@cortexkit/antigravity-auth-core 3.0.3 → 3.0.4

package/dist/agy-request-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agy-request-metadata.d.ts","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAQD,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,wBAAwB,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,OAAO,CAAA;IAC7B,wBAAwB,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAA;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC7C,aAAa,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,KAAK,CAAA;CAC7C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOnD;AAED,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,wBAAwB,CAM1B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;gBAGhC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC;IAQ7C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB;IAmBlD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IAW1C,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,KAAK;CA0Bd;AAQD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAkBN;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,GAAE,OAAO,GAAG,UAAU,GAAG,KAAe,GAC3C,MAAM,CA0BR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,EACb,SAAS,SAAa,EACtB,OAAO,GAAE,8BAAmC,GAC3C,uBAAuB,CA4BzB"}
+{"version":3,"file":"agy-request-metadata.d.ts","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAQD,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,wBAAwB,CAAA;IACjC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,OAAO,CAAA;IAC7B,wBAAwB,EAAE,MAAM,GAAG,OAAO,CAAA;IAC1C,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAA;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,gBAAgB,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC7C,aAAa,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,KAAK,CAAA;CAC7C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOnD;AAED,wBAAgB,8BAA8B,CAC5C,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3D,wBAAwB,CAM1B;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;gBAGhC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,6BAAkC;IAQ7C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB;IAmBlD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IAW1C,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAOpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIzB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,KAAK;CA0Bd;AAiBD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjE;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAkBN;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,GAAE,OAAO,GAAG,UAAU,GAAG,KAAe,GAC3C,MAAM,CA0BR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,EACb,SAAS,SAAa,EACtB,OAAO,GAAE,8BAAmC,GAC3C,uBAAuB,CA4BzB"}

package/dist/agy-request-metadata.js

@@ -108,6 +108,15 @@ export class AgyRequestSessionStore {
 }
 // Historical metadata remains readable; host admission refuses these retired routes.
 const HISTORICAL_AGY_MODEL_ENUMS = {
+    'gemini-3.1-pro-low': 'MODEL_PLACEHOLDER_M36',
+    'gemini-3.1-pro-high': 'MODEL_PLACEHOLDER_M37',
+    'gemini-pro-agent': 'MODEL_PLACEHOLDER_M16',
+    'gemini-3.6-flash-low': 'MODEL_PLACEHOLDER_M73',
+    'gemini-3.6-flash-medium': 'MODEL_PLACEHOLDER_M72',
+    'gemini-3.6-flash-high': 'MODEL_PLACEHOLDER_M71',
+    'gemini-3.7-flash-low': 'MODEL_PLACEHOLDER_M300',
+    'gemini-3.7-flash-medium': 'MODEL_PLACEHOLDER_M299',
+    'gemini-3.7-flash-high': 'MODEL_PLACEHOLDER_M298',
     'claude-sonnet-4-6': 'MODEL_PLACEHOLDER_M35',
     'claude-opus-4-6-thinking': 'MODEL_PLACEHOLDER_M26',
 };

