@cortexkit/antigravity-auth-core 1.0.1 → 2.0.0

package/dist/constants.js

@@ -1,32 +1,33 @@
 /**
  * Constants used for Antigravity OAuth flows and Cloud Code Assist API integration.
  */
-export const ANTIGRAVITY_CLIENT_ID = "1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com";
+import { buildAntigravityHarnessUserAgent } from "./fingerprint.js";
+export const ANTIGRAVITY_CLIENT_ID = '1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com';
 /**
  * Client secret issued for the Antigravity OAuth application.
  */
-export const ANTIGRAVITY_CLIENT_SECRET = "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";
+export const ANTIGRAVITY_CLIENT_SECRET = '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';
 /**
  * Scopes required for Antigravity integrations.
  */
 export const ANTIGRAVITY_SCOPES = [
-    "https://www.googleapis.com/auth/cloud-platform",
-    "https://www.googleapis.com/auth/userinfo.email",
-    "https://www.googleapis.com/auth/userinfo.profile",
-    "https://www.googleapis.com/auth/cclog",
-    "https://www.googleapis.com/auth/experimentsandconfigs",
+    'https://www.googleapis.com/auth/cloud-platform',
+    'https://www.googleapis.com/auth/userinfo.email',
+    'https://www.googleapis.com/auth/userinfo.profile',
+    'https://www.googleapis.com/auth/cclog',
+    'https://www.googleapis.com/auth/experimentsandconfigs',
 ];
 /**
  * OAuth redirect URI used by the local CLI callback server.
  */
-export const ANTIGRAVITY_REDIRECT_URI = "http://localhost:51121/oauth-callback";
+export const ANTIGRAVITY_REDIRECT_URI = 'http://localhost:51121/oauth-callback';
 /**
  * Root endpoints for the Antigravity API (in fallback order).
- * Live agy CLI 1.0.4 traffic uses daily-cloudcode-pa.googleapis.com.
+ * Live agy CLI 1.1.6 traffic uses daily-cloudcode-pa.googleapis.com.
  */
-export const ANTIGRAVITY_ENDPOINT_DAILY = "https://daily-cloudcode-pa.googleapis.com";
-export const ANTIGRAVITY_ENDPOINT_AUTOPUSH = "https://autopush-cloudcode-pa.sandbox.googleapis.com";
-export const ANTIGRAVITY_ENDPOINT_PROD = "https://cloudcode-pa.googleapis.com";
+export const ANTIGRAVITY_ENDPOINT_DAILY = 'https://daily-cloudcode-pa.googleapis.com';
+export const ANTIGRAVITY_ENDPOINT_AUTOPUSH = 'https://autopush-cloudcode-pa.sandbox.googleapis.com';
+export const ANTIGRAVITY_ENDPOINT_PROD = 'https://cloudcode-pa.googleapis.com';
 /**
  * Endpoint fallback order (daily → prod).
  * Autopush removed to reduce unnecessary fallback API calls — it rarely works when daily fails.
@@ -57,11 +58,13 @@ export const GEMINI_CLI_ENDPOINT = ANTIGRAVITY_ENDPOINT_PROD;
 /**
  * Hardcoded project id used when Antigravity does not return one (e.g., business/workspace accounts).
  */
-export const ANTIGRAVITY_DEFAULT_PROJECT_ID = "rising-fact-p41fc";
-export const ANTIGRAVITY_VERSION_FALLBACK = "1.18.3";
+export const ANTIGRAVITY_DEFAULT_PROJECT_ID = 'rising-fact-p41fc';
+export const ANTIGRAVITY_VERSION_FALLBACK = '1.18.3';
 let antigravityVersion = ANTIGRAVITY_VERSION_FALLBACK;
 let versionLocked = false;
-export function getAntigravityVersion() { return antigravityVersion; }
+export function getAntigravityVersion() {
+    return antigravityVersion;
+}
 /**
  * Set the runtime Antigravity version. Can only be called once (at startup).
