@run402/sdk 4.94.0 → 4.96.0

package/dist/namespaces/{gitvault.types.d.ts → vault.types.d.ts}

@@ -1,8 +1,8 @@
 /**
- * gitvault — `r402s/v0` wire types (protocol rev 40).
+ * vault — `r402s/v0` wire types (protocol rev 40).
  *
  * Every object here mirrors a frozen JSON Schema under the private repo's
- * `docs/strategy/products/gitvault/schemas/` (`key_envelope.json`,
+ * `docs/strategy/products/kygit/schemas/` (`key_envelope.json`,
  * `vault_genesis.json`, `allocation.json`, `recovery_receipt.json`,
  * `capture_receipt.json`, `head.json`, `common.json`). Field names are the
  * wire names (snake_case); values are STRINGS everywhere — the `r402s/v0`
@@ -16,26 +16,26 @@
  * and a trailing `Z`.
  */
 /** `format` const on every `r402s/v0` object. */
-export type GitvaultFormat = "r402s/v0";
+export type VaultFormat = "r402s/v0";
 /** `suite` const on every `r402s/v0` object. */
-export type GitvaultSuite = "r402s-1";
+export type VaultSuite = "r402s-1";
 /** The closed `object_kind` vocabulary this module handles (protocol §1 table). */
-export type GitvaultObjectKind = "vault_genesis" | "head" | "ref_state" | "retention_roots" | "wal_pack" | "checkpoint_pack" | "checkpoint_manifest" | "checkpoint_claim_set" | "maintenance_stage_claim_set" | "maintenance_stage_page" | "key_envelope" | "recovery_receipt" | "allocation" | "capture_receipt" | "admission_record" | "activation_token" | "retention_cutoff" | "prune_intent_core" | "prune_intent" | "prune_completion" | "verifier_receipt" | "maintenance_cycle_terminal" | "maintenance_cycle_issuance" | "maintenance_completion_cut" | "service_key_registry" | "rotation_attempt_descriptor" | "recipient_pin_manifest" | "recipient_confirmation_receipt" | "recipient_open_receipt"
-/** gitvault-multi-writer rev 47 (protocol §4.17) — a writer's signed grant authorizing a handoff recipient to become a vault writer. */
+export type VaultObjectKind = "vault_genesis" | "head" | "ref_state" | "retention_roots" | "wal_pack" | "checkpoint_pack" | "checkpoint_manifest" | "checkpoint_claim_set" | "maintenance_stage_claim_set" | "maintenance_stage_page" | "key_envelope" | "recovery_receipt" | "allocation" | "capture_receipt" | "admission_record" | "activation_token" | "retention_cutoff" | "prune_intent_core" | "prune_intent" | "prune_completion" | "verifier_receipt" | "maintenance_cycle_terminal" | "maintenance_cycle_issuance" | "maintenance_completion_cut" | "service_key_registry" | "rotation_attempt_descriptor" | "recipient_pin_manifest" | "recipient_confirmation_receipt" | "recipient_open_receipt"
+/** vault-multi-writer rev 47 (protocol §4.17) — a writer's signed grant authorizing a handoff recipient to become a vault writer. */
  | "writer_admission_grant";
 /** Kinds whose stored bytes are an AEAD frame (protocol §2 framing), keyed by `k_obj`. */
-export type GitvaultEncryptedObjectKind = "wal_pack" | "ref_state" | "retention_roots" | "checkpoint_manifest" | "checkpoint_pack";
+export type VaultEncryptedObjectKind = "wal_pack" | "ref_state" | "retention_roots" | "checkpoint_manifest" | "checkpoint_pack";
 /**
  * The `K_digest` labels of protocol §1 (keyed-digest derivation) — the
  * original five, keyed by `K_repo`, plus the three rev-42 labels (D195/D198/
  * D200) keyed by the SAMPLED epoch key (`K_e`/`K_1`) instead.