package/dist/agy-request-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"agy-request-metadata.js","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,qBAAqB,GAAG,mBAAmB,CAAA;AACjD,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACxD,MAAM,0BAA0B,GAAG,GAAG,CAAA;AAEtC,MAAM,uBAAuB,GAAG;IAC9B,UAAU;IACV,mBAAmB;IACnB,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,WAAW;CACH,CAAA;AAiDV,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,IAAI,GAAG,qBAAqB,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAA;QACpB,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,GAAG,cAAc,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,YAAoB,EACpB,MAA0D,EAAE;IAE5D,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,UAAU,EAAE;QAClD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,UAAU,EAAE;QAC9C,gBAAgB,EAAE,aAAa,CAAC,YAAY,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,OAAO,sBAAsB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAA;IACpD,YAAY,CAAQ;IACpB,KAAK,CAAQ;IACb,UAAU,CAAQ;IAClB,GAAG,CAAc;IAElC,YACE,YAAoB,EACpB,UAAyC,EAAE;QAE3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,4BAA4B,CAAA;QAC1D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,0BAA0B,CAAA;QAClE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACpC,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,SAAS,CAAA;YACnC,OAAO,QAAQ,CAAC,OAAO,CAAA;QACzB,CAAC;QAED,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACpB,OAAO;YACP,cAAc,EAAE,SAAS;YACzB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAA;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAA;QACvC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAC/B,CAAC;IAED,iBAAiB,CAAC,GAAW;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,UAAU,EAAE,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,SAAiB,EAAE,YAAoB;QACnD,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAA;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,MAAM,EAAE,CAAC;gBAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;QAED,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU;YACpC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAC/B,CAAC;YACD,IAAI,SAAS,GAAkB,IAAI,CAAA;YACnC,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAA;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,YAAY,EAAE,CAAC;oBAChE,SAAS,GAAG,GAAG,CAAA;oBACf,YAAY,GAAG,KAAK,CAAC,cAAc,CAAA;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAK;YACP,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,0BAA0B,GAAqC;IACnE,mBAAmB,EAAE,uBAAuB;IAC5C,0BAA0B,EAAE,uBAAuB;CACpD,CAAA;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IACjC,OAAO,iBAAiB,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAgC;IAEhC,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAE/C,KAAK,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC3B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAgC,EAChC,OAAqC,OAAO;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE5D,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,qBAAqB,GAAG,CAAC,CAAA;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACnE,SAAQ;QACV,MAAM,KAAK,GAAI,OAAmC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAA;QACzB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,qBAAqB,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC1D,OAAO,KAAK,CAAA;gBACd,OAAO,kBAAkB,IAAI,IAAI,CAAA;YACnC,CAAC,CAAC,CAAC,MAAM,CAAA;QACX,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAiC,EACjC,OAAgC,EAChC,KAAa,EACb,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EACtB,UAA0C,EAAE;IAE5C,MAAM,aAAa,GACjB,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC;QACpD,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACtE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAA;IAC5D,OAAO,CAAC,kBAAkB;QACxB,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,WAAW,CAAA;IACpD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,MAAM,GAAqB;QAC/B,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC;QACtC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAClD,wBAAwB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAC/D,qBAAqB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;KACrE,CAAA;IAED,OAAO;QACL,SAAS,EAAE,SAAS,OAAO,CAAC,cAAc,IAAI,SAAS,IAAI,OAAO,CAAC,YAAY,IAAI,aAAa,GAAG,CAAC,EAAE;QACtG,SAAS,EAAE,OAAO,CAAC,gBAAgB;QACnC,MAAM;QACN,aAAa;KACd,CAAA;AACH,CAAC"}
