@cortexkit/anthropic-auth-core 2.4.2 → 2.4.3

package/dist/cachekeep.d.ts

@@ -72,6 +72,7 @@ export type CacheKeepTarget = {
     url: string;
     headers: Record<string, string>;
     bodyText: string;
+    bodyBytes: number;
     cacheExpiresAt: number;
     nextPrewarmAt: number;
     consecutiveFailures: number;
@@ -157,6 +158,7 @@ export declare class CacheKeepManager {
     dropExpiredTargets(now?: number): number | undefined;
     private publishTrackedSessions;
     private totalBodyBytes;
+    private removeTarget;
     private evictOldestTarget;
     private pruneTargets;
     track(input: {
@@ -171,11 +173,10 @@ export declare class CacheKeepManager {
         accountStoragePath?: string;
         isSubagent?: boolean;
     }): {
-        tracked: boolean;
-        reason: string;
+        tracked: true;
     } | {
-        reason?: undefined;
-        tracked: boolean;
+        tracked: false;
+        reason: string;
     };
     prewarmNow(input: {
         sessionId: string;

package/dist/index.js

@@ -687,7 +687,7 @@ var WRITER_LOCK_CONSTANTS = Object.freeze({
 });
 // ../../node_modules/@cortexkit/common-auth/dist/fs/refresh-file-lock.js
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { mkdir as mkdir2, open as open2, readFile as readFile2, rename as rename3, rm as rm2, stat } from "node:fs/promises";
+import { lstat as lstat3, mkdir as mkdir2, open as open2, readFile as readFile2, rename as rename3, rm as rm2, stat } from "node:fs/promises";
 import { dirname as dirname3, join as join2 } from "node:path";
 
