@hasna/instructions 0.5.6 → 0.6.0

package/dist/sdk/resolve.d.ts

@@ -0,0 +1,82 @@
+import { InstructionsV1Client } from "./v1.generated.js";
+/** The app slug the shared resolver resolves credentials and authority for. */
+export declare const INSTRUCTIONS_SDK_APP = "instructions";
+/** The Keychain-tier controls the SDK forwards to the resolver. */
+export interface InstructionsSdkKeychainOptions {
+    enabled?: boolean;
+    platform?: string;
+    hostname?: () => string;
+    run?: (argv: readonly string[]) => {
+        status: number | null;
+        stdout: string;
+        stderr: string;
+    };
+}
+/** An environment as the resolver reads it. */
+export type InstructionsSdkEnv = Record<string, string | undefined>;
+/** Options for resolving the SDK transport and building the `/v1` client. */
+export interface InstructionsSdkResolveOptions {
+    /** Tier 1: an explicit authority (origin, with or without a trailing `/v1`). */
+    baseUrl?: string;
+    /** Tier 1: an explicit credential. Required when `baseUrl` is explicit. */
+    apiKey?: string;
+    /** Tier 1 profile selection; also used by tests to inject a fake `security` runner. */
+    credentials?: {
+        apiKey?: string;
+        profile?: string;
+        keychain?: InstructionsSdkKeychainOptions;
+    };
+    /** Defaults to `process.env`. */
+    env?: InstructionsSdkEnv;
+    /** Custom fetch (defaults to global fetch). */
+    fetch?: typeof fetch;
+    /** Extra headers merged into every request. */
+    headers?: Record<string, string>;
+}
+/**
+ * Where the SDK's credential and authority came from — never a resolver-tier
+ * key VALUE. The value itself is only ever produced by
+ * {@link createInstructionsV1ClientFromEnv}, which hands it straight to the
+ * transport; a report or diagnostic can never leak it.
+ */
+export interface InstructionsSdkTransportReport {
+    /** `"explicit"` for a caller-selected authority+key pair, `"http"` for a resolver-decided hosted run. */
+    mode: "explicit" | "http";
+    /** Origin (and any gateway path prefix) WITHOUT the `/v1` suffix. */
+    baseUrl: string;
+    /** The caller's own key in `"explicit"` mode; null when the chain decided (the value is not reported). */
+    apiKey: string | null;
+    /** WHERE the key came from: an env key NAME, a Keychain reference, a path, or `"explicit apiKey argument"`. */
+    apiKeySource: string | null;
+    /** WHERE the authority came from, or `"default"` for the fleet gateway. */
+    apiUrlSource: string;
+}
+/**
+ * Resolve the SDK's authority and credential SOURCE.
+ *
+ * An explicit `baseUrl` + `apiKey` pair is a pin the caller owns and is used
+ * verbatim (never resolved around). An explicit `baseUrl` WITHOUT an `apiKey`
+ * throws — the SDK must not attach the machine's fleet key to an arbitrary
+ * authority (#1794). Otherwise the @hasna/contracts chain decides, and every
+ * refusal throws; there is no local mode on this surface.
+ */
+export declare function resolveInstructionsSdkTransport(options?: InstructionsSdkResolveOptions): InstructionsSdkTransportReport;
+/**
+ * Build the hosted `/v1` client with the fleet resolver behind it, fresh on
+ * every request.
+ *
+ * The generated client stores whatever key it is handed, so a client built
+ * once and held for hours would keep sending the key that resolved at
+ * construction — the staleness the fresh-per-call chain exists to remove.
+ * Rather than forking the generated file, the credential is re-resolved in a
+ * `fetch` wrapper: the generated request has already set `x-api-key` from its
+ * stored value by the time we see it, and we overwrite that header with the
+ * key the chain resolves NOW. A re-resolution that throws or comes back empty
+ * leaves the generated header in place, so a transient unreadable Keychain
+ * cannot turn a working client into a failing one mid-flight.
+ *
+ * In `"explicit"` mode (caller-supplied baseUrl + apiKey) the key is a pin the
+ * caller owns and is sent verbatim on every request.
+ */
+export declare function createInstructionsV1ClientFromEnv(options?: InstructionsSdkResolveOptions): InstructionsV1Client;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/sdk/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/sdk/resolve.ts"],"names":[],"mappings":"AA2CA,OAAO,EAAE,oBAAoB,EAAoC,MAAM,mBAAmB,CAAC;AAE3F,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAUnD,mEAAmE;AACnE,MAAM,WAAW,8BAA8B;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9F;AAED,+CAA+C;AAC/C,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAEpE,6EAA6E;AAC7E,MAAM,WAAW,6BAA6B;IAC5C,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,WAAW,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,8BAA8B,CAAA;KAAE,CAAC;IAC/F,iCAAiC;IACjC,GAAG,CAAC,EAAE,kBAAkB,CAAC;IACzB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,8BAA8B;IAC7C,yGAAyG;IACzG,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,0GAA0G;IAC1G,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,+GAA+G;IAC/G,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,GAAE,6BAAkC,GAC1C,8BAA8B,CA6BhC;AAqBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,GAAE,6BAAkC,GAC1C,oBAAoB,CAmCtB"}

