@agentxm/registry-auth 0.29.2 → 0.29.4

package/dist/src/credential-store.d.ts

@@ -94,19 +94,16 @@ export declare const CredentialStoreLive: Layer.Layer<CredentialStore, never, Fi
  * a failing origin retried serially. Sharing is safe here because each auth
  * path issues a single load and none of them depends on serial retry.
  *
- * `Effect.onInterrupt` is load-path scaffolding, not decoration. `Cache.get`
- * runs its lookup on a detached daemon fiber and leaves the pending entry in
- * the map when the only caller is interrupted, so without this guard the next
- * read of that origin would await an abandoned lookup forever. Invalidating on
- * interrupt restores the pre-cache behavior, where an interrupted read left
- * nothing behind and the next read simply ran again.
+ * Caller interruption invalidates the affected origin so later reads can
+ * retry. Cache owns the lookup fiber's cancellation when its last waiter
+ * leaves.
  *
- * Known limitation, unchanged by this layer's move to `Cache` and not fixed by
- * it: a `save` or `clear` whose invalidation lands while a read of the same
- * origin is still in flight can be overwritten when that read populates the
- * memo, leaving the pre-write value cached for the rest of the session. The
- * previous value-map-and-semaphore memo lost the same invalidation through its
- * own write-after-invalidate window.
+ * Effect Cache starts a lookup before inserting its pending entry. Yielding
+ * before invoking the backing store lets that insertion finish before a read
+ * can synchronously resume a writer. Successful save/clear invalidation then
+ * removes the pending entry; its eventual result cannot restore stale state.
+ * An overlapping reader can still receive its earlier snapshot, while reads
+ * started after the write completes observe the updated store.
  */
 export declare const CredentialStoreSessionLive: Layer.Layer<CredentialStore, never, CredentialStore>;
 export declare const CredentialStoreTest: (tier?: StorageTier, initialData?: CredentialFile, allowsPersistedCredentials?: boolean) => Layer.Layer<CredentialStore, never, never>;

package/dist/src/credential-store.js

@@ -367,23 +367,20 @@ export const CredentialStoreLive = Layer.effect(CredentialStore, Effect.gen(func
  * a failing origin retried serially. Sharing is safe here because each auth
  * path issues a single load and none of them depends on serial retry.
  *
- * `Effect.onInterrupt` is load-path scaffolding, not decoration. `Cache.get`
- * runs its lookup on a detached daemon fiber and leaves the pending entry in
- * the map when the only caller is interrupted, so without this guard the next
- * read of that origin would await an abandoned lookup forever. Invalidating on
- * interrupt restores the pre-cache behavior, where an interrupted read left
- * nothing behind and the next read simply ran again.
+ * Caller interruption invalidates the affected origin so later reads can
+ * retry. Cache owns the lookup fiber's cancellation when its last waiter
+ * leaves.
  *
- * Known limitation, unchanged by this layer's move to `Cache` and not fixed by
- * it: a `save` or `clear` whose invalidation lands while a read of the same
- * origin is still in flight can be overwritten when that read populates the
- * memo, leaving the pre-write value cached for the rest of the session. The
- * previous value-map-and-semaphore memo lost the same invalidation through its
- * own write-after-invalidate window.
+ * Effect Cache starts a lookup before inserting its pending entry. Yielding
+ * before invoking the backing store lets that insertion finish before a read
+ * can synchronously resume a writer. Successful save/clear invalidation then
+ * removes the pending entry; its eventual result cannot restore stale state.
+ * An overlapping reader can still receive its earlier snapshot, while reads
+ * started after the write completes observe the updated store.
  */
 export const CredentialStoreSessionLive = Layer.effect(CredentialStore, Effect.gen(function* () {
     const store = yield* CredentialStore;
-    const cache = yield* Cache.makeWith((registryUrl) => store.load(registryUrl), {
+    const cache = yield* Cache.makeWith((registryUrl) => Effect.andThen(Effect.yieldNow, () => store.load(registryUrl)), {
         capacity: Number.POSITIVE_INFINITY,
         timeToLive: (exit) => Exit.isSuccess(exit) ? Duration.infinity : Duration.zero,
     });

package/package.json

@@ -4,16 +4,16 @@
     "url": "https://github.com/agentxm/axm/issues"
   },
   "dependencies": {
-    "@agentxm/extension-model": "^0.29.2",
-    "@agentxm/registry-client": "^0.29.2",
-    "@agentxm/registry-protocol": "^0.29.2",
+    "@agentxm/extension-model": "^0.29.4",
+    "@agentxm/registry-client": "^0.29.4",
+    "@agentxm/registry-protocol": "^0.29.4",
     "@napi-rs/keyring": "^1.3.0",
     "effect": "4.0.0-rc.115",
     "proper-lockfile": "^4.1.2"
   },
   "description": "AXM registry-auth feature: login, logout, token, identity inspection, device and loopback flows, and credential lifecycle for the axm CLI. Unstable and unsupported — use the axm.sh CLI.",
   "devDependencies": {
-    "@agentxm/specification-metadata": "^0.29.2",
+    "@agentxm/specification-metadata": "^0.29.4",
     "@effect/platform-node": "4.0.0-rc.115",
     "@effect/vitest": "4.0.0-rc.115",
     "@types/bun": "^1.3.14",
@@ -62,5 +62,5 @@
   },
   "sideEffects": false,
   "type": "module",
-  "version": "0.29.2"
+  "version": "0.29.4"
 }