@indigoai-us/hq-cloud 6.15.4 → 6.15.6

package/dist/outposts/client.js

@@ -0,0 +1,271 @@
+/**
+ * `OutpostsClient` — typed client for the hq-pro `/outpost/*` control plane.
+ *
+ * These are the same routes hq-console's outpost panel calls and the same ones
+ * `hq outposts` drives, so this class is the single implementation of the wire
+ * contract for every first-party surface.
+ *
+ * Portable: the only things it touches are its injected transport, its injected
+ * token source, and `setTimeout`. No Node built-ins, no filesystem, no
+ * `process.exit`, no module-level side effects — safe to import from a Next.js
+ * server action, a route handler, or an edge function.
+ *
+ * Outposts are PERSONAL / caller-scoped: hq-pro keys every route on the caller's
+ * Cognito sub, so no method takes a company. `outpostId` selects a specific box;
+ * omitting it targets the caller's primary slot.
+ *
+ * Every non-2xx throws {@link OutpostHttpError} — nothing is swallowed, and the
+ * server's `step` is preserved so callers can distinguish a retryable
+ * `teardown-incomplete` from a real failure.
+ */
+import { OutpostHttpError, parseBillingPayload, parseCappedPayload } from "./errors.js";
+const EXEC_RESULT_INITIAL_POLL_MS = 500;
+const EXEC_RESULT_MAX_POLL_MS = 5_000;
+/** The widest AWS-RunShellScript `executionTimeout`, in seconds (48h). */
+export const EXEC_MAX_TIMEOUT_SECONDS = 172_800;
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(signal.reason ?? new Error("Aborted"));
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal?.removeEventListener("abort", onAbort);
+            resolve();
+        }, ms);
+        // Do NOT unref this timer. The backoff IS the work while `waitForExecResult`
+        // polls: an unresolved promise alone does not keep Node's event loop alive,
+        // so unref-ing here lets `hq outposts exec --async` / `exec-result --wait`
+        // exit before the next poll ever fires — printing nothing for a command that
+        // is still running.
+        function onAbort() {
+            clearTimeout(timer);
+            reject(signal?.reason ?? new Error("Aborted"));
+        }
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+export class OutpostsClient {
+    transport;
+    tokenSource;
+    baseUrl;
+    constructor(options) {
+        this.transport = options.transport;
+        this.tokenSource = options.token;
+        this.baseUrl = options.baseUrl;
+    }
+    /** Resolve the bearer token for one request. */
+    async token() {
+        return typeof this.tokenSource === "function"
+            ? this.tokenSource()
+            : this.tokenSource;
+    }
+    /**
+     * Authenticated JSON round-trip. Throws {@link OutpostHttpError} on any
+     * non-2xx, decoding hq-pro's `{ error | message, step }` envelope for the
+     * reason plus the two structural envelopes (`billing`, `capped`) that carry no
+     * message at all.
+     */
+    async request(options) {
+        const res = await this.transport({
+            ...options,
+            token: await this.token(),
+            ...(this.baseUrl ? { baseUrl: this.baseUrl } : {}),
+        });
+        if (!res.ok) {
+            const body = (await res.json().catch(() => ({})));
+            const message = typeof body.message === "string"
+                ? body.message
+                : typeof body.error === "string"
+                    ? body.error
+                    : res.statusText;
+            throw new OutpostHttpError(res.status, message, body.step, parseBillingPayload(body), parseCappedPayload(body));
+        }
+        return (await res.json());
+    }
+    // -- Lifecycle ------------------------------------------------------------
+    /**
+     * Provision the caller's Outpost.
+     *
+     * `refreshToken` lets the box authenticate AS the caller — the same body
+     * hq-console's `provisionMyOutpost` sends. It travels over HTTPS and is never
+     * logged.
