@floomhq/signaldash 0.13.0 → 0.22.0

package/lib/config-file.js

@@ -0,0 +1,114 @@
+import {
+  chmodSync,
+  closeSync,
+  fsyncSync,
+  mkdirSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync,
+} from "node:fs";
+import path from "node:path";
+import { randomBytes } from "node:crypto";
+
+
+const WAIT_ARRAY = new Int32Array(new SharedArrayBuffer(4));
+const LOCK_TIMEOUT_MS = 5_000;
+
+
+function wait(milliseconds) {
+  Atomics.wait(WAIT_ARRAY, 0, 0, milliseconds);
+}
+
+
+function acquireLock(lockFile) {
+  const deadline = Date.now() + LOCK_TIMEOUT_MS;
+  for (;;) {
+    try {
+      return openSync(lockFile, "wx", 0o600);
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      if (Date.now() >= deadline) {
+        throw new Error(
+          `timed out waiting for SignalDash config lock: ${lockFile}; ` +
+          "the lock is never stolen automatically because that could corrupt the session",
+        );
+      }
+      wait(25);
+    }
+  }
+}
+
+
+function releaseLock(lockFile, descriptor) {
+  try {
+    closeSync(descriptor);
+  } finally {
+    try {
+      unlinkSync(lockFile);
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+  }
+}
+
+
+export function readConfigFile(file, { optional = false } = {}) {
+  try {
+    return JSON.parse(readFileSync(file, "utf8"));
+  } catch (error) {
+    if (error.code === "ENOENT" && optional) return {};
+    throw error;
+  }
+}
+
+
+export function updateConfigFile(file, update) {
+  const directory = path.dirname(file);
+  mkdirSync(directory, { recursive: true, mode: 0o700 });
+  chmodSync(directory, 0o700);
+  const lockFile = `${file}.lock`;
+  const descriptor = acquireLock(lockFile);
+  let temporary;
+  try {
+    const current = readConfigFile(file, { optional: true });
+    const next = update({ ...current });
+    if (!next || typeof next !== "object" || Array.isArray(next)) {
+      throw new TypeError("SignalDash config update must return an object");
+    }
+    temporary = `${file}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+    writeFileSync(temporary, `${JSON.stringify(next, null, 2)}\n`, {
+      mode: 0o600,
+      flag: "wx",
+    });
+    const temporaryDescriptor = openSync(temporary, "r");
+    try {
+      fsyncSync(temporaryDescriptor);
+    } finally {
+      closeSync(temporaryDescriptor);
+    }
+    renameSync(temporary, file);
+    temporary = undefined;
+    chmodSync(file, 0o600);
+    const directoryDescriptor = openSync(directory, "r");
+    try {
+      fsyncSync(directoryDescriptor);
+    } finally {
+      closeSync(directoryDescriptor);
+    }
+    return next;
+  } finally {
+    try {
+      if (temporary) {
+        try {
+          unlinkSync(temporary);
+        } catch (error) {
+          if (error.code !== "ENOENT") throw error;
+        }
+      }
+    } finally {
+      releaseLock(lockFile, descriptor);
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/signaldash",
-  "version": "0.13.0",
+  "version": "0.22.0",
   "description": "Secure LinkedIn, WhatsApp, and email access for AI agents",
   "type": "module",
   "bin": {
@@ -18,7 +18,7 @@
   },
   "scripts": {
     "test": "node --test",
-    "check": "node --check bin/sd.mjs && node --check server/server.cjs && node --check bin/signaldash.js && node --check lib/cli.js && node --check lib/mcp.js && node --check lib/rate-guard.js && node --check lib/secrets.js && node --check lib/unipile.js"
+    "check": "node --check bin/sd.mjs && node --check server/server.cjs && node --check server/write-control.cjs && node --check bin/signaldash.js && node --check lib/cli.js && node --check lib/config-file.js && node --check lib/mcp.js && node --check lib/rate-guard.js && node --check lib/secrets.js && node --check lib/unipile.js"
   },
   "keywords": [
     "mcp",