@run402/sdk 4.95.0 → 4.97.0

package/dist/node/{gitvault-mirror-config.js → vault-mirror-config.js}

@@ -1,5 +1,5 @@
 /**
- * gitvault-mirror-and-recover — mirror destination config (design D1/D2,
+ * vault-mirror-and-recover — mirror destination config (design D1/D2,
  * task 2.1).
  *
  * Per-vault mirror configuration lives BESIDE the keystore, in its own
@@ -9,7 +9,7 @@
  * share with every clone) and never containing a raw secret value. The
  * credential field names an AWS profile OR selects the ambient environment
  * chain (`AWS_ACCESS_KEY_ID`/`AWS_SECRET_ACCESS_KEY`/`AWS_SESSION_TOKEN`) —
- * resolved at USE time by {@link ../node/gitvault-mirror-backend.js}, never
+ * resolved at USE time by {@link ../node/vault-mirror-backend.js}, never
  * read or cached here. D1 is the reason this file exists at all: run402
  * never holds a credential to the customer's bucket, so the credential must
  * live somewhere run402 code never uploads or transmits — this config file,
@@ -18,8 +18,8 @@
 import { existsSync, readdirSync, unlinkSync } from "node:fs";
 import { join } from "node:path";
 import { LocalError } from "../errors.js";
-import { GITVAULT_SRC_RE } from "../namespaces/gitvault.crypto.js";
-import { readFileNoFollow, writeFileAtomic0600 } from "./gitvault-keystore.js";
+import { VAULT_SRC_RE } from "../namespaces/vault.crypto.js";
+import { readFileNoFollow, writeFileAtomic0600 } from "./vault-keystore.js";
 function fail(code, message, context, details, nextActions) {
     throw new LocalError(message, context, { code, details, ...(nextActions ? { next_actions: nextActions } : {}) });
 }
@@ -27,8 +27,8 @@ export function mirrorsDir(keystore) {
     return join(keystore.rootDir, "mirrors");
 }
 export function mirrorConfigPath(keystore, repoId) {
-    if (!GITVAULT_SRC_RE.test(repoId))
-        fail("GITVAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving gitvault mirror config path");
+    if (!VAULT_SRC_RE.test(repoId))
+        fail("VAULT_BAD_REPO_ID", `not a src_ id: ${repoId}`, "resolving vault mirror config path");
     return join(mirrorsDir(keystore), `${repoId}.json`);
 }
 /** Read the mirror config for one vault, or `null` when none is configured. */
@@ -41,10 +41,10 @@ export function readMirrorConfig(keystore, repoId) {
         parsed = JSON.parse(text);
     }
     catch (e) {
-        fail("GITVAULT_MIRROR_CONFIG_CORRUPT", `mirror config for ${repoId} is not valid JSON: ${e.message}`, "reading gitvault mirror config", { repo_id: repoId });
+        fail("VAULT_MIRROR_CONFIG_CORRUPT", `mirror config for ${repoId} is not valid JSON: ${e.message}`, "reading vault mirror config", { repo_id: repoId });
     }
     if (parsed.version !== 1 || parsed.repo_id !== repoId || !parsed.destination) {
-        fail("GITVAULT_MIRROR_CONFIG_CORRUPT", `mirror config for ${repoId} is not a version-1 gitvault mirror config`, "reading gitvault mirror config", { repo_id: repoId });
+        fail("VAULT_MIRROR_CONFIG_CORRUPT", `mirror config for ${repoId} is not a version-1 vault mirror config`, "reading vault mirror config", { repo_id: repoId });
     }
     return parsed;
 }
@@ -56,13 +56,13 @@ export function listMirroredRepoIds(keystore) {
     return readdirSync(dir)
         .filter((n) => n.endsWith(".json"))
         .map((n) => n.slice(0, -5))
-        .filter((id) => GITVAULT_SRC_RE.test(id))
+        .filter((id) => VAULT_SRC_RE.test(id))
         .sort();
 }
 /** Set (create or replace) the mirror destination for one vault. */
 export function saveMirrorConfig(keystore, input, now = () => new Date()) {
     if (input.destination.kind === "s3" && !input.credential) {
-        fail("GITVAULT_MIRROR_CREDENTIAL_REQUIRED", "an s3 mirror destination needs a credential — pass --profile <name> or --ambient", "configuring gitvault mirror");
+        fail("VAULT_MIRROR_CREDENTIAL_REQUIRED", "an s3 mirror destination needs a credential — pass --profile <name> or --ambient", "configuring vault mirror");
     }
     const existing = readMirrorConfig(keystore, input.repo_id);
     // A recorded success is a fact about ONE destination: carry it across an
@@ -84,7 +84,7 @@ export function saveMirrorConfig(keystore, input, now = () => new Date()) {
 }
 /**
  * Stamp `last_success_at` after a zero-failure mirror write/sync
- * (gitvault-mirror-default) — the local, never-transmitted fact that clears
+ * (vault-mirror-default) — the local, never-transmitted fact that clears
  * the `vault_unmirrored` finding. A no-op when no config exists (a
  * test-injected backend can sync without one), or when the config was removed
  * mid-sync.
