run402 4.41.0 → 4.42.0

package/lib/repos.mjs

@@ -1,27 +1,25 @@
 /**
- * `run402 repos` — the consolidated encrypted-repository family
- * (repo-surface-consolidation). One noun, twelve verbs, each one either a
- * `gh repo` verb, a `git` verb meaning what it means in git, or a plain-
- * English verb for an operation with no analog (design D2). `repo` singular
- * resolves identically (`cli.mjs` dispatches both spellings here).
+ * `run402 repos` — the consolidated encrypted-repository family. One noun,
+ * twelve verbs, each one either a `gh repo` verb, a `git` verb meaning what
+ * it means in git, or a plain-English verb for an operation with no analog.
+ * `repo` singular resolves identically (`cli.mjs` dispatches both spellings
+ * here).
  *
- * ARCHITECTURAL LAW (unchanged from `gitvault.mjs`, which this module
- * replaces as the family's CLI home): every piece of protocol behavior —
- * crypto core, keystore, creation journal, snapshot + capture, publication
- * state machines, ref transactions, verification budget, repair — lives
- * ONCE in `@run402/sdk` under `r.gitvault` (the SDK KEEPS that name; it is
- * infrastructure language — see design D1). This module is a THIN ADAPTER:
- * argument parsing, TTY output, exit codes, local file I/O. It adds zero
- * protocol behavior of its own.
+ * ARCHITECTURAL LAW: every piece of protocol behavior — crypto core,
+ * keystore, creation journal, snapshot + capture, publication state
+ * machines, ref transactions, verification budget, repair — lives ONCE in
+ * `@run402/sdk` under `r.gitvault` (the SDK keeps that name; it is
+ * infrastructure language). This module is a THIN ADAPTER: argument
+ * parsing, TTY output, exit codes, local file I/O. It adds zero protocol
+ * behavior of its own.
  *
  * Pipe contract (docs/style.md): the payload is JSON on stdout; every human
  * line (progress, the terminal-loss statement, advisories) goes to stderr,
  * so `run402 repos view | jq` stays clean.
  *
- * The nineteen-command `gitvault` family this replaces (D7): its dispatcher
- * has RETIRED — see `cli/lib/gitvault.mjs`, now a tombstone that answers
- * every old spelling with a typed `COMMAND_MOVED` (naming its `repos`
- * successor) or `COMMAND_REMOVED` (for `reconcile`, which has none) error.
+ * `cli/lib/gitvault.mjs` is a tombstone that answers every `gitvault <verb>`
+ * spelling with a typed `COMMAND_MOVED` (naming its `repos` successor) or
+ * `COMMAND_REMOVED` (for `reconcile`, which has none) error.
  */
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { basename, join } from "node:path";
@@ -83,8 +81,7 @@ Subcommands:
   create   Provision (or, with --project, ADOPT an existing project), ALLOCATE
            its vault (mints key material and, on first allocation, a one-shot
            recovery receipt), and scaffold the git remote — origin when free,
-           run402 when taken (design D1). Absorbs the old \`gitvault init\`:
-           \`--project <id>\` allocates for a project that already exists,
+           run402 when taken. \`--project <id>\` allocates for a project that already exists,
            nothing is provisioned. \`[name]\` is inferred from an existing git
            remote's basename or the directory name when unambiguous — NEVER a
            prompt; if the directory and an existing remote disagree, or
@@ -96,7 +93,7 @@ Subcommands:
            believe about the repo — allocation, policy, whether this keystore
            can sign, the authenticated and materialized pins, the mirror
            summary (when one is configured), and where the keystore lives.
-           NEVER materializes refs or advances any local pin (design D3) —
+           NEVER materializes refs or advances any local pin —
            that belongs to \`fsck\`, which is why \`refs\` reports
            {known:false, reason:"not_materialized"} with a next_action
            pointing there. \`--human\` renders a short summary instead of JSON.
@@ -106,10 +103,10 @@ Subcommands:
            404s. Not every project in the org — ones with no vault are
            omitted.
   rename   Claim or rename the repo's per-org-unique, address-form name
-           (the <name> half of run402::<org-slug>/<name>) — absorbs the old
-           \`repos name\`. Address by --repo or --project (not both).
+           (the <name> half of run402::<org-slug>/<name>). Address by
+           --repo or --project (not both).
   delete   Deletes a REPO-ONLY project — database, functions, subdomains,
-           mailbox, and secrets must all be absent (design D9). When any of
+           mailbox, and secrets must all be absent. When any of
            them is materialized, this REFUSES with
            PROJECT_HAS_NON_REPO_RESOURCES, enumerates refused_resources, and
            points at \`run402 projects delete\` — the verb whose name says
@@ -123,7 +120,7 @@ Subcommands:
            publishing. Push-to-creates through a slug-form remote
            (run402::<org-slug>/<name>) the same way \`git push\` does.
            \`--dry-run\` previews the real local pipeline without publishing.
-  mirror   ONE flag-driven verb (design D4) for the client-side, customer-
+  mirror   ONE flag-driven verb for the client-side, customer-
            owned ciphertext mirror — run402 never holds a credential to it.
            No argument: READ the configured destination + a keyless
            freshness check against the live vault. \`<destination>\`:
@@ -140,8 +137,8 @@ Subcommands:
            no \`repos clone\` verb exists). Proves this mirror's validity,
            never freshness — read both honesty statements before relying on
            the result.
-  fsck     Walks the head chain (what \`verify\` used to do) AND materializes
-           the ref map (what \`status --refs\` used to do), advancing BOTH
+  fsck     Walks the head chain AND materializes
+           the ref map, advancing BOTH
            local trust pins — reported EXPLICITLY as local_state_changed +
            pin_before + pin_after, never implied. \`--no-write\` is a genuine
            audit mode: the same real walk and decrypt, computing the same
@@ -162,15 +159,21 @@ Subcommands:
            safe_to_auto_execute:false as ADDITIVE fields.
   access   READ-ONLY: the org's directory of encryption-key-holding members,
            which of the vault's current envelope-recipient fingerprints are
-           covered, and (best-effort, this machine only) each principal's
-           local TOFU pin. Reports an HONEST gap rather than inventing:
-           per-recipient envelope_state (converged/pending) and
-           history_scope are not yet exposed by the gateway — that lands
-           with gitvault-human-envelopes' epoch-rotation work.
+           covered, per-recipient envelope_state (converged/pending/
+           pending_removal, from the gateway's desired-recipient-state
+           substrate), and (best-effort, this machine only) each principal's
+           local TOFU pin. stale_access names removed members whose access
+           was NOT actually revoked — pending_removal is honest bookkeeping,
+           not enforcement, until epoch rotation ships. Reports an HONEST
+           remaining gap rather than inventing: history_scope (which epochs
+           each recipient can read) has no substrate to report — gitvault
+           protocol v0 pins a single fixed epoch, so there is no per-epoch
+           scope yet; that lands with gitvault-human-envelopes' epoch-
+           rotation work, in fold under adversarial review.
   access repair
            NOT YET AVAILABLE — gated on the epoch-rotation mechanism above
-           landing. \`reconcile\`, the workaround it replaces, is REMOVED
-           (design D5/D7): it never wrapped a key correctly-scoped to "from
+           landing. \`reconcile\`, the workaround it replaces, is REMOVED:
+           it never wrapped a key correctly-scoped to "from
            here forward," and a temporary mechanism does not get a
            permanent verb. This refuses cleanly and points at \`repos
            access\` for what IS available today.
@@ -256,12 +259,11 @@ Examples:
   run402 repos delete --project prj_xyz --force
 `;
 