+     *
+     * No duplicate is ever created: a caller already at their per-person cap gets a
+     * `409` whose body lists their existing boxes, surfaced here as an
+     * `OutpostHttpError` carrying `capped`. hq-pro checks the cap BEFORE activation
+     * billing, so a capped call is never charged.
+     *
+     * A payer with no usable card gets a `402` carrying `billing`.
+     */
+    async provision(input) {
+        return this.request({
+            path: "/outpost/provision",
+            method: "POST",
+            body: {
+                refreshToken: input.refreshToken,
+                ...(input.clientIp ? { clientIp: input.clientIp } : {}),
+                ...(input.diskSizeGb ? { diskSizeGb: input.diskSizeGb } : {}),
+                ...(input.agentRuntime ? { agentRuntime: input.agentRuntime } : {}),
+            },
+        });
+    }
+    /** Every Outpost the caller owns. */
+    async list() {
+        const data = await this.request({
+            path: "/outpost/list",
+        });
+        return data.outposts ?? [];
+    }
+    /** Live detail for one box. */
+    async status(outpostId) {
+        return this.request({
+            path: "/outpost/status",
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    /** Enable (or retry) Codex on a box. */
+    async enableCodex(outpostId) {
+        return this.request({
+            path: "/outpost/codex/enable",
+            method: "POST",
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    /** Ask the box to mint a fresh Claude login URL. */
+    async regenerateLoginUrl(outpostId) {
+        return this.request({
+            path: "/outpost/regenerate-login-url",
+            method: "POST",
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    /**
+     * Hand the box the one-time Claude sign-in code from the login URL. hq-pro
+     * stores it as the row's pending code; the box polls for it, feeds it to
+     * `claude`, and flips itself `awaiting-claude-login → ready`.
+     */
+    async submitLoginCode(code, outpostId) {
+        return this.request({
+            path: "/outpost/login-code",
+            method: "POST",
+            body: { code },
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    /**
+     * Permanently destroy a box and its cloud resources.
+     *
+     * Idempotent: a `409` / `step: "teardown-incomplete"` means the gateway's
+     * timeout fired while the Lambda kept working. The row is preserved — re-issue
+     * the same call to finish.
+     */
+    async destroy(outpostId) {
+        return this.request({
+            path: "/outpost/destroy",
+            method: "POST",
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    // -- Exec -----------------------------------------------------------------
+    /**
+     * Run a one-shot shell command via server-brokered SSM (no SSH). Synchronous,
+     * so it is bounded by the API gateway's ~20s cap — use the submit/result pair
+     * for anything longer.
+     *
+     * A `step: "platform-unsupported"` error means the box is Lightsail and has no
+     * SSM agent; fall back to SSH via {@link sshAccess}.
+     */
+    async exec(command, outpostId) {
+        return this.request({
+            path: "/outpost/exec",
+            method: "POST",
+            body: { command },
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    /** Presign an input upload for an asynchronous command. */
+    async stageExecInput(outpostId) {
+        return this.request({
+            path: "/outpost/exec",
+            method: "POST",
+            body: { mode: "stage" },
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    /** Submit an asynchronous command; returns as soon as SSM accepts it. */
+    async submitExec(command, outpostId, timeoutSeconds) {
+        return this.request({
+            path: "/outpost/exec",
+            method: "POST",
+            body: {
+                mode: "submit",
+                command,
+                ...(timeoutSeconds !== undefined ? { timeoutSeconds } : {}),
+            },
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+    /**
+     * Poll an asynchronous command once. Streams arrive only once `done`.
+     *
+     * `signal` aborts the in-flight request itself — not just the caller's wait —
+     * so a slow or hung poll is cancelled rather than left pending.
+     */
+    async fetchExecResult(commandId, outpostId, signal) {
+        return this.request({
+            path: "/outpost/exec",
+            method: "POST",
+            body: { mode: "result", commandId },
+            query: outpostId ? { outpostId } : undefined,
+            ...(signal ? { signal } : {}),
+        });
+    }
+    /**
+     * Poll until an asynchronous command reaches a terminal state, backing off
+     * exponentially.
