@heossi/qnsi 0.3.4 → 0.4.0

package/CHANGELOG.md

@@ -43,7 +43,7 @@ The previous TypeScript SDK family was fragmented across 11 packages (`@heossi/q
 
 ### Added
 
-- `QnspClient({ apiKey, baseUrl?, timeoutMs? })` — top-level client. Lazily activates against `/billing/v1/sdk/activate` on first request, reports `sdkId="qnsp"` and `sdkVersion="0.1.0"`.
+- `QnsiClient({ apiKey, baseUrl?, timeoutMs? })` — top-level client. Lazily activates against `/billing/v1/sdk/activate` on first request, reports `sdkId="qnsp"` and `sdkVersion="0.1.0"`.
 - Eleven service sub-clients sharing one HTTP pool + one activation cache:
   - `qnsp.vault` (createSecret / getSecret / getSecretVersion / rotateSecret / deleteSecret / listSecretVersions)
   - `qnsp.kms` (createKey / listKeys / getKey / rotateKey / deleteKey / sign / verify / wrap / unwrap)

package/README.md

@@ -12,9 +12,9 @@ The official **single-package** Node.js / TypeScript SDK for QNSI. Covers the fu
 Previous TypeScript consumers had to install up to 11 separate `@heossi/qnsi-*-sdk` packages and keep their versions in sync. `@heossi/qnsi` collapses that into a single dependency with sub-namespaces:
 
 ```ts
-import { QnspClient } from "@heossi/qnsi";
+import { QnsiClient } from "@heossi/qnsi";
 
-const qnsp = new QnspClient({ apiKey: process.env.QNSP_API_KEY! });
+const qnsp = new QnsiClient({ apiKey: process.env.QNSP_API_KEY! });
 
 await qnsp.vault.createSecret({ ... });   // was @heossi/qnsi-vault-sdk
 await qnsp.kms.sign(keyId, data);          // was @heossi/qnsi-kms-client
@@ -40,9 +40,9 @@ Requires Node.js ≥ 22.0.0. ESM-first; CommonJS consumers can `await import("@h
 ## Quick start
 
 ```ts
-import { QnspClient } from "@heossi/qnsi";
+import { QnsiClient } from "@heossi/qnsi";
 
-const qnsp = new QnspClient({ apiKey: process.env.QNSP_API_KEY! });
+const qnsp = new QnsiClient({ apiKey: process.env.QNSP_API_KEY! });
 
 // Vault — PQC-encrypted secret storage
 const secret = await qnsp.vault.createSecret({
@@ -142,7 +142,7 @@ try {
 
 ## Activation + tier introspection
 
-`QnspClient` performs a one-shot handshake against `/billing/v1/sdk/activate` on first use. The result is cached in memory; subsequent calls reuse it until ~60 s before expiry. You can inspect the current activation:
+`QnsiClient` performs a one-shot handshake against `/billing/v1/sdk/activate` on first use. The result is cached in memory; subsequent calls reuse it until ~60 s before expiry. You can inspect the current activation:
 
 ```ts
 await qnsp.tenantId();      // resolved tenant
@@ -162,7 +162,7 @@ The per-service `@heossi/qnsi-*-sdk` packages on npm are now **deprecated** in f
 
 | Before | After |
 |---|---|
-| `import { VaultClient } from "@heossi/qnsi-vault-sdk"` | `import { QnspClient } from "@heossi/qnsi"` then `qnsp.vault` |
+| `import { VaultClient } from "@heossi/qnsi-vault-sdk"` | `import { QnsiClient } from "@heossi/qnsi"` then `qnsp.vault` |
 | `import { KmsClient } from "@heossi/qnsi-kms-client"` | `qnsp.kms` |
 | `import { AuthClient } from "@heossi/qnsi-auth-sdk"` | `qnsp.auth` |
 | `import { TenantClient } from "@heossi/qnsi-tenant-sdk"` | `qnsp.tenant` |
@@ -187,9 +187,9 @@ const kms   = new KmsClient({   apiKey, baseUrl: "https://api.qnsi.heossi.com/pr
 const audit = new AuditClient({ apiKey, baseUrl: "https://api.qnsi.heossi.com/proxy/audit", tier });
 
 // After — one package, one activation, one client
-import { QnspClient } from "@heossi/qnsi";
+import { QnsiClient } from "@heossi/qnsi";
 
-const qnsp = new QnspClient({ apiKey });
+const qnsp = new QnsiClient({ apiKey });
 // qnsp.vault, qnsp.kms, qnsp.audit, ... all share one connection pool + one activation cache
 ```
 

package/dist/_internal.d.ts

@@ -1,15 +1,15 @@
 /**
  * Shared HTTP plumbing + activation cache.
  *
- * Internal — consumers should reach this only via `QnspClient`. Each
+ * Internal — consumers should reach this only via `QnsiClient`. Each
  * service module (vault, kms, audit, …) takes an `Internal` instance
  * in its constructor and calls `internal.request(method, path, …)`.
  */
 import { type SdkActivationResponse } from "./_activation/index.js";
 export declare const SDK_ID = "qnsp";
 export declare const SDK_VERSION = "0.3.0";
-/** Public configuration accepted by `new QnspClient(opts)`. */
-export interface QnspClientOptions {
+/** Public configuration accepted by `new QnsiClient(opts)`. */
+export interface QnsiClientOptions {
     /** API key issued from <https://cloud.qnsi.heossi.com/api-keys>. Required. */
     readonly apiKey: string;
     /** Override the QNSP edge-gateway URL. Defaults to https://api.qnsi.heossi.com. */
@@ -28,7 +28,7 @@ export declare class Internal {
     readonly apiKey: string;
     private cached;
     private activationPromise;
-    constructor(opts: QnspClientOptions);
+    constructor(opts: QnsiClientOptions);
     /** Force the activation handshake to run now. */
     ensureActivated(): Promise<SdkActivationResponse>;
     /** The activated tenant id (for endpoints that require the tenant in the URL path). */

package/dist/_internal.js

@@ -1,14 +1,14 @@
 /**
  * Shared HTTP plumbing + activation cache.
  *
- * Internal — consumers should reach this only via `QnspClient`. Each
+ * Internal — consumers should reach this only via `QnsiClient`. Each
  * service module (vault, kms, audit, …) takes an `Internal` instance
  * in its constructor and calls `internal.request(method, path, …)`.
  */
 import { activateSdk } from "./_activation/index.js";
-import { QnspApiError, QnspAuthError, QnspNetworkError } from "./errors.js";
+import { QnsiApiError, QnsiAuthError, QnsiNetworkError } from "./errors.js";
 export const SDK_ID = "qnsp";
-// Bump in lockstep with packages/qnsp/package.json `version` (activation
+// Bump in lockstep with packages/qnsi/package.json `version` (activation
 // telemetry label). Same release contract as browser/sdk-package-version.ts.
 export const SDK_VERSION = "0.3.0";
 const DEFAULT_BASE_URL = "https://api.qnsi.heossi.com";
@@ -22,7 +22,7 @@ export class Internal {
     activationPromise = null;
     constructor(opts) {
         if (!opts.apiKey || opts.apiKey.trim().length === 0) {
-            throw new QnspAuthError("api key required (sign up at https://cloud.qnsi.heossi.com/auth)");
+            throw new QnsiAuthError("api key required (sign up at https://cloud.qnsi.heossi.com/auth)");
         }
         this.apiKey = opts.apiKey;
         this.baseUrl = (opts.baseUrl ?? DEFAULT_BASE_URL).replace(/\/$/, "");
@@ -107,7 +107,7 @@ export class Internal {
             return JSON.parse(text);
         }
         catch {
-            throw new QnspApiError("response is not valid JSON", response.status);
+            throw new QnsiApiError("response is not valid JSON", response.status);
         }
     }
     async send(method, path, body, options) {
@@ -131,7 +131,7 @@ export class Internal {
             return await fetch(url, init);
         }
         catch (err) {
-            throw new QnspNetworkError(method, url, err);
+            throw new QnsiNetworkError(method, url, err);
         }
         finally {
             clearTimeout(timer);
@@ -218,7 +218,7 @@ function parseApiError(status, raw) {
     else if (typeof raw === "string" && raw.length > 0) {
         message = raw;
     }
-    return new QnspApiError(message, status, code, body);
+    return new QnsiApiError(message, status, code, body);
 }
 function parseExpiresAt(response) {
     const { expiresAt } = response;

