@cortexkit/antigravity-auth-core 3.0.4 → 3.0.6

package/dist/common-auth-embedded/quota/index.d.ts

@@ -1,9 +1,9 @@
 export type { QuotaCodec } from './codec.js';
 export { quotaCodec } from './codec.js';
-export type { QuotaTextForm, QuotaTextOptions } from './format.js';
-export { formatQuota, NO_LIMITS_REPORTED, NO_QUOTA_READING, QUOTA_STALE_AFTER_MS, quotaTextParts, quotaWindowName, } from './format.js';
-export type { CreditBudgetCleared, CreditBudgetEntry, CreditBudgetReading, QuotaAbsentEntry, QuotaEntry, QuotaMap, QuotaReadingEntry, QuotaRetiredEntry, } from './map.js';
-export { ALL_SCOPE, DEFAULT_REQUIRED_LABELS, emptyQuotaMap, isQuotaMap, } from './map.js';
+export type { QuotaParts, QuotaTextForm, QuotaTextOptions, QuotaWindowPart, } from './format.js';
+export { formatQuota, NO_LIMITS_REPORTED, NO_QUOTA_READING, QUOTA_STALE_AFTER_MS, quotaTextParts, quotaWindowName, quotaWindowParts, } from './format.js';
+export type { CreditBudgetCleared, CreditBudgetEntry, CreditBudgetReading, QuotaAbsentEntry, QuotaCounter, QuotaEntry, QuotaMap, QuotaReadingEntry, QuotaRetiredEntry, } from './map.js';
+export { ALL_SCOPE, DEFAULT_REQUIRED_LABELS, decodeQuotaMap, emptyQuotaMap, isQuotaMap, } from './map.js';
 export type { ObservedBudget, ObservedPair, ObservedReading, QuotaObservation, } from './merge.js';
 export { isQuotaObservation, mergeQuotaObservation, QuotaCodecError, } from './merge.js';
 export type { ExhaustionReset, ProjectedBudget, ProjectedLimit, ProjectedQuota, } from './projection.js';

package/dist/common-auth-embedded/quota/index.js

@@ -1,5 +1,5 @@
 export { quotaCodec } from './codec.js';
-export { formatQuota, NO_LIMITS_REPORTED, NO_QUOTA_READING, QUOTA_STALE_AFTER_MS, quotaTextParts, quotaWindowName, } from './format.js';
-export { ALL_SCOPE, DEFAULT_REQUIRED_LABELS, emptyQuotaMap, isQuotaMap, } from './map.js';
+export { formatQuota, NO_LIMITS_REPORTED, NO_QUOTA_READING, QUOTA_STALE_AFTER_MS, quotaTextParts, quotaWindowName, quotaWindowParts, } from './format.js';
+export { ALL_SCOPE, DEFAULT_REQUIRED_LABELS, decodeQuotaMap, emptyQuotaMap, isQuotaMap, } from './map.js';
 export { isQuotaObservation, mergeQuotaObservation, QuotaCodecError, } from './merge.js';
 export { budgetExhaustedResetAt, futureResetAt, projectQuota, readsExhausted, } from './projection.js';

package/dist/common-auth-embedded/quota/map.d.ts

@@ -44,16 +44,27 @@ export interface CreditBudgetCleared {
     checkedAt: number;
 }
 export type CreditBudgetEntry = CreditBudgetReading | CreditBudgetCleared;
+export interface QuotaCounter {
+    value: number;
+    checkedAt: number;
+}
 export interface QuotaMap {
     limits: QuotaEntry[];
     /** Absent means no observation has reported on the budget yet. */
     budget?: CreditBudgetEntry;
+    /** Provider-named counts, each with its own observation time. */
+    counters?: Record<string, QuotaCounter>;
 }
 export declare function emptyQuotaMap(): QuotaMap;
 /** The time an entry speaks for: its reading, retirement or absence time. */
 export declare function entryTime(entry: QuotaEntry): number;
 export declare function limitKey(scope: string, label: string): string;
 export declare function isCreditBudgetEntry(value: unknown): value is CreditBudgetEntry;
+export declare function isQuotaCounters(value: unknown): value is Record<string, QuotaCounter>;
+/** Keep usable counters without letting one malformed count hide a quota map. */
+export declare function readQuotaCounters(value: unknown): Record<string, QuotaCounter> | undefined;
+/** Decode persisted quota, dropping malformed counters but not limit evidence. */
+export declare function decodeQuotaMap(value: unknown): QuotaMap | undefined;
 /**
  * True when `value` is a well-formed quota map. Unrecognised top-level keys
  * are tolerated (and preserved by merge) so a newer writer's additions

