@hasna/instructions 0.4.3 → 0.4.4

package/dist/cli/index.js

@@ -4486,7 +4486,7 @@ var init_package_manager_guard = __esm(() => {
   ];
 });
 
-// node_modules/.pnpm/@hasna+events@0.1.13/node_modules/@hasna/events/dist/commander.js
+// node_modules/@hasna/events/dist/commander.js
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir } from "os";
@@ -4503,83 +4503,29 @@ function getPathValue(input, path) {
     return;
   }, input);
 }
-function getFieldValues(input, path) {
-  const values = [];
-  const push = (value) => {
-    if (!values.some((item) => Object.is(item, value)))
-      values.push(value);
-  };
-  if (path.includes(".") && path in input)
-    push(input[path]);
-  const nestedValue = getPathValue(input, path);
-  if (nestedValue !== undefined || !path.includes("."))
-    push(nestedValue);
-  return values;
-}
-function wildcardToRegExp(pattern, options = {}) {
-  let body = "";
-  for (let index = 0;index < pattern.length; index += 1) {
-    const char = pattern[index];
-    if (char === "*") {
-      if (pattern[index + 1] === "*") {
-        body += ".*";
-        index += 1;
-      } else {
-        body += options.segmentSafe ? "[^/]*" : ".*";
-      }
-    } else {
-      body += char.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
-    }
-  }
-  return new RegExp(`^${body}$`);
+function wildcardToRegExp(pattern) {
+  const escaped = pattern.replace(/[|\\{}()[\]^$+?.]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`);
 }
-function matchString(value, matcher, options = {}) {
+function matchString(value, matcher) {
   if (matcher === undefined)
     return true;
   if (value === undefined)
     return false;
   const matchers = Array.isArray(matcher) ? matcher : [matcher];
-  return matchers.some((item) => wildcardToRegExp(item, options).test(value));
+  return matchers.some((item) => wildcardToRegExp(item).test(value));
 }
 function matchRecord(input, matcher) {
   if (!matcher)
     return true;
   return Object.entries(matcher).every(([path, expected]) => {
-    const actualValues = getFieldValues(input, path);
-    return matchField(actualValues, expected, path);
+    const actual = getPathValue(input, path);
+    if (typeof expected === "string" || Array.isArray(expected)) {
+      return matchString(actual === undefined ? undefined : String(actual), expected);
+    }
+    return actual === expected;
   });
 }
-function matchField(actualValues, expected, path) {
-  if (isNegativeMatcher(expected)) {
-    return !actualValues.some((actual) => matchPositiveField(actual, expected.not, path));
-  }
-  return actualValues.some((actual) => matchPositiveField(actual, expected, path));
-}
-function matchPositiveField(actual, expected, path) {
-  if (typeof expected === "string" || Array.isArray(expected)) {
-    return stringCandidates(actual).some((candidate) => matchString(candidate, expected, {
-      segmentSafe: path.endsWith("_path") || path.endsWith(".path")
-    }));
-  }
-  if (Array.isArray(actual)) {
-    return actual.some((item) => item === expected);
-  }
-  return actual === expected;
-}
-function stringCandidates(actual) {
-  if (actual === undefined)
-    return [];
-  if (Array.isArray(actual)) {
-    return actual.flatMap((item) => isPrimitiveFieldValue(item) ? [String(item)] : []);
-  }
-  return [String(actual)];
-}
-function isPrimitiveFieldValue(value) {
-  return value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean";
-}
-function isNegativeMatcher(value) {
-  return Boolean(value && typeof value === "object" && !Array.isArray(value) && "not" in value);
-}
 function eventMatchesFilter(event, filter) {
   return matchString(event.source, filter.source) && matchString(event.type, filter.type) && matchString(event.subject, filter.subject) && matchString(event.severity, filter.severity) && matchRecord(event.data, filter.data) && matchRecord(event.metadata, filter.metadata);
 }
@@ -4595,14 +4541,6 @@ var HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME";
 function getEventsDataDir(override) {
   return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join(homedir(), ".hasna", "events");
 }
-function getActiveEventsDirEnv() {
-  if (process.env[HASNA_EVENTS_DIR_ENV])
-    return HASNA_EVENTS_DIR_ENV;
-  if (process.env[HASNA_EVENTS_HOME_ENV])
-    return HASNA_EVENTS_HOME_ENV;
-  return null;
-}
-
 class JsonEventsStore {
   dataDir;
   channelsPath;