 // ../../node_modules/@cortexkit/common-auth/dist/fs/with-lock.js
@@ -747,8 +747,24 @@ async function withLock(target, options, fn) {
 // ../../node_modules/@cortexkit/common-auth/dist/fs/refresh-file-lock.js
 async function createExclusiveText(path, text) {
   const handle = await open2(path, "wx", 384);
+  let createdStat;
+  try {
+    createdStat = await handle.stat();
+  } catch {
+    createdStat = undefined;
+  }
   try {
     await handle.writeFile(text, "utf8");
+  } catch (error) {
+    try {
+      const current = await lstat3(path).catch(() => {
+        return;
+      });
+      if (createdStat && current && current.dev === createdStat.dev && current.ino === createdStat.ino) {
+        await rm2(path, { force: true }).catch(() => {});
+      }
+    } catch {}
+    throw error;
   } finally {
     await handle.close();
   }
@@ -759,6 +775,15 @@ function isLostMarkerRaceError(error) {
   const code = error?.code;
   return code === "ENOENT" || !windowsPrivateFiles && (code === "EINVAL" || code === "ENOTDIR");
 }
+var evictionMarkerTestHooks;
+function sameMarkerDirectory(created, current) {
+  if (created.dev !== current.dev || created.ino !== current.ino)
+    return false;
+  if (created.ino === 0 && created.birthtimeMs !== current.birthtimeMs)
+    return false;
+  return true;
+}
+var OWNERLESS_MARKER_GRACE_MS = 1000;
 function acquireRefreshFileLock(options) {
   return acquireRefreshFileLockWithClock({ ...options, now: Date.now });
 }
@@ -1005,12 +1030,47 @@ async function acquireRefreshFileLockWithClock(options) {
       await removeLeaseObject(evictPath);
     }
   }
+  async function removeOwnMarkerAfterFailedOwnerWrite(created) {
+    if (!created)
+      return false;
+    let current;
+    try {
+      const st = await lstat3(evictPath);
+      current = { dev: st.dev, ino: st.ino, birthtimeMs: st.birthtimeMs };
+    } catch {
+      return false;
+    }
+    if (!sameMarkerDirectory(created, current))
+      return false;
+    try {
+      await stat(evictOwnerPath);
+      return true;
+    } catch (error) {
+      if (error.code !== "ENOENT")
+        return true;
+    }
+    try {
+      await removeLeaseObject(evictPath);
+    } catch {}
+    return true;
+  }
   async function tryAcquireEvictionMarker() {
     if (windowsPrivateFiles)
       await createPrivateDirectoryExclusive(evictPath);
     else
       await mkdir2(evictPath);
+    let created;
+    try {
+      const st = await lstat3(evictPath);
+      created = { dev: st.dev, ino: st.ino, birthtimeMs: st.birthtimeMs };
+    } catch {
+      created = undefined;
+    }
     try {
+      await evictionMarkerTestHooks?.beforeOwnerWrite?.(evictPath, evictOwnerPath);
+      const injected = await evictionMarkerTestHooks?.failOwnerWrite?.(evictPath, evictOwnerPath);
+      if (injected !== undefined)
+        throw injected;
       const bytes = `${JSON.stringify({ ownerId: evictOwnerId, createdAt: now() })}
 `;
       if (windowsPrivateFiles)
@@ -1018,9 +1078,12 @@ async function acquireRefreshFileLockWithClock(options) {
       else
         await createExclusiveText(evictOwnerPath, bytes);
     } catch (error) {
-      if (isLostMarkerRaceError(error))
+      const stillOurs = await removeOwnMarkerAfterFailedOwnerWrite(created);
+      if (isLostMarkerRaceError(error) && !stillOurs)
         return false;
-      await releaseEvictionMarker();
+      try {
+        await releaseEvictionMarker();
+      } catch {}
       throw error;
     }
     if (options.onStep)
@@ -1045,8 +1108,21 @@ async function acquireRefreshFileLockWithClock(options) {
         throw error;
       }
     }
-    if (evictStat.mtimeMs + EVICT_TTL > now())
-      return "fresh";
+    if (evictStat.mtimeMs + EVICT_TTL > now()) {
+      let hasOwner = true;
+      try {
+        await stat(evictOwnerPath);
+      } catch (error) {
+        if (error.code === "ENOENT")
+          hasOwner = false;
+        else
+          return "fresh";
+      }
+      if (hasOwner)
+        return "fresh";
+      if (evictStat.mtimeMs + OWNERLESS_MARKER_GRACE_MS > now())
+        return "fresh";
+    }
     if (options.onStep)
       await options.onStep("stale-marker-stat");
     const claimedPath = `${evictPath}.${randomUUID3()}`;
@@ -1317,7 +1393,9 @@ async function acquireRefreshFileLockWithClock(options) {
       released = true;
       cancelRenewalTimer();
       await renewalInFlight;
-      for (let attempt = 0;attempt < MAX_STEAL_ATTEMPTS; attempt++) {
+      const deadline = performance.now() + EVICT_TTL + 1000;
+      let delayMs = 5;
+      for (;; ) {
         try {
           let removalConfirmed = false;
           const markerAcquired = await withEvictionMarker(async () => {
@@ -1356,7 +1434,11 @@ async function acquireRefreshFileLockWithClock(options) {
             throw error;
           return;
         }
-        await backoff();
+        const remainingMs = deadline - performance.now();
+        if (remainingMs <= 0)
+          break;
+        await new Promise((resolve3) => setTimeout(resolve3, Math.min(delayMs, remainingMs)));
+        delayMs = Math.min(delayMs * 2, 50);
       }
       if (windowsPrivateFiles)
         throw new PrivateFileError(lockPath, "release-not-confirmed", {
@@ -5873,7 +5955,7 @@ function claudeCodeEntrypoint() {
 // src/dump.ts
 import { createHash as createHash4, randomBytes as randomBytes3 } from "node:crypto";
 import {
-  lstat as lstat3,
+  lstat as lstat4,
   mkdir as mkdir6,
   readdir,
   readFile as readFile6,
@@ -6244,7 +6326,7 @@ async function sweepDumpDirectory(options) {
   if (!isConfiguredDumpDirectory(dumpDir) || maxBytes <= 0)
     return emptyResult;
   try {
-    const dumpDirStats = await lstat3(dumpDir);
+    const dumpDirStats = await lstat4(dumpDir);
     if (dumpDirStats.isSymbolicLink())
       return emptyResult;
     const protectedPaths = new Set((options.protectedPaths ?? []).map((path2) => resolve4(path2)));
@@ -6258,7 +6340,7 @@ async function sweepDumpDirectory(options) {
         return;
       const path2 = join9(dumpDir, entry.name);
       try {
-        const stats = await lstat3(path2);
+        const stats = await lstat4(path2);
         if (!stats.isFile() || stats.isSymbolicLink())
           return;
         files.push({
@@ -6463,7 +6545,7 @@ async function loadLatestDumpBody(input) {
     try {
       const path2 = join9(dumpDir, candidate.name);
       const metadataPath = path2.replace(/\.body\.json$/, ".meta.json");
-      if (!(await lstat3(path2)).isFile())
+      if (!(await lstat4(path2)).isFile())
         continue;
       const metadata = JSON.parse(await readFile6(metadataPath, "utf8"));
       if (metadata.session !== shortAffinity(affinity) || (candidate.tag === null ? metadata.tag != null : metadata.tag !== candidate.tag)) {
