@indigoai-us/hq-cloud 6.18.44-alpha.9 → 6.18.44

package/dist/company-slug.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"company-slug.test.d.ts","sourceRoot":"","sources":["../src/company-slug.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/company-slug.test.js

@@ -1,43 +0,0 @@
-/**
- * The company-slug rule guards a TENANT BOUNDARY, so it is tested here — at
- * its single definition — rather than incidentally through each of its two
- * callers (`manifest-reconcile.ts` and `manifest/build-manifest.ts`).
- */
-import * as path from "node:path";
-import { describe, expect, it } from "vitest";
-import { isSafeCompanySlug } from "./company-slug.js";
-const COMPANIES = path.join(path.sep === "\\" ? "C:\\hq" : "/hq", "companies");
-describe("isSafeCompanySlug", () => {
-    it("accepts an ordinary direct-child slug", () => {
-        expect(isSafeCompanySlug(COMPANIES, "acme")).toBe(true);
-        expect(isSafeCompanySlug(COMPANIES, "acme-corp.eu")).toBe(true);
-        expect(isSafeCompanySlug(COMPANIES, "café")).toBe(true);
-    });
-    it("rejects traversal out of companies/", () => {
-        // The failure this exists to prevent: `../personal` would walk the HQ root
-        // and upload it under another tenant's companyUid.
-        expect(isSafeCompanySlug(COMPANIES, "..")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, "../personal")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, "..\\personal")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, ".")).toBe(false);
-    });
-    it("rejects any slug that is not a single path segment", () => {
-        expect(isSafeCompanySlug(COMPANIES, "acme/knowledge")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, "acme\\knowledge")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, "/acme")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, "")).toBe(false);
-    });
-    it("rejects prototype-chain keys", () => {
-        // Legal directory names, poisonous as record keys — `__proto__` never
-        // becomes an own property, so it read back as perpetual manifest drift.
-        expect(isSafeCompanySlug(COMPANIES, "__proto__")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, "constructor")).toBe(false);
-        expect(isSafeCompanySlug(COMPANIES, "prototype")).toBe(false);
-    });
-    it("does not require the directory to exist", () => {
-        // Existence is an eligibility concern owned by each caller; conflating the
-        // two would make a brand-new company scope unbuildable.
-        expect(isSafeCompanySlug(COMPANIES, "not-on-this-disk")).toBe(true);
-    });
-});
-//# sourceMappingURL=company-slug.test.js.map

package/dist/company-slug.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"company-slug.test.js","sourceRoot":"","sources":["../src/company-slug.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAE/E,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,2EAA2E;QAC3E,mDAAmD;QACnD,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/company-vault-transport.test.d.ts

@@ -1,12 +0,0 @@
-/**
- * Unit tests for ensureCompanyVaultTransport (Sentry hq-cli 7711917661).
- *
- * The helper is the single place the company-vault transport is chosen. Two
- * things must always be derived from ONE value: the installed ObjectIO factory
- * and the `companyVaultUsesPresign` vend-skip flag. And it must be a strict
- * no-op once a decision has already been made — that is what keeps the
- * sync-runner's path unchanged when the same config re-enters through
- * share()/sync().
- */
-export {};
-//# sourceMappingURL=company-vault-transport.test.d.ts.map

package/dist/company-vault-transport.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"company-vault-transport.test.d.ts","sourceRoot":"","sources":["../src/company-vault-transport.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/company-vault-transport.test.js