+     *
+     * A `429` is treated as back-pressure and retried — the command is still
+     * running, and giving up on a rate limit would strand a job that is fine. Any
+     * other error propagates.
+     */
+    async waitForExecResult(commandId, outpostId, options = {}) {
+        const maxPollMs = options.maxPollMs ?? EXEC_RESULT_MAX_POLL_MS;
+        let delayMs = options.initialPollMs ?? EXEC_RESULT_INITIAL_POLL_MS;
+        for (;;) {
+            // Abort BEFORE issuing another poll — a signal that fired during the last
+            // backoff must not start a fresh request.
+            if (options.signal?.aborted) {
+                throw options.signal.reason ?? new Error("Aborted");
+            }
+            try {
+                const result = await this.fetchExecResult(commandId, outpostId, options.signal);
+                if (result.done)
+                    return result;
+            }
+            catch (err) {
+                if (!(err instanceof OutpostHttpError) || err.status !== 429)
+                    throw err;
+            }
+            await sleep(delayMs, options.signal);
+            delayMs = Math.min(delayMs * 2, maxPollMs);
+        }
+    }
+    // -- SSH ------------------------------------------------------------------
+    /**
+     * Fetch SSH connection info + key for a box and open the caller's IP on its SSH
+     * port. The route exists to reach a Lightsail box, which has no SSM agent.
+     *
+     * The result carries a PEM private key. Treat it as a credential: never log it,
+     * never return it to a browser, and write it only to a mode-0600 file.
+     */
+    async sshAccess(outpostId) {
+        return this.request({
+            path: "/outpost/ssh-access",
+            method: "POST",
+            body: {},
+            query: outpostId ? { outpostId } : undefined,
+        });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/outposts/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/outposts/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAyCxF,MAAM,2BAA2B,GAAG,GAAG,CAAC;AACxC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,6EAA6E;QAC7E,oBAAoB;QACpB,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,cAAc;IACR,SAAS,CAAmB;IAC5B,WAAW,CAAqB;IAChC,OAAO,CAAU;IAElC,YAAY,OAA8B;QACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAED,gDAAgD;IACxC,KAAK,CAAC,KAAK;QACjB,OAAO,OAAO,IAAI,CAAC,WAAW,KAAK,UAAU;YAC3C,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;YACpB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,OAAkD;QAElD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YAC/B,GAAG,OAAO;YACV,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAI/C,CAAC;YACF,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAC9B,CAAC,CAAC,IAAI,CAAC,KAAK;oBACZ,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;YACvB,MAAM,IAAI,gBAAgB,CACxB,GAAG,CAAC,MAAM,EACV,OAAO,EACP,IAAI,CAAC,IAAI,EACT,mBAAmB,CAAC,IAAI,CAAC,EACzB,kBAAkB,CAAC,IAAI,CAAC,CACzB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,4EAA4E;IAE5E;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,SAAS,CACb,KAA4B;QAE5B,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;SACF,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAkC;YAC/D,IAAI,EAAE,eAAe;SACtB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,MAAM,CAAC,SAAkB;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,WAAW,CAAC,SAAkB;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,kBAAkB,CACtB,SAAkB;QAElB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,+BAA+B;YACrC,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CACnB,IAAY,EACZ,SAAkB;QAElB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,IAAI,EAAE;YACd,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,SAAkB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,SAAkB;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE;YACjB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,cAAc,CAAC,SAAkB;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACvB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,UAAU,CACd,OAAe,EACf,SAAkB,EAClB,cAAuB;QAEvB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,OAAO;gBACP,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D;YACD,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,SAAkB,EAClB,MAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;YACnC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5C,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,SAAkB,EAClB,UAA8B,EAAE;QAEhC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;QAC/D,IAAI,OAAO,GAAG,OAAO,CAAC,aAAa,IAAI,2BAA2B,CAAC;QACnE,SAAS,CAAC;YACR,0EAA0E;YAC1E,0CAA0C;YAC1C,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC5B,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CACvC,SAAS,EACT,SAAS,EACT,OAAO,CAAC,MAAM,CACf,CAAC;gBACF,IAAI,MAAM,CAAC,IAAI;oBAAE,OAAO,MAAM,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,gBAAgB,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,GAAG,CAAC;YAC1E,CAAC;YACD,MAAM,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,SAAkB;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;SAC7C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/outposts/client.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Unit tests for OutpostsClient against a stub transport.
