@pan-sec/notebooklm-mcp 1.10.5 → 1.10.8

package/dist/utils/file-lock.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Cross-Platform File Locking for NotebookLM MCP Server
+ *
+ * Provides advisory file locking to prevent race conditions when
+ * multiple concurrent sessions access shared state files.
+ *
+ * Features:
+ * - Cross-platform (Linux, macOS, Windows)
+ * - Stale lock detection and cleanup
+ * - Timeout with retry
+ * - Process ID tracking
+ *
+ * Used for:
+ * - Quota file updates (prevent concurrent increment race)
+ * - Auth state save/load (prevent corruption)
+ * - Browser context creation (prevent parallel recreations)
+ */
+/**
+ * Lock options
+ */
+export interface LockOptions {
+    /** Max time to wait for lock (ms) */
+    timeout?: number;
+    /** Time between retry attempts (ms) */
+    retryInterval?: number;
+    /** Lock considered stale after this time (ms) */
+    staleThreshold?: number;
+}
+/**
+ * File Lock Class
+ *
+ * Simple cross-platform file locking using lock files.
+ * Works on Linux, macOS, and Windows.
+ */
+export declare class FileLock {
+    private lockPath;
+    private acquired;
+    private lockId;
+    constructor(filePath: string);
+    /**
+     * Acquire lock with retry and timeout
+     */
+    acquire(options?: LockOptions): Promise<boolean>;
+    /**
+     * Release lock
+     */
+    release(): void;
+    /**
+     * Check if lock is acquired
+     */
+    isAcquired(): boolean;
+}
+/**
+ * Execute operation with file lock
+ *
+ * Acquires lock, executes operation, releases lock.
+ * Ensures lock is always released even if operation throws.
+ *
+ * @param filePath - Path to the file to lock (lock file will be filePath + ".lock")
+ * @param operation - Async operation to execute while holding lock
+ * @param options - Lock options
+ * @returns Result of the operation
+ * @throws Error if lock cannot be acquired within timeout
+ */
+export declare function withLock<T>(filePath: string, operation: () => Promise<T>, options?: LockOptions): Promise<T>;
+/**
+ * Check if a file is currently locked
+ *
+ * Note: This is a point-in-time check and may be stale immediately after.
+ * Only use for informational purposes.
+ */
+export declare function isLocked(filePath: string, staleThreshold?: number): boolean;
+/**
+ * Force remove a lock file (use with caution)
+ *
+ * Only use when you're certain the lock is orphaned.
+ */
+export declare function forceUnlock(filePath: string): boolean;
+//# sourceMappingURL=file-lock.d.ts.map

package/dist/utils/file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.d.ts","sourceRoot":"","sources":["../../src/utils/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA4BD;;;;;GAKG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,MAAM,CAAS;gBAEX,QAAQ,EAAE,MAAM;IAK5B;;OAEG;IACG,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAwEtD;;OAEG;IACH,OAAO,IAAI,IAAI;IA0Bf;;OAEG;IACH,UAAU,IAAI,OAAO;CAGtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAkB3E;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAcrD"}

