@cortexkit/antigravity-auth-core 3.0.5 → 3.0.7

package/dist/common-auth-embedded/quota/map.js

@@ -83,6 +83,40 @@ export function isCreditBudgetEntry(value) {
         optional(value, 'remaining', isFiniteNumber) &&
         optional(value, 'unit', isString));
 }
+function isQuotaCounter(value) {
+    return (isRecord(value) &&
+        isFiniteNumber(value.value) &&
+        Number.isInteger(value.value) &&
+        value.value >= 0 &&
+        isFiniteNumber(value.checkedAt));
+}
+export function isQuotaCounters(value) {
+    return isRecord(value) && Object.values(value).every(isQuotaCounter);
+}
+/** Keep usable counters without letting one malformed count hide a quota map. */
+export function readQuotaCounters(value) {
+    if (!isRecord(value))
+        return undefined;
+    const entries = Object.entries(value).filter(([, entry]) => isQuotaCounter(entry));
+    return entries.length === 0
+        ? undefined
+        : Object.fromEntries(entries);
+}
+/** Decode persisted quota, dropping malformed counters but not limit evidence. */
+export function decodeQuotaMap(value) {
+    // A valid map is returned as the same object, so stored quota keeps the
+    // identity it had before counters existed; only a map with a malformed
+    // counter is copied without it.
+    if (isQuotaMap(value))
+        return value;
+    if (!isRecord(value))
+        return undefined;
+    const { counters: rawCounters, ...rest } = value;
+    if (!isQuotaMap(rest))
+        return undefined;
+    const counters = readQuotaCounters(rawCounters);
+    return { ...rest, ...(counters === undefined ? {} : { counters }) };
+}
 /**
  * True when `value` is a well-formed quota map. Unrecognised top-level keys
  * are tolerated (and preserved by merge) so a newer writer's additions
@@ -101,5 +135,6 @@ export function isQuotaMap(value) {
             return false;
         seen.add(key);
     }
-    return optional(value, 'budget', isCreditBudgetEntry);
+    return (optional(value, 'budget', isCreditBudgetEntry) &&
+        optional(value, 'counters', isQuotaCounters));
 }

package/dist/common-auth-embedded/quota/merge.d.ts

@@ -1,4 +1,4 @@
-import { type QuotaMap } from './map.js';
+import { type QuotaCounter, type QuotaMap } from './map.js';
 export interface ObservedReading {
     /** Defaults to `all`. */
     scope?: string;
@@ -32,6 +32,8 @@ export interface QuotaObservation {
     coverage?: ObservedPair[];
     /** Absent means the observation says nothing about the budget. */
     budget?: ObservedBudget;
+    /** Each named count uses its own time, independently of limits and budget. */
+    counters?: Record<string, QuotaCounter>;
 }
 /** Thrown by `mergeQuotaObservation` when either argument is malformed. */
 export declare class QuotaCodecError extends TypeError {

