feat: add push_notification, set_permission, and get_clipboard tools

[saen-ai]

Summary

Adds three new tools that cover common testing scenarios that were previously impossible with this MCP server.

New Tools

push_notification

Send a simulated APNs push notification to any app on the simulator.

Send a push notification to co.getsnippet.tea with title "New snippet shared" and body "John shared a snippet with you"

• Accepts title, body, badge, and optional user_info for custom data payloads (deep link routing etc.)
• Writes payload to a temp file, validates 4096-byte APNs limit, cleans up after sending
• Uses xcrun simctl push under the hood

set_permission

Grant, revoke, or reset any iOS privacy permission without touching the UI.

Grant notification and photo permissions to co.getsnippet.tea
Reset all permissions for co.getsnippet.tea to test first-launch experience

Supports all 13 services: all, calendar, contacts-limited, contacts, location, location-always, photos-add, photos, media-library, microphone, motion, reminders, siri

Uses xcrun simctl privacy.

get_clipboard

Read what's currently on the simulator clipboard — essential for testing copy behaviour.

Tap the "Copy snippet" button in Tea, then read the clipboard to verify the correct text was copied

Uses xcrun simctl pbpaste.

Test plan

• push_notification with title + body → notification appears on simulator
• push_notification with user_info → custom data included in payload
• push_notification with payload > 4096 bytes → returns error before sending
• set_permission with action: "grant" → permission granted without system dialog
• set_permission with action: "revoke" → permission denied
• set_permission with action: "reset" → app prompts again on next use
• set_permission with action: "grant" and no bundle_id → returns validation error
• get_clipboard after copying text in app → returns correct clipboard content
• get_clipboard with empty clipboard → returns "(clipboard is empty)"

[joshuayoes]

Thanks — all three tools are well-scoped wrappers that follow the existing patterns (getBootedDeviceId, errorWithTroubleshooting, Zod-validated schemas). Reviewing the leaf commit 8109dd2f:

1. Stacking. Same as feat: add max_size and force params to screenshot tool #63–docs: rewrite use cases section with real developer workflows #67: your branch feat/push-permissions-clipboard was cut from your fork's main, so it drags all ancestor commits along. Please rebase onto upstream/main with just 8109dd2f:

   git fetch upstream
   git checkout -B feat/push-permissions-clipboard upstream/main
   git cherry-pick 8109dd2f
   git push --force-with-lease origin feat/push-permissions-clipboard
   

   Per the stacking note in feat: unicode support, recording fixes, screenshot improvements, device rotation & docs #68, also consider resetting your fork's main to match upstream so this stops happening.

2. -- separator is missing on all three tools. Existing tools consistently use -- to prevent user-provided positional args from being parsed as flags. Please add it:

   • push_notification: ["simctl", "push", "--", actualUdid, bundle_id, tmpFile] (confirm simctl push accepts --)
   • set_permission: ["simctl", "privacy", "--", actualUdid, action, service, ...(bundle_id ? [bundle_id] : [])]
   • get_clipboard: ["simctl", "pbpaste", "--", actualUdid]

   If any of those subcommands rejects --, that's fine — but the input values need to be validated tightly enough that positional-flag confusion can't happen. UDID_REGEX covers that; bundle_id and tmpFile need the same scrutiny.

3. push_notification temp file. Uses push_${Date.now()}.json which can collide on rapid successive calls. Same fix as the ui_view random-suffix pattern introduced in fix: record_video ignores udid, ui_view JSON crash, temp file leaks, dep CVEs #59: push_${Date.now()}-${Math.random().toString(36).slice(2, 8)}.json.

4. set_permission grammar. The description string produces "granted", "revoked", but also "reseted". Either change the interpolation ({action === "reset" ? "reset" : action + "ed"}) or rephrase the message.

5. set_permission services enum. Hardcoding the 13 services means the enum needs updating whenever Apple adds one (unlikely but possible). That's actually the right trade — tighter validation at the schema level beats "pass through and hope simctl errors well" — just flagging that this one needs occasional maintenance. No change required.

6. Demo recording. ## Demo with a quick showcase of each tool — push with title/body/badge showing on the lock screen, set_permission grant camera, and get_clipboard after ui_paste. See Releases and feat: add ui_find_element tool #51 for format.

Content-wise this is the most straightforward of your open PRs. Once rebased and the nits addressed, I'm ready to land it.