@cortexkit/antigravity-auth-core 3.0.37 → 3.0.39

package/dist/common-auth-embedded/fs/refresh-file-lock.js

@@ -1,6 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { link, lstat, mkdir, open, readFile, rename, rm, stat, } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
+import { DisappearedLockRecordError, isWindowsAccessDeniedCreate, isWindowsAccessDeniedRead, readLockRecord, } from './lock-record.js';
 import { createPrivateBytes, createPrivateDirectoryExclusive, ensurePrivateDirectory, isWindowsSharingViolation, PrivateFileError, privateOperation, readPrivateText, verifyPrivate, windowsPrivateFiles, writePrivateAtomic, } from './private-files.js';
 import { LockOwnershipError, lockPathFor } from './with-lock.js';
 let leaseCreationTestHooks;
@@ -192,17 +193,22 @@ export async function acquireRefreshFileLockWithClock(options) {
     const evictOwnerId = randomUUID();
     const EVICT_TTL = 5_000;
     const MAX_STEAL_ATTEMPTS = 8;
+    function isChangingLockCreate(error) {
+        return (windowsPrivateFiles &&
+            (isWindowsAccessDeniedCreate(error, [lockPath], 'create') ||
+                isWindowsAccessDeniedCreate(error, [evictPath], 'directory-create')));
+    }
     async function readOwner() {
         if (windowsPrivateFiles) {
             try {
-                return JSON.parse(await readPrivateText(lockPath, true));
+                return JSON.parse(await readLockRecord(lockPath, () => readPrivateText(lockPath, true)));
             }
             catch (error) {
                 if (error.code !== 'EISDIR' &&
                     error.reason !== 'wrong-kind')
                     throw error;
-                await verifyPrivate(lockPath, 'directory', true);
-                return JSON.parse(await readPrivateText(legacyOwnerPath, true));
+                await readLockRecord(lockPath, () => verifyPrivate(lockPath, 'directory', true));
+                return JSON.parse(await readLockRecord(legacyOwnerPath, () => readPrivateText(legacyOwnerPath, true)));
             }
         }
         try {
@@ -280,8 +286,8 @@ export async function acquireRefreshFileLockWithClock(options) {
                 await options.onStep('lease-contention-read-ready');
             try {
                 if (code === 'EISDIR') {
-                    await verifyPrivate(lockPath, 'directory', true);
-                    await readPrivateText(legacyOwnerPath, true);
+                    await readLockRecord(lockPath, () => verifyPrivate(lockPath, 'directory', true));
+                    await readLockRecord(legacyOwnerPath, () => readPrivateText(legacyOwnerPath, true));
                 }
                 else
                     await readOwner();
@@ -337,6 +343,10 @@ export async function acquireRefreshFileLockWithClock(options) {
             owner = await readOwner();
         }
         catch (error) {
+            // A delete-pending owner that disappeared is a create opportunity,
+            // never an ownerless legacy directory eligible for stale eviction.
+            if (error instanceof DisappearedLockRecordError)
+                return { status: 'missing' };
             if (windowsPrivateFiles &&
                 error.code !== 'ENOENT')
                 throw error;
@@ -395,7 +405,7 @@ export async function acquireRefreshFileLockWithClock(options) {
     // Fail-closed: any read error means we do NOT own the marker.
