@floomhq/signaldash 0.6.0 → 0.8.0

package/README.md

@@ -25,6 +25,8 @@ URL and scan the live QR code. The CLI prints `Connected linkedin` or
 The invite code is single-use. Login stores a SignalDash user token in
 `~/.signaldash/config.json`; the Unipile access key remains on the SignalDash
 server. Set `SIGNALDASH_HOME` to keep the local config in another directory.
+Sessions expire after 90 days by default. Run `npx -y @floomhq/signaldash logout`
+to revoke the current session and remove its local token.
 
 If automatic account detection times out, the CLI prints the manual claim
 command for the provider:

package/bin/sd.mjs

@@ -3,7 +3,13 @@
 // bearer token. Never holds a Unipile key, never calls Unipile directly. The MCP
 // tools an agent uses all proxy through the backend, so agents access channels
 // THROUGH SignalDash, not around it.
-import { readFileSync, realpathSync, writeFileSync, mkdirSync } from "node:fs";
+import {
+  chmodSync,
+  readFileSync,
+  realpathSync,
+  writeFileSync,
+  mkdirSync,
+} from "node:fs";
 import { homedir } from "node:os";
 import { createInterface } from "node:readline";
 import { fileURLToPath } from "node:url";
@@ -30,8 +36,10 @@ function loadCfg() {
 }
 function saveCfg(c) {
   const config = configPaths();
-  mkdirSync(config.directory, { recursive: true });
+  mkdirSync(config.directory, { recursive: true, mode: 0o700 });
+  chmodSync(config.directory, 0o700);
   writeFileSync(config.file, JSON.stringify(c, null, 2), { mode: 0o600 });
+  chmodSync(config.file, 0o600);
 }
 
 async function api(path, body, { auth = true, method = "POST" } = {}) {
@@ -67,6 +75,30 @@ export async function cmdLogin(code, backend, dependencies = {}) {
   log("Logged in to SignalDash. Token stored (no channel keys on your side).");
 }
 
+export async function cmdLogout(dependencies = {}) {
+  const request = dependencies.request || api;
+  const log = dependencies.log || console.log;
+  const error = dependencies.error || console.error;
+  const cfg = loadCfg();
+  if (!cfg.token) {
+    log("Already logged out.");
+    return;
+  }
+  const response = await request("/logout", {});
+  if (response.status !== 200 && response.status !== 401) {
+    error("logout failed:", response.json.error || response.status);
+    process.exitCode = 1;
+    return;
+  }
+  delete cfg.token;
+  saveCfg(cfg);
+  log(
+    response.status === 200
+      ? "Logged out of SignalDash. The session was revoked."
+      : "Local session cleared. The server session was already invalid.",
+  );
+}
+
 export async function cmdConnect(provider, dependencies = {}) {
   const request = dependencies.request || api;
   const sleep = dependencies.wait || wait;
@@ -80,7 +112,9 @@ export async function cmdConnect(provider, dependencies = {}) {
   }
   const r = await request(`/connect/${provider}`, {});
   if (r.status >= 300) {
-    error("connect failed:", r.json.error || r.status);
+    error(r.json.error === "login required"
+      ? "Not logged in. Run: signaldash login <invite-code>"
+      : "connect failed: " + (r.json.error || r.status));
     process.exitCode = 1;
     return;
   }
@@ -222,17 +256,86 @@ export async function cmdSetup(code, dependencies = {}) {
   log("\n  " + chalk.dim("Try: ") + chalk.white('"list my recent whatsapp chats and draft replies"') + "\n");
 }
 
