@hasna/recordings 0.3.2 → 0.3.8

package/scripts/macos_artifact.ts

@@ -183,8 +183,8 @@ export type BuildProvenance = {
 
 export type MacOSArtifactManifest = BuildProvenance & {
   artifact_type: "recordings-macos-app";
-  /// The top-level bundle directory name inside the artifact (Recordings.app for the
-  /// full app, HasnaRecordings.app for the bar variant per the fleet naming rule).
+  /// The top-level bundle directory name inside the artifact (HasnaRecordings.app for
+  /// both the full app and the bar variant per the fleet naming rule).
   bundle_name: string;
   app_sha256: string;
   binding: {
@@ -843,7 +843,7 @@ function manifestVariant(manifest: MacOSArtifactManifest): ArtifactVariant {
 }
 
 function manifestBundleName(manifest: MacOSArtifactManifest): string {
-  return manifest.bundle_name ?? "Recordings.app";
+  return manifest.bundle_name ?? "HasnaRecordings.app";
 }
 
 function manifestTargetIdentityKind(manifest: MacOSArtifactManifest): OperatorTargetIdentityKind {
@@ -1094,23 +1094,23 @@ function assertCanonicalZipEntries(entries: Array<{ name: string; isDirectory: b
     const components = logicalPath.split("/");
     if (
       !logicalPath ||
-      components[0] !== "Recordings.app" ||
+      components[0] !== "HasnaRecordings.app" ||
       components.some((component) => !component || component === "." || component === "..")
     ) {
-      throw new Error("release ZIP contains an entry outside the canonical Recordings.app tree");
+      throw new Error("release ZIP contains an entry outside the canonical HasnaRecordings.app tree");
     }
     const collisionKey = canonicalZipCollisionKey(logicalPath);
     if (logicalPaths.has(collisionKey)) {
       throw new Error("release ZIP contains duplicate, file/directory, case-fold, or Unicode-colliding entries");
     }
     logicalPaths.set(collisionKey, { name: logicalPath, isDirectory: entry.isDirectory });
-    if (logicalPath === "Recordings.app") {
-      if (!entry.isDirectory) throw new Error("release ZIP Recordings.app root is not a directory entry");
+    if (logicalPath === "HasnaRecordings.app") {
+      if (!entry.isDirectory) throw new Error("release ZIP HasnaRecordings.app root is not a directory entry");
       rootDirectoryCount += 1;
     }
   }
   if (rootDirectoryCount !== 1) {
-      throw new Error("release ZIP must contain exactly one canonical Recordings.app root entry");
+      throw new Error("release ZIP must contain exactly one canonical HasnaRecordings.app root entry");
   }
   for (const { name } of logicalPaths.values()) {
     const components = name.split("/");
@@ -1426,7 +1426,7 @@ export function withPrivatelyExtractedArchiveApp<T>(
   operation: (appPath: string) => T,
   platformArchiveTool = "/usr/bin/ditto",
   expectedArchiveSha256?: string,
-  expectedBundleName = "Recordings.app",
+  expectedBundleName = "HasnaRecordings.app",
 ): T {
   const privateRoot = mkdtempSync(join(tmpdir(), "recordings-artifact-extract-"));
   chmodSync(privateRoot, 0o700);
@@ -1751,8 +1751,8 @@ export function assertManifestShape(manifest: MacOSArtifactManifest): void {
     manifest.container?.type !== "zip" ||
     JSON.stringify(manifest.container.install_locations) !== JSON.stringify(
       artifactPolicy === "release"
-        ? ["/Applications/Recordings.app"]
-        : ["~/Applications/Recordings.app"],
+        ? ["/Applications/HasnaRecordings.app"]
+        : ["~/Applications/HasnaRecordings.app"],
     )
   ) {
     throw new Error("manifest has an unexpected container install policy");
@@ -2516,7 +2516,7 @@ export function assertVersionTransition(
   assertManifestShape(manifest);
   if (compareVersions(manifest.bundle_version, installedVersion) < 0) {
     throw new Error(
-      `refusing to downgrade Recordings.app from ${installedVersion} to ${manifest.bundle_version}`,
+      `refusing to downgrade HasnaRecordings.app from ${installedVersion} to ${manifest.bundle_version}`,
     );
   }
   if (compareVersions(manifest.bundle_version, installedVersion) === 0) {
@@ -2626,8 +2626,6 @@ function verifyActiveApp(
     const environment: NodeJS.ProcessEnv = {
       HOME: contractHome,
       PATH: "/usr/bin:/bin:/usr/sbin:/sbin",
-      HASNA_RECORDINGS_CLIENT_STORE: "sqlite",
-      RECORDINGS_CLIENT_STORE: "sqlite",
       HASNA_RECORDINGS_DB_PATH: join(contractHome, "recordings.db"),
       RECORDINGS_AUDIO_DIR: join(contractHome, "audio"),
     };
