direxio-deployer 0.1.8 → 0.1.9

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 P2P-IM
+Copyright (c) 2026 Direxio
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -167,7 +167,7 @@ Reset application data while preserving EC2, DNS, fixed IP, and Caddy TLS:
 
 ```bash
 DIREXIO_RESET_APP_DATA_CONFIRM=1 DOMAIN=<domain> bash scripts/reset-app-data.sh
-P2P_EXISTING_STATE_ACTION=continue DOMAIN=<domain> bash scripts/orchestrate.sh
+DIREXIO_EXISTING_STATE_ACTION=continue DOMAIN=<domain> bash scripts/orchestrate.sh
 ```
 
 Application data reset clears server-side app volumes, so the follow-up

package/README_zh.md

@@ -164,7 +164,7 @@ DOMAIN=<domain> MESSAGE_SERVER_IMAGE=direxio/message-server:latest bash scripts/
 
 ```bash
 DIREXIO_RESET_APP_DATA_CONFIRM=1 DOMAIN=<domain> bash scripts/reset-app-data.sh
-P2P_EXISTING_STATE_ACTION=continue DOMAIN=<domain> bash scripts/orchestrate.sh
+DIREXIO_EXISTING_STATE_ACTION=continue DOMAIN=<domain> bash scripts/orchestrate.sh
 ```
 
 清理应用数据卷后，后续 orchestrate 会重新生成本地 credentials/MCP 配置，

package/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: direxio-deployer
-description: Deploy, resume, verify, destroy, and locally wire a production P2P-IM Matrix server on AWS for any connent/connect-supported local agent runtime. Use when installing or updating this skill itself; install the versioned npm package `direxio-deployer` and use its CLI to place the skill in the runtime-specific global path from references/agent-targets.md unless the user explicitly asks for a project-local installation.
+description: Deploy, resume, verify, destroy, and locally wire a production Direxio message server on AWS for any connent/connect-supported local agent runtime. Use when installing or updating this skill itself; install the versioned npm package `direxio-deployer` and use its CLI to place the skill in the runtime-specific global path from references/agent-targets.md unless the user explicitly asks for a project-local installation.
 ---
 
 # Direxio Deployer
@@ -49,7 +49,7 @@ when it is safe and does not overwrite local edits. If the clone has local
 changes, do not discard them; report the divergence and continue from the local
 copy unless the user approves a specific update action.
 
-Do not fall back to older P2P-IM skill repositories or unmanaged copied skill bundles unless the user explicitly asks for one of those repositories. Never print or commit AWS credentials, initialization codes, agent tokens, or local credential files while refreshing the Skill.
+Do not fall back to older pre-Direxio skill repositories or unmanaged copied skill bundles unless the user explicitly asks for one of those repositories. Never print or commit AWS credentials, initialization codes, agent tokens, or local credential files while refreshing the Skill.
 
 ## Cloud Account And Domain Onboarding
 
@@ -357,7 +357,7 @@ Use a Git clone only for development or local patching of this deployer, not as
 
 ## Agent Recognition
 
-Use this skill when the user asks to deploy, resume, verify, destroy, repair, or wire a P2P-IM Matrix server. The instructions are runtime-neutral and can be followed by any agent that can run shell commands and read files. The local bridge target must be one of the connent/connect agents unless the user explicitly supplies compatible custom TOML. OpenClaw and Hermes are host runtimes that S6 wires through the generic connent/connect `acp` agent.
+Use this skill when the user asks to deploy, resume, verify, destroy, repair, or wire a Direxio message server. The instructions are runtime-neutral and can be followed by any agent that can run shell commands and read files. The local bridge target must be one of the connent/connect agents unless the user explicitly supplies compatible custom TOML. OpenClaw and Hermes are host runtimes that S6 wires through the generic connent/connect `acp` agent.
 
 For local agent integration after deployment, S6 writes service-specific credentials and environment files under `~/.direxio/nodes/<service_id>/`, where `service_id` is derived from the deployed domain. It also writes MCP client snippets under `~/.direxio/nodes/<service_id>/mcp/` for MCP-capable hosts such as Codex, OpenClaw, and Hermes. It does not write root-level compatibility credentials, shell profiles, Windows user environment variables, or mutate each host's global MCP config.
 
@@ -588,7 +588,7 @@ for the current service before giving advice. The status output includes a
   and may still be billing.
 - Resume safety: whether rerunning the same command is safe, or whether the
   operator must preserve `state.json` and continue with
-  `P2P_EXISTING_STATE_ACTION=continue`.
+  `DIREXIO_EXISTING_STATE_ACTION=continue`.
 - Local refresh: if `agent_install_status=refresh_pending`, reset/redeploy
   cleared old credentials, user confirmations, runtime checks, bridge install
   proof, and MCP install proof; the next action is to rerun the deployment workflow to refresh S4-S7, local credentials, MCP snippets, automatic installs, and runtime checks.
@@ -686,7 +686,7 @@ identity is allowed when the operator explicitly chose root credentials. Prefer
 using the same temporary `DirexioDeployer` IAM user/profile for teardown when
 that was used for provisioning.
 
-If an operator needs to preserve local state files for debugging, run destroy with `P2P_KEEP_WORKDIR=1` and explicitly report that the stale service directory remains.
+If an operator needs to preserve local state files for debugging, run destroy with `DIREXIO_KEEP_WORKDIR=1` and explicitly report that the stale service directory remains.
 
