@run402/sdk 4.94.0 → 4.96.0

package/dist/node/{gitvault-address.d.ts → vault-address.d.ts}

@@ -1,5 +1,5 @@
 /**
- * gitvault D6 — named addressing resolution + id-pinning (repo-first-onramp
+ * vault D6 — named addressing resolution + id-pinning (repo-first-onramp
  * task 4.5).
  *
  * Two things live here, both Node-only (local git state):
@@ -8,9 +8,9 @@
  *     was resolved from) in the repository's LOCAL git config
  *     (`git config --local` — this checkout's own `.git/config`, never
  *     global). "Local git state" per design D6's id-pinning paragraph.
- *   - `resolveGitvaultAddress`: the orchestrator the remote helper and
- *     `gitvault snapshot` drive — pinned id first, then dispatch on the
- *     address's form (id vs slug — {@link gitvaultRemoteAddressForm}), then
+ *   - `resolveVaultAddress`: the orchestrator the remote helper and
+ *     `vault snapshot` drive — pinned id first, then dispatch on the
+ *     address's form (id vs slug — {@link vaultRemoteAddressForm}), then
  *     (slug-form only, opt-in via `allow_create`) push-to-create on a miss.
  *
  * ID-PINNING RATIONALE (design D6, "resolved"): "on first contact the helper
@@ -27,11 +27,11 @@
  * and no exposure to a later rename at all) — structurally better than a
  * redirect, per the design's own framing.
  */
-import { type GitvaultRemoteAddress } from "../namespaces/gitvault.js";
-import type { GitvaultTransport } from "./gitvault-publication.js";
-import type { GitvaultCreationResult } from "./gitvault-creation-journal.js";
-import type { GitvaultKeystore } from "./gitvault-keystore.js";
-export interface GitvaultPinnedRepo {
+import { type VaultRemoteAddress } from "../namespaces/repos.js";
+import type { VaultTransport } from "./vault-publication.js";
+import type { VaultCreationResult } from "./vault-creation-journal.js";
+import type { VaultKeystore } from "./vault-keystore.js";
+export interface VaultPinnedRepo {
     repo_id: string;
     /** `null` if the pin predates this field, or was written by hand. */
     resolved_from: {
@@ -46,18 +46,18 @@ export interface GitvaultPinnedRepo {
     room: string | null;
 }
 /** Read this checkout's pinned `repo_id`, or `null` when nothing is pinned. */
-export declare function readPinnedGitvaultRepo(repoDir: string): Promise<GitvaultPinnedRepo | null>;
+export declare function readPinnedVaultRepo(repoDir: string): Promise<VaultPinnedRepo | null>;
 /**
  * Pin `repo_id` into this checkout's LOCAL git config — and, when resolved
  * from a slug-form address, the address it was resolved from (diagnostic
- * only). `resolvedFrom` is omitted for an id-form pin (gitvault-client-
+ * only). `resolvedFrom` is omitted for an id-form pin (vault-client-
  * round-trips design D4): an id-form address has no org-slug/name pair to
- * record, and — per {@link resolveGitvaultAddress}'s own doc comment — the
+ * record, and — per {@link resolveVaultAddress}'s own doc comment — the
  * design's instruction is that pinning "only resolves names"; id-form is
  * already rename-proof, so this pin exists purely to skip the resolution
  * ROUND TRIP, not to survive a rename.
  */
-export declare function pinGitvaultRepo(repoDir: string, repoId: string, resolvedFrom?: {
+export declare function pinVaultRepo(repoDir: string, repoId: string, resolvedFrom?: {
     org_slug: string;
     repo_name: string;
 }, ids?: {
@@ -68,10 +68,10 @@ export declare function pinGitvaultRepo(repoDir: string, repoId: string, resolve
 /**
  * add-room-invite design D10: a bare `rooms join <key>` arrival standing
  * inside a git repository pins `r402.orgId`/`r402.room` in this checkout's
- * LOCAL git config — the SAME two keys {@link pinGitvaultRepo} writes
+ * LOCAL git config — the SAME two keys {@link pinVaultRepo} writes
  * alongside a vault's `r402.repoId` — but WITHOUT one, since a room-only
  * join has no vault to pin. Read back by {@link readPinnedRoomBinding},
- * independent of {@link readPinnedGitvaultRepo}'s own gate on `r402.repoId`
+ * independent of {@link readPinnedVaultRepo}'s own gate on `r402.repoId`
  * being present (a room-only checkout never sets it, so that reader would
  * otherwise see this pin as absent).
  */
@@ -84,19 +84,19 @@ export declare function readPinnedRoomBinding(repoDir: string): Promise<{
     org_id: string | null;
     room: string | null;
 }>;
-export interface GitvaultAddressResolution {
+export interface VaultAddressResolution {
     repo_id: string;
     project_id: string;
     org_id: string;
     form: "id" | "slug";
     /**
      * How this resolution happened: a local git-config pin, the local
-     * keystore's own project→repo file (gitvault-offline-clone-resolve,
-     * id-form only — {@link GitvaultKeystore.findRepoByProject}), a live
+     * keystore's own project→repo file (vault-offline-clone-resolve,
+     * id-form only — {@link VaultKeystore.findRepoByProject}), a live
      * network resolution, or a fresh push-to-create. `"pin"` and `"keystore"`
      * are BOTH zero-transport-operation answers (see {@link offline}); they
      * are kept distinct only so a caller that cares about provenance can tell
-     * them apart — {@link recoverStaleGitvaultPin}'s generic `offline` check
+     * them apart — {@link recoverStaleVaultPin}'s generic `offline` check
      * treats them identically.
