cleaning up" with
+// `rm -rf ~/.local/share/local-mcp` blinded every guard at once, and a surviving
+// project-scoped `.mcp.json` (which no uninstaller can reach) kept reinstalling the
+// machine (FB-D1FA79). The App Support copy survives that cleanup. A reinstall
+// clears BOTH; an uninstall writes BOTH.
+function uninstallSentinelPaths() {
+  const { CACHE_DIR } = require('./download')
+  const list = [path.join(path.dirname(CACHE_DIR), '.uninstalled')]
+  if (process.platform === 'darwin') {
+    list.push(path.join(os.homedir(), 'Library', 'Application Support', 'Local MCP', '.uninstalled'))
+  }
+  return list
+}
+function anyUninstallSentinel() {
+  return uninstallSentinelPaths().some((p) => { try { return fs.existsSync(p) } catch { return false } })
+}
+function writeUninstallSentinels() {
+  for (const p of uninstallSentinelPaths()) {
+    try { fs.mkdirSync(path.dirname(p), { recursive: true }) } catch {}
+    try { fs.writeFileSync(p, String(Date.now())) } catch {}
+  }
+}
+function clearUninstallSentinels() {
+  for (const p of uninstallSentinelPaths()) { try { fs.unlinkSync(p) } catch {} }
+}
 
 // Platform support: macOS only (Windows/Linux on waitlist at local-mcp.com)
 const SUPPORTED_PLATFORMS = ['darwin']
@@ -67,8 +99,7 @@ function detectManualUninstall() {
 async function main() {
   if (cmd === 'setup') {
     // Clear uninstall sentinel — user explicitly wants to (re-)install
-    const { CACHE_DIR } = require('./download')
-    try { fs.unlinkSync(path.join(path.dirname(CACHE_DIR), '.uninstalled')) } catch {}
+    clearUninstallSentinels()
     const { runSetup } = require('./setup')
     await runSetup()
     process.exit(0)
@@ -112,10 +143,9 @@ async function main() {
     }
 
     // Write sentinel BEFORE deleting cache dir, so it survives cache wipes.
-    // ensureTray() checks this and skips re-installation.
-    const sentinelDir = path.dirname(CACHE_DIR)
-    try { fs.mkdirSync(sentinelDir, { recursive: true }) } catch {}
-    try { fs.writeFileSync(path.join(sentinelDir, '.uninstalled'), String(Date.now())) } catch {}
+    // ensureTray() checks this and skips re-installation. Writes BOTH the runtime-dir
+    // copy and the durable App Support copy (see uninstallSentinelPaths).
+    writeUninstallSentinels()
 
     if (fs.existsSync(CACHE_DIR)) {
       fs.rmSync(CACHE_DIR, { recursive: true, force: true })
@@ -153,11 +183,10 @@ async function main() {
   // measured 2026-06-12). ensureTray() already honored the sentinel, but the stdio
   // server path never did. Refuse to start so a respawn can't resurrect the install.
   // Legit reinstalls clear the sentinel first: `npx local-mcp setup` (above) and
-  // install.sh (curl/DMG, which rm's it before copying the bundle).
+  // install.sh (curl/DMG, which rm's it before copying the bundle). Checks BOTH the
+  // runtime-dir and durable App Support copies (see uninstallSentinelPaths).
   {
-    const { CACHE_DIR: _cacheDir } = require('./download')
-    const sentinel = path.join(path.dirname(_cacheDir), '.uninstalled')
-    if (fs.existsSync(sentinel)) {
+    if (anyUninstallSentinel()) {
       process.stderr.write(
         '[LMCP] Local MCP was uninstalled — not starting.\n' +
         '       Reinstall:  npx local-mcp setup\n' +
@@ -176,11 +205,8 @@ async function main() {
   // (FB-A30CDC). The AI client's stale MCP config entry is left alone; it just respawns us
   // and we short-circuit here, which is harmless.
   {
-    const { CACHE_DIR: _cacheDir2 } = require('./download')
     if (detectManualUninstall()) {
-      const sentinelDir = path.dirname(_cacheDir2)
-      try { fs.mkdirSync(sentinelDir, { recursive: true }) } catch {}
-      try { fs.writeFileSync(path.join(sentinelDir, '.uninstalled'), String(Date.now())) } catch {}
+      writeUninstallSentinels()
       const trayPlist = path.join(os.homedir(), 'Library', 'LaunchAgents', 'com.local-mcp.tray.plist')
       if (fs.existsSync(trayPlist)) {
         try { execSync(`launchctl unload -w "${trayPlist}" 2>/dev/null`, { stdio: 'pipe' }) } catch {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-mcp",
-  "version": "3.0.340",
+  "version": "3.0.342",
   "description": "Let ChatGPT, Claude, Cursor & any MCP client actually use your Mac — read & reply to email, manage your calendar, text over iMessage, find files, work with Teams, Slack & Office. On your Mac, no API keys, free.",
   "main": "index.js",
   "bin": {