@heossi/qnsi 0.3.3 → 0.4.0

package/CHANGELOG.md

@@ -43,7 +43,7 @@ The previous TypeScript SDK family was fragmented across 11 packages (`@heossi/q
 
 ### Added
 
-- `QnspClient({ apiKey, baseUrl?, timeoutMs? })` — top-level client. Lazily activates against `/billing/v1/sdk/activate` on first request, reports `sdkId="qnsp"` and `sdkVersion="0.1.0"`.
+- `QnsiClient({ apiKey, baseUrl?, timeoutMs? })` — top-level client. Lazily activates against `/billing/v1/sdk/activate` on first request, reports `sdkId="qnsp"` and `sdkVersion="0.1.0"`.
 - Eleven service sub-clients sharing one HTTP pool + one activation cache:
   - `qnsp.vault` (createSecret / getSecret / getSecretVersion / rotateSecret / deleteSecret / listSecretVersions)
   - `qnsp.kms` (createKey / listKeys / getKey / rotateKey / deleteKey / sign / verify / wrap / unwrap)

package/README.md

@@ -5,16 +5,16 @@
 
 The official **single-package** Node.js / TypeScript SDK for QNSI. Covers the full customer-facing platform — vault, KMS, audit, auth, tenant, access-control, billing, crypto-inventory, storage, search, and AI orchestrator — plus webhook signature verification. Mirrors the shape of the `qnsp` Python / Go / Rust SDKs byte-for-byte: same wire contracts, same algorithm names, same FIPS 203 / 204 / 205 posture.
 
-> **Free tier available.** Free-forever account at <https://cloud.qnsp.cuilabs.io/auth> — 60-second signup, no credit card. Includes 10 GB PQC storage, 50 000 API calls/month, 20 KMS keys, 25 vault secrets.
+> **Free tier available.** Free-forever account at <https://cloud.qnsi.heossi.com/auth> — 60-second signup, no credit card. Includes 10 GB PQC storage, 50 000 API calls/month, 20 KMS keys, 25 vault secrets.
 
 ## Why one package?
 
 Previous TypeScript consumers had to install up to 11 separate `@heossi/qnsi-*-sdk` packages and keep their versions in sync. `@heossi/qnsi` collapses that into a single dependency with sub-namespaces:
 
 ```ts
-import { QnspClient } from "@heossi/qnsi";
+import { QnsiClient } from "@heossi/qnsi";
 
-const qnsp = new QnspClient({ apiKey: process.env.QNSP_API_KEY! });
+const qnsp = new QnsiClient({ apiKey: process.env.QNSP_API_KEY! });
 
 await qnsp.vault.createSecret({ ... });   // was @heossi/qnsi-vault-sdk
 await qnsp.kms.sign(keyId, data);          // was @heossi/qnsi-kms-client
@@ -40,9 +40,9 @@ Requires Node.js ≥ 22.0.0. ESM-first; CommonJS consumers can `await import("@h
 ## Quick start
 
 ```ts
-import { QnspClient } from "@heossi/qnsi";
+import { QnsiClient } from "@heossi/qnsi";
 
-const qnsp = new QnspClient({ apiKey: process.env.QNSP_API_KEY! });
+const qnsp = new QnsiClient({ apiKey: process.env.QNSP_API_KEY! });
 
 // Vault — PQC-encrypted secret storage
 const secret = await qnsp.vault.createSecret({
@@ -142,7 +142,7 @@ try {
 