     async function ownsEvictionMarker() {
         try {
-            const owner = JSON.parse(await readPrivateText(evictOwnerPath, windowsPrivateFiles));
+            const owner = JSON.parse(await readLockRecord(evictOwnerPath, () => readPrivateText(evictOwnerPath, windowsPrivateFiles)));
             return owner?.ownerId === evictOwnerId;
         }
         catch (error) {
@@ -581,7 +591,7 @@ export async function acquireRefreshFileLockWithClock(options) {
         }
         if (windowsPrivateFiles) {
             try {
-                await verifyPrivate(evictPath, 'directory', true);
+                await readLockRecord(evictPath, () => verifyPrivate(evictPath, 'directory', true));
             }
             catch (error) {
                 // The marker's holder can remove it between the stat above and this
@@ -654,8 +664,8 @@ export async function acquireRefreshFileLockWithClock(options) {
             if (error.code === 'EEXIST') {
                 if (windowsPrivateFiles) {
                     try {
-                        await verifyPrivate(evictPath, 'directory', true);
-                        await readPrivateText(evictOwnerPath, true);
+                        await readLockRecord(evictPath, () => verifyPrivate(evictPath, 'directory', true));
+                        await readLockRecord(evictOwnerPath, () => readPrivateText(evictOwnerPath, true));
                     }
                     catch (ownerError) {
                         // A marker removed by its holder after the failed create is free:
@@ -681,10 +691,16 @@ export async function acquireRefreshFileLockWithClock(options) {
             await releaseEvictionMarker(deadline);
         }
         catch (error) {
-            // Cleanup sharing failures must not replace the lock's original
-            // sharing refusal when both removals exhaust the same deadline.
-            if (isRetryableRemoval(actionError, lockPath) &&
-                isRetryableRemoval(error, evictPath))
+            // Cleanup IO failures must not replace the original lock refusal when
+            // both operations use the same deadline.
+            if ((isRetryableRemoval(actionError, lockPath) ||
+                isWindowsAccessDeniedRead(actionError, [
+                    lockPath,
+                    legacyOwnerPath,
+                    evictOwnerPath,
+                ])) &&
+                (isRetryableRemoval(error, evictPath) ||
+                    isWindowsAccessDeniedRead(error, [evictOwnerPath])))
                 throw actionError;
             throw error;
         }
@@ -705,7 +721,8 @@ export async function acquireRefreshFileLockWithClock(options) {
                 owner = await readOwner();
             }
             catch (error) {
-                if (windowsPrivateFiles)
+                if (windowsPrivateFiles &&
+                    !(error instanceof DisappearedLockRecordError))
                     throw error;
                 return;
             }
@@ -789,7 +806,9 @@ export async function acquireRefreshFileLockWithClock(options) {
                     }
                 }
                 catch (error) {
-                    if (windowsPrivateFiles && error instanceof PrivateFileError) {
+                    if (windowsPrivateFiles &&
+                        error instanceof PrivateFileError &&
+                        !isChangingLockCreate(error)) {
                         terminalIOError = error;
                         recordLoss('renewal-failed');
                         shouldReschedule = false;
@@ -844,90 +863,112 @@ export async function acquireRefreshFileLockWithClock(options) {
         }
         return null;
     }
-    let acquired = await tryAcquire();
+    let acquired = false;
+    let changingCreateError;
+    try {
+        acquired = await tryAcquire();
+    }
+    catch (error) {
+        if (!isChangingLockCreate(error))
+            throw error;
+        changingCreateError = error;
+    }
     if (!acquired) {
         for (let attempt = 0; attempt < MAX_STEAL_ATTEMPTS; attempt++) {
-            acquired = await tryAcquire();
-            if (acquired)
-                break;
-            const observed = await readLockState();
-            if (observed.status === 'live')
-                return contended();
-            // Absence is a create opportunity, never evidence of an expired lease.
-            if (observed.status === 'missing')
-                continue;
-            if (options.onStep)
-                await options.onStep('stale-lock-observed');
             try {
-                if (!(await tryAcquireEvictionMarker())) {
-                    await backoff();
-                    continue;
-                }
-            }
-            catch (evictError) {
-                const code = evictError.code;
-                if (code !== 'EEXIST')
-                    throw evictError;
-                const recovered = await recoverStaleEvictionMarker();
-                if (recovered === 'fresh')
-                    return null;
-                await backoff();
-                continue;
-            }
-            try {
-                const confirmed = await readLockState();
-                if (confirmed.status === 'live')
+                acquired = await tryAcquire();
+                if (acquired)
+                    break;
+                const observed = await readLockState();
+                if (observed.status === 'live')
                     return contended();
-                if (!sameStaleLock(observed.identity, confirmed))
+                // Absence is a create opportunity, never evidence of an expired lease.
+                if (observed.status === 'missing')
                     continue;
-                // Verify marker ownership before removing a lock found not live.