package/dist/sdk/resolve.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resolve.test.d.ts.map

package/dist/sdk/resolve.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.test.d.ts","sourceRoot":"","sources":["../../src/sdk/resolve.test.ts"],"names":[],"mappings":""}

package/dist/sdk/sdk-bundle-self-contained.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sdk-bundle-self-contained.test.d.ts.map

package/dist/sdk/sdk-bundle-self-contained.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-bundle-self-contained.test.d.ts","sourceRoot":"","sources":["../../src/sdk/sdk-bundle-self-contained.test.ts"],"names":[],"mappings":""}

package/dist/sdk/v1.generated.d.ts

@@ -0,0 +1,288 @@
+export interface Config {
+    "id"?: string;
+    "name"?: string;
+    "slug"?: string;
+    "kind"?: string;
+    "category"?: string;
+    "agent"?: string;
+    "target_path"?: string | null;
+    "outputs"?: Array<Record<string, unknown>>;
+    "format"?: string;
+    "content"?: string;
+    "description"?: string | null;
+    "tags"?: Array<string>;
+    "is_template"?: boolean;
+    "version"?: number;
+    "created_at"?: string;
+    "updated_at"?: string;
+    "synced_at"?: string | null;
+}
+export interface Profile {
+    "id"?: string;
+    "name"?: string;
+    "slug"?: string;
+    "description"?: string | null;
+    "selectors"?: Record<string, unknown>;
+    "variables"?: Record<string, unknown>;
+    "created_at"?: string;
+    "updated_at"?: string;
+}
+export interface CreateConfigInput {
+    "name": string;
+    "category": string;
+    "content": string;
+    "kind"?: string;
+    "agent"?: string;
+    "target_path"?: string;
+    "format"?: string;
+    "description"?: string;
+    "tags"?: Array<string>;
+    "is_template"?: boolean;
+}
+export interface UpdateConfigInput {
+    "name"?: string;
+    "category"?: string;
+    "agent"?: string;
+    "content"?: string;
+    "description"?: string;
+    "tags"?: Array<string>;
+    "is_template"?: boolean;
+}
+export interface CreateProfileInput {
+    "name": string;
+    "description"?: string;
+    "selectors"?: Record<string, unknown>;
+    "variables"?: Record<string, unknown>;
+}
+export interface AddProfileConfigInput {
+    "config_id": string;
+}
+export interface ProfileConfigBindingSpec {
+    "schema": string;
+    "activation": Record<string, unknown>;
+    "required": boolean;
+    "fallback": "fail" | "flatten" | "promote-always" | "omit";
+    "providers"?: Array<Record<string, unknown>>;
+    "depends_on"?: Array<string>;
+    "replaces"?: Array<string>;
+    "conflicts_with"?: Array<string>;
+}
+export interface ProfileConfigBinding {
+    "profile_id": string;
+    "config_id": string;
+    "sort_order": number;
+    "binding": ProfileConfigBindingSpec;
+}
+export interface ProfileAssetBindingSpec {
+    "schema": string;
+    "assetKey": string;
+    "kind": "skill" | "workflow" | "plugin" | "extension" | "hook" | "custom-agent";
+    "enabled": boolean;
+    "required": boolean;
+    "selector": {
+        "provider": string;
+        "versionRange": string;
+        "surface": string;
+        "scope": "global" | "project" | "session";
+    };
+    "source": {
+        "kind": "skill" | "workflow" | "plugin" | "extension" | "hook" | "custom-agent";
+        "locator": string;
+        "digest": string;
+        "immutable": boolean;
+        "allowed": boolean;
+    };
+    "destination": {
+        "strategy": "emit-file" | "install-local" | "install-marketplace" | "unsupported";
+        "root": "target-home" | "project-root";
+        "relativePath": string;
+    };
+    "uninstall": "remove-managed" | "retain";
+    "rollback": "snapshot" | "installer-receipt" | "none";
+}
+export interface ProfileAssetBinding {
+    "profile_id": string;
+    "source_config_id": string;
+    "sort_order": number;
+    "binding": ProfileAssetBindingSpec;
+}
+export interface AddProfileAssetInput {
+    "source_config_id": string;
+    "binding": ProfileAssetBindingSpec;
+}
+export interface ProfileConfigAddedResponse {
+    "added": boolean;
+}
+export interface ProfileConfigRemovedResponse {
+    "removed": boolean;
+}
+export interface ProfileWithConfigs {
+    "id"?: string;
+    "name"?: string;
+    "slug"?: string;
+    "description"?: string | null;
+    "selectors"?: Record<string, unknown>;
+    "variables"?: Record<string, unknown>;
+    "created_at"?: string;
+    "updated_at"?: string;
+    "configs"?: Array<Config>;
+}
+export interface BoundedProfilePage {
+    "profiles"?: Array<Profile>;
+    "items": Array<Profile>;
+    "count"?: number;
+    "total": number;
+    "limit": number;
+    "cursor": number;
+    "next_cursor": number | null;
+    "has_more": boolean;
+    "complete": boolean;
+    "truncated": boolean;
+    "source_bounded": boolean;
+}
+export interface BoundedConfigPage {
+    "items": Array<Config>;
+    "total": number;
+    "limit": number;
+    "cursor": number;
+    "next_cursor": number | null;
+    "has_more": boolean;
+    "complete": boolean;
+    "truncated": boolean;
+    "source_bounded": boolean;
+}
