pinglet-cli 0.5.3 → 0.6.0

package/README.ja.md

@@ -74,7 +74,7 @@ statusline の言語はシステム言語に応じて自動選択されます(
 | `pinglet post "メッセージ"` | Ping を送る |
 | `pinglet ping` | いま表示されるメッセージをプレビュー |
 | `pinglet doctor` | インストール・接続状態を診断 |
-| `pinglet uninstall` | 接続解除と元の設定の復元 |
+| `pinglet uninstall` | 設定復元、サーバー上のインストール失効とログアウト |
 
 ## 安心して使えます
 
@@ -97,6 +97,13 @@ npm uninstall -g pinglet-cli
 
 ローカルデータ（`~/.pinglet`）まで削除するには `pinglet uninstall --purge`。
 
+`uninstall` は端末のインストールトークンと現在のログインセッションも失効させます。
+`logout` は現在のセッションと端末のアカウント連携を解除し、連携設定と匿名閲覧は維持します。
+サーバー接続や設定復元に失敗した場合、再試行に必要なデータを保持し、失敗を表示します。
+`--purge` はすべての解除に成功した後に実行します。npm 本体は削除しません。
+
+フィードキャッシュは更新後最大10分まで使用し、有効期限を過ぎたメッセージは表示しません。
+
 ## 利用規約とプライバシーポリシー
 
 ログインしてメッセージを投稿すると、以下の文書に同意したものとみなされます。

package/README.ko.md

@@ -74,7 +74,7 @@ statusline 언어는 시스템 언어에 따라 자동 선택됩니다(한국어
 | `pinglet post "메시지"` | Ping 보내기 |
 | `pinglet ping` | 지금 표시될 메시지 미리보기 |
 | `pinglet doctor` | 설치·연결 상태 진단 |
-| `pinglet uninstall` | 연결 해제 및 기존 설정 복원 |
+| `pinglet uninstall` | 기존 설정 복원, 서버 설치 폐기 및 로그아웃 |
 
 ## 안심하고 쓰세요
 
@@ -98,6 +98,13 @@ npm uninstall -g pinglet-cli
 
 로컬 데이터(`~/.pinglet`)까지 지우려면 `pinglet uninstall --purge`.
 
+`uninstall`은 서버의 설치 토큰과 현재 로그인 세션도 폐기합니다. `logout`은
+현재 세션을 폐기하고 이 기기의 설치–계정 연결을 해제하되, 익명 읽기와 연동은 유지합니다.
+서버 연결이나 설정 복원에 실패하면 완료로 처리하지 않으며 재시도에 필요한 데이터를 보존합니다.
+`--purge`는 모든 해제가 성공한 뒤에만 실행됩니다. npm 프로그램 자체는 삭제하지 않습니다.
+
+피드는 마지막 갱신 후 최대 10분만 사용하며, 메시지 만료 시각이 지나면 더 이상 표시하지 않습니다.
+
 ## 약관 및 개인정보처리방침
 
 로그인하여 메시지를 작성하면 아래 문서에 동의한 것으로 간주됩니다.

package/README.md

@@ -74,7 +74,7 @@ left untouched). To opt out, add `"autoUpdate": false` to `~/.pinglet/config.jso
 | `pinglet post "message"` | Send a Ping |
 | `pinglet ping` | Preview the message that would be shown now |
 | `pinglet doctor` | Diagnose installation and connection status |
-| `pinglet uninstall` | Disconnect and restore your previous settings |
+| `pinglet uninstall` | Restore settings, revoke installations and sign out |
 
 ## Safe to use
 
@@ -99,6 +99,14 @@ npm uninstall -g pinglet-cli
 
 To also remove local data (`~/.pinglet`), run `pinglet uninstall --purge`.
 
+`uninstall` also revokes this device's installation tokens and current login session.
+`logout` revokes the current session and unlinks this device from the account, keeping
+the integration and anonymous reading. If server cleanup or settings restoration fails,
+the command reports failure and preserves the data needed to retry. `--purge` runs only
+after successful cleanup. Neither command removes npm itself.
+
+Cached feeds are used for at most 10 minutes and expired messages are no longer displayed.
+
 ## Terms & Privacy
 
 By logging in and posting messages you agree to the following:

