@cortexkit/antigravity-auth-core 3.0.29 → 3.0.31

package/dist/agy-request-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agy-request-metadata.d.ts","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAQD,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,wBAAwB,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,OAAO,CAAA;IAC7B,wBAAwB,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAA;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC7C,aAAa,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,KAAK,CAAA;CAC7C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOnD;AAED,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,wBAAwB,CAM1B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;gBAGhC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC;IAQ7C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB;IAmBlD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IAW1C,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,KAAK;CA0Bd;AAiBD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAkBN;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,GAAE,OAAO,GAAG,UAAU,GAAG,KAAe,GAC3C,MAAM,CA0BR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,EACb,SAAS,SAAa,EACtB,OAAO,GAAE,8BAAmC,GAC3C,uBAAuB,CA4BzB"}
+{"version":3,"file":"agy-request-metadata.d.ts","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAQD,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,wBAAwB,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,OAAO,CAAA;IAC7B,wBAAwB,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAA;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC7C,aAAa,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,KAAK,CAAA;CAC7C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOnD;AAED,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,wBAAwB,CAM1B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;gBAGhC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC;IAQ7C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB;IAmBlD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IAW1C,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,KAAK;CA0Bd;AAoBD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAkBN;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,GAAE,OAAO,GAAG,UAAU,GAAG,KAAe,GAC3C,MAAM,CA0BR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,EACb,SAAS,SAAa,EACtB,OAAO,GAAE,8BAAmC,GAC3C,uBAAuB,CA4BzB"}

package/dist/agy-request-metadata.js

@@ -108,6 +108,9 @@ export class AgyRequestSessionStore {
 }
 // Historical metadata remains readable; host admission refuses these retired routes.
 const HISTORICAL_AGY_MODEL_ENUMS = {
+    'gemini-3.5-flash-extra-low': 'MODEL_PLACEHOLDER_M187',
+    'gemini-3.5-flash-low': 'MODEL_PLACEHOLDER_M20',
+    'gemini-3-flash-agent': 'MODEL_PLACEHOLDER_M84',
     'gemini-3.1-pro-low': 'MODEL_PLACEHOLDER_M36',
     'gemini-3.1-pro-high': 'MODEL_PLACEHOLDER_M37',
     'gemini-pro-agent': 'MODEL_PLACEHOLDER_M16',