package/dist/common-auth-embedded/quota/merge.js

@@ -11,7 +11,7 @@
 // no entry gets an absence record. A pair outside the coverage is never
 // touched, so a header-shaped partial observation (which covers only what it
 // carries) cannot erase a family limit or the budget.
-import { ALL_SCOPE, entryTime, isQuotaMap, limitKey, } from './map.js';
+import { ALL_SCOPE, decodeQuotaMap, entryTime, isQuotaCounters, limitKey, } from './map.js';
 /** Thrown by `mergeQuotaObservation` when either argument is malformed. */
 export class QuotaCodecError extends TypeError {
     constructor(message) {
@@ -83,7 +83,8 @@ export function isQuotaObservation(value) {
     }
     if (!coverage.every(isObservedPair))
         return false;
-    return value.budget === undefined || isObservedBudget(value.budget);
+    return ((value.budget === undefined || isObservedBudget(value.budget)) &&
+        (value.counters === undefined || isQuotaCounters(value.counters)));
 }
 function compareEntries(left, right) {
     if (left.scope !== right.scope)
@@ -99,6 +100,16 @@ function mergeBudget(stored, observed, checkedAt) {
         return stored;
     return { ...observed, checkedAt };
 }
+function mergeCounters(stored, observed) {
+    const counters = new Map(Object.entries(stored ?? {}));
+    for (const [name, counter] of Object.entries(observed ?? {})) {
+        const existing = counters.get(name);
+        if (existing === undefined || counter.checkedAt >= existing.checkedAt) {
+            counters.set(name, counter);
+        }
+    }
+    return counters.size === 0 ? undefined : Object.fromEntries(counters);
+}
 /**
  * Applies `observation` to `stored` (undefined for a row with no map yet) and
  * returns the new map. Pure: neither argument is modified. Throws
@@ -106,13 +117,16 @@ function mergeBudget(stored, observed, checkedAt) {
  * write rather than persisting a map it could not read back.
  */
 export function mergeQuotaObservation(stored, observation) {
-    if (stored !== undefined && !isQuotaMap(stored)) {
+    // Decode the stored map the way reads do, so a malformed counter that reads
+    // already hide is dropped here too instead of refusing every later write.
+    const decoded = stored === undefined ? undefined : decodeQuotaMap(stored);
+    if (stored !== undefined && decoded === undefined) {
         throw new QuotaCodecError('stored quota map is malformed');
     }
     if (!isQuotaObservation(observation)) {
         throw new QuotaCodecError('quota observation is malformed');
     }
-    const base = stored ?? { limits: [] };
+    const base = decoded ?? { limits: [] };
     const at = observation.checkedAt;
     const entries = new Map();
     for (const entry of base.limits) {
@@ -152,11 +166,13 @@ export function mergeQuotaObservation(stored, observation) {
             : { scope, label: pair.label, kind: 'retired', retiredAt: at });
     }
     // Keys this module does not recognise are carried over untouched.
-    const { limits: _limits, budget: _budget, ...unknownKeys } = base;
+    const { limits: _limits, budget: _budget, counters: _counters, ...unknownKeys } = base;
     const budget = mergeBudget(base.budget, observation.budget, at);
+    const counters = mergeCounters(base.counters, observation.counters);
     return {
         ...unknownKeys,
         limits: [...entries.values()].sort(compareEntries),
         ...(budget === undefined ? {} : { budget }),
+        ...(counters === undefined ? {} : { counters }),
     };
 }

package/dist/common-auth-embedded/quota/projection.d.ts

@@ -1,4 +1,4 @@
-import { type QuotaMap } from './map.js';
+import { type QuotaCounter, type QuotaMap } from './map.js';
 export interface ProjectedLimit {
     scope: string;
     label: string;
@@ -30,6 +30,7 @@ export interface ProjectedQuota {
     checkedAt?: number;
     /** Present only when the stored budget is a reading, not cleared. */
     budget?: ProjectedBudget;
+    counters?: Record<string, QuotaCounter>;
 }
 /**
  * Resolves `map` for a request in `scope` (`all` or a model family). A family

package/dist/common-auth-embedded/quota/projection.js

@@ -6,7 +6,7 @@
 // scope, orders the result the way the primitives expect, and carries each
 // entry's (scope, label) so a decision names the limit it judged rather than
 // the position it occupied.
-import { ALL_SCOPE, } from './map.js';
+import { ALL_SCOPE, readQuotaCounters, } from './map.js';
 function project(entry) {
     if (entry.kind === 'retired') {
         return {
@@ -94,11 +94,13 @@ export function projectQuota(map, scope = ALL_SCOPE) {
         ? Math.min(...stamped.map((limit) => limit.checkedAt))
         : undefined;
     const budget = map?.budget?.kind === 'reading' ? projectBudget(map.budget) : undefined;
+    const counters = readQuotaCounters(map?.counters);
     return {
         scope,
         limits,
         ...(checkedAt === undefined ? {} : { checkedAt }),
         ...(budget === undefined ? {} : { budget }),
+        ...(counters === undefined ? {} : { counters }),
     };
 }
 /**