      */
     via: "pin" | "keystore" | "resolved" | "created";
@@ -108,34 +108,34 @@ export interface GitvaultAddressResolution {
     /** Set only when THIS call push-to-created the vault (`via === "created"`); `null` otherwise. */
     created: {
         deduplicated: boolean;
-        recovery_receipt: GitvaultCreationResult["recovery_receipt"];
+        recovery_receipt: VaultCreationResult["recovery_receipt"];
         genesis_sha256: string;
     } | null;
     /**
      * `true` iff this resolution performed ZERO transport operations (an
      * id-carrying pin). Stale-pin recovery is then the caller's to arm on the
-     * verb's first repo-scoped read — see {@link recoverStaleGitvaultPin}.
+     * verb's first repo-scoped read — see {@link recoverStaleVaultPin}.
      */
     offline: boolean;
 }
-export interface ResolveGitvaultAddressOptions {
-    keystore: GitvaultKeystore;
-    transport: GitvaultTransport;
-    /** The parsed remote address (`parseGitvaultRemoteUrl`'s output) — id-form or slug-form, undiscriminated. */
-    address: GitvaultRemoteAddress;
+export interface ResolveVaultAddressOptions {
+    keystore: VaultKeystore;
+    transport: VaultTransport;
+    /** The parsed remote address (`parseVaultRemoteUrl`'s output) — id-form or slug-form, undiscriminated. */
+    address: VaultRemoteAddress;
     /** The local working tree, for reading/writing the pin. Omit for a repository-free read (e.g. `git ls-remote`) — pinning is then skipped, never a failure. */
     repo_dir?: string;
-    /** Push-to-create on a slug-form miss (D6). `false` (the default) makes a miss an ordinary not-found refusal — the read-only path (`list`/`fetch`, `gitvault status`). */
+    /** Push-to-create on a slug-form miss (D6). `false` (the default) makes a miss an ordinary not-found refusal — the read-only path (`list`/`fetch`, `vault status`). */
     allow_create?: boolean;
     client_creation_id?: string;
     service_public_key?: Uint8Array | string;
-    /** Fires once, only when THIS call allocated the vault (mirrors `Gitvault.push`'s `onVaultCreated`). */
-    onVaultCreated?: (created: NonNullable<GitvaultAddressResolution["created"]>) => void | Promise<void>;
+    /** Fires once, only when THIS call allocated the vault (mirrors `Repos.capture`'s `onVaultCreated`). */
+    onVaultCreated?: (created: NonNullable<VaultAddressResolution["created"]>) => void | Promise<void>;
     /**
-     * gitvault-offline-clone-resolve (design D3): recovery-only. Skips BOTH
+     * vault-offline-clone-resolve (design D3): recovery-only. Skips BOTH
      * local answers — the git-config pin AND the id-form keystore consult —
      * forcing a genuine network resolution. Set exclusively by {@link
-     * recoverStaleGitvaultPin}'s internal re-resolve call: a stale local
+     * recoverStaleVaultPin}'s internal re-resolve call: a stale local
      * answer (a pin or a keystore file naming a repo that no longer resolves
      * or is no longer ours) must never be allowed to answer the SAME stale
      * fact back to itself, which is what would happen if recovery re-ran the
@@ -146,18 +146,18 @@ export interface ResolveGitvaultAddressOptions {
 /**
  * Resolve a parsed remote address to `{repo_id, project_id, org_id}`,
  * pinning `repo_id` in local git state on the first successful resolution —
- * of EITHER form (gitvault-client-round-trips design D4 widens the
+ * of EITHER form (vault-client-round-trips design D4 widens the
  * pre-existing slug-form pin, task 4.5, to id-form too) — and, when
  * `allow_create` is set and resolution misses, push-to-create it (task
  * 4.4/4.5, design D6). A pinned id that no longer resolves (404) clears the
  * pin and re-resolves ONCE through the ordinary form-dispatch path below,
  * rather than failing on a stale local pointer.
  */
-export declare function resolveGitvaultAddress(options: ResolveGitvaultAddressOptions): Promise<GitvaultAddressResolution>;
+export declare function resolveVaultAddress(options: ResolveVaultAddressOptions): Promise<VaultAddressResolution>;
 /**
  * Stale-pin recovery for OFFLINE resolutions (client-surface spec,
  * "Id-form remotes pin repo_id like slug-form remotes"; widened by
- * gitvault-offline-clone-resolve design D3 to the keystore-sourced offline
+ * vault-offline-clone-resolve design D3 to the keystore-sourced offline
  * answer too): a pin or a keystore hit resolves with no network read, so the
  * once-in-a-lifetime stale case (a vault deleted and re-allocated out from
  * under this checkout, or a keystore file left behind by an old allocation)
@@ -168,7 +168,7 @@ export declare function resolveGitvaultAddress(options: ResolveGitvaultAddressOp
  * or `null` when there is nothing to recover:
  *
  *   - a non-vault-absent error (anything outside the not-found family and the
- *     gateway's authorize-before-reveal `GITVAULT_ACCESS_DENIED` fold, which
+ *     gateway's authorize-before-reveal `VAULT_ACCESS_DENIED` fold, which
  *     deliberately makes "gone" and "not yours" one envelope) → `null`,
  *     rethrow yours;
  *   - re-resolution yielding the SAME `repo_id` → the local answer was fine
@@ -189,14 +189,14 @@ export declare function resolveGitvaultAddress(options: ResolveGitvaultAddressOp
  * Re-resolution failures are swallowed in favor of `null` (the caller's
  * original error is the truthful one to surface).