package/dist/utils/file-lock.js

@@ -0,0 +1,222 @@
+/**
+ * Cross-Platform File Locking for NotebookLM MCP Server
+ *
+ * Provides advisory file locking to prevent race conditions when
+ * multiple concurrent sessions access shared state files.
+ *
+ * Features:
+ * - Cross-platform (Linux, macOS, Windows)
+ * - Stale lock detection and cleanup
+ * - Timeout with retry
+ * - Process ID tracking
+ *
+ * Used for:
+ * - Quota file updates (prevent concurrent increment race)
+ * - Auth state save/load (prevent corruption)
+ * - Browser context creation (prevent parallel recreations)
+ */
+import fs from "fs";
+import path from "path";
+import { log } from "./logger.js";
+/**
+ * Default lock options
+ */
+const DEFAULT_OPTIONS = {
+    timeout: parseInt(process.env.NLMCP_LOCK_TIMEOUT_MS || "10000", 10),
+    retryInterval: 100,
+    staleThreshold: parseInt(process.env.NLMCP_LOCK_STALE_MS || "30000", 10),
+};
+/**
+ * Generate unique lock ID
+ */
+function generateLockId() {
+    return `${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
+}
+/**
+ * File Lock Class
+ *
+ * Simple cross-platform file locking using lock files.
+ * Works on Linux, macOS, and Windows.
+ */
+export class FileLock {
+    lockPath;
+    acquired = false;
+    lockId;
+    constructor(filePath) {
+        this.lockPath = filePath + ".lock";
+        this.lockId = generateLockId();
+    }
+    /**
+     * Acquire lock with retry and timeout
+     */
+    async acquire(options) {
+        const opts = { ...DEFAULT_OPTIONS, ...options };
+        const startTime = Date.now();
+        while (Date.now() - startTime < opts.timeout) {
+            try {
+                // Check if stale lock exists
+                if (fs.existsSync(this.lockPath)) {
+                    try {
+                        const content = fs.readFileSync(this.lockPath, "utf-8");
+                        const existing = JSON.parse(content);
+                        const age = Date.now() - existing.timestamp;
+                        if (age > opts.staleThreshold) {
+                            // Lock is stale, remove it
+                            log.warning(`🔓 Removing stale lock (age: ${Math.round(age / 1000)}s, pid: ${existing.pid})`);
+                            try {
+                                fs.unlinkSync(this.lockPath);
+                            }
+                            catch {
+                                // Ignore if another process already removed it
+                            }
+                        }
+                    }
+                    catch {
+                        // Corrupted lock file, try to remove it
+                        try {
+                            fs.unlinkSync(this.lockPath);
+                        }
+                        catch {
+                            // Ignore
+                        }
+                    }
+                }
+                // Try to create lock file exclusively
+                const lockContent = {
+                    pid: process.pid,
+                    lockId: this.lockId,
+                    timestamp: Date.now(),
+                    hostname: process.env.HOSTNAME || process.env.COMPUTERNAME,
+                };
+                // Ensure directory exists
+                const lockDir = path.dirname(this.lockPath);
+                if (!fs.existsSync(lockDir)) {
+                    fs.mkdirSync(lockDir, { recursive: true, mode: 0o700 });
+                }
+                // Try exclusive create (will fail if file exists)
+                fs.writeFileSync(this.lockPath, JSON.stringify(lockContent), {
+                    flag: "wx", // Exclusive create - fails if file exists
+                    mode: 0o600,
+                });
+                this.acquired = true;
+                return true;
+            }
+            catch (error) {
+                const err = error;
+                if (err.code !== "EEXIST") {
+                    // Unexpected error
+                    log.error(`❌ Lock acquisition error: ${err.message}`);
+                    throw error;
+                }
+                // Lock exists, wait and retry
+                await new Promise((resolve) => setTimeout(resolve, opts.retryInterval));
+            }
+        }
+        // Timeout reached
+        log.warning(`⚠️ Lock acquisition timeout for ${this.lockPath}`);
+        return false;
+    }
+    /**
+     * Release lock
+     */
+    release() {
+        if (!this.acquired)
+            return;
+        try {
+            // Verify we own the lock before releasing
+            if (fs.existsSync(this.lockPath)) {
+                try {
+                    const content = fs.readFileSync(this.lockPath, "utf-8");
+                    const existing = JSON.parse(content);
+                    if (existing.lockId === this.lockId) {
+                        fs.unlinkSync(this.lockPath);
+                    }
+                    else {
+                        log.warning(`⚠️ Lock owned by different process, not releasing`);
+                    }
+                }
+                catch {
+                    // Ignore errors during release
+                }
+            }
+        }
+        catch {
+            // Ignore errors during release
+        }
+        this.acquired = false;
+    }
+    /**
+     * Check if lock is acquired
+     */
+    isAcquired() {
+        return this.acquired;
+    }
+}
+/**
+ * Execute operation with file lock
+ *
+ * Acquires lock, executes operation, releases lock.
+ * Ensures lock is always released even if operation throws.
+ *
+ * @param filePath - Path to the file to lock (lock file will be filePath + ".lock")
+ * @param operation - Async operation to execute while holding lock
+ * @param options - Lock options
+ * @returns Result of the operation
+ * @throws Error if lock cannot be acquired within timeout
+ */
+export async function withLock(filePath, operation, options) {
+    const lock = new FileLock(filePath);
+    if (!(await lock.acquire(options))) {
+        throw new Error(`Could not acquire lock for ${filePath} within timeout`);
+    }
+    try {
+        return await operation();
+    }
+    finally {
+        lock.release();
+    }
+}
+/**
+ * Check if a file is currently locked
+ *
+ * Note: This is a point-in-time check and may be stale immediately after.
+ * Only use for informational purposes.
+ */
+export function isLocked(filePath, staleThreshold) {
+    const lockPath = filePath + ".lock";
+    const threshold = staleThreshold ?? DEFAULT_OPTIONS.staleThreshold;
+    if (!fs.existsSync(lockPath)) {
+        return false;
+    }
+    try {
+        const content = fs.readFileSync(lockPath, "utf-8");
+        const existing = JSON.parse(content);
+        const age = Date.now() - existing.timestamp;
+        // Consider stale locks as not locked
+        return age <= threshold;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Force remove a lock file (use with caution)
+ *
+ * Only use when you're certain the lock is orphaned.
+ */
+export function forceUnlock(filePath) {
+    const lockPath = filePath + ".lock";
+    try {
+        if (fs.existsSync(lockPath)) {
+            fs.unlinkSync(lockPath);
+            log.info(`🔓 Force removed lock: ${lockPath}`);
+            return true;
+        }
+        return false;
+    }
+    catch (error) {
+        log.error(`❌ Failed to force remove lock: ${error}`);
+        return false;
+    }
+}
+//# sourceMappingURL=file-lock.js.map