package/dist/common-auth-embedded/source-output.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "package": "@cortexkit/common-auth",
-  "version": "0.15.0",
-  "artifactStatus": "released",
+  "version": "0.19.0",
+  "artifactStatus": "published",
   "publicRoots": {
     "./store": {
       "types": "./dist/store/index.d.ts",
@@ -37,15 +37,15 @@
       "import": "./dist/pi-slot/index.js"
     }
   },
-  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.15.0.tgz",
-  "tarballSha256": "a23db89b43bedba8d371cd9d45e5f35306040cda3f425efb49fbce5610aa9c6b",
-  "sri": "sha512-1EQVggxbrijCtfdyv4z60eSl0dmZRGO6i1q2m8w20VxwdowWkUV0Y/7kErhp1/2ZNvmDZK65RICMiTcokidxiw==",
-  "canonicalFiles": 131,
-  "canonicalBytes": 730840,
+  "input": "tools/common-auth-build/inputs/cortexkit-common-auth-0.19.0.tgz",
+  "tarballSha256": "dd32b53e849a7d98ed861a5f9d3d81645b31169350257ef1732f7827b8684885",
+  "sri": "sha512-p7oy26dBllFF6mkQinsyyqqFP8FKoyVvHyt/aQWEGTljn0AbVRj++Co5Mict4ffQUPrujlQwThilUoPn/AsB8Q==",
+  "canonicalFiles": 133,
+  "canonicalBytes": 766798,
   "generator": {
     "path": "packages/opencode/scripts/embed-common-auth.ts",
     "version": 3,
-    "sha256": "158eda37ce92ca20155ccf2c74aca00072a600d976e7d74d8bce0059ea351867"
+    "sha256": "c701471b1c52e731528039f0ed121c9cfa4328f533fe9023c0a49eecca17ba2b"
   },
   "files": [
     {
@@ -211,49 +211,49 @@
     {
       "source": "package/dist/claustrum/consumer.d.ts",
       "output": "claustrum/consumer.d.ts",
-      "bytes": 5064,
-      "sourceSha256": "8be8fd17170daddc8ad93a78fe33334358eb4fe717f55b8acfff880122bb9609",
-      "outputSha256": "8be8fd17170daddc8ad93a78fe33334358eb4fe717f55b8acfff880122bb9609",
+      "bytes": 7516,
+      "sourceSha256": "5bd8eae33d4d0098376fe5b6d6d0171eb6041ba1d0ae9ef5da40e569a36897bd",
+      "outputSha256": "5bd8eae33d4d0098376fe5b6d6d0171eb6041ba1d0ae9ef5da40e569a36897bd",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/consumer.js",
       "output": "claustrum/consumer.js",
-      "bytes": 12321,
-      "sourceSha256": "248a328c03690d6309ba45701d1548e2094fd503bf2978d4850df1611212a1ac",
-      "outputSha256": "248a328c03690d6309ba45701d1548e2094fd503bf2978d4850df1611212a1ac",
+      "bytes": 18272,
+      "sourceSha256": "82726ae5b1f14f5bb3a19d1e9a9d312dd8f8339f837f1efbecd65e8195f3c01c",
+      "outputSha256": "82726ae5b1f14f5bb3a19d1e9a9d312dd8f8339f837f1efbecd65e8195f3c01c",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/custody.d.ts",
       "output": "claustrum/custody.d.ts",
-      "bytes": 8713,
-      "sourceSha256": "46ddac6c6641853dac313b7ddda106037a5b9fd512da5244c2767bfc0345536d",
-      "outputSha256": "46ddac6c6641853dac313b7ddda106037a5b9fd512da5244c2767bfc0345536d",
+      "bytes": 10126,
+      "sourceSha256": "053619f193ea68739125624cf1bcb078c78cb38e506c7009894d92c672f88b88",
+      "outputSha256": "053619f193ea68739125624cf1bcb078c78cb38e506c7009894d92c672f88b88",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/custody.js",
       "output": "claustrum/custody.js",
-      "bytes": 15071,
-      "sourceSha256": "8dae16f4afc9f39855e84a340a224d77d663d42ce53a0b425d2427d0e2f0eff0",
-      "outputSha256": "8dae16f4afc9f39855e84a340a224d77d663d42ce53a0b425d2427d0e2f0eff0",
+      "bytes": 15835,
+      "sourceSha256": "ba5c42a9ad00f66b4e33ae8e810d1b0e8a57c433179dec7c939706c682e49a8f",
+      "outputSha256": "ba5c42a9ad00f66b4e33ae8e810d1b0e8a57c433179dec7c939706c682e49a8f",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/enrollment.d.ts",
       "output": "claustrum/enrollment.d.ts",
-      "bytes": 7528,
-      "sourceSha256": "5b2f01bd0a6dd5f92a8450c43619717f08d1ca9aea0ed20f3f7071cc94c1c1bf",
