run402-mcp 4.95.0 → 4.97.0

package/dist/tools/grants.js

@@ -1,7 +1,12 @@
 /**
- * MCP tools for per-project capability grants (gateway `org-member-management`):
- * issue / revoke a grant to an agent or CI principal for a single project. Thin
- * shims over `r.grants.*`. Mutations require owner of the project's org.
+ * MCP tools for per-project capability grants and their grant keys: issue,
+ * list, and revoke a grant for an agent or CI principal on a single project,
+ * and revoke one grant key. Thin shims over `r.grants.*`. Every call requires
+ * owner of the project's org.
+ *
+ * Minting and rotating a grant key are deliberately CLI/SDK-only: each returns
+ * a token exactly once, and MCP renders tool output into an agent transcript,
+ * where a once-printed secret must never be persisted.
  */
 import { z } from "zod";
 import { getSdk } from "../sdk.js";
@@ -38,7 +43,7 @@ export async function handleCreateProjectGrant(args) {
 // ─── revoke_project_grant ───────────────────────────────────────────────────
 export const revokeProjectGrantSchema = {
     project_id: z.string().describe("Project id the grant belongs to."),
-    grant_id: z.string().describe("The grant id to revoke, e.g. `grt_...`."),
+    grant_id: z.string().describe("The grant id to revoke (from `list_project_grants`). Revokes every grant key minted against it too."),
 };
 export async function handleRevokeProjectGrant(args) {
     try {
@@ -49,4 +54,46 @@ export async function handleRevokeProjectGrant(args) {
         return mapSdkError(err, "revoking project grant");
     }
 }
+// ─── list_project_grants ────────────────────────────────────────────────────
+export const listProjectGrantsSchema = {
+    project_id: z.string().describe("Project id whose grants to list."),
+};
+export async function handleListProjectGrants(args) {
+    try {
+        const res = await getSdk().grants.list(args.project_id);
+        if (res.grants.length === 0) {
+            return { content: [{ type: "text", text: `No grants on \`${args.project_id}\`.` }] };
+        }
+        const lines = [`## Grants on \`${args.project_id}\``, ""];
+        for (const g of res.grants) {
+            const state = g.revoked_at ? `revoked ${g.revoked_at}` : g.expires_at ? `expires ${g.expires_at}` : "no expiry";
+            lines.push(`- \`${g.grant_id}\` — \`${g.capability}\` for ${g.wallet ? `\`${g.wallet}\`` : `principal \`${g.principal_id}\``} (${state})`);
+            for (const k of g.keys) {
+                const keyState = k.revoked_at ? `revoked ${k.revoked_at}` : k.expires_at ? `expires ${k.expires_at}` : "no expiry";
+                lines.push(`  - key \`${k.key_id}\` — ${k.kind} (${keyState})`);
+            }
+        }
+        lines.push("", "Grant keys never carry a token here; mint or rotate one with the CLI (`run402 grants create --key`, `run402 grants rotate-key`).");
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+    catch (err) {
+        return mapSdkError(err, "listing project grants");
+    }
+}
+// ─── revoke_project_grant_key ───────────────────────────────────────────────
+export const revokeProjectGrantKeySchema = {
+    project_id: z.string().describe("Project id the grant key belongs to."),
+    key_id: z.string().describe("The grant key id to revoke (from `list_project_grants`)."),
+};
+export async function handleRevokeProjectGrantKey(args) {
+    try {
+        const res = await getSdk().grants.revokeKey(args.project_id, args.key_id);
+        return {
+            content: [{ type: "text", text: `Revoked grant key \`${res.key_id}\` on \`${args.project_id}\`. The grant and its other keys stay.` }],
+        };
+    }
+    catch (err) {
+        return mapSdkError(err, "revoking grant key");
+    }
+}
 //# sourceMappingURL=grants.js.map

package/dist/tools/grants.js.map

@@ -1 +1 @@
-{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/tools/grants.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAI3C,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IACpF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAC3F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;IACrH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;CACvG,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAM9C;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;YACxD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,aAAa,IAAI,CAAC,UAAU,WAAW,IAAI,CAAC,UAAU,qBAAqB,GAAG,CAAC,YAAY,mBAAmB,GAAG,CAAC,QAAQ,MAAM;iBACvI;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CACzE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAG9C;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,CAAC,QAAQ,WAAW,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/tools/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAI3C,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IACpF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAC3F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kEAAkE,CAAC;IACrH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;CACvG,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAM9C;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;YACxD,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,aAAa,IAAI,CAAC,UAAU,WAAW,IAAI,CAAC,UAAU,qBAAqB,GAAG,CAAC,YAAY,mBAAmB,GAAG,CAAC,QAAQ,MAAM;iBACvI;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qGAAqG,CAAC;CACrI,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAG9C;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,CAAC,QAAQ,WAAW,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CACpE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAA4B;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAChH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,UAAU,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,YAAY,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC;YAC3I,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;gBACnH,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,GAAG,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,kIAAkI,CAAC,CAAC;QACnJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;CACxF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAGjD;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,GAAG,CAAC,MAAM,WAAW,IAAI,CAAC,UAAU,wCAAwC,EAAE,CAAC;SACvI,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/tools/{gitvault.d.ts → repos.d.ts}

@@ -34,23 +34,23 @@ type ToolResult = {
     isError?: boolean;
 };
 /** What this machine and the control plane each believe about the vault. */
-export declare const getGitvaultStatusSchema: {
+export declare const getVaultStatusSchema: {
     project_id: z.ZodOptional<z.ZodString>;
     repo_id: z.ZodOptional<z.ZodString>;
 };
-export declare function handleGetGitvaultStatus(args: {
+export declare function handleGetVaultStatus(args: {
     project_id?: string;
     repo_id?: string;
 }): Promise<ToolResult>;
 /** One page of the heads listing, above a fixed verification anchor. */
-export declare const listGitvaultHeadsSchema: {
+export declare const listVaultHeadsSchema: {
     repo_id: z.ZodOptional<z.ZodString>;
     project_id: z.ZodOptional<z.ZodString>;
     after_generation: z.ZodString;
     limit: z.ZodNumber;
     cursor: z.ZodOptional<z.ZodString>;
 };
-export declare function handleListGitvaultHeads(args: {
+export declare function handleListVaultHeads(args: {
     repo_id?: string;
     project_id?: string;
     after_generation: string;
@@ -58,13 +58,13 @@ export declare function handleListGitvaultHeads(args: {
     cursor?: string;
 }): Promise<ToolResult>;
 /** Verify the chain from the authenticated pin upward, then advance the pin. */
-export declare const verifyGitvaultSchema: {
+export declare const verifyVaultSchema: {
     project_id: z.ZodOptional<z.ZodString>;
     repo_id: z.ZodOptional<z.ZodString>;
 };
-export declare function handleVerifyGitvault(args: {
+export declare function handleVerifyVault(args: {
     project_id?: string;
     repo_id?: string;
 }): Promise<ToolResult>;
 export {};
-//# sourceMappingURL=gitvault.d.ts.map
+//# sourceMappingURL=repos.d.ts.map

package/dist/tools/repos.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repos.d.ts","sourceRoot":"","sources":["../../src/tools/repos.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,KAAK,UAAU,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AA8CxF,4EAA4E;AAC5E,eAAO,MAAM,oBAAoB;;;CAMhC,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAuG/G;AAID,wEAAwE;AACxE,eAAO,MAAM,oBAAoB;;;;;;CAoBhC,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,UAAU,CAAC,CA+CtB;AAID,gFAAgF;AAChF,eAAO,MAAM,iBAAiB;;;CAG7B,CAAC;AAcF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAgD5G"}

