@run402/sdk 4.95.0 → 4.97.0

package/dist/node/vault-native-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-native-crypto.js","sourceRoot":"","sources":["../../src/node/vault-native-crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAgD,MAAM,+BAA+B,CAAC;AAEzI,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,yEAAyE;AACzE,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAEhF;;;;;GAKG;AACH,SAAS,OAAO,CAAC,KAAiB;IAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAkB;IACjC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8DAA8D;AAC9D,SAAS,aAAa,CAAC,KAAiB,EAAE,OAAmB;IAC3D,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,+EAA+E;AAC/E,SAAS,MAAM,CAAC,OAAmB;IACjC,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;QACzH,0EAA0E;QAC1E,yEAAyE;QACzE,oCAAoC;QACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB;QACxC,IAAI,gBAAgB,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,GAAG,SAAS,CAAC;QAClD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7H,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACjB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,0CAA0C;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,0EAA0E;QAC1E,wEAAwE;QACxE,wDAAwD;QACxD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvF,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,MAAM,CAAC,KAAK;QACV,uEAAuE;QACvE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACtD,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,gBAAgB,GAAG,kEAAkE,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAA4B,oBAAoB;IAC1F,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,GAAG,KAAK,gBAAgB;YAAE,OAAO,KAAK,CAAC;QAC3C,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/node/{gitvault-open-or-create.d.ts → vault-open-or-create.d.ts}

@@ -1,25 +1,25 @@
 /**
- * gitvault D2 — lazy allocation on first push (repo-first-onramp task 2.2).
+ * vault D2 — lazy allocation on first push (repo-first-onramp task 2.2).
  *
- * The orchestration `Gitvault.openOrCreate` (the namespace method the remote
+ * The orchestration `Repos.openOrCreate` (the namespace method the remote
  * helper and the capture lane drive) delegates to: resolve `repo_id` from
  * `project_id` via the SAME transport method `forProject` uses
- * (`findVaultByProject`, already on {@link GitvaultTransport} — no second
+ * (`findVaultByProject`, already on {@link VaultTransport} — no second
  * transport shape, no HTTP wire duplicated), and when that resolution fails
  * AND an owning `org_id` was supplied, run the six-stage creation journal
- * ({@link createGitvault}) to allocate it.
+ * ({@link createVault}) to allocate it.
  *
  * Pulled out of the namespace class so it can be exercised directly against
- * `GitvaultMemoryTransport` (the fixture every other creation/deploy test
+ * `VaultMemoryTransport` (the fixture every other creation/deploy test
  * already uses) instead of hand-rolling an HTTP-level mock of the entire
  * six-stage protocol a second time.
  */
-import { type GitvaultCreationResult } from "./gitvault-creation-journal.js";
-import type { GitvaultKeystore } from "./gitvault-keystore.js";
-import type { GitvaultTransport } from "./gitvault-publication.js";
-export interface OpenOrCreateGitvaultOptions {
-    keystore: GitvaultKeystore;
-    transport: GitvaultTransport;
+import { type VaultCreationResult } from "./vault-creation-journal.js";
+import type { VaultKeystore } from "./vault-keystore.js";
+import type { VaultTransport } from "./vault-publication.js";
+export interface OpenOrCreateVaultOptions {
+    keystore: VaultKeystore;
+    transport: VaultTransport;
     project_id: string;
     /** The owning org — required only when the vault turns out to be unallocated. */
     org_id?: string;
@@ -27,7 +27,7 @@ export interface OpenOrCreateGitvaultOptions {
     client_creation_id?: string;
     service_public_key?: Uint8Array | string;
 }
-export type OpenOrCreateGitvaultResult = {
+export type OpenOrCreateVaultResult = {
     found: true;
     repo_id: string;
     created: null;
@@ -35,9 +35,9 @@ export type OpenOrCreateGitvaultResult = {
     found: false;
     repo_id: string;
     created: {
-        /** Mirrors `GitvaultCreationResult.how === "reconciled"`: a local journal was resumed to completion, nothing re-minted. */
+        /** Mirrors `VaultCreationResult.how === "reconciled"`: a local journal was resumed to completion, nothing re-minted. */
         deduplicated: boolean;
-        recovery_receipt: GitvaultCreationResult["recovery_receipt"];
+        recovery_receipt: VaultCreationResult["recovery_receipt"];
         genesis_sha256: string;
     };
 };
@@ -55,5 +55,5 @@ export type OpenOrCreateGitvaultResult = {
  * never a new one — drives to ACTIVE, and exactly one vault exists either
  * way. An explicit `client_creation_id` always wins over that search.
  */
-export declare function openOrCreateGitvault(options: OpenOrCreateGitvaultOptions): Promise<OpenOrCreateGitvaultResult>;
-//# sourceMappingURL=gitvault-open-or-create.d.ts.map
+export declare function openOrCreateVault(options: OpenOrCreateVaultOptions): Promise<OpenOrCreateVaultResult>;
+//# sourceMappingURL=vault-open-or-create.d.ts.map

