@cortexkit/antigravity-auth-core 3.0.20 → 3.0.21

package/dist/common-auth-embedded/claustrum/custody.js

@@ -1,3 +1,4 @@
+import { channel } from 'node:diagnostics_channel';
 import { ClaustrumCredentialError, } from '@cortexkit/claustrum-client';
 import { createLogger } from '../logger/index.js';
 import { ClaustrumUnreachableError, classifyVaultFailure, } from './availability.js';
@@ -27,6 +28,8 @@ function scopedRetryReason(served, current) {
     return 'rotated';
 }
 const defaultLogger = createLogger('claustrum');
+// Opt-in diagnostics let tests retain wait phases without logging each vault read.
+const phaseDiagnostics = channel('common-auth.claustrum.phases');
 /**
  * Decide whether a request that got a 401 should retry with the freshly
  * re-authorized receipt, and log the decision. The vault can refresh a
@@ -280,6 +283,11 @@ export class ClaustrumScopedCustody {
     }
     async #token(signal) {
         this.#check(signal);
+        if (phaseDiagnostics.hasSubscribers)
+            phaseDiagnostics.publish({
+                logger: this.#logger,
+                phase: 'token read begin',
+            });
         const pending = this.#readToken();
         this.#tokenReads.add(pending);
         let value;
@@ -288,6 +296,11 @@ export class ClaustrumScopedCustody {
         }
         finally {
             this.#tokenReads.delete(pending);
+            if (phaseDiagnostics.hasSubscribers)
+                phaseDiagnostics.publish({
+                    logger: this.#logger,
+                    phase: 'token read end',
+                });
         }
         this.#check(signal);
         if (!/^[0-9a-f]{64}$/.test(value.token) ||
@@ -359,6 +372,11 @@ export class ClaustrumScopedCustody {
             this.#kept.clear();
             throw error;
         }
+        if (phaseDiagnostics.hasSubscribers)
+            phaseDiagnostics.publish({
+                logger: this.#logger,
+                phase: 'list scoped begin',
+            });
         try {
             inventory = await this.#call(() => this.#client.listScoped(token), signal);
         }
@@ -366,6 +384,13 @@ export class ClaustrumScopedCustody {
             this.listFailed(error);
             throw error;
         }
+        finally {
+            if (phaseDiagnostics.hasSubscribers)
+                phaseDiagnostics.publish({
+                    logger: this.#logger,
+                    phase: 'list scoped end',
+                });
+        }
         const skipped = [];
         const refused = [];
         let notMine = 0;

package/dist/common-auth-embedded/claustrum/hub.js

@@ -11,6 +11,7 @@
 // different processes already share, plus the base-view rule, so a commit
 // never replaces a view another process committed after this hub listed.
 import { createHash } from 'node:crypto';
+import { channel } from 'node:diagnostics_channel';
 import { readdir, stat } from 'node:fs/promises';
 import { dirname, join, resolve } from 'node:path';
 import { createLogger } from '../logger/index.js';
@@ -766,7 +767,25 @@ export class ClaustrumDiscoveryHub {
                 throw base;
             // A member's first roster under this key carries the declines and
             // order of its newest roster under an older key.
-            const seed = base.file ? undefined : await this.#seed(entry);
+            let seed;
+            if (!base.file) {
+                const phaseDiagnostics = channel('common-auth.claustrum.phases');
+                if (phaseDiagnostics.hasSubscribers)
+                    phaseDiagnostics.publish({
+                        logger: this.#logger,
+                        phase: `seed read ${entry.provider} begin`,
+                    });
+                try {
+                    seed = await this.#seed(entry);
+                }
+                finally {
+                    if (phaseDiagnostics.hasSubscribers)
+                        phaseDiagnostics.publish({
+                            logger: this.#logger,
+                            phase: `seed read ${entry.provider} end`,
+                        });
+                }
+            }
             const roster = await refreshVaultRoster({
                 path: entry.path,
                 custody: { discover: async () => share },

package/dist/common-auth-embedded/claustrum/insula.js

@@ -443,6 +443,12 @@ export class InsulaQuotaSource {
                     ...(typeof entry.source === 'string' && { source: entry.source }),
                 },
             };
+            // Kept usage must not trigger a provider poll after a non-local failure.
+            // Only an explicitly local failure permits fallback; unknown causes do not.
+            if (entry.stale !== undefined &&
+                (!record(entry.stale) ||
+                    entry.stale.class !== 'local_source_unavailable'))
+                return { miss: 'upstream-failed', reading };
             return now >= fetchedAt + MAX_AGE || entry.stale !== undefined
                 ? { miss: 'stale', reading }
                 : { reading };

