refactor: rename thg-* crates + surface to rustyred-* (clean break)

Workspace rename, internal + public surface:

  crates/thg-core            -> crates/rustyred-core
  crates/thg-mcp             -> crates/rustyred-mcp
  crates/thg-product-server  -> crates/rustyred-server
  crates/thg-server          -> crates/rustyred-compat-server
  crates/thg-resp-server     -> crates/rustyred-resp-server
  src/thg.rs                 -> src/rustyred.rs

Public-surface changes (no aliases — there are no public users yet, so
this is the cleanest moment to ship a single name):

  MCP tools  : thg.X.Y                  -> rustyred.X.Y
  Well-known : /.well-known/mcp/thg.json -> /.well-known/mcp/rustyred.json
  MCP URIs   : thg://tenant/...          -> rustyred://tenant/...
  Token scopes: thg:graph:read etc.     -> rustyred:graph:read etc.
  Metrics    : thg_total_requests etc.   -> rustyred_total_requests etc.
  Commands   : THG.RUN.BEGIN etc.        -> RUSTYRED.RUN.BEGIN etc.
  Env var    : THG_REDIS_KEY             -> RUSTYRED_REDIS_KEY
  Redis keys : theseus:thg:tenant:       -> theseus:rustyred:tenant:
  Prompts    : thg-query etc.            -> rustyred-query etc.

Prep work for open-sourcing the engine under one clean brand. Naming
debt left over from the original Theseus Hot Graph (THG) prototype
is gone; the public surface, internal types, and crate names now all
say RustyRed.

cargo check --workspace: clean (one pre-existing dead-code warning,
unrelated to rename).
cargo test --workspace: 135 passed, 0 failed.

Author: Travis-Gilbert

Cargo.lock

@@ -10,11 +10,11 @@ rust-version = "1.85"
 [workspace]
 members = [
     ".",
-    "crates/thg-core",
-    "crates/thg-mcp",
-    "crates/thg-server",
-    "crates/thg-product-server",
-    "crates/thg-resp-server",
+    "crates/rustyred-core",
+    "crates/rustyred-mcp",
+    "crates/rustyred-compat-server",
+    "crates/rustyred-server",
+    "crates/rustyred-resp-server",
 ]
 resolver = "2"
 
@@ -27,7 +27,7 @@ pyo3 = { version = "0.22.5", features = ["abi3-py312", "extension-module"] }
 numpy = "0.22"
 serde_json = "1.0"
 sha2 = "0.10"
-thg-core = { path = "crates/thg-core" }
+rustyred-core = { path = "crates/rustyred-core" }
 egg = "0.10"
 datafrog = "2.0"
 

Cargo.toml

@@ -6,15 +6,15 @@ COPY Cargo.toml Cargo.lock ./
 COPY crates ./crates
 COPY src ./src
 
-RUN cargo build -p thg-product-server --release
+RUN cargo build -p rustyred-server --release
 
 FROM debian:bookworm-slim
 
 RUN apt-get update \
     && apt-get install -y --no-install-recommends ca-certificates \
     && rm -rf /var/lib/apt/lists/*
 
-COPY --from=builder /app/target/release/thg-product-server /usr/local/bin/rusty-red-graph-server
+COPY --from=builder /app/target/release/rustyred-server /usr/local/bin/rusty-red-graph-server
 
 # Security-by-default. RUSTY_RED_REQUIRE_AUTH=true means /v1/* and /mcp
 # refuse unauthenticated requests; operators must provision scoped

Dockerfile

@@ -15,7 +15,7 @@ Note put template ID here before making public  `RUSTY_RED_GRAPH_DATABASE_TEMPLA
 ## What Rusty Red does
 