@@ -106,11 +106,11 @@ export function removeMirrorConfig(keystore, repoId) {
         unlinkSync(path);
     }
     catch (e) {
-        fail("GITVAULT_MIRROR_CONFIG_REMOVE_FAILED", `could not remove mirror config for ${repoId}: ${e.message}`, "removing gitvault mirror config", { repo_id: repoId });
+        fail("VAULT_MIRROR_CONFIG_REMOVE_FAILED", `could not remove mirror config for ${repoId}: ${e.message}`, "removing vault mirror config", { repo_id: repoId });
     }
     return { removed: true };
 }
-/** Parse `s3://<bucket>/<prefix>` or a plain filesystem path into a {@link GitvaultMirrorDestination}. */
+/** Parse `s3://<bucket>/<prefix>` or a plain filesystem path into a {@link VaultMirrorDestination}. */
 export function parseMirrorDestinationUrl(url, options = {}) {
     if (url.startsWith("s3://")) {
         const rest = url.slice("s3://".length);
@@ -118,10 +118,10 @@ export function parseMirrorDestinationUrl(url, options = {}) {
         const bucket = slash === -1 ? rest : rest.slice(0, slash);
         const prefix = slash === -1 ? "" : rest.slice(slash + 1).replace(/\/+$/, "");
         if (!bucket)
-            fail("GITVAULT_MIRROR_DESTINATION_INVALID", `${url} names no bucket`, "parsing gitvault mirror destination", { url });
+            fail("VAULT_MIRROR_DESTINATION_INVALID", `${url} names no bucket`, "parsing vault mirror destination", { url });
         const region = options.region ?? process.env.AWS_REGION ?? process.env.AWS_DEFAULT_REGION;
         if (!region)
-            fail("GITVAULT_MIRROR_REGION_REQUIRED", `an s3 destination needs a region — pass --region or set AWS_REGION`, "parsing gitvault mirror destination", { url });
+            fail("VAULT_MIRROR_REGION_REQUIRED", `an s3 destination needs a region — pass --region or set AWS_REGION`, "parsing vault mirror destination", { url });
         return { kind: "s3", bucket, prefix, region, ...(options.endpoint ? { endpoint: options.endpoint } : {}) };
     }
     return { kind: "directory", path: url };
@@ -130,4 +130,4 @@ export function parseMirrorDestinationUrl(url, options = {}) {
 export function formatMirrorDestination(destination) {
     return destination.kind === "s3" ? `s3://${destination.bucket}/${destination.prefix}` : destination.path;
 }
-//# sourceMappingURL=gitvault-mirror-config.js.map
+//# sourceMappingURL=vault-mirror-config.js.map

package/dist/node/vault-mirror-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-mirror-config.js","sourceRoot":"","sources":["../../src/node/vault-mirror-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAiB,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE3F,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe,EAAE,OAAiB,EAAE,WAAuB;IACtG,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACnH,CAAC;AA+BD,MAAM,UAAU,UAAU,CAAC,QAAuB;IAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAuB,EAAE,MAAc;IACtE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC;IAC5H,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,QAAuB,EAAE,MAAc;IACtE,MAAM,IAAI,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,MAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,6BAA6B,EAAE,qBAAqB,MAAM,uBAAwB,CAAW,CAAC,OAAO,EAAE,EAAE,6BAA6B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACpK,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC7E,IAAI,CAAC,6BAA6B,EAAE,qBAAqB,MAAM,yCAAyC,EAAE,6BAA6B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAChK,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,mBAAmB,CAAC,QAAuB;IACzD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SAC1B,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACrC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,QAAuB,EAAE,KAAmG,EAAE,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAC/L,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACzD,IAAI,CAAC,kCAAkC,EAAE,kFAAkF,EAAE,0BAA0B,CAAC,CAAC;IAC3J,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3D,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,gCAAgC;IAChC,MAAM,eAAe,GAAG,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvH,MAAM,IAAI,GAAsB;QAC9B,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,eAAe,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,GAAG,EAAE,CAAC,WAAW,EAAE;QACvD,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