@hasna/recordings 0.3.13 → 0.5.0

package/dist/lib/audio-artifact-storage.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Artifact kit for recording audio — the object-store half of the storage
+ * layer, modelled on the shared kit pattern first shipped for skills bundles
+ * (hasna/apps#1639, apps/skills/src/server/artifact-storage.ts).
+ *
+ * One class, `AudioArtifactStorage`, has two modes:
+ *   • db/local-only — no bucket configured: `usesS3` is false, every method is
+ *     a no-op returning null, and recordings keep the historical behaviour of
+ *     `audio_path`-only provenance on the recording machine.
+ *   • s3 — a bucket is configured (env `HASNA_RECORDINGS_S3_BUCKET` /
+ *     `RECORDINGS_S3_BUCKET`): audio bytes are placed as a content-addressed
+ *     object `recordings/<recording_id>/<sha256>.<ext>` (prefix configurable
+ *     via `HASNA_RECORDINGS_S3_PREFIX`), and the row records the object key,
+ *     the digest and the byte size.
+ *
+ * The key is content-addressed: the digest is part of the key, so re-uploading
+ * the same bytes is idempotent (identical key, identical object) and a wrong
+ * digest can never be stored because only a verified lowercase hex sha-256 is
+ * accepted into a key. The recording id segment is structural — one recording
+ * never shares a key with another, and a bucket policy or lifecycle rule can
+ * key on it.
+ *
+ * The S3 client is injectable (`client` option) so tests can stand in an
+ * in-memory bucket exactly like the skills kit tests do. Credentials are
+ * never read here: the AWS SDK resolves them from the ambient environment /
+ * instance role at send time.
+ */
+import { GetObjectCommand, PutObjectCommand } from "@aws-sdk/client-s3";
+/** Default object-key prefix; matches the issue's `recordings/<id>/<sha256>.<ext>` layout. */
+export declare const DEFAULT_S3_PREFIX = "recordings";
+/** The slice of the AWS client the storage uses; injectable so tests can stand in an in-memory bucket. */
+export interface S3ClientLike {
+    send(command: PutObjectCommand | GetObjectCommand): Promise<{
+        Body?: unknown;
+    }>;
+}
+export interface AudioArtifactStorageOptions {
+    bucket?: string;
+    prefix?: string;
+    region?: string;
+    /** Overrides the real S3 client (tests). Ignored when no bucket is configured. */
+    client?: S3ClientLike;
+}
+/** What a successful upload wrote, for the row link. */
+export interface UploadedAudioRef {
+    objectKey: string;
+    sha256: string;
+    bytes: number;
+}
+/** RFC-ish content type for a file extension; unknown extensions fall back to application/octet-stream. */
+export declare function contentTypeForExtension(extension: string): string;
+export declare class AudioArtifactStorage {
+    private bucket?;
+    private prefix;
+    private s3?;
+    constructor(options?: AudioArtifactStorageOptions);
+    get usesS3(): boolean;
+    /**
+     * Content-addressed object key for a recording's audio:
+     * `<prefix>/<recordingId>/<sha256>.<extension>`. The digest is the whole
+     * name — there is no caller-supplied path component to sanitise, only a
+     * digest to refuse if it is not one, and an extension to bound.
+     */
+    objectKeyFor(recordingId: string, sha256: string, extension: string): string;
+    /**
+     * Upload one audio file as a content-addressed object.
+     *
+     * Returns null when no bucket is configured (local-only mode) or when the
+     * file cannot be read — in which case nothing is written and nothing was
+     * lost. Throws only on a genuine storage failure, which the caller decides
+     * how softly to treat.
+     */
+    uploadAudio(recordingId: string, audioPath: string): Promise<UploadedAudioRef | null>;
+    /**
+     * Read an uploaded object back, for anywhere-any-machine playback.
+     *
+     * Returns null when no bucket is configured or the object does not exist.
+     * The caller checks the digest when it needs proof of identity.
+     */
+    readAudio(objectKey: string): Promise<Uint8Array | null>;
+}
+/**
+ * Resolve the kit from the environment. The bucket comes from
+ * HASNA_RECORDINGS_S3_BUCKET (preferred, matches the hosted service env
+ * naming) or RECORDINGS_S3_BUCKET; the prefix defaults to "recordings" and the
+ * region to AWS_REGION, then us-east-1.
+ */
+export declare function resolveAudioArtifactStorage(env?: NodeJS.ProcessEnv | Record<string, string | undefined>, client?: S3ClientLike): AudioArtifactStorage;
+/**
+ * The creation-time hook: upload a recording's audio when a bucket is
+ * configured, and NEVER let a storage failure take the recording down with it.
+ * The row already exists by the time this runs; a failed or unconfigured
+ * upload leaves the historical `audio_path` provenance in place and returns
+ * null. This is the deliberate fail-soft contract of the app-side fix — the
+ * hosted service's fail-closed rule is an infra-side concern (hasna/apps#1645).
+ */
+export declare function uploadAudioAtCreation(recordingId: string, audioPath: string | null | undefined, storage?: AudioArtifactStorage): Promise<UploadedAudioRef | null>;
+//# sourceMappingURL=audio-artifact-storage.d.ts.map

