@hasna/recordings 0.3.2 → 0.3.8

package/dist/storage.js

@@ -1019,9 +1019,118 @@ function setAgentFocus(idOrName, projectId, db) {
   d.query("UPDATE agents SET active_project_id = ?, last_seen_at = ? WHERE id = ?").run(resolvedProjectId, new Date().toISOString(), agent.id);
   return getAgent(agent.id, d);
 }
+// package.json
+var package_default = {
+  name: "@hasna/recordings",
+  version: "0.3.8",
+  type: "module",
+  description: "Speech-to-text recording tool with MCP and CLI \u2014 records, transcribes, and optionally enhances text using AI",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/hasna/apps"
+  },
+  main: "dist/index.js",
+  types: "dist/index.d.ts",
+  bin: {
+    recordings: "dist/cli/index.js",
+    "recordings-mcp": "dist/mcp/index.js",
+    "recordings-serve": "dist/server/index.js"
+  },
+  exports: {
+    ".": {
+      import: "./dist/index.js",
+      types: "./dist/index.d.ts"
+    },
+    "./storage": {
+      import: "./dist/storage.js",
+      types: "./dist/storage.d.ts"
+    },
+    "./sdk": {
+      import: "./dist/sdk/index.js",
+      types: "./dist/sdk/index.d.ts"
+    }
+  },
+  engines: {
+    bun: ">=1.0.0"
+  },
+  scripts: {
+    clean: "rm -rf dist",
+    build: "bun run clean && bun run build:cli && bun run build:mcp && bun run build:serve && bun run build:lib && tsc --emitDeclarationOnly --outDir dist",
+    "build:cli": "bun build src/cli/index.ts --target=bun --outfile=dist/cli/index.js --external=commander --external=chalk --external=openai",
+    "build:mcp": "bun build src/mcp/index.ts --target=bun --outfile=dist/mcp/index.js --external=@modelcontextprotocol/sdk --external=openai",
+    "build:serve": "bun build src/server/index.ts --target=bun --outfile=dist/server/index.js --external=@modelcontextprotocol/sdk --external=@hasna/contracts --external=openai --external=pg",
+    "build:lib": "bun build src/index.ts src/storage.ts src/sdk/index.ts --target=bun --outdir=dist --external=openai",
+    "build:native-fs-guard": "/bin/bash scripts/build_native_fs_guard.sh",
+    "generate:sdk": "bun run scripts/generate-sdk.ts",
+    migrate: "bun run scripts/migrate.ts",
+    typecheck: "tsc --noEmit",
+    "typecheck:tcc-contract": "tsc --noEmit -p tsconfig.tcc-contract.json",
+    test: "bun test",
+    "verify:ci-suite": "bun scripts/ci-linux-suite.ts --check",
+    "verify:ci-suite:run": "bun scripts/ci-linux-suite.ts --verify-run",
+    "verify:ci-native": "bun scripts/ci-native-build.ts",
+    "test:gated": 'bun scripts/ci-linux-suite.ts --check && RECORDINGS_TEST_TIMEOUT_MS="${RECORDINGS_TEST_TIMEOUT_MS:-120000}" bun test --timeout "$RECORDINGS_TEST_TIMEOUT_MS" $(bun scripts/ci-linux-suite.ts --gated)',
+    "test:vacuity-battery": 'bun scripts/vacuity-manifest-gen.ts > "${TMPDIR:-/tmp}/vacuity-corrupt-sites.tsv" && bun scripts/vacuity-mutation-battery.ts "${TMPDIR:-/tmp}/vacuity-corrupt-sites.tsv"',
+    "test:vacuity-battery:source": "bun scripts/vacuity-mutation-battery.ts scripts/vacuity-manifests/source-side.tsv",
+    "test:vacuity-battery:chain": "bun scripts/vacuity-mutation-battery.ts scripts/vacuity-manifests/install-chain.tsv",
+    "test:vacuity-battery:vars": "bun scripts/vacuity-mutation-battery.ts scripts/vacuity-manifests/variable-operands.tsv",
+    "test:vacuity-battery:reorder": "bun scripts/vacuity-mutation-battery.ts scripts/vacuity-manifests/reorder.tsv",
+    "test:coverage": "bun test --coverage",
+    "dev:cli": "bun run src/cli/index.ts",
+    "desktop:snapshot": "bun run src/cli/index.ts app snapshot",
+    "dev:mcp": "bun run src/mcp/index.ts",
+    "verify:release": "bun run scripts/release-guard.ts",
+    "scan:artifact": "bun run scripts/scan-artifact.ts",
+    "version:set": "bun run scripts/set-version.ts",
+    "version:check": "bun run scripts/set-version.ts --check",
+    prepack: "bun run prepack:platform-gate && bun run version:check && bun run build && bun run verify:release && bun run scan:artifact",
+    "prepack:platform-gate": `bash -c 'if [ "$(uname -s)" = Darwin ]; then bun run build:native-fs-guard; else echo "WARN: native fs-guard build skipped on $(uname -s) \u2014 dry-run/CI pack; publish recordings from macOS"; fi'`,
+    prepublishOnly: "bun run typecheck && bun run release-suite-gate",
+    "release-suite-gate": "bun run scripts/release-suite-gate.ts",
+    "typecheck:shortcut-contract": "tsc --noEmit -p tsconfig.test.json"
+  },
+  files: [
+    "dist/",
+    "scripts/",
+    "Dockerfile.package",
+    "bun.lock",
+    "src/native/Recordings/App/",
+    "src/native/Recordings/RecordingsLib/",
+    "src/native/Recordings/RecordingsTests/",
+    "src/native/Recordings/Updater/",
+    "src/native/Recordings/Package.swift",
+    "src/native/Recordings/Package.resolved",
+    "src/native/Recordings/build.sh",
+    "packaging/macos/",
+    "README.md",
+    "LICENSE"
+  ],
+  dependencies: {
+    "@hasna/contracts": "0.13.3",
+    "@hasna/events": "0.1.11",
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    chalk: "^5.4.1",
+    commander: "^13.1.0",
+    openai: "^5.1.0",
+    pg: "^8.13.3",
+    zod: "^3.24.2"
+  },
+  devDependencies: {
+    "@types/bun": "^1.2.5",
+    "@types/pg": "^8.11.11",
+    "node-api-headers": "1.9.0",
+    typescript: "^5.8.2"
+  },
+  publishConfig: {
+    registry: "https://registry.npmjs.org",
+    access: "public"
+  },
+  license: "Apache-2.0",
+  author: "Hasna <andrei@hasna.com>"
+};
 
