@cortexkit/antigravity-auth-core 3.0.21 → 3.0.22

package/dist/common-auth-embedded/fs/refresh-file-lock.js

@@ -244,8 +244,8 @@ export async function acquireRefreshFileLockWithClock(options) {
             }
             catch (readError) {
                 // The holder can release after exclusive creation reports a collision.
-                // Only absence permits another acquisition attempt; security and sharing
-                // refusals must still escape rather than being treated as contention.
+                // Only absence permits acquisition to continue here. Sharing failures
+                // escape to withLock's deadline-bounded retry, never to stale eviction.
                 if (readError.code !== 'ENOENT')
                     throw readError;
             }

package/dist/common-auth-embedded/fs/with-lock.js

@@ -1,3 +1,5 @@
+import { join, resolve } from 'node:path';
+import { PrivateFileError, windowsPrivateFiles } from './private-files.js';
 import { acquireRefreshFileLock } from './refresh-file-lock.js';
 export function lockPathFor(target, name) {
     return `${target}.${name}.lock`;
@@ -18,20 +20,42 @@ export class LockOwnershipError extends Error {
         this.details = details;
     }
 }
+function isChangingLockRead(error, target, name) {
+    if (!windowsPrivateFiles ||
+        !(error instanceof PrivateFileError) ||
+        error.reason !== 'io-error' ||
+        (error.win32Code !== 32 && error.win32Code !== 303) ||
+        (error.stage !== 'read' && error.stage !== 'verify'))
+        return false;
+    const path = resolve(lockPathFor(target, name));
+    return error.path === path || error.path === join(path, 'owner.json');
+}
 export async function withLock(target, options, fn) {
     const started = performance.now();
     for (;;) {
         options.signal?.throwIfAborted();
-        const lock = await acquireRefreshFileLock({
-            path: target,
-            name: options.name,
-            ttlMs: options.ttlMs,
-            renew: options.renew ?? false,
-            ...(options.onStep ? { onStep: options.onStep } : {}),
-            ...(options.onRenewalTimer
-                ? { onRenewalTimer: options.onRenewalTimer }
-                : {}),
-        });
+        let lock;
+        let changingReadError;
+        try {
+            lock = await acquireRefreshFileLock({
+                path: target,
+                name: options.name,
+                ttlMs: options.ttlMs,
+                renew: options.renew ?? false,
+                ...(options.onStep ? { onStep: options.onStep } : {}),
+                ...(options.onRenewalTimer
+                    ? { onRenewalTimer: options.onRenewalTimer }
+                    : {}),
+            });
+        }
+        catch (error) {
+            if (!isChangingLockRead(error, target, options.name))
+                throw error;
+            // Sharing violations (32) and delete-pending opens (303) do not reveal
+            // ownership or expiry. Retry exclusive creation, never infer a stale lock.
+            lock = null;
+            changingReadError = error;
+        }
         if (lock) {
             try {
                 options.signal?.throwIfAborted();
@@ -43,6 +67,9 @@ export async function withLock(target, options, fn) {
         }
         const remaining = options.timeoutMs - (performance.now() - started);
         if (remaining <= 0) {
+            // Keep persistent native IO failures distinguishable from a live holder.
+            if (changingReadError)
+                throw changingReadError;
             throw new LockContentionError({
                 target,
                 name: options.name,