 ## Activation + tier introspection
 
-`QnspClient` performs a one-shot handshake against `/billing/v1/sdk/activate` on first use. The result is cached in memory; subsequent calls reuse it until ~60 s before expiry. You can inspect the current activation:
+`QnsiClient` performs a one-shot handshake against `/billing/v1/sdk/activate` on first use. The result is cached in memory; subsequent calls reuse it until ~60 s before expiry. You can inspect the current activation:
 
 ```ts
 await qnsp.tenantId();      // resolved tenant
@@ -162,7 +162,7 @@ The per-service `@heossi/qnsi-*-sdk` packages on npm are now **deprecated** in f
 
 | Before | After |
 |---|---|
-| `import { VaultClient } from "@heossi/qnsi-vault-sdk"` | `import { QnspClient } from "@heossi/qnsi"` then `qnsp.vault` |
+| `import { VaultClient } from "@heossi/qnsi-vault-sdk"` | `import { QnsiClient } from "@heossi/qnsi"` then `qnsp.vault` |
 | `import { KmsClient } from "@heossi/qnsi-kms-client"` | `qnsp.kms` |
 | `import { AuthClient } from "@heossi/qnsi-auth-sdk"` | `qnsp.auth` |
 | `import { TenantClient } from "@heossi/qnsi-tenant-sdk"` | `qnsp.tenant` |
@@ -182,14 +182,14 @@ import { VaultClient } from "@heossi/qnsi-vault-sdk";
 import { KmsClient } from "@heossi/qnsi-kms-client";
 import { AuditClient } from "@heossi/qnsi-audit-sdk";
 
-const vault = new VaultClient({ apiKey, baseUrl: "https://api.qnsp.cuilabs.io/proxy/vault", tier });
-const kms   = new KmsClient({   apiKey, baseUrl: "https://api.qnsp.cuilabs.io/proxy/kms",   tier });
-const audit = new AuditClient({ apiKey, baseUrl: "https://api.qnsp.cuilabs.io/proxy/audit", tier });
+const vault = new VaultClient({ apiKey, baseUrl: "https://api.qnsi.heossi.com/proxy/vault", tier });
+const kms   = new KmsClient({   apiKey, baseUrl: "https://api.qnsi.heossi.com/proxy/kms",   tier });
+const audit = new AuditClient({ apiKey, baseUrl: "https://api.qnsi.heossi.com/proxy/audit", tier });
 
 // After — one package, one activation, one client
-import { QnspClient } from "@heossi/qnsi";
+import { QnsiClient } from "@heossi/qnsi";
 
-const qnsp = new QnspClient({ apiKey });
+const qnsp = new QnsiClient({ apiKey });
 // qnsp.vault, qnsp.kms, qnsp.audit, ... all share one connection pool + one activation cache
 ```
 

package/dist/_activation/activation-client.d.ts

@@ -25,13 +25,13 @@ export declare class SdkActivationError_ extends Error {
  * Configuration for SDK activation.
  */
 export interface SdkActivationConfig {
-    /** QNSP API key (required — get one at https://cloud.qnsp.cuilabs.io/signup) */
+    /** QNSP API key (required — get one at https://cloud.qnsi.heossi.com/signup) */
     readonly apiKey: string;
     /** SDK package identifier */
     readonly sdkId: SdkIdentifier;
     /** SDK version string */
     readonly sdkVersion: string;
-    /** Override platform URL (defaults to https://api.qnsp.cuilabs.io) */
+    /** Override platform URL (defaults to https://api.qnsi.heossi.com) */
     readonly platformUrl?: string | undefined;
     /** Override activation timeout in ms (defaults to 15000) */
     readonly timeoutMs?: number | undefined;

package/dist/_activation/activation-client.js

@@ -14,7 +14,7 @@
  */
 import { SdkActivationErrorSchema, SdkActivationResponseSchema, } from "./types.js";
 const ACTIVATION_PATH = "/billing/v1/sdk/activate";
-const DEFAULT_PLATFORM_URL = "https://api.qnsp.cuilabs.io";
+const DEFAULT_PLATFORM_URL = "https://api.qnsi.heossi.com";
 const ACTIVATION_TIMEOUT_MS = 15_000;
 const REFRESH_BUFFER_SECONDS = 300; // Refresh 5 minutes before expiry
 /**
@@ -61,9 +61,9 @@ function detectRuntime() {
 export async function activateSdk(config) {
     if (!config.apiKey || config.apiKey.trim().length === 0) {
         throw new SdkActivationError_("INVALID_API_KEY", `QNSP ${config.sdkId}: apiKey is required. ` +
-            "Get your free API key at https://cloud.qnsp.cuilabs.io/signup — " +
+            "Get your free API key at https://cloud.qnsi.heossi.com/signup — " +
             "no credit card required (FREE tier: 10 GB storage, 50,000 API calls/month). " +
-            `Docs: https://docs.qnsp.cuilabs.io/sdk/${config.sdkId}`, 401);
+            `Docs: https://docs.qnsi.heossi.com/sdk/${config.sdkId}`, 401);
     }
     const key = cacheKey(config);
     const cached = activationCache.get(key);
@@ -114,7 +114,7 @@ export async function activateSdk(config) {
         }
         if (response.status === 401) {
             throw new SdkActivationError_("INVALID_API_KEY", `QNSP ${config.sdkId}: Invalid API key. ` +
-                "Get your API key at https://cloud.qnsp.cuilabs.io/api-keys", 401);
+                "Get your API key at https://cloud.qnsi.heossi.com/api-keys", 401);
         }
         if (response.status === 429) {
             throw new SdkActivationError_("RATE_LIMITED", `QNSP ${config.sdkId}: Activation rate limited. Please retry after a short delay.`, 429);