@@ -2983,7 +2981,7 @@ function readJournal(path: string): InstallJournal {
   if (resolve(path) !== resolve(join(expectedParent, ".Recordings-install-transaction.json"))) {
     throw new Error("install transaction journal is outside the expected app parent");
   }
-  if (resolve(journal.app_destination) !== resolve(join(expectedParent, "Recordings.app"))) {
+  if (resolve(journal.app_destination) !== resolve(join(expectedParent, "HasnaRecordings.app"))) {
     throw new Error("install transaction journal has an unexpected app destination");
   }
   const expectedDataDir = resolve(join(dirname(expectedParent), ".hasna", "recordings"));
@@ -3001,7 +2999,9 @@ function readJournal(path: string): InstallJournal {
     return (
       resolved === resolve(journal.app_destination) ||
       resolved === resolve(join(journal.data_dir, "Recordings.app")) ||
-      resolved.startsWith(`${resolve(journal.app_parent)}/Recordings.app.`)
+      resolved === resolve(join(journal.data_dir, "HasnaRecordings.app")) ||
+      resolved.startsWith(`${resolve(journal.app_parent)}/Recordings.app.`) ||
+      resolved.startsWith(`${resolve(journal.app_parent)}/HasnaRecordings.app.`)
     );
   };
   if (!journal.originals.every((entry) => allowedOriginal(entry.path))) {
@@ -3939,7 +3939,7 @@ function openRecoveryCapabilities(
   const homePath = resolve(dirname(appParent));
   if (
     basename(appParent) !== "Applications" ||
-    resolve(journal.app_destination) !== resolve(join(appParent, "Recordings.app")) ||
+    resolve(journal.app_destination) !== resolve(join(appParent, "HasnaRecordings.app")) ||
     resolve(journal.data_dir) !== resolve(join(homePath, ".hasna", "recordings")) ||
     dirname(resolve(journal.transaction_dir)) !== appParent
   ) {
@@ -4342,9 +4342,10 @@ export function publishInstallCandidate(
   const destination = resolve(destinationPath);
   const stagingParentPath = dirname(staging);
   const stagingParentLeaf = basename(stagingParentPath);
+  const bundleLeaf = basename(journal.app_destination);
   if (
     destination !== resolve(journal.app_destination) ||
-    basename(staging) !== "Recordings.app" ||
+    basename(staging) !== bundleLeaf ||
     dirname(stagingParentPath) !== resolve(journal.app_parent) ||
     !/^\.Recordings-install\.[A-Za-z0-9]+$/.test(stagingParentLeaf)
   ) {
@@ -4367,12 +4368,12 @@ export function publishInstallCandidate(
       stagingParent,
       "candidate staging parent",
     );
-    retained = guard.openDirAt(stagingParent, "Recordings.app");
-    assertNativeBinding(guard, stagingParent, "Recordings.app", retained, "staged candidate");
+    retained = guard.openDirAt(stagingParent, bundleLeaf);
+    assertNativeBinding(guard, stagingParent, bundleLeaf, retained, "staged candidate");
     if (nativeTreeDigest(guard, retained) !== expectedDigest) {
       throw new Error("staged candidate does not match durable journal evidence");
     }
-    if (guard.statAt(capabilities.applications, "Recordings.app") !== null) {
+    if (guard.statAt(capabilities.applications, bundleLeaf) !== null) {
       throw new Error("candidate destination already exists");
     }
     fsyncRetainedTree(guard, retained, uid, "staged candidate");
@@ -4384,8 +4385,8 @@ export function publishInstallCandidate(
       stagingParent,
       "candidate staging parent",
     );
-    assertNativeBinding(guard, stagingParent, "Recordings.app", retained, "staged candidate");
-    if (guard.statAt(capabilities.applications, "Recordings.app") !== null) {
+    assertNativeBinding(guard, stagingParent, bundleLeaf, retained, "staged candidate");
+    if (guard.statAt(capabilities.applications, bundleLeaf) !== null) {
       throw new Error("candidate destination appeared before publication");
     }
     installTransitionTestPoint(
@@ -4395,10 +4396,10 @@ export function publishInstallCandidate(
     );
     guard.renameHandleNoReplaceAt(
       stagingParent,
-      "Recordings.app",
+      bundleLeaf,
       retained,
       capabilities.applications,
-      "Recordings.app",
+      bundleLeaf,
     );
     installTransitionTestPoint(
       "publish-candidate",
@@ -4409,11 +4410,11 @@ export function publishInstallCandidate(
     assertNativeBinding(
       guard,
       capabilities.applications,
-      "Recordings.app",
+      bundleLeaf,
       retained,
       "published candidate",
     );
-    if (guard.statAt(stagingParent, "Recordings.app") !== null) {
