@indigoai-us/hq-cloud 6.18.44-alpha.8 → 6.18.44

package/dist/outposts/session-heartbeat-bounds.test.d.ts

@@ -1,25 +0,0 @@
-/**
- * Payload bounding for the Outpost session heartbeat.
- *
- * ## Why this exists
- *
- * The heartbeat enumerates every Claude transcript and Codex rollout on the
- * box. On a long-lived Outpost that is an archive, not a status: the box this
- * was first run against had **8,258 Claude transcripts and 1,082 Codex
- * rollouts — 9,340 sessions — of which 15 had any activity in the last 15
- * minutes.** Publishing all of them produced a payload of roughly 1.9 MB.
- *
- * AWS IoT Core rejects anything over 128 KB, so the very first real publish
- * failed with `payload larger than 131072 bytes`. Every subsequent one would
- * have too. The heartbeat is a liveness signal; it must carry what is live.
- *
- * Two rules, both tested here:
- *   1. `ended` sessions are not published — they are history, and re-sending
- *      thousands of them every five seconds is the bug.
- *   2. Whatever survives that filter is still bounded by BYTES, because a busy
- *      box could exceed the limit on live sessions alone. When the bound bites
- *      it is reported, never silent — a truncated payload that looks complete
- *      is how you get a wrong dashboard instead of a missing one.
- */
-export {};
-//# sourceMappingURL=session-heartbeat-bounds.test.d.ts.map

package/dist/outposts/session-heartbeat-bounds.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-bounds.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-bounds.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG"}

