pinglet-cli 0.5.4 → 0.6.1

package/README.ja.md

@@ -74,7 +74,7 @@ statusline の言語はシステム言語に応じて自動選択されます(
 | `pinglet post "メッセージ"` | Ping を送る |
 | `pinglet ping` | いま表示されるメッセージをプレビュー |
 | `pinglet doctor` | インストール・接続状態を診断 |
-| `pinglet uninstall` | 接続解除と元の設定の復元 |
+| `pinglet uninstall` | 設定復元、サーバー上のインストール失効とログアウト |
 
 ## 安心して使えます
 
@@ -97,6 +97,13 @@ npm uninstall -g pinglet-cli
 
 ローカルデータ（`~/.pinglet`）まで削除するには `pinglet uninstall --purge`。
 
+`uninstall` は端末のインストールトークンと現在のログインセッションも失効させます。
+`logout` は現在のセッションと端末のアカウント連携を解除し、連携設定と匿名閲覧は維持します。
+サーバー接続や設定復元に失敗した場合、再試行に必要なデータを保持し、失敗を表示します。
+`--purge` はすべての解除に成功した後に実行します。npm 本体は削除しません。
+
+フィードキャッシュは更新後最大10分まで使用し、有効期限を過ぎたメッセージは表示しません。
+
 ## 利用規約とプライバシーポリシー
 
 ログインしてメッセージを投稿すると、以下の文書に同意したものとみなされます。

package/README.ko.md

@@ -74,7 +74,7 @@ statusline 언어는 시스템 언어에 따라 자동 선택됩니다(한국어
 | `pinglet post "메시지"` | Ping 보내기 |
 | `pinglet ping` | 지금 표시될 메시지 미리보기 |
 | `pinglet doctor` | 설치·연결 상태 진단 |
-| `pinglet uninstall` | 연결 해제 및 기존 설정 복원 |
+| `pinglet uninstall` | 기존 설정 복원, 서버 설치 폐기 및 로그아웃 |
 
 ## 안심하고 쓰세요
 
@@ -98,6 +98,13 @@ npm uninstall -g pinglet-cli
 
 로컬 데이터(`~/.pinglet`)까지 지우려면 `pinglet uninstall --purge`.
 
+`uninstall`은 서버의 설치 토큰과 현재 로그인 세션도 폐기합니다. `logout`은
+현재 세션을 폐기하고 이 기기의 설치–계정 연결을 해제하되, 익명 읽기와 연동은 유지합니다.
+서버 연결이나 설정 복원에 실패하면 완료로 처리하지 않으며 재시도에 필요한 데이터를 보존합니다.
+`--purge`는 모든 해제가 성공한 뒤에만 실행됩니다. npm 프로그램 자체는 삭제하지 않습니다.
+
+피드는 마지막 갱신 후 최대 10분만 사용하며, 메시지 만료 시각이 지나면 더 이상 표시하지 않습니다.
+
 ## 약관 및 개인정보처리방침
 
 로그인하여 메시지를 작성하면 아래 문서에 동의한 것으로 간주됩니다.

package/README.md

@@ -74,7 +74,7 @@ left untouched). To opt out, add `"autoUpdate": false` to `~/.pinglet/config.jso
 | `pinglet post "message"` | Send a Ping |
 | `pinglet ping` | Preview the message that would be shown now |
 | `pinglet doctor` | Diagnose installation and connection status |
-| `pinglet uninstall` | Disconnect and restore your previous settings |
+| `pinglet uninstall` | Restore settings, revoke installations and sign out |
 
 ## Safe to use
 
@@ -99,6 +99,14 @@ npm uninstall -g pinglet-cli
 
 To also remove local data (`~/.pinglet`), run `pinglet uninstall --purge`.
 