  * Subsequent calls are silently ignored to prevent accidental mutation.
@@ -72,26 +75,36 @@ export function setAntigravityVersion(version) {
     antigravityVersion = version;
     versionLocked = true;
 }
+/**
+ * Test-only: reset the version lock so `setAntigravityVersion` can run again.
+ * Bun has no Vitest-style module reset hook, and module state lives in this
+ * singleton — tests that exercise the lock need a way to start clean per
+ * scenario.
+ */
+export function __resetAntigravityVersionForTesting() {
+    antigravityVersion = ANTIGRAVITY_VERSION_FALLBACK;
+    versionLocked = false;
+}
 /** @deprecated Use getAntigravityVersion() for runtime access. */
 export const ANTIGRAVITY_VERSION = ANTIGRAVITY_VERSION_FALLBACK;
 export function getAntigravityHeaders() {
     return {
-        "User-Agent": `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Antigravity/${getAntigravityVersion()} Chrome/138.0.7204.235 Electron/37.3.1 Safari/537.36`,
-        "X-Goog-Api-Client": "google-cloud-sdk vscode_cloudshelleditor/0.1",
-        "Client-Metadata": `{"ideType":"ANTIGRAVITY","platform":"${process.platform === "win32" ? "WINDOWS" : "MACOS"}","pluginType":"GEMINI"}`,
+        'User-Agent': `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Antigravity/${getAntigravityVersion()} Chrome/138.0.7204.235 Electron/37.3.1 Safari/537.36`,
+        'X-Goog-Api-Client': 'google-cloud-sdk vscode_cloudshelleditor/0.1',
+        'Client-Metadata': `{"ideType":"ANTIGRAVITY","platform":"${process.platform === 'win32' ? 'WINDOWS' : 'MACOS'}","pluginType":"GEMINI"}`,
     };
 }
 /** @deprecated Use getAntigravityHeaders() for runtime access. */
 export const ANTIGRAVITY_HEADERS = {
-    "User-Agent": `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Antigravity/${ANTIGRAVITY_VERSION} Chrome/138.0.7204.235 Electron/37.3.1 Safari/537.36`,
-    "X-Goog-Api-Client": "google-cloud-sdk vscode_cloudshelleditor/0.1",
-    "Client-Metadata": `{"ideType":"ANTIGRAVITY","platform":"${process.platform === "win32" ? "WINDOWS" : "MACOS"}","pluginType":"GEMINI"}`,
+    'User-Agent': `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Antigravity/${ANTIGRAVITY_VERSION} Chrome/138.0.7204.235 Electron/37.3.1 Safari/537.36`,
+    'X-Goog-Api-Client': 'google-cloud-sdk vscode_cloudshelleditor/0.1',
+    'Client-Metadata': `{"ideType":"ANTIGRAVITY","platform":"${process.platform === 'win32' ? 'WINDOWS' : 'MACOS'}","pluginType":"GEMINI"}`,
 };
-export const GEMINI_CLI_VERSION = "1.0.0";
+export const GEMINI_CLI_VERSION = '1.0.0';
 /**
  * Default model used in Gemini CLI User-Agent when no model is specified.
  */
-export const GEMINI_CLI_DEFAULT_MODEL = "gemini-2.5-pro";
+export const GEMINI_CLI_DEFAULT_MODEL = 'gemini-2.5-pro';
 /**
  * Build Gemini CLI User-Agent string matching the official google-gemini/gemini-cli format.
