@indigoai-us/hq-cloud 6.18.44-alpha.48 → 6.18.44-alpha.49

package/dist/outposts/session-heartbeat-bounds.test.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Payload bounding for the Outpost session heartbeat.
+ *
+ * ## Why this exists
+ *
+ * The heartbeat enumerates every Claude transcript and Codex rollout on the
+ * box. On a long-lived Outpost that is an archive, not a status: the box this
+ * was first run against had **8,258 Claude transcripts and 1,082 Codex
+ * rollouts — 9,340 sessions — of which 15 had any activity in the last 15
+ * minutes.** Publishing all of them produced a payload of roughly 1.9 MB.
+ *
+ * AWS IoT Core rejects anything over 128 KB, so the very first real publish
+ * failed with `payload larger than 131072 bytes`. Every subsequent one would
+ * have too. The heartbeat is a liveness signal; it must carry what is live.
+ *
+ * Two rules, both tested here:
+ *   1. `ended` sessions are not published — they are history, and re-sending
+ *      thousands of them every five seconds is the bug.
+ *   2. Whatever survives that filter is still bounded by BYTES, because a busy
+ *      box could exceed the limit on live sessions alone. When the bound bites
+ *      it is reported, never silent — a truncated payload that looks complete
+ *      is how you get a wrong dashboard instead of a missing one.
+ */
+export {};
+//# sourceMappingURL=session-heartbeat-bounds.test.d.ts.map

package/dist/outposts/session-heartbeat-bounds.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-bounds.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-bounds.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG"}