 // src/version.ts
-var VERSION = "0.3.2";
+var VERSION = package_default.version;
 
 // src/db/feedback.ts
 function saveFeedback(input) {
@@ -1029,58 +1138,26 @@ function saveFeedback(input) {
   db.query("INSERT INTO feedback (message, email, category, version) VALUES (?, ?, ?, ?)").run(input.message, input.email ?? null, input.category ?? "general", input.version ?? VERSION);
 }
 
-// src/lib/retired-deployment-modes.ts
-var RETIRED_DEPLOYMENT_MODES = [
-  "local",
-  "self_hosted",
-  "cloud",
-  "remote",
-  "hybrid"
-];
-function normalizeModeToken(value) {
-  return value.trim().toLowerCase().replace(/-/g, "_");
-}
-function asRetiredDeploymentMode(value) {
-  const token = normalizeModeToken(value);
-  return RETIRED_DEPLOYMENT_MODES.includes(token) ? token : null;
-}
-function retiredDeploymentModeError(rawValue, sourceEnvKey, replacement) {
-  const mode = asRetiredDeploymentMode(rawValue);
-  const value = mode === "local" ? replacement.onBox : replacement.offBox;
-  return new Error(`${sourceEnvKey}=${rawValue} names a deployment mode, and deployment modes are removed: ` + `${RETIRED_DEPLOYMENT_MODES.join(" | ")} no longer select anything. ` + `Set ${replacement.envKey}=${value} instead ` + `(${replacement.envKey} takes ${replacement.onBox} or ${replacement.offBox}).`);
-}
-
 // src/http/client.ts
-var SERVER_BACKEND_VALUES = ["sqlite", "postgresql", "postgres"];
 function envToken(name) {
   return name.toUpperCase().replace(/-/g, "_");
 }
-function clientStoreReplacement(envKey) {
-  return { envKey, onBox: "sqlite", offBox: "http" };
+function envKeys(name) {
+  const token = envToken(name);
+  return {
+    storeKeys: [`HASNA_${token}_CLIENT_STORE`, `${token}_CLIENT_STORE`],
+    apiUrlKeys: [`HASNA_${token}_API_URL`],
+    apiKeyKeys: [`HASNA_${token}_API_KEY`]
+  };
 }
-function normalizeClientStore(value, sourceEnvKey, replacementEnvKey) {
-  const normalized = normalizeModeToken(value);
+function normalizeClientStore(value) {
+  const normalized = value.trim().toLowerCase();
   if (normalized === "sqlite")
     return "sqlite";
   if (normalized === "http" || normalized === "https")
     return "http";
-  if (asRetiredDeploymentMode(value)) {
-    throw retiredDeploymentModeError(value, sourceEnvKey, clientStoreReplacement(replacementEnvKey));
-  }
   throw new Error(`Unknown client store: ${value}. Use sqlite or http.`);
 }
-function defaultApiBaseUrl(name) {
-  return `http://localhost:8874`;
-}
-function envKeys(name) {
-  const token = envToken(name);
-  return {
-    storeKeys: [`HASNA_${token}_CLIENT_STORE`, `${token}_CLIENT_STORE`],
-    retiredModeKeys: [`HASNA_${token}_STORAGE_MODE`, `HASNA_${token}_MODE`, `${token}_STORAGE_MODE`, `${token}_MODE`],
-    apiUrlKeys: [`HASNA_${token}_API_URL`, `${token}_API_URL`],
-    apiKeyKeys: [`HASNA_${token}_API_KEY`, `${token}_API_KEY`]
-  };
-}
 function firstEnv(env, keys) {
   for (const key of keys) {
     const value = env[key]?.trim();
@@ -1089,20 +1166,6 @@ function firstEnv(env, keys) {
   }
   return null;
 }