+export interface ProfileShowResponse {
+    "profile": ProfileWithConfigs;
+    "configs": BoundedConfigPage;
+}
+export interface ProfileResolutionRead {
+    "profile": Profile | null;
+    "scanned": number | null;
+    "total": number | null;
+    "batch_limit": number | null;
+    "source_bounded": boolean;
+    "complete": boolean;
+    "truncated": boolean;
+}
+export interface InstructionsV1ClientOptions {
+    /** Base URL, e.g. process.env.APP_API_URL. */
+    baseUrl: string;
+    /** API key, e.g. process.env.APP_API_KEY. Sent as the 'x-api-key' header. */
+    apiKey?: string;
+    /** Custom fetch (defaults to global fetch). */
+    fetch?: typeof fetch;
+    /** Extra headers merged into every request. */
+    headers?: Record<string, string>;
+}
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(status: number, message: string, body: unknown);
+}
+export declare class InstructionsV1Client {
+    private readonly baseUrl;
+    private readonly apiKey;
+    private readonly fetchImpl;
+    private readonly baseHeaders;
+    constructor(options: InstructionsV1ClientOptions);
+    private request;
+    /** List configs */
+    listConfigs(query?: {
+        "category"?: string;
+        "agent"?: string;
+        "kind"?: string;
+        "search"?: string;
+    }, init?: RequestInit): Promise<{
+        "configs"?: Array<Config>;
+        "count"?: number;
+    }>;
+    /** Create a config */
+    createConfig(body: CreateConfigInput, init?: RequestInit): Promise<{
+        "config"?: Config;
+    }>;
+    /** Get a config by id or slug */
+    getConfig(id: string, init?: RequestInit): Promise<{
+        "config"?: Config;
+    }>;
+    /** Delete a config */
+    deleteConfig(id: string, init?: RequestInit): Promise<{
+        "deleted"?: boolean;
+        "id"?: string;
+    }>;
+    /** Update a config */
+    updateConfig(id: string, body: UpdateConfigInput, init?: RequestInit): Promise<{
+        "config"?: Config;
+    }>;
+    /** List a config's version snapshots */
+    listSnapshots(id: string, init?: RequestInit): Promise<{
+        "snapshots"?: Array<Record<string, unknown>>;
+        "count"?: number;
+    }>;
+    /** Snapshot a config's current content */
+    createSnapshot(id: string, init?: RequestInit): Promise<{
+        "snapshot"?: Record<string, unknown>;
+    }>;
+    /** List profiles with producer-side bounds */
+    listProfiles(query?: {
+        "limit"?: number;
+        "cursor"?: number;
+    }, init?: RequestInit): Promise<BoundedProfilePage>;
+    /** Create a profile */
+    createProfile(body: CreateProfileInput, init?: RequestInit): Promise<{
+        "profile"?: Profile;
+    }>;
+    /** Resolve a machine profile by scanning producer-bounded batches */
+    resolveProfile(query?: {
+        "hostname"?: string;
+        "os"?: string;
+        "arch"?: string;
+        "limit"?: number;
+    }, init?: RequestInit): Promise<ProfileResolutionRead>;
+    /** Get a profile (with its configs) by id or slug */
+    getProfile(id: string, query?: {
+        "limit"?: number;
+        "cursor"?: number;
+    }, init?: RequestInit): Promise<ProfileShowResponse>;
+    /** Delete a profile */
+    deleteProfile(id: string, init?: RequestInit): Promise<{
+        "deleted"?: boolean;
+        "id"?: string;
+    }>;
+    /** List typed asset bindings for a profile */
+    getProfileAssetBindings(id: string, init?: RequestInit): Promise<{
+        "assets"?: Array<ProfileAssetBinding>;
+    }>;
+    /** Add a content-addressed asset binding to a profile */
+    addAssetToProfile(id: string, body: AddProfileAssetInput, init?: RequestInit): Promise<{
+        "asset"?: ProfileAssetBinding;
+    }>;
+    /** Replace one schema-versioned profile asset binding */
+    setProfileAssetBinding(id: string, assetKey: string, body: {
+        "binding": ProfileAssetBindingSpec;
+    }, init?: RequestInit): Promise<{
+        "asset"?: ProfileAssetBinding;
+    }>;
+    /** Remove one managed asset binding from a profile */
+    removeAssetFromProfile(id: string, assetKey: string, init?: RequestInit): Promise<{
+        "removed"?: boolean;
+    }>;
+    /** List schema-versioned config bindings for a profile */
+    getProfileConfigBindings(id: string, init?: RequestInit): Promise<{
+        "bindings"?: Array<ProfileConfigBinding>;
+    }>;
+    /** Add a config to a profile */
+    addConfigToProfile(id: string, body: AddProfileConfigInput, init?: RequestInit): Promise<ProfileConfigAddedResponse>;
+    /** Set the schema-versioned binding for one profile config */
+    setProfileConfigBinding(id: string, configId: string, body: {
+        "binding": ProfileConfigBindingSpec;
+    }, init?: RequestInit): Promise<{
+        "binding"?: ProfileConfigBinding;
+    }>;
+    /** Remove a config from a profile */
+    removeConfigFromProfile(id: string, configId: string, init?: RequestInit): Promise<ProfileConfigRemovedResponse>;
+    /** Aggregate config counts by category */
+    getStats(init?: RequestInit): Promise<{
+        "total"?: number;
+    }>;
+}
+//# sourceMappingURL=v1.generated.d.ts.map

