@nervur-org/dock 0.3.1 → 0.4.0

package/GETTING_STARTED.md

@@ -8,27 +8,37 @@ This is the shortest road from nothing to each of the three, for a
 stranger with a terminal. `SPEC.md` is the truth behind every sentence
 here and assumes nothing; `quo-dock.md` is the dock, the part a box runs.
 
+Quo is the protocol and Nervur is this kit of it. Every name you install
+and every command you type is Nervur's; `quo` stays on the wire, as the
+`quo.` route a ward's door answers at.
+
 Two packages, and you start with the one that fits what you have:
 
-- `@nervur-org/nervur`, the library. A harbor, a ward and a being in one
+- `nervur`, the library. A harbor, a ward and a being in one
   process, no wire, no files. For a program that wants Quo inside it.
-- `@nervur-org/dock`, the dock. A daemon and one command, `quo`, that
+- `@nervur-org/dock`, the dock. A daemon and one command, `nervur`, that
   stand a box up: a person's world with a page, a model's side, an api, a
   door on the wire. For a box that receives people and models.
 
+The command is in the dock and not in the library, so `npm install nervur`
+gives you something to import and no command, and the command arrives with
+`npm install -g @nervur-org/dock`. That is how a kit of this shape is
+always named: one unscoped headline name for the library, the parts under
+the scope, and the CLI in the package that owns it.
+
 ## A being, in one process
 
 ```bash
-npm install @nervur-org/nervur
+npm install nervur
 ```
 
 A being is a class with `asks`, the methods anyone may reach, each with
 the JSON schema of its input. Everything else on the class is hers alone.
 
 ```js
-import { Being } from '@nervur-org/nervur';
-import { Ward } from '@nervur-org/nervur/ward';
-import { MemoryHarbor } from '@nervur-org/nervur/harbor';
+import { Being } from 'nervur';
+import { Ward } from 'nervur/ward';
+import { MemoryHarbor } from 'nervur/harbor';
 
 class Shop extends Being {
   static asks = { price: { input: { type: 'object', properties: { item: { type: 'string' } } } } };
@@ -78,8 +88,8 @@ ward, never held.
 
 ```bash
 npm install @nervur-org/dock
-npx quo init --dir ~/.quo --ward acme --user razvan --domain acme.com --default --show
-npx quo serve --dir ~/.quo --http 8787
+npx nervur init --dir ~/.nervur --ward acme --user razvan --domain acme.com --default --show
+npx nervur serve --dir ~/.nervur --http 8787
 ```
 
 `init` mints the ward `acme`, boots razvan's user being, her doorbell and
@@ -97,7 +107,7 @@ at one loopback address:
 command is its client. From a second terminal, a phone:
 
 ```bash
-npx quo invite --dir ~/.quo '{"being":"razvan","id":"phone"}'
+npx nervur invite --dir ~/.nervur '{"being":"razvan","id":"phone"}'
 ```
 
 The answer carries `link`, the ward's page with the invitation in its
@@ -108,7 +118,7 @@ JSON at `api.`, and what another box gets is the door at `quo.`; a being
 answers each the same, because each is an ask at her door.
 
 The box's own doings are rows on the faculties of its dock ward, placed by
-the root with `quo ask --ward dock`: a socket held to another box, an
+the root with `nervur ask --ward dock`: a socket held to another box, an
 agent run for a ward, a schedule on the clock. A second box owns this one
 across the wire with an invitation on the ward's own pk, knocked with
 from there, and every owner command with `--via` from then on. Each of
@@ -119,8 +129,8 @@ somebody with nothing else to read.
 ## Your own beings on a box
 
 A box holds the dock's classes and yours. `classes/index.ts` beside the
-wards exports each of yours by name, and `quo boot '{"key":"shop",
-"class":"Shop"}'` boots one; `quo init --class Shop` makes the ward's home
+wards exports each of yours by name, and `nervur boot '{"key":"shop",
+"class":"Shop"}'` boots one; `nervur init --class Shop` makes the ward's home
 being one of yours, an organisation's ward with the org as its being. A
 being's asks may name who may reach them, `for`, over the record of the
 occupant asking, and her `cells` are what she keeps between boots: the

package/{beings/GLOSSARY.md → GLOSSARY.md}

@@ -50,14 +50,14 @@ are where the rest are built.
   faculties that box lends. Never a home, and never migrated.