package/dist/outposts/session-heartbeat-bounds.test.js

@@ -0,0 +1,159 @@
+/**
+ * Payload bounding for the Outpost session heartbeat.
+ *
+ * ## Why this exists
+ *
+ * The heartbeat enumerates every Claude transcript and Codex rollout on the
+ * box. On a long-lived Outpost that is an archive, not a status: the box this
+ * was first run against had **8,258 Claude transcripts and 1,082 Codex
+ * rollouts — 9,340 sessions — of which 15 had any activity in the last 15
+ * minutes.** Publishing all of them produced a payload of roughly 1.9 MB.
+ *
+ * AWS IoT Core rejects anything over 128 KB, so the very first real publish
+ * failed with `payload larger than 131072 bytes`. Every subsequent one would
+ * have too. The heartbeat is a liveness signal; it must carry what is live.
+ *
+ * Two rules, both tested here:
+ *   1. `ended` sessions are not published — they are history, and re-sending
+ *      thousands of them every five seconds is the bug.
+ *   2. Whatever survives that filter is still bounded by BYTES, because a busy
+ *      box could exceed the limit on live sessions alone. When the bound bites
+ *      it is reported, never silent — a truncated payload that looks complete
+ *      is how you get a wrong dashboard instead of a missing one.
+ */
+import { join, sep } from "node:path";
+import { describe, expect, it } from "vitest";
+import { DEFAULT_LIVENESS_THRESHOLDS, IOT_PAYLOAD_BUDGET_BYTES, collectSessions, } from "./session-heartbeat.js";
+const NOW = new Date("2026-07-29T12:00:00.000Z");
+const NOW_MS = NOW.getTime();
+/**
+ * A fake Claude tree with `count` transcripts, each aged `ageSecondsFor(i)`.
+ * Codex enumeration sees an empty tree.
+ */
+function claudeTreeFs(count, ageSecondsFor) {
+    const names = Array.from({ length: count }, (_, i) => `${i.toString(16).padStart(8, "0")}-aaaa-bbbb-cccc-dddddddddddd.jsonl`);
+    const ageOf = new Map();
+    names.forEach((n, i) => ageOf.set(n, ageSecondsFor(i)));
+    return {
+        async readDir(path) {
+            const projects = `${sep}${join(".claude", "projects")}`;
+            const project = `${sep}${join(".claude", "projects", "-home-ec2-user-hq")}`;
+            if (path.endsWith(projects)) {
+                return [{ name: "-home-ec2-user-hq", isDirectory: true, isFile: false }];
+            }
+            if (path.endsWith(project)) {
+                return names.map((name) => ({
+                    name,
+                    isDirectory: false,
+                    isFile: true,
+                }));
+            }
+            return [];
+        },
+        async stat(path) {
+            const name = path.split(sep).pop() ?? "";
+            const age = ageOf.get(name) ?? 0;
+            const mtimeMs = NOW_MS - age * 1000;
+            return { mtimeMs, birthtimeMs: mtimeMs, size: 1024 };
+        },
+        async readTextFile() {
+            return "";
+        },
+        async readBounded() {
+            // A realistic cwd/model sniff, so each record is a realistic size.
+            return JSON.stringify({
+                cwd: "/home/ec2-user/hq/repos/private/some-longish-repo-name",
+                model: "claude-opus-4-8",
+            });
+        },
+    };
+}
+const config = { personUid: "prs_01TEST", home: "/home/ec2-user", now: () => NOW };
+describe("payload bounding", () => {
+    it("publishes live sessions and drops the ended archive", async () => {
+        // 500 sessions: the first 5 active, the rest ancient — the real shape of
+        // a box that has been running for weeks.
+        const fs = claudeTreeFs(500, (i) => (i < 5 ? 2 : 60 * 60 * 24 * 30));
+        const payload = await collectSessions(config, { fs });
+        expect(payload.sessions).toHaveLength(5);
+        expect(payload.sessions.every((s) => s.status !== "ended")).toBe(true);
+    });
+    it("reports how many sessions exist, not just how many it sent", async () => {
+        const fs = claudeTreeFs(500, (i) => (i < 5 ? 2 : 60 * 60 * 24 * 30));
+        const payload = await collectSessions(config, { fs });
+        // Silent filtering reads as "this box has 5 sessions". It has 500.
+        expect(payload.totalSessions).toBe(500);
+        // `totalSessions` is optional on the payload, so coalesce rather than assert
+        // non-null: a missing count then fails this comparison instead of throwing a
+        // confusing error, which is the right outcome — an absent total IS the bug
+        // this test exists to catch.
+        expect(payload.sessions.length).toBeLessThan(payload.totalSessions ?? 0);
+    });
+    it("keeps idle sessions — only `ended` is archive", async () => {
+        // 2s → running, 5min → idle, 30d → ended.
+        const fs = claudeTreeFs(3, (i) => [2, 300, 60 * 60 * 24 * 30][i]);
+        const payload = await collectSessions(config, { fs });
+        const statuses = payload.sessions.map((s) => s.status).sort();
+        expect(statuses).toEqual(["idle", "running"]);
+    });
+    it("stays under the IoT limit even when every session is live", async () => {
+        // 5,000 sessions all active — the size bound, not the status filter, is
+        // what has to hold here.
+        const fs = claudeTreeFs(5000, () => 2);
+        const payload = await collectSessions(config, { fs });
+        const bytes = Buffer.byteLength(JSON.stringify(payload), "utf8");
+        expect(bytes).toBeLessThanOrEqual(IOT_PAYLOAD_BUDGET_BYTES);
+        // The real AWS IoT Core ceiling. The budget must leave headroom under it.
+        expect(bytes).toBeLessThan(131072);
+    });
+    it("flags truncation rather than quietly shortening the list", async () => {
+        const fs = claudeTreeFs(5000, () => 2);
+        const payload = await collectSessions(config, { fs });
+        expect(payload.truncated).toBe(true);
+        expect(payload.totalSessions).toBe(5000);
+        expect(payload.sessions.length).toBeLessThan(5000);
+    });
+    it("does not flag truncation when everything fits", async () => {
+        const fs = claudeTreeFs(3, () => 2);
+        const payload = await collectSessions(config, { fs });
+        expect(payload.truncated).toBe(false);
+        expect(payload.sessions).toHaveLength(3);
+        expect(payload.totalSessions).toBe(3);
+    });
+    it("reads transcript bodies ONLY for sessions it will publish", async () => {
+        // The enumerator statted every file AND did a 16 KiB bounded read on each,
+        // before anything was filtered. On the first real box that was 9,340 reads
+        // per tick, every 5 seconds — ~150 MB of disk for 15 useful records, on
+        // the exact resource that had already taken the machine down once.
+        const reads = [];
+        const base = claudeTreeFs(500, (i) => (i < 5 ? 2 : 60 * 60 * 24 * 30));
+        const fs = {
+            ...base,
+            async readBounded(path, maxBytes, from) {
+                reads.push(path);
+                return base.readBounded(path, maxBytes, from);
+            },
+        };
+        const payload = await collectSessions(config, { fs });
+        expect(payload.sessions).toHaveLength(5);
+        // Five live sessions ⇒ five reads, not five hundred.
+        expect(reads).toHaveLength(5);
+    });
+    it("keeps the MOST RECENTLY ACTIVE sessions when it has to choose", async () => {
+        // Index 0 is freshest, index N oldest — all still within `idle`.
+        const fs = claudeTreeFs(5000, (i) => 1 + i * (1 / 10));
+        const payload = await collectSessions(config, { fs });
+        expect(payload.truncated).toBe(true);
+        // Dropping the newest and keeping stale ones would make the live view
+        // wrong in the one way that matters.
+        const kept = payload.sessions
+            .map((s) => Date.parse(s.lastActivityAt))
+            .sort((a, b) => a - b);
+        const oldestKept = kept[0];
+        const cutoff = NOW_MS - DEFAULT_LIVENESS_THRESHOLDS.idleWithinSeconds * 1000;
+        expect(oldestKept).toBeGreaterThan(cutoff);
+        // The single freshest session must always survive.
+        expect(Math.max(...kept)).toBe(NOW_MS - 1000);
+    });
+});
+//# sourceMappingURL=session-heartbeat-bounds.test.js.map

