minutes-mcp 0.9.2 → 0.9.4

package/dist/index.js

@@ -148,7 +148,7 @@ function findMinutesBinary() {
 }
 let MINUTES_BIN = findMinutesBinary();
 // ── Expected CLI version (must match this MCP server release) ──
-const MCP_SERVER_VERSION = "0.9.2";
+const MCP_SERVER_VERSION = "0.9.4";
 const EXPECTED_CLI_VERSION = MCP_SERVER_VERSION;
 const RELEASE_TAG = `v${EXPECTED_CLI_VERSION}`;
 // ── CLI auto-install ────────────────────────────────────────
@@ -592,8 +592,12 @@ server.tool("start_recording", "Start recording audio with call-aware preflight.
             structuredContent: { preflight },
         };
     }
-    // Spawn detached — recording is a foreground process that blocks,
-    // so we spawn it and let it run independently
+    // Spawn recording as a child process (not detached).
+    // detached: true calls setsid() which creates a new macOS audit session,
+    // severing the TCC microphone grant inherited from the host app (Claude Desktop).
+    // CoreAudio then delivers all-zero samples — silent recordings.
+    // The MCP server is long-lived, and the recording process ignores SIGTERM,
+    // so child.unref() alone is sufficient.
     const args = ["record", "--mode", mode];
     if (title)
         args.push("--title", title);
@@ -604,7 +608,6 @@ server.tool("start_recording", "Start recording audio with call-aware preflight.
     if (language)
         args.push("--language", language);
     const child = spawn(MINUTES_BIN, args, {
-        detached: true,
         stdio: "ignore",
         env: { ...process.env, RUST_LOG: "info" },
     });
@@ -1545,12 +1548,11 @@ server.tool("start_dictation", "Start dictation mode. Speak naturally — text a
             ],
         };
     }
-    // Spawn detached dictation process
+    // Spawn dictation as child (not detached — preserves macOS TCC mic grant)
     const dictArgs = ["dictate"];
     if (language)
         dictArgs.push("--language", language);
     const child = spawn(MINUTES_BIN, dictArgs, {
-        detached: true,
         stdio: "ignore",
         env: { ...process.env, RUST_LOG: "info" },
     });
@@ -1715,12 +1717,11 @@ server.tool("start_live_transcript", "Start a live transcript session. Records a
         }
     }
     catch { /* no active session, proceed */ }
-    // Spawn detached live transcript process
+    // Spawn live transcript as child (not detached — preserves macOS TCC mic grant)
     const liveArgs = ["live"];
     if (language)
         liveArgs.push("--language", language);
     const child = spawn(MINUTES_BIN, liveArgs, {
-        detached: true,
         stdio: "ignore",
         env: { ...process.env, RUST_LOG: "info" },
     });

package/dist/paths.js

@@ -1,6 +1,6 @@
 import { existsSync, realpathSync } from "fs";
 import { homedir } from "os";
-import { extname, join, resolve } from "path";
+import { extname, join, resolve, sep } from "path";
 export function expandHomeLikePath(input) {
     const home = homedir();
     if (input === "~") {
@@ -31,7 +31,9 @@ export function canonicalizeRoot(root) {
 }
 export function isWithinDirectory(candidate, root) {
     // Ensure root ends with separator to prevent prefix attacks (e.g. ~/meetings-evil)
-    const rootWithSep = root.endsWith("/") ? root : root + "/";
+    // Use path.sep for cross-platform correctness — realpathSync returns OS-native
+    // separators, so on Windows the root will use backslashes.
+    const rootWithSep = root.endsWith(sep) ? root : root + sep;
     return candidate === root || candidate.startsWith(rootWithSep);
 }
 export function validatePathInDirectory(path, root, allowedExts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minutes-mcp",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "description": "MCP server for minutes — conversation memory for AI assistants. Works with Claude Desktop, Mistral Vibe, Cursor, Windsurf, and any MCP client.",
   "main": "dist/index.js",
   "type": "module",