-// ─── shared targeting + printing (ported from the retired gitvault.mjs) ────
+// ─── shared targeting + printing ────
 
 /**
- * Resolve which repo to act on, plus the local git tree. Identical
- * resolution order the old `gitvault.mjs` used (design change: none —
- * naming only): explicit `--repo`/`--project` > the repo's own pin/remote
+ * Resolve which repo to act on, plus the local git tree. Resolution order:
+ * explicit `--repo`/`--project` > the repo's own pin/remote
  * > RUN402_PROJECT_ID > the active project.
  */
 async function vaultTarget(a) {
@@ -282,11 +284,23 @@ async function vaultTarget(a) {
   return target;
 }
 
-/** Print the protocol §0 terminal-loss statement, verbatim, from the SDK's own constants — never paraphrased here. */
+/**
+ * Print the protocol §0 terminal-loss statement, verbatim, from the SDK's own
+ * constants — never paraphrased here. The SDK's `status()` already downgrades
+ * this to the durability sentence when it has locally proven the vault has
+ * >= 2 covering recipients (dogfood item 2: the single-principal terminal-loss
+ * claim is false for that vault) — this function only renders whichever
+ * statement the SDK selected, it never chooses between them itself.
+ */
 function printTerminalLoss(status) {
   console.error("");
-  console.error(status.terminal_loss_statement);
-  console.error(status.terminal_loss_detail);
+  if (status.terminal_loss_statement) {
+    console.error(status.terminal_loss_statement);
+    console.error(status.terminal_loss_detail);
+  } else if (status.durability_statement) {
+    console.error(status.durability_statement);
+    if (status.covering_recipients != null) console.error(`covering_recipients: ${status.covering_recipients}`);
+  }
   console.error(`Back up this directory: ${status.keystore.root}`);
   console.error("");
 }
@@ -299,8 +313,7 @@ const LARGE_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
  * to a private 0600 file with a one-line stderr breadcrumb naming the path.
  * Best-effort. Deliberately NEVER called on `create`'s result — that JSON
  * carries the one-shot recovery receipt, and a secret-bearing response is
- * never spilled into any cache path (agent-response-design's secrets rule,
- * design D10).
+ * never spilled into any cache path (agent-response-design's secrets rule).
  */
 async function spillIfLarge(repoId, verb, payload) {
   const json = JSON.stringify(payload, null, 2);
@@ -400,7 +413,7 @@ async function formatRepoHuman(s, mirror) {
   return lines.join("\n");
 }
 
-// ─── name inference (design D10 — create's delight pass) ──────────────────
+// ─── name inference ──────────────────
 
 function validateProjectName(name) {
   if (name === "") {
@@ -416,8 +429,8 @@ function validateProjectName(name) {
 }
 
