@hasna/recordings 0.3.13 → 0.5.0

package/dist/store.d.ts

@@ -1,5 +1,7 @@
 import type { Recording, CreateRecordingInput, RecordingFilter, Agent, Project } from "./types/index.js";
 import { type FeedbackInput } from "./db/feedback.js";
+import { type RecordsClientResolveOptions } from "./http/client.js";
+import { AudioArtifactStorage } from "./lib/audio-artifact-storage.js";
 export declare const APP = "recordings";
 export type { FeedbackInput } from "./db/feedback.js";
 export interface RecordingStats {
@@ -30,13 +32,20 @@ export interface Store {
     saveFeedback(input: FeedbackInput): Promise<void>;
 }
 export declare function countStoreRecordings(store: Store, filter?: RecordingFilter): Promise<number>;
+/** Test helper: force the LocalStore's artifact kit (e.g. an in-memory bucket). */
+export declare function __setLocalArtifactStorage(storage: AudioArtifactStorage | null): void;
+/** Test helper: clear the artifact-storage override. */
+export declare function __resetLocalArtifactStorage(): void;
 /**
  * Resolve the active Store from the environment. Cached per-process after first
  * resolution against `process.env`; pass an explicit `env` (e.g. in tests) to
- * bypass the cache. Throws if the cloud transport is requested but misconfigured
- * (URL/key mismatch) so callers never silently read the wrong dataset.
+ * bypass the cache. The hosted client re-resolves its credential on every
+ * request through the @hasna/contracts chain, so the cache never freezes a
+ * key. Throws a `REMOTE_API_*` failure when no credential resolves — the
+ * on-box file is reachable only through the explicit
+ * `HASNA_RECORDINGS_LOCAL=1` opt-in, never as a fallback.
  */
-export declare function getStore(env?: NodeJS.ProcessEnv | Record<string, string | undefined>): Store;
+export declare function getStore(env?: NodeJS.ProcessEnv | Record<string, string | undefined>, options?: RecordsClientResolveOptions): Store;
 /** Test helper: clear the cached Store. */
 export declare function __resetStore(): void;
 //# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,SAAS,EACT,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAUzF,eAAO,MAAM,GAAG,eAAe,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAG7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAClD,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAGjF,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAGnC,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AA4QD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAID;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,KAAK,CAMzG;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,SAAS,EACT,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAGL,KAAK,2BAA2B,EAEjC,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,oBAAoB,EAGrB,MAAM,iCAAiC,CAAC;AAEzC,eAAO,MAAM,GAAG,eAAe,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAG7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAClD,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAGjF,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAGnC,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAyRD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAaD,mFAAmF;AACnF,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAEpF;AAED,wDAAwD;AACxD,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CACtB,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,EACzE,OAAO,GAAE,2BAAgC,GACxC,KAAK,CAMP;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}

package/dist/types/index.d.ts

@@ -1,6 +1,12 @@
 export interface Recording {
     id: string;
     audio_path: string | null;
+    /** Object key of the uploaded audio in the configured artifact bucket, when the upload happened. */
+    audio_object_key: string | null;
+    /** Lowercase hex sha-256 of the uploaded audio bytes; content-addressed storage identity. */
+    audio_sha256: string | null;
+    /** Byte size of the uploaded audio object. */
+    audio_bytes: number | null;
     raw_text: string;
     processed_text: string | null;
     processing_mode: ProcessingMode;
@@ -24,6 +30,9 @@ export interface CreateRecordingInput {
     /** Stable caller-owned identity for retrying one logical recording create. */
     id?: string;
     audio_path?: string;
+    audio_object_key?: string;
+    audio_sha256?: string;
+    audio_bytes?: number;
     raw_text: string;
     processed_text?: string;
     processing_mode?: ProcessingMode;
@@ -93,6 +102,12 @@ export interface RecordingsConfig {
     db_path: string;
     audio_dir: string;
     max_recording_seconds: number;
+    /** Artifact bucket for uploaded audio (HASNA_RECORDINGS_S3_BUCKET / RECORDINGS_S3_BUCKET). Empty = local-only. */
+    s3_bucket: string;
+    /** Object-key prefix inside the bucket; defaults to "recordings" when the bucket is set. */
+    s3_prefix: string;
+    /** AWS region for the S3 client; defaults to AWS_REGION, then us-east-1. */
+    s3_region: string;
     config_warnings?: string[];
 }
 export interface TranscriptionResult {

