@indigoai-us/hq-cloud 6.18.44-alpha.48 → 6.18.44-alpha.49

package/dist/lib/ontology-entity-push.test.js

@@ -0,0 +1,156 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { _resetOntologyEntityPushCacheForTests, isOntologyEntityKey, resolveOntologyEntityPush, } from "./ontology-entity-push.js";
+function fakeClient(explained, opts = {}) {
+    const created = [];
+    const close = vi.fn();
+    const createClient = vi.fn((options) => {
+        created.push(options);
+        return {
+            ready: async () => {
+                if (opts.reportError)
+                    options.onError?.(opts.reportError);
+                if (opts.readyError)
+                    throw opts.readyError;
+            },
+            explain: () => explained,
+            close,
+        };
+    });
+    return { createClient, created, close };
+}
+function input(overrides = {}) {
+    return {
+        companyUid: "cmp_01TEST",
+        companySlug: "acme",
+        endpoint: "https://flags.test",
+        getToken: () => "jwt",
+        env: {},
+        onError: () => undefined,
+        ...overrides,
+    };
+}
+afterEach(() => {
+    _resetOntologyEntityPushCacheForTests();
+});
+describe("isOntologyEntityKey", () => {
+    it("matches entity markdown files, vault- or hqRoot-relative", () => {
+        const companyPrefix = ["companies", "acme"].join("/");
+        expect(isOntologyEntityKey("ontology/entities/person/jane-doe.md")).toBe(true);
+        expect(isOntologyEntityKey(`${companyPrefix}/ontology/entities/project/hq.md`)).toBe(true);
+    });
+    it("rejects the rest of ontology/ and other server-owned paths", () => {
+        for (const key of [
+            "ontology/.last-run",
+            "ontology/merge-proposals.json",
+            "ontology/facts/f1.md",
+            "ontology/entities/person/nested/x.md",
+            "ontology/entities/person/x.json",
+            "ontology/entities/Person/x.md",
+            "signals/s1.md",
+            "company-brief.md",
+        ]) {
+            expect(isOntologyEntityKey(key), key).toBe(false);
+        }
+    });
+});
+describe("resolveOntologyEntityPush", () => {
+    it("is false for a non-company vault without asking the flag service", async () => {
+        const fake = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveOntologyEntityPush(input({ companyUid: "prs_01X", createClient: fake.createClient }))).toBe(false);
+        expect(fake.createClient).not.toHaveBeenCalled();
+    });
+    it("lets the local override win in both directions", async () => {
+        const on = fakeClient({ source: "snapshot", value: false });
+        expect(await resolveOntologyEntityPush(input({ env: { HQ_FLAG_CHECKPOINT_ONTOLOGY: "true" }, createClient: on.createClient }))).toBe(true);
+        const off = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveOntologyEntityPush(input({ env: { HQ_FLAG_CHECKPOINT_ONTOLOGY: "false" }, createClient: off.createClient }))).toBe(false);
+        expect(on.createClient).not.toHaveBeenCalled();
+        expect(off.createClient).not.toHaveBeenCalled();
+    });
+    it("is true only for a snapshot value of true, scoped to the company", async () => {
+        const fake = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveOntologyEntityPush(input({ createClient: fake.createClient }))).toBe(true);
+        expect(fake.created[0]).toMatchObject({
+            endpoint: "https://flags.test",
+            companyUid: "cmp_01TEST",
+            companyIdentifiers: ["acme"],
+            refreshIntervalMs: 0,
+            env: {},
+        });
+        expect(fake.close).toHaveBeenCalledTimes(1);
+    });
+    it("is false for a fallback or non-true value", async () => {
+        const fallback = fakeClient({ source: "fallback", value: true });
+        expect(await resolveOntologyEntityPush(input({ createClient: fallback.createClient }))).toBe(false);
+        _resetOntologyEntityPushCacheForTests();
+        const off = fakeClient({ source: "snapshot", value: "true" });
+        expect(await resolveOntologyEntityPush(input({ createClient: off.createClient }))).toBe(false);
+    });
+    it("is false with no endpoint or no token", async () => {
+        const fake = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveOntologyEntityPush(input({ endpoint: undefined, createClient: fake.createClient }))).toBe(false);
+        expect(await resolveOntologyEntityPush(input({ getToken: undefined, createClient: fake.createClient }))).toBe(false);
+        expect(fake.createClient).not.toHaveBeenCalled();
+    });
+    it("reports a missing endpoint or token to an explicit onError, so that caller can fail closed", async () => {
+        const onError = vi.fn();
+        expect(await resolveOntologyEntityPush(input({ endpoint: undefined, onError }))).toBe(false);
+        expect(await resolveOntologyEntityPush(input({ getToken: undefined, onError }))).toBe(false);
+        expect(onError).toHaveBeenCalledTimes(2);
+        expect(String(onError.mock.calls[0][0])).toContain("no flags endpoint or token to read checkpoint.ontology");
+    });
+    it("prefers HQ_FLAGS_API_URL over the vault endpoint", async () => {
+        const fake = fakeClient({ source: "snapshot", value: true });
+        await resolveOntologyEntityPush(input({ env: { HQ_FLAGS_API_URL: "https://override.test" }, createClient: fake.createClient }));
+        expect(fake.created[0].endpoint).toBe("https://override.test");
+    });
+    it("reports a failed read once, returns false, and does not cache it", async () => {
+        const onError = vi.fn();
+        const failing = fakeClient({ source: "snapshot", value: true }, {
+            reportError: new Error("403"),
+            readyError: new Error("boom"),
+        });
+        expect(await resolveOntologyEntityPush(input({ onError, createClient: failing.createClient }))).toBe(false);
+        expect(onError).toHaveBeenCalledTimes(1);
+        const ok = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveOntologyEntityPush(input({ createClient: ok.createClient }))).toBe(true);
+        expect(ok.createClient).toHaveBeenCalledTimes(1);
+    });
+    it("treats an onError report as a failure even when ready() resolves", async () => {
+        const onError = vi.fn();
+        const fake = fakeClient({ source: "snapshot", value: true }, { reportError: new Error("timeout") });
+        expect(await resolveOntologyEntityPush(input({ onError, createClient: fake.createClient }))).toBe(false);
+        expect(onError).toHaveBeenCalledTimes(1);
+    });
+    it("does not share a cached answer between callers of the same company", async () => {
+        const owner = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveOntologyEntityPush(input({ getToken: () => "owner-jwt", createClient: owner.createClient }))).toBe(true);
+        const member = fakeClient({ source: "snapshot", value: false });
+        expect(await resolveOntologyEntityPush(input({ getToken: () => "member-jwt", createClient: member.createClient }))).toBe(false);
+        expect(member.createClient).toHaveBeenCalledTimes(1);
+    });
+    it("reports a token failure and returns false", async () => {
+        const onError = vi.fn();
+        const fake = fakeClient({ source: "snapshot", value: true });
+        const getToken = () => {
+            throw new Error("signed out");
+        };
+        expect(await resolveOntologyEntityPush(input({ onError, getToken, createClient: fake.createClient }))).toBe(false);
+        expect(onError).toHaveBeenCalledTimes(1);
+        expect(fake.createClient).not.toHaveBeenCalled();
+    });
+    it("caches a successful read per endpoint and company until the TTL", async () => {
+        let t = 1_000;
+        const now = () => t;
+        const fake = fakeClient({ source: "snapshot", value: true });
+        await resolveOntologyEntityPush(input({ now, createClient: fake.createClient }));
+        await resolveOntologyEntityPush(input({ now, createClient: fake.createClient }));
+        expect(fake.createClient).toHaveBeenCalledTimes(1);
+        await resolveOntologyEntityPush(input({ now, companyUid: "cmp_OTHER", createClient: fake.createClient }));
+        expect(fake.createClient).toHaveBeenCalledTimes(2);
+        t += 5 * 60_000 + 1;
+        await resolveOntologyEntityPush(input({ now, createClient: fake.createClient }));
+        expect(fake.createClient).toHaveBeenCalledTimes(3);
+    });
+});
+//# sourceMappingURL=ontology-entity-push.test.js.map

