chore: update package repository coordinate

CONTRIBUTING.md

@@ -19,7 +19,7 @@ Prerequisites are managed via [mise](https://mise.jdx.dev/) —
 task, helmfile, wasm-pack, etc.) at pinned versions.
 
 ```bash
-git clone git@github.com:akua-dev/akua.git
+git clone git@github.com:akua-dev/akuapkg.git
 cd akua
 mise install
 

Cargo.toml

@@ -15,7 +15,7 @@ members = [
 version = "0.8.20"
 edition = "2021"
 license = "Apache-2.0"
-repository = "https://github.com/akua-dev/akua"
+repository = "https://github.com/akua-dev/akuapkg"
 authors = ["CNAP Tech <hello@cnap.tech>"]
 
 [workspace.dependencies]

README.md

@@ -16,7 +16,7 @@
 
   <!-- Badges -->
   <p>
-    <a href="https://github.com/akua-dev/akua/releases/latest"><img alt="Release" src="https://img.shields.io/github/v/release/akua-dev/akua?label=release&style=flat-square"></a>
+    <a href="https://github.com/akua-dev/akuapkg/releases/latest"><img alt="Release" src="https://img.shields.io/github/v/release/akua-dev/akuapkg?label=release&style=flat-square"></a>
     <a href="https://www.npmjs.com/package/@akua-dev/sdk"><img alt="npm" src="https://img.shields.io/npm/v/%40akua-dev%2Fsdk?style=flat-square&label=%40akua-dev%2Fsdk"></a>
     <a href="./LICENSE"><img alt="License" src="https://img.shields.io/badge/license-Apache--2.0-blue?style=flat-square"></a>
   </p>
@@ -127,18 +127,18 @@ curl -fsSL https://cli.akua.dev/install | sh
 irm https://cli.akua.dev/install.ps1 | iex
 
 # From source
-cargo install --git https://github.com/akua-dev/akua akuapkg-cli
+cargo install --git https://github.com/akua-dev/akuapkg akuapkg-cli
 ```
 
 ```sh
 # TypeScript SDK — in-process via napi, no `akua` binary on PATH
 bun add @akua-dev/sdk
 
 # Agent skills (universal — works across 25+ agents)
-npx skills install github:akua-dev/akua/skills
+npx skills install github:akua-dev/akuapkg/skills
 ```
 
-Prebuilt binaries: [Releases](https://github.com/akua-dev/akua/releases). Container image: `ghcr.io/akua-dev/akua`. Agent-specific setup: [`docs/agent-usage.md`](docs/agent-usage.md).
+Prebuilt binaries: [Releases](https://github.com/akua-dev/akuapkg/releases). Container image: `ghcr.io/akua-dev/akuapkg`. Agent-specific setup: [`docs/agent-usage.md`](docs/agent-usage.md).
 
 ## Documentation
 

SECURITY.md

@@ -139,6 +139,6 @@ retained as an escape hatch; it's safe only for trusted packages.
 ## Reporting
 
 Please report vulnerabilities privately via GitHub Security Advisories
-at https://github.com/akua-dev/akua/security/advisories/new.
+at https://github.com/akua-dev/akuapkg/security/advisories/new.
 Fixes are prioritized ahead of feature work; we'll coordinate
 disclosure timing with you.

crates/akua-napi/loader.js

@@ -14,7 +14,7 @@
 // Why a separate file: index.js is regenerated on every `napi build`,
 // so any setup we'd inline there gets clobbered. Keeping the env-var
 // plumbing in loader.js makes it survive regen + leaves the auto-gen
-// machinery untouched. See akua-dev/akua#482.
+// machinery untouched. See akua-dev/akuapkg#482.
 