-      "outputSha256": "5b2f01bd0a6dd5f92a8450c43619717f08d1ca9aea0ed20f3f7071cc94c1c1bf",
+      "bytes": 7743,
+      "sourceSha256": "7503e56a09f94e77a94a7ae15fd616f149ec9f675ec7c79bdea4a014ca014143",
+      "outputSha256": "7503e56a09f94e77a94a7ae15fd616f149ec9f675ec7c79bdea4a014ca014143",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/enrollment.js",
       "output": "claustrum/enrollment.js",
-      "bytes": 33305,
-      "sourceSha256": "e03e33e3f43daf5563d7e2138450c6a5347017a82627c5b8e1d1998b4ce4c42f",
-      "outputSha256": "e03e33e3f43daf5563d7e2138450c6a5347017a82627c5b8e1d1998b4ce4c42f",
+      "bytes": 33520,
+      "sourceSha256": "eeac604495c093503007478ab803c05b6e0bce8bf281f8bf9bbfee44c8ff85f1",
+      "outputSha256": "eeac604495c093503007478ab803c05b6e0bce8bf281f8bf9bbfee44c8ff85f1",
       "transform": "verbatim"
     },
     {
@@ -291,17 +291,33 @@
     {
       "source": "package/dist/claustrum/index.d.ts",
       "output": "claustrum/index.d.ts",
-      "bytes": 2735,
-      "sourceSha256": "b1b1184bed9c3586017123c06725750dd3f7d2ac3b2710e65ed9b3f3075210af",
-      "outputSha256": "b1b1184bed9c3586017123c06725750dd3f7d2ac3b2710e65ed9b3f3075210af",
+      "bytes": 2939,
+      "sourceSha256": "cd2f374dec9e06a7962d2c262c08c965213610107ff1f4f972c2c76c35fe8254",
+      "outputSha256": "cd2f374dec9e06a7962d2c262c08c965213610107ff1f4f972c2c76c35fe8254",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/index.js",
       "output": "claustrum/index.js",
-      "bytes": 1967,
-      "sourceSha256": "ced1f8aa152e634ce9d5e4088e25985822ae0e280344e0de903e4320c850d864",
-      "outputSha256": "ced1f8aa152e634ce9d5e4088e25985822ae0e280344e0de903e4320c850d864",
+      "bytes": 2141,
+      "sourceSha256": "33dc58809d432ea7bbe3f3d4425fe575589a018854444b63e0874f917981ab19",
+      "outputSha256": "33dc58809d432ea7bbe3f3d4425fe575589a018854444b63e0874f917981ab19",
+      "transform": "verbatim"
+    },
+    {
+      "source": "package/dist/claustrum/insula.d.ts",
+      "output": "claustrum/insula.d.ts",
+      "bytes": 2489,
+      "sourceSha256": "21a92525f04810a15a877e1c1ff9d7cf2fc2eb4ffe8a6aa408db22da6337d30f",
+      "outputSha256": "21a92525f04810a15a877e1c1ff9d7cf2fc2eb4ffe8a6aa408db22da6337d30f",
+      "transform": "verbatim"
+    },
+    {
+      "source": "package/dist/claustrum/insula.js",
+      "output": "claustrum/insula.js",
+      "bytes": 6097,
+      "sourceSha256": "1db6a99b9db96635bbf846e58ab54eaaa1892bf8939801a181741022d47ce428",
+      "outputSha256": "1db6a99b9db96635bbf846e58ab54eaaa1892bf8939801a181741022d47ce428",
       "transform": "verbatim"
     },
     {
@@ -323,17 +339,17 @@
     {
       "source": "package/dist/claustrum/roster.d.ts",
       "output": "claustrum/roster.d.ts",
-      "bytes": 9312,
-      "sourceSha256": "45a63920ad5998b68b1bcba9a2208e7adab99cb1999df55d798b0a2b088d7d39",
-      "outputSha256": "45a63920ad5998b68b1bcba9a2208e7adab99cb1999df55d798b0a2b088d7d39",
+      "bytes": 9932,
+      "sourceSha256": "7c5684ff5c3f66d418f3624d07565a08556662f445cb96a7575a270851fab9c3",
+      "outputSha256": "7c5684ff5c3f66d418f3624d07565a08556662f445cb96a7575a270851fab9c3",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/claustrum/roster.js",
       "output": "claustrum/roster.js",
-      "bytes": 23840,
-      "sourceSha256": "8f9d247e7d614e997cebb9728eaeb96fd0f32955cebfccc3d016351ad39a3947",
-      "outputSha256": "8f9d247e7d614e997cebb9728eaeb96fd0f32955cebfccc3d016351ad39a3947",
+      "bytes": 25106,
+      "sourceSha256": "e6ac8f59dab51db4756ccbaa89fc73acd213a7a4795fdf5a7c7e4f653455fe94",
+      "outputSha256": "e6ac8f59dab51db4756ccbaa89fc73acd213a7a4795fdf5a7c7e4f653455fe94",
       "transform": "verbatim"
     },
     {
@@ -499,17 +515,17 @@