  * Format: `GeminiCLI/{version}/{model} ({platform}; {arch})`
@@ -100,38 +113,32 @@ export const GEMINI_CLI_DEFAULT_MODEL = "gemini-2.5-pro";
  */
 export function buildGeminiCliUserAgent(model) {
     const effectiveModel = model || GEMINI_CLI_DEFAULT_MODEL;
-    const platform = process.platform || "darwin";
-    const arch = process.arch || "arm64";
+    const platform = process.platform || 'darwin';
+    const arch = process.arch || 'arm64';
     return `GeminiCLI/${GEMINI_CLI_VERSION}/${effectiveModel} (${platform}; ${arch})`;
 }
 /** @deprecated Use buildGeminiCliUserAgent() for runtime access. */
 export const GEMINI_CLI_HEADERS = {
-    "User-Agent": "google-api-nodejs-client/9.15.1",
-    "X-Goog-Api-Client": "gl-node/22.17.0",
-    "Client-Metadata": "ideType=IDE_UNSPECIFIED,platform=PLATFORM_UNSPECIFIED,pluginType=GEMINI",
+    'User-Agent': 'google-api-nodejs-client/9.15.1',
+    'X-Goog-Api-Client': 'gl-node/22.17.0',
+    'Client-Metadata': 'ideType=IDE_UNSPECIFIED,platform=PLATFORM_UNSPECIFIED,pluginType=GEMINI',
 };
-function buildAntigravityPlatformArch() {
-    const platform = process.platform === "win32" ? "windows" : process.platform || "unknown";
-    const arch = process.arch === "x64" ? "amd64" : process.arch === "ia32" ? "386" : process.arch || "unknown";
-    return `${platform}/${arch}`;
-}
 export function getRandomizedHeaders(style, model) {
-    if (style === "gemini-cli") {
+    if (style === 'gemini-cli') {
         return {
-            "User-Agent": buildGeminiCliUserAgent(model),
-            "X-Goog-Api-Client": GEMINI_CLI_HEADERS["X-Goog-Api-Client"],
-            "Client-Metadata": GEMINI_CLI_HEADERS["Client-Metadata"],
+            'User-Agent': buildGeminiCliUserAgent(model),
+            'X-Goog-Api-Client': GEMINI_CLI_HEADERS['X-Goog-Api-Client'],
+            'Client-Metadata': GEMINI_CLI_HEADERS['Client-Metadata'],
         };
     }
-    const platform = buildAntigravityPlatformArch();
     return {
-        "User-Agent": `antigravity/cli/1.0.4 ${platform}`,
+        'User-Agent': buildAntigravityHarnessUserAgent(),
     };
 }
 /**
  * Provider identifier shared between the plugin loader and credential store.
  */
-export const ANTIGRAVITY_PROVIDER_ID = "google";
+export const ANTIGRAVITY_PROVIDER_ID = 'google';
 // ============================================================================
 // TOOL HALLUCINATION PREVENTION (Ported from LLM-API-Key-Proxy)
 // ============================================================================
@@ -158,9 +165,9 @@ If you are unsure about a tool's parameters, YOU MUST read the schema definition
  * Template for parameter signature injection into tool descriptions.
  * {params} will be replaced with the actual parameter list.
  */
-export const CLAUDE_DESCRIPTION_PROMPT = "\n\n⚠️ STRICT PARAMETERS: {params}.";
-export const EMPTY_SCHEMA_PLACEHOLDER_NAME = "_placeholder";
-export const EMPTY_SCHEMA_PLACEHOLDER_DESCRIPTION = "Placeholder. Always pass true.";
+export const CLAUDE_DESCRIPTION_PROMPT = '\n\n⚠️ STRICT PARAMETERS: {params}.';
+export const EMPTY_SCHEMA_PLACEHOLDER_NAME = '_placeholder';
+export const EMPTY_SCHEMA_PLACEHOLDER_DESCRIPTION = 'Placeholder. Always pass true.';
 /**
  * Sentinel value to bypass thought signature validation.
  *
@@ -174,7 +181,7 @@ export const EMPTY_SCHEMA_PLACEHOLDER_DESCRIPTION = "Placeholder. Always pass tr
  *
  * @see https://ai.google.dev/gemini-api/docs/thought-signatures
  */
-export const SKIP_THOUGHT_SIGNATURE = "skip_thought_signature_validator";
+export const SKIP_THOUGHT_SIGNATURE = 'skip_thought_signature_validator';
 // ============================================================================
 // GOOGLE SEARCH TOOL CONSTANTS
 // ============================================================================
@@ -182,7 +189,7 @@ export const SKIP_THOUGHT_SIGNATURE = "skip_thought_signature_validator";
  * Model used for Google Search grounding requests.