package/dist/agy-request-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"agy-request-metadata.js","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,qBAAqB,GAAG,mBAAmB,CAAA;AACjD,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACxD,MAAM,0BAA0B,GAAG,GAAG,CAAA;AAEtC,MAAM,uBAAuB,GAAG;IAC9B,UAAU;IACV,mBAAmB;IACnB,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,WAAW;CACH,CAAA;AAiDV,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,IAAI,GAAG,qBAAqB,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAA;QACpB,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,GAAG,cAAc,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,YAAoB,EACpB,MAA0D,EAAE;IAE5D,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,UAAU,EAAE;QAClD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,UAAU,EAAE;QAC9C,gBAAgB,EAAE,aAAa,CAAC,YAAY,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,OAAO,sBAAsB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAA;IACpD,YAAY,CAAQ;IACpB,KAAK,CAAQ;IACb,UAAU,CAAQ;IAClB,GAAG,CAAc;IAElC,YACE,YAAoB,EACpB,UAAyC,EAAE;QAE3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,4BAA4B,CAAA;QAC1D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,0BAA0B,CAAA;QAClE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACpC,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,SAAS,CAAA;YACnC,OAAO,QAAQ,CAAC,OAAO,CAAA;QACzB,CAAC;QAED,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACpB,OAAO;YACP,cAAc,EAAE,SAAS;YACzB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAA;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAA;QACvC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAC/B,CAAC;IAED,iBAAiB,CAAC,GAAW;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,UAAU,EAAE,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,SAAiB,EAAE,YAAoB;QACnD,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAA;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,MAAM,EAAE,CAAC;gBAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;QAED,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU;YACpC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAC/B,CAAC;YACD,IAAI,SAAS,GAAkB,IAAI,CAAA;YACnC,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAA;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,YAAY,EAAE,CAAC;oBAChE,SAAS,GAAG,GAAG,CAAA;oBACf,YAAY,GAAG,KAAK,CAAC,cAAc,CAAA;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAK;YACP,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,0BAA0B,GAAqC;IACnE,oBAAoB,EAAE,uBAAuB;IAC7C,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,uBAAuB;IAC3C,sBAAsB,EAAE,uBAAuB;IAC/C,yBAAyB,EAAE,uBAAuB;IAClD,uBAAuB,EAAE,uBAAuB;IAChD,sBAAsB,EAAE,wBAAwB;IAChD,yBAAyB,EAAE,wBAAwB;IACnD,uBAAuB,EAAE,wBAAwB;IACjD,mBAAmB,EAAE,uBAAuB;IAC5C,0BAA0B,EAAE,uBAAuB;CACpD,CAAA;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IACjC,OAAO,iBAAiB,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAgC;IAEhC,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAE/C,KAAK,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC3B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAgC,EAChC,OAAqC,OAAO;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE5D,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,qBAAqB,GAAG,CAAC,CAAA;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACnE,SAAQ;QACV,MAAM,KAAK,GAAI,OAAmC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAA;QACzB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,qBAAqB,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC1D,OAAO,KAAK,CAAA;gBACd,OAAO,kBAAkB,IAAI,IAAI,CAAA;YACnC,CAAC,CAAC,CAAC,MAAM,CAAA;QACX,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAiC,EACjC,OAAgC,EAChC,KAAa,EACb,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EACtB,UAA0C,EAAE;IAE5C,MAAM,aAAa,GACjB,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC;QACpD,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACtE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAA;IAC5D,OAAO,CAAC,kBAAkB;QACxB,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,WAAW,CAAA;IACpD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,MAAM,GAAqB;QAC/B,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC;QACtC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAClD,wBAAwB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAC/D,qBAAqB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;KACrE,CAAA;IAED,OAAO;QACL,SAAS,EAAE,SAAS,OAAO,CAAC,cAAc,IAAI,SAAS,IAAI,OAAO,CAAC,YAAY,IAAI,aAAa,GAAG,CAAC,EAAE;QACtG,SAAS,EAAE,OAAO,CAAC,gBAAgB;QACnC,MAAM;QACN,aAAa;KACd,CAAA;AACH,CAAC"}