+    if (guard.statAt(stagingParent, bundleLeaf) !== null) {
       throw new Error("candidate staging leaf was recreated during publication");
     }
     guard.fsyncHandle(capabilities.applications);
@@ -4459,7 +4460,8 @@ function cleanupInstallCandidateStaging(
       staging,
       "candidate staging root",
     );
-    const candidateMetadata = guard.statAt(staging, "Recordings.app");
+    const bundleLeaf = basename(journal.app_destination);
+    const candidateMetadata = guard.statAt(staging, bundleLeaf);
     if (candidateMetadata !== null) {
       if (journal.schema_version !== 9 || !journal.candidate_tree_sha256) {
         throw new Error("legacy journal cannot authenticate candidate staging cleanup");
@@ -4467,7 +4469,7 @@ function cleanupInstallCandidateStaging(
       const candidate = openProvenDirectoryAt(
         guard,
         staging,
-        "Recordings.app",
+        bundleLeaf,
         journal.candidate_tree_sha256,
         "staged candidate",
       );
@@ -4475,7 +4477,7 @@ function cleanupInstallCandidateStaging(
         quarantineRemoveRetainedAt(
           guard,
           staging,
-          "Recordings.app",
+          bundleLeaf,
           candidate,
           "staged candidate",
         );
@@ -4567,14 +4569,20 @@ function originalDestinationCapability(
 ): { parent: NativeHandle; leaf: string } {
   const resolved = resolve(path);
   if (resolved === resolve(journal.app_destination)) {
-    return { parent: capabilities.applications, leaf: "Recordings.app" };
+    return { parent: capabilities.applications, leaf: basename(journal.app_destination) };
   }
-  if (resolved === resolve(join(journal.data_dir, "Recordings.app"))) {
-    return { parent: capabilities.data, leaf: "Recordings.app" };
+  if (
+    dirname(resolved) === resolve(journal.data_dir) &&
+    (basename(resolved) === "Recordings.app" || basename(resolved) === "HasnaRecordings.app")
+  ) {
+    // Install site inside the state data directory: the legacy pre-rename
+    // Recordings.app and the renamed HasnaRecordings.app are both recognized and
+    // preserved, never treated as the canonical Applications destination.
+    return { parent: capabilities.data, leaf: basename(resolved) };
   }
   if (
     dirname(resolved) === resolve(journal.app_parent) &&
-    /^Recordings\.app\.[A-Za-z0-9._-]+$/.test(basename(resolved))
+    /^(?:Hasna)?Recordings\.app\.[A-Za-z0-9._-]+$/.test(basename(resolved))
   ) {
     return { parent: capabilities.applications, leaf: basename(resolved) };
   }
@@ -5005,24 +5013,25 @@ function recoverJournal(path: string): void {
       const canonicalOriginal = journal.originals.find(
         (entry) => resolve(entry.path) === resolve(journal.app_destination),
       );
+      const destinationLeaf = basename(journal.app_destination);
       const canonicalDestinationDigest = canonicalOriginal
-        ? nativeTreeDigestAt(guard, applications, "Recordings.app")
+        ? nativeTreeDigestAt(guard, applications, destinationLeaf)
         : null;
       const canonicalAlreadyRestored = canonicalOriginal !== undefined &&
         canonicalDestinationDigest === canonicalOriginal.sha256;
       if (
         ["candidate-moving", "candidate-installed", "activated", "launching"].includes(journal.phase) &&
-        !canonicalAlreadyRestored && guard.statAt(applications, "Recordings.app") !== null
+        !canonicalAlreadyRestored && guard.statAt(applications, destinationLeaf) !== null
       ) {
         if (journal.schema_version !== 9 || !journal.candidate_tree_sha256) {
           throw new Error("legacy recovery journal cannot prove the uncommitted candidate tree");
         }
-        recoveryTestBarrier("before-candidate-remove", "Recordings.app");
+        recoveryTestBarrier("before-candidate-remove", destinationLeaf);
         assertNativeBinding(guard, capabilities.home, "Applications", applications, "Applications");
         const candidate = openProvenDirectoryAt(
           guard,
           applications,
-          "Recordings.app",
+          destinationLeaf,
           journal.candidate_tree_sha256,
           "uncommitted candidate",
         );
@@ -5030,7 +5039,7 @@ function recoverJournal(path: string): void {
           quarantineRemoveRetainedAt(
             guard,
             applications,
-            "Recordings.app",
+            destinationLeaf,
             candidate,
             "uncommitted candidate",
           );