  * Uses gemini-2.5-flash for fast, cost-effective search operations. (3-flash is always at capacity and doesn't support souce citation).
  */
-export const SEARCH_MODEL = "gemini-2.5-flash";
+export const SEARCH_MODEL = 'gemini-2.5-flash';
 /**
  * Thinking budget for deep search (more thorough analysis).
  */

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,2EAA2E,CAAC;AAEjH;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,qCAAqC,CAAC;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,uCAAuC;IACvC,uDAAuD;CACxD,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,uCAAuC,CAAC;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,2CAA2C,CAAC;AACtF,MAAM,CAAC,MAAM,6BAA6B,GAAG,sDAAsD,CAAC;AACpG,MAAM,CAAC,MAAM,yBAAyB,GAAG,qCAAqC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,0BAA0B;IAC1B,yBAAyB;CACjB,CAAC;AACX;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,0BAA0B;IAC1B,yBAAyB;CACjB,CAAC;AACX;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAE/D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAE7D;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,mBAAmB,CAAC;AAElE,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC;AACrD,IAAI,kBAAkB,GAAG,4BAA4B,CAAC;AACtD,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B,MAAM,UAAU,qBAAqB,KAAa,OAAO,kBAAkB,CAAC,CAAC,CAAC;AAE9E;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,aAAa;QAAE,OAAO;IAC1B,kBAAkB,GAAG,OAAO,CAAC;IAC7B,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAEhE,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,YAAY,EAAE,gGAAgG,qBAAqB,EAAE,sDAAsD;QAC3L,mBAAmB,EAAE,8CAA8C;QACnE,iBAAiB,EAAE,wCAAwC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,0BAA0B;KACxI,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,YAAY,EAAE,gGAAgG,mBAAmB,sDAAsD;IACvL,mBAAmB,EAAE,8CAA8C;IACnE,iBAAiB,EAAE,wCAAwC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,0BAA0B;CAC/H,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAEzD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,cAAc,GAAG,KAAK,IAAI,wBAAwB,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,OAAO,aAAa,kBAAkB,IAAI,cAAc,KAAK,QAAQ,KAAK,IAAI,GAAG,CAAC;AACpF,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY,EAAE,iCAAiC;IAC/C,mBAAmB,EAAE,iBAAiB;IACtC,iBAAiB,EAAE,yEAAyE;CACpF,CAAC;AACX,SAAS,4BAA4B;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IAC5G,OAAO,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;AAC/B,CAAC;AAQD,MAAM,UAAU,oBAAoB,CAAC,KAAkB,EAAE,KAAc;IACrE,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC3B,OAAO;YACL,YAAY,EAAE,uBAAuB,CAAC,KAAK,CAAC;YAC5C,mBAAmB,EAAE,kBAAkB,CAAC,mBAAmB,CAAC;YAC5D,iBAAiB,EAAE,kBAAkB,CAAC,iBAAiB,CAAC;SACzD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,4BAA4B,EAAE,CAAC;IAChD,OAAO;QACL,YAAY,EAAE,yBAAyB,QAAQ,EAAE;KAClD,CAAC;AACJ,CAAC;AAID;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AAEhD,+EAA+E;AAC/E,gEAAgE;AAChE,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;;;4FAW8C,CAAC;AAE7F;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,qCAAqC,CAAC;AAE/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,cAAc,CAAC;AAC5D,MAAM,CAAC,MAAM,oCAAoC,GAAG,gCAAgC,CAAC;AAErF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kCAAkC,CAAC;AAEzE,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAEjD;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAEhD;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;;;;;kDAYS,