run402 4.37.0 → 4.37.1

package/git-remote-run402.mjs

@@ -189,12 +189,6 @@ async function main(argv) {
       } catch {
         // Never let a diagnostic line fail a push that already allocated successfully.
       }
-      try {
-        const { GITVAULT_ALLOCATION_POLICY_ADVISORY } = await import("./lib/gitvault-scaffold.mjs");
-        note(GITVAULT_ALLOCATION_POLICY_ADVISORY);
-      } catch {
-        // Same rule: advisory only, never fatal.
-      }
       note("");
     }
     return result.handle.vault;

package/lib/gitvault-scaffold.mjs

@@ -19,20 +19,6 @@
 import { getSdk } from "./sdk.mjs";
 import { resolveOwningOrgId } from "./org-context.mjs";
 
-/**
- * The interim allocation→policy advisory (repo-first-onramp D3, stated as an
- * interim). TODAY the platform sets `gitvault_policy: required` at allocation
- * — the decoupling (allocation leaving the policy unset) is design D3's
- * gateway half and ships in a later release (task 3.1). Until it does, every
- * client-side path that allocates a vault prints this line so the policy flip
- * is never a silent side effect of a push or a create. Faithful over flattering:
- * documenting the designed future as the present is the breach; this line is
- * the truth. DELETE this export (and its four call sites) when the gateway
- * decoupling ships.
- */
-export const GITVAULT_ALLOCATION_POLICY_ADVISORY =
-  "note: allocation currently sets gitvault_policy to 'required' — from now on a deploy must present a vaulted capture (produced automatically by `run402 deploy apply` on any machine holding this keystore). Opt out with `run402 gitvault policy grandfathered --reason \"<why>\"`. A later release decouples allocation from the deploy gate (design D3).";
-
 /**
  * @param {object} options
  * @param {string} [options.repoDir] Working tree to scaffold. Defaults to `process.cwd()`.

package/lib/gitvault.mjs

@@ -19,7 +19,6 @@
 import { readFileSync } from "node:fs";
 import { resolveProjectId } from "./config.mjs";
 import { resolveOwningOrgId } from "./org-context.mjs";
-import { GITVAULT_ALLOCATION_POLICY_ADVISORY } from "./gitvault-scaffold.mjs";
 import { getSdk } from "./sdk.mjs";
 import { reportSdkError, fail } from "./sdk-errors.mjs";
 import {
@@ -284,7 +283,6 @@ async function init(args) {
     );
     if (result.remote) console.error(`remote '${result.remote.name}' -> ${result.remote.url} (${result.remote.reason})`);
     if (remoteSkipped) console.error(`remote not added: ${remoteSkipped}`);
-    if (!result.deduplicated) console.error(GITVAULT_ALLOCATION_POLICY_ADVISORY);
     // The recovery receipt is integrity data, not a secret, and it is worth
     // exactly as much as the number of copies you keep. It is persisted into
     // the keystore automatically; say where, because "keep many copies" is
@@ -428,7 +426,6 @@ async function snapshot(args) {
       console.error(`vault allocated (genesis ${created.genesis_sha256}) — one-shot recovery receipt, keep many copies:`);
       console.error(JSON.stringify(created.recovery_receipt));
       await printKeystoreLocation();
-      console.error(GITVAULT_ALLOCATION_POLICY_ADVISORY);
       console.error("");
     },
   };

package/lib/repos.mjs

@@ -40,7 +40,6 @@ import { loadLiveControlPlaneSession } from "../core-dist/control-plane-session.
 import { resolveOrgId, resolveOwningOrgId } from "./org-context.mjs";
 import { nextAction } from "./next-actions.mjs";
 import { printKeystoreLocation } from "./gitvault.mjs";
-import { GITVAULT_ALLOCATION_POLICY_ADVISORY } from "./gitvault-scaffold.mjs";
 import {
   normalizeArgv,
   hasHelp,
@@ -197,7 +196,6 @@ async function create(args) {
     console.error("");
     console.error(vault.terminal_loss_statement);
     await printKeystoreLocation();
-    if (!vault.deduplicated) console.error(GITVAULT_ALLOCATION_POLICY_ADVISORY);
     console.error("");
     console.error("nothing was deployed — this is a vault-only repo. Deploy later with `run402 deploy apply`, or never.");
   } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "4.37.0",
+  "version": "4.37.1",
   "description": "CLI for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation.",
   "type": "module",
   "bin": {