package/scripts/migrate.ts

@@ -34,11 +34,11 @@ async function main() {
     getCloudPg,
     migrateCloudSchema,
     pingCloudConnectivity,
-    resolveCloudDatabaseUrl,
+    resolveDatabaseUrl,
   } = await import("../src/server/cloud.js");
   const { assertCloudSchemaContract } = await import("../src/server/cloud-readiness.js");
   const { runCloudMigration } = await import("../src/server/migrate-command.js");
-  const url = resolveCloudDatabaseUrl();
+  const url = resolveDatabaseUrl();
   if (!url) {
     console.error(
       "migrate: no database URL (HASNA_RECORDINGS_DATABASE_URL / RECORDINGS_DATABASE_URL / DATABASE_URL)",

package/scripts/release-suite-gate.ts

@@ -0,0 +1,181 @@
+#!/usr/bin/env bun
+/**
+ * Release-suite gate (wired into `prepublishOnly`).
+ *
+ * Runs the app's own Linux-CI-partitioned suite — `test:gated`, which covers
+ * every discovered `*.test.ts` (the quarantine file is empty by design) — and
+ * fails on ANY failure except the allowlisted pre-existing classes below.
+ *
+ * Why the allowlist exists: the suite is red at this release's base sha with
+ * exactly two measured pre-existing classes (both reproduced identically at
+ * the pristine base commit 4a9b31e56, classified non-blocking by the release
+ * lineage). The old `prepublishOnly` (`bun run test`, bare) could not pass on
+ * any box for independent reasons: no timeout flag for the long macOS
+ * lifecycle suites, and the ambient hosted-store environment on fleet boxes.
+ *
+ * The allowlist is SELF-INVALIDATING, the same property as
+ * `.github/linux-quarantine.txt`: if an allowlisted failure stops failing
+ * (the owning lane lands its fix, or a quarantined package ages out of the
+ * 7-day window), the gate exits 1 and demands the entry be removed. Any
+ * failure outside the allowlist fails the gate.
+ *
+ * The gate FAILS CLOSED on abnormal termination: a non-zero suite exit is
+ * acceptable only when it is fully explained by allowlisted failures — the
+ * runner completed (its summary line is present), every parsed failure is
+ * allowlisted, at least one allowlisted failure fired, and the runner's
+ * reported failure count equals the parsed count. A crash, signal kill,
+ * timeout, or runner error that produces a non-zero exit without a complete
+ * summary fails the gate (remediation cycle 2 of PR hasna/apps#826).
+ */
+import { spawnSync } from "node:child_process";
+import { mkdtempSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+const SEP = "::";
+
+const GATED_KEYS: Array<{ file: string; test: string; owner: string; reason: string }> = [
+  {
+    file: "src/__tests__/service-contract-manifest.test.ts",
+    test: "the repository satisfies the tracked contract kit's conformance checks",
+    owner: "contracts-surface lanes (hasna/apps PRs 743/749/754 lineage)",
+    reason:
+      "credential_seam_compliance flags the vendored client seam (resolveStorageClient in src/http/client.ts) and the RECORDINGS_API_KEY env read (src/lib/config.ts) - an in-flight migration owned by the contracts-surface lanes; classified pre-existing at the release base. Remove this entry when the lane lands.",
+  },
+  {
+    file: "src/__tests__/native-app-companion-contract.test.ts",
+    test: "(unnamed)",
+    owner: "release supply-chain policy",
+    reason:
+      "build_companion_cli.sh enforces --minimum-release-age=604800, so the companion build refuses @hasna/contracts@0.13.3 (published 2026-08-21T13:13Z) inside its 7-day quarantine by design until 2026-08-28. The npm publish path does not build the companion. Remove this entry when the package ages out.",
+  },
+];
+
+function run(argv: string[], env: Record<string, string>): { status: number; stdout: string; stderr: string } {
+  const res = spawnSync(process.execPath, argv, { encoding: "utf8", env: { ...process.env, ...env } });
+  return { status: res.status ?? -1, stdout: res.stdout ?? "", stderr: res.stderr ?? "" };
+}
+
+// 1. Validate the partition (quarantine file must be consistent).
+const check = run(["scripts/ci-linux-suite.ts", "--check"], {});
+if (check.status !== 0) {
+  console.error("release-suite-gate: partition check failed:\n" + (check.stderr || check.stdout));
+  process.exit(1);
+}
+
+// 2. Collect the gated file list.
+const gated = run(["scripts/ci-linux-suite.ts", "--gated"], {});
+if (gated.status !== 0) {
+  console.error("release-suite-gate: could not enumerate gated files:\n" + (gated.stderr || gated.stdout));
+  process.exit(1);
