slidemind 0.3.0 → 0.3.2

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "slidemind",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Connect Claude Code to the slidemind PowerPoint add-in — build and edit native, on-brand PowerPoint decks against the active corporate design, from the terminal.",
   "author": {
     "name": "statworx",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "slidemind",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Connect Codex to the slidemind PowerPoint add-in — build and edit native, on-brand PowerPoint decks against the active corporate design. Requires the slidemind CLI (npm install -g slidemind); the skills explain the install when it is missing.",
   "author": {
     "name": "statworx",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slidemind",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Connect Claude Code, Codex & opencode to the slidemind PowerPoint add-in — let your coding agent build and edit native, on-brand PowerPoint decks against your active corporate design, from the terminal.",
   "type": "module",
   "bin": {

package/src/bridge/client.mjs

@@ -2885,14 +2885,24 @@ export async function insertSlidesFromSearch({
         : [];
       insertedCount += landed.length || 1;
       insertedSlideIds.push(...landed);
-      fs.rmSync(slidePath, { force: true });
+      bestEffortRm(slidePath);
     }
     return { ok: true, insertedCount, insertedSlideIds, presId: livePresId };
   } finally {
-    fs.rmSync(dir, { recursive: true, force: true });
+    bestEffortRm(dir);
   }
 }
 
+// Remove a temp file/dir that bytes were JUST streamed into. Windows may still
+// hold a handle on it at cleanup time (antivirus scanning the fresh write), so
+// plain rmSync races into EBUSY/ENOTEMPTY there — retry, and swallow what's
+// left: cleanup failure must never mask an operation that succeeded.
+function bestEffortRm(p) {
+  try {
+    fs.rmSync(p, { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
+  } catch {}
+}
+
 // Fetch a chosen slide-search result's thumbnail/preview as a data URI for
 // on-demand viewing (the agent doesn't have to extract the whole .pptx just to
 // look at a slide). Relayed through the pane.
@@ -2942,7 +2952,7 @@ export async function viewSlide({
         dataUri: `data:${mimeType};base64,${fs.readFileSync(tmp).toString("base64")}`,
       };
     } finally {
-      fs.rmSync(dir, { recursive: true, force: true });
+      bestEffortRm(dir);
     }
   }
   const be = backendURL || (await resolveBackendForPres(presId));

package/src/bridge/graph-auth.mjs

@@ -419,8 +419,14 @@ function startLoopback({ state, timeoutMs, env }) {
       // when the wait later times out.
       settled.catch(() => {});
       resolveStart({
+        // redirect_uri says `localhost` — the spelling Entra treats as the
+        // loopback redirect for desktop apps — and browsers retry ::1 vs
+        // 127.0.0.1 themselves. startUrl is OUR page though, fetched by
+        // whatever opener we were handed: name the literal bound address so
+        // it works even where `localhost` resolves only to ::1 (or the
+        // client, like Node 18's, tries just one family).
         redirectUri: `http://localhost:${port}`,
-        startUrl: `http://localhost:${port}/`,
+        startUrl: `http://127.0.0.1:${port}/`,
         setAuthorizeUrl: (value) => {
           authorizeUrl = value;
         },