@hasna/recordings 0.3.2 → 0.3.9

package/dist/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,SAAS,EACT,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAMzF,eAAO,MAAM,GAAG,eAAe,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAG7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAClD,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAGjF,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAGnC,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAwPD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAID;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,KAAK,CAMzG;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,SAAS,EACT,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACR,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAUzF,eAAO,MAAM,GAAG,eAAe,CAAC;AAEhC,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACpD,cAAc,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/D,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAG7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAClD,UAAU,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/B,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACxD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAGjF,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACtD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAGnC,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AA4QD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CA0BjB;AAID;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,KAAK,CAMzG;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,IAAI,IAAI,CAEnC"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.3.2";
+export declare const VERSION: string;
 //# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,OAAO,QAAsB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/recordings",
-  "version": "0.3.2",
+  "version": "0.3.9",
   "type": "module",
   "description": "Speech-to-text recording tool with MCP and CLI — records, transcribes, and optionally enhances text using AI",
   "repository": {
@@ -63,7 +63,8 @@
     "version:check": "bun run scripts/set-version.ts --check",
     "prepack": "bun run prepack:platform-gate && bun run version:check && bun run build && bun run verify:release && bun run scan:artifact",
     "prepack:platform-gate": "bash -c 'if [ \"$(uname -s)\" = Darwin ]; then bun run build:native-fs-guard; else echo \"WARN: native fs-guard build skipped on $(uname -s) — dry-run/CI pack; publish recordings from macOS\"; fi'",
-    "prepublishOnly": "bun run typecheck && bun run test",
+    "prepublishOnly": "bun run typecheck && bun run release-suite-gate",
+    "release-suite-gate": "bun run scripts/release-suite-gate.ts",
     "typecheck:shortcut-contract": "tsc --noEmit -p tsconfig.test.json"
   },
   "files": [
@@ -83,7 +84,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@hasna/contracts": "0.8.4",
+    "@hasna/contracts": "0.13.4",
     "@hasna/events": "0.1.11",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "chalk": "^5.4.1",

package/packaging/macos/build_release_pkg.sh

@@ -222,8 +222,14 @@ done
 case "$VERSION" in
   ''|*[!0-9A-Za-z._+-]*) echo "Package version is missing or invalid." >&2; exit 2 ;;
 esac
-[ "$ARTIFACT_BASENAME" = "Recordings-${VERSION}-macos-initial-bootstrap" ] || {
-  echo "Initial-bootstrap package artifact basename is missing or mode-incompatible." >&2
+# The artifact basename is derived from the canonical bundle identity, never hardcoded:
+# build.sh emits ${APP_BASENAME}-${VERSION}-macos-${RELEASE_SUBTYPE} with APP_BASENAME
+# taken from the bundle name (currently HasnaRecordings.app). The legacy
+# Recordings-* form was dropped with the bundle rename and must not be re-required.
+[ -n "$APP" ] && [ -d "$APP" ] || { echo "Package app bundle path is missing or invalid." >&2; exit 2; }
+expected_basename="$(/usr/bin/basename "$APP" .app)-${VERSION}-macos-initial-bootstrap"
+[ "$ARTIFACT_BASENAME" = "$expected_basename" ] || {
+  echo "Initial-bootstrap package artifact basename is missing or mode-incompatible (expected ${expected_basename})." >&2
   exit 2
 }
 [[ "$SOURCE_SHA" =~ ^[0-9a-f]{40}$ ]] || { echo "Package source SHA must be an exact commit." >&2; exit 2; }
@@ -527,7 +533,7 @@ PACKAGE_BOOTSTRAP_ID="$(/usr/bin/uuidgen | /usr/bin/tr '[:upper:]' '[:lower:]')"
   "$SCRIPTS"
 require_no_extended_acl "$PACKAGE_STAGE_DIR"
 
-/usr/bin/ditto "$APP" "$ROOT/Applications/Recordings.app"
+/usr/bin/ditto "$APP" "$ROOT/Applications/HasnaRecordings.app"
 /bin/cp "$BROKER" "$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
 /bin/cp "$VERIFIER" "$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
 /bin/cp "$PUBLIC_KEY" "$ROOT/Library/Application Support/Hasna/Recordings/Trust/envelope-keys/${KEY_EPOCH}.raw"
@@ -576,7 +582,7 @@ require_tree_without_extended_acl "$SCRIPTS"
   "$ROOT/Library/LaunchDaemons/com.hasna.recordings.updater.plist"
 /usr/bin/plutil -lint "$ROOT/Library/LaunchDaemons/com.hasna.recordings.updater.plist" >/dev/null
 