 - **estate**: all of one owner's harbors, with what is theirs alone, in a
   tree of the owner's own and never published.
-- **daemon**: `quo serve`, the one process on a device that holds a harbor.
+- **daemon**: `nervur serve`, the one process on a device that holds a harbor.
 - **route**: a hostname a reverse proxy sends to one process: `web.`,
   `quo.`, `mcp.`, `api.`.
 - **user being**: the org being of an org of one: a human's own, holding
   all of her standings. The dock's `User` class, which also serves a
   membership the desk makes in another org's ward.
 - **front desk**: the being every fresh client meets; hands out invitations
-  minted by the ward's being, and is what `quo init` marks public in a
+  minted by the ward's being, and is what `nervur init` marks public in a
   fresh ward. Any ward may mark one being of any class public instead.
 - **avatar**: a being that is someone's voice from outside Quo, one per
   client identity.
@@ -106,7 +106,7 @@ are where the rest are built.
 - **look**: how a being is presented, as values; one optional ask.
 - **page**: a being's page as a tree of values in the screen's grammar; one
   optional ask, read by a screen alone.
-- **owner pilot**: `quo pilot`, the model side over a ward's owner asks,
+- **owner pilot**: `nervur pilot`, the model side over a ward's owner asks,
   reaching the daemon's socket; with `--via`, a ward elsewhere through a
   standing. Under cron, the estate's own agent.
 

package/NOTICE

@@ -1,4 +1,4 @@
-Quo
+Nervur
 Copyright 2026 Razvan Gherghina
 
 This product includes software developed by Razvan Gherghina.

package/README.md

@@ -1,35 +1,39 @@
 # The dock
 
 What every estate on Quo needs and nobody writes twice: a daemon and the
-`quo` command, the front desk, the user being and the avatar, harbors on
+`nervur` command, the front desk, the user being and the avatar, harbors on
 disk, in a tab and on the edge, the model sides and the screen, the
 credential exchange. An estate is all of one owner's harbors, and it is
 built on the dock, on Quo.
 
 ```bash
 npm install @nervur-org/dock
-npx quo estate my-estate --domain example.com
-npx quo init --dir my-estate/droplet
-npx quo serve --dir my-estate/droplet
+npx nervur estate my-estate --domain example.com
+npx nervur init --dir my-estate/droplet
+npx nervur serve --dir my-estate/droplet
 ```
 
-`quo estate` writes an estate folder: one folder per harbor, the first a
-droplet's quo directory with its routes under your domain, its unit and
+`nervur estate` writes an estate folder: one folder per harbor, the first a
+droplet's harbor directory with its routes under your domain, its unit and
 its Caddyfile, and a package file that depends on the dock and nothing
 else. Add your beings to `droplet/classes/`, and your placement to the
 routes and agents files.
 
-`beings/quo-dock.md` is the truth of this package and the trunk of its
-documents; read it first. It knows nothing the spec of Quo does not say,
+[`quo-dock.md`](quo-dock.md) is the truth of this package and the trunk of
+its documents; read it first. It knows nothing the spec of Quo does not say,
 and adds no word to harbor, ward or being. Beside it are the sides,
-`human/quo-human.md`, `mcp/quo-mcp.md`, `api/quo-api.md` and
-`harbor/quo-harbor.md`; `beings/WORLDS.md` is what home, presence and
-membership mean, and `beings/GLOSSARY.md` is every word above the spec.
-
-## Publishing
-
-Published from 0.1.0 with no compatibility promise before 1.0.0. The
-package ships an emitted `dist/` with its command, and the source beside it.