package/dist/adapters/claude.js

@@ -47,6 +47,7 @@ const child_process_1 = require("child_process");
 const config_1 = require("../config");
 const cache_1 = require("../cache");
 const render_1 = require("../render");
+const storage_1 = require("../storage");
 const CLAUDE_DIR = path.join(os.homedir(), ".claude");
 const SETTINGS_PATH = path.join(CLAUDE_DIR, "settings.json");
 const COMMANDS_DIR = path.join(CLAUDE_DIR, "commands");
@@ -160,8 +161,9 @@ function uninstallSlashCommand() {
             fs.unlinkSync(file);
             removed = true;
         }
-        catch {
-            // 없거나 읽을 수 없는 파일은 건너뛴다.
+        catch (error) {
+            if (!(0, storage_1.isMissing)(error))
+                throw error;
         }
     }
     return removed;
@@ -194,20 +196,28 @@ function settingsMtimeMs() {
     try {
         return fs.statSync(SETTINGS_PATH).mtimeMs;
     }
-    catch {
-        return null; // 파일 없음
+    catch (error) {
+        if (!(0, storage_1.isMissing)(error))
+            throw error;
+        return null;
     }
 }
 function readSettingsWithMtime() {
     const mtimeMs = settingsMtimeMs();
     try {
+        const settings = JSON.parse(fs.readFileSync(SETTINGS_PATH, "utf8"));
+        if (!settings || typeof settings !== "object" || Array.isArray(settings)) {
+            throw new Error("Expected a settings object");
+        }
         return {
-            settings: JSON.parse(fs.readFileSync(SETTINGS_PATH, "utf8")),
+            settings: settings,
             mtimeMs,
         };
     }
-    catch {
-        return { settings: {}, mtimeMs };
+    catch (error) {
+        if ((0, storage_1.isMissing)(error) && mtimeMs === null)
+            return { settings: {}, mtimeMs };
+        throw new Error(`Cannot read ${SETTINGS_PATH}; original settings preserved.`, { cause: error });
     }
 }
 /**
@@ -227,6 +237,10 @@ function writeSettings(settings, expectedMtimeMs) {
     const tmp = `${SETTINGS_PATH}.pinglet-tmp.${process.pid}`;
     try {
         fs.writeFileSync(tmp, JSON.stringify(settings, null, 2) + "\n");
+        if (settingsMtimeMs() !== expectedMtimeMs) {
+            fs.unlinkSync(tmp);
+            return false;
+        }
         fs.renameSync(tmp, SETTINGS_PATH);
     }
     catch (error) {
@@ -273,10 +287,7 @@ function cleanupSpinnerTips(settings, config) {
     else {
         delete settings.spinnerTipsOverride;
     }
-    if (adapter?.spinnerTipsBackup !== undefined) {
-        delete adapter.spinnerTipsBackup;
-        (0, config_1.saveConfig)(config);
-    }
+    // Keep the backup until uninstall commits successfully.
     return true;
 }
 /**
@@ -402,6 +413,7 @@ function installClaudeIntegration(config, options = {}) {
 }
 function uninstallClaudeIntegration(config) {
     let settingsChanged = false;
+    let committed = false;
     for (let attempt = 0; attempt < 3; attempt++) {
         const { settings, mtimeMs } = readSettingsWithMtime();
         settingsChanged = false;
@@ -450,11 +462,13 @@ function uninstallClaudeIntegration(config) {
             }
             settingsChanged = true;
         }
-        if (!settingsChanged)
+        if (!settingsChanged || writeSettings(settings, mtimeMs)) {
+            committed = true;
             break;
-        if (writeSettings(settings, mtimeMs))
-            break; // 충돌 시 재읽기 후 재적용
+        }
     }
+    if (!committed)
+        throw new Error((0, i18n_1.t)("claude.settingsBusy"));
     const commandRemoved = uninstallSlashCommand();
     if (config.adapters.claude) {
         delete config.adapters.claude;

package/dist/adapters/codex.js

@@ -43,6 +43,7 @@ const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
 const config_1 = require("../config");
+const storage_1 = require("../storage");
 const CODEX_DIR = path.join(os.homedir(), ".codex");
 const CONFIG_TOML_PATH = path.join(CODEX_DIR, "config.toml");
 /**
@@ -71,8 +72,10 @@ function readToml() {
     try {
         return fs.readFileSync(CONFIG_TOML_PATH, "utf8");
     }
-    catch {
-        return "";
+    catch (error) {
+        if ((0, storage_1.isMissing)(error))
+            return "";
+        throw error;
     }
 }
 /**
@@ -94,7 +97,13 @@ function findNotifyEntry(toml) {
     let depth = 0;
     for (; i < toml.length; i++) {
         const ch = toml[i];
-        if (ch === '"' || ch === "'") {
+        if (ch === "#") {
+            const end = toml.indexOf("\n", i);
+            if (end === -1)
+                break;
+            i = end;
+        }
+        else if (ch === '"' || ch === "'") {
             const quote = ch;
             i++;
             while (i < toml.length && toml[i] !== quote) {
@@ -112,8 +121,7 @@ function findNotifyEntry(toml) {
                 return toml.slice(start, i + 1);
         }
     }
-    // 괄호 짝이 안 맞음 — 이미 깨진 파일이므로 건드리지 않는다.
-    return null;
+    throw new Error(`Invalid notify array in ${CONFIG_TOML_PATH}; original settings preserved.`);
 }
 function isCodexIntegrationInstalled() {
     const entry = findNotifyEntry(readToml());
@@ -148,7 +156,7 @@ function installCodexIntegration(config, options = {}) {
         next = notifyLine() + "\n" + toml;
     }
     fs.mkdirSync(CODEX_DIR, { recursive: true });
-    fs.writeFileSync(CONFIG_TOML_PATH, next);
+    (0, storage_1.atomicWrite)(CONFIG_TOML_PATH, next);
     return { ok: true };
 }
 function uninstallCodexIntegration(config) {
@@ -156,13 +164,18 @@ function uninstallCodexIntegration(config) {
     const existing = findNotifyEntry(toml);
     const isOurs = existing !== null &&
         (existing.includes("pinglet") || existing.includes((0, config_1.cliPath)()));
-    if (!existing || !isOurs)
+    if (!existing || !isOurs) {
+        if (config.adapters.codex) {
+            delete config.adapters.codex;
+            (0, config_1.saveConfig)(config);
+        }
         return false;
+    }
     const backup = config.adapters.codex?.notifyBackup;
     const next = backup
         ? toml.replace(existing, backup)
         : toml.replace(existing + "\n", "").replace(existing, "");
-    fs.writeFileSync(CONFIG_TOML_PATH, next);
+    (0, storage_1.atomicWrite)(CONFIG_TOML_PATH, next);
     delete config.adapters.codex;
     (0, config_1.saveConfig)(config);
     return true;