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAA;AAEnE,MAAM,CAAC,MAAM,qBAAqB,GAChC,2EAA2E,CAAA;AAE7E;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,qCAAqC,CAAA;AAE9E;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,gDAAgD;IAChD,gDAAgD;IAChD,kDAAkD;IAClD,uCAAuC;IACvC,uDAAuD;CACxD,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,uCAAuC,CAAA;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,2CAA2C,CAAA;AAC7C,MAAM,CAAC,MAAM,6BAA6B,GACxC,sDAAsD,CAAA;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,qCAAqC,CAAA;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,0BAA0B;IAC1B,yBAAyB;CACjB,CAAA;AACV;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,0BAA0B;IAC1B,yBAAyB;CACjB,CAAA;AACV;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAA;AAE5D;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,mBAAmB,CAAA;AAEjE,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAA;AACpD,IAAI,kBAAkB,GAAG,4BAA4B,CAAA;AACrD,IAAI,aAAa,GAAG,KAAK,CAAA;AAEzB,MAAM,UAAU,qBAAqB;IACnC,OAAO,kBAAkB,CAAA;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,aAAa;QAAE,OAAM;IACzB,kBAAkB,GAAG,OAAO,CAAA;IAC5B,aAAa,GAAG,IAAI,CAAA;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mCAAmC;IACjD,kBAAkB,GAAG,4BAA4B,CAAA;IACjD,aAAa,GAAG,KAAK,CAAA;AACvB,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,4BAA4B,CAAA;AAE/D,MAAM,UAAU,qBAAqB;IAGnC,OAAO;QACL,YAAY,EAAE,gGAAgG,qBAAqB,EAAE,sDAAsD;QAC3L,mBAAmB,EAAE,8CAA8C;QACnE,iBAAiB,EAAE,wCAAwC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,0BAA0B;KACxI,CAAA;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,YAAY,EAAE,gGAAgG,mBAAmB,sDAAsD;IACvL,mBAAmB,EAAE,8CAA8C;IACnE,iBAAiB,EAAE,wCAAwC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,0BAA0B;CAC/H,CAAA;AAEV,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAA;AAEzC;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAA;AAExD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,cAAc,GAAG,KAAK,IAAI,wBAAwB,CAAA;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAA;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAA;IACpC,OAAO,aAAa,kBAAkB,IAAI,cAAc,KAAK,QAAQ,KAAK,IAAI,GAAG,CAAA;AACnF,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY,EAAE,iCAAiC;IAC/C,mBAAmB,EAAE,iBAAiB;IACtC,iBAAiB,EACf,yEAAyE;CACnE,CAAA;AAOV,MAAM,UAAU,oBAAoB,CAClC,KAAkB,EAClB,KAAc;IAEd,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC3B,OAAO;YACL,YAAY,EAAE,uBAAuB,CAAC,KAAK,CAAC;YAC5C,mBAAmB,EAAE,kBAAkB,CAAC,mBAAmB,CAAC;YAC5D,iBAAiB,EAAE,kBAAkB,CAAC,iBAAiB,CAAC;SACzD,CAAA;IACH,CAAC;IACD,OAAO;QACL,YAAY,EAAE,gCAAgC,EAAE;KACjD,CAAA;AACH,CAAC;AAID;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAA;AAE/C,+EAA+E;AAC/E,gEAAgE;AAChE,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG;;;;;;;;;;;4FAW8C,CAAA;AAE5F;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,qCAAqC,CAAA;AAE9E,MAAM,CAAC,MAAM,6BAA6B,GAAG,cAAc,CAAA;AAC3D,MAAM,CAAC,MAAM,oCAAoC,GAC/C,gCAAgC,CAAA;AAElC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,kCAAkC,CAAA;AAExE,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAA;AAE9C;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAA;AAEhD;;GAEG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAA;AAE/C;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAA;AAEtC;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;;;;;kDAYS,CAAA"}

package/dist/fetch-timeout.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Stream-safe active-fetch timeout helper.