+{"version":3,"file":"agy-request-metadata.js","sourceRoot":"","sources":["../src/agy-request-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,qBAAqB,GAAG,mBAAmB,CAAA;AACjD,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACxD,MAAM,0BAA0B,GAAG,GAAG,CAAA;AAEtC,MAAM,uBAAuB,GAAG;IAC9B,UAAU;IACV,mBAAmB;IACnB,OAAO;IACP,YAAY;IACZ,QAAQ;IACR,kBAAkB;IAClB,WAAW;CACH,CAAA;AAiDV,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,IAAI,GAAG,qBAAqB,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAA;QACpB,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,GAAG,cAAc,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,YAAoB,EACpB,MAA0D,EAAE;IAE5D,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,UAAU,EAAE;QAClD,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,UAAU,EAAE;QAC9C,gBAAgB,EAAE,aAAa,CAAC,YAAY,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,OAAO,sBAAsB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAA;IACpD,YAAY,CAAQ;IACpB,KAAK,CAAQ;IACb,UAAU,CAAQ;IAClB,GAAG,CAAc;IAElC,YACE,YAAoB,EACpB,UAAyC,EAAE;QAE3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAA;QAChC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,4BAA4B,CAAA;QAC1D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,0BAA0B,CAAA;QAClE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACpC,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,SAAS,CAAA;YACnC,OAAO,QAAQ,CAAC,OAAO,CAAA;QACzB,CAAC;QAED,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACpB,OAAO;YACP,cAAc,EAAE,SAAS;YACzB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,YAAY,CAAC,GAAW;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAA;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAChC,CAAA;QACD,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAA;QACvC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;IAC/B,CAAC;IAED,iBAAiB,CAAC,GAAW;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,UAAU,EAAE,CAAA;QAC/C,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;IAC1B,CAAC;IAEO,KAAK,CAAC,SAAiB,EAAE,YAAoB;QACnD,MAAM,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAA;QACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,MAAM,EAAE,CAAC;gBAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC1B,CAAC;QACH,CAAC;QAED,OACE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU;YACpC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAC/B,CAAC;YACD,IAAI,SAAS,GAAkB,IAAI,CAAA;YACnC,IAAI,YAAY,GAAG,MAAM,CAAC,iBAAiB,CAAA;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,IAAI,GAAG,KAAK,YAAY,IAAI,KAAK,CAAC,cAAc,GAAG,YAAY,EAAE,CAAC;oBAChE,SAAS,GAAG,GAAG,CAAA;oBACf,YAAY,GAAG,KAAK,CAAC,cAAc,CAAA;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAK;YACP,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,0BAA0B,GAAqC;IACnE,oBAAoB,EAAE,uBAAuB;IAC7C,qBAAqB,EAAE,uBAAuB;IAC9C,kBAAkB,EAAE,uBAAuB;IAC3C,sBAAsB,EAAE,uBAAuB;IAC/C,yBAAyB,EAAE,uBAAuB;IAClD,uBAAuB,EAAE,uBAAuB;IAChD,sBAAsB,EAAE,wBAAwB;IAChD,yBAAyB,EAAE,wBAAwB;IACnD,uBAAuB,EAAE,wBAAwB;IACjD,mBAAmB,EAAE,uBAAuB;IAC5C,0BAA0B,EAAE,uBAAuB;CACpD,CAAA;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IACjC,OAAO,iBAAiB,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,0BAA0B,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAgC;IAEhC,MAAM,OAAO,GAA4B,EAAE,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IAE/C,KAAK,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;QAC1C,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;YAC3B,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACvB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAgC,EAChC,OAAqC,OAAO;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAA;IACtC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAE5D,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,IAAI,qBAAqB,GAAG,CAAC,CAAA;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACnE,SAAQ;QACV,MAAM,KAAK,GAAI,OAAmC,CAAC,KAAK,CAAA;QACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAQ;QACnC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAA;QACzB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,qBAAqB,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC1D,OAAO,KAAK,CAAA;gBACd,OAAO,kBAAkB,IAAI,IAAI,CAAA;YACnC,CAAC,CAAC,CAAC,MAAM,CAAA;QACX,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAiC,EACjC,OAAgC,EAChC,KAAa,EACb,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EACtB,UAA0C,EAAE;IAE5C,MAAM,aAAa,GACjB,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC;QACpD,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACtE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAA;IAC5D,OAAO,CAAC,kBAAkB;QACxB,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,WAAW,CAAA;IACpD,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,MAAM,GAAqB;QAC/B,GAAG,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC;QACtC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAClD,wBAAwB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QAC/D,qBAAqB,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;KACrE,CAAA;IAED,OAAO;QACL,SAAS,EAAE,SAAS,OAAO,CAAC,cAAc,IAAI,SAAS,IAAI,OAAO,CAAC,YAAY,IAAI,aAAa,GAAG,CAAC,EAAE;QACtG,SAAS,EAAE,OAAO,CAAC,gBAAgB;QACnC,MAAM;QACN,aAAa;KACd,CAAA;AACH,CAAC"}