package/dist/tools/{gitvault.js → repos.js}

@@ -33,7 +33,7 @@ import { storeResult } from "../result-store.js";
 /**
  * The scoped confidentiality sentence — the ONLY permitted form (protocol D57 /
  * D168). The unqualified variants of this claim are on the banned-copy list
- * because they drop the scope; `gitvault-copy.test.ts` holds that list verbatim
+ * because they drop the scope; `vault-copy.test.ts` holds that list verbatim
  * and fails the build if one appears here.
  */
 const SCOPED_CONFIDENTIALITY = "source payload and repository-history content are ciphertext-only; the substrate retains only enumerated plaintext metadata and holds zero vault keys";
@@ -59,35 +59,35 @@ function isToolResult(value) {
 function targetOptions(target) {
     return target.repo_id !== null ? { repo_id: target.repo_id } : { project_id: target.project_id };
 }
-// ─── get_gitvault_status ─────────────────────────────────────────────────────
+// ─── repos_view ─────────────────────────────────────────────────────
 /** What this machine and the control plane each believe about the vault. */
-export const getGitvaultStatusSchema = {
+export const getVaultStatusSchema = {
     project_id: z
         .string()
         .optional()
         .describe("The project whose vault to report. Defaults to the active project. The cold-restart entry point: it resolves repo_id with no local state."),
     repo_id: z.string().optional().describe("Address the vault directly when you already know its id. Wins over project_id."),
 };
-export async function handleGetGitvaultStatus(args) {
+export async function handleGetVaultStatus(args) {
     const target = await resolveVaultTarget(args);
     if (isToolResult(target))
         return target;
     try {
-        const status = await getSdk().gitvault.status(targetOptions(target));
+        const status = await getSdk().repos.status(targetOptions(target));
         const v = status.vault;
         const lines = [];
         lines.push(status.repo_id
-            ? `gitvault ${status.repo_id}${status.project_id ? ` — project ${status.project_id}` : ""}`
+            ? `vault ${status.repo_id}${status.project_id ? ` — project ${status.project_id}` : ""}`
             : `No vault is allocated${status.project_id ? ` for project ${status.project_id}` : ""}.`);
         if (v) {
-            lines.push("", "Vault", `  policy                 ${v.gitvault_policy ?? "(unset)"} (version ${v.gitvault_policy_version})`, `  allocation generation  ${v.allocation_generation}`, `  newest generation      ${v.newest_generation ?? "(none admitted)"}`, `  admitted generations   ${v.admitted_generations}`, `  genesis admitted at    ${v.genesis_admitted_at ?? "(not yet)"}`, `  source bytes           ${v.storage.source_bytes}`, `  repair fence           ${v.repair_fence_state} (version ${v.repair_version})`);
+            lines.push("", "Vault", `  policy                 ${v.vault_policy ?? "(unset)"} (version ${v.vault_policy_version})`, `  allocation generation  ${v.allocation_generation}`, `  newest generation      ${v.newest_generation ?? "(none admitted)"}`, `  admitted generations   ${v.admitted_generations}`, `  genesis admitted at    ${v.genesis_admitted_at ?? "(not yet)"}`, `  source bytes           ${v.storage.source_bytes}`, `  repair fence           ${v.repair_fence_state} (version ${v.repair_version})`);
             if (v.maintenance.lease) {
-                lines.push(`  maintenance lease      ${v.maintenance.lease.maintenance_lease_id} (expires ${v.maintenance.lease.expires_at ?? "unknown"})`, "                         a compact/prune cycle holds the reservation; run402 gitvault compact owns it.");
+                lines.push(`  maintenance lease      ${v.maintenance.lease.maintenance_lease_id} (expires ${v.maintenance.lease.expires_at ?? "unknown"})`, "                         a compact/prune cycle holds the reservation; run402 repos gc owns it.");
             }
             if (v.maintenance.open_cycle) {
                 lines.push(`  open cycle             ${v.maintenance.open_cycle.maintenance_cycle_id} (${v.maintenance.open_cycle.state})`);
             }
-            // gitvault-multi-writer (rev 47): the chain-verified writer roster,
+            // vault-multi-writer (rev 47): the chain-verified writer roster,
             // read-only — this tool never mints or reconciles admissions itself;
             // `run402 repos access sync` is the CLI-only mutating counterpart.
             if (v.writer_set) {
@@ -137,12 +137,12 @@ export async function handleGetGitvaultStatus(args) {
         return { content: [{ type: "text", text: lines.join("\n") }] };
     }
     catch (err) {
-        return mapSdkError(err, "reading the gitvault status");
+        return mapSdkError(err, "reading the vault status");
     }
 }
-// ─── list_gitvault_heads ─────────────────────────────────────────────────────
+// ─── repos_list_heads ─────────────────────────────────────────────────────
 /** One page of the heads listing, above a fixed verification anchor. */
-export const listGitvaultHeadsSchema = {
+export const listVaultHeadsSchema = {
     repo_id: z.string().optional().describe("The vault to list. Wins over project_id."),
     project_id: z.string().optional().describe("Resolves repo_id from the project. Defaults to the active project."),
     after_generation: z
@@ -159,14 +159,14 @@ export const listGitvaultHeadsSchema = {
         .optional()
         .describe("Omit on the first request. Afterwards pass the prior page's next_cursor UNCHANGED — it is opaque: store and echo it, never parse or construct one. A malformed or stale cursor is INVALID_CURSOR; recover by restarting from after_generation with no cursor."),
 };
-export async function handleListGitvaultHeads(args) {
+export async function handleListVaultHeads(args) {
     const target = await resolveVaultTarget(args);
     if (isToolResult(target))
         return target;
     try {
         const sdk = getSdk();
-        const repoId = target.repo_id ?? (await sdk.gitvault.forProject(target.project_id)).repo_id;
-        const page = await sdk.gitvault.heads(repoId, {
+        const repoId = target.repo_id ?? (await sdk.repos.forProject(target.project_id)).repo_id;
+        const page = await sdk.repos.heads(repoId, {
             after_generation: args.after_generation,
             limit: String(args.limit),
             ...(args.cursor !== undefined ? { cursor: args.cursor } : {}),
@@ -174,9 +174,9 @@ export async function handleListGitvaultHeads(args) {
         // The full page is persisted; only the window is rendered. A vault with a
         // thousand admitted generations must not spend an agent's context on rows
         // it did not ask to read.
-        const view = storeResult("gitvault_heads", page.heads);
+        const view = storeResult("vault_heads", page.heads);
         const lines = [
-            `gitvault ${page.repo_id} — heads above anchor ${page.after_generation}.`,
+            `vault ${page.repo_id} — heads above anchor ${page.after_generation}.`,
             `Showing ${view.shown} of ${view.total} in this page${page.total !== null ? `; ${page.total} heads above the anchor in total` : ""}.`,
         ];
         if (view.ref && view.shown < view.total) {
@@ -194,16 +194,16 @@ export async function handleListGitvaultHeads(args) {
         else {
             lines.push("has_more is false — this is the last page of the sequence.");
         }
-        lines.push("", "Listing a head is not verifying it. Run verify_gitvault to check the chain links and advance the local authenticated pin.");
+        lines.push("", "Listing a head is not verifying it. Run repos_fsck to check the chain links and advance the local authenticated pin.");
         return { content: [{ type: "text", text: lines.join("\n") }] };
     }
     catch (err) {
-        return mapSdkError(err, "listing gitvault heads");
+        return mapSdkError(err, "listing vault heads");
     }
 }
-// ─── verify_gitvault ─────────────────────────────────────────────────────────
+// ─── repos_fsck ─────────────────────────────────────────────────────────
 /** Verify the chain from the authenticated pin upward, then advance the pin. */
-export const verifyGitvaultSchema = {
+export const verifyVaultSchema = {
     project_id: z.string().optional().describe("The project whose vault to verify. Defaults to the active project."),
     repo_id: z.string().optional().describe("Address the vault directly. Wins over project_id."),
 };
@@ -212,14 +212,14 @@ const VERIFY_FAILURE_GUIDANCE = {
     GENERATION_REGRESSION: "The vault offered a generation at or below your authenticated pin — a rollback. Verification fails closed and the pin is NOT moved backwards; nothing local was rewritten. Treat this as a serious integrity signal about the remote, not a local problem to clear.",
     CHAIN_BROKEN: "A link is missing or does not match: a listed head absent from storage, a gap in the sequence, or a head whose previous-hash does not chain. Verification stops at the last good generation and the pin stays there.",
     UPGRADE_REQUIRED: "The chain contains a transition this client cannot validate. It is read-only past that point and the transition is never skipped — upgrade the client (npx run402@latest) and verify again.",
-    VERIFICATION_BUDGET_EXCEEDED: "The per-call head budget ran out. The verified prefix is persisted, so this is a pause, not a failure: call verify_gitvault again and it resumes from where it stopped.",
+    VERIFICATION_BUDGET_EXCEEDED: "The per-call head budget ran out. The verified prefix is persisted, so this is a pause, not a failure: call repos_fsck again and it resumes from where it stopped.",
 };
-export async function handleVerifyGitvault(args) {
+export async function handleVerifyVault(args) {
     const target = await resolveVaultTarget(args);
     if (isToolResult(target))
         return target;
     try {
-        const state = await getSdk().gitvault.verify(targetOptions(target));
+        const state = await getSdk().repos.verify(targetOptions(target));
         const lines = [
             `Verified to generation ${state.generation} (head ${state.head_sha256}).`,
             "",
@@ -250,7 +250,7 @@ export async function handleVerifyGitvault(args) {
     }
     catch (err) {
         const code = typeof err?.code === "string" ? (err.code) : null;
-        const mapped = mapSdkError(err, "verifying the gitvault chain");
+        const mapped = mapSdkError(err, "verifying the vault chain");
         const guidance = code ? VERIFY_FAILURE_GUIDANCE[code] : undefined;
         if (!guidance)
             return mapped;
@@ -260,4 +260,4 @@ export async function handleVerifyGitvault(args) {
         };
     }
 }
-//# sourceMappingURL=gitvault.js.map
+//# sourceMappingURL=repos.js.map