@@ -4714,52 +4652,6 @@ class JsonEventsStore {
     });
   }
 }
-async function getEventsStatus(dataDir) {
-  const store = new JsonEventsStore(dataDir);
-  await store.init();
-  const [channels, events, deliveries] = await Promise.all([
-    store.listChannels(),
-    store.listEvents(),
-    store.listDeliveries()
-  ]);
-  const transports = channels.reduce((counts, channel) => {
-    counts[channel.transport] = (counts[channel.transport] ?? 0) + 1;
-    return counts;
-  }, {});
-  return {
-    service: "events",
-    schemaVersion: "1.0",
-    dataDir: store.dataDir,
-    env: {
-      primary: HASNA_EVENTS_DIR_ENV,
-      fallback: HASNA_EVENTS_HOME_ENV,
-      active: getActiveEventsDirEnv()
-    },
-    files: {
-      channels: statusFile(store.dataDir, "channels.json", channels.length),
-      events: statusFile(store.dataDir, "events.json", events.length),
-      deliveries: statusFile(store.dataDir, "deliveries.json", deliveries.length)
-    },
-    counts: {
-      channels: channels.length,
-      enabledChannels: channels.filter((channel) => channel.enabled).length,
-      disabledChannels: channels.filter((channel) => !channel.enabled).length,
-      events: events.length,
-      deliveries: deliveries.length
-    },
-    transports,
-    safety: {
-      includesEventPayloads: false,
-      includesWebhookSecrets: false,
-      listOutputsRedactSecrets: true,
-      statusOutputIsMetadataOnly: true
-    }
-  };
-}
-function statusFile(dataDir, fileName, records) {
-  const path = join(dataDir, fileName);
-  return { path, exists: existsSync(path), records };
-}
 var DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
 function buildSignatureBase(timestamp, body) {
   return `${timestamp}.${body}`;
@@ -4985,7 +4877,7 @@ class EventsClient {
     }
     return deliveries;
   }
-  async matchChannel(id, input = {}) {
+  async testChannel(id, input = {}) {
     const channel = await this.store.getChannel(id);
     if (!channel)
       throw new Error(`Channel not found: ${id}`);
@@ -5002,34 +4894,6 @@ class EventsClient {
       time: input.time,
       id: input.id
     });
-    const matched = channelMatchesEvent(channel, event);
-    return {
-      channelId: channel.id,
-      matched,
-      event,
-      filters: channel.filters,
-      reason: matched ? undefined : channel.enabled ? "event did not match channel filters" : "channel is disabled"
-    };
-  }
-  async testChannel(id, input = {}, options = {}) {
-    const channel = await this.store.getChannel(id);
-    if (!channel)
-      throw new Error(`Channel not found: ${id}`);
-    const match = await this.matchChannel(id, input);
-    const event = match.event;
-    if (options.honorFilters && !match.matched) {
-      const timestamp = new Date().toISOString();
-      const result2 = createDeliveryResult(event, channel, [{
-        attempt: 1,
-        status: "skipped",
-        startedAt: timestamp,
-        completedAt: timestamp,
-        error: match.reason
-      }]);
-      result2.metadata = { reason: "filter_mismatch" };
-      await this.store.appendDelivery(result2);
-      return result2;
-    }
     const eventForChannel = await this.applyRedaction(event, channel);
     const result = await this.deliverWithRetry(eventForChannel, channel);
     await this.store.appendDelivery(result);
@@ -5140,76 +5004,6 @@ function normalizeRetryPolicy(policy) {
     multiplier: Math.max(1, policy?.multiplier ?? 2)
   };
 }
-function parseFieldMatchers(values, label, typed = false) {
-  if (!values?.length)
-    return;
-  const result = {};
-  for (const value of values) {
-    const parsed = parseMatcherExpression(value, label);
-    const path = parsed.path;
-    if (path in result)
-      throw new Error(`Duplicate ${label} filter path: ${path}`);
-    const matcherValue = typed ? parseTypedMatcherValue(parsed.rawValue, label) : parsed.rawValue;
-    result[path] = parsed.negated ? { not: matcherValue } : matcherValue;
-  }
-  return result;
-}
-function parseFilterOptions(options) {
-  const filter2 = {};
-  if (options.source)
-    filter2.source = options.source;
-  if (options.type)
-    filter2.type = options.type;
-  if (options.subject)
-    filter2.subject = options.subject;
-  if (options.severity)
-    filter2.severity = options.severity;
-  const data = mergeMatchers(parseFieldMatchers(options.data, "data"), parseFieldMatchers(options.dataJson, "data-json", true));