  */
-export type GitvaultDigestLabel = "refmap" | "rootset" | "objectset" | "snapshot_oid" | "gcrootset" | "epoch_rotation" | "epoch_rotation_attempt" | "vault_genesis_epoch_key";
+export type VaultDigestLabel = "refmap" | "rootset" | "objectset" | "snapshot_oid" | "gcrootset" | "epoch_rotation" | "epoch_rotation_attempt" | "vault_genesis_epoch_key";
 /** `key_envelope` (schema `key_envelope.json`) — path-addressed by `(repo_id, epoch, recipient_fingerprint)`; no `object_id`. */
-export interface GitvaultKeyEnvelope {
-    format: GitvaultFormat;
+export interface VaultKeyEnvelope {
+    format: VaultFormat;
     object_kind: "key_envelope";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     /** `src_` + 32 lowercase hex. */
     repo_id: string;
     /** 16 lowercase hex. */
@@ -64,7 +64,7 @@ export interface GitvaultKeyEnvelope {
     signature: string;
 }
 /** The envelope receipt embedded in `vault_genesis.envelopes[]` / `rotate_epoch_payload.envelopes[]` (`common.json#/$defs/receipt_key_envelope`). */
-export interface GitvaultKeyEnvelopeReceipt {
+export interface VaultKeyEnvelopeReceipt {
     object_kind: "key_envelope";
     epoch: string;
     recipient_fingerprint: string;
@@ -72,19 +72,19 @@ export interface GitvaultKeyEnvelopeReceipt {
     stored_bytes_sha256: string;
     /** Decimal string — the stored bytes' length. */
     size_bytes: string;
-    /** D195, rev 42 — see {@link GitvaultKeyEnvelope.rotation_id}. */
+    /** D195, rev 42 — see {@link VaultKeyEnvelope.rotation_id}. */
     rotation_id?: string;
 }
 /** One `{principal_id, envelope}` pair in `rotate_epoch_payload.envelopes[]` / an N-recipient `vault_genesis.envelopes[]` (D196, rev 42). */
-export interface GitvaultRotationEnvelopePair {
+export interface VaultRotationEnvelopePair {
     principal_id: string;
-    envelope: GitvaultKeyEnvelopeReceipt;
+    envelope: VaultKeyEnvelopeReceipt;
 }
 /** `vault_genesis` (schema `vault_genesis.json`) — generation 0, epoch pinned to `0000000000000001`. */
-export interface GitvaultVaultGenesis {
-    format: GitvaultFormat;
+export interface VaultGenesis {
+    format: VaultFormat;
     object_kind: "vault_genesis";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     org_id: string;
     project_id: string;
@@ -107,7 +107,7 @@ export interface GitvaultVaultGenesis {
      * yet BUILD an N-recipient genesis (a separate, un-scoped follow-up), so
      * this field stays typed as the bare receipt array here.
      */
-    envelopes: GitvaultKeyEnvelopeReceipt[];
+    envelopes: VaultKeyEnvelopeReceipt[];
     /** `vk_` fingerprint of `creator_signing_pubkey`. */
     writer_key_id: string;
     /**
@@ -117,15 +117,15 @@ export interface GitvaultVaultGenesis {
      * existing rev-41 genesis and on the single-recipient shape this SDK
      * still builds.
      */
-    pin_manifest?: GitvaultPinManifestReceipt;
+    pin_manifest?: VaultPinManifestReceipt;
     created_at: string;
     signature: string;
 }
 /** `allocation` (schema `allocation.json`) — control-plane-signed API message; no `object_id`. */
-export interface GitvaultAllocation {
-    format: GitvaultFormat;
+export interface VaultAllocation {
+    format: VaultFormat;
     object_kind: "allocation";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** `sk_` + 4–64 of `[0-9a-z-]` — the signing service key (resolved through the registry). */
     service_key_id: string;
@@ -148,10 +148,10 @@ export interface GitvaultAllocation {
     signature: string;
 }
 /** `recovery_receipt` (schema `recovery_receipt.json`) — creator-signed integrity data, never a secret. */
-export interface GitvaultRecoveryReceipt {
-    format: GitvaultFormat;
+export interface VaultRecoveryReceipt {
+    format: VaultFormat;
     object_kind: "recovery_receipt";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     org_id: string;
     project_id: string;
@@ -162,10 +162,10 @@ export interface GitvaultRecoveryReceipt {
     signature: string;
 }
 /** `capture_receipt` (schema `capture_receipt.json`) — control-plane-signed API message; no `object_id`. */
-export interface GitvaultCaptureReceipt {
-    format: GitvaultFormat;
+export interface VaultCaptureReceipt {
+    format: VaultFormat;
     object_kind: "capture_receipt";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     service_key_id: string;
     generation: string;
@@ -181,7 +181,7 @@ export interface GitvaultCaptureReceipt {
     signature: string;
 }
 /** `common.json#/$defs/receipt_wal_pack`. */
-export interface GitvaultWalPackReceipt {