package/dist/outposts/session-heartbeat-bounds.test.js

@@ -1,156 +0,0 @@
-/**
- * Payload bounding for the Outpost session heartbeat.
- *
- * ## Why this exists
- *
- * The heartbeat enumerates every Claude transcript and Codex rollout on the
- * box. On a long-lived Outpost that is an archive, not a status: the box this
- * was first run against had **8,258 Claude transcripts and 1,082 Codex
- * rollouts — 9,340 sessions — of which 15 had any activity in the last 15
- * minutes.** Publishing all of them produced a payload of roughly 1.9 MB.
- *
- * AWS IoT Core rejects anything over 128 KB, so the very first real publish
- * failed with `payload larger than 131072 bytes`. Every subsequent one would
- * have too. The heartbeat is a liveness signal; it must carry what is live.
- *
- * Two rules, both tested here:
- *   1. `ended` sessions are not published — they are history, and re-sending
- *      thousands of them every five seconds is the bug.
- *   2. Whatever survives that filter is still bounded by BYTES, because a busy
- *      box could exceed the limit on live sessions alone. When the bound bites
- *      it is reported, never silent — a truncated payload that looks complete
- *      is how you get a wrong dashboard instead of a missing one.
- */
-import { describe, expect, it } from "vitest";
-import { DEFAULT_LIVENESS_THRESHOLDS, IOT_PAYLOAD_BUDGET_BYTES, collectSessions, } from "./session-heartbeat.js";
-const NOW = new Date("2026-07-29T12:00:00.000Z");
-const NOW_MS = NOW.getTime();
-/**
- * A fake Claude tree with `count` transcripts, each aged `ageSecondsFor(i)`.
- * Codex enumeration sees an empty tree.
- */
-function claudeTreeFs(count, ageSecondsFor) {
-    const names = Array.from({ length: count }, (_, i) => `${i.toString(16).padStart(8, "0")}-aaaa-bbbb-cccc-dddddddddddd.jsonl`);
-    const ageOf = new Map();
-    names.forEach((n, i) => ageOf.set(n, ageSecondsFor(i)));
-    return {
-        async readDir(path) {
-            if (path.endsWith("/.claude/projects")) {
-                return [{ name: "-home-ec2-user-hq", isDirectory: true, isFile: false }];
-            }
-            if (path.endsWith("/.claude/projects/-home-ec2-user-hq")) {
-                return names.map((name) => ({
-                    name,
-                    isDirectory: false,
-                    isFile: true,
-                }));
-            }
-            return [];
-        },
-        async stat(path) {
-            const name = path.split("/").pop() ?? "";
-            const age = ageOf.get(name) ?? 0;
-            const mtimeMs = NOW_MS - age * 1000;
-            return { mtimeMs, birthtimeMs: mtimeMs, size: 1024 };
-        },
-        async readTextFile() {
-            return "";
-        },
-        async readBounded() {
-            // A realistic cwd/model sniff, so each record is a realistic size.
-            return JSON.stringify({
-                cwd: "/home/ec2-user/hq/repos/private/some-longish-repo-name",
-                model: "claude-opus-4-8",
-            });
-        },
-    };
-}
-const config = { personUid: "prs_01TEST", home: "/home/ec2-user", now: () => NOW };
-describe("payload bounding", () => {
-    it("publishes live sessions and drops the ended archive", async () => {
-        // 500 sessions: the first 5 active, the rest ancient — the real shape of
-        // a box that has been running for weeks.
-        const fs = claudeTreeFs(500, (i) => (i < 5 ? 2 : 60 * 60 * 24 * 30));
-        const payload = await collectSessions(config, { fs });
-        expect(payload.sessions).toHaveLength(5);
-        expect(payload.sessions.every((s) => s.status !== "ended")).toBe(true);
-    });
-    it("reports how many sessions exist, not just how many it sent", async () => {
-        const fs = claudeTreeFs(500, (i) => (i < 5 ? 2 : 60 * 60 * 24 * 30));
-        const payload = await collectSessions(config, { fs });
-        // Silent filtering reads as "this box has 5 sessions". It has 500.
-        expect(payload.totalSessions).toBe(500);
-        // `totalSessions` is optional on the payload, so coalesce rather than assert
-        // non-null: a missing count then fails this comparison instead of throwing a
-        // confusing error, which is the right outcome — an absent total IS the bug
-        // this test exists to catch.
-        expect(payload.sessions.length).toBeLessThan(payload.totalSessions ?? 0);
-    });
-    it("keeps idle sessions — only `ended` is archive", async () => {
-        // 2s → running, 5min → idle, 30d → ended.
-        const fs = claudeTreeFs(3, (i) => [2, 300, 60 * 60 * 24 * 30][i]);
-        const payload = await collectSessions(config, { fs });
-        const statuses = payload.sessions.map((s) => s.status).sort();
-        expect(statuses).toEqual(["idle", "running"]);
-    });
-    it("stays under the IoT limit even when every session is live", async () => {
-        // 5,000 sessions all active — the size bound, not the status filter, is
-        // what has to hold here.
-        const fs = claudeTreeFs(5000, () => 2);
-        const payload = await collectSessions(config, { fs });
-        const bytes = Buffer.byteLength(JSON.stringify(payload), "utf8");
-        expect(bytes).toBeLessThanOrEqual(IOT_PAYLOAD_BUDGET_BYTES);
-        // The real AWS IoT Core ceiling. The budget must leave headroom under it.
-        expect(bytes).toBeLessThan(131072);
-    });
-    it("flags truncation rather than quietly shortening the list", async () => {
-        const fs = claudeTreeFs(5000, () => 2);
-        const payload = await collectSessions(config, { fs });
-        expect(payload.truncated).toBe(true);
-        expect(payload.totalSessions).toBe(5000);
-        expect(payload.sessions.length).toBeLessThan(5000);
-    });
-    it("does not flag truncation when everything fits", async () => {
-        const fs = claudeTreeFs(3, () => 2);
-        const payload = await collectSessions(config, { fs });
-        expect(payload.truncated).toBe(false);
-        expect(payload.sessions).toHaveLength(3);
-        expect(payload.totalSessions).toBe(3);
-    });
-    it("reads transcript bodies ONLY for sessions it will publish", async () => {
-        // The enumerator statted every file AND did a 16 KiB bounded read on each,
-        // before anything was filtered. On the first real box that was 9,340 reads
-        // per tick, every 5 seconds — ~150 MB of disk for 15 useful records, on
-        // the exact resource that had already taken the machine down once.
-        const reads = [];
-        const base = claudeTreeFs(500, (i) => (i < 5 ? 2 : 60 * 60 * 24 * 30));
-        const fs = {
-            ...base,
-            async readBounded(path, maxBytes, from) {
-                reads.push(path);
-                return base.readBounded(path, maxBytes, from);
-            },
-        };
-        const payload = await collectSessions(config, { fs });
-        expect(payload.sessions).toHaveLength(5);
-        // Five live sessions ⇒ five reads, not five hundred.
-        expect(reads).toHaveLength(5);
-    });
-    it("keeps the MOST RECENTLY ACTIVE sessions when it has to choose", async () => {
-        // Index 0 is freshest, index N oldest — all still within `idle`.
-        const fs = claudeTreeFs(5000, (i) => 1 + i * (1 / 10));
-        const payload = await collectSessions(config, { fs });
-        expect(payload.truncated).toBe(true);
-        // Dropping the newest and keeping stale ones would make the live view
-        // wrong in the one way that matters.
-        const kept = payload.sessions
-            .map((s) => Date.parse(s.lastActivityAt))
-            .sort((a, b) => a - b);
-        const oldestKept = kept[0];
-        const cutoff = NOW_MS - DEFAULT_LIVENESS_THRESHOLDS.idleWithinSeconds * 1000;
-        expect(oldestKept).toBeGreaterThan(cutoff);
-        // The single freshest session must always survive.
-        expect(Math.max(...kept)).toBe(NOW_MS - 1000);
-    });
-});
-//# sourceMappingURL=session-heartbeat-bounds.test.js.map