package/dist/_internal.d.ts

@@ -1,18 +1,18 @@
 /**
  * Shared HTTP plumbing + activation cache.
  *
- * Internal — consumers should reach this only via `QnspClient`. Each
+ * Internal — consumers should reach this only via `QnsiClient`. Each
  * service module (vault, kms, audit, …) takes an `Internal` instance
  * in its constructor and calls `internal.request(method, path, …)`.
  */
 import { type SdkActivationResponse } from "./_activation/index.js";
 export declare const SDK_ID = "qnsp";
 export declare const SDK_VERSION = "0.3.0";
-/** Public configuration accepted by `new QnspClient(opts)`. */
-export interface QnspClientOptions {
-    /** API key issued from <https://cloud.qnsp.cuilabs.io/api-keys>. Required. */
+/** Public configuration accepted by `new QnsiClient(opts)`. */
+export interface QnsiClientOptions {
+    /** API key issued from <https://cloud.qnsi.heossi.com/api-keys>. Required. */
     readonly apiKey: string;
-    /** Override the QNSP edge-gateway URL. Defaults to https://api.qnsp.cuilabs.io. */
+    /** Override the QNSP edge-gateway URL. Defaults to https://api.qnsi.heossi.com. */
     readonly baseUrl?: string;
     /** Per-request timeout in milliseconds. Defaults to 15 000. */
     readonly timeoutMs?: number;
@@ -28,7 +28,7 @@ export declare class Internal {
     readonly apiKey: string;
     private cached;
     private activationPromise;
-    constructor(opts: QnspClientOptions);
+    constructor(opts: QnsiClientOptions);
     /** Force the activation handshake to run now. */
     ensureActivated(): Promise<SdkActivationResponse>;
     /** The activated tenant id (for endpoints that require the tenant in the URL path). */

package/dist/_internal.js

@@ -1,17 +1,17 @@
 /**
  * Shared HTTP plumbing + activation cache.
  *
- * Internal — consumers should reach this only via `QnspClient`. Each
+ * Internal — consumers should reach this only via `QnsiClient`. Each
  * service module (vault, kms, audit, …) takes an `Internal` instance
  * in its constructor and calls `internal.request(method, path, …)`.
  */
 import { activateSdk } from "./_activation/index.js";
-import { QnspApiError, QnspAuthError, QnspNetworkError } from "./errors.js";
+import { QnsiApiError, QnsiAuthError, QnsiNetworkError } from "./errors.js";
 export const SDK_ID = "qnsp";
-// Bump in lockstep with packages/qnsp/package.json `version` (activation
+// Bump in lockstep with packages/qnsi/package.json `version` (activation
 // telemetry label). Same release contract as browser/sdk-package-version.ts.
 export const SDK_VERSION = "0.3.0";
-const DEFAULT_BASE_URL = "https://api.qnsp.cuilabs.io";
+const DEFAULT_BASE_URL = "https://api.qnsi.heossi.com";
 const DEFAULT_TIMEOUT_MS = 15_000;
 const EXPIRY_BUFFER_MS = 60_000; // refresh 60 s before expiry
 export class Internal {
@@ -22,7 +22,7 @@ export class Internal {
     activationPromise = null;
     constructor(opts) {
         if (!opts.apiKey || opts.apiKey.trim().length === 0) {
-            throw new QnspAuthError("api key required (sign up at https://cloud.qnsp.cuilabs.io/auth)");
+            throw new QnsiAuthError("api key required (sign up at https://cloud.qnsi.heossi.com/auth)");
         }
         this.apiKey = opts.apiKey;
         this.baseUrl = (opts.baseUrl ?? DEFAULT_BASE_URL).replace(/\/$/, "");
@@ -107,7 +107,7 @@ export class Internal {
             return JSON.parse(text);
         }
         catch {
-            throw new QnspApiError("response is not valid JSON", response.status);
+            throw new QnsiApiError("response is not valid JSON", response.status);
         }
     }
     async send(method, path, body, options) {
@@ -131,7 +131,7 @@ export class Internal {
             return await fetch(url, init);
         }
         catch (err) {
-            throw new QnspNetworkError(method, url, err);
+            throw new QnsiNetworkError(method, url, err);
         }
         finally {
             clearTimeout(timer);
@@ -218,7 +218,7 @@ function parseApiError(status, raw) {
     else if (typeof raw === "string" && raw.length > 0) {
         message = raw;
     }
-    return new QnspApiError(message, status, code, body);
+    return new QnsiApiError(message, status, code, body);
 }
 function parseExpiresAt(response) {
     const { expiresAt } = response;