package/dist/sdk/v1.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.generated.d.ts","sourceRoot":"","sources":["../../src/sdk/v1.generated.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,MAAM;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAEpa,MAAM,WAAW,OAAO;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;AAEvO,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE;AAEnP,MAAM,WAAW,iBAAiB;IAAG,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE;AAE1L,MAAM,WAAW,kBAAkB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AAE5J,MAAM,WAAW,qBAAqB;IAAG,WAAW,EAAE,MAAM,CAAA;CAAE;AAE9D,MAAM,WAAW,wBAAwB;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,gBAAgB,GAAG,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAE;AAEhU,MAAM,WAAW,oBAAoB;IAAG,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,wBAAwB,CAAA;CAAE;AAE9I,MAAM,WAAW,uBAAuB;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,cAAc,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,cAAc,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAAC,aAAa,EAAE;QAAE,UAAU,EAAE,WAAW,GAAG,eAAe,GAAG,qBAAqB,GAAG,aAAa,CAAC;QAAC,MAAM,EAAE,aAAa,GAAG,cAAc,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,WAAW,EAAE,gBAAgB,GAAG,QAAQ,CAAC;IAAC,UAAU,EAAE,UAAU,GAAG,mBAAmB,GAAG,MAAM,CAAA;CAAE;AAE1vB,MAAM,WAAW,mBAAmB;IAAG,YAAY,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,uBAAuB,CAAA;CAAE;AAEnJ,MAAM,WAAW,oBAAoB;IAAG,kBAAkB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,uBAAuB,CAAA;CAAE;AAExG,MAAM,WAAW,0BAA0B;IAAG,OAAO,EAAE,OAAO,CAAA;CAAE;AAEhE,MAAM,WAAW,4BAA4B;IAAG,SAAS,EAAE,OAAO,CAAA;CAAE;AAEpE,MAAM,WAAW,kBAAkB;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;CAAE;AAE7Q,MAAM,WAAW,kBAAkB;IAAG,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE;AAE3R,MAAM,WAAW,iBAAiB;IAAG,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE;AAE1O,MAAM,WAAW,mBAAmB;IAAG,SAAS,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,iBAAiB,CAAA;CAAE;AAEpG,MAAM,WAAW,qBAAqB;IAAG,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE;AAE1N,MAAM,WAAW,2BAA2B;IAC1C,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,qBAAa,QAAS,SAAQ,KAAK;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAmB,QAAQ,CAAC,IAAI,EAAE,OAAO;gBAAvD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,OAAO;CAI7E;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;gBAEzC,OAAO,EAAE,2BAA2B;YAQlC,OAAO;IA8BnB,mBAAmB;IACb,WAAW,CAAC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQtL,sBAAsB;IAChB,YAAY,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ/F,iCAAiC;IAC3B,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ/E,sBAAsB;IAChB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQnG,sBAAsB;IAChB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ3G,wCAAwC;IAClC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQhI,0CAA0C;IACpC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAQvG,8CAA8C;IACxC,YAAY,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQpH,uBAAuB;IACjB,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAQnG,qEAAqE;IAC/D,cAAc,CAAC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ3J,qDAAqD;IAC/C,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQ/H,uBAAuB;IACjB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAQpG,8CAA8C;IACxC,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAA;KAAE,CAAC;IAQjH,yDAAyD;IACnD,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,mBAAmB,CAAA;KAAE,CAAC;IAQ/H,yDAAyD;IACnD,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,uBAAuB,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,mBAAmB,CAAA;KAAE,CAAC;IAQxK,sDAAsD;IAChD,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAQhH,0DAA0D;IACpD,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,UAAU,CAAC,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAA;KAAE,CAAC;IAQrH,gCAAgC;IAC1B,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAQ1H,8DAA8D;IACxD,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,SAAS,EAAE,wBAAwB,CAAA;KAAE,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC;IAQ7K,qCAAqC;IAC/B,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAQtH,0CAA0C;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAOpE"}