package/dist/outposts/session-heartbeat-bounds.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-bounds.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-bounds.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;AAE7B;;;GAGG;AACH,SAAS,YAAY,CACnB,KAAa,EACb,aAAoC;IAEpC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,oCAAoC,CACzE,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAY;YACxB,MAAM,QAAQ,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC5E,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC1B,IAAI;oBACJ,WAAW,EAAE,KAAK;oBAClB,MAAM,EAAE,IAAI;iBACb,CAAC,CAAC,CAAC;YACN,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAY;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,WAAW;YACf,mEAAmE;YACnE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,GAAG,EAAE,wDAAwD;gBAC7D,KAAK,EAAE,iBAAiB;aACzB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;AAEnF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,yEAAyE;QACzE,yCAAyC;QACzC,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,mEAAmE;QACnE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,6EAA6E;QAC7E,6EAA6E;QAC7E,2EAA2E;QAC3E,6BAA6B;QAC7B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,0CAA0C;QAC1C,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,wEAAwE;QACxE,yBAAyB;QACzB,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjE,MAAM,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,0EAA0E;QAC1E,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE,GAAmB;YACzB,GAAG,IAAI;YACP,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;gBACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,qDAAqD;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,iEAAiE;QACjE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,sEAAsE;QACtE,qCAAqC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ;aAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAe,CAAC,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QAC5B,MAAM,MAAM,GACV,MAAM,GAAG,2BAA2B,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChE,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,mDAAmD;QACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/outposts/session-heartbeat-guard.test.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The no-secrets guard must catch credentials WITHOUT catching ordinary paths.
+ *
+ * Both halves matter equally, and the second is easy to get wrong. The guard
+ * throws, and a throw fails the whole tick — so a pattern that matches a
+ * legitimate directory name silently disables reporting for the entire box
+ * until that session ages out.
+ *
+ * The original marker list held `sk-` and `asia` as bare substrings. `sk-`
+ * matches `task-runner`, `flask-app`, `disk-usage`, `risk-model`. Anyone who
+ * created a repo with one of those names would have taken the heartbeat down
+ * across the box, with the service still reporting active — the exact failure
+ * shape this whole change exists to remove.
+ */
+export {};
+//# sourceMappingURL=session-heartbeat-guard.test.d.ts.map

package/dist/outposts/session-heartbeat-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-guard.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/outposts/session-heartbeat-guard.test.js

