@run402/sdk 4.95.0 → 4.96.0

package/dist/namespaces/deploy.js

@@ -94,12 +94,12 @@ export class Deploy {
      * {@link Run402DeployError} on any state-machine failure.
      */
     async apply(spec, opts = {}) {
-        // A gitvault-bound apply never auto-retries: each attempt plans a NEW
+        // A vault-bound apply never auto-retries: each attempt plans a NEW
         // operation, and an activation token is minted for exactly one. Retrying
         // would either present a token bound elsewhere (the platform refuses, as
         // it should) or demand a fresh capture, which is the caller's deliberate
         // re-run — not something the client does behind their back.
-        const maxRetries = opts.gitvault ? 0 : normalizeApplyMaxRetries(opts.maxRetries);
+        const maxRetries = opts.vault ? 0 : normalizeApplyMaxRetries(opts.maxRetries);
         const maxAttempts = maxRetries + 1;
         const emit = makeEmitter(opts.onEvent);
         for (let attempt = 1; attempt <= maxAttempts; attempt++) {
@@ -159,7 +159,7 @@ export class Deploy {
             dryRun: opts.dryRun ?? opts.mode === "legacyDryRun",
             reviewedPlan: opts.mode === "reviewedPlan",
             requiredPlan: opts.requiredPlan,
-            ...(opts.gitvault ? { gitvault: opts.gitvault } : {}),
+            ...(opts.vault ? { vault: opts.vault } : {}),
         });
     }
     /**
@@ -180,7 +180,7 @@ export class Deploy {
      */
     async commit(planId, opts = {}) {
         const emit = makeEmitter(opts.onEvent);
-        const commit = requireCloudCommitResponse(await commitInternal(this.client, planId, opts.idempotencyKey, opts.project, opts.requiredPlan, opts.gitvault), "committing deploy");
+        const commit = requireCloudCommitResponse(await commitInternal(this.client, planId, opts.idempotencyKey, opts.project, opts.requiredPlan, opts.vault), "committing deploy");
         return await pollUntilReady(this.client, commit, {}, [], emit, opts.project);
     }
     async rehearse(planId, opts = {}) {
@@ -658,17 +658,17 @@ function describeRehearsalFailure(report) {
 async function applyOnce(client, spec, opts, emit) {
     const allowWarningCodes = normalizeAllowWarningCodes(opts.allowWarningCodes);
     const target = opts.target === "core" ? "core" : "cloud";
-    if (opts.gitvault && target === "core") {
+    if (opts.vault && target === "core") {
         // Refuse rather than drop the hooks: silently committing without the
         // activation block would activate a `required` project unvaulted.
-        throw new Run402DeployError("gitvault-bound deploys are not supported against a self-hosted Core gateway; the vault gate is a Cloud control-plane capability.", { code: "GITVAULT_UNSUPPORTED_TARGET", phase: "validate", retryable: false, context: "applying deploy" });
+        throw new Run402DeployError("vault-bound deploys are not supported against a self-hosted Core gateway; the vault gate is a Cloud control-plane capability.", { code: "VAULT_UNSUPPORTED_TARGET", phase: "validate", retryable: false, context: "applying deploy" });
     }
     const sliceKinds = deriveSliceKinds(spec);
     emit({ type: "plan.started" });
     const { plan, byteReaders } = await planInternal(client, spec, opts.idempotencyKey, {
         target,
         requiredPlan: opts.requiredPlan,
-        ...(opts.gitvault ? { gitvault: opts.gitvault.declaration } : {}),
+        ...(opts.vault ? { vault: opts.vault.declaration } : {}),
     });
     emit({ type: "plan.diff", diff: plan.diff });
     emitPlanWarnings(plan, emit);
@@ -719,19 +719,19 @@ async function applyOnce(client, spec, opts, emit) {
     // refused by the gateway.
     const rehearsal = await rehearseBeforeCommit(client, plan, planId, spec.project_id, opts, emit);
     const requiredPlan = rehearsal.requiredPlan ?? opts.requiredPlan;
-    // gitvault §6.5 — the handshake. Content is uploaded, so the artifacts this
+    // vault §6.5 — the handshake. Content is uploaded, so the artifacts this
     // release ships are fixed; `authorize` verifies snapshot correspondence,
     // mints the activation token, and hands back the commit block. It throws
     // rather than returning when the deploy must not proceed, and nothing has
     // been committed at that point.
-    const gitvaultCommit = opts.gitvault
-        ? await opts.gitvault.authorize({
+    const vaultCommit = opts.vault
+        ? await opts.vault.authorize({
             plan_id: planId,
             operation_id: operationId,
-            apply_plan_sha256: plan.gitvault?.apply_plan_sha256 ?? null,
+            apply_plan_sha256: plan.vault?.apply_plan_sha256 ?? null,
         })
         : undefined;
-    const commit = requireCloudCommitResponse(await commitInternal(client, planId, opts.idempotencyKey, spec.project_id, requiredPlan, gitvaultCommit), "applying deploy");
+    const commit = requireCloudCommitResponse(await commitInternal(client, planId, opts.idempotencyKey, spec.project_id, requiredPlan, vaultCommit), "applying deploy");
     const result = await pollUntilReady(client, commit, plan.diff, plan.warnings, emit, spec.project_id, sliceKinds);
     result.rehearsal = rehearsal.block;
     // v1.48 unified-apply: thread the plan response's `asset_entries[]` back
@@ -1166,11 +1166,11 @@ async function planInternal(client, spec, idempotencyKey, opts = {}) {
         inlineBody.mode = "reviewed_plan";
     if (opts.requiredPlan)
         inlineBody.required_plan = requiredPlanToWire(opts.requiredPlan);
-    // gitvault §6.5: the capture declaration must ride the SAME plan the gateway
+    // vault §6.5: the capture declaration must ride the SAME plan the gateway
     // digests, so it is set before the inline/manifest_ref size decision below
     // and re-attached to the manifest_ref body too.
-    if (opts.gitvault)
-        inlineBody.gitvault = opts.gitvault;
+    if (opts.vault)
+        inlineBody.vault = opts.vault;
     const inlineBytes = new TextEncoder().encode(JSON.stringify(inlineBody)).byteLength;
     let body;
     if (inlineBytes <= PLAN_BODY_LIMIT_BYTES) {
@@ -1212,8 +1212,8 @@ async function planInternal(client, spec, idempotencyKey, opts = {}) {
         body = { spec: { project_id: spec.project_id }, manifest_ref: contentRefToWire(ref) };
         if (idempotencyKey)
             body.idempotency_key = idempotencyKey;
-        if (opts.gitvault)
-            body.gitvault = opts.gitvault;
+        if (opts.vault)
+            body.vault = opts.vault;
     }
     let plan;
     try {
@@ -1591,15 +1591,15 @@ function expandCronNumberPart(part, min, max) {
     }
     return values;
 }
-async function commitInternal(client, planId, idempotencyKey, project, requiredPlan, gitvault) {
+async function commitInternal(client, planId, idempotencyKey, project, requiredPlan, vault) {
     try {
         const body = {};
         if (idempotencyKey)
             body.idempotency_key = idempotencyKey;
         if (requiredPlan)
             body.required_plan = requiredPlanToWire(requiredPlan);
-        if (gitvault)
-            body.gitvault = gitvault;
+        if (vault)
+            body.vault = vault;
         return await client.request(`/apply/v1/plans/${encodeURIComponent(planId)}/commit`, {
             method: "POST",
             body,