-STAGED_APP="$ROOT/Applications/Recordings.app"
+STAGED_APP="$ROOT/Applications/HasnaRecordings.app"
 STAGED_BROKER="$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
 STAGED_CLIENT="$STAGED_APP/Contents/Helpers/recordings-update-client"
 STAGED_VERIFIER="$ROOT/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"

package/packaging/macos/managed_bootstrap.sh

@@ -173,7 +173,7 @@ validate_target_ancestry() {
 
 validate_target_ancestry
 
-CLIENT="/Applications/Recordings.app/Contents/Helpers/recordings-update-client"
+CLIENT="/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
 STATE="/var/db/com.hasna.recordings.updater/release-state.json"
 AUTHORIZATION_ROOT="/private/var/db/com.hasna.recordings.bootstrap-authorization"
 AUTHORIZATION_JOURNAL="${AUTHORIZATION_ROOT}/journal"
@@ -182,7 +182,7 @@ COHORT_PATHS=(
   "/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
   "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
   "/Library/LaunchDaemons/com.hasna.recordings.updater.plist"
-  "/Applications/Recordings.app"
+  "/Applications/HasnaRecordings.app"
   "$CLIENT"
   "/Library/Application Support/Hasna/Recordings/Trust"
   "/Library/Application Support/Hasna/Recordings/Bootstrap"
@@ -304,7 +304,7 @@ PAYLOAD="$EXPANDED/Payload"
 PREFLIGHT="$EXPANDED/Scripts/recordings-bootstrap-preflight"
 EXPANDED_PREINSTALL="$EXPANDED/Scripts/preinstall"
 EXPANDED_POSTINSTALL="$EXPANDED/Scripts/postinstall"
-PAYLOAD_CLIENT="$PAYLOAD/Applications/Recordings.app/Contents/Helpers/recordings-update-client"
+PAYLOAD_CLIENT="$PAYLOAD/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
 [ -d "$PAYLOAD" ] && [ ! -L "$PAYLOAD" ] && \
   [ -x "$PREFLIGHT" ] && [ ! -L "$PREFLIGHT" ] && \
   [ -x "$EXPANDED_PREINSTALL" ] && [ ! -L "$EXPANDED_PREINSTALL" ] && \
@@ -512,7 +512,7 @@ cohort_expected_mode() {
     "/Library/PrivilegedHelperTools/com.hasna.recordings.updater"|\
     "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier") printf '555\n' ;;
     "/Library/LaunchDaemons/com.hasna.recordings.updater.plist") printf '444\n' ;;
-    "/Applications/Recordings.app"|"$CLIENT") printf '755\n' ;;
+    "/Applications/HasnaRecordings.app"|"$CLIENT") printf '755\n' ;;
     "/Library/Application Support/Hasna/Recordings/Trust") printf '700-or-755\n' ;;
     "/Library/Application Support/Hasna/Recordings/Bootstrap"|\
     "/Library/Application Support/Hasna/Recordings/Updates"|\

package/packaging/macos/scripts/postinstall

@@ -11,9 +11,9 @@ PACKAGE_BOOTSTRAP_ID="__RECORDINGS_PACKAGE_BOOTSTRAP_ID__"
 AUTHORIZATION_ROOT="/private/var/db/com.hasna.recordings.bootstrap-authorization"
 AUTHORIZATION_JOURNAL="${AUTHORIZATION_ROOT}/journal"
 BROKER="/Library/PrivilegedHelperTools/com.hasna.recordings.updater"
-CLIENT="/Applications/Recordings.app/Contents/Helpers/recordings-update-client"
+CLIENT="/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client"
 VERIFIER="/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier"
-APP="/Applications/Recordings.app"
+APP="/Applications/HasnaRecordings.app"
 STATE_ROOT="/Library/Application Support/Hasna/Recordings/Updates"
 TRUST_ROOT="/Library/Application Support/Hasna/Recordings/Trust"
 BOOTSTRAP_ROOT="/Library/Application Support/Hasna/Recordings/Bootstrap"

package/packaging/macos/scripts/preinstall

@@ -248,6 +248,8 @@ COHORT_PATHS=(
   "/Library/PrivilegedHelperTools/com.hasna.recordings.updater:555"
   "/Library/PrivilegedHelperTools/com.hasna.recordings.artifact-verifier:555"
   "/Library/LaunchDaemons/com.hasna.recordings.updater.plist:444"
+  "/Applications/HasnaRecordings.app:755"
+  "/Applications/HasnaRecordings.app/Contents/Helpers/recordings-update-client:755"
   "/Applications/Recordings.app:755"
   "/Applications/Recordings.app/Contents/Helpers/recordings-update-client:755"
   "/Library/Application Support/Hasna/Recordings/Trust:700-or-755"

package/scripts/generate-sdk.ts

@@ -20,23 +20,24 @@ const { code, operations, warnings } = generateSdkFromOpenApi(spec as never, {
   apiKeyHeader: "x-api-key",
 });
 