;KAChC,CAAC;IACF,mBAAmB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAuB,EAAE,MAAc,EAAE,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;IAC7G,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAsB,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACtF,mBAAmB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4IAA4I;AAC5I,MAAM,UAAU,kBAAkB,CAAC,QAAuB,EAAE,MAAc;IACxE,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,mCAAmC,EAAE,sCAAsC,MAAM,KAAM,CAAW,CAAC,OAAO,EAAE,EAAE,8BAA8B,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1K,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAE,UAAkD,EAAE;IACzG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,kCAAkC,EAAE,GAAG,GAAG,kBAAkB,EAAE,kCAAkC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC1F,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,8BAA8B,EAAE,oEAAoE,EAAE,kCAAkC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACrK,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC1C,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,WAAmC;IACzE,OAAO,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;AAC3G,CAAC"}

package/dist/node/{gitvault-mirror.d.ts → vault-mirror.d.ts}

@@ -1,29 +1,29 @@
 import type { Client } from "../kernel.js";
-import { GITVAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT, GITVAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT } from "../namespaces/gitvault.crypto.js";
-import { GitvaultKeystore } from "./gitvault-keystore.js";
-import { type GitvaultMirrorBackend } from "./gitvault-mirror-backend.js";
+import { VAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT, VAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT } from "../namespaces/vault.crypto.js";
+import { VaultKeystore } from "./vault-keystore.js";
+import { type VaultMirrorBackend } from "./vault-mirror-backend.js";
 /**
  * REPO-RELATIVE — the `source/<repo_id>/` prefix has already been stripped
  * (see the module doc's mirror-layout mapping). This is the shape every
- * OTHER function in this module, `gitvault-recover.ts`, and the mirror
+ * OTHER function in this module, `vault-recover.ts`, and the mirror
  * backend interface all consume; nothing here ever sees the raw wire key
- * except `listGitvaultObjectsAll` itself.
+ * except `listVaultObjectsAll` itself.
  *
  * `size_bytes` is an exact decimal string for EVERY kind, including the two
  * generation-addressed chain kinds (`head`/`vault_genesis` at generation
  * zero, `admission_record`) — never `null`.
  */
-export interface GitvaultObjectEntry {
+export interface VaultObjectEntry {
     key: string;
     object_kind: string;
     sha256: string;
     size_bytes: string;
 }
-/** Page through `GET /gitvault/v1/vaults/:vault_id/objects`, collecting every entry, stripped to repo-relative keys. Store-and-echo cursor per D3a — never parsed here either. */
-export declare function listGitvaultObjectsAll(client: Client, repoId: string): Promise<GitvaultObjectEntry[]>;
+/** Page through `GET /vaults/v1/:vault_id/objects`, collecting every entry, stripped to repo-relative keys. Store-and-echo cursor per D3a — never parsed here either. */
+export declare function listVaultObjectsAll(client: Client, repoId: string): Promise<VaultObjectEntry[]>;
 /** Read one object's bytes by key, using the same wire identity every stored kind already carries (§3 layout). `null` when the gateway reports the object absent. */
-export declare function readGitvaultObjectBytes(client: Client, repoId: string, entry: GitvaultObjectEntry): Promise<Uint8Array | null>;
-/** Exported for the key-shape conformance test (`gitvault-mirror-recover.test.ts`) — never called for its own sake outside this module. */
+export declare function readVaultObjectBytes(client: Client, repoId: string, entry: VaultObjectEntry): Promise<Uint8Array | null>;
+/** Exported for the key-shape conformance test (`vault-mirror-recover.test.ts`) — never called for its own sake outside this module. */
 export declare function generationRouteForKey(key: string): {
     route: "heads" | "admissions";
     generation: string;
@@ -35,27 +35,27 @@ export declare function generationRouteForKey(key: string): {
  * loose, unanchored fallback — see {@link NON_GENERATION_KEY_SPECS}).
  * Exported for the key-shape conformance test.