+[`quo-human.md`](quo-human.md), [`quo-mcp.md`](quo-mcp.md),
+[`quo-api.md`](quo-api.md) and [`quo-harbor.md`](quo-harbor.md), and the
+bells, [`quo-app-bells.md`](quo-app-bells.md);
+[`WORLDS.md`](WORLDS.md) is what home, presence and membership mean, and
+[`GLOSSARY.md`](GLOSSARY.md) is every word above the spec. Each stands once,
+at the root of the package, the way `nervur` and `@nervur-org/ui` carry
+theirs.
+
+## Versions
+
+No compatibility promise before 1.0.0. The package ships an emitted `dist/`
+with its command, and the source beside it.
 
 ## License
 

package/{beings/WORLDS.md → WORLDS.md}

@@ -55,9 +55,11 @@ That is the whole of it, and this is what it leaves open:
 - **Quo has no home.** Three boxes rooted by one party, each holding
   standings on the other two, is Quo, and so is one box with a hundred
   wards. Nothing says which ward, if any, is the one that matters.
-- **Quo has no route.** How bytes arrive at a device is the harbor's
-  directory, and Quo says nothing about it. A hostname, a socket, a screen
-  and a tool list are all outside the protocol.
+- **Quo has no route.** It pins the two shapes a reach may take and the
+  frames they carry, because two harbors meet on those, and it says nothing
+  about where a ward lives: which hostname answers, how a harbor learns a
+  foreign pk, and whether anyone can be dialed at all are the device's. A
+  hostname, a screen and a tool list are outside the protocol entirely.
 - **Quo has four rungs and no more.** A stranger hears the public being as
   `{}`. An occupant hears what the gate shows that occupant. An owner
   reaches in. A root holds the ask pointer. Guest, member, subscriber,
@@ -356,7 +358,7 @@ An org's box hears the world on three routes, and a route is a hostname the
 reverse proxy sends to one process. `web.` speaks a being's describe as
 forms and a page, for a human at a screen. `mcp.` speaks it as tools, for a
 model at its client. `api.` speaks it as plain HTTP and JSON, for a
-program, a script or a tab on another origin. A fourth voice, the `quo`
+program, a script or a tab on another origin. A fourth voice, the `nervur`
 command on the device itself, speaks it as lines, and reaches the daemon's
 socket rather than a hostname.
 

package/api/route.ts

@@ -34,13 +34,13 @@
 // shapes, are the route's own 404 and never a being's.
 import type { Handler } from '../harbor/http.ts';
 import { readText } from '../harbor/http.ts';
-import type { Hosted } from '@nervur-org/nervur/harbor';
+import type { Hosted } from 'nervur/harbor';
 import type { Avatar } from '../beings/avatar.ts';
 import { invitationOf } from '../beings/link.ts';
 import { landed, POLICY } from '../human/door.ts';
 import { CSS } from '../human/style.ts';
 import type { Grants } from '../dock/grants.ts';
-import { isInvitation, isSilence, isWord, wordOf, type Invitation, type JsonObject } from '@nervur-org/nervur';
+import { isInvitation, isSilence, isWord, wordOf, type Invitation, type JsonObject } from 'nervur';
 
 const open = { 'access-control-allow-origin': '*', 'access-control-allow-methods': 'GET, POST, OPTIONS', 'access-control-allow-headers': 'content-type, authorization' };
 
@@ -75,7 +75,7 @@ export function apiRoute(harbor: Held, o: Options): Handler {
     // is the allow page's, and for the same reason: a page that runs no
     // script of its own should be allowed none.
     const page = (status: number, body: string) =>
-      new Response(`<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>quo</title>\n<style>${CSS}</style>\n</head><body>${body}</body></html>`, {
+      new Response(`<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>nervur</title>\n<style>${CSS}</style>\n</head><body>${body}</body></html>`, {
         status,
         headers: { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store', 'content-security-policy': POLICY, 'referrer-policy': 'no-referrer' },
       });

package/beings/avatar.ts

@@ -7,8 +7,8 @@
 // calls the four methods below: one of the two ways in, `enter` behind a
 // route's proof or `join` with an invitation, then `tools` and `call`.