-                if (!(await ownsEvictionMarker()))
-                    return null;
                 if (options.onStep)
-                    await options.onStep('stale-lock-confirmed');
-                // The onStep callback can pause while another contender renames
-                // our marker, so verify ownership again after the callback.
-                if (!(await ownsEvictionMarker()))
-                    return null;
-                // Do not await a callback between this ownership check and the lock read.
-                const current = await readLockState(false);
-                if (!sameStaleLock(observed.identity, current))
+                    await options.onStep('stale-lock-observed');
+                try {
+                    if (!(await tryAcquireEvictionMarker())) {
+                        await backoff();
+                        continue;
+                    }
+                }
+                catch (evictError) {
+                    const code = evictError.code;
+                    if (code !== 'EEXIST')
+                        throw evictError;
+                    const recovered = await recoverStaleEvictionMarker();
+                    if (recovered === 'fresh')
+                        return null;
+                    await backoff();
                     continue;
-                // The final read and removal are not atomic. While this stale file
-                // exists, wx cannot create a successor; the marker excludes other
-                // evictors and release/renewal. An expired holder cannot renew: renewal
-                // rechecks expiry and marker ownership immediately before publishing.
-                // With the marker still owned, cooperating users cannot replace it in
-                // this window. Arbitrary suspension across marker expiry or filesystem
-                // changes still need a kernel lock for an atomic guarantee.
-                await removeLeaseObject(lockPath);
-                // Fence check 3: re-verify ownership after removing the stale lock.
-                if (!(await ownsEvictionMarker()))
-                    return null;
-                if (options.onStep)
-                    await options.onStep('stale-lock-removed');
-                acquired = await tryAcquire();
-                if (!acquired)
-                    return null;
-                if (options.onStep)
-                    await options.onStep('stale-lock-recreated');
-                // Fence check 4: re-verify ownership after acquiring the lock. If the
-                // marker was stolen between tryAcquire and this check, release the
-                // just-acquired lock and return null (fail-closed).
-                if (!(await ownsEvictionMarker())) {
-                    await relinquishLockAfterMarkerLoss();
-                    acquired = false;
-                    return null;
                 }
-                break;
+                try {
+                    const confirmed = await readLockState();
+                    if (confirmed.status === 'live')
+                        return contended();
+                    if (!sameStaleLock(observed.identity, confirmed))
+                        continue;
+                    // Verify marker ownership before removing a lock found not live.
+                    if (!(await ownsEvictionMarker()))
+                        return null;
+                    if (options.onStep)
+                        await options.onStep('stale-lock-confirmed');
+                    // The onStep callback can pause while another contender renames
+                    // our marker, so verify ownership again after the callback.
+                    if (!(await ownsEvictionMarker()))
+                        return null;
+                    // Do not await a callback between this ownership check and the lock read.
+                    const current = await readLockState(false);
+                    if (!sameStaleLock(observed.identity, current))
+                        continue;
+                    // The final read and removal are not atomic. While this stale file
+                    // exists, exclusive creation cannot publish a successor; the marker
+                    // excludes other evictors and release/renewal. An expired holder cannot
+                    // renew: renewal rechecks expiry and marker ownership before publishing.
+                    // With the marker still owned, cooperating users cannot replace it in
+                    // this window. Arbitrary suspension across marker expiry or filesystem
+                    // changes still need a kernel lock for an atomic guarantee.
+                    await removeLeaseObject(lockPath);
+                    // Fence check 3: re-verify ownership after removing the stale lock.
+                    if (!(await ownsEvictionMarker()))
+                        return null;
+                    if (options.onStep)
+                        await options.onStep('stale-lock-removed');
+                    acquired = await tryAcquire();
+                    if (!acquired)
+                        return null;
+                    if (options.onStep)
+                        await options.onStep('stale-lock-recreated');
+                    // Fence check 4: re-verify ownership after acquiring the lock. If the
+                    // marker was stolen between tryAcquire and this check, release the
+                    // just-acquired lock and return null (fail-closed).
