@hasna/instructions 0.4.26 → 0.4.28

package/dist/mcp/index.js

@@ -5729,11 +5729,13 @@ function isSafeSingleLine(value) {
 function isSafeCommandArgument(value) {
   return /^[A-Za-z0-9_./:@+=,-]+$/.test(value) && !value.includes("://") && !value.startsWith("-") || /^--[a-z][a-z0-9-]*$/.test(value);
 }
-var PROJECT_CONTEXT_SCHEMA = "hasna.projects.project_context_bundle.v1", PROJECT_CONTEXT_MAX_INPUT_BYTES, PROJECT_CONTEXT_MAX_RENDERED_BYTES, PROJECT_CONTEXT_MAX_COMMANDS = 6, PROJECT_CONTEXT_FRAGMENT_PATH = ".hasna/instructions/project-context.md", PROJECT_CONTEXT_CACHE_SCHEMA = "hasna.instructions.project-context-cache/v1", SESSION_COMPATIBILITY_MANIFEST_MAX_BYTES, FOREIGN_INPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_WARN_BYTES, PROJECT_CONTEXT_LOCK_STALE_MS, PROJECT_KINDS, PROJECT_STATUSES, LINK_STATES, RESOLUTION_SOURCES, safeId, nullableId, producerSlug, producerName, safeOptionalDisplay, isoTimestamp, revisionSchema, hashSchema, absolutePath, commandArg, commandSchema, projectContextBundleSchema, storedManifestProjectContextSchema, storedManifestFileSchema, storedManifestObservationSchema, projectContextMetadataSnapshotSchema, projectContextCacheSchema;
+var PROJECT_CONTEXT_SCHEMA = "hasna.projects.project_context_bundle.v1", PROJECT_CONTEXT_SCHEMA_V2 = "hasna.projects.project_context_bundle.v2", PROJECT_CONTEXT_SUPPORTED_SCHEMAS, projectContextSchema, PROJECT_CONTEXT_MAX_INPUT_BYTES, PROJECT_CONTEXT_MAX_RENDERED_BYTES, PROJECT_CONTEXT_MAX_COMMANDS = 6, PROJECT_CONTEXT_FRAGMENT_PATH = ".hasna/instructions/project-context.md", PROJECT_CONTEXT_CACHE_SCHEMA = "hasna.instructions.project-context-cache/v1", SESSION_COMPATIBILITY_MANIFEST_MAX_BYTES, FOREIGN_INPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_MAX_BYTES, SESSION_MANAGED_OUTPUT_WARN_BYTES, PROJECT_CONTEXT_LOCK_STALE_MS, PROJECT_KINDS, PROJECT_STATUSES, LINK_STATES, RESOLUTION_SOURCES, safeId, nullableId, producerSlug, producerName, safeOptionalDisplay, isoTimestamp, revisionSchema, hashSchema, absolutePath, commandArg, financeText, financeLegalEntity, financeProjectMetadataSchema, commandSchema, projectContextBundleSchema, storedManifestProjectContextSchema, storedManifestFileSchema, storedManifestObservationSchema, projectContextMetadataSnapshotSchema, projectContextCacheSchema;
 var init_project_context = __esm(() => {
   init_zod();
   init_redact();
   init_session_render_contract();
+  PROJECT_CONTEXT_SUPPORTED_SCHEMAS = [PROJECT_CONTEXT_SCHEMA, PROJECT_CONTEXT_SCHEMA_V2];
+  projectContextSchema = exports_external.enum(PROJECT_CONTEXT_SUPPORTED_SCHEMAS);
   PROJECT_CONTEXT_MAX_INPUT_BYTES = 8 * 1024;
   PROJECT_CONTEXT_MAX_RENDERED_BYTES = 4 * 1024;
   SESSION_COMPATIBILITY_MANIFEST_MAX_BYTES = 8 * 1024 * 1024;
@@ -5767,12 +5769,34 @@ var init_project_context = __esm(() => {
   hashSchema = exports_external.string().regex(/^sha256:[a-f0-9]{64}$/);
   absolutePath = exports_external.string().min(1).max(4096).refine((value) => isAbsolute(value), "must be absolute").refine(isSafeSingleLine, "must be safe").nullable();
   commandArg = exports_external.string().min(1).max(1024).refine((value) => isSafeCommandArgument(value), "unsafe argv item");
+  financeText = exports_external.string().min(1).max(512).refine((value) => value === value.trim(), "must be normalized");
