@cortexkit/pi-anthropic-auth 2.3.0 → 2.4.0

package/dist/native.d.ts

@@ -28,6 +28,7 @@ export interface PiVaultPollOptions {
 }
 export declare class PiNativeRuntime {
     private readonly paths;
+    private readonly holderRegistration;
     private readonly initialization;
     private readonly env;
     private vaultWatch;

package/dist/native.js

@@ -1,5 +1,5 @@
 import { resolve } from 'node:path';
-import { acquireNativeAccountRuntime, createNativeUsagePublisher, getAccountStatePath, getHostClaustrumEnrollmentPaths, isKillswitchEnabled, killswitchPassesPolicy, logger, nativeAccountCanServe, nativeMigrationAuthorityPhase, nativeRuntimeOptionIdentity, quotaSnapshotHasStandardWindows, quotaSnapshotPassesModelScope, quotaSnapshotPassesPolicy, readNativeAccountsForRequest, readNativeMigrationJournal, resolveClaustrumConnectionPath, resolveLocalRoutingDestination, resolveNativePoolPaths, } from '@cortexkit/anthropic-auth-core';
+import { acquireNativeAccountRuntime, createNativeUsagePublisher, getAccountStatePath, getHostClaustrumEnrollmentPaths, isKillswitchEnabled, killswitchPassesPolicy, logger, nativeAccountCanServe, nativeMigrationAuthorityPhase, nativeRuntimeOptionIdentity, quotaSnapshotHasStandardWindows, quotaSnapshotPassesModelScope, quotaSnapshotPassesPolicy, readNativeAccountsForRequest, readNativeMigrationJournal, registerNativePoolHolder, resolveClaustrumConnectionPath, resolveLocalRoutingDestination, resolveNativePoolPaths, } from '@cortexkit/anthropic-auth-core';
 import { getPiAccountStoragePath, getPiClaustrumConnectionOptions, getPiConfigDir, requirePiNativeHostAuth, } from './paths.js';
 export function piAttemptAccessToken(attempt) {
     return attempt.source === 'vault'
@@ -72,6 +72,7 @@ export function isNativeMigrationRequired(error) {
 export const PI_VAULT_POLL_INTERVAL_MS = 2000;
 export class PiNativeRuntime {
     paths;
+    holderRegistration;
     initialization;
     env;
     vaultWatch;
@@ -94,7 +95,19 @@ export class PiNativeRuntime {
         const poll = options.vaultPoll ?? { intervalMs: PI_VAULT_POLL_INTERVAL_MS };
         const identity = getPiClaustrumConnectionOptions(storagePath).identity;
         this.paths = resolveNativePoolPaths(storagePath);
-        this.initialization = this.paths.then((paths) => {
+        // Record that this process uses these files before any pool I/O, so a
+        // later version never moves them while it runs. A refusal (the files
+        // were moved, or an override points into a managed folder) fails
+        // initialization, which every request then reports.
+        this.holderRegistration = this.paths.then((paths) => registerNativePoolHolder({
+            paths,
+            role: 'pi',
+            kind: 'pi',
+            onLockEvent: options.local?.onLockEvent,
+        }));
+        void this.holderRegistration.catch(() => { });
+        this.initialization = this.holderRegistration.then(async () => {
+            const paths = await this.paths;
             const runtime = acquireNativeAccountRuntime({
                 paths,
                 host: 'pi',
@@ -290,6 +303,7 @@ export class PiNativeRuntime {
     close() {
         this.closed = true;
         this.vaultWatch?.close();
+        void this.holderRegistration.then((registration) => registration.close(), () => { });
         this.closing ??= (async () => {
             await this.usagePublications.drain();
             await this.drainRoutingPublications();

package/dist/stream.js

@@ -114,6 +114,7 @@ async function getPiStickyRouter(storagePath) {
             path,
             vaultSeed,
             onLockEvent: runtime.onLockEvent,
+            relocationGuard: runtime.relocationGuard,
         });
         setBoundedService(stickyRouters, path, router);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/pi-anthropic-auth",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "type": "module",
   "repository": {
     "type": "git",
@@ -36,7 +36,7 @@
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@cortexkit/anthropic-auth-core": "2.3.0"
+    "@cortexkit/anthropic-auth-core": "2.4.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": ">=0.86.1 <2",