 ### Full reset / "treat me as a brand new user"
 
@@ -783,7 +783,7 @@ security     : delete or disable any temporary DirexioDeployer access key after
 report       : <operation-report.json path>
 ```
 
-Mention that AWS resources keep billing until destroyed. User-managed DNS and purchased domains are not removed by destroy. After destroy, report which `~/.direxio/nodes/<service_id>` service directory was removed or, if `P2P_KEEP_WORKDIR=1` was used, which local directory remains.
+Mention that AWS resources keep billing until destroyed. User-managed DNS and purchased domains are not removed by destroy. After destroy, report which `~/.direxio/nodes/<service_id>` service directory was removed or, if `DIREXIO_KEEP_WORKDIR=1` was used, which local directory remains.
 
 If `DIREXIO_AGENT_INSTALL=auto` was not used, or if it recorded `install_failed`, give the manual command:
 

package/agents/README.md

@@ -10,12 +10,12 @@ When an agent runtime supports skill metadata, point it at `SKILL.md` and use `s
 
 Recognition keywords:
 
-- deploy P2P-IM Matrix
-- resume P2P Matrix deployment
-- verify P2P Matrix server
-- destroy P2P Matrix AWS resources
+- deploy Direxio
+- resume Direxio deployment
+- verify Direxio message server
+- destroy Direxio AWS resources
 - wire Direxio MCP/plugin
-- refresh P2P agent token
+- refresh Direxio agent token
 
 Required capabilities:
 

package/agents/openai.yaml

@@ -1,12 +1,12 @@
 display_name: Direxio Deployer
-short_description: Deploy, resume, verify, destroy, and wire Direxio MCP/plugin access for a production P2P-IM Matrix server on AWS.
-default_prompt: Deploy a P2P-IM Matrix server using my production domain, following SKILL.md and scripts/orchestrate.sh.
+short_description: Deploy, resume, verify, destroy, and wire Direxio MCP/plugin access for a production Direxio message server on AWS.
+default_prompt: Deploy a Direxio message server using my production domain, following SKILL.md and scripts/orchestrate.sh.
 entrypoint: ../SKILL.md
 runtime_notes:
   - Read SKILL.md before running deployment commands.
   - When installing or updating this skill itself, read references/agent-targets.md and use the runtime-specific project-local Git clone path before any global fallback.
   - Use scripts/orchestrate.sh from the repository root.
   - Use scripts/destroy.sh for teardown.
-  - S6 writes DIREXIO_DOMAIN, DIREXIO_AGENT_TOKEN, and DIREXIO_AGENT_ROOM_ID, then records runtime-specific skill and MCP/config targets for direxio-mcp and P2P-IM/direxio-agent-plugins.
+  - S6 writes DIREXIO_DOMAIN, DIREXIO_AGENT_TOKEN, and DIREXIO_AGENT_ROOM_ID, then records runtime-specific skill and MCP/config targets for direxio-mcp and Direxio agent plugins.
   - Ask before mutating the current agent runtime's plugin or MCP configuration.
   - The instructions are compatible with Claude, Codex/OpenAI, Gemini, Cursor, Copilot, OpenClaw, Hermes, and other shell-capable agent runtimes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "direxio-deployer",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Versioned Direxio deployer agent skill and portable deployment orchestration tools.",
   "type": "module",
   "bin": {

package/references/architecture.md

@@ -17,7 +17,7 @@ coturn         -> TURN 3478 + 49160-49200/udp
 ```
 
 - **message-server**: `direxio/message-server:latest`，同时承载 Matrix homeserver 和 `/_p2p/query`/`/_p2p/command`。
-- **PostgreSQL 18**: Matrix 与 P2P 业务表共库持久化，compose 使用 `/var/lib/postgresql`。
+- **PostgreSQL 18**: Matrix 与 Direxio 业务表共库持久化，compose 使用 `/var/lib/postgresql`。
 - **Caddy**: 唯一 HTTP/TLS 入口，自动签发 Let's Encrypt。
 - **coturn**: WebRTC TURN relay，Direxio message-server 通过 shared-secret 动态签发 TURN 凭证。
 
@@ -25,17 +25,17 @@ coturn         -> TURN 3478 + 49160-49200/udp
 
 1. `postgres` healthy。
 2. `message-init` 生成 `/etc/direxio-message-server/message-server.yaml` 和 signing key，并写入 TURN 配置。
-3. `message-server` 启动，加载 Matrix + P2P 业务，读取 `P2P_PORTAL_PASSWORD` 和 `P2P_PORTAL_CREDENTIALS_FILE`。
+3. `message-server` 启动，加载 Matrix + Direxio 业务，读取 `P2P_PORTAL_PASSWORD` 和 `P2P_PORTAL_CREDENTIALS_FILE`。
 4. `init-tokens.sh` 调用 `portal.bootstrap`，从容器复制凭据到宿主 `/opt/p2p/bootstrap.json`。如果最新服务端没有写入 `agent_room_id`，脚本会通过 Matrix Client API 创建真实 agent room、邀请并加入 `@agent:<server>`，再把 `agent_room_id` 回写到宿主和容器凭据文件。
 5. `init-tokens.sh` 生成 `/opt/p2p/wellknown/owner.json`。
-6. `caddy` 对外服务 Matrix、P2P API 和 well-known。
+6. `caddy` 对外服务 Matrix、Direxio API 和 well-known。
 
 ## 凭据模型
 
 `/opt/p2p/bootstrap.json` 会包含:
 
 - `password`: 后端字段名；对用户展示时是八位 App 初始化码。
-- `access_token`: 当前用户的统一 bearer token，可用于 Matrix `/_matrix/client/*` 和需要用户身份的 P2P 调用。
+- `access_token`: 当前用户的统一 bearer token，可用于 Matrix `/_matrix/client/*` 和需要用户身份的 Direxio 调用。
 - `agent_token`: 本地服务凭据中的 agent bearer token；`direxio-connect` 对话桥接使用 S6 创建的 `@agent:<server>` Matrix session。
 - `agent_room_id`: 真实 Matrix 房间 ID。部署脚本拒绝旧式 `!agent:<domain>` 伪房间。
 

package/references/bug-history.md

@@ -3,12 +3,12 @@
 部署链路上所有真实踩过的坑。**已全部修进 `scripts/` 下的部署文件**,新部署不会再撞;
 列在这里是为了:① 理解每个设计决策的来由;② 若有人改坏了哪处,能快速定位回退点。
 
-## p2p-matrix-as 仓库
+## Legacy pre-Direxio message-server 仓库
 
 ### AS PR #4 — 镜像多架构
 - **症状**:ARM 架构 EC2(t4g 系列)`docker pull` 后 `exec format error`。
 - **根因**:镜像只 build 了 amd64。
-- **修复**:CI 用 buildx 出 `amd64+arm64` 多架构镜像。`xuyanzu01/p2p-im-as:latest` 已是多架构。
+- **修复**:CI 用 buildx 出 `amd64+arm64` 多架构镜像。legacy pre-Direxio AS 镜像已是多架构。
 
 ### AS PR #5 — 容器化体验
 - **卷权限**:命名卷默认 root:700,AS 降权到 asd(UID 10001)后打不开 sqlite → `SQLITE_CANTOPEN`。

package/references/deployment-lessons.md

@@ -15,7 +15,7 @@ S5_INIT_TOKENS failed: read bootstrap.json timed out
 
 Cause:
 
