@raidiant/notifai 0.1.7 → 0.1.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raidiant/notifai",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "type": "module",
   "description": "Send native phone notifications from agents and local programs",
   "bin": {
@@ -11,14 +11,9 @@
     "src",
     "tsconfig.json"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run"
-  },
   "dependencies": {
     "@clack/prompts": "^1.7.0",
-    "@raidiant/notifai-protocol": "0.1.1",
+    "@raidiant/notifai-protocol": "0.1.2",
     "commander": "^14.0.0",
     "smol-toml": "^1.4.0"
   },
@@ -31,16 +26,16 @@
   },
   "license": "Apache-2.0",
   "author": "Rafael Vidaurre",
-  "homepage": "https://github.com/RafaelVidaurre/notifai#readme",
+  "homepage": "https://github.com/Raidiant-io/notifai#readme",
   "bugs": {
-    "url": "https://github.com/RafaelVidaurre/notifai/issues"
+    "url": "https://github.com/Raidiant-io/notifai/issues"
   },
   "publishConfig": {
     "access": "public"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/RafaelVidaurre/notifai.git",
+    "url": "git+https://github.com/Raidiant-io/notifai.git",
     "directory": "apps/cli"
   },
   "keywords": [
@@ -52,5 +47,10 @@
     "ai",
     "claude",
     "codex"
-  ]
-}
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}

package/src/atomic-file.ts

@@ -0,0 +1,73 @@
+import { randomBytes } from 'node:crypto'
+import {
+  closeSync,
+  fsyncSync,
+  lstatSync,
+  mkdirSync,
+  openSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync,
+} from 'node:fs'
+import path from 'node:path'
+
+export interface AtomicWriteOptions {
+  /** Mode for a newly created file. Existing regular files keep their mode. */
+  mode?: number
+}
+
+/**
+ * Replace one regular file without exposing a truncated intermediate state.
+ *
+ * The temporary file is a unique sibling, so rename is atomic on every
+ * supported filesystem. The contents are flushed before the rename, and a
+ * symlink target is refused instead of silently writing through it.
+ */
+export function atomicWriteFileSync(
+  file: string,
+  contents: string,
+  options: AtomicWriteOptions = {},
+): void {
+  mkdirSync(path.dirname(file), { recursive: true })
+  const mode = targetMode(file, options.mode ?? 0o600)
+  const temp = path.join(
+    path.dirname(file),
+    `.${path.basename(file)}.notifai-${process.pid}-${randomBytes(6).toString('hex')}.tmp`,
+  )
+  let handle: number | undefined
+  try {
+    handle = openSync(temp, 'wx', mode)
+    writeFileSync(handle, contents)
+    fsyncSync(handle)
+    closeSync(handle)
+    handle = undefined
+    renameSync(temp, file)
+  } catch (err) {
+    if (handle !== undefined) closeSync(handle)
+    try {
+      unlinkSync(temp)
+    } catch {
+      // Preserve the original error; the temp may not have been created.
+    }
+    throw err
+  }
+}
+
+/** Mode to preserve, or the mode for a new file. Refuses a non-regular target. */
+function targetMode(file: string, fallback: number): number {
+  let stat
+  try {
+    stat = lstatSync(file)
+  } catch (err) {
+    if ((err as NodeJS.ErrnoException).code === 'ENOENT') return fallback
+    throw err
+  }
+  if (stat.isSymbolicLink()) {
+    throw new Error(
+      `${file} is a symlink; refusing to write through it. Replace it with a regular file, ` +
+        'or use a different state directory.',
+    )
+  }
+  if (!stat.isFile()) throw new Error(`${file} is not a regular file; refusing to replace it.`)
+  return stat.mode & 0o777
+}

package/src/client.ts

@@ -1,5 +1,6 @@
 import type {
   ApiErrorBody,
+  AccountAccessResponse,
   BeginPairingResponse,
   CapabilityDocument,
   CreateMediaUploadRequestT,
@@ -47,6 +48,7 @@ export interface ApiClient {
     poll_verifier_hash: string
   }): Promise<BeginPairingResponse>
   pollPairing(pairingId: string, pollVerifier: string): Promise<PollPairingResponse>
+  accessStatus(): Promise<AccountAccessResponse>
   listDevices(): Promise<ListDevicesResponse>
   capabilities(platform?: Platform): Promise<CapabilityDocument>
   submit(body: SubmitNotificationRequestT, waitSeconds: number): Promise<SubmissionReceipt>
@@ -138,6 +140,7 @@ export function createClient(
     beginPairing: (body) => call('POST', '/api/v1/pairings', body),
     pollPairing: (pairingId, pollVerifier) =>
       call('POST', `/api/v1/pairings/${pairingId}/poll`, { poll_verifier: pollVerifier }),
+    accessStatus: () => call('GET', '/api/v1/account/access'),
     listDevices: () => call('GET', '/api/v1/devices'),
     capabilities: (platform = 'ios') => call('GET', `/api/v1/capabilities/${platform}`),
     submit: (body, waitSeconds) =>