@forg3t/sdk 0.1.4 → 0.1.6

package/README.md

@@ -33,7 +33,26 @@ There is now also a live bearer-token bootstrap path for first-time tenant creat
 - public hostname: `https://api.forg3t.io`
 - auth mode: dashboard bearer token, not project API key
 
-This closes the biggest admin-led onboarding gap, but the published npm package and official customer docs still need to catch up before this can be called fully self-serve.
+This closes the biggest admin-led onboarding gap. The published npm package now includes the bootstrap flow and request-creation surface, but the overall product is still not fully self-serve enterprise onboarding because tenant lifecycle cleanup, whitebox activation, and some runtime specialization paths remain operator-led.
+
+## Execution Modes
+
+Forg3t now has three materially different execution lanes. Keeping them separate is important:
+
+1. **Managed black-box lane**
+   - default baseline path for API-only and retrieval-style first runs
+   - request enters via `https://api.forg3t.io`
+   - control-plane managed worker claims the job
+   - a private executor service runs the black-box workload
+   - this is the path verified by the published SDK cleanroom smoke
+
+2. **Customer-scoped generic worker**
+   - used when a customer wants execution tied to their own project-scoped worker runtime
+   - not the same thing as the default managed black-box lane
+
+3. **Customer-side whitebox worker**
+   - required when the customer wants staged model-weight intervention
+   - this remains a separate install and acceptance path
 
 ## Local Development
 1. **Build**: `npm run build`
@@ -43,66 +62,45 @@ This closes the biggest admin-led onboarding gap, but the published npm package
 
 ### Customer Onboarding Smoke
 
-Use this as the first real integration gate for a provisioned customer project.
+Use this as the first real integration gate for a new signed-in customer session.
 The production API hostname is:
 
 ```bash
 export FORG3T_API_URL=https://api.forg3t.io
-export FORG3T_API_KEY=fg_...
-export FORG3T_PROJECT_ID=... # optional if default project exists
+export FORG3T_BEARER_TOKEN=eyJ...
 ```
 
-Then run a clean smoke script from your own workspace:
-
-```typescript
-import { Forg3tClient } from '@forg3t/sdk';
-
-const client = new Forg3tClient({
-  apiUrl: process.env.FORG3T_API_URL,
-  apiKey: process.env.FORG3T_API_KEY,
-  timeoutMs: 30000,
-});
-
-async function main() {
-  const me = await client.getCurrentUser();
-  const projectId = process.env.FORG3T_PROJECT_ID || me.defaultProjectId;
-
-  if (!projectId) {
-    throw new Error('Set FORG3T_PROJECT_ID or configure a default project first.');
-  }
-
-  const request = await client.createUnlearningRequest(projectId, {
-    target: { type: 'phrase', value: 'customer-onboarding-smoke' },
-    scope: {},
-    accessLevel: 'layer_a_only',
-    execution: {
-      target: {
-        provider: 'custom',
-        endpoint: 'https://example.com/inference'
-      }
-    }
-  });
-
-  console.log({
-    requestId: request.id,
-    jobId: request.job?.id,
-    jobType: request.job?.type,
-    jobStatus: request.job?.status
-  });
-}
+Then run the official onboarding smoke:
 
-main().catch((error) => {
-  console.error(error);
-  process.exit(1);
-});
+```bash
+npm run smoke:customer-onboarding
 ```
 
 This validates:
-- API authentication
+- bearer-token bootstrap
 - project resolution
+- API key creation
 - unlearning request creation
+- request detail fetch
+- terminal job success
+- evidence readiness
+- artifact download readiness
+- API key revoke
 - job contract correctness
-- job lifecycle visibility
+- first-customer path through the public API hostname
+
+### Cleanroom Release Smoke
+
+For release verification from a clean temporary install:
+
+```bash
+export FORG3T_ONBOARDING_SMOKE_EMAIL=onboarding-smoke@forg3t.io
+export FORG3T_ONBOARDING_SMOKE_PASSWORD=...
+export SUPABASE_ANON_KEY=...
+npm run smoke:cleanroom
+```
+
+This installs the package into a fresh temporary directory, runs bootstrap, creates a first request, verifies terminal job success plus evidence/artifact readiness, and revokes the temporary API key. It is the release-candidate gate we use before claiming the SDK package is ready to publish.
 
 ### First-Time Tenant Bootstrap
 
@@ -145,14 +143,31 @@ Notes:
 - Repeating bootstrap with the same bearer token is idempotent and reuses the tenant resources.
 - This flow is live on the control plane today.
 
+### First-Time Bootstrap + First Request
+
+If you want the full SDK example in one run:
+
+```bash
+export FORG3T_API_URL=https://api.forg3t.io
+export FORG3T_BEARER_TOKEN=eyJ...
+npm run example:bootstrap
+```
+
+This example:
+
+1. bootstraps the tenant
+2. creates a temporary project API key
+3. submits the first request
+4. fetches request detail
+5. revokes the temporary API key
+
 ### Repo Maintainer Smoke
 
 If you are working inside the Forg3t SDK repo itself, you can also run the bundled smoke script:
 