+`uninstall` also revokes this device's installation tokens and current login session.
+`logout` revokes the current session and unlinks this device from the account, keeping
+the integration and anonymous reading. If server cleanup or settings restoration fails,
+the command reports failure and preserves the data needed to retry. `--purge` runs only
+after successful cleanup. Neither command removes npm itself.
+
+Cached feeds are used for at most 10 minutes and expired messages are no longer displayed.
+
 ## Terms & Privacy
 
 By logging in and posting messages you agree to the following:

package/dist/adapters/claude.js

@@ -47,6 +47,7 @@ const child_process_1 = require("child_process");
 const config_1 = require("../config");
 const cache_1 = require("../cache");
 const render_1 = require("../render");
+const storage_1 = require("../storage");
 const CLAUDE_DIR = path.join(os.homedir(), ".claude");
 const SETTINGS_PATH = path.join(CLAUDE_DIR, "settings.json");
 const COMMANDS_DIR = path.join(CLAUDE_DIR, "commands");
@@ -160,8 +161,9 @@ function uninstallSlashCommand() {
             fs.unlinkSync(file);
             removed = true;
         }
-        catch {
-            // 없거나 읽을 수 없는 파일은 건너뛴다.
+        catch (error) {
+            if (!(0, storage_1.isMissing)(error))
+                throw error;
         }
     }
     return removed;
@@ -194,20 +196,28 @@ function settingsMtimeMs() {
     try {
         return fs.statSync(SETTINGS_PATH).mtimeMs;
     }
-    catch {
-        return null; // 파일 없음
+    catch (error) {
+        if (!(0, storage_1.isMissing)(error))
+            throw error;
+        return null;
     }
 }
 function readSettingsWithMtime() {
     const mtimeMs = settingsMtimeMs();
     try {
+        const settings = JSON.parse(fs.readFileSync(SETTINGS_PATH, "utf8"));
+        if (!settings || typeof settings !== "object" || Array.isArray(settings)) {
+            throw new Error("Expected a settings object");
+        }
         return {
-            settings: JSON.parse(fs.readFileSync(SETTINGS_PATH, "utf8")),
+            settings: settings,
             mtimeMs,
         };
     }
-    catch {
-        return { settings: {}, mtimeMs };
+    catch (error) {
+        if ((0, storage_1.isMissing)(error) && mtimeMs === null)
+            return { settings: {}, mtimeMs };
+        throw new Error(`Cannot read ${SETTINGS_PATH}; original settings preserved.`, { cause: error });
     }
 }
 /**
@@ -227,6 +237,10 @@ function writeSettings(settings, expectedMtimeMs) {
     const tmp = `${SETTINGS_PATH}.pinglet-tmp.${process.pid}`;
     try {
         fs.writeFileSync(tmp, JSON.stringify(settings, null, 2) + "\n");
+        if (settingsMtimeMs() !== expectedMtimeMs) {
+            fs.unlinkSync(tmp);
+            return false;
+        }
         fs.renameSync(tmp, SETTINGS_PATH);
     }
     catch (error) {
@@ -273,10 +287,7 @@ function cleanupSpinnerTips(settings, config) {
     else {
         delete settings.spinnerTipsOverride;
     }
-    if (adapter?.spinnerTipsBackup !== undefined) {
-        delete adapter.spinnerTipsBackup;
-        (0, config_1.saveConfig)(config);
-    }
+    // Keep the backup until uninstall commits successfully.
     return true;
 }
 /**
@@ -402,6 +413,7 @@ function installClaudeIntegration(config, options = {}) {
 }
 function uninstallClaudeIntegration(config) {
     let settingsChanged = false;
+    let committed = false;
     for (let attempt = 0; attempt < 3; attempt++) {
         const { settings, mtimeMs } = readSettingsWithMtime();
         settingsChanged = false;
@@ -450,11 +462,13 @@ function uninstallClaudeIntegration(config) {
             }
             settingsChanged = true;
         }
-        if (!settingsChanged)
+        if (!settingsChanged || writeSettings(settings, mtimeMs)) {
+            committed = true;
             break;
-        if (writeSettings(settings, mtimeMs))
-            break; // 충돌 시 재읽기 후 재적용
+        }
     }
+    if (!committed)
+        throw new Error((0, i18n_1.t)("claude.settingsBusy"));
     const commandRemoved = uninstallSlashCommand();
     if (config.adapters.claude) {
         delete config.adapters.claude;