+  financeLegalEntity = exports_external.string().min(1).max(256).refine((value) => value === value.trim(), "must be normalized");
+  financeProjectMetadataSchema = exports_external.object({
+    schema: exports_external.literal("hasna.projects.finance_project_metadata.v1"),
+    business_area: exports_external.literal("finance"),
+    jurisdiction: exports_external.string().min(2).max(64).regex(/^[A-Z0-9][A-Z0-9._:-]{1,63}$/),
+    legal_entities: exports_external.array(financeLegalEntity).min(1).max(100).refine((values) => new Set(values).size === values.length, "must not contain duplicate legal entities"),
+    fiscal_cycle: exports_external.enum(["monthly", "quarterly", "annual", "event-driven"]),
+    data_classification: exports_external.enum(["public", "internal", "confidential", "restricted"]),
+    retention_policy: financeText,
+    ledger_authority: financeText,
+    evidence_store: financeText,
+    approver: financeText,
+    external_recipient_policy: financeText
+  }).strict().superRefine((value, context) => {
+    if (Buffer.byteLength(JSON.stringify(value), "utf8") > 4 * 1024) {
+      context.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        message: "finance project metadata exceeds the 4 KiB producer context budget"
+      });
+    }
+  });
   commandSchema = exports_external.object({
     name: exports_external.enum(["show", "context", "why", "context-bundle"]),
     argv: exports_external.array(commandArg).min(1).max(8)
   }).strict();
   projectContextBundleSchema = exports_external.object({
-    schema: exports_external.literal(PROJECT_CONTEXT_SCHEMA),
+    schema: projectContextSchema,
     generated_at: isoTimestamp,
     hash: hashSchema,
     revision: revisionSchema,
@@ -5795,7 +5819,8 @@ var init_project_context = __esm(() => {
       kind: exports_external.enum(PROJECT_KINDS),
       status: exports_external.enum(PROJECT_STATUSES),
       path: absolutePath,
-      updated_at: isoTimestamp
+      updated_at: isoTimestamp,
+      finance: financeProjectMetadataSchema.optional()
     }).strict(),
     links: exports_external.object({
       todos: exports_external.object({
@@ -5818,9 +5843,17 @@ var init_project_context = __esm(() => {
       machine_id: nullableId
     }).strict().nullable(),
     commands: exports_external.array(commandSchema).max(PROJECT_CONTEXT_MAX_COMMANDS)
-  }).strict();
+  }).strict().superRefine((bundle, context) => {
+    if (bundle.schema === PROJECT_CONTEXT_SCHEMA && bundle.project.finance !== undefined) {
+      context.addIssue({
+        code: exports_external.ZodIssueCode.custom,
+        path: ["project", "finance"],
+        message: "finance project metadata requires project-context bundle v2"
+      });
+    }
+  });
   storedManifestProjectContextSchema = exports_external.object({
-    schema: exports_external.literal(PROJECT_CONTEXT_SCHEMA),
+    schema: projectContextSchema,
     projectId: safeId,
     revision: revisionSchema,
     hash: hashSchema,
@@ -7258,7 +7291,7 @@ var init_sync_dir = __esm(() => {
 var require_package = __commonJS((exports, module) => {
   module.exports = {
     name: "@hasna/instructions",
-    version: "0.4.26",
+    version: "0.4.28",
     description: "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
     type: "module",
     main: "dist/index.js",