-Current `p2p-matrix-as` builds initialize on service startup and write
+Current Direxio message-server builds initialize on service startup and write
 `/opt/p2p/bootstrap.json` with the login `password`, `agent_token`, and owner
 metadata. Calling the old bootstrap HTTP endpoint or scraping logs is no longer
 part of the deploy path.
@@ -80,7 +80,7 @@ Fix now in ops:
   the local `timeout` command is available.
 - If a deployment was interrupted, inspect `scripts/orchestrate.sh status`,
   stop only leftover local `orchestrate.sh`/`curl`/`ssh` children for that run,
-  and resume with `P2P_EXISTING_STATE_ACTION=continue`.
+  and resume with `DIREXIO_EXISTING_STATE_ACTION=continue`.
 - If SSH to the instance is blocked but AWS access still works, attach a
   temporary SSM role and use SSM Run Command to read `/opt/p2p/bootstrap.json`
   without printing secrets. Remove or audit the temporary role after recovery.
@@ -94,7 +94,7 @@ resolves correctly. This avoids Caddy and Let's Encrypt racing DNS propagation.
 When rerunning after a resource was created, set:
 
 ```bash
-P2P_EXISTING_STATE_ACTION=continue
+DIREXIO_EXISTING_STATE_ACTION=continue
 ```
 
 This is deliberate. It prevents accidental duplicate EC2/EIP creation or unsafe
@@ -136,7 +136,7 @@ Fix procedure:
 2. Delegate those NS servers at the current registrar, or use the provider API
    if credentials are available.
 3. Wait for authoritative NS and A-record propagation.
-4. Re-run `scripts/orchestrate.sh` with `P2P_EXISTING_STATE_ACTION=continue`.
+4. Re-run `scripts/orchestrate.sh` with `DIREXIO_EXISTING_STATE_ACTION=continue`.
 
 DNS propagation of new NS records can take minutes to hours. After the user
 confirms the change, verify with `nslookup -type=NS <DOMAIN>` or
@@ -186,7 +186,7 @@ Workaround (use when the health check is the only blocker and the rate limit is
 
 4. Resume orchestrate.sh with:
    ```bash
-   P2P_EXISTING_STATE_ACTION=continue bash scripts/orchestrate.sh
+   DIREXIO_EXISTING_STATE_ACTION=continue bash scripts/orchestrate.sh
    ```
 
 5. **After deployment completes**, restore the original Caddyfile (remove `tls internal`) and restart Caddy. Caddy will retry the production Let's Encrypt cert when the rate limit resets. The self-signed cert is a temporary bridge; HTTPS will show a browser warning until the production cert is obtained.

package/references/deployment-workflow.md

@@ -31,8 +31,8 @@ DOMAIN=__DOMAIN__ bash scripts/orchestrate.sh status
 If state has resources, require one:
 
 ```bash
-P2P_EXISTING_STATE_ACTION=continue
-P2P_EXISTING_STATE_ACTION=destroy
+DIREXIO_EXISTING_STATE_ACTION=continue
+DIREXIO_EXISTING_STATE_ACTION=destroy
 DOMAIN=<different-domain>
 ```
 
@@ -102,14 +102,14 @@ Destroy allows root AWS access-key identity when the operator explicitly chose
 root credentials. Use the same deployment profile for teardown that was used
 for provisioning.
 
-Use `P2P_KEEP_WORKDIR=1 DOMAIN=__DOMAIN__ bash scripts/destroy.sh` on POSIX, or set `$env:P2P_KEEP_WORKDIR = "1"` before `.\scripts\destroy.ps1` on Windows, only when preserving local state files for debugging; if used, report that the service directory still exists.
+Use `DIREXIO_KEEP_WORKDIR=1 DOMAIN=__DOMAIN__ bash scripts/destroy.sh` on POSIX, or set `$env:DIREXIO_KEEP_WORKDIR = "1"` before `.\scripts\destroy.ps1` on Windows, only when preserving local state files for debugging; if used, report that the service directory still exists.
 
 ## Run
 
 From the repository root:
 
 ```bash
-AWS_PROFILE=p2p-matrix \
+AWS_PROFILE=direxio-deployer \
 AWS_DEFAULT_REGION=us-east-1 \
 DOMAIN=__DOMAIN__ \
 DOMAIN_MODE=user \
@@ -208,7 +208,7 @@ data:
 
 ```bash
 DOMAIN=__DOMAIN__ MESSAGE_SERVER_IMAGE=direxio/message-server:latest bash scripts/update.sh
-P2P_EXISTING_STATE_ACTION=continue DOMAIN=__DOMAIN__ bash scripts/orchestrate.sh
+DIREXIO_EXISTING_STATE_ACTION=continue DOMAIN=__DOMAIN__ bash scripts/orchestrate.sh
 ```
 
 `update.sh` SSHes to the recorded EC2 instance, runs Docker Compose pull/up,
@@ -225,7 +225,7 @@ TLS volumes:
 
 ```bash
 DIREXIO_RESET_APP_DATA_CONFIRM=1 DOMAIN=__DOMAIN__ bash scripts/reset-app-data.sh
-P2P_EXISTING_STATE_ACTION=continue DOMAIN=__DOMAIN__ bash scripts/orchestrate.sh
+DIREXIO_EXISTING_STATE_ACTION=continue DOMAIN=__DOMAIN__ bash scripts/orchestrate.sh
 ```
 
 `reset-app-data.sh` removes only `postgres-data`, `message-config`, and
@@ -261,9 +261,9 @@ If rate-limited, the log shows `retry after <timestamp> UTC`.
    ```
    Once the endpoint returns 200, re-run orchestrate.sh to complete:
    ```bash
-   P2P_EXISTING_STATE_ACTION=continue \
+   DIREXIO_EXISTING_STATE_ACTION=continue \
    DNS_READY=1 \
-   AWS_PROFILE=p2p-matrix \
+   AWS_PROFILE=direxio-deployer \
    AWS_DEFAULT_REGION=us-east-1 \
    DOMAIN=<DOMAIN> \
    DOMAIN_MODE=route53 \
@@ -298,7 +298,7 @@ that the old IP is safe to replace:
 
