zidane 7.0.20 → 7.0.22

package/dist/{auth-DD4KYv1w.js → auth-Nq-tSMb9.js}

@@ -1,14 +1,14 @@
 import { A as mergeCatalogEntry, D as listModelOverlay, O as listModels, k as lookupModel } from "./openai-compat-cIeLSED_.js";
 import { fn as ALTERNATE_CRED_KEY_SUFFIX, mn as isReservedCredKey, pn as alternateCredKey } from "./agent-LC2c1ue-.js";
 import { t as writeFileAtomic } from "./atomic-write-B7zr1ddF.js";
-import { m as FAST_MODE_OPTIONS, n as anthropic, p as ANTHROPIC_EXTRA_MODELS } from "./anthropic-DATE-m9f.js";
-import { f as refreshAnthropicToken, m as registerOAuthProvider, p as refreshOpenAICodexToken } from "./oauth-D-LZ4ic-.js";
+import { m as FAST_MODE_OPTIONS, n as anthropic, p as ANTHROPIC_EXTRA_MODELS } from "./anthropic-BSbDiW0J.js";
+import { c as withCredentialsLock, h as registerOAuthProvider, m as refreshOpenAICodexToken, p as refreshAnthropicToken } from "./oauth-CmtlmCzi.js";
 import { arcee } from "./providers/arcee.js";
 import { baseten } from "./providers/baseten.js";
 import { cerebras } from "./providers/cerebras.js";
 import { t as generatePkce } from "./pkce-t8BcPyEi.js";
 import { n as createCursorOAuthProvider } from "./cursor-iojRXHF9.js";
-import { n as zai, r as mistral } from "./providers-Bjdvmpfu.js";
+import { n as zai, r as mistral } from "./providers-ZucqgwU7.js";
 import { local } from "./providers/local.js";
 import { openai } from "./providers/openai.js";
 import { openrouter } from "./providers/openrouter.js";
@@ -1404,6 +1404,9 @@ function readCredentials(dataDir) {
 		if (migrated) return migrated;
 		return {};
 	}
+	return readStoredCredentials(path);
+}
+function readStoredCredentials(path) {
 	try {
 		const raw = readFileSync(path, "utf-8");
 		const parsed = JSON.parse(raw);
@@ -1470,6 +1473,9 @@ function readProviderCredentialPair(dataDir, descriptor) {
 * (first launch on a fresh machine: `~/.zidane/` may not exist yet).
 */
 function writeCredentials(dataDir, creds) {
+	withCredentialsLock(credentialsPath(dataDir), () => writeCredentialsUnlocked(dataDir, creds));
+}
+function writeCredentialsUnlocked(dataDir, creds) {
 	writeFileAtomic(credentialsPath(dataDir), `${JSON.stringify(creds, null, 2)}\n`, {
 		ensureDir: true,
 		mode: FILE_MODE
@@ -1490,14 +1496,17 @@ function writeCredentials(dataDir, creds) {
 * that "switch" between each other. Dropping it on the next write self-heals.
 */
 function setProviderCredential(dataDir, descriptor, cred) {
-	const all = readCredentials(dataDir);
-	const fileKey = assertableCredKey(descriptor);
-	const altKey = alternateCredKey(fileKey);
-	const previous = all[fileKey];
-	if (previous && previous.kind !== cred.kind) all[altKey] = previous;
-	else if (all[altKey]?.kind === cred.kind) delete all[altKey];
-	all[fileKey] = cred;
-	writeCredentials(dataDir, all);
+	readCredentials(dataDir);
+	return withCredentialsLock(credentialsPath(dataDir), () => {
+		const all = readStoredCredentials(credentialsPath(dataDir));
+		const fileKey = assertableCredKey(descriptor);
+		const altKey = alternateCredKey(fileKey);
+		const previous = all[fileKey];
+		if (previous && previous.kind !== cred.kind) all[altKey] = previous;
+		else if (all[altKey]?.kind === cred.kind) delete all[altKey];
+		all[fileKey] = cred;
+		writeCredentialsUnlocked(dataDir, all);
+	});
 }
 /**
 * Make the provider's stored `source` credential the preferred one.
@@ -1509,17 +1518,20 @@ function setProviderCredential(dataDir, descriptor, cred) {
 * any caller that trusted it instead of refetching.
 */
 function setPreferredCredential(dataDir, descriptor, source) {