 /**
- * Best-effort slugify for the address-form repo name (design D6's grammar:
- * lowercase [a-z0-9-], no leading/trailing/double hyphen, <=63 chars).
+ * Best-effort slugify for the address-form repo name (the address-form
+ * grammar: lowercase [a-z0-9-], no leading/trailing/double hyphen, <=63 chars).
  */
 function slugifyRepoName(name) {
   return name
@@ -458,7 +471,7 @@ function dirBasenameCandidate(dir) {
 }
 
 /**
- * `repos create [name]`'s inference (design D10): the directory or an
+ * `repos create [name]`'s inference: the directory or an
  * existing git remote's basename, when unambiguous. NEVER a prompt —
  * ambiguity (the two candidates disagree) or a dead end (neither yields a
  * usable slug) is a structured error naming exactly one next_action.
@@ -827,7 +840,7 @@ async function rename(args) {
   }
 }
 
-// ─── delete (design D9) ─────────────────────────────────────────────────────
+// ─── delete ─────────────────────────────────────────────────────
 
 /** One non-repo-resource read, `null` when absent (including a clean 404), an entry when present or genuinely unverifiable. */
 async function checkResource(read, resourceName, countOf) {
@@ -1082,7 +1095,7 @@ async function policy(args) {
   }
 }
 
-// ─── mirror (design D4 — ONE flag-driven verb) ─────────────────────────────
+// ─── mirror (ONE flag-driven verb) ─────────────────────────────
 
 const MIRROR_VALUE_FLAGS = [...COMMON_VALUE_FLAGS, "--profile", "--region", "--endpoint"];
 
@@ -1177,7 +1190,7 @@ async function mirror(args) {
   return mirrorRead(target);
 }
 
-// ─── fsck (design D2/D3 — absorbs verify + mirror verify) ──────────────────
+// ─── fsck (verify the head chain + materialize refs) ──────────────────
 
 async function fsck(args) {
   const a = normalizeArgv(args);
@@ -1212,7 +1225,7 @@ async function fsck(args) {
   }
 }
 
-// ─── gc (design D2 — absorbs compact + prune) ──────────────────────────────
+// ─── gc (checkpoint + prune) ──────────────────────────────
 
 const GC_VALUE_FLAGS = [...COMMON_VALUE_FLAGS, "--intent-core", "--verifier-receipt"];
 
@@ -1260,9 +1273,8 @@ async function gc(args) {
     const nextActions = [];
     if (!prune.blocked_reason && prune.object_candidates.length > 0) {
       // Additive fields beyond the CLI's usual {type, command, why}: the
-      // external review's explicit ask (design D2 clause 5) — `gc` is never
-      // described as "exactly git gc," and its submit next_action must say
-      // so structurally, not just in prose.
+      // `gc` is never described as "exactly git gc," and its submit
+      // next_action must say so structurally, not just in prose.
       nextActions.push({
         type: "submit_gc",
         command: "run402 repos gc --submit --intent-core <core.json> --verifier-receipt <receipt.json>",
@@ -1296,7 +1308,7 @@ async function gc(args) {
   }
 }
 
-// ─── access (design D5/D10 — read-only; repair gated) ──────────────────────
+// ─── access (read-only; repair gated) ──────────────────────
 
 async function accessRead(args) {
   const a = normalizeArgv(args);
@@ -1308,8 +1320,15 @@ async function accessRead(args) {
     console.log(JSON.stringify(result, null, 2));
     await spillIfLarge(result.repo_id, "access", result);
     console.error(`${result.recipients.length} directory recipient(s), ${result.recipients.filter((r) => r.covered).length} covered on this repo.`);
+    if (result.this_keystore) {
+      console.error(`1 covering fingerprint is this machine's own keystore (the vault's writing principal, not in the org directory): ${result.this_keystore.fingerprint}`);
+    }
     if (result.unmatched_covered_fingerprints.length > 0) {
-      console.error(`${result.unmatched_covered_fingerprints.length} covering fingerprint(s) match no directory entry (orphaned/external): ${result.unmatched_covered_fingerprints.join(", ")}`);
+      console.error(`${result.unmatched_covered_fingerprints.length} covering fingerprint(s) match no directory entry or desired-state row (orphaned/external): ${result.unmatched_covered_fingerprints.join(", ")}`);
+    }
+    if (Array.isArray(result.stale_access) && result.stale_access.length > 0) {
+      const names = result.stale_access.map((s) => s.display_name ?? s.principal_id).join(", ");
+      console.error(`${result.stale_access.length} removed member(s) STILL decrypt this vault (not yet revocable — no epoch rotation in v0): ${names}`);
     }
     console.error(result.gap);
   } catch (err) {
@@ -1335,7 +1354,7 @@ async function access(args) {
   return accessRead(a);
 }
 
-// ─── recover (design D4 — kept, D10 confirms the name) ─────────────────────
+// ─── recover ─────────────────────
 
 async function recover(args) {
   const a = normalizeArgv(args);
@@ -1367,6 +1386,10 @@ async function recover(args) {
     if (result.data_loss_detected) {
       console.error(`DATA LOSS DETECTED: ${result.absences.filter((x) => x.adjudication === "unexplained_absence").length} object(s) are unexplained absences — see "absences" in the result above.`);
     }
+    if (result.layout === "bare") {
+      console.error(`layout: bare (no working files in ${outDir} — this is not a failed recovery)`);
+      for (const n of result.next_actions ?? []) console.error(`next: ${n.action} — ${n.command}`);
+    }
     printMirrorHonesty(result);
   } catch (err) {
     reportSdkError(err);

package/lib/rooms-context.mjs

@@ -73,9 +73,8 @@ export async function resolveRoom({ org, room, project } = {}) {
   }
 