     {
       "source": "package/dist/fs/refresh-file-lock.d.ts",
       "output": "fs/refresh-file-lock.d.ts",
-      "bytes": 1765,
-      "sourceSha256": "72996a1247d498a34ac157d23c34ef03bcbdb68c79e8751be4874885aed7e843",
-      "outputSha256": "72996a1247d498a34ac157d23c34ef03bcbdb68c79e8751be4874885aed7e843",
+      "bytes": 2125,
+      "sourceSha256": "ec643f4e081c108c1b42ceb17a83cf3e7e9997a4c75e1a61ffc33b5b44ccd414",
+      "outputSha256": "ec643f4e081c108c1b42ceb17a83cf3e7e9997a4c75e1a61ffc33b5b44ccd414",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/fs/refresh-file-lock.js",
       "output": "fs/refresh-file-lock.js",
-      "bytes": 28985,
-      "sourceSha256": "6bf0f944bd70c60f1679bdc4c2764d19ed0047c77dbf737c13088bb8c478e5e2",
-      "outputSha256": "6bf0f944bd70c60f1679bdc4c2764d19ed0047c77dbf737c13088bb8c478e5e2",
+      "bytes": 29704,
+      "sourceSha256": "5c52aad573e84e8065dcf06259ecf38345e8b5a2c401029a23d942f28c7a8521",
+      "outputSha256": "5c52aad573e84e8065dcf06259ecf38345e8b5a2c401029a23d942f28c7a8521",
       "transform": "verbatim"
     },
     {
@@ -611,9 +627,9 @@
     {
       "source": "package/dist/pi-slot/lock.js",
       "output": "pi-slot/lock.js",
-      "bytes": 7109,
-      "sourceSha256": "92ad2fbf7792624b8dae99d7239e1e6f0f7d7f6da10be8b1594500700c7c3077",
-      "outputSha256": "92ad2fbf7792624b8dae99d7239e1e6f0f7d7f6da10be8b1594500700c7c3077",
+      "bytes": 7385,
+      "sourceSha256": "68b0c7c764b88391e466f3b9fa172df176bf21529399606bf84475f3b920db8b",
+      "outputSha256": "68b0c7c764b88391e466f3b9fa172df176bf21529399606bf84475f3b920db8b",
       "transform": "verbatim"
     },
     {
@@ -635,97 +651,97 @@
     {
       "source": "package/dist/quota/codec.d.ts",
       "output": "quota/codec.d.ts",
-      "bytes": 451,
-      "sourceSha256": "35ceda009b4be9d0bcb7969d03d42225efb15fcc4e9df1a928a2a9c98aada5f4",
-      "outputSha256": "35ceda009b4be9d0bcb7969d03d42225efb15fcc4e9df1a928a2a9c98aada5f4",
+      "bytes": 585,
+      "sourceSha256": "8289f7c656a2eedd444cddb83c412dd24bf726421e7706bf19df93b55877db06",
+      "outputSha256": "8289f7c656a2eedd444cddb83c412dd24bf726421e7706bf19df93b55877db06",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/codec.js",
       "output": "quota/codec.js",
-      "bytes": 447,
-      "sourceSha256": "71a07337a0403c12541cc5125b4923c03c17a07e9fafe311d52d14ef2a5b2701",
-      "outputSha256": "71a07337a0403c12541cc5125b4923c03c17a07e9fafe311d52d14ef2a5b2701",
+      "bytes": 491,
+      "sourceSha256": "4e496ce03a8a23536b467168f1dc6a7ceffb06d00ae80cb8a8868f311b2f3a8a",
+      "outputSha256": "4e496ce03a8a23536b467168f1dc6a7ceffb06d00ae80cb8a8868f311b2f3a8a",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/format.d.ts",
       "output": "quota/format.d.ts",
-      "bytes": 2345,
-      "sourceSha256": "87ec0c819d5ba567bcd106abe0a224d91daa030fe33942b33f931e6ea833cf5b",
-      "outputSha256": "87ec0c819d5ba567bcd106abe0a224d91daa030fe33942b33f931e6ea833cf5b",
+      "bytes": 4260,
+      "sourceSha256": "f76541a2f0e1e04782ee8b61a3d0f6b3ba3c156bc0e57bfcbd427e00baf279b4",
+      "outputSha256": "f76541a2f0e1e04782ee8b61a3d0f6b3ba3c156bc0e57bfcbd427e00baf279b4",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/format.js",
       "output": "quota/format.js",
-      "bytes": 5819,
-      "sourceSha256": "a6911f852a33e5305d7ea86bd2fe0c62e12207e17e01b11b23db6e1de7b1aea7",
-      "outputSha256": "a6911f852a33e5305d7ea86bd2fe0c62e12207e17e01b11b23db6e1de7b1aea7",
+      "bytes": 12897,
+      "sourceSha256": "69e546dbc935300ff3b01294479844177be3e288626e5edf0341e820a20c5580",
+      "outputSha256": "69e546dbc935300ff3b01294479844177be3e288626e5edf0341e820a20c5580",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/index.d.ts",