package/dist/node/vault-open-or-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-open-or-create.d.ts","sourceRoot":"","sources":["../../src/node/vault-open-or-create.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAA0C,KAAK,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAC/G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,cAAc,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kHAAkH;IAClH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;CAC1C;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,GAC/C;IACE,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QACP,wHAAwH;QACxH,YAAY,EAAE,OAAO,CAAC;QACtB,gBAAgB,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QAC1D,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,CAAC;AAEN;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA4B3G"}

package/dist/node/{gitvault-open-or-create.js → vault-open-or-create.js}

@@ -1,20 +1,20 @@
 /**
- * gitvault D2 — lazy allocation on first push (repo-first-onramp task 2.2).
+ * vault D2 — lazy allocation on first push (repo-first-onramp task 2.2).
  *
- * The orchestration `Gitvault.openOrCreate` (the namespace method the remote
+ * The orchestration `Repos.openOrCreate` (the namespace method the remote
  * helper and the capture lane drive) delegates to: resolve `repo_id` from
  * `project_id` via the SAME transport method `forProject` uses
- * (`findVaultByProject`, already on {@link GitvaultTransport} — no second
+ * (`findVaultByProject`, already on {@link VaultTransport} — no second
  * transport shape, no HTTP wire duplicated), and when that resolution fails
  * AND an owning `org_id` was supplied, run the six-stage creation journal
- * ({@link createGitvault}) to allocate it.
+ * ({@link createVault}) to allocate it.
  *
  * Pulled out of the namespace class so it can be exercised directly against
- * `GitvaultMemoryTransport` (the fixture every other creation/deploy test
+ * `VaultMemoryTransport` (the fixture every other creation/deploy test
  * already uses) instead of hand-rolling an HTTP-level mock of the entire
  * six-stage protocol a second time.
  */
-import { createGitvault, findResumableGitvaultJournal } from "./gitvault-creation-journal.js";
+import { createVault, findResumableVaultJournal } from "./vault-creation-journal.js";
 /**
  * Resolve a project's vault, allocating it when it does not exist yet.
  *
@@ -29,7 +29,7 @@ import { createGitvault, findResumableGitvaultJournal } from "./gitvault-creatio
  * never a new one — drives to ACTIVE, and exactly one vault exists either
  * way. An explicit `client_creation_id` always wins over that search.
  */
-export async function openOrCreateGitvault(options) {
+export async function openOrCreateVault(options) {
     let unresolved = null;
     try {
         const record = await options.transport.findVaultByProject({ project_id: options.project_id });
@@ -40,8 +40,8 @@ export async function openOrCreateGitvault(options) {
     }
     if (!options.org_id)
         throw unresolved;
-    const resumable = options.client_creation_id ? null : findResumableGitvaultJournal(options.keystore, options.org_id, options.project_id);
-    const created = await createGitvault({
+    const resumable = options.client_creation_id ? null : findResumableVaultJournal(options.keystore, options.org_id, options.project_id);
+    const created = await createVault({
         keystore: options.keystore,
         transport: options.transport,
         org_id: options.org_id,
@@ -59,4 +59,4 @@ export async function openOrCreateGitvault(options) {
         created: { deduplicated: created.how === "reconciled", recovery_receipt: created.recovery_receipt, genesis_sha256: created.genesis_sha256 },
     };
 }
-//# sourceMappingURL=gitvault-open-or-create.js.map
+//# sourceMappingURL=vault-open-or-create.js.map

