@cortexkit/anthropic-auth-core 1.20.0 → 1.21.0

package/dist/quota-manager.d.ts

@@ -21,20 +21,25 @@ export type QuotaManagerOptions = {
     storage: AccountStorage | null;
     fetchImpl?: typeof fetch;
     now?: () => number;
-    onMainQuotaFetched?: (quota: OAuthQuotaSnapshot, checkedAt: number, tokenFingerprint: string, fetchStartedAt: number) => void;
-    onApiError?: (error: AccountOperationError) => void;
+    onMainQuotaFetched?: (quota: OAuthQuotaSnapshot, checkedAt: number, tokenFingerprint: string, fetchStartedAt: number, quotaErrorGeneration: number, quotaErrorClearedAt: number | undefined) => void;
+    onApiError?: (error: AccountOperationError, quotaErrorGeneration: number) => void;
 };
 export declare class QuotaManager {
     private main;
-    private mainTokenFp;
+    private mainAccountId;
+    private mainQuotaIdentityKnown;
+    private mainQuotaIdentityStrict;
+    private mainGeneration;
+    private mainQuotaErrorGeneration;
+    private mainQuotaErrorClearedAt;
     private fallbacks;
-    private fallbackTokenFps;
+    private fallbackAuthLineages;
+    private fallbackGenerations;
     private inflightMain;
-    private inflightMainFp;
+    private inflightMainAccountId;
     private inflightFallbacks;
     private mainLastApiError;
     private fallbackApiErrors;
-    private fallbackErrorTokenFps;
     private apiGate;
     private lastApiCallAt;
     private storage;
@@ -44,28 +49,26 @@ export declare class QuotaManager {
     private readonly onApiError;
     constructor(opts: QuotaManagerOptions);
     /**
-     * Cached main quota entry. Pass the live access token to enforce token
-     * binding: if the cached entry was produced by a different token (main
-     * account switched), it is dropped and null is returned so the caller
-     * refetches for the current account. Called without a token (e.g. for
-     * display) it returns whatever is cached.
+     * Cached main quota entry, scoped to the account behind the main credential.
+     * An unresolved identity keeps a retained cache unverified rather than exposing it.
      */
-    getMain(accessToken?: string): QuotaEntry | null;
+    getMain(mainAccountId?: string): QuotaEntry | null;
     /**
-     * Cached fallback quota entry. Pass the live access token to enforce token
-     * binding: if the entry was produced by a different token (account re-login),
-     * it is dropped and null is returned so the caller refetches.
+     * Cached fallback quota entry, scoped to the configured account id.
      */
-    getFallback(accountId: string, accessToken?: string): QuotaEntry | null;
+    getFallback(accountId: string, account?: Pick<OAuthAccount, 'authLineageId'>): QuotaEntry | null;
     getAllFallbacks(): Map<string, QuotaEntry>;
-    setMain(accessToken: string, entry: QuotaEntry): void;
-    setFallback(accountId: string, entry: QuotaEntry, accessToken?: string): void;
-    pushMainFromHeaders(accessToken: string, incoming: OAuthQuotaSnapshot): QuotaEntry;
-    pushFallbackFromHeaders(accountId: string, accessToken: string, incoming: OAuthQuotaSnapshot): QuotaEntry;
-    refreshMain(accessToken: string): Promise<OAuthQuotaSnapshot>;
-    refreshMainWithMetadata(accessToken: string): Promise<QuotaRefreshResult>;
-    refreshFallback(accountId: string, accessToken: string): Promise<OAuthQuotaSnapshot>;
-    refreshFallbackWithMetadata(accountId: string, accessToken: string): Promise<QuotaRefreshResult>;
+    setMain(mainAccountId: string | undefined, entry: QuotaEntry): void;
+    /** Bind quota state to the account behind the current main credential. */
+    setMainQuotaAccountIdentity(accountIdentity: string | undefined, strict?: boolean): number | undefined;
+    setFallback(accountId: string, entry: QuotaEntry, account: Pick<OAuthAccount, 'authLineageId'> | undefined): void;
+    clearFallback(accountId: string): void;
+    pushMainFromHeaders(mainAccountId: string | undefined, incoming: OAuthQuotaSnapshot): QuotaEntry;
+    pushFallbackFromHeaders(accountId: string, incoming: OAuthQuotaSnapshot, account: Pick<OAuthAccount, 'authLineageId'> | undefined): QuotaEntry | null;
+    refreshMain(mainAccountIdOrAccessToken: string | undefined, accessToken?: string, expectedIdentityGeneration?: number): Promise<OAuthQuotaSnapshot>;
+    refreshMainWithMetadata(mainAccountIdOrAccessToken: string | undefined, accessToken?: string, expectedIdentityGeneration?: number): Promise<QuotaRefreshResult>;
+    refreshFallback(accountId: string, accessToken: string, account: Pick<OAuthAccount, 'authLineageId'> | undefined): Promise<OAuthQuotaSnapshot>;
+    refreshFallbackWithMetadata(accountId: string, accessToken: string, account: Pick<OAuthAccount, 'authLineageId'> | undefined): Promise<QuotaRefreshResult>;
     refreshAllFallbacks(accounts: OAuthAccount[]): Promise<void>;
     /**
      * Fire-and-forget refresh. Does not await, swallows errors.
@@ -73,7 +76,7 @@ export declare class QuotaManager {
     refreshMainInBackground(accessToken: string): void;
     private scopedWindowIsStale;
     isMainStale(modelId?: string): boolean;
-    isFallbackStale(accountId: string, accessToken?: string, modelId?: string): boolean;
+    isFallbackStale(accountId: string, _accessToken?: string, modelId?: string, account?: Pick<OAuthAccount, 'authLineageId'>): boolean;
     shouldRefreshOnRequestCount(requestCount: number): boolean;
     /**
      * Combined check: should a refresh happen right now?
@@ -87,7 +90,7 @@ export declare class QuotaManager {
      * can stop this process from showing "checking…" or making a redundant quota
      * API call.
      */
-    seedMainFromStorage(storage: AccountStorage | null, accessToken?: string): void;
+    seedMainFromStorage(storage: AccountStorage | null, mainAccountId?: string): void;
     private seedMainBackoffFromStorage;
     /**
      * Seed fallback cache entries from persisted account.quota data.
@@ -103,12 +106,18 @@ export declare class QuotaManager {
     /**
      * Whether a specific fallback account's quota API is in backoff.
      */
-    isFallbackBackedOff(accountId: string, accessToken?: string): boolean;
+    isFallbackBackedOff(accountId: string): boolean;
     getLastApiError(): AccountOperationError | undefined;
+    getMainQuotaErrorGeneration(): number;
+    getMainQuotaIdentityGeneration(): number;
+    getMainQuotaErrorClearedAt(): number | undefined;
+    clearMainBackoff(): number | undefined;
     /** Minimum gap between consecutive quota API calls (ms). */
     private static readonly API_CALL_GAP_MS;
     private static fallbackInflightKey;
     private static quotaLockName;
+    private bindFallbackLineage;
+    private acceptFallbackQuotaObservation;
     /**
      * Serialize API calls through a shared gate so only one
      * quota API request runs at a time, with a minimum gap