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,cAAc,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,UAAU,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAID,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oGAAoG;IACpG,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,6FAA6F;IAC7F,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,8CAA8C;IAC9C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,cAAc,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,UAAU,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,8EAA8E;IAC9E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kHAAkH;IAClH,SAAS,EAAE,MAAM,CAAC;IAClB,4FAA4F;IAC5F,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAID,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B"}

package/docs/hosted-sdk.md

@@ -0,0 +1,71 @@
+# Hosted SDK
+
+`@hasna/recordings/hosted` provides `HostedRecordingsClient` for hosted recording
+metadata, account and paste-history operations. The existing `./sdk` retains its
+separate legacy API. This additive client neither translates legacy fields nor
+records audio, opens a login browser, manages credentials or starts a speech
+provider. Bun is the tested runtime; browser compatibility is not claimed.
+
+```ts
+import { HostedRecordingsClient, recordingCursor } from "@hasna/recordings/hosted";
+
+const client = new HostedRecordingsClient({
+  apiBase: configuration.completeV1Base,
+  credentialProvider: ({ apiBase, signal }) => session.accessTokenFor(apiBase, signal),
+});
+const { recordings } = await client.listRecordings({ limit: 25 });
+if (recordings.length === 25) {
+  const next = await client.listRecordings({ limit: 25, ...recordingCursor(recordings.at(-1)!) });
+}
+```
+
+The caller supplies a complete API base ending in `/v1`, including any prefix.
+Remote bases require HTTPS; HTTP requires an explicit exact loopback address.
+The client has no default endpoint or ambient environment, disk or Keychain
+credential lookup. Public `health()` and `version()` never request credentials;
+all other methods request a fresh caller-supplied Bearer credential. Injected
+`fetch` is trusted and must honor manual redirects and AbortSignal. No request
+follows a redirect, sends cookies or retries automatically.
+
+`bootstrap()` sends an empty object; the server derives account/profile authority
+from the authenticated session. `account()` reads that account and `ready()`
+checks authenticated readiness. The caller owns OAuth, refresh and credential
+storage. `logout()` revokes the current server session family; the caller must
+also clear its stored credentials.
+
+`listRecordings`, `getRecording`, `saveRecording` and `renameRecording` use
+camelCase values: `id`, optional `sessionId`, `title`, `transcript`, and
+`durationMs`. Duration is milliseconds. `deleteRecording` returns
+`{state:'pending'}` for accepted cleanup or `{state:'removed'}` for completed
+deletion. Pending is not proof that audio has been purged. Repeat explicitly;
+reads may return the `recording_deleted` error after a permanent tombstone.
+
+`listPasteReceipts`, `savePasteReceipt`, `deletePasteReceipt` and
+`clearPasteHistory` use the hosted paste contract. An input `occurredAt` must be
+UTC ending in `Z`; omit it for server time. `client_reported` receipt evidence
+does not mean the server observed the target. Empty text remains valid when
+retention is disabled. Recordings and receipts can contain private text; callers
+should avoid logging responses.
+
+Both lists require `before` and `beforeId` together or neither. `recordingCursor`
+selects the last row's `createdAt` and ID; `pasteCursor` selects its `occurredAt`
+and ID. There is no inferred total or automatic pagination. A full page can be
+the last page. Inputs are validated before credentials or fetch; future JSON
+response fields are preserved. Advertised metadata must include a compatible
+version and all required capabilities; entirely absent metadata remains legacy
+compatible. This is stricter than an older hosted adapter that accepted empty
+capability advertisements.
+
+The default 20-second deadline includes credential acquisition and the entire
+response body. Caller cancellation has the same scope. Encoded JSON requests
+are limited to 1 MiB before credentials are requested. Responses are limited to
+4 MiB of decoded bytes by default, configurable from 1 KiB to 32 MiB; compressed
+wire Content-Length is not compared with decoded size. The transport bounds its
+growing buffer, not total process memory. Error bodies are cancelled unread.
+
+`RecordingsSDKError` contains a fixed code/message and optional HTTP status and
+validated UUID request ID. It retains no body, endpoint, token, server message or
+original cause. A timed-out mutation may already have committed: reconcile using
+the known recording or receipt ID instead of blindly retrying. This JSON client
+does not implement audio upload/download, WebSocket sessions, native app control,
+tenant storage, usage admission or provider execution.