       "output": "quota/index.d.ts",
-      "bytes": 955,
-      "sourceSha256": "c51ad163eb1a16d20d88773abdeab90aea1e7c5543d7223acddec31494707056",
-      "outputSha256": "c51ad163eb1a16d20d88773abdeab90aea1e7c5543d7223acddec31494707056",
+      "bytes": 1047,
+      "sourceSha256": "1ed8a3feaf208860182d738c2ba732fbaa61b6613c1e0e14442418a76d743663",
+      "outputSha256": "1ed8a3feaf208860182d738c2ba732fbaa61b6613c1e0e14442418a76d743663",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/index.js",
       "output": "quota/index.js",
-      "bytes": 463,
-      "sourceSha256": "05814a130847a52cbcbc9a1a67cad43c807abe179b1ac0a83b0b3c3f6b2fd4b7",
-      "outputSha256": "05814a130847a52cbcbc9a1a67cad43c807abe179b1ac0a83b0b3c3f6b2fd4b7",
+      "bytes": 511,
+      "sourceSha256": "691e7db4bf6025770991f98adda82ca4cb9be45eeefa3709b114fb2decfdf66e",
+      "outputSha256": "691e7db4bf6025770991f98adda82ca4cb9be45eeefa3709b114fb2decfdf66e",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/map.d.ts",
       "output": "quota/map.d.ts",
-      "bytes": 2270,
-      "sourceSha256": "a2f7370148018247eae306b830ca824a2941aa53ece71cf301063a67ba9eb4a1",
-      "outputSha256": "a2f7370148018247eae306b830ca824a2941aa53ece71cf301063a67ba9eb4a1",
+      "bytes": 2901,
+      "sourceSha256": "28ba151926d76d45051065b243032ae4f698a3c4f94b44f32341c97467c7faf6",
+      "outputSha256": "28ba151926d76d45051065b243032ae4f698a3c4f94b44f32341c97467c7faf6",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/map.js",
       "output": "quota/map.js",
-      "bytes": 4271,
-      "sourceSha256": "61fb25c789389e57ff8cceb450f6872c2b6e4961cec3c4650f6af699ab5a27f2",
-      "outputSha256": "61fb25c789389e57ff8cceb450f6872c2b6e4961cec3c4650f6af699ab5a27f2",
+      "bytes": 5669,
+      "sourceSha256": "95339af4c80684b4e462f5ba32affeaa5f8b5885db599dc5e8ac1ffd1890d729",
+      "outputSha256": "95339af4c80684b4e462f5ba32affeaa5f8b5885db599dc5e8ac1ffd1890d729",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/merge.d.ts",
       "output": "quota/merge.d.ts",
-      "bytes": 1628,
-      "sourceSha256": "88998476cd9de8037577065098894fd2ab4b5faed3f07edf5ac35b8f5bf6bcc1",
-      "outputSha256": "88998476cd9de8037577065098894fd2ab4b5faed3f07edf5ac35b8f5bf6bcc1",
+      "bytes": 1775,
+      "sourceSha256": "3531d738712f40b79415cd58940c55bf4cce6827c500fc3912368ff012e31f25",
+      "outputSha256": "3531d738712f40b79415cd58940c55bf4cce6827c500fc3912368ff012e31f25",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/merge.js",
       "output": "quota/merge.js",
-      "bytes": 6513,
-      "sourceSha256": "c21d7490b7ced3f646e94069d4de2e15b97231a96b3227b03c3a3197738359ad",
-      "outputSha256": "c21d7490b7ced3f646e94069d4de2e15b97231a96b3227b03c3a3197738359ad",
+      "bytes": 7439,
+      "sourceSha256": "64440806fd70d214eb6a6f4c98f3a6ba442ca48d39762395a202c25fbf08a23e",
+      "outputSha256": "64440806fd70d214eb6a6f4c98f3a6ba442ca48d39762395a202c25fbf08a23e",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/projection.d.ts",
       "output": "quota/projection.d.ts",
-      "bytes": 2911,
-      "sourceSha256": "e410a8db0ff2ae805dbe342088d08ab555a701466159479f2e838f585b820c92",
-      "outputSha256": "e410a8db0ff2ae805dbe342088d08ab555a701466159479f2e838f585b820c92",
+      "bytes": 2975,
+      "sourceSha256": "65a1b13db0a4d21f8b4136af65888494c6d8a7e117e80879c96f75fc0b763ad9",
+      "outputSha256": "65a1b13db0a4d21f8b4136af65888494c6d8a7e117e80879c96f75fc0b763ad9",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/quota/projection.js",
       "output": "quota/projection.js",
-      "bytes": 5509,