package/dist/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,qBAAa,WAAW;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI5E,YAAY,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI9F,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;CAG1C"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AA+BD,qBAAa,WAAW;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI5E,YAAY,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAS9F,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;CAG1C"}

package/dist/audit.js

@@ -3,16 +3,40 @@
  * `apps/audit-service` (`/audit/v1`).
  */
 const PATH_PREFIX = "/proxy/audit/v1";
+/**
+ * Translate the ergonomic SDK event into the wire shape the audit-service
+ * actually accepts. This is the contract-translation boundary — callers keep
+ * passing `{ eventType, payload, tags }` unchanged.
+ *
+ * `normalizeBatch` (`apps/audit-service/src/services/audit-service.ts`) matches
+ * one of three strict schemas. The `_internal` client injects a top-level
+ * `tenantId` into every body, which **fails** the `legacyAttestation` schema
+ * (`{ eventType, timestamp?, severity?, payload? }`, `.strict()` → rejects
+ * `tenantId` → 0 events → HTTP 400). The only path that tolerates the injected
+ * `tenantId` is `legacySecurityAuditClientEventSchema`, which carries
+ * `{ eventType?, source?, tenantId?, details?, … }` and maps `details` → the
+ * stored event `payload` (and honours `tenantId` for tenant-scoping). So the
+ * caller's `payload` goes into `details`, and `tags` rides alongside as
+ * `details.tags`. Verified live: `{tenantId,eventType,source,details}` → 202;
+ * `{tenantId,eventType,payload}` → 400.
+ */
+function toWireEvent(req) {
+    const details = { ...req.payload };
+    if (req.tags && req.tags.length > 0) {
+        details["tags"] = [...req.tags];
+    }
+    return { eventType: req.eventType, source: "qnsi-sdk", details };
+}
 export class AuditClient {
     internal;
     constructor(internal) {
         this.internal = internal;
     }
     logEvent(req, opts) {
-        return this.internal.request("POST", `${PATH_PREFIX}/events`, req, opts);
+        return this.internal.request("POST", `${PATH_PREFIX}/events`, toWireEvent(req), opts);
     }
     ingestEvents(events, opts) {
-        return this.internal.request("POST", `${PATH_PREFIX}/events/batch`, { events }, opts);
+        return this.internal.request("POST", `${PATH_PREFIX}/events/batch`, { events: events.map(toWireEvent) }, opts);
     }
     listEvents(query) {
         return this.internal.request("GET", `${PATH_PREFIX}/events`, undefined, { query });

package/dist/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAQtC,MAAM,OAAO,WAAW;IACM;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,QAAQ,CAAC,GAAoB,EAAE,IAA6C;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,YAAY,CAAC,MAAkC,EAAE,IAA6C;QAC7F,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAED,UAAU,CAAC,KAA+B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;CACD"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAQtC;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,WAAW,CAAC,GAAoB;IAKxC,MAAM,OAAO,GAA4B,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5D,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,OAAO,WAAW;IACM;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,QAAQ,CAAC,GAAoB,EAAE,IAA6C;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAED,YAAY,CAAC,MAAkC,EAAE,IAA6C;QAC7F,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAC3B,MAAM,EACN,GAAG,WAAW,eAAe,EAC7B,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EACnC,IAAI,CACJ,CAAC;IACH,CAAC;IAED,UAAU,CAAC,KAA+B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;CACD"}

package/dist/autogen/executor.d.ts

@@ -86,7 +86,7 @@ export interface WorkloadDetail extends WorkloadSummary {
     readonly artifacts: readonly WorkloadArtifactBinding[];
     readonly schedulerMetadata: Record<string, unknown> | null;
 }
-export interface QnspExecutorConfig {
+export interface QnsiExecutorConfig {
     /**
      * QNSP API key. Get one at https://cloud.qnsi.heossi.com/api-keys
      * The API key carries the tenant ID — no separate tenantId needed.
@@ -182,16 +182,16 @@ export interface ExecuteCodeResult {
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('hi')", language: "python" });
  * console.log(result.status, result.attestationProof);
  * ```
  */
-export declare class QnspExecutor {
+export declare class QnsiExecutor {
     #private;
-    constructor(config: QnspExecutorConfig);
+    constructor(config: QnsiExecutorConfig);
     /**
      * Execute code inside a QNSP enclave and wait for the result.
      */

package/dist/autogen/executor.js

@@ -47,20 +47,20 @@ const LANGUAGE_COMMANDS = {
     bash: ["bash", "-c"],
     javascript: ["node", "-e"],
 };
-// ─── QnspExecutor ─────────────────────────────────────────────────────────────
+// ─── QnsiExecutor ─────────────────────────────────────────────────────────────
 /**
  * AutoGen-compatible code executor backed by QNSP AI orchestrator enclaves.
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('hi')", language: "python" });
  * console.log(result.status, result.attestationProof);
  * ```
  */
-export class QnspExecutor {
+export class QnsiExecutor {
     #apiKey;
     #baseUrl;
     #containerImage;