package/dist/common-auth-embedded/quota/format.d.ts

@@ -30,6 +30,8 @@ export interface QuotaTextOptions {
 }
 export interface QuotaWindowPart {
     kind: 'window' | 'budget';
+    /** Unknown windows have no dated percentage; budgets retain their own wording. */
+    reading: 'known' | 'unknown';
     /** The display name of a quota window, or `credits` for the budget. */
     name: string;
     /**
@@ -45,7 +47,8 @@ export interface QuotaWindowPart {
     remainingPercent?: number;
     /** A bare relative reset span such as `4d`, only when the reset is future. */
     resetIn?: string;
-    checkedAt: number;
+    /** The reading time, omitted for a window with no reading. */
+    checkedAt?: number;
     /** Whether the reset followed this reading and has arrived by `now`. */
     resetSinceReading: boolean;
 }
@@ -64,9 +67,11 @@ export interface QuotaParts {
  */
 export declare function quotaWindowName(limit: Pick<ProjectedLimit, 'scope' | 'label' | 'windowMinutes'>): string;
 /**
- * Structured quota wording for layouts that need one row per window. The
- * windows use the same filtering and order as `quotaTextParts`; future resets
- * and the optional age keep the shared formatter's wording.
+ * Structured quota wording for layouts that need one row per window.
+ * Windows without a dated percentage remain as explicit unknown parts. Limits
+ * marked absent (not reported) or retired (no longer tracked) remain omitted.
+ * Reported windows, future resets and the optional age keep the shared
+ * formatter's wording and order.
  */
 export declare function quotaWindowParts(quota: ProjectedQuota | undefined, options: QuotaTextOptions): QuotaParts;
 /**