-      "sourceSha256": "1fd24078f42e7658c31c31f08116f96bf7b53b91948650deefca9a4add481d76",
-      "outputSha256": "1fd24078f42e7658c31c31f08116f96bf7b53b91948650deefca9a4add481d76",
+      "bytes": 5640,
+      "sourceSha256": "be7012f1df5845a1f3377b148f35ffe029583c1b9b5426f70a7ba96f7b49a150",
+      "outputSha256": "be7012f1df5845a1f3377b148f35ffe029583c1b9b5426f70a7ba96f7b49a150",
       "transform": "verbatim"
     },
     {
@@ -907,17 +923,17 @@
     {
       "source": "package/dist/store/pool.d.ts",
       "output": "store/pool.d.ts",
-      "bytes": 10754,
-      "sourceSha256": "901b2881e94f067c6b454002f1e3922b75f248f2a25ef7548c399cafd9611159",
-      "outputSha256": "901b2881e94f067c6b454002f1e3922b75f248f2a25ef7548c399cafd9611159",
+      "bytes": 10785,
+      "sourceSha256": "192ea359d2ce746b31693cf06795a281f2e06804c567975f127ea05fa6fb4aef",
+      "outputSha256": "192ea359d2ce746b31693cf06795a281f2e06804c567975f127ea05fa6fb4aef",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/store/pool.js",
       "output": "store/pool.js",
-      "bytes": 5713,
-      "sourceSha256": "678cca0578ac32eb1d9e45408614c6a7b56a6dcb94672a961c8c13bca55171fd",
-      "outputSha256": "678cca0578ac32eb1d9e45408614c6a7b56a6dcb94672a961c8c13bca55171fd",
+      "bytes": 5671,
+      "sourceSha256": "8dc0d27b37204c2c3229296e8efbbfac6bcb30538b39d8d95771267487a06292",
+      "outputSha256": "8dc0d27b37204c2c3229296e8efbbfac6bcb30538b39d8d95771267487a06292",
       "transform": "verbatim"
     },
     {
@@ -971,17 +987,17 @@
     {
       "source": "package/dist/store/refresh-lock.d.ts",
       "output": "store/refresh-lock.d.ts",
-      "bytes": 2442,
-      "sourceSha256": "5b4230fad8b94abc23d9b4a9c72cf21d7c961ac6359561a4da28e1e807bcb0ca",
-      "outputSha256": "5b4230fad8b94abc23d9b4a9c72cf21d7c961ac6359561a4da28e1e807bcb0ca",
+      "bytes": 2419,
+      "sourceSha256": "50401b2e9b69b73592e0a4391fc1992a380539360b7cabfe5fce6d35fb29c648",
+      "outputSha256": "50401b2e9b69b73592e0a4391fc1992a380539360b7cabfe5fce6d35fb29c648",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/store/refresh-lock.js",
       "output": "store/refresh-lock.js",
-      "bytes": 4681,
-      "sourceSha256": "035a03e02a0690ec51d92df0b61e2ae6abb7b8d6a141112640f8d649eb583949",
-      "outputSha256": "035a03e02a0690ec51d92df0b61e2ae6abb7b8d6a141112640f8d649eb583949",
+      "bytes": 4655,
+      "sourceSha256": "f2a316af681d1a14254873b9dc2d608a76919b7ba930636ee9f266c99195fb67",
+      "outputSha256": "f2a316af681d1a14254873b9dc2d608a76919b7ba930636ee9f266c99195fb67",
       "transform": "verbatim"
     },
     {
@@ -1043,17 +1059,17 @@
     {
       "source": "package/dist/store/schema.d.ts",
       "output": "store/schema.d.ts",
-      "bytes": 22168,
-      "sourceSha256": "2099f309023c62e6ed8b82906a8b5c7eaa8d42e1a134908dc65bece83711de9f",
-      "outputSha256": "2099f309023c62e6ed8b82906a8b5c7eaa8d42e1a134908dc65bece83711de9f",
+      "bytes": 22290,
+      "sourceSha256": "51a47144ee965680e517e8ec91210742908336f6b781f8be2026124d6d0a6bbf",
+      "outputSha256": "51a47144ee965680e517e8ec91210742908336f6b781f8be2026124d6d0a6bbf",
       "transform": "verbatim"
     },
     {
       "source": "package/dist/store/schema.js",
       "output": "store/schema.js",
-      "bytes": 31460,
-      "sourceSha256": "349c1bac2b8417dd941a16148f49521ea8a9c1fefb5e3a6ee82bb461bd050312",
-      "outputSha256": "349c1bac2b8417dd941a16148f49521ea8a9c1fefb5e3a6ee82bb461bd050312",
+      "bytes": 31533,
+      "sourceSha256": "ae55f6f875ff8a9e9a09795eac1bedfd4bf795bd6802e8de37b52586b61208d0",
+      "outputSha256": "ae55f6f875ff8a9e9a09795eac1bedfd4bf795bd6802e8de37b52586b61208d0",
       "transform": "verbatim"
     },
     {

