@hasna/instructions 0.4.36 → 0.4.39

package/dist/mcp/index.js

@@ -73,19 +73,51 @@ var init_types = __esm(() => {
   };
 });
 
+// src/lib/retired-storage-mode.ts
+function firstDefinedEnvKey(env, keys) {
+  for (const key of keys) {
+    if (Object.hasOwn(env, key) && env[key] !== undefined)
+      return key;
+  }
+  return null;
+}
+function assertNoLegacyStorageMode(env = process.env) {
+  const legacyKey = firstDefinedEnvKey(env, LEGACY_STORAGE_MODE_KEYS);
+  if (!legacyKey)
+    return;
+  throw new Error(`${legacyKey} was removed. Deployment modes no longer exist: delete the storage-mode variable. ` + `The client uses the local SQLite store, or the HTTP API selected by ` + `HASNA_INSTRUCTIONS_API_URL + HASNA_INSTRUCTIONS_API_KEY. ` + `On the server, set HASNA_INSTRUCTIONS_DATABASE_URL to select the postgresql backend, ` + `or leave it unset for sqlite.`);
+}
+var LEGACY_STORAGE_MODE_KEYS;
+var init_retired_storage_mode = __esm(() => {
+  LEGACY_STORAGE_MODE_KEYS = [
+    "HASNA_INSTRUCTIONS_STORAGE_MODE",
+    "HASNA_INSTRUCTIONS_MODE",
+    "INSTRUCTIONS_STORAGE_MODE",
+    "INSTRUCTIONS_MODE"
+  ];
+});
+
+// src/lib/raw-store-root.ts
+import { homedir } from "os";
+import { join, resolve } from "path";
+function getRawStoreRoot() {
+  return resolve(process.env[RAW_STORE_ROOT_ENV] || join(process.env["HOME"] || homedir(), ".hasna", "instructions"));
+}
+var RAW_STORE_ROOT_ENV = "HASNA_CONFIGS_HOME";
+var init_raw_store_root = () => {};
+
 // src/db/database.ts
 import { Database } from "bun:sqlite";
 import { existsSync, mkdirSync, rmSync } from "fs";
-import { join } from "path";
+import { join as join2 } from "path";
 import { randomUUID } from "crypto";
 function getDbPath() {
   if (process.env["HASNA_INSTRUCTIONS_DB_PATH"]) {
     return process.env["HASNA_INSTRUCTIONS_DB_PATH"];
   }
-  const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  const dir = join(home, ".hasna", "instructions");
+  const dir = getRawStoreRoot();
   mkdirSync(dir, { recursive: true });
-  return join(dir, "instructions.db");
+  return join2(dir, "instructions.db");
 }
 function uuid() {
   return randomUUID();
@@ -99,8 +131,9 @@ function slugify(name) {
 function getDatabase(path) {
   if (_db)
     return _db;
+  assertNoLegacyStorageMode();
   if (!path && process.env["HASNA_INSTRUCTIONS_API_URL"] && process.env["HASNA_INSTRUCTIONS_API_KEY"]) {
-    throw new Error("instructions is in self_hosted (cloud) mode: this command is not wired to the cloud API yet. " + "Unset HASNA_INSTRUCTIONS_API_URL / HASNA_INSTRUCTIONS_API_KEY to use it against the local store.");
+    throw new Error("instructions is using the HTTP API transport (HASNA_INSTRUCTIONS_API_URL set): this command is not wired to the API yet. " + "Unset HASNA_INSTRUCTIONS_API_URL / HASNA_INSTRUCTIONS_API_KEY to use it against the local store.");
   }
   const dbPath = path || getDbPath();
   const db = new Database(dbPath);
@@ -181,6 +214,8 @@ function insertFeedback(input, db) {
 }
 var MIGRATIONS, _db = null;
 var init_database = __esm(() => {
+  init_retired_storage_mode();
+  init_raw_store_root();
   MIGRATIONS = [
     `
   CREATE TABLE IF NOT EXISTS configs (
@@ -265,6 +300,37 @@ var init_database = __esm(() => {
   ];
 });
 