package/dist/lib/audio-artifact-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audio-artifact-storage.d.ts","sourceRoot":"","sources":["../../src/lib/audio-artifact-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAA2B,MAAM,oBAAoB,CAAC;AAQjG,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAE9C,0GAA0G;AAC1G,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,OAAO,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAYD,2GAA2G;AAC3G,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,EAAE,CAAC,CAAe;gBAEd,OAAO,GAAE,2BAAgC;IAQrD,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED;;;;;OAKG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAM5E;;;;;;;OAOG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAgB3F;;;;;OAKG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;CAS/D;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EACzE,MAAM,CAAC,EAAE,YAAY,GACpB,oBAAoB,CAKtB;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,OAAO,GAAE,oBAAoD,GAC5D,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAclC"}

package/dist/lib/capture-probe.d.ts

@@ -118,7 +118,7 @@ export interface CaptureProbeSubject {
  * Name whose Microphone grant this probe actually exercises.
  *
  * macOS attributes microphone access to the RESPONSIBLE process — for a CLI that
- * is the terminal application (or sshd), never HasnaRecordings.app. So a silent probe
+ * is the terminal application (or sshd), never Hasna Recordings.app. So a silent probe
  * means "the thing running this command has no grant", which is a different
  * finding, with a different fix, from "the app has no grant". Reporting the one
  * as the other is how a diagnostic sends someone to the wrong settings pane.
@@ -141,7 +141,7 @@ export interface MicrophoneGrantInstruction {
     /** The bundle that must receive the grant, or null when none was found. */
     bundle_path: string | null;
     bundle_identifier: string;
-    /** Every HasnaRecordings.app on disk — more than one makes the grant ambiguous. */
+    /** Every Hasna Recordings.app on disk — more than one makes the grant ambiguous. */
     candidate_bundle_paths: string[];
     /** Ordered steps, already naming the pane, the section and the bundle. */
     steps: string[];
@@ -197,7 +197,7 @@ export declare function classifyPermissionState(permissionState: string): Permis
 export declare function microphoneGrantInstruction(options: {
     /** Path the installer treats as canonical. */
     installedAppPath?: string | null;
-    /** Other HasnaRecordings.app bundles found on disk (e.g. legacy install sites). */
+    /** Other Hasna Recordings.app bundles found on disk (e.g. legacy install sites). */
     otherAppPaths?: string[];
     /**
      * Whether the app has ever prompted. `unknown` means the TCC state could not

package/dist/lib/capture-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capture-probe.d.ts","sourceRoot":"","sources":["../../src/lib/capture-probe.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,4BAA4B,EAAiC,MAAM,mBAAmB,CAAC;AAEhG;;;;;;;;;;;;;;;GAeG;AAEH,8DAA8D;AAC9D,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAgBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CA2FrD;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAK5C;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1E,kBAAkB,CAoIpB;AAED,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EACzE,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACpD,mBAAmB,CAiErB;AAED,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,OAAO,EAAE,4BAA4B,EAAE,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,yCAAgC,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAEjF,wBAAgB,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,sBAAsB,CA+CvF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,GAAG,0BAA0B,CAkF7B;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC;IACxD,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAKD"}
+{"version":3,"file":"capture-probe.d.ts","sourceRoot":"","sources":["../../src/lib/capture-probe.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,4BAA4B,EAAiC,MAAM,mBAAmB,CAAC;AAEhG;;;;;;;;;;;;;;;GAeG;AAEH,8DAA8D;AAC9D,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAgBD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CA2FrD;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;OAWG;IACH,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,yBAAyB,QAAQ,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAK5C;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1E,kBAAkB,CAoIpB;AAED,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EACzE,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACpD,mBAAmB,CAiErB;AAED,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,OAAO,EAAE,4BAA4B,EAAE,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,yCAAgC,CAAC;AAElE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,sBAAsB,GAAG,WAAW,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAEjF,wBAAgB,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,sBAAsB,CA+CvF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE;IAClD,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC,GAAG,0BAA0B,CAkF7B;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC;IACxD,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAKD"}