  */
-export declare function objectReadRequestForEntry(entry: GitvaultObjectEntry): {
+export declare function objectReadRequestForEntry(entry: VaultObjectEntry): {
     object_kind: string;
     object_id?: string;
     epoch?: string;
     recipient_fingerprint?: string;
 };
-export interface GitvaultMirrorWritePlan {
+export interface VaultMirrorWritePlan {
     /** Every non-head, non-admission entry, in listing order — write these FIRST, in any order among themselves. */
-    objects: GitvaultObjectEntry[];
+    objects: VaultObjectEntry[];
     /** Then admission records and heads, interleaved, strictly ascending by generation (admission before its own head). */
-    admissionsAndHeads: GitvaultObjectEntry[];
+    admissionsAndHeads: VaultObjectEntry[];
 }
 /** Sort a flat listing into the admission-order write plan (module doc above). */
-export declare function planMirrorWrite(entries: readonly GitvaultObjectEntry[]): GitvaultMirrorWritePlan;
-export interface GitvaultMirrorCopyResult {
+export declare function planMirrorWrite(entries: readonly VaultObjectEntry[]): VaultMirrorWritePlan;
+export interface VaultMirrorCopyResult {
     key: string;
     outcome: "copied" | "already_present" | "skipped_foreign_recipient" | "failed";
     size_bytes?: string;
     error?: string;
 }
-export interface GitvaultMirrorSyncSummary {
+export interface VaultMirrorSyncSummary {
     repo_id: string;
     destination: string;
     /** Faithful counts of what ACTUALLY happened this call — never an estimate (design D3a rider (e)). */
@@ -67,7 +67,7 @@ export interface GitvaultMirrorSyncSummary {
      * than this machine's own identity — EXPECTED, not a problem. The
      * recipient-only read gate means a mirror can only ever hold envelopes
      * addressed to the local identity; a multi-recipient vault
-     * (gitvault-human-envelopes) makes this the norm. Never counted toward
+     * (vault-human-envelopes) makes this the norm. Never counted toward
      * `objects_failed`, and never causes `mirror sync` to report anything but
      * success — named per-key in `skipped_foreign_recipient_keys` so a reader
      * can tell "expected skip" from "silent gap" without cross-referencing.
@@ -80,25 +80,25 @@ export interface GitvaultMirrorSyncSummary {
         key: string;
         error: string;
     }>;
-    validity_not_freshness: typeof GITVAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT;
-    keystore_still_required: typeof GITVAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT;
+    validity_not_freshness: typeof VAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT;
+    keystore_still_required: typeof VAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT;
 }
-export interface GitvaultMirrorSyncOptions {
-    keystore?: GitvaultKeystore;
+export interface VaultMirrorSyncOptions {
+    keystore?: VaultKeystore;
     /** Test/advanced hook: an already-opened backend, bypassing config resolution. */
-    backend?: GitvaultMirrorBackend;
+    backend?: VaultMirrorBackend;
 }
 /**
- * `run402 gitvault mirror sync` (task 2.3): list the vault's stored objects,
+ * `run402 repos mirror sync` (task 2.3): list the vault's stored objects,
  * diff against the mirror by key+size, fetch and hash-verify what's missing,
  * write it in admission order. Resumable and idempotent — running it twice in
  * a row with nothing new copies nothing the second time.
  */
-export declare function mirrorSync(client: Client, repoId: string, options?: GitvaultMirrorSyncOptions): Promise<GitvaultMirrorSyncSummary>;
-export interface GitvaultMirrorPushResult {
+export declare function mirrorSync(client: Client, repoId: string, options?: VaultMirrorSyncOptions): Promise<VaultMirrorSyncSummary>;
+export interface VaultMirrorPushResult {
     attempted: boolean;
     outcome: "pushed" | "skipped_no_mirror" | "failed";
-    summary?: GitvaultMirrorSyncSummary;
+    summary?: VaultMirrorSyncSummary;
     error?: string;
 }
 /**
@@ -116,7 +116,7 @@ export interface GitvaultMirrorPushResult {
  * keeps the admission-order write discipline in exactly one place instead of
  * a second, push-scoped code path that could drift from it.
  */
-export declare function mirrorPushForGeneration(client: Client, repoId: string, options?: GitvaultMirrorSyncOptions): Promise<GitvaultMirrorPushResult>;
+export declare function mirrorPushForGeneration(client: Client, repoId: string, options?: VaultMirrorSyncOptions): Promise<VaultMirrorPushResult>;
 /**
  * `run402 repos create --byo`'s every-push dual-write (task 3.3, design
  * D1): list the vault's stored objects, restrict to the signed CHAIN
@@ -128,7 +128,7 @@ export declare function mirrorPushForGeneration(client: Client, repoId: string,
  * admission-order discipline the opt-in mirror uses — one implementation,
  * not a second ordering to prove.
