@indigoai-us/hq-cloud 6.2.7 → 6.3.1

package/dist/sync/event-sync.js

@@ -0,0 +1,316 @@
+/**
+ * Event-driven sync wiring — Phase 3 of event-driven-sync-menubar
+ * (US-017 publish / US-018 receive / US-019 rollout gate).
+ *
+ * Phases 1–2 built every piece but left them unconnected: the watcher runs
+ * targeted *push passes* (S3 upload) but never publishes a PushEvent, and the
+ * runner's receiver seam defaults to {@link NoopPushReceiver}. This module is
+ * the connective tissue that turns both on for enrolled accounts:
+ *
+ *  - {@link resolveEventSync} — the rollout gate. EXACT-email allowlist
+ *    (mirrors `resolvePresignTransport`'s shape in sync-runner.ts, but full
+ *    address, not domain suffix) + `HQ_SYNC_EVENT_SYNC` env override in both
+ *    directions. ONE gate governs publish AND receive so a device is never
+ *    publish-only or receive-only in a half-rolled state.
+ *  - {@link subscribeSyncReceive} — `POST /v1/sync/subscribe` (US-015/US-016):
+ *    mints the per-device queue and returns `{queueUrl, region, credentials}`,
+ *    where `credentials` are short-lived STS creds scoped to receive/delete on
+ *    exactly that queue.
+ *  - {@link sqsClientFromAwsSdk} — the doc-promised thin adapter from the AWS
+ *    SDK `SQSClient` to the receiver's narrow {@link SqsClientLike} seam.
+ *  - {@link createRefreshingSqsClient} — wraps the adapter with credential
+ *    lifecycle: proactive re-vend before expiry (skew window) + one reactive
+ *    retry on an expiry-class error. The queue URL is stable across re-vends
+ *    (same device → same queue, idempotent endpoint); only creds rotate.
+ *  - {@link startEventSync} — the wiring entry the runner calls from the
+ *    `--event-push` watch block when the gate is ON. Resolves tenant + device
+ *    identity, builds the {@link HttpPushTransport} + {@link PushEventEmitter}
+ *    (publish leg) and the {@link SqsPushReceiver} (receive leg, self-echo
+ *    filtered), and returns handles. Any startup failure degrades to
+ *    poll-only — it NEVER takes the daemon down.
+ *
+ * The 10-minute `--poll-remote-ms` pass remains the correctness backstop for
+ * every path here; event delivery is best-effort by design.
+ */
+import { SQSClient, ReceiveMessageCommand, DeleteMessageCommand, } from "@aws-sdk/client-sqs";
+import { HttpPushTransport } from "./push-transport.js";
+import { SqsPushReceiver, } from "./push-receiver.js";
+import { PushEventEmitter } from "../watcher.js";
+// ─── US-019: rollout gate ───────────────────────────────────────────────────
+/**
+ * Accounts enrolled in event-driven sync (publish + receive).
+ *
+ * EXACT full-address matching, case-insensitive — NOT a domain suffix. The
+ * single-account Phase 3 rollout (2026-06-10) targets the operator's own
+ * devices; `xhassaan@getindigo.ai` and `hassaan@getindigo.ai.evil.com` must
+ * never match. Broadening later is an entry here (or a domain-set like
+ * `PRESIGN_ROLLOUT_DOMAINS` once GA'd).
+ */
+export const EVENT_SYNC_ROLLOUT_EMAILS = new Set([
+    "hassaan@getindigo.ai",
+]);
+/**
+ * Decide whether this session runs event-driven sync (publish + receive).
+ *
+ * Mirrors `resolvePresignTransport` precedence: `HQ_SYNC_EVENT_SYNC`
+ * overrides in both directions (`1`/`true`/`yes`/`on` → force on,
+ * `0`/`false`/`no`/`off` → force off) so unenrolled testers can exercise it
+ * and enrolled accounts can be rolled back without a release. An unset/blank
+ * override falls through to the exact-email check; an unrecognized override
+ * value is ignored (email check wins).