@@ -0,0 +1,88 @@
+/**
+ * The no-secrets guard must catch credentials WITHOUT catching ordinary paths.
+ *
+ * Both halves matter equally, and the second is easy to get wrong. The guard
+ * throws, and a throw fails the whole tick — so a pattern that matches a
+ * legitimate directory name silently disables reporting for the entire box
+ * until that session ages out.
+ *
+ * The original marker list held `sk-` and `asia` as bare substrings. `sk-`
+ * matches `task-runner`, `flask-app`, `disk-usage`, `risk-model`. Anyone who
+ * created a repo with one of those names would have taken the heartbeat down
+ * across the box, with the service still reporting active — the exact failure
+ * shape this whole change exists to remove.
+ */
+import { describe, expect, it } from "vitest";
+import { assertNoSecretsInPayload, } from "./session-heartbeat.js";
+function payloadWith(over) {
+    const session = {
+        id: "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
+        tool: "claude",
+        origin: "outpost",
+        cwd: "/home/ec2-user/hq",
+        project: "hq",
+        company: null,
+        model: "claude-opus-4-8",
+        status: "running",
+        startedAt: "2026-07-29T12:00:00.000Z",
+        lastActivityAt: "2026-07-29T12:00:00.000Z",
+        source: "/home/ec2-user/.claude/projects/-home-ec2-user-hq/x.jsonl",
+        ...over,
+    };
+    return {
+        type: "sessions",
+        origin: "outpost",
+        emittedAt: "2026-07-29T12:00:00.000Z",
+        sessions: [session],
+    };
+}
+describe("ordinary paths must never trip the guard", () => {
+    // Every one of these contains `sk-` or `asia` and would have thrown before.
+    const innocentPaths = [
+        "/home/ec2-user/hq/repos/private/task-runner",
+        "/home/ec2-user/hq/repos/public/flask-app",
+        "/home/ec2-user/hq/tools/disk-usage",
+        "/home/ec2-user/hq/models/risk-model",
+        "/home/ec2-user/hq/regions/asia-pacific",
+        "/home/ec2-user/hq/repos/private/password-manager",
+        "/home/ec2-user/hq/kiosk-display",
+    ];
+    for (const cwd of innocentPaths) {
+        it(`allows ${cwd.split("/").pop()}`, () => {
+            const project = cwd.split("/").pop();
+            expect(() => assertNoSecretsInPayload(payloadWith({ cwd, project, source: `${cwd}/s.jsonl` }))).not.toThrow();
+        });
+    }
+    it("allows a model id that merely starts with the letters sk", () => {
+        expect(() => assertNoSecretsInPayload(payloadWith({ model: "sk-lite-preview" }))).not.toThrow();
+    });
+});
+describe("real credentials must still be caught", () => {
+    const leaks = [
+        ["an Anthropic key", { model: "sk-ant-api03-AbCdEfGhIjKlMnOpQrStUv" }],
+        ["an OpenAI-style key", { model: "sk-AbCdEfGhIjKlMnOpQrStUvWxYz012345" }],
+        ["a long-lived AWS key id", { project: "AKIAIOSFODNN7EXAMPLE" }],
+        ["an STS temp key id", { project: "ASIAIOSFODNN7EXAMPLE" }],
+        ["a PEM private key", { cwd: "-----BEGIN RSA PRIVATE KEY-----" }],
+        ["an authorization header", { model: "authorization: xyz" }],
+        ["a bearer token", { model: "Bearer abcdefghijklmnop0123" }],
+        ["an instance token header", { project: "x-outpost-instance-token" }],
+        ["a refresh token field", { model: 'refresh_token="abc"' }],
+        ["a password field", { model: "password=hunter2" }],
+        ["a secret access key", { project: "secretaccesskey" }],
+        ["a session token", { project: "sessiontoken" }],
+    ];
+    for (const [what, over] of leaks) {
+        it(`rejects ${what}`, () => {
+            expect(() => assertNoSecretsInPayload(payloadWith(over))).toThrow(/refusing to publish/);
+        });
+    }
+});
+describe("non-whitelisted fields are still rejected", () => {
+    it("refuses a payload carrying an extra field", () => {
+        const p = payloadWith({});
+        p.sessions[0].transcript = "secret";
+        expect(() => assertNoSecretsInPayload(p)).toThrow(/non-whitelisted/);
+    });
+});
+//# sourceMappingURL=session-heartbeat-guard.test.js.map

