Name:           sudo-mcp
Version:        0.3.5
Release:        1%{?dist}
Summary:        MCP server for privileged command execution via sudo/pkexec
License:        MIT
URL:            https://github.com/hughesjs/sudo-mcp

# Architecture-specific sources
%ifarch x86_64
Source0:        https://github.com/hughesjs/sudo-mcp/releases/download/v%{version}/sudo-mcp-x64-v%{version}.tar.gz
%endif
%ifarch aarch64
Source0:        https://github.com/hughesjs/sudo-mcp/releases/download/v%{version}/sudo-mcp-arm64-v%{version}.tar.gz
%endif

BuildArch:      x86_64 aarch64
Requires:       polkit
Requires:       sudo
Requires:       libicu

# Don't strip .NET single-file binaries - they are self-contained and stripping breaks them
%global __os_install_post %{nil}
%define __strip /bin/true
%define debug_package %{nil}

%description
INHERENTLY UNSAFE: MCP server allowing AI models to execute privileged
commands via sudo/pkexec. Use at your own risk.

This tool integrates with Claude Desktop (or any MCP client) to enable
execution of privileged commands. It uses polkit/pkexec for authentication
and supports configurable command validation.

%prep
%ifarch x86_64
%setup -q -n sudo-mcp-x64-v%{version}
%endif
%ifarch aarch64
%setup -q -n sudo-mcp-arm64-v%{version}
%endif

%build
# Pre-built binary, no build step required

%install
install -Dm755 sudo-mcp %{buildroot}%{_bindir}/sudo-mcp
install -Dm644 README.md %{buildroot}%{_docdir}/%{name}/README.md
install -Dm644 SECURITY.md %{buildroot}%{_docdir}/%{name}/SECURITY.md
install -Dm644 LICENSE %{buildroot}%{_licensedir}/%{name}/LICENSE
install -dm755 %{buildroot}%{_localstatedir}/log/sudo-mcp

%files
%license LICENSE
%doc README.md SECURITY.md
%{_bindir}/sudo-mcp
%dir %{_localstatedir}/log/sudo-mcp

%changelog
* Fri Jan 16 2026 James Hughes <james@pyrosoftsolutions.co.uk> - 0.3.5-1
- Release version 0.3.5