+{"version":3,"file":"agy-request-metadata.js","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,qBAAqB,GAAG,mBAAmB,CAAA;AACjD,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACxD,MAAM,0BAA0B,GAAG,GAAG,CAAA;AAEtC,MAAM,uBAAuB,GAAG;IAC9B,UAAU;IACV,mBAAmB;IACnB,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,WAAW;CACH,CAAA;AAiDV,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,IAAI,GAAG,qBAAqB,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAA;QACpB,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,GAAG,cAAc,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,YAAoB,EACpB,MAA0D,EAAE;IAE5D,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,UAAU,EAAE;QAClD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,UAAU,EAAE;QAC9C,gBAAgB,EAAE,aAAa,CAAC,YAAY,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,OAAO,sBAAsB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAA;IACpD,YAAY,CAAQ;IACpB,KAAK,CAAQ;IACb,UAAU,CAAQ;IAClB,GAAG,CAAc;IAElC,YACE,YAAoB,EACpB,UAAyC,EAAE;QAE3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,4BAA4B,CAAA;QAC1D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,0BAA0B,CAAA;QAClE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACpC,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,SAAS,CAAA;YACnC,OAAO,QAAQ,CAAC,OAAO,CAAA;QACzB,CAAC;QAED,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACpB,OAAO;YACP,cAAc,EAAE,SAAS;YACzB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAA;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAA;QACvC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAC/B,CAAC;IAED,iBAAiB,CAAC,GAAW;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,UAAU,EAAE,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,SAAiB,EAAE,YAAoB;QACnD,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAA;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,MAAM,EAAE,CAAC;gBAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;QAED,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU;YACpC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAC/B,CAAC;YACD,IAAI,SAAS,GAAkB,IAAI,CAAA;YACnC,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAA;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,YAAY,EAAE,CAAC;oBAChE,SAAS,GAAG,GAAG,CAAA;oBACf,YAAY,GAAG,KAAK,CAAC,cAAc,CAAA;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAK;YACP,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,0BAA0B,GAAqC;IACnE,4BAA4B,EAAE,wBAAwB;IACtD,sBAAsB,EAAE,uBAAuB;IAC/C,sBAAsB,EAAE,uBAAuB;IAC/C,oBAAoB,EAAE,uBAAuB;IAC7C,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,uBAAuB;IAC3C,sBAAsB,EAAE,uBAAuB;IAC/C,yBAAyB,EAAE,uBAAuB;IAClD,uBAAuB,EAAE,uBAAuB;IAChD,sBAAsB,EAAE,wBAAwB;IAChD,yBAAyB,EAAE,wBAAwB;IACnD,uBAAuB,EAAE,wBAAwB;IACjD,mBAAmB,EAAE,uBAAuB;IAC5C,0BAA0B,EAAE,uBAAuB;CACpD,CAAA;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IACjC,OAAO,iBAAiB,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAgC;IAEhC,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAE/C,KAAK,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC3B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAgC,EAChC,OAAqC,OAAO;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE5D,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,qBAAqB,GAAG,CAAC,CAAA;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACnE,SAAQ;QACV,MAAM,KAAK,GAAI,OAAmC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAA;QACzB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,qBAAqB,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC1D,OAAO,KAAK,CAAA;gBACd,OAAO,kBAAkB,IAAI,IAAI,CAAA;YACnC,CAAC,CAAC,CAAC,MAAM,CAAA;QACX,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAiC,EACjC,OAAgC,EAChC,KAAa,EACb,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EACtB,UAA0C,EAAE;IAE5C,MAAM,aAAa,GACjB,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC;QACpD,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACtE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAA;IAC5D,OAAO,CAAC,kBAAkB;QACxB,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,WAAW,CAAA;IACpD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,MAAM,GAAqB;QAC/B,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC;QACtC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAClD,wBAAwB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAC/D,qBAAqB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;KACrE,CAAA;IAED,OAAO;QACL,SAAS,EAAE,SAAS,OAAO,CAAC,cAAc,IAAI,SAAS,IAAI,OAAO,CAAC,YAAY,IAAI,aAAa,GAAG,CAAC,EAAE;QACtG,SAAS,EAAE,OAAO,CAAC,gBAAgB;QACnC,MAAM;QACN,aAAa;KACd,CAAA;AACH,CAAC"}