+}
+const gatedFiles = gated.stdout.split("\n").filter(Boolean);
+if (gatedFiles.length === 0) {
+  console.error("release-suite-gate: zero gated files - refusing to pass on an empty suite.");
+  process.exit(1);
+}
+
+// 3. Run the gated suite exactly like `test:gated`.
+const logDir = mkdtempSync(join(tmpdir(), "recordings-release-gate-"));
+const logPath = join(logDir, "suite.log");
+const suite = spawnSync(
+  process.execPath,
+  ["test", "--timeout", "120000", ...gatedFiles],
+  {
+    encoding: "utf8",
+    env: { ...process.env, RECORDINGS_TEST_TIMEOUT_MS: "120000" },
+    maxBuffer: 64 * 1024 * 1024,
+  },
+);
+const output = (suite.stdout ?? "") + (suite.stderr ?? "");
+try {
+  writeFileSync(logPath, output);
+} catch {
+  /* log capture is best-effort */
+}
+const suiteStatus = suite.status ?? -1;
+
+// 4. Parse failing tests as (file, description) pairs, in output order.
+const failPairs: Array<{ file: string; test: string }> = [];
+let currentFile = "";
+for (const line of output.split("\n")) {
+  const fileMatch = /^(?:\.\/)?(src\/[^\s:]+\.test\.ts):$/.exec(line);
+  if (fileMatch) {
+    currentFile = fileMatch[1];
+    continue;
+  }
+  const failMatch = /^\(fail\) (.+) \[\d+.*\]$/.exec(line);
+  if (failMatch) {
+    failPairs.push({ file: currentFile, test: failMatch[1].trim() });
+  }
+}
+
+// 5. Classify.
+const failuresByKey = new Map<string, number>();
+for (const key of GATED_KEYS) {
+  failuresByKey.set(key.file + SEP + key.test, 0);
+}
+const unexpected: Array<{ file: string; test: string }> = [];
+for (const pair of failPairs) {
+  const key = pair.file + SEP + pair.test;
+  if (failuresByKey.has(key)) {
+    failuresByKey.set(key, (failuresByKey.get(key) ?? 0) + 1);
+  } else {
+    unexpected.push(pair);
+  }
+}
+
+if (unexpected.length > 0) {
+  console.error(
+    "release-suite-gate: FAIL - unexpected test failures:\n" +
+      unexpected.map((u) => "  " + u.file + " :: " + u.test).join("\n"),
+  );
+  console.error("Full suite log: " + logPath);
+  process.exit(1);
+}
+
+// 6. Fail closed on abnormal termination. A non-zero suite exit is only
+// acceptable when it is fully explained by the allowlisted failures: the
+// runner completed (summary line present), every parsed failure is
+// allowlisted, at least one allowlisted failure fired, and the runner's
+// reported failure count equals the parsed count (no unparsed failures).
+// A crash, signal kill, timeout, or runner error produces a non-zero exit
+// without a complete summary and must fail the gate.
+if (suiteStatus !== 0) {
+  const summaryMatch = /Ran (\d+) tests across (\d+) files/.exec(output);
+  // The tally is "N pass[,/ ] M fail" in the runner's closing summary. The
+  // LAST match is taken (bun prints the tally once, but a naive first match
+  // can hit "0.13.3 failed to resolve" -> "3 fail" inside a version string).
+  const tallyMatches = [...output.matchAll(/(\d+) pass[\s,/]+(\d+) fail/g)];
+  const failCountMatch = tallyMatches.length > 0 ? tallyMatches[tallyMatches.length - 1] : null;
+  const reportedFails = failCountMatch ? Number(failCountMatch[2]) : null;
+  const anyAllowlistedFired = failPairs.length > 0;
+  const complete = summaryMatch !== null && reportedFails !== null && reportedFails === failPairs.length;
+  if (!anyAllowlistedFired || !complete) {
+    console.error(
+      "release-suite-gate: FAIL - suite exited " + suiteStatus +
+        " with " + failPairs.length + " parsed failure(s) but the run is incomplete or unexplained:" +
+        "\n  summary line present: " + (summaryMatch !== null) +
+        "\n  reported failure count: " + String(reportedFails) +
+        "\n  parsed failure count: " + failPairs.length,
+    );
+    console.error("Full suite log: " + logPath);
+    process.exit(1);
+  }
+}
+
+// 7. Self-invalidation: an allowlisted failure that no longer fails must be removed.
+const stale = GATED_KEYS.filter((key) => (failuresByKey.get(key.file + SEP + key.test) ?? 0) === 0);
+if (stale.length > 0) {
+  console.error(
+    "release-suite-gate: FAIL - allowlisted failure no longer fails; remove the entry from scripts/release-suite-gate.ts:\n" +
+      stale.map((s) => "  " + s.file + " :: " + s.test + " - " + s.owner).join("\n"),
+  );
+  process.exit(1);
+}
+
+console.log(
+  "release-suite-gate: PASS - " + failPairs.length + " classified pre-existing failure(s) allowlisted:" +
+    failPairs.map((p) => "\n  " + p.file + " :: " + p.test).join(""),
+);
+process.exit(0);

