@cortexkit/anthropic-auth-core 2.4.2 → 2.4.4

package/dist/internal-types/fs/refresh-file-lock.d.ts

@@ -1,4 +1,17 @@
 export declare function isLostMarkerRaceError(error: unknown): boolean;
+/** Test-only fault injection between marker mkdir and owner.json write. */
+export interface EvictionMarkerTestHooks {
+    /** Runs after the exclusive mkdir (and identity capture) before owner write. */
+    beforeOwnerWrite?: (evictPath: string, ownerPath: string) => Promise<void> | void;
+    /** Throw to fail the owner write; return an error to throw it. */
+    failOwnerWrite?: (evictPath: string, ownerPath: string) => Promise<unknown> | unknown;
+}
+/**
+ * Tests only: inject a failure or a directory replacement between the
+ * eviction-marker mkdir and its owner.json write. Production never sets this.
+ * Not exported from the fs entry point, so it is not part of the public API.
+ */
+export declare function setEvictionMarkerTestHooksForTest(hooks?: EvictionMarkerTestHooks): void;
 export interface LockLoss {
     readonly reason: 'taken-over' | 'expired' | 'unreadable' | 'renewal-failed' | 'marker-lost';
     readonly expectedOwnerId: string;

package/dist/native-account-refusal.d.ts

@@ -0,0 +1,11 @@
+import type { NativeRefreshResult } from './native-refresh-coordinator.ts';
+export type NativeAccountRefusalReason = 'account-policy' | 'account-unavailable' | 'credential-changed';
+/** A closed, credential-free refusal that retrying a background send cannot fix. */
+export declare class NativeAccountRefusal extends Error {
+    readonly reason: NativeAccountRefusalReason;
+    constructor(reason: NativeAccountRefusalReason);
+}
+/** Unknown failures and vault outages retain the caller's existing retry policy. */
+export declare function nativeAccountRefusal(error: unknown): NativeAccountRefusal | undefined;
+/** Refresh/validation backoff and failed I/O are not permanent account refusals. */
+export declare function nativeLocalAccountRefusal(result: NativeRefreshResult): NativeAccountRefusal | undefined;

package/dist/owner-only.d.ts

@@ -11,7 +11,7 @@ export declare function readWindowsOwnerOnly(path: string, options?: OwnerOnlyOp
 /** Ancestors protect directory entries; they need not themselves be private. */
 export declare function isSafeWindowsParent(path: string, options?: OwnerOnlyOptions): Promise<boolean | undefined>;
 /** Native creation establishes a protected DACL before any bytes are written. */
-export declare function createWindowsOwnerOnly(path: string, bytes: string, options?: OwnerOnlyOptions): Promise<boolean>;
+export declare function createWindowsOwnerOnly(path: string, bytes: string | Uint8Array, options?: OwnerOnlyOptions): Promise<boolean>;
 /**
  * Create only missing Windows directories; never tighten an existing shared directory.
  * Returns false off Windows so callers retain their POSIX directory policy.

package/dist/state-layout-io.d.ts

@@ -1,4 +1,6 @@
+import { open } from 'node:fs/promises';
 import { type NativeLockEvent } from './native-lock-observer.ts';
+import { type OwnerOnlyOptions } from './owner-only.ts';
 /**
  * The filesystem calls a layout transition makes, so tests can fail one, drop
  * one, or record their order. Production uses `node:fs`.
@@ -51,7 +53,10 @@ export declare function fileSha256(path: string): Promise<string | null>;
  * protected owner-only DACL before any byte is written. The file never exists
  * with wider permissions, so no later `chmod` is needed.
  */
-export declare function writeOwnerOnlyExclusive(path: string, bytes: Uint8Array, platform: NodeJS.Platform): Promise<void>;
+export declare function writeOwnerOnlyExclusive(path: string, bytes: Uint8Array, platform: NodeJS.Platform, options?: {
+    ownership?: OwnerOnlyOptions;
+    open?: typeof open;
+}): Promise<void>;
 /** A target changed between the check before a destructive step and the step. */
 export declare class StateLayoutOwnershipError extends Error {
     readonly path: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/anthropic-auth-core",
-  "version": "2.4.2",
+  "version": "2.4.4",
   "type": "module",
   "repository": {
     "type": "git",
@@ -30,11 +30,11 @@
     "prepublishOnly": "bun run build"
   },
   "devDependencies": {
-    "@cortexkit/common-auth": "0.28.0"
+    "@cortexkit/common-auth": "0.29.0"
   },
   "dependencies": {
     "@cortexkit/claustrum-client": "0.13.0",
-    "@cortexkit/private-files": "0.2.1",
+    "@cortexkit/private-files": "0.2.2",
     "@cortexkit/subc-client": "^0.22.10",
     "jsonc-parser": "^3.3.1",
     "xxhash-wasm": "^1.1.0"