@forg3t/sdk 0.1.4 → 0.1.5

package/README.md

@@ -33,7 +33,7 @@ There is now also a live bearer-token bootstrap path for first-time tenant creat
 - public hostname: `https://api.forg3t.io`
 - auth mode: dashboard bearer token, not project API key
 
-This closes the biggest admin-led onboarding gap, but the published npm package and official customer docs still need to catch up before this can be called fully self-serve.
+This closes the biggest admin-led onboarding gap. The published npm package now includes the bootstrap flow and request-creation surface, but the overall product is still not fully self-serve enterprise onboarding because tenant lifecycle cleanup, whitebox activation, and some runtime specialization paths remain operator-led.
 
 ## Local Development
 1. **Build**: `npm run build`
@@ -43,66 +43,42 @@ This closes the biggest admin-led onboarding gap, but the published npm package
 
 ### Customer Onboarding Smoke
 
-Use this as the first real integration gate for a provisioned customer project.
+Use this as the first real integration gate for a new signed-in customer session.
 The production API hostname is:
 
 ```bash
 export FORG3T_API_URL=https://api.forg3t.io
-export FORG3T_API_KEY=fg_...
-export FORG3T_PROJECT_ID=... # optional if default project exists
+export FORG3T_BEARER_TOKEN=eyJ...
 ```
 
-Then run a clean smoke script from your own workspace:
+Then run the official onboarding smoke:
 
-```typescript
-import { Forg3tClient } from '@forg3t/sdk';
-
-const client = new Forg3tClient({
-  apiUrl: process.env.FORG3T_API_URL,
-  apiKey: process.env.FORG3T_API_KEY,
-  timeoutMs: 30000,
-});
-
-async function main() {
-  const me = await client.getCurrentUser();
-  const projectId = process.env.FORG3T_PROJECT_ID || me.defaultProjectId;
-
-  if (!projectId) {
-    throw new Error('Set FORG3T_PROJECT_ID or configure a default project first.');
-  }
-
-  const request = await client.createUnlearningRequest(projectId, {
-    target: { type: 'phrase', value: 'customer-onboarding-smoke' },
-    scope: {},
-    accessLevel: 'layer_a_only',
-    execution: {
-      target: {
-        provider: 'custom',
-        endpoint: 'https://example.com/inference'
-      }
-    }
-  });
-
-  console.log({
-    requestId: request.id,
-    jobId: request.job?.id,
-    jobType: request.job?.type,
-    jobStatus: request.job?.status
-  });
-}
-
-main().catch((error) => {
-  console.error(error);
-  process.exit(1);
-});
+```bash
+npm run smoke:customer-onboarding
 ```
 
 This validates:
-- API authentication
+- bearer-token bootstrap
 - project resolution
+- API key creation
 - unlearning request creation
+- request detail fetch
+- API key revoke
 - job contract correctness
-- job lifecycle visibility
+- first-customer path through the public API hostname
+
+### Cleanroom Release Smoke
+
+For release verification from a clean temporary install:
+
+```bash
+export FORG3T_ONBOARDING_SMOKE_EMAIL=onboarding-smoke@forg3t.io
+export FORG3T_ONBOARDING_SMOKE_PASSWORD=...
+export SUPABASE_ANON_KEY=...
+npm run smoke:cleanroom
+```
+
+This installs the package into a fresh temporary directory, runs bootstrap, creates a first request, fetches request detail, and revokes the temporary API key. It is the release-candidate gate we use before claiming the SDK package is ready to publish.
 
 ### First-Time Tenant Bootstrap
 
@@ -145,14 +121,31 @@ Notes:
 - Repeating bootstrap with the same bearer token is idempotent and reuses the tenant resources.
 - This flow is live on the control plane today.
 
+### First-Time Bootstrap + First Request
+
+If you want the full SDK example in one run:
+
+```bash
+export FORG3T_API_URL=https://api.forg3t.io
+export FORG3T_BEARER_TOKEN=eyJ...
+npm run example:bootstrap
+```
+
+This example:
+
+1. bootstraps the tenant
+2. creates a temporary project API key
+3. submits the first request
+4. fetches request detail
+5. revokes the temporary API key
+
 ### Repo Maintainer Smoke
 
 If you are working inside the Forg3t SDK repo itself, you can also run the bundled smoke script:
 