package/dist/common-auth-embedded/claustrum/enrollment.d.ts

@@ -97,8 +97,9 @@ export interface EnrollmentAncestorOptions {
     groupPath?: string;
 }
 /**
- * Protect setup writes from directory replacement. Group write access is safe
- * only when local account records prove that the effective user's group is private.
+ * Protect setup writes from directory replacement. On POSIX, group write access
+ * is safe only when local records prove the effective user's group is private;
+ * sticky ancestors are accepted. Windows uses the shared safe-parent policy.
  */
 export declare function refuseWritableAncestor(parent: string, options?: EnrollmentAncestorOptions): Promise<void>;
 export declare function readClaustrumEnrollmentStatus(paths: ClaustrumEnrollmentPaths, proposedName: string): Promise<ClaustrumEnrollmentStatus>;

package/dist/common-auth-embedded/claustrum/enrollment.js

@@ -4,6 +4,7 @@ import { chmod, mkdir, open, readFile, realpath, rename, stat, unlink, } from 'n
 import { basename, dirname, extname, isAbsolute, join, resolve, } from 'node:path';
 import { ClaustrumCredentialError, ClaustrumClient as ClaustrumWireClient, writeEnrollmentTokenFile, } from '@cortexkit/claustrum-client';
 import { acquireRefreshFileLock } from '../fs/index.js';
+import { ensurePrivateDirectory as ensureWindowsDirectory, PrivateFileError, readPrivateText, verifySafeDirectory, windowsPrivateFiles, writePrivateAtomic, } from '../fs/private-files.js';
 import { ClaustrumConsumerError } from './errors.js';
 const ENROLLMENT_SCHEMA = 1;
 const ENROLLMENT_FILE_MAX_BYTES = 16 * 1024;
@@ -198,6 +199,21 @@ function parseSecretJson(text) {
     }
 }
 async function readBoundedJson(path) {
+    if (windowsPrivateFiles) {
+        try {
+            await ensureWindowsDirectory(dirname(path));
+            const text = await readPrivateText(path, true);
+            if (Buffer.byteLength(text) > ENROLLMENT_FILE_MAX_BYTES) {
+                throw new ClaustrumConsumerError('unsafe-file', 'Claustrum enrollment file is too large');
+            }
+            return parseSecretJson(text);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+    }
     let descriptor;
     try {
         // O_NOFOLLOW: a symlink planted at the path must not redirect a secret read.
@@ -267,52 +283,76 @@ async function isPrivateGroup(uid, gid, options) {
         return false;
     }
 }
+function ancestorPolicyOptions(options) {
+    if (!options.passwdPath && !options.groupPath)
+        return undefined;
+    return {
+        fs: {
+            readFile: (path) => readFile(path === '/etc/passwd'
+                ? (options.passwdPath ?? path)
+                : path === '/etc/group'
+                    ? (options.groupPath ?? path)
+                    : path),
+        },
+    };
+}
 /**
- * Protect setup writes from directory replacement. Group write access is safe
- * only when local account records prove that the effective user's group is private.
+ * Protect setup writes from directory replacement. On POSIX, group write access
+ * is safe only when local records prove the effective user's group is private;
+ * sticky ancestors are accepted. Windows uses the shared safe-parent policy.
  */
 export async function refuseWritableAncestor(parent, options = {}) {
-    const uid = process.geteuid?.();
-    if (uid === undefined)
-        return;
-    const gid = process.getegid?.();
-    let component;
-    try {
-        component = await realpath(parent);
-    }
-    catch {
-        return;
-    }
-    // Load lazily, once per traversal: account changes take effect on the next write.
-    let privateGroup;
-    for (;;) {
-        const metadata = await stat(component).catch(() => undefined);
-        if (metadata &&
-            (metadata.mode & 0o022) !== 0 &&
-            (metadata.mode & 0o1000) === 0) {
-            if (privateGroup === undefined) {
-                privateGroup =
-                    gid !== undefined && (await isPrivateGroup(uid, gid, options));
-            }
-            if ((metadata.mode & 0o002) !== 0 ||
-                metadata.uid !== uid ||
-                metadata.gid !== gid ||
-                !privateGroup) {
-                throw new ClaustrumConsumerError('unsafe-file', `Claustrum enrollment path has a writable ancestor: ${component}. Another user could replace it. Run: chmod g-w,o-w ${component}`);
-            }
+    if (!windowsPrivateFiles) {
+        const uid = process.geteuid?.();