 'use strict';
 

crates/akua-napi/npm/darwin-arm64/package.json

@@ -24,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
   "os": [
     "darwin"

crates/akua-napi/npm/darwin-x64/package.json

@@ -24,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
   "os": [
     "darwin"

crates/akua-napi/npm/linux-arm64-gnu/package.json

@@ -24,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
   "os": [
     "linux"

crates/akua-napi/npm/linux-arm64-musl/package.json

@@ -24,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
   "os": [
     "linux"

crates/akua-napi/npm/linux-x64-gnu/package.json

@@ -24,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
   "os": [
     "linux"

crates/akua-napi/npm/linux-x64-musl/package.json

@@ -24,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
   "os": [
     "linux"

crates/akua-napi/npm/win32-x64-msvc/package.json

@@ -24,7 +24,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
   "os": [
     "win32"

crates/akua-napi/package.json

@@ -7,7 +7,7 @@
 	"license": "Apache-2.0",
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/akua-dev/akua.git"
+		"url": "git+https://github.com/akua-dev/akuapkg.git"
 	},
 	"engines": {
 		"node": ">= 22"

crates/akua-native-engines-npm/package.json

@@ -5,7 +5,7 @@
 	"license": "Apache-2.0",
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/akua-dev/akua.git"
+		"url": "git+https://github.com/akua-dev/akuapkg.git"
 	},
 	"main": "index.js",
 	"files": [

crates/akuapkg-cli/Cargo.toml

@@ -37,7 +37,7 @@ precompile-engines = ["akua-core/precompile-engines"]
 # `embed-engines` (default on): include_bytes!() the helm + kustomize
 # engine wasm into the binary. Disable for the napi npm distribution
 # where the engines ship via `@akua-dev/native-engines` and the
-# loader points at them via AKUA_NATIVE_ENGINES_DIR. See akua-dev/akua#482.
+# loader points at them via AKUA_NATIVE_ENGINES_DIR. See akua-dev/akuapkg#482.
 embed-engines = ["akua-core/embed-engines"]
 # OpenTelemetry export. Default on; activates only when the runtime sees
 # OTEL_EXPORTER_OTLP_ENDPOINT (or OTEL_EXPORTER_OTLP_TRACES_ENDPOINT). Off

crates/helm-engine-wasm/Cargo.toml

@@ -21,7 +21,7 @@ authors.workspace = true
 # helm-engine.{cwasm|wasm} file. Set OFF on the napi-rs build so the
 # 7 per-platform `@akua-dev/native-*` packages don't each duplicate
 # the 73 MB helm wasm; the bytes ship once via
-# `@akua-dev/native-engines`. See akua-dev/akua#482.
+# `@akua-dev/native-engines`. See akua-dev/akuapkg#482.
 [features]
 default = ["precompile", "embed-engines"]
 precompile = []

crates/kustomize-engine-wasm/Cargo.toml

@@ -15,7 +15,7 @@ authors.workspace = true
 # directly. With OFF, the binary carries no bytes; consumer points
 # `AKUA_NATIVE_ENGINES_DIR` at a directory containing the
 # kustomize-engine.{cwasm|wasm} file. Mirrors helm-engine-wasm.
-# See akua-dev/akua#482.
+# See akua-dev/akuapkg#482.
 [features]
 default = ["precompile", "embed-engines"]
 precompile = []

docs/agent-usage.md

@@ -60,7 +60,7 @@ cp -r path/to/akua/skills/* ~/.claude/skills/
 Install via the Codex skills manager:
 
 ```sh
-codex skills install github:akua-dev/akua/skills
+codex skills install github:akua-dev/akuapkg/skills
 ```
 
 ### Cursor
@@ -84,15 +84,15 @@ gemini extensions install @akua/skills
 All support the open [Agent Skills Specification](https://agentskills.io). Any of:
 
 - Symlink `skills/` into the agent's expected location
-- Use `npx skills install github:akua-dev/akua/skills`
+- Use `npx skills install github:akua-dev/akuapkg/skills`
 - Follow each agent's skill-installation instructions (linked from [agentskills.io/overview](https://agentskills.io/))
 