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAW9E,eAAO,MAAM,2BAA2B,sBAAsB,CAAC;AAC/D,eAAO,MAAM,8BAA8B,iBAAiB,CAAC;AAC7D,eAAO,MAAM,oCAAoC,yBAAyB,CAAC;AAE3E,eAAO,MAAM,cAAc,EAAE,gBAkC5B,CAAC;AAEF,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,gBAAgB,CA+HhE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAoC9E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAK/D;AAaD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,GAAE,kBAA2B,GACpC,kBAAkB,CAMpB;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,gBAAgB,EACxB,wBAAwB,UAAO,GAC9B,gBAAgB,CAoBlB;AA0BD,wBAAgB,UAAU,IAAI,MAAM,CAyBnC;AA2ID,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAiB5D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAW9E,eAAO,MAAM,2BAA2B,sBAAsB,CAAC;AAC/D,eAAO,MAAM,8BAA8B,iBAAiB,CAAC;AAC7D,eAAO,MAAM,oCAAoC,yBAAyB,CAAC;AAE3E,eAAO,MAAM,cAAc,EAAE,gBAqC5B,CAAC;AAEF,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAsJhE;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAoC9E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAK/D;AAaD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,GAAE,kBAA2B,GACpC,kBAAkB,CAMpB;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,gBAAgB,EACxB,wBAAwB,UAAO,GAC9B,gBAAgB,CAoBlB;AA0BD,wBAAgB,UAAU,IAAI,MAAM,CAyBnC;AAqFD,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAiB5D"}