+        if (uid === undefined)
+            return;
+        const gid = process.getegid?.();
+        let component;
+        try {
+            component = await realpath(parent);
         }
-        const next = dirname(component);
-        if (next === component)
+        catch {
             return;
-        component = next;
+        }
+        // Load lazily, once per traversal: account changes take effect on the next write.
+        let privateGroup;
+        for (;;) {
+            const metadata = await stat(component).catch(() => undefined);
+            if (metadata &&
+                (metadata.mode & 0o022) !== 0 &&
+                (metadata.mode & 0o1000) === 0) {
+                if (privateGroup === undefined) {
+                    privateGroup =
+                        gid !== undefined && (await isPrivateGroup(uid, gid, options));
+                }
+                if ((metadata.mode & 0o002) !== 0 ||
+                    metadata.uid !== uid ||
+                    metadata.gid !== gid ||
+                    !privateGroup) {
+                    throw new ClaustrumConsumerError('unsafe-file', `Claustrum enrollment path has a writable ancestor: ${component}. Another user could replace it. Run: chmod g-w,o-w ${component}`);
+                }
+            }
+            const next = dirname(component);
+            if (next === component)
+                return;
+            component = next;
+        }
+    }
+    try {
+        await verifySafeDirectory(parent, ancestorPolicyOptions(options));
+    }
+    catch (error) {
+        if (!(error instanceof PrivateFileError))
+            throw error;
+        throw new ClaustrumConsumerError('unsafe-file', `Claustrum enrollment parent refused: ${error.path} (${error.reason ?? error.code}). Use a folder that other users cannot write or replace.`);
     }
 }
-/**
- * Create the enrollment directory owner-only (0700), and tighten it to 0700
- * when it already exists with group or other bits, so the token and the
- * request secret never sit in a directory another account can list.
- */
-async function ensurePrivateDirectory(directory) {
+/** POSIX tightens the enrollment directory to 0700; Windows verifies safe ancestry without modifying existing parents. */
+async function ensurePrivateDirectory(directory, options = {}) {
+    if (windowsPrivateFiles) {
+        await ensureWindowsDirectory(directory, false, ancestorPolicyOptions(options));
+        return;
+    }
     await mkdir(directory, { recursive: true, mode: 0o700 });
     const metadata = await stat(directory);
     const uid = process.geteuid?.();
@@ -324,12 +364,14 @@ async function ensurePrivateDirectory(directory) {
 }
 async function writeStateAtomic(path, state, ancestorOptions = {}) {
     const parent = dirname(path);
-    await ensurePrivateDirectory(parent);
+    await ensurePrivateDirectory(parent, ancestorOptions);
     await refuseWritableAncestor(parent, ancestorOptions);
     const bytes = `${JSON.stringify(state)}\n`;
     if (Buffer.byteLength(bytes) > ENROLLMENT_FILE_MAX_BYTES) {
         throw new ClaustrumConsumerError('invalid-state', 'Claustrum enrollment state is too large');
     }
+    if (windowsPrivateFiles)
+        return writePrivateAtomic(path, bytes);
     const temporary = join(parent, `.${basename(path)}.${process.pid}.${randomUUID()}.tmp`);
     let descriptor;
     let created = false;
@@ -496,7 +538,7 @@ export class ClaustrumEnrollmentManager {
         return statusFromState(blocked);
     }
     async reconcile() {
-        await ensurePrivateDirectory(dirname(this.#paths.statePath));
+        await ensurePrivateDirectory(dirname(this.#paths.statePath), this.#ancestorOptions);
         const lock = await acquireRefreshFileLock({
             name: 'ceremony',
             path: this.#paths.statePath,
@@ -616,7 +658,7 @@ export class ClaustrumEnrollmentManager {
                 }
                 // The vault returns the token exactly once: it reaches disk before the
                 // pending metadata (and its secret) is replaced.
-                await ensurePrivateDirectory(dirname(this.#paths.tokenPath));
+                await ensurePrivateDirectory(dirname(this.#paths.tokenPath), this.#ancestorOptions);
                 await refuseWritableAncestor(dirname(this.#paths.tokenPath), this.#ancestorOptions);
                 await this.#writeTokenFile(this.#paths.tokenPath, {
                     token: outcome.token,