 // Nothing of a side is in her cells.
-import { isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { Answer, Blueprint, Invitation, JsonObject, OccupantRecord, Wanted } from '@nervur-org/nervur';
+import { isSilence, isWord, wordOf } from 'nervur';
+import type { Answer, Blueprint, Invitation, JsonObject, OccupantRecord, Wanted } from 'nervur';
 import { Carrier } from './carry.ts';
 
 // Her one standing, and the id under which the user being pushes to her.

package/beings/carry.ts

@@ -18,8 +18,8 @@
 // `look` once per digest, and keeps both in her cells. So a describe of
 // hers may cost one ask per stale standing, which is the price of a page
 // that is never more than one ask behind.
-import { Being, isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { Asker, Blueprint, JsonObject, OccupantRecord, Reply } from '@nervur-org/nervur';
+import { Being, isSilence, isWord, wordOf } from 'nervur';
+import type { Asker, Blueprint, JsonObject, OccupantRecord, Reply } from 'nervur';
 import { sanitise, type Look } from './look.ts';
 
 type Carried = Record<string, { id: string; ask: string }>;

package/beings/clock.ts

@@ -29,8 +29,8 @@
 // and what an occupant registered on the service placement. Nothing is read
 // from a file and nothing is set on the class, so a schedule outlives the
 // process the way every cell does, and is gone when it is dropped.
-import { Being, isSilence, isWord, wordOf, OWNER } from '@nervur-org/nervur';
-import type { Asker, Invitation, Json, JsonObject, OccupantRecord, Stance } from '@nervur-org/nervur';
+import { Being, isSilence, isWord, wordOf, OWNER } from 'nervur';
+import type { Asker, Invitation, Json, JsonObject, OccupantRecord, Stance } from 'nervur';
 import { TIMER, join } from '../dock/index.ts';
 
 // The root and nobody else. `OWNER` is one of the ward's own words, refused at

package/beings/courier.ts

@@ -26,8 +26,8 @@
 // the shell holding this device when it is asked for, and what arrives goes
 // back to the shell, since a partition written into another ward's cells is
 // a copy nobody asked for.
-import { Being, isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { Answer, Invitation, JsonObject, OccupantRecord } from '@nervur-org/nervur';
+import { Being, isSilence, isWord, wordOf } from 'nervur';
+import type { Answer, Invitation, JsonObject, OccupantRecord } from 'nervur';
 
 // The id each end knows the other by for the length of one move.
 export const MOVER = 'mover';

package/beings/desk.ts

@@ -16,8 +16,8 @@
 // judges nothing here: she does not know what an address is, whether one was
 // sent to before, or what a link says. She keeps the ways in named in one
 // place, so a side that renders her renders every way into this world.
-import { Being, isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { Asker, Blueprint, JsonObject, Reply, Stance } from '@nervur-org/nervur';
+import { Being, isSilence, isWord, wordOf } from 'nervur';
+import type { Asker, Blueprint, JsonObject, Reply, Stance } from 'nervur';
 import { join } from '../dock/faculty.ts';
 import { LOCAL } from '../dock/local.ts';
 import { WAY, kindOf, verified } from './way.ts';

package/beings/doorbell.ts

@@ -21,8 +21,8 @@
 // in. The device hands its banner key to a world itself, beside the
 // invitation to this doorbell, so a bell that held both halves of the
 // relation is a bell that could read a banner, and this one cannot.
-import { Being, isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { Asker, JsonObject, OccupantRecord } from '@nervur-org/nervur';
+import { Being, isSilence, isWord, wordOf } from 'nervur';
+import type { Asker, JsonObject, OccupantRecord } from 'nervur';
 
 const DEVICE = 'device';
 // Her standing at the box's push faculty, under an id of her own. The ward

package/beings/envoy.ts

@@ -18,8 +18,8 @@
 // bytes checked before anything is parsed, the id kept bounded so a retry
 // lands once, `{ ok }` answered before the wake goes out, a wake that meets
 // silence written down and never retried.