+ *
+ * The command-tree tests cover the wire shapes end-to-end; these focus on the
+ * client's own logic: error decoding for all three envelopes, the token-source
+ * resolution contract, and the exec-result polling/backoff.
+ */
+export {};
+//# sourceMappingURL=client.test.d.ts.map

package/dist/outposts/client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.test.d.ts","sourceRoot":"","sources":["../../src/outposts/client.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/outposts/client.test.js

@@ -0,0 +1,226 @@
+/**
+ * Unit tests for OutpostsClient against a stub transport.
+ *
+ * The command-tree tests cover the wire shapes end-to-end; these focus on the
+ * client's own logic: error decoding for all three envelopes, the token-source
+ * resolution contract, and the exec-result polling/backoff.
+ */
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { OutpostsClient } from "./client.js";
+import { OutpostHttpError } from "./errors.js";
+function jsonResponse(status, body, statusText) {
+    return new Response(JSON.stringify(body), {
+        status,
+        ...(statusText ? { statusText } : {}),
+        headers: { "Content-Type": "application/json" },
+    });
+}
+/** A transport that returns queued responses in order and records requests. */
+function stubTransport(responses) {
+    const requests = [];
+    let i = 0;
+    const transport = async (req) => {
+        requests.push(req);
+        const res = responses[i++];
+        if (!res)
+            throw new Error("stub transport exhausted");
+        return res;
+    };
+    return { transport, requests };
+}
+afterEach(() => {
+    vi.restoreAllMocks();
+});
+describe("token resolution", () => {
+    it("accepts a static string", async () => {
+        const { transport, requests } = stubTransport([
+            jsonResponse(200, { outposts: [] }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "static" });
+        await client.list();
+        expect(requests[0].token).toBe("static");
+    });
+    it("calls a resolver per request", async () => {
+        const { transport, requests } = stubTransport([
+            jsonResponse(200, { outposts: [] }),
+            jsonResponse(200, { outposts: [] }),
+        ]);
+        let n = 0;
+        const client = new OutpostsClient({
+            transport,
+            token: async () => `t-${++n}`,
+        });
+        await client.list();
+        await client.list();
+        expect(requests.map((r) => r.token)).toEqual(["t-1", "t-2"]);
+    });
+});
+describe("error decoding", () => {
+    it("uses message, then error, then statusText", async () => {
+        for (const [body, expected] of [
+            [{ message: "m", error: "e" }, "m"],
+            [{ error: "e" }, "e"],
+            // Neither field present → fall back to the response's statusText.
+            [{}, "Bad Request"],
+        ]) {
+            const { transport } = stubTransport([jsonResponse(400, body, "Bad Request")]);
+            const client = new OutpostsClient({ transport, token: "t" });
+            // `message` is non-enumerable on Error, so toMatchObject can't see it —
+            // assert it explicitly.
