@sendmux/cli 1.6.0 → 1.7.0

package/dist/agent-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-auth.d.ts","sourceRoot":"","sources":["../src/agent-auth.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,qBAAqB,EAE1B,KAAK,SAAS,EAGf,MAAM,eAAe,CAAC;AAUvB,UAAU,kBAAkB;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,CAAC,EAAE,SAAS,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,QAAQ,CAAC;CAClB;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAyGnG;AAED,wBAAsB,gBAAgB,CAAC,EACrC,SAAS,EACT,KAAK,EACL,WAAW,GACZ,EAAE;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC,CAiChD;AAED,wBAAsB,wBAAwB,CAAC,EAC7C,MAAM,EACN,SAAS,EACT,OAAO,EACP,WAAW,GACZ,EAAE;IACD,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2ClB;AA6DD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYxD;AAaD,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,EAC9B,SAAS,SAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CA4Bf"}
+{"version":3,"file":"agent-auth.d.ts","sourceRoot":"","sources":["../src/agent-auth.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,qBAAqB,EAE1B,KAAK,SAAS,EAGf,MAAM,eAAe,CAAC;AAYvB,UAAU,kBAAkB;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,CAAC,EAAE,SAAS,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,QAAQ,CAAC;CAClB;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAyGnG;AAED,wBAAsB,gBAAgB,CAAC,EACrC,SAAS,EACT,KAAK,EACL,WAAW,GACZ,EAAE;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC,CAiChD;AAED,wBAAsB,wBAAwB,CAAC,EAC7C,MAAM,EACN,SAAS,EACT,OAAO,EACP,WAAW,GACZ,EAAE;IACD,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6ClB;AA6DD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYxD;AAaD,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,EAC9B,SAAS,SAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/agent-auth.js

@@ -7,6 +7,8 @@ const SENDING_API_RESOURCE = "https://smtp.sendmux.ai/api/v1";
 const TOKEN_EXCHANGE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:token-exchange";
 const ACCESS_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:access_token";
 const READINESS_TIMEOUT_MS = 10 * 60 * 1_000;
+const AUTH_REQUEST_TIMEOUT_MS = 15_000;
+const MAX_AUTH_RESPONSE_BYTES = 256 * 1024;
 const SENDING_TOKEN_SKEW_MS = 60 * 1_000;
 export async function registerAgent(input) {
     const initialConfig = await readCliConfig(input.configDir);
@@ -155,6 +157,8 @@ export async function resolveAgentSendingToken({ config, configDir, profile, pro
         }),
         headers: { "Content-Type": "application/x-www-form-urlencoded" },
         method: "POST",
+        redirect: "error",
+        signal: AbortSignal.timeout(AUTH_REQUEST_TIMEOUT_MS),
     });
     const body = await responseJson(response);
     if (!response.ok) {
@@ -257,22 +261,30 @@ export async function waitForMailbox(profile, timeoutMs = READINESS_TIMEOUT_MS)
         const remainingBeforeFetch = deadline - Date.now();
         if (remainingBeforeFetch <= 0)
             throw mailboxReadinessTimeoutError();
+        const signal = AbortSignal.timeout(remainingBeforeFetch);
         let response;
+        let body;
         try {
             response = await fetch(`${profile.appApiBaseUrl}/mailbox/me`, {
                 headers: { Authorization: `Bearer ${profile.accessToken}` },
-                signal: AbortSignal.timeout(remainingBeforeFetch),
+                redirect: "error",
+                signal,
             });
+            if (response.ok) {
+                await response.body?.cancel();
+                return;
+            }
+            body = await responseJson(response);
         }
         catch (error) {
-            if (isAbortError(error) || Date.now() >= deadline)