-import { Being, isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { Asker, AskSpec, JsonObject, OccupantRecord } from '@nervur-org/nervur';
+import { Being, isSilence, isWord, wordOf } from 'nervur';
+import type { Asker, AskSpec, JsonObject, OccupantRecord } from 'nervur';
 
 // The two gates. The owner is the ward's ask pointer, `{ id: 'OWNER' }`,
 // which is how the daemon asks `deliver` and how the root places a

package/beings/join.ts

@@ -7,8 +7,8 @@
 // A way in that is the box's own, a nonce on the `local` faculty, is not
 // here: it is a process the device saw on its own socket, which only a
 // terrain with processes has, and the daemon keeps it.
-import type { Hosted } from '@nervur-org/nervur/harbor';
-import type { Invitation } from '@nervur-org/nervur';
+import type { Hosted } from 'nervur/harbor';
+import type { Invitation } from 'nervur';
 import type { Avatar } from './avatar.ts';
 
 // Her avatar in a ward, found or booted under the identity's key. An

package/beings/link.ts

@@ -2,15 +2,15 @@
 // A link: a world's page with an invitation in the fragment. The page is the
 // hint, where the world lives; the fragment is the invitation, which never
 // leaves the browser: a query string reaches the server, its logs and every
-// referer, and an invitation is a capability. One reserved key, `quo`, the
+// referer, and an invitation is a capability. One reserved key, `nervur`, the
 // one word no page uses for anything else, and the value is the invitation
 // compact: `ward.heir.secret`, three hex strings, or `ward` alone for a
 // world's public being. The dock's human module reads it, strips it before
 // any page code runs, and joins. One other key is reserved, `proof`, for the
 // way in a world sent out itself, and it is read the same way.
-import type { Invitation } from '@nervur-org/nervur';
+import type { Invitation } from 'nervur';
 
-export const KEY = 'quo';
+export const KEY = 'nervur';
 // The other reserved key: a proof, for a way in the world sent out itself.
 // A proof is not a capability into a ward, it is a word one door will trade
 // once for an invitation, and it rides in the fragment for the same reason:
@@ -29,7 +29,7 @@ export function format(inv: Invitation): string {
 // The invitation in a fragment, or null. Anything else in the fragment is
 // the page's own and is left alone.
 export function parse(hash: string): Invitation | null {
-  const m = /(?:^#|&)quo=([^&]+)/.exec(hash.startsWith('#') ? hash : `#${hash}`);
+  const m = new RegExp(`(?:^#|&)${KEY}=([^&]+)`).exec(hash.startsWith('#') ? hash : `#${hash}`);
   if (!m) return null;
   const v = decodeURIComponent(m[1]);
   const full = FULL.exec(v);
@@ -70,7 +70,7 @@ export function proofLink(page: string, kind: string, token: string): string {
 }
 
 // The invitation as a human hands it over: the compact form, the whole link
-// it came in, or the JSON value `quo invite` printed. Wherever a person
+// it came in, or the JSON value `nervur invite` printed. Wherever a person
 // types or pastes an invitation, this is what reads it, so the three forms
 // are one form everywhere.
 export function invitationOf(text: string): Invitation | null {

package/beings/look.ts

@@ -12,7 +12,7 @@
 // is a list of origins a side reads to decide whether to vouch for an
 // address the being's own page named, and nothing in the dock ever fetches
 // one.
-import type { Blueprint, Json } from '@nervur-org/nervur';
+import type { Blueprint, Json } from 'nervur';
 
 // What a side may do with one ask. `title` is a human label instead of the
 // name; `readOnly` says the ask changes nothing, so a screen may run it on

package/beings/porter.ts

@@ -13,8 +13,8 @@
 // twice is two doorbells and no harm. A stranger who keeps knocking is the
 // harbor's, never hers and never the door's, and the count below is only so
 // that a loop in this session stops somewhere a human can see.