package/scripts/set-version.ts

@@ -16,17 +16,17 @@ export type VersionSite = {
   pattern: RegExp;
 };
 
+// src/version.ts is deliberately NOT a site: it derives VERSION from
+// package.json at import time (see src/version.ts), so it holds no literal
+// this writer could keep in sync, and a monorepo changesets bump can no
+// longer leave it stale. The remaining sites are the native bundle surfaces,
+// which cannot derive and must be written here.
 export const versionSites: VersionSite[] = [
   {
     file: "package.json",
     label: "package.json version",
     pattern: /("version"\s*:\s*")([^"]+)(")/,
   },
-  {
-    file: "src/version.ts",
-    label: "src/version.ts VERSION",
-    pattern: /(export const VERSION = ")([^"]+)(")/,
-  },
   {
     file: "src/native/Recordings/RecordingsLib/Info.plist",
     label: "Info.plist CFBundleShortVersionString",

package/scripts/smoke_macos_app.sh

@@ -9,7 +9,7 @@ if [ "$#" -ge 3 ]; then
       SMOKE_VARIANT="${4:-full}"
       ;;
     *)
-      echo "Usage: $0 <Recordings.app> <explicit absolute Bun executable path> [--variant full|bar]" >&2
+      echo "Usage: $0 <HasnaRecordings.app> <explicit absolute Bun executable path> [--variant full|bar]" >&2
       exit 2
       ;;
   esac
@@ -51,7 +51,7 @@ HOST_PLATFORM="$("$HOST_UNAME_EXECUTABLE" -s)"
 readonly HOST_PLATFORM
 
 if [ "$HOST_PLATFORM" != "Darwin" ] && [ "${RECORDINGS_TEST_SMOKE_ALLOW_NON_DARWIN:-0}" != "1" ]; then
-  echo "Recordings.app runtime smoke is only supported on macOS." >&2
+  echo "HasnaRecordings.app runtime smoke is only supported on macOS." >&2
   exit 1
 fi
 