@@ -1,97 +0,0 @@
-/**
- * Unit tests for ensureCompanyVaultTransport (Sentry hq-cli 7711917661).
- *
- * The helper is the single place the company-vault transport is chosen. Two
- * things must always be derived from ONE value: the installed ObjectIO factory
- * and the `companyVaultUsesPresign` vend-skip flag. And it must be a strict
- * no-op once a decision has already been made — that is what keeps the
- * sync-runner's path unchanged when the same config re-enters through
- * share()/sync().
- */
-import { describe, it, expect, afterEach, vi } from "vitest";
-import { ensureCompanyVaultTransport, selectObjectIOFactory, } from "./company-vault-transport.js";
-import { PresignObjectIO, S3SdkObjectIO, resolveObjectIO, setObjectIOFactory, } from "./object-io.js";
-import { clearContextCache } from "./context.js";
-const presignCapable = {
-    presign: () => Promise.resolve({ results: [], expiresAt: "" }),
-    listFiles: () => Promise.resolve({ objects: [], cursor: null, truncated: false }),
-};
-function ctx(uid) {
-    return {
-        uid,
-        slug: uid,
-        bucketName: `bucket-${uid}`,
-        region: "us-east-1",
-        credentials: {
-            accessKeyId: "AKIA",
-            secretAccessKey: "secret",
-            sessionToken: "token",
-        },
-        expiresAt: "2099-01-01T00:00:00Z",
-    };
-}
-function baseConfig() {
-    return { apiUrl: "https://vault-api.test", authToken: "t", region: "us-east-1" };
-}
-afterEach(() => {
-    setObjectIOFactory(null);
-    clearContextCache();
-});
-describe("ensureCompanyVaultTransport", () => {
-    it("installs the presign transport and sets the flag true for a presign-capable client", () => {
-        const config = baseConfig();
-        ensureCompanyVaultTransport(config, { createClient: () => presignCapable });
-        expect(config.companyVaultUsesPresign).toBe(true);
-        // The installed factory routes company vaults to presign and personal vaults
-        // to direct-S3 — the personal-vault invariant must not be widened away.
-        expect(resolveObjectIO(ctx("cmp_acme"))).toBeInstanceOf(PresignObjectIO);
-        expect(resolveObjectIO(ctx("prs_me"))).toBeInstanceOf(S3SdkObjectIO);
-    });
-    it("keeps cmp_ on the STS path and sets the flag false for a pre-presign client", () => {
-        const config = baseConfig();
-        // A client lacking presign/listFiles → selectObjectIOFactory returns null →
-        // the refresher-aware S3 SDK fallback is installed and cmp_ must keep vending.
-        ensureCompanyVaultTransport(config, { createClient: () => ({}) });
-        expect(config.companyVaultUsesPresign).toBe(false);
-        expect(resolveObjectIO(ctx("cmp_acme"))).toBeInstanceOf(S3SdkObjectIO);
-    });
-    it("is a strict no-op when companyVaultUsesPresign is already true", () => {
-        const config = {
-            ...baseConfig(),
-            companyVaultUsesPresign: true,
-        };
-        const createClient = vi.fn(() => presignCapable);
-        ensureCompanyVaultTransport(config, { createClient });
-        // No decision is re-made: the client is never built (so no factory installed)
-        // and the flag is untouched. This is what makes the runner's nested
-        // share()/sync() calls no-ops.
-        expect(createClient).not.toHaveBeenCalled();
-        expect(config.companyVaultUsesPresign).toBe(true);
-    });
-    it("is a strict no-op when companyVaultUsesPresign is already false", () => {
-        const config = {
-            ...baseConfig(),
-            companyVaultUsesPresign: false,
-        };
-        const createClient = vi.fn(() => presignCapable);
-        ensureCompanyVaultTransport(config, { createClient });
-        // The explicit `false` a pre-presign runner produces must survive: cmp_ stays
-        // on the STS path.
-        expect(createClient).not.toHaveBeenCalled();
-        expect(config.companyVaultUsesPresign).toBe(false);
-    });
-});
-describe("selectObjectIOFactory (re-exported from the neutral module)", () => {
-    it("routes cmp_ to presign and prs_ to direct-S3", () => {
-        const factory = selectObjectIOFactory(presignCapable);
-        expect(factory).not.toBeNull();
-        expect(factory(ctx("cmp_acme"))).toBeInstanceOf(PresignObjectIO);
-        expect(factory(ctx("prs_me"))).toBeInstanceOf(S3SdkObjectIO);
-    });
-    it("returns null when the client predates presign", () => {
-        expect(selectObjectIOFactory({})).toBeNull();
-        expect(selectObjectIOFactory({ presign: presignCapable.presign })).toBeNull();
-        expect(selectObjectIOFactory({ listFiles: presignCapable.listFiles })).toBeNull();
-    });
-});
-//# sourceMappingURL=company-vault-transport.test.js.map

package/dist/company-vault-transport.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"company-vault-transport.test.js","sourceRoot":"","sources":["../src/company-vault-transport.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,eAAe,EACf,aAAa,EACb,eAAe,EACf,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,MAAM,cAAc,GAAoC;IACtD,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC9D,SAAS,EAAE,GAAG,EAAE,CACd,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;CACnE,CAAC;AAEF,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO;QACL,GAAG;QACH,IAAI,EAAE,GAAG;QACT,UAAU,EAAE,UAAU,GAAG,EAAE;QAC3B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE;YACX,WAAW,EAAE,MAAM;YACnB,eAAe,EAAE,QAAQ;YACzB,YAAY,EAAE,OAAO;SACtB;QACD,SAAS,EAAE,sBAAsB;KACN,CAAC;AAChC,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,iBAAiB,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,2BAA2B,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;QAE5E,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,6EAA6E;QAC7E,wEAAwE;QACxE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QACzE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,4EAA4E;QAC5E,+EAA+E;QAC/E,2BAA2B,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAuB;YACjC,GAAG,UAAU,EAAE;YACf,uBAAuB,EAAE,IAAI;SAC9B,CAAC;QACF,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;QAEjD,2BAA2B,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAEtD,8EAA8E;QAC9E,oEAAoE;QACpE,+BAA+B;QAC/B,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAuB;YACjC,GAAG,UAAU,EAAE;YACf,uBAAuB,EAAE,KAAK;SAC/B,CAAC;QACF,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;QAEjD,2BAA2B,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAEtD,8EAA8E;QAC9E,mBAAmB;QACnB,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6DAA6D,EAAE,GAAG,EAAE;IAC3E,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,OAAO,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAClE,MAAM,CAAC,OAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9E,MAAM,CACJ,qBAAqB,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,SAAS,EAAE,CAAC,CAC/D,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/context.test.d.ts

@@ -1,7 +0,0 @@
-/**
- * Unit tests for context.ts — entity context resolution (VLT-5 US-001).
- *
- * Uses a mock fetch to simulate vault-service API responses.
- */
-export {};
-//# sourceMappingURL=context.test.d.ts.map

package/dist/context.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"context.test.d.ts","sourceRoot":"","sources":["../src/context.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}