package/dist/adapters/codex.js

@@ -43,6 +43,7 @@ const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
 const config_1 = require("../config");
+const storage_1 = require("../storage");
 const CODEX_DIR = path.join(os.homedir(), ".codex");
 const CONFIG_TOML_PATH = path.join(CODEX_DIR, "config.toml");
 /**
@@ -71,8 +72,10 @@ function readToml() {
     try {
         return fs.readFileSync(CONFIG_TOML_PATH, "utf8");
     }
-    catch {
-        return "";
+    catch (error) {
+        if ((0, storage_1.isMissing)(error))
+            return "";
+        throw error;
     }
 }
 /**
@@ -94,7 +97,13 @@ function findNotifyEntry(toml) {
     let depth = 0;
     for (; i < toml.length; i++) {
         const ch = toml[i];
-        if (ch === '"' || ch === "'") {
+        if (ch === "#") {
+            const end = toml.indexOf("\n", i);
+            if (end === -1)
+                break;
+            i = end;
+        }
+        else if (ch === '"' || ch === "'") {
             const quote = ch;
             i++;
             while (i < toml.length && toml[i] !== quote) {
@@ -112,8 +121,7 @@ function findNotifyEntry(toml) {
                 return toml.slice(start, i + 1);
         }
     }
-    // 괄호 짝이 안 맞음 — 이미 깨진 파일이므로 건드리지 않는다.
-    return null;
+    throw new Error(`Invalid notify array in ${CONFIG_TOML_PATH}; original settings preserved.`);
 }
 function isCodexIntegrationInstalled() {
     const entry = findNotifyEntry(readToml());
@@ -148,7 +156,7 @@ function installCodexIntegration(config, options = {}) {
         next = notifyLine() + "\n" + toml;
     }
     fs.mkdirSync(CODEX_DIR, { recursive: true });
-    fs.writeFileSync(CONFIG_TOML_PATH, next);
+    (0, storage_1.atomicWrite)(CONFIG_TOML_PATH, next);
     return { ok: true };
 }
 function uninstallCodexIntegration(config) {
@@ -156,13 +164,18 @@ function uninstallCodexIntegration(config) {
     const existing = findNotifyEntry(toml);
     const isOurs = existing !== null &&
         (existing.includes("pinglet") || existing.includes((0, config_1.cliPath)()));
-    if (!existing || !isOurs)
+    if (!existing || !isOurs) {
+        if (config.adapters.codex) {
+            delete config.adapters.codex;
+            (0, config_1.saveConfig)(config);
+        }
         return false;
+    }
     const backup = config.adapters.codex?.notifyBackup;
     const next = backup
         ? toml.replace(existing, backup)
         : toml.replace(existing + "\n", "").replace(existing, "");
-    fs.writeFileSync(CONFIG_TOML_PATH, next);
+    (0, storage_1.atomicWrite)(CONFIG_TOML_PATH, next);
     delete config.adapters.codex;
     (0, config_1.saveConfig)(config);
     return true;