package/dist/node/vault-open-or-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-open-or-create.js","sourceRoot":"","sources":["../../src/node/vault-open-or-create.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAA4B,MAAM,6BAA6B,CAAC;AA4B/G;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,IAAI,UAAU,GAAY,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,UAAU,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,UAAU,CAAC;IAEtC,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IACtI,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE;YACpD,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxG,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,KAAK,YAAY,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;KAC5I,CAAC;AACJ,CAAC"}

package/dist/node/{gitvault-prewarm.d.ts → vault-prewarm.d.ts}

@@ -4,48 +4,48 @@ export declare const prewarmDeps: {
     warmSigner: () => unknown;
     warmPaidStack: () => unknown;
     /**
-     * gitvault-object-host-predial (task 2.1): this repo's locally-learned
+     * vault-object-host-predial (task 2.1): this repo's locally-learned
      * object-store origins, or `[]` for "nothing known" (a first-ever
      * session, or any read failure — never thrown). Injectable so the dial
      * loop below is testable without a real keystore on disk; the real
-     * implementation is a plain, synchronous `GitvaultKeystore.readRepo`.
+     * implementation is a plain, synchronous `VaultKeystore.readRepo`.
      */
     readObjectStoreOrigins: (repoId: string, keystoreRoot?: string) => string[];
 };
 /**
- * The connection-dial half alone (gitvault-first-op-premium task 2.1 —
+ * The connection-dial half alone (vault-first-op-premium task 2.1 —
  * "pre-connect on session accept"). A RESIDENT daemon already ran the full
  * prewarm (dial + signer + paid-stack) exactly once at boot; re-running
  * `warmPaidStack` on every forwarded session was measured to cost an EXTRA
  * ~150-300ms per session (two live Base RPC probes, `sepolia.base.org` +
- * `mainnet.base.org`, that a gitvault session never actually needs) for no
+ * `mainnet.base.org`, that a vault session never actually needs) for no
  * benefit — the paid-fetch buyer stack only needs loading once per process.
  * This is the narrow half a session-accept hook should call: kick the owned
  * dispatcher's connection (so a dead/never-dialed socket redials NOW,
  * overlapping git's own helper handshake) and nothing else. Same contract as
  * the full prewarm: fire-and-forget, every failure swallowed, no side effects.
  */
-export declare function kickGitvaultConnection(apiBase?: string): void;
+export declare function kickVaultConnection(apiBase?: string): void;
 /**
  * Start the connection + signer prewarm. Returns immediately; nothing to
  * await, nothing thrown, ever. Call this ONCE per process (verb startup, or
- * daemon boot) — see `kickGitvaultConnection` for the narrower, repeatable
+ * daemon boot) — see `kickVaultConnection` for the narrower, repeatable
  * connection-only half a resident daemon should use per forwarded session.
  */
-export declare function prewarmGitvaultConnection(apiBase?: string): void;
+export declare function prewarmVaultConnection(apiBase?: string): void;
 /**
- * gitvault-object-host-predial (design D2/D4, task 2.1): fire-and-forget,
+ * vault-object-host-predial (design D2/D4, task 2.1): fire-and-forget,
  * dial-only connection establishment to a repo's PERSISTED object-store
  * origin(s) — the presigned/edge host(s) an earlier session in this
  * checkout already fetched objects from (recorded via
- * `GitvaultKeystore.recordObjectStoreOrigins`). Every guarantee of the
+ * `VaultKeystore.recordObjectStoreOrigins`). Every guarantee of the
  * prewarm above applies verbatim: never awaited, every failure (a
  * malformed origin, a keystore read failure, a dial that never completes)
  * is swallowed silently, the abort timer is unref'd via
  * `AbortSignal.timeout`, and the response body is cancelled immediately —
  * nothing here can hold the process open or touch a counted transport
- * budget. Rides the SAME owned dispatcher as `kickGitvaultConnection`
- * (gitvault-owned-dispatcher D5), so a warmed socket lands in the exact
+ * budget. Rides the SAME owned dispatcher as `kickVaultConnection`
+ * (vault-owned-dispatcher D5), so a warmed socket lands in the exact
  * per-origin pool the verb's real object GET draws from.
  *
  * A repo with nothing persisted (first-ever session, or a keystore read
@@ -55,5 +55,5 @@ export declare function prewarmGitvaultConnection(apiBase?: string): void;
  * costs one harmless background round trip; the next observed fetch
  * overwrites the persisted hint.
  */
-export declare function predialGitvaultObjectStore(repoId: string, keystoreRoot?: string): void;
-//# sourceMappingURL=gitvault-prewarm.d.ts.map
+export declare function predialVaultObjectStore(repoId: string, keystoreRoot?: string): void;
+//# sourceMappingURL=vault-prewarm.d.ts.map