package/dist/lib/ontology-entity-push.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ontology-entity-push.test.js","sourceRoot":"","sources":["../../src/lib/ontology-entity-push.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EACL,qCAAqC,EACrC,mBAAmB,EACnB,yBAAyB,GAE1B,MAAM,2BAA2B,CAAC;AAInC,SAAS,UAAU,CAAC,SAAoB,EAAE,OAAoD,EAAE;IAC9F,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACtB,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,OAA0B,EAAE,EAAE;QACxD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,IAAI,CAAC,WAAW;oBAAE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1D,IAAI,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,CAAC,UAAU,CAAC;YAC7C,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;YACxB,KAAK;SACwD,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,YAA8C,EAAE;IAC7D,OAAO;QACL,UAAU,EAAE,YAAY;QACxB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,GAAG,EAAE,EAAE;QACP,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;QACxB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,qCAAqC,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,mBAAmB,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,CAAC,mBAAmB,CAAC,GAAG,aAAa,kCAAkC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,KAAK,MAAM,GAAG,IAAI;YAChB,oBAAoB;YACpB,+BAA+B;YAC/B,sBAAsB;YACtB,sCAAsC;YACtC,iCAAiC;YACjC,+BAA+B;YAC/B,eAAe;YACf,kBAAkB;SACnB,EAAE,CAAC;YACF,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvH,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,2BAA2B,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3I,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9I,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACpC,QAAQ,EAAE,oBAAoB;YAC9B,UAAU,EAAE,YAAY;YACxB,kBAAkB,EAAE,CAAC,MAAM,CAAC;YAC5B,iBAAiB,EAAE,CAAC;YACpB,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpG,qCAAqC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrH,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrH,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAChI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9D,WAAW,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;YAC7B,UAAU,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5G,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7F,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzG,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC,CAAC;QACF,MAAM,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnH,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,IAAI,CAAC,GAAG,KAAK,CAAC;QACd,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC1G,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;QACpB,MAAM,yBAAyB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/personal-connector-settings-sync.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=personal-connector-settings-sync.test.d.ts.map