package/dist/common-auth-embedded/quota/map.js

@@ -83,6 +83,40 @@ export function isCreditBudgetEntry(value) {
         optional(value, 'remaining', isFiniteNumber) &&
         optional(value, 'unit', isString));
 }
+function isQuotaCounter(value) {
+    return (isRecord(value) &&
+        isFiniteNumber(value.value) &&
+        Number.isInteger(value.value) &&
+        value.value >= 0 &&
+        isFiniteNumber(value.checkedAt));
+}
+export function isQuotaCounters(value) {
+    return isRecord(value) && Object.values(value).every(isQuotaCounter);
+}
+/** Keep usable counters without letting one malformed count hide a quota map. */
+export function readQuotaCounters(value) {
+    if (!isRecord(value))
+        return undefined;
+    const entries = Object.entries(value).filter(([, entry]) => isQuotaCounter(entry));
+    return entries.length === 0
+        ? undefined
+        : Object.fromEntries(entries);
+}
+/** Decode persisted quota, dropping malformed counters but not limit evidence. */
+export function decodeQuotaMap(value) {
+    // A valid map is returned as the same object, so stored quota keeps the
+    // identity it had before counters existed; only a map with a malformed
+    // counter is copied without it.
+    if (isQuotaMap(value))
+        return value;
+    if (!isRecord(value))
+        return undefined;
+    const { counters: rawCounters, ...rest } = value;
+    if (!isQuotaMap(rest))
+        return undefined;
+    const counters = readQuotaCounters(rawCounters);
+    return { ...rest, ...(counters === undefined ? {} : { counters }) };
+}
 /**
  * True when `value` is a well-formed quota map. Unrecognised top-level keys
  * are tolerated (and preserved by merge) so a newer writer's additions
@@ -101,5 +135,6 @@ export function isQuotaMap(value) {
             return false;
         seen.add(key);
     }
-    return optional(value, 'budget', isCreditBudgetEntry);
+    return (optional(value, 'budget', isCreditBudgetEntry) &&
+        optional(value, 'counters', isQuotaCounters));
 }

package/dist/common-auth-embedded/quota/merge.d.ts

@@ -1,4 +1,4 @@
-import { type QuotaMap } from './map.js';
+import { type QuotaCounter, type QuotaMap } from './map.js';
 export interface ObservedReading {
     /** Defaults to `all`. */
     scope?: string;
@@ -32,6 +32,8 @@ export interface QuotaObservation {
     coverage?: ObservedPair[];
     /** Absent means the observation says nothing about the budget. */
     budget?: ObservedBudget;
+    /** Each named count uses its own time, independently of limits and budget. */
+    counters?: Record<string, QuotaCounter>;
 }
 /** Thrown by `mergeQuotaObservation` when either argument is malformed. */
 export declare class QuotaCodecError extends TypeError {

package/dist/common-auth-embedded/quota/merge.js

@@ -11,7 +11,7 @@
 // no entry gets an absence record. A pair outside the coverage is never
 // touched, so a header-shaped partial observation (which covers only what it
 // carries) cannot erase a family limit or the budget.
-import { ALL_SCOPE, entryTime, isQuotaMap, limitKey, } from './map.js';
+import { ALL_SCOPE, decodeQuotaMap, entryTime, isQuotaCounters, limitKey, } from './map.js';
 /** Thrown by `mergeQuotaObservation` when either argument is malformed. */
 export class QuotaCodecError extends TypeError {
     constructor(message) {
@@ -83,7 +83,8 @@ export function isQuotaObservation(value) {
     }
     if (!coverage.every(isObservedPair))
         return false;
-    return value.budget === undefined || isObservedBudget(value.budget);
+    return ((value.budget === undefined || isObservedBudget(value.budget)) &&
+        (value.counters === undefined || isQuotaCounters(value.counters)));
 }
 function compareEntries(left, right) {
     if (left.scope !== right.scope)
@@ -99,6 +100,16 @@ function mergeBudget(stored, observed, checkedAt) {
         return stored;
     return { ...observed, checkedAt };
 }
+function mergeCounters(stored, observed) {
+    const counters = new Map(Object.entries(stored ?? {}));
+    for (const [name, counter] of Object.entries(observed ?? {})) {
+        const existing = counters.get(name);
+        if (existing === undefined || counter.checkedAt >= existing.checkedAt) {
+            counters.set(name, counter);
+        }
+    }
+    return counters.size === 0 ? undefined : Object.fromEntries(counters);
+}
 /**
  * Applies `observation` to `stored` (undefined for a row with no map yet) and
  * returns the new map. Pure: neither argument is modified. Throws
@@ -106,13 +117,16 @@ function mergeBudget(stored, observed, checkedAt) {
  * write rather than persisting a map it could not read back.
  */
 export function mergeQuotaObservation(stored, observation) {
-    if (stored !== undefined && !isQuotaMap(stored)) {
+    // Decode the stored map the way reads do, so a malformed counter that reads
+    // already hide is dropped here too instead of refusing every later write.
+    const decoded = stored === undefined ? undefined : decodeQuotaMap(stored);
+    if (stored !== undefined && decoded === undefined) {
         throw new QuotaCodecError('stored quota map is malformed');
     }
     if (!isQuotaObservation(observation)) {
         throw new QuotaCodecError('quota observation is malformed');
     }
-    const base = stored ?? { limits: [] };
+    const base = decoded ?? { limits: [] };
     const at = observation.checkedAt;
     const entries = new Map();
     for (const entry of base.limits) {
@@ -152,11 +166,13 @@ export function mergeQuotaObservation(stored, observation) {
             : { scope, label: pair.label, kind: 'retired', retiredAt: at });
     }
     // Keys this module does not recognise are carried over untouched.
-    const { limits: _limits, budget: _budget, ...unknownKeys } = base;
+    const { limits: _limits, budget: _budget, counters: _counters, ...unknownKeys } = base;
     const budget = mergeBudget(base.budget, observation.budget, at);
+    const counters = mergeCounters(base.counters, observation.counters);
     return {
         ...unknownKeys,
         limits: [...entries.values()].sort(compareEntries),
         ...(budget === undefined ? {} : { budget }),
+        ...(counters === undefined ? {} : { counters }),
     };
 }