 ```bash
 export FORG3T_API_URL=https://api.forg3t.io
-export FORG3T_API_KEY=fg_...
-export FORG3T_PROJECT_ID=...
+export FORG3T_BEARER_TOKEN=eyJ...
 npm run smoke:customer-onboarding
 ```
 

package/dist/index.d.mts

@@ -82,7 +82,12 @@ interface CreateApiKeyRequest {
     expiresAt?: string;
 }
 interface CreateApiKeyResponse extends ApiKey {
-    plaintextKey: string;
+    key: string;
+    plaintextKey?: string;
+}
+interface RevokeApiKeyResponse {
+    status: 'revoked' | string;
+    revokedAt?: string | null;
 }
 interface AuditEvent {
     id: string;
@@ -412,8 +417,8 @@ declare class Forg3tClient {
     getUnlearningRequest(projectId: string, unlearningRequestId: string, requestId?: string): Promise<UnlearningRequest>;
     listApiKeys(projectId: string, requestId?: string): Promise<ApiKey[]>;
     createApiKey(projectId: string, data: CreateApiKeyRequest, requestId?: string): Promise<CreateApiKeyResponse>;
-    rotateApiKey(keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
-    revokeApiKey(keyId: string, requestId?: string): Promise<ApiKey>;
+    rotateApiKey(projectId: string, keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
+    revokeApiKey(projectId: string, keyId: string, requestId?: string): Promise<RevokeApiKeyResponse>;
     submitJob(projectId: string, data: SubmitJobRequest, requestId?: string): Promise<Job>;
     /**
      * Creates a new job with deduplication support via an optional idempotency key.
@@ -754,4 +759,4 @@ declare const ENTERPRISE_STRICT_QUALITY_GATE_POLICY: Required<WhiteboxQualityGat
 declare function assertDeploymentCompatibility(options: DeploymentCompatibilityOptions): void;
 declare function buildWhiteboxWorkerOptions(profile: Forg3tDeploymentProfile, baseOptions: WhiteboxWorkerBaseOptions): WhiteboxWorkerOptions;
 
-export { AccessLevel, type AdapterCommandSpec, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type Project, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };
+export { AccessLevel, type AdapterCommandSpec, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type Project, type RevokeApiKeyResponse, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };

package/dist/index.d.ts

@@ -82,7 +82,12 @@ interface CreateApiKeyRequest {
     expiresAt?: string;
 }
 interface CreateApiKeyResponse extends ApiKey {
-    plaintextKey: string;
+    key: string;
+    plaintextKey?: string;
+}
+interface RevokeApiKeyResponse {
+    status: 'revoked' | string;
+    revokedAt?: string | null;
 }
 interface AuditEvent {
     id: string;
@@ -412,8 +417,8 @@ declare class Forg3tClient {
     getUnlearningRequest(projectId: string, unlearningRequestId: string, requestId?: string): Promise<UnlearningRequest>;
     listApiKeys(projectId: string, requestId?: string): Promise<ApiKey[]>;
     createApiKey(projectId: string, data: CreateApiKeyRequest, requestId?: string): Promise<CreateApiKeyResponse>;
-    rotateApiKey(keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
-    revokeApiKey(keyId: string, requestId?: string): Promise<ApiKey>;
+    rotateApiKey(projectId: string, keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
+    revokeApiKey(projectId: string, keyId: string, requestId?: string): Promise<RevokeApiKeyResponse>;
     submitJob(projectId: string, data: SubmitJobRequest, requestId?: string): Promise<Job>;
     /**
      * Creates a new job with deduplication support via an optional idempotency key.
@@ -754,4 +759,4 @@ declare const ENTERPRISE_STRICT_QUALITY_GATE_POLICY: Required<WhiteboxQualityGat
 declare function assertDeploymentCompatibility(options: DeploymentCompatibilityOptions): void;
 declare function buildWhiteboxWorkerOptions(profile: Forg3tDeploymentProfile, baseOptions: WhiteboxWorkerBaseOptions): WhiteboxWorkerOptions;
 
-export { AccessLevel, type AdapterCommandSpec, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type Project, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };
+export { AccessLevel, type AdapterCommandSpec, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type Project, type RevokeApiKeyResponse, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };

package/dist/index.js

@@ -132,10 +132,14 @@ var Transport = class {
   async request(path, options = {}, requestId) {
     const url = `${this.baseUrl}${path.startsWith("/") ? "" : "/"}${path}`;
     const headers = {
-      "Content-Type": "application/json",
       "Accept": "application/json",
       ...options.headers || {}
     };
+    const hasExplicitContentType = Object.keys(headers).some((key) => key.toLowerCase() === "content-type");
+    const hasBody = options.body !== void 0 && options.body !== null;