-function assertNoRetiredMode(env, keys) {
-  for (const key of keys.retiredModeKeys) {
-    const value = env[key]?.trim();
-    if (!value)
-      continue;
-    const normalized = normalizeModeToken(value);
-    if (SERVER_BACKEND_VALUES.includes(normalized))
-      continue;
-    if (asRetiredDeploymentMode(value)) {
-      throw retiredDeploymentModeError(value, key, clientStoreReplacement(keys.storeKeys[0]));
-    }
-    throw new Error(`${key}=${value} is not a client store. ${key} no longer selects one; ` + `set ${keys.storeKeys[0]}=sqlite or ${keys.storeKeys[0]}=http instead.`);
-  }
-}
 function toV1BaseUrl(apiUrl) {
   const url = new URL(apiUrl);
   if (url.protocol !== "http:" && url.protocol !== "https:") {
@@ -1118,22 +1181,44 @@ function toV1BaseUrl(apiUrl) {
 }
 function resolveTransport(name, env = process.env) {
   const keys = envKeys(name);
-  assertNoRetiredMode(env, keys);
   const storeHit = firstEnv(env, keys.storeKeys);
   const urlHit = firstEnv(env, keys.apiUrlKeys);
   const keyHit = firstEnv(env, keys.apiKeyKeys);
   let requested = "sqlite";
   let modeSource = "default";
   if (storeHit) {
-    requested = normalizeClientStore(storeHit.value, storeHit.key, keys.storeKeys[0]);
+    requested = normalizeClientStore(storeHit.value);
     modeSource = storeHit.key;
   } else if (urlHit && keyHit) {
     requested = "http";
     modeSource = "auto:api-url+api-key";
+  } else if (urlHit || keyHit) {
+    const missing = urlHit ? keys.apiKeyKeys[0] : keys.apiUrlKeys[0];
+    const present = urlHit ? keys.apiUrlKeys[0] : keys.apiKeyKeys[0];
+    return {
+      transport: "sqlite",
+      requested,
+      modeSource,
+      baseUrl: null,
+      apiKeyPresent: Boolean(keyHit),
+      misconfigured: true,
+      warning: `${present} is set but ${missing} is not: the hosted API is only ` + `selected when BOTH are present. Set ${missing}, or unset ${present} to ` + `use the on-box store.`
+    };
   }
   if (requested === "sqlite") {
     return { transport: "sqlite", requested, modeSource, baseUrl: null, apiKeyPresent: Boolean(keyHit), misconfigured: false, warning: null };
   }
+  if (!urlHit) {
+    return {
+      transport: "sqlite",
+      requested,
+      modeSource,
+      baseUrl: null,
+      apiKeyPresent: Boolean(keyHit),
+      misconfigured: true,
+      warning: `${modeSource}=http but no API URL is set (${keys.apiUrlKeys[0]}). Refusing to route to the API.`
+    };
+  }
   if (!keyHit) {
     return {
       transport: "sqlite",
@@ -1145,7 +1230,7 @@ function resolveTransport(name, env = process.env) {
       warning: `${modeSource}=http but no API key is set (${keys.apiKeyKeys[0]}). Refusing to route to the API.`
     };
   }
-  const rawUrl = urlHit?.value ?? defaultApiBaseUrl(name);
+  const rawUrl = urlHit.value;
   let baseUrl;
   try {
     baseUrl = toV1BaseUrl(rawUrl);
@@ -1617,7 +1702,6 @@ export {
   resolveTransport,
   resolveStorageClient,
   getStore,
-  defaultApiBaseUrl,
   createStorageClient,
   createHttpTransport,
   __resetStore,

