@hasna/recordings 0.1.35 → 0.1.37

package/dist/storage.js

@@ -4906,11 +4906,12 @@ var require_lib2 = __commonJS((exports, module) => {
 import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
-var STORAGE_CONFIG_PATH = join(homedir(), ".hasna", "recordings", "storage", "config.json");
+var LEGACY_DATABASE_CONFIG_KEY = ["r", "d", "s"].join("");
 var RECORDINGS_STORAGE_ENV = "HASNA_RECORDINGS_DATABASE_URL";
 var RECORDINGS_STORAGE_FALLBACK_ENV = "RECORDINGS_DATABASE_URL";
 var RECORDINGS_STORAGE_MODE_ENV = "HASNA_RECORDINGS_STORAGE_MODE";
 var RECORDINGS_STORAGE_MODE_FALLBACK_ENV = "RECORDINGS_STORAGE_MODE";
+var RECORDINGS_STORAGE_CONFIG_ENV = "HASNA_RECORDINGS_STORAGE_CONFIG";
 var STORAGE_DATABASE_ENV = [RECORDINGS_STORAGE_ENV, RECORDINGS_STORAGE_FALLBACK_ENV];
 var STORAGE_MODE_ENV = [RECORDINGS_STORAGE_MODE_ENV, RECORDINGS_STORAGE_MODE_FALLBACK_ENV];
 function readEnv(name) {
@@ -4938,10 +4939,16 @@ function getStorageDatabaseUrl() {
   const env = getStorageDatabaseEnv();
   return env ? readEnv(env.name) : undefined;
 }
+function getStorageConfigPath() {
+  const override = readEnv(RECORDINGS_STORAGE_CONFIG_ENV);
+  if (override)
+    return override;
+  return join(homedir(), ".hasna", "recordings", "storage", "config.json");
+}
 function getStorageConfig() {
   const config = {
     mode: "local",
-    rds: {
+    postgres: {
       host: "",
       port: 5432,
       username: "",
@@ -4949,11 +4956,13 @@ function getStorageConfig() {
       ssl: true
     }
   };
-  if (existsSync(STORAGE_CONFIG_PATH)) {
+  const storageConfigPath = getStorageConfigPath();
+  if (existsSync(storageConfigPath)) {
     try {
-      const raw = JSON.parse(readFileSync(STORAGE_CONFIG_PATH, "utf-8"));
+      const raw = JSON.parse(readFileSync(storageConfigPath, "utf-8"));
+      const legacyDatabaseConfig = typeof raw[LEGACY_DATABASE_CONFIG_KEY] === "object" && raw[LEGACY_DATABASE_CONFIG_KEY] !== null ? raw[LEGACY_DATABASE_CONFIG_KEY] : {};
       config.mode = normalizeMode(raw.mode) ?? config.mode;
-      config.rds = { ...config.rds, ...raw.rds ?? {} };
+      config.postgres = { ...config.postgres, ...legacyDatabaseConfig, ...raw.postgres ?? {} };
     } catch {}
   }
   const modeOverride = readEnv(RECORDINGS_STORAGE_MODE_ENV) ?? readEnv(RECORDINGS_STORAGE_MODE_FALLBACK_ENV);
@@ -4970,7 +4979,7 @@ function getStorageConnectionString(dbName = "recordings") {
   if (direct)
     return direct;
   const config = getStorageConfig();
-  const { host, port, username, password_env, ssl } = config.rds;
+  const { host, port, username, password_env, ssl } = config.postgres;
   if (!host || !username) {
     throw new Error("Storage database is not configured. Set HASNA_RECORDINGS_DATABASE_URL or configure ~/.hasna/recordings/storage/config.json.");
   }
@@ -5561,8 +5570,9 @@ async function runStorageMigrations(remote) {
 function getStorageStatus(db = getDatabase()) {
   const config = getStorageConfig();
   const activeEnv = getStorageDatabaseEnv();
+  const hasConfiguredPostgres = Boolean(config.postgres.host && config.postgres.username);
   return {
-    configured: Boolean(activeEnv),
+    configured: Boolean(activeEnv) || hasConfiguredPostgres,
     mode: config.mode,
     enabled: config.mode === "hybrid" || config.mode === "remote",
     env: STORAGE_DATABASE_ENV,

