@cortexkit/antigravity-auth-core 3.0.29 → 3.0.30

package/dist/common-auth-embedded/store/provider-state.js

@@ -1,4 +1,4 @@
-import { assertNotInsideHook, runInsideHook } from './hooks.js';
+import { assertNotInsideHook, runInsideCodec, runInsideHook } from './hooks.js';
 import { runOperation, withTransaction } from './mutate.js';
 import { readRow, refusal, requireBound, rowLockSpec, unknownRow, } from './runtime.js';
 import { boundProviderStateDigest, CREDENTIAL_STAMP_KEY, credentialDigest, isCredentialEpoch, isRecord, PROVIDER_STATE_KEY, parseStamp, providerStateDigest, rowLockKey, } from './schema.js';
@@ -21,7 +21,7 @@ export function acceptProviderState(codec, operation, id, value, what = 'the pro
     }
     if (normalized === undefined)
         throw refusal(operation, id, 'invalid-provider-state', `${what} cannot be stored as JSON`);
-    if (!codec.validate(normalized))
+    if (!runInsideCodec(() => codec.validate(normalized)))
         throw refusal(operation, id, 'invalid-provider-state', `the provider-state codec rejected ${what}`);
     return normalized;
 }
@@ -35,7 +35,7 @@ export function mergedProviderState(codec, operation, id, onDisk, incoming) {
         return { kind: 'set', value: incoming };
     return {
         kind: 'set',
-        value: acceptProviderState(codec, operation, id, codec.merge(structuredClone(onDisk), structuredClone(incoming)), 'the merged provider state'),
+        value: acceptProviderState(codec, operation, id, runInsideCodec(() => codec.merge?.(structuredClone(onDisk), structuredClone(incoming))), 'the merged provider state'),
     };
 }
 /**
@@ -48,7 +48,7 @@ export function mergedProviderState(codec, operation, id, onDisk, incoming) {
 export function replacementProviderState(codec, row, credentialEpoch, identity, incoming) {
     const hook = codec?.onReplace;
     const next = hook
-        ? hook(row.providerState === undefined
+        ? runInsideCodec(() => hook(row.providerState === undefined
             ? undefined
             : structuredClone(row.providerState), {
             id: row.id,
@@ -60,7 +60,7 @@ export function replacementProviderState(codec, row, credentialEpoch, identity,
             ...(incoming !== undefined
                 ? { incoming: structuredClone(incoming) }
                 : {}),
-        })
+        }))
         : incoming;
     if (next === undefined)
         return { kind: 'clear' };

package/dist/common-auth-embedded/store/refresh.js

@@ -200,7 +200,7 @@ export async function refreshRow(rt, id, provider, options = {}) {
         if (options.onPersisted) {
             try {
                 const persisted = options.onPersisted;
-                await runInsideHook('refresh', () => persisted(id, commit.stored));
+                await runInsideHook('refresh', () => persisted(id, commit.stored), true);
             }
             catch (cause) {
                 throw new PoolOperationError({

package/dist/common-auth-embedded/store/schema.js

@@ -1,4 +1,5 @@
 import { createHash } from 'node:crypto';
+import { runInsideCodec } from './hooks.js';
 /** Top-level key of the config file that holds everything the pool adds. */
 export const POOL_KEY = 'commonAuthPool';
 /** The pool schema this library reads and writes. */
@@ -182,7 +183,9 @@ export function stampFor(credential, credentialEpoch, binding, options = {}) {
  * digest the store writes.
  */
 export function providerStateDigest(codec, value) {
-    const bound = codec?.credentialBound ? codec.credentialBound(value) : value;
+    const bound = codec?.credentialBound
+        ? runInsideCodec(() => codec.credentialBound?.(value))
+        : value;
     return createHash('sha256')
         .update(`provider-state\0${JSON.stringify(bound ?? null)}`)
         .digest('hex');
@@ -420,8 +423,10 @@ function parseEntry(raw, codec) {
         return undefined;
     if ('disabledReason' in raw && typeof raw.disabledReason !== 'string')
         return undefined;
-    const quota = 'quota' in raw && codec.decode ? codec.decode(raw.quota) : raw.quota;
-    if ('quota' in raw && !codec.validate(quota))
+    const quota = 'quota' in raw && codec.decode
+        ? runInsideCodec(() => codec.decode?.(raw.quota))
+        : raw.quota;
+    if ('quota' in raw && !runInsideCodec(() => codec.validate(quota)))
         return undefined;
     if ('staged' in raw && !parseReservation(raw.staged))
         return undefined;
@@ -666,7 +671,7 @@ function providerStateFields(account, credential, credentialEpoch, identity, cod
     const value = account[PROVIDER_STATE_KEY];
     // The value is validated before it is projected, so the projection only
     // ever sees a value of the shape the codec accepts.
-    if (!codec?.validate(value))
+    if (!codec || !runInsideCodec(() => codec.validate(value)))
         return { providerStateDropped: 'invalid' };
     if (providerStateDigest(codec, value) !== digest)
         return { providerStateDropped: 'uncovered' };