package/dist/autogen/index.d.ts

@@ -7,12 +7,12 @@
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('Hello')", language: "python" });
  * ```
  */
-export type { ExecuteCodeRequest, ExecuteCodeResult, QnspExecutorConfig, SubmitWorkloadRequest, WorkloadDetail, WorkloadStatus, } from "./executor.js";
-export { QnspExecutor } from "./executor.js";
+export type { ExecuteCodeRequest, ExecuteCodeResult, QnsiExecutorConfig, SubmitWorkloadRequest, WorkloadDetail, WorkloadStatus, } from "./executor.js";
+export { QnsiExecutor } from "./executor.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/autogen/index.js

@@ -7,11 +7,11 @@
  *
  * @example
  * ```typescript
- * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ * import { QnsiExecutor } from "@heossi/qnsi/autogen";
  *
- * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const executor = new QnsiExecutor({ apiKey: process.env.QNSP_API_KEY });
  * const result = await executor.execute({ code: "print('Hello')", language: "python" });
  * ```
  */
-export { QnspExecutor } from "./executor.js";
+export { QnsiExecutor } from "./executor.js";
 //# sourceMappingURL=index.js.map

package/dist/browser/sdk-package-version.d.ts

@@ -6,7 +6,7 @@
  * must stay browser-safe — no `node:fs` runtime read — and a static JSON
  * import would resolve outside the package `rootDir` (TS6059). This mirrors
  * the same release-bump contract as `SDK_VERSION` in `../_internal.ts`:
- * **bump this in lockstep with `packages/qnsp/package.json` `version`.**
+ * **bump this in lockstep with `packages/qnsi/package.json` `version`.**
  */
 export declare const SDK_PACKAGE_VERSION = "0.3.0";
 //# sourceMappingURL=sdk-package-version.d.ts.map

package/dist/browser/sdk-package-version.js

@@ -6,7 +6,7 @@
  * must stay browser-safe — no `node:fs` runtime read — and a static JSON
  * import would resolve outside the package `rootDir` (TS6059). This mirrors
  * the same release-bump contract as `SDK_VERSION` in `../_internal.ts`:
- * **bump this in lockstep with `packages/qnsp/package.json` `version`.**
+ * **bump this in lockstep with `packages/qnsi/package.json` `version`.**
  */
 export const SDK_PACKAGE_VERSION = "0.3.0";
 //# sourceMappingURL=sdk-package-version.js.map

package/dist/client.d.ts

@@ -8,7 +8,7 @@
  * SDK shape byte-for-byte.
  */
 import type { SdkActivationResponse } from "./_activation/index.js";
-import { type QnspClientOptions } from "./_internal.js";
+import { type QnsiClientOptions } from "./_internal.js";
 import { AccessClient } from "./access.js";
 import { AiClient } from "./ai.js";
 import { AuditClient } from "./audit.js";
@@ -20,7 +20,7 @@ import { SearchClient } from "./search.js";
 import { StorageClient } from "./storage.js";
 import { TenantClient } from "./tenant.js";
 import { VaultClient } from "./vault.js";
-export declare class QnspClient {
+export declare class QnsiClient {
     readonly vault: VaultClient;
     readonly kms: KmsClient;
     readonly audit: AuditClient;
@@ -33,7 +33,7 @@ export declare class QnspClient {
     readonly search: SearchClient;
     readonly ai: AiClient;
     private readonly internal;
-    constructor(options: QnspClientOptions);
+    constructor(options: QnsiClientOptions);
     /**
      * Force the activation handshake to run now. Surfaces invalid-API-key
      * errors at startup rather than on the first service call.
@@ -48,5 +48,5 @@ export declare class QnspClient {
     /** Whether the tenant's plan enables a billing-side boolean feature. */
     hasFeature(feature: string): Promise<boolean>;
 }
-export type { QnspClientOptions } from "./_internal.js";
+export type { QnsiClientOptions } from "./_internal.js";
 //# sourceMappingURL=client.d.ts.map

package/dist/client.js

@@ -19,7 +19,7 @@ import { SearchClient } from "./search.js";
 import { StorageClient } from "./storage.js";
 import { TenantClient } from "./tenant.js";
 import { VaultClient } from "./vault.js";
-export class QnspClient {
+export class QnsiClient {
     vault;
     kms;
     audit;

package/dist/errors.d.ts

@@ -6,29 +6,29 @@
  * the failure mode without parsing error messages.
  */
 /** Base class — all QNSP SDK errors inherit. */
-export declare class QnspError extends Error {
+export declare class QnsiError extends Error {
     constructor(message: string, options?: ErrorOptions);
 }
 /** DNS, TLS, timeout, or connection failure reaching the QNSP edge gateway. */
-export declare class QnspNetworkError extends QnspError {
+export declare class QnsiNetworkError extends QnsiError {
     readonly op: string;
     readonly url: string;
     constructor(op: string, url: string, cause?: unknown);
 }
 /** API key rejected at activation. */
-export declare class QnspAuthError extends QnspError {
+export declare class QnsiAuthError extends QnsiError {
     readonly code: string | null;
     constructor(message: string, code?: string | null);
 }
 /** A QNSP service returned a 4xx/5xx with a structured body. */
-export declare class QnspApiError extends QnspError {
+export declare class QnsiApiError extends QnsiError {
     readonly statusCode: number;
     readonly code: string | null;
     readonly body: unknown;
     constructor(message: string, statusCode: number, code?: string | null, body?: unknown);
 }
 /** HMAC mismatch, expired/future timestamp, malformed body, or missing fields. */
-export declare class QnspWebhookError extends QnspError {
+export declare class QnsiWebhookError extends QnsiError {
     readonly reason: string;
     constructor(reason: string);
 }

package/dist/errors.js

@@ -6,51 +6,51 @@
  * the failure mode without parsing error messages.
  */
 /** Base class — all QNSP SDK errors inherit. */
-export class QnspError extends Error {
+export class QnsiError extends Error {
     constructor(message, options) {
         super(message, options);
-        this.name = "QnspError";
+        this.name = "QnsiError";
     }
 }
 /** DNS, TLS, timeout, or connection failure reaching the QNSP edge gateway. */
-export class QnspNetworkError extends QnspError {
+export class QnsiNetworkError extends QnsiError {
     op;
     url;
     constructor(op, url, cause) {
         super(`qnsp: network error on ${op} ${url}: ${stringifyCause(cause)}`, { cause });
-        this.name = "QnspNetworkError";
+        this.name = "QnsiNetworkError";
         this.op = op;
         this.url = url;
     }
 }
 /** API key rejected at activation. */
-export class QnspAuthError extends QnspError {
+export class QnsiAuthError extends QnsiError {
     code;
     constructor(message, code = null) {
         super(`qnsp: auth error${code ? ` (${code})` : ""}: ${message}`);
-        this.name = "QnspAuthError";
+        this.name = "QnsiAuthError";
         this.code = code;
     }
 }
 /** A QNSP service returned a 4xx/5xx with a structured body. */
-export class QnspApiError extends QnspError {
+export class QnsiApiError extends QnsiError {
     statusCode;
     code;
     body;
     constructor(message, statusCode, code = null, body = null) {
         super(`qnsp: api error ${statusCode}${code ? ` ${code}` : ""}: ${message}`);
-        this.name = "QnspApiError";
+        this.name = "QnsiApiError";
         this.statusCode = statusCode;
         this.code = code;
         this.body = body;
     }
 }
 /** HMAC mismatch, expired/future timestamp, malformed body, or missing fields. */
-export class QnspWebhookError extends QnspError {
+export class QnsiWebhookError extends QnsiError {
     reason;
     constructor(reason) {
         super(`qnsp: webhook error: ${reason}`);
-        this.name = "QnspWebhookError";
+        this.name = "QnsiWebhookError";
         this.reason = reason;
     }
 }

package/dist/index.d.ts