   // 3. A room key without an org: the org resolves through the shared chain.
-  //    (`--room` alone used to be a hard error; it now works whenever the org
-  //    resolves, and fails with ORG_REQUIRED — naming every way to supply one —
-  //    when it does not.)
+  //    (`--room` alone works whenever the org resolves, and fails with
+  //    ORG_REQUIRED — naming every way to supply one — when it does not.)
   const bindingRoom = findBindingKey(process.cwd(), "room");
   const roomKey = room ?? bindingRoom?.value ?? null;
   if (roomKey) {

package/lib/rooms.mjs

@@ -2,12 +2,10 @@
  * `run402 rooms` — the coordination room itself: arriving, leaving, and who is
  * in it.
  *
- * The MESSAGES exchanged in a room are `run402 messages` (legible-cli-surface).
- * Four of this family's five verbs used to act on a message, which made the
- * container the noun and left the thing you handle without one.
+ * The MESSAGES exchanged in a room are `run402 messages` — a separate noun
+ * from the room itself.
  *
- * `who` is now `join`: it REGISTERS a presence, and an interrogative must not
- * name a write.
+ * `join` REGISTERS a presence, and an interrogative must not name a write.
  *
  * Gateway subsystem: add-agent-messaging (/orgs/v1/:org_id/rooms/:room_key/*).
  * Session presence cache: ./.run402/messaging.json (gitignore).
@@ -213,15 +211,14 @@ export async function run(sub, args) {
     }
     // `list` and `get` are NOT here, and this is deliberate rather than
     // missing: the ROUTES exist (agent-room-lifecycle) and the SDK exposes
-    // them as `rooms.list` / `rooms.get`. These two SPELLINGS were freed
-    // hours ago by the move of the message verbs, and a freed spelling stays
-    // dead for one major before anything reuses it (design D3b). Reissuing
-    // them now with room semantics would never fail — an agent holding
-    // `rooms list` would get a successful response containing different data
-    // and nothing would tell it the world moved.
-    // Retired here, and NOT aliased (design D3): each answers with its
-    // successor so one failed call teaches the new model, where an alias
-    // would teach the old one forever.
+    // them as `rooms.list` / `rooms.get`. These two SPELLINGS are reserved —
+    // a freed spelling stays dead for one major before anything reuses it.
+    // Reissuing them now with room semantics would never fail — an agent
+    // holding `rooms list` would get a successful response containing
+    // different data and nothing would tell it the world moved.
+    // Retired here, and NOT aliased: each answers with its successor so one
+    // failed call teaches the new model, where an alias would teach the old
+    // one forever.
     case "who":
       fail({
         code: "COMMAND_REMOVED",

package/lib/update-check.mjs

@@ -124,7 +124,7 @@ export async function refreshUpdateCheck({
   timeoutMs = UPDATE_CHECK_TIMEOUT_MS,
   registry = npmRegistryBase(env),
 } = {}) {
-  // Faithful (kychee-com/run402#561): a failed live check must never ERASE a
+  // Faithful: a failed live check must never ERASE a
   // previously known-good `latest` — reporting `latest: null` in its place
   // would be a confident lie ("nothing is known"), not an honest stale
   // estimate. Read what is already cached BEFORE attempting the network
@@ -276,13 +276,11 @@ export async function doctorUpdateCheck({
 
   let record = readUpdateCache({ path: cachePath });
 
-  // A real TTL (24h) that actually causes a refresh (kychee-com/run402#561
-  // — grok saw a THREE-minor-version, four-week-old cached "latest" with
-  // nothing ever having re-checked it). An explicit `--refresh` always
-  // checks live, same as before; now a MISSING or EXPIRED cache also gets
-  // exactly ONE bounded live attempt automatically, so a plain
-  // `run402 doctor` self-heals a stale cache instead of silently reporting
-  // a weeks-old value as if it were current. `refreshUpdateCheck` itself
+  // A real TTL (24h) that actually causes a refresh. An explicit `--refresh`
+  // always checks live; a MISSING or EXPIRED cache also gets exactly ONE
+  // bounded live attempt automatically, so a plain `run402 doctor` self-heals
+  // a stale cache instead of silently reporting a weeks-old value as if it
+  // were current. `refreshUpdateCheck` itself
   // never erases a previously known-good `latest` on failure (see its own
   // doc comment), so a failed attempt here degrades gracefully to the LAST
   // GOOD record — never to a bare unknown when something was already known.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "run402",
-  "version": "4.41.0",
+  "version": "4.42.0",
   "description": "CLI for Run402 — full-stack backend infrastructure for AI agents: Postgres, auth, storage, serverless functions and atomic deploys. Paid with x402/MPP. Includes $0.03 image generation.",
   "type": "module",
   "bin": {