+// src/db/snapshots.ts
+function createSnapshot(configId, content, version, db) {
+  const d = db || getDatabase();
+  const id = uuid();
+  const ts = now();
+  d.run("INSERT INTO config_snapshots (id, config_id, content, version, created_at) VALUES (?, ?, ?, ?, ?)", [id, configId, content, version, ts]);
+  return { id, config_id: configId, content, version, created_at: ts };
+}
+function listSnapshots(configId, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM config_snapshots WHERE config_id = ? ORDER BY version DESC").all(configId);
+}
+function getSnapshot(id, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM config_snapshots WHERE id = ?").get(id);
+}
+function getSnapshotByVersion(configId, version, db) {
+  const d = db || getDatabase();
+  return d.query("SELECT * FROM config_snapshots WHERE config_id = ? AND version = ?").get(configId, version);
+}
+function pruneSnapshots(configId, keep = 10, db) {
+  const d = db || getDatabase();
+  const result = d.run(`DELETE FROM config_snapshots WHERE config_id = ? AND id NOT IN (
+      SELECT id FROM config_snapshots WHERE config_id = ? ORDER BY version DESC LIMIT ?
+    )`, [configId, configId, keep]);
+  return result.changes;
+}
+var init_snapshots = __esm(() => {
+  init_database();
+});
+
 // src/db/configs.ts
 function rowToConfig(row) {
   let outputs = [];
@@ -303,25 +369,28 @@ function createConfig(input, db) {
   const slug = uniqueSlug(input.name, d);
   const tags = JSON.stringify(input.tags || []);
   const outputs = JSON.stringify(input.outputs || []);
-  d.run(`INSERT INTO configs (id, name, slug, kind, category, agent, target_path, outputs, format, content, description, tags, is_template, version, created_at, updated_at, synced_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, NULL)`, [
-    id,
-    input.name,
-    slug,
-    input.kind ?? "file",
-    input.category,
-    input.agent ?? "global",
-    input.target_path ?? null,
-    outputs,
-    input.format ?? "text",
-    input.content,
-    input.description ?? null,
-    tags,
-    input.is_template ? 1 : 0,
-    ts,
-    ts
-  ]);
-  return getConfig(id, d);
+  return d.transaction(() => {
+    d.run(`INSERT INTO configs (id, name, slug, kind, category, agent, target_path, outputs, format, content, description, tags, is_template, version, created_at, updated_at, synced_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, NULL)`, [
+      id,
+      input.name,
+      slug,
+      input.kind ?? "file",
+      input.category,
+      input.agent ?? "global",
+      input.target_path ?? null,
+      outputs,
+      input.format ?? "text",
+      input.content,
+      input.description ?? null,
+      tags,
+      input.is_template ? 1 : 0,
+      ts,
+      ts
+    ]);
+    createSnapshot(id, input.content, 1, d);
+    return getConfig(id, d);
+  })();
 }
 function getConfig(idOrSlug, db) {
   const d = db || getDatabase();
@@ -426,9 +495,13 @@ function updateConfig(idOrSlug, input, db) {
     updates.push("synced_at = ?");
     params.push(input.synced_at);
   }
-  params.push(existing.id);
-  d.run(`UPDATE configs SET ${updates.join(", ")} WHERE id = ?`, params);
-  return getConfigById(existing.id, d);
+  return d.transaction(() => {
+    params.push(existing.id);
+    d.run(`UPDATE configs SET ${updates.join(", ")} WHERE id = ?`, params);
+    const updated = getConfigById(existing.id, d);
+    createSnapshot(updated.id, updated.content, updated.version, d);
+    return updated;
+  })();
 }
 function deleteConfig(idOrSlug, db) {
   const d = db || getDatabase();
@@ -448,16 +521,17 @@ function getConfigStats(db) {
 var init_configs = __esm(() => {
   init_types();
   init_database();
+  init_snapshots();
 });
 
 // src/lib/template.ts
 var exports_template = {};
 __export(exports_template, {
-  renderTemplatePreview: () => renderTemplatePreview,
-  renderTemplate: () => renderTemplate,
-  parseTemplateVars: () => parseTemplateVars,
+  extractTemplateVars: () => extractTemplateVars,
   isTemplate: () => isTemplate,
-  extractTemplateVars: () => extractTemplateVars
+  parseTemplateVars: () => parseTemplateVars,
+  renderTemplate: () => renderTemplate,
+  renderTemplatePreview: () => renderTemplatePreview
 });
 function parseTemplateVars(content) {
   const names = new Set;
@@ -521,9 +595,9 @@ var init_template = __esm(() => {
 });
 
 // src/lib/machine.ts
-import { arch as currentArch, homedir, hostname as currentHostname, type as currentOsType } from "os";
+import { arch as currentArch, homedir as homedir2, hostname as currentHostname, type as currentOsType } from "os";
 import { existsSync as existsSync2 } from "fs";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 function normalizeOsFamily(os) {
   const value = (os ?? "").trim().toLowerCase();
   if (value === "darwin" || value === "macos" || value === "mac" || value === "osx")
@@ -535,11 +609,11 @@ function normalizeOsFamily(os) {
   return value || "unknown";
 }
 function detectMachineContext(overrides = {}) {
-  const homeDir = overrides.home_dir ?? process.env["CONFIGS_HOME"] ?? process.env["HOME"] ?? homedir();
+  const homeDir = overrides.home_dir ?? process.env["CONFIGS_HOME"] ?? process.env["HOME"] ?? homedir2();
   const os = overrides.os ?? currentOsType();
   const osFamily = normalizeOsFamily(os);
-  const bunBinDir = overrides.bun_bin_dir ?? join2(homeDir, ".bun", "bin");
-  const defaultBunPath = osFamily === "macos" && existsSync2(BREW_BUN_PATH) ? BREW_BUN_PATH : join2(bunBinDir, "bun");
+  const bunBinDir = overrides.bun_bin_dir ?? join3(homeDir, ".bun", "bin");
+  const defaultBunPath = osFamily === "macos" && existsSync2(BREW_BUN_PATH) ? BREW_BUN_PATH : join3(bunBinDir, "bun");
   return {
     id: "current-machine",
     hostname: overrides.hostname ?? currentHostname(),
@@ -549,10 +623,10 @@ function detectMachineContext(overrides = {}) {
     created_at: "",
     os_family: osFamily,
     home_dir: homeDir,
-    workspace_root: overrides.workspace_root ?? join2(homeDir, osFamily === "macos" ? "Workspace" : "workspace"),
+    workspace_root: overrides.workspace_root ?? join3(homeDir, osFamily === "macos" ? "Workspace" : "workspace"),
     bun_bin_dir: bunBinDir,
     bun_path: overrides.bun_path ?? defaultBunPath,
-    path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join2("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
+    path_prefix: overrides.path_prefix ?? (osFamily === "macos" ? `${join3("/opt", "homebrew", "bin")}:${bunBinDir}` : bunBinDir)
   };
 }
 function machineContextToVariables(machine) {
@@ -860,7 +934,7 @@ Policy reference: \`${CODEWITH_SHARED_TODOS_STORAGE_POLICY_REFERENCE}\`
 `;
 });
 