package/dist/server/cloud.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/server/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAgB,UAAU,EAAE,KAAK,cAAc,EAAE,WAAW,EAAwB,MAAM,uBAAuB,CAAC;AACzH,OAAO,EAAmC,KAAK,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAI1G,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AAEpD,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAQhG;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAO7F;AAED,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEtF;AA0BD,+EAA+E;AAC/E,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAkBD,wBAAgB,cAAc,IAAI,WAAW,CAI5C;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAejD;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAkBvD;AAQD,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAmB7F;AAED,iEAAiE;AACjE,wBAAsB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAIlD;AAED,4BAA4B;AAC5B,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAMhD"}
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/server/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAgB,UAAU,EAAE,KAAK,cAAc,EAAE,WAAW,EAAwB,MAAM,uBAAuB,CAAC;AACzH,OAAO,EAAmC,KAAK,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAG1G,eAAO,MAAM,qBAAqB,iBAAiB,CAAC;AAEpD,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAOhG;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAO7F;AAED,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEtF;AA0BD,+EAA+E;AAC/E,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAkBD,wBAAgB,cAAc,IAAI,WAAW,CAI5C;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,CAejD;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAkBvD;AAQD,wBAAgB,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAmB7F;AAED,iEAAiE;AACjE,wBAAsB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAIlD;AAED,4BAA4B;AAC5B,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAgBhD"}