-// @hasna/contracts 0.8.4 stringifies query arrays. Preserve OpenAPI's
-// form+explode semantics until the package generator ships array support.
-const scalarQuerySerialization =
-  "        if (value !== undefined && value !== null) url.searchParams.set(key, String(value));";
-if (!code.includes(scalarQuerySerialization)) {
-  throw new Error("Generated SDK query serializer changed; update the array compatibility transform");
+// @hasna/contracts 0.13.1 emits array-aware query serialization natively —
+// per-item append, null/undefined items skipped — which is exactly OpenAPI's
+// form+explode semantics the 0.8.4-era transform used to add by hand. Assert
+// the measured 0.13.1 shape so a future serializer change fails generation
+// loudly instead of silently altering request semantics.
+const arrayQuerySerialization =
+  "        if (value === undefined || value === null) continue;\n" +
+  "        if (Array.isArray(value)) {\n" +
+  "          for (const item of value) {\n" +
+  "            if (item !== undefined && item !== null) url.searchParams.append(key, String(item));\n" +
+  "          }\n" +
+  "        } else {\n" +
+  "          url.searchParams.set(key, String(value));\n" +
+  "        }";
+if (!code.includes(arrayQuerySerialization)) {
+  throw new Error("Generated SDK query serializer changed; update the serializer shape assertion");
 }
-const compatibleCode = code.replace(
-  scalarQuerySerialization,
-  [
-    "        if (Array.isArray(value)) {",
-    "          for (const item of value) url.searchParams.append(key, String(item));",
-    "        } else if (value !== undefined && value !== null) {",
-    "          url.searchParams.set(key, String(value));",
-    "        }",
-  ].join("\n"),
-);
+const compatibleCode = code;
 
 const header =
   "// AUTO-GENERATED by scripts/generate-sdk.ts from src/server/openapi.ts — DO NOT EDIT BY HAND.\n" +

package/scripts/install_macos_app.sh

@@ -126,18 +126,18 @@ require_absolute_canonical_owned_home() {
   local canonical
   case "$candidate" in
     /*) ;;
-    *) echo "Recordings.app installation requires HOME to be an absolute canonical path." >&2; exit 1 ;;
+    *) echo "HasnaRecordings.app installation requires HOME to be an absolute canonical path." >&2; exit 1 ;;
   esac
   [ -d "$candidate" ] && [ ! -L "$candidate" ] || {
-    echo "Recordings.app installation requires HOME to be an absolute canonical path to a non-symlink directory." >&2
+    echo "HasnaRecordings.app installation requires HOME to be an absolute canonical path to a non-symlink directory." >&2
     exit 1
   }
   canonical="$(cd "$candidate" 2>/dev/null && builtin pwd -P)" || {
-    echo "Recordings.app installation could not resolve HOME canonically." >&2
+    echo "HasnaRecordings.app installation could not resolve HOME canonically." >&2
     exit 1
   }
   [ "$candidate" = "$canonical" ] || {
-    echo "Recordings.app installation requires HOME to be an absolute canonical path." >&2
+    echo "HasnaRecordings.app installation requires HOME to be an absolute canonical path." >&2
     exit 1
   }
   [ "$("$STAT_EXECUTABLE" -f '%u' "$candidate")" = "$("$ID_EXECUTABLE" -u)" ] || {
@@ -352,7 +352,7 @@ require_absolute_executable "BUN_EXECUTABLE" "$BUN_EXECUTABLE"
 require_absolute_canonical_owned_home
 
 if [ "$("$UNAME_EXECUTABLE" -s)" != "Darwin" ]; then
-  echo "Recordings.app installation is only supported on macOS." >&2
+  echo "HasnaRecordings.app installation is only supported on macOS." >&2
   exit 1
 fi
 