+            const err = await client
+                .status()
+                .then(() => undefined)
+                .catch((e) => e);
+            expect(err).toBeInstanceOf(OutpostHttpError);
+            expect(err?.message).toBe(expected);
+            expect(err?.status).toBe(400);
+        }
+    });
+    it("preserves the server step", async () => {
+        const { transport } = stubTransport([
+            jsonResponse(409, { error: true, step: "teardown-incomplete" }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "t" });
+        await expect(client.destroy()).rejects.toMatchObject({
+            step: "teardown-incomplete",
+        });
+    });
+    it("decodes the per-person cap envelope with no message field", async () => {
+        const { transport } = stubTransport([
+            jsonResponse(409, {
+                capped: true,
+                limit: 1,
+                outposts: [{ outpostId: "primary" }],
+            }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "t" });
+        const err = await client
+            .provision({ refreshToken: "rt" })
+            .then(() => undefined)
+            .catch((e) => e);
+        expect(err).toBeInstanceOf(OutpostHttpError);
+        expect(err?.capped?.limit).toBe(1);
+        expect(err?.capped?.outposts[0].outpostId).toBe("primary");
+    });
+    it("decodes the 402 billing envelope", async () => {
+        const { transport } = stubTransport([
+            jsonResponse(402, {
+                error: "payment required",
+                billing: {
+                    status: "payment_failed",
+                    setup: {
+                        payerType: "person",
+                        path: "/v1/billing/checkout/person",
+                        method: "POST",
+                    },
+                },
+            }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "t" });
+        const err = await client
+            .provision({ refreshToken: "rt" })
+            .then(() => undefined)
+            .catch((e) => e);
+        expect(err?.billing?.status).toBe("payment_failed");
+        expect(err?.billing?.setup?.path).toBe("/v1/billing/checkout/person");
+    });
+});
+describe("provision body", () => {
+    it("only includes optional fields when provided", async () => {
+        const { transport, requests } = stubTransport([
+            jsonResponse(200, { ok: true }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "t" });
+        await client.provision({ refreshToken: "rt", agentRuntime: "codex" });
+        expect(requests[0].body).toEqual({
+            refreshToken: "rt",
+            agentRuntime: "codex",
+        });
+    });
+});
+describe("waitForExecResult", () => {
+    it("retries a 429 then returns the terminal result", async () => {
+        vi.useFakeTimers();
+        try {
+            const { transport } = stubTransport([
+                jsonResponse(429, { error: true, message: "slow down" }),
+                jsonResponse(200, { ok: true, status: "InProgress", done: false }),
+                jsonResponse(200, {
+                    ok: true,
+                    status: "Success",
+                    done: true,
+                    exitCode: 0,
+                }),
+            ]);
+            const client = new OutpostsClient({ transport, token: "t" });
+            const pending = client.waitForExecResult("cmd-1");
+            await vi.advanceTimersByTimeAsync(500);
+            await vi.advanceTimersByTimeAsync(1_000);
+            const result = await pending;
+            expect(result.done).toBe(true);
+            expect(result.exitCode).toBe(0);
+        }
+        finally {
+            vi.useRealTimers();
+        }
+    });
+    it("propagates a non-429 error instead of polling forever", async () => {
+        const { transport } = stubTransport([
+            jsonResponse(500, { error: "boom" }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "t" });
+        await expect(client.waitForExecResult("cmd-1")).rejects.toMatchObject({
+            status: 500,
+        });
+    });
+    it("forwards the abort signal to the in-flight poll request", async () => {
+        const { transport, requests } = stubTransport([
+            jsonResponse(200, { ok: true, status: "InProgress", done: false }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "t" });
+        const controller = new AbortController();
+        // Kick off a wait; the first poll must carry the signal so a hung request is
+        // itself cancellable, not just the backoff between polls.
+        const pending = client
+            .waitForExecResult("cmd-1", undefined, { signal: controller.signal })
+            .catch(() => undefined);
+        // Let the first fetchExecResult run.