package/dist/api.js

@@ -40,6 +40,8 @@ exports.fetchFeed = fetchFeed;
 exports.uploadEventBatch = uploadEventBatch;
 exports.sendHeartbeat = sendHeartbeat;
 exports.createMessage = createMessage;
+exports.validateUserToken = validateUserToken;
+exports.releaseCredential = releaseCredential;
 exports.linkInstallation = linkInstallation;
 const os = __importStar(require("os"));
 const crypto_1 = require("crypto");
@@ -100,6 +102,7 @@ async function fetchFeed(config, record, limit = 50) {
         text: item.text,
         author: item.authorNickname || "익명의 개발자",
         category: item.category,
+        expiresAt: item.expiresAt,
         contentType: item.contentType === "SYSTEM" || item.contentType === "SPONSORED"
             ? item.contentType
             : "USER",
@@ -136,7 +139,7 @@ async function sendHeartbeat(config, record) {
  * POST /messages — 메시지 작성 (분당 5개 제한).
  * 작성은 로그인(GitHub 또는 Google)이 필요하다 (읽기는 계속 익명).
  */
-async function createMessage(config, text, category) {
+async function createMessage(config, text, category, requestId = (0, crypto_1.randomUUID)()) {
     const token = config.userToken;
     if (!token)
         return { ok: false, error: "LOGIN_REQUIRED" };
@@ -147,7 +150,7 @@ async function createMessage(config, text, category) {
                 "content-type": "application/json",
                 authorization: `Bearer ${token}`,
             },
-            body: JSON.stringify({ text, ...(category && { category }) }),
+            body: JSON.stringify({ text, requestId, ...(category && { category }) }),
             signal: AbortSignal.timeout(TIMEOUT_MS),
         });
         if (res.status === 401)
@@ -168,6 +171,32 @@ async function createMessage(config, text, category) {
         return { ok: false, error: "NETWORK" };
     }
 }
+async function validateUserToken(config, token) {
+    const user = await request(config, "GET", "/users/me", { token });
+    return typeof user?.id === "string" && user.id.length > 0;
+}
+/** Revocation/unlink are idempotent. A 401 installation credential is already unusable.
+ * Other failures (including an old server's 404) must not be reported as success.
+ */
+async function releaseCredential(config, kind, token) {
+    try {
+        const apiPath = kind === "user" ? "/auth/logout" : kind === "unlink" ? "/installations/unlink" : "/installations/current";
+        const res = await fetch(config.apiBaseUrl + apiPath, {
+            method: kind === "installation" ? "DELETE" : "POST",
+            headers: { authorization: `Bearer ${token}` },
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+        if (res.status === 401)
+            return true;
+        if (!res.ok)
+            return false;
+        const body = await res.json();
+        return kind === "unlink" ? body.unlinked === true : body.revoked === true;
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * POST /installations/link — 로그인 후 기존 익명 설치를 계정에 연결한다.
  * 소유 증명으로 installation "토큰"을 보낸다 (ID만으로는 연결 불가).

package/dist/cache.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_FEED_AGE_MS = void 0;
 exports.loadFeedMessages = loadFeedMessages;
 exports.saveFeedMessages = saveFeedMessages;
 exports.feedAgeMs = feedAgeMs;
@@ -15,9 +16,16 @@ const config_1 = require("./config");
  * 서버 feed를 아직 못 받았으면 빈 배열 — Pinglet은 아무것도 표시하지 않고
  * Claude Code 기본 spinner가 그대로 유지된다.
  */
+exports.MAX_FEED_AGE_MS = 10 * 60_000;
 function loadFeedMessages() {
     const cache = (0, config_1.readJsonFile)(config_1.FEED_PATH);
-    return cache?.messages ?? [];
+    if (!cache || !Array.isArray(cache.messages))
+        return [];
+    const fetchedAt = Date.parse(cache.fetchedAt);
+    const now = Date.now();
+    if (!Number.isFinite(fetchedAt) || fetchedAt > now || now - fetchedAt >= exports.MAX_FEED_AGE_MS)
+        return [];
+    return cache.messages.filter((m) => m.expiresAt == null || Date.parse(m.expiresAt) > now);
 }
 function saveFeedMessages(messages) {
     const file = {

package/dist/cli.js

@@ -14,6 +14,7 @@ const refresh_1 = require("./commands/refresh");
 const ping_1 = require("./commands/ping");
 const post_1 = require("./commands/post");
 const i18n_1 = require("./i18n");
+const lock_1 = require("./lock");
 const HELP = (0, i18n_1.t)("cli.help", { version: config_1.VERSION });
 async function main() {
     const [command, ...rest] = process.argv.slice(2);
@@ -22,13 +23,13 @@ async function main() {
             await (0, install_1.runInstall)(rest);
             break;
         case "uninstall":
-            (0, uninstall_1.runUninstall)(rest);
+            await (0, uninstall_1.runUninstall)(rest);
             break;
         case "login":
             await (0, login_1.runLogin)(rest);
             break;
         case "logout":
-            (0, logout_1.runLogout)();
+            await (0, logout_1.runLogout)();
             break;
         case "doctor":
             await (0, doctor_1.runDoctor)();
@@ -72,7 +73,9 @@ async function main() {
             }
     }
 }
-main().catch((error) => {
+(0, lock_1.withPingletLock)(main, {
+    skipIfBusy: ["statusline", "notify", "refresh", "flush"].includes(process.argv[2]),
+}).catch((error) => {
     // statusline/notify는 조용히 실패해야 Claude/Codex 경험을 해치지 않는다.
     const command = process.argv[2];
     if (command === "statusline" || command === "notify") {

package/dist/commands/flush.js

@@ -1,7 +1,41 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runFlush = runFlush;
 const config_1 = require("../config");
+const fs = __importStar(require("fs"));
 const api_1 = require("../api");
 const queue_1 = require("../queue");
 /**
@@ -10,6 +44,8 @@ const queue_1 = require("../queue");
  * 재전송 중복은 서버가 eventId로 dedupe한다.
  */
 async function runFlush() {
+    if (!fs.existsSync(config_1.CONFIG_PATH))
+        return;
     const config = (0, config_1.loadConfig)();
     const events = (0, queue_1.readEvents)();
     if (events.length === 0)