package/dist/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,qBAAa,WAAW;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI5E,YAAY,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI9F,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;CAG1C"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AA+BD,qBAAa,WAAW;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI5E,YAAY,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAS9F,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;CAG1C"}

package/dist/audit.js

@@ -3,16 +3,40 @@
  * `apps/audit-service` (`/audit/v1`).
  */
 const PATH_PREFIX = "/proxy/audit/v1";
+/**
+ * Translate the ergonomic SDK event into the wire shape the audit-service
+ * actually accepts. This is the contract-translation boundary — callers keep
+ * passing `{ eventType, payload, tags }` unchanged.
+ *
+ * `normalizeBatch` (`apps/audit-service/src/services/audit-service.ts`) matches
+ * one of three strict schemas. The `_internal` client injects a top-level
+ * `tenantId` into every body, which **fails** the `legacyAttestation` schema
+ * (`{ eventType, timestamp?, severity?, payload? }`, `.strict()` → rejects
+ * `tenantId` → 0 events → HTTP 400). The only path that tolerates the injected
+ * `tenantId` is `legacySecurityAuditClientEventSchema`, which carries
+ * `{ eventType?, source?, tenantId?, details?, … }` and maps `details` → the
+ * stored event `payload` (and honours `tenantId` for tenant-scoping). So the
+ * caller's `payload` goes into `details`, and `tags` rides alongside as
+ * `details.tags`. Verified live: `{tenantId,eventType,source,details}` → 202;
+ * `{tenantId,eventType,payload}` → 400.
+ */
+function toWireEvent(req) {
+    const details = { ...req.payload };
+    if (req.tags && req.tags.length > 0) {
+        details["tags"] = [...req.tags];
+    }
+    return { eventType: req.eventType, source: "qnsi-sdk", details };
+}
 export class AuditClient {
     internal;
     constructor(internal) {
         this.internal = internal;
     }
     logEvent(req, opts) {
-        return this.internal.request("POST", `${PATH_PREFIX}/events`, req, opts);
+        return this.internal.request("POST", `${PATH_PREFIX}/events`, toWireEvent(req), opts);
     }
     ingestEvents(events, opts) {
-        return this.internal.request("POST", `${PATH_PREFIX}/events/batch`, { events }, opts);
+        return this.internal.request("POST", `${PATH_PREFIX}/events/batch`, { events: events.map(toWireEvent) }, opts);
     }
     listEvents(query) {
         return this.internal.request("GET", `${PATH_PREFIX}/events`, undefined, { query });

package/dist/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAQtC,MAAM,OAAO,WAAW;IACM;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,QAAQ,CAAC,GAAoB,EAAE,IAA6C;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,YAAY,CAAC,MAAkC,EAAE,IAA6C;QAC7F,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAED,UAAU,CAAC,KAA+B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;CACD"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAQtC;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,WAAW,CAAC,GAAoB;IAKxC,MAAM,OAAO,GAA4B,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5D,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,OAAO,WAAW;IACM;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,QAAQ,CAAC,GAAoB,EAAE,IAA6C;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAED,YAAY,CAAC,MAAkC,EAAE,IAA6C;QAC7F,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAC3B,MAAM,EACN,GAAG,WAAW,eAAe,EAC7B,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EACnC,IAAI,CACJ,CAAC;IACH,CAAC;IAED,UAAU,CAAC,KAA+B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;CACD"}

