@run402/sdk 4.95.0 → 4.97.0

package/dist/node/{gitvault-mirror.js → vault-mirror.js}

@@ -1,9 +1,9 @@
 /**
- * gitvault-mirror-and-recover — the mirror writer + reconcile/sync engine +
+ * vault-mirror-and-recover — the mirror writer + reconcile/sync engine +
  * capture-time dual-push hook (design D1/D6/D7, tasks 2.2–2.4).
  *
  * ADMISSION-ORDER WRITE DISCIPLINE (D1's whole point). The gateway's objects
- * listing (`GET /gitvault/v1/vaults/:vault_id/objects`) is a flat, unordered
+ * listing (`GET /vaults/v1/:vault_id/objects`) is a flat, unordered
  * set of `{key, object_kind, sha256, size_bytes}` — it does not group objects
  * by generation. The correct, SUFFICIENT ordering rule does not need that
  * grouping: write EVERY plain object first (any order among themselves — a
@@ -31,7 +31,7 @@
  * (`POST …/object-reads` for object-kind reads, `GET …/heads/:gen` /
  * `GET …/admissions/:gen` for the two generation-addressed raw-byte routes) —
  * reimplemented here as a THIN, self-contained reader (not exported from
- * `gitvault-publication.ts`, which keeps those helpers module-private) so
+ * `vault-publication.ts`, which keeps those helpers module-private) so
  * this file has no dependency on the live-push module and works from nothing
  * but a `Client` + `repo_id`.
  *
@@ -41,23 +41,23 @@
  * The gateway's own `GET …/objects` listing
  * echoes that FULL key back on every entry — it never returns a
  * repo-relative key. This module's own working representation, and the
- * mirror BACKEND's key space (`gitvault-mirror-backend.ts`
- * `openGitvaultMirrorBackend`, whose `root`/`prefix` already bake in
+ * mirror BACKEND's key space (`vault-mirror-backend.ts`
+ * `openVaultMirrorBackend`, whose `root`/`prefix` already bake in
  * `source/<repo_id>`), are both REPO-RELATIVE (`head/<gen>`,
  * `wal/<id>.pack.enc`, `key-envelopes/<epoch>/<fp>.env`, …) — the same shape
- * `gitvault-recover.ts` and `gitvault-publication.ts`'s `gitvaultPaths`
+ * `vault-recover.ts` and `vault-publication.ts`'s `vaultPaths`
  * already use. The mapping is therefore, in ONE place:
  *
  *   bucket key  =  `source/<repo_id>/` + mirror key (repo-relative)
  *
- * `listGitvaultObjectsAll` is the ONLY function that ever sees a full,
+ * `listVaultObjectsAll` is the ONLY function that ever sees a full,
  * `source/<repo_id>/`-prefixed key (the raw wire shape, typed
  * `RawVaultObjectEntry` below) — it strips the prefix via
  * `stripSourcePrefix` before anything else in this module (or in
- * `gitvault-recover.ts`, which never talks to the live gateway at all) sees
- * the entry. Every `GitvaultObjectEntry` handed to `generationRouteForKey`,
+ * `vault-recover.ts`, which never talks to the live gateway at all) sees
+ * the entry. Every `VaultObjectEntry` handed to `generationRouteForKey`,
  * `objectReadRequestForEntry`, `planMirrorWrite`, `reconcileOne`, and the
- * `GitvaultMirrorBackend` itself is repo-relative from that point on. An
+ * `VaultMirrorBackend` itself is repo-relative from that point on. An
  * entry whose key names a DIFFERENT repo id than the one being synced is a
  * listing-isolation violation and is refused loudly (never silently
  * stripped-and-kept or silently dropped) — see `stripSourcePrefix`.
@@ -85,20 +85,20 @@
  */
 import { createHash } from "node:crypto";
 import { LocalError, isRun402Error } from "../errors.js";
-import { GITVAULT_GENESIS_GENERATION, GITVAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT, GITVAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT, fromBase64url, } from "../namespaces/gitvault.crypto.js";
-import { fetchGitvaultObjectBytes } from "./gitvault-edge-fetch.js";
-import { GitvaultKeystore } from "./gitvault-keystore.js";
-import { formatMirrorDestination, readMirrorConfig, recordMirrorSuccess } from "./gitvault-mirror-config.js";
-import { openGitvaultMirrorBackend, resolveMirrorCredentials } from "./gitvault-mirror-backend.js";
-import { readByoConfig } from "./gitvault-byo-config.js";
+import { VAULT_GENESIS_GENERATION, VAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT, VAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT, fromBase64url, } from "../namespaces/vault.crypto.js";
+import { fetchVaultObjectBytes } from "./vault-edge-fetch.js";
+import { VaultKeystore } from "./vault-keystore.js";
+import { formatMirrorDestination, readMirrorConfig, recordMirrorSuccess } from "./vault-mirror-config.js";
+import { openVaultMirrorBackend, resolveMirrorCredentials } from "./vault-mirror-backend.js";
+import { readByoConfig } from "./vault-byo-config.js";
 function fail(code, message, context, details, nextActions) {
     throw new LocalError(message, context, { code, details, ...(nextActions ? { next_actions: nextActions } : {}) });
 }
 function sha256Hex(bytes) {
     return createHash("sha256").update(bytes).digest("hex");
 }
-/** protocol §3 (`storage-keys.ts` `GITVAULT_SOURCE_PREFIX`) — duplicated here because the SDK carries no dependency on the gateway package. */
-const GITVAULT_SOURCE_PREFIX = "source";
+/** protocol §3 (`storage-keys.ts` `VAULT_SOURCE_PREFIX`) — duplicated here because the SDK carries no dependency on the gateway package. */
+const VAULT_SOURCE_PREFIX = "source";
 /**
  * Turn one WIRE key (`source/<repo_id>/<rest>`) into the REPO-RELATIVE key
  * every other function in this module expects. A key naming a DIFFERENT repo
@@ -109,37 +109,37 @@ const GITVAULT_SOURCE_PREFIX = "source";
  * prefix at all is a listing-shape violation of the same severity.