@@ -546,7 +546,7 @@ fi
 "$BUN_EXECUTABLE" "$ARTIFACT_TOOL" native-fs-guard-check
 DATA_DIR="${HOME}/.hasna/recordings"
 DATA_PARENT="$("$DIRNAME_EXECUTABLE" "$DATA_DIR")"
-MANIFEST_BUNDLE_NAME="Recordings.app"
+MANIFEST_BUNDLE_NAME="HasnaRecordings.app"
 APP_DEST="${HOME}/Applications/${MANIFEST_BUNDLE_NAME}"
 APP_PARENT="$("$DIRNAME_EXECUTABLE" "$APP_DEST")"
 ROLLBACK_DIR="${DATA_DIR}/rollbacks"
@@ -794,7 +794,7 @@ acquire_install_lock() {
         if kill -0 "$owner_pid" 2>/dev/null; then
           actual_start="$("$PS_EXECUTABLE" -o lstart= -p "$owner_pid" 2>/dev/null | "$TR_EXECUTABLE" -s ' ' | "$SED_EXECUTABLE" 's/^ //;s/ $//' || true)"
           if [ -z "$owner_start" ] || [ -z "$actual_start" ] || [ "$owner_start" = "$actual_start" ]; then
-            echo "Another Recordings.app installer owns the active install lock." >&2
+            echo "Another HasnaRecordings.app installer owns the active install lock." >&2
             exit 1
           fi
         fi
@@ -807,17 +807,17 @@ acquire_install_lock() {
       now="$("$DATE_EXECUTABLE" +%s)"
       lock_age=$((now - $("$STAT_EXECUTABLE" -f '%m' "$LOCK_DIR")))
       if [ "$lock_age" -lt "$stale_seconds" ]; then
-        echo "Recordings.app install lock is incomplete and too recent to reclaim safely." >&2
+        echo "HasnaRecordings.app install lock is incomplete and too recent to reclaim safely." >&2
         exit 1
       fi
     fi
     stale_claim="${LOCK_DIR}.stale.$$"
     if ! "$MV_EXECUTABLE" "$LOCK_DIR" "$stale_claim" 2>/dev/null; then
-      echo "Recordings.app install lock changed during stale-owner recovery." >&2
+      echo "HasnaRecordings.app install lock changed during stale-owner recovery." >&2
       exit 1
     fi
     "$RM_EXECUTABLE" -rf "$stale_claim"
-    "$MKDIR_EXECUTABLE" -m 700 "$LOCK_DIR" || { echo "Could not acquire Recordings.app install lock." >&2; exit 1; }
+    "$MKDIR_EXECUTABLE" -m 700 "$LOCK_DIR" || { echo "Could not acquire HasnaRecordings.app install lock." >&2; exit 1; }
   fi
   LOCK_OWNED=1
   local start
@@ -1263,13 +1263,13 @@ stop_uncommitted_candidate() {
   done <<< "$remaining"
   "$SLEEP_EXECUTABLE" 0.1
   [ -z "$(pids_for_exact_executable "$expected")" ] || {
-    echo "Uncommitted Recordings.app process could not be stopped before recovery." >&2
+    echo "Uncommitted HasnaRecordings.app process could not be stopped before recovery." >&2
     return 1
   }
 }
 
 if [ -f "$JOURNAL_PATH" ]; then
-  echo "Recovering incomplete Recordings.app installation transaction." >&2
+  echo "Recovering incomplete HasnaRecordings.app installation transaction." >&2
   if ! RECOVER_WAS_RUNNING="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" journal-get --journal "$JOURNAL_PATH" --field was_running)" || \
      ! RECOVER_PHASE="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" journal-get --journal "$JOURNAL_PATH" --field phase)" || \
      ! RECOVER_RUNNING_APP_PATHS_JSON="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" journal-get --journal "$JOURNAL_PATH" --field prior_running_app_paths)"; then
@@ -1376,7 +1376,7 @@ if ! "$BUN_EXECUTABLE" -e '
     if ((actual[i] ?? 0) < (minimum[i] ?? 0)) process.exit(1);
   }
 ' "$CURRENT_MACOS" "$MINIMUM_MACOS"; then
-  echo "Recordings.app requires macOS ${MINIMUM_MACOS} or later; target is ${CURRENT_MACOS}." >&2
+  echo "HasnaRecordings.app requires macOS ${MINIMUM_MACOS} or later; target is ${CURRENT_MACOS}." >&2
   exit 1
 fi
 TARGET_ARCH="$("$UNAME_EXECUTABLE" -m)"
@@ -1386,7 +1386,7 @@ MANIFEST_ARCHITECTURES="$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" manifest-get \
   --field architectures)"
 case " ${MANIFEST_ARCHITECTURES} " in
   *" ${TARGET_ARCH} "*) ;;
-  *) echo "Recordings.app artifact does not support target architecture ${TARGET_ARCH}." >&2; exit 1 ;;
+  *) echo "HasnaRecordings.app artifact does not support target architecture ${TARGET_ARCH}." >&2; exit 1 ;;
 esac
 