package/docs/wire-contracts.md

@@ -0,0 +1,24 @@
+# Hosted recording wire contracts
+
+The additive `@hasna/recordings/contracts/hosted-v1` and `@hasna/recordings/contracts/stream-v1` exports describe hosted recording metadata and PCM streaming. They perform no I/O, choose no endpoint, read no credentials and implement no provider or storage backend. Existing `./sdk`, CLI, MCP, serve, projects and native provider interfaces keep their existing behavior. The hosted camelCase API is distinct from the legacy SDK's snake_case API. Qualified timestamps require seconds; numeric offsets require a colon and valid hour/minute ranges.
+
+```ts
+import { recordingInputParser } from "@hasna/recordings/contracts/hosted-v1";
+import { streamEventParser } from "@hasna/recordings/contracts/stream-v1";
+
+const request = recordingInputParser.parse(input);
+const event = streamEventParser.safeParse(decodedEvent);
+if (!event.success) handleInvalidContract(event.error.code);
+```
+
+Every parser exposes an explicit `ContractParser<T>` interface with plain DTOs. `parse` throws a fixed `ContractValidationError`; `safeParse` returns `{success: true, data}` or `{success: false, error: {code: "invalid_contract"}}`. Neither error retains rejected data, schema-library internals or a cause. Consumers using different validation libraries can use these interfaces without exchanging Zod types.
+
+Inputs reject unknown fields. Recording input has a UUID, title, transcript and duration in milliseconds; caller input cannot supply trusted provenance. Titles are trimmed. Paste input uses UTC timestamps ending in `Z`; output timestamps may have offsets. A paste receipt's `client_reported` evidence does not mean the server observed the target. Pagination requires `before` and `beforeId` together, or neither; either cursor component alone is invalid. Responses preserve extra JSON fields, including nested fields, while still checking known fields.
+
+Hosted wire version `1.0` is independent of package and local-control versions. Metadata may be entirely absent for legacy v1. Once advertised, version and capabilities must both be present: major `1`, bounded minor, unique valid capability names, and all four required capabilities. Future compatible minors and additional capabilities are accepted. No incompatible advertisement downgrades to legacy mode. Bootstrap and version response parsers enforce these rules too. This intentionally tightens the previous hosted SDK's permissive metadata parsing to match service/native negotiation; it does not modify the legacy public SDK.
+
+Streaming controls are strict. `parseStreamControlJSON` also enforces the existing 20,000-byte UTF-8 control-message ceiling. `pcmFrameParser` accepts only nonempty even-length PCM16 frames, from 2 through 24,000 bytes, without copying or converting them. The format is 24 kHz mono signed little-endian PCM16. Stream event parsers validate known event types, bounds, final capture identity and complete advertised metadata. New fields are allowed; unknown event types are rejected. Legacy final events may omit segments/provenance/recordingId, and legacy ready events may omit metadata/window fields.
+