package/dist/autogen/executor.d.ts

@@ -86,9 +86,9 @@ export interface WorkloadDetail extends WorkloadSummary {
     readonly artifacts: readonly WorkloadArtifactBinding[];
     readonly schedulerMetadata: Record<string, unknown> | null;
 }
-export interface QnspExecutorConfig {
+export interface QnsiExecutorConfig {
     /**
-     * QNSP API key. Get one at https://cloud.qnsp.cuilabs.io/api-keys
+     * QNSP API key. Get one at https://cloud.qnsi.heossi.com/api-keys
      * The API key carries the tenant ID — no separate tenantId needed.
      */
     readonly apiKey: string;
@@ -100,7 +100,7 @@ export interface QnspExecutorConfig {
     readonly tenantId?: string;
     /**
      * Base URL for the QNSP API.
-     * Defaults to https://api.qnsp.cuilabs.io
+     * Defaults to https://api.qnsi.heossi.com
      */
     readonly baseUrl?: string;
     /**
@@ -182,16 +182,16 @@ export interface ExecuteCodeResult {
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('hi')", language: "python" });
  * console.log(result.status, result.attestationProof);
  * ```
  */
-export declare class QnspExecutor {
+export declare class QnsiExecutor {
     #private;
-    constructor(config: QnspExecutorConfig);
+    constructor(config: QnsiExecutorConfig);
     /**
      * Execute code inside a QNSP enclave and wait for the result.
      */

package/dist/autogen/executor.js

@@ -47,20 +47,20 @@ const LANGUAGE_COMMANDS = {
     bash: ["bash", "-c"],
     javascript: ["node", "-e"],
 };
-// ─── QnspExecutor ─────────────────────────────────────────────────────────────
+// ─── QnsiExecutor ─────────────────────────────────────────────────────────────
 /**
  * AutoGen-compatible code executor backed by QNSP AI orchestrator enclaves.
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('hi')", language: "python" });
  * console.log(result.status, result.attestationProof);
  * ```
  */
-export class QnspExecutor {
+export class QnsiExecutor {
     #apiKey;
     #baseUrl;
     #containerImage;
@@ -84,7 +84,7 @@ export class QnspExecutor {
         this.#pollIntervalMs = config.pollIntervalMs ?? 2_000;
         this.#requestTimeoutMs = config.requestTimeoutMs ?? 30_000;
         this.#apiKey = config.apiKey;
-        this.#baseUrl = (config.baseUrl ?? "https://api.qnsp.cuilabs.io").replace(/\/$/, "");
+        this.#baseUrl = (config.baseUrl ?? "https://api.qnsi.heossi.com").replace(/\/$/, "");
     }
     /**
      * Resolve the effective tenant ID — either from config or via SDK activation.

package/dist/autogen/index.d.ts

@@ -7,12 +7,12 @@
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('Hello')", language: "python" });
  * ```
  */
-export type { ExecuteCodeRequest, ExecuteCodeResult, QnspExecutorConfig, SubmitWorkloadRequest, WorkloadDetail, WorkloadStatus, } from "./executor.js";
-export { QnspExecutor } from "./executor.js";
+export type { ExecuteCodeRequest, ExecuteCodeResult, QnsiExecutorConfig, SubmitWorkloadRequest, WorkloadDetail, WorkloadStatus, } from "./executor.js";
+export { QnsiExecutor } from "./executor.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/autogen/index.js

@@ -7,11 +7,11 @@
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('Hello')", language: "python" });
  * ```
  */
-export { QnspExecutor } from "./executor.js";
+export { QnsiExecutor } from "./executor.js";
 //# sourceMappingURL=index.js.map

package/dist/browser/provider-setup.d.ts

@@ -13,11 +13,11 @@ import type { PqcAlgorithm, PqcProvider } from "./pqc-types.js";
 export type RuntimeEnvironment = "browser" | "node" | "edge";
 /** Options for initializing the PQC provider. */
 export interface InitializePqcProviderOptions {
-    /** QNSP API key — required. Get one at https://cloud.qnsp.cuilabs.io/signup */
+    /** QNSP API key — required. Get one at https://cloud.qnsi.heossi.com/signup */
     readonly apiKey: string;
     /** Optional subset of algorithms to enable. Defaults to all noble-supported. */
     readonly algorithms?: readonly PqcAlgorithm[] | undefined;
-    /** Override platform URL (defaults to https://api.qnsp.cuilabs.io) */
+    /** Override platform URL (defaults to https://api.qnsi.heossi.com) */
     readonly platformUrl?: string | undefined;
 }
 /**

