capy-bearer/docs/work/api-surface-2.md

Capy API surface removals

Objective and invariants

Remove redundant or misleading Capy APIs without aliases or compatibility shims.

• Keep safe_name. Remove ascii_safe_name and its duplicate host operation.
• Replace every component_exists call with length(component_resolve(name)) > 0.
• Normalize memcache keys at the host boundary. Document key collisions.
• Make all digest functions return raw bytes. Use lowercase hex() for text.
• Keep the one-argument shell_exec behavior. Add a strict two-argument background overload.
• Remove the Capy password_needs_rehash surface. Preserve required host behavior.
• Regenerate the artifact golden file after all other changes and gates.

Success criteria

• Removed symbols fail compilation and have no pages, manifests, or call sites.
• Replacement behavior has focused runtime tests.
• All required acceptance gates return zero.
• The artifact golden write and plain check are the final validation steps.

Current state

• Status: complete
• Source/runtime: /root/mount_ssh/capy-bearer, root@10.4.2.122:/Code/capy-bearer

Goal tree

• G1: Implement runtime and standard-library changes.
• G2: Port callers and add focused tests.
• G3: Remove and update authored documentation.
• G4: Regenerate generated documentation and manifests.
• G5: Run acceptance gates and regenerate the golden file last.

Decisions

• memcache_command needs protocol-aware key normalization. It must not replace whitespace in the complete command.
• Public BRRB and callable dynamic-value behavior from the preceding task must remain unchanged.