package/sdk/dist/namespaces/admin.d.ts

@@ -344,7 +344,7 @@ export declare class Channels {
     revokeTelegram(bindingId: string): Promise<RevokeTelegramResult>;
 }
 /**
- * `r.admin.rules` — Telegram routing rules (design D4): one match (ANDed
+ * `r.admin.rules` — Telegram routing rules: one match (ANDed
  * dimensions; an omitted dimension is a wildcard) → one Telegram binding.
  * Rules govern the Telegram channel ONLY in v1 — email/webhook keep their
  * existing preference-toggle semantics untouched. Mutations require

package/sdk/dist/namespaces/admin.js

@@ -56,7 +56,7 @@ export class Channels {
     }
 }
 /**
- * `r.admin.rules` — Telegram routing rules (design D4): one match (ANDed
+ * `r.admin.rules` — Telegram routing rules: one match (ANDed
  * dimensions; an omitted dimension is a wildcard) → one Telegram binding.
  * Rules govern the Telegram channel ONLY in v1 — email/webhook keep their
  * existing preference-toggle semantics untouched. Mutations require

package/sdk/dist/namespaces/deploy.types.d.ts

@@ -798,7 +798,7 @@ export interface PlanResponse {
     /** v1.48 unified-apply: one entry per `assets.put` item, with the
      *  AssetRef envelope resolved at plan time (URLs are deterministic
      *  from `(project_public_id, key, content_sha256)` so they're
-     *  computable BEFORE commit per design D8). Agents that need URLs
+     *  computable BEFORE commit). Agents that need URLs
      *  pre-commit (for HTML injection between plan and commit) read
      *  these directly. */
     asset_entries?: AssetEntryPlanResult[];
@@ -1727,7 +1727,7 @@ export interface DeployResult {
  * shape without importing the Node entry.
  *
  * `byKey` and `manifest` MUST be constructed with `Object.create(null)`
- * (design D9) so attacker-controlled or filesystem-derived keys like
+ * so attacker-controlled or filesystem-derived keys like
  * `__proto__` / `constructor` / `toString` don't collide with prototype
  * properties.
  */

package/sdk/dist/namespaces/gitvault.crypto.d.ts

@@ -50,6 +50,16 @@ export declare const GITVAULT_ENVELOPE_INFO_LABEL: "r402s/v0/envelope";
  * paraphrase; the wording is a reviewed product commitment.
  */
 export declare const GITVAULT_TERMINAL_LOSS_STATEMENT: "whole-machine or whole-keystore loss is terminal for vault history until human envelopes ship";
+/**
+ * The protocol's durability sentence — the keystore-qualified half of the
+ * terminal-loss statement, reusable on its own. It is TRUE regardless of how
+ * many principals cover a vault (unlike {@link GITVAULT_TERMINAL_LOSS_STATEMENT},
+ * which is specifically the single-principal V0-A claim), so a caller that has
+ * locally proven a vault carries >= 2 covering recipients prints this sentence
+ * instead of the terminal-loss one — see `Gitvault.status()`'s `covering_recipients`
+ * field. Never paraphrase; the wording is a reviewed product commitment.
+ */
+export declare const GITVAULT_DURABILITY_STATEMENT: "The vault protects source history from host-side loss while a principal keystore survives.";
 /** Protocol §0 sentence in full, as `doctor`/`status` print it. */
 export declare const GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT: string;
 /**