package/dist/server/index.js

@@ -3141,6 +3141,27 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
             variables: { type: "object" }
           }
         },
+        AddProfileConfigInput: {
+          type: "object",
+          required: ["config_id"],
+          properties: {
+            config_id: { type: "string" }
+          }
+        },
+        ProfileConfigAddedResponse: {
+          type: "object",
+          required: ["added"],
+          properties: {
+            added: { type: "boolean", const: true }
+          }
+        },
+        ProfileConfigRemovedResponse: {
+          type: "object",
+          required: ["removed"],
+          properties: {
+            removed: { type: "boolean", const: true }
+          }
+        },
         ProfileWithConfigs: {
           type: "object",
           properties: {
@@ -3378,6 +3399,55 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
           responses: { "200": { content: { "application/json": { schema: { type: "object", properties: { deleted: { type: "boolean" }, id: { type: "string" } } } } } } }
         }
       },
+      "/v1/profiles/{id}/configs": {
+        post: {
+          operationId: "addConfigToProfile",
+          summary: "Add a config to a profile",
+          description: "Requires an API key with the `instructions:write` scope.",
+          security: [{ apiKey: [] }],
+          parameters: [
+            { name: "id", in: "path", required: true, schema: { type: "string" } }
+          ],
+          requestBody: {
+            required: true,
+            content: {
+              "application/json": {
+                schema: { $ref: "#/components/schemas/AddProfileConfigInput" }
+              }
+            }
+          },
+          responses: {
+            "200": {
+              content: {
+                "application/json": {
+                  schema: { $ref: "#/components/schemas/ProfileConfigAddedResponse" }
+                }
+              }
+            }
+          }
+        }
+      },
+      "/v1/profiles/{id}/configs/{configId}": {
+        delete: {
+          operationId: "removeConfigFromProfile",
+          summary: "Remove a config from a profile",
+          description: "Requires an API key with the `instructions:write` scope.",
+          security: [{ apiKey: [] }],
+          parameters: [
+            { name: "id", in: "path", required: true, schema: { type: "string" } },
+            { name: "configId", in: "path", required: true, schema: { type: "string" } }
+          ],
+          responses: {
+            "200": {
+              content: {
+                "application/json": {
+                  schema: { $ref: "#/components/schemas/ProfileConfigRemovedResponse" }
+                }
+              }
+            }
+          }
+        }
+      },
       "/v1/stats": {
         get: {
           operationId: "getStats",

package/dist/server/openapi.d.ts

@@ -198,6 +198,35 @@ export declare function buildV1OpenApiDocument(version?: string): {
                     };
                 };
             };
+            AddProfileConfigInput: {
+                type: string;
+                required: string[];
+                properties: {
+                    config_id: {
+                        type: string;
+                    };
+                };
+            };
+            ProfileConfigAddedResponse: {
+                type: string;
+                required: string[];
+                properties: {
+                    added: {
+                        type: string;
+                        const: boolean;
+                    };
+                };
+            };
+            ProfileConfigRemovedResponse: {
+                type: string;
+                required: string[];
+                properties: {
+                    removed: {
+                        type: string;
+                        const: boolean;
+                    };
+                };
+            };
             ProfileWithConfigs: {
                 type: string;
                 properties: {
@@ -777,6 +806,74 @@ export declare function buildV1OpenApiDocument(version?: string): {
                 };
             };
         };
+        "/v1/profiles/{id}/configs": {
+            post: {
+                operationId: string;
+                summary: string;
+                description: string;
+                security: {
+                    apiKey: never[];
+                }[];
+                parameters: {
+                    name: string;
+                    in: string;
+                    required: boolean;
+                    schema: {
+                        type: string;
+                    };
+                }[];
+                requestBody: {
+                    required: boolean;
+                    content: {
+                        "application/json": {
+                            schema: {
+                                $ref: string;
+                            };
+                        };
+                    };
+                };
+                responses: {
+                    "200": {
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    $ref: string;
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        "/v1/profiles/{id}/configs/{configId}": {
+            delete: {
+                operationId: string;
+                summary: string;
+                description: string;
+                security: {
+                    apiKey: never[];
+                }[];
+                parameters: {
+                    name: string;
+                    in: string;
+                    required: boolean;
+                    schema: {
+                        type: string;
+                    };
+                }[];
+                responses: {
+                    "200": {
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    $ref: string;
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
         "/v1/stats": {
             get: {
                 operationId: string;

package/dist/server/openapi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/server/openapi.ts"],"names":[],"mappings":"AA4CA,wBAAgB,sBAAsB,CAAC,OAAO,SAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6SnE"}
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/server/openapi.ts"],"names":[],"mappings":"AA4CA,wBAAgB,sBAAsB,CAAC,OAAO,SAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmXnE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/instructions",
-  "version": "0.4.26",
+  "version": "0.4.28",
   "description": "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
   "type": "module",
   "main": "dist/index.js",