@@ -8187,7 +8269,7 @@ var CACHE_KEEP_PREWARM_LEAD_MS = 5 * 60000;
 var CACHE_KEEP_TICK_MS = 60000;
 var CACHE_KEEP_EXTENDED_TTL_BETA = "extended-cache-ttl-2025-04-11";
 var CACHE_KEEP_MAX_TARGETS = 32;
-var CACHE_KEEP_MAX_BODY_BYTES = 16 * 1024 * 1024;
+var CACHE_KEEP_MAX_BODY_BYTES = 64 * 1024 * 1024;
 var CACHE_KEEP_PREWARM_TIMEOUT_MS = 30000;
 var CACHE_KEEP_RETRY_BASE_MS = 60000;
 var CACHE_KEEP_RETRY_MAX_MS = 15 * 60000;
@@ -8487,47 +8569,92 @@ class CacheKeepManager {
     }
   }
   totalBodyBytes() {
-    return [...this.targets.values()].reduce((sum, target) => sum + target.bodyText.length, 0);
+    return [...this.targets.values()].reduce((sum, target) => sum + target.bodyBytes, 0);
   }
-  evictOldestTarget() {
-    const oldest = this.targets.keys().next().value;
-    if (oldest !== undefined)
-      this.targets.delete(oldest);
+  removeTarget(target, reason, now, details = {}) {
+    if (this.targets.get(target.id) !== target)
+      return;
+    if (now < target.cacheExpiresAt)
+      logger.warn("cachekeep", "stopped warming session", {
+        session: target.id,
+        reason,
+        bodyBytes: target.bodyBytes,
+        totalBodyBytes: this.totalBodyBytes(),
+        budgetBytes: CACHE_KEEP_MAX_BODY_BYTES,
+        targets: this.targets.size,
+        maxTargets: CACHE_KEEP_MAX_TARGETS,
+        cacheExpiresAt: target.cacheExpiresAt,
+        nextPrewarmAt: target.nextPrewarmAt,
+        ...details
+      });
+    this.targets.delete(target.id);
+  }
+  evictOldestTarget(now, reason) {
+    const oldest = this.targets.values().next().value;
+    if (!oldest)
+      return;
+    const target = [...this.targets.values()].find((candidate) => candidate.nextPrewarmAt > now + 60000) ?? oldest;
+    this.removeTarget(target, reason, now, {
+      detail: "evicted by cachekeep limits",
+      ...target !== oldest && { selection: "imminent-protected" }
+    });
   }
   pruneTargets(now, today) {
     for (const [id, target] of this.targets) {
       if (today && target.dayKey !== today) {
-        this.targets.delete(id);
+        this.removeTarget(target, "schedule-period-ended", now);
         continue;
       }
       if (now >= target.cacheExpiresAt)
         this.targets.delete(id);
     }
     while (this.targets.size > CACHE_KEEP_MAX_TARGETS)
-      this.evictOldestTarget();
+      this.evictOldestTarget(now, "count");
     while (this.totalBodyBytes() > CACHE_KEEP_MAX_BODY_BYTES) {
       const before = this.targets.size;
-      this.evictOldestTarget();
+      this.evictOldestTarget(now, "budget");
       if (this.targets.size === before)
         break;
     }
   }
   track(input) {
+    const now = this.options.now?.() ?? Date.now();
+    let bodyBytes;
+    const refuse = (reason, reasonCode) => {
+      if (reasonCode === "body-budget")
+        logger.warn("cachekeep", "tracking skipped", {
+          session: input.sessionId ?? null,
+          reason: reasonCode,
+          detail: reason,
+          bodyBytes,
+          totalBodyBytes: this.totalBodyBytes(),
+          budgetBytes: CACHE_KEEP_MAX_BODY_BYTES,
+          targets: this.targets.size,
+          maxTargets: CACHE_KEEP_MAX_TARGETS,
+          cacheExpiresAt: input.sessionId ? this.targets.get(input.sessionId)?.cacheExpiresAt : undefined
+        });
+      else
+        logger.debug("cachekeep", "tracking skipped", {
+          session: input.sessionId ?? null,
+          reason: reasonCode
+        });
+      return { tracked: false, reason };
+    };
     if (!input.sessionId)
-      return { tracked: false, reason: "missing session id" };
+      return refuse("missing session id", "missing-session");
     if (!isCacheKeepPersistentlyEnabled(input.storage)) {
-      return { tracked: false, reason: "cachekeep disabled" };
+      return refuse("cachekeep disabled", "disabled");
     }
     if (input.cacheMode !== "hybrid") {
-      return { tracked: false, reason: "cache mode is not hybrid" };
+      return refuse("cache mode is not hybrid", "not-hybrid");
     }
-    if (input.bodyText.length > CACHE_KEEP_MAX_BODY_BYTES) {
-      return { tracked: false, reason: "body exceeds cachekeep memory budget" };
+    bodyBytes = Buffer.byteLength(input.bodyText, "utf8");
+    if (bodyBytes > CACHE_KEEP_MAX_BODY_BYTES) {
+      return refuse("body exceeds cachekeep memory budget", "body-budget");
     }
-    const now = this.options.now?.() ?? Date.now();
     const window = getCacheKeepWindow(input.storage);
     if (!isCacheKeepActiveNow(input.storage, new Date(now))) {
-      return { tracked: false, reason: "outside configured schedule" };
+      return refuse("outside configured schedule", "outside-schedule");
     }
     const today = cacheKeepPeriodKey(input.storage, window, new Date(now));
     this.pruneTargets(now, today);
@@ -8542,6 +8669,7 @@ class CacheKeepManager {
       url: input.url,
       headers,
       bodyText: input.bodyText,
+      bodyBytes,
       cacheExpiresAt: now + CACHE_KEEP_TTL_MS,
       nextPrewarmAt: now + CACHE_KEEP_TTL_MS - CACHE_KEEP_PREWARM_LEAD_MS,
       consecutiveFailures: 0,
@@ -8553,6 +8681,8 @@ class CacheKeepManager {
     });
     this.pruneTargets(now, today);
     this.publishTrackedSessions();
+    if (!this.targets.has(input.sessionId))
+      return { tracked: false, reason: "evicted by cachekeep limits" };
     this.start();
     return { tracked: true };
   }
@@ -8566,6 +8696,7 @@ class CacheKeepManager {
       url: input.url,
       headers,
       bodyText: input.bodyText,
+      bodyBytes: Buffer.byteLength(input.bodyText, "utf8"),
       cacheExpiresAt: this.options.now?.() ?? Date.now(),
       nextPrewarmAt: this.options.now?.() ?? Date.now(),
       consecutiveFailures: 0,
@@ -8766,11 +8897,7 @@ class CacheKeepManager {
     const result = await this.sendPrewarm(target);
     if (!result.ok) {
       if (result.status == null && !result.transient) {
-        logger.debug("cachekeep", "prewarm skipped", {
-          session: target.id,
-          reason: result.reason
-        });
-        this.targets.delete(target.id);
+        this.removeTarget(target, result.reason === "body is not valid JSON" ? "invalid-json" : "no-breakpoints", now, { detail: result.reason });
       } else {
         logger.warn("cachekeep", "prewarm failed", {
           session: target.id,
@@ -8812,7 +8939,7 @@ import { join as join19 } from "node:path";
 import { execFile } from "node:child_process";
 import { randomUUID as randomUUID13 } from "node:crypto";
 import { readFileSync as readFileSync2 } from "node:fs";
-import { lstat as lstat11, mkdir as mkdir9, readFile as readFile11 } from "node:fs/promises";
+import { lstat as lstat12, mkdir as mkdir9, readFile as readFile11 } from "node:fs/promises";
 import { basename as basename8, dirname as dirname16, join as join18 } from "node:path";
 