  */
-export declare function recoverStaleGitvaultPin(options: {
-    keystore: GitvaultKeystore;
-    transport: GitvaultTransport;
-    address: GitvaultRemoteAddress;
+export declare function recoverStaleVaultPin(options: {
+    keystore: VaultKeystore;
+    transport: VaultTransport;
+    address: VaultRemoteAddress;
     repo_dir: string;
     /** The offline resolution the failing verb ran under. */
-    resolution: GitvaultAddressResolution;
+    resolution: VaultAddressResolution;
     /** The verb's failure. */
     error: unknown;
-}): Promise<GitvaultAddressResolution | null>;
-//# sourceMappingURL=gitvault-address.d.ts.map
+}): Promise<VaultAddressResolution | null>;
+//# sourceMappingURL=vault-address.d.ts.map

package/dist/node/vault-address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-address.d.ts","sourceRoot":"","sources":["../../src/node/vault-address.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAA0B,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE1E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAuBzD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9D,2JAA2J;IAC3J,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iDAAiD;IACjD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,uJAAuJ;IACvJ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAcD,+EAA+E;AAC/E,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAU1F;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,CAAC,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAY1M;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9G;AAED,gNAAgN;AAChN,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAIpH;AAmBD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC;IACpB;;;;;;;;;OASG;IACH,GAAG,EAAE,KAAK,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IACjD,iFAAiF;IACjF,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,iGAAiG;IACjG,OAAO,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7H;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,cAAc,CAAC;IAC1B,0GAA0G;IAC1G,OAAO,EAAE,kBAAkB,CAAC;IAC5B,8JAA8J;IAC9J,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uKAAuK;IACvK,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IACzC,wGAAwG;IACxG,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoG9G;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,UAAU,EAAE,sBAAsB,CAAC;IACnC,0BAA0B;IAC1B,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAYzC"}

package/dist/node/{gitvault-address.js → vault-address.js}

@@ -1,5 +1,5 @@
 /**
- * gitvault D6 — named addressing resolution + id-pinning (repo-first-onramp
+ * vault D6 — named addressing resolution + id-pinning (repo-first-onramp
  * task 4.5).
  *
  * Two things live here, both Node-only (local git state):
@@ -8,9 +8,9 @@
  *     was resolved from) in the repository's LOCAL git config
  *     (`git config --local` — this checkout's own `.git/config`, never
  *     global). "Local git state" per design D6's id-pinning paragraph.
- *   - `resolveGitvaultAddress`: the orchestrator the remote helper and
- *     `gitvault snapshot` drive — pinned id first, then dispatch on the
- *     address's form (id vs slug — {@link gitvaultRemoteAddressForm}), then
+ *   - `resolveVaultAddress`: the orchestrator the remote helper and
+ *     `vault snapshot` drive — pinned id first, then dispatch on the
+ *     address's form (id vs slug — {@link vaultRemoteAddressForm}), then
  *     (slug-form only, opt-in via `allow_create`) push-to-create on a miss.
  *
  * ID-PINNING RATIONALE (design D6, "resolved"): "on first contact the helper
@@ -27,14 +27,14 @@
  * and no exposure to a later rename at all) — structurally better than a
  * redirect, per the design's own framing.
  */
-import { hardenedGit } from "./gitvault-snapshot.js";
-import { gitvaultRemoteAddressForm } from "../namespaces/gitvault.js";
-import { pushToCreateGitvault } from "./gitvault-push-to-create.js";
+import { hardenedGit } from "./vault-snapshot.js";
+import { vaultRemoteAddressForm } from "../namespaces/repos.js";
+import { pushToCreateVault } from "./vault-push-to-create.js";
 const CONFIG_KEY_REPO_ID = "r402.repoId";
 /** The `org-slug/name` text the pin was resolved from — diagnostic only; resolution never reads it back. */
 const CONFIG_KEY_ADDRESS = "r402.repoAddress";
 /**
- * The resolved ids beside the pin (gitvault-force-spelling-and-pin-fold).
+ * The resolved ids beside the pin (vault-force-spelling-and-pin-fold).
  * A pin carrying BOTH resolves fully OFFLINE — zero transport operations —
  * which is what removes the standing per-invocation validation read; a
  * legacy pin without them self-upgrades through one validation read.
@@ -45,9 +45,9 @@ const CONFIG_KEY_ORG_ID = "r402.orgId";
  * kygit-handoff design D10: the coordination-room key, written ALONGSIDE
  * `r402.projectId` (same value — a project's DEFAULT room is keyed by its
  * project id, p0016) so `cli/lib/org-context.mjs`'s room resolution has a
- * dedicated config key to read rather than special-casing gitvault's own
+ * dedicated config key to read rather than special-casing vault's own
  * `r402.projectId` name. Every existing pin site gets this for free, not
- * just `resume` — one write, every gitvault checkout benefits.
+ * just `resume` — one write, every vault checkout benefits.