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.1.35";
+export declare const VERSION = "0.1.37";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/recordings",
-  "version": "0.1.35",
+  "version": "0.1.37",
   "type": "module",
   "description": "Speech-to-text recording tool with MCP and CLI — records, transcribes, and optionally enhances text using AI",
   "repository": {
@@ -11,7 +11,8 @@
   "types": "dist/index.d.ts",
   "bin": {
     "recordings": "dist/cli/index.js",
-    "recordings-mcp": "dist/mcp/index.js"
+    "recordings-mcp": "dist/mcp/index.js",
+    "recordings-serve": "dist/server/index.js"
   },
   "exports": {
     ".": {
@@ -21,20 +22,29 @@
     "./storage": {
       "import": "./dist/storage.js",
       "types": "./dist/storage.d.ts"
+    },
+    "./sdk": {
+      "import": "./dist/sdk/index.js",
+      "types": "./dist/sdk/index.d.ts"
     }
   },
   "scripts": {
     "clean": "rm -rf dist",
-    "build": "bun run clean && bun run build:cli && bun run build:mcp && bun run build:lib && tsc --emitDeclarationOnly --outDir dist",
+    "build": "bun run clean && bun run build:cli && bun run build:mcp && bun run build:serve && bun run build:lib && tsc --emitDeclarationOnly --outDir dist",
     "build:cli": "bun build src/cli/index.ts --target=bun --outfile=dist/cli/index.js --external=commander --external=chalk --external=openai",
     "build:mcp": "bun build src/mcp/index.ts --target=bun --outfile=dist/mcp/index.js --external=@modelcontextprotocol/sdk --external=openai",
-    "build:lib": "bun build src/index.ts src/storage.ts --target=bun --outdir=dist --external=openai",
+    "build:serve": "bun build src/server/index.ts --target=bun --outfile=dist/server/index.js --external=@modelcontextprotocol/sdk --external=@hasna/contracts --external=openai --external=pg",
+    "build:lib": "bun build src/index.ts src/storage.ts src/sdk/index.ts --target=bun --outdir=dist --external=openai",
+    "generate:sdk": "bun run scripts/generate-sdk.ts",
+    "migrate": "bun run scripts/migrate.ts",
     "typecheck": "tsc --noEmit",
     "test": "bun test",
     "test:coverage": "bun test --coverage",
     "dev:cli": "bun run src/cli/index.ts",
     "dev:mcp": "bun run src/mcp/index.ts",
-    "prepack": "bun run build",
+    "verify:release": "bun run scripts/release-guard.ts",
+    "prepack": "bun run build && bun run verify:release",
+    "prepublishOnly": "bun run typecheck && bun run test",
     "postinstall": "bash scripts/install_macos_app.sh --postinstall"
   },
   "files": [
@@ -50,6 +60,7 @@
     "LICENSE"
   ],
   "dependencies": {
+    "@hasna/contracts": "0.4.1",
     "@hasna/events": "^0.1.11",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "chalk": "^5.4.1",

package/scripts/generate-sdk.ts

@@ -0,0 +1,31 @@
+#!/usr/bin/env bun
+/**
+ * Generate the typed `/v1` SDK client from the serve OpenAPI document.
+ *
+ * Source of truth: src/server/openapi.ts (also served at GET /openapi.json).
+ * Output: src/sdk/v1.generated.ts — a dependency-free typed fetch client.
+ *
+ * Usage: bun run scripts/generate-sdk.ts
+ */
+import { writeFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { generateSdkFromOpenApi } from "@hasna/contracts/sdk";
+import { buildV1OpenApiDocument } from "../src/server/openapi.js";
+
+const root = join(dirname(fileURLToPath(import.meta.url)), "..");
+const spec = buildV1OpenApiDocument();
+const { code, operations, warnings } = generateSdkFromOpenApi(spec as never, {
+  className: "RecordingsV1Client",
+  apiKeyHeader: "x-api-key",
+});
+
+const header =
+  "// AUTO-GENERATED by scripts/generate-sdk.ts from src/server/openapi.ts — DO NOT EDIT BY HAND.\n" +
+  "// Regenerate: bun run scripts/generate-sdk.ts\n\n";
+const outPath = join(root, "src/sdk/v1.generated.ts");
+writeFileSync(outPath, header + code);
+
+console.log(`Wrote ${outPath}`);
+console.log(`Operations: ${operations.map((o) => o.functionName).join(", ")}`);
+if (warnings.length) console.log(`Warnings:\n  ${warnings.join("\n  ")}`);