+            if (signal.aborted || isAbortError(error) || Date.now() >= deadline)
                 throw mailboxReadinessTimeoutError();
             throw error;
         }
-        if (response.ok)
-            return;
-        const body = await responseJson(response);
-        const provisioningUnavailable = response.status === 503 && (body.error === "service_unavailable" || body.error === "temporarily_unavailable");
+        const errorCode = typeof body.error === "object" && body.error !== null && !Array.isArray(body.error) && "code" in body.error
+            ? body.error.code
+            : body.error;
+        const provisioningUnavailable = response.status === 503 && (errorCode === "service_unavailable" || errorCode === "temporarily_unavailable");
         if (!provisioningUnavailable) {
             throw new Error(agentAuthFailureMessage(response.status, body));
         }
@@ -304,6 +316,8 @@ async function postJson(url, options) {
         body: JSON.stringify(options.body),
         headers: { "Content-Type": "application/json", ...options.headers },
         method: "POST",
+        redirect: "error",
+        signal: AbortSignal.timeout(AUTH_REQUEST_TIMEOUT_MS),
     });
     const body = await responseJson(response);
     if (!options.expectedStatuses.includes(response.status)) {
@@ -312,7 +326,37 @@ async function postJson(url, options) {
     return body;
 }
 async function responseJson(response) {
-    const body = await response.json().catch(() => null);
+    let bytes = 0;
+    let body;
+    try {
+        const reader = response.body?.getReader();
+        const chunks = [];
+        if (reader) {
+            try {
+                while (true) {
+                    const chunk = await reader.read();
+                    if (chunk.done)
+                        break;
+                    bytes += chunk.value.byteLength;
+                    if (bytes > MAX_AUTH_RESPONSE_BYTES)
+                        break;
+                    chunks.push(chunk.value);
+                }
+            }
+            finally {
+                await reader.cancel();
+            }
+        }
+        if (bytes <= MAX_AUTH_RESPONSE_BYTES) {
+            body = JSON.parse(new TextDecoder().decode(Buffer.concat(chunks)));
+        }
+    }
+    catch {
+        body = null;
+    }
+    if (bytes > MAX_AUTH_RESPONSE_BYTES) {
+        throw new Error("Sendmux agent authentication response exceeds the size limit.");
+    }
     if (!body || typeof body !== "object" || Array.isArray(body)) {
         throw new Error(`Sendmux agent authentication returned HTTP ${response.status} without a JSON object.`);
     }

package/dist/operation-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operation-runner.d.ts","sourceRoot":"","sources":["../src/operation-runner.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAmBhE,wBAAsB,eAAe,CACnC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,OAAO,CAAC,CAwElB"}
+{"version":3,"file":"operation-runner.d.ts","sourceRoot":"","sources":["../src/operation-runner.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAuBhE,wBAAsB,eAAe,CACnC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,OAAO,CAAC,CAwElB"}

package/dist/operation-runner.js

@@ -1,7 +1,12 @@
 import * as sdk from "@sendmux/sdk";
+import { createHash } from "node:crypto";
+import { closeSync, createReadStream, fsyncSync, openSync, writeSync } from "node:fs";
 import { readFile, stat } from "node:fs/promises";
 import { basename, extname } from "node:path";
 import { parseOperationOptions, } from "./operation-flags.js";
+const MAX_SENDING_ATTACHMENTS = 10;
+// Absolute Sending service ceiling; deployment policy may impose a lower limit.