+ */
+export function resolveEventSync(email, override) {
+    const o = (override ?? "").trim().toLowerCase();
+    if (o === "1" || o === "true" || o === "yes" || o === "on")
+        return true;
+    if (o === "0" || o === "false" || o === "no" || o === "off")
+        return false;
+    if (typeof email !== "string")
+        return false;
+    return EVENT_SYNC_ROLLOUT_EMAILS.has(email.trim().toLowerCase());
+}
+function asNonEmptyString(v, field) {
+    if (typeof v !== "string" || v.length === 0) {
+        throw new Error(`subscribeSyncReceive: response missing ${field}`);
+    }
+    return v;
+}
+/**
+ * `POST /v1/sync/subscribe` — provision (idempotently) this device's queue
+ * and vend fresh receive credentials. Auth mirrors HttpPushTransport: Bearer
+ * token resolved per-call via the supplied source.
+ */
+export async function subscribeSyncReceive(opts) {
+    const apiUrl = opts.apiUrl.replace(/\/+$/, "");
+    const tok = opts.authToken;
+    const token = typeof tok === "function" ? await tok() : tok;
+    const fetchImpl = opts.fetchImpl ??
+        ((input, init) => globalThis.fetch(input, init));
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), opts.timeoutMs ?? 15_000);
+    let res;
+    try {
+        res = await fetchImpl(`${apiUrl}/v1/sync/subscribe`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({ deviceId: opts.deviceId }),
+            signal: controller.signal,
+        });
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`subscribeSyncReceive: POST /v1/sync/subscribe failed (${res.status}): ${text.slice(0, 300)}`);
+    }
+    const parsed = JSON.parse(await res.text());
+    const obj = parsed;
+    const creds = (obj.credentials ?? {});
+    return {
+        queueUrl: asNonEmptyString(obj.queueUrl, "queueUrl"),
+        region: asNonEmptyString(obj.region, "region"),
+        credentials: {
+            accessKeyId: asNonEmptyString(creds.accessKeyId, "credentials.accessKeyId"),
+            secretAccessKey: asNonEmptyString(creds.secretAccessKey, "credentials.secretAccessKey"),
+            sessionToken: asNonEmptyString(creds.sessionToken, "credentials.sessionToken"),
+            expiration: asNonEmptyString(creds.expiration, "credentials.expiration"),
+        },
+    };
+}
+// ─── SQS SDK adapter ────────────────────────────────────────────────────────
+/**
+ * Adapt the AWS SDK `SQSClient` to the receiver's narrow {@link SqsClientLike}
+ * seam (the doc-promised `sqsClientFromAwsSdk` from push-receiver.ts). The
+ * abort signal is forwarded so `dispose()` can cut a 20s long-poll short.
+ */
+export function sqsClientFromAwsSdk(client) {
+    return {
+        async receiveMessage({ queueUrl, maxMessages, waitTimeSeconds, signal }) {
+            const out = await client.send(new ReceiveMessageCommand({
+                QueueUrl: queueUrl,
+                MaxNumberOfMessages: maxMessages,
+                WaitTimeSeconds: waitTimeSeconds,
+            }), { abortSignal: signal });
+            return {
+                messages: (out.Messages ?? []).map((m) => ({
+                    Body: m.Body,
+                    ReceiptHandle: m.ReceiptHandle,
+                    MessageId: m.MessageId,
+                })),
+            };
+        },
+        async deleteMessage({ queueUrl, receiptHandle }) {
+            await client.send(new DeleteMessageCommand({
+                QueueUrl: queueUrl,
+                ReceiptHandle: receiptHandle,
+            }));
+        },
+    };
+}
+// ─── Refreshing SQS client (credential lifecycle) ───────────────────────────
+/**
+ * Error names the SQS SDK surfaces when STS session creds have expired or
+ * become invalid. Used for the reactive retry-once path; the proactive
+ * skew-window refresh below should make these rare.