  */
 const CONFIG_KEY_ROOM = "r402.room";
 async function readLocalGitConfig(repoDir, key) {
@@ -63,7 +63,7 @@ async function readLocalGitConfig(repoDir, key) {
     }
 }
 /** Read this checkout's pinned `repo_id`, or `null` when nothing is pinned. */
-export async function readPinnedGitvaultRepo(repoDir) {
+export async function readPinnedVaultRepo(repoDir) {
     const repoId = await readLocalGitConfig(repoDir, CONFIG_KEY_REPO_ID);
     if (!repoId)
         return null;
@@ -78,14 +78,14 @@ export async function readPinnedGitvaultRepo(repoDir) {
 /**
  * Pin `repo_id` into this checkout's LOCAL git config — and, when resolved
  * from a slug-form address, the address it was resolved from (diagnostic
- * only). `resolvedFrom` is omitted for an id-form pin (gitvault-client-
+ * only). `resolvedFrom` is omitted for an id-form pin (vault-client-
  * round-trips design D4): an id-form address has no org-slug/name pair to
- * record, and — per {@link resolveGitvaultAddress}'s own doc comment — the
+ * record, and — per {@link resolveVaultAddress}'s own doc comment — the
  * design's instruction is that pinning "only resolves names"; id-form is
  * already rename-proof, so this pin exists purely to skip the resolution
  * ROUND TRIP, not to survive a rename.
  */
-export async function pinGitvaultRepo(repoDir, repoId, resolvedFrom, ids) {
+export async function pinVaultRepo(repoDir, repoId, resolvedFrom, ids) {
     await hardenedGit(repoDir, ["config", "--local", CONFIG_KEY_REPO_ID, repoId]);
     if (resolvedFrom)
         await hardenedGit(repoDir, ["config", "--local", CONFIG_KEY_ADDRESS, `${resolvedFrom.org_slug}/${resolvedFrom.repo_name}`]);
@@ -102,10 +102,10 @@ export async function pinGitvaultRepo(repoDir, repoId, resolvedFrom, ids) {
 /**
  * add-room-invite design D10: a bare `rooms join <key>` arrival standing
  * inside a git repository pins `r402.orgId`/`r402.room` in this checkout's
- * LOCAL git config — the SAME two keys {@link pinGitvaultRepo} writes
+ * LOCAL git config — the SAME two keys {@link pinVaultRepo} writes
  * alongside a vault's `r402.repoId` — but WITHOUT one, since a room-only
  * join has no vault to pin. Read back by {@link readPinnedRoomBinding},
- * independent of {@link readPinnedGitvaultRepo}'s own gate on `r402.repoId`
+ * independent of {@link readPinnedVaultRepo}'s own gate on `r402.repoId`
  * being present (a room-only checkout never sets it, so that reader would
  * otherwise see this pin as absent).
  */
@@ -120,7 +120,7 @@ export async function readPinnedRoomBinding(repoDir) {
     return { org_id, room };
 }
 /** Clear a pin this checkout no longer trusts (design D4: a pinned id that 404s). Tolerates an absent key — `git config --unset` on a key that was never set is not a failure here. */
-async function clearPinnedGitvaultRepo(repoDir) {
+async function clearPinnedVaultRepo(repoDir) {
     for (const key of [CONFIG_KEY_REPO_ID, CONFIG_KEY_ADDRESS, CONFIG_KEY_PROJECT_ID, CONFIG_KEY_ORG_ID, CONFIG_KEY_ROOM]) {
         try {
             await hardenedGit(repoDir, ["config", "--local", "--unset", key]);
@@ -138,16 +138,16 @@ function isPinStale(e) {
 /**
  * Resolve a parsed remote address to `{repo_id, project_id, org_id}`,
  * pinning `repo_id` in local git state on the first successful resolution —
- * of EITHER form (gitvault-client-round-trips design D4 widens the
+ * of EITHER form (vault-client-round-trips design D4 widens the
  * pre-existing slug-form pin, task 4.5, to id-form too) — and, when
  * `allow_create` is set and resolution misses, push-to-create it (task
  * 4.4/4.5, design D6). A pinned id that no longer resolves (404) clears the
  * pin and re-resolves ONCE through the ordinary form-dispatch path below,
  * rather than failing on a stale local pointer.
  */
-export async function resolveGitvaultAddress(options) {
+export async function resolveVaultAddress(options) {
     if (options.repo_dir && !options.bypass_local_answers) {
-        const pinned = await readPinnedGitvaultRepo(options.repo_dir);
+        const pinned = await readPinnedVaultRepo(options.repo_dir);
         if (pinned) {
             // `form` below describes what THIS call was asked to resolve, not how
             // the pin originally came to exist (`resolved_from` alone can't tell —
@@ -157,39 +157,39 @@ export async function resolveGitvaultAddress(options) {
                 // Id-carrying pin: fully OFFLINE — zero transport operations. The
                 // stale-pin case (the vault deleted out from under this checkout)
                 // surfaces on the verb's first repo-scoped read instead; the caller
-                // arms {@link recoverStaleGitvaultPin} for that (client-surface
+                // arms {@link recoverStaleVaultPin} for that (client-surface
                 // spec, "Id-form remotes pin repo_id like slug-form remotes").