package/dist/browser/sdk-package-version.d.ts

@@ -6,7 +6,7 @@
  * must stay browser-safe — no `node:fs` runtime read — and a static JSON
  * import would resolve outside the package `rootDir` (TS6059). This mirrors
  * the same release-bump contract as `SDK_VERSION` in `../_internal.ts`:
- * **bump this in lockstep with `packages/qnsp/package.json` `version`.**
+ * **bump this in lockstep with `packages/qnsi/package.json` `version`.**
  */
 export declare const SDK_PACKAGE_VERSION = "0.3.0";
 //# sourceMappingURL=sdk-package-version.d.ts.map

package/dist/browser/sdk-package-version.js

@@ -6,7 +6,7 @@
  * must stay browser-safe — no `node:fs` runtime read — and a static JSON
  * import would resolve outside the package `rootDir` (TS6059). This mirrors
  * the same release-bump contract as `SDK_VERSION` in `../_internal.ts`:
- * **bump this in lockstep with `packages/qnsp/package.json` `version`.**
+ * **bump this in lockstep with `packages/qnsi/package.json` `version`.**
  */
 export const SDK_PACKAGE_VERSION = "0.3.0";
 //# sourceMappingURL=sdk-package-version.js.map

package/dist/cli/commands/test-utils.js

@@ -18,7 +18,7 @@ export function createMockResponse(data, status = 200, ok = true, headers = {})
 }
 export const mockConfig = {
     edgeGatewayUrl: null,
-    cloudPortalUrl: "https://cloud.qnsp.cuilabs.io",
+    cloudPortalUrl: "https://cloud.qnsi.heossi.com",
     authServiceUrl: "http://localhost:8081",
     serviceId: "test-service-id",
     serviceSecret: "test-secret",

package/dist/cli/config.js

@@ -16,7 +16,7 @@ function deriveViaEdgeGateway(options) {
 }
 export function loadConfig(overrides) {
     const edgeGatewayUrl = process.env["QNSP_EDGE_GATEWAY_URL"] ?? null;
-    const cloudPortalUrl = process.env["QNSP_CLOUD_PORTAL_URL"] ?? "https://cloud.qnsp.cuilabs.io";
+    const cloudPortalUrl = process.env["QNSP_CLOUD_PORTAL_URL"] ?? "https://cloud.qnsi.heossi.com";
     const defaults = {
         edgeGatewayUrl,
         cloudPortalUrl,

package/dist/cli/utils/backend-validator.js

@@ -1,6 +1,6 @@
 import { EXIT_CODES } from "../config.js";
 import { printError } from "./output.js";
-const CLOUD_PORTAL_URL = process.env["QNSP_CLOUD_PORTAL_URL"] ?? "https://cloud.qnsp.cuilabs.io";
+const CLOUD_PORTAL_URL = process.env["QNSP_CLOUD_PORTAL_URL"] ?? "https://cloud.qnsi.heossi.com";
 export function handleBackendError(response, body) {
     const error = body;
     switch (response.status) {

package/dist/client.d.ts

@@ -8,7 +8,7 @@
  * SDK shape byte-for-byte.
  */
 import type { SdkActivationResponse } from "./_activation/index.js";
-import { type QnspClientOptions } from "./_internal.js";
+import { type QnsiClientOptions } from "./_internal.js";
 import { AccessClient } from "./access.js";
 import { AiClient } from "./ai.js";
 import { AuditClient } from "./audit.js";
@@ -20,7 +20,7 @@ import { SearchClient } from "./search.js";
 import { StorageClient } from "./storage.js";
 import { TenantClient } from "./tenant.js";
 import { VaultClient } from "./vault.js";
-export declare class QnspClient {
+export declare class QnsiClient {
     readonly vault: VaultClient;
     readonly kms: KmsClient;
     readonly audit: AuditClient;
@@ -33,7 +33,7 @@ export declare class QnspClient {
     readonly search: SearchClient;
     readonly ai: AiClient;
     private readonly internal;
-    constructor(options: QnspClientOptions);
+    constructor(options: QnsiClientOptions);
     /**
      * Force the activation handshake to run now. Surfaces invalid-API-key
      * errors at startup rather than on the first service call.
@@ -48,5 +48,5 @@ export declare class QnspClient {
     /** Whether the tenant's plan enables a billing-side boolean feature. */
     hasFeature(feature: string): Promise<boolean>;
 }
-export type { QnspClientOptions } from "./_internal.js";
+export type { QnsiClientOptions } from "./_internal.js";
 //# sourceMappingURL=client.d.ts.map