package/dist/node/vault-prewarm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-prewarm.d.ts","sourceRoot":"","sources":["../../src/node/vault-prewarm.ts"],"names":[],"mappings":"AA2CA,4BAA4B;AAC5B,eAAO,MAAM,WAAW,EAAE;IACxB,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/B,UAAU,EAAE,MAAM,OAAO,CAAC;IAC1B,aAAa,EAAE,MAAM,OAAO,CAAC;IAC7B;;;;;;OAMG;IACH,sBAAsB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CAgC7E,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAU1D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAiB7D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAuBnF"}

package/dist/node/{gitvault-prewarm.js → vault-prewarm.js}

@@ -1,6 +1,6 @@
 /**
- * gitvault-connection-amortization (bench P5) — boot-time prewarm for the
- * gitvault verb paths.
+ * vault-connection-amortization (bench P5) — boot-time prewarm for the
+ * vault verb paths.
  *
  * The 4.53.0 benchmark retest showed a fresh `git push`/`git fetch` process
  * pays a ~650–700 ms premium on whichever transport op runs FIRST (DNS +
@@ -11,7 +11,7 @@
  * does (git's capabilities/option/list stdin exchange, keystore reads,
  * offline pin resolution).
  *
- * Guarantees (spec-pinned in gitvault-client-surface, "Verb startup
+ * Guarantees (spec-pinned in vault-client-surface, "Verb startup
  * amortizes connection setup off the critical path"):
  *   - fire-and-forget: `void` return, never awaited on any verb path;
  *   - every failure is swallowed — an unreachable gateway surfaces exactly
@@ -22,27 +22,27 @@
  *     `RUN402_TRACE` — deliberately NOT routed through the request kernel.
  *     The kernel stays the one caller of the SDK's transport fetch for
  *     REQUEST traffic; this is connection plumbing on the OWNED dispatcher
- *     (gitvault-owned-dispatcher), so the warmed socket lands in the exact
+ *     (vault-owned-dispatcher), so the warmed socket lands in the exact
  *     per-origin pool — the API origin's single multiplexed Client — that
  *     the verb's first request draws from. That non-kernel fetch is
  *     sanctioned here and nowhere else.
  *
- * gitvault-object-host-predial adds one sibling, `predialGitvaultObjectStore`
+ * vault-object-host-predial adds one sibling, `predialVaultObjectStore`
  * (below): the object-store host(s) a repo's transport has previously
  * observed, dialed on the SAME owned dispatcher under the SAME guarantees.
  * It is a separate function (not folded into the two above) because it
- * needs a `repoId` neither `kickGitvaultConnection` nor
- * `prewarmGitvaultConnection` has — see their call sites in
- * `remote-helper-session.mjs` and `gitvault-daemon.mjs` for where that id
+ * needs a `repoId` neither `kickVaultConnection` nor
+ * `prewarmVaultConnection` has — see their call sites in
+ * `remote-helper-session.mjs` and `vault-daemon.mjs` for where that id
  * comes from cheaply, offline.
  */
 import { getApiBase } from "../../core-dist/config.js";
 import { getWalletAuthHeaders } from "../../core-dist/wallet-auth.js";
 import { sdkFetch } from "./http-dispatcher.js";
-import { GitvaultKeystore } from "./gitvault-keystore.js";
+import { VaultKeystore } from "./vault-keystore.js";
 /** Injectable for tests. */
 export const prewarmDeps = {
-    // The OWNED dispatcher, deliberately (gitvault-owned-dispatcher D5): the
+    // The OWNED dispatcher, deliberately (vault-owned-dispatcher D5): the
     // warmed socket must land in the exact pool the verb's first request
     // draws from — warming the built-in dispatcher would warm the wrong one.
     fetch: (...args) => sdkFetch(...args),
@@ -55,7 +55,7 @@ export const prewarmDeps = {
     // dominant cost is the dynamic viem/@x402 (or mpp) stack import (~360 ms
     // measured). Every verb pays it exactly once regardless, so loading it
     // during the prewarm wastes nothing and overlaps it with git's local
-    // plumbing (gitvault-owned-dispatcher — the first-op decomposition that
+    // plumbing (vault-owned-dispatcher — the first-op decomposition that
     // motivated this: ~360 ms stack + ~200 ms dial + ~120 ms request).
     warmPaidStack: () => {
         void (async () => {
@@ -66,7 +66,7 @@ export const prewarmDeps = {
     },
     readObjectStoreOrigins: (repoId, keystoreRoot) => {
         try {
-            const keystore = new GitvaultKeystore(keystoreRoot !== undefined ? { rootDir: keystoreRoot } : {});
+            const keystore = new VaultKeystore(keystoreRoot !== undefined ? { rootDir: keystoreRoot } : {});
             return keystore.readRepo(repoId)?.object_store_origins ?? [];
         }
         catch {
@@ -75,19 +75,19 @@ export const prewarmDeps = {
     },
 };
 /**