 verify_secure_parent "$APP_PARENT"
@@ -1412,7 +1412,7 @@ add_unique_app() {
   local existing
   if [ -e "$candidate" ] || [ -L "$candidate" ]; then
     [ -d "$candidate" ] && [ ! -L "$candidate" ] || {
-      echo "Recordings.app path is not a secure directory: ${candidate}" >&2
+      echo "HasnaRecordings.app path is not a secure directory: ${candidate}" >&2
       exit 1
     }
   fi
@@ -1524,7 +1524,7 @@ stop_old_processes() {
     "$SLEEP_EXECUTABLE" 0.1
   done
   if [ "$remaining" -ne 0 ]; then
-    echo "Existing Recordings.app process did not stop before replacement." >&2
+    echo "Existing HasnaRecordings.app process did not stop before replacement." >&2
     exit 1
   fi
 }
@@ -1545,7 +1545,7 @@ quiesce_old_processes() {
     fi
     "$SLEEP_EXECUTABLE" 0.1
   done
-  echo "Existing Recordings.app processes did not remain quiescent before replacement." >&2
+  echo "Existing HasnaRecordings.app processes did not remain quiescent before replacement." >&2
   exit 1
 }
 
@@ -1727,7 +1727,7 @@ for existing_app in ${DISCOVERED_APPS[@]+"${DISCOVERED_APPS[@]}"}; do
       MANAGEABLE_APPS+=("$existing_app")
       ;;
     *)
-      echo "Duplicate Recordings.app at ${existing_app} is outside the transactional user install paths; archive or remove it before installing." >&2
+      echo "Duplicate HasnaRecordings.app at ${existing_app} is outside the transactional user install paths; archive or remove it before installing." >&2
       exit 1
       ;;
   esac
@@ -1954,7 +1954,7 @@ for ((refresh_attempt = 1; refresh_attempt <= 5; refresh_attempt++)); do
   fi
 done
 [ "$STOPPED_REFRESH_STABLE" -eq 1 ] || {
-  echo "Existing Recordings.app writers did not remain quiescent around the stopped-state refresh." >&2
+  echo "Existing HasnaRecordings.app writers did not remain quiescent around the stopped-state refresh." >&2
   exit 1
 }
 
@@ -2004,7 +2004,7 @@ for ((move_index = 0; move_index < MOVED_ORIGINAL_COUNT; move_index++)); do
   existing_app="${MOVED_ORIGINALS[$move_index]}"
   moved_path="${MOVED_PATHS[$move_index]}"
   [ "$("$BUN_EXECUTABLE" "$ARTIFACT_TOOL" tree-digest --path "$existing_app")" = "${MOVED_DIGESTS[$move_index]}" ] || {
-    echo "Installed Recordings.app changed after transactional backup planning." >&2
+    echo "Installed HasnaRecordings.app changed after transactional backup planning." >&2
     exit 1
   }
   RECORDINGS_TEST_INSTALLER_PID="$$" \
@@ -2117,7 +2117,7 @@ if [ "$LAUNCH_APP" -eq 1 ] || [ "$was_running" -eq 1 ]; then
 fi
 
 if [ "$ARTIFACT_POLICY" = "local_only" ]; then
-  echo "Installed local-only Recordings.app for ${APPROVED_TARGET}; this artifact is ad-hoc signed and non-notarized."
+  echo "Installed local-only HasnaRecordings.app for ${APPROVED_TARGET}; this artifact is ad-hoc signed and non-notarized."
   if [ "$identity_migration" -eq 1 ]; then
     # Not a maybe: the designated requirement did change, under an explicit approval.
     echo "Code identity changed under --allow-adhoc-identity-migration; the Microphone and Accessibility grants held by the replaced app no longer apply and must be reauthorized."
@@ -2127,5 +2127,5 @@ if [ "$ARTIFACT_POLICY" = "local_only" ]; then
 elif [ "$identity_migration" -eq 1 ]; then
   echo "Installed a new signing identity; macOS will require one-time permission approval for this migration."
 else
-  echo "Installed verified Recordings.app release artifact: ${APP_DEST}"
+  echo "Installed verified HasnaRecordings.app release artifact: ${APP_DEST}"
 fi