package/dist/lib/personal-connector-settings-sync.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-connector-settings-sync.test.d.ts","sourceRoot":"","sources":["../../src/lib/personal-connector-settings-sync.test.ts"],"names":[],"mappings":""}

package/dist/lib/personal-connector-settings-sync.test.js

@@ -0,0 +1,34 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { _resetPersonalConnectorSettingsSyncCacheForTests, PERSONAL_CONNECTOR_SETTINGS_SYNC_FLAG, resolvePersonalConnectorSettingsSync, } from "./personal-connector-settings-sync.js";
+function fakeClient(resolution) {
+    const options = [];
+    const createClient = vi.fn((input) => {
+        options.push(input);
+        return {
+            ready: async () => undefined,
+            explain: vi.fn(() => resolution),
+            close: vi.fn(),
+        };
+    });
+    return { createClient, options };
+}
+afterEach(() => _resetPersonalConnectorSettingsSyncCacheForTests());
+describe("resolvePersonalConnectorSettingsSync", () => {
+    it("fails closed when the person-scoped flag is absent or fallback-only", async () => {
+        const fake = fakeClient({ source: "fallback", value: true });
+        expect(await resolvePersonalConnectorSettingsSync({
+            endpoint: "https://flags.test", getToken: () => "person-jwt", env: {}, createClient: fake.createClient,
+        })).toBe(false);
+        expect(fake.options[0]).not.toHaveProperty("companyUid");
+    });
+    it("accepts only the explicit registered person snapshot value", async () => {
+        const fake = fakeClient({ source: "snapshot", value: true });
+        expect(await resolvePersonalConnectorSettingsSync({
+            endpoint: "https://flags.test", getToken: () => "person-jwt", env: {}, createClient: fake.createClient,
+        })).toBe(true);
+        expect(fake.options[0]).toMatchObject({ requestTimeoutMs: 5_000, refreshIntervalMs: 0, env: {} });
+        const explanation = fake.createClient.mock.results[0].value.explain;
+        expect(explanation).toHaveBeenCalledWith(PERSONAL_CONNECTOR_SETTINGS_SYNC_FLAG, { fallback: false });
+    });
+});
+//# sourceMappingURL=personal-connector-settings-sync.test.js.map

package/dist/lib/personal-connector-settings-sync.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-connector-settings-sync.test.js","sourceRoot":"","sources":["../../src/lib/personal-connector-settings-sync.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EACL,gDAAgD,EAChD,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,uCAAuC,CAAC;AAE/C,SAAS,UAAU,CAAC,UAA8C;IAChE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAwB,EAAE,EAAE;QACtD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC5B,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;YAChC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;SAC+C,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,CAAC,GAAG,EAAE,CAAC,gDAAgD,EAAE,CAAC,CAAC;AAEpE,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,oCAAoC,CAAC;YAChD,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;SACvG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,oCAAoC,CAAC;YAChD,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;SACvG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAClG,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,OAAmC,CAAC;QACjG,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,qCAAqC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/readlink-safe.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=readlink-safe.test.d.ts.map

package/dist/lib/readlink-safe.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readlink-safe.test.d.ts","sourceRoot":"","sources":["../../src/lib/readlink-safe.test.ts"],"names":[],"mappings":""}