package/dist/common-auth-embedded/quota/format.js

@@ -5,10 +5,10 @@
 //
 // The rules: a window is named by its length (`5h`, `7d`), or, for a window
 // that binds only one model family, by the label the plugin stored it under.
-// Every figure is "% left". A window the provider did not report (an absence
-// record or a retirement tombstone) is left out rather than written as "not
-// reported". A reset is a short time from now (`resets 2h`). A reading older
-// than fifteen minutes says how old it is (`checked 3h ago`).
+// Every reported window figure is "% left". A window the provider did not
+// report (an absence record or a retirement tombstone) is left out rather than
+// written as "not reported". A reset is a short time from now (`resets 2h`).
+// A reading older than fifteen minutes says how old it is (`checked 3h ago`).
 //
 // Like the rest of this module it reads no clock: `now` is a parameter.
 import { ALL_SCOPE } from './map.js';
@@ -97,12 +97,14 @@ function displayOrder(left, right) {
     return left.label < right.label ? -1 : left.label > right.label ? 1 : 0;
 }
 /**
- * Structured quota wording for layouts that need one row per window. The
- * windows use the same filtering and order as `quotaTextParts`; future resets
- * and the optional age keep the shared formatter's wording.
+ * Structured quota wording for layouts that need one row per window.
+ * Windows without a dated percentage remain as explicit unknown parts. Limits
+ * marked absent (not reported) or retired (no longer tracked) remain omitted.
+ * Reported windows, future resets and the optional age keep the shared
+ * formatter's wording and order.
  */
 export function quotaWindowParts(quota, options) {
-    const { windows, age } = scopedWindowParts(quota, options);
+    const { windows, age } = scopedWindowParts(quota, options, true);
     const parts = windows.map(({ part }) => part);
     return age === undefined ? { windows: parts } : { windows: parts, age };
 }
@@ -125,34 +127,47 @@ function withShortNames(windows) {
     }
     return windows;
 }
+function hasWindowReading(limit) {
+    return (Number.isFinite(limit.remainingPercent) && Number.isFinite(limit.checkedAt));
+}
 /**
  * `quotaWindowParts` with each window's scope kept beside it. The narrow form
  * needs the scope to name and pick model-scoped windows; the public parts do
- * not carry it, so their shape stays as it was.
+ * not carry the scope.
  */
-function scopedWindowParts(quota, options) {
+function scopedWindowParts(quota, options, includeUnknown = false) {
     if (!quota)
         return { windows: [] };
     const { now } = options;
     const readings = quota.limits
-        .filter((limit) => limit.kind === 'reading' && limit.remainingPercent !== undefined)
+        .filter((limit) => limit.kind === 'reading' && (includeUnknown || hasWindowReading(limit)))
         .sort(displayOrder);
     const windows = readings.map((limit) => {
-        const remainingPercent = clampPercent(limit.remainingPercent ?? 0);
-        return {
-            scope: limit.scope,
-            ...(limit.windowMinutes === undefined
-                ? {}
-                : { windowMinutes: limit.windowMinutes }),
-            part: {
+        const part = hasWindowReading(limit)
+            ? {
                 kind: 'window',
+                reading: 'known',
                 name: quotaWindowName(limit),
                 short: '',
-                figure: percentLeft(limit.remainingPercent ?? 0),
-                remainingPercent,
+                figure: percentLeft(limit.remainingPercent),
+                remainingPercent: clampPercent(limit.remainingPercent),
                 checkedAt: limit.checkedAt,
                 ...resetDetails(limit.resetsAt, limit.checkedAt, now),
-            },
+            }
+            : {
+                kind: 'window',
+                reading: 'unknown',
+                name: quotaWindowName(limit),
+                short: '',
+                figure: 'no reading',
+                resetSinceReading: false,
+            };
+        return {
+            scope: limit.scope,
+            ...(limit.windowMinutes === undefined
+                ? {}
+                : { windowMinutes: limit.windowMinutes }),
+            part,
         };
     });
     const budget = quota.budget;
@@ -168,6 +183,7 @@ function scopedWindowParts(quota, options) {
             spent: budget.reached,
             part: {
                 kind: 'budget',
+                reading: 'known',
                 name: 'credits',
                 short: '',
                 figure,
@@ -180,8 +196,11 @@ function scopedWindowParts(quota, options) {
         });
     }
     withShortNames(windows);
-    if (windows.length > 0) {
-        const age = now - Math.min(...windows.map(({ part }) => part.checkedAt));
+    const readingTimes = windows.flatMap(({ part }) => part.reading === 'known' && part.checkedAt !== undefined
+        ? [part.checkedAt]
+        : []);
+    if (readingTimes.length > 0) {
+        const age = now - Math.min(...readingTimes);
         if (age > (options.staleAfterMs ?? QUOTA_STALE_AFTER_MS)) {
             return { windows, age: `checked ${shortSpan(age)} ago` };
         }
@@ -357,13 +376,13 @@ function narrowTextParts(quota, options) {
 export function quotaTextParts(quota, options) {
     if (options.form === 'narrow')
         return narrowTextParts(quota, options);
-    const parts = quotaWindowParts(quota, options);
+    const { windows, age } = scopedWindowParts(quota, options);
     const full = (options.form ?? 'full') === 'full';
-    const text = parts.windows.map((part) => {
+    const text = windows.map(({ part }) => {
         const reset = full && part.resetIn ? `, resets ${part.resetIn}` : '';
         return `${part.kind === 'budget' ? '' : `${part.name} `}${part.figure}${reset}`;
     });
-    return parts.age === undefined ? text : [...text, parts.age];
+    return age === undefined ? text : [...text, age];
 }
 /**
  * A row's quota as one line: `5h 58% left · 7d 90% left` in the compact