@@ -38,13 +38,33 @@ export { AiClient, type InferenceRequest, type RegisterArtifactRequest, type Reg
 export { AuditClient, type LogEventRequest } from "./audit.js";
 export { AuthClient, type LoginRequest } from "./auth.js";
 export { BillingClient, type IngestMeterRequest } from "./billing.js";
-export { QnspClient, QnspClient as QnsiClient, type QnspClientOptions, type QnspClientOptions as QnsiClientOptions, } from "./client.js";
+export { QnsiClient, 
+/** @deprecated Use `QnsiClient`. Kept for pre-rebrand consumers. */
+QnsiClient as QnspClient, type QnsiClientOptions, 
+/** @deprecated Use `QnsiClientOptions`. */
+type QnsiClientOptions as QnspClientOptions, } from "./client.js";
 export { CryptoInventoryClient, type DiscoverAssetsRequest } from "./crypto-inventory.js";
-export { QnspApiError, QnspAuthError, QnspError, QnspNetworkError, QnspWebhookError, } from "./errors.js";
+export { QnsiApiError, 
+/** @deprecated Use `QnsiApiError`. */
+QnsiApiError as QnspApiError, QnsiAuthError, 
+/** @deprecated Use `QnsiAuthError`. */
+QnsiAuthError as QnspAuthError, QnsiError, 
+/** @deprecated Use `QnsiError`. */
+QnsiError as QnspError, QnsiNetworkError, 
+/** @deprecated Use `QnsiNetworkError`. */
+QnsiNetworkError as QnspNetworkError, QnsiWebhookError, 
+/** @deprecated Use `QnsiWebhookError`. */
+QnsiWebhookError as QnspWebhookError, } from "./errors.js";
 export { type CreateKeyRequest, KmsClient } from "./kms.js";
 export { type CreateIndexRequest, type QueryRequest, SearchClient, type Vector, } from "./search.js";
 export { type PutObjectInput, StorageClient } from "./storage.js";
 export { type CreateTenantRequest, TenantClient } from "./tenant.js";
 export { type CreateSecretRequest, VaultClient } from "./vault.js";
-export { MAX_WEBHOOK_SKEW_MS, parseQnspWebhook, type QnspWebhookEvent, verifyQnspWebhookSignature, } from "./webhooks.js";
+export { MAX_WEBHOOK_SKEW_MS, parseQnsiWebhook, 
+/** @deprecated Use `parseQnsiWebhook`. */
+parseQnsiWebhook as parseQnspWebhook, type QnsiWebhookEvent, 
+/** @deprecated Use `QnsiWebhookEvent`. */
+type QnsiWebhookEvent as QnspWebhookEvent, verifyQnsiWebhookSignature, 
+/** @deprecated Use `verifyQnsiWebhookSignature`. */
+verifyQnsiWebhookSignature as verifyQnspWebhookSignature, } from "./webhooks.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACN,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,QAAQ,EACR,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC1B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGtE,OAAO,EACN,UAAU,EACV,UAAU,IAAI,UAAU,EACxB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,IAAI,iBAAiB,GAC3C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EACN,YAAY,EACZ,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,gBAAgB,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,gBAAgB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EACN,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,YAAY,EACZ,KAAK,MAAM,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,KAAK,mBAAmB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,KAAK,mBAAmB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EACN,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,0BAA0B,GAC1B,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACN,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,QAAQ,EACR,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC1B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGtE,OAAO,EACN,UAAU;AACV,oEAAoE;AACpE,UAAU,IAAI,UAAU,EACxB,KAAK,iBAAiB;AACtB,2CAA2C;AAC3C,KAAK,iBAAiB,IAAI,iBAAiB,GAC3C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EACN,YAAY;AACZ,sCAAsC;AACtC,YAAY,IAAI,YAAY,EAC5B,aAAa;AACb,uCAAuC;AACvC,aAAa,IAAI,aAAa,EAC9B,SAAS;AACT,mCAAmC;AACnC,SAAS,IAAI,SAAS,EACtB,gBAAgB;AAChB,0CAA0C;AAC1C,gBAAgB,IAAI,gBAAgB,EACpC,gBAAgB;AAChB,0CAA0C;AAC1C,gBAAgB,IAAI,gBAAgB,GACpC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,gBAAgB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EACN,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,YAAY,EACZ,KAAK,MAAM,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,KAAK,mBAAmB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAErE,OAAO,EAAE,KAAK,mBAAmB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EACN,mBAAmB,EACnB,gBAAgB;AAChB,0CAA0C;AAC1C,gBAAgB,IAAI,gBAAgB,EACpC,KAAK,gBAAgB;AACrB,0CAA0C;AAC1C,KAAK,gBAAgB,IAAI,gBAAgB,EACzC,0BAA0B;AAC1B,oDAAoD;AACpD,0BAA0B,IAAI,0BAA0B,GACxD,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -39,15 +39,31 @@ export { AuditClient } from "./audit.js";
 export { AuthClient } from "./auth.js";
 export { BillingClient } from "./billing.js";
 // QnsiClient is the canonical name (product is QNSI). QnspClient is kept as a
-// back-compat alias for consumers on the pre-rebrand name.
-export { QnspClient, QnspClient as QnsiClient, } from "./client.js";
+// @deprecated back-compat alias for consumers on the pre-rebrand name.
+export { QnsiClient, 
+/** @deprecated Use `QnsiClient`. Kept for pre-rebrand consumers. */
+QnsiClient as QnspClient, } from "./client.js";
 export { CryptoInventoryClient } from "./crypto-inventory.js";
-export { QnspApiError, QnspAuthError, QnspError, QnspNetworkError, QnspWebhookError, } from "./errors.js";
+export { QnsiApiError, 
+/** @deprecated Use `QnsiApiError`. */
+QnsiApiError as QnspApiError, QnsiAuthError, 
+/** @deprecated Use `QnsiAuthError`. */
+QnsiAuthError as QnspAuthError, QnsiError, 
+/** @deprecated Use `QnsiError`. */
+QnsiError as QnspError, QnsiNetworkError, 
+/** @deprecated Use `QnsiNetworkError`. */
+QnsiNetworkError as QnspNetworkError, QnsiWebhookError, 
+/** @deprecated Use `QnsiWebhookError`. */
+QnsiWebhookError as QnspWebhookError, } from "./errors.js";
 export { KmsClient } from "./kms.js";
 export { SearchClient, } from "./search.js";
 export { StorageClient } from "./storage.js";
 export { TenantClient } from "./tenant.js";
 // Service classes — exported so callers can construct mocks for testing.
 export { VaultClient } from "./vault.js";
-export { MAX_WEBHOOK_SKEW_MS, parseQnspWebhook, verifyQnspWebhookSignature, } from "./webhooks.js";
+export { MAX_WEBHOOK_SKEW_MS, parseQnsiWebhook, 
+/** @deprecated Use `parseQnsiWebhook`. */
+parseQnsiWebhook as parseQnspWebhook, verifyQnsiWebhookSignature, 
+/** @deprecated Use `verifyQnsiWebhookSignature`. */
+verifyQnsiWebhookSignature as verifyQnspWebhookSignature, } from "./webhooks.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACN,YAAY,GAIZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,QAAQ,GAKR,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAwB,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAqB,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,aAAa,EAA2B,MAAM,cAAc,CAAC;AACtE,8EAA8E;AAC9E,2DAA2D;AAC3D,OAAO,EACN,UAAU,EACV,UAAU,IAAI,UAAU,GAGxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAA8B,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EACN,YAAY,EACZ,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,gBAAgB,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,SAAS,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAGN,YAAY,GAEZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAuB,aAAa,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAA4B,YAAY,EAAE,MAAM,aAAa,CAAC;AACrE,yEAAyE;AACzE,OAAO,EAA4B,WAAW,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EACN,mBAAmB,EACnB,gBAAgB,EAEhB,0BAA0B,GAC1B,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EACN,YAAY,GAIZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,QAAQ,GAKR,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,WAAW,EAAwB,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAqB,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,aAAa,EAA2B,MAAM,cAAc,CAAC;AACtE,8EAA8E;AAC9E,uEAAuE;AACvE,OAAO,EACN,UAAU;AACV,oEAAoE;AACpE,UAAU,IAAI,UAAU,GAIxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAA8B,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EACN,YAAY;AACZ,sCAAsC;AACtC,YAAY,IAAI,YAAY,EAC5B,aAAa;AACb,uCAAuC;AACvC,aAAa,IAAI,aAAa,EAC9B,SAAS;AACT,mCAAmC;AACnC,SAAS,IAAI,SAAS,EACtB,gBAAgB;AAChB,0CAA0C;AAC1C,gBAAgB,IAAI,gBAAgB,EACpC,gBAAgB;AAChB,0CAA0C;AAC1C,gBAAgB,IAAI,gBAAgB,GACpC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,SAAS,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAGN,YAAY,GAEZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAuB,aAAa,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAA4B,YAAY,EAAE,MAAM,aAAa,CAAC;AACrE,yEAAyE;AACzE,OAAO,EAA4B,WAAW,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EACN,mBAAmB,EACnB,gBAAgB;AAChB,0CAA0C;AAC1C,gBAAgB,IAAI,gBAAgB,EAIpC,0BAA0B;AAC1B,oDAAoD;AACpD,0BAA0B,IAAI,0BAA0B,GACxD,MAAM,eAAe,CAAC"}