- * The connection-dial half alone (gitvault-first-op-premium task 2.1 —
+ * The connection-dial half alone (vault-first-op-premium task 2.1 —
  * "pre-connect on session accept"). A RESIDENT daemon already ran the full
  * prewarm (dial + signer + paid-stack) exactly once at boot; re-running
  * `warmPaidStack` on every forwarded session was measured to cost an EXTRA
  * ~150-300ms per session (two live Base RPC probes, `sepolia.base.org` +
- * `mainnet.base.org`, that a gitvault session never actually needs) for no
+ * `mainnet.base.org`, that a vault session never actually needs) for no
  * benefit — the paid-fetch buyer stack only needs loading once per process.
  * This is the narrow half a session-accept hook should call: kick the owned
  * dispatcher's connection (so a dead/never-dialed socket redials NOW,
  * overlapping git's own helper handshake) and nothing else. Same contract as
  * the full prewarm: fire-and-forget, every failure swallowed, no side effects.
  */
-export function kickGitvaultConnection(apiBase) {
+export function kickVaultConnection(apiBase) {
     try {
         const base = apiBase ?? getApiBase();
         void prewarmDeps
@@ -102,11 +102,11 @@ export function kickGitvaultConnection(apiBase) {
 /**
  * Start the connection + signer prewarm. Returns immediately; nothing to
  * await, nothing thrown, ever. Call this ONCE per process (verb startup, or
- * daemon boot) — see `kickGitvaultConnection` for the narrower, repeatable
+ * daemon boot) — see `kickVaultConnection` for the narrower, repeatable
  * connection-only half a resident daemon should use per forwarded session.
  */
-export function prewarmGitvaultConnection(apiBase) {
-    kickGitvaultConnection(apiBase);
+export function prewarmVaultConnection(apiBase) {
+    kickVaultConnection(apiBase);
     // Deferred so a remote helper's `capabilities` reply is never delayed by
     // the synchronous sign — the warmup only has to land before the verb's
     // first authenticated request, which is several stdin exchanges away.
@@ -126,18 +126,18 @@ export function prewarmGitvaultConnection(apiBase) {
     });
 }
 /**
- * gitvault-object-host-predial (design D2/D4, task 2.1): fire-and-forget,
+ * vault-object-host-predial (design D2/D4, task 2.1): fire-and-forget,
  * dial-only connection establishment to a repo's PERSISTED object-store
  * origin(s) — the presigned/edge host(s) an earlier session in this
  * checkout already fetched objects from (recorded via
- * `GitvaultKeystore.recordObjectStoreOrigins`). Every guarantee of the
+ * `VaultKeystore.recordObjectStoreOrigins`). Every guarantee of the
  * prewarm above applies verbatim: never awaited, every failure (a
  * malformed origin, a keystore read failure, a dial that never completes)
  * is swallowed silently, the abort timer is unref'd via
  * `AbortSignal.timeout`, and the response body is cancelled immediately —
  * nothing here can hold the process open or touch a counted transport
- * budget. Rides the SAME owned dispatcher as `kickGitvaultConnection`
- * (gitvault-owned-dispatcher D5), so a warmed socket lands in the exact
+ * budget. Rides the SAME owned dispatcher as `kickVaultConnection`
+ * (vault-owned-dispatcher D5), so a warmed socket lands in the exact
  * per-origin pool the verb's real object GET draws from.
  *
  * A repo with nothing persisted (first-ever session, or a keystore read
@@ -147,14 +147,14 @@ export function prewarmGitvaultConnection(apiBase) {
  * costs one harmless background round trip; the next observed fetch
  * overwrites the persisted hint.
  */
-export function predialGitvaultObjectStore(repoId, keystoreRoot) {
+export function predialVaultObjectStore(repoId, keystoreRoot) {
     try {
         const origins = prewarmDeps.readObjectStoreOrigins(repoId, keystoreRoot);
         for (const origin of origins) {
             try {
                 // `new URL(origin)` both validates (throws SYNCHRONOUSLY on a
                 // corrupted persisted string, caught right here — mirrors
-                // `kickGitvaultConnection`'s own `new URL("/health", base)` guard)
+                // `kickVaultConnection`'s own `new URL("/health", base)` guard)
                 // and gives `fetch` a well-formed target; a bare origin normalizes
                 // to `<origin>/`, which is exactly what the real object-store host
                 // sees regardless — the dial is the point, not the path.
@@ -173,4 +173,4 @@ export function predialGitvaultObjectStore(repoId, keystoreRoot) {
         /* the whole predial is best-effort — nothing here can affect a verb */
     }
 }
-//# sourceMappingURL=gitvault-prewarm.js.map
+//# sourceMappingURL=vault-prewarm.js.map