package/dist/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,SAAS,EACT,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMzF,eAAO,MAAM,GAAG,eAAe,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAG7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAClD,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAGjF,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAGnC,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAwPD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAID;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,KAAK,CAMzG;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,SAAS,EACT,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMzF,eAAO,MAAM,GAAG,eAAe,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAG7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAClD,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAGjF,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAGnC,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAwPD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAID;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,KAAK,CAMzG;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.3.2";
+export declare const VERSION: string;
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,OAAO,QAAsB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/recordings",
-  "version": "0.3.2",
+  "version": "0.3.8",
   "type": "module",
   "description": "Speech-to-text recording tool with MCP and CLI — records, transcribes, and optionally enhances text using AI",
   "repository": {
@@ -63,7 +63,8 @@
     "version:check": "bun run scripts/set-version.ts --check",
     "prepack": "bun run prepack:platform-gate && bun run version:check && bun run build && bun run verify:release && bun run scan:artifact",
     "prepack:platform-gate": "bash -c 'if [ \"$(uname -s)\" = Darwin ]; then bun run build:native-fs-guard; else echo \"WARN: native fs-guard build skipped on $(uname -s) — dry-run/CI pack; publish recordings from macOS\"; fi'",
-    "prepublishOnly": "bun run typecheck && bun run test",
+    "prepublishOnly": "bun run typecheck && bun run release-suite-gate",
+    "release-suite-gate": "bun run scripts/release-suite-gate.ts",
     "typecheck:shortcut-contract": "tsc --noEmit -p tsconfig.test.json"
   },
   "files": [
@@ -83,7 +84,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@hasna/contracts": "0.8.4",
+    "@hasna/contracts": "0.13.3",
     "@hasna/events": "0.1.11",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "chalk": "^5.4.1",

package/packaging/macos/build_release_pkg.sh

@@ -222,8 +222,14 @@ done
 case "$VERSION" in
   ''|*[!0-9A-Za-z._+-]*) echo "Package version is missing or invalid." >&2; exit 2 ;;
 esac
-[ "$ARTIFACT_BASENAME" = "Recordings-${VERSION}-macos-initial-bootstrap" ] || {
-  echo "Initial-bootstrap package artifact basename is missing or mode-incompatible." >&2
+# The artifact basename is derived from the canonical bundle identity, never hardcoded:
+# build.sh emits ${APP_BASENAME}-${VERSION}-macos-${RELEASE_SUBTYPE} with APP_BASENAME
+# taken from the bundle name (currently HasnaRecordings.app). The legacy
+# Recordings-* form was dropped with the bundle rename and must not be re-required.
+[ -n "$APP" ] && [ -d "$APP" ] || { echo "Package app bundle path is missing or invalid." >&2; exit 2; }
+expected_basename="$(/usr/bin/basename "$APP" .app)-${VERSION}-macos-initial-bootstrap"
+[ "$ARTIFACT_BASENAME" = "$expected_basename" ] || {
+  echo "Initial-bootstrap package artifact basename is missing or mode-incompatible (expected ${expected_basename})." >&2
   exit 2
 }
 [[ "$SOURCE_SHA" =~ ^[0-9a-f]{40}$ ]] || { echo "Package source SHA must be an exact commit." >&2; exit 2; }
@@ -527,7 +533,7 @@ PACKAGE_BOOTSTRAP_ID="$(/usr/bin/uuidgen | /usr/bin/tr '[:upper:]' '[:lower:]')"
   "$SCRIPTS"
 require_no_extended_acl "$PACKAGE_STAGE_DIR"
 
-/usr/bin/ditto "$APP" "$ROOT/Applications/Recordings.app"
+/usr/bin/ditto "$APP" "$ROOT/Applications/HasnaRecordings.app"
 /bin/cp "$BROKER" "$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
 /bin/cp "$VERIFIER" "$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
 /bin/cp "$PUBLIC_KEY" "$ROOT/Library/Application Support/Hasna/Recordings/Trust/envelope-keys/${KEY_EPOCH}.raw"
@@ -576,7 +582,7 @@ require_tree_without_extended_acl "$SCRIPTS"
   "$ROOT/Library/LaunchDaemons/com.hasna.recordings.updater.plist"
 /usr/bin/plutil -lint "$ROOT/Library/LaunchDaemons/com.hasna.recordings.updater.plist" >/dev/null
 
