@hasna/instructions 0.5.6 → 0.6.1

package/dist/lib/transport-resolver.d.ts

@@ -0,0 +1,80 @@
+import type { InstructionsClientEnv, InstructionsClientTransportResolution, InstructionsCredentialChainOptions, InstructionsStorageClient } from "./client-types.js";
+import { INSTRUCTIONS_LOCAL_OPT_IN_ENV_KEYS, instructionsLocalModeNotice, isInstructionsLocalOptIn } from "./local-opt-in.js";
+/** The app slug: the Keychain service, the `~/.hasna/instructions` folder, the gateway path. */
+export declare const INSTRUCTIONS_APP = "instructions";
+/** The explicit opt-in env, for messages that have to name exactly one name. */
+export declare const INSTRUCTIONS_LOCAL_OPT_IN_ENV: string;
+export { INSTRUCTIONS_LOCAL_OPT_IN_ENV_KEYS, instructionsLocalModeNotice, isInstructionsLocalOptIn };
+/** Injectable seam controls: tier-1 credential inputs and the Keychain runner tests use. */
+export interface InstructionsResolverOptions {
+    credentials?: InstructionsCredentialChainOptions;
+}
+/**
+ * Re-throw a `@hasna/contracts` resolution failure as the Instructions app's
+ * own fail-closed diagnostic, preserving the resolver's message (which names
+ * every tier it consulted) behind the stable `REMOTE_API_*` code callers match
+ * on. Nothing here ever returns a client or a local store: every arm throws.
+ */
+export declare function rethrowInstructionsAuthorityFailure(error: unknown): never;
+/**
+ * Resolve the client transport (authority + credential source) through the one
+ * shared resolver. Throws {@link rethrowInstructionsAuthorityFailure} on every
+ * refusal; never returns a transport without a credential.
+ *
+ * Fresh on every call: the CLI calls it per command, the MCP server per tool
+ * call, and the SDK per client construction — and the contracts transport
+ * additionally re-resolves the credential on every REQUEST.
+ */
+export declare function resolveInstructionsClientTransport(env?: InstructionsClientEnv, options?: InstructionsResolverOptions): InstructionsClientTransportResolution;
+/**
+ * Resolve the authenticated `/v1` storage client through the one shared
+ * resolver. Missing or invalid configuration throws; there is no local-data
+ * return branch. Every request re-resolves the credential through the
+ * transport's binding provider, so a rotation heals a long-lived process
+ * without a rebuild.
+ */
+export declare function resolveInstructionsStorageClient(env?: InstructionsClientEnv, options?: InstructionsResolverOptions): {
+    transport: "http";
+    client: InstructionsStorageClient;
+};
+/**
+ * Machine-readable transport report, for surfaces that report refusals as data
+ * (a status line, `whoami`) rather than as an exception.
+ *
+ * `local_fallback` is ALWAYS false: nothing in this app ever silently demotes
+ * a hosted configuration to the on-box store, and no local-fallback event
+ * exists.
+ */
+export interface InstructionsTransportStatus {
+    /** True when a configured transport is in effect (every non-opt-in run). */
+    selected: boolean;
+    ok: boolean;
+    transport: "http" | "local" | "invalid";
+    api_url_configured: boolean;
+    api_key_configured: boolean;
+    /** WHERE the authority came from: an env key NAME, a Keychain reference, a file PATH, or "default". */
+    api_url_source: string | null;
+    /** WHERE the credential came from: an env key NAME, a Keychain reference, or a file PATH. Never a value. */
+    api_key_source: string | null;
+    /** Which tier of the @hasna/contracts chain supplied the credential. */
+    api_key_tier: string | null;
+    v1_base_url: string | null;
+    issues: string[];
+    local_fallback: false;
+}
+/**
+ * Resolve the current transport and report it. Never throws: a refused
+ * configuration is reported as `ok: false` with the failure in `issues`.
+ */
+export declare function getInstructionsTransportStatus(env?: InstructionsClientEnv, options?: InstructionsResolverOptions): InstructionsTransportStatus;
+/** Test seam: forget that the local-mode line was printed. */
+export declare function __resetLocalInstructionsModeNotice(): void;
+/**
+ * Say — once per process, on stderr — that this run is using the on-box
+ * SQLite store. Local mode is legitimate (the explicit opt-in), but "no
+ * credential resolved" and "deliberately offline" look identical in the output
+ * otherwise, and the first one is usually a misconfiguration (owner rulings
+ * 2026-09-04).
+ */
+export declare function announceLocalInstructionsMode(write?: (line: string) => void): boolean;
+//# sourceMappingURL=transport-resolver.d.ts.map

package/dist/lib/transport-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-resolver.d.ts","sourceRoot":"","sources":["../../src/lib/transport-resolver.ts"],"names":[],"mappings":"AAmDA,OAAO,KAAK,EACV,qBAAqB,EACrB,qCAAqC,EACrC,kCAAkC,EAClC,yBAAyB,EAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,EAE3B,wBAAwB,EAEzB,MAAM,mBAAmB,CAAC;AAE3B,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,iBAAiB,CAAC;AAE/C,gFAAgF;AAChF,eAAO,MAAM,6BAA6B,EAA4C,MAAM,CAAC;AAE7F,OAAO,EAAE,kCAAkC,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,CAAC;AAErG,4FAA4F;AAC5F,MAAM,WAAW,2BAA2B;IAC1C,WAAW,CAAC,EAAE,kCAAkC,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAiCzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,kCAAkC,CAChD,GAAG,GAAE,qBAAmC,EACxC,OAAO,GAAE,2BAAgC,GACxC,qCAAqC,CASvC;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,GAAG,GAAE,qBAAmC,EACxC,OAAO,GAAE,2BAAgC,GACxC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAA;CAAE,CAa1D;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,2BAA2B;IAC1C,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;IACxC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,uGAAuG;IACvG,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4GAA4G;IAC5G,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wEAAwE;IACxE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,KAAK,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,GAAE,qBAAmC,EACxC,OAAO,GAAE,2BAAgC,GACxC,2BAA2B,CAiD7B;AAID,8DAA8D;AAC9D,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkD,GAC1E,OAAO,CAKT"}

package/dist/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";AA4DA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";AA0EA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}