+export interface VaultWalPackReceipt {
     object_id: string;
     object_kind: "wal_pack";
     ciphertext_sha256: string;
@@ -189,27 +189,27 @@ export interface GitvaultWalPackReceipt {
     base_generation: string;
 }
 /** `common.json#/$defs/receipt_ref_state`. */
-export interface GitvaultRefStateReceipt {
+export interface VaultRefStateReceipt {
     object_id: string;
     object_kind: "ref_state";
     ciphertext_sha256: string;
     size_bytes: string;
 }
 /** `common.json#/$defs/receipt_retention_roots`. */
-export interface GitvaultRetentionRootsReceipt {
+export interface VaultRetentionRootsReceipt {
     object_id: string;
     object_kind: "retention_roots";
     ciphertext_sha256: string;
     size_bytes: string;
 }
 /** `common.json#/$defs/capture_binding`. */
-export interface GitvaultCaptureBinding {
+export interface VaultCaptureBinding {
     capture_id: string;
     apply_plan_sha256: string | null;
     snapshot_oid_hmac: string;
 }
 /** `common.json#/$defs/repair_descriptor`. */
-export interface GitvaultRepairDescriptor {
+export interface VaultRepairDescriptor {
     base_generation: string;
     base_head_sha256: string;
     supersedes_from: string;
@@ -217,54 +217,54 @@ export interface GitvaultRepairDescriptor {
     reason: "missing_referenced_object" | "corrupt_referenced_object" | "unusable_ref_state";
 }
 /** `common.json#/$defs/transition_envelope` — validated fail-closed by later tasks; carried opaque here. */
-export interface GitvaultTransitionEnvelope {
+export interface VaultTransitionEnvelope {
     kind: "add_envelope" | "rotate_epoch" | "add_writer_key" | "transfer_binding";
     payload_format: "base64url-jcs";
     payload: string;
     payload_sha256: string;
 }
 /** `common.json#/$defs/receipt_checkpoint_manifest`. */
-export interface GitvaultCheckpointManifestReceipt {
+export interface VaultCheckpointManifestReceipt {
     object_id: string;
     object_kind: "checkpoint_manifest";
     ciphertext_sha256: string;
     size_bytes: string;
 }
 /** `common.json#/$defs/receipt_checkpoint_pack`. */
-export interface GitvaultCheckpointPackReceipt {
+export interface VaultCheckpointPackReceipt {
     object_id: string;
     object_kind: "checkpoint_pack";
     ciphertext_sha256: string;
     size_bytes: string;
 }
 /** `common.json#/$defs/receipt_checkpoint_claim_set` — plaintext-structured kinds are receipted by `stored_bytes_sha256`. */
-export interface GitvaultCheckpointClaimSetReceipt {
+export interface VaultCheckpointClaimSetReceipt {
     object_id: string;
     object_kind: "checkpoint_claim_set";
     stored_bytes_sha256: string;
     size_bytes: string;
 }
 /** `common.json#/$defs/receipt_retention_cutoff`. */
-export interface GitvaultRetentionCutoffReceipt {
+export interface VaultRetentionCutoffReceipt {
     object_id: string;
     object_kind: "retention_cutoff";
     stored_bytes_sha256: string;
     size_bytes: string;
 }
 /** `common.json#/$defs/checkpoint_block` — the head's checkpoint slot (§4.7). */
-export interface GitvaultCheckpointBlock {
-    claim_set: GitvaultCheckpointClaimSetReceipt;
+export interface VaultCheckpointBlock {
+    claim_set: VaultCheckpointClaimSetReceipt;
     /** == the carrying head's generation. */
     covers_through_generation: string;
     git_object_format: "sha1";
     /** The cutoff-ticket binding; `null` in the no-removal form. */
     cutoff: {
-        ticket: GitvaultRetentionCutoffReceipt;
+        ticket: VaultRetentionCutoffReceipt;
         cutoff_at: string;
     } | null;
 }
 /** `common.json#/$defs/head_target` — a discriminated union, never a null (§4.4). */
-export type GitvaultHeadTarget = {
+export type VaultHeadTarget = {
     kind: "symref";
     ref: string;
 } | {
@@ -272,30 +272,30 @@ export type GitvaultHeadTarget = {
     oid: string;
 };
 /** `ref_state` plaintext (schema `ref_state.json`) — encrypted at rest. */
-export interface GitvaultRefState {
-    format: GitvaultFormat;
+export interface VaultRefState {
+    format: VaultFormat;
     object_kind: "ref_state";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** `refs_` + 32 hex. */
     object_id: string;
     generation: string;
     /** Canonical refname → 40-hex oid; ≤ 10 000 entries. */
     refs: Record<string, string>;
-    head_target: GitvaultHeadTarget;
+    head_target: VaultHeadTarget;
     signature: string;
 }
 /** One retention root: a dropped/force-displaced tip (§4.5), map-keyed `(ref, oid)`. */
-export interface GitvaultRetentionRoot {
+export interface VaultRetentionRoot {
     ref: string;