package/dist/commands/login.js

@@ -58,7 +58,9 @@ function openBrowser(url) {
             ? ["cmd", "/c", "start", "", url]
             : ["xdg-open", url];
     try {
-        (0, child_process_1.spawn)(cmd[0], cmd.slice(1), { stdio: "ignore" }).unref();
+        const child = (0, child_process_1.spawn)(cmd[0], cmd.slice(1), { stdio: "ignore" });
+        child.on("error", () => { });
+        child.unref();
         return true;
     }
     catch {
@@ -106,7 +108,7 @@ function loginViaLoopback(apiBaseUrl, provider, quiet) {
             resolve(token);
         };
         const timer = setTimeout(() => done(null), LOGIN_TIMEOUT_MS);
-        const server = http.createServer((req, res) => {
+        const server = http.createServer(async (req, res) => {
             const url = new URL(req.url ?? "/", "http://127.0.0.1");
             if (url.pathname !== "/callback") {
                 res.statusCode = 404;
@@ -115,8 +117,11 @@ function loginViaLoopback(apiBaseUrl, provider, quiet) {
             }
             const token = url.searchParams.get("token");
             res.setHeader("content-type", "text/html; charset=utf-8");
-            res.end(RESULT_HTML(Boolean(token)));
-            done(token);
+            const valid = Boolean(token) && await (0, api_1.validateUserToken)({ apiBaseUrl }, token);
+            res.statusCode = valid ? 200 : 401;
+            res.end(RESULT_HTML(valid));
+            if (valid)
+                done(token);
         });
         server.on("error", () => done(null));
         server.listen(0, "127.0.0.1", () => {
@@ -172,6 +177,17 @@ async function runLogin(args) {
             process.exitCode = 1;
         return;
     }
+    if (!await (0, api_1.validateUserToken)(config, token)) {
+        console.log((0, i18n_1.t)("login.invalidToken"));
+        if (!quiet)
+            process.exitCode = 1;
+        return;
+    }
+    if (config.userToken && config.userToken !== token) {
+        if (!await (0, api_1.releaseCredential)(config, "user", config.userToken)) {
+            throw new Error((0, i18n_1.t)("logout.failed"));
+        }
+    }
     config.userToken = token;
     (0, config_1.saveConfig)(config);
     console.log((0, i18n_1.t)("login.saved"));

package/dist/commands/logout.js

@@ -3,17 +3,25 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.runLogout = runLogout;
 const config_1 = require("../config");
 const i18n_1 = require("../i18n");
+const api_1 = require("../api");
 /**
- * `pinglet logout` — 로컬에 저장된 로그인 토큰만 지운다.
- * 통합 설정·installation·캐시는 그대로라 읽기는 계속 되고, 다시 `pinglet login`으로
- * 다른 계정(GitHub/Google)을 연결할 수 있다. 서버 측 토큰 폐기는 하지 않는다 (JWT 만료까지 유효).
+ * Revoke the user session and unlink this device's installations before
+ * removing local credentials. On failure preserve credentials for retry.
  */
-function runLogout() {
+async function runLogout() {
     const config = (0, config_1.loadConfig)();
+    for (const record of Object.values(config.installations)) {
+        if (!await (0, api_1.releaseCredential)(config, "unlink", record.token)) {
+            throw new Error((0, i18n_1.t)("logout.failed"));
+        }
+    }
     if (!config.userToken) {
         console.log((0, i18n_1.t)("logout.notLoggedIn"));
         return;
     }
+    if (!await (0, api_1.releaseCredential)(config, "user", config.userToken)) {
+        throw new Error((0, i18n_1.t)("logout.failed"));
+    }
     delete config.userToken;
     (0, config_1.saveConfig)(config);
     console.log((0, i18n_1.t)("logout.done"));

package/dist/commands/notify.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runNotify = runNotify;
 const child_process_1 = require("child_process");
@@ -6,12 +39,16 @@ const cache_1 = require("../cache");
 const picker_1 = require("../picker");
 const queue_1 = require("../queue");
 const runtime_1 = require("../runtime");
+const fs = __importStar(require("fs"));
+const config_1 = require("../config");
 /**
  * Codex CLI notify hook 진입점 (experimental).
  * Codex는 turn 완료 시 마지막 인자로 notification JSON을 넘긴다.
  * notify 프로세스는 TUI 밖에서 돌기 때문에 MVP에서는 macOS 알림으로 Ping을 전달한다.
  */
 function runNotify(args) {
+    if (!fs.existsSync(config_1.CONFIG_PATH) || !(0, config_1.loadConfig)().adapters.codex)
+        return;
     let notificationType;
     try {
         const payload = JSON.parse(args[args.length - 1] ?? "");

package/dist/commands/post.js

@@ -5,6 +5,7 @@ const config_1 = require("../config");
 const api_1 = require("../api");
 const cache_1 = require("../cache");
 const i18n_1 = require("../i18n");
+const pending_post_1 = require("../pending-post");
 const REASON_KEYS = {
     EMPTY: "reason.EMPTY",
     TOO_LONG: "reason.TOO_LONG",
@@ -40,7 +41,10 @@ async function runPost(args) {
         return;
     }
     const config = (0, config_1.loadConfig)();
-    const result = await (0, api_1.createMessage)(config, text, category);
+    const requestId = (0, pending_post_1.pendingPostId)(config, text, category);
+    const result = await (0, api_1.createMessage)(config, text, category, requestId);
+    if (result.ok || (result.error !== "NETWORK" && result.error !== "SERVER"))
+        (0, pending_post_1.completePost)(requestId);
     // 슬래시 명령 안에서는 같은 방식의 슬래시 명령을 안내한다.
     const loginCmd = quiet ? "/pinglet-login" : "pinglet login";
     if (!result.ok) {