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;;AAsKA,wBAAgE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;;AA6HA,wBAAgE"}

package/dist/server/index.js

@@ -14,7 +14,6 @@ var __export = (target, all) => {
       set: __exportSetter.bind(all, name)
     });
 };
-var __require = import.meta.require;
 
 // ../../node_modules/.bun/hono@4.13.3/node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
@@ -1793,7 +1792,7 @@ function viewWindow(view) {
 }
 function toBuffer(secret) {
   if (typeof secret === "string")
-    return Buffer.from(secret, "utf8");
+    return Buffer.from(secret.trim(), "utf8");
   if (ArrayBuffer.isView(secret)) {
     const [store, byteOffset, byteLength] = viewWindow(secret);
     return Buffer.from(store, byteOffset, byteLength);
@@ -2100,11 +2099,17 @@ class ApiKeyStore {
       return status !== "active";
     };
   }
-  async revoke(kid, reason, atMs = Date.now()) {
+  async revoke(kid, reason, atMs = Date.now(), options = {}) {
+    const params = [kid, new Date(atMs).toISOString(), reason ?? null];
+    let scope = "";
+    if (options.app !== undefined) {
+      params.push(options.app);
+      scope = ` AND app = $${params.length}`;
+    }
     const row = await this.client.get(`UPDATE ${this.table}
           SET revoked_at = COALESCE(revoked_at, $2), revoked_reason = COALESCE(revoked_reason, $3)
-        WHERE kid = $1
-      RETURNING kid`, [kid, new Date(atMs).toISOString(), reason ?? null]);
+        WHERE kid = $1${scope}
+      RETURNING kid`, params);
     return row !== null;
   }
   async touchLastUsed(kid, atMs = Date.now()) {
@@ -2664,35 +2669,13 @@ function instructionsSchemaSql() {
   ];
 }
 