@@ -123,12 +123,12 @@ HOME_DIRECTORY="${HOME:-}"
 case "$HOME_DIRECTORY" in
   /*) ;;
   *)
-    echo "Recordings.app runtime smoke requires an absolute HOME path." >&2
+    echo "HasnaRecordings.app runtime smoke requires an absolute HOME path." >&2
     exit 1
     ;;
 esac
 if [ ! -d "$HOME_DIRECTORY" ]; then
-  echo "Recordings.app runtime smoke HOME is not a directory: $HOME_DIRECTORY" >&2
+  echo "HasnaRecordings.app runtime smoke HOME is not a directory: $HOME_DIRECTORY" >&2
   exit 1
 fi
 
@@ -136,7 +136,7 @@ APP_PARENT="$(cd -P "$("$DIRNAME_EXECUTABLE" "$1")" && "$PWD_EXECUTABLE" -P)"
 APP_PATH="$APP_PARENT/$("$BASENAME_EXECUTABLE" "$1")"
 EXECUTABLE="$APP_PATH/Contents/MacOS/Recordings"
 if [ ! -x "$EXECUTABLE" ]; then
-  echo "Recordings.app runtime smoke executable is missing: $EXECUTABLE" >&2
+  echo "HasnaRecordings.app runtime smoke executable is missing: $EXECUTABLE" >&2
   exit 1
 fi
 
@@ -317,7 +317,7 @@ cleanup() {
     fi
     if [ -n "$SMOKE_APP_PID" ] && [ -n "$SMOKE_APP_PID_START_IDENTITY" ]; then
       terminate_verified_process \
-        "Recordings.app" \
+        "HasnaRecordings.app" \
         "$SMOKE_APP_PID" \
         "$EXECUTABLE" \
         "$SMOKE_APP_PID_START_IDENTITY" || true
@@ -377,7 +377,7 @@ run_smoke() {
   if ! SMOKE_APP_IDENTITIES_BEFORE_LAUNCH="$(
     process_records_for_exact_executable "$EXECUTABLE"
   )"; then
-    echo "Recordings.app runtime smoke ${mode} could not inventory exact app processes before launch." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} could not inventory exact app processes before launch." >&2
     return 1
   fi
 
@@ -399,24 +399,24 @@ run_smoke() {
       result_pid="$("$ENV_EXECUTABLE" -i HOME="$HOME_DIRECTORY" PATH="$SANITIZED_PATH" TMPDIR="$WORK_DIR" \
         "$BUN_EXECUTABLE" -e 'const value = await Bun.file(process.argv[1]).json(); console.log(value.processIdentifier)' "$output")"
       if ! [[ "$result_pid" =~ ^[1-9][0-9]*$ ]] || ! kill -0 "$result_pid" 2>/dev/null; then
-        echo "Recordings.app runtime smoke ${mode} reported a process that is not running." >&2
+        echo "HasnaRecordings.app runtime smoke ${mode} reported a process that is not running." >&2
         return 1
       fi
       if ! result_pid_start_identity="$(
         capture_process_start_identity "$result_pid" "$EXECUTABLE"
       )"; then
-        echo "Recordings.app runtime smoke ${mode} reported a process outside the exact app path." >&2
+        echo "HasnaRecordings.app runtime smoke ${mode} reported a process outside the exact app path." >&2
         return 1
       fi
       if process_identity_existed_before_launch "$result_pid" "$result_pid_start_identity"; then
-        echo "Recordings.app runtime smoke ${mode} reported an app process that predated this launch." >&2
+        echo "HasnaRecordings.app runtime smoke ${mode} reported an app process that predated this launch." >&2
         return 1
       fi
       if [ -n "$SMOKE_APP_PID" ] && {
         [ "$result_pid" != "$SMOKE_APP_PID" ] ||
           [ "$result_pid_start_identity" != "$SMOKE_APP_PID_START_IDENTITY" ];
       }; then
-        echo "Recordings.app runtime smoke ${mode} evidence did not match the exact launched app process." >&2
+        echo "HasnaRecordings.app runtime smoke ${mode} evidence did not match the exact launched app process." >&2
         return 1
       fi
       SMOKE_APP_PID="$result_pid"
@@ -429,19 +429,19 @@ run_smoke() {
       break
     fi
     if ! kill -0 "$SMOKE_PID" 2>/dev/null; then
-      echo "Recordings.app runtime smoke ${mode} exited without evidence." >&2
+      echo "HasnaRecordings.app runtime smoke ${mode} exited without evidence." >&2
       "$SED_EXECUTABLE" -n '1,120p' "$log" >&2
       return 1
     fi
     "$SLEEP_EXECUTABLE" 0.1
   done
   if [ ! -f "$output" ]; then
-    echo "Recordings.app runtime smoke ${mode} timed out." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} timed out." >&2
     "$SED_EXECUTABLE" -n '1,120p' "$log" >&2
     return 1
   fi
   if [ -z "$SMOKE_APP_PID" ]; then
-    echo "Recordings.app runtime smoke ${mode} did not bind evidence to the exact app process." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} did not bind evidence to the exact app process." >&2
     return 1
   fi
 