 // src/native-lock-observer.ts
@@ -13558,7 +13685,7 @@ function isOpenAIReasoningSignature(value) {
 }
 
 // src/native-vault-seed.ts
-import { lstat as lstat6, readFile as readFile7 } from "node:fs/promises";
+import { lstat as lstat7, readFile as readFile7 } from "node:fs/promises";
 
 // src/native-migration-source.ts
 import { createHash as createHash13 } from "node:crypto";
@@ -17476,7 +17603,7 @@ var nativeQuotaCodec = {
 // src/native-runtime.ts
 import { randomUUID as randomUUID10 } from "node:crypto";
 import { constants as constants2 } from "node:fs";
-import { lstat as lstat5, mkdir as mkdir7, open as open7, rename as rename9, rm as rm5 } from "node:fs/promises";
+import { lstat as lstat6, mkdir as mkdir7, open as open7, rename as rename9, rm as rm5 } from "node:fs/promises";
 import { basename as basename4, dirname as dirname11, isAbsolute as isAbsolute3, join as join12 } from "node:path";
 import { types as utilTypes5 } from "node:util";
 
@@ -17564,7 +17691,7 @@ function nativeLocalCredentialValidationMatches(validation, binding, material) {
 }
 
 // src/owner-only.ts
-import { lstat as lstat4 } from "node:fs/promises";
+import { lstat as lstat5 } from "node:fs/promises";
 import { dirname as dirname10 } from "node:path";
 import { types as utilTypes3 } from "node:util";
 async function windowsBackend(options) {
@@ -17631,7 +17758,7 @@ async function ensureWindowsOwnerOnlyDirectory(path2, options = {}) {
   };
   async function exists(directory) {
     try {
-      const metadata = await lstat4(directory);
+      const metadata = await lstat5(directory);
       if (metadata.isSymbolicLink())
         throw refused("verify", "reparse-point");
       if (!metadata.isDirectory())
@@ -18035,7 +18162,7 @@ async function readNativeRuntime(path2, storageId, ownership = {}) {
   const noFollow = constants2.O_NOFOLLOW ?? 0;
   try {
     for (let attempt = 0;attempt < 2; attempt++) {
-      const info = await lstat5(path2);
+      const info = await lstat6(path2);
       if (!info.isFile() || !await isOwnerOnly(path2, () => (info.mode & 511) === 384 && (typeof process.geteuid !== "function" || info.uid === process.geteuid()), ownership))
         throw new NativeRuntimeError("unsafe-runtime");
       const file = await open7(path2, constants2.O_RDONLY | noFollow);
@@ -19101,7 +19228,7 @@ async function readNativeVaultLegacyJson(path2) {
 }
 async function nativeVaultFileAbsent(path2) {
   try {
-    await lstat6(path2);
+    await lstat7(path2);
     return false;
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT")
@@ -20032,10 +20159,10 @@ function nativeVaultPaths(local, layout = stateLayoutOfPaths(local)) {
 }
 