package/dist/node/vault-prewarm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-prewarm.js","sourceRoot":"","sources":["../../src/node/vault-prewarm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,4BAA4B;AAC5B,MAAM,CAAC,MAAM,WAAW,GAYpB;IACF,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACrC,sEAAsE;IACtE,yEAAyE;IACzE,wEAAwE;IACxE,8DAA8D;IAC9D,UAAU,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC;IACjD,0EAA0E;IAC1E,yEAAyE;IACzE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,mEAAmE;IACnE,aAAa,EAAE,GAAG,EAAE;QAClB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;YAC/I,MAAM,IAAI,GAAI,UAAU,EAA+B,EAAE,IAAI,CAAC;YAC9D,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,sBAAsB,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE;QAC/C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChG,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,IAAI,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;QACrC,KAAK,WAAW;aACb,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;aACtE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;aAClD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,YAAY,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,WAAW,CAAC,UAAU,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;QACD,IAAI,CAAC;YACH,WAAW,CAAC,aAAa,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,YAAqB;IAC3E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACzE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,8DAA8D;gBAC9D,0DAA0D;gBAC1D,gEAAgE;gBAChE,mEAAmE;gBACnE,mEAAmE;gBACnE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC/B,KAAK,WAAW;qBACb,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;qBACpD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;qBAClD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC"}

package/dist/node/{gitvault-profile-scan.d.ts → vault-profile-scan.d.ts}

@@ -7,7 +7,7 @@
  * error, or a malformed `repoId` all resolve to "found nothing" rather than
  * failing the refusal path this feeds into.
  */
-export declare function findLocalProfilesHoldingGitvaultRepo(repoId: string, options?: {
+export declare function findLocalProfilesHoldingVaultRepo(repoId: string, options?: {
     excludeProfile?: string;
 }): string[];
 /**
@@ -16,9 +16,9 @@ export declare function findLocalProfilesHoldingGitvaultRepo(repoId: string, opt
  * scan finds nothing local to point at — callers append this to whatever
  * refusal-specific remedies they already carry, never replacing them.
  */
-export declare function crossProfileGitvaultHint(repoId: string, options?: {
+export declare function crossProfileVaultHint(repoId: string, options?: {
     excludeProfile?: string;
 }): {
     action: string;
 }[];
-//# sourceMappingURL=gitvault-profile-scan.d.ts.map
+//# sourceMappingURL=vault-profile-scan.d.ts.map

package/dist/node/vault-profile-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-profile-scan.d.ts","sourceRoot":"","sources":["../../src/node/vault-profile-scan.ts"],"names":[],"mappings":"AA4BA;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,EAAE,CAarH;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAWrH"}