+                    if (!(await ownsEvictionMarker())) {
+                        await relinquishLockAfterMarkerLoss();
+                        acquired = false;
+                        return null;
+                    }
+                    break;
+                }
+                finally {
+                    await releaseEvictionMarker();
+                }
             }
-            finally {
-                await releaseEvictionMarker();
+            catch (error) {
+                if (!isChangingLockCreate(error))
+                    throw error;
+                // A refused create is busy, not stale. Retry exclusive creation before
+                // any owner read or eviction, retaining the first persistent refusal.
+                changingCreateError ??= error;
+                await backoff();
             }
         }
     }
-    if (!acquired)
+    if (!acquired) {
+        if (changingCreateError)
+            throw changingCreateError;
         return null;
+    }
     scheduleRenewal();
     return {
         ownerId,
@@ -977,6 +1018,7 @@ export async function acquireRefreshFileLockWithClock(options) {
             const deadline = performance.now() + EVICT_TTL + 1_000;
             let delayMs = 5;
             let removalError;
+            let changingRecordError;
             for (;;) {
                 try {
                     let removalConfirmed = false;
@@ -1004,6 +1046,7 @@ export async function acquireRefreshFileLockWithClock(options) {
                         await removeLeaseObject(lockPath);
                         removalConfirmed = true;
                     }, deadline);
+                    changingRecordError = undefined;
                     if (markerAcquired) {
                         if (windowsPrivateFiles && !removalConfirmed)
                             throw new PrivateFileError(lockPath, 'release-not-confirmed', {
@@ -1017,15 +1060,27 @@ export async function acquireRefreshFileLockWithClock(options) {
                     await recoverStaleEvictionMarker(deadline);
                 }
                 catch (error) {
-                    if (!isRetryableRemoval(error, lockPath)) {
+                    const changingRecord = windowsPrivateFiles &&
+                        (isChangingLockCreate(error) ||
+                            isWindowsAccessDeniedRead(error, [
+                                lockPath,
+                                legacyOwnerPath,
+                                evictPath,
+                                evictOwnerPath,
+                            ]));
+                    if (!isRetryableRemoval(error, lockPath) && !changingRecord) {
                         if (windowsPrivateFiles)
                             throw error;
                         return;
                     }
-                    // Like rename, a fenced delete can be refused by a reader's Windows
-                    // handle without invalidating ownership. Drop the marker, back off,
-                    // and re-confirm the owner under a new marker before trying again.
-                    removalError ??= error;
+                    // Neither a refused delete nor an ambiguous record read or create
+                    // establishes loss or expiry. Back off under the release deadline and
+                    // re-confirm ownership before any removal; keep the original error
+                    // if the refusal persists.
+                    if (changingRecord)
+                        changingRecordError ??= error;
+                    else
+                        removalError ??= error;
                 }
                 const remainingMs = deadline - performance.now();
                 if (remainingMs <= 0)
@@ -1038,7 +1093,8 @@ export async function acquireRefreshFileLockWithClock(options) {
             // Do not delete by pathname without the marker: bounded retries leave the
             // lease to expire rather than risking removal of a successor's lock.
             if (windowsPrivateFiles)
-                throw (removalError ??
+                throw (changingRecordError ??
+                    removalError ??