-                return { repo_id: pinned.repo_id, project_id: pinned.project_id, org_id: pinned.org_id, form: gitvaultRemoteAddressForm(options.address), via: "pin", address: pinned.resolved_from, created: null, offline: true };
+                return { repo_id: pinned.repo_id, project_id: pinned.project_id, org_id: pinned.org_id, form: vaultRemoteAddressForm(options.address), via: "pin", address: pinned.resolved_from, created: null, offline: true };
             }
             try {
                 // Legacy id-less pin: one validation read, then REWRITE the pin with
                 // the ids so every later invocation on this checkout is offline —
                 // self-upgrading, no migration step.
                 const record = await options.transport.getVaultRecord({ repo_id: pinned.repo_id });
-                await pinGitvaultRepo(options.repo_dir, record.repo_id, pinned.resolved_from ?? undefined, { project_id: record.project_id, org_id: record.org_id });
-                return { repo_id: record.repo_id, project_id: record.project_id, org_id: record.org_id, form: gitvaultRemoteAddressForm(options.address), via: "pin", address: pinned.resolved_from, created: null, offline: false };
+                await pinVaultRepo(options.repo_dir, record.repo_id, pinned.resolved_from ?? undefined, { project_id: record.project_id, org_id: record.org_id });
+                return { repo_id: record.repo_id, project_id: record.project_id, org_id: record.org_id, form: vaultRemoteAddressForm(options.address), via: "pin", address: pinned.resolved_from, created: null, offline: false };
             }
             catch (e) {
                 if (!isPinStale(e))
                     throw e;
-                await clearPinnedGitvaultRepo(options.repo_dir);
+                await clearPinnedVaultRepo(options.repo_dir);
                 // fall through to an ordinary (non-pinned) resolution, below
             }
         }
     }
-    const form = gitvaultRemoteAddressForm(options.address);
+    const form = vaultRemoteAddressForm(options.address);
     if (form === "id") {
         if (!options.bypass_local_answers) {
-            // gitvault-offline-clone-resolve (design D1/D2): consult the LOCAL
+            // vault-offline-clone-resolve (design D1/D2): consult the LOCAL
             // keystore before the network. D2's completeness argument: decrypting
             // anything from this vault requires exactly the keystore's repo file
             // (`k_repo_hex`), so a machine without one fails the clone at
-            // `GITVAULT_REPO_STATE_MISSING` no matter how resolution went —
+            // `VAULT_REPO_STATE_MISSING` no matter how resolution went —
             // "keystore-known" is therefore exactly the set of clones that can
             // actually complete, and the network read was only ever confirming a
             // fact this machine already held (110-530ms of RTT for 13-22ms of
             // server work). An id-form address always
-            // carries a real `org_id` (see `gitvaultRemoteAddressForm`), so the
+            // carries a real `org_id` (see `vaultRemoteAddressForm`), so the
             // lookup is always org-scoped — a project-id match under a different
             // org is a miss, never a guess. Deliberately runs even with NO
             // `repo_dir` (a repo-free `git ls-remote`): the keystore is
@@ -198,14 +198,14 @@ export async function resolveGitvaultAddress(options) {
             if (keystoreMatch) {
                 // Same offline handle shape the git-config pin branch above builds;
                 // `via: "keystore"` is the only distinguishing mark, so {@link
-                // recoverStaleGitvaultPin}'s generic `resolution.offline` check
+                // recoverStaleVaultPin}'s generic `resolution.offline` check
                 // covers this source unchanged. The git-config pin is written
                 // immediately — "on first successful use" of this answer, exactly
                 // where the network-resolved branch below writes it — so every
                 // LATER invocation on this checkout short-circuits through the pin
                 // check above instead of this keystore scan.
                 if (options.repo_dir)
-                    await pinGitvaultRepo(options.repo_dir, keystoreMatch.repo_id, undefined, { project_id: keystoreMatch.project_id, org_id: keystoreMatch.org_id });
+                    await pinVaultRepo(options.repo_dir, keystoreMatch.repo_id, undefined, { project_id: keystoreMatch.project_id, org_id: keystoreMatch.org_id });
                 return { repo_id: keystoreMatch.repo_id, project_id: keystoreMatch.project_id, org_id: keystoreMatch.org_id, form: "id", via: "keystore", address: null, created: null, offline: true };
             }
         }
@@ -217,17 +217,17 @@ export async function resolveGitvaultAddress(options) {
         // needed at all; id-form gets one anyway because the round trip itself
         // is the cost this change removes.
         if (options.repo_dir)
-            await pinGitvaultRepo(options.repo_dir, record.repo_id, undefined, { project_id: record.project_id, org_id: record.org_id });
+            await pinVaultRepo(options.repo_dir, record.repo_id, undefined, { project_id: record.project_id, org_id: record.org_id });
         return { repo_id: record.repo_id, project_id: record.project_id, org_id: record.org_id, form: "id", via: "resolved", address: null, created: null, offline: false };
     }
     const orgSlug = options.address.org_id;
     const repoName = options.address.project_id;
-    // `allow_create` delegates straight to `pushToCreateGitvault`, which
+    // `allow_create` delegates straight to `pushToCreateVault`, which
     // already opens with its OWN fast-path `findVaultByRepo` read (step 1 of
     // its own doc comment) — probing here first too would just double the
     // network read on every ordinary (non-creating) push.