 ### Universal: `npx skills`
 
 The [Vercel Labs skills manager](https://github.com/vercel-labs/skills) works across all Agent Skills compatible agents:
 
 ```sh
-npx skills install github:akua-dev/akua/skills
+npx skills install github:akua-dev/akuapkg/skills
 npx skills list
 npx skills remove akua-*
 ```

docs/releasing.md

@@ -39,7 +39,7 @@ request a GitHub OIDC token, but it cannot create or repair the trust relationsh
 An npm package administrator must confirm the following identity on all ten packages
 before any recovery dispatch:
 
-- GitHub owner/repository: `akua-dev/akua`
+- GitHub owner/repository: `akua-dev/akuapkg`
 - Workflow filename: `release-publish.yml`
 - Environment: none (leave the optional npm Environment field empty)
 - Allowed action: `npm publish`
@@ -60,7 +60,7 @@ The affected packages are:
 Change each package under npm package settings → Trusted Publisher. Do not create,
 request, or pass an npm token: the workflow has `id-token: write`, uses GitHub-hosted
 runners, and deliberately has no `NODE_AUTH_TOKEN`. Each package manifest also uses
-the exact repository URL `git+https://github.com/akua-dev/akua.git`, as required for
+the exact repository URL `git+https://github.com/akua-dev/akuapkg.git`, as required for
 trusted publishing.
 
 ## Recovering the partial v0.8.25 release
@@ -86,12 +86,12 @@ current `main` commit, and an npm administrator has confirmed the
 trusted-publisher identity above for all ten packages:
 
 ```sh
-reviewed_workflow_commit=$(gh pr view 69 --repo akua-dev/akua --json mergeCommit --jq '.mergeCommit.oid')
-main_commit=$(gh api repos/akua-dev/akua/commits/main --jq '.sha')
+reviewed_workflow_commit=$(gh pr view 69 --repo akua-dev/akuapkg --json mergeCommit --jq '.mergeCommit.oid')
+main_commit=$(gh api repos/akua-dev/akuapkg/commits/main --jq '.sha')
 test "$main_commit" = "$reviewed_workflow_commit"
 
 gh workflow run release.yml \
-  --repo akua-dev/akua \
+  --repo akua-dev/akuapkg \
   --ref main \
   -f tag=v0.8.25 \
   -f expected-source-commit=6452eb662445d2ad7c108128f93b9c55138729bb \
@@ -100,6 +100,6 @@ gh workflow run release.yml \
 ```
 
 That single deliberate dispatch rebuilds from the immutable tag, verifies the existing
-GitHub Release without changing any asset bytes, publishes `ghcr.io/akua-dev/akua`,
+GitHub Release without changing any asset bytes, publishes `ghcr.io/akua-dev/akuapkg`,
 and then dispatches the idempotent npm publish lane from that run's artifacts. It has
 no Homebrew side effects. There are no automatic recovery retries.

packages/sdk/README.md

@@ -1,6 +1,6 @@
 # @akua-dev/sdk
 
-TypeScript SDK for [akua](https://github.com/akua-dev/akua). Every verb runs in-process via a bundled native addon (napi-rs) — same `akua-core` the CLI uses, no `akua` binary on `$PATH` required.
+TypeScript SDK for [Akuapkg](https://github.com/akua-dev/akuapkg). Every verb runs in-process via a bundled native addon (napi-rs) — same `akua-core` the CLI uses, no `akuapkg` binary on `$PATH` required.
 
 ## Install
 

packages/sdk/package.json

@@ -5,9 +5,9 @@
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/akua-dev/akua.git"
+    "url": "git+https://github.com/akua-dev/akuapkg.git"
   },
-  "homepage": "https://github.com/akua-dev/akua#readme",
+  "homepage": "https://github.com/akua-dev/akuapkg#readme",
   "type": "module",
   "main": "./dist/mod.js",
   "types": "./dist/mod.d.ts",

packages/sdk/src/mod.ts

@@ -461,7 +461,7 @@ export class Akua {
 	 *
 	 * Field-level docstrings become `description`; `@ui(...)` decorators
 	 * become OpenAPI-3.1-compliant `x-ui` extensions. See
-	 * [`docs/cli.md`](https://github.com/akua-dev/akua/blob/main/docs/cli.md#akua-export)
+	 * [`docs/cli.md`](https://github.com/akua-dev/akuapkg/blob/main/docs/cli.md#akuapkg-export)
 	 * for the full schema contract.
 	 */
 	async export(opts: ExportOptions = {}): Promise<Record<string, unknown>> {