                     new PrivateFileError(lockPath, 'release-not-confirmed', {
                         code: 'ETIMEDOUT',
                     }));

package/dist/common-auth-embedded/fs/with-lock.js

@@ -1,5 +1,6 @@
 import { join, resolve } from 'node:path';
-import { isWindowsSharingViolation, } from './private-files.js';
+import { isWindowsAccessDeniedCreate, isWindowsAccessDeniedRead, } from './lock-record.js';
+import { isWindowsSharingViolation, windowsPrivateFiles, } from './private-files.js';
 import { acquireRefreshFileLock } from './refresh-file-lock.js';
 export function lockPathFor(target, name) {
     return `${target}.${name}.lock`;
@@ -20,19 +21,23 @@ export class LockOwnershipError extends Error {
         this.details = details;
     }
 }
-function isChangingLockRead(error, target, name) {
-    if (!isWindowsSharingViolation(error) ||
-        (error.stage !== 'read' && error.stage !== 'verify'))
-        return false;
+function isChangingLockRecord(error, target, name) {
     const path = resolve(lockPathFor(target, name));
-    return error.path === path || error.path === join(path, 'owner.json');
+    const paths = [path, join(path, 'owner.json')];
+    return (((isWindowsSharingViolation(error) ||
+        isWindowsAccessDeniedRead(error, paths)) &&
+        (error.stage === 'read' || error.stage === 'verify') &&
+        paths.includes(error.path)) ||
+        (windowsPrivateFiles &&
+            (isWindowsAccessDeniedCreate(error, [path], 'create') ||
+                isWindowsAccessDeniedCreate(error, [`${path}.evicting`], 'directory-create'))));
 }
 export async function withLock(target, options, fn) {
     const started = performance.now();
+    let changingRecordError;
     for (;;) {
         options.signal?.throwIfAborted();
         let lock;
-        let changingReadError;
         try {
             lock = await acquireRefreshFileLock({
                 path: target,
@@ -44,14 +49,15 @@ export async function withLock(target, options, fn) {
                     ? { onRenewalTimer: options.onRenewalTimer }
                     : {}),
             });
+            changingRecordError = undefined;
         }
         catch (error) {
-            if (!isChangingLockRead(error, target, options.name))
+            if (!isChangingLockRecord(error, target, options.name))
                 throw error;
-            // Sharing violations (32) and delete-pending opens (303) do not reveal
-            // ownership or expiry. Retry exclusive creation, never infer a stale lock.
+            // Ambiguous reads or creates reveal neither ownership nor expiry. Retry
+            // exclusive creation within the same deadline, never infer staleness from IO.
             lock = null;
-            changingReadError = error;
+            changingRecordError ??= error;
         }
         if (lock) {
             try {
@@ -65,8 +71,8 @@ export async function withLock(target, options, fn) {
         const remaining = options.timeoutMs - (performance.now() - started);
         if (remaining <= 0) {
             // Keep persistent native IO failures distinguishable from a live holder.
-            if (changingReadError)
-                throw changingReadError;
+            if (changingRecordError)
+                throw changingRecordError;
             throw new LockContentionError({
                 target,
                 name: options.name,

package/dist/common-auth-embedded/source-output.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "package": "@cortexkit/common-auth",
-  "version": "0.42.0",
+  "version": "0.43.0",
   "artifactStatus": "published",
   "publicRoots": {
     "./store": {
@@ -37,15 +37,15 @@
       "import": "./dist/pi-slot/index.js"
     }
   },
-  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.42.0.tgz",
-  "tarballSha256": "c3f1c832fe8391529be331c1e2f5577b60eaa7a1c848e97f6668aca06118af04",
-  "sri": "sha512-LAZ67qRdJA+9SmglIyDRtEd2Wz+6X2dDRTC+qXt6HryQzir87LIiY+sWWllWT707agUA9rxOocCCP6e+mwoZyA==",