package/scripts/install_macos_app.sh

@@ -35,12 +35,12 @@ NATIVE_DIR="${PACKAGE_ROOT}/src/native/Recordings"
 APP_SOURCE="${NATIVE_DIR}/.build/${MODE}/Recordings.app"
 APP_DEST="${DATA_DIR}/Recordings.app"
 
-mkdir -p "${DATA_DIR}/audio"
-
 if [ "$(uname -s)" != "Darwin" ]; then
   exit 0
 fi
 
+mkdir -p "${DATA_DIR}/audio"
+
 warn_or_fail() {
   local message="$1"
   if [ "$POSTINSTALL" -eq 1 ]; then

package/scripts/migrate.ts

@@ -0,0 +1,37 @@
+#!/usr/bin/env bun
+/**
+ * Migration runner for the recordings cloud (A1 pure-remote) database.
+ *
+ * Applies the relational recordings schema and the contracts API-key store,
+ * idempotently (CREATE ... IF NOT EXISTS). NEVER drops or rewrites existing
+ * tables — safe to run against a populated DB. Shares the exact code path used
+ * by the serve process (`ensureCloudSchema`).
+ *
+ * The canonical DDL is committed under migrations/*.sql for transparency.
+ *
+ * Env: HASNA_RECORDINGS_DATABASE_URL (or RECORDINGS_DATABASE_URL / DATABASE_URL).
+ * Usage: bun run scripts/migrate.ts
+ */
+import { ensureCloudSchema, pingCloud, resolveCloudDatabaseUrl, closeCloud } from "../src/server/cloud.js";
+
+async function main() {
+  const url = resolveCloudDatabaseUrl();
+  if (!url) {
+    console.error(
+      "migrate: no database URL (HASNA_RECORDINGS_DATABASE_URL / RECORDINGS_DATABASE_URL / DATABASE_URL)",
+    );
+    process.exit(2);
+  }
+  console.log("migrate: connecting…");
+  await pingCloud();
+  console.log("migrate: applying schema (recordings tables + api_keys)…");
+  await ensureCloudSchema();
+  console.log("migrate: done");
+  await closeCloud();
+  process.exit(0);
+}
+
+main().catch((e) => {
+  console.error("migrate: failed:", (e as Error).message);
+  process.exit(1);
+});