package/dist/common-auth-embedded/quota/projection.d.ts

@@ -1,4 +1,4 @@
-import { type QuotaMap } from './map.js';
+import { type QuotaCounter, type QuotaMap } from './map.js';
 export interface ProjectedLimit {
     scope: string;
     label: string;
@@ -30,6 +30,7 @@ export interface ProjectedQuota {
     checkedAt?: number;
     /** Present only when the stored budget is a reading, not cleared. */
     budget?: ProjectedBudget;
+    counters?: Record<string, QuotaCounter>;
 }
 /**
  * Resolves `map` for a request in `scope` (`all` or a model family). A family

package/dist/common-auth-embedded/quota/projection.js

@@ -6,7 +6,7 @@
 // scope, orders the result the way the primitives expect, and carries each
 // entry's (scope, label) so a decision names the limit it judged rather than
 // the position it occupied.
-import { ALL_SCOPE, } from './map.js';
+import { ALL_SCOPE, readQuotaCounters, } from './map.js';
 function project(entry) {
     if (entry.kind === 'retired') {
         return {
@@ -94,11 +94,13 @@ export function projectQuota(map, scope = ALL_SCOPE) {
         ? Math.min(...stamped.map((limit) => limit.checkedAt))
         : undefined;
     const budget = map?.budget?.kind === 'reading' ? projectBudget(map.budget) : undefined;
+    const counters = readQuotaCounters(map?.counters);
     return {
         scope,
         limits,
         ...(checkedAt === undefined ? {} : { checkedAt }),
         ...(budget === undefined ? {} : { budget }),
+        ...(counters === undefined ? {} : { counters }),
     };
 }
 /**