package/dist/api.js

@@ -38,8 +38,11 @@ exports.checkHealth = checkHealth;
 exports.registerInstallation = registerInstallation;
 exports.fetchFeed = fetchFeed;
 exports.uploadEventBatch = uploadEventBatch;
+exports.uploadEventBatchResult = uploadEventBatchResult;
 exports.sendHeartbeat = sendHeartbeat;
 exports.createMessage = createMessage;
+exports.validateUserToken = validateUserToken;
+exports.releaseCredential = releaseCredential;
 exports.linkInstallation = linkInstallation;
 const os = __importStar(require("os"));
 const crypto_1 = require("crypto");
@@ -100,6 +103,7 @@ async function fetchFeed(config, record, limit = 50) {
         text: item.text,
         author: item.authorNickname || "익명의 개발자",
         category: item.category,
+        expiresAt: item.expiresAt,
         contentType: item.contentType === "SYSTEM" || item.contentType === "SPONSORED"
             ? item.contentType
             : "USER",
@@ -107,20 +111,30 @@ async function fetchFeed(config, record, limit = 50) {
 }
 /** POST /events/batch — eventId 기반으로 서버가 dedupe하므로 재전송에 안전하다. */
 async function uploadEventBatch(config, record, events) {
-    const res = await request(config, "POST", "/events/batch", {
-        token: record.token,
-        body: {
-            batchId: "batch_" + (0, crypto_1.randomUUID)(),
-            events: events.map(({ eventId, type, messageId, visibleMs, occurredAt }) => ({
-                eventId,
-                type,
-                messageId,
-                ...(visibleMs !== undefined && { visibleMs }),
-                occurredAt,
-            })),
-        },
-    });
-    return res !== null;
+    return (await uploadEventBatchResult(config, record, events)).ok;
+}
+async function uploadEventBatchResult(config, record, events) {
+    try {
+        const res = await fetch(config.apiBaseUrl + "/events/batch", {
+            method: "POST",
+            headers: { "content-type": "application/json", authorization: `Bearer ${record.token}` },
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+            body: JSON.stringify({
+                batchId: "batch_" + (0, crypto_1.randomUUID)(),
+                events: events.map(({ eventId, type, messageId, visibleMs, occurredAt }) => ({
+                    eventId,
+                    type,
+                    messageId,
+                    ...(visibleMs !== undefined && { visibleMs }),
+                    occurredAt,
+                })),
+            }),
+        });
+        return { ok: res.ok, permanent: [400, 413, 422].includes(res.status), status: res.status };
+    }
+    catch {
+        return { ok: false, permanent: false };
+    }
 }
 /** POST /installations/heartbeat — lastSeenAt 갱신. 응답의 온라인 설치 수를 돌려준다(구서버는 null). */
 async function sendHeartbeat(config, record) {
@@ -136,7 +150,7 @@ async function sendHeartbeat(config, record) {
  * POST /messages — 메시지 작성 (분당 5개 제한).
  * 작성은 로그인(GitHub 또는 Google)이 필요하다 (읽기는 계속 익명).
  */
-async function createMessage(config, text, category) {
+async function createMessage(config, text, category, requestId = (0, crypto_1.randomUUID)()) {
     const token = config.userToken;
     if (!token)
         return { ok: false, error: "LOGIN_REQUIRED" };
@@ -147,7 +161,7 @@ async function createMessage(config, text, category) {
                 "content-type": "application/json",
                 authorization: `Bearer ${token}`,
             },
-            body: JSON.stringify({ text, ...(category && { category }) }),
+            body: JSON.stringify({ text, requestId, ...(category && { category }) }),
             signal: AbortSignal.timeout(TIMEOUT_MS),
         });
         if (res.status === 401)
@@ -168,6 +182,32 @@ async function createMessage(config, text, category) {
         return { ok: false, error: "NETWORK" };
     }
 }
+async function validateUserToken(config, token) {
+    const user = await request(config, "GET", "/users/me", { token });
+    return typeof user?.id === "string" && user.id.length > 0;
+}
+/** Revocation/unlink are idempotent. A 401 installation credential is already unusable.
+ * Other failures (including an old server's 404) must not be reported as success.
+ */
+async function releaseCredential(config, kind, token) {
+    try {
+        const apiPath = kind === "user" ? "/auth/logout" : kind === "unlink" ? "/installations/unlink" : "/installations/current";
+        const res = await fetch(config.apiBaseUrl + apiPath, {
+            method: kind === "installation" ? "DELETE" : "POST",
+            headers: { authorization: `Bearer ${token}` },
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        });
+        if (res.status === 401)
+            return true;
+        if (!res.ok)
+            return false;
+        const body = await res.json();
+        return kind === "unlink" ? body.unlinked === true : body.revoked === true;
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * POST /installations/link — 로그인 후 기존 익명 설치를 계정에 연결한다.
  * 소유 증명으로 installation "토큰"을 보낸다 (ID만으로는 연결 불가).