  */
 function stripSourcePrefix(repoId, key) {
-    const expected = `${GITVAULT_SOURCE_PREFIX}/${repoId}/`;
+    const expected = `${VAULT_SOURCE_PREFIX}/${repoId}/`;
     if (key.startsWith(expected))
         return key.slice(expected.length);
     const foreign = /^source\/([^/]+)\//.exec(key);
     if (foreign) {
-        fail("GITVAULT_MIRROR_FOREIGN_REPO_KEY", `the objects listing for ${repoId} returned a key addressed to a different vault (${foreign[1]}): ${key}`, "listing gitvault vault objects", { key, repo_id: repoId, foreign_repo_id: foreign[1] });
+        fail("VAULT_MIRROR_FOREIGN_REPO_KEY", `the objects listing for ${repoId} returned a key addressed to a different vault (${foreign[1]}): ${key}`, "listing vault objects", { key, repo_id: repoId, foreign_repo_id: foreign[1] });
     }
-    fail("GITVAULT_MIRROR_LISTING_INCONSISTENT", `listed key is not in the expected source/<repo_id>/… layout: ${key}`, "listing gitvault vault objects", { key, repo_id: repoId });
+    fail("VAULT_MIRROR_LISTING_INCONSISTENT", `listed key is not in the expected source/<repo_id>/… layout: ${key}`, "listing vault objects", { key, repo_id: repoId });
 }
-/** Page through `GET /gitvault/v1/vaults/:vault_id/objects`, collecting every entry, stripped to repo-relative keys. Store-and-echo cursor per D3a — never parsed here either. */
-export async function listGitvaultObjectsAll(client, repoId) {
-    const base = `/gitvault/v1/vaults/${encodeURIComponent(repoId)}/objects`;
+/** Page through `GET /vaults/v1/:vault_id/objects`, collecting every entry, stripped to repo-relative keys. Store-and-echo cursor per D3a — never parsed here either. */
+export async function listVaultObjectsAll(client, repoId) {
+    const base = `/vaults/v1/${encodeURIComponent(repoId)}/objects`;
     const out = [];
     let cursor;
     for (;;) {
         const qs = cursor ? `?cursor=${encodeURIComponent(cursor)}` : "";
-        const page = await client.request(`${base}${qs}`, { context: "listing gitvault vault objects" });
+        const page = await client.request(`${base}${qs}`, { context: "listing vault objects" });
         for (const raw of page.objects) {
             out.push({ key: stripSourcePrefix(repoId, raw.key), object_kind: raw.object_kind, sha256: raw.sha256, size_bytes: raw.size_bytes });
         }
         if (!page.has_more)
             break;
         if (!page.next_cursor)
-            fail("GITVAULT_MIRROR_LISTING_INCONSISTENT", "the objects listing reported has_more with no next_cursor", "listing gitvault vault objects");
+            fail("VAULT_MIRROR_LISTING_INCONSISTENT", "the objects listing reported has_more with no next_cursor", "listing vault objects");
         cursor = page.next_cursor;
     }
     return out;
 }
 /** Read one object's bytes by key, using the same wire identity every stored kind already carries (§3 layout). `null` when the gateway reports the object absent. */
-export async function readGitvaultObjectBytes(client, repoId, entry) {
-    const base = `/gitvault/v1/vaults/${encodeURIComponent(repoId)}`;
+export async function readVaultObjectBytes(client, repoId, entry) {
+    const base = `/vaults/v1/${encodeURIComponent(repoId)}`;
     const generationRoute = generationRouteForKey(entry.key);
     if (generationRoute) {
         // Defense in depth: the key SHAPE alone is enough to route the read, but
@@ -149,28 +149,28 @@ export async function readGitvaultObjectBytes(client, repoId, entry) {
         // `admission_record`; `head/<gen>` is `vault_genesis` ONLY at generation
         // zero and `head` at every later generation — the kind names the
         // CONTENT, both fetch through the same route.
-        const expectedKind = generationRoute.route === "admissions" ? "admission_record" : generationRoute.generation === GITVAULT_GENESIS_GENERATION ? "vault_genesis" : "head";
+        const expectedKind = generationRoute.route === "admissions" ? "admission_record" : generationRoute.generation === VAULT_GENESIS_GENERATION ? "vault_genesis" : "head";
         if (entry.object_kind !== expectedKind) {
-            fail("GITVAULT_MIRROR_KEY_UNRECOGNIZED", `listed object_kind '${entry.object_kind}' does not match its generation-addressed key ${entry.key} (expected '${expectedKind}')`, "reading gitvault mirror source object", { key: entry.key, object_kind: entry.object_kind, expected_object_kind: expectedKind });
+            fail("VAULT_MIRROR_KEY_UNRECOGNIZED", `listed object_kind '${entry.object_kind}' does not match its generation-addressed key ${entry.key} (expected '${expectedKind}')`, "reading vault mirror source object", { key: entry.key, object_kind: entry.object_kind, expected_object_kind: expectedKind });
         }
         const path = `${base}/${generationRoute.route}/${encodeURIComponent(generationRoute.generation)}`;
-        const auth = (await client.credentials.getAuth(path, { method: `gitvault.read_${generationRoute.route}` })) ?? {};
+        const auth = (await client.credentials.getAuth(path, { method: `vault.read_${generationRoute.route}` })) ?? {};
         const r = await client.fetch(`${client.apiBase}${path}`, { method: "GET", headers: { ...auth, accept: "application/json" } });
         if (r.status === 404)
             return null;
         if (!r.ok)
-            fail("GITVAULT_MIRROR_READ_FAILED", `${entry.key} read failed (HTTP ${r.status})`, "reading gitvault mirror source object", { key: entry.key, status: r.status });
+            fail("VAULT_MIRROR_READ_FAILED", `${entry.key} read failed (HTTP ${r.status})`, "reading vault mirror source object", { key: entry.key, status: r.status });
         return new Uint8Array(await r.arrayBuffer());
     }
     const read = objectReadRequestForEntry(entry);
-    // `edge_url` (gitvault-read-edge-cache design D5) is the same optional,
-    // same-bytes CDN companion `gitvault-publication.ts`'s object-reads
-    // consumers get — see `fetchGitvaultObjectBytes` (`gitvault-edge-fetch.ts`)
+    // `edge_url` (vault-read-edge-cache design D5) is the same optional,
+    // same-bytes CDN companion `vault-publication.ts`'s object-reads
+    // consumers get — see `fetchVaultObjectBytes` (`vault-edge-fetch.ts`)
     // for the prefer-edge/silent-fallback policy shared across both.