-// node_modules/zod/v3/helpers/util.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType = (data) => {
   const t = typeof data;
   switch (t) {
@@ -991,7 +1065,7 @@ var init_util = __esm(() => {
   ]);
 });
 
-// node_modules/zod/v3/ZodError.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/ZodError.js
 var ZodIssueCode, quotelessJson = (obj) => {
   const json = JSON.stringify(obj, null, 2);
   return json.replace(/"([^"]+)":/g, "$1:");
@@ -1112,7 +1186,7 @@ var init_ZodError = __esm(() => {
   };
 });
 
-// node_modules/zod/v3/locales/en.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/locales/en.js
 var errorMap = (issue, _ctx) => {
   let message;
   switch (issue.code) {
@@ -1219,7 +1293,7 @@ var init_en = __esm(() => {
   en_default = errorMap;
 });
 
-// node_modules/zod/v3/errors.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/errors.js
 function setErrorMap(map) {
   overrideErrorMap = map;
 }
@@ -1232,7 +1306,7 @@ var init_errors = __esm(() => {
   overrideErrorMap = en_default;
 });
 
-// node_modules/zod/v3/helpers/parseUtil.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 function addIssueToContext(ctx, issueData) {
   const overrideMap = getErrorMap();
   const issue = makeIssue({
@@ -1337,10 +1411,10 @@ var init_parseUtil = __esm(() => {
   });
 });
 
-// node_modules/zod/v3/helpers/typeAliases.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/typeAliases.js
 var init_typeAliases = () => {};
 
-// node_modules/zod/v3/helpers/errorUtil.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/helpers/errorUtil.js
 var errorUtil;
 var init_errorUtil = __esm(() => {
   (function(errorUtil2) {
@@ -1349,7 +1423,7 @@ var init_errorUtil = __esm(() => {
   })(errorUtil || (errorUtil = {}));
 });
 
-// node_modules/zod/v3/types.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/types.js
 class ParseInputLazyPath {
   constructor(parent, value, path, key) {
     this._cachedPath = [];
@@ -4700,116 +4774,116 @@ var init_types2 = __esm(() => {
   NEVER = INVALID;
 });
 