-STAGED_APP="$ROOT/Applications/Recordings.app"
+STAGED_APP="$ROOT/Applications/HasnaRecordings.app"
 STAGED_BROKER="$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
 STAGED_CLIENT="$STAGED_APP/Contents/Helpers/recordings-update-client"
 STAGED_VERIFIER="$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"

package/packaging/macos/managed_bootstrap.sh

@@ -173,7 +173,7 @@ validate_target_ancestry() {
 
 validate_target_ancestry
 
-CLIENT="/Applications/Recordings.app/Contents/Helpers/recordings-update-client"
+CLIENT="/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
 STATE="/var/db/com.hasna.recordings.updater/release-state.json"
 AUTHORIZATION_ROOT="/private/var/db/com.hasna.recordings.bootstrap-authorization"
 AUTHORIZATION_JOURNAL="${AUTHORIZATION_ROOT}/journal"
@@ -182,7 +182,7 @@ COHORT_PATHS=(
   "/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
   "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
   "/Library/LaunchDaemons/com.hasna.recordings.updater.plist"
-  "/Applications/Recordings.app"
+  "/Applications/HasnaRecordings.app"
   "$CLIENT"
   "/Library/Application Support/Hasna/Recordings/Trust"
   "/Library/Application Support/Hasna/Recordings/Bootstrap"
@@ -304,7 +304,7 @@ PAYLOAD="$EXPANDED/Payload"
 PREFLIGHT="$EXPANDED/Scripts/recordings-bootstrap-preflight"
 EXPANDED_PREINSTALL="$EXPANDED/Scripts/preinstall"
 EXPANDED_POSTINSTALL="$EXPANDED/Scripts/postinstall"
-PAYLOAD_CLIENT="$PAYLOAD/Applications/Recordings.app/Contents/Helpers/recordings-update-client"
+PAYLOAD_CLIENT="$PAYLOAD/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
 [ -d "$PAYLOAD" ] && [ ! -L "$PAYLOAD" ] && \
   [ -x "$PREFLIGHT" ] && [ ! -L "$PREFLIGHT" ] && \
   [ -x "$EXPANDED_PREINSTALL" ] && [ ! -L "$EXPANDED_PREINSTALL" ] && \
@@ -512,7 +512,7 @@ cohort_expected_mode() {
     "/Library/PrivilegedHelperTools/com.hasna.recordings.updater"|\
     "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier") printf '555\n' ;;
     "/Library/LaunchDaemons/com.hasna.recordings.updater.plist") printf '444\n' ;;
-    "/Applications/Recordings.app"|"$CLIENT") printf '755\n' ;;
+    "/Applications/HasnaRecordings.app"|"$CLIENT") printf '755\n' ;;
     "/Library/Application Support/Hasna/Recordings/Trust") printf '700-or-755\n' ;;
     "/Library/Application Support/Hasna/Recordings/Bootstrap"|\
     "/Library/Application Support/Hasna/Recordings/Updates"|\

package/packaging/macos/scripts/postinstall

@@ -11,9 +11,9 @@ PACKAGE_BOOTSTRAP_ID="__RECORDINGS_PACKAGE_BOOTSTRAP_ID__"
 AUTHORIZATION_ROOT="/private/var/db/com.hasna.recordings.bootstrap-authorization"
 AUTHORIZATION_JOURNAL="${AUTHORIZATION_ROOT}/journal"
 BROKER="/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
-CLIENT="/Applications/Recordings.app/Contents/Helpers/recordings-update-client"
+CLIENT="/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
 VERIFIER="/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
-APP="/Applications/Recordings.app"
+APP="/Applications/HasnaRecordings.app"
 STATE_ROOT="/Library/Application Support/Hasna/Recordings/Updates"
 TRUST_ROOT="/Library/Application Support/Hasna/Recordings/Trust"
 BOOTSTRAP_ROOT="/Library/Application Support/Hasna/Recordings/Bootstrap"

package/packaging/macos/scripts/preinstall

@@ -248,6 +248,8 @@ COHORT_PATHS=(
   "/Library/PrivilegedHelperTools/com.hasna.recordings.updater:555"
   "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier:555"
   "/Library/LaunchDaemons/com.hasna.recordings.updater.plist:444"
+  "/Applications/HasnaRecordings.app:755"
+  "/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client:755"
   "/Applications/Recordings.app:755"
   "/Applications/Recordings.app/Contents/Helpers/recordings-update-client:755"
   "/Library/Application Support/Hasna/Recordings/Trust:700-or-755"

package/scripts/generate-sdk.ts

@@ -20,23 +20,24 @@ const { code, operations, warnings } = generateSdkFromOpenApi(spec as never, {
   apiKeyHeader: "x-api-key",
 });
 