package/scripts/macos_artifact.ts

@@ -183,8 +183,8 @@ export type BuildProvenance = {
 
 export type MacOSArtifactManifest = BuildProvenance & {
   artifact_type: "recordings-macos-app";
-  /// The top-level bundle directory name inside the artifact (Recordings.app for the
-  /// full app, HasnaRecordings.app for the bar variant per the fleet naming rule).
+  /// The top-level bundle directory name inside the artifact (HasnaRecordings.app for
+  /// both the full app and the bar variant per the fleet naming rule).
   bundle_name: string;
   app_sha256: string;
   binding: {
@@ -843,7 +843,7 @@ function manifestVariant(manifest: MacOSArtifactManifest): ArtifactVariant {
 }
 
 function manifestBundleName(manifest: MacOSArtifactManifest): string {
-  return manifest.bundle_name ?? "Recordings.app";
+  return manifest.bundle_name ?? "HasnaRecordings.app";
 }
 
 function manifestTargetIdentityKind(manifest: MacOSArtifactManifest): OperatorTargetIdentityKind {
@@ -1094,23 +1094,23 @@ function assertCanonicalZipEntries(entries: Array<{ name: string; isDirectory: b
     const components = logicalPath.split("/");
     if (
       !logicalPath ||
-      components[0] !== "Recordings.app" ||
+      components[0] !== "HasnaRecordings.app" ||
       components.some((component) => !component || component === "." || component === "..")
     ) {
-      throw new Error("release ZIP contains an entry outside the canonical Recordings.app tree");
+      throw new Error("release ZIP contains an entry outside the canonical HasnaRecordings.app tree");
     }
     const collisionKey = canonicalZipCollisionKey(logicalPath);
     if (logicalPaths.has(collisionKey)) {
       throw new Error("release ZIP contains duplicate, file/directory, case-fold, or Unicode-colliding entries");
     }
     logicalPaths.set(collisionKey, { name: logicalPath, isDirectory: entry.isDirectory });
-    if (logicalPath === "Recordings.app") {
-      if (!entry.isDirectory) throw new Error("release ZIP Recordings.app root is not a directory entry");
+    if (logicalPath === "HasnaRecordings.app") {
+      if (!entry.isDirectory) throw new Error("release ZIP HasnaRecordings.app root is not a directory entry");
       rootDirectoryCount += 1;
     }
   }
   if (rootDirectoryCount !== 1) {
-      throw new Error("release ZIP must contain exactly one canonical Recordings.app root entry");
+      throw new Error("release ZIP must contain exactly one canonical HasnaRecordings.app root entry");
   }
   for (const { name } of logicalPaths.values()) {
     const components = name.split("/");
@@ -1426,7 +1426,7 @@ export function withPrivatelyExtractedArchiveApp<T>(
   operation: (appPath: string) => T,
   platformArchiveTool = "/usr/bin/ditto",
   expectedArchiveSha256?: string,
-  expectedBundleName = "Recordings.app",
+  expectedBundleName = "HasnaRecordings.app",
 ): T {
   const privateRoot = mkdtempSync(join(tmpdir(), "recordings-artifact-extract-"));
   chmodSync(privateRoot, 0o700);
@@ -1751,8 +1751,8 @@ export function assertManifestShape(manifest: MacOSArtifactManifest): void {
     manifest.container?.type !== "zip" ||
     JSON.stringify(manifest.container.install_locations) !== JSON.stringify(
       artifactPolicy === "release"
-        ? ["/Applications/Recordings.app"]
-        : ["~/Applications/Recordings.app"],
+        ? ["/Applications/HasnaRecordings.app"]
+        : ["~/Applications/HasnaRecordings.app"],
     )
   ) {
     throw new Error("manifest has an unexpected container install policy");
@@ -2516,7 +2516,7 @@ export function assertVersionTransition(
   assertManifestShape(manifest);
   if (compareVersions(manifest.bundle_version, installedVersion) < 0) {
     throw new Error(
-      `refusing to downgrade Recordings.app from ${installedVersion} to ${manifest.bundle_version}`,
+      `refusing to downgrade HasnaRecordings.app from ${installedVersion} to ${manifest.bundle_version}`,
     );
   }
   if (compareVersions(manifest.bundle_version, installedVersion) === 0) {
@@ -2626,8 +2626,6 @@ function verifyActiveApp(
     const environment: NodeJS.ProcessEnv = {
       HOME: contractHome,
       PATH: "/usr/bin:/bin:/usr/sbin:/sbin",
-      HASNA_RECORDINGS_CLIENT_STORE: "sqlite",
-      RECORDINGS_CLIENT_STORE: "sqlite",
       HASNA_RECORDINGS_DB_PATH: join(contractHome, "recordings.db"),
       RECORDINGS_AUDIO_DIR: join(contractHome, "audio"),
     };