package/dist/commands/refresh.js

@@ -1,7 +1,41 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runRefresh = runRefresh;
 const config_1 = require("../config");
+const fs = __importStar(require("fs"));
 const api_1 = require("../api");
 const update_1 = require("../update");
 const cache_1 = require("../cache");
@@ -11,6 +45,8 @@ const claude_1 = require("../adapters/claude");
  * 설치 당시 오프라인이었다면 installation 등록도 여기서 재시도한다.
  */
 async function runRefresh() {
+    if (!fs.existsSync(config_1.CONFIG_PATH))
+        return;
     const config = (0, config_1.loadConfig)();
     const wanted = [];
     if (config.adapters.claude)
@@ -26,7 +62,7 @@ async function runRefresh() {
             }
         }
     }
-    const records = Object.values(config.installations);
+    const records = wanted.flatMap((agent) => config.installations[agent] ? [config.installations[agent]] : []);
     if (records.length === 0)
         return;
     const onlineCounts = await Promise.all(records.map((r) => (0, api_1.sendHeartbeat)(config, r)));

package/dist/commands/statusline.js

@@ -135,11 +135,14 @@ function rotateSpinner(state, now) {
  * - flush/refresh 백그라운드 트리거 (Claude 사용 중 항상 호출되므로 이 경로에서)
  */
 function runStatusline() {
+    if (!fs.existsSync(config_1.CONFIG_PATH) || !(0, config_1.loadConfig)().adapters.claude)
+        return;
     const payload = readPayload();
     const state = (0, cache_1.loadState)();
     const now = Date.now();
     trackSpinnerActivity(state, payload);
-    const rotateDue = !state.current || now - state.current.shownAt >= runtime_1.ROTATE_MS;
+    const rotateDue = !state.current || now - state.current.shownAt >= runtime_1.ROTATE_MS ||
+        !(0, cache_1.loadFeedMessages)().some((message) => message.id === state.current?.messageId);
     // 300ms마다 호출되므로 저장/maintenance는 1초 스로틀. 회전 시점에는 항상 저장.
     const saveDue = rotateDue ||
         state.lastTickAt === undefined ||

package/dist/commands/uninstall.js

@@ -39,7 +39,8 @@ const config_1 = require("../config");
 const claude_1 = require("../adapters/claude");
 const codex_1 = require("../adapters/codex");
 const i18n_1 = require("../i18n");
-function runUninstall(args) {
+const api_1 = require("../api");
+async function runUninstall(args) {
     const config = (0, config_1.loadConfig)();
     const claudeRemoved = (0, claude_1.uninstallClaudeIntegration)(config);
     const codexRemoved = (0, codex_1.uninstallCodexIntegration)(config);
@@ -49,6 +50,20 @@ function runUninstall(args) {
     console.log(codexRemoved
         ? "✓ Codex integration removed"
         : "○ Codex integration not installed");
+    for (const [agent, record] of Object.entries(config.installations)) {
+        if (!await (0, api_1.releaseCredential)(config, "installation", record.token)) {
+            throw new Error((0, i18n_1.t)("uninstall.failed"));
+        }
+        delete config.installations[agent];
+        (0, config_1.saveConfig)(config);
+    }
+    if (config.userToken) {
+        if (!await (0, api_1.releaseCredential)(config, "user", config.userToken)) {
+            throw new Error((0, i18n_1.t)("uninstall.failed"));
+        }
+        delete config.userToken;
+        (0, config_1.saveConfig)(config);
+    }
     if (args.includes("--purge")) {
         fs.rmSync(config_1.PINGLET_DIR, { recursive: true, force: true });
         console.log("✓ ~/.pinglet removed (config / cache / event queue)");
@@ -56,4 +71,5 @@ function runUninstall(args) {
     else {
         console.log((0, i18n_1.t)("uninstall.keep"));
     }
+    console.log((0, i18n_1.t)("uninstall.npm"));
 }

package/dist/config.js

@@ -43,6 +43,7 @@ exports.cliPath = cliPath;
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
+const storage_1 = require("./storage");
 /** package.json의 version — 하드코딩하면 npm version bump와 어긋난다. */
 exports.VERSION = (() => {
     try {
@@ -66,25 +67,36 @@ exports.ONLINE_PATH = path.join(exports.PINGLET_DIR, "online.json");
 exports.UPDATE_PATH = path.join(exports.PINGLET_DIR, "update.json");
 exports.DEFAULT_API_BASE_URL = process.env.PINGLET_API_URL ?? "https://pinglet.halluci.co.kr";
 function ensurePingletDir() {
-    fs.mkdirSync(exports.PINGLET_DIR, { recursive: true });
+    fs.mkdirSync(exports.PINGLET_DIR, { recursive: true, mode: 0o700 });
 }
-function readJsonFile(filePath) {
+function readJsonFile(filePath, strict = false) {
     try {
-        return JSON.parse(fs.readFileSync(filePath, "utf8"));
+        const value = JSON.parse(fs.readFileSync(filePath, "utf8"));
+        if (strict && (!value || typeof value !== "object" || Array.isArray(value))) {
+            throw new Error("Expected a JSON object");
+        }
+        return value;
     }
-    catch {
+    catch (error) {
+        if (strict && !(0, storage_1.isMissing)(error))
+            throw new Error(`Cannot read ${filePath}; original file preserved.`, { cause: error });
         return null;
     }
 }
 function writeJsonFile(filePath, value) {
     ensurePingletDir();
-    const tmp = filePath + ".tmp";
-    fs.writeFileSync(tmp, JSON.stringify(value, null, 2));
-    fs.renameSync(tmp, filePath);
+    (0, storage_1.atomicWrite)(filePath, JSON.stringify(value, null, 2));
 }
 function loadConfig() {
-    const existing = readJsonFile(exports.CONFIG_PATH);
+    const existing = readJsonFile(exports.CONFIG_PATH, true);
     if (existing) {
+        const object = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+        if (typeof existing.apiBaseUrl !== "string" || typeof existing.createdAt !== "string" ||
+            (existing.userToken !== undefined && typeof existing.userToken !== "string") ||
+            (existing.installations !== undefined && !object(existing.installations)) ||
+            (existing.adapters !== undefined && !object(existing.adapters))) {
+            throw new Error(`Invalid ${exports.CONFIG_PATH}; original file preserved.`);
+        }
         existing.installations ??= {};
         existing.adapters ??= {};
         return existing;