-  const metadata = mergeMatchers(parseFieldMatchers(options.metadata, "metadata"), parseFieldMatchers(options.metadataJson, "metadata-json", true));
-  if (Object.keys(data).length > 0)
-    filter2.data = data;
-  if (Object.keys(metadata).length > 0)
-    filter2.metadata = metadata;
-  return Object.keys(filter2).length > 0 ? [filter2] : undefined;
-}
-function mergeMatchers(...records) {
-  const result = {};
-  for (const record of records) {
-    if (!record)
-      continue;
-    for (const [path, value] of Object.entries(record)) {
-      if (path in result)
-        throw new Error(`Duplicate filter path: ${path}`);
-      result[path] = value;
-    }
-  }
-  return result;
-}
-function parseTypedMatcherValue(value, label) {
-  const parsed = JSON.parse(value);
-  if (parsed === null || typeof parsed === "string" || typeof parsed === "number" || typeof parsed === "boolean" || Array.isArray(parsed) && parsed.every((item) => typeof item === "string")) {
-    return parsed;
-  }
-  throw new Error(`${label} filter JSON values must be string, string[], number, boolean, or null`);
-}
-function parseMatcherExpression(value, label) {
-  const negativeSeparator = value.indexOf("!=");
-  if (negativeSeparator > 0) {
-    return {
-      path: value.slice(0, negativeSeparator),
-      rawValue: value.slice(negativeSeparator + 2),
-      negated: true
-    };
-  }
-  const separator = value.indexOf("=");
-  if (separator <= 0)
-    throw new Error(`Invalid ${label} filter, expected path=value or path!=value: ${value}`);
-  return {
-    path: value.slice(0, separator),
-    rawValue: value.slice(separator + 1),
-    negated: false
-  };
-}
 function parseJsonObject(value, fallback) {
   if (!value)
     return fallback;
@@ -5231,6 +5025,18 @@ function parseHeaders(values) {
   }
   return headers;
 }
+function parseFilter(options) {
+  const filter2 = {};
+  if (options.source)
+    filter2.source = options.source;
+  if (options.type)
+    filter2.type = options.type;
+  if (options.subject)
+    filter2.subject = options.subject;
+  if (options.severity)
+    filter2.severity = options.severity;
+  return Object.keys(filter2).length > 0 ? [filter2] : undefined;
+}
 function createClient(options) {
   if (options.createClient)
     return options.createClient();
@@ -5248,16 +5054,16 @@ function hasJsonOption(options) {
 function wantsJson(actionOptions, command) {
   return hasJsonOption(actionOptions) || hasJsonOption(command);
 }
-function registerChannelCommands(program, options) {
-  const channels = program.command(options.channelsCommandName ?? "channels").description("Manage Hasna event channels");
-  channels.command("add").description("Add or replace a channel").argument("<target>", "Webhook URL or command binary").requiredOption("--id <id>", "Channel identifier").option("--transport <kind>", "Transport kind: webhook or command", "webhook").option("--name <name>", "Display name").option("--type <pattern>", "Event type filter, e.g. todos.task.*").option("--source <pattern>", "Event source filter").option("--subject <pattern>", "Event subject filter").option("--severity <pattern>", "Event severity filter").option("--data <path=value...>", "Event data field filter; string values, path!=value negatives, array-member matching, dot paths, * segment wildcard, ** recursive wildcard", collectValues, []).option("--metadata <path=value...>", "Event metadata field filter; string values, path!=value negatives, array-member matching, dot paths, * segment wildcard, ** recursive wildcard", collectValues, []).option("--data-json <path=json...>", "Event data field filter with typed JSON value; path!=json negatives supported", collectValues, []).option("--metadata-json <path=json...>", "Event metadata field filter with typed JSON value; path!=json negatives supported", collectValues, []).option("--secret <secret>", "Webhook HMAC secret").option("--header <name=value...>", "Webhook header", collectValues, []).option("--arg <arg...>", "Command argument", collectValues, []).option("--timeout-ms <ms>", "Transport timeout in milliseconds", parseNumber).option("--retry-attempts <n>", "Maximum delivery attempts", parseNumber).option("--retry-backoff-ms <ms>", "Initial retry backoff in milliseconds", parseNumber).option("--redact <path...>", "Event field path to redact before delivery", collectValues, []).option("--disabled", "Create channel disabled", false).option("-j, --json", "Print JSON output", false).action(async (target, actionOptions, command) => {