     //
-    // `inline` (gitvault-small-object-inline design D1/D2) is the same
+    // `inline` (vault-small-object-inline design D1/D2) is the same
     // optional, same-bytes small-object offer those consumers get too — see
-    // `gitvault-publication.ts`'s `resolveObjectReadTarget` for the sibling
+    // `vault-publication.ts`'s `resolveObjectReadTarget` for the sibling
     // logic, DUPLICATED here (not imported) for the reason this module's own
     // header names: this reader must have no dependency on the live-push
     // module. `entry.sha256` is always known here (the listing supplies it
@@ -179,7 +179,7 @@ export async function readGitvaultObjectBytes(client, repoId, entry) {
     // still just a plain miss for this one read.
     let presigned;
     try {
-        presigned = await client.request(`${base}/object-reads`, { method: "POST", body: { objects: [read] }, context: "resolving gitvault mirror source object" });
+        presigned = await client.request(`${base}/object-reads`, { method: "POST", body: { objects: [read] }, context: "resolving vault mirror source object" });
     }
     catch (e) {
         if (isRun402Error(e) && (e.status === 404 || e.code === "RESOURCE_NOT_FOUND"))
@@ -194,14 +194,14 @@ export async function readGitvaultObjectBytes(client, repoId, entry) {
         if (sha256Hex(bytes) === entry.sha256)
             return bytes;
     }
-    const r = await fetchGitvaultObjectBytes(client, target);
+    const r = await fetchVaultObjectBytes(client, target);
     if (r.status === 404)
         return null;
     if (!r.ok)
-        fail("GITVAULT_MIRROR_READ_FAILED", `${entry.key} GET failed (HTTP ${r.status})`, "reading gitvault mirror source object", { key: entry.key, status: r.status });
+        fail("VAULT_MIRROR_READ_FAILED", `${entry.key} GET failed (HTTP ${r.status})`, "reading vault mirror source object", { key: entry.key, status: r.status });
     return new Uint8Array(await r.arrayBuffer());
 }
-/** Exported for the key-shape conformance test (`gitvault-mirror-recover.test.ts`) — never called for its own sake outside this module. */
+/** Exported for the key-shape conformance test (`vault-mirror-recover.test.ts`) — never called for its own sake outside this module. */
 export function generationRouteForKey(key) {
     const head = /^head\/([0-9a-f]{16})$/.exec(key);
     if (head)
@@ -253,11 +253,11 @@ const NON_GENERATION_KEY_SPECS = [
 export function objectReadRequestForEntry(entry) {
     if (entry.object_kind === "key_envelope") {
         // `key-envelopes/<epoch>/<recipient_fingerprint>.env` — the GATEWAY's
-        // real §3 wire key (`packages/gateway/src/services/gitvault/
+        // real §3 wire key (`packages/gateway/src/services/vault/
         // upload-sessions.ts` `UPLOADABLE_KINDS.key_envelope.key()`, mirrored by
         // `storage-keys.ts` `objectKeyFor`). This is what the live objects
         // listing actually returns, and is DIFFERENT from the SDK's own
-        // `gitvault-creation-journal.ts` envelope `path` string
+        // `vault-creation-journal.ts` envelope `path` string
         // (`envelopes/<epoch>/<fp>`, no `key-` prefix, no `.env` suffix) — that
         // string is CLIENT-LOCAL addressing for the upload manifest only ("never
         // rides the wire", per its own doc comment); the gateway derives its own
@@ -265,35 +265,35 @@ export function objectReadRequestForEntry(entry) {
         // re-derive this from that SDK constant.
         const m = /^key-envelopes\/([0-9a-f]{16})\/(ek_[0-9a-f]{32})\.env$/.exec(entry.key);
         if (!m)
-            fail("GITVAULT_MIRROR_KEY_UNRECOGNIZED", `key_envelope key does not match the expected layout: ${entry.key}`, "building gitvault mirror read request", { key: entry.key });
+            fail("VAULT_MIRROR_KEY_UNRECOGNIZED", `key_envelope key does not match the expected layout: ${entry.key}`, "building vault mirror read request", { key: entry.key });
         return { object_kind: "key_envelope", epoch: m[1], recipient_fingerprint: m[2] };
     }
     const spec = NON_GENERATION_KEY_SPECS.find((s) => s.kind === entry.object_kind);
     if (!spec) {
-        fail("GITVAULT_MIRROR_KEY_UNRECOGNIZED", `unrecognized object_kind '${entry.object_kind}' for mirror read (key ${entry.key})`, "building gitvault mirror read request", { key: entry.key, object_kind: entry.object_kind });
+        fail("VAULT_MIRROR_KEY_UNRECOGNIZED", `unrecognized object_kind '${entry.object_kind}' for mirror read (key ${entry.key})`, "building vault mirror read request", { key: entry.key, object_kind: entry.object_kind });
     }
     const m = spec.pattern.exec(entry.key);
     if (!m)
-        fail("GITVAULT_MIRROR_KEY_UNRECOGNIZED", `${entry.object_kind} key does not match the expected §3 layout: ${entry.key}`, "building gitvault mirror read request", { key: entry.key, object_kind: entry.object_kind });
+        fail("VAULT_MIRROR_KEY_UNRECOGNIZED", `${entry.object_kind} key does not match the expected §3 layout: ${entry.key}`, "building vault mirror read request", { key: entry.key, object_kind: entry.object_kind });
     return { object_kind: entry.object_kind, object_id: m[1] };
 }
 /**
  * NOT a bug: the recipient-only read gate on
  * `key_envelope` means a mirror can only ever hold envelopes wrapped for
- * THIS machine's own identity. A multi-recipient vault (gitvault-human-
+ * THIS machine's own identity. A multi-recipient vault (vault-human-
  * envelopes) makes a foreign-recipient envelope the NORM, not an anomaly —
  * it must never be synced as a failure. This extracts the `ek_` fingerprint
  * straight from the key_envelope's own key (no network round-trip needed to
  * classify it), reusing the exact pattern `objectReadRequestForEntry` uses;
  * `null` for a key that doesn't match the expected layout at all (a real,
  * separate problem — that case falls through to the normal read-and-fail
- * path so `GITVAULT_MIRROR_KEY_UNRECOGNIZED` still surfaces).