 ```bash
 export FORG3T_API_URL=https://api.forg3t.io
-export FORG3T_API_KEY=fg_...
-export FORG3T_PROJECT_ID=...
+export FORG3T_BEARER_TOKEN=eyJ...
 npm run smoke:customer-onboarding
 ```
 

package/dist/index.d.mts

@@ -82,7 +82,12 @@ interface CreateApiKeyRequest {
     expiresAt?: string;
 }
 interface CreateApiKeyResponse extends ApiKey {
-    plaintextKey: string;
+    key: string;
+    plaintextKey?: string;
+}
+interface RevokeApiKeyResponse {
+    status: 'revoked' | string;
+    revokedAt?: string | null;
 }
 interface AuditEvent {
     id: string;
@@ -264,6 +269,8 @@ declare enum IntegrationType {
     LANGCHAIN = "langchain",
     OPENROUTER = "openrouter",
     OPENAI = "openai",
+    PGVECTOR = "pgvector",
+    ADAPTER = "adapter",
     CUSTOM = "custom"
 }
 declare enum IntegrationMode {
@@ -285,6 +292,29 @@ interface OpenRouterAdapterConfig extends BaseAdapterConfig {
     routingStrategy: 'cost' | 'latency' | 'quality';
     fallbackModels?: string[];
 }
+interface PgVectorIntegrationConfig extends BaseAdapterConfig {
+    backend: 'pgvector_postgres';
+    schema?: string;
+    table: string;
+    document_id_column?: string;
+    metadata_column?: string;
+    metadata_document_id_key?: string;
+    content_column?: string;
+    embedding_column?: string;
+    database_url_env_var?: string;
+    healthcheck_url?: string;
+    healthcheck_method?: 'GET' | 'POST';
+    worker_mode?: 'rag';
+}
+interface AdapterIntegrationConfig extends BaseAdapterConfig {
+    backend: 'peft_lora_safetensors';
+    format?: 'safetensors';
+    adapter_uri?: string;
+    adapter_uri_env_var?: string;
+    healthcheck_url?: string;
+    healthcheck_method?: 'GET' | 'POST';
+    worker_mode?: 'adapter';
+}
 interface Integration {
     id: string;
     projectId: string;
@@ -292,7 +322,7 @@ interface Integration {
     name: string;
     description?: string;
     status: 'active' | 'disconnected' | 'error' | 'pending';
-    config: BaseAdapterConfig | LangChainAdapterConfig | OpenRouterAdapterConfig | Record<string, unknown>;
+    config: BaseAdapterConfig | LangChainAdapterConfig | OpenRouterAdapterConfig | PgVectorIntegrationConfig | AdapterIntegrationConfig | Record<string, unknown>;
     capabilities: string[];
     createdAt: string;
     updatedAt: string;
@@ -348,9 +378,29 @@ interface UnlearningExecutionTargetSpec {
     responsePath?: string;
     apiKey?: string;
 }
+interface UnlearningExecutionRagSpec {
+    backend: 'pgvector_postgres';
+    mode?: 'delete_documents';
+    integrationId?: string;
+    dryRun?: boolean;
+}
+interface UnlearningExecutionAdapterSpec {
+    backend: 'peft_lora_safetensors';
+    integrationId?: string;
+    method?: 'disable_adapter' | 'attenuate_adapter';
+    scaleFactor?: number;
+    dryRun?: boolean;
+    updatedAdapterUri?: string;
+}
+interface UnlearningExecutionRoutingSpec {
+    lane?: 'managed' | 'project_scoped';
+}
 interface UnlearningExecutionSpec {
     target?: UnlearningExecutionTargetSpec;
+    rag?: UnlearningExecutionRagSpec;
+    adapter?: UnlearningExecutionAdapterSpec;
     model?: UnlearningExecutionModelRef;
+    routing?: UnlearningExecutionRoutingSpec;
     plan?: UnlearningExecutionPlanSpec;
 }
 interface UnlearningJobSummary {
@@ -412,8 +462,8 @@ declare class Forg3tClient {
     getUnlearningRequest(projectId: string, unlearningRequestId: string, requestId?: string): Promise<UnlearningRequest>;
     listApiKeys(projectId: string, requestId?: string): Promise<ApiKey[]>;
     createApiKey(projectId: string, data: CreateApiKeyRequest, requestId?: string): Promise<CreateApiKeyResponse>;
-    rotateApiKey(keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
-    revokeApiKey(keyId: string, requestId?: string): Promise<ApiKey>;
+    rotateApiKey(projectId: string, keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
+    revokeApiKey(projectId: string, keyId: string, requestId?: string): Promise<RevokeApiKeyResponse>;
     submitJob(projectId: string, data: SubmitJobRequest, requestId?: string): Promise<Job>;
     /**
      * Creates a new job with deduplication support via an optional idempotency key.