 ```bash
 DIREXIO_CONFIRM_DNS_OVERWRITE=1 \
-P2P_EXISTING_STATE_ACTION=continue \
+DIREXIO_EXISTING_STATE_ACTION=continue \
 DOMAIN=__DOMAIN__ \
 DOMAIN_MODE=route53 \
 CONFIRM_DOMAIN_BINDING=1 \
@@ -315,7 +315,7 @@ node scripts/json.mjs get ~/.direxio/nodes/<service_id>/state.json resources
 After authoritative DNS returns the new IP, continue with the same state:
 
 ```bash
-P2P_EXISTING_STATE_ACTION=continue \
+DIREXIO_EXISTING_STATE_ACTION=continue \
 DOMAIN=__DOMAIN__ \
 DOMAIN_MODE=route53 \
 CONFIRM_DOMAIN_BINDING=1 \
@@ -341,14 +341,14 @@ After authoritative DNS returns the new IP:
 
 ```bash
 DNS_READY=1 \
-AWS_PROFILE=p2p-matrix \
+AWS_PROFILE=direxio-deployer \
 AWS_DEFAULT_REGION=us-east-1 \
 DOMAIN=__DOMAIN__ \
 DOMAIN_MODE=user \
 CONFIRM_DOMAIN_BINDING=1 \
 INSTANCE_TYPE=t3.small \
 MESSAGE_SERVER_IMAGE=direxio/message-server:latest \
-P2P_EXISTING_STATE_ACTION=continue \
+DIREXIO_EXISTING_STATE_ACTION=continue \
 bash scripts/orchestrate.sh
 ```
 

package/references/iam-policy.json

@@ -1,6 +1,6 @@
 {
   "Version": "2012-10-17",
-  "Comment": "p2p-matrix 一键部署所需的最小 IAM 权限。用户建 IAM 用户时附加此策略,再为其生成 AK/SK 交给 agent。比给 AdministratorAccess 安全得多。",
+  "Comment": "Direxio 一键部署所需的最小 IAM 权限。用户建 IAM 用户时附加此策略,再为其生成 AK/SK 交给 agent。比给 AdministratorAccess 安全得多。",
   "Statement": [
     {
       "Sid": "Preflight",

package/references/state-machine.md

@@ -17,7 +17,7 @@
 
 - `postgres`: PostgreSQL 18，数据卷 `/var/lib/postgresql`。
 - `message-init`: 生成 Direxio message-server 配置和 TURN 配置。
-- `message-server`: 运行 Matrix + P2P 统一后端，公开容器内 8008。
+- `message-server`: 运行 Matrix + Direxio 统一后端，公开容器内 8008。
 - `caddy`: 对外 80/443，反代 `/_matrix/*` 和 `/_p2p/*`。
 - `coturn`: TURN relay。
 

package/references/tooling.md

@@ -99,8 +99,8 @@ Existing profiles can still be used, including root profiles when the operator
 explicitly chooses root credentials:
 
 ```bash
-aws configure --profile p2p-matrix
-export AWS_PROFILE=p2p-matrix
+aws configure --profile direxio-deployer
+export AWS_PROFILE=direxio-deployer
 export AWS_DEFAULT_REGION=us-east-1
 aws sts get-caller-identity
 ```

package/references/user-journey.md

@@ -36,7 +36,7 @@ bash -lc 'echo ok; command -v node; command -v aws; command -v ssh; command -v s
 ## Minimal Command
 
 ```bash
-AWS_PROFILE=p2p-matrix \
+AWS_PROFILE=direxio-deployer \
 AWS_DEFAULT_REGION=us-east-1 \
 DOMAIN=__DOMAIN__ \
 DOMAIN_MODE=user \

package/references/verification-recovery.md

@@ -47,7 +47,7 @@ Rerun the same command after fixing the blocker; state resumes from the first un
 
 After S3, do not reset or delete state just to silence an error. If EC2, public
 IPv4/EIP, or other AWS resources are recorded, preserve `state.json`, repair the
-blocker, and rerun with `P2P_EXISTING_STATE_ACTION=continue`; or destroy first
+blocker, and rerun with `DIREXIO_EXISTING_STATE_ACTION=continue`; or destroy first
 if the user wants to stop billing.
 
 ## Destroy
@@ -75,7 +75,7 @@ remain outside automatic destroy scope.
 After `scripts/reset-app-data.sh`, rerun:
 
 ```bash
-P2P_EXISTING_STATE_ACTION=continue DOMAIN=__DOMAIN__ bash scripts/orchestrate.sh
+DIREXIO_EXISTING_STATE_ACTION=continue DOMAIN=__DOMAIN__ bash scripts/orchestrate.sh
 ```
 