-	const all = readCredentials(dataDir);
-	const fileKey = assertableCredKey(descriptor);
-	const altKey = alternateCredKey(fileKey);
-	const alternate = all[altKey];
-	if (!alternate || alternate.kind !== source) return all[fileKey]?.kind === source ? "already-active" : "not-stored";
-	const active = all[fileKey];
-	all[fileKey] = alternate;
-	if (active) all[altKey] = active;
-	else delete all[altKey];
-	writeCredentials(dataDir, all);
-	return "promoted";
+	readCredentials(dataDir);
+	return withCredentialsLock(credentialsPath(dataDir), () => {
+		const all = readStoredCredentials(credentialsPath(dataDir));
+		const fileKey = assertableCredKey(descriptor);
+		const altKey = alternateCredKey(fileKey);
+		const alternate = all[altKey];
+		if (!alternate || alternate.kind !== source) return all[fileKey]?.kind === source ? "already-active" : "not-stored";
+		const active = all[fileKey];
+		all[fileKey] = alternate;
+		if (active) all[altKey] = active;
+		else delete all[altKey];
+		writeCredentialsUnlocked(dataDir, all);
+		return "promoted";
+	});
 }
 /**
 * Sign a provider out — drops BOTH stored credentials.
@@ -1531,13 +1543,16 @@ function setPreferredCredential(dataDir, descriptor, source) {
 * first ({@link readProviderCredentialPair}) and re-store the survivor.
 */
 function removeProviderCredential(dataDir, descriptor) {
-	const all = readCredentials(dataDir);
-	const fileKey = credKeyOf(descriptor);
-	const altKey = alternateCredKey(fileKey);
-	if (!(fileKey in all) && !(altKey in all)) return;
-	delete all[fileKey];
-	delete all[altKey];
-	writeCredentials(dataDir, all);
+	readCredentials(dataDir);
+	return withCredentialsLock(credentialsPath(dataDir), () => {
+		const all = readStoredCredentials(credentialsPath(dataDir));
+		const fileKey = credKeyOf(descriptor);
+		const altKey = alternateCredKey(fileKey);
+		if (!(fileKey in all) && !(altKey in all)) return;
+		delete all[fileKey];
+		delete all[altKey];
+		writeCredentialsUnlocked(dataDir, all);
+	});
 }
 /**
 * Reconcile `process.env` with the stored credentials so the harness providers
@@ -1653,11 +1668,14 @@ function migrateLegacyFile(targetPath) {
 		};
 	}
 	if (Object.keys(migrated).length === 0) return null;
-	writeFileAtomic(targetPath, `${JSON.stringify(migrated, null, 2)}\n`, {
-		ensureDir: true,
-		mode: FILE_MODE
+	return withCredentialsLock(targetPath, () => {
+		if (existsSync(targetPath)) return readStoredCredentials(targetPath);
+		writeFileAtomic(targetPath, `${JSON.stringify(migrated, null, 2)}\n`, {
+			ensureDir: true,
+			mode: FILE_MODE
+		});
+		return migrated;
 	});
-	return migrated;
 }
 function isOAuthLegacy(value) {
 	return typeof value === "object" && value !== null && "access" in value && typeof value.access === "string";
@@ -1739,4 +1757,4 @@ function detectAuth(dataDir, registry, env = process.env) {
 //#endregion
 export { openrouterDescriptor as C, renderDefaultCallbackPage as E, openaiDescriptor as S, restoreModelOptions as T, getModelInfo as _, readProviderCredential as a, modelSupportsReasoning as b, setPreferredCredential as c, BUILTIN_PROVIDERS as d, anthropicDescriptor as f, getContextWindow as g, enabledModelOptions as h, readCredentials as i, setProviderCredential as l, credKeyOf as m, applyApiKeyEnv as n, readProviderCredentialPair as o, cerebrasDescriptor as p, credentialsPath as r, removeProviderCredential as s, detectAuth as t, writeCredentials as u, localDescriptor as v, piIdOf as w, modelsForDescriptor as x, modelOptionsFor as y };
 
-//# sourceMappingURL=auth-DD4KYv1w.js.map
+//# sourceMappingURL=auth-Nq-tSMb9.js.map