/**
 * The no-secrets guard must catch credentials WITHOUT catching ordinary paths.
 *
 * Both halves matter equally, and the second is easy to get wrong. The guard
 * throws, and a throw fails the whole tick — so a pattern that matches a
 * legitimate directory name silently disables reporting for the entire box
 * until that session ages out.
 *
 * The original marker list held `sk-` and `asia` as bare substrings. `sk-`
 * matches `task-runner`, `flask-app`, `disk-usage`, `risk-model`. Anyone who
 * created a repo with one of those names would have taken the heartbeat down
 * across the box, with the service still reporting active — the exact failure
 * shape this whole change exists to remove.
 */
export {};
//# sourceMappingURL=session-heartbeat-guard.test.d.ts.map