package/sdk/dist/namespaces/gitvault.crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gitvault.crypto.d.ts","sourceRoot":"","sources":["../../src/namespaces/gitvault.crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAQH,OAAO,EAAE,UAAU,EAAE,UAAU,EAA4B,MAAM,wBAAwB,CAAC;AAG1F,OAAO,EAAE,WAAW,EAAqC,MAAM,YAAY,CAAC;AAG5E,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,qBAAqB,CAAC;AAI7B,6EAA6E;AAC7E,eAAO,MAAM,eAAe,EAAG,UAAmB,CAAC;AACnD,sCAAsC;AACtC,eAAO,MAAM,cAAc,EAAG,SAAkB,CAAC;AACjD,wDAAwD;AACxD,eAAO,MAAM,oBAAoB,EAAG,QAAiB,CAAC;AACtD,+DAA+D;AAC/D,eAAO,MAAM,yBAAyB,EAAG,CAAa,CAAC;AACvD,eAAO,MAAM,uBAAuB,EAAG,IAAa,CAAC;AACrD,iEAAiE;AACjE,eAAO,MAAM,4BAA4B,QAAoB,CAAC;AAC9D,gEAAgE;AAChE,eAAO,MAAM,2BAA2B,EAAG,kBAA2B,CAAC;AACvE,eAAO,MAAM,sBAAsB,EAAG,kBAA2B,CAAC;AAClE,mDAAmD;AACnD,eAAO,MAAM,4BAA4B,EAAG,mBAA4B,CAAC;AAEzE;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAC3C,+FAAwG,CAAC;AAE3G,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,QAI6B,CAAC;AAE7E;;;;;;GAMG;AACH,eAAO,MAAM,gDAAgD,EAC3D,kMAAsM,CAAC;AAEzM,oGAAoG;AACpG,eAAO,MAAM,iDAAiD,EAC5D,0LAA8L,CAAC;AAQjM,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AACnD,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,eAAO,MAAM,cAAc,QAAsB,CAAC;AAClD,eAAO,MAAM,cAAc,QAAsB,CAAC;AAClD,eAAO,MAAM,eAAe,QAAuB,CAAC;AACpD,eAAO,MAAM,0BAA0B,QAAyB,CAAC;AACjE,eAAO,MAAM,sBAAsB,QAA2B,CAAC;AAC/D,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,QAA0C,CAAC;AAC3E,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB,QAA8B,CAAC;AAC/D,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,QAAwB,CAAC;AACzD,eAAO,MAAM,qBAAqB,QACyE,CAAC;AAM5G,yGAAyG;AACzG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAO3D;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAU,GAAG,UAAU,CAKxE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,oHAAoH;AACpH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQ/D;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,IAAiB,GAAG,MAAM,CAEvE;AAID,iFAAiF;AACjF,wBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAM5C;AAED,+DAA+D;AAC/D,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,CAEtD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEnD;AAED,6GAA6G;AAC7G,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAItD;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAyBD,mEAAmE;AACnE,wBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAG9C;AAED,2CAA2C;AAC3C,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGhD;AA6BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAazD;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAM1F;AAID,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,UAAU,CAEpE;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAEtE;AAQD,oHAAoH;AACpH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAK7H;AAID,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAE7D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAO9G;AAED,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,WAAW,EAAE,kBAAkB,CAAA;CAAE,EAC9E,sBAAsB,EAAE,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,KAAK,CAAA;CAAE,EACjD,IAAI,EAAE,UAAU,GACf,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAG3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAW1G;AAED,oDAAoD;AACpD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,GAAG,MAAM,EAAE,OAAO,SAAiC,GAAG,IAAI,CAIpJ;AAID,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,UAAU,GAAG,MAAM,CAElE;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,YAAY,EAAE,UAAU,GAAG,MAAM,CAE9D;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,YAAY,EAAE,UAAU,GAAG,MAAM,CAE9D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,UAA4B,GAAG,sBAAsB,CAGjG;AAED,wBAAgB,yBAAyB,CAAC,UAAU,GAAE,UAA4B,GAAG,yBAAyB,CAG7G;AAID,0HAA0H;AAC1H,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAElI;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAEvJ;AAED,0HAA0H;AAC1H,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAEnG;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAExH;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAE7E;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAM3E;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAGzE;AAED,0CAA0C;AAC1C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAG/E;AAID,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,CAE9F;AAED,+HAA+H;AAC/H,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,6BAA6B,EAAE,MAAM,GAAG,IAAI,EAC5C,uBAAuB,EAAE,MAAM,GAC9B,UAAU,CAQZ;AAID,gEAAgE;AAChE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAEnI;AAED,MAAM,WAAW,sBAAsB;IACrC,gEAAgE;IAChE,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,UAAU,CAAC;IACtB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,mBAAmB,CAW5E;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,uJAAuJ;IACvJ,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,UAAU,CAanE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,SAAM,GAAG,UAAU,CAWjH;AAMD,iIAAiI;AACjI,wBAAgB,iBAAiB,IAAI,WAAW,CAG/C;AAQD,yIAAyI;AACzI,wBAAgB,YAAY,CAAC,qBAAqB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAE7F;AAED,6GAA6G;AAC7G,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,GAAG,mBAAmB,CAE5G;AAED,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,EAAE,UAAU,CAAC;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,0HAA0H;IAC1H,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,+DAA+D;AAC/D,wBAAsB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAAC,CAOzG;AAED,MAAM,WAAW,qBAAqB;IACpC,qBAAqB,EAAE,UAAU,CAAC;IAClC,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;IAChB,EAAE,EAAE,UAAU,CAAC;CAChB;AAED,mGAAmG;AACnG,wBAAsB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CAShF;AAED,MAAM,WAAW,4BAA4B;IAC3C,qDAAqD;IACrD,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,oBAAoB,EAAE,UAAU,CAAC;IACjC,iFAAiF;IACjF,MAAM,EAAE,sBAAsB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,2HAA2H;AAC3H,wBAAsB,eAAe,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAmC7G;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,uHAAuH;IACvH,SAAS,EAAE,yBAAyB,CAAC;IACrC,iGAAiG;IACjG,iBAAiB,EAAE,UAAU,GAAG,MAAM,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,UAAU,CAAC,CAmB9F;AAID,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,sBAAsB,CAAC;IACxC,6BAA6B,EAAE,UAAU,CAAC;IAC1C,gBAAgB,EAAE,0BAA0B,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,GAAG,oBAAoB,CAmBxF;AAED,sHAAsH;AACtH,MAAM,MAAM,6BAA6B,GACrC,gBAAgB,GAChB,gBAAgB,GAChB,gCAAgC,GAChC,eAAe,GACf,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,uCAAuC,GACvC,4BAA4B,CAAC;AAEjC;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,mBAAmB,GAAG,6BAA6B,EAAE,CAmB5I;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,sBAAsB,CAAC;IACxC,6BAA6B,EAAE,UAAU,CAAC;CAC3C;AAED,uGAAuG;AACvG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iCAAiC,GAAG,uBAAuB,CAatG;AAED,MAAM,MAAM,8BAA8B,GACtC,WAAW,GACX,gBAAgB,GAChB,SAAS,GACT,QAAQ,GACR,YAAY,GACZ,6BAA6B,GAC7B,gCAAgC,CAAC;AAErC;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,oBAAoB,GAAG,8BAA8B,EAAE,CAWtI;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,CAAC;IAAC,8BAA8B,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3J,gBAAgB,CAAC,EAAE,UAAU,GAAG,MAAM,GACrC,MAAM,EAAE,CAeV;AAED,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC"}