     oid: string;
     dropped_at_generation: string;
 }
 /** `retention_roots` plaintext (schema `retention_roots.json`) — encrypted at rest. */
-export interface GitvaultRetentionRoots {
-    format: GitvaultFormat;
+export interface VaultRetentionRoots {
+    format: VaultFormat;
     object_kind: "retention_roots";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** `rr_` + 32 hex. */
     object_id: string;
@@ -305,11 +305,11 @@ export interface GitvaultRetentionRoots {
         cutoff_at: string;
     } | null;
     /** Sorted by (dropped_at_generation, ref, oid); ≤ 50 000. */
-    roots: GitvaultRetentionRoot[];
+    roots: VaultRetentionRoot[];
     signature: string;
 }
 /** One `checkpoint_manifest.packs[]` entry — BOTH representations (§4.1). */
-export interface GitvaultCheckpointManifestPack {
+export interface VaultCheckpointManifestPack {
     object_id: string;
     plaintext_sha256: string;
     plaintext_size_bytes: string;
@@ -317,16 +317,16 @@ export interface GitvaultCheckpointManifestPack {
     size_bytes: string;
 }
 /** `checkpoint_manifest` plaintext (schema `checkpoint_manifest.json`) — encrypted at rest. */
-export interface GitvaultCheckpointManifest {
-    format: GitvaultFormat;
+export interface VaultCheckpointManifest {
+    format: VaultFormat;
     object_kind: "checkpoint_manifest";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** `chk_` + 32 hex. */
     object_id: string;
     covers_through_generation: string;
     git_object_format: "sha1";
-    packs: GitvaultCheckpointManifestPack[];
+    packs: VaultCheckpointManifestPack[];
     /** Σ packs[i].plaintext_size_bytes (the manifest itself excluded). */
     total_plaintext_size_bytes: string;
     ref_state_hmac: string;
@@ -335,15 +335,15 @@ export interface GitvaultCheckpointManifest {
     signature: string;
 }
 /** `checkpoint_claim_set` (schema `checkpoint_claim_set.json`) — plaintext-structured, owner-signed, stored at `checkpoints/<ccs_id>.claims.json`. */
-export interface GitvaultCheckpointClaimSet {
-    format: GitvaultFormat;
+export interface VaultCheckpointClaimSet {
+    format: VaultFormat;
     object_kind: "checkpoint_claim_set";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** `ccs_` + 32 hex. */
     object_id: string;
-    manifest_receipt: GitvaultCheckpointManifestReceipt;
-    ordered_pack_receipts: GitvaultCheckpointPackReceipt[];
+    manifest_receipt: VaultCheckpointManifestReceipt;
+    ordered_pack_receipts: VaultCheckpointPackReceipt[];
     /** manifest_receipt.size_bytes + Σ pack size_bytes (the claim set itself excluded). */
     total_stored_size_bytes: string;
     covers_through_generation: string;
@@ -351,10 +351,10 @@ export interface GitvaultCheckpointClaimSet {
     signature: string;
 }
 /** `retention_cutoff` (schema `retention_cutoff.json`) — control-plane-signed clock attestation, stored at `retention/<rc_id>.ticket.json`. */
-export interface GitvaultRetentionCutoff {
-    format: GitvaultFormat;
+export interface VaultRetentionCutoff {
+    format: VaultFormat;
     object_kind: "retention_cutoff";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** `rc_` + 32 hex. */
     object_id: string;
@@ -367,10 +367,10 @@ export interface GitvaultRetentionCutoff {
     signature: string;
 }
 /** `activation_token` (schema `activation_token.json`) — minted by token exchange, consumed at apply activation (§4.10). */
-export interface GitvaultActivationToken {
-    format: GitvaultFormat;
+export interface VaultActivationToken {
+    format: VaultFormat;
     object_kind: "activation_token";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** `ct_` + 32 hex. */
     object_id: string;
@@ -387,7 +387,7 @@ export interface GitvaultActivationToken {
     signature: string;
 }
 /** One `ref_transaction.updates[]` entry (schema `ref_transaction.json`, §6.1). */
-export interface GitvaultRefUpdate {
+export interface VaultRefUpdate {
     ref: string;
     /** `null` ONLY for creation. */
     expected_old_oid: string | null;
@@ -397,12 +397,12 @@ export interface GitvaultRefUpdate {
     force: boolean;
 }
 /** `ref_transaction` (schema `ref_transaction.json`). */
-export interface GitvaultRefTransaction {
+export interface VaultRefTransaction {
     /** 1..1000 updates naming pairwise-distinct refs. */
-    updates: GitvaultRefUpdate[];
+    updates: VaultRefUpdate[];
 }
-/** The query of `GET /gitvault/v1/vaults/:vault_id/heads` (schema `heads_listing_request.json`, D186). */
-export interface GitvaultHeadsListingRequest {