package/dist/kms.js

@@ -2,7 +2,7 @@
  * QNSP KMS — server-side PQC keys with sign, verify, wrap, and unwrap.
  * Wraps `apps/kms-service` (`/kms/v1`).
  */
-import { QnspApiError } from "./errors.js";
+import { QnsiApiError } from "./errors.js";
 const PATH_PREFIX = "/proxy/kms/v1";
 export class KmsClient {
     internal;
@@ -45,7 +45,7 @@ export class KmsClient {
         const body = { data: encodeB64(data) };
         const resp = await this.internal.request("POST", `${PATH_PREFIX}/keys/${keyId}/sign`, body, opts);
         if (!resp.signature) {
-            throw new QnspApiError("kms.sign: response missing signature", 200);
+            throw new QnsiApiError("kms.sign: response missing signature", 200);
         }
         return decodeB64(resp.signature);
     }
@@ -65,7 +65,7 @@ export class KmsClient {
         const resp = await this.internal.request("POST", `${PATH_PREFIX}/keys/${keyId}/wrap`, body, opts);
         const wrapped = resp.wrappedKey ?? resp.ciphertextB64;
         if (!wrapped) {
-            throw new QnspApiError("kms.wrap: response missing wrappedKey/ciphertextB64", 200);
+            throw new QnsiApiError("kms.wrap: response missing wrappedKey/ciphertextB64", 200);
         }
         return decodeB64(wrapped);
     }
@@ -78,7 +78,7 @@ export class KmsClient {
         const resp = await this.internal.request("POST", `${PATH_PREFIX}/keys/${keyId}/unwrap`, body, opts);
         const unwrapped = resp.dataKey ?? resp.plaintextB64;
         if (!unwrapped) {
-            throw new QnspApiError("kms.unwrap: response missing dataKey/plaintextB64", 200);
+            throw new QnsiApiError("kms.unwrap: response missing dataKey/plaintextB64", 200);
         }
         return decodeB64(unwrapped);
     }

package/dist/langchain/index.d.ts

@@ -6,17 +6,17 @@
  *
  * @example
  * ```typescript
- * import { QnspToolkit } from "@heossi/qnsi-langchain-qnsp";
+ * import { QnsiToolkit } from "@heossi/qnsi-langchain-qnsp";
  *
- * const toolkit = new QnspToolkit({ apiKey: process.env.QNSP_API_KEY });
+ * const toolkit = new QnsiToolkit({ apiKey: process.env.QNSP_API_KEY });
  * const tools = toolkit.getTools();
  * ```
  */
-export type { QnspToolkitConfig } from "./toolkit.js";
-export { QnspToolkit } from "./toolkit.js";
-export type { QnspAuditToolConfig } from "./tools/audit.js";
-export { QnspLogAgentActionTool } from "./tools/audit.js";
-export type { QnspKmsToolConfig } from "./tools/kms.js";
-export { QnspSignDataTool, QnspVerifySignatureTool } from "./tools/kms.js";
-export { QnspReadSecretTool, QnspRotateSecretTool, QnspWriteSecretTool } from "./tools/vault.js";
+export type { QnsiToolkitConfig } from "./toolkit.js";
+export { QnsiToolkit } from "./toolkit.js";
+export type { QnsiAuditToolConfig } from "./tools/audit.js";
+export { QnsiLogAgentActionTool } from "./tools/audit.js";
+export type { QnsiKmsToolConfig } from "./tools/kms.js";
+export { QnsiSignDataTool, QnsiVerifySignatureTool } from "./tools/kms.js";
+export { QnsiReadSecretTool, QnsiRotateSecretTool, QnsiWriteSecretTool } from "./tools/vault.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/langchain/index.js

@@ -6,18 +6,18 @@
  *
  * @example
  * ```typescript
- * import { QnspToolkit } from "@heossi/qnsi-langchain-qnsp";
+ * import { QnsiToolkit } from "@heossi/qnsi-langchain-qnsp";
  *
- * const toolkit = new QnspToolkit({ apiKey: process.env.QNSP_API_KEY });
+ * const toolkit = new QnsiToolkit({ apiKey: process.env.QNSP_API_KEY });
  * const tools = toolkit.getTools();
  * ```
  */
 // Toolkit (recommended entry point)
-export { QnspToolkit } from "./toolkit.js";
+export { QnsiToolkit } from "./toolkit.js";
 // Individual audit tools
-export { QnspLogAgentActionTool } from "./tools/audit.js";
+export { QnsiLogAgentActionTool } from "./tools/audit.js";
 // Individual KMS tools
-export { QnspSignDataTool, QnspVerifySignatureTool } from "./tools/kms.js";
+export { QnsiSignDataTool, QnsiVerifySignatureTool } from "./tools/kms.js";
 // Individual vault tools
-export { QnspReadSecretTool, QnspRotateSecretTool, QnspWriteSecretTool } from "./tools/vault.js";
+export { QnsiReadSecretTool, QnsiRotateSecretTool, QnsiWriteSecretTool } from "./tools/vault.js";
 //# sourceMappingURL=index.js.map

package/dist/langchain/toolkit.d.ts

@@ -7,11 +7,11 @@
  *
  * @example
  * ```typescript
- * import { QnspToolkit } from "@heossi/qnsi-langchain-qnsp";
+ * import { QnsiToolkit } from "@heossi/qnsi-langchain-qnsp";
  * import { ChatOpenAI } from "@langchain/openai";
  * import { AgentExecutor, createToolCallingAgent } from "langchain/agents";
  *
- * const toolkit = new QnspToolkit({
+ * const toolkit = new QnsiToolkit({
  *   apiKey: process.env.QNSP_API_KEY,
  * });
  *
@@ -23,7 +23,7 @@
  * ```
  */
 import type { StructuredTool } from "@langchain/core/tools";
-export interface QnspToolkitConfig {
+export interface QnsiToolkitConfig {
     /**
      * QNSP API key. Get one at https://cloud.qnsi.heossi.com/api-keys
      * The API key carries the tenant ID — no separate tenantId needed.
@@ -58,9 +58,9 @@ export interface QnspToolkitConfig {
  * - KMS tools: sign and verify data with quantum-safe algorithms
  * - Audit tools: write immutable, PQC-signed audit events
  */
-export declare class QnspToolkit {
+export declare class QnsiToolkit {
     #private;
-    constructor(config: QnspToolkitConfig);
+    constructor(config: QnsiToolkitConfig);
     /**
      * One-shot activation handshake against billing-service. Validates the API
      * key, captures tenantId + tier, caches the activation token. Required:

package/dist/langchain/toolkit.js

@@ -7,11 +7,11 @@
  *
  * @example
  * ```typescript
- * import { QnspToolkit } from "@heossi/qnsi-langchain-qnsp";
+ * import { QnsiToolkit } from "@heossi/qnsi-langchain-qnsp";
  * import { ChatOpenAI } from "@langchain/openai";
  * import { AgentExecutor, createToolCallingAgent } from "langchain/agents";
  *
- * const toolkit = new QnspToolkit({
+ * const toolkit = new QnsiToolkit({
  *   apiKey: process.env.QNSP_API_KEY,
  * });
  *
@@ -23,9 +23,9 @@
  * ```
  */
 import { activateSdk } from "../_activation/index.js";
-import { QnspLogAgentActionTool } from "./tools/audit.js";
-import { QnspSignDataTool, QnspVerifySignatureTool } from "./tools/kms.js";
-import { QnspReadSecretTool, QnspRotateSecretTool, QnspWriteSecretTool } from "./tools/vault.js";
+import { QnsiLogAgentActionTool } from "./tools/audit.js";
+import { QnsiSignDataTool, QnsiVerifySignatureTool } from "./tools/kms.js";
+import { QnsiReadSecretTool, QnsiRotateSecretTool, QnsiWriteSecretTool } from "./tools/vault.js";
 import { VaultClient } from "./vault-client.js";
 const SDK_VERSION = "0.3.0";
 /**
@@ -36,7 +36,7 @@ const SDK_VERSION = "0.3.0";
  * - KMS tools: sign and verify data with quantum-safe algorithms