+        await Promise.resolve();
+        expect(requests[0].signal).toBe(controller.signal);
+        controller.abort();
+        await pending;
+    });
+    it("does not start a new poll once already aborted", async () => {
+        const { transport, requests } = stubTransport([
+            jsonResponse(200, { ok: true, status: "InProgress", done: false }),
+        ]);
+        const client = new OutpostsClient({ transport, token: "t" });
+        const controller = new AbortController();
+        controller.abort();
+        await expect(client.waitForExecResult("cmd-1", undefined, { signal: controller.signal })).rejects.toThrow();
+        // Aborted before entry — no request should have been issued at all.
+        expect(requests).toHaveLength(0);
+    });
+    it("aborts the wait when signalled", async () => {
+        vi.useFakeTimers();
+        try {
+            const { transport } = stubTransport([
+                jsonResponse(200, { ok: true, status: "InProgress", done: false }),
+                jsonResponse(200, { ok: true, status: "InProgress", done: false }),
+            ]);
+            const client = new OutpostsClient({ transport, token: "t" });
+            const controller = new AbortController();
+            const pending = client.waitForExecResult("cmd-1", undefined, {
+                signal: controller.signal,
+            });
+            const assertion = expect(pending).rejects.toThrow();
+            controller.abort();
+            await vi.advanceTimersByTimeAsync(1_000);
+            await assertion;
+        }
+        finally {
+            vi.useRealTimers();
+        }
+    });
+});
+//# sourceMappingURL=client.test.js.map

package/dist/outposts/client.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.test.js","sourceRoot":"","sources":["../../src/outposts/client.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/C,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa,EAAE,UAAmB;IACtE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,SAAqB;IAI1C,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,SAAS,GAAqB,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YAC5C,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YAC5C,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACnC,YAAY,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;YAChC,SAAS;YACT,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI;YAC7B,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC;YACnC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC;YACrB,kEAAkE;YAClE,CAAC,EAAE,EAAE,aAAa,CAAC;SACX,EAAE,CAAC;YACX,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7D,wEAAwE;YACxE,wBAAwB;YACxB,MAAM,GAAG,GAAG,MAAM,MAAM;iBACrB,MAAM,EAAE;iBACR,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACrB,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAqB,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;YAClC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SAChE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACnD,IAAI,EAAE,qBAAqB;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;YAClC,YAAY,CAAC,GAAG,EAAE;gBAChB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,CAAC;gBACR,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;aACrC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,MAAM;aACrB,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;aACjC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACrB,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAqB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;YAClC,YAAY,CAAC,GAAG,EAAE;gBAChB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE;oBACP,MAAM,EAAE,gBAAgB;oBACxB,KAAK,EAAE;wBACL,SAAS,EAAE,QAAQ;wBACnB,IAAI,EAAE,6BAA6B;wBACnC,MAAM,EAAE,MAAM;qBACf;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,MAAM;aACrB,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;aACjC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;aACrB,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAqB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YAC5C,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;YAC/B,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,OAAO;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;gBAClC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBACxD,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBAClE,YAAY,CAAC,GAAG,EAAE;oBAChB,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE,IAAI;oBACV,QAAQ,EAAE,CAAC;iBACZ,CAAC;aACH,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,aAAa,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;YAClC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YACpE,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YAC5C,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,6EAA6E;QAC7E,0DAA0D;QAC1D,MAAM,OAAO,GAAG,MAAM;aACnB,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;aACpE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,qCAAqC;QACrC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YAC5C,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,CACV,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAC5E,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,oEAAoE;QACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC;gBAClC,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBAClE,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE;gBAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACpD,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,SAAS,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,aAAa,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/outposts/command.d.ts

@@ -0,0 +1,74 @@
+/**
+ * `hq outposts` — the full command tree for managing personal HQ Outposts from a
+ * terminal instead of the web console.
+ *
+ * Targets the hq-pro `/outpost/*` control plane — the same routes the console's
+ * outpost panel calls — through an injected transport, so the host CLI keeps
+ * ownership of auth, telemetry, and error decoration while the command surface
+ * itself lives here and is shared by every consumer.
