omni-notify-mcp 1.3.301 → 1.3.302

package/dist/gateway/passkeyDoor.js

@@ -319,7 +319,7 @@ export function localOnly(req) {
 /** A session records the credential it was signed in with: a passkey's id, `authenticator:<id>`, or `sms`. */
 const approvalOfCredential = (credentialId) => (credentialId.startsWith(AUTHENTICATOR) || credentialId === SMS ? credentialId : `passkey:${credentialId}`);
 /** One service's sign-in: its passkeys, authenticator app, sessions and code strikes, kept apart from every other door's. */
-export function createSignInDoor({ storeFile, product, short, home, host: doorHost, ownerFile, ownsStore }) {
+export function createSignInDoor({ storeFile, product, short, home, host: doorHost, ownerFile, ownsStore, renamedFrom = [] }) {
     const challenges = new Map();
     const tickets = new Map();
     const pendingAuthenticators = new Map();
@@ -342,7 +342,9 @@ export function createSignInDoor({ storeFile, product, short, home, host: doorHo
         renameSync(temp, storeFile);
     }
     const readOwners = () => readOwnersFile(ownerFile());
-    const ownerCredentials = () => readOwners().credentials.filter((credential) => credential.services.includes(doorHost));
+    // A service renamed in the deploy keeps its owner passkeys: an owner credential naming this service's former name still covers it, so a rename never silently orphans the key.
+    const coversDoor = (credential) => credential.services.includes(doorHost) || renamedFrom.some((name) => credential.services.includes(name));
+    const ownerCredentials = () => readOwners().credentials.filter(coversDoor);
     const ownerReaches = (base) => base === `https://${doorHost}` && OWNER_ORIGINS.includes(base);
     function rememberRetirement() {
         if (!ownsStore)
@@ -822,7 +824,7 @@ ${locked(store) ? "" : `<p class="mut">Until an owner passkey is registered, not
             const kept = owners.credentials.filter((credential) => credential.id !== id);
             if (kept.length === owners.credentials.length)
                 throw new GatewayError(404, "no owner passkey has that id");
-            const servedHere = (credential) => credential.services.includes(doorHost);
+            const servedHere = (credential) => coversDoor(credential);
             if (owners.credentials.some((credential) => credential.id === id && servedHere(credential)) && !kept.some(servedHere) && !confirmLast) {
                 throw new GatewayError(409, `that is the last owner passkey ${short} has — removing it closes ${short} to everyone until a new owner passkey is registered; confirm to remove it`);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omni-notify-mcp",
-  "version": "1.3.301",
+  "version": "1.3.302",
   "description": "Reach your AI agents from anywhere — and let them reach you. One stdio process serves the whole tool surface to Claude Code, GitHub Copilot Chat and Codex: desktop, Telegram, Slack, ntfy, Discord, Teams and SMS are configured in one file, and agents notify you when long work finishes or a decision is needed, ask you a question and wait for your answer, and receive and reply to the messages you send them — with Do Not Disturb and idle detection deciding what actually gets through.",
   "main": "dist/index.js",
   "type": "module",