+ */
+const EXPIRY_ERROR_NAMES = new Set([
+    "ExpiredToken",
+    "ExpiredTokenException",
+    "InvalidSecurityToken",
+    "InvalidClientTokenId",
+    "UnrecognizedClientException",
+]);
+function isExpiryError(err) {
+    return err instanceof Error && EXPIRY_ERROR_NAMES.has(err.name);
+}
+/** Re-vend this long before the recorded expiry (proactive refresh window). */
+const REFRESH_SKEW_MS = 120_000;
+function defaultBuildSqs(resp) {
+    return sqsClientFromAwsSdk(new SQSClient({
+        region: resp.region,
+        credentials: {
+            accessKeyId: resp.credentials.accessKeyId,
+            secretAccessKey: resp.credentials.secretAccessKey,
+            sessionToken: resp.credentials.sessionToken,
+            expiration: new Date(resp.credentials.expiration),
+        },
+    }));
+}
+/**
+ * An {@link SqsClientLike} that owns the vended-credential lifecycle:
+ *
+ *  - PROACTIVE: before each call, if the recorded expiry is within the skew
+ *    window, re-subscribe (re-vend) and rebuild the inner client first.
+ *  - REACTIVE: if a call still fails with an expiry-class error (clock skew,
+ *    revocation), re-vend once and retry the call once. Anything else — or a
+ *    second failure — propagates to the receiver's own backoff/reconnect
+ *    loop, whose retention-backed redelivery makes the miss recoverable.
+ *
+ * Concurrent refreshes collapse onto one in-flight subscribe promise.
+ */
+export function createRefreshingSqsClient(opts) {
+    const now = opts.now ?? (() => Date.now());
+    const buildSqs = opts.buildSqs ?? defaultBuildSqs;
+    let inner = buildSqs(opts.initial);
+    let expiresAtMs = Date.parse(opts.initial.credentials.expiration);
+    let refreshing = null;
+    const refresh = () => {
+        refreshing ??= (async () => {
+            try {
+                const resp = await opts.subscribe();
+                inner = buildSqs(resp);
+                expiresAtMs = Date.parse(resp.credentials.expiration);
+            }
+            finally {
+                refreshing = null;
+            }
+        })();
+        return refreshing;
+    };
+    const ensureFresh = async () => {
+        if (Number.isFinite(expiresAtMs) && now() >= expiresAtMs - REFRESH_SKEW_MS) {
+            await refresh();
+        }
+    };
+    const withRetry = async (call) => {
+        await ensureFresh();
+        try {
+            return await call();
+        }
+        catch (err) {
+            if (!isExpiryError(err))
+                throw err;
+            await refresh();
+            return await call();
+        }
+    };
+    return {
+        receiveMessage: (args) => withRetry(() => inner.receiveMessage(args)),
+        deleteMessage: (args) => withRetry(() => inner.deleteMessage(args)),
+    };
+}
+/**
+ * Bring up the publish + receive legs. Returns `null` (poll-only degradation)
+ * on ANY startup failure — subscribe 5xx, tenant resolution failure, etc. —
+ * after logging the reason. The caller treats `null` as "today's behavior".
+ */
+export async function startEventSync(opts) {
+    const log = opts.log ?? ((m) => console.error(m));
+    try {
+        const tenantId = await opts.resolveTenantId();
+        const deviceId = opts.deviceId;
+        // ── publish leg (US-017) ──
+        const transport = opts.transport ??
+            new HttpPushTransport({
+                apiUrl: opts.apiUrl,
+                pushPath: "/v1/sync/push",
+                authToken: opts.authToken,
+            });
+        await transport.start();
+        const emitter = new PushEventEmitter({
+            originTenantId: tenantId,
+            originDeviceId: deviceId,
+            transport,
+            // The rollout gate (resolveEventSync) already said yes — the emitter's
+            // per-tenant env flag is a server-side convention, not the client gate.