 The reset script intentionally marks S4-S7 pending and clears stale local secret

package/references/voip-turn-runbook.md

@@ -58,7 +58,7 @@ skill 不部署 coturn,只把服务商给的 `uris + username/password` 写进 D
   # DOMAIN/PUBLIC_IP/TURN_SECRET 由 .env 注入(user-data 写)。
   coturn:
     image: coturn/coturn:latest
-    network_mode: host          # relay 必须;不要放进 p2p-net 桥接网络
+    network_mode: host          # relay 必须;不要放进 direxio-net 桥接网络
     restart: unless-stopped
     command:
       - -n
@@ -74,7 +74,7 @@ skill 不部署 coturn,只把服务商给的 `uris + username/password` 写进 D
       - --no-tls
       - --no-dtls
 ```
-> 注:`network_mode: host` 与现有 `networks: [p2p-net]` 不兼容,coturn 单独用 host 网络。
+> 注:`network_mode: host` 与现有 `networks: [direxio-net]` 不兼容,coturn 单独用 host 网络。
 > 其余服务不变。
 
 ### 2. `phases/s3_provision.sh` — 安全组加 TURN 端口

package/scripts/cloud-init/docker-compose.yml

@@ -1,11 +1,11 @@
 # docker-compose.yml - cloud-side Direxio message-server stack.
 #
-# Layers: Caddy (public 443/TLS) -> Direxio message-server (Matrix + P2P API).
-# PostgreSQL 18 persists Matrix and P2P business tables. The local agent bridge
+# Layers: Caddy (public 443/TLS) -> Direxio message-server (Matrix + Direxio API).
+# PostgreSQL 18 persists Matrix and Direxio business tables. The local agent bridge
 # process is not started in the cloud by default.
 
 networks:
-  p2p-net:
+  direxio-net:
 
 volumes:
   postgres-data:
@@ -17,7 +17,7 @@ volumes:
 services:
   postgres:
     image: postgres:18-alpine
-    networks: [p2p-net]
+    networks: [direxio-net]
     environment:
       POSTGRES_USER: direxio_message_server
       POSTGRES_PASSWORD: direxio_message_server
@@ -33,7 +33,7 @@ services:
 
   message-init:
     image: ${MESSAGE_SERVER_IMAGE}
-    networks: [p2p-net]
+    networks: [direxio-net]
     depends_on:
       postgres:
         condition: service_healthy
@@ -58,7 +58,7 @@ services:
 
   message-server:
     image: ${MESSAGE_SERVER_IMAGE}
-    networks: [p2p-net]
+    networks: [direxio-net]
     depends_on:
       postgres:
         condition: service_healthy
@@ -86,7 +86,7 @@ services:
 
   caddy:
     image: caddy:2
-    networks: [p2p-net]
+    networks: [direxio-net]
     depends_on:
       message-server:
         condition: service_healthy

package/scripts/cloud-init/init-tokens.sh

@@ -2,8 +2,8 @@
 # init-tokens.sh - wait for message-server bootstrap credentials after compose is up.
 set -euo pipefail
 
-P2P_DIR=${P2P_DIR:-/opt/p2p}
-COMPOSE="docker compose -f ${P2P_DIR}/docker-compose.yml --env-file ${P2P_DIR}/.env"
+DIREXIO_DIR=${DIREXIO_DIR:-/opt/p2p}
+COMPOSE="docker compose -f ${DIREXIO_DIR}/docker-compose.yml --env-file ${DIREXIO_DIR}/.env"
 DOMAIN=${DOMAIN:?DOMAIN is required (e.g. __DOMAIN__)}
 CONTAINER_BOOTSTRAP_FILE=${CONTAINER_BOOTSTRAP_FILE:-/var/direxio-message-server/p2p/bootstrap.json}
 BOOTSTRAP_FILE=${BOOTSTRAP_FILE:-/opt/p2p/bootstrap.json}
@@ -13,7 +13,7 @@ log() { echo "[init-tokens] $*" >&2; }
 
 env_string() {
   local key=$1
-  grep -E "^${key}=" "${P2P_DIR}/.env" 2>/dev/null \
+  grep -E "^${key}=" "${DIREXIO_DIR}/.env" 2>/dev/null \
     | tail -1 \
     | cut -d= -f2- \
     || true
@@ -94,7 +94,7 @@ bootstrap_portal() {
   password=${P2P_PORTAL_PASSWORD:-}
   [ -n "$password" ] || password=$(env_string P2P_PORTAL_PASSWORD)
   if [ -z "$password" ]; then
-    log "FATAL: P2P_PORTAL_PASSWORD is missing from environment and ${P2P_DIR}/.env"
+    log "FATAL: P2P_PORTAL_PASSWORD is missing from environment and ${DIREXIO_DIR}/.env"
     return 1
   fi
   tmp=$(mktemp)

package/scripts/destroy.ps1

@@ -35,9 +35,9 @@ $env:DIREXIO_WINDOWS_HOME = $windowsDirexioHome
 $env:DIREXIO_HOME = ConvertTo-GitBashPath $windowsDirexioHome
 $env:DIREXIO_LOCAL_PATH_STYLE = 'windows'
 
-if ($env:P2P_WORKDIR) {
-  $env:P2P_WORKDIR_WINDOWS = $env:P2P_WORKDIR
-  $env:P2P_WORKDIR = ConvertTo-GitBashPath $env:P2P_WORKDIR
+if ($env:DIREXIO_WORKDIR) {
+  $env:DIREXIO_WORKDIR_WINDOWS = $env:DIREXIO_WORKDIR
+  $env:DIREXIO_WORKDIR = ConvertTo-GitBashPath $env:DIREXIO_WORKDIR
 }
 
 $repoRootForBash = ConvertTo-GitBashPath $RepoRoot

package/scripts/destroy.sh

@@ -2,7 +2,7 @@
 # destroy.sh - remove AWS resources recorded by deployment state.
 #
 # Source:
-#   1. $P2P_WORKDIR/state.json written by orchestrate.sh; by default
+#   1. $DIREXIO_WORKDIR/state.json written by orchestrate.sh; by default
 #      DOMAIN=__DOMAIN__ maps to ~/.direxio/nodes/<service_id>/state.json.
 #   2. explicit argument: bash destroy.sh /path/to/state.json
 #
@@ -18,7 +18,7 @@ source "$HERE/lib/paths.sh"
 source "$HERE/lib/aws.sh"
 # shellcheck disable=SC1090
 source "$HERE/lib/operation_report.sh"
-P2P_WORKDIR=$(direxio_default_workdir)
+DIREXIO_WORKDIR=$(direxio_default_workdir)
 
 log() { echo -e "\033[33m[destroy]\033[0m $*"; }
 
@@ -162,12 +162,12 @@ verify_key_pair_deleted() {
 # Resolve source and load INSTANCE_ID/EIP_ID/SG_ID/KEY_NAME/KEY_FILE/REGION.
 SRC=${1:-}
 if [ -z "$SRC" ]; then
-  if   [ -f "$P2P_WORKDIR/state.json" ]; then SRC="$P2P_WORKDIR/state.json"