package/dist/common-auth-embedded/claustrum/consumer.d.ts

@@ -6,6 +6,7 @@ import { type ClaustrumLogger } from './errors.js';
 import type { CustodyLease } from './hub.js';
 import { type InsulaQuotaOptions, type InsulaQuotaResult } from './insula.js';
 import { type AccountMapper, type ProjectionOptions, type QuotaReceipt, type ReorderVaultRosterResult, type VaultRosterFile } from './roster.js';
+import type { ClaustrumUsageReading, ClaustrumUsageReportState } from './usage.js';
 import { type WatchMode } from './watch.js';
 export interface ClaustrumConsumerOptions<Q = QuotaObservation> {
     /**
@@ -229,6 +230,17 @@ export declare class ClaustrumConsumer<Q = QuotaObservation> {
      * poll, and a route whose credential or account changed is refused.
      */
     authorize(routeId: string, signal?: AbortSignal): Promise<ClaustrumScopedAttempt>;
+    /**
+     * Queue reply quota metadata without waiting or throwing. Pass rate-limit
+     * headers only, never tokens: the library does not filter header names.
+     * The credential must have been served by this host and still belong to the route.
+     */
+    reportUsage(input: {
+        routeId: string;
+        credentialId: string;
+        reading: ClaustrumUsageReading;
+    }): void;
+    usageReportState(): ClaustrumUsageReportState;
     reportFailure(attempt: ClaustrumScopedAttempt, status: number, source: ClaustrumReporterSource): Promise<void>;
     /**
      * Send on a vault route. `dispatch` builds and sends the request with the