package/dist/i18n.js

@@ -11,7 +11,7 @@ Usage: pinglet <command>
 
   install [--api <url>] [--force]   Install the Claude Code integration
           [--claude | --codex]      Codex uses OS notifications; opt in with --codex (experimental)
-  uninstall [--purge]               Remove the integration (--purge: also delete ~/.pinglet)
+  uninstall [--purge]               Restore settings and revoke credentials (--purge: delete ~/.pinglet)
   login [--github | --google]       Link your account (GitHub or Google; pick in the browser if omitted)
         [--token <jwt>]
   logout                            Sign out (keeps the integration and cache)
@@ -43,6 +43,10 @@ Internal commands (called by the integration):
     "login.html.failSub": "Please try again from the terminal.",
     // ---- logout
     "logout.notLoggedIn": "○ You are not logged in.",
+    "logout.failed": "Server sign-out failed. Credentials are preserved; retry pinglet logout when connected.",
+    "uninstall.failed": "Server revocation failed. Local data is preserved; retry pinglet uninstall when connected.",
+    "uninstall.npm": "To remove the CLI package too, run: npm uninstall -g pinglet-cli (npm itself is kept).",
+    "login.invalidToken": "Login could not be verified. Existing credentials were preserved; check your token and connection.",
     "logout.done": "✓ Logged out. Reading still works; run `pinglet login` again to post.",
     // ---- post
     "reason.EMPTY": "empty messages cannot be posted",
@@ -89,7 +93,7 @@ Internal commands (called by the integration):
     "doctor.loggedIn": "Logged in",
     "doctor.notLoggedIn": "Not logged in — reading works; run `pinglet login` to post / react",
     // ---- misc commands
-    "uninstall.keep": "○ ~/.pinglet is kept. Use --purge to remove everything.",
+    "uninstall.keep": "○ Local cache and history are kept. Use --purge to delete ~/.pinglet too.",
     "ping.none": "No Ping to show — one will appear once the feed is received.",
     "postinstall.start": "\npinglet: running first-time setup automatically (`pinglet install`)",
     "postinstall.failed": "pinglet: automatic setup failed. Please run `pinglet install` yourself.",
@@ -99,7 +103,7 @@ Internal commands (called by the integration):
     "codex.existingNotify": "An existing notify setting was found (use --force to back it up and replace).",
     "slash.postDesc": "Post a message to Pinglet so it shows in other developers' terminals",
     "slash.loginDesc": "Link your Pinglet account (GitHub or Google login in the browser; --github/--google to choose)",
-    "slash.logoutDesc": "Sign out of Pinglet (removes the login token on this machine only)",
+    "slash.logoutDesc": "Sign out of Pinglet (revoke this session and unlink this device)",
 };
 const ko = {
     "cli.help": (p) => `pinglet v${p.version} — AI가 생각하는 동안 만나는 개발자 메시지 네트워크
@@ -108,7 +112,7 @@ const ko = {
 
   install [--api <url>] [--force]   Claude Code integration 설치
           [--claude | --codex]      Codex는 OS 알림 방식이라 --codex로 opt-in (experimental)
-  uninstall [--purge]               integration 제거 (--purge: ~/.pinglet까지 삭제)
+  uninstall [--purge]               설정 복원·서버 인증 해제 (--purge: ~/.pinglet까지 삭제)
   login [--github | --google]       계정 연결 (GitHub 또는 Google, 생략 시 브라우저에서 선택)
         [--token <jwt>]
   logout                            로그인 해제 (설치·캐시는 유지)
@@ -138,6 +142,10 @@ const ko = {
     "login.html.fail": "✗ 로그인 실패",
     "login.html.failSub": "터미널에서 다시 시도해 주세요.",
     "logout.notLoggedIn": "○ 로그인 상태가 아닙니다.",
+    "logout.failed": "서버 로그아웃에 실패했습니다. 재시도할 수 있도록 인증 정보를 보존했습니다. 연결 후 pinglet logout을 다시 실행하세요.",
+    "uninstall.failed": "서버 인증 해제에 실패해 로컬 데이터를 보존했습니다. 연결 후 pinglet uninstall을 다시 실행하세요.",
+    "uninstall.npm": "CLI 패키지도 제거하려면: npm uninstall -g pinglet-cli (npm 자체는 유지됩니다).",
+    "login.invalidToken": "로그인을 확인할 수 없습니다. 기존 인증 정보는 보존했습니다. 토큰과 서버 연결을 확인하세요.",
     "logout.done": "✓ 로그아웃했습니다. 읽기는 계속 되고, 메시지 작성은 `pinglet login` 후 가능합니다.",
     "reason.EMPTY": "빈 메시지는 등록할 수 없습니다",
     "reason.TOO_LONG": "메시지가 너무 깁니다 (기본 100자 제한)",
@@ -180,7 +188,7 @@ const ko = {
     "doctor.apiUnreachable": (p) => `API unreachable (${p.api}) — 오프라인 모드로 동작 중`,
     "doctor.loggedIn": "로그인됨",
     "doctor.notLoggedIn": "로그인 안 됨 — 읽기는 가능, 메시지 작성/반응은 `pinglet login` 후",
-    "uninstall.keep": "○ ~/.pinglet은 유지됩니다. 전부 지우려면 --purge를 사용하세요.",
+    "uninstall.keep": "○ 로컬 캐시·기록은 유지됩니다. ~/.pinglet도 지우려면 --purge를 사용하세요.",
     "ping.none": "표시할 Ping이 없습니다 — 서버 feed를 받으면 표시됩니다.",
     "postinstall.start": "\npinglet: 첫 설정을 자동으로 진행합니다 (`pinglet install`)",
     "postinstall.failed": "pinglet: 자동 설정에 실패했습니다. `pinglet install`을 직접 실행해 주세요.",
@@ -189,7 +197,7 @@ const ko = {
     "codex.existingNotify": "기존 notify 설정이 있습니다 (백업 후 교체하려면 --force).",
     "slash.postDesc": "메시지를 Pinglet에 등록해 다른 개발자들의 터미널에 표시",
     "slash.loginDesc": "Pinglet 계정 연결 (브라우저에서 GitHub 또는 Google 로그인, --github/--google로 지정 가능)",
-    "slash.logoutDesc": "Pinglet 로그인 해제 (이 기기의 로그인 토큰만 제거)",
+    "slash.logoutDesc": "Pinglet 로그인 해제 (서버 세션 폐기·이 기기의 계정 연결 해제)",
 };
 const ja = {
     "cli.help": (p) => `pinglet v${p.version} — AIが考えている間に出会う開発者メッセージネットワーク
@@ -198,7 +206,7 @@ const ja = {
 