package/dist/lib/readlink-safe.test.js

@@ -0,0 +1,34 @@
+import { describe, expect, it } from "vitest";
+import { readlinkOrNull } from "./readlink-safe.js";
+function errnoError(code) {
+    const err = new Error(`${code}: scripted readlink failure`);
+    err.code = code;
+    return err;
+}
+describe("readlinkOrNull", () => {
+    it("uses the filesystem reader by default", () => {
+        expect(readlinkOrNull(`/hq-cloud-missing-link-${process.pid}`)).toBeNull();
+    });
+    it("returns the target string verbatim when readlink succeeds", () => {
+        expect(readlinkOrNull("/test/link", () => "../target with spaces")).toBe("../target with spaces");
+    });
+    it.each(["EINVAL", "ENOENT", "EPERM"])("returns null for %s", (code) => {
+        expect(readlinkOrNull("/test/link", () => {
+            throw errnoError(code);
+        })).toBeNull();
+    });
+    it("rethrows non-filesystem failures", () => {
+        const defect = new Error("unexpected test defect");
+        expect(() => readlinkOrNull("/test/link", () => {
+            throw defect;
+        })).toThrow(defect);
+    });
+    it("rethrows code-bearing programming errors", () => {
+        const defect = new TypeError("path must be a string");
+        defect.code = "ERR_INVALID_ARG_TYPE";
+        expect(() => readlinkOrNull("/test/link", () => {
+            throw defect;
+        })).toThrow(defect);
+    });
+});
+//# sourceMappingURL=readlink-safe.test.js.map

package/dist/lib/readlink-safe.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readlink-safe.test.js","sourceRoot":"","sources":["../../src/lib/readlink-safe.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAA0B,CAAC;IACrF,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAChB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,cAAc,CAAC,0BAA0B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CACtE,uBAAuB,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE;QACrE,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE;YACvC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAEnD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,CAAC;QACf,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,uBAAuB,CAAiC,CAAC;QACtF,MAAM,CAAC,IAAI,GAAG,sBAAsB,CAAC;QAErC,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,CAAC;QACf,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/s3-content-checksum.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=s3-content-checksum.test.d.ts.map

package/dist/lib/s3-content-checksum.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-content-checksum.test.d.ts","sourceRoot":"","sources":["../../src/lib/s3-content-checksum.test.ts"],"names":[],"mappings":""}

package/dist/lib/s3-content-checksum.test.js

@@ -0,0 +1,26 @@
+import { describe, expect, it } from "vitest";
+import { contentMd5Base64, headersForObjectLockPut, isObjectLockChecksumRequiredBody, isObjectLockChecksumRequiredError, ObjectLockChecksumRequiredError, } from "./s3-content-checksum.js";
+describe("s3-content-checksum", () => {
+    it("base64-encodes the raw MD5 of a known body", () => {
+        expect(contentMd5Base64(Buffer.from("hello"))).toBe("XUFAKrxLKna5cZ2REBfFkg==");
+    });
+    it("attaches Content-MD5 when the presign signed no checksum header", () => {
+        const headers = headersForObjectLockPut("https://s3.example/put?X-Amz-SignedHeaders=content-type", { "content-type": "text/plain" }, Buffer.from("hello"));
+        expect(headers["Content-MD5"]).toBe("XUFAKrxLKna5cZ2REBfFkg==");
+    });
+    it("does not attach Content-MD5 when x-amz-checksum-sha256 is already present or signed", () => {
+        const present = headersForObjectLockPut("https://s3.example/put", { "x-amz-checksum-sha256": "abc" }, Buffer.from("hello"));
+        expect(present["Content-MD5"]).toBeUndefined();
+        expect(present["x-amz-checksum-sha256"]).toBe("abc");
+        const signed = headersForObjectLockPut("https://s3.example/put?X-Amz-SignedHeaders=host%3Bx-amz-checksum-sha256", { "x-amz-checksum-sha256": "signed" }, Buffer.from("hello"));
+        expect(signed["Content-MD5"]).toBeUndefined();
+    });
+    it("recognizes the Object Lock InvalidRequest body and named error", () => {
+        const xml = "Content-MD5 OR x-amz-checksum- HTTP header is required for Put Object requests with Object Lock parameters";
+        expect(isObjectLockChecksumRequiredBody(400, `<Error><Code>InvalidRequest</Code><Message>${xml}</Message></Error>`)).toBe(true);
+        expect(isObjectLockChecksumRequiredBody(403, xml)).toBe(false);
+        expect(isObjectLockChecksumRequiredError(new ObjectLockChecksumRequiredError("k", xml))).toBe(true);
+        expect(isObjectLockChecksumRequiredError(new Error("boom"))).toBe(false);
+    });
+});
+//# sourceMappingURL=s3-content-checksum.test.js.map

package/dist/lib/s3-content-checksum.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-content-checksum.test.js","sourceRoot":"","sources":["../../src/lib/s3-content-checksum.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,gCAAgC,EAChC,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAElC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,OAAO,GAAG,uBAAuB,CACrC,yDAAyD,EACzD,EAAE,cAAc,EAAE,YAAY,EAAE,EAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CACrB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,OAAO,GAAG,uBAAuB,CACrC,wBAAwB,EACxB,EAAE,uBAAuB,EAAE,KAAK,EAAE,EAClC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CACrB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,uBAAuB,CACpC,yEAAyE,EACzE,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CACrB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,GAAG,GACP,4GAA4G,CAAC;QAC/G,MAAM,CAAC,gCAAgC,CAAC,GAAG,EAAE,8CAA8C,GAAG,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChI,MAAM,CAAC,gCAAgC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,CAAC,iCAAiC,CAAC,IAAI,+BAA+B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpG,MAAM,CAAC,iCAAiC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/skill-register-landed-bytes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=skill-register-landed-bytes.test.d.ts.map