@@ -2983,7 +2981,7 @@ function readJournal(path: string): InstallJournal {
   if (resolve(path) !== resolve(join(expectedParent, ".Recordings-install-transaction.json"))) {
     throw new Error("install transaction journal is outside the expected app parent");
   }
-  if (resolve(journal.app_destination) !== resolve(join(expectedParent, "Recordings.app"))) {
+  if (resolve(journal.app_destination) !== resolve(join(expectedParent, "HasnaRecordings.app"))) {
     throw new Error("install transaction journal has an unexpected app destination");
   }
   const expectedDataDir = resolve(join(dirname(expectedParent), ".hasna", "recordings"));
@@ -3001,7 +2999,9 @@ function readJournal(path: string): InstallJournal {
     return (
       resolved === resolve(journal.app_destination) ||
       resolved === resolve(join(journal.data_dir, "Recordings.app")) ||
-      resolved.startsWith(`${resolve(journal.app_parent)}/Recordings.app.`)
+      resolved === resolve(join(journal.data_dir, "HasnaRecordings.app")) ||
+      resolved.startsWith(`${resolve(journal.app_parent)}/Recordings.app.`) ||
+      resolved.startsWith(`${resolve(journal.app_parent)}/HasnaRecordings.app.`)
     );
   };
   if (!journal.originals.every((entry) => allowedOriginal(entry.path))) {
@@ -3939,7 +3939,7 @@ function openRecoveryCapabilities(
   const homePath = resolve(dirname(appParent));
   if (
     basename(appParent) !== "Applications" ||
-    resolve(journal.app_destination) !== resolve(join(appParent, "Recordings.app")) ||
+    resolve(journal.app_destination) !== resolve(join(appParent, "HasnaRecordings.app")) ||
     resolve(journal.data_dir) !== resolve(join(homePath, ".hasna", "recordings")) ||
     dirname(resolve(journal.transaction_dir)) !== appParent
   ) {
@@ -4342,9 +4342,10 @@ export function publishInstallCandidate(
   const destination = resolve(destinationPath);
   const stagingParentPath = dirname(staging);
   const stagingParentLeaf = basename(stagingParentPath);
+  const bundleLeaf = basename(journal.app_destination);
   if (
     destination !== resolve(journal.app_destination) ||
-    basename(staging) !== "Recordings.app" ||
+    basename(staging) !== bundleLeaf ||
     dirname(stagingParentPath) !== resolve(journal.app_parent) ||
     !/^\.Recordings-install\.[A-Za-z0-9]+$/.test(stagingParentLeaf)
   ) {
@@ -4367,12 +4368,12 @@ export function publishInstallCandidate(
       stagingParent,
       "candidate staging parent",
     );
-    retained = guard.openDirAt(stagingParent, "Recordings.app");
-    assertNativeBinding(guard, stagingParent, "Recordings.app", retained, "staged candidate");
+    retained = guard.openDirAt(stagingParent, bundleLeaf);
+    assertNativeBinding(guard, stagingParent, bundleLeaf, retained, "staged candidate");
     if (nativeTreeDigest(guard, retained) !== expectedDigest) {
       throw new Error("staged candidate does not match durable journal evidence");
     }
-    if (guard.statAt(capabilities.applications, "Recordings.app") !== null) {
+    if (guard.statAt(capabilities.applications, bundleLeaf) !== null) {
       throw new Error("candidate destination already exists");
     }
     fsyncRetainedTree(guard, retained, uid, "staged candidate");
@@ -4384,8 +4385,8 @@ export function publishInstallCandidate(
       stagingParent,
       "candidate staging parent",
     );
-    assertNativeBinding(guard, stagingParent, "Recordings.app", retained, "staged candidate");
-    if (guard.statAt(capabilities.applications, "Recordings.app") !== null) {
+    assertNativeBinding(guard, stagingParent, bundleLeaf, retained, "staged candidate");
+    if (guard.statAt(capabilities.applications, bundleLeaf) !== null) {
       throw new Error("candidate destination appeared before publication");
     }
     installTransitionTestPoint(
@@ -4395,10 +4396,10 @@ export function publishInstallCandidate(
     );
     guard.renameHandleNoReplaceAt(
       stagingParent,
-      "Recordings.app",
+      bundleLeaf,
       retained,
       capabilities.applications,
-      "Recordings.app",
+      bundleLeaf,
     );
     installTransitionTestPoint(
       "publish-candidate",
@@ -4409,11 +4410,11 @@ export function publishInstallCandidate(
     assertNativeBinding(
       guard,
       capabilities.applications,
-      "Recordings.app",
+      bundleLeaf,
       retained,
       "published candidate",
     );
-    if (guard.statAt(stagingParent, "Recordings.app") !== null) {