package/dist/common-auth-embedded/claustrum/roster.js

@@ -1,6 +1,6 @@
 import { createHash } from 'node:crypto';
-import { readFile } from 'node:fs/promises';
 import { acquireRefreshFileLock, withLock, writeJsonAtomic, } from '../fs/index.js';
+import { readPrivateText, windowsPrivateFiles } from '../fs/private-files.js';
 import { isQuotaMap, mergeQuotaObservation, } from '../quota/index.js';
 import { ClaustrumConsumerError } from './errors.js';
 import { acceptAccount, declineAccount, isDeclined, } from './interlock.js';
@@ -289,7 +289,7 @@ function decodeRoster(value) {
 export async function readVaultRoster(path) {
     let text;
     try {
-        text = await readFile(path, 'utf8');
+        text = await readPrivateText(path, windowsPrivateFiles);
     }
     catch (error) {
         if (error.code === 'ENOENT')

package/dist/common-auth-embedded/fs/atomic-write.d.ts

@@ -1,3 +1,4 @@
+import { type PrivateWriteOutcome } from './private-files.js';
 export interface AtomicWriteOptions {
     serialize?: (value: unknown) => string;
     beforeRename?: () => Promise<void>;
@@ -5,6 +6,10 @@ export interface AtomicWriteOptions {
     stageName?: () => string;
     /** Sync the staged file and, after rename, its parent directory. Opt-in. */
     durable?: boolean;
+    /** Windows opt-in: flush file bytes, without promising directory metadata durability. */
+    durability?: 'file-only-on-windows';
+    /** Reports Windows rename success, file/directory durability, retry counts and error codes, never file bytes. */
+    onOutcome?: (outcome: PrivateWriteOutcome) => void;
 }
 /** Internal classification of fsync failures, including a failure after rename. */
 export declare class AtomicSyncError extends Error {

package/dist/common-auth-embedded/fs/atomic-write.js

@@ -1,6 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { mkdir, open, rename, rm } from 'node:fs/promises';
 import { dirname } from 'node:path';
+import { PrivateFileError, verifyPrivate, windowsPrivateFiles, writePrivateAtomic, } from './private-files.js';
 /** Internal classification of fsync failures, including a failure after rename. */
 export class AtomicSyncError extends Error {
     constructor(cause) {
@@ -16,6 +17,18 @@ export async function writeJsonAtomic(path, value, options = {}) {
  * and removed ids here, because a later directory sync cannot undo the rename.
  */
 export async function writeJsonAtomicTracked(path, value, options, onRenamed) {
+    if (windowsPrivateFiles) {
+        return writePrivateAtomic(path, options.serialize
+            ? options.serialize(value)
+            : `${JSON.stringify(value, null, 2)}\n`, {
+            beforeRename: options.beforeRename,
+            stagePath: `${path}.${(options.stageName ?? randomUUID)()}.tmp`,
+            onRenamed,
+            durable: options.durable,
+            durability: options.durability,
+            onOutcome: options.onOutcome,
+        });
+    }
     await mkdir(dirname(path), { recursive: true });
     const tempPath = `${path}.${(options.stageName ?? randomUUID)()}.tmp`;
     let handle;
@@ -63,6 +76,14 @@ export async function writeJsonAtomicTracked(path, value, options, onRenamed) {
 }
 /** Make an already renamed file and its directory durable without rewriting bytes. */
 export async function syncJsonFile(path) {
+    if (windowsPrivateFiles) {
+        await verifyPrivate(path, 'file');
+        const error = new PrivateFileError(path, 'directory-sync-unsupported', {
+            code: 'ENOTSUP',
+        });
+        error.published = true;
+        throw error;
+    }
     const file = await open(path, 'r');
     try {
         await file.sync();

package/dist/common-auth-embedded/fs/index.d.ts

@@ -1,6 +1,8 @@
 export type { AtomicWriteOptions } from './atomic-write.js';
 export { writeJsonAtomic } from './atomic-write.js';
 export { WRITER_LOCK_CONSTANTS } from './lock-constants.js';
+export type { PrivateWriteOutcome } from './private-files.js';
+export { PrivateFileError } from './private-files.js';
 export type { LockLoss, RefreshFileLock } from './refresh-file-lock.js';
 export { acquireRefreshFileLock, isLostMarkerRaceError, } from './refresh-file-lock.js';
 export type { LockOptions, LockOwnershipDetails } from './with-lock.js';