-  else echo "state.json not found; set DOMAIN=<service domain> or P2P_WORKDIR=<service dir> to destroy a specific deployment."; exit 1
+  if   [ -f "$DIREXIO_WORKDIR/state.json" ]; then SRC="$DIREXIO_WORKDIR/state.json"
+  else echo "state.json not found; set DOMAIN=<service domain> or DIREXIO_WORKDIR=<service dir> to destroy a specific deployment."; exit 1
   fi
 fi
 [ -f "$SRC" ] || { echo "$SRC not found."; exit 1; }
-P2P_ROOT=$(cd "${DIREXIO_HOME:-$HOME/.direxio}" 2>/dev/null && pwd -P || printf '%s' "${DIREXIO_HOME:-$HOME/.direxio}")
+DIREXIO_ROOT=$(cd "${DIREXIO_HOME:-$HOME/.direxio}" 2>/dev/null && pwd -P || printf '%s' "${DIREXIO_HOME:-$HOME/.direxio}")
 
 REGION=$(json_get "$SRC" region)
 INSTANCE_ID=$(json_get "$SRC" resources.instance_id)
@@ -245,7 +245,7 @@ delete_route53_record() {
   change_file=$(mktemp)
   cat > "$change_file" <<EOF
 {
-  "Comment": "p2p-matrix destroy",
+  "Comment": "Direxio destroy",
   "Changes": [
     {
       "Action": "DELETE",
@@ -470,8 +470,8 @@ stop_current_cc_connect_daemon() {
 cleanup_local_service_dir() {
   local service_dir=$1 root=$2 nodes_root src_real nodes_real src_norm nodes_norm name
 
-  if [ "${P2P_KEEP_WORKDIR:-0}" = "1" ]; then
-    log "keeping local service dir because P2P_KEEP_WORKDIR=1: $service_dir"
+  if [ "${DIREXIO_KEEP_WORKDIR:-0}" = "1" ]; then
+    log "keeping local service dir because DIREXIO_KEEP_WORKDIR=1: $service_dir"
     return 0
   fi
 
@@ -567,4 +567,4 @@ if REPORT_PATH=$(operation_report_write destroy destroy_processed "$SRC" 2>/dev/
 else
   log "operation report was not written; keep destroy logs for audit"
 fi
-cleanup_local_service_dir "$CURRENT_SERVICE_DIR" "$P2P_ROOT"
+cleanup_local_service_dir "$CURRENT_SERVICE_DIR" "$DIREXIO_ROOT"

package/scripts/lib/paths.sh

@@ -23,9 +23,7 @@ direxio_service_dir() {
 }
 
 direxio_default_workdir() {
-  if [ -n "${P2P_WORKDIR:-}" ]; then
-    printf '%s\n' "$P2P_WORKDIR"
-  elif [ -n "${DIREXIO_WORKDIR:-}" ]; then
+  if [ -n "${DIREXIO_WORKDIR:-}" ]; then
     printf '%s\n' "$DIREXIO_WORKDIR"
   elif [ -n "${DOMAIN:-}" ]; then
     direxio_service_dir "$DOMAIN"

package/scripts/lib/state.sh

@@ -4,7 +4,7 @@
 # Sourced by orchestrate.sh and phases/*.sh. All state.json reads/writes go
 # through this file to keep structure and fields consistent. Requires Node.js.
 #
-# state.json path: $P2P_WORKDIR/state.json.
+# state.json path: $DIREXIO_WORKDIR/state.json.
 # By default, DOMAIN=__DOMAIN__ maps to ~/.direxio/nodes/<service_id>/state.json.
 #
 # PHASES order is the state-machine execution order.
@@ -28,17 +28,17 @@ PHASES=(
 )
 
 # Paths.
-P2P_WORKDIR=$(direxio_default_workdir)
-STATE_JSON="$P2P_WORKDIR/state.json"
+DIREXIO_WORKDIR=$(direxio_default_workdir)
+STATE_JSON="$DIREXIO_WORKDIR/state.json"
 
 # Timestamp helper.
 _now() { date -u +%Y-%m-%dT%H:%M:%SZ; }
 
 # Shared logging helpers.
-log()  { echo -e "\033[36m[p2p]\033[0m $*" >&2; }
-ok()   { echo -e "\033[32m[p2p]\033[0m $*" >&2; }
-warn() { echo -e "\033[33m[p2p]\033[0m $*" >&2; }
-fail() { echo -e "\033[31m[p2p][FATAL]\033[0m $*" >&2; exit 1; }
+log()  { echo -e "\033[36m[direxio]\033[0m $*" >&2; }
+ok()   { echo -e "\033[32m[direxio]\033[0m $*" >&2; }
+warn() { echo -e "\033[33m[direxio]\033[0m $*" >&2; }
+fail() { echo -e "\033[31m[direxio][FATAL]\033[0m $*" >&2; exit 1; }
 is_yes() {
   case "$(printf '%s' "$1" | tr '[:upper:]' '[:lower:]')" in
     y|yes|true|1) return 0 ;;
@@ -88,8 +88,8 @@ _windows_current_user() {
 
 # Initialize state.json for a new deployment.
 state_init() {
-  mkdir -p "$P2P_WORKDIR"
-  local run_id=${RUN_ID:-p2p-$(date -u +%Y%m%d-%H%M%S)}
+  mkdir -p "$DIREXIO_WORKDIR"
+  local run_id=${RUN_ID:-direxio-$(date -u +%Y%m%d-%H%M%S)}
   : > "$STATE_JSON"
   json_mutate "$STATE_JSON" state-init "$run_id" "${AWS_DEFAULT_REGION:-${AWS_REGION:-}}" "$(_now)" "${PHASES[@]}"
   log "Initialized state.json -> $STATE_JSON (run_id=$run_id)"

package/scripts/orchestrate.ps1

@@ -75,9 +75,9 @@ if (-not $env:DIREXIO_AGENT_WORKSPACE) {
   $env:DIREXIO_AGENT_WORKSPACE_WINDOWS = (Get-Location).ProviderPath
 }
 
-if ($env:P2P_WORKDIR) {
-  $env:P2P_WORKDIR_WINDOWS = $env:P2P_WORKDIR
-  $env:P2P_WORKDIR = ConvertTo-GitBashPath $env:P2P_WORKDIR
+if ($env:DIREXIO_WORKDIR) {
+  $env:DIREXIO_WORKDIR_WINDOWS = $env:DIREXIO_WORKDIR
+  $env:DIREXIO_WORKDIR = ConvertTo-GitBashPath $env:DIREXIO_WORKDIR
 }
 
 if (-not $env:DIREXIO_CODEX_COMMAND) {

package/scripts/orchestrate.sh

@@ -1,8 +1,8 @@
 #!/usr/bin/env bash
-# orchestrate.sh - p2p-matrix deployment state-machine engine.
+# orchestrate.sh - Direxio deployment state-machine engine.
 #
-# Turns "one AWS credential -> working IM server -> local direxio-connect bridge" into 8 phases
-# (S0..S7). State is persisted to $P2P_WORKDIR/state.json and supports:
+# Turns "one AWS credential -> working Direxio server -> local direxio-connect bridge" into 8 phases
+# (S0..S7). State is persisted to $DIREXIO_WORKDIR/state.json and supports:
 #   - resume: continue from the first unfinished phase
 #   - checkpoints: wait for user/AWS actions without losing progress
 #   - destroy: every AWS resource is recorded for destroy.sh
@@ -21,7 +21,7 @@
 set -uo pipefail
 
 HERE=$(cd "$(dirname "$0")" && pwd)
-P2P_INSTALL_SCRIPTS_DIR="$HERE"
+DIREXIO_INSTALL_SCRIPTS_DIR="$HERE"
 
 # Prefer workspace-local tools when present.
 REPO_ROOT=$(cd "$HERE/.." && pwd)
@@ -30,7 +30,6 @@ if [ -d "$REPO_ROOT/.tools/bin" ]; then
   export PATH
 fi
 
-P2P_WORKDIR_WAS_SET=${P2P_WORKDIR+x}
 DIREXIO_WORKDIR_WAS_SET=${DIREXIO_WORKDIR+x}
 
 source "$HERE/lib/state.sh"
@@ -67,8 +66,8 @@ check_deps() {
       warn "Install AWS CLI v2 and configure credentials first:"
       warn "  macOS: curl 'https://awscli.amazonaws.com/AWSCLIV2.pkg' -o AWSCLIV2.pkg && sudo installer -pkg ./AWSCLIV2.pkg -target /"
       warn "  Linux x86_64: curl 'https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip' -o awscliv2.zip && unzip awscliv2.zip && sudo ./aws/install"
-      warn "  Configure: aws configure --profile p2p-matrix"
-      warn "  Use: export AWS_PROFILE=p2p-matrix AWS_DEFAULT_REGION=<region>"
+      warn "  Configure: aws configure --profile direxio-deployer"
+      warn "  Use: export AWS_PROFILE=direxio-deployer AWS_DEFAULT_REGION=<region>"
       warn "See references/user-journey.md for the AWS CLI setup guide."
       ;;
   esac
@@ -184,7 +183,7 @@ status_resume_safety() {
   local current=$1 billable
   billable=$(recorded_billable_resources)
   if [ -n "$billable" ] || phase_at_or_after_s3 "$current"; then
-    echo "do not reset state; fix the issue and rerun with P2P_EXISTING_STATE_ACTION=continue"
+    echo "do not reset state; fix the issue and rerun with DIREXIO_EXISTING_STATE_ACTION=continue"
   else
     echo "safe to rerun the same command after the next action is complete"
   fi
@@ -257,12 +256,12 @@ print_recovery_summary() {
 
 cmd_status() {
   if [ ! -f "$STATE_JSON" ]; then
-    if [ -z "${DOMAIN:-}" ] && [ -z "$P2P_WORKDIR_WAS_SET" ] && [ -z "$DIREXIO_WORKDIR_WAS_SET" ]; then
+    if [ -z "${DOMAIN:-}" ] && [ -z "$DIREXIO_WORKDIR_WAS_SET" ]; then
       cmd_status_inventory
       return 0
     fi
     warn "state.json not found: $STATE_JSON"
-    warn "Set DOMAIN=<service domain> or explicit P2P_WORKDIR=<service dir> to inspect a specific deployment."
+    warn "Set DOMAIN=<service domain> or explicit DIREXIO_WORKDIR=<service dir> to inspect a specific deployment."
     return 0
   fi
   echo "run_id     : $(state_get run_id)"
@@ -426,7 +425,7 @@ precheck_new_deploy_domain_env() {
     return 2
   fi
   if [ -z "$domain" ]; then
-    warn "Deployment blocked: DOMAIN is missing. P2P-IM requires a confirmed production Matrix server_name."
+    warn "Deployment blocked: DOMAIN is missing. Direxio requires a confirmed production Matrix server_name."
     warn "Use this skill to prepare domain/DNS, then rerun:"
     warn "  DOMAIN=__DOMAIN__ DOMAIN_MODE=user CONFIRM_DOMAIN_BINDING=1 bash $0"
     return 2
@@ -473,7 +472,7 @@ ensure_production_domain_selected() {
     return 2
   fi
   if [ -z "$domain" ]; then
-    warn "Deployment blocked: DOMAIN is missing. P2P-IM requires a confirmed production Matrix server_name."
+    warn "Deployment blocked: DOMAIN is missing. Direxio requires a confirmed production Matrix server_name."
     warn "Use this skill to prepare domain/DNS, then rerun:"
     warn "  DOMAIN=__DOMAIN__ DOMAIN_MODE=user CONFIRM_DOMAIN_BINDING=1 bash $0"
     return 2
@@ -501,14 +500,14 @@ guard_existing_state() {
   if [ "$(json_get "$STATE_JSON" domain_mode)" = "ec2" ]; then
     warn "Found legacy temporary-domain deployment state (domain_mode=ec2). Production deployment no longer supports resuming this mode."
     warn "Destroy and rebuild, or use a new service directory:"
-    warn "  P2P_EXISTING_STATE_ACTION=destroy bash $0"
+    warn "  DIREXIO_EXISTING_STATE_ACTION=destroy bash $0"
     warn "  DOMAIN=__DOMAIN__ DOMAIN_MODE=user CONFIRM_DOMAIN_BINDING=1 bash $0"
     return 2
   fi
   confirmed=$(json_get "$STATE_JSON" existing_state_confirmed false)
   [ "$confirmed" = "true" ] && return 0
 
-  action=${P2P_EXISTING_STATE_ACTION:-}
+  action=${DIREXIO_EXISTING_STATE_ACTION:-}
   if [ -z "$action" ] && [ -t 0 ]; then
     warn "Found existing deployment state with recorded AWS resources:"
     json_entries "$STATE_JSON" resources | sed 's/^/  /' >&2
@@ -529,12 +528,12 @@ guard_existing_state() {
       return 0 ;;
     ""|abort)
       warn "Existing service state must be handled explicitly to avoid accidental reuse or duplicate EC2 creation."
-      warn "Resume:  P2P_EXISTING_STATE_ACTION=continue bash $0"
-      warn "Rebuild: P2P_EXISTING_STATE_ACTION=destroy bash $0"
+      warn "Resume:  DIREXIO_EXISTING_STATE_ACTION=continue bash $0"
+      warn "Rebuild: DIREXIO_EXISTING_STATE_ACTION=destroy bash $0"
       warn "New service: DOMAIN=__DOMAIN__ DOMAIN_MODE=user CONFIRM_DOMAIN_BINDING=1 bash $0"
       return 2 ;;
     *)
-      warn "Unknown P2P_EXISTING_STATE_ACTION=$action (expected continue|destroy|abort)."