+function registerWebhookCommands(program, options) {
+  const webhooks = program.command(options.webhooksCommandName ?? "webhooks").description("Manage Hasna event webhook subscriptions");
+  webhooks.command("add").description("Add or replace a webhook or command subscription").argument("<target>", "Webhook URL or command binary").requiredOption("--id <id>", "Subscription/channel identifier").option("--transport <kind>", "Transport kind: webhook or command", "webhook").option("--name <name>", "Display name").option("--type <pattern>", "Event type filter, e.g. todos.task.*").option("--source <pattern>", "Event source filter").option("--subject <pattern>", "Event subject filter").option("--severity <pattern>", "Event severity filter").option("--secret <secret>", "Webhook HMAC secret").option("--header <name=value...>", "Webhook header", collectValues, []).option("--arg <arg...>", "Command argument", collectValues, []).option("--timeout-ms <ms>", "Transport timeout in milliseconds", parseNumber).option("--retry-attempts <n>", "Maximum delivery attempts", parseNumber).option("--retry-backoff-ms <ms>", "Initial retry backoff in milliseconds", parseNumber).option("--redact <path...>", "Event field path to redact before delivery", collectValues, []).option("--disabled", "Create channel disabled", false).option("-j, --json", "Print JSON output", false).action(async (target, actionOptions, command) => {
     const timestamp = new Date().toISOString();
     const channel = {
       id: actionOptions.id,
       name: actionOptions.name,
       enabled: !actionOptions.disabled,
       transport: actionOptions.transport,
-      filters: parseFilterOptions(actionOptions),
+      filters: parseFilter(actionOptions),
       retry: actionOptions.retryAttempts || actionOptions.retryBackoffMs ? { maxAttempts: actionOptions.retryAttempts, backoffMs: actionOptions.retryBackoffMs } : undefined,
       redact: actionOptions.redact?.length ? { paths: actionOptions.redact } : undefined,
       createdAt: timestamp,
@@ -5273,51 +5079,35 @@ function registerChannelCommands(program, options) {
     const saved = await createClient(options).addChannel(channel);
     print(sanitizeChannelForOutput(saved), wantsJson(actionOptions, command), `Added ${saved.transport} channel ${saved.id}`);
   });
-  channels.command("list").description("List configured channels").option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
-    const channels2 = await createClient(options).listChannels();
+  webhooks.command("list").description("List configured subscriptions").option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
+    const channels = await createClient(options).listChannels();
     if (wantsJson(actionOptions, command)) {
-      console.log(JSON.stringify(sanitizeChannelsForOutput(channels2), null, 2));
+      console.log(JSON.stringify(sanitizeChannelsForOutput(channels), null, 2));
       return;
     }
-    if (!channels2.length) {
+    if (!channels.length) {
       console.log("No channels configured.");
       return;
     }
-    for (const channel of channels2) {
+    for (const channel of channels) {
       console.log(`${channel.id}	${channel.enabled ? "enabled" : "disabled"}	${channel.transport}	${channel.webhook?.url ?? channel.command?.command ?? channel.transport}`);
     }
   });
-  channels.command("status").description("Show events channel storage status").option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
-    const status = await getEventsStatus(options.dataDir);
-    print(status, wantsJson(actionOptions, command), `events dataDir: ${status.dataDir}`);
-  });
-  channels.command("remove").description("Remove a channel").argument("<id>", "Channel identifier").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
+  webhooks.command("remove").description("Remove a subscription").argument("<id>", "Subscription/channel identifier").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
     const removed = await createClient(options).removeChannel(id);
     print({ removed }, wantsJson(actionOptions, command), removed ? `Removed ${id}` : `Channel not found: ${id}`);
   });