package/dist/outposts/session-heartbeat-bounds.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-bounds.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-bounds.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,EACxB,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;AAE7B;;;GAGG;AACH,SAAS,YAAY,CACnB,KAAa,EACb,aAAoC;IAEpC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,oCAAoC,CACzE,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAExD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAY;YACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;gBACzD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC1B,IAAI;oBACJ,WAAW,EAAE,KAAK;oBAClB,MAAM,EAAE,IAAI;iBACb,CAAC,CAAC,CAAC;YACN,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAY;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,KAAK,CAAC,WAAW;YACf,mEAAmE;YACnE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,GAAG,EAAE,wDAAwD;gBAC7D,KAAK,EAAE,iBAAiB;aACzB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;AAEnF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,yEAAyE;QACzE,yCAAyC;QACzC,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,mEAAmE;QACnE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,6EAA6E;QAC7E,6EAA6E;QAC7E,2EAA2E;QAC3E,6BAA6B;QAC7B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,0CAA0C;QAC1C,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,wEAAwE;QACxE,yBAAyB;QACzB,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjE,MAAM,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,0EAA0E;QAC1E,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,EAAE,GAAmB;YACzB,GAAG,IAAI;YACP,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI;gBACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;SACF,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,qDAAqD;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,iEAAiE;QACjE,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAEvD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,sEAAsE;QACtE,qCAAqC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ;aAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAe,CAAC,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QAC5B,MAAM,MAAM,GACV,MAAM,GAAG,2BAA2B,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChE,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,mDAAmD;QACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/outposts/session-heartbeat-guard.test.d.ts

@@ -1,16 +0,0 @@
-/**
- * The no-secrets guard must catch credentials WITHOUT catching ordinary paths.
- *
- * Both halves matter equally, and the second is easy to get wrong. The guard
- * throws, and a throw fails the whole tick — so a pattern that matches a
- * legitimate directory name silently disables reporting for the entire box
- * until that session ages out.
- *
- * The original marker list held `sk-` and `asia` as bare substrings. `sk-`
- * matches `task-runner`, `flask-app`, `disk-usage`, `risk-model`. Anyone who
- * created a repo with one of those names would have taken the heartbeat down
- * across the box, with the service still reporting active — the exact failure
- * shape this whole change exists to remove.
- */
-export {};
-//# sourceMappingURL=session-heartbeat-guard.test.d.ts.map

package/dist/outposts/session-heartbeat-guard.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-guard.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/outposts/session-heartbeat-guard.test.js