  * - Audit tools: write immutable, PQC-signed audit events
  */
-export class QnspToolkit {
+export class QnsiToolkit {
     #apiKey;
     #tenantId;
     #baseUrl;
@@ -111,9 +111,9 @@ export class QnspToolkit {
     getVaultTools() {
         this.#assertActivated();
         return [
-            new QnspReadSecretTool(this.#vaultClient),
-            new QnspWriteSecretTool(this.#vaultClient),
-            new QnspRotateSecretTool(this.#vaultClient),
+            new QnsiReadSecretTool(this.#vaultClient),
+            new QnsiWriteSecretTool(this.#vaultClient),
+            new QnsiRotateSecretTool(this.#vaultClient),
         ];
     }
     /** Returns only the KMS tools (sign, verify). */
@@ -125,7 +125,7 @@ export class QnspToolkit {
             tenantId: this.#tenantId,
             timeoutMs: this.#timeoutMs,
         };
-        return [new QnspSignDataTool(kmsConfig), new QnspVerifySignatureTool(kmsConfig)];
+        return [new QnsiSignDataTool(kmsConfig), new QnsiVerifySignatureTool(kmsConfig)];
     }
     /** Returns only the audit tool (log agent actions). */
     getAuditTools() {
@@ -136,7 +136,7 @@ export class QnspToolkit {
             tenantId: this.#tenantId,
             timeoutMs: this.#timeoutMs,
         };
-        return [new QnspLogAgentActionTool(auditConfig)];
+        return [new QnsiLogAgentActionTool(auditConfig)];
     }
     /** True once `activate()` has resolved successfully. */
     get isActivated() {

package/dist/langchain/tools/audit.d.ts

@@ -6,7 +6,7 @@
  */
 import { StructuredTool, type ToolParams } from "@langchain/core/tools";
 import { z } from "zod";
-export interface QnspAuditToolConfig {
+export interface QnsiAuditToolConfig {
     /** Base URL for the QNSP API (e.g. https://api.qnsi.heossi.com) */
     readonly baseUrl: string;
     /** API key or Bearer token for authentication */
@@ -26,7 +26,7 @@ declare const logAgentActionSchema: z.ZodObject<{
  * LangChain tool that writes an immutable, PQC-signed audit event to QNSP.
  * Use this to create a tamper-evident record of every significant agent action.
  */
-export declare class QnspLogAgentActionTool extends StructuredTool {
+export declare class QnsiLogAgentActionTool extends StructuredTool {
     #private;
     readonly name = "qnsp_log_agent_action";
     readonly description = "Write an immutable, PQC-signed audit event to QNSP. Creates a tamper-evident record of agent actions, decisions, tool calls, and outputs. Use this for compliance, governance, and traceability of agent behavior.";
@@ -36,7 +36,7 @@ export declare class QnspLogAgentActionTool extends StructuredTool {
         payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
-    constructor(config: QnspAuditToolConfig, fields?: ToolParams);
+    constructor(config: QnsiAuditToolConfig, fields?: ToolParams);
     protected _call(input: z.infer<typeof logAgentActionSchema>): Promise<string>;
 }
 export {};

package/dist/langchain/tools/audit.js

@@ -30,7 +30,7 @@ const logAgentActionSchema = z.object({
  * LangChain tool that writes an immutable, PQC-signed audit event to QNSP.
  * Use this to create a tamper-evident record of every significant agent action.
  */
-export class QnspLogAgentActionTool extends StructuredTool {
+export class QnsiLogAgentActionTool extends StructuredTool {
     name = "qnsp_log_agent_action";
     description = "Write an immutable, PQC-signed audit event to QNSP. Creates a tamper-evident record of agent actions, decisions, tool calls, and outputs. Use this for compliance, governance, and traceability of agent behavior.";
     schema = logAgentActionSchema;

package/dist/langchain/tools/kms.d.ts

@@ -6,7 +6,7 @@
  */
 import { StructuredTool, type ToolParams } from "@langchain/core/tools";
 import { z } from "zod";
-export interface QnspKmsToolConfig {
+export interface QnsiKmsToolConfig {
     /** Base URL for the QNSP API (e.g. https://api.qnsi.heossi.com) */
     readonly baseUrl: string;
     /** API key or Bearer token for authentication */
@@ -24,7 +24,7 @@ declare const signDataSchema: z.ZodObject<{
 /**
  * LangChain tool that signs data with a PQC key (ML-DSA / SLH-DSA / FN-DSA).
  */
-export declare class QnspSignDataTool extends StructuredTool {
+export declare class QnsiSignDataTool extends StructuredTool {
     #private;
     readonly name = "qnsp_sign_data";
     readonly description = "Sign data with a quantum-safe PQC key (ML-DSA, SLH-DSA, or FN-DSA). Returns a base64-encoded signature. Use this when an agent needs to cryptographically attest to data it produced or decisions it made.";
@@ -33,7 +33,7 @@ export declare class QnspSignDataTool extends StructuredTool {
         data: z.ZodString;
         context: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
-    constructor(config: QnspKmsToolConfig, fields?: ToolParams);
+    constructor(config: QnsiKmsToolConfig, fields?: ToolParams);
     protected _call(input: z.infer<typeof signDataSchema>): Promise<string>;
 }
 declare const verifySignatureSchema: z.ZodObject<{
@@ -45,7 +45,7 @@ declare const verifySignatureSchema: z.ZodObject<{
 /**
  * LangChain tool that verifies a PQC signature against data and a key.
  */
-export declare class QnspVerifySignatureTool extends StructuredTool {
+export declare class QnsiVerifySignatureTool extends StructuredTool {
     #private;
     readonly name = "qnsp_verify_signature";
     readonly description = "Verify a quantum-safe PQC signature. Returns true/false and the algorithm used. Use this when an agent needs to verify the authenticity of data or attestations from other agents or services.";
@@ -55,7 +55,7 @@ export declare class QnspVerifySignatureTool extends StructuredTool {
         signature: z.ZodString;
         context: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
-    constructor(config: QnspKmsToolConfig, fields?: ToolParams);
+    constructor(config: QnsiKmsToolConfig, fields?: ToolParams);
     protected _call(input: z.infer<typeof verifySignatureSchema>): Promise<string>;
 }
 export {};

package/dist/langchain/tools/kms.js

@@ -21,7 +21,7 @@ const signDataSchema = z.object({
 /**
  * LangChain tool that signs data with a PQC key (ML-DSA / SLH-DSA / FN-DSA).
  */
-export class QnspSignDataTool extends StructuredTool {
+export class QnsiSignDataTool extends StructuredTool {
     name = "qnsp_sign_data";
     description = "Sign data with a quantum-safe PQC key (ML-DSA, SLH-DSA, or FN-DSA). Returns a base64-encoded signature. Use this when an agent needs to cryptographically attest to data it produced or decisions it made.";
     schema = signDataSchema;
@@ -75,7 +75,7 @@ const verifySignatureSchema = z.object({
 /**
  * LangChain tool that verifies a PQC signature against data and a key.
  */
-export class QnspVerifySignatureTool extends StructuredTool {
+export class QnsiVerifySignatureTool extends StructuredTool {
     name = "qnsp_verify_signature";
     description = "Verify a quantum-safe PQC signature. Returns true/false and the algorithm used. Use this when an agent needs to verify the authenticity of data or attestations from other agents or services.";
     schema = verifySignatureSchema;

package/dist/langchain/tools/vault.d.ts

@@ -13,7 +13,7 @@ declare const readSecretSchema: z.ZodObject<{
 /**
  * LangChain tool that reads a PQC-encrypted secret from QNSP Vault.
  */
-export declare class QnspReadSecretTool extends StructuredTool {
+export declare class QnsiReadSecretTool extends StructuredTool {
     #private;
     readonly name = "qnsp_read_secret";
     readonly description = "Read a PQC-encrypted secret from QNSP Vault. Returns the secret name and encrypted envelope. Use this when an agent needs to retrieve a stored credential, API key, or sensitive value.";