+ * path so `VAULT_MIRROR_KEY_UNRECOGNIZED` still surfaces).
  */
 function keyEnvelopeRecipientFingerprintFromKey(key) {
     const m = /^key-envelopes\/[0-9a-f]{16}\/(ek_[0-9a-f]{32})\.env$/.exec(key);
     return m ? m[1] : null;
 }
-/** The local keystore's own `ek_` fingerprint, or `null` when no identity exists on this machine (keyless / never-`gitvault init`-ed). */
+/** The local keystore's own `ek_` fingerprint, or `null` when no identity exists on this machine (keyless / never-`vault init`-ed). */
 function localEncryptionFingerprint(keystore) {
     return keystore.readIdentity()?.encryption_fingerprint ?? null;
 }
@@ -355,7 +355,7 @@ async function reconcileOne(client, repoId, backend, entry, ownFingerprint) {
         if (existing && existing.size_bytes === entry.size_bytes) {
             return { key: entry.key, outcome: "already_present" };
         }
-        const bytes = await readGitvaultObjectBytes(client, repoId, entry);
+        const bytes = await readVaultObjectBytes(client, repoId, entry);
         if (!bytes)
             return { key: entry.key, outcome: "failed", error: `${kindTag} the source no longer serves this object (listed but unreadable)` };
         const hash = sha256Hex(bytes);
@@ -380,18 +380,18 @@ async function reconcileOne(client, repoId, backend, entry, ownFingerprint) {
     }
 }
 /**
- * `run402 gitvault mirror sync` (task 2.3): list the vault's stored objects,
+ * `run402 repos mirror sync` (task 2.3): list the vault's stored objects,
  * diff against the mirror by key+size, fetch and hash-verify what's missing,
  * write it in admission order. Resumable and idempotent — running it twice in
  * a row with nothing new copies nothing the second time.
  */
 export async function mirrorSync(client, repoId, options = {}) {
-    const keystore = options.keystore ?? GitvaultKeystore.open();
+    const keystore = options.keystore ?? VaultKeystore.open();
     const backend = options.backend ?? openBackendFromConfig(keystore, repoId);
     const config = readMirrorConfig(keystore, repoId);
     const destination = options.backend ? backend.describe() : formatMirrorDestination(config.destination);
     const ownFingerprint = localEncryptionFingerprint(keystore);
-    const entries = await listGitvaultObjectsAll(client, repoId);
+    const entries = await listVaultObjectsAll(client, repoId);
     const plan = planMirrorWrite(entries);
     const ordered = [...plan.objects, ...plan.admissionsAndHeads];
     let copied = 0;
@@ -419,7 +419,7 @@ export async function mirrorSync(client, repoId, options = {}) {
             errors.push({ key: result.key, error: result.error ?? "unknown failure" });
         }
     }
-    // gitvault-mirror-default: a zero-failure pass is the event that clears the
+    // vault-mirror-default: a zero-failure pass is the event that clears the
     // vault_unmirrored finding — stamp it in the LOCAL config only (the gateway
     // never learns any of this; recordMirrorSuccess no-ops when there is no
     // config, e.g. a test-injected backend).
@@ -436,21 +436,21 @@ export async function mirrorSync(client, repoId, options = {}) {
         objects_failed: failed,
         bytes_copied: bytesCopied.toString(),
         errors,
-        validity_not_freshness: GITVAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT,
-        keystore_still_required: GITVAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT,
+        validity_not_freshness: VAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT,
+        keystore_still_required: VAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT,
     };
 }
 function openBackendFromConfig(keystore, repoId) {
     const config = readMirrorConfig(keystore, repoId);
     if (!config)
-        fail("GITVAULT_MIRROR_NOT_CONFIGURED", `no mirror is configured for ${repoId}`, "opening gitvault mirror", { repo_id: repoId }, [{ action: "run402 repos mirror <destination>" }]);
+        fail("VAULT_MIRROR_NOT_CONFIGURED", `no mirror is configured for ${repoId}`, "opening vault mirror", { repo_id: repoId }, [{ action: "run402 repos mirror <destination>" }]);
     if (config.destination.kind === "s3" && config.credential) {
         // Fail fast on a missing/misconfigured credential BEFORE any network call,
         // so a sync's error names the credential problem instead of a confusing
         // downstream 403.
         resolveMirrorCredentials(config.credential);
     }
-    return openGitvaultMirrorBackend(config.destination, repoId, config.credential);
+    return openVaultMirrorBackend(config.destination, repoId, config.credential);
 }
 /**
  * Fires after an ordinary vault push/deploy produces a new generation. NEVER
@@ -470,7 +470,7 @@ function openBackendFromConfig(keystore, repoId) {
 export async function mirrorPushForGeneration(client, repoId, options = {}) {
     let keystore;
     try {
-        keystore = options.keystore ?? GitvaultKeystore.open();
+        keystore = options.keystore ?? VaultKeystore.open();
         if (!options.backend && !readMirrorConfig(keystore, repoId)) {
             return { attempted: false, outcome: "skipped_no_mirror" };
         }
@@ -486,10 +486,10 @@ export async function mirrorPushForGeneration(client, repoId, options = {}) {
         return { attempted: true, outcome: "failed", error: e instanceof Error ? e.message : String(e) };
     }
 }
-// ─── BYO chain-copy dual-write (gitvault-byo-primary-bucket task 3.3) ─────────
+// ─── BYO chain-copy dual-write (vault-byo-primary-bucket task 3.3) ─────────
 /**
- * The SAME six payload kinds the gateway's `GITVAULT_BYO_PAYLOAD_KINDS`
- * names (`services/gitvault/upload-sessions.ts`) — client-written directly
+ * The SAME six payload kinds the gateway's `VAULT_BYO_PAYLOAD_KINDS`
+ * names (`services/vault/upload-sessions.ts`) — client-written directly
  * to the BYO destination at push time (task 3.2), so the chain-copy below
  * MUST skip them (re-copying them here would try to READ them back from
  * run402, which never held them for a BYO vault, and would 404). Every
@@ -503,7 +503,7 @@ export async function mirrorPushForGeneration(client, repoId, options = {}) {
  * D1/D9) and is exactly what this dual-write copies, so the customer bucket
  * alone becomes a complete `r402s-recover` source.