+const MAX_SENDING_ATTACHMENT_BYTES = 18 * 1024 * 1024;
 const surfaceModules = {
     mailbox: sdk.mailbox,
     management: sdk.management,
@@ -160,13 +165,18 @@ async function uploadMailboxAttachmentFromFile(command, client, operationOptions
 async function withAttachedFiles(command, operation, client, operationOptions, flags) {
     const body = jsonObjectBody(command, operationOptions.body);
     const existingAttachments = attachmentArray(command, body.attachments);
+    if (operation.operationId === "sendingSendEmail"
+        && existingAttachments.length + (flags.attach?.length ?? 0) > MAX_SENDING_ATTACHMENTS) {
+        command.error(`Sending email supports at most ${MAX_SENDING_ATTACHMENTS} attachments, including existing attachments and files.`, { exit: 2 });
+    }
     const files = [];
+    const maxBytes = operation.operationId === "sendingSendEmail" ? MAX_SENDING_ATTACHMENT_BYTES : undefined;
     for (const path of flags.attach ?? []) {
-        files.push(await readAttachmentFile(command, path, flags["content-type"]));
+        files.push(await readAttachmentFile(command, path, flags["content-type"], maxBytes));
     }
     if (operation.operationId === "mailboxSendMessage") {
         const uploaded = [];
-        for (const file of files) {
+        for (const [ordinal, file] of files.entries()) {
             const uploadResponse = await sdk.mailbox.mailboxUploadAttachment({
                 client: client,
                 body: blobFor(file),
@@ -179,8 +189,10 @@ async function withAttachedFiles(command, operation, client, operationOptions, f
                 },
             });
             const result = envelopeData(uploadResponse, "mailboxUploadAttachment");
+            const blobId = stringField(result, "blob_id", "mailboxUploadAttachment");
+            journalNestedAttachment({ file, id: blobId, nestedOperationId: "mailboxUploadAttachment", operationId: operation.operationId, ordinal });
             uploaded.push({
-                blob_id: stringField(result, "blob_id", "mailboxUploadAttachment"),
+                blob_id: blobId,
                 content_type: stringField(result, "content_type", "mailboxUploadAttachment"),
                 filename: stringField(result, "filename", "mailboxUploadAttachment"),
             });
@@ -195,11 +207,19 @@ async function withAttachedFiles(command, operation, client, operationOptions, f
     }
     if (operation.operationId === "sendingSendEmail") {
         const uploaded = [];
-        for (const file of files) {
+        const outerKey = operationOptions.headers?.["Idempotency-Key"];
+        const idempotencyKey = typeof outerKey === "string" ? outerKey.trim() : undefined;
+        for (const [index, file] of files.entries()) {
             const uploadResponse = await sdk.sending.sendingUploadAttachment({
                 client: client,
                 body: blobFor(file),
                 headers: {
+                    ...(idempotencyKey ? {
+                        // Match the TS/Python helpers; content must not change the key and evade conflict detection.
+                        "Idempotency-Key": createHash("sha256")
+                            .update(`sendmux:sending:attachment:${index}:${idempotencyKey}`)
+                            .digest("hex"),
+                    } : {}),
                     "Content-Length": file.sizeBytes,
                     "Content-Type": file.contentType,
                 },
@@ -209,8 +229,10 @@ async function withAttachedFiles(command, operation, client, operationOptions, f
                 },
             });
             const result = envelopeData(uploadResponse, "sendingUploadAttachment");
+            const attachmentId = stringField(result, "attachment_id", "sendingUploadAttachment");
+            journalNestedAttachment({ file, id: attachmentId, nestedOperationId: "sendingUploadAttachment", operationId: operation.operationId, ordinal: index });
             uploaded.push({
-                attachment_id: stringField(result, "attachment_id", "sendingUploadAttachment"),
+                attachment_id: attachmentId,
             });
         }
         return {
@@ -237,7 +259,30 @@ async function withAttachedFiles(command, operation, client, operationOptions, f
         },
     };
 }
-async function readAttachmentFile(command, filePath, contentTypeOverride) {
+function journalNestedAttachment({ file, id, nestedOperationId, operationId, ordinal }) {
+    const path = process.env.SENDMUX_LIVE_E2E_ATTACHMENT_JOURNAL;
+    if (!path)
+        return;
+    const record = {
+        adapter: "cli",
+        filename: file.filename,
+        id,
+        operationId,
+        nestedOperationId,
+        ordinal,
+        sha256: createHash("sha256").update(file.bytes).digest("hex"),
+        size_bytes: file.sizeBytes,
+    };
+    const descriptor = openSync(path, "a", 0o600);
+    try {
+        writeSync(descriptor, `${JSON.stringify(record)}\n`, undefined, "utf8");
+        fsyncSync(descriptor);
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
+async function readAttachmentFile(command, filePath, contentTypeOverride, maxBytes) {
     const info = await stat(filePath).catch((error) => {
         const message = error instanceof Error ? error.message : String(error);
         command.error(`Could not read attachment file ${filePath}: ${message}`, { exit: 2 });
@@ -248,7 +293,26 @@ async function readAttachmentFile(command, filePath, contentTypeOverride) {
     if (info.size === 0) {
         command.error(`Attachment file is empty: ${filePath}`, { exit: 2 });
     }
-    const bytes = await readFile(filePath);
+    if (maxBytes !== undefined && info.size > maxBytes) {
+        command.error(`Attachment file exceeds ${maxBytes} bytes: ${filePath}`, { exit: 2 });
+    }
+    let bytes;
+    if (maxBytes === undefined) {
+        bytes = await readFile(filePath);
+    }
+    else {
+        const chunks = [];
+        // Include one excess byte so a growing file is rejected instead of truncated and uploaded.