+These are value contracts, not a session state machine. The consumer must bind events to its current capture, require ready before sending, enforce sequence ordering, cumulative/buffer/deadline limits, require input finish before final delivery, validate renewal expiry against its clock, and require ready metadata when bootstrap advertised it. `acceptsAudioAcknowledgement` is a pure check against the consumer's sent and acknowledged byte counts; it does not update those counts. The consumer owns consent, authorization, cancellation and error display. Error-event messages are untrusted data and must not be logged as validation diagnostics.
+
+Fictional positive and negative interoperability vectors are exported as `@hasna/recordings/contracts/fixtures/v1`. They freeze current input/output differences explicitly. Contract additions do not repoint or replace any legacy API. A subsequent reviewed package release and consumer adoption are required; introducing these modules does not publish them or change a deployed service.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/recordings",
-  "version": "0.3.13",
+  "version": "0.5.0",
   "type": "module",
   "description": "Speech-to-text recording tool with MCP and CLI — records, transcribes, and optionally enhances text using AI",
   "repository": {
@@ -26,6 +26,19 @@
     "./sdk": {
       "import": "./dist/sdk/index.js",
       "types": "./dist/sdk/index.d.ts"
+    },
+    "./contracts/hosted-v1": {
+      "import": "./dist/contracts/hosted-v1.js",
+      "types": "./dist/contracts/hosted-v1.d.ts"
+    },
+    "./contracts/stream-v1": {
+      "import": "./dist/contracts/stream-v1.js",
+      "types": "./dist/contracts/stream-v1.d.ts"
+    },
+    "./contracts/fixtures/v1": "./contracts/v1/fixtures.json",
+    "./hosted": {
+      "import": "./dist/hosted/index.js",
+      "types": "./dist/hosted/index.d.ts"
     }
   },
   "engines": {
@@ -34,20 +47,20 @@
   "scripts": {
     "clean": "rm -rf dist",
     "build": "bun run clean && bun run build:cli && bun run build:mcp && bun run build:serve && bun run build:lib && tsc --emitDeclarationOnly --outDir dist",
-    "build:cli": "bun build src/cli/index.ts --target=bun --outfile=dist/cli/index.js --external=commander --external=chalk --external=openai",
-    "build:mcp": "bun build src/mcp/index.ts --target=bun --outfile=dist/mcp/index.js --external=@modelcontextprotocol/sdk --external=openai",
-    "build:serve": "bun build src/server/index.ts --target=bun --outfile=dist/server/index.js --external=@modelcontextprotocol/sdk --external=@hasna/contracts --external=openai --external=pg",
-    "build:lib": "bun build src/index.ts src/storage.ts src/sdk/index.ts --target=bun --outdir=dist --external=openai",
+    "build:cli": "bun build src/cli/index.ts --target=bun --outfile=dist/cli/index.js --external=commander --external=chalk --external=openai --external=@aws-sdk/client-s3",
+    "build:mcp": "bun build src/mcp/index.ts --target=bun --outfile=dist/mcp/index.js --external=@modelcontextprotocol/sdk --external=openai --external=@aws-sdk/client-s3",
+    "build:serve": "bun build src/server/index.ts --target=bun --outfile=dist/server/index.js --external=@modelcontextprotocol/sdk --external=@hasna/contracts --external=openai --external=pg --external=@aws-sdk/client-s3",