scripts/aur/akuapkg-bin/PKGBUILD

@@ -21,14 +21,14 @@ pkgver=0.1.0
 pkgrel=1
 pkgdesc="Cloud-native package build, transform, and preview toolkit"
 arch=('x86_64' 'aarch64')
-url="https://github.com/akua-dev/akua"
+url="https://github.com/akua-dev/akuapkg"
 license=('Apache-2.0')
 provides=('akuapkg')
 conflicts=('akuapkg')
 
 # Per-arch sources — each tag publishes both amd64 and arm64 tarballs.
-source_x86_64=("https://github.com/akua-dev/akua/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-x86_64-unknown-linux-gnu.tar.gz")
-source_aarch64=("https://github.com/akua-dev/akua/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-aarch64-unknown-linux-gnu.tar.gz")
+source_x86_64=("https://github.com/akua-dev/akuapkg/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-x86_64-unknown-linux-gnu.tar.gz")
+source_aarch64=("https://github.com/akua-dev/akuapkg/releases/download/v${pkgver}/${_pkgname}-v${pkgver}-aarch64-unknown-linux-gnu.tar.gz")
 
 # SHA256 checksums — bump alongside pkgver. The release workflow
 # writes each tarball's sha256 next to it as `<file>.tar.gz.sha256`;

scripts/check-release-workflows.sh

@@ -320,7 +320,7 @@ for manifest in \
 	crates/akua-napi/package.json \
 	crates/akua-napi/npm/*/package.json \
 	packages/sdk/package.json; do
-	if [[ "$(jq -r '.repository.url' "$manifest")" != "git+https://github.com/akua-dev/akua.git" ]]; then
+	if [[ "$(jq -r '.repository.url' "$manifest")" != "git+https://github.com/akua-dev/akuapkg.git" ]]; then
 		echo "ERROR: $manifest has stale npm repository provenance" >&2
 		exit 1
 	fi
@@ -338,7 +338,7 @@ assert_job_contains ".github/workflows/release.yml" \
 
 # The external trusted-publisher identity and the deliberately gated recovery
 # command are authoritative release contract, not tribal knowledge.
-assert_file_contains "docs/releasing.md" "akua-dev/akua"
+assert_file_contains "docs/releasing.md" "akua-dev/akuapkg"
 assert_file_contains "docs/releasing.md" "release-publish.yml"
 assert_file_contains "docs/releasing.md" "Environment: none"
 assert_file_contains "docs/releasing.md" "--ref main"

scripts/gen-error-pages.ts

@@ -128,7 +128,7 @@ function renderCodePage(
 
 	const bodyHtml = richMarkdown
 		? renderMarkdown(richMarkdown)
-		: `<h2>What happened</h2>${summaryHtml}<h2>How to fix it</h2><p>This error doesn't have an extended remediation guide yet — track <a href="https://github.com/akua-dev/akua/issues">issues on GitHub</a> or open one with your <code>--json</code> output if the message above wasn't enough.</p>`;
+		: `<h2>What happened</h2>${summaryHtml}<h2>How to fix it</h2><p>This error doesn't have an extended remediation guide yet — track <a href="https://github.com/akua-dev/akuapkg/issues">issues on GitHub</a> or open one with your <code>--json</code> output if the message above wasn't enough.</p>`;
 
 	const inner = `
 <header>

scripts/gen-example-pages.ts

@@ -124,7 +124,7 @@ ${readmeHtml}
 ${packageKBlock}
 ${renderedBlock}
 <p style="margin-top: 32px; color: var(--muted); font-size: 14px;">
-  Source: <a href="https://github.com/akua-dev/akua/tree/main/examples/${escape(example.slug)}">examples/${escape(example.slug)}/</a>
+  Source: <a href="https://github.com/akua-dev/akuapkg/tree/main/examples/${escape(example.slug)}">examples/${escape(example.slug)}/</a>
 </p>
 `;
 

scripts/gen-landing.ts

@@ -33,7 +33,7 @@ const body = `
 <pre><code><span style="color: var(--accent); user-select: none;">&gt;</span> irm https://cli.akua.dev/install.ps1 | iex</code></pre>
 