  */
-const GITVAULT_BYO_PAYLOAD_OBJECT_KINDS = new Set([
+const VAULT_BYO_PAYLOAD_OBJECT_KINDS = new Set([
     "wal_pack",
     "ref_state",
     "retention_roots",
@@ -514,13 +514,13 @@ const GITVAULT_BYO_PAYLOAD_OBJECT_KINDS = new Set([
 function openByoBackendFromConfig(keystore, repoId) {
     const config = readByoConfig(keystore, repoId);
     if (!config)
-        fail("GITVAULT_BYO_NOT_CONFIGURED", `no local BYO write config for ${repoId}`, "opening the gitvault BYO destination", { repo_id: repoId }, [{ action: "run402 repos create --byo <destination> allocated this vault; this machine needs the same destination + credential configured locally to write or dual-push its chain" }]);
+        fail("VAULT_BYO_NOT_CONFIGURED", `no local BYO write config for ${repoId}`, "opening the vault BYO destination", { repo_id: repoId }, [{ action: "run402 repos create --byo <destination> allocated this vault; this machine needs the same destination + credential configured locally to write or dual-push its chain" }]);
     if (config.destination.kind === "s3" && config.credential) {
         // Fail fast on a missing/misconfigured credential BEFORE any network
         // call, same discipline as `openBackendFromConfig` above.
         resolveMirrorCredentials(config.credential);
     }
-    return openGitvaultMirrorBackend(config.destination, repoId, config.credential);
+    return openVaultMirrorBackend(config.destination, repoId, config.credential);
 }
 /**
  * `plan.objects`, restricted to the chain-adjacent (NEVER payload) kinds —
@@ -530,7 +530,7 @@ function openByoBackendFromConfig(keystore, repoId) {
  */
 function chainOnlyEntries(entries) {
     const plan = planMirrorWrite(entries);
-    return [...plan.objects.filter((e) => !GITVAULT_BYO_PAYLOAD_OBJECT_KINDS.has(e.object_kind)), ...plan.admissionsAndHeads];
+    return [...plan.objects.filter((e) => !VAULT_BYO_PAYLOAD_OBJECT_KINDS.has(e.object_kind)), ...plan.admissionsAndHeads];
 }
 /**
  * `run402 repos create --byo`'s every-push dual-write (task 3.3, design
@@ -544,11 +544,11 @@ function chainOnlyEntries(entries) {
  * not a second ordering to prove.
  */
 export async function byoChainCopySync(client, repoId, options = {}) {
-    const keystore = options.keystore ?? GitvaultKeystore.open();
+    const keystore = options.keystore ?? VaultKeystore.open();
     const backend = options.backend ?? openByoBackendFromConfig(keystore, repoId);
     const destination = options.backend ? backend.describe() : formatMirrorDestination(readByoConfig(keystore, repoId).destination);
     const ownFingerprint = localEncryptionFingerprint(keystore);
-    const entries = await listGitvaultObjectsAll(client, repoId);
+    const entries = await listVaultObjectsAll(client, repoId);
     const ordered = chainOnlyEntries(entries);
     let copied = 0;
     let already = 0;
@@ -586,8 +586,8 @@ export async function byoChainCopySync(client, repoId, options = {}) {
         objects_failed: failed,
         bytes_copied: bytesCopied.toString(),
         errors,
-        validity_not_freshness: GITVAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT,
-        keystore_still_required: GITVAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT,
+        validity_not_freshness: VAULT_MIRROR_VALIDITY_NOT_FRESHNESS_STATEMENT,
+        keystore_still_required: VAULT_MIRROR_KEYSTORE_STILL_REQUIRED_STATEMENT,
     };
 }
 /**
@@ -600,7 +600,7 @@ export async function byoChainCopySync(client, repoId, options = {}) {
 export async function byoChainCopyPushForGeneration(client, repoId, options = {}) {
     let keystore;
     try {
-        keystore = options.keystore ?? GitvaultKeystore.open();
+        keystore = options.keystore ?? VaultKeystore.open();
         if (!options.backend && !readByoConfig(keystore, repoId)) {
             return { attempted: false, outcome: "skipped_no_mirror" };
         }
@@ -624,14 +624,14 @@ export async function byoChainCopyPushForGeneration(client, repoId, options = {}
  * direct write, chain via this file's dual-write above) — against the
  * destination, by key + size. Never throws on an absence; it REPORTS every
  * missing object by name so the caller (`repos fsck`) can refuse with
- * `GITVAULT_BYO_OBJECT_MISSING` naming exactly what the chain says should
+ * `VAULT_BYO_OBJECT_MISSING` naming exactly what the chain says should
  * exist and does not.