+    "build:lib": "bun build src/index.ts src/storage.ts src/sdk/index.ts --target=bun --outdir=dist --external=openai --external=@aws-sdk/client-s3 && bun run build:contracts",
     "build:native-fs-guard": "/bin/bash scripts/build_native_fs_guard.sh",
     "generate:sdk": "bun run scripts/generate-sdk.ts",
     "migrate": "bun run scripts/migrate.ts",
     "typecheck": "tsc --noEmit",
     "typecheck:tcc-contract": "tsc --noEmit -p tsconfig.tcc-contract.json",
-    "test": "bun test",
+    "test": "bun scripts/release-suite-gate.ts --all",
     "verify:ci-suite": "bun scripts/ci-linux-suite.ts --check",
     "verify:ci-suite:run": "bun scripts/ci-linux-suite.ts --verify-run",
     "verify:ci-native": "bun scripts/ci-native-build.ts",
-    "test:gated": "bun scripts/ci-linux-suite.ts --check && RECORDINGS_TEST_TIMEOUT_MS=\"${RECORDINGS_TEST_TIMEOUT_MS:-120000}\" bun test --timeout \"$RECORDINGS_TEST_TIMEOUT_MS\" $(bun scripts/ci-linux-suite.ts --gated)",
+    "test:gated": "bun scripts/release-suite-gate.ts",
     "test:vacuity-battery": "bun scripts/vacuity-manifest-gen.ts > \"${TMPDIR:-/tmp}/vacuity-corrupt-sites.tsv\" && bun scripts/vacuity-mutation-battery.ts \"${TMPDIR:-/tmp}/vacuity-corrupt-sites.tsv\"",
     "test:vacuity-battery:source": "bun scripts/vacuity-mutation-battery.ts scripts/vacuity-manifests/source-side.tsv",
     "test:vacuity-battery:chain": "bun scripts/vacuity-mutation-battery.ts scripts/vacuity-manifests/install-chain.tsv",
@@ -65,11 +78,16 @@
     "prepack:platform-gate": "bash -c 'if [ \"$(uname -s)\" = Darwin ]; then bun run build:native-fs-guard; else echo \"WARN: native fs-guard build skipped on $(uname -s) — dry-run/CI pack; publish recordings from macOS\"; fi'",
     "prepublishOnly": "bun run typecheck && bun run release-suite-gate",
     "release-suite-gate": "bun run scripts/release-suite-gate.ts",
-    "typecheck:shortcut-contract": "tsc --noEmit -p tsconfig.test.json"
+    "typecheck:shortcut-contract": "tsc --noEmit -p tsconfig.test.json",
+    "build:contracts": "bun build src/contracts/hosted-v1.ts src/contracts/stream-v1.ts src/hosted/index.ts --target=bun --root src --outdir=dist --splitting --external=@hasna/contracts"
   },
   "files": [
     "dist/",
+    "!dist/__tests__/",
     "scripts/",
+    "!scripts/test-recorder-fixtures.ts",
+    "!scripts/**/__pycache__/",
+    "!scripts/**/*.pyc",
     "Dockerfile.package",
     "bun.lock",
     "src/native/Recordings/App/",
@@ -81,10 +99,14 @@
     "src/native/Recordings/build.sh",
     "packaging/macos/",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "contracts/v1/fixtures.json",
+    "docs/wire-contracts.md",
+    "docs/hosted-sdk.md"
   ],
   "dependencies": {
-    "@hasna/contracts": "0.14.1",
+    "@aws-sdk/client-s3": "^3.1007.0",
+    "@hasna/contracts": "1.0.2",
     "@hasna/events": "0.1.11",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "chalk": "^5.4.1",
@@ -94,7 +116,7 @@
     "zod": "^3.24.2"
   },
   "devDependencies": {
-    "@types/bun": "^1.2.5",
+    "@types/bun": "1.3.14",
     "@types/pg": "^8.11.11",
     "node-api-headers": "1.9.0",
     "typescript": "^5.8.2"