package/dist/outposts/session-heartbeat-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-guard.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,wBAAwB,GAGzB,MAAM,wBAAwB,CAAC;AAEhC,SAAS,WAAW,CAAC,IAA2B;IAC9C,MAAM,OAAO,GAAiB;QAC5B,EAAE,EAAE,sCAAsC;QAC1C,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,SAAS;QACjB,GAAG,EAAE,mBAAmB;QACxB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,0BAA0B;QACrC,cAAc,EAAE,0BAA0B;QAC1C,MAAM,EAAE,2DAA2D;QACnE,GAAG,IAAI;KACR,CAAC;IACF,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,0BAA0B;QACrC,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,4EAA4E;IAC5E,MAAM,aAAa,GAAG;QACpB,6CAA6C;QAC7C,0CAA0C;QAC1C,oCAAoC;QACpC,qCAAqC;QACrC,wCAAwC;QACxC,kDAAkD;QAClD,iCAAiC;KAClC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,EAAE,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC,CAAC,CAClF,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CACpE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,MAAM,KAAK,GAAsC;QAC/C,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACtE,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACzE,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAChE,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAC3D,CAAC,mBAAmB,EAAE,EAAE,GAAG,EAAE,iCAAiC,EAAE,CAAC;QACjE,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QAC5D,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAC5D,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QACrE,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC3D,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACnD,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QACvD,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACjD,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,EAAE,CAAC,WAAW,IAAI,EAAE,EAAE,GAAG,EAAE;YACzB,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAC/D,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAwC,CAAC,UAAU,GAAG,QAAQ,CAAC;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/outposts/session-heartbeat-publisher.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Tests for the on-box realtime publisher (mission-control US-009):
+ *   - defaultRealtimeCredentialsFetcher POSTs the box's JWT to
+ *     /v1/realtime/credentials and parses the response
+ *   - createIotPublishPort vends scoped creds, builds an IoT client, publishes
+ *     to the caller's topic, caches the client until near-expiry, and re-guards
+ *     the no-secrets contract at the transport boundary
+ */
+export {};
+//# sourceMappingURL=session-heartbeat-publisher.test.d.ts.map

package/dist/outposts/session-heartbeat-publisher.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-publisher.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-publisher.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/outposts/session-heartbeat-publisher.test.js

