Agent-readable install

Tell your AI to read this page, then wire the vault.

This is the simple path for full repo pushes, Cloudflare R2 multipart streaming, SkyeSecure control packs, owner unlimited access, and customer repo plans.

Open repo lane

Use this prompt

Agent instruction block

Read this SkyeVault-Drop AI Install page.
Use the repo's existing FS27/SkyGate/Free99 owner auth lane.
Do not invent app-specific passwords or expose provider keys in the UI.
Run the local checks, then wire Cloudflare R2 streaming full repo pushes.
Use npm run vault:repo:full:dry-run before any real push.
Use npm run vault:repo:full for the encrypted artifact plus SkyeSecure control pack.
Keep heavy archives and temporary artifacts in /tmp, not the repo workspace.
Return the receipt paths, secret-pack path, restore steps, and any failed checks.

Install commands

Local setup

cd /workspaces/MetrAIyux-0S npm install cd SkyeVault-Drop && npm install npm run check npm run cloudflare:check cd .. npm run vault:repo:full:dry-run -- --max-gb=100 --out-dir=/tmp/skyevault-full-repo-dry-run npm run vault:repo:full -- --max-gb=100 --out-dir=/tmp/skyevault-full-repo
Secrets Names only

Required env names: CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID, R2_ACCOUNT_ID, R2_ACCESS_KEY_ID, R2_SECRET_ACCESS_KEY, R2_BUCKET, R2_CONFIG_PREFIX, SKYEVAULT_PORTAL_KEY.

Auth Shared gate

Owner access must accept Authorization, x-admin-token, x-free99-admin-code, x-free99-gate-session, x-skye-gate-session, cookies, and the owner admin session helper.

Plans Metered repo pushes

Owner/admin/free99 is unlimited. Customer plans include repo-50gb and repo-100gb with push-window counters and declared-size enforcement.

Outputs Receipts and packs

Real runs produce SKYDRIVE_UPLOAD_RECEIPT.json, RESTORE.md, UNLOCK_CODES.txt, and a SkyeSecure .skyesecrets control pack with local unlock codes.

API lane

Existing endpoints the agent should use

  • /api/upload-session starts a receipt-backed R2 session.
  • /api/upload-part-url mints batched presigned URLs for streaming multipart uploads.
  • /api/upload-complete finalizes the R2 upload and ledger receipt.
  • /api/client-vault returns protected client recovery entries.

Restore

What a dev gets back

  • Artifact receipt and R2 object identity for the encrypted full repo stream.
  • Secret-pack receipt for the small SkyeSecure control pack.
  • Local-only unlock material for the admin, never printed into a public page.
  • Restore instructions for fetching, decrypting, decompressing, and extracting into a clean workspace.