@@ -1,88 +0,0 @@
-/**
- * The no-secrets guard must catch credentials WITHOUT catching ordinary paths.
- *
- * Both halves matter equally, and the second is easy to get wrong. The guard
- * throws, and a throw fails the whole tick — so a pattern that matches a
- * legitimate directory name silently disables reporting for the entire box
- * until that session ages out.
- *
- * The original marker list held `sk-` and `asia` as bare substrings. `sk-`
- * matches `task-runner`, `flask-app`, `disk-usage`, `risk-model`. Anyone who
- * created a repo with one of those names would have taken the heartbeat down
- * across the box, with the service still reporting active — the exact failure
- * shape this whole change exists to remove.
- */
-import { describe, expect, it } from "vitest";
-import { assertNoSecretsInPayload, } from "./session-heartbeat.js";
-function payloadWith(over) {
-    const session = {
-        id: "aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee",
-        tool: "claude",
-        origin: "outpost",
-        cwd: "/home/ec2-user/hq",
-        project: "hq",
-        company: null,
-        model: "claude-opus-4-8",
-        status: "running",
-        startedAt: "2026-07-29T12:00:00.000Z",
-        lastActivityAt: "2026-07-29T12:00:00.000Z",
-        source: "/home/ec2-user/.claude/projects/-home-ec2-user-hq/x.jsonl",
-        ...over,
-    };
-    return {
-        type: "sessions",
-        origin: "outpost",
-        emittedAt: "2026-07-29T12:00:00.000Z",
-        sessions: [session],
-    };
-}
-describe("ordinary paths must never trip the guard", () => {
-    // Every one of these contains `sk-` or `asia` and would have thrown before.
-    const innocentPaths = [
-        "/home/ec2-user/hq/repos/private/task-runner",
-        "/home/ec2-user/hq/repos/public/flask-app",
-        "/home/ec2-user/hq/tools/disk-usage",
-        "/home/ec2-user/hq/models/risk-model",
-        "/home/ec2-user/hq/regions/asia-pacific",
-        "/home/ec2-user/hq/repos/private/password-manager",
-        "/home/ec2-user/hq/kiosk-display",
-    ];
-    for (const cwd of innocentPaths) {
-        it(`allows ${cwd.split("/").pop()}`, () => {
-            const project = cwd.split("/").pop();
-            expect(() => assertNoSecretsInPayload(payloadWith({ cwd, project, source: `${cwd}/s.jsonl` }))).not.toThrow();
-        });
-    }
-    it("allows a model id that merely starts with the letters sk", () => {
-        expect(() => assertNoSecretsInPayload(payloadWith({ model: "sk-lite-preview" }))).not.toThrow();
-    });
-});
-describe("real credentials must still be caught", () => {
-    const leaks = [
-        ["an Anthropic key", { model: "sk-ant-api03-AbCdEfGhIjKlMnOpQrStUv" }],
-        ["an OpenAI-style key", { model: "sk-AbCdEfGhIjKlMnOpQrStUvWxYz012345" }],
-        ["a long-lived AWS key id", { project: "AKIAIOSFODNN7EXAMPLE" }],
-        ["an STS temp key id", { project: "ASIAIOSFODNN7EXAMPLE" }],
-        ["a PEM private key", { cwd: "-----BEGIN RSA PRIVATE KEY-----" }],
-        ["an authorization header", { model: "authorization: xyz" }],
-        ["a bearer token", { model: "Bearer abcdefghijklmnop0123" }],
-        ["an instance token header", { project: "x-outpost-instance-token" }],
-        ["a refresh token field", { model: 'refresh_token="abc"' }],
-        ["a password field", { model: "password=hunter2" }],
-        ["a secret access key", { project: "secretaccesskey" }],
-        ["a session token", { project: "sessiontoken" }],
-    ];
-    for (const [what, over] of leaks) {
-        it(`rejects ${what}`, () => {
-            expect(() => assertNoSecretsInPayload(payloadWith(over))).toThrow(/refusing to publish/);
-        });
-    }
-});
-describe("non-whitelisted fields are still rejected", () => {
-    it("refuses a payload carrying an extra field", () => {
-        const p = payloadWith({});
-        p.sessions[0].transcript = "secret";
-        expect(() => assertNoSecretsInPayload(p)).toThrow(/non-whitelisted/);
-    });
-});
-//# sourceMappingURL=session-heartbeat-guard.test.js.map