package/packaging/macos/build_release_pkg.sh

@@ -224,7 +224,7 @@ case "$VERSION" in
 esac
 # The artifact basename is derived from the canonical bundle identity, never hardcoded:
 # build.sh emits ${APP_BASENAME}-${VERSION}-macos-${RELEASE_SUBTYPE} with APP_BASENAME
-# taken from the bundle name (currently HasnaRecordings.app). The legacy
+# taken from the bundle name (currently Hasna Recordings.app). The legacy
 # Recordings-* form was dropped with the bundle rename and must not be re-required.
 [ -n "$APP" ] && [ -d "$APP" ] || { echo "Package app bundle path is missing or invalid." >&2; exit 2; }
 expected_basename="$(/usr/bin/basename "$APP" .app)-${VERSION}-macos-initial-bootstrap"
@@ -533,7 +533,7 @@ PACKAGE_BOOTSTRAP_ID="$(/usr/bin/uuidgen | /usr/bin/tr '[:upper:]' '[:lower:]')"
   "$SCRIPTS"
 require_no_extended_acl "$PACKAGE_STAGE_DIR"
 
-/usr/bin/ditto "$APP" "$ROOT/Applications/HasnaRecordings.app"
+/usr/bin/ditto "$APP" "$ROOT/Applications/Hasna Recordings.app"
 /bin/cp "$BROKER" "$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
 /bin/cp "$VERIFIER" "$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
 /bin/cp "$PUBLIC_KEY" "$ROOT/Library/Application Support/Hasna/Recordings/Trust/envelope-keys/${KEY_EPOCH}.raw"
@@ -582,7 +582,7 @@ require_tree_without_extended_acl "$SCRIPTS"
   "$ROOT/Library/LaunchDaemons/com.hasna.recordings.updater.plist"
 /usr/bin/plutil -lint "$ROOT/Library/LaunchDaemons/com.hasna.recordings.updater.plist" >/dev/null
 
-STAGED_APP="$ROOT/Applications/HasnaRecordings.app"
+STAGED_APP="$ROOT/Applications/Hasna Recordings.app"
 STAGED_BROKER="$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
 STAGED_CLIENT="$STAGED_APP/Contents/Helpers/recordings-update-client"
 STAGED_VERIFIER="$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"

package/packaging/macos/managed_bootstrap.sh

@@ -173,7 +173,7 @@ validate_target_ancestry() {
 
 validate_target_ancestry
 
-CLIENT="/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
+CLIENT="/Applications/Hasna Recordings.app/Contents/Helpers/recordings-update-client"
 STATE="/var/db/com.hasna.recordings.updater/release-state.json"
 AUTHORIZATION_ROOT="/private/var/db/com.hasna.recordings.bootstrap-authorization"
 AUTHORIZATION_JOURNAL="${AUTHORIZATION_ROOT}/journal"
@@ -182,7 +182,7 @@ COHORT_PATHS=(
   "/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
   "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
   "/Library/LaunchDaemons/com.hasna.recordings.updater.plist"
-  "/Applications/HasnaRecordings.app"
+  "/Applications/Hasna Recordings.app"
   "$CLIENT"
   "/Library/Application Support/Hasna/Recordings/Trust"
   "/Library/Application Support/Hasna/Recordings/Bootstrap"
@@ -304,7 +304,7 @@ PAYLOAD="$EXPANDED/Payload"
 PREFLIGHT="$EXPANDED/Scripts/recordings-bootstrap-preflight"
 EXPANDED_PREINSTALL="$EXPANDED/Scripts/preinstall"
 EXPANDED_POSTINSTALL="$EXPANDED/Scripts/postinstall"
-PAYLOAD_CLIENT="$PAYLOAD/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
+PAYLOAD_CLIENT="$PAYLOAD/Applications/Hasna Recordings.app/Contents/Helpers/recordings-update-client"
 [ -d "$PAYLOAD" ] && [ ! -L "$PAYLOAD" ] && \
   [ -x "$PREFLIGHT" ] && [ ! -L "$PREFLIGHT" ] && \
   [ -x "$EXPANDED_PREINSTALL" ] && [ ! -L "$EXPANDED_PREINSTALL" ] && \
@@ -512,7 +512,7 @@ cohort_expected_mode() {
     "/Library/PrivilegedHelperTools/com.hasna.recordings.updater"|\
     "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier") printf '555\n' ;;
     "/Library/LaunchDaemons/com.hasna.recordings.updater.plist") printf '444\n' ;;
-    "/Applications/HasnaRecordings.app"|"$CLIENT") printf '755\n' ;;
+    "/Applications/Hasna Recordings.app"|"$CLIENT") printf '755\n' ;;
     "/Library/Application Support/Hasna/Recordings/Trust") printf '700-or-755\n' ;;
     "/Library/Application Support/Hasna/Recordings/Bootstrap"|\
     "/Library/Application Support/Hasna/Recordings/Updates"|\

package/packaging/macos/scripts/postinstall

@@ -11,9 +11,9 @@ PACKAGE_BOOTSTRAP_ID="__RECORDINGS_PACKAGE_BOOTSTRAP_ID__"
 AUTHORIZATION_ROOT="/private/var/db/com.hasna.recordings.bootstrap-authorization"
 AUTHORIZATION_JOURNAL="${AUTHORIZATION_ROOT}/journal"
 BROKER="/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
-CLIENT="/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
+CLIENT="/Applications/Hasna Recordings.app/Contents/Helpers/recordings-update-client"
 VERIFIER="/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
-APP="/Applications/HasnaRecordings.app"
+APP="/Applications/Hasna Recordings.app"
 STATE_ROOT="/Library/Application Support/Hasna/Recordings/Updates"
 TRUST_ROOT="/Library/Application Support/Hasna/Recordings/Trust"
 BOOTSTRAP_ROOT="/Library/Application Support/Hasna/Recordings/Bootstrap"