package/dist/lib/local-opt-in.d.ts

@@ -0,0 +1,132 @@
+/**
+ * The routing preamble every surface runs before the credential chain: "did the
+ * environment configure a Recordings authority, and if not, did the operator
+ * ask for the on-box store?"
+ *
+ * It lives in one leaf module because the CLI, the MCP server and the SDK all
+ * have to answer identically — a second spelling is a second thing that can
+ * drift — and because the SDK must be able to ask without pulling the CLI's
+ * transport module (and its transitive world) into a zero-dependency bundle.
+ * Its only import is the env-key derivation from @hasna/contracts, so the NAMES
+ * it looks for are the resolver's own rather than a copy that can fall behind.
+ *
+ * ORDER, AND WHY IT IS THIS WAY ROUND. A configured environment outranks the
+ * opt-in: a run with `HASNA_RECORDINGS_API_KEY` set goes hosted, and a
+ * half-configured one fails loudly, rather than quietly serving a different
+ * dataset because a stale `HASNA_RECORDINGS_LOCAL` was lying around. But when
+ * the environment configures nothing, the opt-in is answered WITHOUT calling
+ * the resolver — so no Keychain item and no credential file is read — which is
+ * what lets a scrubbed test environment physically cannot reach the shared
+ * store, now that a credential can arrive from somewhere an env dictionary
+ * cannot blank.
+ *
+ * THE RECORDINGS CARVE. `@hasna/contracts` treats the unprefixed
+ * `RECORDINGS_API_URL` / `RECORDINGS_API_KEY` pair as the legacy aliases of the
+ * canonical `HASNA_RECORDINGS_*` pair (silent, one release). In THIS package
+ * those two unprefixed names are already spoken for by an older contract:
+ * `RECORDINGS_API_KEY` is the OpenAI transcription-key override
+ * (`src/lib/config.ts`, marked with the credential-seam waiver), and the
+ * unprefixed URL form was never part of the hosted contract either. An OpenAI
+ * key must never be handed to the resolver as a Hasna service credential — it
+ * would authenticate to the fleet gateway as the wrong principal — so both
+ * unprefixed names are carved OUT of the environment before the resolver sees
+ * it AND out of the authority-intent check (an operator combining
+ * `HASNA_RECORDINGS_LOCAL=1` with a plain `RECORDINGS_API_KEY` for the local
+ * store must still land on the local store). The canonical
+ * `HASNA_RECORDINGS_*` pair is the only env spelling the hosted contract
+ * accepts.
+ */
+import type { CredentialChainOptions } from "@hasna/contracts/client";
+/** The deliberate unhosted opt-in, canonical name first. */
+export declare const RECORDINGS_LOCAL_OPT_IN_ENV_KEYS: readonly ["HASNA_RECORDINGS_LOCAL", "RECORDINGS_LOCAL"];
+export type RecordingsLocalOptInEnv = Record<string, string | undefined>;
+/** True when the operator deliberately asked for the unhosted local store. */
+export declare function isRecordingsLocalOptIn(env?: RecordingsLocalOptInEnv): boolean;
+/** Every env name that can configure a Recordings authority or credential, resolver-derived. */
+export declare function recordingsAuthorityEnvKeys(): string[];
+/**
+ * Does the ENVIRONMENT itself configure a Recordings authority or credential?
+ *
+ * Deliberately narrower than "does a credential resolve": answering it must not
+ * touch the Keychain or the filesystem, because doing so would defeat the
+ * isolation the opt-in short-circuit exists to provide. It reads the env
+ * dictionary and nothing else.
+ *
+ * A DECLARED-BUT-BLANK variable counts as absent HERE — a blank has always been
+ * this package's spelling for "not configured", and helpers in the wild blank
+ * rather than delete. It is NOT absent once we do go hosted: the resolver
+ * refuses a blank loudly rather than falling through to another identity, which
+ * is the behaviour that matters at that point.
+ */
+export declare function hasRecordingsEnvAuthorityIntent(env?: RecordingsLocalOptInEnv): boolean;
+/** True when this environment should be served by the on-box SQLite store. */
+export declare function selectsRecordingsLocalStore(env?: RecordingsLocalOptInEnv): boolean;
+/**
+ * The environment as the resolver should see it: every authority/credential
+ * variable that is DECLARED BUT BLANK removed, plus the two carved unprefixed
+ * names this package reserves for its older contract (`RECORDINGS_API_KEY` is
+ * the OpenAI transcription-key override; the unprefixed URL form was never a
+ * hosted-contract spelling).
+ *
+ * A blank has always been this package's spelling for "not configured" — it is
+ * how fixture helpers scrub an inherited environment, and how consumer fixtures
+ * in other repos still write it. @hasna/contracts takes the opposite and, for
+ * its purposes, correct view: a declared-but-blank credential is a
+ * misconfiguration it refuses loudly rather than resolving around, because a
+ * blank that fell through would authenticate as a different principal than the
+ * operator named.
+ *
+ * Both are right at their own layer, and the mismatch is not hypothetical: an
+ * environment carrying a real `HASNA_RECORDINGS_API_KEY` alongside a blank
+ * legacy alias — the exact shape a scrubbed-then-overridden fixture produces —
+ * is a complete, unambiguous configuration that would otherwise be refused for
+ * the alias nobody set. Normalising here keeps "blank means unset" true at the
+ * Recordings seam while leaving the resolver's stricter rule intact for
+ * everything it does receive: a value that is present is still policed, and
+ * two aliases that actually disagree still refuse.
+ *
+ * The carved names are removed whenever present, blank or not: they configure
+ * nothing on this package's hosted contract, and a value in them must never
+ * reach the resolver as a Hasna credential.
+ */
+export declare function recordingsResolverEnv<T extends RecordingsLocalOptInEnv>(env: T): T;
+/** The env object and credential options a Recordings surface hands @hasna/contracts. */
+export interface RecordingsResolverInputs<T extends RecordingsLocalOptInEnv> {
+    /** The environment with every declared-but-blank authority variable removed. */
+    env: T;
+    /** The chain options, with the Keychain tier's ambient gate already decided. */
+    credentials: CredentialChainOptions;
+}
+/**
+ * Build the resolver's inputs: the normalised environment AND the credential
+ * options that keep the machine's Keychain tier reachable across it.
+ *
+ * WHY THIS IS NOT JUST {@link recordingsResolverEnv}. Blanking a variable and
+ * deleting it are not the same operation to @hasna/contracts, because dropping
+ * a key forces us to hand the resolver a COPY, and the resolver gates its
+ * ambient tiers on OBJECT IDENTITY (`env === process.env`, or the registry
+ * symbol its own snapshot carries). A copy is, by that test, a caller-built
+ * world — the hermetic seam — so the Keychain is outside it and tier 3 turns
+ * itself off. Silently: there is no error, no warning and no diagnostic,
+ * because from the resolver's side nothing went wrong.
+ *
+ * The consequence is the one failure this whole ruling exists to prevent. On a
+ * station whose Keychain holds `hasna.credentials.recordings.api-key`, ONE
+ * declared-but-blank authority variable — any name in
+ * {@link recordingsAuthorityEnvKeys}, canonical or carved; the shape a scrubbed
+ * fixture leaves behind — dropped the run from the Keychain identity to
+ * whatever came next: to `~/.hasna/recordings/config/credentials`, a DIFFERENT
+ * principal, with no notice; or, with nothing on disk, to a bare
+ * REMOTE_API_CONFIG_MISSING on a station that is in fact configured. A
+ * deliberate tier must never fall through to another identity, so the gate is
+ * decided HERE, on the original env, and carried across the copy as the
+ * documented `keychain.enabled` control rather than being left to an identity
+ * test the copy cannot pass.
+ *
+ * An explicit `enabled` from the caller still wins, and an injected `run`
+ * (which @hasna/contracts already treats as "enabled") is left alone, so the
+ * hermetic seam tests rely on is untouched. When there is nothing to remove
+ * the inputs pass through by identity, exactly as before.
+ */
+export declare function recordingsResolverInputs<T extends RecordingsLocalOptInEnv>(env: T, credentials?: CredentialChainOptions): RecordingsResolverInputs<T>;
+//# sourceMappingURL=local-opt-in.d.ts.map