+      warn "Unknown DIREXIO_EXISTING_STATE_ACTION=$action (expected continue|destroy|abort)."
       return 2 ;;
   esac
 }

package/scripts/phases/s2_domain.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # S2 DOMAIN_DECISION — validate the production Matrix server_name.
 #
-# P2P-IM production deployments require a real, long-lived domain. Temporary
+# Direxio production deployments require a real, long-lived domain. Temporary
 # sslip.io/public-IP domains are intentionally not part of this interface.
 #
 # Supported modes:
@@ -9,7 +9,7 @@
 #   DOMAIN_MODE=route53 Route53 hosted zone; ops manages the A record
 #
 # If DOMAIN_MODE is omitted but DOMAIN is present, user mode is assumed.
-# P2P_ASSUME_DEFAULTS never chooses a domain.
+# DIREXIO_ASSUME_DEFAULTS never chooses a domain.
 
 S2_PHASE_DIR=$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")/.." && pwd)
 source "$S2_PHASE_DIR/lib/domain.sh"
@@ -24,7 +24,7 @@ run_phase() {
     if [ -n "$domain" ]; then
       mode=user
     elif [ -t 0 ]; then
-      warn "P2P-IM requires a production domain as the Matrix server_name."
+      warn "Direxio requires a production domain as the Matrix server_name."
       warn "Changing the domain is effectively a new homeserver identity; temporary sslip.io defaults are not supported."
       printf "Enter the final domain (for example __DOMAIN__): " >&2
       read -r domain
@@ -36,7 +36,7 @@ run_phase() {
       mode=user
     else
       phase_set S2_DOMAIN waiting_user "waiting for production domain"
-      warn "Deployment blocked: DOMAIN is missing. P2P-IM no longer supports temporary sslip.io defaults."
+      warn "Deployment blocked: DOMAIN is missing. Direxio no longer supports temporary sslip.io defaults."
       warn "Prepare a production domain such as __DOMAIN__. Matrix server_name binds to that domain; changing it later is effectively a new homeserver identity."
       warn "Example:"
       warn "  DOMAIN=__DOMAIN__ DOMAIN_MODE=user CONFIRM_DOMAIN_BINDING=1 bash scripts/orchestrate.sh"

package/scripts/phases/s3_provision.sh

@@ -18,7 +18,7 @@ run_phase() {
   if [ -z "$instance_type" ]; then
     instance_type=${INSTANCE_TYPE:-}
     if [ -z "$instance_type" ]; then
-      if [ "${P2P_ASSUME_DEFAULTS:-0}" = "1" ]; then
+      if [ "${DIREXIO_ASSUME_DEFAULTS:-0}" = "1" ]; then
         instance_type=t3.small
       elif [ -t 0 ]; then
         warn "Default EC2 instance type is t3.small (2 vCPU / 2GB). Do you need a larger instance?"
@@ -50,10 +50,10 @@ run_phase() {
   vpc=$(res_get vpc_id)
   local message_server_image
   message_server_image=${MESSAGE_SERVER_IMAGE:-direxio/message-server:latest}
-  local scripts_dir=${P2P_INSTALL_SCRIPTS_DIR:-${HERE:-$S3_PHASE_DIR}}
+  local scripts_dir=${DIREXIO_INSTALL_SCRIPTS_DIR:-${HERE:-$S3_PHASE_DIR}}
 
   # 1) Key pair (idempotent).
-  local keyfile="$P2P_WORKDIR/${name}.pem"
+  local keyfile="$DIREXIO_WORKDIR/${name}.pem"
   if [ -z "$(res_get key_name)" ]; then
     log "Creating key pair $name ..."
     aws ec2 create-key-pair --key-name "$name" --query KeyMaterial --output text > "$keyfile"
@@ -69,7 +69,7 @@ run_phase() {
     warn "Security group opens 22/80/443, TURN 3478 tcp/udp, and 49160-49200/udp to 0.0.0.0/0."
     warn "Keep the SSH private key, AWS credentials, and password secure."
     sg=$(aws ec2 create-security-group --group-name "$name" \
-         --description "p2p-matrix $name" --vpc-id "$vpc" --query GroupId --output text)
+         --description "direxio $name" --vpc-id "$vpc" --query GroupId --output text)
     res_set sg_id "$sg"
     local p
     for p in 22 80 443; do
@@ -95,7 +95,7 @@ run_phase() {
     warn "S3 requires a production DOMAIN. Complete S2_DOMAIN first."
     return 2
   fi
-  local userdata="$P2P_WORKDIR/user-data.yaml"
+  local userdata="$DIREXIO_WORKDIR/user-data.yaml"
   log "Rendering cloud-init (domain_mode=$domain_mode)..."
   bash "$scripts_dir/render/render-userdata.sh" \
     --domain "$domain" \
@@ -215,7 +215,7 @@ _upsert_route53_record() {
   change_file=$(mktemp)
   cat > "$change_file" <<EOF
 {
-  "Comment": "p2p-matrix deployment",
+  "Comment": "Direxio deployment",
   "Changes": [
     {
       "Action": "UPSERT",

package/scripts/phases/s5_init_tokens.sh

@@ -8,7 +8,7 @@ run_phase() {
   domain=$(state_get domain)
   pubip=$(res_get public_ip)
   keyfile=$(res_get key_file)
-  local out="$P2P_WORKDIR/outputs.json" raw
+  local out="$DIREXIO_WORKDIR/outputs.json" raw
   raw=$(mktemp)
   trap 'rm -f "${raw:-}"; trap - RETURN' RETURN
 

package/scripts/reset-app-data.sh

@@ -36,5 +36,5 @@ echo "Application data reset complete on the existing node."
 echo "Caddy TLS storage was preserved."
 echo "Old user confirmations and runtime checks were cleared."
 echo "$bridge_stop_message"
-echo "Local S4-S7 gates were reset; rerun orchestrate with P2P_EXISTING_STATE_ACTION=continue."
+echo "Local S4-S7 gates were reset; rerun orchestrate with DIREXIO_EXISTING_STATE_ACTION=continue."
 echo "operation report: $report"