-// src/lib/retired-storage-mode.ts
-var LEGACY_STORAGE_MODE_KEYS = [
-  "HASNA_INSTRUCTIONS_STORAGE_MODE",
-  "HASNA_INSTRUCTIONS_MODE",
-  "INSTRUCTIONS_STORAGE_MODE",
-  "INSTRUCTIONS_MODE"
-];
-function firstDefinedEnvKey(env, keys) {
-  for (const key of keys) {
-    if (Object.hasOwn(env, key) && env[key] !== undefined)
-      return key;
-  }
-  return null;
-}
-function assertNoLegacyStorageMode(env = process.env) {
-  const legacyKey = firstDefinedEnvKey(env, LEGACY_STORAGE_MODE_KEYS);
-  if (!legacyKey)
-    return;
-  throw new Error(`${legacyKey} was removed. Deployment modes no longer exist: delete the storage-mode variable. ` + `The client uses the local SQLite store, or the HTTP API selected by ` + `HASNA_INSTRUCTIONS_API_URL + HASNA_INSTRUCTIONS_API_KEY. ` + `On the server, set HASNA_INSTRUCTIONS_DATABASE_URL to select the postgresql backend, ` + `or leave it unset for sqlite.`);
-}
-
 // src/server/cloud.ts
 var INSTRUCTIONS_APP_SLUG = "instructions";
 function resolveCloudDatabaseUrl(env = process.env) {
-  assertNoLegacyStorageMode(env);
   return env.HASNA_INSTRUCTIONS_DATABASE_URL || env.INSTRUCTIONS_DATABASE_URL || env.DATABASE_URL || undefined;
 }
 function resolveSigningSecret(env = process.env) {
-  return env.HASNA_INSTRUCTIONS_API_SIGNING_KEY || env.HASNA_API_SIGNING_KEY || env.API_KEY_SIGNING_SECRET || undefined;
+  return env.HASNA_INSTRUCTIONS_API_SIGNING_KEY?.trim() || env.HASNA_API_SIGNING_KEY?.trim() || env.API_KEY_SIGNING_SECRET?.trim() || undefined;
 }
 function isPostgresBackendEnabled(env = process.env) {
   return Boolean(resolveCloudDatabaseUrl(env));
@@ -2787,7 +2770,9 @@ async function closeCloud() {
   cachedClient = null;
   cachedStore = null;
   cachedVerifier = null;
+  honoMiddlewareCache.clear();
   schemaEnsured = null;
+  honoMiddlewareCache.clear();
 }
 
 // src/storage/cloud-store.ts
@@ -2839,6 +2824,27 @@ function boundedReadPage(items, total, options = {}) {
   };
 }
 
+// ../contracts/dist/client/transport.js
+import { createRequire } from "module";
+var MAX_CREDENTIAL_FILE_BYTES = 64 * 1024;
+var INSPECT_CUSTOM = Symbol.for("nodejs.util.inspect.custom");
+var CREDENTIAL_SEAL = Symbol.for("hasna:contracts:sealedCredential");
+var AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
+var SECRETS_PACKAGE_SPECIFIER = "@hasna/" + "secrets";
+var requireSecretsSdk = createRequire(import.meta.url);
+var IDEMPOTENT_METHODS = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+var AUTHORITY_OVERRIDE_HEADERS = new Set([
+  "host",
+  ":authority",
+  "forwarded",
+  "x-forwarded-host",
+  "x-original-host"
+]);
+
+// src/lib/local-opt-in.ts
+var INSTRUCTIONS_LOCAL_OPT_IN_ENV_KEYS = ["HASNA_INSTRUCTIONS_LOCAL"];
+var CONTRACTS_AMBIENT_ENVIRONMENT = Symbol.for("hasna:contracts:ambientClientEnvironment");
+
 // src/lib/machine.ts
 function normalizeOsFamily(os) {
   const value = (os ?? "").trim().toLowerCase();
@@ -3049,6 +3055,26 @@ function booleanValue(value, label) {
   return value;
 }
 