   install [--api <url>] [--force]   Claude Code integration をインストール
           [--claude | --codex]      Codex は OS 通知方式のため --codex で opt-in (experimental)
-  uninstall [--purge]               integration を削除 (--purge: ~/.pinglet も削除)
+  uninstall [--purge]               設定を復元・認証を解除 (--purge: ~/.pinglet も削除)
   login [--github | --google]       アカウント連携 (GitHub または Google、省略時はブラウザで選択)
         [--token <jwt>]
   logout                            ログアウト (連携設定・キャッシュは維持)
@@ -228,6 +236,10 @@ const ja = {
     "login.html.fail": "✗ ログイン失敗",
     "login.html.failSub": "ターミナルからもう一度お試しください。",
     "logout.notLoggedIn": "○ ログインしていません。",
+    "logout.failed": "サーバーのログアウトに失敗しました。認証情報は保持しています。接続後に pinglet logout を再実行してください。",
+    "uninstall.failed": "サーバーの認証解除に失敗したため、ローカルデータを保持しました。接続後に pinglet uninstall を再実行してください。",
+    "uninstall.npm": "CLI パッケージも削除するには: npm uninstall -g pinglet-cli（npm 本体は保持されます）。",
+    "login.invalidToken": "ログインを確認できませんでした。既存の認証情報は保持しています。トークンと接続を確認してください。",
     "logout.done": "✓ ログアウトしました。閲覧は引き続き可能で、投稿は `pinglet login` 後にできます。",
     "reason.EMPTY": "空のメッセージは投稿できません",
     "reason.TOO_LONG": "メッセージが長すぎます (デフォルト100文字まで)",
@@ -270,7 +282,7 @@ const ja = {
     "doctor.apiUnreachable": (p) => `API unreachable (${p.api}) — オフラインモードで動作中`,
     "doctor.loggedIn": "ログイン済み",
     "doctor.notLoggedIn": "未ログイン — 閲覧は可能、投稿/リアクションは `pinglet login` 後",
-    "uninstall.keep": "○ ~/.pinglet は維持されます。すべて削除するには --purge を使ってください。",
+    "uninstall.keep": "○ ローカルキャッシュと履歴は保持されます。~/.pinglet も削除するには --purge を使ってください。",
     "ping.none": "表示する Ping がありません — サーバーから feed を受信すると表示されます。",
     "postinstall.start": "\npinglet: 初期設定を自動的に行います (`pinglet install`)",
     "postinstall.failed": "pinglet: 自動設定に失敗しました。`pinglet install` を手動で実行してください。",
@@ -279,7 +291,7 @@ const ja = {
     "codex.existingNotify": "既存の notify 設定があります (バックアップして置き換えるには --force)。",
     "slash.postDesc": "メッセージを Pinglet に投稿して他の開発者のターミナルに表示",
     "slash.loginDesc": "Pinglet アカウント連携 (ブラウザで GitHub または Google ログイン、--github/--google で指定可)",
-    "slash.logoutDesc": "Pinglet ログアウト (このマシンのログイントークンのみ削除)",
+    "slash.logoutDesc": "Pinglet ログアウト (サーバーセッション失効・この端末のアカウント連携解除)",
 };
 const tables = { en, ko, ja };
 function t(key, params = {}) {

package/dist/lock.js

@@ -0,0 +1,136 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withPingletLock = withPingletLock;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const storage_1 = require("./storage");
+// Outside ~/.pinglet so purge cannot remove a lock held by another command.
+const LOCK_PATH = path.join(os.homedir(), ".pinglet.lock");
+const RECOVERY_PATH = LOCK_PATH + ".recovery";
+function owner() {
+    try {
+        return fs.readFileSync(LOCK_PATH, "utf8");
+    }
+    catch (error) {
+        if ((0, storage_1.isMissing)(error))
+            return null;
+        throw error;
+    }
+}
+function abandoned(value) {
+    const pid = Number(value.split(":")[0]);
+    if (!Number.isInteger(pid) || pid <= 0) {
+        // The creating process may not have written its PID yet.
+        return Date.now() - fs.statSync(LOCK_PATH).mtimeMs > 30_000;
+    }
+    try {
+        process.kill(pid, 0);
+        return false;
+    }
+    catch (error) {
+        return error.code === "ESRCH";
+    }
+}
+function recover() {
+    // Serialize reapers and re-read ownership: a second reaper must never unlink
+    // a fresh lock acquired after the first reaper removed the abandoned one.
+    try {
+        fs.mkdirSync(RECOVERY_PATH, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code === "EEXIST")
+            return;
+        throw error;
+    }
+    try {
+        const value = owner();
+        if (value !== null && abandoned(value))
+            fs.unlinkSync(LOCK_PATH);
+    }
+    catch (error) {
+        if (!(0, storage_1.isMissing)(error))
+            throw error;
+    }
+    finally {
+        fs.rmdirSync(RECOVERY_PATH);
+    }
+}
+/** Serialize the entire read/modify/write command, including asynchronous work.
+ * Hooks skip a busy tick instead of blocking Claude/Codex rendering.
+ */
+async function withPingletLock(action, options = {}) {
+    const identity = `${process.pid}:${(0, crypto_1.randomUUID)()}`;
+    const deadline = Date.now() + (options.timeoutMs ?? 15_000);
+    for (;;) {
+        let fd;
+        try {
+            fd = fs.openSync(LOCK_PATH, "wx", 0o600);
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+            recover();
+            if (owner() === null)
+                continue;
+            if (options.skipIfBusy)
+                return undefined;
+            if (Date.now() >= deadline)
+                throw new Error("Pinglet is busy. Retry after the other command finishes.");
+            await new Promise((resolve) => setTimeout(resolve, 50));
+            continue;
+        }
+        try {
+            fs.writeFileSync(fd, identity);
+        }
+        catch (error) {
+            fs.unlinkSync(LOCK_PATH);
+            throw error;
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+        break;
+    }
+    try {
+        return await action();
+    }
+    finally {
+        if (owner() === identity)
+            fs.unlinkSync(LOCK_PATH);
+    }
+}

