@cortexkit/antigravity-auth-core 3.0.20 → 3.0.22

package/dist/common-auth-embedded/claustrum/custody.js

@@ -1,3 +1,4 @@
+import { channel } from 'node:diagnostics_channel';
 import { ClaustrumCredentialError, } from '@cortexkit/claustrum-client';
 import { createLogger } from '../logger/index.js';
 import { ClaustrumUnreachableError, classifyVaultFailure, } from './availability.js';
@@ -27,6 +28,8 @@ function scopedRetryReason(served, current) {
     return 'rotated';
 }
 const defaultLogger = createLogger('claustrum');
+// Opt-in diagnostics let tests retain wait phases without logging each vault read.
+const phaseDiagnostics = channel('common-auth.claustrum.phases');
 /**
  * Decide whether a request that got a 401 should retry with the freshly
  * re-authorized receipt, and log the decision. The vault can refresh a
@@ -280,6 +283,11 @@ export class ClaustrumScopedCustody {
     }
     async #token(signal) {
         this.#check(signal);
+        if (phaseDiagnostics.hasSubscribers)
+            phaseDiagnostics.publish({
+                logger: this.#logger,
+                phase: 'token read begin',
+            });
         const pending = this.#readToken();
         this.#tokenReads.add(pending);
         let value;
@@ -288,6 +296,11 @@ export class ClaustrumScopedCustody {
         }
         finally {
             this.#tokenReads.delete(pending);
+            if (phaseDiagnostics.hasSubscribers)
+                phaseDiagnostics.publish({
+                    logger: this.#logger,
+                    phase: 'token read end',
+                });
         }
         this.#check(signal);
         if (!/^[0-9a-f]{64}$/.test(value.token) ||
@@ -359,6 +372,11 @@ export class ClaustrumScopedCustody {
             this.#kept.clear();
             throw error;
         }
+        if (phaseDiagnostics.hasSubscribers)
+            phaseDiagnostics.publish({
+                logger: this.#logger,
+                phase: 'list scoped begin',
+            });
         try {
             inventory = await this.#call(() => this.#client.listScoped(token), signal);
         }
@@ -366,6 +384,13 @@ export class ClaustrumScopedCustody {
             this.listFailed(error);
             throw error;
         }
+        finally {
+            if (phaseDiagnostics.hasSubscribers)
+                phaseDiagnostics.publish({
+                    logger: this.#logger,
+                    phase: 'list scoped end',
+                });
+        }
         const skipped = [];
         const refused = [];
         let notMine = 0;

package/dist/common-auth-embedded/claustrum/hub.js

@@ -11,6 +11,7 @@
 // different processes already share, plus the base-view rule, so a commit
 // never replaces a view another process committed after this hub listed.
 import { createHash } from 'node:crypto';
+import { channel } from 'node:diagnostics_channel';
 import { readdir, stat } from 'node:fs/promises';
 import { dirname, join, resolve } from 'node:path';
 import { createLogger } from '../logger/index.js';
@@ -766,7 +767,25 @@ export class ClaustrumDiscoveryHub {
                 throw base;
             // A member's first roster under this key carries the declines and
             // order of its newest roster under an older key.
-            const seed = base.file ? undefined : await this.#seed(entry);
+            let seed;
+            if (!base.file) {
+                const phaseDiagnostics = channel('common-auth.claustrum.phases');
+                if (phaseDiagnostics.hasSubscribers)
+                    phaseDiagnostics.publish({
+                        logger: this.#logger,
+                        phase: `seed read ${entry.provider} begin`,
+                    });
+                try {
+                    seed = await this.#seed(entry);
+                }
+                finally {
+                    if (phaseDiagnostics.hasSubscribers)
+                        phaseDiagnostics.publish({
+                            logger: this.#logger,
+                            phase: `seed read ${entry.provider} end`,
+                        });
+                }
+            }
             const roster = await refreshVaultRoster({
                 path: entry.path,
                 custody: { discover: async () => share },

package/dist/common-auth-embedded/claustrum/insula.js

@@ -443,6 +443,12 @@ export class InsulaQuotaSource {
                     ...(typeof entry.source === 'string' && { source: entry.source }),
                 },
             };
+            // Kept usage must not trigger a provider poll after a non-local failure.
+            // Only an explicitly local failure permits fallback; unknown causes do not.
+            if (entry.stale !== undefined &&
+                (!record(entry.stale) ||
+                    entry.stale.class !== 'local_source_unavailable'))
+                return { miss: 'upstream-failed', reading };
             return now >= fetchedAt + MAX_AGE || entry.stale !== undefined
                 ? { miss: 'stale', reading }
                 : { reading };