package/dist/lib/local-opt-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-opt-in.d.ts","sourceRoot":"","sources":["../../src/lib/local-opt-in.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAQH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEtE,4DAA4D;AAC5D,eAAO,MAAM,gCAAgC,yDAGnC,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAEzE,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,uBAAqC,GACzC,OAAO,CAIT;AAeD,gGAAgG;AAChG,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CASrD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,+BAA+B,CAC7C,GAAG,GAAE,uBAAqC,GACzC,OAAO,CAIT;AAED,8EAA8E;AAC9E,wBAAgB,2BAA2B,CACzC,GAAG,GAAE,uBAAqC,GACzC,OAAO,CAET;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,uBAAuB,EACrE,GAAG,EAAE,CAAC,GACL,CAAC,CAYH;AA+BD,yFAAyF;AACzF,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,uBAAuB;IACzE,gFAAgF;IAChF,GAAG,EAAE,CAAC,CAAC;IACP,gFAAgF;IAChF,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,uBAAuB,EACxE,GAAG,EAAE,CAAC,EACN,WAAW,GAAE,sBAA2B,GACvC,wBAAwB,CAAC,CAAC,CAAC,CAS7B"}

package/dist/lib/macos-bundle.d.ts

@@ -1,5 +1,5 @@
 /**
- * Canonical macOS bundle identity for HasnaRecordings.app.
+ * Canonical macOS bundle identity for Hasna Recordings.app.
  *
  * Why this module exists at all, rather than the constant living next to its first caller:
  * three branches in the #24-#29 queue each introduced their own copy of this literal —