package/dist/outposts/session-heartbeat-guard.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-guard.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,wBAAwB,GAGzB,MAAM,wBAAwB,CAAC;AAEhC,SAAS,WAAW,CAAC,IAA2B;IAC9C,MAAM,OAAO,GAAiB;QAC5B,EAAE,EAAE,sCAAsC;QAC1C,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,SAAS;QACjB,GAAG,EAAE,mBAAmB;QACxB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,0BAA0B;QACrC,cAAc,EAAE,0BAA0B;QAC1C,MAAM,EAAE,2DAA2D;QACnE,GAAG,IAAI;KACR,CAAC;IACF,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,0BAA0B;QACrC,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,4EAA4E;IAC5E,MAAM,aAAa,GAAG;QACpB,6CAA6C;QAC7C,0CAA0C;QAC1C,oCAAoC;QACpC,qCAAqC;QACrC,wCAAwC;QACxC,kDAAkD;QAClD,iCAAiC;KAClC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,EAAE,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC;YACtC,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,UAAU,EAAE,CAAC,CAAC,CAClF,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CACpE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,MAAM,KAAK,GAAsC;QAC/C,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACtE,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACzE,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAChE,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;QAC3D,CAAC,mBAAmB,EAAE,EAAE,GAAG,EAAE,iCAAiC,EAAE,CAAC;QACjE,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QAC5D,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAC5D,CAAC,0BAA0B,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QACrE,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;QAC3D,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACnD,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QACvD,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACjD,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,EAAE,CAAC,WAAW,IAAI,EAAE,EAAE,GAAG,EAAE;YACzB,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAC/D,qBAAqB,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAwC,CAAC,UAAU,GAAG,QAAQ,CAAC;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/outposts/session-heartbeat-publisher.test.d.ts

@@ -1,10 +0,0 @@
-/**
- * Tests for the on-box realtime publisher (mission-control US-009):
- *   - defaultRealtimeCredentialsFetcher POSTs the box's JWT to
- *     /v1/realtime/credentials and parses the response
- *   - createIotPublishPort vends scoped creds, builds an IoT client, publishes
- *     to the caller's topic, caches the client until near-expiry, and re-guards
- *     the no-secrets contract at the transport boundary
- */
-export {};
-//# sourceMappingURL=session-heartbeat-publisher.test.d.ts.map

package/dist/outposts/session-heartbeat-publisher.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-publisher.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-publisher.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/outposts/session-heartbeat-publisher.test.js