package/dist/common-auth-embedded/source-output.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "package": "@cortexkit/common-auth",
-  "version": "0.15.0",
-  "artifactStatus": "released",
+  "version": "0.17.2",
+  "artifactStatus": "published",
   "publicRoots": {
     "./store": {
       "types": "./dist/store/index.d.ts",
@@ -37,15 +37,15 @@
       "import": "./dist/pi-slot/index.js"
     }
   },
-  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.15.0.tgz",
-  "tarballSha256": "a23db89b43bedba8d371cd9d45e5f35306040cda3f425efb49fbce5610aa9c6b",
-  "sri": "sha512-1EQVggxbrijCtfdyv4z60eSl0dmZRGO6i1q2m8w20VxwdowWkUV0Y/7kErhp1/2ZNvmDZK65RICMiTcokidxiw==",
-  "canonicalFiles": 131,
-  "canonicalBytes": 730840,
+  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.17.2.tgz",
+  "tarballSha256": "c135db860069ed22694e98e54883992efd2bc3f7fe5cb489e6b22985dd631cca",
+  "sri": "sha512-hPt8Zoxw5Sc+rE3Iq57QNAlXkTswviwtjOBsc5TrAZHyOBZ3SGixkvFN2oZH59MxB8b6X+eAfcvvQDDpV+JOHA==",
+  "canonicalFiles": 133,
+  "canonicalBytes": 754948,
   "generator": {
     "path": "packages/opencode/scripts/embed-common-auth.ts",
     "version": 3,
-    "sha256": "158eda37ce92ca20155ccf2c74aca00072a600d976e7d74d8bce0059ea351867"
+    "sha256": "9a280484c51050f8f2c8a0d1c6687c9e28a8147c2575fa5f57024d9975802676"
   },
   "files": [
     {
@@ -211,25 +211,25 @@
     {
       "source": "package/dist/claustrum/consumer.d.ts",
       "output": "claustrum/consumer.d.ts",
-      "bytes": 5064,
-      "sourceSha256": "8be8fd17170daddc8ad93a78fe33334358eb4fe717f55b8acfff880122bb9609",
-      "outputSha256": "8be8fd17170daddc8ad93a78fe33334358eb4fe717f55b8acfff880122bb9609",
+      "bytes": 6872,
+      "sourceSha256": "489bd5ab71fc4fdb614c000ff5fcdd1005e09a76454f8cf846db4433d0b6465e",
+      "outputSha256": "489bd5ab71fc4fdb614c000ff5fcdd1005e09a76454f8cf846db4433d0b6465e",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/consumer.js",
       "output": "claustrum/consumer.js",
-      "bytes": 12321,
-      "sourceSha256": "248a328c03690d6309ba45701d1548e2094fd503bf2978d4850df1611212a1ac",
-      "outputSha256": "248a328c03690d6309ba45701d1548e2094fd503bf2978d4850df1611212a1ac",
+      "bytes": 16397,
+      "sourceSha256": "919f56b722f8b26ad691c3ca2b3d381b3e3d06cfbe6059e09db3311edb9c3f3d",
+      "outputSha256": "919f56b722f8b26ad691c3ca2b3d381b3e3d06cfbe6059e09db3311edb9c3f3d",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/custody.d.ts",
       "output": "claustrum/custody.d.ts",
-      "bytes": 8713,
-      "sourceSha256": "46ddac6c6641853dac313b7ddda106037a5b9fd512da5244c2767bfc0345536d",
-      "outputSha256": "46ddac6c6641853dac313b7ddda106037a5b9fd512da5244c2767bfc0345536d",
+      "bytes": 8811,
+      "sourceSha256": "be2dab97c1ff8deb23972498e8ea23ffeaef15b92bdd156e2e1dd4d099376be3",
+      "outputSha256": "be2dab97c1ff8deb23972498e8ea23ffeaef15b92bdd156e2e1dd4d099376be3",
       "transform": "verbatim"
     },
     {
@@ -243,17 +243,17 @@
     {
       "source": "package/dist/claustrum/enrollment.d.ts",
       "output": "claustrum/enrollment.d.ts",
-      "bytes": 7528,
-      "sourceSha256": "5b2f01bd0a6dd5f92a8450c43619717f08d1ca9aea0ed20f3f7071cc94c1c1bf",
-      "outputSha256": "5b2f01bd0a6dd5f92a8450c43619717f08d1ca9aea0ed20f3f7071cc94c1c1bf",
+      "bytes": 7743,
+      "sourceSha256": "7503e56a09f94e77a94a7ae15fd616f149ec9f675ec7c79bdea4a014ca014143",
+      "outputSha256": "7503e56a09f94e77a94a7ae15fd616f149ec9f675ec7c79bdea4a014ca014143",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/enrollment.js",
       "output": "claustrum/enrollment.js",
-      "bytes": 33305,
-      "sourceSha256": "e03e33e3f43daf5563d7e2138450c6a5347017a82627c5b8e1d1998b4ce4c42f",
-      "outputSha256": "e03e33e3f43daf5563d7e2138450c6a5347017a82627c5b8e1d1998b4ce4c42f",
+      "bytes": 33520,
+      "sourceSha256": "eeac604495c093503007478ab803c05b6e0bce8bf281f8bf9bbfee44c8ff85f1",
+      "outputSha256": "eeac604495c093503007478ab803c05b6e0bce8bf281f8bf9bbfee44c8ff85f1",
       "transform": "verbatim"
     },
     {
@@ -291,17 +291,33 @@
     {
       "source": "package/dist/claustrum/index.d.ts",
       "output": "claustrum/index.d.ts",
-      "bytes": 2735,
-      "sourceSha256": "b1b1184bed9c3586017123c06725750dd3f7d2ac3b2710e65ed9b3f3075210af",
-      "outputSha256": "b1b1184bed9c3586017123c06725750dd3f7d2ac3b2710e65ed9b3f3075210af",
+      "bytes": 2895,
+      "sourceSha256": "9cd0b310598af4b35b9b0753d6498154ad4c1f73d3f776543634f0885bc7d0f6",
+      "outputSha256": "9cd0b310598af4b35b9b0753d6498154ad4c1f73d3f776543634f0885bc7d0f6",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/index.js",
       "output": "claustrum/index.js",
-      "bytes": 1967,
-      "sourceSha256": "ced1f8aa152e634ce9d5e4088e25985822ae0e280344e0de903e4320c850d864",
-      "outputSha256": "ced1f8aa152e634ce9d5e4088e25985822ae0e280344e0de903e4320c850d864",
+      "bytes": 2141,