-// node_modules/zod/v3/external.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/v3/external.js
 var exports_external = {};
 __export(exports_external, {
-  void: () => voidType,
-  util: () => util,
-  unknown: () => unknownType,
-  union: () => unionType,
-  undefined: () => undefinedType,
-  tuple: () => tupleType,
-  transformer: () => effectsType,
-  symbol: () => symbolType,
-  string: () => stringType,
-  strictObject: () => strictObjectType,
-  setErrorMap: () => setErrorMap,
-  set: () => setType,
-  record: () => recordType,
-  quotelessJson: () => quotelessJson,
-  promise: () => promiseType,
-  preprocess: () => preprocessType,
-  pipeline: () => pipelineType,
-  ostring: () => ostring,
-  optional: () => optionalType,
-  onumber: () => onumber,
-  oboolean: () => oboolean,
-  objectUtil: () => objectUtil,
-  object: () => objectType,
-  number: () => numberType,
-  nullable: () => nullableType,
-  null: () => nullType,
-  never: () => neverType,
-  nativeEnum: () => nativeEnumType,
-  nan: () => nanType,
-  map: () => mapType,
-  makeIssue: () => makeIssue,
-  literal: () => literalType,
-  lazy: () => lazyType,
-  late: () => late,
-  isValid: () => isValid,
-  isDirty: () => isDirty,
-  isAsync: () => isAsync,
-  isAborted: () => isAborted,
-  intersection: () => intersectionType,
-  instanceof: () => instanceOfType,
-  getParsedType: () => getParsedType,
-  getErrorMap: () => getErrorMap,
-  function: () => functionType,
-  enum: () => enumType,
-  effect: () => effectsType,
-  discriminatedUnion: () => discriminatedUnionType,
-  defaultErrorMap: () => en_default,
-  datetimeRegex: () => datetimeRegex,
-  date: () => dateType,
-  custom: () => custom,
-  coerce: () => coerce,
-  boolean: () => booleanType,
-  bigint: () => bigIntType,
-  array: () => arrayType,
-  any: () => anyType,
-  addIssueToContext: () => addIssueToContext,
-  ZodVoid: () => ZodVoid,
-  ZodUnknown: () => ZodUnknown,
-  ZodUnion: () => ZodUnion,
-  ZodUndefined: () => ZodUndefined,
-  ZodType: () => ZodType,
-  ZodTuple: () => ZodTuple,
-  ZodTransformer: () => ZodEffects,
-  ZodSymbol: () => ZodSymbol,
-  ZodString: () => ZodString,
-  ZodSet: () => ZodSet,
-  ZodSchema: () => ZodType,
-  ZodRecord: () => ZodRecord,
-  ZodReadonly: () => ZodReadonly,
-  ZodPromise: () => ZodPromise,
-  ZodPipeline: () => ZodPipeline,
-  ZodParsedType: () => ZodParsedType,
-  ZodOptional: () => ZodOptional,
-  ZodObject: () => ZodObject,
-  ZodNumber: () => ZodNumber,
-  ZodNullable: () => ZodNullable,
-  ZodNull: () => ZodNull,
-  ZodNever: () => ZodNever,
-  ZodNativeEnum: () => ZodNativeEnum,
-  ZodNaN: () => ZodNaN,
-  ZodMap: () => ZodMap,
-  ZodLiteral: () => ZodLiteral,
-  ZodLazy: () => ZodLazy,
-  ZodIssueCode: () => ZodIssueCode,
-  ZodIntersection: () => ZodIntersection,
-  ZodFunction: () => ZodFunction,
-  ZodFirstPartyTypeKind: () => ZodFirstPartyTypeKind,
-  ZodError: () => ZodError,
-  ZodEnum: () => ZodEnum,
-  ZodEffects: () => ZodEffects,
-  ZodDiscriminatedUnion: () => ZodDiscriminatedUnion,
-  ZodDefault: () => ZodDefault,
-  ZodDate: () => ZodDate,
-  ZodCatch: () => ZodCatch,
-  ZodBranded: () => ZodBranded,
-  ZodBoolean: () => ZodBoolean,
-  ZodBigInt: () => ZodBigInt,
-  ZodArray: () => ZodArray,
-  ZodAny: () => ZodAny,
-  Schema: () => ZodType,
-  ParseStatus: () => ParseStatus,
-  OK: () => OK,
-  NEVER: () => NEVER,
-  INVALID: () => INVALID,
-  EMPTY_PATH: () => EMPTY_PATH,
+  BRAND: () => BRAND,
   DIRTY: () => DIRTY,
-  BRAND: () => BRAND
+  EMPTY_PATH: () => EMPTY_PATH,
+  INVALID: () => INVALID,
+  NEVER: () => NEVER,
+  OK: () => OK,
+  ParseStatus: () => ParseStatus,
+  Schema: () => ZodType,
+  ZodAny: () => ZodAny,
+  ZodArray: () => ZodArray,
+  ZodBigInt: () => ZodBigInt,
+  ZodBoolean: () => ZodBoolean,
+  ZodBranded: () => ZodBranded,
+  ZodCatch: () => ZodCatch,
+  ZodDate: () => ZodDate,
+  ZodDefault: () => ZodDefault,
+  ZodDiscriminatedUnion: () => ZodDiscriminatedUnion,
+  ZodEffects: () => ZodEffects,
+  ZodEnum: () => ZodEnum,
+  ZodError: () => ZodError,
+  ZodFirstPartyTypeKind: () => ZodFirstPartyTypeKind,
+  ZodFunction: () => ZodFunction,
+  ZodIntersection: () => ZodIntersection,
+  ZodIssueCode: () => ZodIssueCode,
+  ZodLazy: () => ZodLazy,
+  ZodLiteral: () => ZodLiteral,
+  ZodMap: () => ZodMap,
+  ZodNaN: () => ZodNaN,
+  ZodNativeEnum: () => ZodNativeEnum,
+  ZodNever: () => ZodNever,
+  ZodNull: () => ZodNull,
+  ZodNullable: () => ZodNullable,
+  ZodNumber: () => ZodNumber,
+  ZodObject: () => ZodObject,
+  ZodOptional: () => ZodOptional,
+  ZodParsedType: () => ZodParsedType,
+  ZodPipeline: () => ZodPipeline,
+  ZodPromise: () => ZodPromise,
+  ZodReadonly: () => ZodReadonly,
+  ZodRecord: () => ZodRecord,
+  ZodSchema: () => ZodType,
+  ZodSet: () => ZodSet,
+  ZodString: () => ZodString,
+  ZodSymbol: () => ZodSymbol,
+  ZodTransformer: () => ZodEffects,
+  ZodTuple: () => ZodTuple,
+  ZodType: () => ZodType,
+  ZodUndefined: () => ZodUndefined,
+  ZodUnion: () => ZodUnion,
+  ZodUnknown: () => ZodUnknown,
+  ZodVoid: () => ZodVoid,
+  addIssueToContext: () => addIssueToContext,
+  any: () => anyType,
+  array: () => arrayType,
+  bigint: () => bigIntType,
+  boolean: () => booleanType,
+  coerce: () => coerce,
+  custom: () => custom,
+  date: () => dateType,
+  datetimeRegex: () => datetimeRegex,
+  defaultErrorMap: () => en_default,
+  discriminatedUnion: () => discriminatedUnionType,
+  effect: () => effectsType,
+  enum: () => enumType,
+  function: () => functionType,
+  getErrorMap: () => getErrorMap,
+  getParsedType: () => getParsedType,
+  instanceof: () => instanceOfType,
+  intersection: () => intersectionType,
+  isAborted: () => isAborted,
+  isAsync: () => isAsync,
+  isDirty: () => isDirty,
+  isValid: () => isValid,
+  late: () => late,
+  lazy: () => lazyType,
+  literal: () => literalType,
+  makeIssue: () => makeIssue,
+  map: () => mapType,
+  nan: () => nanType,
+  nativeEnum: () => nativeEnumType,
+  never: () => neverType,
+  null: () => nullType,
+  nullable: () => nullableType,
+  number: () => numberType,
+  object: () => objectType,
+  objectUtil: () => objectUtil,
+  oboolean: () => oboolean,
+  onumber: () => onumber,
+  optional: () => optionalType,
+  ostring: () => ostring,
+  pipeline: () => pipelineType,
+  preprocess: () => preprocessType,
+  promise: () => promiseType,
+  quotelessJson: () => quotelessJson,
+  record: () => recordType,
+  set: () => setType,
+  setErrorMap: () => setErrorMap,
+  strictObject: () => strictObjectType,
+  string: () => stringType,
+  symbol: () => symbolType,
+  transformer: () => effectsType,
+  tuple: () => tupleType,
+  undefined: () => undefinedType,
+  union: () => unionType,
+  unknown: () => unknownType,
+  util: () => util,
+  void: () => voidType
 });
 var init_external = __esm(() => {
   init_errors();
@@ -4820,7 +4894,7 @@ var init_external = __esm(() => {
   init_ZodError();
 });
 