  */
 export async function verifyByoObjectsPresent(client, repoId, options = {}) {
-    const keystore = options.keystore ?? GitvaultKeystore.open();
+    const keystore = options.keystore ?? VaultKeystore.open();
     const backend = options.backend ?? openByoBackendFromConfig(keystore, repoId);
     const destination = options.backend ? backend.describe() : formatMirrorDestination(readByoConfig(keystore, repoId).destination);
-    const entries = await listGitvaultObjectsAll(client, repoId);
+    const entries = await listVaultObjectsAll(client, repoId);
     const missing = [];
     for (const entry of entries) {
         const existing = await backend.head(entry.key);
@@ -640,4 +640,4 @@ export async function verifyByoObjectsPresent(client, repoId, options = {}) {
     }
     return { repo_id: repoId, destination, checked: entries.length, missing };
 }
-//# sourceMappingURL=gitvault-mirror.js.map
+//# sourceMappingURL=vault-mirror.js.map

package/dist/node/vault-mirror.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-mirror.js","sourceRoot":"","sources":["../../src/node/vault-mirror.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoFG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,wBAAwB,EACxB,8CAA8C,EAC9C,6CAA6C,EAC7C,aAAa,GACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,mBAAmB,EAA0B,MAAM,0BAA0B,CAAC;AAClI,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAA2B,MAAM,2BAA2B,CAAC;AACtH,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe,EAAE,OAAiB,EAAE,WAAuB;IACtG,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAqCD,4IAA4I;AAC5I,MAAM,mBAAmB,GAAG,QAAQ,CAAC;AAErC;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,GAAW;IACpD,MAAM,QAAQ,GAAG,GAAG,mBAAmB,IAAI,MAAM,GAAG,CAAC;IACrD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CACF,+BAA+B,EAC/B,2BAA2B,MAAM,mDAAmD,OAAO,CAAC,CAAC,CAAE,MAAM,GAAG,EAAE,EAC1G,uBAAuB,EACvB,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mCAAmC,EAAE,gEAAgE,GAAG,EAAE,EAAE,uBAAuB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AACtK,CAAC;AAED,yKAAyK;AACzK,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,MAAc;IACtE,MAAM,IAAI,GAAG,cAAc,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC;IAChE,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,IAAI,MAA0B,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAmB,GAAG,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC1G,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACtI,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM;QAC1B,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,mCAAmC,EAAE,2DAA2D,EAAE,uBAAuB,CAAC,CAAC;QACvJ,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qKAAqK;AACrK,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAc,EAAE,KAAuB;IAChG,MAAM,IAAI,GAAG,cAAc,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IACxD,MAAM,eAAe,GAAG,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,eAAe,EAAE,CAAC;QACpB,yEAAyE;QACzE,kEAAkE;QAClE,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,iEAAiE;QACjE,8CAA8C;QAC9C,MAAM,YAAY,GAChB,eAAe,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,KAAK,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;QACnJ,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YACvC,IAAI,CACF,+BAA+B,EAC/B,uBAAuB,KAAK,CAAC,WAAW,iDAAiD,KAAK,CAAC,GAAG,eAAe,YAAY,IAAI,EACjI,oCAAoC,EACpC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,oBAAoB,EAAE,YAAY,EAAE,CACvF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,eAAe,CAAC,KAAK,IAAI,kBAAkB,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,cAAc,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/G,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC9H,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,IAAI,CAAC,0BAA0B,EAAE,GAAG,KAAK,CAAC,GAAG,sBAAsB,CAAC,CAAC,MAAM,GAAG,EAAE,oCAAoC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvK,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC9C,qEAAqE;IACrE,iEAAiE;IACjE,sEAAsE;IACtE,iEAAiE;IACjE,EAAE;IACF,gEAAgE;IAChE,wEAAwE;IACxE,qEAAqE;IACrE,yEAAyE;IACzE,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,6CAA6C;IAC7C,IAAI,SAAgF,CAAC;IACrF,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;IAC3J,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAE,CAAyB,CAAC,MAAM,KAAK,GAAG,IAAK,CAAuB,CAAC,IAAI,KAAK,oBAAoB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3I,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC7D,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;IACtD,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,IAAI,CAAC,0BAA0B,EAAE,GAAG,KAAK,CAAC,GAAG,qBAAqB,CAAC,CAAC,MAAM,GAAG,EAAE,oCAAoC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtK,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,wIAAwI;AACxI,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,wBAAwB,GAAqD;IACjF,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,sCAAsC,EAAE;IACrE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kCAAkC,EAAE;IAClE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,qCAAqC,EAAE;IAC3E,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,kDAAkD,EAAE;IAC5F,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACpF,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,iDAAiD,EAAE;IAC5F,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAClG,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAC5F,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAChG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACrF,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,0CAA0C,EAAE;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACrF,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8CAA8C,EAAE;IACrF,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gDAAgD,EAAE;IACjG,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,6DAA6D,EAAE;CAC/G,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAuB;IAC/D,IAAI,KAAK,CAAC,WAAW,KAAK,cAAc,EAAE,CAAC;QACzC,sEAAsE;QACtE,0DAA0D;QAC1D,yEAAyE;QACzE,mEAAmE;QACnE,gEAAgE;QAChE,qDAAqD;QACrD,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,CAAC,GAAG,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpF,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,+BAA+B,EAAE,wDAAwD,KAAK,CAAC,GAAG,EAAE,EAAE,oCAAoC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7K,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,WAAW,CAAC,CAAC;IAChF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,+BAA+B,EAAE,6BAA6B,KAAK,CAAC,WAAW,0BAA0B,KAAK,CAAC,GAAG,GAAG,EAAE,oCAAoC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACxN,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,+BAA+B,EAAE,GAAG,KAAK,CAAC,WAAW,+CAA+C,KAAK,CAAC,GAAG,EAAE,EAAE,oCAAoC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACxN,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,sCAAsC,CAAC,GAAW;IACzD,MAAM,CAAC,GAAG,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED,uIAAuI;AACvI,SAAS,0BAA0B,CAAC,QAAuB;IACzD,OAAO,QAAQ,CAAC,YAAY,EAAE,EAAE,sBAAsB,IAAI,IAAI,CAAC;AACjE,CAAC;AAWD,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,OAAoC;IAClE,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqE,CAAC;IAClG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,KAAK,CAAC,KAAK,KAAK,YAAY;YAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;;YAChD,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACnB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,kBAAkB,GAAuB,EAAE,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS;YAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,IAAI;YAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;AACzC,CAAC;AAqCD;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAc,EAAE,OAA2B,EAAE,KAAuB,EAAE,cAA6B;IAC7I,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC;IACzC,IAAI,KAAK,CAAC,WAAW,KAAK,cAAc,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,sCAAsC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,cAAc,EAAE,CAAC;YACzC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACzD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,kEAAkE,EAAE,CAAC;QAC9I,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,oCAAoC,KAAK,CAAC,MAAM,SAAS,IAAI,EAAE,EAAE,CAAC;QACjI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,oEAAoE;YACpE,sEAAsE;YACtE,iEAAiE;YACjE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;YAC1G,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,qIAAqI,EAAE,CAAC;QACvM,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,OAAO,EAAE,EAAE,CAAC;IACvH,CAAC;AACH,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,MAAc,EAAE,UAAkC,EAAE;IACnG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAO,CAAC,WAAW,CAAC,CAAC;IAExG,MAAM,cAAc,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAE9D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,CAAC;YACZ,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,2BAA2B,EAAE,CAAC;YAC1D,cAAc,IAAI,CAAC,CAAC;YACpB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,MAAM,KAAK,CAAC;QAAE,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAExD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,WAAW;QACX,cAAc,EAAE,OAAO,CAAC,MAAM;QAC9B,cAAc,EAAE,MAAM;QACtB,uBAAuB,EAAE,OAAO;QAChC,iCAAiC,EAAE,cAAc;QACjD,8BAA8B,EAAE,kBAAkB;QAClD,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE;QACpC,MAAM;QACN,sBAAsB,EAAE,6CAA6C;QACrE,uBAAuB,EAAE,8CAA8C;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAuB,EAAE,MAAc;IACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,6BAA6B,EAAE,+BAA+B,MAAM,EAAE,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC,CAAC,CAAC;IAC1L,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1D,2EAA2E;QAC3E,wEAAwE;QACxE,kBAAkB;QAClB,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC/E,CAAC;AAWD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc,EAAE,MAAc,EAAE,UAAkC,EAAE;IAChH,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACjG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IAClE,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,qBAAqB;IACrB,iBAAiB;IACjB,cAAc;CACf,CAAC,CAAC;AAEH,SAAS,wBAAwB,CAAC,QAAuB,EAAE,MAAc;IACvE,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,0BAA0B,EAAE,iCAAiC,MAAM,EAAE,EAAE,mCAAmC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,uKAAuK,EAAE,CAAC,CAAC,CAAC;IAC1U,IAAI,MAAM,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1D,qEAAqE;QACrE,0DAA0D;QAC1D,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAoC;IAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;AACzH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc,EAAE,UAAkC,EAAE;IACzG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAE,CAAC,WAAW,CAAC,CAAC;IAEjI,MAAM,cAAc,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,MAAM,GAA0C,EAAE,CAAC;IACzD,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,CAAC;YACZ,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,iBAAiB,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,2BAA2B,EAAE,CAAC;YAC1D,cAAc,IAAI,CAAC,CAAC;YACpB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM;QACf,WAAW;QACX,cAAc,EAAE,OAAO,CAAC,MAAM;QAC9B,cAAc,EAAE,MAAM;QACtB,uBAAuB,EAAE,OAAO;QAChC,iCAAiC,EAAE,cAAc;QACjD,8BAA8B,EAAE,kBAAkB;QAClD,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE;QACpC,MAAM;QACN,sBAAsB,EAAE,6CAA6C;QACrE,uBAAuB,EAAE,8CAA8C;KACxE,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAAc,EAAE,MAAc,EAAE,UAAkC,EAAE;IACtH,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACjG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,CAAC;AACH,CAAC;AAgBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc,EAAE,MAAc,EAAE,UAAkC,EAAE;IAChH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAE,CAAC,WAAW,CAAC,CAAC;IACjI,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC5E,CAAC"}

package/dist/node/{gitvault-native-crypto.d.ts → vault-native-crypto.d.ts}

@@ -1,28 +1,28 @@
-import { type GitvaultAeadBackend, type GitvaultHashBackend } from "../namespaces/gitvault.crypto.js";
-export declare const nodeGitvaultAeadBackend: GitvaultAeadBackend;
+import { type VaultAeadBackend, type VaultHashBackend } from "../namespaces/vault.crypto.js";
+export declare const nodeVaultAeadBackend: VaultAeadBackend;
 /**
  * Install the native backend when this OpenSSL has the cipher. Returns whether
  * it took, so a test can assert the guard rather than infer it. Any failure
  * leaves the `@noble` default untouched — the native path is an optimization,
  * never a correctness dependency.
  */
-export declare function installNodeGitvaultAeadBackend(): boolean;
+export declare function installNodeVaultAeadBackend(): boolean;
 /**
- * The Node-native protocol-hash backend (gitvault-native-hash). Same seam
+ * The Node-native protocol-hash backend (vault-native-hash). Same seam
  * pattern, second slot: `sha256Hex` is the chokepoint every protocol hash
  * flows through, and on the receipt-verified open/seal paths it hashes whole
  * multi-megabyte frames on pure-JS `@noble/hashes` — the measured leftover
- * after the AEAD moved to OpenSSL. `createHash` is sync (the gitvault crypto
+ * after the AEAD moved to OpenSSL. `createHash` is sync (the vault crypto
  * surface is sync public API), byte-compatible, and already hashes packs in
- * `gitvault-recover.ts`/`gitvault-mirror.ts`.
+ * `vault-recover.ts`/`vault-mirror.ts`.
  */
-export declare const nodeGitvaultHashBackend: GitvaultHashBackend;
+export declare const nodeVaultHashBackend: VaultHashBackend;
 /**
- * Install the native hash backend after a live probe (gitvault-native-hash
+ * Install the native hash backend after a live probe (vault-native-hash
  * design D3): a backend that does not reproduce the known digest — or throws —
  * registers nothing and the `@noble` default keeps serving. The `backend`
  * parameter exists only so the byte-equality suite can drive the refusing
  * branch; production callers pass nothing.