@@ -0,0 +1,153 @@
+/**
+ * Tests for the on-box realtime publisher (mission-control US-009):
+ *   - defaultRealtimeCredentialsFetcher POSTs the box's JWT to
+ *     /v1/realtime/credentials and parses the response
+ *   - createIotPublishPort vends scoped creds, builds an IoT client, publishes
+ *     to the caller's topic, caches the client until near-expiry, and re-guards
+ *     the no-secrets contract at the transport boundary
+ */
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { mockClient } from "aws-sdk-client-mock";
+import { IoTDataPlaneClient, PublishCommand, } from "@aws-sdk/client-iot-data-plane";
+import { createIotPublishPort, defaultRealtimeCredentialsFetcher, } from "./session-heartbeat-publisher";
+const PERSON = "prs_alice";
+const TOPIC = `hq/${PERSON}/sessions`;
+const NOW = new Date("2026-06-15T18:55:00.000Z");
+function credsResponse(expiresInMs) {
+    return {
+        credentials: {
+            accessKeyId: "ASIAEXAMPLE",
+            secretAccessKey: "secret",
+            sessionToken: "token",
+            expiration: new Date(NOW.getTime() + expiresInMs).toISOString(),
+        },
+        iotEndpoint: "abc123-ats.iot.us-east-1.amazonaws.com",
+        region: "us-east-1",
+        topic: TOPIC,
+        expiresAt: new Date(NOW.getTime() + expiresInMs).toISOString(),
+    };
+}
+function cleanPayload() {
+    return {
+        type: "sessions",
+        origin: "outpost",
+        emittedAt: NOW.toISOString(),
+        sessions: [
+            {
+                id: "x",
+                tool: "claude",
+                origin: "outpost",
+                cwd: "/home/ec2-user/hq",
+                project: "hq",
+                company: null,
+                model: "claude-opus-4",
+                status: "running",
+                startedAt: null,
+                lastActivityAt: NOW.toISOString(),
+                source: "/home/ec2-user/.claude/projects/p/x.jsonl",
+            },
+        ],
+    };
+}
+describe("defaultRealtimeCredentialsFetcher", () => {
+    it("POSTs the JWT to /v1/realtime/credentials and returns the parsed body", async () => {
+        const body = credsResponse(3_600_000);
+        const fetchImpl = vi.fn().mockResolvedValue({
+            ok: true,
+            status: 200,
+            statusText: "OK",
+            json: async () => body,
+        });
+        const fetcher = defaultRealtimeCredentialsFetcher({
+            apiBaseUrl: "https://hqapi.hq.computer",
+            getJwt: async () => "JWT123",
+            fetchImpl: fetchImpl,
+        });
+        const out = await fetcher();
+        expect(out).toEqual(body);
+        const [url, init] = fetchImpl.mock.calls[0];
+        expect(url).toBe("https://hqapi.hq.computer/v1/realtime/credentials");
+        expect(init.method).toBe("POST");
+        expect(init.headers.authorization).toBe("Bearer JWT123");
+    });
+    it("throws on a non-ok response", async () => {
+        const fetchImpl = vi.fn().mockResolvedValue({
+            ok: false,
+            status: 403,
+            statusText: "Forbidden",
+            json: async () => ({}),
+        });
+        const fetcher = defaultRealtimeCredentialsFetcher({
+            apiBaseUrl: "https://hqapi.hq.computer",
+            getJwt: async () => "JWT",
+            fetchImpl: fetchImpl,
+        });
+        await expect(fetcher()).rejects.toThrow(/403/);
+    });
+});
+describe("createIotPublishPort", () => {
+    const iotMock = mockClient(IoTDataPlaneClient);
+    beforeEach(() => iotMock.reset());
+    it("publishes the payload to the caller's topic via IoT", async () => {
+        iotMock.on(PublishCommand).resolves({});
+        const fetchCredentials = vi.fn().mockResolvedValue(credsResponse(3_600_000));
+        const publish = createIotPublishPort({
+            fetchCredentials,
+            makeClient: () => iotMock,
+            now: () => NOW,
+        });
+        const payload = cleanPayload();
+        await publish(TOPIC, payload);
+        const call = iotMock.commandCalls(PublishCommand)[0];
+        expect(call.args[0].input.topic).toBe(TOPIC);
+        const sent = JSON.parse(Buffer.from(call.args[0].input.payload).toString("utf8"));
+        expect(sent.type).toBe("sessions");
+        expect(sent.sessions[0].id).toBe("x");
+    });
+    it("caches the vended creds/client until near expiry, then re-vends", async () => {
+        iotMock.on(PublishCommand).resolves({});
+        const fetchCredentials = vi
+            .fn()
+            .mockResolvedValueOnce(credsResponse(3_600_000))
+            .mockResolvedValueOnce(credsResponse(3_600_000));
+        const publish = createIotPublishPort({
+            fetchCredentials,
+            makeClient: () => iotMock,
+            now: () => NOW,
+        });
+        await publish(TOPIC, cleanPayload());
+        await publish(TOPIC, cleanPayload());
+        // Second publish reuses the cached client — creds vended once.
+        expect(fetchCredentials).toHaveBeenCalledTimes(1);
+    });
+    it("re-vends when the cached creds are within the refresh skew of expiry", async () => {
+        iotMock.on(PublishCommand).resolves({});
+        const fetchCredentials = vi
+            .fn()
+            // expires in 30s — inside the 60s refresh skew, so every call re-vends
+            .mockResolvedValue(credsResponse(30_000));
+        const publish = createIotPublishPort({
+            fetchCredentials,
+            makeClient: () => iotMock,
+            now: () => NOW,
+        });
+        await publish(TOPIC, cleanPayload());
+        await publish(TOPIC, cleanPayload());
+        expect(fetchCredentials).toHaveBeenCalledTimes(2);
+    });
+    it("re-guards the no-secrets contract at the transport boundary", async () => {
+        iotMock.on(PublishCommand).resolves({});
+        const fetchCredentials = vi.fn().mockResolvedValue(credsResponse(3_600_000));
+        const publish = createIotPublishPort({
+            fetchCredentials,
+            makeClient: () => iotMock,
+            now: () => NOW,
+        });
+        const dirty = cleanPayload();
+        // Smuggle a secret into a whitelisted field — the publisher must refuse.
+        dirty.sessions[0].model = "sk-ant-leaked-key";
+        await expect(publish(TOPIC, dirty)).rejects.toThrow(/secret marker/);
+        expect(iotMock.commandCalls(PublishCommand)).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=session-heartbeat-publisher.test.js.map