 - **Graph storage** with AOF/snapshot persistence, per-tenant isolation, single-writer serializable commits, and committed read snapshots
-- **Stable, versioned on-disk format** with `thg-upgrade-format` migrations between releases (no export/re-import on upgrade)
+- **Stable, versioned on-disk format** with `rustyred-upgrade-format` migrations between releases (no export/re-import on upgrade)
 - **HNSW vector search** on node properties via `instant-distance`, with hybrid scoring that blends vector similarity and graph proximity
 - **Inverted-index BM25 full-text search** with automatic indexing on node upserts
 - **H3 spatial index** on node lat/lon properties with radius and bounding-box queries
@@ -45,11 +45,11 @@ These are on the roadmap, in roughly this priority order:
 
 | Crate | Purpose |
 |-------|---------|
-| `thg-core` | Graph store engine, command executor, HNSW vector index, epistemic edges |
-| `thg-mcp` | MCP agent port: tool dispatch, resource reads, prompt surface |
-| `thg-product-server` | HTTP server, query surface, graph cache, auth, OpenAPI |
-| `thg-server` | Standalone compatibility command server |
-| `thg-resp-server` | RESP protocol shim (limited, not a Redis replacement) |
+| `rustyred-core` | Graph store engine, command executor, HNSW vector index, epistemic edges |
+| `rustyred-mcp` | MCP agent port: tool dispatch, resource reads, prompt surface |
+| `rustyred-server` | HTTP server, query surface, graph cache, auth, OpenAPI |
+| `rustyred-compat-server` | Standalone compatibility command server |
+| `rustyred-resp-server` | RESP protocol shim (limited, not a Redis replacement) |
 | root crate | PyO3 compatibility bindings for native graph/search helpers |
 
 ## Build (local development)
@@ -78,7 +78,7 @@ second Rusty Red service.
 Run the product server locally:
 
 ```bash
-RUSTY_RED_MODE=embedded RUSTY_RED_DATA_DIR=data/rusty-red cargo run -p thg-product-server
+RUSTY_RED_MODE=embedded RUSTY_RED_DATA_DIR=data/rusty-red cargo run -p rustyred-server
 ```
 
 Strict local durability mode is explicit:
@@ -90,20 +90,20 @@ RUSTY_RED_TXN_ISOLATION=serializable \
 RUSTY_RED_STRICT_ACID=true \
 RUSTY_RED_DURABILITY=aof_always \
 RUSTY_RED_DATA_DIR=data/rusty-red \
-cargo run -p thg-product-server
+cargo run -p rustyred-server
 ```
 
 Core routes are documented by `GET /openapi.json`. The OpenAPI document is
 generated from the product server crate version and currently covers every
-canonical route in `crates/thg-product-server/src/router.rs`.
+canonical route in `crates/rustyred-server/src/router.rs`.
 
 Canonical routes:
 
 ```text
 GET  /health
 GET  /ready
 GET  /openapi.json
-GET  /.well-known/mcp/thg.json
+GET  /.well-known/mcp/rustyred.json
 GET  /.well-known/agent.json
 POST /mcp
 GET  /metrics
@@ -163,16 +163,16 @@ The `/mcp` endpoint exposes these tools (via JSON-RPC `tools/list` and `tools/ca
 