package/dist/pending-post.js

@@ -0,0 +1,58 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pendingPostId = pendingPostId;
+exports.completePost = completePost;
+const crypto_1 = require("crypto");
+const path = __importStar(require("path"));
+const config_1 = require("./config");
+const PENDING_PATH = path.join(config_1.PINGLET_DIR, "pending-posts.json");
+/** Persist before sending so retrying an ambiguous network failure uses the same ID.
+ * Only hashes are stored: no message text or bearer token in the retry journal.
+ */
+function pendingPostId(config, text, category) {
+    const key = (0, crypto_1.createHash)("sha256").update(JSON.stringify([config.apiBaseUrl, config.userToken, text, category ?? null])).digest("hex");
+    const pending = (0, config_1.readJsonFile)(PENDING_PATH) ?? [];
+    const existing = pending.find((p) => p.key === key);
+    if (existing)
+        return existing.requestId;
+    const requestId = (0, crypto_1.randomUUID)();
+    (0, config_1.writeJsonFile)(PENDING_PATH, [...pending, { key, requestId }]);
+    return requestId;
+}
+function completePost(requestId) {
+    const pending = (0, config_1.readJsonFile)(PENDING_PATH) ?? [];
+    (0, config_1.writeJsonFile)(PENDING_PATH, pending.filter((p) => p.requestId !== requestId));
+}

package/dist/postinstall.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const install_1 = require("./commands/install");
 const i18n_1 = require("./i18n");
+const lock_1 = require("./lock");
 /**
  * npm install -g pinglet-cli 직후 자동으로 `pinglet install`을 수행한다.
  * - 글로벌 설치(npm_config_global=true)일 때만 동작 — 개발용 npm install,
@@ -14,7 +15,7 @@ async function main() {
     if (process.env.npm_config_global !== "true")
         return;
     console.log((0, i18n_1.t)("postinstall.start"));
-    await (0, install_1.runInstall)([]);
+    await (0, lock_1.withPingletLock)(() => (0, install_1.runInstall)([]));
 }
 main()
     .catch(() => {

package/dist/queue.js

@@ -40,8 +40,10 @@ exports.removeEvents = removeEvents;
 const fs = __importStar(require("fs"));
 const crypto_1 = require("crypto");
 const config_1 = require("./config");
+const storage_1 = require("./storage");
 /**
- * Local Event Queue (append-only JSONL).
+ * Local Event Queue (JSONL). All CLI writers hold withPingletLock for the
+ * complete command, so append and removal cannot interleave across processes.
  * 노출 즉시 서버를 호출하지 않고 여기 기록했다가 batch 전송한다 (아키텍처 §8).
  */
 function appendEvent(input) {
@@ -87,5 +89,5 @@ function countEvents() {
 function removeEvents(sentEventIds) {
     const remaining = readEvents().filter((e) => !sentEventIds.has(e.eventId));
     const body = remaining.map((e) => JSON.stringify(e)).join("\n");
-    fs.writeFileSync(config_1.EVENTS_PATH, body ? body + "\n" : "");
+    (0, storage_1.atomicWrite)(config_1.EVENTS_PATH, body ? body + "\n" : "");
 }

package/dist/storage.js

@@ -0,0 +1,61 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isMissing = isMissing;
+exports.atomicWrite = atomicWrite;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+function isMissing(error) {
+    return error.code === "ENOENT";
+}
+/** A unique, private temporary file prevents partial reads and writer collisions. */
+function atomicWrite(filePath, body) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
+    const tmp = `${filePath}.${process.pid}.${(0, crypto_1.randomUUID)()}.tmp`;
+    try {
+        fs.writeFileSync(tmp, body, { flag: "wx", mode: 0o600 });
+        fs.renameSync(tmp, filePath);
+    }
+    finally {
+        try {
+            fs.unlinkSync(tmp);
+        }
+        catch (error) {
+            if (!isMissing(error))
+                throw error;
+        }
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pinglet-cli",
-  "version": "0.5.3",
+  "version": "0.6.0",
   "description": "Short messages from other developers shown in your Claude Code spinner while the AI thinks — zero tokens, never reads your code. Claude Code / Codex integration",
   "license": "MIT",
   "repository": {
@@ -27,6 +27,7 @@
   ],
   "scripts": {
     "build": "tsc",
+    "test": "npm run build && node --test test/*.test.cjs",
     "dev": "tsc --watch",
     "prepare": "npm run build",
     "postinstall": "node dist/postinstall.js || exit 0"