mcp-google-multi 5.1.2-beta.1 → 5.1.3-alpha.1

package/dist/token-store.js

@@ -6,6 +6,8 @@ const ENC_VERSION = 1;
 const ALGO = 'aes-256-gcm';
 const LOCK_TIMEOUT_MS = 5_000;
 const LOCK_RETRY_MS = 10;
+const RENAME_ATTEMPTS = 5;
+const RENAME_RETRY_MS = 20;
 export function deriveKey(masterKey) {
     if (!masterKey) {
         throw new Error('MASTER_KEY is required to encrypt/decrypt tokens. Generate one with: openssl rand -base64 32');
@@ -144,10 +146,36 @@ function writeTokenAtomic(alias, data) {
         finally {
             fs.closeSync(fd);
         }
-        fs.renameSync(tmp, p);
+        renameWithRetry(tmp, p);
     }
     finally {
-        fs.rmSync(tmp, { force: true });
+        try {
+            fs.rmSync(tmp, { force: true });
+        }
+        catch {
+            // force only suppresses ENOENT; a Windows handle-holder can make this
+            // throw and mask the real write error. The orphan tmp is harmless.
+        }
+    }
+}
+// Windows uses classic rename semantics (MoveFileExW without POSIX semantics),
+// so replacing a token file that another process momentarily holds open — a
+// concurrent readToken, antivirus, an indexer — fails with a transient
+// EPERM/EACCES/EBUSY. Reads take no lock, so the token lock cannot prevent
+// this; a short bounded retry absorbs it. POSIX rename never fails this way.
+function renameWithRetry(from, to) {
+    for (let attempt = 1;; attempt++) {
+        try {
+            fs.renameSync(from, to);
+            return;
+        }
+        catch (error) {
+            const code = error.code;
+            const transient = code === 'EPERM' || code === 'EACCES' || code === 'EBUSY';
+            if (!transient || attempt >= RENAME_ATTEMPTS)
+                throw error;
+            sleep(RENAME_RETRY_MS * attempt);
+        }
     }
 }
 export function writeToken(alias, data) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-google-multi",
-  "version": "5.1.2-beta.1",
+  "version": "5.1.3-alpha.1",
   "description": "Local MCP server for Google Workspace (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, +Forms/Chat/Admin) across multiple accounts — OAuth-only, encrypted token storage, deny-by-default writes.",
   "type": "module",
   "license": "MIT",