-// @hasna/contracts 0.8.4 stringifies query arrays. Preserve OpenAPI's
-// form+explode semantics until the package generator ships array support.
-const scalarQuerySerialization =
-  "        if (value !== undefined && value !== null) url.searchParams.set(key, String(value));";
-if (!code.includes(scalarQuerySerialization)) {
-  throw new Error("Generated SDK query serializer changed; update the array compatibility transform");
+// @hasna/contracts 0.13.1 emits array-aware query serialization natively —
+// per-item append, null/undefined items skipped — which is exactly OpenAPI's
+// form+explode semantics the 0.8.4-era transform used to add by hand. Assert
+// the measured 0.13.1 shape so a future serializer change fails generation
+// loudly instead of silently altering request semantics.
+const arrayQuerySerialization =
+  "        if (value === undefined || value === null) continue;\n" +
+  "        if (Array.isArray(value)) {\n" +
+  "          for (const item of value) {\n" +
+  "            if (item !== undefined && item !== null) url.searchParams.append(key, String(item));\n" +
+  "          }\n" +
+  "        } else {\n" +
+  "          url.searchParams.set(key, String(value));\n" +
+  "        }";
+if (!code.includes(arrayQuerySerialization)) {
+  throw new Error("Generated SDK query serializer changed; update the serializer shape assertion");
 }
-const compatibleCode = code.replace(
-  scalarQuerySerialization,
-  [
-    "        if (Array.isArray(value)) {",
-    "          for (const item of value) url.searchParams.append(key, String(item));",
-    "        } else if (value !== undefined && value !== null) {",
-    "          url.searchParams.set(key, String(value));",
-    "        }",
-  ].join("\n"),
-);
+const compatibleCode = code;
 
 const header =
   "// AUTO-GENERATED by scripts/generate-sdk.ts from src/server/openapi.ts — DO NOT EDIT BY HAND.\n" +

package/scripts/install_macos_app.sh

@@ -126,18 +126,18 @@ require_absolute_canonical_owned_home() {
   local canonical
   case "$candidate" in
     /*) ;;
-    *) echo "Recordings.app installation requires HOME to be an absolute canonical path." >&2; exit 1 ;;
+    *) echo "HasnaRecordings.app installation requires HOME to be an absolute canonical path." >&2; exit 1 ;;
   esac
   [ -d "$candidate" ] && [ ! -L "$candidate" ] || {
-    echo "Recordings.app installation requires HOME to be an absolute canonical path to a non-symlink directory." >&2
+    echo "HasnaRecordings.app installation requires HOME to be an absolute canonical path to a non-symlink directory." >&2
     exit 1
   }
   canonical="$(cd "$candidate" 2>/dev/null && builtin pwd -P)" || {
-    echo "Recordings.app installation could not resolve HOME canonically." >&2
+    echo "HasnaRecordings.app installation could not resolve HOME canonically." >&2
     exit 1
   }
   [ "$candidate" = "$canonical" ] || {
-    echo "Recordings.app installation requires HOME to be an absolute canonical path." >&2
+    echo "HasnaRecordings.app installation requires HOME to be an absolute canonical path." >&2
     exit 1
   }
   [ "$("$STAT_EXECUTABLE" -f '%u' "$candidate")" = "$("$ID_EXECUTABLE" -u)" ] || {
@@ -352,7 +352,7 @@ require_absolute_executable "BUN_EXECUTABLE" "$BUN_EXECUTABLE"
 require_absolute_canonical_owned_home
 
 if [ "$("$UNAME_EXECUTABLE" -s)" != "Darwin" ]; then
-  echo "Recordings.app installation is only supported on macOS." >&2
+  echo "HasnaRecordings.app installation is only supported on macOS." >&2
   exit 1
 fi
 