     if (options.allow_create) {
-        const result = await pushToCreateGitvault({
+        const result = await pushToCreateVault({
             keystore: options.keystore,
             transport: options.transport,
             org_slug: orgSlug,
@@ -236,7 +236,7 @@ export async function resolveGitvaultAddress(options) {
             ...(options.service_public_key !== undefined ? { service_public_key: options.service_public_key } : {}),
         });
         if (options.repo_dir)
-            await pinGitvaultRepo(options.repo_dir, result.repo_id, { org_slug: orgSlug, repo_name: repoName }, { project_id: result.project_id, org_id: result.org_id });
+            await pinVaultRepo(options.repo_dir, result.repo_id, { org_slug: orgSlug, repo_name: repoName }, { project_id: result.project_id, org_id: result.org_id });
         if (!result.found && result.created)
             await options.onVaultCreated?.(result.created);
         return { repo_id: result.repo_id, project_id: result.project_id, org_id: result.org_id, form: "slug", via: result.found ? "resolved" : "created", address: { org_slug: orgSlug, repo_name: repoName }, created: result.created, offline: false };
@@ -246,13 +246,13 @@ export async function resolveGitvaultAddress(options) {
     // auto-followed and rethrows unchanged either way.
     const record = await options.transport.findVaultByRepo({ org_slug: orgSlug, repo_name: repoName });
     if (options.repo_dir)
-        await pinGitvaultRepo(options.repo_dir, record.repo_id, { org_slug: orgSlug, repo_name: repoName }, { project_id: record.project_id, org_id: record.org_id });
+        await pinVaultRepo(options.repo_dir, record.repo_id, { org_slug: orgSlug, repo_name: repoName }, { project_id: record.project_id, org_id: record.org_id });
     return { repo_id: record.repo_id, project_id: record.project_id, org_id: record.org_id, form: "slug", via: "resolved", address: { org_slug: orgSlug, repo_name: repoName }, created: null, offline: false };
 }
 /**
  * Stale-pin recovery for OFFLINE resolutions (client-surface spec,
  * "Id-form remotes pin repo_id like slug-form remotes"; widened by
- * gitvault-offline-clone-resolve design D3 to the keystore-sourced offline
+ * vault-offline-clone-resolve design D3 to the keystore-sourced offline
  * answer too): a pin or a keystore hit resolves with no network read, so the
  * once-in-a-lifetime stale case (a vault deleted and re-allocated out from
  * under this checkout, or a keystore file left behind by an old allocation)
@@ -263,7 +263,7 @@ export async function resolveGitvaultAddress(options) {
  * or `null` when there is nothing to recover:
  *
  *   - a non-vault-absent error (anything outside the not-found family and the
- *     gateway's authorize-before-reveal `GITVAULT_ACCESS_DENIED` fold, which
+ *     gateway's authorize-before-reveal `VAULT_ACCESS_DENIED` fold, which
  *     deliberately makes "gone" and "not yours" one envelope) → `null`,
  *     rethrow yours;
  *   - re-resolution yielding the SAME `repo_id` → the local answer was fine
@@ -284,20 +284,20 @@ export async function resolveGitvaultAddress(options) {
  * Re-resolution failures are swallowed in favor of `null` (the caller's
  * original error is the truthful one to surface).
  */
-export async function recoverStaleGitvaultPin(options) {
+export async function recoverStaleVaultPin(options) {
     if (!options.resolution.offline)
         return null;
     const err = options.error;
-    const vaultAbsentSignal = Boolean(err && (isPinStale(err) || err.code === "GITVAULT_ACCESS_DENIED" || err.status === 403));
+    const vaultAbsentSignal = Boolean(err && (isPinStale(err) || err.code === "VAULT_ACCESS_DENIED" || err.status === 403));
     if (!vaultAbsentSignal)
         return null;
     try {
-        await clearPinnedGitvaultRepo(options.repo_dir);
-        const fresh = await resolveGitvaultAddress({ keystore: options.keystore, transport: options.transport, address: options.address, repo_dir: options.repo_dir, bypass_local_answers: true });
+        await clearPinnedVaultRepo(options.repo_dir);
+        const fresh = await resolveVaultAddress({ keystore: options.keystore, transport: options.transport, address: options.address, repo_dir: options.repo_dir, bypass_local_answers: true });
         return fresh.repo_id === options.resolution.repo_id ? null : fresh;
     }
     catch {
         return null;
     }
 }
-//# sourceMappingURL=gitvault-address.js.map
+//# sourceMappingURL=vault-address.js.map

package/dist/node/vault-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-address.js","sourceRoot":"","sources":["../../src/node/vault-address.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAA2B,MAAM,wBAAwB,CAAC;AAEzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAI9D,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,4GAA4G;AAC5G,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,YAAY,CAAC;AACvC;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,WAAW,CAAC;AAcpC,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,GAAW;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5F,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,wEAAwE;QACxE,4DAA4D;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAe;IACvD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrI,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACtG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,YAAsD,EAAE,GAA+D;IACzL,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9E,IAAI,YAAY;QAAE,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC9I,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACzF,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,GAAyC;IAC7F,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACjF,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,gNAAgN;AAChN,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACzD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