package/dist/outposts/session-heartbeat-publisher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-publisher.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-publisher.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,iCAAiC,GAElC,MAAM,+BAA+B,CAAC;AAGvC,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,WAAW,CAAC;AACtC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEjD,SAAS,aAAa,CACpB,WAAmB;IAEnB,OAAO;QACL,WAAW,EAAE;YACX,WAAW,EAAE,aAAa;YAC1B,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE;SAChE;QACD,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE;YACR;gBACE,EAAE,EAAE,GAAG;gBACP,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,mBAAmB;gBACxB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,GAAG,CAAC,WAAW,EAAE;gBACjC,MAAM,EAAE,2CAA2C;aACpD;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;SACX,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAChD,UAAU,EAAE,2BAA2B;YACvC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;YAC5B,SAAS,EAAE,SAAoC;SAChD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACX,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAChD,UAAU,EAAE,2BAA2B;YACvC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;YACzB,SAAS,EAAE,SAAoC;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAElC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE;aACxB,EAAE,EAAE;aACJ,qBAAqB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;aAC/C,qBAAqB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,+DAA+D;QAC/D,MAAM,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE;aACxB,EAAE,EAAE;YACL,uEAAuE;aACtE,iBAAiB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,yEAAyE;QACzE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,mBAAmB,CAAC;QAC9C,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/outposts/session-heartbeat-retain-guard.test.d.ts

@@ -0,0 +1,18 @@
+/**
+ * company-work-corpus US-006 AC7 — no retained MQTT publishes for transcript
+ * objects.
+ *
+ * Session transcripts are pulled on demand via the presign GET path (structural
+ * owner+creator gate); they are NEVER pushed as message bodies over the realtime
+ * fabric. The on-box sessions publisher emits only a COMPACT liveness heartbeat
+ * (`SessionsHeartbeatPayload` — path-only session summaries, guarded by
+ * `assertNoSecretsInPayload`), and it must publish NON-RETAINED so a stale
+ * summary is never re-delivered from the broker to a late subscriber.
+ *
+ * This is a GUARD suite: it asserts the current (correct) behavior so a future
+ * change that (a) turns on `retain` for the sessions topic, or (b) starts
+ * shipping transcript/vault-file bytes over MQTT, fails loudly. No product code
+ * change is expected from US-006 here.
+ */
+export {};
+//# sourceMappingURL=session-heartbeat-retain-guard.test.d.ts.map

package/dist/outposts/session-heartbeat-retain-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-retain-guard.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-retain-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/outposts/session-heartbeat-retain-guard.test.js