-// node_modules/zod/index.js
+// ../../node_modules/.bun/zod@3.25.76/node_modules/zod/index.js
 var init_zod = __esm(() => {
   init_external();
   init_external();
@@ -4829,11 +4903,11 @@ var init_zod = __esm(() => {
 // src/lib/redact.ts
 var exports_redact = {};
 __export(exports_redact, {
-  scanSecrets: () => scanSecrets,
-  redactFormatForTarget: () => redactFormatForTarget,
-  redactContent: () => redactContent,
+  hasSecrets: () => hasSecrets,
   isSecretVarName: () => isSecretVarName,
-  hasSecrets: () => hasSecrets
+  redactContent: () => redactContent,
+  redactFormatForTarget: () => redactFormatForTarget,
+  scanSecrets: () => scanSecrets
 });
 function redactShell(content) {
   const redacted = [];
@@ -5023,7 +5097,7 @@ var init_redact = __esm(() => {
   VALUE_PATTERNS = [
     { re: /npm_[A-Za-z0-9]{36,}/, reason: "npm token" },
     { re: /gh[pousr]_[A-Za-z0-9_]{36,}/, reason: "GitHub token" },
-    { re: /sk-ant-[A-Za-z0-9\-_]{40,}/, reason: "Anthropic API key" },
+    { re: /sk[-]ant-[A-Za-z0-9\-_]{40,}/, reason: "Anthropic API key" },
     { re: /sk-[A-Za-z0-9]{48,}/, reason: "OpenAI API key" },
     { re: /xoxb-[0-9]+-[A-Za-z0-9\-]+/, reason: "Slack bot token" },
     { re: /AIza[0-9A-Za-z\-_]{35}/, reason: "Google API key" },
@@ -5041,7 +5115,7 @@ var init_session_render_contract = __esm(() => {
 });
 
 // src/lib/project-context.ts
-import { basename, dirname, isAbsolute, join as join3, parse, relative, resolve } from "path";
+import { basename, dirname, isAbsolute, join as join4, parse, relative, resolve as resolve2 } from "path";
 function revisionKey(value) {
   const sequence = value.match(/^(?:rev-)?([0-9]+)$/);
   if (sequence)
@@ -5603,16 +5677,16 @@ var init_asset_plan = __esm(() => {
 
 // src/lib/cursor-authority.ts
 import { createHash } from "crypto";
-import { homedir as homedir2 } from "os";
-import { join as join4, resolve as resolve2 } from "path";
+import { homedir as homedir3 } from "os";
+import { join as join5, resolve as resolve3 } from "path";
 function sha256(content) {
   return createHash("sha256").update(content).digest("hex");
 }
 function homeDir() {
-  return process.env["HOME"] || homedir2();
+  return process.env["HOME"] || homedir3();
 }
 function isCursorGlobalAuthorityPath(path) {
-  return resolve2(path) === resolve2(join4(homeDir(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
+  return resolve3(path) === resolve3(join5(homeDir(), CURSOR_GLOBAL_AUTHORITY_RELATIVE_PATH));
 }
 function stampCursorGlobalAuthorityMarker(content) {
   if (CURSOR_GLOBAL_AUTHORITY_MARKER_PATTERN.test(content))
@@ -5634,6 +5708,12 @@ var init_cursor_authority = __esm(() => {
   CURSOR_GLOBAL_AUTHORITY_FRONTMATTER_PATTERN = /^---\n[\s\S]*?\n---(?:\n|$)/;
 });
 
+// src/lib/session-authority.ts
+var CLAUDE_LEGACY_AUTHORITY_MAX_BYTES;
+var init_session_authority = __esm(() => {
+  CLAUDE_LEGACY_AUTHORITY_MAX_BYTES = 256 * 1024;
+});
+
 // src/lib/session-render.ts
 var ANTIGRAVITY_RULE_FILE_CHAR_LIMIT = 12000, SESSION_RENDERER_OWNER_ID = "instructions-session-renderer", SESSION_RENDER_PROFILE_ENTRYPOINTS, SESSION_RENDER_OWNED_CONFIG_TARGETS, IDENTITY_EXPORT_AUTHORITY, CODEWITH_PROTECTED_REPLACEMENT_TARGETS, CODEWITH_FLATTENED_ADAPTER, CODEWITH_NATIVE_ADAPTER, SESSION_TOOL_ADAPTERS, SESSION_RENDER_MANAGED_DIRS, SESSION_RENDER_SHARED_MANAGED_DIRS, SESSION_RENDER_EXCLUSIVE_MANAGED_PATHS, CANONICAL_IDENTITY_EXPORT_PACKAGES;
 var init_session_render = __esm(() => {
@@ -5644,8 +5724,11 @@ var init_session_render = __esm(() => {
   init_transforms();
   init_asset_plan();
   init_cursor_authority();
+  init_session_authority();
   init_session_render_contract();
   init_session_render_contract();
+  init_raw_store_root();
+  init_raw_store_root();
   SESSION_RENDER_PROFILE_ENTRYPOINTS = [
     ".claude/CLAUDE.md",
     ".codex/AGENTS.md",
@@ -6218,37 +6301,6 @@ var init_profiles = __esm(() => {
   init_asset_plan();
 });
 