-  channels.command("test").description("Send a test event to one channel").argument("<id>", "Channel identifier").option("--source <source>", "Event source override").option("--type <type>", "Event type", "events.test").option("--subject <subject>", "Event subject").option("--message <message>", "Event message", "Hasna events test delivery").option("--data <json>", "Event data JSON object").option("--metadata <json>", "Event metadata JSON object").option("--honor-filters", "Skip delivery when the sample event does not match channel filters", false).option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
+  webhooks.command("test").description("Send a test event to one subscription").argument("<id>", "Subscription/channel identifier").option("--type <type>", "Event type", "events.test").option("--subject <subject>", "Event subject").option("--message <message>", "Event message", "Hasna events test delivery").option("--data <json>", "Event data JSON object").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
     const result = await createClient(options).testChannel(id, {
-      source: actionOptions.source ?? options.source,
-      type: actionOptions.type,
-      subject: actionOptions.subject ?? id,
-      message: actionOptions.message,
-      data: parseJsonObject(actionOptions.data, { test: true }),
-      metadata: parseJsonObject(actionOptions.metadata, {})
-    }, { honorFilters: actionOptions.honorFilters });
-    print(result, wantsJson(actionOptions, command), `${result.status}: ${result.channelId}`);
-  });
-  channels.command("match").description("Check whether a sample event matches one channel without delivering").argument("<id>", "Channel identifier").option("--source <source>", "Event source override").option("--type <type>", "Event type", "events.test").option("--subject <subject>", "Event subject").option("--message <message>", "Event message", "Hasna events match preview").option("--data <json>", "Event data JSON object").option("--metadata <json>", "Event metadata JSON object").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
-    const result = await createClient(options).matchChannel(id, {
-      source: actionOptions.source ?? options.source,
+      source: options.source,
       type: actionOptions.type,
       subject: actionOptions.subject ?? id,
       message: actionOptions.message,
-      data: parseJsonObject(actionOptions.data, { test: true }),
-      metadata: parseJsonObject(actionOptions.metadata, {})
+      data: parseJsonObject(actionOptions.data, { test: true })
     });
-    print(result, wantsJson(actionOptions, command), `${result.matched ? "matched" : "skipped"}: ${result.channelId}`);
+    print(result, wantsJson(actionOptions, command), `${result.status}: ${result.channelId}`);
   });
-  return channels;
+  return webhooks;
 }
 function registerEventCommands(program, options) {
   const events = program.command(options.eventsCommandName ?? "events").description("Emit, list, and replay Hasna events");
@@ -5365,7 +5155,7 @@ function registerEventCommands(program, options) {
   return events;
 }
 function registerEventsCommands(program, options) {
-  registerChannelCommands(program, options);
+  registerWebhookCommands(program, options);
   registerEventCommands(program, options);
 }
 function parseNumber(value) {

package/dist/mcp/index.js

@@ -2040,7 +2040,7 @@ var init_sync_dir = __esm(() => {
 var require_package = __commonJS((exports, module) => {
   module.exports = {
     name: "@hasna/instructions",
-    version: "0.4.3",
+    version: "0.4.4",
     description: "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
     type: "module",
     main: "dist/index.js",

package/dist/server/index.js

@@ -2,7 +2,7 @@
 // @bun
 var __require = import.meta.require;
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/compose.js
+// node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
   return (context, next) => {
     let index = -1;
@@ -46,39 +46,21 @@ var compose = (middleware, onError, onNotFound) => {
   };
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/request/constants.js
+// node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/utils/buffer.js
-var bufferToFormData = (arrayBuffer, contentType) => {
-  const response = new Response(arrayBuffer, {
-    headers: {
-      "Content-Type": contentType.replace(/^[^;]+/, (mediaType) => mediaType.toLowerCase())
-    }
-  });
-  return response.formData();
-};
-
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/utils/body.js
-var isRawRequest = (request) => ("headers" in request);