+/** The query of `GET /vaults/v1/:vault_id/heads` (schema `heads_listing_request.json`, D186). */
+export interface VaultHeadsListingRequest {
     /** The REQUIRED verification anchor — constant across one page sequence. */
     after_generation: string;
     /** The prior page's `next_cursor`, echoed UNCHANGED; omitted on the first request. */
@@ -411,16 +411,16 @@ export interface GitvaultHeadsListingRequest {
     limit: string;
 }
 /** One `heads_listing_page.heads[]` entry. */
-export interface GitvaultHeadsListingEntry {
+export interface VaultHeadsListingEntry {
     generation: string;
     stored_bytes_sha256: string;
 }
 /** The ONE frozen response of the heads listing (schema `heads_listing_page.json`). */
-export interface GitvaultHeadsListingPage {
-    format: GitvaultFormat;
+export interface VaultHeadsListingPage {
+    format: VaultFormat;
     repo_id: string;
     after_generation: string;
-    heads: GitvaultHeadsListingEntry[];
+    heads: VaultHeadsListingEntry[];
     has_more: boolean;
     /** `has_more == false ⇒ null`; `has_more == true ⇒ a non-null opaque token`. */
     next_cursor: string | null;
@@ -428,18 +428,18 @@ export interface GitvaultHeadsListingPage {
     total: string | null;
 }
 /** `override_completion_request` (schema `override_completion_request.json`) — `POST …/override-completions`. */
-export interface GitvaultOverrideCompletionRequest {
+export interface VaultOverrideCompletionRequest {
     operation_id: string;
-    capture_receipt: GitvaultCaptureReceipt;
+    capture_receipt: VaultCaptureReceipt;
 }
 /**
  * `head` (schema `head.json`) — generations ≥ 1. Every member is typed; the
  * checkpoint block is the §4.7 claim-set binding.
  */
-export interface GitvaultHead {
-    format: GitvaultFormat;
+export interface VaultHead {
+    format: VaultFormat;
     object_kind: "head";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     generation: string;
     /** Stored-bytes hash of the predecessor (genesis for generation 1). */
@@ -451,44 +451,44 @@ export interface GitvaultHead {
      * (increment-by-one, no skip).
      */
     epoch: string;
-    wal_entries: GitvaultWalPackReceipt[];
-    ref_state: GitvaultRefStateReceipt;
-    retention_roots: GitvaultRetentionRootsReceipt;
-    checkpoint: GitvaultCheckpointBlock | null;
+    wal_entries: VaultWalPackReceipt[];
+    ref_state: VaultRefStateReceipt;
+    retention_roots: VaultRetentionRootsReceipt;
+    checkpoint: VaultCheckpointBlock | null;
     checkpoint_purpose: "ordinary_push" | "maintenance_cycle" | "repair" | null;
-    capture_binding: GitvaultCaptureBinding | null;
-    repair: GitvaultRepairDescriptor | null;
-    transition: GitvaultTransitionEnvelope | null;
+    capture_binding: VaultCaptureBinding | null;
+    repair: VaultRepairDescriptor | null;
+    transition: VaultTransitionEnvelope | null;
     /**
      * D197, rev 42: schema-optional, present ONLY on a head that publishes an
      * updated `recipient_pin_manifest` (an addition or a receipted change).
      * Absent on every existing rev-41 head and most rev-42+ heads too.
      */
-    pin_manifest?: GitvaultPinManifestReceipt;
+    pin_manifest?: VaultPinManifestReceipt;
     writer_key_id: string;
     created_at: string;
     signature: string;
 }
 /** `common.json#/$defs/receipt_pin_manifest` — carried on `head.pin_manifest` / `vault_genesis.pin_manifest` (D197, rev 42). */
-export interface GitvaultPinManifestReceipt {
+export interface VaultPinManifestReceipt {
     object_kind: "recipient_pin_manifest";
     pin_manifest_version: string;
     stored_bytes_sha256: string;
     size_bytes: string;
 }
 /** Any signed `r402s/v0` object: a JSON object carrying `object_kind` + a single top-level `signature`. */
-export interface GitvaultSignedObject {
-    object_kind: GitvaultObjectKind;
+export interface VaultSignedObject {
+    object_kind: VaultObjectKind;
     signature: string;
     [member: string]: unknown;
 }
 /** The AAD of an AEAD frame (protocol §2): exactly these seven members, JCS-serialized. */
-export interface GitvaultFrameAad {
+export interface VaultFrameAad {
     repo_id: string;
-    object_kind: GitvaultEncryptedObjectKind;
+    object_kind: VaultEncryptedObjectKind;
     object_id: string;
     epoch: string;
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     magic: "R402S0";
     suite_id: "01";
 }
@@ -499,7 +499,7 @@ export interface GitvaultFrameAad {
  * rotation-attempt envelope) — two genuinely different object shapes, never
  * one shape with an optional-null member.