@@ -1,153 +0,0 @@
-/**
- * Tests for the on-box realtime publisher (mission-control US-009):
- *   - defaultRealtimeCredentialsFetcher POSTs the box's JWT to
- *     /v1/realtime/credentials and parses the response
- *   - createIotPublishPort vends scoped creds, builds an IoT client, publishes
- *     to the caller's topic, caches the client until near-expiry, and re-guards
- *     the no-secrets contract at the transport boundary
- */
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { mockClient } from "aws-sdk-client-mock";
-import { IoTDataPlaneClient, PublishCommand, } from "@aws-sdk/client-iot-data-plane";
-import { createIotPublishPort, defaultRealtimeCredentialsFetcher, } from "./session-heartbeat-publisher";
-const PERSON = "prs_alice";
-const TOPIC = `hq/${PERSON}/sessions`;
-const NOW = new Date("2026-06-15T18:55:00.000Z");
-function credsResponse(expiresInMs) {
-    return {
-        credentials: {
-            accessKeyId: "ASIAEXAMPLE",
-            secretAccessKey: "secret",
-            sessionToken: "token",
-            expiration: new Date(NOW.getTime() + expiresInMs).toISOString(),
-        },
-        iotEndpoint: "abc123-ats.iot.us-east-1.amazonaws.com",
-        region: "us-east-1",
-        topic: TOPIC,
-        expiresAt: new Date(NOW.getTime() + expiresInMs).toISOString(),
-    };
-}
-function cleanPayload() {
-    return {
-        type: "sessions",
-        origin: "outpost",
-        emittedAt: NOW.toISOString(),
-        sessions: [
-            {
-                id: "x",
-                tool: "claude",
-                origin: "outpost",
-                cwd: "/home/ec2-user/hq",
-                project: "hq",
-                company: null,
-                model: "claude-opus-4",
-                status: "running",
-                startedAt: null,
-                lastActivityAt: NOW.toISOString(),
-                source: "/home/ec2-user/.claude/projects/p/x.jsonl",
-            },
-        ],
-    };
-}
-describe("defaultRealtimeCredentialsFetcher", () => {
-    it("POSTs the JWT to /v1/realtime/credentials and returns the parsed body", async () => {
-        const body = credsResponse(3_600_000);
-        const fetchImpl = vi.fn().mockResolvedValue({
-            ok: true,
-            status: 200,
-            statusText: "OK",
-            json: async () => body,
-        });
-        const fetcher = defaultRealtimeCredentialsFetcher({
-            apiBaseUrl: "https://hqapi.hq.computer",
-            getJwt: async () => "JWT123",
-            fetchImpl: fetchImpl,
-        });
-        const out = await fetcher();
-        expect(out).toEqual(body);
-        const [url, init] = fetchImpl.mock.calls[0];
-        expect(url).toBe("https://hqapi.hq.computer/v1/realtime/credentials");
-        expect(init.method).toBe("POST");
-        expect(init.headers.authorization).toBe("Bearer JWT123");
-    });
-    it("throws on a non-ok response", async () => {
-        const fetchImpl = vi.fn().mockResolvedValue({
-            ok: false,
-            status: 403,
-            statusText: "Forbidden",
-            json: async () => ({}),
-        });
-        const fetcher = defaultRealtimeCredentialsFetcher({
-            apiBaseUrl: "https://hqapi.hq.computer",
-            getJwt: async () => "JWT",
-            fetchImpl: fetchImpl,
-        });
-        await expect(fetcher()).rejects.toThrow(/403/);
-    });
-});
-describe("createIotPublishPort", () => {
-    const iotMock = mockClient(IoTDataPlaneClient);
-    beforeEach(() => iotMock.reset());
-    it("publishes the payload to the caller's topic via IoT", async () => {
-        iotMock.on(PublishCommand).resolves({});
-        const fetchCredentials = vi.fn().mockResolvedValue(credsResponse(3_600_000));
-        const publish = createIotPublishPort({
-            fetchCredentials,
-            makeClient: () => iotMock,
-            now: () => NOW,
-        });
-        const payload = cleanPayload();
-        await publish(TOPIC, payload);
-        const call = iotMock.commandCalls(PublishCommand)[0];
-        expect(call.args[0].input.topic).toBe(TOPIC);
-        const sent = JSON.parse(Buffer.from(call.args[0].input.payload).toString("utf8"));
-        expect(sent.type).toBe("sessions");
-        expect(sent.sessions[0].id).toBe("x");
-    });
-    it("caches the vended creds/client until near expiry, then re-vends", async () => {
-        iotMock.on(PublishCommand).resolves({});
-        const fetchCredentials = vi
-            .fn()
-            .mockResolvedValueOnce(credsResponse(3_600_000))
-            .mockResolvedValueOnce(credsResponse(3_600_000));
-        const publish = createIotPublishPort({
-            fetchCredentials,
-            makeClient: () => iotMock,
-            now: () => NOW,
-        });
-        await publish(TOPIC, cleanPayload());
-        await publish(TOPIC, cleanPayload());
-        // Second publish reuses the cached client — creds vended once.
-        expect(fetchCredentials).toHaveBeenCalledTimes(1);
-    });
-    it("re-vends when the cached creds are within the refresh skew of expiry", async () => {
-        iotMock.on(PublishCommand).resolves({});
-        const fetchCredentials = vi
-            .fn()
-            // expires in 30s — inside the 60s refresh skew, so every call re-vends
-            .mockResolvedValue(credsResponse(30_000));
-        const publish = createIotPublishPort({
-            fetchCredentials,
-            makeClient: () => iotMock,
-            now: () => NOW,
-        });
-        await publish(TOPIC, cleanPayload());
-        await publish(TOPIC, cleanPayload());
-        expect(fetchCredentials).toHaveBeenCalledTimes(2);
-    });
-    it("re-guards the no-secrets contract at the transport boundary", async () => {
-        iotMock.on(PublishCommand).resolves({});
-        const fetchCredentials = vi.fn().mockResolvedValue(credsResponse(3_600_000));
-        const publish = createIotPublishPort({
-            fetchCredentials,
-            makeClient: () => iotMock,
-            now: () => NOW,
-        });
-        const dirty = cleanPayload();
-        // Smuggle a secret into a whitelisted field — the publisher must refuse.
-        dirty.sessions[0].model = "sk-ant-leaked-key";
-        await expect(publish(TOPIC, dirty)).rejects.toThrow(/secret marker/);
-        expect(iotMock.commandCalls(PublishCommand)).toHaveLength(0);
-    });
-});
-//# sourceMappingURL=session-heartbeat-publisher.test.js.map