package/dist/common-auth-embedded/fs/refresh-file-lock.js

@@ -244,8 +244,8 @@ export async function acquireRefreshFileLockWithClock(options) {
             }
             catch (readError) {
                 // The holder can release after exclusive creation reports a collision.
-                // Only absence permits another acquisition attempt; security and sharing
-                // refusals must still escape rather than being treated as contention.
+                // Only absence permits acquisition to continue here. Sharing failures
+                // escape to withLock's deadline-bounded retry, never to stale eviction.
                 if (readError.code !== 'ENOENT')
                     throw readError;
             }

package/dist/common-auth-embedded/fs/with-lock.js

@@ -1,3 +1,5 @@
+import { join, resolve } from 'node:path';
+import { PrivateFileError, windowsPrivateFiles } from './private-files.js';
 import { acquireRefreshFileLock } from './refresh-file-lock.js';
 export function lockPathFor(target, name) {
     return `${target}.${name}.lock`;
@@ -18,20 +20,42 @@ export class LockOwnershipError extends Error {
         this.details = details;
     }
 }
+function isChangingLockRead(error, target, name) {
+    if (!windowsPrivateFiles ||
+        !(error instanceof PrivateFileError) ||
+        error.reason !== 'io-error' ||
+        (error.win32Code !== 32 && error.win32Code !== 303) ||
+        (error.stage !== 'read' && error.stage !== 'verify'))
+        return false;
+    const path = resolve(lockPathFor(target, name));
+    return error.path === path || error.path === join(path, 'owner.json');
+}
 export async function withLock(target, options, fn) {
     const started = performance.now();
     for (;;) {
         options.signal?.throwIfAborted();
-        const lock = await acquireRefreshFileLock({
-            path: target,
-            name: options.name,
-            ttlMs: options.ttlMs,
-            renew: options.renew ?? false,
-            ...(options.onStep ? { onStep: options.onStep } : {}),
-            ...(options.onRenewalTimer
-                ? { onRenewalTimer: options.onRenewalTimer }
-                : {}),
-        });
+        let lock;
+        let changingReadError;
+        try {
+            lock = await acquireRefreshFileLock({
+                path: target,
+                name: options.name,
+                ttlMs: options.ttlMs,
+                renew: options.renew ?? false,
+                ...(options.onStep ? { onStep: options.onStep } : {}),
+                ...(options.onRenewalTimer
+                    ? { onRenewalTimer: options.onRenewalTimer }
+                    : {}),
+            });
+        }
+        catch (error) {
+            if (!isChangingLockRead(error, target, options.name))
+                throw error;
+            // Sharing violations (32) and delete-pending opens (303) do not reveal
+            // ownership or expiry. Retry exclusive creation, never infer a stale lock.
+            lock = null;
+            changingReadError = error;
+        }
         if (lock) {
             try {
                 options.signal?.throwIfAborted();
@@ -43,6 +67,9 @@ export async function withLock(target, options, fn) {
         }
         const remaining = options.timeoutMs - (performance.now() - started);
         if (remaining <= 0) {
+            // Keep persistent native IO failures distinguishable from a live holder.
+            if (changingReadError)
+                throw changingReadError;
             throw new LockContentionError({
                 target,
                 name: options.name,

package/dist/common-auth-embedded/quota/format.d.ts

@@ -30,6 +30,8 @@ export interface QuotaTextOptions {
 }
 export interface QuotaWindowPart {
     kind: 'window' | 'budget';
+    /** Unknown windows have no dated percentage; budgets retain their own wording. */
+    reading: 'known' | 'unknown';
     /** The display name of a quota window, or `credits` for the budget. */
     name: string;
     /**
@@ -45,7 +47,8 @@ export interface QuotaWindowPart {
     remainingPercent?: number;
     /** A bare relative reset span such as `4d`, only when the reset is future. */
     resetIn?: string;
-    checkedAt: number;
+    /** The reading time, omitted for a window with no reading. */
+    checkedAt?: number;
     /** Whether the reset followed this reading and has arrived by `now`. */
     resetSinceReading: boolean;
 }
@@ -64,9 +67,11 @@ export interface QuotaParts {
  */
 export declare function quotaWindowName(limit: Pick<ProjectedLimit, 'scope' | 'label' | 'windowMinutes'>): string;
 /**
- * Structured quota wording for layouts that need one row per window. The
- * windows use the same filtering and order as `quotaTextParts`; future resets
- * and the optional age keep the shared formatter's wording.
+ * Structured quota wording for layouts that need one row per window.
+ * Windows without a dated percentage remain as explicit unknown parts. Limits
+ * marked absent (not reported) or retired (no longer tracked) remain omitted.
+ * Reported windows, future resets and the optional age keep the shared
+ * formatter's wording and order.
  */
 export declare function quotaWindowParts(quota: ProjectedQuota | undefined, options: QuotaTextOptions): QuotaParts;
 /**