 // src/relocation-guard.ts
-import { lstat as lstat10 } from "node:fs/promises";
+import { lstat as lstat11 } from "node:fs/promises";
 
 // src/state-home-serving-guard.ts
-import { lstat as lstat9 } from "node:fs/promises";
+import { lstat as lstat10 } from "node:fs/promises";
 import { dirname as dirname15, join as join17 } from "node:path";
 
 // src/state-layout-errors.ts
@@ -20086,9 +20213,8 @@ function stateLayoutMovedElsewhere(configDir, relocatedTo, stateRoot) {
 
 // src/state-layout-io.ts
 import { createHash as createHash17 } from "node:crypto";
-import { constants as constants3 } from "node:fs";
 import {
-  lstat as lstat7,
+  lstat as lstat8,
   open as open8,
   readFile as readFile9,
   rename as renameFile,
@@ -20130,7 +20256,7 @@ function sha256Hex(bytes) {
 }
 async function digestFile(path2) {
   try {
-    const info = await lstat7(path2);
+    const info = await lstat8(path2);
     if (!info.isFile())
       throw new Error(`anthropic-auth state file ${path2} is not a regular file`);
     return { status: "file", sha256: sha256Hex(await readFile9(path2)) };
@@ -20144,9 +20270,15 @@ async function fileSha256(path2) {
   const digest2 = await digestFile(path2);
   return digest2.status === "file" ? digest2.sha256 : null;
 }
-async function writeOwnerOnlyExclusive(path2, bytes, platform) {
-  const nativeCreated = platform === "win32" ? await createWindowsOwnerOnly(path2, "") : false;
-  const handle = await open8(path2, nativeCreated ? constants3.O_RDWR | constants3.O_TRUNC : "wx", 384);
+async function writeOwnerOnlyExclusive(path2, bytes, platform, options = {}) {
+  if (platform === "win32") {
+    await createWindowsOwnerOnly(path2, bytes, {
+      ...options.ownership,
+      platform
+    });
+    return;
+  }
+  const handle = await (options.open ?? open8)(path2, "wx", 384);
   try {
     await handle.writeFile(bytes);
     await handle.sync();
@@ -20258,7 +20390,7 @@ class StateLayoutLockStack {
 
 // src/state-layout-record.ts
 import { randomUUID as randomUUID12 } from "node:crypto";
-import { lstat as lstat8, readFile as readFile10, unlink as unlink5 } from "node:fs/promises";
+import { lstat as lstat9, readFile as readFile10, unlink as unlink5 } from "node:fs/promises";
 import { join as join16 } from "node:path";
 var RELOCATION_ROLES = [
   "localPoolState",
@@ -20447,7 +20579,7 @@ async function readStateLayoutRecord(sub) {
   const path2 = layoutRecordPath(sub);
   let bytes;
   try {
-    const info = await lstat8(path2);
+    const info = await lstat9(path2);
     if (!info.isFile() || info.size > 4 * 1024 * 1024)
       throw new StateLayoutFileError("invalid", path2);
     bytes = await readFile10(path2, "utf8");
@@ -20543,7 +20675,7 @@ async function warnReappearedMetadata(record8) {
 }
 async function identityOf(path2) {
   try {
-    const info = await lstat9(path2, { bigint: true });
+    const info = await lstat10(path2, { bigint: true });
     return `${info.dev}:${info.ino}:${info.size}:${info.mtimeNs}:${info.ctimeNs}`;
   } catch (error) {
     if (error?.code === "ENOENT")
@@ -20715,7 +20847,7 @@ var reported2 = new Set;
 async function pointerAt(path2) {
   let info;
   try {
-    info = await lstat10(path2, { bigint: true });
+    info = await lstat11(path2, { bigint: true });
   } catch {
     observations2.delete(path2);
     return;
@@ -20945,7 +21077,7 @@ function sameRegistration(value, entry2) {
 async function readHolderFile(path2) {
   let text5;
   try {
-    const info = await lstat11(path2);
+    const info = await lstat12(path2);
     if (!info.isFile() || info.size > HOLDER_FILE_MAX_BYTES)
       throw new HolderRegistrationError("malformed", dirname16(path2));
     text5 = await readFile11(path2, "utf8");
@@ -20966,7 +21098,7 @@ async function readHolderFile(path2) {
 }
 async function exists2(path2) {
   try {
-    await lstat11(path2);
+    await lstat12(path2);
     return true;
   } catch {
     return false;
@@ -21015,7 +21147,7 @@ async function ensureHolderDirectory(dir, ownerOnly = {}) {
     return;
   }
   try {
-    await lstat11(dir);
+    await lstat12(dir);
     return;
   } catch (error) {
     if (error?.code !== "ENOENT")
@@ -24734,8 +24866,8 @@ import { isAbsolute as isAbsolute5, normalize, parse as parse3, sep } from "node
 