  */
-export type GitvaultEnvelopeAad = {
+export type VaultEnvelopeAad = {
     repo_id: string;
     epoch: string;
     recipient_kind: "principal";
@@ -512,7 +512,7 @@ export type GitvaultEnvelopeAad = {
     recipient_fingerprint: string;
 };
 /** Result of sealing an AEAD frame — everything a finalization receipt is compared against. */
-export interface GitvaultSealedFrame {
+export interface VaultSealedFrame {
     /** The complete framed blob: `"R402S0"` ‖ `0x01` ‖ 24-byte nonce ‖ ct‖tag. */
     frame: Uint8Array;
     /** SHA-256 over the complete frame (what receipts call `ciphertext_sha256`). */
@@ -523,41 +523,41 @@ export interface GitvaultSealedFrame {
     nonce_hex: string;
 }
 /** Result of sealing a `key_envelope` — the signed object plus its stored-bytes identity. */
-export interface GitvaultSealedKeyEnvelope {
-    envelope: GitvaultKeyEnvelope;
+export interface VaultSealedKeyEnvelope {
+    envelope: VaultKeyEnvelope;
     /** JCS of the signed envelope (what is PUT and what the receipt hashes). */
     stored_bytes: Uint8Array;
     stored_bytes_sha256: string;
     size_bytes: string;
     /** The receipt embedded in `vault_genesis.envelopes[]`. */
-    receipt: GitvaultKeyEnvelopeReceipt;
+    receipt: VaultKeyEnvelopeReceipt;
 }
 /** A raw Ed25519 identity: 32-byte seed + derived raw public key. */
-export interface GitvaultSigningKeypair {
+export interface VaultSigningKeypair {
     /** 32-byte seed (RFC 8032 private key). */
     seed: Uint8Array;
     /** 32-byte raw public key. */
     public_key: Uint8Array;
 }
 /** A raw X25519 identity: 32-byte private scalar + raw public key. */
-export interface GitvaultEncryptionKeypair {
+export interface VaultEncryptionKeypair {
     /** 32-byte X25519 private key. */
     private_key: Uint8Array;
     /** 32-byte raw public key. */
     public_key: Uint8Array;
 }
 /** The outcome of a strict parse (protocol §1): the parsed object, or the named rejection reason. */
-export type GitvaultStrictParseReason = "json-number" | "duplicate-member" | "invalid-json" | "noncanonical-encoding";
+export type VaultStrictParseReason = "json-number" | "duplicate-member" | "invalid-json" | "noncanonical-encoding";
 /**
  * The `rotate_epoch_payload.reason` values (D199) — four urgent + one
- * elective. `writer_key_revoked` (D6/D227, gitvault-multi-writer rev 47,
+ * elective. `writer_key_revoked` (D6/D227, vault-multi-writer rev 47,
  * task 5.9) is the NEW owner + step-up reason for a DELIBERATE, caller-
  * initiated writer-key removal — distinct from `recipient_key_revoked`
  * (the pre-existing ENCRYPTION-side reason) and from the reasons carried
  * per-entry on `writer_set_update.removed[]` (a narrower 3-value vocabulary
  * — see that field's own doc comment below).
  */
-export type GitvaultRotationReason = "member_removed" | "recipient_key_revoked" | "epoch_secret_exposed" | "elective_rekey" | "writer_key_revoked";
+export type VaultRotationReason = "member_removed" | "recipient_key_revoked" | "epoch_secret_exposed" | "elective_rekey" | "writer_key_revoked";
 /**
  * `rotation_attempt_descriptor` (schema `rotation_attempt_descriptor.json`,
  * D195) — writer-signed, create-only, path-addressed at
@@ -566,10 +566,10 @@ export type GitvaultRotationReason = "member_removed" | "recipient_key_revoked"
  * — the object's own path key, derived AFTER every field below (including
  * `attempt_key_commitment`) is fixed.
  */
-export interface GitvaultRotationAttemptDescriptor {
-    format: GitvaultFormat;
+export interface VaultRotationAttemptDescriptor {
+    format: VaultFormat;
     object_kind: "rotation_attempt_descriptor";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     base_head_sha256: string;
     new_epoch: string;
@@ -586,7 +586,7 @@ export interface GitvaultRotationAttemptDescriptor {
     /** `HMAC-SHA-256(K_digest("epoch_rotation_attempt"), JCS(this object's own fields minus this field), ikm=K_e)`. */
     attempt_key_commitment: string;
     /**
-     * D227 (rev 47, gitvault-multi-writer, task 5.9, NEW fields).
+     * D227 (rev 47, vault-multi-writer, task 5.9, NEW fields).