+      "sourceSha256": "33dc58809d432ea7bbe3f3d4425fe575589a018854444b63e0874f917981ab19",
+      "outputSha256": "33dc58809d432ea7bbe3f3d4425fe575589a018854444b63e0874f917981ab19",
+      "transform": "verbatim"
+    },
+    {
+      "source": "package/dist/claustrum/insula.d.ts",
+      "output": "claustrum/insula.d.ts",
+      "bytes": 2489,
+      "sourceSha256": "21a92525f04810a15a877e1c1ff9d7cf2fc2eb4ffe8a6aa408db22da6337d30f",
+      "outputSha256": "21a92525f04810a15a877e1c1ff9d7cf2fc2eb4ffe8a6aa408db22da6337d30f",
+      "transform": "verbatim"
+    },
+    {
+      "source": "package/dist/claustrum/insula.js",
+      "output": "claustrum/insula.js",
+      "bytes": 6097,
+      "sourceSha256": "1db6a99b9db96635bbf846e58ab54eaaa1892bf8939801a181741022d47ce428",
+      "outputSha256": "1db6a99b9db96635bbf846e58ab54eaaa1892bf8939801a181741022d47ce428",
       "transform": "verbatim"
     },
     {
@@ -323,17 +339,17 @@
     {
       "source": "package/dist/claustrum/roster.d.ts",
       "output": "claustrum/roster.d.ts",
-      "bytes": 9312,
-      "sourceSha256": "45a63920ad5998b68b1bcba9a2208e7adab99cb1999df55d798b0a2b088d7d39",
-      "outputSha256": "45a63920ad5998b68b1bcba9a2208e7adab99cb1999df55d798b0a2b088d7d39",
+      "bytes": 9932,
+      "sourceSha256": "7c5684ff5c3f66d418f3624d07565a08556662f445cb96a7575a270851fab9c3",
+      "outputSha256": "7c5684ff5c3f66d418f3624d07565a08556662f445cb96a7575a270851fab9c3",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/roster.js",
       "output": "claustrum/roster.js",
-      "bytes": 23840,
-      "sourceSha256": "8f9d247e7d614e997cebb9728eaeb96fd0f32955cebfccc3d016351ad39a3947",
-      "outputSha256": "8f9d247e7d614e997cebb9728eaeb96fd0f32955cebfccc3d016351ad39a3947",
+      "bytes": 25106,
+      "sourceSha256": "e6ac8f59dab51db4756ccbaa89fc73acd213a7a4795fdf5a7c7e4f653455fe94",
+      "outputSha256": "e6ac8f59dab51db4756ccbaa89fc73acd213a7a4795fdf5a7c7e4f653455fe94",
       "transform": "verbatim"
     },
     {
@@ -507,9 +523,9 @@
     {
       "source": "package/dist/fs/refresh-file-lock.js",
       "output": "fs/refresh-file-lock.js",
-      "bytes": 28985,
-      "sourceSha256": "6bf0f944bd70c60f1679bdc4c2764d19ed0047c77dbf737c13088bb8c478e5e2",
-      "outputSha256": "6bf0f944bd70c60f1679bdc4c2764d19ed0047c77dbf737c13088bb8c478e5e2",
+      "bytes": 29402,
+      "sourceSha256": "d162b8972a23ffec999a9c90ef6b63e28314c235a668bad378b7c8561efd3666",
+      "outputSha256": "d162b8972a23ffec999a9c90ef6b63e28314c235a668bad378b7c8561efd3666",
       "transform": "verbatim"
     },
     {
@@ -635,97 +651,97 @@
     {
       "source": "package/dist/quota/codec.d.ts",
       "output": "quota/codec.d.ts",
-      "bytes": 451,
-      "sourceSha256": "35ceda009b4be9d0bcb7969d03d42225efb15fcc4e9df1a928a2a9c98aada5f4",
-      "outputSha256": "35ceda009b4be9d0bcb7969d03d42225efb15fcc4e9df1a928a2a9c98aada5f4",
+      "bytes": 585,
+      "sourceSha256": "8289f7c656a2eedd444cddb83c412dd24bf726421e7706bf19df93b55877db06",
+      "outputSha256": "8289f7c656a2eedd444cddb83c412dd24bf726421e7706bf19df93b55877db06",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/codec.js",
       "output": "quota/codec.js",
-      "bytes": 447,
-      "sourceSha256": "71a07337a0403c12541cc5125b4923c03c17a07e9fafe311d52d14ef2a5b2701",
-      "outputSha256": "71a07337a0403c12541cc5125b4923c03c17a07e9fafe311d52d14ef2a5b2701",
+      "bytes": 491,
+      "sourceSha256": "4e496ce03a8a23536b467168f1dc6a7ceffb06d00ae80cb8a8868f311b2f3a8a",
+      "outputSha256": "4e496ce03a8a23536b467168f1dc6a7ceffb06d00ae80cb8a8868f311b2f3a8a",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/format.d.ts",
       "output": "quota/format.d.ts",
-      "bytes": 2345,
-      "sourceSha256": "87ec0c819d5ba567bcd106abe0a224d91daa030fe33942b33f931e6ea833cf5b",
-      "outputSha256": "87ec0c819d5ba567bcd106abe0a224d91daa030fe33942b33f931e6ea833cf5b",
+      "bytes": 3538,
+      "sourceSha256": "b690da79fd26e936bf7d2867f411cacd5f32a8daf254d15cfef3d95417428a4a",
+      "outputSha256": "b690da79fd26e936bf7d2867f411cacd5f32a8daf254d15cfef3d95417428a4a",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/format.js",
       "output": "quota/format.js",
-      "bytes": 5819,
-      "sourceSha256": "a6911f852a33e5305d7ea86bd2fe0c62e12207e17e01b11b23db6e1de7b1aea7",
-      "outputSha256": "a6911f852a33e5305d7ea86bd2fe0c62e12207e17e01b11b23db6e1de7b1aea7",
+      "bytes": 7317,
+      "sourceSha256": "421d130c910eaaefa10dd190cc7c7b77df9c1291f6560f6e71f19c9b30ddd5ef",
+      "outputSha256": "421d130c910eaaefa10dd190cc7c7b77df9c1291f6560f6e71f19c9b30ddd5ef",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/index.d.ts",
       "output": "quota/index.d.ts",
-      "bytes": 955,
-      "sourceSha256": "c51ad163eb1a16d20d88773abdeab90aea1e7c5543d7223acddec31494707056",
-      "outputSha256": "c51ad163eb1a16d20d88773abdeab90aea1e7c5543d7223acddec31494707056",