package/dist/lib/skill-register-landed-bytes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-register-landed-bytes.test.d.ts","sourceRoot":"","sources":["../../src/lib/skill-register-landed-bytes.test.ts"],"names":[],"mappings":""}

package/dist/lib/skill-register-landed-bytes.test.js

@@ -0,0 +1,83 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { _resetSkillRegisterLandedBytesCacheForTests, resolveSkillRegisterLandedBytes, SKILL_REGISTER_LANDED_BYTES_FLAG, } from "./skill-register-landed-bytes.js";
+function fakeClient(explained, opts = {}) {
+    const created = [];
+    const close = vi.fn();
+    const createClient = vi.fn((options) => {
+        created.push(options);
+        return {
+            ready: async () => {
+                if (opts.reportError)
+                    options.onError?.(opts.reportError);
+                if (opts.readyError)
+                    throw opts.readyError;
+            },
+            explain: vi.fn(() => explained),
+            close,
+        };
+    });
+    return { createClient, created, close };
+}
+function input(overrides = {}) {
+    return {
+        companyUid: "cmp_01TEST",
+        companySlug: "acme",
+        endpoint: "https://flags.test",
+        getToken: () => "jwt",
+        env: {},
+        onError: () => undefined,
+        ...overrides,
+    };
+}
+afterEach(() => {
+    _resetSkillRegisterLandedBytesCacheForTests();
+});
+describe("resolveSkillRegisterLandedBytes", () => {
+    it("enables only an explicit company snapshot value", async () => {
+        const fake = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveSkillRegisterLandedBytes(input({ createClient: fake.createClient }))).toBe(true);
+        expect(fake.created[0]).toMatchObject({
+            endpoint: "https://flags.test",
+            companyUid: "cmp_01TEST",
+            companyIdentifiers: ["acme"],
+            refreshIntervalMs: 0,
+            requestTimeoutMs: 5_000,
+            env: {},
+        });
+        expect(fake.close).toHaveBeenCalledOnce();
+    });
+    it("stays off for absent companies, endpoints, tokens, and fallback resolutions", async () => {
+        const fake = fakeClient({ source: "fallback", value: true });
+        expect(await resolveSkillRegisterLandedBytes(input({ companyUid: "prs_01", createClient: fake.createClient }))).toBe(false);
+        expect(await resolveSkillRegisterLandedBytes(input({ endpoint: undefined, createClient: fake.createClient }))).toBe(false);
+        expect(await resolveSkillRegisterLandedBytes(input({ getToken: undefined, createClient: fake.createClient }))).toBe(false);
+        expect(await resolveSkillRegisterLandedBytes(input({ createClient: fake.createClient }))).toBe(false);
+        expect(fake.createClient).toHaveBeenCalledOnce();
+        expect(fake.created[0].getToken()).toBe("jwt");
+    });
+    it("treats flag-read errors as off and retries the next pass", async () => {
+        const onError = vi.fn();
+        const failing = fakeClient({ source: "snapshot", value: true }, { reportError: new Error("timeout") });
+        expect(await resolveSkillRegisterLandedBytes(input({ onError, createClient: failing.createClient }))).toBe(false);
+        expect(onError).toHaveBeenCalledOnce();
+        const passing = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveSkillRegisterLandedBytes(input({ createClient: passing.createClient }))).toBe(true);
+        expect(passing.createClient).toHaveBeenCalledOnce();
+    });
+    it("keeps slug-scoped company overrides separate in the cache", async () => {
+        const first = fakeClient({ source: "snapshot", value: false });
+        const second = fakeClient({ source: "snapshot", value: true });
+        expect(await resolveSkillRegisterLandedBytes(input({ companySlug: "old-name", createClient: first.createClient }))).toBe(false);
+        expect(await resolveSkillRegisterLandedBytes(input({ companySlug: "new-name", createClient: second.createClient }))).toBe(true);
+        expect(first.createClient).toHaveBeenCalledOnce();
+        expect(second.createClient).toHaveBeenCalledOnce();
+    });
+    it("uses the registered key", async () => {
+        const fake = fakeClient({ source: "snapshot", value: false });
+        await resolveSkillRegisterLandedBytes(input({ createClient: fake.createClient }));
+        expect(fake.created[0].env).toEqual({});
+        const explanation = fake.createClient.mock.results[0].value.explain;
+        expect(explanation).toHaveBeenCalledWith(SKILL_REGISTER_LANDED_BYTES_FLAG, { fallback: false });
+    });
+});
+//# sourceMappingURL=skill-register-landed-bytes.test.js.map