package/dist/cache.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_FEED_AGE_MS = void 0;
 exports.loadFeedMessages = loadFeedMessages;
 exports.saveFeedMessages = saveFeedMessages;
 exports.feedAgeMs = feedAgeMs;
@@ -15,9 +16,16 @@ const config_1 = require("./config");
  * 서버 feed를 아직 못 받았으면 빈 배열 — Pinglet은 아무것도 표시하지 않고
  * Claude Code 기본 spinner가 그대로 유지된다.
  */
+exports.MAX_FEED_AGE_MS = 10 * 60_000;
 function loadFeedMessages() {
     const cache = (0, config_1.readJsonFile)(config_1.FEED_PATH);
-    return cache?.messages ?? [];
+    if (!cache || !Array.isArray(cache.messages))
+        return [];
+    const fetchedAt = Date.parse(cache.fetchedAt);
+    const now = Date.now();
+    if (!Number.isFinite(fetchedAt) || fetchedAt > now || now - fetchedAt >= exports.MAX_FEED_AGE_MS)
+        return [];
+    return cache.messages.filter((m) => m.expiresAt == null || Date.parse(m.expiresAt) > now);
 }
 function saveFeedMessages(messages) {
     const file = {
@@ -35,12 +43,17 @@ function feedAgeMs() {
     return Number.isNaN(t) ? null : Date.now() - t;
 }
 function loadState() {
-    const state = (0, config_1.readJsonFile)(config_1.STATE_PATH);
-    if (state) {
-        state.seen ??= {};
-        return state;
+    const state = (0, config_1.readJsonFile)(config_1.STATE_PATH) ?? { seen: {} };
+    const installationId = (0, config_1.readJsonFile)(config_1.CONFIG_PATH)?.installations?.CLAUDE?.installationId;
+    if (state.claudeInstallationId && state.claudeInstallationId !== installationId) {
+        state.seen = {};
+        state.delivered = {};
+        state.current = undefined;
+        state.sessions = undefined;
     }
-    return { seen: {} };
+    state.claudeInstallationId = installationId;
+    state.seen ??= {};
+    return state;
 }
 function loadMyPosts() {
     return (0, config_1.readJsonFile)(config_1.POSTS_PATH) ?? [];

package/dist/cli.js

@@ -8,12 +8,14 @@ const doctor_1 = require("./commands/doctor");
 const login_1 = require("./commands/login");
 const logout_1 = require("./commands/logout");
 const statusline_1 = require("./commands/statusline");
-const notify_1 = require("./commands/notify");
 const flush_1 = require("./commands/flush");
 const refresh_1 = require("./commands/refresh");
 const ping_1 = require("./commands/ping");
 const post_1 = require("./commands/post");
 const i18n_1 = require("./i18n");
+const lock_1 = require("./lock");
+const notifications_1 = require("./notifications");
+const runtime_1 = require("./runtime");
 const HELP = (0, i18n_1.t)("cli.help", { version: config_1.VERSION });
 async function main() {
     const [command, ...rest] = process.argv.slice(2);
@@ -22,13 +24,13 @@ async function main() {
             await (0, install_1.runInstall)(rest);
             break;
         case "uninstall":
-            (0, uninstall_1.runUninstall)(rest);
+            await (0, uninstall_1.runUninstall)(rest);
             break;
         case "login":
             await (0, login_1.runLogin)(rest);
             break;
         case "logout":
-            (0, logout_1.runLogout)();
+            await (0, logout_1.runLogout)();
             break;
         case "doctor":
             await (0, doctor_1.runDoctor)();
@@ -42,9 +44,6 @@ async function main() {
         case "statusline":
             (0, statusline_1.runStatusline)();
             break;
-        case "notify":
-            (0, notify_1.runNotify)(rest);
-            break;
         case "flush":
             await (0, flush_1.runFlush)();
             break;
@@ -72,10 +71,32 @@ async function main() {
             }
     }
 }
-main().catch((error) => {
+async function dispatch() {
+    const command = process.argv[2];
+    if (command === "notify") {
+        if ((0, notifications_1.enqueueNotification)(process.argv.slice(3)))
+            (0, runtime_1.spawnDetachedCommand)(["notify-drain"]);
+        return;
+    }
+    if (command === "notify-drain" || command === "statusline") {
+        await (0, lock_1.withPingletLock)(() => {
+            (0, notifications_1.drainNotifications)();
+            if (command === "statusline")
+                (0, statusline_1.runStatusline)();
+        }, { skipIfBusy: command === "statusline" });
+        return;
+    }
+    if (["--version", "-v", "help", "--help"].includes(command)) {
+        await main();
+        return;
+    }
+    await (0, lock_1.withCommandLock)(main);
+    await (0, lock_1.withPingletLock)(notifications_1.drainNotifications);
+}
+dispatch().catch((error) => {
     // statusline/notify는 조용히 실패해야 Claude/Codex 경험을 해치지 않는다.
     const command = process.argv[2];
-    if (command === "statusline" || command === "notify") {
+    if (command === "statusline" || command === "notify" || command === "notify-drain") {
         process.exit(0);
     }
     console.error("pinglet:", error instanceof Error ? error.message : error);