package/dist/lib/persistence-probe.d.ts

@@ -1,3 +1,4 @@
+import { type RecordsClientResolveOptions } from "../http/client.js";
 import { type Store } from "../store.js";
 import type { RecordingsConfig } from "../types/index.js";
 /**
@@ -5,13 +6,13 @@ import type { RecordingsConfig } from "../types/index.js";
  *
  * A transcript is only "recorded" once it is durably stored, and this package
  * has TWO stores behind one interface (src/store.ts): on-box SQLite and the
- * server's `/v1` HTTP API. Which one is active is decided entirely by the
- * environment — the presence of HASNA_RECORDINGS_API_URL +
- * HASNA_RECORDINGS_API_KEY is itself the signal to use the API, with no
- * variable set explicitly to make it visible.
+ * server's `/v1` HTTP API. Which one is active is decided by the
+ * @hasna/contracts resolver — a resolved credential (Keychain, disk or env)
+ * points at the hosted API, nothing resolved points nowhere until the
+ * deliberate `HASNA_RECORDINGS_LOCAL=1` opt-in selects the on-box file.
  *
  * `check` never reported which store it had resolved. That blind spot is not
- * theoretical: on an affected fleet Mac those two variables are set in the
+ * theoretical: on an affected fleet Mac the hosted API pair was set in the
  * LAUNCHD USER SESSION, so every process in the session inherits them — the GUI
  * app, its CLI helper, and any ssh shell alike. Writes go to the API while
  * ~/.hasna/recordings/recordings.db sits frozen at the row count it held when the
@@ -27,26 +28,40 @@ import type { RecordingsConfig } from "../types/index.js";
  * probe must round-trip against the ACTIVE store, never against whichever one is
  * easier to open.
  */
-/** The name we report when the transport came from URL+key presence alone. */
-export declare const AUTO_FLIP_MODE_SOURCE = "auto:api-url+api-key";
+/**
+ * The name we report when the credential came from the process-env tier, where
+ * a shell export is a snapshot that a rotation cannot heal until the shell
+ * exits.
+ */
+export declare const ENV_CREDENTIAL_MODE_SOURCE = "env";
 /**
  * Strip credentials out of a URL before it is printed anywhere.
  *
- * `toV1BaseUrl` clears the query and fragment but preserves userinfo, so a
- * configured `https://svc:PASSWORD@host` reaches every reporter in this module
- * intact — stdout, the `--json` payload, and two warning strings. This module
- * exists to make the store visible; leaking a password while doing it would be a
- * worse bug than the one it fixes.
+ * The @hasna/contracts resolver REFUSES an authority URL that carries userinfo,
+ * so a configured `https://svc:PASSWORD@host` never reaches the transport or
+ * this module's reporters on its way to failure. This boundary exists as
+ * defense-in-depth for every other URL-shaped string a reporter can receive —
+ * a fake Store's `baseUrl` in diagnostics, a server-supplied URL in a future
+ * report — and to make the redaction property testable without a resolution.
  *
- * Applied at the reporting boundary rather than in `toV1BaseUrl` itself, so the
+ * Applied at the reporting boundary rather than in the URL normaliser, so the
  * URL the transport actually requests is left exactly as configured.
  */
 export declare function safeBaseUrl(baseUrl: string | null): string | null;
 export interface ActiveStoreDescription {
-    transport: "sqlite" | "http";
     /**
-     * What decided the transport: an env var NAME, `auto:api-url+api-key`, or
-     * `default`. Never a value — these variables hold credentials.
+     * Which store this process would read and write: `"sqlite"` only under the
+     * deliberate local opt-in, `"http"` when the resolver succeeded, and
+     * `"none"` when the resolver REFUSED — a hosted run with no credential has
+     * no active store at all, and the diagnostic says so instead of reporting
+     * the on-box file as live (fail loud, hasna/apps#1720).
+     */
+    transport: "sqlite" | "http" | "none";
+    /**
+     * What decided the transport: `"local-opt-in"`, `"unresolved"`, or an env
+     * key NAME / Keychain item reference / file PATH / `"default"` as the
+     * @hasna/contracts chain reported the credential and the authority. Never a
+     * value — these variables hold credentials.
      */
     mode_source: string;
     /** `<url>/v1` when routed to the API, else null. Carries no credential. */
@@ -80,7 +95,31 @@ export declare function localStoreIsBehindSchema(dbPath: string): boolean | null
  * Report which store this process would read and write, and whether a second,
  * stale dataset is sitting next to it.
  */
-export declare function describeActiveStore(config: RecordingsConfig, env?: NodeJS.ProcessEnv | Record<string, string | undefined>): ActiveStoreDescription;
+export declare function describeActiveStore(config: RecordingsConfig, env?: NodeJS.ProcessEnv | Record<string, string | undefined>, options?: RecordsClientResolveOptions): ActiveStoreDescription;
+/**
+ * True when the resolver REFUSED: nothing resolved and the on-box store was
+ * not opted in. The one predicate `check` keys both its exit code and its
+ * glyph off, so a future renderer cannot turn a fail-closed report green
+ * without also changing the exit contract.
+ */
+export declare function activeStoreFailClosed(description: ActiveStoreDescription): boolean;
+/** The glyph palette `check` supplies; injected so the mapping stays testable. */
+export interface StoreLinePalette {
+    pass: (text: string) => string;
+    warn: (text: string) => string;
+    fail: (text: string) => string;
+}
+/**
+ * The ONE rendered line for the active store — `check` keys its glyph,
+ * wording and (via {@link activeStoreFailClosed}) its exit code off this, so
+ * the text surface and the exit contract cannot drift apart:
+ *
+ * - unresolved refusal -> fail line naming the refusal and whether the on-box
+ *   file was present but NOT opened (or absent);
+ * - deliberate local opt-in -> pass line naming the file;
+ * - hosted resolution -> pass line naming the resolver's sources.
+ */
+export declare function describeActiveStoreLine(description: ActiveStoreDescription, paint: StoreLinePalette): string;
 export interface PersistenceProbeResult {
     /**
      * True ONLY when a write was performed and read back. Never true for a skip.