-// src/db/snapshots.ts
-function createSnapshot(configId, content, version, db) {
-  const d = db || getDatabase();
-  const id = uuid();
-  const ts = now();
-  d.run("INSERT INTO config_snapshots (id, config_id, content, version, created_at) VALUES (?, ?, ?, ?, ?)", [id, configId, content, version, ts]);
-  return { id, config_id: configId, content, version, created_at: ts };
-}
-function listSnapshots(configId, db) {
-  const d = db || getDatabase();
-  return d.query("SELECT * FROM config_snapshots WHERE config_id = ? ORDER BY version DESC").all(configId);
-}
-function getSnapshot(id, db) {
-  const d = db || getDatabase();
-  return d.query("SELECT * FROM config_snapshots WHERE id = ?").get(id);
-}
-function getSnapshotByVersion(configId, version, db) {
-  const d = db || getDatabase();
-  return d.query("SELECT * FROM config_snapshots WHERE config_id = ? AND version = ?").get(configId, version);
-}
-function pruneSnapshots(configId, keep = 10, db) {
-  const d = db || getDatabase();
-  const result = d.run(`DELETE FROM config_snapshots WHERE config_id = ? AND id NOT IN (
-      SELECT id FROM config_snapshots WHERE config_id = ? ORDER BY version DESC LIMIT ?
-    )`, [configId, configId, keep]);
-  return result.changes;
-}
-var init_snapshots = __esm(() => {
-  init_database();
-});
-
 // src/db/machines.ts
 import { arch, hostname, type } from "os";
 function currentHostname2() {
@@ -6320,12 +6372,13 @@ function parseBoundedOrLegacyPage(value, legacyItems, options, label) {
   return { ...page, source_bounded: false };
 }
 function resolveCloudConfig(env = process.env) {
+  assertNoLegacyStorageMode(env);
   const apiUrl = env[API_URL_ENV]?.trim();
   const apiKey = env[API_KEY_ENV]?.trim();
   if (!apiUrl && !apiKey)
     return null;
   if (!apiUrl || !apiKey) {
-    throw new Error(`API mode requires BOTH ${API_URL_ENV} and ${API_KEY_ENV}; only ` + `${apiUrl ? API_URL_ENV : API_KEY_ENV} is set. Set both to use the cloud API, ` + `or unset both to use the local store.`);
+    throw new Error(`API mode requires BOTH ${API_URL_ENV} and ${API_KEY_ENV}; only ` + `${apiUrl ? API_URL_ENV : API_KEY_ENV} is set. Set both to use the HTTP API, ` + `or unset both to use the local store.`);
   }
   return { apiUrl, apiKey };
 }
@@ -6812,6 +6865,7 @@ var init_config_store = __esm(() => {
   init_types();
   init_bounded_read();
   init_instruction_graph();
+  init_retired_storage_mode();
   CloudHttpError = class CloudHttpError extends Error {
     status;
     body;
@@ -6826,7 +6880,7 @@ var init_config_store = __esm(() => {
 