 // src/migration-source.ts
 import { createHash as createHash20 } from "node:crypto";
-import { constants as constants4 } from "node:fs";
-import { lstat as lstat12, open as open10 } from "node:fs/promises";
+import { constants as constants3 } from "node:fs";
+import { lstat as lstat13, open as open10 } from "node:fs/promises";
 class NativeMigrationSourceError extends Error {
   role;
   code;
@@ -24778,7 +24910,7 @@ async function readNativeMigrationSource(role, path2, hooks = {}) {
   });
   let initial;
   try {
-    initial = await lstat12(path2, { bigint: true });
+    initial = await lstat13(path2, { bigint: true });
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT")
       return missing2;
@@ -24788,7 +24920,7 @@ async function readNativeMigrationSource(role, path2, hooks = {}) {
     throw new NativeMigrationSourceError(role, "unsafe-source");
   let handle;
   try {
-    handle = await open10(path2, constants4.O_RDONLY | (constants4.O_NOFOLLOW ?? 0) | (constants4.O_NONBLOCK ?? 0));
+    handle = await open10(path2, constants3.O_RDONLY | (constants3.O_NOFOLLOW ?? 0) | (constants3.O_NONBLOCK ?? 0));
     const before = await handle.stat({ bigint: true });
     if (!before.isFile() || before.dev !== initial.dev || before.ino !== initial.ino) {
       throw new NativeMigrationSourceError(role, "source-changed");
@@ -24816,7 +24948,7 @@ async function readNativeMigrationSource(role, path2, hooks = {}) {
       chunks.push(chunk.subarray(0, read.bytesRead));
     }
     const after = await handle.stat({ bigint: true });
-    const current = await lstat12(path2, { bigint: true });
+    const current = await lstat13(path2, { bigint: true });
     if (before.uid !== after.uid || before.gid !== after.gid || before.mode !== after.mode || current.uid !== before.uid || current.gid !== before.gid || current.mode !== before.mode || before.dev !== after.dev || before.ino !== after.ino || before.mtimeNs !== after.mtimeNs || before.ctimeNs !== after.ctimeNs || before.size !== after.size || current.dev !== before.dev || current.ino !== before.ino || current.isSymbolicLink() || current.mtimeNs !== before.mtimeNs || current.ctimeNs !== before.ctimeNs || current.size !== before.size || BigInt(bytes) !== before.size) {
       throw new NativeMigrationSourceError(role, "source-changed");
     }
@@ -30828,7 +30960,7 @@ function relayGeneration(input) {
 }
 // src/native-host-auth-write.ts
 import { randomUUID as randomUUID18 } from "node:crypto";
-import { lstat as lstat13, open as open11, rename as rename13, unlink as unlink7 } from "node:fs/promises";
+import { lstat as lstat14, open as open11, rename as rename13, unlink as unlink7 } from "node:fs/promises";
 import { dirname as dirname18, isAbsolute as isAbsolute6, join as join21 } from "node:path";
 class NativeHostAuthWriteError extends Error {
   code;
@@ -30940,7 +31072,7 @@ async function writeNativeHostAuth(input, hooks = {}) {
   } finally {
     if (stage && ownedStage) {
       try {
-        const current = await lstat13(stage);
+        const current = await lstat14(stage);
         if (current.dev === ownedStage.dev && current.ino === ownedStage.ino)
           await unlink7(stage);
       } catch {}
@@ -30950,7 +31082,7 @@ async function writeNativeHostAuth(input, hooks = {}) {
 