 <h2>From source</h2>
-<pre><code><span style="color: var(--accent); user-select: none;">$</span> cargo install --git https://github.com/akua-dev/akua akuapkg-cli</code></pre>
+<pre><code><span style="color: var(--accent); user-select: none;">$</span> cargo install --git https://github.com/akua-dev/akuapkg akuapkg-cli</code></pre>
 
 <h2>SDK</h2>
 <pre><code><span style="color: var(--accent); user-select: none;">$</span> npm install @akua-dev/sdk</code></pre>
@@ -47,8 +47,8 @@ const body = `
   <li><a href="/concepts/">Concepts</a></li>
   <li><a href="/examples/">Examples</a></li>
   <li><a href="/errors/">Errors</a></li>
-  <li><a href="https://github.com/akua-dev/akua">GitHub</a></li>
-  <li><a href="https://github.com/akua-dev/akua/releases">Releases</a></li>
+  <li><a href="https://github.com/akua-dev/akuapkg">GitHub</a></li>
+  <li><a href="https://github.com/akua-dev/akuapkg/releases">Releases</a></li>
 </ul>
 
 <p style="color: var(--muted); font-size: 13px; margin-top: 28px;">

scripts/gen-start-page.ts

@@ -22,7 +22,7 @@ const md = `
 $ curl -fsSL https://cli.akua.dev/install | sh
 \`\`\`
 
-Or grab a pinned binary from [Releases](https://github.com/akua-dev/akua/releases). Windows: \`irm https://cli.akua.dev/install.ps1 | iex\`.
+Or grab a pinned binary from [Releases](https://github.com/akua-dev/akuapkg/releases). Windows: \`irm https://cli.akua.dev/install.ps1 | iex\`.
 
 Verify the install:
 

scripts/install.ps1

@@ -28,7 +28,7 @@ $triple = switch ($arch) {
     'x86_64' { 'x86_64-pc-windows-msvc' }
     # aarch64-pc-windows-msvc builds aren't shipped yet. Users on ARM64
     # Windows get a clear error rather than a silently-broken binary.
-    'ARM64' { Die "ARM64 Windows not yet supported. File an issue at https://github.com/akua-dev/akua/issues" }
+    'ARM64' { Die "ARM64 Windows not yet supported. File an issue at https://github.com/akua-dev/akuapkg/issues" }
     default { Die "unsupported Windows arch: $arch" }
 }
 
@@ -50,7 +50,7 @@ function Resolve-Version($v) {
     # -MaximumRedirection 0 means: stop at the first redirect and read
     # its Location header, rather than actually following it.
     $resp = try {
-        Invoke-WebRequest -Uri 'https://github.com/akua-dev/akua/releases/latest' `
+        Invoke-WebRequest -Uri 'https://github.com/akua-dev/akuapkg/releases/latest' `
             -MaximumRedirection 0 -ErrorAction SilentlyContinue
     } catch {
         $_.Exception.Response
@@ -69,7 +69,7 @@ $version = Resolve-Version $requestedVersion
 
 $base = if ($env:AKUAPKG_DOWNLOAD_BASE) { $env:AKUAPKG_DOWNLOAD_BASE } else { 'https://github.com' }
 $asset = "akuapkg-$version-$triple.zip"
-$url = "$base/akua-dev/akua/releases/download/$version/$asset"
+$url = "$base/akua-dev/akuapkg/releases/download/$version/$asset"
 
 $installRoot = if ($env:AKUAPKG_INSTALL) { $env:AKUAPKG_INSTALL } else { Join-Path $env:USERPROFILE '.akuapkg' }
 $binDir = Join-Path $installRoot 'bin'