+
+export async function cmdStatus(dependencies = {}) {
+  const log = dependencies.log || console.log;
+  const { chalk } = await ui();
+  const cfg = loadCfg();
+  if (!cfg.token) { log("  Not logged in. Run: " + chalk.cyan("signaldash login <invite-code>")); return; }
+  const request = dependencies.request || api;
+  log("");
+  log("  " + chalk.bold("SignalDash") + chalk.dim("  " + (cfg.backend || DEFAULT_BACKEND)));
+  for (const provider of ["linkedin", "whatsapp"]) {
+    const r = await request(`/connect/${provider}/status`, undefined, { method: "GET" });
+    const ok = r.status === 200 && r.json.connected;
+    log("  " + (ok ? chalk.green("+") : chalk.dim("-")) + " " + provider.padEnd(9) +
+        (ok ? chalk.dim(r.json.name || "connected") : chalk.dim("not connected")));
+  }
+  log("");
+}
+
+export async function cmdConnections(outPath, dependencies = {}) {
+  const log = dependencies.log || console.log;
+  const request = dependencies.request || api;
+  const { chalk, ora } = await ui();
+  const { writeFileSync: wf, readFileSync: rf, existsSync: ex } = await import("node:fs");
+  const file = outPath || "linkedin-connections.csv";
+
+  // Resume support: keep the cursor next to the CSV so a large network is
+  // fetched over several paced passes instead of one burst (LinkedIn detection
+  // is behavioural; bursts are what get accounts flagged).
+  const stateFile = file + ".state.json";
+  let cursor = null, rows = [];
+  if (ex(stateFile)) {
+    try {
+      const prev = JSON.parse(rf(stateFile, "utf8"));
+      cursor = prev.cursor || null; rows = prev.rows || [];
+      if (cursor) log("  " + chalk.dim(`resuming from previous run (${rows.length} already fetched)`));
+    } catch {}
+  }
+
+  const spin = ora({ text: "Fetching connections (paced, this is deliberate)...", indent: 2 }).start();
+  for (;;) {
+    const r = await request("/li/connections", { cursor, max_pages: 10 });
+    if (r.status >= 300) {
+      spin.fail(r.json.error || "failed");
+      if (rows.length) { wf(stateFile, JSON.stringify({ cursor, rows })); log("  " + chalk.dim("progress saved; run again to resume")); }
+      process.exitCode = 1; return;
+    }
+    rows = rows.concat(r.json.connections || []);
+    cursor = r.json.next_cursor;
+    spin.text = `Fetched ${rows.length} connections...`;
+    if (!cursor) break;
+    wf(stateFile, JSON.stringify({ cursor, rows }));
+  }
+  spin.succeed(`${rows.length} connections`);
+
+  const esc = v => `"${String(v ?? "").replace(/"/g, '""')}"`;
+  const csv = ["name,headline,public_id,profile_url,connected_at",
+    ...rows.map(c => [c.name, c.headline, c.public_id, c.profile_url, c.connected_at].map(esc).join(","))].join("\n");
+  wf(file, csv);
+  try { const { unlinkSync } = await import("node:fs"); if (ex(stateFile)) unlinkSync(stateFile); } catch {}
+  log("  " + chalk.green("+") + " saved " + chalk.cyan(file));
+  log("  " + chalk.dim("Tip: LinkedIn's own export (Settings > Get a copy of your data) is zero-risk"));
+  log("  " + chalk.dim("and includes emails. Both work; that one never touches the API."));
+}
+
 export async function main(argv = process.argv.slice(2), dependencies = {}) {
   const [cmd, a, b, c] = argv;
   const log = dependencies.log || console.log;
   if (cmd === "setup") await cmdSetup(a, dependencies);
-  else if (cmd && /^[0-9a-f]{8,}$/i.test(cmd) && !["login","connect","mcp","skill"].includes(cmd)) await cmdSetup(cmd, dependencies);
+  else if (cmd && /^[0-9a-f]{8,}$/i.test(cmd) && !["login","logout","connect","mcp","skill"].includes(cmd)) await cmdSetup(cmd, dependencies);
   else if (cmd === "login") await cmdLogin(a, b === "--backend" ? c : undefined, dependencies);
+  else if (cmd === "logout") await cmdLogout(dependencies);
   else if (cmd === "connect" && b === "claim") await cmdClaim(a, c, dependencies);
   else if (cmd === "connect") await cmdConnect(a, dependencies);
   else if (cmd === "mcp") await runMcp(dependencies);
+  else if (cmd === "status") await cmdStatus(dependencies);
+  else if (cmd === "connections" || (cmd === "export" && a === "connections")) await cmdConnections(cmd === "export" ? b : a, dependencies);
+  else if (cmd === "--version" || cmd === "-v") log("0.7.0");
+  else if (cmd && cmd !== "help" && !/^[0-9a-f]{8,}$/i.test(cmd)) { (dependencies.error || console.error)(`unknown command: ${cmd}`); printHelp(log); process.exitCode = 1; }
   else if (cmd === "skill") await cmdSkill(dependencies);
-  else log(`SignalDash — secure LinkedIn + WhatsApp access for your agent.\n\n  signaldash login <invite-code> [--backend URL]\n  signaldash connect linkedin|whatsapp\n  signaldash connect linkedin|whatsapp claim <account_id>\n  signaldash mcp\n  signaldash skill            install the agent skill\n\nThe agent reaches channels only through SignalDash. No keys on your machine.`);
+  else printHelp(log);
 }
 
 function isDirectRun() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floomhq/signaldash",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Secure LinkedIn and WhatsApp MCP access for AI agents",
   "type": "module",
   "bin": {