 // src/lib/session-render-ownership.ts
 import { existsSync as existsSync3, readFileSync, statSync } from "fs";
-import { dirname as dirname2, join as join5, parse as parse2, relative as relative2, sep } from "path";
+import { dirname as dirname2, join as join6, parse as parse2, relative as relative2, sep } from "path";
 function toSegments(absolutePath2) {
   return absolutePath2.replaceAll("\\", "/").split("/").filter(Boolean);
 }
@@ -6874,7 +6928,7 @@ function sessionRenderManifestClaimsPath(absolutePath2) {
   const root = parse2(absolutePath2).root;
   let home = dirname2(absolutePath2);
   for (let depth = 0;depth < MANIFEST_ANCESTOR_LIMIT; depth += 1) {
-    const manifestPath = join5(home, ...SESSION_RENDER_MANIFEST_RELATIVE_PATH.split("/"));
+    const manifestPath = join6(home, ...SESSION_RENDER_MANIFEST_RELATIVE_PATH.split("/"));
     const relativePaths = readManifestRelativePaths(manifestPath);
     if (relativePaths) {
       const claimed = relative2(home, absolutePath2).split(sep).join("/");
@@ -6901,25 +6955,25 @@ var init_session_render_ownership = __esm(() => {
 // src/lib/apply.ts
 var exports_apply = {};
 __export(exports_apply, {
-  previewConfigs: () => previewConfigs,
-  normalizeTargetPath: () => normalizeTargetPath,
-  getConfigHome: () => getConfigHome,
-  expandPath: () => expandPath,
-  applyConfigsWithReport: () => applyConfigsWithReport,
+  applyConfig: () => applyConfig,
   applyConfigs: () => applyConfigs,
-  applyConfig: () => applyConfig
+  applyConfigsWithReport: () => applyConfigsWithReport,
+  expandPath: () => expandPath,
+  getConfigHome: () => getConfigHome,
+  normalizeTargetPath: () => normalizeTargetPath,
+  previewConfigs: () => previewConfigs
 });
 import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync2, realpathSync, writeFileSync } from "fs";
-import { basename as basename3, dirname as dirname3, join as join6, resolve as resolve3 } from "path";
-import { homedir as homedir3 } from "os";
+import { basename as basename3, dirname as dirname3, join as join7, resolve as resolve4 } from "path";
+import { homedir as homedir4 } from "os";
 function getConfigHome() {
-  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir3();
+  return process.env["CONFIGS_HOME"] || process.env["HOME"] || homedir4();
 }
 function expandPath(p) {
   if (p.startsWith("~/")) {
-    return resolve3(getConfigHome(), p.slice(2));
+    return resolve4(getConfigHome(), p.slice(2));
   }
-  return resolve3(p);
+  return resolve4(p);
 }
 function normalizeTargetPath(p) {
   const expanded = expandPath(p);
@@ -6931,7 +6985,7 @@ function normalizeTargetPath(p) {
     while (true) {
       if (existsSync4(current)) {
         try {
-          return resolve3(realpathSync(current), ...missingSegments);
+          return resolve4(realpathSync(current), ...missingSegments);
         } catch {
           return expanded;
         }
@@ -7324,7 +7378,7 @@ function sessionRendererOwnsCanonicalTarget(normalized, opts) {
     getConfigHome(),
     opts.vars?.["HOME_DIR"]
   ].filter((home) => typeof home === "string" && home.length > 0));
-  if ([...homes].some((home) => SESSION_RENDER_OWNED_CONFIG_TARGETS.some((relativePath) => normalized === normalizeTargetPath(join6(home, ...relativePath.split("/"))))))
+  if ([...homes].some((home) => SESSION_RENDER_OWNED_CONFIG_TARGETS.some((relativePath) => normalized === normalizeTargetPath(join7(home, ...relativePath.split("/"))))))
     return true;
   return sessionRenderOwnsPath(normalized);
 }
@@ -7344,21 +7398,21 @@ var init_apply = __esm(() => {
 // src/lib/sync.ts
 var exports_sync = {};
 __export(exports_sync, {
-  syncToDisk: () => syncToDisk,
-  syncToDir: () => syncToDir,
-  syncProject: () => syncProject,
-  syncKnown: () => syncKnown,
-  syncFromDir: () => syncFromDir,
-  diffConfig: () => diffConfig,
-  detectFormat: () => detectFormat,
-  detectCategory: () => detectCategory,
-  detectAgent: () => detectAgent,
-  PROJECT_CONFIG_FILES: () => PROJECT_CONFIG_FILES,
+  CLAUDE_PROMPT_OUTPUTS: () => CLAUDE_PROMPT_OUTPUTS,
   KNOWN_CONFIGS: () => KNOWN_CONFIGS,
-  CLAUDE_PROMPT_OUTPUTS: () => CLAUDE_PROMPT_OUTPUTS
+  PROJECT_CONFIG_FILES: () => PROJECT_CONFIG_FILES,
+  detectAgent: () => detectAgent,
+  detectCategory: () => detectCategory,
+  detectFormat: () => detectFormat,
+  diffConfig: () => diffConfig,
+  syncFromDir: () => syncFromDir,
+  syncKnown: () => syncKnown,
+  syncProject: () => syncProject,
+  syncToDir: () => syncToDir,
+  syncToDisk: () => syncToDisk
 });
 import { existsSync as existsSync5, readdirSync, readFileSync as readFileSync3 } from "fs";
-import { basename as basename4, extname as extname2, join as join7 } from "path";
+import { basename as basename4, extname as extname2, join as join8 } from "path";
 function claudeRuleOutputs(fileName) {
   const stem = basename4(fileName, extname2(fileName));
   return [
@@ -7422,7 +7476,7 @@ async function syncProject(opts) {
   const allConfigs = await store.listConfigs();
   const machine = detectMachineContext();
   for (const pf of PROJECT_CONFIG_FILES) {
-    const abs = join7(absDir, pf.file);
+    const abs = join8(absDir, pf.file);
     if (!existsSync5(abs))
       continue;
     try {
@@ -7455,19 +7509,19 @@ async function syncProject(opts) {
     }
   }
   for (const ruleDir of [
-    { dir: join7(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
-    { dir: join7(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
-    { dir: join7(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
-    { dir: join7(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
-    { dir: join7(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
-    { dir: join7(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
-    { dir: join7(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
+    { dir: join8(absDir, ".claude", "rules"), agent: "claude", namePrefix: "rules" },
+    { dir: join8(absDir, ".agents", "rules"), agent: "antigravity", namePrefix: "antigravity-rules" },
+    { dir: join8(absDir, ".cursor", "rules"), agent: "cursor", namePrefix: "cursor-rules" },
+    { dir: join8(absDir, ".github", "instructions"), agent: "copilot", namePrefix: "copilot-instructions" },
+    { dir: join8(absDir, ".devin", "rules"), agent: "devin", namePrefix: "devin-rules" },
+    { dir: join8(absDir, ".windsurf", "rules"), agent: "windsurf-legacy", namePrefix: "windsurf-rules" },
+    { dir: join8(absDir, ".clinerules"), agent: "cline", namePrefix: "cline-rules" }
   ]) {
     if (!existsSync5(ruleDir.dir))
       continue;
     const mdFiles = readdirSync(ruleDir.dir).filter((f) => f.endsWith(".md") || f.endsWith(".mdc"));
     for (const f of mdFiles) {
-      const abs = join7(ruleDir.dir, f);
+      const abs = join8(ruleDir.dir, f);
       const raw = readFileSync3(abs, "utf-8");
       const redacted = redactContent(raw, "markdown");
       const machineAware = templateizeMachineContent(redacted.content, machine);
@@ -7514,7 +7568,7 @@ async function syncKnown(opts = {}) {
       const extensions = known.rulesExtensions ?? [".md", ".mdc"];
       const ruleFiles = readdirSync(absDir).filter((f) => extensions.some((ext) => f.endsWith(ext)));
       for (const f of ruleFiles) {
-        const abs2 = join7(absDir, f);
+        const abs2 = join8(absDir, f);
         const targetPath = abs2.replace(home, "~");
         if (existingOutputOwners.has(normalizeTargetPath(targetPath)) || isKnownGeneratedTargetPath(targetPath)) {
           result.skipped.push(`${targetPath} (generated output)`);
@@ -7885,8 +7939,8 @@ var init_sync = __esm(() => {
 