+ *
+ * Outposts are PERSONAL / caller-scoped: hq-pro keys every `/outpost/*` route on
+ * the caller's Cognito sub, so there is no `--company`. `--id <outpostId>` selects
+ * a specific box; when omitted hq-pro targets the caller's primary slot.
+ *
+ * Subcommands:
+ *   outposts provision              — provision a box (paid; requires --yes)
+ *   outposts list                   — every Outpost you own (row summaries)
+ *   outposts status [--id]          — live detail for one box
+ *   outposts exec <command...>      — run a command on the box (sync/async/detach)
+ *   outposts exec-stage             — presign an input upload for an async command
+ *   outposts exec-submit <cmd...>   — fire-and-forget async submit
+ *   outposts exec-result            — poll an async command
+ *   outposts codex-enable [--id]    — enable / retry Codex on the box
+ *   outposts login [--id]           — request a fresh login URL
+ *   outposts login-code <code>      — hand the box its Claude sign-in code
+ *   outposts destroy [--id] --yes   — tear the box down (destructive; flag-guarded)
+ *   outposts heartbeat              — hidden; box-side systemd loop
+ *   outposts self-deploy            — hidden; make THIS host an unmanaged outpost
+ *   outposts replica-sync           — hidden; box-side full-replica timer target
+ *
+ * NOTE: hq-pro exposes no rename or settings-mutation route for Outposts (the web
+ * console can't rename them either), so this wraps only the lifecycle and status
+ * routes that exist. Renaming an Outpost is not a backend capability.
+ */
+import { Command } from "commander";
+import { type OutpostTokenSource } from "./client.js";
+import { type ReplicaSyncDependencies } from "./host-deps.js";
+import type { OutpostTransport } from "./transport.js";
+/**
+ * What the command tree needs from its host CLI.
+ *
+ * The transport is the load-bearing one: hq-cli passes its own `vaultApiFetch`, so
+ * Sentry breadcrumbs, the `hqk_` API-key path-rewrite table, plan-gate decoding,
+ * and plan-limit peeking all keep working exactly as they did when this code lived
+ * in the CLI.
+ */
+export interface OutpostsCommandDeps {
+    /** HTTP seam for every control-plane call. */
+    transport: OutpostTransport;
+    /** Resolve a bearer token for an interactive command. */
+    getToken: OutpostTokenSource;
+    /**
+     * Resolve a bearer token without prompting. Used by the box-side heartbeat,
+     * which runs under systemd where there is nobody to prompt. Falls back to
+     * `getToken`.
+     */
+    getTokenNonInteractive?: () => Promise<string>;
+    /**
+     * Read the cached Cognito session. `provision` sends the refresh token so the
+     * box can authenticate AS the caller.
+     */
+    loadCachedTokens: () => {
+        refreshToken?: string;
+    } | undefined;
+    /** Resolve the caller's canonical `prs_*` uid (heartbeat identity). */
+    resolveCallerPersonUid: (token: string, apiBaseUrl?: string) => Promise<string>;
+    /** Control-plane origin for the heartbeat's realtime credential fetch. */
+    defaultApiBaseUrl: string;
+    /** Origin override applied to every control-plane call. */
+    baseUrl?: string;
+    /** Override host-environment probes — used by `self-deploy`/`replica-sync` tests. */
+    host?: Partial<ReplicaSyncDependencies>;
+}
+export declare function registerOutpostsCommand(program: Command, deps: OutpostsCommandDeps): void;
+//# sourceMappingURL=command.d.ts.map

package/dist/outposts/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/outposts/command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,SAAS,EAAE,gBAAgB,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C;;;OAGG;IACH,gBAAgB,EAAE,MAAM;QAAE,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC9D,uEAAuE;IACvE,sBAAsB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,0EAA0E;IAC1E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qFAAqF;IACrF,IAAI,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACzC;AAqFD,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,mBAAmB,GACxB,IAAI,CAgvBN"}