  */
-export declare function byoChainCopySync(client: Client, repoId: string, options?: GitvaultMirrorSyncOptions): Promise<GitvaultMirrorSyncSummary>;
+export declare function byoChainCopySync(client: Client, repoId: string, options?: VaultMirrorSyncOptions): Promise<VaultMirrorSyncSummary>;
 /**
  * Fires after an ordinary vault push produces a new generation, mirroring
  * {@link mirrorPushForGeneration}'s exact contract (NEVER throws, NEVER
@@ -136,16 +136,16 @@ export declare function byoChainCopySync(client: Client, repoId: string, options
  * Gated on a LOCAL BYO write config existing for this repo — a managed
  * vault (the common case) pays zero extra network calls, `skipped_no_byo`.
  */
-export declare function byoChainCopyPushForGeneration(client: Client, repoId: string, options?: GitvaultMirrorSyncOptions): Promise<GitvaultMirrorPushResult>;
-export interface GitvaultByoMissingObject {
+export declare function byoChainCopyPushForGeneration(client: Client, repoId: string, options?: VaultMirrorSyncOptions): Promise<VaultMirrorPushResult>;
+export interface VaultByoMissingObject {
     key: string;
     object_kind: string;
 }
-export interface GitvaultByoPresenceReport {
+export interface VaultByoPresenceReport {
     repo_id: string;
     destination: string;
     checked: number;
-    missing: GitvaultByoMissingObject[];
+    missing: VaultByoMissingObject[];
 }
 /**
  * Adjudicates the BYO destination against run402's signed chain (task 3.3's
@@ -155,8 +155,8 @@ export interface GitvaultByoPresenceReport {
  * direct write, chain via this file's dual-write above) — against the
  * destination, by key + size. Never throws on an absence; it REPORTS every
  * missing object by name so the caller (`repos fsck`) can refuse with
- * `GITVAULT_BYO_OBJECT_MISSING` naming exactly what the chain says should
+ * `VAULT_BYO_OBJECT_MISSING` naming exactly what the chain says should
  * exist and does not.
  */
-export declare function verifyByoObjectsPresent(client: Client, repoId: string, options?: GitvaultMirrorSyncOptions): Promise<GitvaultByoPresenceReport>;
-//# sourceMappingURL=gitvault-mirror.d.ts.map
+export declare function verifyByoObjectsPresent(client: Client, repoId: string, options?: VaultMirrorSyncOptions): Promise<VaultByoPresenceReport>;
+//# sourceMappingURL=vault-mirror.d.ts.map

package/dist/node/vault-mirror.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-mirror.d.ts","sourceRoot":"","sources":["../../src/node/vault-mirror.ts"],"names":[],"mappings":"AAsFA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAEL,8CAA8C,EAC9C,6CAA6C,EAE9C,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAoD,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAatH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AA4CD,yKAAyK;AACzK,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAerG;AAED,qKAAqK;AACrK,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA4D9H;AAED,wIAAwI;AACxI,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,GAAG,YAAY,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAM/G;AAmCD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAAE,CAwB9J;AA0BD,MAAM,WAAW,oBAAoB;IACnC,gHAAgH;IAChH,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,uHAAuH;IACvH,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;CACxC;AAED,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,oBAAoB,CAsB1F;AAID,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,QAAQ,GAAG,iBAAiB,GAAG,2BAA2B,GAAG,QAAQ,CAAC;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,sGAAsG;IACtG,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,EAAE,MAAM,CAAC;IAChC;;;;;;;;;OASG;IACH,iCAAiC,EAAE,MAAM,CAAC;IAC1C,8BAA8B,EAAE,MAAM,EAAE,CAAC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,sBAAsB,EAAE,OAAO,6CAA6C,CAAC;IAC7E,uBAAuB,EAAE,OAAO,8CAA8C,CAAC;CAChF;AAsDD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,kFAAkF;IAClF,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAsDtI;AAgBD,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,QAAQ,GAAG,mBAAmB,GAAG,QAAQ,CAAC;IACnD,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAgBlJ;AAmDD;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA8C5I;AAED;;;;;;GAMG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAgBxJ;AAID,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAWnJ"}