+            flagProvider: { isEnabled: () => true },
+            // Wall-clock sequence numbers: monotonic per device ACROSS daemon
+            // restarts (the emitter's default in-process counter restarts at 0,
+            // which would make peers' highest-seq dedupe drop every post-restart
+            // event). Receiver dedupe is per-path highest-seq, so ms-epoch values
+            // also stay comparable when two devices touch the same path.
+            getSequenceNumber: () => (opts.now ?? Date.now)(),
+            onError: (err, ctx) => log(`event-sync: publish failed for ${ctx.relativePath ?? "?"}: ${err.message}`),
+        });
+        // ── receive leg (US-018) ──
+        const subscribe = opts.subscribe ??
+            ((dev) => subscribeSyncReceive({
+                apiUrl: opts.apiUrl,
+                authToken: opts.authToken,
+                deviceId: dev,
+            }));
+        const initial = await subscribe(deviceId);
+        const sqs = createRefreshingSqsClient({
+            initial,
+            subscribe: () => subscribe(deviceId),
+            buildSqs: opts.buildSqs,
+            now: opts.now,
+        });
+        const receiver = new SqsPushReceiver({
+            tenantId,
+            queueUrl: initial.queueUrl,
+            sqs,
+            // Self-echo filter: this device's own publishes fan out to its own
+            // queue too — pulling them back is wasted work at best and a conflict
+            // source at worst. Skip before bridging into the sync engine.
+            syncFn: async (ctx) => {
+                if (ctx.event.originDeviceId === deviceId)
+                    return;
+                await opts.syncFn(ctx);
+            },
+            // The client rollout gate is the authority; the env-driven per-tenant
+            // flag provider is a server-side convention not set on user machines.
+            enabled: true,
+        });
+        await receiver.start();
+        log(`event-sync: live (tenant=${tenantId} device=${deviceId} queue=${initial.queueUrl})`);
+        return {
+            publishBatch: (batch) => void emitter.emitForBatch(batch),
+            receiver,
+            ownDeviceId: deviceId,
+            dispose: async () => {
+                await receiver.dispose().catch(() => undefined);
+                await transport.dispose().catch(() => undefined);
+            },
+        };
+    }
+    catch (err) {
+        log(`event-sync: startup failed, continuing poll-only: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+//# sourceMappingURL=event-sync.js.map

package/dist/sync/event-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-sync.js","sourceRoot":"","sources":["../../src/sync/event-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EACL,SAAS,EACT,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAwB,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EACL,eAAe,GAIhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD,+EAA+E;AAE/E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAyB,EACzB,QAA4B;IAE5B,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAgCD,SAAS,gBAAgB,CAAC,CAAU,EAAE,KAAa;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAM1C;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;QACd,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAE,UAAU,CAAC,KAA8B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAE7E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,SAAS,IAAI,MAAM,CACzB,CAAC;IACF,IAAI,GAAmC,CAAC;IACxC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,MAAM,oBAAoB,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,yDAAyD,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IACjE,OAAO;QACL,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QACpD,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC9C,WAAW,EAAE;YACX,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,yBAAyB,CAAC;YAC3E,eAAe,EAAE,gBAAgB,CAC/B,KAAK,CAAC,eAAe,EACrB,6BAA6B,CAC9B;YACD,YAAY,EAAE,gBAAgB,CAC5B,KAAK,CAAC,YAAY,EAClB,0BAA0B,CAC3B;YACD,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,CAAC;SACzE;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA+B;IAE/B,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE;YACrE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,IAAI,qBAAqB,CAAC;gBACxB,QAAQ,EAAE,QAAQ;gBAClB,mBAAmB,EAAE,WAAW;gBAChC,eAAe,EAAE,eAAe;aACjC,CAAC,EACF,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