package/dist/tools/repos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repos.js","sourceRoot":"","sources":["../../src/tools/repos.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD;;;;;GAKG;AACH,MAAM,sBAAsB,GAC1B,uJAAuJ,CAAC;AAE1J,kHAAkH;AAClH,MAAM,6BAA6B,GACjC,4FAA4F,CAAC;AAU/F;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAE,KAAoB,CAAC,OAAO,CAAC,CAAC;AACrG,CAAC;AAED,uFAAuF;AACvF,SAAS,aAAa,CAAC,MAAsB;IAC3C,OAAO,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;AACnG,CAAC;AAED,uEAAuE;AAEvE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2IAA2I,CAAC;IACxJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gFAAgF,CAAC;CAC1H,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAA+C;IACxF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,OAAO;YACZ,CAAC,CAAC,SAAS,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YACxF,CAAC,CAAC,wBAAwB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAC5F,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC;YACN,KAAK,CAAC,IAAI,CACR,EAAE,EACF,OAAO,EACP,4BAA4B,CAAC,CAAC,YAAY,IAAI,SAAS,aAAa,CAAC,CAAC,oBAAoB,GAAG,EAC7F,4BAA4B,CAAC,CAAC,qBAAqB,EAAE,EACrD,4BAA4B,CAAC,CAAC,iBAAiB,IAAI,iBAAiB,EAAE,EACtE,4BAA4B,CAAC,CAAC,oBAAoB,EAAE,EACpD,4BAA4B,CAAC,CAAC,mBAAmB,IAAI,WAAW,EAAE,EAClE,4BAA4B,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EACpD,4BAA4B,CAAC,CAAC,kBAAkB,aAAa,CAAC,CAAC,cAAc,GAAG,CACjF,CAAC;YACF,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CACR,4BAA4B,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,oBAAoB,aAAa,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,IAAI,SAAS,GAAG,EAC/H,gGAAgG,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,oBAAoB,KAAK,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC;YAC9H,CAAC;YACD,iEAAiE;YACjE,qEAAqE;YACrE,mEAAmE;YACnE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACrC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,aAAa,0BAA0B,CAAC,CAAC,mBAAmB,KAAK,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC;gBAChH,CAAC;gBACD,IAAI,CAAC,CAAC,kBAAkB,EAAE,CAAC;oBACzB,KAAK,CAAC,IAAI,CAAC,kKAAkK,CAAC,CAAC;gBACjL,CAAC;gBACD,MAAM,cAAc,GAAG,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC;gBAC/C,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI,CACR,4BAA4B,cAAc,CAAC,MAAM,kCAAkC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC1I,8FAA8F,CAC/F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yBAAyB,EACzB,4BAA4B,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EACpE,4BAA4B,MAAM,CAAC,QAAQ,CAAC,oBAAoB,IAAI,QAAQ,EAAE,EAC9E,4BAA4B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qFAAqF,EAAE,EACtJ,4BAA4B,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAC3E,mEAAmE;QACnE,4BAA4B,MAAM,CAAC,QAAQ,CAAC,IAAI,kBAAkB,EAClE,EAAE,EACF,MAAM,EACN,4BAA4B,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,QAAQ,EAAE,EAC3E,4BAA4B,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,QAAQ,EAAE,EAC1E,EAAE,EACF,wCAAwC,MAAM,CAAC,iBAAiB,EAAE,CACnE,CAAC;QAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,mEAAmE;QACnE,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,EAAE,EAAE,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;aAAM,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,mBAAmB,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,sBAAsB,GAAG,CAAC,CAAC;QAE9D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACnF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAChH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CACP,+PAA+P,CAChQ;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,CAAC,uEAAuE,CAAC;IACpF,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,+PAA+P,CAChQ;CACJ,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAM1C;IACC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE;YACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QAEH,0EAA0E;QAC1E,0EAA0E;QAC1E,0BAA0B;QAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG;YACZ,SAAS,IAAI,CAAC,OAAO,yBAAyB,IAAI,CAAC,gBAAgB,GAAG;YACtE,WAAW,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG;SACtI,CAAC;QACF,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,iDAAiD,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACtF,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAElE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CACR,0DAA0D,IAAI,CAAC,gBAAgB,gBAAgB,IAAI,CAAC,WAAW,GAAG,EAClH,sIAAsI,CACvI,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,sHAAsH,CACvH,CAAC;QAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,2EAA2E;AAE3E,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAChH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;CAC7F,CAAC;AAEF,oFAAoF;AACpF,MAAM,uBAAuB,GAA2B;IACtD,qBAAqB,EACnB,qQAAqQ;IACvQ,YAAY,EACV,sNAAsN;IACxN,gBAAgB,EACd,6LAA6L;IAC/L,4BAA4B,EAC1B,oKAAoK;CACvK,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA+C;IACrF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG;YACZ,0BAA0B,KAAK,CAAC,UAAU,UAAU,KAAK,CAAC,WAAW,IAAI;YACzE,EAAE;YACF,+LAA+L;YAC/L,EAAE;YACF,SAAS,KAAK,CAAC,OAAO,CAAC,OAAO,cAAc,KAAK,CAAC,OAAO,CAAC,UAAU,SAAS,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG;YACpG,cAAc,KAAK,CAAC,OAAO,CAAC,aAAa,qBAAqB,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG;SAC1F,CAAC;QACF,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oFAAoF,CAAC,CAAC;QACvG,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,EAAE,EACF,2BAA2B,KAAK,CAAC,IAAI,CAAC,UAAU,WAAW,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,GAAG,CACrI,CAAC;QACJ,CAAC;QACD,kEAAkE;QAClE,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,oBAAoB;QACpB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CACR,EAAE,EACF,GAAG,SAAS,CAAC,MAAM,yEAAyE,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK,kBAAkB,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,UAAU,mKAAmK,CACnW,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,OAAQ,GAA0B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7G,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC7B,OAAO;YACL,GAAG,MAAM;YACT,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/tier-status.js

@@ -36,7 +36,7 @@ export async function handleTierStatus(_args) {
             `| projects in pool | ${body.pool_usage.projects} |`,
             `| pooled api calls | ${body.pool_usage.total_api_calls.toLocaleString()} / ${body.pool_usage.api_calls_limit.toLocaleString()} |`,
             `| pooled storage | ${body.pool_usage.total_storage ?? formatBytesDecimal(body.pool_usage.total_storage_bytes)} / ${body.pool_usage.storage_limit ?? formatBytesDecimal(body.pool_usage.storage_bytes_limit)} |`,
-            `| pooled vault | ${body.pool_usage.gitvault_source ?? formatBytesDecimal(body.pool_usage.gitvault_source_bytes ?? 0)} / ${body.pool_usage.source_limit ?? formatBytesDecimal(body.pool_usage.source_bytes_limit ?? 0)} |`,
+            `| pooled vault | ${body.pool_usage.vault_source ?? formatBytesDecimal(body.pool_usage.vault_source_bytes ?? 0)} / ${body.pool_usage.source_limit ?? formatBytesDecimal(body.pool_usage.source_bytes_limit ?? 0)} |`,
         ];
         const functionLimits = functionLimitsFromTierStatus(body);
         if (functionLimits) {