package/dist/utils/file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.js","sourceRoot":"","sources":["../../src/utils/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAclC;;GAEG;AACH,MAAM,eAAe,GAA0B;IAC7C,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,OAAO,EAAE,EAAE,CAAC;IACnE,aAAa,EAAE,GAAG;IAClB,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,EAAE,EAAE,CAAC;CACzE,CAAC;AAYF;;GAEG;AACH,SAAS,cAAc;IACrB,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,QAAQ;IACX,QAAQ,CAAS;IACjB,QAAQ,GAAY,KAAK,CAAC;IAC1B,MAAM,CAAS;IAEvB,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAqB;QACjC,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,6BAA6B;gBAC7B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjC,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;wBACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;wBAE5C,IAAI,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;4BAC9B,2BAA2B;4BAC3B,GAAG,CAAC,OAAO,CAAC,gCAAgC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;4BAC9F,IAAI,CAAC;gCACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;4BAC/B,CAAC;4BAAC,MAAM,CAAC;gCACP,+CAA+C;4BACjD,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,wCAAwC;wBACxC,IAAI,CAAC;4BACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC/B,CAAC;wBAAC,MAAM,CAAC;4BACP,SAAS;wBACX,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,sCAAsC;gBACtC,MAAM,WAAW,GAAgB;oBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;iBAC3D,CAAC;gBAEF,0BAA0B;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBAED,kDAAkD;gBAClD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE;oBAC3D,IAAI,EAAE,IAAI,EAAE,0CAA0C;oBACtD,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,KAA8B,CAAC;gBAC3C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC1B,mBAAmB;oBACnB,GAAG,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtD,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,GAAG,CAAC,OAAO,CAAC,mCAAmC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAE3B,IAAI,CAAC;YACH,0CAA0C;YAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;oBAEpD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;wBACpC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC/B,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,+BAA+B;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAgB,EAChB,SAA2B,EAC3B,OAAqB;IAErB,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEpC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,iBAAiB,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,cAAuB;IAChE,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpC,MAAM,SAAS,GAAG,cAAc,IAAI,eAAe,CAAC,cAAc,CAAC;IAEnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;QAE5C,qCAAqC;QACrC,OAAO,GAAG,IAAI,SAAS,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC;IAEpC,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pan-sec/notebooklm-mcp",
-  "version": "1.10.5",
+  "version": "1.10.8",
   "description": "Security-hardened MCP server for NotebookLM API with enterprise compliance (GDPR, SOC2, CSSF)",
   "type": "module",
   "bin": {