+ *
+ * Bounds the time spent waiting for HTTP response headers while leaving any
+ * returned response body fully readable until the caller (or its own signal)
+ * chooses to abort it. Naively forwarding `AbortSignal.timeout(...)` into
+ * `fetch()` aborts the body at the deadline even when headers arrived
+ * promptly — the helper only forwards the timeout into the request signal
+ * until the underlying fetch resolves, then drops the timeout listener so
+ * the body remains consumable.
+ */
+export declare const ACTIVE_FETCH_TIMEOUT_MS = 15000;
+export type ActiveFetchOptions = {
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+};
+/**
+ * Issue an HTTP fetch with a bounded active-fetch (header) wait.
+ *
+ * The `init.signal` is composed into the request abort signal so caller
+ * cancellation still propagates, but the 15s active timeout is only enforced
+ * until `fetchImpl` resolves — once headers arrive the timeout listener is
+ * removed and the returned Response body can be streamed past the deadline.
+ */
+export declare function fetchWithActiveTimeout(input: RequestInfo | URL, init?: RequestInit, options?: ActiveFetchOptions): Promise<Response>;
+//# sourceMappingURL=fetch-timeout.d.ts.map

package/dist/fetch-timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-timeout.d.ts","sourceRoot":"","sources":["../src/fetch-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,uBAAuB,QAAS,CAAA;AAE7C,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB,CAAA;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,QAAQ,CAAC,CAsBnB"}

package/dist/fetch-timeout.js

@@ -0,0 +1,43 @@
+/**
+ * Stream-safe active-fetch timeout helper.
+ *
+ * Bounds the time spent waiting for HTTP response headers while leaving any
+ * returned response body fully readable until the caller (or its own signal)
+ * chooses to abort it. Naively forwarding `AbortSignal.timeout(...)` into
+ * `fetch()` aborts the body at the deadline even when headers arrived
+ * promptly — the helper only forwards the timeout into the request signal
+ * until the underlying fetch resolves, then drops the timeout listener so
+ * the body remains consumable.
+ */
+export const ACTIVE_FETCH_TIMEOUT_MS = 15_000;
+/**
+ * Issue an HTTP fetch with a bounded active-fetch (header) wait.
+ *
+ * The `init.signal` is composed into the request abort signal so caller
+ * cancellation still propagates, but the 15s active timeout is only enforced
+ * until `fetchImpl` resolves — once headers arrive the timeout listener is
+ * removed and the returned Response body can be streamed past the deadline.
+ */
+export async function fetchWithActiveTimeout(input, init = {}, options = {}) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const timeoutMs = options.timeoutMs ?? ACTIVE_FETCH_TIMEOUT_MS;
+    const timeoutSignal = AbortSignal.timeout(timeoutMs);
+    const activeController = new AbortController();
+    const onTimeoutAbort = () => activeController.abort(timeoutSignal.reason);
+    if (timeoutSignal.aborted) {
+        onTimeoutAbort();
+    }
+    else {
+        timeoutSignal.addEventListener('abort', onTimeoutAbort, { once: true });
+    }
+    const composedSignal = init.signal
+        ? AbortSignal.any([activeController.signal, init.signal])
+        : activeController.signal;
+    try {
+        return await fetchImpl(input, { ...init, signal: composedSignal });
+    }
+    finally {
+        timeoutSignal.removeEventListener('abort', onTimeoutAbort);
+    }
+}
+//# sourceMappingURL=fetch-timeout.js.map

package/dist/fetch-timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-timeout.js","sourceRoot":"","sources":["../src/fetch-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAO7C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAwB,EACxB,OAAoB,EAAE,EACtB,UAA8B,EAAE;IAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAA;IAE9D,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,MAAM,gBAAgB,GAAG,IAAI,eAAe,EAAE,CAAA;IAC9C,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACzE,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,cAAc,EAAE,CAAA;IAClB,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM;QAChC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAA;IAE3B,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;IACpE,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC"}

package/dist/file-lock.d.ts

@@ -0,0 +1,79 @@
+/**
+ * Renewable fenced file lock.