package/dist/tools/tier-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"tier-status.js","sourceRoot":"","sources":["../../src/tools/tier-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAE1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,6IAA6I;qBACpJ;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,gBAAgB;YAChB,EAAE;YACF,+DAA+D;YAC/D,+EAA+E;YAC/E,mCAAmC;YACnC,EAAE;YACF,mBAAmB;YACnB,mBAAmB;YACnB,gBAAgB,IAAI,CAAC,MAAM,MAAM;YACjC,yBAAyB,IAAI,CAAC,IAAI,IAAI;YACtC,cAAc,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI;YAC5C,eAAe,IAAI,CAAC,gBAAgB,IAAI,QAAQ,IAAI;YACpD,eAAe,IAAI,CAAC,gBAAgB,IAAI,QAAQ,IAAI;YACpD,wBAAwB,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI;YACpD,wBAAwB,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI;YAClI,sBAAsB,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI;YAChN,oBAAoB,IAAI,CAAC,UAAU,CAAC,eAAe,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,IAAI,CAAC,CAAC,IAAI;SAC3N,CAAC;QACF,MAAM,cAAc,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CACR,4BAA4B,WAAW,CAAC,cAAc,CAAC,4BAA4B,EAAE,GAAG,CAAC,IAAI,EAC7F,2BAA2B,WAAW,CAAC,cAAc,CAAC,sBAAsB,EAAE,KAAK,CAAC,IAAI,EACxF,+BAA+B,WAAW,CAAC,cAAc,CAAC,uBAAuB,CAAC,IAAI,EACtF,yBAAyB,WAAW,CAAC,cAAc,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,EAC1F,mCAAmC,WAAW,CAAC,cAAc,CAAC,2BAA2B,CAAC,IAAI,CAC/F,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,IAGC;IAED,OAAO,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAM,GAAG,EAAE;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAC7F,CAAC"}
+{"version":3,"file":"tier-status.js","sourceRoot":"","sources":["../../src/tools/tier-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IACnD,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAE1C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,6IAA6I;qBACpJ;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,gBAAgB;YAChB,EAAE;YACF,+DAA+D;YAC/D,+EAA+E;YAC/E,mCAAmC;YACnC,EAAE;YACF,mBAAmB;YACnB,mBAAmB;YACnB,gBAAgB,IAAI,CAAC,MAAM,MAAM;YACjC,yBAAyB,IAAI,CAAC,IAAI,IAAI;YACtC,cAAc,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI;YAC5C,eAAe,IAAI,CAAC,gBAAgB,IAAI,QAAQ,IAAI;YACpD,eAAe,IAAI,CAAC,gBAAgB,IAAI,QAAQ,IAAI;YACpD,wBAAwB,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI;YACpD,wBAAwB,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI;YAClI,sBAAsB,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI;YAChN,oBAAoB,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,IAAI,CAAC,CAAC,IAAI;SACrN,CAAC;QACF,MAAM,cAAc,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CACR,4BAA4B,WAAW,CAAC,cAAc,CAAC,4BAA4B,EAAE,GAAG,CAAC,IAAI,EAC7F,2BAA2B,WAAW,CAAC,cAAc,CAAC,sBAAsB,EAAE,KAAK,CAAC,IAAI,EACxF,+BAA+B,WAAW,CAAC,cAAc,CAAC,uBAAuB,CAAC,IAAI,EACtF,yBAAyB,WAAW,CAAC,cAAc,CAAC,yBAAyB,EAAE,MAAM,CAAC,IAAI,EAC1F,mCAAmC,WAAW,CAAC,cAAc,CAAC,2BAA2B,CAAC,IAAI,CAC/F,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,IAGC;IAED,OAAO,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAM,GAAG,EAAE;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAC7F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402-mcp",
-  "version": "4.95.0",
+  "version": "4.97.0",
   "packageManager": "npm@11.19.0",
   "mcpName": "com.run402/mcp",
   "description": "MCP server for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation.",
@@ -21,8 +21,7 @@
   "workspaces": [
     "cli",
     "sdk",
-    "astro",
-    "kygit"
+    "astro"
   ],
   "scripts": {
     "build:core": "rm -rf core/dist && tsc -p core/tsconfig.json",
@@ -30,13 +29,13 @@
     "build": "rm -rf dist cli/core-dist cli/sdk/dist cli/sdk/core-dist && npm run build:core && npm run build:sdk && tsc && mkdir -p cli/core-dist cli/sdk/dist cli/sdk/core-dist && cp core/dist/*.js cli/core-dist/ && cp -R sdk/dist/. cli/sdk/dist/ && cp sdk/core-dist/*.js cli/sdk/core-dist/",
     "start": "node dist/index.js",
     "test:skill": "node scripts/build-agent-skills-index.mjs --check && node --test --import tsx SKILL.test.ts buzz/setup.test.mjs buzz/helper.test.mjs buzz/package.test.mjs scripts/build-agent-skills-index.test.mjs",
-    "test:gitvault-surface": "node scripts/build-gitvault-surface.mjs --check && node --test scripts/build-gitvault-surface.test.mjs",
+    "test:vault-surface": "node scripts/build-vault-surface.mjs --check && node --test scripts/build-vault-surface.test.mjs",
     "test:buzz-installer": "node buzz/install-smoke.mjs",
     "test:sync": "node --test --import tsx sync.test.ts examples/tenant-x402-wallet-stats/example.test.mjs examples/static-config-js/example.test.mjs",
     "test:run402-app-schema-drift": "node scripts/check-run402-app-schema-drift.mjs",
     "test:docs": "node scripts/check-typed-config-docs.mjs && npm run check:docs --workspace=@run402/sdk -- --skip-build && npm run test:docs:quality",
-    "test": "npm run build && node scripts/build-agent-skills-index.mjs --check && node scripts/build-gitvault-surface.mjs --check && node --experimental-test-module-mocks --test --import tsx SKILL.test.ts sync.test.ts buzz/setup.test.mjs buzz/helper.test.mjs buzz/package.test.mjs scripts/build-agent-skills-index.test.mjs scripts/build-agent-flat-docs.test.mjs scripts/build-gitvault-surface.test.mjs examples/tenant-x402-wallet-stats/example.test.mjs examples/static-config-js/example.test.mjs 'core/src/**/*.test.ts' 'sdk/src/**/*.test.ts' 'src/**/*.test.ts' && node --test cli-core-target.test.mjs mcp-vendored-sdk-imports.test.mjs && node --experimental-test-module-mocks --test cli-up-argv.test.mjs cli-up-repo-compose.test.mjs cli-repos-surface.test.mjs cli-gitvault-retired.test.mjs cli-projects-gitvault-scaffold.test.mjs cli-identity-link.test.mjs cli-identity-link-matrix.test.mjs cli-redeem.test.mjs cli-rooms-context-session-key.test.mjs cli-messages-wait.test.mjs cli-rooms-invite-key-leak.test.mjs cli-rooms-join-arrival.test.mjs cli/lib/buzz.test.mjs && node --test cli-help-listing.test.mjs cli-module-references.test.mjs cli-output-contract.test.mjs cli-json-noop-contract.test.mjs cli-e2e.test.mjs cli-help.test.mjs cli-subscriptions-help.test.mjs cli-provision-active.test.mjs cli-typed-config-modes.test.mjs cli-argv.test.mjs cli-gitvault-retired.test.mjs cli-conventions-gate.test.mjs cli-doctor.test.mjs cli-rest-diagnostics.test.mjs cli-credentials.test.mjs paid-stack-deps.test.mjs profile-guidance.test.mjs settlement-disclosure.test.mjs cli-suggestions-gate.test.mjs cli-env.test.mjs cli-wallets.test.mjs cli-org.test.mjs cli-org-context.test.mjs cli-image-org.test.mjs cli-harness-context.test.mjs cli-ci.test.mjs cli-deploy-ci.test.mjs cli-login-loopback.test.mjs cli-gitvault-remote-helper.test.mjs cli-gitvault-daemon.test.mjs cli-deploy-gitvault-lane.test.mjs cli/lib/buzz-doctor-contract.test.mjs cli/lib/buzz-doctor.test.mjs cli/lib/diagnostic-telemetry.test.mjs cli/lib/doctor-source-scan.test.mjs cli/lib/errors.test.mjs cli/lib/path-lookup.test.mjs cli/lib/pay.test.mjs cli/lib/up.test.mjs cli/lib/deploy-rehearse-discovery.test.mjs cli/lib/update-check.test.mjs cli-bootstrap-next-actions.test.mjs cli-sdk-errors-room-invite-hint.test.mjs && npm run test:docs",
-    "test:e2e": "npm run build && node --test cli-core-target.test.mjs && node --experimental-test-module-mocks --test cli-repos-surface.test.mjs cli-gitvault-retired.test.mjs cli-up-repo-compose.test.mjs cli-projects-gitvault-scaffold.test.mjs cli-identity-link.test.mjs cli-identity-link-matrix.test.mjs cli-redeem.test.mjs cli-rooms-context-session-key.test.mjs cli-messages-wait.test.mjs cli-rooms-invite-key-leak.test.mjs cli-rooms-join-arrival.test.mjs && node --test cli-help-listing.test.mjs cli-module-references.test.mjs cli-output-contract.test.mjs cli-json-noop-contract.test.mjs cli-e2e.test.mjs cli-help.test.mjs cli-subscriptions-help.test.mjs cli-provision-active.test.mjs cli-typed-config-modes.test.mjs cli-argv.test.mjs cli-gitvault-retired.test.mjs cli-conventions-gate.test.mjs cli-doctor.test.mjs cli-rest-diagnostics.test.mjs cli-credentials.test.mjs paid-stack-deps.test.mjs profile-guidance.test.mjs settlement-disclosure.test.mjs cli-suggestions-gate.test.mjs cli-env.test.mjs cli-wallets.test.mjs cli-org.test.mjs cli-org-context.test.mjs cli-image-org.test.mjs cli-harness-context.test.mjs cli-ci.test.mjs cli-deploy-ci.test.mjs cli-login-loopback.test.mjs cli-gitvault-remote-helper.test.mjs cli-gitvault-daemon.test.mjs cli-deploy-gitvault-lane.test.mjs cli/lib/buzz-doctor-contract.test.mjs cli/lib/buzz-doctor.test.mjs cli/lib/diagnostic-telemetry.test.mjs cli/lib/doctor-source-scan.test.mjs cli/lib/errors.test.mjs cli/lib/path-lookup.test.mjs cli/lib/up.test.mjs cli/lib/update-check.test.mjs cli-bootstrap-next-actions.test.mjs cli-sdk-errors-room-invite-hint.test.mjs",
+    "test": "npm run build && node scripts/build-agent-skills-index.mjs --check && node scripts/build-vault-surface.mjs --check && node --experimental-test-module-mocks --test --import tsx SKILL.test.ts sync.test.ts buzz/setup.test.mjs buzz/helper.test.mjs buzz/package.test.mjs scripts/build-agent-skills-index.test.mjs scripts/build-agent-flat-docs.test.mjs scripts/build-vault-surface.test.mjs examples/tenant-x402-wallet-stats/example.test.mjs examples/static-config-js/example.test.mjs 'core/src/**/*.test.ts' 'sdk/src/**/*.test.ts' 'src/**/*.test.ts' && node --test cli-core-target.test.mjs mcp-vendored-sdk-imports.test.mjs && node --experimental-test-module-mocks --test cli-up-argv.test.mjs cli-up-repo-compose.test.mjs cli-repos-surface.test.mjs cli-repos-naming.test.mjs cli-projects-vault-scaffold.test.mjs cli-identity-link.test.mjs cli-identity-link-matrix.test.mjs cli-redeem.test.mjs cli-rooms-context-session-key.test.mjs cli-messages-wait.test.mjs cli-rooms-invite-key-leak.test.mjs cli-rooms-join-arrival.test.mjs cli/lib/buzz.test.mjs && node --test cli-help-listing.test.mjs cli-module-references.test.mjs cli-output-contract.test.mjs cli-json-noop-contract.test.mjs cli-e2e.test.mjs cli-help.test.mjs cli-subscriptions-help.test.mjs cli-provision-active.test.mjs cli-typed-config-modes.test.mjs cli-argv.test.mjs cli-repos-naming.test.mjs cli-conventions-gate.test.mjs cli-doctor.test.mjs cli-rest-diagnostics.test.mjs cli-credentials.test.mjs paid-stack-deps.test.mjs profile-guidance.test.mjs settlement-disclosure.test.mjs cli-suggestions-gate.test.mjs cli-env.test.mjs cli-wallets.test.mjs cli-org.test.mjs cli-org-context.test.mjs cli-image-org.test.mjs cli-harness-context.test.mjs cli-ci.test.mjs cli-deploy-ci.test.mjs cli-login-loopback.test.mjs cli-vault-remote-helper.test.mjs cli-vault-daemon.test.mjs cli-deploy-vault-lane.test.mjs cli/lib/buzz-doctor-contract.test.mjs cli/lib/buzz-doctor.test.mjs cli/lib/diagnostic-telemetry.test.mjs cli/lib/doctor-source-scan.test.mjs cli/lib/errors.test.mjs cli/lib/path-lookup.test.mjs cli/lib/pay.test.mjs cli/lib/up.test.mjs cli/lib/deploy-rehearse-discovery.test.mjs cli/lib/update-check.test.mjs cli-bootstrap-next-actions.test.mjs cli-sdk-errors-room-invite-hint.test.mjs && npm run test:docs",
+    "test:e2e": "npm run build && node --test cli-core-target.test.mjs && node --experimental-test-module-mocks --test cli-repos-surface.test.mjs cli-repos-naming.test.mjs cli-up-repo-compose.test.mjs cli-projects-vault-scaffold.test.mjs cli-identity-link.test.mjs cli-identity-link-matrix.test.mjs cli-redeem.test.mjs cli-rooms-context-session-key.test.mjs cli-messages-wait.test.mjs cli-rooms-invite-key-leak.test.mjs cli-rooms-join-arrival.test.mjs && node --test cli-help-listing.test.mjs cli-module-references.test.mjs cli-output-contract.test.mjs cli-json-noop-contract.test.mjs cli-e2e.test.mjs cli-help.test.mjs cli-subscriptions-help.test.mjs cli-provision-active.test.mjs cli-typed-config-modes.test.mjs cli-argv.test.mjs cli-repos-naming.test.mjs cli-conventions-gate.test.mjs cli-doctor.test.mjs cli-rest-diagnostics.test.mjs cli-credentials.test.mjs paid-stack-deps.test.mjs profile-guidance.test.mjs settlement-disclosure.test.mjs cli-suggestions-gate.test.mjs cli-env.test.mjs cli-wallets.test.mjs cli-org.test.mjs cli-org-context.test.mjs cli-image-org.test.mjs cli-harness-context.test.mjs cli-ci.test.mjs cli-deploy-ci.test.mjs cli-login-loopback.test.mjs cli-vault-remote-helper.test.mjs cli-vault-daemon.test.mjs cli-deploy-vault-lane.test.mjs cli/lib/buzz-doctor-contract.test.mjs cli/lib/buzz-doctor.test.mjs cli/lib/diagnostic-telemetry.test.mjs cli/lib/doctor-source-scan.test.mjs cli/lib/errors.test.mjs cli/lib/path-lookup.test.mjs cli/lib/up.test.mjs cli/lib/update-check.test.mjs cli-bootstrap-next-actions.test.mjs cli-sdk-errors-room-invite-hint.test.mjs",
     "test:help": "npm run build && node --test cli-help.test.mjs",
     "test:integration": "node --test --import tsx core/src/siwx-integration.integ.ts",
     "test:integration:full": "node --test --import tsx cli-integration.test.ts",