 // src/lib/sync-dir.ts
 import { existsSync as existsSync6, readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync2 } from "fs";
-import { join as join8, relative as relative3 } from "path";
-import { homedir as homedir4 } from "os";
+import { join as join9, relative as relative3 } from "path";
+import { homedir as homedir5 } from "os";
 function shouldSkip(p) {
   return SKIP.some((s) => p.includes(s));
 }
@@ -7895,9 +7949,9 @@ async function syncFromDir(dir, opts = {}) {
   const absDir = expandPath(dir);
   if (!existsSync6(absDir))
     return { added: 0, updated: 0, unchanged: 0, skipped: [`Not found: ${absDir}`] };
-  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync2(absDir).map((f) => join8(absDir, f)).filter((f) => statSync2(f).isFile());
+  const files = opts.recursive !== false ? walkDir(absDir) : readdirSync2(absDir).map((f) => join9(absDir, f)).filter((f) => statSync2(f).isFile());
   const result = { added: 0, updated: 0, unchanged: 0, skipped: [] };
-  const home = homedir4();
+  const home = homedir5();
   const allConfigs = await store.listConfigs();
   for (const file of files) {
     if (shouldSkip(file)) {
@@ -7931,7 +7985,7 @@ async function syncFromDir(dir, opts = {}) {
 }
 async function syncToDir(dir, opts = {}) {
   const store = opts.store ?? resolveConfigStore();
-  const home = homedir4();
+  const home = homedir5();
   const absDir = expandPath(dir);
   const normalized = dir.startsWith("~/") ? dir : absDir.replace(home, "~");
   const configs = (await store.listConfigs()).filter((c) => c.target_path && (c.target_path.startsWith(normalized) || c.target_path.startsWith(absDir)));
@@ -7955,7 +8009,7 @@ async function syncToDir(dir, opts = {}) {
 }
 function walkDir(dir, files = []) {
   for (const entry of readdirSync2(dir, { withFileTypes: true })) {
-    const full = join8(dir, entry.name);
+    const full = join9(dir, entry.name);
     if (shouldSkip(full))
       continue;
     if (entry.isDirectory())
@@ -7974,10 +8028,10 @@ var init_sync_dir = __esm(() => {
 });
 
 // package.json
-var require_package = __commonJS((exports, module) => {
+var require_package = __commonJS(function(exports, module) {
   module.exports = {
     name: "@hasna/instructions",
-    version: "0.4.36",
+    version: "0.4.39",
     description: "AI coding agent instruction & configuration manager \u2014 store, version, apply, and share all your AI coding configs. CLI + MCP + HTTP API (instructions-serve) + generated SDK + Dashboard.",
     type: "module",
     main: "dist/index.js",
@@ -7997,6 +8051,7 @@ var require_package = __commonJS((exports, module) => {
     },
     files: [
       "dist",
+      "assets/skills/inbox/SKILL.md",
       "dashboard/dist",
       "LICENSE",
       "README.md"
@@ -8010,14 +8065,15 @@ var require_package = __commonJS((exports, module) => {
       "generate:sdk": "bun run scripts/generate-sdk.ts",
       "kit:check": "bunx @hasna/contracts vendor-kit --check",
       typecheck: "tsc --noEmit",
-      test: "bun test",
-      "check:package-secrets": "bun run src/cli/index.tsx package-manager-scan --fail-on-findings --home .",
+      test: "env -u HASNA_INSTRUCTIONS_API_URL -u HASNA_INSTRUCTIONS_API_KEY bun test",
+      "check:package-secrets": "bun run src/cli/index.tsx package-manager-scan --fail-on-findings .",
       "dev:cli": "bun run src/cli/index.tsx",
       "dev:mcp": "bun run src/mcp/index.ts",
       "dev:serve": "bun run src/server/index.ts",
       seed: "bun run scripts/seed.ts",
       prepublishOnly: "bun run scripts/check-publish-hold.ts && bun run build",
-      postinstall: "mkdir -p $HOME/.hasna/instructions $HOME/.hasna/instructions/backups 2>/dev/null || true"
+      postinstall: "mkdir -p $HOME/.hasna/instructions $HOME/.hasna/instructions/backups 2>/dev/null || true",
+      prepack: "bun run build"
     },
     keywords: [
       "instructions",
@@ -8051,8 +8107,8 @@ var require_package = __commonJS((exports, module) => {
     author: "Andrei Hasna <andrei@hasna.com>",
     license: "Apache-2.0",
     dependencies: {
-      "@hasna/contracts": "0.4.2",
-      "@hasna/events": "^0.1.6",
+      "@hasna/contracts": "0.13.1",
+      "@hasna/events": "^0.1.16",
       "@modelcontextprotocol/sdk": "^1.12.1",
       chalk: "^5.4.1",
       commander: "^13.1.0",
@@ -8066,6 +8122,7 @@ var require_package = __commonJS((exports, module) => {
       "@types/bun": "^1.2.4",
       "@types/pg": "^8.11.11",
       "@types/react": "^18.3.18",
+      "bun-types": "1.3.14",
       typescript: "^5.7.3"
     }
   };