package/dist/outposts/session-heartbeat-publisher.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-publisher.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-publisher.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,EACpB,iCAAiC,GAElC,MAAM,+BAA+B,CAAC;AAGvC,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,WAAW,CAAC;AACtC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEjD,SAAS,aAAa,CACpB,WAAmB;IAEnB,OAAO;QACL,WAAW,EAAE;YACX,WAAW,EAAE,aAAa;YAC1B,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE;SAChE;QACD,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE;YACR;gBACE,EAAE,EAAE,GAAG;gBACP,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,mBAAmB;gBACxB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,GAAG,CAAC,WAAW,EAAE;gBACjC,MAAM,EAAE,2CAA2C;aACpD;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;SACX,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAChD,UAAU,EAAE,2BAA2B;YACvC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;YAC5B,SAAS,EAAE,SAAoC;SAChD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACX,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,iCAAiC,CAAC;YAChD,UAAU,EAAE,2BAA2B;YACvC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK;YACzB,SAAS,EAAE,SAAoC;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAElC,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE;aACxB,EAAE,EAAE;aACJ,qBAAqB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;aAC/C,qBAAqB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,+DAA+D;QAC/D,MAAM,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE;aACxB,EAAE,EAAE;YACL,uEAAuE;aACtE,iBAAiB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB;YAChB,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,yEAAyE;QACzE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,mBAAmB,CAAC;QAC9C,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/outposts/session-heartbeat-retain-guard.test.d.ts

@@ -1,18 +0,0 @@
-/**
- * company-work-corpus US-006 AC7 — no retained MQTT publishes for transcript
- * objects.
- *
- * Session transcripts are pulled on demand via the presign GET path (structural
- * owner+creator gate); they are NEVER pushed as message bodies over the realtime
- * fabric. The on-box sessions publisher emits only a COMPACT liveness heartbeat
- * (`SessionsHeartbeatPayload` — path-only session summaries, guarded by
- * `assertNoSecretsInPayload`), and it must publish NON-RETAINED so a stale
- * summary is never re-delivered from the broker to a late subscriber.
- *
- * This is a GUARD suite: it asserts the current (correct) behavior so a future
- * change that (a) turns on `retain` for the sessions topic, or (b) starts
- * shipping transcript/vault-file bytes over MQTT, fails loudly. No product code
- * change is expected from US-006 here.
- */
-export {};
-//# sourceMappingURL=session-heartbeat-retain-guard.test.d.ts.map

package/dist/outposts/session-heartbeat-retain-guard.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-retain-guard.test.d.ts","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-retain-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG"}