package/dist/commands/flush.js

@@ -1,19 +1,86 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runFlush = runFlush;
 const config_1 = require("../config");
+const fs = __importStar(require("fs"));
 const api_1 = require("../api");
 const queue_1 = require("../queue");
+const lock_1 = require("../lock");
 /**
  * Local Event Queue를 batch로 서버에 전송한다 (아키텍처 §8).
  * 전송 성공한 이벤트만 큐에서 제거하므로 실패분은 다음 주기에 재시도되고,
  * 재전송 중복은 서버가 eventId로 dedupe한다.
  */
 async function runFlush() {
-    const config = (0, config_1.loadConfig)();
-    const events = (0, queue_1.readEvents)();
-    if (events.length === 0)
+    const snapshot = await (0, lock_1.withPingletLock)(() => {
+        if (!fs.existsSync(config_1.CONFIG_PATH))
+            return;
+        const config = (0, config_1.loadConfig)();
+        const events = (0, queue_1.bindEvents)();
+        const valid = [];
+        for (const event of events) {
+            const reason = (0, queue_1.invalidEventReason)(event);
+            const record = config.installations[event.agentType];
+            if (reason)
+                (0, queue_1.quarantineEvents)([event], reason);
+            else if (event.installationId && event.installationId !== record?.installationId)
+                (0, queue_1.quarantineEvents)([event], "retired-installation");
+            else
+                valid.push(event);
+        }
+        return { config, events: valid };
+    });
+    if (!snapshot)
         return;
+    const { config, events } = snapshot;
+    const send = async (record, chunk) => {
+        const result = await (0, api_1.uploadEventBatchResult)(config, record, chunk);
+        if (result.ok) {
+            await (0, lock_1.withPingletLock)(() => (0, queue_1.removeEvents)(new Set(chunk.map(event => event.eventId))));
+            return true;
+        }
+        if (!result.permanent)
+            return false;
+        if (chunk.length === 1) {
+            await (0, lock_1.withPingletLock)(() => (0, queue_1.quarantineEvents)(chunk, `http-${result.status}`));
+            return true;
+        }
+        const middle = Math.floor(chunk.length / 2);
+        return await send(record, chunk.slice(0, middle)) && await send(record, chunk.slice(middle));
+    };
     for (const agentType of ["CLAUDE", "CODEX"]) {
         const record = config.installations[agentType];
         const group = events.filter((e) => e.agentType === agentType);
@@ -23,10 +90,8 @@ async function runFlush() {
             continue; // 미등록 상태 — refresh가 등록을 재시도한다.
         for (let i = 0; i < group.length; i += api_1.MAX_BATCH_SIZE) {
             const chunk = group.slice(i, i + api_1.MAX_BATCH_SIZE);
-            const ok = await (0, api_1.uploadEventBatch)(config, record, chunk);
-            if (!ok)
+            if (!await send(record, chunk))
                 break;
-            (0, queue_1.removeEvents)(new Set(chunk.map((e) => e.eventId)));
         }
     }
 }