package/packaging/macos/scripts/preinstall

@@ -248,8 +248,8 @@ COHORT_PATHS=(
   "/Library/PrivilegedHelperTools/com.hasna.recordings.updater:555"
   "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier:555"
   "/Library/LaunchDaemons/com.hasna.recordings.updater.plist:444"
-  "/Applications/HasnaRecordings.app:755"
-  "/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client:755"
+  "/Applications/Hasna Recordings.app:755"
+  "/Applications/Hasna Recordings.app/Contents/Helpers/recordings-update-client:755"
   "/Applications/Recordings.app:755"
   "/Applications/Recordings.app/Contents/Helpers/recordings-update-client:755"
   "/Library/Application Support/Hasna/Recordings/Trust:700-or-755"

package/scripts/build_companion_cli.sh

@@ -151,7 +151,13 @@ COMPILED_ARM64="$COMPILE_DIR/recordings.arm64"
 COMPILED_X86_64="$COMPILE_DIR/recordings.x86_64"
 "$MKDIR_EXECUTABLE" -p "$BUILD_HOME" "$BUN_CACHE" "$STAGED_ROOT" "$COMPILE_DIR"
 "$CP_EXECUTABLE" "$ROOT/package.json" "$ROOT/bun.lock" "$ROOT/bunfig.toml" "$ROOT/tsconfig.json" "$STAGED_ROOT/"
-"$CP_EXECUTABLE" -R "$ROOT/src" "$STAGED_ROOT/src"
+"$MKDIR_EXECUTABLE" -p "$STAGED_ROOT/src"
+# The CLI has no Swift inputs. Walking src/native also walks SwiftPM's live
+# .build cache, whose temporary files can disappear during a native build.
+for source_entry in "$ROOT/src/"*; do
+  [ "$source_entry" != "$ROOT/src/native" ] || continue
+  "$CP_EXECUTABLE" -R "$source_entry" "$STAGED_ROOT/src/"
+done
 if [ -d "$ROOT/migrations" ]; then
   "$CP_EXECUTABLE" -R "$ROOT/migrations" "$STAGED_ROOT/migrations"
 fi

package/scripts/ci-linux-suite.ts

@@ -29,6 +29,7 @@
  *
  * Usage:
  *   bun scripts/ci-linux-suite.ts --check                 validate the quarantine file, print counts
+ *   bun scripts/ci-linux-suite.ts --all                   every discovered tracked test, including quarantine
  *   bun scripts/ci-linux-suite.ts --gated                 newline-separated gated files
  *   bun scripts/ci-linux-suite.ts --quarantined           newline-separated quarantined files
  *   bun scripts/ci-linux-suite.ts --verify-run <log>      assert a gated run honoured the partition
@@ -41,6 +42,13 @@ import { spawnSync } from "node:child_process";
 export const QUARANTINE_FILE = ".github/linux-quarantine.txt";
 
 const TEST_SUFFIX = ".test.ts";
+const BUN_TEST_SUFFIX = /[._](?:test|spec)\.(?:[cm]?[jt]sx?)$/;
+
+function supportedTestFiles(paths: string[]): string[] {
+  const unsupported = paths.filter(path => BUN_TEST_SUFFIX.test(path) && !path.endsWith(TEST_SUFFIX));
+  if (unsupported.length) throw new Error(`unsupported test suffix; extend discovery and JUnit contracts before adding:\n${unsupported.join("\n")}`);
+  return paths.filter(path => path.endsWith(TEST_SUFFIX));
+}
 