package/dist/client.js

@@ -19,7 +19,7 @@ import { SearchClient } from "./search.js";
 import { StorageClient } from "./storage.js";
 import { TenantClient } from "./tenant.js";
 import { VaultClient } from "./vault.js";
-export class QnspClient {
+export class QnsiClient {
     vault;
     kms;
     audit;

package/dist/errors.d.ts

@@ -6,29 +6,29 @@
  * the failure mode without parsing error messages.
  */
 /** Base class — all QNSP SDK errors inherit. */
-export declare class QnspError extends Error {
+export declare class QnsiError extends Error {
     constructor(message: string, options?: ErrorOptions);
 }
 /** DNS, TLS, timeout, or connection failure reaching the QNSP edge gateway. */
-export declare class QnspNetworkError extends QnspError {
+export declare class QnsiNetworkError extends QnsiError {
     readonly op: string;
     readonly url: string;
     constructor(op: string, url: string, cause?: unknown);
 }
 /** API key rejected at activation. */
-export declare class QnspAuthError extends QnspError {
+export declare class QnsiAuthError extends QnsiError {
     readonly code: string | null;
     constructor(message: string, code?: string | null);
 }
 /** A QNSP service returned a 4xx/5xx with a structured body. */
-export declare class QnspApiError extends QnspError {
+export declare class QnsiApiError extends QnsiError {
     readonly statusCode: number;
     readonly code: string | null;
     readonly body: unknown;
     constructor(message: string, statusCode: number, code?: string | null, body?: unknown);
 }
 /** HMAC mismatch, expired/future timestamp, malformed body, or missing fields. */
-export declare class QnspWebhookError extends QnspError {
+export declare class QnsiWebhookError extends QnsiError {
     readonly reason: string;
     constructor(reason: string);
 }

package/dist/errors.js

@@ -6,51 +6,51 @@
  * the failure mode without parsing error messages.
  */
 /** Base class — all QNSP SDK errors inherit. */
-export class QnspError extends Error {
+export class QnsiError extends Error {
     constructor(message, options) {
         super(message, options);
-        this.name = "QnspError";
+        this.name = "QnsiError";
     }
 }
 /** DNS, TLS, timeout, or connection failure reaching the QNSP edge gateway. */
-export class QnspNetworkError extends QnspError {
+export class QnsiNetworkError extends QnsiError {
     op;
     url;
     constructor(op, url, cause) {
         super(`qnsp: network error on ${op} ${url}: ${stringifyCause(cause)}`, { cause });
-        this.name = "QnspNetworkError";
+        this.name = "QnsiNetworkError";
         this.op = op;
         this.url = url;
     }
 }
 /** API key rejected at activation. */
-export class QnspAuthError extends QnspError {
+export class QnsiAuthError extends QnsiError {
     code;
     constructor(message, code = null) {
         super(`qnsp: auth error${code ? ` (${code})` : ""}: ${message}`);
-        this.name = "QnspAuthError";
+        this.name = "QnsiAuthError";
         this.code = code;
     }
 }
 /** A QNSP service returned a 4xx/5xx with a structured body. */
-export class QnspApiError extends QnspError {
+export class QnsiApiError extends QnsiError {
     statusCode;
     code;
     body;
     constructor(message, statusCode, code = null, body = null) {
         super(`qnsp: api error ${statusCode}${code ? ` ${code}` : ""}: ${message}`);
-        this.name = "QnspApiError";
+        this.name = "QnsiApiError";
         this.statusCode = statusCode;
         this.code = code;
         this.body = body;
     }
 }
 /** HMAC mismatch, expired/future timestamp, malformed body, or missing fields. */
-export class QnspWebhookError extends QnspError {
+export class QnsiWebhookError extends QnsiError {
     reason;
     constructor(reason) {
         super(`qnsp: webhook error: ${reason}`);
-        this.name = "QnspWebhookError";
+        this.name = "QnsiWebhookError";
         this.reason = reason;
     }
 }