package/dist/common-auth-embedded/store/pool.d.ts

@@ -42,7 +42,7 @@ export interface OpenPoolStoreOptions {
     requireCredentialStamps?: boolean;
     /** Require an exact secret fingerprint for every roster-publication removal. */
     requireRemovedFingerprint?: boolean;
-    /** Injected clock for leases, refresh stamps and `addedAt`. */
+    /** Logical clock for refresh stamps and `addedAt`; filesystem leases always use wall time. */
     now?: () => number;
     /**
      * Ordered store-lock list held across every read-modify-write. Defaults to

package/dist/common-auth-embedded/store/pool.js

@@ -57,7 +57,6 @@ export function openPoolStore(options) {
         ],
         lockDefaults,
         lockEnv: {
-            now: options.now ?? Date.now,
             ...(options.onLockEvent ? { onLockEvent: options.onLockEvent } : {}),
             ...(options.onLockStep ? { onLockStep: options.onLockStep } : {}),
             ...(options.onRenewalTimer

package/dist/common-auth-embedded/store/refresh-lock.d.ts

@@ -24,7 +24,6 @@ export type LockEvent = {
     path: string;
 };
 export interface LockEnvironment {
-    now: () => number;
     onLockEvent?: (event: LockEvent) => void;
     onLockStep?: (lock: {
         name: string;

package/dist/common-auth-embedded/store/refresh-lock.js

@@ -42,7 +42,6 @@ export async function acquirePoolLock(spec, defaults, env) {
             name: spec.name,
             path: spec.path,
             ttlMs: options.ttlMs,
-            now: env.now,
             renew: options.renew,
             onContended: () => emit('contended'),
             ...(env.onRenewalTimer

package/dist/common-auth-embedded/store/schema.d.ts

@@ -49,6 +49,8 @@ export type StoredCredential = (OAuthCredential & {
 /** Quota codec supplied by `/quota`: the store never interprets the map itself. */
 export interface QuotaCodec {
     validate(value: unknown): boolean;
+    /** Normalize persisted quota before validation, when the codec supports it. */
+    decode?(value: unknown): unknown;
     merge(stored: unknown | undefined, observation: unknown): unknown;
 }
 /**