@@ -32,7 +32,7 @@ declare const writeSecretSchema: z.ZodObject<{
 /**
  * LangChain tool that stores a PQC-encrypted secret in QNSP Vault.
  */
-export declare class QnspWriteSecretTool extends StructuredTool {
+export declare class QnsiWriteSecretTool extends StructuredTool {
     #private;
     readonly name = "qnsp_write_secret";
     readonly description = "Store a PQC-encrypted secret in QNSP Vault. The payload must be base64-encoded. Returns the created secret ID. Use this when an agent needs to persist a credential, token, or sensitive value securely.";
@@ -53,7 +53,7 @@ declare const rotateSecretSchema: z.ZodObject<{
 /**
  * LangChain tool that rotates a secret in QNSP Vault with a new value.
  */
-export declare class QnspRotateSecretTool extends StructuredTool {
+export declare class QnsiRotateSecretTool extends StructuredTool {
     #private;
     readonly name = "qnsp_rotate_secret";
     readonly description = "Rotate a secret in QNSP Vault with a new PQC-encrypted value. The previous version is retained for rollback. Use this when an agent needs to update a credential after rotation.";

package/dist/langchain/tools/vault.js

@@ -13,7 +13,7 @@ const readSecretSchema = z.object({
 /**
  * LangChain tool that reads a PQC-encrypted secret from QNSP Vault.
  */
-export class QnspReadSecretTool extends StructuredTool {
+export class QnsiReadSecretTool extends StructuredTool {
     name = "qnsp_read_secret";
     description = "Read a PQC-encrypted secret from QNSP Vault. Returns the secret name and encrypted envelope. Use this when an agent needs to retrieve a stored credential, API key, or sensitive value.";
     schema = readSecretSchema;
@@ -47,7 +47,7 @@ const writeSecretSchema = z.object({
 /**
  * LangChain tool that stores a PQC-encrypted secret in QNSP Vault.
  */
-export class QnspWriteSecretTool extends StructuredTool {
+export class QnsiWriteSecretTool extends StructuredTool {
     name = "qnsp_write_secret";
     description = "Store a PQC-encrypted secret in QNSP Vault. The payload must be base64-encoded. Returns the created secret ID. Use this when an agent needs to persist a credential, token, or sensitive value securely.";
     schema = writeSecretSchema;
@@ -81,7 +81,7 @@ const rotateSecretSchema = z.object({
 /**
  * LangChain tool that rotates a secret in QNSP Vault with a new value.
  */
-export class QnspRotateSecretTool extends StructuredTool {
+export class QnsiRotateSecretTool extends StructuredTool {
     name = "qnsp_rotate_secret";
     description = "Rotate a secret in QNSP Vault with a new PQC-encrypted value. The previous version is retained for rollback. Use this when an agent needs to update a credential after rotation.";
     schema = rotateSecretSchema;

package/dist/langchain/vault-client.d.ts

@@ -6,7 +6,7 @@
  * consolidation): Bearer auth, `x-qnsp-tenant-id` header, 429 retry with
  * exponential backoff + `Retry-After`, per-request timeout, `Vault API
  * error: <status> <statusText>` on failure. Endpoints and request/response
- * shapes are byte-for-byte preserved. Activation is owned by `QnspToolkit`
+ * shapes are byte-for-byte preserved. Activation is owned by `QnsiToolkit`
  * (single `langchain-qnsp` handshake); the resolved tenant id is injected via
  * {@link VaultClient.setTenantId} — so this subpath has no `@heossi/qnsi-*`
  * workspace dependency (same pattern as `../_activation`).

package/dist/langchain/vault-client.js

@@ -6,7 +6,7 @@
  * consolidation): Bearer auth, `x-qnsp-tenant-id` header, 429 retry with
  * exponential backoff + `Retry-After`, per-request timeout, `Vault API
  * error: <status> <statusText>` on failure. Endpoints and request/response
- * shapes are byte-for-byte preserved. Activation is owned by `QnspToolkit`
+ * shapes are byte-for-byte preserved. Activation is owned by `QnsiToolkit`
  * (single `langchain-qnsp` handshake); the resolved tenant id is injected via
  * {@link VaultClient.setTenantId} — so this subpath has no `@heossi/qnsi-*`
  * workspace dependency (same pattern as `../_activation`).

package/dist/llamaindex/index.d.ts

@@ -6,11 +6,11 @@
  *
  * @example
  * ```typescript
- * import { QnspVectorStore } from "@heossi/qnsi/llamaindex";
+ * import { QnsiVectorStore } from "@heossi/qnsi/llamaindex";
  *
- * const store = new QnspVectorStore({ apiKey: process.env.QNSP_API_KEY });
+ * const store = new QnsiVectorStore({ apiKey: process.env.QNSP_API_KEY });
  * ```
  */
-export type { QnspVectorStoreConfig, SearchSecurityEnvelope, TextNode, VectorStoreQuery, VectorStoreQueryResult, } from "./vector-store.js";
-export { QnspVectorStore } from "./vector-store.js";
+export type { QnsiVectorStoreConfig, SearchSecurityEnvelope, TextNode, VectorStoreQuery, VectorStoreQueryResult, } from "./vector-store.js";
+export { QnsiVectorStore } from "./vector-store.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/llamaindex/index.js

@@ -6,10 +6,10 @@
  *
  * @example
  * ```typescript
- * import { QnspVectorStore } from "@heossi/qnsi/llamaindex";
+ * import { QnsiVectorStore } from "@heossi/qnsi/llamaindex";
  *
- * const store = new QnspVectorStore({ apiKey: process.env.QNSP_API_KEY });
+ * const store = new QnsiVectorStore({ apiKey: process.env.QNSP_API_KEY });
  * ```
  */
-export { QnspVectorStore } from "./vector-store.js";
+export { QnsiVectorStore } from "./vector-store.js";
 //# sourceMappingURL=index.js.map

package/dist/llamaindex/vector-store.d.ts

@@ -42,7 +42,7 @@ export interface VectorStoreQueryResult {
     readonly similarities: number[];
     readonly ids: string[];
 }
-export interface QnspVectorStoreConfig {
+export interface QnsiVectorStoreConfig {
     /**
      * QNSP API key. Get one at https://cloud.qnsi.heossi.com/api-keys
      * The API key carries the tenant ID internally — no separate tenantId needed.
@@ -70,16 +70,16 @@ export interface QnspVectorStoreConfig {
  *
  * @example
  * ```typescript
- * import { QnspVectorStore } from "@heossi/qnsi/llamaindex";
+ * import { QnsiVectorStore } from "@heossi/qnsi/llamaindex";
  *
- * const store = new QnspVectorStore({ apiKey: process.env.QNSP_API_KEY });
+ * const store = new QnsiVectorStore({ apiKey: process.env.QNSP_API_KEY });
  * await store.add([{ id_: "doc-1", text: "Quantum-safe overview", metadata: {} }]);
  * const result = await store.query({ queryStr: "post-quantum cryptography" });
  * ```
  */
-export declare class QnspVectorStore {
+export declare class QnsiVectorStore {
     #private;
-    constructor(config: QnspVectorStoreConfig);
+    constructor(config: QnsiVectorStoreConfig);
     /**
      * Add nodes to the QNSP encrypted search index. Returns indexed node IDs.
      */

package/dist/llamaindex/vector-store.js

@@ -212,20 +212,20 @@ class SearchTransport {
         });
     }
 }
-// ─── QnspVectorStore ──────────────────────────────────────────────────────────
+// ─── QnsiVectorStore ──────────────────────────────────────────────────────────
 /**
  * LlamaIndex-compatible vector store backed by QNSP encrypted search (SSE-X).
  *
  * @example
  * ```typescript
- * import { QnspVectorStore } from "@heossi/qnsi/llamaindex";
+ * import { QnsiVectorStore } from "@heossi/qnsi/llamaindex";
  *
- * const store = new QnspVectorStore({ apiKey: process.env.QNSP_API_KEY });
+ * const store = new QnsiVectorStore({ apiKey: process.env.QNSP_API_KEY });
  * await store.add([{ id_: "doc-1", text: "Quantum-safe overview", metadata: {} }]);
  * const result = await store.query({ queryStr: "post-quantum cryptography" });
  * ```
  */
-export class QnspVectorStore {
+export class QnsiVectorStore {
     #transport;
     #sourceService;
     #apiKey;