package/dist/common-auth-embedded/store/settings.d.ts

@@ -59,5 +59,7 @@ export declare function readPoolSettings(rt: StoreRuntime): Promise<SettingsRead
  * pool-owned key refuses (`invalid-input`) with nothing written; a result
  * equal to the current settings writes nothing. The state file is never
  * touched, and the pool-owned keys are written back exactly as read.
+ * commonAuthLimits is also carried through unchanged, even when omitted by
+ * the mutator; an explicit change to it refuses before writing anything.
  */
 export declare function updatePoolSettings(rt: StoreRuntime, mutator: SettingsMutator, options?: UpdateSettingsOptions): Promise<UpdateSettingsResult>;

package/dist/common-auth-embedded/store/settings.js

@@ -36,12 +36,13 @@ function defineKey(target, key, value) {
 /**
  * The next config: the pool-owned keys exactly as read, every settings key
  * from `next` in its existing position, settings keys `next` dropped left
- * out, and new settings keys appended.
+ * out, and new settings keys appended. The limits envelope is always carried
+ * through from disk; ordinary settings mutators do not own that namespace.
  */
 function composeConfig(config, next) {
     const out = {};
     for (const [key, value] of Object.entries(config)) {
-        if (POOL_OWNED_KEYS.includes(key))
+        if (POOL_OWNED_KEYS.includes(key) || key === 'commonAuthLimits')
             defineKey(out, key, value);
         else if (Object.hasOwn(next, key))
             defineKey(out, key, next[key]);
@@ -82,6 +83,8 @@ export async function readPoolSettings(rt) {
  * pool-owned key refuses (`invalid-input`) with nothing written; a result
  * equal to the current settings writes nothing. The state file is never
  * touched, and the pool-owned keys are written back exactly as read.
+ * commonAuthLimits is also carried through unchanged, even when omitted by
+ * the mutator; an explicit change to it refuses before writing anything.
  */
 export async function updatePoolSettings(rt, mutator, options = {}) {
     assertNotInsideHook('updateSettings');
@@ -109,9 +112,13 @@ export async function updatePoolSettings(rt, mutator, options = {}) {
             const owned = POOL_OWNED_KEYS.filter((key) => Object.hasOwn(next, key));
             if (owned.length > 0)
                 throw settingsRefusal(`settings cannot set the pool-owned key(s) ${owned.join(', ')}`);
-            if (isDeepStrictEqual(next, current))
-                return { settings: current, outcome: 'unchanged' };
+            if (Object.hasOwn(next, 'commonAuthLimits') &&
+                (!Object.hasOwn(current, 'commonAuthLimits') ||
+                    !isDeepStrictEqual(next.commonAuthLimits, current.commonAuthLimits)))
+                throw settingsRefusal('settings cannot alter commonAuthLimits; use updateLimitsNamespace');
             const config = composeConfig(result.config, next);
+            if (isDeepStrictEqual(settingsOf(config), current))
+                return { settings: current, outcome: 'unchanged' };
             const info = { operation: 'updateSettings', rowId: undefined };
             await writeJsonAtomic(ctx.configPath, config, {
                 beforeRename: async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/antigravity-auth-core",
-  "version": "3.0.29",
+  "version": "3.0.30",
   "description": "Harness-agnostic core for Google Antigravity OAuth: transport, fingerprint, request transforms, accounts, quota",
   "type": "module",
   "license": "MIT",