+// ../contracts/dist/client/storage.js
+import { createRequire as createRequire2 } from "module";
+var MAX_CREDENTIAL_FILE_BYTES2 = 64 * 1024;
+var INSPECT_CUSTOM2 = Symbol.for("nodejs.util.inspect.custom");
+var CREDENTIAL_SEAL2 = Symbol.for("hasna:contracts:sealedCredential");
+var AMBIENT_ENVIRONMENT2 = Symbol.for("hasna:contracts:ambientClientEnvironment");
+var SECRETS_PACKAGE_SPECIFIER2 = "@hasna/" + "secrets";
+var requireSecretsSdk2 = createRequire2(import.meta.url);
+var IDEMPOTENT_METHODS2 = new Set(["GET", "HEAD", "PUT", "DELETE", "OPTIONS"]);
+var AUTHORITY_OVERRIDE_HEADERS2 = new Set([
+  "host",
+  ":authority",
+  "forwarded",
+  "x-forwarded-host",
+  "x-original-host"
+]);
+
+// src/lib/transport-resolver.ts
+var INSTRUCTIONS_LOCAL_OPT_IN_ENV = INSTRUCTIONS_LOCAL_OPT_IN_ENV_KEYS[0];
+
 // src/lib/global-agent-rules-standard.ts
 var AGENT_OPERATING_RULES_SOURCE_SET_ID = "hasna-global-agent-rules-standard";
 var AGENT_OPERATING_RULES_SOURCE_ID = "hasna-agent-operating-rules";
@@ -9101,8 +9127,6 @@ function buildV1OpenApiDocument(version = getPackageVersion()) {
 }
 
 // src/server/index.ts
-import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
-import { join as join3, extname } from "path";
 if (process.argv.includes("migrate")) {
   if (!resolveCloudDatabaseUrl()) {
     console.error("migrate: no database URL (HASNA_INSTRUCTIONS_DATABASE_URL / INSTRUCTIONS_DATABASE_URL / DATABASE_URL)");
@@ -9173,41 +9197,8 @@ app.all("/v1/*", async (c) => {
   const res = await handleV1Request(c.req.raw, new URL(c.req.url));
   return res ?? c.json({ error: "Not found" }, 404);
 });
-var MIME = { ".html": "text/html", ".js": "application/javascript", ".css": "text/css", ".json": "application/json", ".svg": "image/svg+xml", ".png": "image/png", ".ico": "image/x-icon" };
-function findDashboardDir() {
-  const candidates = [
-    join3(import.meta.dir, "../../dashboard/dist"),
-    join3(import.meta.dir, "../dashboard/dist"),
-    join3(import.meta.dir, "../../../dashboard/dist")
-  ];
-  for (const dir of candidates) {
-    if (existsSync2(join3(dir, "index.html")))
-      return dir;
-  }
-  return null;
-}
-var dashDir = findDashboardDir();
-if (dashDir) {
-  const resolvedDashDir = __require("path").resolve(dashDir);
-  app.get("/*", (c) => {
-    const url = new URL(c.req.url);
-    let filePath = url.pathname === "/" ? "/index.html" : url.pathname;
-    let absPath = __require("path").resolve(join3(dashDir, filePath));
-    if (!absPath.startsWith(resolvedDashDir))
-      return c.json({ error: "Forbidden" }, 403);
-    if (!existsSync2(absPath))
-      absPath = join3(dashDir, "index.html");
-    if (!existsSync2(absPath))
-      return c.json({ error: "Not found" }, 404);
-    const content = readFileSync3(absPath);
-    const ext = extname(absPath);
-    return new Response(content, {
-      headers: { "Content-Type": MIME[ext] || "application/octet-stream" }
-    });
-  });
-}
 var HOST = process.env["HOST"] ?? process.env["INSTRUCTIONS_HOST"] ?? "localhost";
-console.log(`instructions-serve listening on http://${HOST}:${PORT} (backend: ${serviceBackend()})${dashDir ? " (dashboard: /)" : " (no dashboard)"}`);
+console.log(`instructions-serve listening on http://${HOST}:${PORT} (backend: ${serviceBackend()})`);
 var server_default = { port: PORT, hostname: HOST, fetch: app.fetch };
 export {
   server_default as default

package/dist/test-support/preload-state-home.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=preload-state-home.d.ts.map

package/dist/test-support/preload-state-home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preload-state-home.d.ts","sourceRoot":"","sources":["../../src/test-support/preload-state-home.ts"],"names":[],"mappings":""}