+{"version":3,"file":"gitvault.crypto.d.ts","sourceRoot":"","sources":["../../src/namespaces/gitvault.crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAQH,OAAO,EAAE,UAAU,EAAE,UAAU,EAA4B,MAAM,wBAAwB,CAAC;AAG1F,OAAO,EAAE,WAAW,EAAqC,MAAM,YAAY,CAAC;AAG5E,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,qBAAqB,CAAC;AAI7B,6EAA6E;AAC7E,eAAO,MAAM,eAAe,EAAG,UAAmB,CAAC;AACnD,sCAAsC;AACtC,eAAO,MAAM,cAAc,EAAG,SAAkB,CAAC;AACjD,wDAAwD;AACxD,eAAO,MAAM,oBAAoB,EAAG,QAAiB,CAAC;AACtD,+DAA+D;AAC/D,eAAO,MAAM,yBAAyB,EAAG,CAAa,CAAC;AACvD,eAAO,MAAM,uBAAuB,EAAG,IAAa,CAAC;AACrD,iEAAiE;AACjE,eAAO,MAAM,4BAA4B,QAAoB,CAAC;AAC9D,gEAAgE;AAChE,eAAO,MAAM,2BAA2B,EAAG,kBAA2B,CAAC;AACvE,eAAO,MAAM,sBAAsB,EAAG,kBAA2B,CAAC;AAClE,mDAAmD;AACnD,eAAO,MAAM,4BAA4B,EAAG,mBAA4B,CAAC;AAEzE;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,EAC3C,+FAAwG,CAAC;AAE3G;;;;;;;;GAQG;AACH,eAAO,MAAM,6BAA6B,EACxC,4FAAqG,CAAC;AAExG,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,QAI6B,CAAC;AAE7E;;;;;;GAMG;AACH,eAAO,MAAM,gDAAgD,EAC3D,kMAAsM,CAAC;AAEzM,oGAAoG;AACpG,eAAO,MAAM,iDAAiD,EAC5D,0LAA8L,CAAC;AAQjM,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AACnD,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAClD,eAAO,MAAM,cAAc,QAAsB,CAAC;AAClD,eAAO,MAAM,cAAc,QAAsB,CAAC;AAClD,eAAO,MAAM,eAAe,QAAuB,CAAC;AACpD,eAAO,MAAM,0BAA0B,QAAyB,CAAC;AACjE,eAAO,MAAM,sBAAsB,QAA2B,CAAC;AAC/D,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,QAA0C,CAAC;AAC3E,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB,QAA8B,CAAC;AAC/D,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,QAAwB,CAAC;AACzD,eAAO,MAAM,qBAAqB,QACyE,CAAC;AAM5G,yGAAyG;AACzG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAO3D;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAU,GAAG,UAAU,CAKxE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,oHAAoH;AACpH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQ/D;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,IAAiB,GAAG,MAAM,CAEvE;AAID,iFAAiF;AACjF,wBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAM5C;AAED,+DAA+D;AAC/D,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,CAEtD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEnD;AAED,6GAA6G;AAC7G,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAItD;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAyBD,mEAAmE;AACnE,wBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAG9C;AAED,2CAA2C;AAC3C,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGhD;AA6BD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAazD;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,GAAG,IAAI,CAM1F;AAID,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,GAAG,UAAU,CAEpE;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAEtE;AAQD,oHAAoH;AACpH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAK7H;AAID,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAE7D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,CAE7E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAO9G;AAED,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,WAAW,EAAE,kBAAkB,CAAA;CAAE,EAC9E,sBAAsB,EAAE,CAAC,GAAG;IAAE,SAAS,CAAC,EAAE,KAAK,CAAA;CAAE,EACjD,IAAI,EAAE,UAAU,GACf,CAAC,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAG3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAW1G;AAED,oDAAoD;AACpD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,GAAG,MAAM,EAAE,OAAO,SAAiC,GAAG,IAAI,CAIpJ;AAID,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,UAAU,GAAG,MAAM,CAElE;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,YAAY,EAAE,UAAU,GAAG,MAAM,CAE9D;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,YAAY,EAAE,UAAU,GAAG,MAAM,CAE9D;AAED,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,UAA4B,GAAG,sBAAsB,CAGjG;AAED,wBAAgB,yBAAyB,CAAC,UAAU,GAAE,UAA4B,GAAG,yBAAyB,CAG7G;AAID,0HAA0H;AAC1H,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAElI;AAED,8DAA8D;AAC9D,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAEvJ;AAED,0HAA0H;AAC1H,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAEnG;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,UAAU,CAExH;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAE7E;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAM3E;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,OAAO,CAGzE;AAED,0CAA0C;AAC1C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAG/E;AAID,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,CAE9F;AAED,+HAA+H;AAC/H,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,EACtB,6BAA6B,EAAE,MAAM,GAAG,IAAI,EAC5C,uBAAuB,EAAE,MAAM,GAC9B,UAAU,CAQZ;AAID,gEAAgE;AAChE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAEnI;AAED,MAAM,WAAW,sBAAsB;IACrC,gEAAgE;IAChE,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,UAAU,CAAC;IACtB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,mBAAmB,CAW5E;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,CAAC;IAClB,uJAAuJ;IACvJ,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,UAAU,CAanE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,SAAM,GAAG,UAAU,CAWjH;AAMD,iIAAiI;AACjI,wBAAgB,iBAAiB,IAAI,WAAW,CAG/C;AAQD,yIAAyI;AACzI,wBAAgB,YAAY,CAAC,qBAAqB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,CAE7F;AAED,6GAA6G;AAC7G,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,GAAG,mBAAmB,CAE5G;AAED,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,EAAE,UAAU,CAAC;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,0HAA0H;IAC1H,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,+DAA+D;AAC/D,wBAAsB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAAC,CAOzG;AAED,MAAM,WAAW,qBAAqB;IACpC,qBAAqB,EAAE,UAAU,CAAC;IAClC,GAAG,EAAE,UAAU,CAAC;IAChB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,UAAU,CAAC;IAChB,EAAE,EAAE,UAAU,CAAC;CAChB;AAED,mGAAmG;AACnG,wBAAsB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CAShF;AAED,MAAM,WAAW,4BAA4B;IAC3C,qDAAqD;IACrD,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,oBAAoB,EAAE,UAAU,CAAC;IACjC,iFAAiF;IACjF,MAAM,EAAE,sBAAsB,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,2HAA2H;AAC3H,wBAAsB,eAAe,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAmC7G;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,uHAAuH;IACvH,SAAS,EAAE,yBAAyB,CAAC;IACrC,iGAAiG;IACjG,iBAAiB,EAAE,UAAU,GAAG,MAAM,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,UAAU,CAAC,CAmB9F;AAID,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,sBAAsB,CAAC;IACxC,6BAA6B,EAAE,UAAU,CAAC;IAC1C,gBAAgB,EAAE,0BAA0B,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,yBAAyB,GAAG,oBAAoB,CAmBxF;AAED,sHAAsH;AACtH,MAAM,MAAM,6BAA6B,GACrC,gBAAgB,GAChB,gBAAgB,GAChB,gCAAgC,GAChC,eAAe,GACf,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,uCAAuC,GACvC,4BAA4B,CAAC;AAEjC;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,EAAE,cAAc,CAAC,EAAE,mBAAmB,GAAG,6BAA6B,EAAE,CAmB5I;AAED,MAAM,WAAW,iCAAiC;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,sBAAsB,CAAC;IACxC,6BAA6B,EAAE,UAAU,CAAC;CAC3C;AAED,uGAAuG;AACvG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iCAAiC,GAAG,uBAAuB,CAatG;AAED,MAAM,MAAM,8BAA8B,GACtC,WAAW,GACX,gBAAgB,GAChB,SAAS,GACT,QAAQ,GACR,YAAY,GACZ,6BAA6B,GAC7B,gCAAgC,CAAC;AAErC;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,oBAAoB,GAAG,8BAA8B,EAAE,CAWtI;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,kBAAkB,EAC9B,QAAQ,EAAE;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,2BAA2B,EAAE,MAAM,CAAC;IAAC,8BAA8B,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3J,gBAAgB,CAAC,EAAE,UAAU,GAAG,MAAM,GACrC,MAAM,EAAE,CAeV;AAED,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC"}