      * SCHEMA-OPTIONAL, present together IFF this attempt's co-riding
      * `rotate_epoch_payload` carries a `writer_set_update` — frozen at THIS
      * attempt's own admission fence, the SAME D194 discipline
@@ -603,7 +603,7 @@ export interface GitvaultRotationAttemptDescriptor {
  * `rotate_epoch_payload.self_open_attestation` (D209, rev 44, NEW field) —
  * the rotating client's claim that it round-tripped its OWN new-epoch
  * `key_envelope` through the REAL reader entry point
- * ({@link import("./gitvault.crypto.js").openEpochRotationForRecipient})
+ * ({@link import("./vault.crypto.js").openEpochRotationForRecipient})
  * BEFORE submitting. The two generation fields are `fsck`'s OWN
  * `chain_verified_to_generation` / `decryptable_to_generation` split,
  * verbatim (hex16 generations) — one honest number, two consumers, never a
@@ -623,7 +623,7 @@ export interface GitvaultRotationAttemptDescriptor {
  * above; the server never holds a recipient private key. Same evidentiary
  * class as D200's `epoch_key_commitment` per-recipient self-check.
  */
-export interface GitvaultEpochRotationSelfOpen {
+export interface VaultEpochRotationSelfOpen {
     /**
      * `"opened"` — the writer is itself an included recipient and opened its
      * own new-epoch envelope through the reader entry point.
@@ -653,11 +653,11 @@ export interface GitvaultEpochRotationSelfOpen {
  * the JCS bytes carried (base64url-encoded, hash-pinned) inside
  * `head.transition.payload` when `transition.kind == "rotate_epoch"`.
  */
-export interface GitvaultRotateEpochPayload {
+export interface VaultRotateEpochPayload {
     new_epoch: string;
     /** The full 64-hex digest of the referenced `rotation_attempt_descriptor`'s stored bytes. */
     rotation_id: string;
-    reason: GitvaultRotationReason;
+    reason: VaultRotationReason;
     recipient_state_version: string;
     recipient_revocation_version: string;
     /** D204 (rev 43): must be present and equal the referenced attempt descriptor's own; `false` for every rotation but the pre-rev-42 repair bootstrap. */
@@ -670,23 +670,23 @@ export interface GitvaultRotateEpochPayload {
     excluded_unconfirmed_principal_ids: string[];
     /** Reserved, always `null` in this revision (D197). */
     recipient_authority_attestation: null;
-    envelopes: GitvaultRotationEnvelopePair[];
+    envelopes: VaultRotationEnvelopePair[];
     /**
      * D209 (rev 44, NEW field). SCHEMA-OPTIONAL for exactly the historical-
      * parse reason (a pre-rev-44 committed rotation payload structurally
      * cannot carry it); SEMANTICALLY REQUIRED on every admission at or after
      * this fold's own activation fence — an admission that omits it refuses
      * `EPOCH_ROTATION_SELF_OPEN_UNPROVEN`. This SDK's own {@link
-     * import("../node/gitvault-publication.js").GitvaultVault.rotateEpoch}
+     * import("../node/vault-publication.js").Vault.rotateEpoch}
      * always populates it on every submitted rotation.
      */
-    self_open_attestation?: GitvaultEpochRotationSelfOpen;
+    self_open_attestation?: VaultEpochRotationSelfOpen;
     /**
-     * D227 (rev 47, gitvault-multi-writer, NEW field). SCHEMA-OPTIONAL, present
+     * D227 (rev 47, vault-multi-writer, NEW field). SCHEMA-OPTIONAL, present
      * IFF this rotation ALSO removes one or more writers — writer removal
      * rides `rotate_epoch`, writer addition never does (that is
      * `add_writer_key`'s own transition kind). Mirrors the gateway's
-     * `WriterSetUpdatePayload` (services/gitvault/writer-state.ts) exactly.
+     * `WriterSetUpdatePayload` (services/vault/writer-state.ts) exactly.
      */
     writer_set_update?: {
         base_version: string;
@@ -694,7 +694,7 @@ export interface GitvaultRotateEpochPayload {
         next_version: string;
         next_sha256: string;
         /**
-         * A NARROWER 3-value vocabulary than {@link GitvaultRotationReason}
+         * A NARROWER 3-value vocabulary than {@link VaultRotationReason}
          * above (this rotation's own top-level `reason`) — the gateway's
          * `writer_set_update` schema (`common.json#/$defs/writer_set_update`)
          * accepts only these three per-removed-writer reasons, deliberately
@@ -714,14 +714,14 @@ export interface GitvaultRotateEpochPayload {
 }
 /**
  * `add_writer_key_payload` (schema `add_writer_key_payload.json`,
- * gitvault-multi-writer rev 47, protocol §4.16/§4.17) — the JCS bytes
+ * vault-multi-writer rev 47, protocol §4.16/§4.17) — the JCS bytes
  * carried (base64url-encoded, hash-pinned) inside `head.transition.payload`
  * when `transition.kind == "add_writer_key"`. Byte-identical field names to
- * the gateway's own `AddWriterKeyPayload` (services/gitvault/writer-state.ts)
- * and this SDK's `gitvault-writer-state.ts` port of it — this is the WIRE
+ * the gateway's own `AddWriterKeyPayload` (services/vault/writer-state.ts)
+ * and this SDK's `vault-writer-state.ts` port of it — this is the WIRE
  * type the parser below decodes into that same shape.