package/dist/common-auth-embedded/claustrum/consumer.js

@@ -738,6 +738,42 @@ export class ClaustrumConsumer {
             combined.dispose();
         }
     }
+    /**
+     * Queue reply quota metadata without waiting or throwing. Pass rate-limit
+     * headers only, never tokens: the library does not filter header names.
+     * The credential must have been served by this host and still belong to the route.
+     */
+    reportUsage(input) {
+        if (this.#shutdown.signal.aborted)
+            return;
+        try {
+            const row = this.#roster?.rows.find((row) => row.routeId === input.routeId);
+            if (!row?.enabled ||
+                row.state !== 'active' ||
+                (row.credentialId !== input.credentialId &&
+                    !row.aliases?.includes(input.credentialId)))
+                return;
+            if (this.#hub) {
+                if (this.#lease && this.#hub.leaseLive(this.#lease))
+                    this.#lease.custody.reportUsage(input);
+            }
+            else
+                this.#custody?.reportUsage(input);
+        }
+        catch {
+            // Quota bookkeeping must never reject a provider request.
+        }
+    }
+    usageReportState() {
+        try {
+            return ((this.#hub
+                ? this.#lease?.custody
+                : this.#custody)?.usageReportState() ?? { pending: 0, inFlight: false, dropped: 0 });
+        }
+        catch {
+            return { pending: 0, inFlight: false, dropped: 0 };
+        }
+    }
     async reportFailure(attempt, status, source) {
         this.#assertOpen();
         if (this.#hub) {

package/dist/common-auth-embedded/claustrum/custody.d.ts

@@ -1,14 +1,15 @@
 import { type ClaustrumClient, type ClaustrumReporterSource, type EnrollmentTokenFile } from '@cortexkit/claustrum-client';
 import { type ClaustrumLogger } from './errors.js';
 import type { InsulaUsageTransport } from './insula.js';
+import { type ClaustrumUsageReading, type ClaustrumUsageReportState, type ScopedUsageSource } from './usage.js';
 import { type ScopedWatchSource, type WatchMode } from './watch.js';
 /**
- * `watchScoped` is present from claustrum-client 0.12.0. Hosts detect it at
- * run time and keep polling without it.
+ * claustrum-client adds watchScoped in 0.12.0 and reportUsageScoped in 0.14.0.
+ * Older clients keep polling and simply do not send reply quota readings.
  */
 export type ClaustrumScopedClient = Pick<ClaustrumClient, 'listScoped' | 'getScoped' | 'reportAuthFailureScoped' | 'close'> & {
     insula?: InsulaUsageTransport;
-} & ScopedWatchSource;
+} & ScopedWatchSource & ScopedUsageSource;
 /** The two credential types a plugin's family can hold; routing differs by type. */
 export type VaultCredentialType = 'oauth' | 'api_key';
 /**
@@ -332,7 +333,18 @@ export declare class ClaustrumScopedCustody {
      * other mode the host keeps its usual list timer.
      */
     watchRoster(options: ClaustrumRosterWatchOptions): ClaustrumRosterWatch;
+    /**
+     * Queue reply quota metadata and return synchronously. Pass rate-limit
+     * headers only, never tokens: the library does not filter header names.
+     * Only credentials served by this custody and retained in its roster report.
+     * Hosts managing their own roster must call retain() when that roster changes.
+     */
+    reportUsage(input: {
+        credentialId: string;
+        reading: ClaustrumUsageReading;
+    }): void;
+    usageReportState(): ClaustrumUsageReportState;
     close(): void;
-    /** Stop immediately; allow token reads 2 s and share an owner's timeout warning. */
+    /** Stop accepting work; give token reads and reply reports one shared 2 s drain. */
     dispose(onTimeout?: (pendingOperations: number) => void): Promise<void>;
 }