-import { Being, isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { JsonObject } from '@nervur-org/nervur';
+import { Being, isSilence, isWord, wordOf } from 'nervur';
+import type { JsonObject } from 'nervur';
 
 const ROOM = 64;
 

package/beings/presence.ts

@@ -13,7 +13,7 @@
 // to her, and birth is synchronous while taking a standing is not, so what
 // she holds is settled after her constructor returns; the terrain waits on
 // `settled` before it says the box is up.
-import type { Asker, OccupantRecord, Stance } from '@nervur-org/nervur';
+import type { Asker, OccupantRecord, Stance } from 'nervur';
 import { Avatar, PUSHER, USER } from './avatar.ts';
 import { FACULTIES, join } from '../dock/index.ts';
 

package/beings/setup.ts

@@ -4,10 +4,10 @@
 // `user:<name>`, placed by the root's knock, and she holding her own ward's
 // door as an owner under `home`. She names the desk `desk`,
 // and that id is the only thing that makes it the desk. A disk harbor does
-// this at `quo init`, the edge at its root route's init; the memory
+// this at `nervur init`, the edge at its root route's init; the memory
 // harbor's test world does the same by hand.
-import type { Invitation } from '@nervur-org/nervur';
-import type { Hosted } from '@nervur-org/nervur/harbor';
+import type { Invitation } from 'nervur';
+import type { Hosted } from 'nervur/harbor';
 import { DESK, HOME } from './user.ts';
 
 // The root boots and steps back: it invites an owner on the ward's own pk

package/beings/side.ts

@@ -5,8 +5,8 @@
 // her one standing, and a push as a notification. Sides in this repository:
 // a screen, an MCP server, a runner, an event-driven agent. None knows
 // another exists, and none of this file names a platform.
-import { isSilence, isUnreached, isWord, wordOf } from '@nervur-org/nervur';
-import type { Answer, Blueprint, Json, JsonObject, Wanted, WordName } from '@nervur-org/nervur';
+import { isSilence, isUnreached, isWord, wordOf } from 'nervur';
+import type { Answer, Blueprint, Json, JsonObject, Wanted, WordName } from 'nervur';
 import type { Avatar } from './avatar.ts';
 
 // A side, running: it holds the avatar until closed.

package/beings/user.ts

@@ -7,8 +7,8 @@
 // client identity the desk established. A device she let mint brings the
 // next one in, so a human adds a device from a device already in and only
 // the first one has to come from the root, on the box.
-import { isInvitation, isSilence, isWord, wordOf } from '@nervur-org/nervur';
-import type { Asker, Blueprint, Invitation, JsonObject, OccupantRecord, Stance } from '@nervur-org/nervur';
+import { isInvitation, isSilence, isWord, wordOf } from 'nervur';
+import type { Asker, Blueprint, Invitation, JsonObject, OccupantRecord, Stance } from 'nervur';
 import { Carrier } from './carry.ts';
 import { PUSH, banner, isToken, join, sealBanner } from '../dock/index.ts';
 

package/beings/way.ts

@@ -24,7 +24,7 @@
 // `send` beside it, and the desk shows the form for it because her standing
 // says the being can be asked it. She judges neither: she does not know what
 // an address is, whether one was sent to before, or what a link says.
-import type { AskSpec, Json } from '@nervur-org/nervur';
+import type { AskSpec, Json } from 'nervur';
 
 export type Proof = { kind: string; [more: string]: Json };
 // Who the proof is for, and how far the device it admits may go. `make` is

package/cli/client.ts

@@ -14,7 +14,7 @@ export function ask(dir: string, method: string | undefined, args: Record<string
   return line(dir, { ...(ward === undefined ? {} : { ward }), method, args, ...(via === undefined ? {} : { via }) });
 }
 
-// `quo ask`: the root asking a being of its own ward, as the device. The six
+// `nervur ask`: the root asking a being of its own ward, as the device. The six
 // owner asks make and place beings; this is the other half of the owner role,
 // reaching into one, and without it a being's owner-gated ask had no caller
 // but the daemon itself.