+    if (hasBody && !hasExplicitContentType) {
+      headers["Content-Type"] = "application/json";
+    }
     if (this.apiKey) {
       headers["x-api-key"] = this.apiKey;
     }
@@ -395,11 +399,29 @@ var Forg3tClient = class {
       body: JSON.stringify(data)
     }, requestId);
   }
-  async rotateApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/rotate`, { method: "POST" }, requestId);
+  async rotateApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("rotateApiKey requires both projectId and keyId.");
+    }
+    const existingKeys = await this.listApiKeys(projectId, requestId);
+    const current = existingKeys.find((item) => item.id === keyId);
+    if (!current) {
+      throw new Forg3tNotFoundError(`API key ${keyId} was not found in project ${projectId}.`, requestId);
+    }
+    const rotated = await this.createApiKey(projectId, {
+      name: current.name,
+      ...current.expiresAt ? { expiresAt: current.expiresAt } : {}
+    }, requestId);
+    await this.revokeApiKey(projectId, keyId, requestId);
+    return rotated;
   }
-  async revokeApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/revoke`, { method: "POST" }, requestId);
+  async revokeApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("revokeApiKey requires both projectId and keyId.");
+    }
+    return this.transport.request(`/v1/projects/${projectId}/api-keys/${keyId}`, {
+      method: "DELETE"
+    }, requestId);
   }
   // --- Jobs ---
   async submitJob(projectId, data, requestId) {

package/dist/index.mjs

@@ -74,10 +74,14 @@ var Transport = class {
   async request(path, options = {}, requestId) {
     const url = `${this.baseUrl}${path.startsWith("/") ? "" : "/"}${path}`;
     const headers = {
-      "Content-Type": "application/json",
       "Accept": "application/json",
       ...options.headers || {}
     };
+    const hasExplicitContentType = Object.keys(headers).some((key) => key.toLowerCase() === "content-type");
+    const hasBody = options.body !== void 0 && options.body !== null;
+    if (hasBody && !hasExplicitContentType) {
+      headers["Content-Type"] = "application/json";
+    }
     if (this.apiKey) {
       headers["x-api-key"] = this.apiKey;
     }
@@ -337,11 +341,29 @@ var Forg3tClient = class {
       body: JSON.stringify(data)
     }, requestId);
   }
-  async rotateApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/rotate`, { method: "POST" }, requestId);
+  async rotateApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("rotateApiKey requires both projectId and keyId.");
+    }
+    const existingKeys = await this.listApiKeys(projectId, requestId);
+    const current = existingKeys.find((item) => item.id === keyId);
+    if (!current) {
+      throw new Forg3tNotFoundError(`API key ${keyId} was not found in project ${projectId}.`, requestId);
+    }
+    const rotated = await this.createApiKey(projectId, {
+      name: current.name,
+      ...current.expiresAt ? { expiresAt: current.expiresAt } : {}
+    }, requestId);
+    await this.revokeApiKey(projectId, keyId, requestId);
+    return rotated;
   }
-  async revokeApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/revoke`, { method: "POST" }, requestId);
+  async revokeApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("revokeApiKey requires both projectId and keyId.");
+    }
+    return this.transport.request(`/v1/projects/${projectId}/api-keys/${keyId}`, {
+      method: "DELETE"
+    }, requestId);
   }
   // --- Jobs ---
   async submitJob(projectId, data, requestId) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@forg3t/sdk",
-    "version": "0.1.4",
+    "version": "0.1.5",
     "description": "Official TypeScript SDK for Forg3t Protocol",
     "main": "./dist/index.js",
     "module": "./dist/index.mjs",
@@ -28,7 +28,9 @@
         "test:whitebox": "node ../../node_modules/ts-node/dist/bin.js tools/whitebox_hardening_smoke.ts",
         "test:example": "npx tsx examples/quickstart.ts",
         "smoke:staging": "node ../../node_modules/ts-node/dist/bin.js examples/staging-smoke.ts",
-        "smoke:customer-onboarding": "node ../../node_modules/ts-node/dist/bin.js examples/staging-smoke.ts",
+        "smoke:customer-onboarding": "npx tsx examples/bootstrap-onboarding.ts",
+        "smoke:cleanroom": "node scripts/run_cleanroom_smoke.js",
+        "example:bootstrap": "npx tsx examples/bootstrap-onboarding.ts",
         "test:breaking": "node scripts/detect-breaking-changes.js",
         "test:contract": "node tools/probe_contract.mjs",
         "test:exports": "node tools/exports_smoke_esm.mjs && node tools/exports_smoke_cjs.cjs",