+      "bytes": 1033,
+      "sourceSha256": "dc5906c78e391126596a6eea6c999f1cb861a6656386e2be53e1bf00b6b63451",
+      "outputSha256": "dc5906c78e391126596a6eea6c999f1cb861a6656386e2be53e1bf00b6b63451",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/index.js",
       "output": "quota/index.js",
-      "bytes": 463,
-      "sourceSha256": "05814a130847a52cbcbc9a1a67cad43c807abe179b1ac0a83b0b3c3f6b2fd4b7",
-      "outputSha256": "05814a130847a52cbcbc9a1a67cad43c807abe179b1ac0a83b0b3c3f6b2fd4b7",
+      "bytes": 497,
+      "sourceSha256": "50027508fb08fb11903fc2220b30b141f73118424e4ca0a0ecd231519b28985d",
+      "outputSha256": "50027508fb08fb11903fc2220b30b141f73118424e4ca0a0ecd231519b28985d",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/map.d.ts",
       "output": "quota/map.d.ts",
-      "bytes": 2270,
-      "sourceSha256": "a2f7370148018247eae306b830ca824a2941aa53ece71cf301063a67ba9eb4a1",
-      "outputSha256": "a2f7370148018247eae306b830ca824a2941aa53ece71cf301063a67ba9eb4a1",
+      "bytes": 2901,
+      "sourceSha256": "28ba151926d76d45051065b243032ae4f698a3c4f94b44f32341c97467c7faf6",
+      "outputSha256": "28ba151926d76d45051065b243032ae4f698a3c4f94b44f32341c97467c7faf6",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/map.js",
       "output": "quota/map.js",
-      "bytes": 4271,
-      "sourceSha256": "61fb25c789389e57ff8cceb450f6872c2b6e4961cec3c4650f6af699ab5a27f2",
-      "outputSha256": "61fb25c789389e57ff8cceb450f6872c2b6e4961cec3c4650f6af699ab5a27f2",
+      "bytes": 5669,
+      "sourceSha256": "95339af4c80684b4e462f5ba32affeaa5f8b5885db599dc5e8ac1ffd1890d729",
+      "outputSha256": "95339af4c80684b4e462f5ba32affeaa5f8b5885db599dc5e8ac1ffd1890d729",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/merge.d.ts",
       "output": "quota/merge.d.ts",
-      "bytes": 1628,
-      "sourceSha256": "88998476cd9de8037577065098894fd2ab4b5faed3f07edf5ac35b8f5bf6bcc1",
-      "outputSha256": "88998476cd9de8037577065098894fd2ab4b5faed3f07edf5ac35b8f5bf6bcc1",
+      "bytes": 1775,
+      "sourceSha256": "3531d738712f40b79415cd58940c55bf4cce6827c500fc3912368ff012e31f25",
+      "outputSha256": "3531d738712f40b79415cd58940c55bf4cce6827c500fc3912368ff012e31f25",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/merge.js",
       "output": "quota/merge.js",
-      "bytes": 6513,
-      "sourceSha256": "c21d7490b7ced3f646e94069d4de2e15b97231a96b3227b03c3a3197738359ad",
-      "outputSha256": "c21d7490b7ced3f646e94069d4de2e15b97231a96b3227b03c3a3197738359ad",
+      "bytes": 7439,
+      "sourceSha256": "64440806fd70d214eb6a6f4c98f3a6ba442ca48d39762395a202c25fbf08a23e",
+      "outputSha256": "64440806fd70d214eb6a6f4c98f3a6ba442ca48d39762395a202c25fbf08a23e",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/projection.d.ts",
       "output": "quota/projection.d.ts",
-      "bytes": 2911,
-      "sourceSha256": "e410a8db0ff2ae805dbe342088d08ab555a701466159479f2e838f585b820c92",
-      "outputSha256": "e410a8db0ff2ae805dbe342088d08ab555a701466159479f2e838f585b820c92",
+      "bytes": 2975,
+      "sourceSha256": "65a1b13db0a4d21f8b4136af65888494c6d8a7e117e80879c96f75fc0b763ad9",
+      "outputSha256": "65a1b13db0a4d21f8b4136af65888494c6d8a7e117e80879c96f75fc0b763ad9",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/projection.js",
       "output": "quota/projection.js",
-      "bytes": 5509,
-      "sourceSha256": "1fd24078f42e7658c31c31f08116f96bf7b53b91948650deefca9a4add481d76",
-      "outputSha256": "1fd24078f42e7658c31c31f08116f96bf7b53b91948650deefca9a4add481d76",
+      "bytes": 5640,
+      "sourceSha256": "be7012f1df5845a1f3377b148f35ffe029583c1b9b5426f70a7ba96f7b49a150",
+      "outputSha256": "be7012f1df5845a1f3377b148f35ffe029583c1b9b5426f70a7ba96f7b49a150",
       "transform": "verbatim"
     },
     {
@@ -1043,17 +1059,17 @@
     {
       "source": "package/dist/store/schema.d.ts",
       "output": "store/schema.d.ts",
-      "bytes": 22168,
-      "sourceSha256": "2099f309023c62e6ed8b82906a8b5c7eaa8d42e1a134908dc65bece83711de9f",
-      "outputSha256": "2099f309023c62e6ed8b82906a8b5c7eaa8d42e1a134908dc65bece83711de9f",
+      "bytes": 22290,
+      "sourceSha256": "51a47144ee965680e517e8ec91210742908336f6b781f8be2026124d6d0a6bbf",
+      "outputSha256": "51a47144ee965680e517e8ec91210742908336f6b781f8be2026124d6d0a6bbf",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/store/schema.js",
       "output": "store/schema.js",
-      "bytes": 31460,
-      "sourceSha256": "349c1bac2b8417dd941a16148f49521ea8a9c1fefb5e3a6ee82bb461bd050312",
-      "outputSha256": "349c1bac2b8417dd941a16148f49521ea8a9c1fefb5e3a6ee82bb461bd050312",
+      "bytes": 31533,
+      "sourceSha256": "ae55f6f875ff8a9e9a09795eac1bedfd4bf795bd6802e8de37b52586b61208d0",
+      "outputSha256": "ae55f6f875ff8a9e9a09795eac1bedfd4bf795bd6802e8de37b52586b61208d0",
       "transform": "verbatim"
     },
     {