package/sdk/README.md

@@ -2,7 +2,7 @@
 
 Typed TypeScript client for the [Run402](https://run402.com) API. The typed, opinionated workflow layer shared by `run402-mcp` and the `run402` CLI. Most operations are project-scoped: bind with `await r.project(id)`, then compose `.apply()`, `.assets.put()` and other operations. Apply coordinates staged activation and resumable work; it does not promise to roll back committed SQL migrations. Application functions use the separate `@run402/functions` runtime package.
 
-Run402 callers are first-class principals, whether they are people or agents. The SDK preserves the acting principal and authenticator separately from authority: organization roles, grants, delegates, freshness, and spend policy determine which operations are allowed. An agent should act as itself, never through a borrowed human credential.
+Run402 callers are first-class principals, whether they are people or agents. The SDK preserves the acting principal and authenticator separately from authority: organization roles, grants, grant keys, freshness, and spend policy determine which operations are allowed. An agent should act as itself, never through a borrowed human credential.
 
 ```bash
 npm install @run402/sdk
@@ -266,7 +266,7 @@ resolveRun402TargetProfile({
 
 Most operations are project-scoped. Bind once and skip the id arg on every call:
 
-`r.projects.list()` and `r.projects.get(id)` are server-authoritative project reads. `r.projects.use(id)` validates the project with the current principal and stores only an active project id in profile state; it does not require local project-key cache membership. `r.project(id)` binds the id without local lookup. Each namespace then follows its declared auth mode: control-plane operations such as custom domains default to principal/delegate auth with explicit `project_id`, while true data-plane/key operations use local project credentials and fail with `PROJECT_CREDENTIAL_NOT_FOUND` when the selected profile lacks cached keys.
+`r.projects.list()` and `r.projects.get(id)` are server-authoritative project reads. `r.projects.use(id)` validates the project with the current principal and stores only an active project id in profile state; it does not require local project-key cache membership. `r.project(id)` binds the id without local lookup. Each namespace then follows its declared auth mode: control-plane operations such as custom domains default to principal/grant-key auth with explicit `project_id`, while true data-plane/key operations use local project credentials and fail with `PROJECT_CREDENTIAL_NOT_FOUND` when the selected profile lacks cached keys.
 