@@ -546,7 +546,7 @@ fi
 "$BUN_EXECUTABLE" "$ARTIFACT_TOOL" native-fs-guard-check
 DATA_DIR="${HOME}/.hasna/recordings"
 DATA_PARENT="$("$DIRNAME_EXECUTABLE" "$DATA_DIR")"
-MANIFEST_BUNDLE_NAME="Recordings.app"
+MANIFEST_BUNDLE_NAME="HasnaRecordings.app"
 APP_DEST="${HOME}/Applications/${MANIFEST_BUNDLE_NAME}"
 APP_PARENT="$("$DIRNAME_EXECUTABLE" "$APP_DEST")"
 ROLLBACK_DIR="${DATA_DIR}/rollbacks"
@@ -794,7 +794,7 @@ acquire_install_lock() {
         if kill -0 "$owner_pid" 2>/dev/null; then
           actual_start="$("$PS_EXECUTABLE" -o lstart= -p "$owner_pid" 2>/dev/null | "$TR_EXECUTABLE" -s ' ' | "$SED_EXECUTABLE" 's/^ //;s/ $//' || true)"
           if [ -z "$owner_start" ] || [ -z "$actual_start" ] || [ "$owner_start" = "$actual_start" ]; then
-            echo "Another Recordings.app installer owns the active install lock." >&2
+            echo "Another HasnaRecordings.app installer owns the active install lock." >&2
             exit 1
           fi
         fi
@@ -807,17 +807,17 @@ acquire_install_lock() {
       now="$("$DATE_EXECUTABLE" +%s)"
       lock_age=$((now - $("$STAT_EXECUTABLE" -f '%m' "$LOCK_DIR")))
       if [ "$lock_age" -lt "$stale_seconds" ]; then
-        echo "Recordings.app install lock is incomplete and too recent to reclaim safely." >&2
+        echo "HasnaRecordings.app install lock is incomplete and too recent to reclaim safely." >&2
         exit 1
       fi
     fi
     stale_claim="${LOCK_DIR}.stale.$$"
     if ! "$MV_EXECUTABLE" "$LOCK_DIR" "$stale_claim" 2>/dev/null; then
-      echo "Recordings.app install lock changed during stale-owner recovery." >&2
+      echo "HasnaRecordings.app install lock changed during stale-owner recovery." >&2
       exit 1
     fi
     "$RM_EXECUTABLE" -rf "$stale_claim"
-    "$MKDIR_EXECUTABLE" -m 700 "$LOCK_DIR" || { echo "Could not acquire Recordings.app install lock." >&2; exit 1; }
+    "$MKDIR_EXECUTABLE" -m 700 "$LOCK_DIR" || { echo "Could not acquire HasnaRecordings.app install lock." >&2; exit 1; }
   fi
   LOCK_OWNED=1
   local start
@@ -1263,13 +1263,13 @@ stop_uncommitted_candidate() {
   done <<< "$remaining"
   "$SLEEP_EXECUTABLE" 0.1
   [ -z "$(pids_for_exact_executable "$expected")" ] || {
-    echo "Uncommitted Recordings.app process could not be stopped before recovery." >&2
+    echo "Uncommitted HasnaRecordings.app process could not be stopped before recovery." >&2
     return 1
   }
 }
 
 if [ -f "$JOURNAL_PATH" ]; then
-  echo "Recovering incomplete Recordings.app installation transaction." >&2
+  echo "Recovering incomplete HasnaRecordings.app installation transaction." >&2
   if ! RECOVER_WAS_RUNNING="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" journal-get --journal "$JOURNAL_PATH" --field was_running)" || \
      ! RECOVER_PHASE="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" journal-get --journal "$JOURNAL_PATH" --field phase)" || \
      ! RECOVER_RUNNING_APP_PATHS_JSON="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" journal-get --journal "$JOURNAL_PATH" --field prior_running_app_paths)"; then
@@ -1376,7 +1376,7 @@ if ! "$BUN_EXECUTABLE" -e '
     if ((actual[i] ?? 0) < (minimum[i] ?? 0)) process.exit(1);
   }
 ' "$CURRENT_MACOS" "$MINIMUM_MACOS"; then
-  echo "Recordings.app requires macOS ${MINIMUM_MACOS} or later; target is ${CURRENT_MACOS}." >&2
+  echo "HasnaRecordings.app requires macOS ${MINIMUM_MACOS} or later; target is ${CURRENT_MACOS}." >&2
   exit 1
 fi
 TARGET_ARCH="$("$UNAME_EXECUTABLE" -m)"
@@ -1386,7 +1386,7 @@ MANIFEST_ARCHITECTURES="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" manifest-get \
   --field architectures)"
 case " ${MANIFEST_ARCHITECTURES} " in
   *" ${TARGET_ARCH} "*) ;;
-  *) echo "Recordings.app artifact does not support target architecture ${TARGET_ARCH}." >&2; exit 1 ;;
+  *) echo "HasnaRecordings.app artifact does not support target architecture ${TARGET_ARCH}." >&2; exit 1 ;;
 esac
 