,uLAAuL;AACvL,KAAK,UAAU,oBAAoB,CAAC,OAAe;IACjD,KAAK,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,eAAe,CAAC,EAAE,CAAC;QACtH,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,gHAAgH;AAChH,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,GAAG,GAAG,CAA8C,CAAC;IAC3D,OAAO,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC;AACrH,CAAC;AAwDD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IAC3E,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,sEAAsE;YACtE,uEAAuE;YACvE,mEAAmE;YACnE,8BAA8B;YAC9B,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACvC,kEAAkE;gBAClE,kEAAkE;gBAClE,oEAAoE;gBACpE,6DAA6D;gBAC7D,+DAA+D;gBAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACnN,CAAC;YACD,IAAI,CAAC;gBACH,qEAAqE;gBACrE,kEAAkE;gBAClE,qCAAqC;gBACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnF,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClJ,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACpN,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBAC5B,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC7C,6DAA6D;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAClC,gEAAgE;YAChE,sEAAsE;YACtE,qEAAqE;YACrE,8DAA8D;YAC9D,6DAA6D;YAC7D,mEAAmE;YACnE,qEAAqE;YACrE,kEAAkE;YAClE,0CAA0C;YAC1C,iEAAiE;YACjE,qEAAqE;YACrE,+DAA+D;YAC/D,4DAA4D;YAC5D,oDAAoD;YACpD,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7G,IAAI,aAAa,EAAE,CAAC;gBAClB,oEAAoE;gBACpE,+DAA+D;gBAC/D,6DAA6D;gBAC7D,8DAA8D;gBAC9D,kEAAkE;gBAClE,+DAA+D;gBAC/D,mEAAmE;gBACnE,6CAA6C;gBAC7C,IAAI,OAAO,CAAC,QAAQ;oBAAE,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrK,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1L,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAgB,MAAM,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACnH,sEAAsE;QACtE,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,mCAAmC;QACnC,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChJ,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtK,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;IAE5C,kEAAkE;IAClE,yEAAyE;IACzE,sEAAsE;IACtE,sDAAsD;IACtD,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,QAAQ;YACnB,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvG,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxG,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ;YAAE,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjL,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpF,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnP,CAAC;IAED,yEAAyE;IACzE,gEAAgE;IAChE,mDAAmD;IACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,IAAI,OAAO,CAAC,QAAQ;QAAE,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjL,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9M,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAS1C;IACC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAkD,CAAC;IACvE,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;IACxH,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QACxL,OAAO,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/node/{gitvault-apply.d.ts → vault-apply.d.ts}

@@ -1,8 +1,8 @@
 /**
- * The gitvault deploy lane, supplied at last (change `gitvault-deploy-lane`).
+ * The vault deploy lane, supplied at last (change `vault-deploy-lane`).
  *
- * `add-gitvault` 5.6 built `runGitvaultDeploy` with the lane INJECTED and never
- * supplied one, so a project whose `gitvault_policy` is `required` could not be
+ * `add-vault` 5.6 built `runVaultDeploy` with the lane INJECTED and never
+ * supplied one, so a project whose `vault_policy` is `required` could not be
  * deployed by any published client. This module is that supplier, plus the
  * entry point the CLI calls in place of a bare `apply()`:
  *
@@ -12,11 +12,11 @@
  *     than reassembling it. Warning gating, CAS dedup, event emission, asset
  *     re-plan, and terminal polling are the same code every other deploy runs;
  *     the only difference is two extra wire fields.
- *   - {@link applyWithGitvault} decides whether any of that happens at all. A
+ *   - {@link applyWithVault} decides whether any of that happens at all. A
  *     project that is not `required` takes the untouched path: no capture, no
  *     token, no extra refusal, one policy read.
  *
- * THE COROUTINE, because it is the non-obvious part. `runGitvaultDeploy` wants
+ * THE COROUTINE, because it is the non-obvious part. `runVaultDeploy` wants
  * two separable steps (plan, then commit) with the vault push running between
  * them; `Deploy.apply()` is one call. The lane bridges them with a pair of
  * deferreds: `apply()`'s `authorize` hook fires once the plan exists and its
@@ -27,18 +27,18 @@
  */
 import { type NextAction } from "../errors.js";
 import type { Deploy } from "../namespaces/deploy.js";
-import type { Gitvault } from "../namespaces/gitvault.js";
+import type { Repos } from "../namespaces/repos.js";
 import type { ApplyOptions, DeployResult, LegacyWarningEntry, ReleaseSpec } from "../namespaces/deploy.types.js";
-import type { GitvaultDeployLane, GitvaultDeployResult } from "./gitvault-deploy.js";
+import type { VaultDeployLane, VaultDeployResult } from "./vault-deploy.js";
 export interface ApplyDeployLaneOptions {
     /** The apply engine (`r._applyEngine`). */
     engine: Deploy;
     spec: ReleaseSpec;
     /** Everything a normal `apply()` takes: events, idempotency key, warning wallets. */
-    apply?: Omit<ApplyOptions, "gitvault">;
+    apply?: Omit<ApplyOptions, "vault">;
 }
-/** A lane that is also cancellable, because `runGitvaultDeploy` may never commit. */
-export interface ApplyDeployLane extends GitvaultDeployLane {
+/** A lane that is also cancellable, because `runVaultDeploy` may never commit. */
+export interface ApplyDeployLane extends VaultDeployLane {
     /**
      * Tell the in-flight apply that no commit is coming. Safe to call always —
      * a no-op once the apply has settled — and safe to call twice.