package/dist/common-auth-embedded/fs/index.js

@@ -1,5 +1,6 @@
 export { writeJsonAtomic } from './atomic-write.js';
 export { WRITER_LOCK_CONSTANTS } from './lock-constants.js';
+export { PrivateFileError } from './private-files.js';
 // The try-once lock underneath withLock, for callers that hold a lock across
 // several steps or poll instead of waiting (for example a refresh lease).
 export { acquireRefreshFileLock, isLostMarkerRaceError, } from './refresh-file-lock.js';

package/dist/common-auth-embedded/fs/private-files.d.ts

@@ -0,0 +1,66 @@
+import { rename } from 'node:fs/promises';
+import type { PosixOwnerOnlyPathAsyncOptions } from '@cortexkit/private-files';
+export declare const windowsPrivateFiles: boolean;
+type Backend = typeof import('@cortexkit/private-files');
+type Kind = 'file' | 'directory';
+/** Tests inject a backend here; production always imports the private-files package. */
+export declare function setPrivateFilesBackendForTest(api?: Backend): void;
+export declare class PrivateFileError extends Error {
+    readonly path: string;
+    readonly stage: string;
+    readonly code: string;
+    readonly win32Code?: number;
+    readonly reason?: string;
+    published: boolean;
+    durabilityConfirmed: boolean;
+    fileDurable: boolean;
+    attempts: number;
+    elapsedMs: number;
+    orphanPath?: string;
+    constructor(path: string, stage: string, cause: unknown);
+}
+export declare function privateOperation<T>(path: string, stage: string, operation: () => Promise<T>): Promise<T>;
+/** Tests only: policy options used by safe-parent checks that pass none. */
+export declare function setSafeParentOptionsForTest(options?: PosixOwnerOnlyPathAsyncOptions): void;
+/** Existing containing directories use the shared entry-integrity policy, not secret-file permissions. */
+export declare function verifySafeDirectory(path: string, options?: PosixOwnerOnlyPathAsyncOptions): Promise<void>;
+/** Repair only the specific owned secret file supplied by a caller, never an existing directory tree. */
+export declare function verifyPrivate(path: string, kind: Kind, migrate?: boolean): Promise<void>;
+/** Create missing components privately; inspect existing ancestors without modifying them. */
+export declare function ensurePrivateDirectory(path: string, _migrate?: boolean, options?: PosixOwnerOnlyPathAsyncOptions): Promise<void>;
+export declare function readPrivateText(path: string, migrate?: boolean): Promise<string>;
+export declare function readPrivateBuffer(path: string, migrate?: boolean): Promise<Buffer>;
+export declare function createPrivateBytes(path: string, bytes: string): Promise<void>;
+export declare function createPrivateDirectoryExclusive(path: string): Promise<void>;
+export interface ReplaceOptions {
+    beforeRename?: () => Promise<void>;
+    /** Absolute monotonic deadline, for an expiring lease. */
+    deadline?: number;
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+    rename?: typeof rename;
+}
+/** Retry Windows rename sharing/access errors within a budget; they never prove lease contention. */
+export declare function replaceWindowsFile(from: string, to: string, options?: ReplaceOptions): Promise<{
+    attempts: number;
+    elapsedMs: number;
+}>;
+export interface PrivateWriteOutcome {
+    path: string;
+    stage: string;
+    published: boolean;
+    fileDurable: boolean;
+    durabilityConfirmed: boolean;
+    attempts: number;
+    elapsedMs: number;
+    code?: string;
+    win32Code?: number;
+}
+export declare function writePrivateAtomic(path: string, bytes: string, options?: ReplaceOptions & {
+    stagePath?: string;
+    onRenamed?: () => void;
+    durable?: boolean;
+    durability?: 'file-only-on-windows';
+    onOutcome?: (outcome: PrivateWriteOutcome) => void;
+}): Promise<void>;
+export {};