 verify_secure_parent "$APP_PARENT"
@@ -1412,7 +1412,7 @@ add_unique_app() {
   local existing
   if [ -e "$candidate" ] || [ -L "$candidate" ]; then
     [ -d "$candidate" ] && [ ! -L "$candidate" ] || {
-      echo "Recordings.app path is not a secure directory: ${candidate}" >&2
+      echo "HasnaRecordings.app path is not a secure directory: ${candidate}" >&2
       exit 1
     }
   fi
@@ -1524,7 +1524,7 @@ stop_old_processes() {
     "$SLEEP_EXECUTABLE" 0.1
   done
   if [ "$remaining" -ne 0 ]; then
-    echo "Existing Recordings.app process did not stop before replacement." >&2
+    echo "Existing HasnaRecordings.app process did not stop before replacement." >&2
     exit 1
   fi
 }
@@ -1545,7 +1545,7 @@ quiesce_old_processes() {
     fi
     "$SLEEP_EXECUTABLE" 0.1
   done
-  echo "Existing Recordings.app processes did not remain quiescent before replacement." >&2
+  echo "Existing HasnaRecordings.app processes did not remain quiescent before replacement." >&2
   exit 1
 }
 
@@ -1727,7 +1727,7 @@ for existing_app in ${DISCOVERED_APPS[@]+"${DISCOVERED_APPS[@]}"}; do
       MANAGEABLE_APPS+=("$existing_app")
       ;;
     *)
-      echo "Duplicate Recordings.app at ${existing_app} is outside the transactional user install paths; archive or remove it before installing." >&2
+      echo "Duplicate HasnaRecordings.app at ${existing_app} is outside the transactional user install paths; archive or remove it before installing." >&2
       exit 1
       ;;
   esac
@@ -1954,7 +1954,7 @@ for ((refresh_attempt = 1; refresh_attempt <= 5; refresh_attempt++)); do
   fi
 done
 [ "$STOPPED_REFRESH_STABLE" -eq 1 ] || {
-  echo "Existing Recordings.app writers did not remain quiescent around the stopped-state refresh." >&2
+  echo "Existing HasnaRecordings.app writers did not remain quiescent around the stopped-state refresh." >&2
   exit 1
 }
 
@@ -2004,7 +2004,7 @@ for ((move_index = 0; move_index < MOVED_ORIGINAL_COUNT; move_index++)); do
   existing_app="${MOVED_ORIGINALS[$move_index]}"
   moved_path="${MOVED_PATHS[$move_index]}"
   [ "$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" tree-digest --path "$existing_app")" = "${MOVED_DIGESTS[$move_index]}" ] || {
-    echo "Installed Recordings.app changed after transactional backup planning." >&2
+    echo "Installed HasnaRecordings.app changed after transactional backup planning." >&2
     exit 1
   }
   RECORDINGS_TEST_INSTALLER_PID="$$" \
@@ -2117,7 +2117,7 @@ if [ "$LAUNCH_APP" -eq 1 ] || [ "$was_running" -eq 1 ]; then
 fi
 
 if [ "$ARTIFACT_POLICY" = "local_only" ]; then
-  echo "Installed local-only Recordings.app for ${APPROVED_TARGET}; this artifact is ad-hoc signed and non-notarized."
+  echo "Installed local-only HasnaRecordings.app for ${APPROVED_TARGET}; this artifact is ad-hoc signed and non-notarized."
   if [ "$identity_migration" -eq 1 ]; then
     # Not a maybe: the designated requirement did change, under an explicit approval.
     echo "Code identity changed under --allow-adhoc-identity-migration; the Microphone and Accessibility grants held by the replaced app no longer apply and must be reauthorized."
@@ -2127,5 +2127,5 @@ if [ "$ARTIFACT_POLICY" = "local_only" ]; then
 elif [ "$identity_migration" -eq 1 ]; then
   echo "Installed a new signing identity; macOS will require one-time permission approval for this migration."
 else
-  echo "Installed verified Recordings.app release artifact: ${APP_DEST}"
+  echo "Installed verified HasnaRecordings.app release artifact: ${APP_DEST}"
 fi