 ```ts
 const p = await r.useProject(projectId);                                  // persists active project + returns scoped handle
@@ -343,10 +343,10 @@ The `CredentialsProvider` interface has two required methods (`getAuth`, `getPro
 | `wallets` | The local wallet: `status`, `create`, `export`, `faucet`; plus `getLabel(address)` |
 | `wallet(address)` | `getLabel()`, `setLabel(label)` — the signed server-side wallet label (gateway `/wallets/v1/:address/label`) surfaced in the console; pushed on `wallets use` unless `RUN402_WALLET_LABEL_SYNC=0`. Use the `r.wallet(address)` handle; `r.wallets.getLabel(address)` remains a bare read |
 | `orgs` | **Org-owned control plane** (first-class orgs). `create`, `list`, `whoami` (the gateway-resolved control-plane identity) on the collection; the scoped `r.org(id)` sub-client (org analog of `r.project(id)`) adds `get`, `rename`, `setPayoutWallet`, `members.*` (`list`/`add`/`setRole`/`revoke`), `invites.*` (`list`/`create`/`revoke`), `audit`. Org create/read/rename summaries include `tier`, `lease_started_at`, and `lease_expires_at`. |
-| `grants` | `create`, `revoke` — per-project capability grants (e.g. `"deploy"`, `"functions:write"`) for agent/CI principals; owner-gated, also reachable project-scoped as `r.project(id).grants` |
+| `grants` | `create` (optional first grant key via `key`), `list` (keys nested), `revoke`, `createKey`, `revokeKey`, `rotateKey` — per-project capability grants (e.g. `"deploy"`, `"functions:write"`) for agent/CI principals and the grant keys minted against them; a key's `token` is returned once. Owner-gated, also reachable project-scoped as `r.project(id).grants` |
 | `events` | `list`, `listForOrg` — the cursored project events feed ("what happened since I last looked"): deploy activations, suspensions, transfers, lifecycle cliffs, each with platform-suggested `next_actions`, plus app-emitted business facts (`source: "app"`) alongside the platform's own (`source: "platform"`) — filter with `{ source?, eventType? }`. Opaque store-and-echo cursor; `reset: true` + `earliest_cursor` instead of errors on expiry. Also reachable project-scoped as `r.project(id).events` |
 | `rooms` | `registerPresence`, `listPresences`, `getPresence`, `sendMessage`, `listMessages`, `waitForMessages` (kygit-invite — the agent's ear: blocks until a matching message lands past the cursor or a timeout elapses, using the gateway's held read `wait=<1..25>` when it is observed to hold and degrading to bounded polling the instant a page comes back with no `waited_ms`; silence is an answer, never a throw — returns the last observed page with `settled: false`), `getMessage`, `ackMessage`, `createClaim`, `listClaims`, `releaseClaim`, plus `scoped(orgId, roomKey)` (sync) and `forProject(projectId)` (async — resolves the project's org; the default room's key IS the project id) returning a room-bound `ScopedRoom` (which also carries `waitForMessages`). Org-scoped agent coordination rooms: per-session presence (~1h silence decays LIVENESS only — an opaque `sessionKey` on every call RESUMES the same presence no matter how long it was silent, reported via `resumed: true`; `requestedName` honored-or-suffixed on a fresh registration, reported via `requested_name` + `renamed` + a plain-language `why` when a collision was task-qualified; `program`/`model` labels ride every registration when the harness or an explicit override names them), room-visible ≤32 KiB markdown messages (`to`/`cc` route attention, not access control; `idempotencyKey` replay returns the ORIGINAL + `deduplicated: true`) with opaque `mcr_…` cursors (`reset: true` + `earliest_cursor` on expiry, never an error), and ADVISORY claims — `createClaim` always succeeds with a complete `conflicts[]`; nothing is ever blocked by a claim |
-| `gitvault` | The host-blind encrypted Git remote (`r402s/v0`). **Isomorphic reads:** `get`, `forProject` (cold-restart lookup — resolves `repo_id` with no local state), `forRepo` (slug-form resolution), `resolveAddress` (form dispatch), `heads`, `allHeads`, `setPolicy`, `completeOverride`, `acquireMaintenanceLease`, `listByOrg` (the bulk vaults-by-org read — `repos list`'s primary route), `access` (READ-ONLY recipients/coverage/local-TOFU-pin report; never wraps a key). **Node-only writes** (keystore + git working tree, reached through dynamic imports so a browser build never pulls `node:fs`): `init`, `openOrCreate` (lazy allocation on first open — the primitive `push` and `git-remote-run402`'s push path compose on `GITVAULT_VAULT_UNRESOLVED`), `resolveOrCreateAddress` (named-address resolve/push-to-create/id-pin), `push`, `handoff` (kygit-handoff — captures the working tree into a stash-shaped checkpoint and mints a single-use bearer `kgh1_…` key), `resume` (claims a Handoff Key, clones fresh, restores the checkpoint), `listHandoffs`, `revokeHandoff`, `invite` (kygit-invite — the second claim kind: captures the checkpoint, registers the inviter's presence, mints a single-use bearer `kgi1_…` key, posts one room fact), `join` (claims an Invite Key, folds the caller's own cold-start chain first, clones fresh, restores the checkpoint, pins the invite's room, registers this session's presence, posts one arrival fact), `listInvites`, `revokeInvite`, `status`, `compact`, `prune` (plans; submits with both verifier receipts), `verify` (accepts `{persist:false}` to walk without writing), `fsck` (verify + materialize + explicit pin_before/pin_after/local_state_changed; `{write:false}` is the audit mode), `deploy`, `restore`, `scaffoldRemote` (claims `origin` additively, falls back to `run402`), `open`, `drainOverrides`. Also exports the pure `gitvaultLossWarningTrip`/`gitvaultLossWarningTripped`/`gitvaultLossWarningMessage` and `gitvaultRemoteAddressForm`/`gitvaultRemoteUrl`/`gitvaultRemoteUrlForRepo`/`gitvaultRemoteScheme`/`gitvaultSlugReleasedInfo` helpers — `gitvaultRemoteUrl`/`gitvaultRemoteUrlForRepo` render `kygit::` instead of `run402::` when `RUN402_REMOTE_SCHEME=kygit` is set (design D8, kygit-handoff); `parseGitvaultRemoteUrl` accepts either prefix into the same scheme-less `{org_id, project_id}` shape. All protocol behaviour lives here once; `run402 repos …` (the SDK's own name, `r.gitvault`), `git-remote-run402`, and the MCP tools are adapters. Run402 cannot decrypt your gitvault or repository history. Deployment artifacts remain a disclosed plaintext custody boundary. |
+| `repos` | The host-blind encrypted Git remote (`r402s/v0`). **Isomorphic reads:** `get`, `forProject` (cold-restart lookup — resolves `repo_id` with no local state), `forRepo` (slug-form resolution), `resolveAddress` (form dispatch), `heads`, `allHeads`, `setPolicy`, `completeOverride`, `acquireMaintenanceLease`, `listByOrg` (the bulk vaults-by-org read — `repos list`'s primary route), `access` (READ-ONLY recipients/coverage/local-TOFU-pin report; never wraps a key). **Node-only writes** (keystore + git working tree, reached through dynamic imports so a browser build never pulls `node:fs`): `init`, `openOrCreate` (lazy allocation on first open — the primitive `push` and `git-remote-run402`'s push path compose on `VAULT_UNRESOLVED`), `resolveOrCreateAddress` (named-address resolve/push-to-create/id-pin), `push`, `handoff` (kygit-handoff — captures the working tree into a stash-shaped checkpoint and mints a single-use bearer `kgh1_…` key), `resume` (claims a Handoff Key, clones fresh, restores the checkpoint), `listHandoffs`, `revokeHandoff`, `invite` (kygit-invite — the second claim kind: captures the checkpoint, registers the inviter's presence, mints a single-use bearer `kgi1_…` key, posts one room fact), `join` (claims an Invite Key, folds the caller's own cold-start chain first, clones fresh, restores the checkpoint, pins the invite's room, registers this session's presence, posts one arrival fact), `listInvites`, `revokeInvite`, `status`, `compact`, `prune` (plans; submits with both verifier receipts), `verify` (accepts `{persist:false}` to walk without writing), `fsck` (verify + materialize + explicit pin_before/pin_after/local_state_changed; `{write:false}` is the audit mode), `deploy`, `restore`, `scaffoldRemote` (claims `origin` additively, falls back to `run402`), `open`, `drainOverrides`. Also exports the pure `vaultLossWarningTrip`/`vaultLossWarningTripped`/`vaultLossWarningMessage` and `vaultRemoteAddressForm`/`vaultRemoteUrl`/`vaultRemoteUrlForRepo`/`vaultSlugReleasedInfo` helpers — `vaultRemoteUrl`/`vaultRemoteUrlForRepo` render `run402::`, the one remote scheme; `parseVaultRemoteUrl` accepts `run402::` only and refuses any other `<scheme>::` address by name. All protocol behaviour lives here once; `run402 repos …` (the SDK's own name, `r.repos`), `git-remote-run402`, and the MCP tools are adapters. Run402 cannot decrypt your vault or repository history. Deployment artifacts remain a disclosed plaintext custody boundary. |
 | `errors` | `list`, `get`, `watch` — the release-error-rollup query surface. **Verdict-first**: each page leads with a gateway-computed promote-vs-revert verdict (`new_fingerprints` / `recurring_fingerprints` / `invocations_in_window`, baselined against the previous ACTIVE release), then grouped, deploy-stable error fingerprints with `fetch_logs` drill-downs. `watch({ newIn })` is the promote-gate poll loop — run it right after apply/promote; `clean === (verdict.new_fingerprints === 0)`, the gateway's count (no client-side identity math). Opaque keyset cursor. Also reachable project-scoped as `r.project(id).errors` |
 
 CLI-style aliases are available for agent ergonomics: `r.image` aliases `r.ai`,
@@ -777,23 +777,23 @@ await r.branches.delete(projectId, branch.branch_project_id);
 
 Scoped handles expose the same surface as `p.snapshots.*` and `p.branches.*`.
 
-### gitvault (`r.gitvault`) — the encrypted Git remote behind `run402 repos`, and its isomorphic/Node split
+### repos (`r.repos`) — the encrypted Git remote behind `run402 repos`, and its isomorphic/Node split
 
-`r.gitvault` is the host-blind encrypted Git remote (`r402s/v0`) — the SDK's own name for it (`gitvault` is infrastructure language, `repos` is the CLI noun). Every piece of protocol behaviour — crypto core, keystore, creation journal, snapshot + capture, publication state machines, ref transactions, verification budget, repair — lives here once; `run402 repos …`, `git-remote-run402`, and the MCP tools (`repos_view`/`repos_list_heads`/`repos_fsck`) are adapters over this namespace with identical semantics.
+`r.repos` is the host-blind encrypted Git remote (`r402s/v0`): KyGit is the brand, a vault is the resource, and a repo is what you have, so the SDK namespace matches the CLI noun. Every piece of protocol behaviour — crypto core, keystore, creation journal, snapshot + capture, publication state machines, ref transactions, verification budget, repair — lives here once; `run402 repos …`, `git-remote-run402`, and the MCP tools (`repos_view`/`repos_list_heads`/`repos_fsck`) are adapters over this namespace with identical semantics.
 
 **Three claims, three different strengths.** These are the entire approved claims vocabulary:
 
-- **Run402 cannot decrypt your gitvault or repository history. Deployment artifacts remain a disclosed plaintext custody boundary.** Cryptographic, against Run402 itself: source payload and repository-history content are ciphertext-only; the substrate retains only enumerated plaintext metadata and holds zero vault keys. The deploy lane is separate and disclosed — the platform custodially holds the plaintext artifacts of every deploy.
+- **Run402 cannot decrypt your vault or repository history. Deployment artifacts remain a disclosed plaintext custody boundary.** Cryptographic, against Run402 itself: source payload and repository-history content are ciphertext-only; the substrate retains only enumerated plaintext metadata and holds zero vault keys. The deploy lane is separate and disclosed — the platform custodially holds the plaintext artifacts of every deploy.
 - **Activation requires vault admission by default; an explicit, audited override can bypass it.** An operational platform invariant, not a cryptographic one.
 - **Retention is an operational promise of the platform, not a cryptographic guarantee against it** (the host controls timestamps and bytes).
 