package/dist/common-auth-embedded/store/schema.d.ts

@@ -49,6 +49,8 @@ export type StoredCredential = (OAuthCredential & {
 /** Quota codec supplied by `/quota`: the store never interprets the map itself. */
 export interface QuotaCodec {
     validate(value: unknown): boolean;
+    /** Normalize persisted quota before validation, when the codec supports it. */
+    decode?(value: unknown): unknown;
     merge(stored: unknown | undefined, observation: unknown): unknown;
 }
 /**

package/dist/common-auth-embedded/store/schema.js

@@ -420,7 +420,8 @@ function parseEntry(raw, codec) {
         return undefined;
     if ('disabledReason' in raw && typeof raw.disabledReason !== 'string')
         return undefined;
-    if ('quota' in raw && !codec.validate(raw.quota))
+    const quota = 'quota' in raw && codec.decode ? codec.decode(raw.quota) : raw.quota;
+    if ('quota' in raw && !codec.validate(quota))
         return undefined;
     if ('staged' in raw && !parseReservation(raw.staged))
         return undefined;
@@ -430,7 +431,7 @@ function parseEntry(raw, codec) {
         ...(typeof raw.disabledReason === 'string'
             ? { disabledReason: raw.disabledReason }
             : {}),
-        ...('quota' in raw ? { quota: raw.quota } : {}),
+        ...('quota' in raw ? { quota } : {}),
     };
 }
 function credentialFor(raw, stateEntry) {

package/dist/common-auth-runtime.d.ts

@@ -14,7 +14,8 @@
  * evaluate the store, the command menu or the vault client. A loaded module is
  * cached for the life of the process; a failed load is not cached, so a later
  * call can retry it. `./claustrum` additionally needs the
- * `@cortexkit/claustrum-client` dependency, which is only resolved when
+ * `@cortexkit/claustrum-client` and `@cortexkit/subc-client` dependencies,
+ * which are only resolved when
  * `loadCommonAuthClaustrum` is called.
  *
  * Static consumers can import the same modules through this package's