package/dist/common-auth-embedded/source-output.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "package": "@cortexkit/common-auth",
-  "version": "0.32.1",
+  "version": "0.33.0",
   "artifactStatus": "published",
   "publicRoots": {
     "./store": {
@@ -37,15 +37,15 @@
       "import": "./dist/pi-slot/index.js"
     }
   },
-  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.32.1.tgz",
-  "tarballSha256": "d25d2eb670bc5ac48e75bf31cd633bb8b56fd807bf4467d69dbf62a00e1e6717",
-  "sri": "sha512-Y3SmHTnkDjdvo8d6MsQTVr+GlR3q6Ro8HYDqEFuotSUbrv8GwJvjRkYraN8ahEAT8uRHFmfyWGuogfYLzz65DA==",
+  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.33.0.tgz",
+  "tarballSha256": "bba9f56f7fb353c9c712113722c7c9361f0e13e930c73f57314185b13032a24c",
+  "sri": "sha512-cbbyqXTK1TYQZNHb2xA/ueZGQsBvAX6H9hTlQcZZxM7SR/u7tsscyBAWw38ViXl1n/gwkqgsvs2Vbs6cZ0hOrw==",
   "canonicalFiles": 147,
-  "canonicalBytes": 1000963,
+  "canonicalBytes": 1003209,
   "generator": {
     "path": "packages/opencode/scripts/embed-common-auth.ts",
     "version": 4,
-    "sha256": "d0920ba672e4d2a4ab37cd827d0a8098e9253d23678b88d051750373787af65d"
+    "sha256": "9f9ebaeb47c9c18874ed832504422c0791551627c34092885cb481c6fe23ef19"
   },
   "files": [
     {
@@ -603,9 +603,9 @@
     {
       "source": "package/dist/fs/refresh-file-lock.js",
       "output": "fs/refresh-file-lock.js",
-      "bytes": 37832,
-      "sourceSha256": "07b261b409c5c6cc9b35cb732df44486d372413ce6ae078be4b211b9b5a5c1c7",
-      "outputSha256": "07b261b409c5c6cc9b35cb732df44486d372413ce6ae078be4b211b9b5a5c1c7",
+      "bytes": 37831,
+      "sourceSha256": "e0fdcc7a45548f3c88ea49bbe000f6e4022fb9c219f0510aa934492adb72a505",
+      "outputSha256": "e0fdcc7a45548f3c88ea49bbe000f6e4022fb9c219f0510aa934492adb72a505",
       "transform": "verbatim"
     },
     {
@@ -619,9 +619,9 @@
     {
       "source": "package/dist/fs/with-lock.js",
       "output": "fs/with-lock.js",
-      "bytes": 1803,
-      "sourceSha256": "f31ff1935e18563e465ab235202de3932255d3b1fc72b5d0baf6d3502931fc8e",
-      "outputSha256": "f31ff1935e18563e465ab235202de3932255d3b1fc72b5d0baf6d3502931fc8e",
+      "bytes": 3003,
+      "sourceSha256": "690fb43c6a0eb6a02eac024b8b58caa39775a37d0064118dab879a0e5ac8c996",
+      "outputSha256": "690fb43c6a0eb6a02eac024b8b58caa39775a37d0064118dab879a0e5ac8c996",
       "transform": "verbatim"
     },
     {
@@ -763,17 +763,17 @@
     {
       "source": "package/dist/quota/format.d.ts",
       "output": "quota/format.d.ts",
-      "bytes": 5507,
-      "sourceSha256": "7df60af3e135f34e157bf41c05b59052047f1a583ff3f1dabb3ca4e525b8089a",
-      "outputSha256": "7df60af3e135f34e157bf41c05b59052047f1a583ff3f1dabb3ca4e525b8089a",
+      "bytes": 5816,
+      "sourceSha256": "1865f4a06b8bd06b3dda73b59a7becc3eb2d13036134c1a34b8b6dce12678f21",
+      "outputSha256": "1865f4a06b8bd06b3dda73b59a7becc3eb2d13036134c1a34b8b6dce12678f21",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/format.js",
       "output": "quota/format.js",
-      "bytes": 18143,
-      "sourceSha256": "e00f3bb6d9da8b13522f02f953387e218f9cc6b62b80821ca081aa06f76d27c6",
-      "outputSha256": "e00f3bb6d9da8b13522f02f953387e218f9cc6b62b80821ca081aa06f76d27c6",
+      "bytes": 18881,
+      "sourceSha256": "ffd69317391a225fb8e75550c22ea401480626cde762c52e61001955952ee013",
+      "outputSha256": "ffd69317391a225fb8e75550c22ea401480626cde762c52e61001955952ee013",
       "transform": "verbatim"
     },
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/antigravity-auth-core",
-  "version": "3.0.21",
+  "version": "3.0.22",
   "description": "Harness-agnostic core for Google Antigravity OAuth: transport, fingerprint, request transforms, accounts, quota",
   "type": "module",
   "license": "MIT",