-**The split.** Vault reads need only the HTTP client and run anywhere — a browser, a worker, an isolate. The verbs that touch a git working tree or the on-disk keystore are **Node-only** and are reached through dynamic imports, so `import { run402 } from "@run402/sdk"` in a browser never pulls `node:fs` into the graph. Calling a Node-only verb outside Node throws a `LocalError` with code `GITVAULT_NODE_ONLY` rather than a module-resolution crash.
+**The split.** Vault reads need only the HTTP client and run anywhere — a browser, a worker, an isolate. The verbs that touch a git working tree or the on-disk keystore are **Node-only** and are reached through dynamic imports, so `import { run402 } from "@run402/sdk"` in a browser never pulls `node:fs` into the graph. Calling a Node-only verb outside Node throws a `LocalError` with code `VAULT_NODE_ONLY` rather than a module-resolution crash.
 
 ```ts
 // Isomorphic — @run402/sdk or @run402/sdk/node.
-const vault = await r.gitvault.forProject(projectId);  // cold restart: resolves repo_id with no local state
-const page = await r.gitvault.heads(vault.repo_id, { after_generation: "0000000000000001", limit: "100" });
-await r.gitvault.setPolicy(vault.repo_id, { gitvault_policy: "required" });
+const vault = await r.repos.forProject(projectId);  // cold restart: resolves repo_id with no local state
+const page = await r.repos.heads(vault.repo_id, { after_generation: "0000000000000001", limit: "100" });
+await r.repos.setPolicy(vault.repo_id, { vault_policy: "required" });
 ```
 
 ```ts
@@ -801,46 +801,46 @@ await r.gitvault.setPolicy(vault.repo_id, { gitvault_policy: "required" });
 import { run402 } from "@run402/sdk/node";
 const r = run402();
 
-const pushed = await r.gitvault.push({ project_id: projectId, snapshot: { message: "wip: refactor the parser" } });
-const state = await r.gitvault.verify({ project_id: projectId });
-const plan = await r.gitvault.prune({ project_id: projectId }); // plans; plan.submitted is false until you submit
+const pushed = await r.repos.capture({ project_id: projectId, snapshot: { message: "wip: refactor the parser" } });
+const state = await r.repos.verify({ project_id: projectId });
+const plan = await r.repos.prune({ project_id: projectId }); // plans; plan.submitted is false until you submit
 ```
 
 `heads` paging (D186): `after_generation` is the REQUIRED verification anchor — a semantic input, never a paging knob — and stays CONSTANT across a page sequence; `limit` is required; `cursor` is omitted on the first request and thereafter is the prior page's `next_cursor` echoed unchanged. `allHeads` walks that sequence for you.
 
 **Nothing here is memoised.** Two responses are secret-bearing — the maintenance lease's `holder_token` (returned exactly once) and anything derived from the keystore — so they are never cached, never persisted into an agent-surface result store, and never logged.
 
-`gitvaultRemoteUrl(orgId, projectId)` / `parseGitvaultRemoteUrl(url)` are exported helpers for the `run402::<org_id>/<project_id>` remote form that `git-remote-run402` serves; `r.gitvault.scaffoldRemote(...)` is what `run402 init` calls to add it — claiming `origin` when the repository has none yet, falling back to `run402` when `origin` is already taken by something else, and never modifying an existing remote either way. A `repo_dir` that lies inside another repository is reported `skipped` with a `create_nested_repo` next action; `scaffoldRemote({ …, nested: true })` (and `init({ …, nested: true })`) makes it its own nested repository instead (`git init -b main`, the remote added there) and appends exactly one line to the enclosing repository's local `.git/info/exclude`, reporting `nested`, `enclosing_toplevel`, and `excluded_in_enclosing`.
+`vaultRemoteUrl(orgId, projectId)` / `parseVaultRemoteUrl(url)` are exported helpers for the `run402::<org_id>/<project_id>` remote form that `git-remote-run402` serves; `r.repos.scaffoldRemote(...)` is what `run402 init` calls to add it — claiming `origin` when the repository has none yet, falling back to `run402` when `origin` is already taken by something else, and never modifying an existing remote either way. A `repo_dir` that lies inside another repository is reported `skipped` with a `create_nested_repo` next action; `scaffoldRemote({ …, nested: true })` (and `init({ …, nested: true })`) makes it its own nested repository instead (`git init -b main`, the remote added there) and appends exactly one line to the enclosing repository's local `.git/info/exclude`, reporting `nested`, `enclosing_toplevel`, and `excluded_in_enclosing`.
 
-**Lazy allocation on first open.** `r.gitvault.openOrCreate({ project_id, org_id, repo_dir? })` resolves `repo_id` from `project_id` exactly like `open()`; when that resolution fails AND `org_id` was supplied, it runs the six-stage creation journal to allocate the vault before opening it. Without `org_id` it is byte-identical to `open()`. `push({ org_id, onVaultCreated })` composes this internally, so `git push` and `repos snapshot` allocate inline against an unregistered project — `onVaultCreated` fires with the one-shot recovery receipt the instant allocation lands, before capture/publish continue.
+**Lazy allocation on first open.** `r.repos.openOrCreate({ project_id, org_id, repo_dir? })` resolves `repo_id` from `project_id` exactly like `open()`; when that resolution fails AND `org_id` was supplied, it runs the six-stage creation journal to allocate the vault before opening it. Without `org_id` it is byte-identical to `open()`. `capture({ org_id, onVaultCreated })` composes this internally, so `git push` and `repos capture` allocate inline against an unregistered project — `onVaultCreated` fires with the one-shot recovery receipt the instant allocation lands, before capture/publish continue.
 
-**Named addressing, id-pinning, and push-to-create.** `run402::<org-slug>/<name>` works alongside the id-form `run402::<org_id>/<project_id>` in the same slot — `gitvaultRemoteAddressForm(address)` discriminates them (a real org id is always a UUID and a real project id always `prj_`-prefixed, so an id-form address satisfies both at once). `r.gitvault.resolveOrCreateAddress({ address, repo_dir?, allow_create? })` resolves a parsed address, pinning the resolved `repo_id` into that checkout's LOCAL git config (`git config r402.repoId`) the first time a SLUG-form address resolves; every later open on that checkout follows the pin, skipping the resolution round-trip and surviving a later rename of either half. `allow_create: true` push-to-creates on a slug-form miss — the project and vault are allocated atomically, and `push({ address })` uses this instead of `openOrCreate` when `address` is passed. `REPO_CREATION_CONFLICT` (a race lost to a concurrent pusher) resolves to the winner's repo automatically; `SLUG_RELEASED` (`gitvaultSlugReleasedInfo(err)`) is NEVER auto-followed.
+**Named addressing, id-pinning, and push-to-create.** `run402::<org-slug>/<name>` works alongside the id-form `run402::<org_id>/<project_id>` in the same slot — `vaultRemoteAddressForm(address)` discriminates them (a real org id is always a UUID and a real project id always `prj_`-prefixed, so an id-form address satisfies both at once). `r.repos.resolveOrCreateAddress({ address, repo_dir?, allow_create? })` resolves a parsed address, pinning the resolved `repo_id` into that checkout's LOCAL git config (`git config r402.repoId`) the first time a SLUG-form address resolves; every later open on that checkout follows the pin, skipping the resolution round-trip and surviving a later rename of either half. `allow_create: true` push-to-creates on a slug-form miss — the project and vault are allocated atomically, and `push({ address })` uses this instead of `openOrCreate` when `address` is passed. `REPO_CREATION_CONFLICT` (a race lost to a concurrent pusher) resolves to the winner's repo automatically; `SLUG_RELEASED` (`vaultSlugReleasedInfo(err)`) is NEVER auto-followed.
 
-**Handoff / resume — pass a working tree to another agent (kygit-handoff).** `r.gitvault.handoff({ project_id, note, role?, ttlSeconds?, includeSensitive? })` captures the working tree into a synthetic stash-shaped checkpoint (same 3-parent shape real `git stash push -u` produces — an outer tracked-worktree-state commit, an index-tree parent, a parentless untracked-tree parent), pushes it as a retention root, and mints a single-use bearer `kgh1_<base64url(handoff_id[16] ‖ master_secret[32])>` key — returned in `handoff_key`, which is the ONLY copy; nothing else in the response, and nothing this library logs, ever carries it. `r.gitvault.resume({ key, to? })` claims the key (a same-principal replay dedups safely rather than erroring), clones a fresh checkout, and reapplies the checkpoint with `git stash apply --index`. Sensitive untracked paths (`.env`, `*.pem`, `id_rsa*`, SSH/AWS/GPG directories, 22 globs total — exported as `GITVAULT_HANDOFF_SENSITIVE_DENYLIST`) are excluded from capture unless named in `includeSensitive`. `r.gitvault.listHandoffs`/`revokeHandoff` manage outstanding keys.
+**Handoff / resume — pass a working tree to another agent (kygit-handoff).** `r.repos.handoff({ project_id, note, role?, ttlSeconds?, includeSensitive? })` captures the working tree into a synthetic stash-shaped checkpoint (same 3-parent shape real `git stash push -u` produces — an outer tracked-worktree-state commit, an index-tree parent, a parentless untracked-tree parent), pushes it as a retention root, and mints a single-use bearer `kgh1_<base64url(handoff_id[16] ‖ master_secret[32])>` key — returned in `handoff_key`, which is the ONLY copy; nothing else in the response, and nothing this library logs, ever carries it. `r.repos.resume({ key, to? })` claims the key (a same-principal replay dedups safely rather than erroring), clones a fresh checkout, and reapplies the checkpoint with `git stash apply --index`. Sensitive untracked paths (`.env`, `*.pem`, `id_rsa*`, SSH/AWS/GPG directories, 22 globs total — exported as `VAULT_HANDOFF_SENSITIVE_DENYLIST`) are excluded from capture unless named in `includeSensitive`. `r.repos.listHandoffs`/`revokeHandoff` manage outstanding keys.
 
 ```ts
-const minted = await r.gitvault.handoff({
+const minted = await r.repos.handoff({
   project_id: projectId,
   note: { schema: "kygit.handoff-note.v1", created_at: new Date().toISOString(), from: { agent: "claude" }, summary: "refactored the parser" },
 });
 console.log(minted.handoff_key); // kgh1_… — print it ALONE, this is the only copy
 
 // on another machine, with no shared keystore or wallet:
-const resumed = await r.gitvault.resume({ key: "kgh1_…" });
+const resumed = await r.repos.resume({ key: "kgh1_…" });
 console.log(resumed.restored.dir); // the fresh checkout, dirty state reapplied
 ```
 