@@ -22,7 +22,7 @@ export function askBeing(dir: string, being: string, method?: string, args: Reco
   return line(dir, { ...(ward === undefined ? {} : { ward }), being, method, args });
 }
 
-// `quo reach`: a hint for the harbor's directory, which is the harbor's and
+// `nervur reach`: a hint for the harbor's directory, which is the harbor's and
 // not a ward's, so it crosses the root socket as its own line.
 export function reach(dir: string, pk: string, url: string): Promise<Answer> {
   return line(dir, { reach: { pk, url } });
@@ -32,7 +32,7 @@ function line(dir: string, body: Record<string, unknown>): Promise<Answer> {
   return new Promise((ok, no) => {
     const c = connect(sockPath(dir));
     const id = Math.random().toString(36).slice(2);
-    c.once('error', (e: NodeJS.ErrnoException) => no(e.code === 'ENOENT' || e.code === 'ECONNREFUSED' ? new Error(`no daemon at ${dir}: run \`quo serve\``) : e));
+    c.once('error', (e: NodeJS.ErrnoException) => no(e.code === 'ENOENT' || e.code === 'ECONNREFUSED' ? new Error(`no daemon at ${dir}: run \`nervur serve\``) : e));
     c.once('connect', () => {
       c.write(JSON.stringify({ id, ...body }) + '\n');
       createInterface({ input: c }).once('line', (reply) => {
@@ -44,19 +44,19 @@ function line(dir: string, body: Record<string, unknown>): Promise<Answer> {
   });
 }
 
-// `quo side`: a pipe. Hello to the daemon's side socket, then stdin to the
+// `nervur side`: a pipe. Hello to the daemon's side socket, then stdin to the
 // socket and the socket to stdout, line for line, until either end closes.
 // The MCP server runs in the daemon, beside the avatar; this process knows
 // nothing of MCP but its newlines.
 //
-// `quo run` is the same pipe with a model named in the hello: the daemon
+// `nervur run` is the same pipe with a model named in the hello: the daemon
 // runs the runner beside the avatar, each line typed is a turn, and each
 // final text comes back as a line.
 export type Run = { url: string; model: string; key?: string; turns?: number };
 export function side(dir: string, as: string, ward: string, run?: Run): Promise<void> {
   return new Promise((ok, no) => {
     const c = connect(sidePath(dir));
-    c.once('error', (e: NodeJS.ErrnoException) => no(e.code === 'ENOENT' || e.code === 'ECONNREFUSED' ? new Error(`no daemon at ${dir}: run \`quo serve\``) : e));
+    c.once('error', (e: NodeJS.ErrnoException) => no(e.code === 'ENOENT' || e.code === 'ECONNREFUSED' ? new Error(`no daemon at ${dir}: run \`nervur serve\``) : e));
     c.once('connect', () => {
       c.write(JSON.stringify(run ? { as, ward, run } : { as, ward }) + '\n');
       const lines = createInterface({ input: c });

package/cli/daemon.ts

@@ -1,9 +1,9 @@
 // SPDX-License-Identifier: Apache-2.0
-// The daemon: `quo serve`. One process holds the harbor and the ask pointer
+// The daemon: `nervur serve`. One process holds the harbor and the ask pointer
 // of every ward in it. Two local doors, never mixed, each a unix socket only
 // the device's user can read:
 //
-//   quo.sock    the root. One line of JSON in, one line out.
+//   nervur.sock the root. One line of JSON in, one line out.
 //               -> { id, ward?, method?, args?, via? }
 //               <- { id, result } | { id, error }
 //               With `being`, the line is the owner's `ask`, forwarded like
@@ -59,7 +59,7 @@
 // push faculty with one ring per token kind this device can ring.