@@ -48,8 +48,8 @@ export interface ApplyDeployLane extends GitvaultDeployLane {
     result(): DeployResult | null;
 }
 export declare function createApplyDeployLane(options: ApplyDeployLaneOptions): ApplyDeployLane;
-/** What the deploy did about gitvault, and why. */
-export type GitvaultApplyMode = 
+/** What the deploy did about vault, and why. */
+export type VaultApplyMode = 
 /** No vault, or the policy read did not resolve — the plain path ran. */
 {
     kind: "none";
@@ -61,9 +61,9 @@ export type GitvaultApplyMode =
     repo_id: string;
 }
 /**
- * A vault exists but `gitvault_policy` was never set either way — D3:
+ * A vault exists but `vault_policy` was never set either way — D3:
  * allocating a vault no longer flips the policy, so this is the ordinary
- * shape for a project whose vault came from `run402 gitvault init` (or a
+ * shape for a project whose vault came from `run402 repos create` (or a
  * lazy first push) and nobody has opted into gating deploys yet. The plain
  * path ran, and the DeployResult carries the offer/warning (see
  * {@link decorateUngatedResult}).
@@ -78,23 +78,23 @@ export type GitvaultApplyMode =
     repo_id: string;
 };
 /** `run402 repos policy required` — the offer D3 attaches to every ungated deploy. */
-export declare function gitvaultPolicyRequiredNextAction(repoId: string): NextAction;
+export declare function vaultPolicyRequiredNextAction(repoId: string): NextAction;
 /** The standing `warnings[]` entry D3 attaches to every ungated deploy, until the policy is set either way. */
-export declare function gitvaultUngatedWarning(repoId: string): LegacyWarningEntry;
-export interface ApplyWithGitvaultResult {
-    mode: GitvaultApplyMode;
+export declare function vaultUngatedWarning(repoId: string): LegacyWarningEntry;
+export interface ApplyWithVaultResult {
+    mode: VaultApplyMode;
     /** The deploy result. `null` when a vaulted deploy did not reach a commit. */
     deploy: DeployResult | null;
     /** The five-outcome envelope. `null` on every non-`required` path. */
-    gitvault: GitvaultDeployResult | null;
+    vault: VaultDeployResult | null;
 }
-export interface ApplyWithGitvaultOptions {
+export interface ApplyWithVaultOptions {
     sdk: {
         _applyEngine: Deploy;
-        gitvault: Gitvault;
+        repos: Repos;
     };
     spec: ReleaseSpec;
-    apply?: Omit<ApplyOptions, "gitvault">;
+    apply?: Omit<ApplyOptions, "vault">;
     /** The work tree to capture. Defaults to the process cwd. */
     repo_dir?: string;
     /** Override the keystore root (tests, non-default profiles). */
@@ -106,18 +106,18 @@ export interface ApplyWithGitvaultOptions {
     /**
      * Capture a dirty tree anyway. Default `false` — a dirty work tree refuses
      * `SNAPSHOT_DIRTY_TREE` before this deploy's capture runs at all (same
-     * default as the manual `repos snapshot` lane; see `gitvault-snapshot.ts`).
+     * default as the manual `repos capture` lane; see `vault-snapshot.ts`).
      * Has no effect on a `none`/`grandfathered`/`ungated` deploy, which never
      * captures.
      */
     allowDirty?: boolean;
-    /** Receives the `gitvault_commit` line the moment the snapshot exists. */
+    /** Receives the `vault_commit` line the moment the snapshot exists. */
     onCommitLine?: (line: string) => void;
     /** Target passthrough; a Core target never engages the vault lane. */
     target?: "cloud" | "core";
 }
 /**
- * Deploy, taking the project's `gitvault_policy` into account.
+ * Deploy, taking the project's `vault_policy` into account.
  *
  * NOT `required` — no vault, an unreadable policy, a Core target, or an
  * explicit `grandfathered` — runs `apply()` with the caller's own options and
@@ -125,5 +125,5 @@ export interface ApplyWithGitvaultOptions {
  * user's deploy, and the only cost this function may add to it is the single
  * policy read that determines the project is not `required`.
  */
-export declare function applyWithGitvault(options: ApplyWithGitvaultOptions): Promise<ApplyWithGitvaultResult>;
-//# sourceMappingURL=gitvault-apply.d.ts.map
+export declare function applyWithVault(options: ApplyWithVaultOptions): Promise<ApplyWithVaultResult>;
+//# sourceMappingURL=vault-apply.d.ts.map

package/dist/node/vault-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-apply.d.ts","sourceRoot":"","sources":["../../src/node/vault-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,EACV,YAAY,EACZ,YAAY,EAEZ,kBAAkB,EAClB,WAAW,EACZ,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EACV,eAAe,EAGf,iBAAiB,EAClB,MAAM,mBAAmB,CAAC;AAsB3B,MAAM,WAAW,sBAAsB;IACrC,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,qFAAqF;IACrF,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,kFAAkF;AAClF,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD;;;OAGG;IACH,OAAO,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,4EAA4E;IAC5E,MAAM,IAAI,YAAY,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CA2DtF;AAiBD,gDAAgD;AAChD,MAAM,MAAM,cAAc;AACxB,yEAAyE;AACvE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,mBAAmB,CAAA;CAAE;AAC5D,6EAA6E;GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C;;;;;;;GAOG;GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACtC,iEAAiE;GAC/D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,sFAAsF;AACtF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAMxE;AAED,+GAA+G;AAC/G,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAQtE;AAWD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,cAAc,CAAC;IACrB,8EAA8E;IAC9E,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,sEAAsE;IACtE,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC;IAC5C,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpC,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,eAAe,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,uEAAuE;IACvE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,sEAAsE;IACtE,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAuDlG"}