package/scripts/release-guard.ts

@@ -0,0 +1,129 @@
+#!/usr/bin/env bun
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { join, relative } from "node:path";
+
+type Finding = {
+  file: string;
+  marker: string;
+  kind: "retired-cloud" | "secret-pattern";
+};
+
+type PatternCheck = {
+  label: string;
+  pattern: RegExp;
+};
+
+const repoRoot = process.cwd();
+
+const roots = [
+  "package.json",
+  "README.md",
+  "scripts",
+  "src/storage.ts",
+  "src/index.ts",
+  "src/cli",
+  "src/db",
+  "src/lib",
+  "src/mcp",
+  "src/types",
+  "src/native/Recordings/App",
+  "src/native/Recordings/RecordingsLib",
+  "src/native/Recordings/RecordingsTests",
+  "src/native/Recordings/Package.swift",
+  "src/native/Recordings/Package.resolved",
+  "src/native/Recordings/build.sh",
+  "dist",
+];
+
+const ignoredDirs = new Set([".git", "node_modules", ".build"]);
+
+const retiredCloudMarkers = [
+  ["@hasna", "cloud"].join("/"),
+  ["open", "cloud"].join("-"),
+  ["cloud", "mcp"].join("-"),
+  "register" + "CloudTools",
+  "register" + "CloudCommands",
+  ["HASNA", "CLOUD"].join("_"),
+  ["OPEN", "CLOUD"].join("_"),
+  [".hasna", "cloud"].join("/"),
+  "--" + "cloud",
+  ["cloud", "setup"].join(" "),
+  ["cloud", "sync"].join(" "),
+  ["Cloud", "Sync"].join(" "),
+  ["HASNA", ["R", "D", "S"].join(""), "PASSWORD"].join("_"),
+];
+
+const secretPatterns: PatternCheck[] = [
+  { label: ["sk", "ant", ""].join("-"), pattern: new RegExp(["sk", "ant", ""].join("-")) },
+  { label: ["sk", "proj", ""].join("-"), pattern: new RegExp(["sk", "proj", ""].join("-")) },
+  { label: ["npm", ""].join("_"), pattern: new RegExp(["npm", ""].join("_") + "[A-Za-z]") },
+  { label: ["gho", ""].join("_"), pattern: new RegExp(["gho", ""].join("_")) },
+  { label: ["ghp", ""].join("_"), pattern: new RegExp(["ghp", ""].join("_")) },
+  { label: ["secret", "token"].join("-") + ":", pattern: new RegExp(["secret", "token"].join("-") + ":") },
+  { label: "ctx7sk" + "-", pattern: new RegExp("ctx7sk" + "-") },
+  { label: ["xai", ""].join("-"), pattern: new RegExp(["xai", ""].join("-")) },
+  { label: "AI" + "za" + "[A-Za-z0-9]", pattern: new RegExp("AI" + "za" + "[A-Za-z0-9]") },
+  { label: "AK" + "IA" + "[A-Z0-9]", pattern: new RegExp("AK" + "IA" + "[A-Z0-9]") },
+];
+
+const legacyDatabasePatterns: PatternCheck[] = [
+  {
+    label: ["legacy", "database", ["r", "d", "s"].join("-")].join("-"),
+    pattern: new RegExp("\\b" + ["r", "d", "s"].join("") + "\\b", "i"),
+  },
+];
+
+function isText(buffer: Buffer): boolean {
+  return !buffer.includes(0);
+}
+
+function collectFiles(path: string): string[] {
+  if (!existsSync(path)) return [];
+  const stat = statSync(path);
+  if (stat.isFile()) return [path];
+  if (!stat.isDirectory()) return [];
+
+  const files: string[] = [];
+  for (const entry of readdirSync(path, { withFileTypes: true })) {
+    if (entry.isDirectory() && ignoredDirs.has(entry.name)) continue;
+    files.push(...collectFiles(join(path, entry.name)));
+  }
+  return files;
+}
+
+const findings: Finding[] = [];
+for (const file of roots.flatMap((root) => collectFiles(join(repoRoot, root)))) {
+  const buffer = readFileSync(file);
+  if (!isText(buffer)) continue;
+
+  const content = buffer.toString("utf8");
+  const relativeFile = relative(repoRoot, file);
+
+  for (const marker of retiredCloudMarkers) {
+    if (content.includes(marker)) {
+      findings.push({ file: relativeFile, marker, kind: "retired-cloud" });
+    }
+  }
+
+  for (const check of legacyDatabasePatterns) {
+    if (check.pattern.test(content)) {
+      findings.push({ file: relativeFile, marker: check.label, kind: "retired-cloud" });
+    }
+  }
+
+  for (const check of secretPatterns) {
+    if (check.pattern.test(content)) {
+      findings.push({ file: relativeFile, marker: check.label, kind: "secret-pattern" });
+    }
+  }
+}
+
+if (findings.length > 0) {
+  console.error("Release guard failed:");
+  for (const finding of findings) {
+    console.error(`  ${finding.kind}: ${finding.file}: ${finding.marker}`);
+  }
+  process.exit(1);
+}
+
+console.log("Release guard passed: package-visible files are free of retired cloud and secret markers.");

package/src/native/Recordings/RecordingsTests/CLIRunnerTests.swift

@@ -19,7 +19,7 @@ struct CLIRunnerTests {
 
     @Test("parseError maps invalid API key (401) to a friendly message")
     func invalidKeyError() {
-        let input = "ERROR: Transcription failed: 401 Incorrect API key provided: sk-proj-****vosA. You can find your API key at https://platform.openai.com."
+        let input = "ERROR: Transcription failed: 401 Incorrect API key provided: " + "sk" + "-proj-" + "****vosA. You can find your API key at https://platform.openai.com."
         #expect(CLIRunner.parseError(input) == "OpenAI API key invalid or expired — update it in Recordings Settings")
     }