-  "canonicalFiles": 153,
-  "canonicalBytes": 1040884,
+  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.43.0.tgz",
+  "tarballSha256": "f2c384c880b08859ac3f0cca3575cedfcdcd47e6e96dd8f72dc78af1fe6a7620",
+  "sri": "sha512-J0vA1VHliTdDhBghn/G5oR6oRcm5sA0ScL/6ghwqMEsQjlSZ5K8q40vYVbW15gZcw69hcmVuA6Gbq1/26yKR4A==",
+  "canonicalFiles": 154,
+  "canonicalBytes": 1052730,
   "generator": {
     "path": "packages/opencode/scripts/embed-common-auth.ts",
     "version": 4,
-    "sha256": "225a77c54d91e241bbece24dc289ce479330d00c20304ff8508ceb59975728c4"
+    "sha256": "aeda85685b8cd9c84862f722acdd650e0526db6cd56c539ef3c17f19fd0bf5c6"
   },
   "files": [
     {
@@ -211,17 +211,17 @@
     {
       "source": "package/dist/claustrum/availability.d.ts",
       "output": "claustrum/availability.d.ts",
-      "bytes": 3406,
-      "sourceSha256": "a77a53ae0220230273b124b7793e2d8842ab3841bfab1d987309411752f7b80a",
-      "outputSha256": "a77a53ae0220230273b124b7793e2d8842ab3841bfab1d987309411752f7b80a",
+      "bytes": 3781,
+      "sourceSha256": "3f87160823d131bf6e60e0bfd2398f10f3799ce45912c5480b327b59892b7157",
+      "outputSha256": "3f87160823d131bf6e60e0bfd2398f10f3799ce45912c5480b327b59892b7157",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/availability.js",
       "output": "claustrum/availability.js",
-      "bytes": 4219,
-      "sourceSha256": "07fe16b372bb3dbf5870725b4ea8e2b4c3e50e5d7394fa365de789f72ff01b04",
-      "outputSha256": "07fe16b372bb3dbf5870725b4ea8e2b4c3e50e5d7394fa365de789f72ff01b04",
+      "bytes": 4615,
+      "sourceSha256": "11eaa35ab38ab433f249b4b11b9e284fac5ab7e785c965fe070aef8cde593089",
+      "outputSha256": "11eaa35ab38ab433f249b4b11b9e284fac5ab7e785c965fe070aef8cde593089",
       "transform": "verbatim"
     },
     {
@@ -243,33 +243,33 @@
     {
       "source": "package/dist/claustrum/custody.d.ts",
       "output": "claustrum/custody.d.ts",
-      "bytes": 17299,
-      "sourceSha256": "70c5f7f40cde58a614c79b280c2129f9a228238342f69eac42237b8621ecfa59",
-      "outputSha256": "70c5f7f40cde58a614c79b280c2129f9a228238342f69eac42237b8621ecfa59",
+      "bytes": 17862,
+      "sourceSha256": "ea33c127942652259ddf467d377da872cabfab1407339cc774c0e79ca5f83742",
+      "outputSha256": "ea33c127942652259ddf467d377da872cabfab1407339cc774c0e79ca5f83742",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/custody.js",
       "output": "claustrum/custody.js",
-      "bytes": 34857,
-      "sourceSha256": "cadbce8e39cb51c9c6756c01d0d8ebe9a328cf4f3bb70e081ffe26c4773bc5f1",
-      "outputSha256": "cadbce8e39cb51c9c6756c01d0d8ebe9a328cf4f3bb70e081ffe26c4773bc5f1",
+      "bytes": 37468,
+      "sourceSha256": "e73ca575f9a97a20723e3371ff63be99a8cfea95bbe54ab694c298bebc30e853",
+      "outputSha256": "e73ca575f9a97a20723e3371ff63be99a8cfea95bbe54ab694c298bebc30e853",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/enrollment.d.ts",
       "output": "claustrum/enrollment.d.ts",
-      "bytes": 8761,
-      "sourceSha256": "4ebace01478b70ccabca0964128a47ea93c553d4ad1c307c29946a6952023dbe",
-      "outputSha256": "4ebace01478b70ccabca0964128a47ea93c553d4ad1c307c29946a6952023dbe",
+      "bytes": 8990,
+      "sourceSha256": "395691b7c46020b5ab8850e1effdab1ce378312cf9f71b9b2ab613d4331a1669",
+      "outputSha256": "395691b7c46020b5ab8850e1effdab1ce378312cf9f71b9b2ab613d4331a1669",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/enrollment.js",
       "output": "claustrum/enrollment.js",
-      "bytes": 37156,
-      "sourceSha256": "b5bd0f39bc78277cc36a15dd30bad763f114d7ed099466671752dbeecd1cd873",
-      "outputSha256": "b5bd0f39bc78277cc36a15dd30bad763f114d7ed099466671752dbeecd1cd873",
+      "bytes": 38799,
+      "sourceSha256": "3cb9bf3fae4b90b64b743a618b142047cad3a99b81b52932d0f9afc8540adad7",
+      "outputSha256": "3cb9bf3fae4b90b64b743a618b142047cad3a99b81b52932d0f9afc8540adad7",
       "transform": "verbatim"