@@ -546,7 +546,7 @@ run_smoke() {
   ' "$output"
 
   if [ -e "$completion" ]; then
-    echo "Recordings.app runtime smoke ${mode} produced completion before the challenge." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} produced completion before the challenge." >&2
     return 1
   fi
   challenge="$("$ENV_EXECUTABLE" -i HOME="$HOME_DIRECTORY" PATH="$SANITIZED_PATH" TMPDIR="$WORK_DIR" \
@@ -554,7 +554,7 @@ run_smoke() {
   if ! rechecked_start_identity="$(
     capture_process_start_identity "$result_pid" "$EXECUTABLE"
   )" || [ "$rechecked_start_identity" != "$result_pid_start_identity" ]; then
-    echo "Recordings.app runtime smoke ${mode} process identity changed before completion challenge." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} process identity changed before completion challenge." >&2
     return 1
   fi
   write_atomic_text_file "$acknowledgement" "$challenge"
@@ -564,7 +564,7 @@ run_smoke() {
     "$SLEEP_EXECUTABLE" 0.1
   done
   if kill -0 "$SMOKE_PID" 2>/dev/null; then
-    echo "Recordings.app runtime smoke ${mode} completion handshake timed out." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} completion handshake timed out." >&2
     return 1
   fi
   if wait "$SMOKE_PID" 2>/dev/null; then
@@ -577,7 +577,7 @@ run_smoke() {
   SMOKE_APP_PID=""
   SMOKE_APP_PID_START_IDENTITY=""
   if [ "$wrapper_status" -ne 0 ]; then
-    echo "Recordings.app runtime smoke ${mode} open -W wrapper exited unsuccessfully (${wrapper_status})." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} open -W wrapper exited unsuccessfully (${wrapper_status})." >&2
     "$SED_EXECUTABLE" -n '1,120p' "$log" >&2
     return 1
   fi
@@ -602,7 +602,7 @@ run_smoke() {
         process.exit(1);
       }
     ' "$completion"; then
-    echo "Recordings.app runtime smoke ${mode} did not provide a valid completion response." >&2
+    echo "HasnaRecordings.app runtime smoke ${mode} did not provide a valid completion response." >&2
     return 1
   fi
 
@@ -613,7 +613,7 @@ run_smoke normal
 run_smoke permission-helper
 run_smoke resolver
 if [ "$SMOKE_VARIANT" = "bar" ]; then
-  echo "Recordings.app runtime smoke passed (bar variant): menu bar, windowless launch, helper isolation, and packaged resolver."
+  echo "HasnaRecordings.app runtime smoke passed (bar variant): menu bar, windowless launch, helper isolation, and packaged resolver."
 else
-  echo "Recordings.app runtime smoke passed: menu bar, retained window, helper isolation, and packaged resolver."
+  echo "HasnaRecordings.app runtime smoke passed: menu bar, retained window, helper isolation, and packaged resolver."
 fi