package/dist/lib/skill-register-landed-bytes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-register-landed-bytes.test.js","sourceRoot":"","sources":["../../src/lib/skill-register-landed-bytes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EACL,2CAA2C,EAC3C,+BAA+B,EAC/B,gCAAgC,GAEjC,MAAM,kCAAkC,CAAC;AAI1C,SAAS,UAAU,CAAC,SAAoB,EAAE,OAAoD,EAAE;IAC9F,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACtB,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,OAA0B,EAAE,EAAE;QACxD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,KAAK,IAAI,EAAE;gBAChB,IAAI,IAAI,CAAC,WAAW;oBAAE,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1D,IAAI,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,CAAC,UAAU,CAAC;YAC7C,CAAC;YACD,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;YAC/B,KAAK;SACwD,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,KAAK,CAAC,YAAoD,EAAE;IACnE,OAAO;QACL,UAAU,EAAE,YAAY;QACxB,WAAW,EAAE,MAAM;QACnB,QAAQ,EAAE,oBAAoB;QAC9B,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,GAAG,EAAE,EAAE;QACP,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;QACxB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,2CAA2C,EAAE,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACpC,QAAQ,EAAE,oBAAoB;YAC9B,UAAU,EAAE,YAAY;YACxB,kBAAkB,EAAE,CAAC,MAAM,CAAC;YAC5B,iBAAiB,EAAE,CAAC;YACpB,gBAAgB,EAAE,KAAK;YACvB,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5H,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3H,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3H,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvG,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClH,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChI,MAAM,CAAC,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,OAAmC,CAAC;QACjG,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,gCAAgC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/local-path-codec.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Regression tests for US-002 (hq-sync-windows-skill-symlink-collision):
+ * the canonical-spelling fixpoint and the mixed-version amplifier round trip.
+ *
+ * Amplifier background: pre-codec engines mint vault keys verbatim from
+ * Windows local names (`core%3Askill`), and post-codec engines escape `%`
+ * before every other character locally — so each pull+re-walk hop across a
+ * mixed-version fleet minted one more percent generation (`%253A`,
+ * `%25253A`, …). These tests pin the two properties that kill the loop:
+ * the walk-back maps a materialized junk key to its EXACT original spelling,
+ * and every generation collapses to one canonical fixpoint for guard lookups.
+ */
+export {};
+//# sourceMappingURL=local-path-codec.test.d.ts.map

package/dist/local-path-codec.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-path-codec.test.d.ts","sourceRoot":"","sources":["../src/local-path-codec.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/local-path-codec.test.js