package/dist/common-auth-embedded/claustrum/custody.js

@@ -6,6 +6,7 @@ import { readClaustrumEnrollmentToken } from './enrollment.js';
 import { ClaustrumConsumerError } from './errors.js';
 import { CUSTODY_PLACEHOLDER_PREFIX } from './host-slot.js';
 import { drainShutdown, shutdownWarning } from './shutdown.js';
+import { ScopedUsageReporter, } from './usage.js';
 import { ScopedRosterWatch, } from './watch.js';
 /** Only a new version of the same account may replace an in-flight 401. */
 export function isScopedCredentialRotation(served, current) {
@@ -28,6 +29,14 @@ function scopedRetryReason(served, current) {
     return 'rotated';
 }
 const defaultLogger = createLogger('claustrum');
+function checkedEnrollmentToken(value) {
+    if (!/^[0-9a-f]{64}$/.test(value.token) ||
+        !Number.isSafeInteger(value.token_generation) ||
+        value.token_generation < 1) {
+        throw new ClaustrumConsumerError('invalid-token', 'Invalid Claustrum enrollment token');
+    }
+    return value.token;
+}
 // Opt-in diagnostics let tests retain wait phases without logging each vault read.
 const phaseDiagnostics = channel('common-auth.claustrum.phases');
 /**
@@ -183,6 +192,8 @@ export class ClaustrumScopedCustody {
     #reports = new WeakMap();
     #kept = new Map();
     #keptAttempts = new WeakMap();
+    #usage;
+    #usageServed = new Map();
     #setTimeout;
     #clearTimeout;
     #outage = false;
@@ -197,6 +208,7 @@ export class ClaustrumScopedCustody {
     #watches = new Set();
     #tokenReads = new Set();
     #warnShutdown;
+    #onDrainTimeout;
     #disposing;
     constructor(options) {
         const tokenPath = options.tokenPath;
@@ -218,6 +230,14 @@ export class ClaustrumScopedCustody {
         this.#warnShutdown = shutdownWarning(this.#logger);
         this.#setTimeout = options.setTimeoutImpl ?? setTimeout;
         this.#clearTimeout = options.clearTimeoutImpl ?? clearTimeout;
+        this.#usage = new ScopedUsageReporter({
+            client: this.#client,
+            owns: (id) => this.#usageServed.has(id),
+            token: async () => checkedEnrollmentToken(await this.#readToken()),
+            logger: this.#logger,
+            setTimeout: this.#setTimeout,
+            clearTimeout: this.#clearTimeout,
+        });
     }
     /** A watch losing its transport is the same outage as an unreachable read. */
     transportLost(error) {
@@ -303,12 +323,7 @@ export class ClaustrumScopedCustody {
                 });
         }
         this.#check(signal);
-        if (!/^[0-9a-f]{64}$/.test(value.token) ||
-            !Number.isSafeInteger(value.token_generation) ||
-            value.token_generation < 1) {
-            throw new ClaustrumConsumerError('invalid-token', 'Invalid Claustrum enrollment token');
-        }
-        return value.token;
+        return checkedEnrollmentToken(value);
     }
     async #call(operation, signal) {
         this.#check(signal);
@@ -370,6 +385,7 @@ export class ClaustrumScopedCustody {
         }
         catch (error) {
             this.#kept.clear();
+            this.#clearUsageOwnership();
             throw error;
         }
         if (phaseDiagnostics.hasSubscribers)
@@ -473,11 +489,19 @@ export class ClaustrumScopedCustody {
         else {
             this.reachable();
             this.#kept.clear();
+            this.#clearUsageOwnership();
         }
     }
     /** Discard bearer material when a route is removed, declined or rebound. */
     forget(credentialId) {
         this.#kept.delete(credentialId);
+        this.#usageServed.delete(credentialId);
+        this.#usage.forget(credentialId);
+    }
+    #clearUsageOwnership() {
+        for (const id of this.#usageServed.keys())
+            this.#usage.forget(id);
+        this.#usageServed.clear();
     }
     /** Apply an already-held roster; this never fetches credentials or writes it. */
     retain(identities) {
@@ -490,6 +514,14 @@ export class ClaustrumScopedCustody {
                 identity.accountIdentity !== kept.attempt.expectedAccountIdentity)
                 this.forget(id);
         }
+        for (const [id, served] of this.#usageServed) {
+            const identity = current.get(id);
+            if (!identity?.enabled ||
+                identity.state !== 'active' ||
+                identity.credentialType !== served.credentialType ||
+                identity.accountIdentity !== served.accountIdentity)
+                this.forget(id);
+        }
     }
     /** A frozen, non-secret summary for a plugin's status display. */
     keptReceiptState() {
@@ -527,6 +559,7 @@ export class ClaustrumScopedCustody {
         }
         catch (error) {
             this.#kept.clear();
+            this.#clearUsageOwnership();
             throw error;
         }
         if (this.#outage && kept) {
@@ -536,6 +569,7 @@ export class ClaustrumScopedCustody {
         try {
             const attempt = await this.#authorizeFresh({ credentialId, credentialType, accountIdentity }, token, signal);
             this.#kept.set(credentialId, { attempt, routeId, since: null });
+            this.#usageServed.set(credentialId, { ...identity });
             return attempt;
         }
         catch (error) {
@@ -750,6 +784,25 @@ export class ClaustrumScopedCustody {
             },
         };
     }
+    /**
+     * Queue reply quota metadata and return synchronously. Pass rate-limit
+     * headers only, never tokens: the library does not filter header names.
+     * Only credentials served by this custody and retained in its roster report.
+     * Hosts managing their own roster must call retain() when that roster changes.
+     */
+    reportUsage(input) {
+        if (this.#closed)
+            return;
+        try {
+            this.#usage.report(input.credentialId, input.reading);
+        }
+        catch {
+            // Quota bookkeeping must never reject a provider request.
+        }
+    }
+    usageReportState() {
+        return this.#usage.state();
+    }
     close() {
         if (this.#closed)
             return;
@@ -761,12 +814,24 @@ export class ClaustrumScopedCustody {
             watch.stop();
         this.#watches.clear();
         this.#kept.clear();
-        this.#client.close();
+        const usage = this.#usage.close();
+        if (usage) {
+            this.#tokenReads.add(usage);
+            void usage.then(() => this.#tokenReads.delete(usage));
+        }
+        else
+            this.#client.close();
+        this.#disposing = drainShutdown(this.#tokenReads, (count) => (this.#onDrainTimeout ?? this.#warnShutdown)(count)).finally(() => {
+            this.#usage.drop();
+            this.#usageServed.clear();
+            if (usage)
+                this.#client.close();
+        });
     }
-    /** Stop immediately; allow token reads 2 s and share an owner's timeout warning. */
+    /** Stop accepting work; give token reads and reply reports one shared 2 s drain. */
     async dispose(onTimeout = this.#warnShutdown) {
+        this.#onDrainTimeout = onTimeout;
         this.close();
-        this.#disposing ??= drainShutdown(this.#tokenReads, onTimeout);
         await this.#disposing;
     }
 }