package/sdk/dist/namespaces/gitvault.crypto.js

@@ -60,9 +60,19 @@ export const GITVAULT_ENVELOPE_INFO_LABEL = "r402s/v0/envelope";
  * paraphrase; the wording is a reviewed product commitment.
  */
 export const GITVAULT_TERMINAL_LOSS_STATEMENT = "whole-machine or whole-keystore loss is terminal for vault history until human envelopes ship";
+/**
+ * The protocol's durability sentence — the keystore-qualified half of the
+ * terminal-loss statement, reusable on its own. It is TRUE regardless of how
+ * many principals cover a vault (unlike {@link GITVAULT_TERMINAL_LOSS_STATEMENT},
+ * which is specifically the single-principal V0-A claim), so a caller that has
+ * locally proven a vault carries >= 2 covering recipients prints this sentence
+ * instead of the terminal-loss one — see `Gitvault.status()`'s `covering_recipients`
+ * field. Never paraphrase; the wording is a reviewed product commitment.
+ */
+export const GITVAULT_DURABILITY_STATEMENT = "The vault protects source history from host-side loss while a principal keystore survives.";
 /** Protocol §0 sentence in full, as `doctor`/`status` print it. */
 export const GITVAULT_TERMINAL_LOSS_DOCTOR_TEXT = "In V0-A, whole-machine or whole-keystore loss is terminal for vault history (VAULT_UNRECOVERABLE) until human envelopes ship. " +
-    "The vault protects source history from host-side loss while a principal keystore survives. " +
+    `${GITVAULT_DURABILITY_STATEMENT} ` +
     "The remaining paths are the platform's custodial restore of deployed artifacts (the deploy lane's CAS) and org/infra recovery; " +
     "a recovery receipt authenticates a genesis — it cannot decrypt anything.";
 /**