  */
-export declare function installNodeGitvaultHashBackend(backend?: GitvaultHashBackend): boolean;
-//# sourceMappingURL=gitvault-native-crypto.d.ts.map
+export declare function installNodeVaultHashBackend(backend?: VaultHashBackend): boolean;
+//# sourceMappingURL=vault-native-crypto.d.ts.map

package/dist/node/vault-native-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-native-crypto.d.ts","sourceRoot":"","sources":["../../src/node/vault-native-crypto.ts"],"names":[],"mappings":"AAgCA,OAAO,EAA8C,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAyCzI,eAAO,MAAM,oBAAoB,EAAE,gBAoClC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAAI,OAAO,CAcrD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,gBAMlC,CAAC;AAQF;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,gBAAuC,GAAG,OAAO,CAWrG"}

package/dist/node/{gitvault-native-crypto.js → vault-native-crypto.js}

@@ -1,5 +1,5 @@
 /**
- * The Node-native bulk-AEAD backend (gitvault-native-bulk-crypto, design
+ * The Node-native bulk-AEAD backend (vault-native-bulk-crypto, design
  * D1/D2/D4).
  *
  * Every WAL pack, checkpoint pack, `ref_state` and `retention_roots` frame
@@ -26,11 +26,11 @@
  * try/caught, so an OpenSSL build without `chacha20-poly1305` — or any
  * construction error — silently leaves the `@noble` path in place. Correct,
  * just slower. `open` returns `null` on tag failure; the core renders the
- * SAME `GITVAULT_AEAD_AUTH_FAILURE` it always did.
+ * SAME `VAULT_AEAD_AUTH_FAILURE` it always did.
  */
 import { createCipheriv, createDecipheriv, createHash, getCiphers } from "node:crypto";
 import { hchacha } from "@noble/ciphers/chacha.js";
-import { _setGitvaultAeadBackend, _setGitvaultHashBackend } from "../namespaces/gitvault.crypto.js";
+import { _setVaultAeadBackend, _setVaultHashBackend } from "../namespaces/vault.crypto.js";
 const NODE_CIPHER = "chacha20-poly1305";
 const TAG_BYTES = 16;
 /** ChaCha's `"expand 32-byte k"` constant as little-endian u32 words. */
@@ -67,7 +67,7 @@ function ietfIv(nonce24) {
     iv.set(nonce24.subarray(16, 24), 4);
     return iv;
 }
-export const nodeGitvaultAeadBackend = {
+export const nodeVaultAeadBackend = {
     seal(key32, nonce24, aad, plaintext) {
         const cipher = createCipheriv(NODE_CIPHER, xchachaSubkey(key32, nonce24), ietfIv(nonce24), { authTagLength: TAG_BYTES });
         // OpenSSL's ChaCha20-Poly1305 needs the plaintext length up front when an
@@ -113,18 +113,18 @@ export const nodeGitvaultAeadBackend = {
  * leaves the `@noble` default untouched — the native path is an optimization,
  * never a correctness dependency.
  */
-export function installNodeGitvaultAeadBackend() {
+export function installNodeVaultAeadBackend() {
     try {
         if (!getCiphers().includes(NODE_CIPHER))
             return false;
         // Prove the construction works on THIS build before letting the bulk path
         // depend on it: a cipher that is listed but rejects our parameters must
         // not become a runtime failure on the first real frame.
-        const probe = nodeGitvaultAeadBackend.seal(new Uint8Array(32), new Uint8Array(24), new Uint8Array([1]), new Uint8Array([2, 3]));
-        const opened = nodeGitvaultAeadBackend.open(new Uint8Array(32), new Uint8Array(24), new Uint8Array([1]), probe);
+        const probe = nodeVaultAeadBackend.seal(new Uint8Array(32), new Uint8Array(24), new Uint8Array([1]), new Uint8Array([2, 3]));
+        const opened = nodeVaultAeadBackend.open(new Uint8Array(32), new Uint8Array(24), new Uint8Array([1]), probe);
         if (!opened || opened.length !== 2 || opened[0] !== 2 || opened[1] !== 3)
             return false;
-        _setGitvaultAeadBackend(nodeGitvaultAeadBackend);
+        _setVaultAeadBackend(nodeVaultAeadBackend);
         return true;
     }
     catch {
@@ -132,15 +132,15 @@ export function installNodeGitvaultAeadBackend() {
     }
 }
 /**
- * The Node-native protocol-hash backend (gitvault-native-hash). Same seam
+ * The Node-native protocol-hash backend (vault-native-hash). Same seam
  * pattern, second slot: `sha256Hex` is the chokepoint every protocol hash
  * flows through, and on the receipt-verified open/seal paths it hashes whole
  * multi-megabyte frames on pure-JS `@noble/hashes` — the measured leftover
- * after the AEAD moved to OpenSSL. `createHash` is sync (the gitvault crypto
+ * after the AEAD moved to OpenSSL. `createHash` is sync (the vault crypto
  * surface is sync public API), byte-compatible, and already hashes packs in
- * `gitvault-recover.ts`/`gitvault-mirror.ts`.
+ * `vault-recover.ts`/`vault-mirror.ts`.
  */
-export const nodeGitvaultHashBackend = {
+export const nodeVaultHashBackend = {
     sha256(bytes) {
         // A digest Buffer can live in Node's shared pool — respect its offset.
         const d = createHash("sha256").update(bytes).digest();
@@ -153,13 +153,13 @@ export const nodeGitvaultHashBackend = {
  */
 const SHA256_EMPTY_HEX = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";
 /**
- * Install the native hash backend after a live probe (gitvault-native-hash
+ * Install the native hash backend after a live probe (vault-native-hash
  * design D3): a backend that does not reproduce the known digest — or throws —
  * registers nothing and the `@noble` default keeps serving. The `backend`
  * parameter exists only so the byte-equality suite can drive the refusing
  * branch; production callers pass nothing.
  */
-export function installNodeGitvaultHashBackend(backend = nodeGitvaultHashBackend) {
+export function installNodeVaultHashBackend(backend = nodeVaultHashBackend) {
     try {
         const probe = backend.sha256(new Uint8Array(0));
         let hex = "";
@@ -167,11 +167,11 @@ export function installNodeGitvaultHashBackend(backend = nodeGitvaultHashBackend
             hex += b.toString(16).padStart(2, "0");
         if (hex !== SHA256_EMPTY_HEX)
             return false;
-        _setGitvaultHashBackend(backend);
+        _setVaultHashBackend(backend);
         return true;
     }
     catch {
         return false;
     }
 }
-//# sourceMappingURL=gitvault-native-crypto.js.map
+//# sourceMappingURL=vault-native-crypto.js.map