@@ -0,0 +1,122 @@
+/**
+ * Regression tests for US-002 (hq-sync-windows-skill-symlink-collision):
+ * the canonical-spelling fixpoint and the mixed-version amplifier round trip.
+ *
+ * Amplifier background: pre-codec engines mint vault keys verbatim from
+ * Windows local names (`core%3Askill`), and post-codec engines escape `%`
+ * before every other character locally — so each pull+re-walk hop across a
+ * mixed-version fleet minted one more percent generation (`%253A`,
+ * `%25253A`, …). These tests pin the two properties that kill the loop:
+ * the walk-back maps a materialized junk key to its EXACT original spelling,
+ * and every generation collapses to one canonical fixpoint for guard lookups.
+ */
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { canonicalVaultKeySpelling, canonicalVaultSegmentSpelling, localPathForVaultKey, vaultKeyForLocalPath, } from "./local-path-codec.js";
+describe("canonicalVaultKeySpelling (US-002)", () => {
+    it("collapses every junk percent generation to the same fixpoint", () => {
+        const canonical = ".claude/skills/core:skill/scripts";
+        expect(canonicalVaultKeySpelling(canonical)).toBe(canonical);
+        expect(canonicalVaultKeySpelling(".claude/skills/core%3Askill/scripts")).toBe(canonical);
+        expect(canonicalVaultKeySpelling(".claude/skills/core%253Askill/scripts")).toBe(canonical);
+        expect(canonicalVaultKeySpelling(".claude/skills/core%25253Askill/scripts")).toBe(canonical);
+    });
+    it("distinct logical paths keep distinct fixpoints", () => {
+        expect(canonicalVaultKeySpelling("a%3Ab/x")).not.toBe(canonicalVaultKeySpelling("a%3Ac/x"));
+    });
+    it("colon-free percent names are their OWN canonical form — never collapsed (round-9)", () => {
+        // `.claude/skills/foo bar` and `.claude/skills/foo%20bar` are two
+        // distinct legitimate skills; only namespaced (<ns>:<skill>) wrapper
+        // generations participate in the amplifier.
+        expect(canonicalVaultKeySpelling(".claude/skills/foo%20bar/SKILL.md")).toBe(".claude/skills/foo%20bar/SKILL.md");
+        expect(canonicalVaultKeySpelling(".claude/skills/foo bar/SKILL.md")).toBe(".claude/skills/foo bar/SKILL.md");
+        expect(canonicalVaultSegmentSpelling("foo%20bar")).toBe("foo%20bar");
+        // Namespaced generations still collapse.
+        expect(canonicalVaultSegmentSpelling("ns%3Askill")).toBe("ns:skill");
+    });
+    it("stops decoding at the first literal colon — a legitimately percent-named skill stays distinct", () => {
+        // reindex forms `core:foo%3Abar` verbatim from a source dir named
+        // `foo%3Abar`; decoding past the colon would collapse it into the
+        // unrelated `core:foo:bar` family.
+        expect(canonicalVaultKeySpelling(".claude/skills/core:foo%3Abar/SKILL.md")).toBe(".claude/skills/core:foo%3Abar/SKILL.md");
+        // The win32-encoded generation of that same weird-but-legit wrapper
+        // decodes exactly one step — back to the colon form, not beyond.
+        expect(canonicalVaultKeySpelling(".claude/skills/core%3Afoo%253Abar/SKILL.md")).toBe(".claude/skills/core:foo%3Abar/SKILL.md");
+    });
+    it("decodes ONLY the wrapper segment — child-file percent escapes stay verbatim", () => {
+        // `scripts/foo%20bar.sh` and `scripts/foo bar.sh` are distinct objects;
+        // collapsing them would let the doctor/pull guard drop the wrong one.
+        expect(canonicalVaultKeySpelling(".claude/skills/core%3Askill/scripts/foo%20bar.sh")).toBe(".claude/skills/core:skill/scripts/foo%20bar.sh");
+        expect(canonicalVaultKeySpelling(".claude/skills/core:skill/scripts/foo%20bar.sh")).toBe(".claude/skills/core:skill/scripts/foo%20bar.sh");
+    });
+    it("returns non-skills keys verbatim — the amplifier only exists in the wrapper namespace", () => {
+        expect(canonicalVaultKeySpelling("notes/a%3Ab.md")).toBe("notes/a%3Ab.md");
+        expect(canonicalVaultKeySpelling("notes/a%20b.md")).toBe("notes/a%20b.md");
+    });
+    it("leaves a % that is not a two-hex-digit escape alone", () => {
+        // Matches decodeLocalVaultSegment: only `%XX` (hex) is an escape.
+        expect(canonicalVaultKeySpelling("notes/50%-done.md")).toBe("notes/50%-done.md");
+    });
+});
+describe("mixed-version amplifier round trip (US-002)", () => {
+    let tmpRoot;
+    beforeEach(() => {
+        tmpRoot = fs.mkdtempSync(path.join(os.tmpdir(), "codec-amp-test-"));
+    });
+    afterEach(() => {
+        fs.rmSync(tmpRoot, { recursive: true, force: true });
+    });
+    it("a literal %3A key pulled + re-walked with win32=true maps back to the EXACT original key — no %253A generation", () => {
+        // Key minted by a pre-codec engine from a Windows local farm name.
+        const win32 = true;
+        const junkKey = ".claude/skills/core%3Askill/scripts";
+        // Pull leg: materialize at the codec-derived local path. `%` is escaped
+        // before every other character, so the on-disk dir name is
+        // `core%253Askill` — that escape is exactly what makes the walk-back
+        // unambiguous instead of colliding with the canonical `core:skill` key.
+        const localPath = localPathForVaultKey(tmpRoot, junkKey, win32);
+        fs.mkdirSync(localPath, { recursive: true });
+        const farmEntries = fs.readdirSync(path.join(tmpRoot, ".claude", "skills"));
+        expect(farmEntries).toEqual(["core%253Askill"]);
+        // Re-walk leg: the push walker maps the materialized name back to a key
+        // (share.ts walkDir convention: vaultKeyForLocalPath on the abs path).
+        const rewalkedKey = vaultKeyForLocalPath(tmpRoot, localPath, win32);
+        // The amplifier is dead only if this is the EXACT original spelling —
+        // any NEW spelling would upload as a fresh junk key generation.
+        expect(rewalkedKey).toBe(junkKey);
+        expect(rewalkedKey).not.toContain("%253A");
+    });
+    it("the canonical ':' key and its '%3A' twin materialize at DISTINCT local paths and round-trip independently", () => {
+        const win32 = true;
+        const canonicalLocal = localPathForVaultKey(tmpRoot, "farm/a:b", win32);
+        const junkLocal = localPathForVaultKey(tmpRoot, "farm/a%3Ab", win32);
+        // No on-disk collision between the two key families …
+        expect(canonicalLocal).not.toBe(junkLocal);
+        // … and each walks back to its own exact spelling.
+        expect(vaultKeyForLocalPath(tmpRoot, canonicalLocal, win32)).toBe("farm/a:b");
+        expect(vaultKeyForLocalPath(tmpRoot, junkLocal, win32)).toBe("farm/a%3Ab");
+    });
+});
+describe("company-vault nested directory round trips", () => {
+    let tmpRoot;
+    beforeEach(() => {
+        tmpRoot = fs.mkdtempSync(path.join(os.tmpdir(), "codec-company-nested-test-"));
+    });
+    afterEach(() => {
+        fs.rmSync(tmpRoot, { recursive: true, force: true });
+    });
+    it.each([
+        "companies/indigo/audit/chat-skills/x.json",
+        "companies/a/companies/b/companies/c/f.md",
+        "audit/companies/notes.md",
+    ])("round-trips %s as an ordinary vault-relative path", (key) => {
+        const localPath = localPathForVaultKey(tmpRoot, key);
+        fs.mkdirSync(path.dirname(localPath), { recursive: true });
+        fs.writeFileSync(localPath, "content");
+        expect(vaultKeyForLocalPath(tmpRoot, localPath)).toBe(key);
+        expect(localPathForVaultKey(tmpRoot, key)).toBe(localPath);
+    });
+});
+//# sourceMappingURL=local-path-codec.test.js.map