     },
     {
@@ -315,9 +315,9 @@
     {
       "source": "package/dist/claustrum/host.js",
       "output": "claustrum/host.js",
-      "bytes": 4403,
-      "sourceSha256": "7baae6af599ee02066c6ff3c238bcade9f701846505ec4d497e78e429bb7eea2",
-      "outputSha256": "7baae6af599ee02066c6ff3c238bcade9f701846505ec4d497e78e429bb7eea2",
+      "bytes": 4610,
+      "sourceSha256": "c2eba15f35b996993ba7f0ec849ce84312d5f08e9b15e8f6458c6d8a0e03ae7b",
+      "outputSha256": "c2eba15f35b996993ba7f0ec849ce84312d5f08e9b15e8f6458c6d8a0e03ae7b",
       "transform": "verbatim"
     },
     {
@@ -339,17 +339,17 @@
     {
       "source": "package/dist/claustrum/index.d.ts",
       "output": "claustrum/index.d.ts",
-      "bytes": 4937,
-      "sourceSha256": "9270d05fd212b2e4b38afe6fc1021b0763ced055921de03943fec1992c871aa3",
-      "outputSha256": "9270d05fd212b2e4b38afe6fc1021b0763ced055921de03943fec1992c871aa3",
+      "bytes": 4965,
+      "sourceSha256": "6b95f03d2135a664e8960d3ba5d3fc294e4dea0cb7ca32ac183c3a3312f88a5d",
+      "outputSha256": "6b95f03d2135a664e8960d3ba5d3fc294e4dea0cb7ca32ac183c3a3312f88a5d",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/index.js",
       "output": "claustrum/index.js",
-      "bytes": 4062,
-      "sourceSha256": "72f0f4bd7c17b82aa7abc3f196e1499d5a3d51173a456fbd7c3b72425ffaba48",
-      "outputSha256": "72f0f4bd7c17b82aa7abc3f196e1499d5a3d51173a456fbd7c3b72425ffaba48",
+      "bytes": 4090,
+      "sourceSha256": "57a6e23ad884e39989da2ffd8eadb1b62f744402a9d6c33bb68b25d6c329e4f0",
+      "outputSha256": "57a6e23ad884e39989da2ffd8eadb1b62f744402a9d6c33bb68b25d6c329e4f0",
       "transform": "verbatim"
     },
     {
@@ -608,6 +608,14 @@
       "outputSha256": "cd60090325fa8c4c17dddfc216a4ed326f2a6e48525e724a4dd260bf88041231",
       "transform": "verbatim"
     },
+    {
+      "source": "package/dist/fs/lock-record.js",
+      "output": "fs/lock-record.js",
+      "bytes": 2253,
+      "sourceSha256": "18468ed6c58d8a989164b566c3653dbeea0d46b3031b49bc8f23bc4028ae5ff3",
+      "outputSha256": "18468ed6c58d8a989164b566c3653dbeea0d46b3031b49bc8f23bc4028ae5ff3",
+      "transform": "verbatim"
+    },
     {
       "source": "package/dist/fs/private-files.d.ts",
       "output": "fs/private-files.d.ts",
@@ -635,9 +643,9 @@
     {
       "source": "package/dist/fs/refresh-file-lock.js",
       "output": "fs/refresh-file-lock.js",
-      "bytes": 43780,
-      "sourceSha256": "fa0200d4f4a759a8d4380aa2535cf07d98898650cc919031b0742d241662d96f",
-      "outputSha256": "fa0200d4f4a759a8d4380aa2535cf07d98898650cc919031b0742d241662d96f",
+      "bytes": 46870,
+      "sourceSha256": "fb2d2c236e468a1c38b28d2d628f5b01e246e6d34165d844b1ba8faf2f692b37",
+      "outputSha256": "fb2d2c236e468a1c38b28d2d628f5b01e246e6d34165d844b1ba8faf2f692b37",
       "transform": "verbatim"
     },
     {
@@ -651,9 +659,9 @@
     {
       "source": "package/dist/fs/with-lock.js",
       "output": "fs/with-lock.js",
-      "bytes": 2855,
-      "sourceSha256": "25f4789fc118e10a72f7e687f083eb1212eca06d4fe2c7bfe6f0d773f2abf351",
-      "outputSha256": "25f4789fc118e10a72f7e687f083eb1212eca06d4fe2c7bfe6f0d773f2abf351",
+      "bytes": 3278,
+      "sourceSha256": "3036b3e1cf9d80d33feebced3bdc14bbfd841ce69a8e784957be984d3c94a461",
+      "outputSha256": "3036b3e1cf9d80d33feebced3bdc14bbfd841ce69a8e784957be984d3c94a461",
       "transform": "verbatim"
     },
     {

package/dist/model-registry.d.ts

@@ -64,5 +64,8 @@ export declare function getGemini38FlashAntigravityModel(tier?: ThinkingTier): s
 export declare function getQuotaGroupForModel(modelId: string, hasArgonPool?: boolean): ModelQuotaGroup | undefined;
 /** Recognize Argon selectors so family-specific wire and quota policy is consistent. */
 export declare function isGeminiArgonModel(model: string): boolean;
+/** Recognize Carbon selectors without assigning an unobserved quota pool. */
+export declare function isGeminiCarbonModel(model: string): boolean;