package/dist/common-auth-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common-auth-runtime.d.ts","sourceRoot":"","sources":["../src/common-auth-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAC/B,cAAc,uCAAuC,CAAC,CAAA;AACxD,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAC5B,cAAc,oCAAoC,CAAC,CAAA;AACrD,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GACjC,cAAc,yCAAyC,CAAC,CAAA;AAC1D,8EAA8E;AAC9E,MAAM,MAAM,qBAAqB,GAC/B,cAAc,uCAAuC,CAAC,CAAA;AACxD,wEAAwE;AACxE,MAAM,MAAM,wBAAwB,GAClC,cAAc,0CAA0C,CAAC,CAAA;AAC3D,2EAA2E;AAC3E,MAAM,MAAM,wBAAwB,GAClC,cAAc,2CAA2C,CAAC,CAAA;AAC5D,0EAA0E;AAC1E,MAAM,MAAM,yBAAyB,GACnC,cAAc,2CAA2C,CAAC,CAAA;AAC5D,0EAA0E;AAC1E,MAAM,MAAM,sBAAsB,GAChC,cAAc,wCAAwC,CAAC,CAAA;AAEzD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAA;CAChC;AAeD,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,EAAE,MAAM,OAAO,CAAC,qBAAqB,CACL,CAAA;AAEhE,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAE9D,CAAA;AAED,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,EAAE,MAAM,OAAO,CAAC,uBAAuB,CACP,CAAA;AAElE,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,EAAE,MAAM,OAAO,CAAC,qBAAqB,CACL,CAAA;AAEhE,qDAAqD;AACrD,eAAO,MAAM,sBAAsB,EAAE,MAAM,OAAO,CAAC,wBAAwB,CACR,CAAA;AAEnE,sDAAsD;AACtD,eAAO,MAAM,sBAAsB,EAAE,MAAM,OAAO,CAAC,wBAAwB,CACP,CAAA;AAEpE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,OAAO,CAAC,yBAAyB,CACT,CAAA;AAEpE,mDAAmD;AACnD,eAAO,MAAM,oBAAoB,EAAE,MAAM,OAAO,CAAC,sBAAsB,CACN,CAAA;AAEjE,0EAA0E;AAC1E,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAMlF;AAED,MAAM,MAAM,sBAAsB,GAChC,cAAc,yCAAyC,CAAC,CAAA;AAE1D,mHAAmH;AACnH,eAAO,MAAM,oBAAoB,EAAE,MAAM,OAAO,CAAC,sBAAsB,CACL,CAAA"}
+{"version":3,"file":"common-auth-runtime.d.ts","sourceRoot":"","sources":["../src/common-auth-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAC/B,cAAc,uCAAuC,CAAC,CAAA;AACxD,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAC5B,cAAc,oCAAoC,CAAC,CAAA;AACrD,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GACjC,cAAc,yCAAyC,CAAC,CAAA;AAC1D,8EAA8E;AAC9E,MAAM,MAAM,qBAAqB,GAC/B,cAAc,uCAAuC,CAAC,CAAA;AACxD,wEAAwE;AACxE,MAAM,MAAM,wBAAwB,GAClC,cAAc,0CAA0C,CAAC,CAAA;AAC3D,2EAA2E;AAC3E,MAAM,MAAM,wBAAwB,GAClC,cAAc,2CAA2C,CAAC,CAAA;AAC5D,0EAA0E;AAC1E,MAAM,MAAM,yBAAyB,GACnC,cAAc,2CAA2C,CAAC,CAAA;AAC5D,0EAA0E;AAC1E,MAAM,MAAM,sBAAsB,GAChC,cAAc,wCAAwC,CAAC,CAAA;AAEzD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAA;IACrC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAA;CAChC;AAeD,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,EAAE,MAAM,OAAO,CAAC,qBAAqB,CACL,CAAA;AAEhE,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAE9D,CAAA;AAED,oDAAoD;AACpD,eAAO,MAAM,qBAAqB,EAAE,MAAM,OAAO,CAAC,uBAAuB,CACP,CAAA;AAElE,kDAAkD;AAClD,eAAO,MAAM,mBAAmB,EAAE,MAAM,OAAO,CAAC,qBAAqB,CACL,CAAA;AAEhE,qDAAqD;AACrD,eAAO,MAAM,sBAAsB,EAAE,MAAM,OAAO,CAAC,wBAAwB,CACR,CAAA;AAEnE,sDAAsD;AACtD,eAAO,MAAM,sBAAsB,EAAE,MAAM,OAAO,CAAC,wBAAwB,CACP,CAAA;AAEpE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,OAAO,CAAC,yBAAyB,CACT,CAAA;AAEpE,mDAAmD;AACnD,eAAO,MAAM,oBAAoB,EAAE,MAAM,OAAO,CAAC,sBAAsB,CACN,CAAA;AAEjE,0EAA0E;AAC1E,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAMlF;AAED,MAAM,MAAM,sBAAsB,GAChC,cAAc,yCAAyC,CAAC,CAAA;AAE1D,mHAAmH;AACnH,eAAO,MAAM,oBAAoB,EAAE,MAAM,OAAO,CAAC,sBAAsB,CACL,CAAA"}

package/dist/common-auth-runtime.js

@@ -14,7 +14,8 @@
  * evaluate the store, the command menu or the vault client. A loaded module is
  * cached for the life of the process; a failed load is not cached, so a later
  * call can retry it. `./claustrum` additionally needs the
- * `@cortexkit/claustrum-client` dependency, which is only resolved when
+ * `@cortexkit/claustrum-client` and `@cortexkit/subc-client` dependencies,
+ * which are only resolved when
  * `loadCommonAuthClaustrum` is called.
  *
  * Static consumers can import the same modules through this package's

package/dist/common-auth-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"common-auth-runtime.js","sourceRoot":"","sources":["../src/common-auth-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAqCH,SAAS,OAAO,CAAI,IAAsB;IACxC,IAAI,OAA+B,CAAA;IACnC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxC,OAAO,GAAG,SAAS,CAAA;gBACnB,MAAM,KAAK,CAAA;YACb,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAA;AAEhE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAsC,OAAO,CACxE,GAAG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,CACnD,CAAA;AAED,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAChC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;AAElE,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAA;AAEhE,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GACjC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAA;AAEnE,sDAAsD;AACtD,MAAM,CAAC,MAAM,sBAAsB,GACjC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAA;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAA;AAEpE,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAC/B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAA;AAEjE,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpC,mBAAmB,EAAE;QACrB,gBAAgB,EAAE;KACnB,CAAC,CAAA;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;AACtB,CAAC;AAKD,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"common-auth-runtime.js","sourceRoot":"","sources":["../src/common-auth-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAqCH,SAAS,OAAO,CAAI,IAAsB;IACxC,IAAI,OAA+B,CAAA;IACnC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxC,OAAO,GAAG,SAAS,CAAA;gBACnB,MAAM,KAAK,CAAA;YACb,CAAC,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAA;AAEhE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAsC,OAAO,CACxE,GAAG,EAAE,CAAC,MAAM,CAAC,oCAAoC,CAAC,CACnD,CAAA;AAED,oDAAoD;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAChC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA;AAElE,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAA;AAEhE,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GACjC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,CAAA;AAEnE,sDAAsD;AACtD,MAAM,CAAC,MAAM,sBAAsB,GACjC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAA;AAEpE;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAA;AAEpE,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAC/B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAA;AAEjE,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpC,mBAAmB,EAAE;QACrB,gBAAgB,EAAE;KACnB,CAAC,CAAA;IACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;AACtB,CAAC;AAKD,mHAAmH;AACnH,MAAM,CAAC,MAAM,oBAAoB,GAC/B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAA"}