@@ -0,0 +1,106 @@
+/**
+ * company-work-corpus US-006 AC7 — no retained MQTT publishes for transcript
+ * objects.
+ *
+ * Session transcripts are pulled on demand via the presign GET path (structural
+ * owner+creator gate); they are NEVER pushed as message bodies over the realtime
+ * fabric. The on-box sessions publisher emits only a COMPACT liveness heartbeat
+ * (`SessionsHeartbeatPayload` — path-only session summaries, guarded by
+ * `assertNoSecretsInPayload`), and it must publish NON-RETAINED so a stale
+ * summary is never re-delivered from the broker to a late subscriber.
+ *
+ * This is a GUARD suite: it asserts the current (correct) behavior so a future
+ * change that (a) turns on `retain` for the sessions topic, or (b) starts
+ * shipping transcript/vault-file bytes over MQTT, fails loudly. No product code
+ * change is expected from US-006 here.
+ */
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { readFileSync } from "node:fs";
+import { mockClient } from "aws-sdk-client-mock";
+import { IoTDataPlaneClient, PublishCommand, } from "@aws-sdk/client-iot-data-plane";
+import { createIotPublishPort, } from "./session-heartbeat-publisher";
+const PERSON = "prs_alice";
+const TOPIC = `hq/${PERSON}/sessions`;
+const NOW = new Date("2026-07-11T18:55:00.000Z");
+function credsResponse() {
+    return {
+        credentials: {
+            accessKeyId: "ASIAEXAMPLE",
+            secretAccessKey: "secret",
+            sessionToken: "token",
+            expiration: new Date(NOW.getTime() + 3_600_000).toISOString(),
+        },
+        iotEndpoint: "abc123-ats.iot.us-east-1.amazonaws.com",
+        region: "us-east-1",
+        topic: TOPIC,
+        expiresAt: new Date(NOW.getTime() + 3_600_000).toISOString(),
+    };
+}
+function cleanPayload() {
+    return {
+        type: "sessions",
+        origin: "outpost",
+        emittedAt: NOW.toISOString(),
+        sessions: [
+            {
+                id: "x",
+                tool: "claude",
+                origin: "outpost",
+                cwd: "/home/ec2-user/hq",
+                project: "hq",
+                company: null,
+                model: "claude-opus-4",
+                status: "running",
+                startedAt: null,
+                lastActivityAt: NOW.toISOString(),
+                source: "/home/ec2-user/.claude/projects/p/x.jsonl",
+            },
+        ],
+    };
+}
+describe("US-006 AC7 — sessions heartbeat is published NON-RETAINED", () => {
+    const iotMock = mockClient(IoTDataPlaneClient);
+    beforeEach(() => iotMock.reset());
+    it("the PublishCommand never sets retain=true", async () => {
+        iotMock.on(PublishCommand).resolves({});
+        const publish = createIotPublishPort({
+            fetchCredentials: vi.fn().mockResolvedValue(credsResponse()),
+            makeClient: () => iotMock,
+            now: () => NOW,
+        });
+        await publish(TOPIC, cleanPayload());
+        const call = iotMock.commandCalls(PublishCommand)[0];
+        // retain must be absent or explicitly false — never true (no broker
+        // re-delivery of a stale session summary; transcripts are pull-only).
+        expect(call.args[0].input.retain).not.toBe(true);
+        // The wire body is the compact summary envelope — no transcript body field.
+        const sent = JSON.parse(Buffer.from(call.args[0].input.payload).toString("utf8"));
+        expect(sent.type).toBe("sessions");
+        // The session summary carries a `source` PATH only, never file/transcript
+        // content — assert no body/content/transcript key ever rides the wire.
+        for (const s of sent.sessions) {
+            expect(s).not.toHaveProperty("body");
+            expect(s).not.toHaveProperty("content");
+            expect(s).not.toHaveProperty("transcript");
+        }
+    });
+});
+describe("US-006 AC7 — static guard: sessions/realtime publishers never retain", () => {
+    // The sessions publisher is the ONLY realtime path in this package that
+    // touches session data, and it may never set retain=true — a retained
+    // message would leave the last session summary sitting on the broker after
+    // the box goes away. (The server-side DM-wake publisher is guarded by the
+    // matching test in hq-pro, which is where that file lives.)
+    const guardedSources = [
+        new URL("./session-heartbeat-publisher.ts", import.meta.url),
+        new URL("./session-heartbeat.ts", import.meta.url),
+    ];
+    it("no guarded publisher sets retain: true", () => {
+        for (const url of guardedSources) {
+            const src = readFileSync(url, "utf8");
+            // Tolerate any whitespace between `retain` and `true`.
+            expect(src).not.toMatch(/retain\s*:\s*true/);
+        }
+    });
+});
+//# sourceMappingURL=session-heartbeat-retain-guard.test.js.map

package/dist/outposts/session-heartbeat-retain-guard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-heartbeat-retain-guard.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-retain-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,GAErB,MAAM,+BAA+B,CAAC;AAGvC,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,WAAW,CAAC;AACtC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEjD,SAAS,aAAa;IACpB,OAAO;QACL,WAAW,EAAE;YACX,WAAW,EAAE,aAAa;YAC1B,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE;SAC9D;QACD,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE;YACR;gBACE,EAAE,EAAE,GAAG;gBACP,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,mBAAmB;gBACxB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,GAAG,CAAC,WAAW,EAAE;gBACjC,MAAM,EAAE,2CAA2C;aACpD;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACzE,MAAM,OAAO,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAElC,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;YAC5D,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,4EAA4E;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGvE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,0EAA0E;QAC1E,uEAAuE;QACvE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,wEAAwE;IACxE,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,cAAc,GAAG;QACrB,IAAI,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5D,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;KACnD,CAAC;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,uDAAuD;YACvD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}