+export declare function getGeminiCarbonAntigravityModel(tier?: ThinkingTier): string;
 export declare function getGeminiArgonAntigravityModel(tier?: ThinkingTier): string;
 //# sourceMappingURL=model-registry.d.ts.map

package/dist/model-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-registry.d.ts","sourceRoot":"","sources":["../src/model-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAExD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEtE,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,kBAAkB,CAAA;IAClC,cAAc,CAAC,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;AACpD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,YAAY,GAAG,cAAc,CAAA;AAEtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,MAAM,EAAE,aAAa,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,UAAU,CAAA;IACjB,UAAU,EAAE,eAAe,CAAA;IAC3B,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;IACD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;AA4C9E,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAGD,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CACjD,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CA8HzC,CAAA;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,GACZ,wBAAwB,GAAG,SAAS,CAEtC;AAKD,eAAO,MAAM,yBAAyB,yGACkE,CAAA;AAExG,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAiBxD;AA0LD,eAAO,MAAM,0BAA0B,0BAEtC,CAAA;AAED,wBAAgB,yBAAyB,IAAI,wBAAwB,CAEpE;AAED,wBAAgB,8BAA8B,IAAI,MAAM,EAAE,CAEzD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE5D;AAED,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAQ5E;AAWD,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAE5E;AAED,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAE5E;AAED,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAE5E;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,YAAY,UAAQ,GACnB,eAAe,GAAG,SAAS,CAqB7B;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIzD;AAED,wBAAgB,8BAA8B,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAY1E"}
+{"version":3,"file":"model-registry.d.ts","sourceRoot":"","sources":["../src/model-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAExD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAA;AAEtE,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,kBAAkB,CAAA;IAClC,cAAc,CAAC,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;AACpD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,YAAY,GAAG,cAAc,CAAA;AAEtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,MAAM,EAAE,aAAa,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,OAAO,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,UAAU,CAAA;IACjB,UAAU,EAAE,eAAe,CAAA;IAC3B,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;IACD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACxC;AAED,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;AA4C9E,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAGD,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CACjD,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAyJzC,CAAA;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,GACZ,wBAAwB,GAAG,SAAS,CAEtC;AAKD,eAAO,MAAM,yBAAyB,yGACkE,CAAA;AAExG,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAiBxD;AAyMD,eAAO,MAAM,0BAA0B,0BAEtC,CAAA;AAED,wBAAgB,yBAAyB,IAAI,wBAAwB,CAEpE;AAED,wBAAgB,8BAA8B,IAAI,MAAM,EAAE,CAEzD;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE5D;AAED,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAQ5E;AAWD,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAE5E;AAED,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAE5E;AAED,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAE5E;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,YAAY,UAAQ,GACnB,eAAe,GAAG,SAAS,CAuB7B;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAIzD;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAI1D;AAED,wBAAgB,+BAA+B,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAY3E;AAED,wBAAgB,8BAA8B,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,MAAM,CAY1E"}