,CAAC;YACF,OAAO;gBACL,QAAQ,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACzC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,aAAa,EAAE,CAAC,CAAC,aAAa;oBAC9B,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE;YAC7C,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,oBAAoB,CAAC;gBACvB,QAAQ,EAAE,QAAQ;gBAClB,aAAa,EAAE,aAAa;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,cAAc;IACd,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,GAAY;IACjC,OAAO,GAAG,YAAY,KAAK,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,+EAA+E;AAC/E,MAAM,eAAe,GAAG,OAAO,CAAC;AAgBhC,SAAS,eAAe,CAAC,IAA2B;IAClD,OAAO,mBAAmB,CACxB,IAAI,SAAS,CAAC;QACZ,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE;YACX,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW;YACzC,eAAe,EAAE,IAAI,CAAC,WAAW,CAAC,eAAe;YACjD,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY;YAC3C,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC;SAClD;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAgC;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAElD,IAAI,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAClE,IAAI,UAAU,GAAyB,IAAI,CAAC;IAE5C,MAAM,OAAO,GAAG,GAAkB,EAAE;QAClC,UAAU,KAAK,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACvB,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACxD,CAAC;oBAAS,CAAC;gBACT,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,EAAE,IAAI,WAAW,GAAG,eAAe,EAAE,CAAC;YAC3E,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EAAK,IAAsB,EAAc,EAAE;QAChE,MAAM,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACnC,MAAM,OAAO,EAAE,CAAC;YAChB,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrE,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;KACpE,CAAC;AACJ,CAAC;AAoDD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/B,6BAA6B;QAC7B,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;YACd,IAAI,iBAAiB,CAAC;gBACpB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,eAAe;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC;YACnC,cAAc,EAAE,QAAQ;YACxB,cAAc,EAAE,QAAQ;YACxB,SAAS;YACT,uEAAuE;YACvE,wEAAwE;YACxE,YAAY,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YACvC,kEAAkE;YAClE,oEAAoE;YACpE,qEAAqE;YACrE,sEAAsE;YACtE,6DAA6D;YAC7D,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;YACjD,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CACpB,GAAG,CACD,kCAAkC,GAAG,CAAC,YAAY,IAAI,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAC5E;SACJ,CAAC,CAAC;QAEH,6BAA6B;QAC7B,MAAM,SAAS,GACb,IAAI,CAAC,SAAS;YACd,CAAC,CAAC,GAAW,EAAE,EAAE,CACf,oBAAoB,CAAC;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,yBAAyB,CAAC;YACpC,OAAO;YACP,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;YACpC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;YACnC,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG;YACH,mEAAmE;YACnE,sEAAsE;YACtE,8DAA8D;YAC9D,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACpB,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,QAAQ;oBAAE,OAAO;gBAClD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YACD,sEAAsE;YACtE,sEAAsE;YACtE,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEvB,GAAG,CACD,4BAA4B,QAAQ,WAAW,QAAQ,UAAU,OAAO,CAAC,QAAQ,GAAG,CACrF,CAAC;QAEF,OAAO;YACL,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC;YACzD,QAAQ;YACR,WAAW,EAAE,QAAQ;YACrB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAChD,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,qDAAqD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/sync/event-sync.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Phase 3 event-sync tests (US-017/US-018/US-019).
+ *
+ * - resolveEventSync: exact-email gate semantics + env-override precedence.
+ * - subscribeSyncReceive: request shape, response validation, failure surface.
+ * - sqsClientFromAwsSdk: command mapping + abort-signal forwarding.
+ * - createRefreshingSqsClient: proactive skew refresh, reactive retry-once on
+ *   expiry-class errors, non-expiry errors propagate, concurrent refresh
+ *   collapse.
+ * - startEventSync: happy-path handle wiring (self-echo filter, publish leg),
+ *   poll-only degradation on subscribe/tenant failure.
+ */
+export {};
+//# sourceMappingURL=event-sync.test.d.ts.map

package/dist/sync/event-sync.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-sync.test.d.ts","sourceRoot":"","sources":["../../src/sync/event-sync.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}