package/dist/commands/install.js

@@ -41,6 +41,7 @@ const cache_1 = require("../cache");
 const claude_1 = require("../adapters/claude");
 const codex_1 = require("../adapters/codex");
 const i18n_1 = require("../i18n");
+const lock_1 = require("../lock");
 /**
  * 기존 설정 교체 확인. Enter 또는 y면 진행(기본 Yes — 설치 의도가 명확하므로).
  * non-TTY(postinstall, CI)에서는 묻지 않고 false — 사용자 설정을 말없이
@@ -72,7 +73,11 @@ async function runInstall(args) {
     const apiIndex = args.indexOf("--api");
     if (apiIndex !== -1 && args[apiIndex + 1]) {
         config.apiBaseUrl = args[apiIndex + 1].replace(/\/$/, "");
-        (0, config_1.saveConfig)(config);
+        await (0, lock_1.withPingletLock)(() => {
+            const current = (0, config_1.loadConfig)();
+            current.apiBaseUrl = config.apiBaseUrl;
+            (0, config_1.saveConfig)(current);
+        });
     }
     console.log("");
     const hasClaude = wantClaude && (0, claude_1.detectClaude)();
@@ -99,17 +104,21 @@ async function runInstall(args) {
             return;
         const record = await (0, api_1.registerInstallation)(config, agentType);
         if (record) {
+            await (0, lock_1.withPingletLock)(() => {
+                const current = (0, config_1.loadConfig)();
+                current.installations[agentType] = record;
+                (0, config_1.saveConfig)(current);
+            });
             config.installations[agentType] = record;
-            (0, config_1.saveConfig)(config);
         }
     };
     if (hasClaude) {
         await register("CLAUDE");
-        let result = (0, claude_1.installClaudeIntegration)(config, { force });
+        let result = (await (0, lock_1.withPingletLock)(() => (0, claude_1.installClaudeIntegration)((0, config_1.loadConfig)(), { force })));
         if (!result.ok && result.needsForce) {
             const yes = await confirmReplace((0, i18n_1.t)("install.askReplaceStatusLine"));
             if (yes)
-                result = (0, claude_1.installClaudeIntegration)(config, { force: true });
+                result = (await (0, lock_1.withPingletLock)(() => (0, claude_1.installClaudeIntegration)((0, config_1.loadConfig)(), { force: true })));
         }
         console.log(result.ok
             ? "✓ Claude integration installed"
@@ -117,11 +126,11 @@ async function runInstall(args) {
     }
     if (hasCodex) {
         await register("CODEX");
-        let result = (0, codex_1.installCodexIntegration)(config, { force });
+        let result = (await (0, lock_1.withPingletLock)(() => (0, codex_1.installCodexIntegration)((0, config_1.loadConfig)(), { force })));
         if (!result.ok && result.needsForce) {
             const yes = await confirmReplace((0, i18n_1.t)("install.askReplaceNotify"));
             if (yes)
-                result = (0, codex_1.installCodexIntegration)(config, { force: true });
+                result = (await (0, lock_1.withPingletLock)(() => (0, codex_1.installCodexIntegration)((0, config_1.loadConfig)(), { force: true })));
         }
         console.log(result.ok
             ? "✓ Codex integration installed (experimental)"
@@ -132,10 +141,10 @@ async function runInstall(args) {
     if (online && record) {
         const messages = await (0, api_1.fetchFeed)(config, record);
         if (messages) {
-            (0, cache_1.saveFeedMessages)(messages);
+            await (0, lock_1.withPingletLock)(() => (0, cache_1.saveFeedMessages)(messages));
             if (messages.length > 0) {
                 console.log(`✓ Feed cached (${messages.length} messages)`);
-                if ((0, claude_1.armSpinnerMessage)(config, messages[0] ?? null)) {
+                if (await (0, lock_1.withPingletLock)(() => (0, claude_1.armSpinnerMessage)((0, config_1.loadConfig)(), messages[0] ?? null))) {
                     console.log("✓ Claude spinner synced");
                 }
             }