+        for await (const chunk of createReadStream(filePath, { end: maxBytes }))
+            chunks.push(chunk);
+        bytes = Buffer.concat(chunks);
+        if (bytes.length > maxBytes) {
+            command.error(`Attachment file exceeds ${maxBytes} bytes: ${filePath}`, { exit: 2 });
+        }
+    }
+    if (bytes.length === 0) {
+        command.error(`Attachment file is empty: ${filePath}`, { exit: 2 });
+    }
     return {
         bytes,
         contentType: contentTypeOverride ?? inferContentType(filePath),

package/dist/profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,UAAU,gBAAgB;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,qBAAqB,GAAG,0BAA0B,CAAC;AACjF,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,aAAa,CAAC;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GAAG,0BAA0B,GAAG,qBAAqB,CAAC;AACjF,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACtC;AAOD,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAiBzE;AAED,wBAAsB,eAAe,CAAC,CAAC,EACrC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC,CAWZ;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,0BAA0B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAqCrC;AAED,wBAAsB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxG;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAkFD,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,eAAe,CAE9E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,gBAAgB,CAEhF;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,eAAe,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,qBAAqB,CAE1F"}
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,UAAU,gBAAgB;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,0BAA2B,SAAQ,gBAAgB;IAClE,KAAK,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;KACnC,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,MAAM,eAAe,GAAG,qBAAqB,GAAG,0BAA0B,CAAC;AACjF,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,aAAa,CAAC;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GAAG,0BAA0B,GAAG,qBAAqB,CAAC;AACjF,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,SAAS;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACtC;AASD,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAiBzE;AAED,wBAAsB,eAAe,CAAC,CAAC,EACrC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC,CAYZ;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,0BAA0B,GACpC,OAAO,CAAC,0BAA0B,CAAC,CAqCrC;AAED,wBAAsB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxG;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAsHD,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,eAAe,CAE9E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,gBAAgB,CAEhF;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,eAAe,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,IAAI,qBAAqB,CAE1F"}

package/dist/profiles.js

@@ -5,6 +5,8 @@ const CONFIG_FILE = "config.json";
 const CONFIG_LOCK_RETRY_MS = 25;
 const CONFIG_LOCK_STALE_MS = 5_000;
 const CONFIG_LOCK_TIMEOUT_MS = 10_000;
+const CONFIG_REPLACE_TIMEOUT_MS = CONFIG_LOCK_STALE_MS / 2;
+const CONFIG_REPLACE_MAX_WAITS = CONFIG_REPLACE_TIMEOUT_MS / CONFIG_LOCK_RETRY_MS;
 export async function readCliConfig(configDir) {
     const path = configPath(configDir);
     try {
@@ -25,10 +27,11 @@ export async function readCliConfig(configDir) {
 export async function updateCliConfig(configDir, update) {
     await mkdir(configDir, { mode: 0o700, recursive: true });
     const releaseLock = await acquireConfigWriteLock(configDir);
+    const replaceDeadline = Date.now() + CONFIG_REPLACE_TIMEOUT_MS;
     try {
         const config = await readCliConfig(configDir);