 // src/native-migration.ts
 import { createHash as createHash22 } from "node:crypto";
-import { lstat as lstat14, mkdir as mkdir12, unlink as unlink8 } from "node:fs/promises";
+import { lstat as lstat15, mkdir as mkdir12, unlink as unlink8 } from "node:fs/promises";
 import { dirname as dirname19, isAbsolute as isAbsolute7 } from "node:path";
 class NativeMigrationError extends Error {
   code;
@@ -31000,7 +31132,7 @@ function owned(snapshot) {
 }
 async function absent(path2) {
   try {
-    await lstat14(path2);
+    await lstat15(path2);
     return false;
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT")
@@ -34174,8 +34306,8 @@ function placeholderSecret(integrationID) {
 var MAX_RETRY_HOLD_MS = 20 * 60 * 1000;
 // ../../node_modules/@cortexkit/common-auth/dist/pi-slot/slot.js
 import { createHash as createHash23 } from "node:crypto";
-import { constants as constants5 } from "node:fs";
-import { lstat as lstat15, mkdir as mkdir14, open as open12, unlink as unlink9 } from "node:fs/promises";
+import { constants as constants4 } from "node:fs";
+import { lstat as lstat16, mkdir as mkdir14, open as open12, unlink as unlink9 } from "node:fs/promises";
 import { dirname as dirname20, resolve as resolve13 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 
@@ -34236,6 +34368,13 @@ async function acquire(path2, stale) {
     await remove(path2);
     return acquire(path2, 0);
   }
+  let created;
+  try {
+    const st = await stat10(path2);
+    created = { dev: st.dev, ino: st.ino };
+  } catch {
+    created = undefined;
+  }
   try {
     if (!precision) {
       const probe2 = new Date(Math.ceil(Date.now() / 1000) * 1000 + 5);
@@ -34246,7 +34385,15 @@ async function acquire(path2, stale) {
     precision ??= mtime % 1000 === 0 ? "s" : "ms";
     return { dev: observed.dev, ino: observed.ino, mtime };
   } catch (error) {
-    await remove(path2).catch(() => {});
+    try {
+      if (created) {
+        const current = await stat10(path2).catch(() => {
+          return;
+        });
+        if (current && current.dev === created.dev && current.ino === created.ino)
+          await remove(path2).catch(() => {});
+      }
+    } catch {}
     throw error;
   }
 }
@@ -34459,13 +34606,13 @@ async function safeRead(path2, privateFile = false, afterReadCheck) {
   }
   let file;
   try {
-    file = await open12(path2, constants5.O_RDONLY | constants5.O_NOFOLLOW);
+    file = await open12(path2, constants4.O_RDONLY | constants4.O_NOFOLLOW);
     const stat11 = await file.stat();
     if (!stat11.isFile() || privateFile && (stat11.mode & 511) !== 384) {
       throw new PiSlotError("unsafe-path");
     }
     await afterReadCheck?.(path2);
-    const current = await lstat15(path2);
+    const current = await lstat16(path2);
     if (!current.isFile() || current.dev !== stat11.dev || current.ino !== stat11.ino) {
       throw new PiSlotError("unsafe-path");
     }
@@ -34663,7 +34810,7 @@ function createPiSlot(options, onStep, hooks) {
           await ensurePrivateDirectory(dirname20(stashPath));
         else {
           await mkdir14(dirname20(stashPath), { recursive: true, mode: 448 });
-          const dir = await lstat15(dirname20(stashPath));
+          const dir = await lstat16(dirname20(stashPath));
           if (!dir.isDirectory() || (dir.mode & 511) !== 448)
             throw new PiSlotError("unsafe-path");
         }
@@ -35447,7 +35594,7 @@ class PrimeManager {
 import { randomUUID as randomUUID19 } from "node:crypto";
 import {
   chmod as chmod3,
-  lstat as lstat16,
+  lstat as lstat17,
   mkdir as mkdir16,
   readdir as readdir5,
   readFile as readFile13,
@@ -35689,7 +35836,7 @@ class QuotaHeaderFeedRegistry {
         if (file.mtimeMs > now || now - file.mtimeMs < leaseMs)
           return;
         await this.options.beforeRemoveFile?.(path2);
-        const current = await lstat16(path2);
+        const current = await lstat17(path2);
         if (current.ino !== file.ino || current.mtimeMs !== file.mtimeMs)
           return;
         await (this.options.removeFile ?? ((target2) => rm9(target2)))(path2);
@@ -36546,7 +36693,7 @@ function describeFenceBlocker(blocker) {
 
 // src/state-layout-move.ts
 import { randomUUID as randomUUID20 } from "node:crypto";
-import { lstat as lstat17, readdir as readdir7, readFile as readFile16, stat as stat13, unlink as unlink10 } from "node:fs/promises";
+import { lstat as lstat18, readdir as readdir7, readFile as readFile16, stat as stat13, unlink as unlink10 } from "node:fs/promises";
 import { basename as basename12, dirname as dirname23, join as join27, sep as sep2 } from "node:path";
 var ACCOUNT_FILE = "anthropic-auth.json";
 var ACCOUNT_STATE_FILE = "anthropic-auth-state.json";
@@ -36779,6 +36926,15 @@ async function acquireDataLocks(dataset, ctx, options = {}) {
         local: poolRefreshLocks(localPool(dataset), await poolRows(localPool(dataset))),
         vault: poolRefreshLocks(vaultPool(dataset), await poolRows(vaultPool(dataset)))
       } : undefined;
+      if (ctx.fs.platform === "win32" && refresh) {
+        for (const [pool, locks] of [
+          ["local", refresh.local],
+          ["vault", refresh.vault]
+        ]) {
+          if (locks.rows.some((name) => name.includes("*")))
+            throw new Error(`the ${pool} pool has a row id or identity whose refresh lock name contains '*', which Windows filenames do not allow`);
+        }
+      }
       for (const spec of stateLayoutDataLockOrder(dataset, {
         timeoutMs,
         refresh
@@ -36828,7 +36984,7 @@ function restoringPath(path2, attempt) {
 }
 async function exists3(path2) {
   try {
-    await lstat17(path2);
+    await lstat18(path2);
     return true;
   } catch (error) {
     if (errorCode6(error) === "ENOENT")
@@ -36838,7 +36994,7 @@ async function exists3(path2) {
 }
 async function removeOwnStaging(path2) {
   try {
-    const info = await lstat17(path2);
+    const info = await lstat18(path2);
     if (info.isFile())
       await unlink10(path2);
   } catch (error) {
@@ -36881,7 +37037,7 @@ async function movePreconditionFailure(dataset, platform) {
     for (const path2 of new Set([slot.configured, slot.from])) {
       let info;
       try {
-        info = await lstat17(path2);
+        info = await lstat18(path2);
       } catch (error) {
         if (errorCode6(error) === "ENOENT")
           continue;
@@ -36898,7 +37054,7 @@ async function movePreconditionFailure(dataset, platform) {
     anyOld ||= fromExists;
     if (await exists3(slot.to)) {
       if (fromExists) {
-        const [a, b] = await Promise.all([lstat17(slot.from), lstat17(slot.to)]);
+        const [a, b] = await Promise.all([lstat18(slot.from), lstat18(slot.to)]);
         if (a.dev === b.dev && a.ino === b.ino)
           return `${slot.from} and ${slot.to} are the same file`;
       }