package/dist/local-path-codec.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-path-codec.test.js","sourceRoot":"","sources":["../src/local-path-codec.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,SAAS,GAAG,mCAAmC,CAAC;QACtD,MAAM,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,yBAAyB,CAAC,qCAAqC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzF,MAAM,CAAC,yBAAyB,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3F,MAAM,CAAC,yBAAyB,CAAC,yCAAyC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACnD,yBAAyB,CAAC,SAAS,CAAC,CACrC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,kEAAkE;QAClE,qEAAqE;QACrE,4CAA4C;QAC5C,MAAM,CAAC,yBAAyB,CAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI,CACzE,mCAAmC,CACpC,CAAC;QACF,MAAM,CAAC,yBAAyB,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,CACvE,iCAAiC,CAClC,CAAC;QACF,MAAM,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrE,yCAAyC;QACzC,MAAM,CAAC,6BAA6B,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,kEAAkE;QAClE,kEAAkE;QAClE,mCAAmC;QACnC,MAAM,CAAC,yBAAyB,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAC9E,wCAAwC,CACzC,CAAC;QACF,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,CACJ,yBAAyB,CAAC,4CAA4C,CAAC,CACxE,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,CACJ,yBAAyB,CAAC,kDAAkD,CAAC,CAC9E,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACzD,MAAM,CACJ,yBAAyB,CAAC,gDAAgD,CAAC,CAC5E,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3E,MAAM,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,kEAAkE;QAClE,MAAM,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gHAAgH,EAAE,GAAG,EAAE;QACxH,mEAAmE;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC;QACnB,MAAM,OAAO,GAAG,qCAAqC,CAAC;QAEtD,wEAAwE;QACxE,2DAA2D;QAC3D,qEAAqE;QACrE,wEAAwE;QACxE,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAChE,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CACxC,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAEhD,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAEpE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2GAA2G,EAAE,GAAG,EAAE;QACnH,MAAM,KAAK,GAAG,IAAI,CAAC;QACnB,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QACrE,sDAAsD;QACtD,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,mDAAmD;QACnD,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9E,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,IAAI,OAAe,CAAC;IAEpB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,2CAA2C;QAC3C,0CAA0C;QAC1C,0BAA0B;KAC3B,CAAC,CAAC,mDAAmD,EAAE,CAAC,GAAG,EAAE,EAAE;QAC9D,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAEvC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/machine-auth.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Unit tests for the machine-identity auth mode in cognito-auth.ts.
+ *
+ * Machine identities (company agents) carry long-lived Cognito creds at
+ * ~/.hq-agent/machine-creds.json (HQ_MACHINE_CREDS_FILE override) and mint
+ * sessions via USER_PASSWORD_AUTH on demand — no browser, no refresh token.
+ * The contract under test:
+ *   - detection: creds file present + well-formed → machine mode
+ *   - minting: BOTH tokens cached with correct field semantics
+ *   - re-mint on expiry; cache hit when valid
+ *   - getValidAccessToken short-circuits into machine mode (never browser)
+ */
+export {};
+//# sourceMappingURL=machine-auth.test.d.ts.map

package/dist/machine-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-auth.test.d.ts","sourceRoot":"","sources":["../src/machine-auth.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}