  */
-export interface GitvaultAddWriterKeyPayload {
+export interface VaultAddWriterKeyPayload {
     schema: "r402s.add-writer-key/v1";
     repo_id: string;
     base_writer_set: {
@@ -750,7 +750,7 @@ export interface GitvaultAddWriterKeyPayload {
     };
 }
 /** One `recipient_pin_manifest.pins[]` entry (D197). */
-export interface GitvaultRecipientPinManifestEntry {
+export interface VaultRecipientPinManifestEntry {
     principal_id: string;
     ek_fingerprint: string;
     pinned_at: string;
@@ -765,21 +765,21 @@ export interface GitvaultRecipientPinManifestEntry {
  * `recipient-pins/<pin_manifest_version>.json`, chain-referenced only via
  * `head.pin_manifest` / `vault_genesis.pin_manifest`.
  */
-export interface GitvaultRecipientPinManifest {
-    format: GitvaultFormat;
+export interface VaultRecipientPinManifest {
+    format: VaultFormat;
     object_kind: "recipient_pin_manifest";
-    suite: GitvaultSuite;
+    suite: VaultSuite;
     repo_id: string;
     /** Monotonic hex16 — exactly the predecessor's version + 1, or exactly `1` if none. */
     pin_manifest_version: string;
     /** The predecessor's stored-bytes sha256, or the 64-`0` zero-value sentinel when `pin_manifest_version == 1`. */
     base_pin_manifest_sha256: string;
-    pins: GitvaultRecipientPinManifestEntry[];
+    pins: VaultRecipientPinManifestEntry[];
     writer_key_id: string;
     signature: string;
 }
 /** The `recipient_pin_manifest`'s zero-value sentinel `base_pin_manifest_sha256` when no predecessor manifest exists (D197). */
-export declare const GITVAULT_ZERO_SHA256_SENTINEL: string;
+export declare const VAULT_ZERO_SHA256_SENTINEL: string;
 /**
  * `recipient_confirmation_receipt` (schema `recipient_confirmation_receipt.json`,
  * D197, `rcr_`) — control-plane-signed, immutable, ID-addressed at
@@ -787,8 +787,8 @@ export declare const GITVAULT_ZERO_SHA256_SENTINEL: string;
  * `/repin` ceremony it authorizes. Single-use: consumed by admission of the
  * `recipient_pin_manifest` entry that cites its stored-bytes hash.
  */
-export interface GitvaultRecipientConfirmationReceipt {
-    format: GitvaultFormat;
+export interface VaultRecipientConfirmationReceipt {
+    format: VaultFormat;
     object_kind: "recipient_confirmation_receipt";
     /** `rcr_` + 32 lowercase hex. */
     object_id: string;
@@ -806,7 +806,7 @@ export interface GitvaultRecipientConfirmationReceipt {
 }
 /**
  * `recipient_open_receipt` (schema `recipient_open_receipt.json`, D210, rev
- * 44, `ror_`) — the EVIDENCE mirror of {@link GitvaultRecipientConfirmationReceipt}'s
+ * 44, `ror_`) — the EVIDENCE mirror of {@link VaultRecipientConfirmationReceipt}'s
  * authorization class: minted AFTER the fact it records (a recipient's own
  * proof that it opened its envelope through the real reader path), never
  * consumed, never superseded, and never read by admission. The two
@@ -820,8 +820,8 @@ export interface GitvaultRecipientConfirmationReceipt {
  * ek_fingerprint, decryptable_to_generation)` — an exact-tuple replay
  * returns this SAME object.
  */
-export interface GitvaultOpenReceipt {
-    format: GitvaultFormat;
+export interface VaultOpenReceipt {
+    format: VaultFormat;
     object_kind: "recipient_open_receipt";
     /** `ror_` + 32 lowercase hex. */
     object_id: string;
@@ -839,4 +839,4 @@ export interface GitvaultOpenReceipt {
     service_key_id: string;
     signature: string;
 }
-//# sourceMappingURL=gitvault.types.d.ts.map
+//# sourceMappingURL=vault.types.d.ts.map