package/dist/common-auth-embedded/quota/format.js

@@ -5,10 +5,10 @@
 //
 // The rules: a window is named by its length (`5h`, `7d`), or, for a window
 // that binds only one model family, by the label the plugin stored it under.
-// Every figure is "% left". A window the provider did not report (an absence
-// record or a retirement tombstone) is left out rather than written as "not
-// reported". A reset is a short time from now (`resets 2h`). A reading older
-// than fifteen minutes says how old it is (`checked 3h ago`).
+// Every reported window figure is "% left". A window the provider did not
+// report (an absence record or a retirement tombstone) is left out rather than
+// written as "not reported". A reset is a short time from now (`resets 2h`).
+// A reading older than fifteen minutes says how old it is (`checked 3h ago`).
 //
 // Like the rest of this module it reads no clock: `now` is a parameter.
 import { ALL_SCOPE } from './map.js';
@@ -97,12 +97,14 @@ function displayOrder(left, right) {
     return left.label < right.label ? -1 : left.label > right.label ? 1 : 0;
 }
 /**
- * Structured quota wording for layouts that need one row per window. The
- * windows use the same filtering and order as `quotaTextParts`; future resets
- * and the optional age keep the shared formatter's wording.
+ * Structured quota wording for layouts that need one row per window.
+ * Windows without a dated percentage remain as explicit unknown parts. Limits
+ * marked absent (not reported) or retired (no longer tracked) remain omitted.
+ * Reported windows, future resets and the optional age keep the shared
+ * formatter's wording and order.
  */
 export function quotaWindowParts(quota, options) {
-    const { windows, age } = scopedWindowParts(quota, options);
+    const { windows, age } = scopedWindowParts(quota, options, true);
     const parts = windows.map(({ part }) => part);
     return age === undefined ? { windows: parts } : { windows: parts, age };
 }
@@ -125,34 +127,47 @@ function withShortNames(windows) {
     }
     return windows;
 }
+function hasWindowReading(limit) {
+    return (Number.isFinite(limit.remainingPercent) && Number.isFinite(limit.checkedAt));
+}
 /**
  * `quotaWindowParts` with each window's scope kept beside it. The narrow form
  * needs the scope to name and pick model-scoped windows; the public parts do
- * not carry it, so their shape stays as it was.
+ * not carry the scope.
  */
-function scopedWindowParts(quota, options) {
+function scopedWindowParts(quota, options, includeUnknown = false) {
     if (!quota)
         return { windows: [] };
     const { now } = options;
     const readings = quota.limits
-        .filter((limit) => limit.kind === 'reading' && limit.remainingPercent !== undefined)
+        .filter((limit) => limit.kind === 'reading' && (includeUnknown || hasWindowReading(limit)))
         .sort(displayOrder);
     const windows = readings.map((limit) => {
-        const remainingPercent = clampPercent(limit.remainingPercent ?? 0);
-        return {
-            scope: limit.scope,
-            ...(limit.windowMinutes === undefined
-                ? {}
-                : { windowMinutes: limit.windowMinutes }),
-            part: {
+        const part = hasWindowReading(limit)
+            ? {
                 kind: 'window',
+                reading: 'known',
                 name: quotaWindowName(limit),
                 short: '',
-                figure: percentLeft(limit.remainingPercent ?? 0),
-                remainingPercent,
+                figure: percentLeft(limit.remainingPercent),
+                remainingPercent: clampPercent(limit.remainingPercent),
                 checkedAt: limit.checkedAt,
                 ...resetDetails(limit.resetsAt, limit.checkedAt, now),
-            },
+            }
+            : {
+                kind: 'window',
+                reading: 'unknown',
+                name: quotaWindowName(limit),
+                short: '',
+                figure: 'no reading',
+                resetSinceReading: false,
+            };
+        return {
+            scope: limit.scope,
+            ...(limit.windowMinutes === undefined
+                ? {}
+                : { windowMinutes: limit.windowMinutes }),
+            part,
         };
     });
     const budget = quota.budget;
@@ -168,6 +183,7 @@ function scopedWindowParts(quota, options) {
             spent: budget.reached,
             part: {
                 kind: 'budget',
+                reading: 'known',
                 name: 'credits',
                 short: '',
                 figure,
@@ -180,8 +196,11 @@ function scopedWindowParts(quota, options) {
         });
     }
     withShortNames(windows);
-    if (windows.length > 0) {
-        const age = now - Math.min(...windows.map(({ part }) => part.checkedAt));
+    const readingTimes = windows.flatMap(({ part }) => part.reading === 'known' && part.checkedAt !== undefined
+        ? [part.checkedAt]
+        : []);
+    if (readingTimes.length > 0) {
+        const age = now - Math.min(...readingTimes);
         if (age > (options.staleAfterMs ?? QUOTA_STALE_AFTER_MS)) {
             return { windows, age: `checked ${shortSpan(age)} ago` };
         }
@@ -357,13 +376,13 @@ function narrowTextParts(quota, options) {
 export function quotaTextParts(quota, options) {
     if (options.form === 'narrow')
         return narrowTextParts(quota, options);
-    const parts = quotaWindowParts(quota, options);
+    const { windows, age } = scopedWindowParts(quota, options);
     const full = (options.form ?? 'full') === 'full';
-    const text = parts.windows.map((part) => {
+    const text = windows.map(({ part }) => {
         const reset = full && part.resetIn ? `, resets ${part.resetIn}` : '';
         return `${part.kind === 'budget' ? '' : `${part.name} `}${part.figure}${reset}`;
     });
-    return parts.age === undefined ? text : [...text, parts.age];
+    return age === undefined ? text : [...text, age];
 }
 /**
  * A row's quota as one line: `5h 58% left · 7d 90% left` in the compact