         const result = update(config);
-        await writeCliConfigFile(configDir, config);
+        await writeCliConfigFile(configDir, config, replaceDeadline);
         return result;
     }
     finally {
@@ -86,12 +89,30 @@ export async function clearAgentRegistrationIntent(configDir, profileName) {
 export function configPath(configDir) {
     return join(configDir, CONFIG_FILE);
 }
-async function writeCliConfigFile(configDir, config) {
+async function writeCliConfigFile(configDir, config, replaceDeadline) {
     const path = configPath(configDir);
     const tempPath = `${path}.${process.pid}.tmp`;
     await writeFile(tempPath, `${JSON.stringify(config, null, 2)}\n`, { mode: 0o600 });
     await chmod(tempPath, 0o600);
-    await rename(tempPath, path);
+    let waits = 0;
+    while (true) {
+        try {
+            await rename(tempPath, path);
+            break;
+        }
+        catch (error) {
+            if (!isRetryableWindowsProfileFsError(error))
+                throw error;
+            if (waits >= CONFIG_REPLACE_MAX_WAITS ||
+                Date.now() + CONFIG_LOCK_RETRY_MS > replaceDeadline) {
+                throw error;
+            }
+            waits += 1;
+            await new Promise((resolve) => setTimeout(resolve, CONFIG_LOCK_RETRY_MS));
+            if (Date.now() >= replaceDeadline)
+                throw error;
+        }
+    }
     await chmod(path, 0o600);
 }
 async function acquireConfigWriteLock(configDir) {
@@ -99,7 +120,14 @@ async function acquireConfigWriteLock(configDir) {
 }
 async function acquireFileLock(lockPath, timeoutMessage) {
     const deadline = Date.now() + CONFIG_LOCK_TIMEOUT_MS;
+    let lastOpenError;
     while (true) {
+        if (Date.now() >= deadline) {
+            if (lastOpenError && isRetryableWindowsProfileFsError(lastOpenError)) {
+                throw lastOpenError;
+            }
+            throw new Error(timeoutMessage);
+        }
         try {
             const handle = await open(lockPath, "wx", 0o600);
             return async () => {
@@ -118,8 +146,19 @@ async function acquireFileLock(lockPath, timeoutMessage) {
             };
         }
         catch (error) {
-            if (!isNodeError(error) || error.code !== "EEXIST")
+            if (isNodeError(error) && error.code === "EEXIST") {
+                lastOpenError = error;
+            }
+            else if (isRetryableWindowsProfileFsError(error)) {
+                lastOpenError = error;
+                if (Date.now() + CONFIG_LOCK_RETRY_MS > deadline)
+                    throw error;
+                await new Promise((resolve) => setTimeout(resolve, CONFIG_LOCK_RETRY_MS));
+                continue;
+            }
+            else {
                 throw error;
+            }
         }
         try {
             const lock = await stat(lockPath);
@@ -141,9 +180,8 @@ async function acquireFileLock(lockPath, timeoutMessage) {
                 continue;
             throw error;
         }
-        if (Date.now() >= deadline) {
+        if (Date.now() + CONFIG_LOCK_RETRY_MS > deadline)
             throw new Error(timeoutMessage);
-        }
         await new Promise((resolve) => setTimeout(resolve, CONFIG_LOCK_RETRY_MS));
     }
 }
@@ -179,3 +217,8 @@ export function isActiveAgentProfile(profile) {
 function isNodeError(error) {
     return Boolean(error && typeof error === "object" && "code" in error);
 }
+function isRetryableWindowsProfileFsError(error) {
+    return (process.platform === "win32" &&
+        isNodeError(error) &&
+        (error.code === "EPERM" || error.code === "EACCES" || error.code === "EBUSY"));
+}