@hasna/knowledge 0.2.25 → 0.2.27

package/src/storage-contract.ts

@@ -3,7 +3,7 @@ import type { Database } from 'bun:sqlite';
 import { DEFAULT_KNOWLEDGE_API_URL, normalizeKnowledgeApiOrigin } from './auth';
 import { REMOTE_KNOWLEDGE_CONTRACT_VERSION } from './remote-client';
 import type { KnowledgeConfig, KnowledgeWorkspace } from './workspace';
-import { HASNA_KNOWLEDGE_APP_PATH } from './workspace';
+import { HASNA_KNOWLEDGE_APP_PATH, HASNA_XYZ_KNOWLEDGE_CANONICAL } from './workspace';
 
 export interface StorageArtifactClass {
   kind: string;
@@ -36,6 +36,30 @@ export interface StorageContract {
       kms_key_configured: boolean;
     } | null;
   };
+  canonical_hasna_xyz: {
+    division: typeof HASNA_XYZ_KNOWLEDGE_CANONICAL.division;
+    app_type: typeof HASNA_XYZ_KNOWLEDGE_CANONICAL.app_type;
+    app: typeof HASNA_XYZ_KNOWLEDGE_CANONICAL.app;
+    env: typeof HASNA_XYZ_KNOWLEDGE_CANONICAL.env;
+    active: boolean;
+    local_path: string;
+    s3: {
+      bucket: string;
+      region: string;
+      profile: string;
+      prefix: string;
+      uri_prefix: string;
+      server_side_encryption: string;
+    };
+    secrets: {
+      env: string;
+      aws: string;
+      s3: string;
+      rds: null;
+      future_rds: string;
+    };
+    evidence_doc: string;
+  };
   hosted: {
     enabled: boolean;
     api_url: string;
@@ -134,6 +158,11 @@ export function resolveStorageContract(
   const s3 = config.storage.s3 ?? null;
   const prefix = s3?.prefix?.replace(/^\/+|\/+$/g, '') ?? '';
   const s3UriPrefix = s3 ? `s3://${s3.bucket}/${prefix ? `${prefix}/` : ''}` : '';
+  const canonicalPrefix = HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.prefix.replace(/^\/+|\/+$/g, '');
+  const canonicalS3UriPrefix = `s3://${HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.bucket}/${canonicalPrefix}/`;
+  const canonicalActive = config.storage.type === 's3'
+    && s3?.bucket === HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.bucket
+    && (s3.region ?? null) === HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.region;
 
   return {
     scope,
@@ -171,6 +200,30 @@ export function resolveStorageContract(
           }
         : null,
     },
+    canonical_hasna_xyz: {
+      division: HASNA_XYZ_KNOWLEDGE_CANONICAL.division,
+      app_type: HASNA_XYZ_KNOWLEDGE_CANONICAL.app_type,
+      app: HASNA_XYZ_KNOWLEDGE_CANONICAL.app,
+      env: HASNA_XYZ_KNOWLEDGE_CANONICAL.env,
+      active: canonicalActive,
+      local_path: HASNA_XYZ_KNOWLEDGE_CANONICAL.local_path,
+      s3: {
+        bucket: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.bucket,
+        region: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.region,
+        profile: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.profile,
+        prefix: canonicalPrefix,
+        uri_prefix: canonicalS3UriPrefix,
+        server_side_encryption: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.server_side_encryption,
+      },
+      secrets: {
+        env: HASNA_XYZ_KNOWLEDGE_CANONICAL.secrets.env,
+        aws: HASNA_XYZ_KNOWLEDGE_CANONICAL.secrets.aws,
+        s3: HASNA_XYZ_KNOWLEDGE_CANONICAL.secrets.s3,
+        rds: HASNA_XYZ_KNOWLEDGE_CANONICAL.secrets.rds,
+        future_rds: HASNA_XYZ_KNOWLEDGE_CANONICAL.secrets.future_rds,
+      },
+      evidence_doc: HASNA_XYZ_KNOWLEDGE_CANONICAL.evidence_doc,
+    },
     hosted: {
       enabled: config.mode === 'hosted',
       api_url: normalizeKnowledgeApiOrigin(config.hosted?.api_url ?? DEFAULT_KNOWLEDGE_API_URL),

package/src/workspace.ts

@@ -82,6 +82,44 @@ export interface KnowledgeConfig {
   };
 }
 
+export const HASNA_XYZ_KNOWLEDGE_CANONICAL = {
+  division: 'xyz',
+  app_type: 'opensource',
+  app: 'knowledge',
+  env: 'prod',
+  local_path: HASNA_KNOWLEDGE_APP_PATH,
+  s3: {
+    bucket: 'hasna-xyz-opensource-knowledge-prod',
+    region: 'us-east-1',
+    profile: 'hasna-xyz-infra',
+    prefix: '.hasna/apps/knowledge',
+    server_side_encryption: 'AES256',
+  },
+  secrets: {
+    env: 'hasna/xyz/opensource/knowledge/prod/env',
+    aws: 'hasna/xyz/opensource/knowledge/prod/aws',
+    s3: 'hasna/xyz/opensource/knowledge/prod/s3',
+    rds: null,
+    future_rds: 'hasna/xyz/opensource/knowledge/prod/rds',
+  },
+  source_owner: 'open-files',
+  evidence_doc: 'docs/canonical-secrets-bootstrap-2026-06-08.md',
+} as const;
+
+export function canonicalHasnaXyzKnowledgeStorage(): KnowledgeConfig['storage'] {
+  return {
+    type: 's3',
+    artifacts_root: 'artifacts',
+    s3: {
+      bucket: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.bucket,
+      prefix: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.prefix,
+      region: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.region,
+      profile: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.profile,
+      server_side_encryption: HASNA_XYZ_KNOWLEDGE_CANONICAL.s3.server_side_encryption,
+    },
+  };
+}
+
 export function legacyGlobalStorePath(): string {
   return join(homedir(), '.open-knowledge', 'db.json');
 }