+// node_modules/hono/dist/utils/body.js
 var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
-  const headers = isRawRequest(request) ? request.headers : request.raw.headers;
+  const headers = request instanceof HonoRequest ? request.raw.headers : request.headers;
   const contentType = headers.get("Content-Type");
-  const mediaType = contentType?.split(";")[0].trim().toLowerCase();
-  if (mediaType === "multipart/form-data" || mediaType === "application/x-www-form-urlencoded") {
+  if (contentType?.startsWith("multipart/form-data") || contentType?.startsWith("application/x-www-form-urlencoded")) {
     return parseFormData(request, { all, dot });
   }
   return {};
 };
 async function parseFormData(request, options) {
-  const headers = isRawRequest(request) ? request.headers : request.raw.headers;
-  const arrayBuffer = await request.arrayBuffer();
-  const formDataPromise = bufferToFormData(arrayBuffer, headers.get("Content-Type") || "");
-  if (!isRawRequest(request)) {
-    request.bodyCache.formData = formDataPromise;
-  }
-  const formData = await formDataPromise;
+  const formData = await request.formData();
   if (formData) {
     return convertFormDataToBodyData(formData, options);
   }
@@ -138,7 +120,7 @@ var handleParsingNestedValues = (form, key, value) => {
   });
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/utils/url.js
+// node_modules/hono/dist/utils/url.js
 var splitPath = (path) => {
   const paths = path.split("/");
   if (paths[0] === "") {
@@ -338,7 +320,7 @@ var getQueryParams = (url, key) => {
 };
 var decodeURIComponent_ = decodeURIComponent;
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/request.js
+// node_modules/hono/dist/request.js
 var tryDecodeURIComponent = (str) => tryDecode(str, decodeURIComponent_);
 var HonoRequest = class {
   raw;
@@ -420,9 +402,6 @@ var HonoRequest = class {
   arrayBuffer() {
     return this.#cachedBody("arrayBuffer");
   }
-  bytes() {
-    return this.#cachedBody("arrayBuffer").then((buffer) => new Uint8Array(buffer));
-  }
   blob() {
     return this.#cachedBody("blob");
   }
@@ -452,7 +431,7 @@ var HonoRequest = class {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/utils/html.js
+// node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1,
   BeforeStream: 2,
@@ -490,7 +469,7 @@ var resolveCallback = async (str, phase, preserveCallbacks, context, buffer) =>
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/context.js
+// node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = (contentType, headers) => {
   return {
@@ -657,7 +636,7 @@ var Context = class {
   };
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router.js
+// node_modules/hono/dist/router.js
 var METHOD_NAME_ALL = "ALL";
 var METHOD_NAME_ALL_LOWERCASE = "all";
 var METHODS = ["get", "post", "put", "delete", "options", "patch"];
@@ -665,10 +644,10 @@ var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is
 var UnsupportedPathError = class extends Error {
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/utils/constants.js
+// node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/hono-base.js
+// node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c) => {
   return c.text("404 Not Found", 404);
 };
@@ -759,7 +738,7 @@ var Hono = class _Hono {
         handler = async (c, next) => (await compose([], app.errorHandler)(c, () => r.handler(c, next))).res;
         handler[COMPOSED_HANDLER] = r.handler;
       }
-      subApp.#addRoute(r.method, r.path, handler, r.basePath);
+      subApp.#addRoute(r.method, r.path, handler);
     });
     return this;
   }
@@ -806,7 +785,7 @@ var Hono = class _Hono {
       const pathPrefixLength = mergedPath === "/" ? 0 : mergedPath.length;
       return (request) => {
         const url = new URL(request.url);
-        url.pathname = this.getPath(request).slice(pathPrefixLength) || "/";
+        url.pathname = url.pathname.slice(pathPrefixLength) || "/";
         return new Request(url, request);
       };
     })();
@@ -820,15 +799,10 @@ var Hono = class _Hono {
     this.#addRoute(METHOD_NAME_ALL, mergePath(path, "*"), handler);
     return this;
   }
-  #addRoute(method, path, handler, baseRoutePath) {
+  #addRoute(method, path, handler) {
     method = method.toUpperCase();
     path = mergePath(this._basePath, path);
-    const r = {
-      basePath: baseRoutePath !== undefined ? mergePath(this._basePath, baseRoutePath) : this._basePath,