package/dist/internal-types/fs/refresh-file-lock.d.ts

@@ -1,4 +1,17 @@
 export declare function isLostMarkerRaceError(error: unknown): boolean;
+/** Test-only fault injection between marker mkdir and owner.json write. */
+export interface EvictionMarkerTestHooks {
+    /** Runs after the exclusive mkdir (and identity capture) before owner write. */
+    beforeOwnerWrite?: (evictPath: string, ownerPath: string) => Promise<void> | void;
+    /** Throw to fail the owner write; return an error to throw it. */
+    failOwnerWrite?: (evictPath: string, ownerPath: string) => Promise<unknown> | unknown;
+}
+/**
+ * Tests only: inject a failure or a directory replacement between the
+ * eviction-marker mkdir and its owner.json write. Production never sets this.
+ * Not exported from the fs entry point, so it is not part of the public API.
+ */
+export declare function setEvictionMarkerTestHooksForTest(hooks?: EvictionMarkerTestHooks): void;
 export interface LockLoss {
     readonly reason: 'taken-over' | 'expired' | 'unreadable' | 'renewal-failed' | 'marker-lost';
     readonly expectedOwnerId: string;

package/dist/owner-only.d.ts

@@ -11,7 +11,7 @@ export declare function readWindowsOwnerOnly(path: string, options?: OwnerOnlyOp
 /** Ancestors protect directory entries; they need not themselves be private. */
 export declare function isSafeWindowsParent(path: string, options?: OwnerOnlyOptions): Promise<boolean | undefined>;
 /** Native creation establishes a protected DACL before any bytes are written. */
-export declare function createWindowsOwnerOnly(path: string, bytes: string, options?: OwnerOnlyOptions): Promise<boolean>;
+export declare function createWindowsOwnerOnly(path: string, bytes: string | Uint8Array, options?: OwnerOnlyOptions): Promise<boolean>;
 /**
  * Create only missing Windows directories; never tighten an existing shared directory.
  * Returns false off Windows so callers retain their POSIX directory policy.

package/dist/state-layout-io.d.ts

@@ -1,4 +1,6 @@
+import { open } from 'node:fs/promises';
 import { type NativeLockEvent } from './native-lock-observer.ts';
+import { type OwnerOnlyOptions } from './owner-only.ts';
 /**
  * The filesystem calls a layout transition makes, so tests can fail one, drop
  * one, or record their order. Production uses `node:fs`.
@@ -51,7 +53,10 @@ export declare function fileSha256(path: string): Promise<string | null>;
  * protected owner-only DACL before any byte is written. The file never exists
  * with wider permissions, so no later `chmod` is needed.
  */
-export declare function writeOwnerOnlyExclusive(path: string, bytes: Uint8Array, platform: NodeJS.Platform): Promise<void>;
+export declare function writeOwnerOnlyExclusive(path: string, bytes: Uint8Array, platform: NodeJS.Platform, options?: {
+    ownership?: OwnerOnlyOptions;
+    open?: typeof open;
+}): Promise<void>;
 /** A target changed between the check before a destructive step and the step. */
 export declare class StateLayoutOwnershipError extends Error {
     readonly path: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/anthropic-auth-core",
-  "version": "2.4.2",
+  "version": "2.4.3",
   "type": "module",
   "repository": {
     "type": "git",
@@ -30,11 +30,11 @@
     "prepublishOnly": "bun run build"
   },
   "devDependencies": {
-    "@cortexkit/common-auth": "0.28.0"
+    "@cortexkit/common-auth": "0.29.0"
   },
   "dependencies": {
     "@cortexkit/claustrum-client": "0.13.0",
-    "@cortexkit/private-files": "0.2.1",
+    "@cortexkit/private-files": "0.2.2",
     "@cortexkit/subc-client": "^0.22.10",
     "jsonc-parser": "^3.3.1",
     "xxhash-wasm": "^1.1.0"