 //
 // The default ward is the one a caller means when naming none: the one ward
-// hosted, or the one marked in its own folder by `quo default`. A harbor is
+// hosted, or the one marked in its own folder by `nervur default`. A harbor is
 // not a being and has no self to be, so the one thing it can do is point at
 // one of its wards. Its agents boot there and its door answers for it when a
 // caller names no ward. Several wards and no mark is refused here, by name,
@@ -86,11 +86,11 @@ import { createHash, randomBytes } from 'node:crypto';
 import { tmpdir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { createInterface } from 'node:readline';
-import { isSilence, isWord, wordOf, type Invitation, type JsonObject } from '@nervur-org/nervur';
+import { isSilence, isWord, wordOf, type Invitation, type JsonObject } from 'nervur';
 import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
 import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 import { DiskHarbor, defaultWard, type Hosted } from '../harbor/disk.ts';
-import type { Harbor } from '@nervur-org/nervur/harbor';
+import type { Harbor } from 'nervur/harbor';
 import type { Avatar, User } from '../beings/index.ts';
 // an identity in a world: the three asks any terrain's routes make at a ward
 export { avatarOf, letIn, find } from '../beings/join.ts';
@@ -128,9 +128,9 @@ export type Options = { http?: { port: number; host?: string }; routes?: Routes;
 const socketPath = (dir: string, name: string): string => {
   const inside = join(resolve(dir), `${name}.sock`);
   if (inside.length < 100) return inside;
-  return join(tmpdir(), `quo-${createHash('sha256').update(resolve(dir)).digest('hex').slice(0, 16)}-${name}.sock`);
+  return join(tmpdir(), `nervur-${createHash('sha256').update(resolve(dir)).digest('hex').slice(0, 16)}-${name}.sock`);
 };
-export const sockPath = (dir: string) => socketPath(dir, 'quo');
+export const sockPath = (dir: string) => socketPath(dir, 'nervur');
 export const sidePath = (dir: string) => socketPath(dir, 'side');
 
 // Admit a local client identity into a ward: find or boot her avatar, and

package/cli/estate/{quo.service → nervur.service}

@@ -1,24 +1,24 @@
 # The daemon on a droplet, as one user, forever. Install with:
-#   sudo cp droplet/quo.service /etc/systemd/system/quo.service
-#   sudo systemctl enable --now quo
-# The unit runs as the `quo` user, whose home holds the estate folder and
+#   sudo cp droplet/nervur.service /etc/systemd/system/nervur.service
+#   sudo systemctl enable --now nervur
+# The unit runs as the `nervur` user, whose home holds the estate folder and
 # the harbor folder, so the seed, the lease and the sockets are that user's
 # alone. The HTTP door is loopback only; Caddy fronts it. See Caddyfile
 # beside this file.
 [Unit]
-Description=quo: one harbor on this device
+Description=nervur: one harbor on this device
 After=network.target
 
 [Service]
-User=quo
-Group=quo
-Environment=QUO_DIR=/home/quo/.quo
-Environment=QUO_HTTP=8787
+User=nervur
+Group=nervur
+Environment=NERVUR_DIR=/home/nervur/.nervur
+Environment=NERVUR_HTTP=8787
 # CLAUDE_CODE_OAUTH_TOKEN, when an agent folder runs `claude -p`: the agent
 # reads its credential from the device, never from cells.
-EnvironmentFile=-/etc/quo/env
-WorkingDirectory=/home/quo/ESTATE
-ExecStart=/usr/bin/node /home/quo/ESTATE/node_modules/@nervur-org/dock/dist/cli/quo.js serve
+EnvironmentFile=-/etc/nervur/env
+WorkingDirectory=/home/nervur/ESTATE
+ExecStart=/usr/bin/node /home/nervur/ESTATE/node_modules/@nervur-org/dock/dist/cli/nervur.js serve
 Restart=always
 RestartSec=2
 KillSignal=SIGTERM
@@ -28,7 +28,7 @@ ProtectSystem=strict
 # Agents run in their folders and Claude Code keeps its own state in the
 # user's home; both must be writable for a run to happen, and a harbor
 # with no agent has neither.
-ReadWritePaths=/home/quo/.quo -/home/quo/agents -/home/quo/.claude -/home/quo/.claude.json /tmp
+ReadWritePaths=/home/nervur/.nervur -/home/nervur/agents -/home/nervur/.claude -/home/nervur/.claude.json /tmp
 PrivateTmp=false
 
 [Install]