package/dist/common-auth-embedded/claustrum/hub.d.ts

@@ -107,11 +107,12 @@ export interface ClaustrumHubMemberOptions<_Q = QuotaObservation> {
     logger?: ClaustrumLogger;
 }
 /** What a lease may do with the shared custody. */
-export type ClaustrumLeasedCustody = Pick<ClaustrumScopedCustody, 'authorize' | 'reportFailure' | 'forget' | 'keptReceiptState'>;
+export type ClaustrumLeasedCustody = Pick<ClaustrumScopedCustody, 'authorize' | 'reportFailure' | 'reportUsage' | 'usageReportState' | 'forget' | 'keptReceiptState'>;
 /**
  * One acquisition of the hub's shared custody. `custody` throws `closed`
  * after `release()`, and once the connection it belongs to ended for any
- * reason, vault mode going off included. `release()` is idempotent.
+ * reason, vault mode going off included. Best-effort `reportUsage` instead
+ * ignores reports through an ended lease. `release()` is idempotent.
  */
 export interface CustodyLease {
     readonly custody: ClaustrumLeasedCustody;

package/dist/common-auth-embedded/claustrum/hub.js

@@ -523,6 +523,14 @@ export class ClaustrumDiscoveryHub {
                 check();
                 return custody.reportFailure(attempt, status, source);
             },
+            reportUsage: (input) => {
+                if (!state.released && !generation.ended)
+                    custody.reportUsage(input);
+            },
+            usageReportState: () => {
+                check();
+                return custody.usageReportState();
+            },
             forget: (credentialId) => {
                 check();
                 custody.forget(credentialId);

package/dist/common-auth-embedded/claustrum/index.d.ts

@@ -12,6 +12,7 @@ export { acquireInsulaQuotaSource, type InsulaQuotaContext, type InsulaQuotaLook
 export { acceptAccount, type DeclinedAccount, declineAccount, isDeclined, } from './interlock.js';
 export { drainVaultQuota } from './quota-writer.js';
 export { type AccountMapper, acceptVaultRoute, DEFAULT_ROUTE_PREFIX, declineVaultRoute, type MutateVaultRosterOptions, mutateVaultRoster, type ProjectionOptions, projectVaultRoster, type QuotaReceipt, type ReorderVaultRosterOptions, type ReorderVaultRosterResult, readVaultRoster, recordVaultAccountQuota, recordVaultQuota, refreshVaultRoster, reorderVaultRoster, resolveVaultPrimary, type VaultPrimary, type VaultPrimaryBinding, type VaultPrimaryUnavailableReason, type VaultRosterFile, type VaultRosterLockContext, type VaultRosterRow, type VaultRosterSeed, vaultRosterSeed, vaultRoutingRows, } from './roster.js';
+export type { ClaustrumUsageReading, ClaustrumUsageReportState, } from './usage.js';
 export { type ChangeNotice, ChangeNoticeReader, RESUBSCRIBE_BACKOFF_MS, SAFETY_POLL_MS, ScopedRosterWatch, type ScopedRosterWatchOptions, type ScopedWatchEnd, type ScopedWatchHandle, type ScopedWatchNoticeShape, type ScopedWatchSource, WATCH_RETRY_MS, type WatchMode, } from './watch.js';
 /** How long `connectClaustrumScopedClient` waits by default. */
 export declare const SCOPED_CONNECT_TIMEOUT_MS = 10000;

package/dist/common-auth-embedded/claustrum/roster.d.ts

@@ -48,6 +48,8 @@ export interface VaultRosterFile {
     complete: boolean;
     /** The unusable records of an incomplete reply: a safe id and a fixed reason. */
     rejected?: SkippedVaultRecord[];
+    /** Opaque limits data; roster-only writers preserve even newer schemas. */
+    limits?: unknown;
     rows: VaultRosterRow[];
     declined: DeclinedAccount[];
 }
@@ -118,6 +120,8 @@ export interface VaultRosterLockContext {
 }
 export interface MutateVaultRosterOptions {
     signal?: AbortSignal;
+    /** Runs under the roster lock once published, even if a later step fails. Must not throw. */
+    onPublished?: () => void;
     /**
      * Runs when the new roster is fully staged on disk, immediately before the
      * rename that publishes it, so a caller can confirm a lease of its own at