package/dist/storage.d.ts

@@ -20,7 +20,7 @@ export declare class StorageClient {
     constructor(internal: Internal);
     putObject(bucket: string, key: string, input: PutObjectInput, opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
     /**
-     * Returns `[plaintext bytes, descriptor JSON]`. Throws `QnspApiError`
+     * Returns `[plaintext bytes, descriptor JSON]`. Throws `QnsiApiError`
      * if the descriptor is missing the dataB64 field.
      */
     getObject(bucket: string, key: string): Promise<readonly [Uint8Array, GetObjectResponse]>;

package/dist/storage.js

@@ -4,7 +4,7 @@
  * (apps/storage-service/src/routes/bucket-objects.ts) and reached via the edge gateway's
  * `/proxy/storage` prefix (rewritten to `/storage`).
  */
-import { QnspApiError } from "./errors.js";
+import { QnsiApiError } from "./errors.js";
 // Edge gateway rewrites /proxy/storage -> /storage, so this resolves to the backend's
 // /storage/v1/buckets/* routes. (Was /proxy/storage/storage/v1 — a double "storage" that
 // rewrote to /storage/storage/v1, which the backend never served, so every call 404'd.)
@@ -27,13 +27,13 @@ export class StorageClient {
         return this.internal.request("PUT", `${PATH_PREFIX}/buckets/${bucket}/objects/${key}`, body, opts);
     }
     /**
-     * Returns `[plaintext bytes, descriptor JSON]`. Throws `QnspApiError`
+     * Returns `[plaintext bytes, descriptor JSON]`. Throws `QnsiApiError`
      * if the descriptor is missing the dataB64 field.
      */
     async getObject(bucket, key) {
         const resp = await this.internal.request("GET", `${PATH_PREFIX}/buckets/${bucket}/objects/${key}`);
         if (!resp.dataB64) {
-            throw new QnspApiError("storage.getObject: response missing dataB64", 200);
+            throw new QnsiApiError("storage.getObject: response missing dataB64", 200);
         }
         return [decodeB64(resp.dataB64), resp];
     }

package/dist/webhooks.d.ts

@@ -6,7 +6,7 @@
  */
 /** Default replay-protection window — 5 minutes. */
 export declare const MAX_WEBHOOK_SKEW_MS: number;
-export interface QnspWebhookEvent {
+export interface QnsiWebhookEvent {
     readonly eventType: string;
     readonly eventId: string;
     readonly occurredAt: string;
@@ -16,17 +16,17 @@ export interface QnspWebhookEvent {
  * Constant-time HMAC-SHA-256 verification. The header must be of the
  * form `sha256=<hex>`.
  */
-export declare function verifyQnspWebhookSignature(body: Uint8Array | string, signatureHeader: string, secret: string): void;
+export declare function verifyQnsiWebhookSignature(body: Uint8Array | string, signatureHeader: string, secret: string): void;
 /**
  * Verify the HMAC, enforce replay protection, parse the JSON body, and
- * return a typed `QnspWebhookEvent`.
+ * return a typed `QnsiWebhookEvent`.
  */
-export declare function parseQnspWebhook(input: {
+export declare function parseQnsiWebhook(input: {
     readonly body: Uint8Array | string;
     readonly signatureHeader: string;
     readonly timestampHeader?: string;
     readonly secret: string;
     readonly maxSkewMs?: number;
     readonly now?: Date;
-}): QnspWebhookEvent;
+}): QnsiWebhookEvent;
 //# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.js

@@ -5,46 +5,46 @@
  * body. Always verify the **raw bytes** before parsing JSON.
  */
 import { createHmac, timingSafeEqual } from "node:crypto";
-import { QnspWebhookError } from "./errors.js";
+import { QnsiWebhookError } from "./errors.js";
 /** Default replay-protection window — 5 minutes. */
 export const MAX_WEBHOOK_SKEW_MS = 5 * 60 * 1000;
 /**
  * Constant-time HMAC-SHA-256 verification. The header must be of the
  * form `sha256=<hex>`.
  */
-export function verifyQnspWebhookSignature(body, signatureHeader, secret) {
+export function verifyQnsiWebhookSignature(body, signatureHeader, secret) {
     if (!signatureHeader.startsWith("sha256=")) {
-        throw new QnspWebhookError("signature header must start with 'sha256='");
+        throw new QnsiWebhookError("signature header must start with 'sha256='");
     }
     const expectedHex = signatureHeader.slice("sha256=".length);
     const expected = Buffer.from(expectedHex, "hex");
     if (expected.length === 0) {
-        throw new QnspWebhookError("signature is not valid hex");
+        throw new QnsiWebhookError("signature is not valid hex");
     }
     const bodyBytes = typeof body === "string" ? Buffer.from(body, "utf8") : Buffer.from(body);
     const actual = createHmac("sha256", secret).update(bodyBytes).digest();
     if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) {
-        throw new QnspWebhookError("signature mismatch");
+        throw new QnsiWebhookError("signature mismatch");
     }
 }
 /**
  * Verify the HMAC, enforce replay protection, parse the JSON body, and
- * return a typed `QnspWebhookEvent`.
+ * return a typed `QnsiWebhookEvent`.
  */
-export function parseQnspWebhook(input) {
-    verifyQnspWebhookSignature(input.body, input.signatureHeader, input.secret);
+export function parseQnsiWebhook(input) {
+    verifyQnsiWebhookSignature(input.body, input.signatureHeader, input.secret);
     const skewMs = input.maxSkewMs ?? MAX_WEBHOOK_SKEW_MS;
     if (input.timestampHeader !== undefined && input.timestampHeader.length > 0) {
         const ts = Date.parse(input.timestampHeader);
         if (Number.isNaN(ts)) {
-            throw new QnspWebhookError("timestamp header is not RFC3339");
+            throw new QnsiWebhookError("timestamp header is not RFC3339");
         }
         const reference = input.now ? input.now.getTime() : Date.now();
         const delta = reference - ts;
         if (delta > skewMs)
-            throw new QnspWebhookError("timestamp is too old");
+            throw new QnsiWebhookError("timestamp is too old");
         if (-delta > skewMs)
-            throw new QnspWebhookError("timestamp is in the future");
+            throw new QnsiWebhookError("timestamp is in the future");
     }
     const text = typeof input.body === "string" ? input.body : Buffer.from(input.body).toString("utf8");
     let raw;
@@ -52,19 +52,19 @@ export function parseQnspWebhook(input) {
         raw = JSON.parse(text);
     }
     catch {
-        throw new QnspWebhookError("body is not valid JSON");
+        throw new QnsiWebhookError("body is not valid JSON");
     }
     if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
-        throw new QnspWebhookError("body is not a JSON object");
+        throw new QnsiWebhookError("body is not a JSON object");
     }
     const obj = raw;
     const eventType = obj["event_type"];
     const eventId = obj["event_id"];
     if (typeof eventType !== "string") {
-        throw new QnspWebhookError("missing event_type");
+        throw new QnsiWebhookError("missing event_type");
     }
     if (typeof eventId !== "string") {
-        throw new QnspWebhookError("missing event_id");
+        throw new QnsiWebhookError("missing event_id");
     }
     const occurredAtRaw = obj["occurred_at"];
     const occurredAt = typeof occurredAtRaw === "string" ? occurredAtRaw : "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heossi/qnsi",
-  "version": "0.3.4",
+  "version": "0.4.0",
   "publishConfig": {
     "access": "public"
   },
@@ -96,12 +96,12 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/heossi-hq/qnsp-public",
-    "directory": "packages/qnsp"
+    "url": "https://github.com/heossi-hq/qnsi-public",
+    "directory": "packages/qnsi"
   },
   "homepage": "https://cloud.qnsi.heossi.com",
   "bugs": {
-    "url": "https://github.com/heossi-hq/qnsp-public/issues"
+    "url": "https://github.com/heossi-hq/qnsi-public/issues"
   },
   "files": [
     "dist/**/*",