package/dist/common-auth-embedded/source-output.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "package": "@cortexkit/common-auth",
-  "version": "0.31.0",
+  "version": "0.32.1",
   "artifactStatus": "published",
   "publicRoots": {
     "./store": {
@@ -37,15 +37,15 @@
       "import": "./dist/pi-slot/index.js"
     }
   },
-  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.31.0.tgz",
-  "tarballSha256": "7fd3ca6766e40af0f79edc65f282f251f3d57bd614254a5df11921635cd1d548",
-  "sri": "sha512-An0i6ywuMISocrZKZvYkVhExhg0/v0uUR7PU3QpDqko0+mTq4GA9zCJY2q74TK6fwF0w2Xw0mqxTNIUW8+4Apw==",
+  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.32.1.tgz",
+  "tarballSha256": "d25d2eb670bc5ac48e75bf31cd633bb8b56fd807bf4467d69dbf62a00e1e6717",
+  "sri": "sha512-Y3SmHTnkDjdvo8d6MsQTVr+GlR3q6Ro8HYDqEFuotSUbrv8GwJvjRkYraN8ahEAT8uRHFmfyWGuogfYLzz65DA==",
   "canonicalFiles": 147,
-  "canonicalBytes": 998822,
+  "canonicalBytes": 1000963,
   "generator": {
     "path": "packages/opencode/scripts/embed-common-auth.ts",
-    "version": 3,
-    "sha256": "87413753f873de0e5cad4701d142da0ffcfd4969cb52712cf99a19af689eb2a5"
+    "version": 4,
+    "sha256": "d0920ba672e4d2a4ab37cd827d0a8098e9253d23678b88d051750373787af65d"
   },
   "files": [
     {
@@ -251,9 +251,9 @@
     {
       "source": "package/dist/claustrum/custody.js",
       "output": "claustrum/custody.js",
-      "bytes": 30624,
-      "sourceSha256": "23c666b3d65b26b8f9aac6926c535f67d0ba7db4de1cf3591e95306aa0f8c5dd",
-      "outputSha256": "23c666b3d65b26b8f9aac6926c535f67d0ba7db4de1cf3591e95306aa0f8c5dd",
+      "bytes": 31616,
+      "sourceSha256": "5ed70e65b78a04ceec3b3430908f46c860ea768b779b6af0f925681fd786593d",
+      "outputSha256": "5ed70e65b78a04ceec3b3430908f46c860ea768b779b6af0f925681fd786593d",
       "transform": "verbatim"
     },
     {
@@ -315,9 +315,9 @@
     {
       "source": "package/dist/claustrum/hub.js",
       "output": "claustrum/hub.js",
-      "bytes": 45237,
-      "sourceSha256": "48f0889818545735a6e6315bfa2517a84544abb9237ec9f698581ba6628c1ae5",
-      "outputSha256": "48f0889818545735a6e6315bfa2517a84544abb9237ec9f698581ba6628c1ae5",
+      "bytes": 45993,
+      "sourceSha256": "e50ebf6bcf840f8a4229d219ecb20fc1422c74b5b3aa2034dff0b73852380b79",
+      "outputSha256": "e50ebf6bcf840f8a4229d219ecb20fc1422c74b5b3aa2034dff0b73852380b79",
       "transform": "verbatim"
     },
     {
@@ -347,9 +347,9 @@
     {
       "source": "package/dist/claustrum/insula.js",
       "output": "claustrum/insula.js",
-      "bytes": 19744,
-      "sourceSha256": "506b549f26a741599bfee04bf334cf7b29fde4077a79f65bc2dad78e03bafee0",
-      "outputSha256": "506b549f26a741599bfee04bf334cf7b29fde4077a79f65bc2dad78e03bafee0",
+      "bytes": 20137,
+      "sourceSha256": "e2a2625cdad490cf24aa0badf66c842becd806738f8b137ebcf2b01e296eb0d2",
+      "outputSha256": "e2a2625cdad490cf24aa0badf66c842becd806738f8b137ebcf2b01e296eb0d2",
       "transform": "verbatim"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/antigravity-auth-core",
-  "version": "3.0.20",
+  "version": "3.0.21",
   "description": "Harness-agnostic core for Google Antigravity OAuth: transport, fingerprint, request transforms, accounts, quota",
   "type": "module",
   "license": "MIT",