package/dist/lib/persistence-probe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"persistence-probe.d.ts","sourceRoot":"","sources":["../../src/lib/persistence-probe.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiB,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAYjE;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAyBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAgBvE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACxE,sBAAsB,CAqExB;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;OASG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;;;;OAQG;IACH,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,wEAAwE;IACxE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;OAOG;IACH,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3D,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAIrE,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC,GACzC,mBAAmB,CASrB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC,EAC1C,KAAK,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,GAC3D,MAAM,CAGR;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD,mFAAmF;AACnF,eAAO,MAAM,+BAA+B,oDACO,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,0EAA0E;IAC1E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC,GACL,OAAO,CAAC,sBAAsB,CAAC,CAkNjC"}
+{"version":3,"file":"persistence-probe.d.ts","sourceRoot":"","sources":["../../src/lib/persistence-probe.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAY,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAQ,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAYjE;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;;OAMG;IACH,SAAS,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IACtC;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAyBD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAgBvE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EACzE,OAAO,GAAE,2BAAgC,GACxC,sBAAsB,CAqFxB;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,sBAAsB,GAClC,OAAO,CAET;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,sBAAsB,EACnC,KAAK,EAAE,gBAAgB,GACtB,MAAM,CAgBR;AAED,MAAM,WAAW,sBAAsB;IACrC;;;;;;;;;OASG;IACH,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;;;;OAQG;IACH,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,wEAAwE;IACxE,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;OAOG;IACH,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2DAA2D;IAC3D,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3D,kFAAkF;AAClF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAIrE,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC,GACzC,mBAAmB,CASrB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC,EAC1C,KAAK,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,GAC3D,MAAM,CAGR;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAEnD,mFAAmF;AACnF,eAAO,MAAM,+BAA+B,oDACO,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,0EAA0E;IAC1E,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC,GACL,OAAO,CAAC,sBAAsB,CAAC,CAkNjC"}

package/dist/lib/transcriber.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transcriber.d.ts","sourceRoot":"","sources":["../../src/lib/transcriber.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAM/E,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD;AAcD,wBAAgB,WAAW,IAAI,IAAI,CAGlC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBtD;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,wEAAwE;IACxE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,IAAI,EAAE,eAAe,GAAG,aAAa,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,KACX,OAAO,CAAC;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAU9B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC;IACvC,qEAAqE;IACrE,aAAa,CAAC,EAAE,wBAAwB,CAAC;CACrC,GACL,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAM,GACjD,OAAO,CAAC,mBAAmB,CAAC,CA4B9B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAM,GACjD,OAAO,CAAC,mBAAmB,CAAC,CA6B9B;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA6C9B;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQpE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAM5D"}
+{"version":3,"file":"transcriber.d.ts","sourceRoot":"","sources":["../../src/lib/transcriber.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAM/E,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD;AAeD,wBAAgB,WAAW,IAAI,IAAI,CAGlC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBtD;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,wEAAwE;IACxE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,IAAI,EAAE,eAAe,GAAG,aAAa,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,KACX,OAAO,CAAC;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAU9B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,gBAAgB,EACxB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,eAAe,GAAG,aAAa,CAAC;IACvC,qEAAqE;IACrE,aAAa,CAAC,EAAE,wBAAwB,CAAC;CACrC,GACL,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAM,GACjD,OAAO,CAAC,mBAAmB,CAAC,CA4B9B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAM,GACjD,OAAO,CAAC,mBAAmB,CAAC,CA6B9B;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA6C9B;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQpE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAM5D"}

package/dist/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgCpE,wBAAgB,WAAW,IAAI,SAAS,CAo1BvC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiCpE,wBAAgB,WAAW,IAAI,SAAS,CAo1BvC"}