package/dist/node/{gitvault-profile-scan.js → vault-profile-scan.js}

@@ -1,9 +1,9 @@
 /**
- * gitvault — cross-profile repo-key scan.
+ * vault — cross-profile repo-key scan.
  *
- * A keystore-miss refusal (`KEYSTORE_MISSING`, `GITVAULT_REPO_STATE_MISSING`,
+ * A keystore-miss refusal (`KEYSTORE_MISSING`, `VAULT_REPO_STATE_MISSING`,
  * or the non-holder half of a `VAULT_CREATION_CONFLICT` reconciliation
- * attempt — see `gitvault-creation-journal.ts`) is read against the ACTIVE
+ * attempt — see `vault-creation-journal.ts`) is read against the ACTIVE
  * wallet profile only. When the repo's key actually lives under a DIFFERENT
  * local profile — the common dogfood shape: the active wallet changed
  * outside a bound workspace, or `--wallet`/`RUN402_WALLET` was never set for
@@ -16,15 +16,15 @@
  * finds — a profile "holds" the key when the filename is present, nothing
  * more — so it can never leak key material into an error message.
  *
- * Shared by every keystore-miss enrichment point (`gitvault-publication.ts`'s
- * `GitvaultVault.repoFile()`, and `gitvault-creation-journal.ts`'s
+ * Shared by every keystore-miss enrichment point (`vault-publication.ts`'s
+ * `Vault.repoFile()`, and `vault-creation-journal.ts`'s
  * conflict-reconciliation non-holder path) so the hint text and the two
  * named selection mechanisms (`--wallet` / `RUN402_WALLET`) are written once.
  */
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 import { listProfileNames, profileDir } from "../../core-dist/profiles.js";
-import { GITVAULT_SRC_RE } from "../namespaces/gitvault.crypto.js";
+import { VAULT_SRC_RE } from "../namespaces/vault.crypto.js";
 /**
  * Which local profiles hold a repo-key FILE for `repoId` — a directory
  * listing plus a filename check, nothing more. Built on `core/src/profiles.ts`'s
@@ -34,15 +34,15 @@ import { GITVAULT_SRC_RE } from "../namespaces/gitvault.crypto.js";
  * error, or a malformed `repoId` all resolve to "found nothing" rather than
  * failing the refusal path this feeds into.
  */
-export function findLocalProfilesHoldingGitvaultRepo(repoId, options = {}) {
-    if (!GITVAULT_SRC_RE.test(repoId))
+export function findLocalProfilesHoldingVaultRepo(repoId, options = {}) {
+    if (!VAULT_SRC_RE.test(repoId))
         return [];
     const found = [];
     for (const profile of listProfileNames()) {
         if (options.excludeProfile && profile === options.excludeProfile)
             continue;
         try {
-            const repoPath = join(profileDir(profile), "gitvault", "repos", `${repoId}.json`);
+            const repoPath = join(profileDir(profile), "vault", "repos", `${repoId}.json`);
             if (existsSync(repoPath))
                 found.push(profile);
         }
@@ -58,8 +58,8 @@ export function findLocalProfilesHoldingGitvaultRepo(repoId, options = {}) {
  * scan finds nothing local to point at — callers append this to whatever
  * refusal-specific remedies they already carry, never replacing them.
  */
-export function crossProfileGitvaultHint(repoId, options = {}) {
-    const profiles = findLocalProfilesHoldingGitvaultRepo(repoId, options);
+export function crossProfileVaultHint(repoId, options = {}) {
+    const profiles = findLocalProfilesHoldingVaultRepo(repoId, options);
     if (profiles.length === 0)
         return [];
     const named = profiles.map((p) => `'${p}'`).join(", ");
@@ -70,4 +70,4 @@ export function crossProfileGitvaultHint(repoId, options = {}) {
         },
     ];
 }
-//# sourceMappingURL=gitvault-profile-scan.js.map
+//# sourceMappingURL=vault-profile-scan.js.map

package/dist/node/vault-profile-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-profile-scan.js","sourceRoot":"","sources":["../../src/node/vault-profile-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAAC,MAAc,EAAE,UAAuC,EAAE;IACzG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,KAAK,OAAO,CAAC,cAAc;YAAE,SAAS;QAC3E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;YAC/E,IAAI,UAAU,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,UAAuC,EAAE;IAC7F,MAAM,QAAQ,GAAG,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,OAAO;QACL;YACE,MAAM,EACJ,uCAAuC,KAAK,qBAAqB;gBACjE,mEAAmE;SACtE;KACF,CAAC;AACJ,CAAC"}