package/dist/common-auth-embedded/source-output.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "package": "@cortexkit/common-auth",
-  "version": "0.31.0",
+  "version": "0.33.0",
   "artifactStatus": "published",
   "publicRoots": {
     "./store": {
@@ -37,15 +37,15 @@
       "import": "./dist/pi-slot/index.js"
     }
   },
-  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.31.0.tgz",
-  "tarballSha256": "7fd3ca6766e40af0f79edc65f282f251f3d57bd614254a5df11921635cd1d548",
-  "sri": "sha512-An0i6ywuMISocrZKZvYkVhExhg0/v0uUR7PU3QpDqko0+mTq4GA9zCJY2q74TK6fwF0w2Xw0mqxTNIUW8+4Apw==",
+  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.33.0.tgz",
+  "tarballSha256": "bba9f56f7fb353c9c712113722c7c9361f0e13e930c73f57314185b13032a24c",
+  "sri": "sha512-cbbyqXTK1TYQZNHb2xA/ueZGQsBvAX6H9hTlQcZZxM7SR/u7tsscyBAWw38ViXl1n/gwkqgsvs2Vbs6cZ0hOrw==",
   "canonicalFiles": 147,
-  "canonicalBytes": 998822,
+  "canonicalBytes": 1003209,
   "generator": {
     "path": "packages/opencode/scripts/embed-common-auth.ts",
-    "version": 3,
-    "sha256": "87413753f873de0e5cad4701d142da0ffcfd4969cb52712cf99a19af689eb2a5"
+    "version": 4,
+    "sha256": "9f9ebaeb47c9c18874ed832504422c0791551627c34092885cb481c6fe23ef19"
   },
   "files": [
     {
@@ -251,9 +251,9 @@
     {
       "source": "package/dist/claustrum/custody.js",
       "output": "claustrum/custody.js",
-      "bytes": 30624,
-      "sourceSha256": "23c666b3d65b26b8f9aac6926c535f67d0ba7db4de1cf3591e95306aa0f8c5dd",
-      "outputSha256": "23c666b3d65b26b8f9aac6926c535f67d0ba7db4de1cf3591e95306aa0f8c5dd",
+      "bytes": 31616,
+      "sourceSha256": "5ed70e65b78a04ceec3b3430908f46c860ea768b779b6af0f925681fd786593d",
+      "outputSha256": "5ed70e65b78a04ceec3b3430908f46c860ea768b779b6af0f925681fd786593d",
       "transform": "verbatim"
     },
     {
@@ -315,9 +315,9 @@
     {
       "source": "package/dist/claustrum/hub.js",
       "output": "claustrum/hub.js",
-      "bytes": 45237,
-      "sourceSha256": "48f0889818545735a6e6315bfa2517a84544abb9237ec9f698581ba6628c1ae5",
-      "outputSha256": "48f0889818545735a6e6315bfa2517a84544abb9237ec9f698581ba6628c1ae5",
+      "bytes": 45993,
+      "sourceSha256": "e50ebf6bcf840f8a4229d219ecb20fc1422c74b5b3aa2034dff0b73852380b79",
+      "outputSha256": "e50ebf6bcf840f8a4229d219ecb20fc1422c74b5b3aa2034dff0b73852380b79",
       "transform": "verbatim"
     },
     {
@@ -347,9 +347,9 @@
     {
       "source": "package/dist/claustrum/insula.js",
       "output": "claustrum/insula.js",
-      "bytes": 19744,
-      "sourceSha256": "506b549f26a741599bfee04bf334cf7b29fde4077a79f65bc2dad78e03bafee0",
-      "outputSha256": "506b549f26a741599bfee04bf334cf7b29fde4077a79f65bc2dad78e03bafee0",
+      "bytes": 20137,