package/dist/outposts/session-heartbeat-retain-guard.test.js

@@ -1,106 +0,0 @@
-/**
- * company-work-corpus US-006 AC7 — no retained MQTT publishes for transcript
- * objects.
- *
- * Session transcripts are pulled on demand via the presign GET path (structural
- * owner+creator gate); they are NEVER pushed as message bodies over the realtime
- * fabric. The on-box sessions publisher emits only a COMPACT liveness heartbeat
- * (`SessionsHeartbeatPayload` — path-only session summaries, guarded by
- * `assertNoSecretsInPayload`), and it must publish NON-RETAINED so a stale
- * summary is never re-delivered from the broker to a late subscriber.
- *
- * This is a GUARD suite: it asserts the current (correct) behavior so a future
- * change that (a) turns on `retain` for the sessions topic, or (b) starts
- * shipping transcript/vault-file bytes over MQTT, fails loudly. No product code
- * change is expected from US-006 here.
- */
-import { beforeEach, describe, expect, it, vi } from "vitest";
-import { readFileSync } from "node:fs";
-import { mockClient } from "aws-sdk-client-mock";
-import { IoTDataPlaneClient, PublishCommand, } from "@aws-sdk/client-iot-data-plane";
-import { createIotPublishPort, } from "./session-heartbeat-publisher";
-const PERSON = "prs_alice";
-const TOPIC = `hq/${PERSON}/sessions`;
-const NOW = new Date("2026-07-11T18:55:00.000Z");
-function credsResponse() {
-    return {
-        credentials: {
-            accessKeyId: "ASIAEXAMPLE",
-            secretAccessKey: "secret",
-            sessionToken: "token",
-            expiration: new Date(NOW.getTime() + 3_600_000).toISOString(),
-        },
-        iotEndpoint: "abc123-ats.iot.us-east-1.amazonaws.com",
-        region: "us-east-1",
-        topic: TOPIC,
-        expiresAt: new Date(NOW.getTime() + 3_600_000).toISOString(),
-    };
-}
-function cleanPayload() {
-    return {
-        type: "sessions",
-        origin: "outpost",
-        emittedAt: NOW.toISOString(),
-        sessions: [
-            {
-                id: "x",
-                tool: "claude",
-                origin: "outpost",
-                cwd: "/home/ec2-user/hq",
-                project: "hq",
-                company: null,
-                model: "claude-opus-4",
-                status: "running",
-                startedAt: null,
-                lastActivityAt: NOW.toISOString(),
-                source: "/home/ec2-user/.claude/projects/p/x.jsonl",
-            },
-        ],
-    };
-}
-describe("US-006 AC7 — sessions heartbeat is published NON-RETAINED", () => {
-    const iotMock = mockClient(IoTDataPlaneClient);
-    beforeEach(() => iotMock.reset());
-    it("the PublishCommand never sets retain=true", async () => {
-        iotMock.on(PublishCommand).resolves({});
-        const publish = createIotPublishPort({
-            fetchCredentials: vi.fn().mockResolvedValue(credsResponse()),
-            makeClient: () => iotMock,
-            now: () => NOW,
-        });
-        await publish(TOPIC, cleanPayload());
-        const call = iotMock.commandCalls(PublishCommand)[0];
-        // retain must be absent or explicitly false — never true (no broker
-        // re-delivery of a stale session summary; transcripts are pull-only).
-        expect(call.args[0].input.retain).not.toBe(true);
-        // The wire body is the compact summary envelope — no transcript body field.
-        const sent = JSON.parse(Buffer.from(call.args[0].input.payload).toString("utf8"));
-        expect(sent.type).toBe("sessions");
-        // The session summary carries a `source` PATH only, never file/transcript
-        // content — assert no body/content/transcript key ever rides the wire.
-        for (const s of sent.sessions) {
-            expect(s).not.toHaveProperty("body");
-            expect(s).not.toHaveProperty("content");
-            expect(s).not.toHaveProperty("transcript");
-        }
-    });
-});
-describe("US-006 AC7 — static guard: sessions/realtime publishers never retain", () => {
-    // The sessions publisher is the ONLY realtime path in this package that
-    // touches session data, and it may never set retain=true — a retained
-    // message would leave the last session summary sitting on the broker after
-    // the box goes away. (The server-side DM-wake publisher is guarded by the
-    // matching test in hq-pro, which is where that file lives.)
-    const guardedSources = [
-        new URL("./session-heartbeat-publisher.ts", import.meta.url),
-        new URL("./session-heartbeat.ts", import.meta.url),
-    ];
-    it("no guarded publisher sets retain: true", () => {
-        for (const url of guardedSources) {
-            const src = readFileSync(url, "utf8");
-            // Tolerate any whitespace between `retain` and `true`.
-            expect(src).not.toMatch(/retain\s*:\s*true/);
-        }
-    });
-});
-//# sourceMappingURL=session-heartbeat-retain-guard.test.js.map

package/dist/outposts/session-heartbeat-retain-guard.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-heartbeat-retain-guard.test.js","sourceRoot":"","sources":["../../src/outposts/session-heartbeat-retain-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,kBAAkB,EAClB,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,oBAAoB,GAErB,MAAM,+BAA+B,CAAC;AAGvC,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,KAAK,GAAG,MAAM,MAAM,WAAW,CAAC;AACtC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEjD,SAAS,aAAa;IACpB,OAAO;QACL,WAAW,EAAE;YACX,WAAW,EAAE,aAAa;YAC1B,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE;SAC9D;QACD,WAAW,EAAE,wCAAwC;QACrD,MAAM,EAAE,WAAW;QACnB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,QAAQ,EAAE;YACR;gBACE,EAAE,EAAE,GAAG;gBACP,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,SAAS;gBACjB,GAAG,EAAE,mBAAmB;gBACxB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI;gBACf,cAAc,EAAE,GAAG,CAAC,WAAW,EAAE;gBACjC,MAAM,EAAE,2CAA2C;aACpD;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACzE,MAAM,OAAO,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC/C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAElC,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,oBAAoB,CAAC;YACnC,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;YAC5D,UAAU,EAAE,GAAG,EAAE,CAAC,OAAwC;YAC1D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;SACf,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,4EAA4E;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGvE,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,0EAA0E;QAC1E,uEAAuE;QACvE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,wEAAwE;IACxE,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,cAAc,GAAG;QACrB,IAAI,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5D,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;KACnD,CAAC;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,uDAAuD;YACvD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}