-**Invite / join — a second agent into the SAME work, dirty tree included (kygit-invite).** The second claim kind beside handoff/resume, sharing the same crypto/keystore/restore machinery, kind-parameterized: a Handoff passes the work on and the sender stops; an Invite grows the team while the sender keeps working. `r.gitvault.invite({ project_id, note, roomKey?, role?, ttlSeconds?, includeSensitive?, program?, model?, sessionKey? })` captures the checkpoint exactly like `handoff` — the inviter's own worktree, index, branch, refs, and access are all untouched — registers the inviter's OWN presence in the invite's room (the project's default room, or `roomKey` for a named org room) BEFORE minting, mints a single-use bearer `kgi1_<base64url(invite_id[16] ‖ master_secret[32])>` key (returned in `invite_key`, the ONLY copy), and posts ONE room message naming the checkpoint and invite id (never the key) — a presence or fact-post failure is reported in `inviter_presence`/`room_message` and never voids the mint. `r.gitvault.join({ key, to?, program?, model?, sessionKey? })` claims it (a same-principal replay dedups safely), clones a fresh checkout, reapplies the checkpoint with `git stash apply --index`, pins the invite's OWN room locally (`r402.room`), registers this session's presence, posts ONE arrival message, and returns the inviter (name, labels, liveness), `live_presences`, the catch-up `cursor`, and the last few `recent_messages` — the joiner's first message needs no lookup. `r.gitvault.listInvites`/`revokeInvite` manage outstanding keys. A `kgh1_…` key handed to `join()`, or a `kgi1_…` key handed to `resume()`, is refused BY NAME (`INVITE_KEY_WRONG_KIND`/`HANDOFF_KEY_WRONG_KIND`) before any network call.
+**Invite / join — a second agent into the SAME work, dirty tree included (kygit-invite).** The second claim kind beside handoff/resume, sharing the same crypto/keystore/restore machinery, kind-parameterized: a Handoff passes the work on and the sender stops; an Invite grows the team while the sender keeps working. `r.repos.invite({ project_id, note, roomKey?, role?, ttlSeconds?, includeSensitive?, program?, model?, sessionKey? })` captures the checkpoint exactly like `handoff` — the inviter's own worktree, index, branch, refs, and access are all untouched — registers the inviter's OWN presence in the invite's room (the project's default room, or `roomKey` for a named org room) BEFORE minting, mints a single-use bearer `kgi1_<base64url(invite_id[16] ‖ master_secret[32])>` key (returned in `invite_key`, the ONLY copy), and posts ONE room message naming the checkpoint and invite id (never the key) — a presence or fact-post failure is reported in `inviter_presence`/`room_message` and never voids the mint. `r.repos.join({ key, to?, program?, model?, sessionKey? })` claims it (a same-principal replay dedups safely), clones a fresh checkout, reapplies the checkpoint with `git stash apply --index`, pins the invite's OWN room locally (`r402.room`), registers this session's presence, posts ONE arrival message, and returns the inviter (name, labels, liveness), `live_presences`, the catch-up `cursor`, and the last few `recent_messages` — the joiner's first message needs no lookup. `r.repos.listInvites`/`revokeInvite` manage outstanding keys. A `kgh1_…` key handed to `join()`, or a `kgi1_…` key handed to `resume()`, is refused BY NAME (`INVITE_KEY_WRONG_KIND`/`HANDOFF_KEY_WRONG_KIND`) before any network call.
 
 ```ts
-const minted = await r.gitvault.invite({
+const minted = await r.repos.invite({
   project_id: projectId,
   note: { schema: "kygit.invite-note.v1", created_at: new Date().toISOString(), from: { agent: "claude" }, summary: "bringing in a second agent to pair on the parser" },
 });
 console.log(minted.invite_key); // kgi1_… — print it ALONE, this is the only copy
 
 // on another machine, with no shared keystore or wallet:
-const joined = await r.gitvault.join({ key: "kgi1_…" });
+const joined = await r.repos.join({ key: "kgi1_…" });
 console.log(joined.restored.dir); // the fresh checkout, dirty state reapplied
 console.log(joined.inviter?.name); // who invited you, and whether they're still live
 
@@ -849,13 +849,13 @@ const heard = await r.rooms.waitForMessages(joined.membership.organization_id, j
 console.log(heard.settled, heard.messages, heard.live_presences);
 ```
 
-**The `kygit::` scheme (design D8).** `gitvaultRemoteUrl`/`gitvaultRemoteUrlForRepo` render `kygit::<org>/<name>` instead of `run402::<org>/<name>` whenever `process.env.RUN402_REMOTE_SCHEME === "kygit"` (`gitvaultRemoteScheme()` reads it); `parseGitvaultRemoteUrl` accepts either prefix into the identical scheme-less canonical address. This is a pure client-side rendering choice — the gateway never sees which door a request came through, and every gateway-facing call, resolve, and pin is unaffected. The `@kychee/kygit` CLI package sets the env var before it execs the canonical CLI, so everything it prints or scaffolds comes out `kygit::`; both spellings resolve the same vault, and neither client ever rewrites a remote the other one wrote.
+**One remote scheme.** `vaultRemoteUrl`/`vaultRemoteUrlForRepo` render `run402::<org>/<name>`; `parseVaultRemoteUrl` accepts `run402::` only and throws `REMOTE_SCHEME_UNSUPPORTED`, naming the scheme, for any other `<scheme>::` address.
 
-**Allocating a vault does not change deploy policy.** `gitvault_policy` stays whatever it already was — `null` for a project whose vault was just allocated. The apply engine (`applyWithGitvault`) attaches a typed `next_actions` entry (`gitvault_policy_required`) and a `warnings[]` entry on every deploy of a vaulted, ungated project, but never blocks or prompts; only `setPolicy(repoId, { gitvault_policy: "required" })` (or `"grandfathered"`) changes the gate.
+**Allocating a vault does not change deploy policy.** `vault_policy` stays whatever it already was — `null` for a project whose vault was just allocated. The apply engine (`applyWithVault`) attaches a typed `next_actions` entry (`vault_policy_required`) and a `warnings[]` entry on every deploy of a vaulted, ungated project, but never blocks or prompts; only `setPolicy(repoId, { vault_policy: "required" })` (or `"grandfathered"`) changes the gate.
 
-**The progressive terminal-loss warning.** `status()` stays quiet at genesis and adds a `terminal_loss_risk` entry to `warnings[]` once the vault crosses any of ≥10 admitted generations, ≥10 MB `storage.source_bytes`, or ≥14 days since `genesis_admitted_at` — an OR-composite, computed by the pure, exported `gitvaultLossWarningTrip(record)` / `gitvaultLossWarningTripped(trip)` / `gitvaultLossWarningMessage(trip)` helpers (thresholds in `GITVAULT_LOSS_WARNING_THRESHOLDS`, tunable in this one place). There is deliberately no companion "resolved" check: V0 cannot detect a second principal able to open the vault, so nothing in the SDK ever clears a tripped warning.
+**The progressive terminal-loss warning.** `status()` stays quiet at genesis and adds a `terminal_loss_risk` entry to `warnings[]` once the vault crosses any of ≥10 admitted generations, ≥10 MB `storage.source_bytes`, or ≥14 days since `genesis_admitted_at` — an OR-composite, computed by the pure, exported `vaultLossWarningTrip(record)` / `vaultLossWarningTripped(trip)` / `vaultLossWarningMessage(trip)` helpers (thresholds in `VAULT_LOSS_WARNING_THRESHOLDS`, tunable in this one place). There is deliberately no companion "resolved" check: V0 cannot detect a second principal able to open the vault, so nothing in the SDK ever clears a tripped warning.
 
-**Terminal loss (protocol §0).** In V0-A, **whole-machine or whole-keystore loss is terminal for vault history until human envelopes ship** — `status()` carries the statement verbatim in `terminal_loss_statement` / `terminal_loss_detail`. The vault protects source history from host-side loss while a principal keystore survives. Back up the keystore directory `run402 repos view` reports as `keystore.root` and prints under the terminal-loss statement — `~/.config/run402/gitvault` for the default wallet, `~/.config/run402/profiles/<wallet>/gitvault` for a named one. The recovery receipt `init` prints once is an integrity anchor, not a decryption key: it proves the vault you are served is the one you created, and it decrypts nothing.
+**Terminal loss (protocol §0).** In V0-A, **whole-machine or whole-keystore loss is terminal for vault history until human envelopes ship** — `status()` carries the statement verbatim in `terminal_loss_statement` / `terminal_loss_detail`. The vault protects source history from host-side loss while a principal keystore survives. Back up the keystore directory `run402 repos view` reports as `keystore.root` and prints under the terminal-loss statement — `~/.config/run402/vault` for the default wallet, `~/.config/run402/profiles/<wallet>/vault` for a named one. The recovery receipt `init` prints once is an integrity anchor, not a decryption key: it proves the vault you are served is the one you created, and it decrypts nothing.
 
 ### GitHub Actions OIDC — CI credentials drive deploy
 

package/sdk/core-dist/keystore.d.ts

@@ -6,7 +6,7 @@ export interface StoredProject {
     last_deployment_id?: string;
     /**
      * The owning organization, cached so a returning machine can build addresses
-     * that need it — the `run402::<org_id>/<project_id>` gitvault remote is the
+     * that need it — the `run402::<org_id>/<project_id>` vault remote is the
      * first — WITHOUT a control-plane round trip.
      *
      * NOT a secret and NOT an authorization input: it is a routing identifier the