+ *
+ * The lock file at `${path}.${name}.lock` holds the JSON
+ * `{ ownerId, expiresAt }`. Acquiring it uses an exclusive `wx` write so
+ * concurrent processes race deterministically — only one wins.
+ *
+ * A contended, live lock (ownerId present, expiresAt > now) returns
+ * `null` immediately; no eviction is attempted and no destructive op
+ * touches the file. A contended, stale lock (no owner, expired, or
+ * malformed-but-old) opens an eviction protocol that uses an exclusive
+ * "evicting" marker directory at `${lockPath}.evicting/owner.json` as a
+ * fence: the file holds the in-progress evicter's ownerId. The marker
+ * is verified before every destructive seam (re-read, unlink,
+ * re-acquire) so a contender whose marker has been hijacked will see
+ * ownership has changed and back off without touching the winner's lock.
+ *
+ * The renewal timer is `setInterval(...).unref()`-ed so it does not
+ * keep the Node/Bun runtime alive. Default renewal interval is
+ * `max(1000, floor(ttlMs / 3))`.
+ */
+export type FileLockStep = 'stale-marker-stat' | 'stale-marker-claimed' | 'stale-lock-confirmed' | 'eviction-marker-acquired' | 'renew-read' | 'renew-committed';
+export interface FencedFileLockOptions {
+    path: string;
+    name: string;
+    ttlMs: number;
+    /**
+     * Defaults to `true`. When false, no renewal timer is scheduled.
+     */
+    renew?: boolean;
+    /**
+     * Override the renewal cadence in milliseconds.
+     * Defaults to `max(RENEW_MIN_INTERVAL_MS, floor(ttlMs / 3))`.
+     */
+    renewIntervalMs?: number;
+    /**
+     * Clock injection. Defaults to `Date.now`. Tests use this to
+     * simulate elapsed time without waiting for real wall-clock ticks.
+     */
+    now?: () => number;
+    /**
+     * Hook invoked at well-defined milestones inside the eviction
+     * protocol and the renewal tick. Used by tests to inject
+     * interleavings and simulate racing contenders:
+     *
+     * - `renew-read` — after the renewal tick reads the lock payload,
+     *   before the ownership checks and the temp-write/rename commit.
+     * - `renew-committed` — after the renewal rename lands, before the
+     *   verify-after-commit re-read.
+     */
+    onStep?: (step: FileLockStep) => Promise<void> | void;
+}
+export interface FencedFileLock {
+    ownerId: string;
+    assertOwned(): Promise<void>;
+    release(): Promise<void>;
+    /**
+     * Resolves when the renewal loop detects the lock has been taken over
+     * by another owner (or otherwise lost before `release()`). Resolves
+     * immediately if the lock is already lost.
+     */
+    whenLost(): Promise<void>;
+    hasLost(): boolean;
+}
+/**
+ * Thrown by `assertOwned` when the lock file no longer carries our
+ * ownerId or has expired.
+ */
+export declare class FileLockOwnershipError extends Error {
+    readonly details: {
+        path: string;
+        expectedOwner: string;
+        observedOwner?: string;
+        observedExpiresAt?: number;
+    };
+    constructor(message: string, details: FileLockOwnershipError['details']);
+}
+export declare function acquireFencedFileLock(options: FencedFileLockOptions): Promise<FencedFileLock | null>;
+//# sourceMappingURL=file-lock.d.ts.map

package/dist/file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.d.ts","sourceRoot":"","sources":["../src/file-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAkBH,MAAM,MAAM,YAAY,GACpB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,GACtB,0BAA0B,GAC1B,YAAY,GACZ,iBAAiB,CAAA;AAErB,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAA;IACf;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CACtD;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACxB;;;;OAIG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,OAAO,IAAI,OAAO,CAAA;CACnB;AAED;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,MAAM,CAAA;QACZ,aAAa,EAAE,MAAM,CAAA;QACrB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;gBAEW,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC;CAKxE;AAmFD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAqJhC"}