 /** Directories never worth walking. `.build` holds SwiftPM output, which can be enormous. */
 const SKIPPED_DIRS = new Set([".git", "node_modules", ".build", "dist"]);
@@ -92,7 +100,7 @@ export function entriesMissingReason(text: string): string[] {
  * in the working tree.
  */
 export function testFilesFromGit(repoRoot: string): string[] {
-  const result = spawnSync("git", ["-C", repoRoot, "ls-files", "-z", `*${TEST_SUFFIX}`], {
+  const result = spawnSync("git", ["-C", repoRoot, "ls-files", "-z"], {
     encoding: "utf8",
   });
   if (result.status !== 0) {
@@ -100,7 +108,7 @@ export function testFilesFromGit(repoRoot: string): string[] {
   }
   // -z because a path may legally contain a newline, and a newline-split enumeration would report
   // one such path as two missing files — a disagreement that reads as a broken walker.
-  return result.stdout.split("\0").filter((path) => path.length > 0).sort();
+  return supportedTestFiles(result.stdout.split("\0").filter((path) => path.length > 0)).sort();
 }
 
 /**
@@ -118,13 +126,13 @@ export function testFilesFromWalk(repoRoot: string): string[] {
       if (entry.isDirectory()) {
         if (SKIPPED_DIRS.has(entry.name)) continue;
         walk(absolute);
-      } else if (entry.isFile() && entry.name.endsWith(TEST_SUFFIX)) {
+      } else if (entry.isFile()) {
         found.push(relative(repoRoot, absolute).split(sep).join("/"));
       }
     }
   };
   walk(repoRoot);
-  return found.sort();
+  return supportedTestFiles(found).sort();
 }
 
 export type DiscoveryDisagreement = { trackedNotOnDisk: string[]; onDiskUntracked: string[] };
@@ -257,7 +265,7 @@ function fail(message: string): never {
   process.exit(1);
 }
 
-function loadPartition(repoRoot: string): Partition & { discovered: string[] } {
+function loadPartition(repoRoot: string, requireNonemptyGated = true): Partition & { discovered: string[] } {
   const fromGit = testFilesFromGit(repoRoot);
   const { trackedNotOnDisk, onDiskUntracked } = compareDiscovery(fromGit, testFilesFromWalk(repoRoot));
   if (trackedNotOnDisk.length > 0) {
@@ -293,16 +301,14 @@ function loadPartition(repoRoot: string): Partition & { discovered: string[] } {
   } catch (error) {
     fail(error instanceof Error ? error.message : String(error));
   }
-  if (split.gated.length === 0) {
+  if (requireNonemptyGated && split.gated.length === 0) {
     fail(
       `Every discovered test file is quarantined by ${QUARANTINE_FILE}. The gate would run nothing.`,
     );
   }
-  // The workflow expands `--gated` unquoted so the runner receives one argument per file, which is
-  // only safe while no path contains whitespace. Asserting it here keeps that assumption in the
-  // same place as the list, instead of leaving a shell-quoting bug to be discovered by a suite that
-  // silently stopped being gated.
-  const whitespace = split.gated.filter((path) => /\s/.test(path));
+  // Keep the established newline/shell-safe manifest contract in both selections.
+  // Quarantined paths are still executable inputs to the explicit all-tests mode.
+  const whitespace = fromGit.filter((path) => /\s/.test(path));
   if (whitespace.length > 0) {
     fail(
       "Test paths containing whitespace cannot be passed through unquoted word splitting:\n" +
@@ -318,8 +324,12 @@ function main(argv: string[]): void {
     fail(`Run this from the repository root; ${QUARANTINE_FILE} is not there.`);
   }
   const mode = argv[0];
-  const { gated, quarantined, discovered } = loadPartition(repoRoot);
+  const { gated, quarantined, discovered } = loadPartition(repoRoot, mode !== "--all");
 
+  if (mode === "--all") {
+    console.log(discovered.join("\n"));
+    return;
+  }
   if (mode === "--gated") {
     console.log(gated.join("\n"));
     return;
@@ -395,7 +405,7 @@ function main(argv: string[]): void {
     }
     return;
   }
-  fail("usage: --check | --gated | --quarantined | --verify-run <junit.xml>");
+  fail("usage: --check | --all | --gated | --quarantined | --verify-run <junit.xml>");
 }
 
 if (import.meta.main) {