-      path,
-      method,
-      handler
-    };
+    const r = { basePath: this._basePath, path, method, handler };
     this.router.add(method, path, [handler, r]);
     this.routes.push(r);
   }
@@ -892,7 +866,7 @@ var Hono = class _Hono {
   };
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// node_modules/hono/dist/router/reg-exp-router/matcher.js
 var emptyParam = [];
 function match(method, path) {
   const matchers = this.buildAllMatchers();
@@ -913,7 +887,7 @@ function match(method, path) {
   return match2(method, path);
 }
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/reg-exp-router/node.js
+// node_modules/hono/dist/router/reg-exp-router/node.js
 var LABEL_REG_EXP_STR = "[^/]+";
 var ONLY_WILDCARD_REG_EXP_STR = ".*";
 var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
@@ -1017,7 +991,7 @@ var Node = class _Node {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/reg-exp-router/trie.js
+// node_modules/hono/dist/router/reg-exp-router/trie.js
 var Trie = class {
   #context = { varIndex: 0 };
   #root = new Node;
@@ -1073,7 +1047,7 @@ var Trie = class {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/reg-exp-router/router.js
+// node_modules/hono/dist/router/reg-exp-router/router.js
 var nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
 var wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
 function buildWildcardRegExp(path) {
@@ -1238,7 +1212,7 @@ var RegExpRouter = class {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/reg-exp-router/prepared-router.js
+// node_modules/hono/dist/router/reg-exp-router/prepared-router.js
 var PreparedRegExpRouter = class {
   name = "PreparedRegExpRouter";
   #matchers;
@@ -1310,7 +1284,7 @@ var PreparedRegExpRouter = class {
   match = match;
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/smart-router/router.js
+// node_modules/hono/dist/router/smart-router/router.js
 var SmartRouter = class {
   name = "SmartRouter";
   #routers = [];
@@ -1365,7 +1339,7 @@ var SmartRouter = class {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/trie-router/node.js
+// node_modules/hono/dist/router/trie-router/node.js
 var emptyParams = /* @__PURE__ */ Object.create(null);
 var hasChildren = (children) => {
   for (const _ in children) {
@@ -1534,7 +1508,7 @@ var Node2 = class _Node2 {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/router/trie-router/router.js
+// node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   name = "TrieRouter";
   #node;
@@ -1556,7 +1530,7 @@ var TrieRouter = class {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/hono.js
+// node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   constructor(options = {}) {
     super(options);
@@ -1566,18 +1540,24 @@ var Hono2 = class extends Hono {
   }
 };
 
-// node_modules/.pnpm/hono@4.12.28/node_modules/hono/dist/middleware/cors/index.js
+// node_modules/hono/dist/middleware/cors/index.js
 var cors = (options) => {
-  const opts = {
+  const defaults = {
     origin: "*",
     allowMethods: ["GET", "HEAD", "PUT", "POST", "DELETE", "PATCH"],
     allowHeaders: [],
-    exposeHeaders: [],
+    exposeHeaders: []
+  };
+  const opts = {
+    ...defaults,
     ...options
   };
   const findAllowOrigin = ((optsOrigin) => {
     if (typeof optsOrigin === "string") {
       if (optsOrigin === "*") {
+        if (opts.credentials) {
+          return (origin) => origin || null;
+        }
         return () => optsOrigin;
       } else {
         return (origin) => optsOrigin === origin ? origin : null;
@@ -1612,7 +1592,7 @@ var cors = (options) => {
       set("Access-Control-Expose-Headers", opts.exposeHeaders.join(","));
     }
     if (c.req.method === "OPTIONS") {
-      if (opts.origin !== "*") {
+      if (opts.origin !== "*" || opts.credentials) {
         set("Vary", "Origin");
       }
       if (opts.maxAge != null) {
@@ -1642,7 +1622,7 @@ var cors = (options) => {
       });
     }
     await next();
-    if (opts.origin !== "*") {
+    if (opts.origin !== "*" || opts.credentials) {
       c.header("Vary", "Origin", { append: true });
     }
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/instructions",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "AI coding agent instruction & configuration manager — store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
   "type": "module",
   "main": "dist/index.js",