A user enters an email, clicks a link, and has a session. From there they can claim the repositories behind any token they hold, and mint new tokens that work on everything they have claimed. It is the feature that turns a pile of independently-owned repositories into "my reposi…

Narwal wraps `receive-pack` by hand: it parses framing itself, runs `index-pack`, checks ref preconditions, publishes to the WAL, and then applies `update-ref`. `decisions.md` records the alternative — running real `git receive-pack` with a hook as the CAS gate — as correct but …

Every push rewrites `repos/{name}/index.json` in full. The index is the CAS arbiter, so its bytes are on the critical path of every write: serialize, PUT, and — on contention — do it again per retry.