+    if (guard.statAt(stagingParent, bundleLeaf) !== null) {
       throw new Error("candidate staging leaf was recreated during publication");
     }
     guard.fsyncHandle(capabilities.applications);
@@ -4459,7 +4460,8 @@ function cleanupInstallCandidateStaging(
       staging,
       "candidate staging root",
     );
-    const candidateMetadata = guard.statAt(staging, "Recordings.app");
+    const bundleLeaf = basename(journal.app_destination);
+    const candidateMetadata = guard.statAt(staging, bundleLeaf);
     if (candidateMetadata !== null) {
       if (journal.schema_version !== 9 || !journal.candidate_tree_sha256) {
         throw new Error("legacy journal cannot authenticate candidate staging cleanup");
@@ -4467,7 +4469,7 @@ function cleanupInstallCandidateStaging(
       const candidate = openProvenDirectoryAt(
         guard,
         staging,
-        "Recordings.app",
+        bundleLeaf,
         journal.candidate_tree_sha256,
         "staged candidate",
       );
@@ -4475,7 +4477,7 @@ function cleanupInstallCandidateStaging(
         quarantineRemoveRetainedAt(
           guard,
           staging,
-          "Recordings.app",
+          bundleLeaf,
           candidate,
           "staged candidate",
         );
@@ -4567,14 +4569,20 @@ function originalDestinationCapability(
 ): { parent: NativeHandle; leaf: string } {
   const resolved = resolve(path);
   if (resolved === resolve(journal.app_destination)) {
-    return { parent: capabilities.applications, leaf: "Recordings.app" };
+    return { parent: capabilities.applications, leaf: basename(journal.app_destination) };
   }
-  if (resolved === resolve(join(journal.data_dir, "Recordings.app"))) {
-    return { parent: capabilities.data, leaf: "Recordings.app" };
+  if (
+    dirname(resolved) === resolve(journal.data_dir) &&
+    (basename(resolved) === "Recordings.app" || basename(resolved) === "HasnaRecordings.app")
+  ) {
+    // Install site inside the state data directory: the legacy pre-rename
+    // Recordings.app and the renamed HasnaRecordings.app are both recognized and
+    // preserved, never treated as the canonical Applications destination.
+    return { parent: capabilities.data, leaf: basename(resolved) };
   }
   if (
     dirname(resolved) === resolve(journal.app_parent) &&
-    /^Recordings\.app\.[A-Za-z0-9._-]+$/.test(basename(resolved))
+    /^(?:Hasna)?Recordings\.app\.[A-Za-z0-9._-]+$/.test(basename(resolved))
   ) {
     return { parent: capabilities.applications, leaf: basename(resolved) };
   }
@@ -5005,24 +5013,25 @@ function recoverJournal(path: string): void {
       const canonicalOriginal = journal.originals.find(
         (entry) => resolve(entry.path) === resolve(journal.app_destination),
       );
+      const destinationLeaf = basename(journal.app_destination);
       const canonicalDestinationDigest = canonicalOriginal
-        ? nativeTreeDigestAt(guard, applications, "Recordings.app")
+        ? nativeTreeDigestAt(guard, applications, destinationLeaf)
         : null;
       const canonicalAlreadyRestored = canonicalOriginal !== undefined &&
         canonicalDestinationDigest === canonicalOriginal.sha256;
       if (
         ["candidate-moving", "candidate-installed", "activated", "launching"].includes(journal.phase) &&
-        !canonicalAlreadyRestored && guard.statAt(applications, "Recordings.app") !== null
+        !canonicalAlreadyRestored && guard.statAt(applications, destinationLeaf) !== null
       ) {
         if (journal.schema_version !== 9 || !journal.candidate_tree_sha256) {
           throw new Error("legacy recovery journal cannot prove the uncommitted candidate tree");
         }
-        recoveryTestBarrier("before-candidate-remove", "Recordings.app");
+        recoveryTestBarrier("before-candidate-remove", destinationLeaf);
         assertNativeBinding(guard, capabilities.home, "Applications", applications, "Applications");
         const candidate = openProvenDirectoryAt(
           guard,
           applications,
-          "Recordings.app",
+          destinationLeaf,
           journal.candidate_tree_sha256,
           "uncommitted candidate",
         );
@@ -5030,7 +5039,7 @@ function recoverJournal(path: string): void {
           quarantineRemoveRetainedAt(
             guard,
             applications,
-            "Recordings.app",
+            destinationLeaf,
             candidate,
             "uncommitted candidate",
           );