+      "sourceSha256": "e2a2625cdad490cf24aa0badf66c842becd806738f8b137ebcf2b01e296eb0d2",
+      "outputSha256": "e2a2625cdad490cf24aa0badf66c842becd806738f8b137ebcf2b01e296eb0d2",
       "transform": "verbatim"
     },
     {
@@ -603,9 +603,9 @@
     {
       "source": "package/dist/fs/refresh-file-lock.js",
       "output": "fs/refresh-file-lock.js",
-      "bytes": 37832,
-      "sourceSha256": "07b261b409c5c6cc9b35cb732df44486d372413ce6ae078be4b211b9b5a5c1c7",
-      "outputSha256": "07b261b409c5c6cc9b35cb732df44486d372413ce6ae078be4b211b9b5a5c1c7",
+      "bytes": 37831,
+      "sourceSha256": "e0fdcc7a45548f3c88ea49bbe000f6e4022fb9c219f0510aa934492adb72a505",
+      "outputSha256": "e0fdcc7a45548f3c88ea49bbe000f6e4022fb9c219f0510aa934492adb72a505",
       "transform": "verbatim"
     },
     {
@@ -619,9 +619,9 @@
     {
       "source": "package/dist/fs/with-lock.js",
       "output": "fs/with-lock.js",
-      "bytes": 1803,
-      "sourceSha256": "f31ff1935e18563e465ab235202de3932255d3b1fc72b5d0baf6d3502931fc8e",
-      "outputSha256": "f31ff1935e18563e465ab235202de3932255d3b1fc72b5d0baf6d3502931fc8e",
+      "bytes": 3003,
+      "sourceSha256": "690fb43c6a0eb6a02eac024b8b58caa39775a37d0064118dab879a0e5ac8c996",
+      "outputSha256": "690fb43c6a0eb6a02eac024b8b58caa39775a37d0064118dab879a0e5ac8c996",
       "transform": "verbatim"
     },
     {
@@ -763,17 +763,17 @@
     {
       "source": "package/dist/quota/format.d.ts",
       "output": "quota/format.d.ts",
-      "bytes": 5507,
-      "sourceSha256": "7df60af3e135f34e157bf41c05b59052047f1a583ff3f1dabb3ca4e525b8089a",
-      "outputSha256": "7df60af3e135f34e157bf41c05b59052047f1a583ff3f1dabb3ca4e525b8089a",
+      "bytes": 5816,
+      "sourceSha256": "1865f4a06b8bd06b3dda73b59a7becc3eb2d13036134c1a34b8b6dce12678f21",
+      "outputSha256": "1865f4a06b8bd06b3dda73b59a7becc3eb2d13036134c1a34b8b6dce12678f21",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/format.js",
       "output": "quota/format.js",
-      "bytes": 18143,
-      "sourceSha256": "e00f3bb6d9da8b13522f02f953387e218f9cc6b62b80821ca081aa06f76d27c6",
-      "outputSha256": "e00f3bb6d9da8b13522f02f953387e218f9cc6b62b80821ca081aa06f76d27c6",
+      "bytes": 18881,
+      "sourceSha256": "ffd69317391a225fb8e75550c22ea401480626cde762c52e61001955952ee013",
+      "outputSha256": "ffd69317391a225fb8e75550c22ea401480626cde762c52e61001955952ee013",
       "transform": "verbatim"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/antigravity-auth-core",
-  "version": "3.0.20",
+  "version": "3.0.22",
   "description": "Harness-agnostic core for Google Antigravity OAuth: transport, fingerprint, request transforms, accounts, quota",
   "type": "module",
   "license": "MIT",