 | Tool | Description |
 |------|-------------|
-| `thg.graph.query` / `thg.graph.explain` / `thg.graph.neighbors` | Bounded native graph reads and plan inspection |
-| `thg.graph.schema` / `thg.graph.index_status` | Graph schema and index-health reads |
-| `thg.algorithm.ppr` (alias: `thg.algo.ppr`) / `thg.algorithm.components` (`thg.algo.components`) / `thg.algorithm.pagerank` (`thg.algo.pagerank`) / `thg.algorithm.communities` (`thg.algo.communities`) | Graph algorithms: PPR, connected components, PageRank, label-propagation communities |
-| `thg.fulltext.search` (alias: `thg.graph.fulltext.search`) / `thg.spatial.radius` (`thg.graph.spatial.radius`) / `thg.spatial.bbox` (`thg.graph.spatial.bbox`) | Full-text and spatial read surfaces |
-| `thg.vector.search` | HNSW nearest-neighbor search on vector properties |
-| `thg.vector.hybrid` | Hybrid search blending vector similarity with graph proximity |
-| `thg.vector.designate` | Register a vector property for HNSW indexing (write) |
-| `thg.epistemic.neighbors` | Confidence-weighted epistemic traversal by edge type |
-| `thg.fulltext.designate` (alias: `thg.graph.fulltext.designate`) / `thg.spatial.designate` (`thg.graph.spatial.designate`) / `thg.bulk.nodes` (`thg.graph.bulk.nodes`) / `thg.bulk.edges` (`thg.graph.bulk.edges`) | Write-mode-only designation and bulk ingest tools |
-| `thg.admin.verify` | Admin-only index-integrity verification; rebuild remains on the HTTP graph route |
+| `rustyred.graph.query` / `rustyred.graph.explain` / `rustyred.graph.neighbors` | Bounded native graph reads and plan inspection |
+| `rustyred.graph.schema` / `rustyred.graph.index_status` | Graph schema and index-health reads |
+| `rustyred.algorithm.ppr` (alias: `rustyred.algo.ppr`) / `rustyred.algorithm.components` (`rustyred.algo.components`) / `rustyred.algorithm.pagerank` (`rustyred.algo.pagerank`) / `rustyred.algorithm.communities` (`rustyred.algo.communities`) | Graph algorithms: PPR, connected components, PageRank, label-propagation communities |
+| `rustyred.fulltext.search` (alias: `rustyred.graph.fulltext.search`) / `rustyred.spatial.radius` (`rustyred.graph.spatial.radius`) / `rustyred.spatial.bbox` (`rustyred.graph.spatial.bbox`) | Full-text and spatial read surfaces |
+| `rustyred.vector.search` | HNSW nearest-neighbor search on vector properties |
+| `rustyred.vector.hybrid` | Hybrid search blending vector similarity with graph proximity |
+| `rustyred.vector.designate` | Register a vector property for HNSW indexing (write) |
+| `rustyred.epistemic.neighbors` | Confidence-weighted epistemic traversal by edge type |
+| `rustyred.fulltext.designate` (alias: `rustyred.graph.fulltext.designate`) / `rustyred.spatial.designate` (`rustyred.graph.spatial.designate`) / `rustyred.bulk.nodes` (`rustyred.graph.bulk.nodes`) / `rustyred.bulk.edges` (`rustyred.graph.bulk.edges`) | Write-mode-only designation and bulk ingest tools |
+| `rustyred.admin.verify` | Admin-only index-integrity verification; rebuild remains on the HTTP graph route |
 
 The public query surface is now split cleanly:
 
@@ -232,10 +232,10 @@ RUSTY_RED_MCP_ALLOW_ADMIN=false
 ## Compatibility command server
 
 The product server is the recommended deployment target. A smaller compatibility
-HTTP command server also lives in `crates/thg-server`:
+HTTP command server also lives in `crates/rustyred-compat-server`:
 
 ```bash
-cargo run -p thg-server -- --host 127.0.0.1 --port 7379
+cargo run -p rustyred-compat-server -- --host 127.0.0.1 --port 7379
 ```
 
 Endpoints:

README.md

@@ -21,7 +21,7 @@ In this posture:
 - `/v1/*` and `/mcp` reject requests that do not present a valid
   bearer token from `RUSTY_RED_API_TOKENS`.
 - `/health`, `/ready`, `/openapi.json`, `/.well-known/agent.json`,
-  `/.well-known/mcp/thg.json`, and `/metrics` remain unauthenticated;
+  `/.well-known/mcp/rustyred.json`, and `/metrics` remain unauthenticated;
   they expose no tenant data or mutable surface.
 - MCP starts in read-only mode. Write tools are unreachable until the
   operator explicitly enables them.

SECURITY.md

@@ -1,5 +1,5 @@
 [package]
-name = "thg-server"
+name = "rustyred-compat-server"
 version = "0.4.0"
 edition = "2021"
 description = "Standalone HTTP command server for Rusty Red core."
@@ -8,4 +8,4 @@ rust-version = "1.85"
 
 [dependencies]
 serde_json = "1.0"
-thg-core = { path = "../thg-core", features = ["redis-store"] }
+rustyred-core = { path = "../rustyred-core", features = ["redis-store"] }