package/dist/common-auth-embedded/claustrum/roster.js

@@ -1,6 +1,7 @@
 import { createHash } from 'node:crypto';
 import { stat } from 'node:fs/promises';
 import { resolve } from 'node:path';
+import { FileReadCache } from '../fs/file-read-cache.js';
 import { acquireRefreshFileLock, LockContentionError, LockOwnershipError, lockPathFor, PrivateFileError, withLock, writeJsonAtomic, } from '../fs/index.js';
 import { readPrivateText, windowsPrivateFiles } from '../fs/private-files.js';
 import { decodeQuotaMap, isQuotaObservation, mergeQuotaObservation, } from '../quota/index.js';
@@ -209,6 +210,7 @@ export function projectVaultRoster(previous, inventory, options = {}) {
     return {
         version: 1,
         view: inventory.view,
+        ...(previous?.limits !== undefined && { limits: previous.limits }),
         complete,
         ...(!complete && {
             rejected: inventory.skipped.map((record) => ({
@@ -319,6 +321,7 @@ function decodeRoster(value) {
         // that was used whole, so it reads as complete.
         complete: value.complete !== false,
         ...(rejected && { rejected }),
+        ...(value.limits !== undefined && { limits: value.limits }),
         rows,
         declined,
     };
@@ -331,7 +334,18 @@ function decodeRoster(value) {
 export function decodedVaultRoster(roster) {
     return decodeRoster(JSON.parse(JSON.stringify(roster)));
 }
+const rosterReadCache = new FileReadCache({
+    followSymlinks: true,
+});
 export async function readVaultRoster(path) {
+    // Windows permission, owner and ancestry checks must still run on every read.
+    if (windowsPrivateFiles)
+        return readFreshVaultRoster(path);
+    const roster = await rosterReadCache.read([path], ([resolvedPath = path]) => readFreshVaultRoster(resolvedPath));
+    // Callers edit rows and nested limits data; none may own the cached objects.
+    return structuredClone(roster);
+}
+async function readFreshVaultRoster(path) {
     let text;
     try {
         text = await readPrivateText(path, windowsPrivateFiles);
@@ -364,7 +378,8 @@ const DISCOVERY_LEASE = { name: 'claustrum-roster', ttlMs: 30_000 };
  */
 export async function mutateVaultRoster(path, change, options = {}) {
     return withLock(path, { ...WRITE_LOCK, signal: options.signal }, async (lock) => {
-        const current = await readVaultRoster(path);
+        // A read-modify-write always observes the file under its write lock.
+        const current = await readFreshVaultRoster(path);
         const { next, result } = await change(current, {
             assertOwned: () => lock.assertOwned(),
         });
@@ -372,13 +387,24 @@ export async function mutateVaultRoster(path, change, options = {}) {
             await lock.assertOwned();
             // Staging the file takes several awaited steps; check both the caller's
             // lease and this lock again at the last moment before the rename.
-            await writeJsonAtomic(path, next, {
-                beforeRename: async () => {
-                    await options.beforePublish?.();
-                    options.signal?.throwIfAborted();
-                    await lock.assertOwned();
-                },
-            });
+            try {
+                await writeJsonAtomic(path, next, {
+                    beforeRename: async () => {
+                        await options.beforePublish?.();
+                        options.signal?.throwIfAborted();
+                        await lock.assertOwned();
+                    },
+                });
+            }
+            catch (error) {
+                if (error &&
+                    typeof error === 'object' &&
+                    'published' in error &&
+                    error.published === true)
+                    options.onPublished?.();
+                throw error;
+            }
+            options.onPublished?.();
         }
         return result;
     });

package/dist/common-auth-embedded/claustrum/usage.d.ts

@@ -0,0 +1,41 @@
+import type { ClaustrumLogger } from './errors.js';
+/** Reply quota metadata, never authorization headers or bearer material. */
+export interface ClaustrumUsageReading {
+    provider: string;
+    observedAtMs: number;
+    headers?: Record<string, string>;
+    frame?: unknown;
+    account?: string;
+}
+/** Structural to also typecheck with the claustrum-client 0.6.2 peer minimum. */
+export interface ScopedUsageSource {
+    reportUsageScoped?(input: {
+        credentialId: string;
+        reading: Record<string, unknown>;
+        enrollmentToken?: string;
+    }): Promise<void>;
+}
+export interface ClaustrumUsageReportState {
+    readonly pending: number;
+    readonly inFlight: boolean;
+    readonly dropped: number;
+}
+/** One queue per custody connection, shared by every hub member on it. */
+export declare class ScopedUsageReporter {
+    #private;
+    private readonly options;
+    constructor(options: {
+        client: ScopedUsageSource;
+        owns: (credentialId: string) => boolean;
+        token: () => Promise<string>;
+        logger: ClaustrumLogger;
+        setTimeout: typeof setTimeout;
+        clearTimeout: typeof clearTimeout;
+    });
+    state(): ClaustrumUsageReportState;
+    report(credentialId: string, reading: ClaustrumUsageReading): void;
+    forget(credentialId: string): void;
+    /** Start the final flush; the custody's existing shutdown drain bounds it. */
+    close(): Promise<void> | undefined;
+    drop(): void;
+}