@hasna/capacity 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hasna
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,74 @@
+# @hasna/capacity
+
+> **WIP CHECKPOINT — NO-GO.** This branch is preserved for local review only.
+> The Accounts V1 successor contract is not independently approved or pinned,
+> and the credential-effect journal still targets an obsolete candidate. Do not
+> deploy, merge to `main`, publish, or treat `ACCOUNTS_V1_CONTRACT_SHA256` as a
+> successor attestation until the exact contract, implementation, and final
+> adversarial gates all pass.
+>
+> The current immutable but unpinned review pair is preserved under
+> [`contracts/accounts-v1`](contracts/accounts-v1/README.md). Its presence on
+> this branch is provenance only, not approval.
+
+Accounts is the fail-closed provider-capacity metadata boundary for Hasna
+`local` and `self_hosted` deployments. It models provider accounts,
+entitlements, capacity pools, account lanes, credential bindings, native
+AuthCapsule metadata, signed authority evidence, and non-reservational slot
+eligibility.
+
+Implemented adapters and surfaces:
+
+- deterministic in-memory and owner-only SQLite repositories for local use;
+- RLS-isolated PostgreSQL for Hasna-owned AWS self-hosting;
+- persistent signed recovery and credential-effect journals outside the
+  restorable catalog;
+- closed Ed25519 authority evidence and online generation-check receipts;
+- local/self-hosted SDK selection with no fallback;
+- authenticated HTTP handlers and generated OpenAPI 3.1;
+- a safe local read/diagnostic CLI.
+
+Accounts does not issue Infinity resource leases, schedule work, run provider
+calls, return raw credential handles, launch processes, or provide SaaS tenant,
+signup, billing, or public registration features. Ordinary model-call effects
+remain broker/Run-Authority owned. Credential lifecycle execution requires the
+separate one-use capsule-maintenance authority and external effect journal.
+
+## Build and verify locally
+
+```sh
+bun install
+bun test
+bun run typecheck
+bun run build
+```
+
+The live PostgreSQL conformance test is opt-in and expects an empty disposable
+database:
+
+```sh
+ACCOUNTS_TEST_POSTGRES_URL='postgresql://user@127.0.0.1/accounts_test?sslmode=disable' \
+  bun test test/storage/postgres-live.test.ts
+```
+
+Plaintext PostgreSQL is accepted only by this explicit loopback test path.
+Self-hosted connections require `sslmode=verify-full`.
+
+## Local CLI
+
+```sh
+HASNA_ACCOUNTS_DEPLOYMENT=local capacity doctor --json
+capacity validate ./record.json --json
+HASNA_ACCOUNTS_DEPLOYMENT=local capacity list access-methods --json
+HASNA_ACCOUNTS_DEPLOYMENT=local capacity get access-methods <uuidv7> --json
+HASNA_ACCOUNTS_DEPLOYMENT=local capacity eligibility <account-lane-uuidv7> \
+  --operation responses.create \
+  --model model.example \
+  --data-classification internal \
+  --json
+```
+
+Positive local evaluation requires an explicitly configured, owner-only signed
+recovery ledger through the SDK/factory. Without it, readiness and eligibility
+stay on recovery hold. CLI output is local diagnostic evidence only and never a
+reservation or production Infinity authority.

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env bun
+export declare function runAccountsCli(argv: readonly string[]): Promise<number>;