@@ -475,6 +525,7 @@ declare class Forg3tClient {
     }, requestId?: string): Promise<void>;
     private assertCreateUnlearningRequest;
     private assertModelUnlearnPreflight;
+    private assertAdapterUnlearnPreflight;
 }
 
 declare class Forg3tError extends Error {
@@ -754,4 +805,4 @@ declare const ENTERPRISE_STRICT_QUALITY_GATE_POLICY: Required<WhiteboxQualityGat
 declare function assertDeploymentCompatibility(options: DeploymentCompatibilityOptions): void;
 declare function buildWhiteboxWorkerOptions(profile: Forg3tDeploymentProfile, baseOptions: WhiteboxWorkerBaseOptions): WhiteboxWorkerOptions;
 
-export { AccessLevel, type AdapterCommandSpec, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type Project, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };
+export { AccessLevel, type AdapterCommandSpec, type AdapterIntegrationConfig, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type PgVectorIntegrationConfig, type Project, type RevokeApiKeyResponse, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionAdapterSpec, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionRagSpec, type UnlearningExecutionRoutingSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };

package/dist/index.d.ts

@@ -82,7 +82,12 @@ interface CreateApiKeyRequest {
     expiresAt?: string;
 }
 interface CreateApiKeyResponse extends ApiKey {
-    plaintextKey: string;
+    key: string;
+    plaintextKey?: string;
+}
+interface RevokeApiKeyResponse {
+    status: 'revoked' | string;
+    revokedAt?: string | null;
 }
 interface AuditEvent {
     id: string;
@@ -264,6 +269,8 @@ declare enum IntegrationType {
     LANGCHAIN = "langchain",
     OPENROUTER = "openrouter",
     OPENAI = "openai",
+    PGVECTOR = "pgvector",
+    ADAPTER = "adapter",
     CUSTOM = "custom"
 }
 declare enum IntegrationMode {
@@ -285,6 +292,29 @@ interface OpenRouterAdapterConfig extends BaseAdapterConfig {
     routingStrategy: 'cost' | 'latency' | 'quality';
     fallbackModels?: string[];
 }
+interface PgVectorIntegrationConfig extends BaseAdapterConfig {
+    backend: 'pgvector_postgres';
+    schema?: string;
+    table: string;
+    document_id_column?: string;
+    metadata_column?: string;
+    metadata_document_id_key?: string;
+    content_column?: string;
+    embedding_column?: string;
+    database_url_env_var?: string;
+    healthcheck_url?: string;
+    healthcheck_method?: 'GET' | 'POST';
+    worker_mode?: 'rag';
+}
+interface AdapterIntegrationConfig extends BaseAdapterConfig {
+    backend: 'peft_lora_safetensors';
+    format?: 'safetensors';
+    adapter_uri?: string;
+    adapter_uri_env_var?: string;
+    healthcheck_url?: string;
+    healthcheck_method?: 'GET' | 'POST';
+    worker_mode?: 'adapter';
+}
 interface Integration {
     id: string;
     projectId: string;
@@ -292,7 +322,7 @@ interface Integration {
     name: string;
     description?: string;
     status: 'active' | 'disconnected' | 'error' | 'pending';
-    config: BaseAdapterConfig | LangChainAdapterConfig | OpenRouterAdapterConfig | Record<string, unknown>;
+    config: BaseAdapterConfig | LangChainAdapterConfig | OpenRouterAdapterConfig | PgVectorIntegrationConfig | AdapterIntegrationConfig | Record<string, unknown>;
     capabilities: string[];
     createdAt: string;
     updatedAt: string;
@@ -348,9 +378,29 @@ interface UnlearningExecutionTargetSpec {
     responsePath?: string;
     apiKey?: string;
 }
+interface UnlearningExecutionRagSpec {
+    backend: 'pgvector_postgres';
+    mode?: 'delete_documents';
+    integrationId?: string;
+    dryRun?: boolean;
+}
+interface UnlearningExecutionAdapterSpec {
+    backend: 'peft_lora_safetensors';
+    integrationId?: string;
+    method?: 'disable_adapter' | 'attenuate_adapter';
+    scaleFactor?: number;
+    dryRun?: boolean;
+    updatedAdapterUri?: string;
+}
+interface UnlearningExecutionRoutingSpec {
+    lane?: 'managed' | 'project_scoped';
+}
 interface UnlearningExecutionSpec {
     target?: UnlearningExecutionTargetSpec;
+    rag?: UnlearningExecutionRagSpec;
+    adapter?: UnlearningExecutionAdapterSpec;
     model?: UnlearningExecutionModelRef;
+    routing?: UnlearningExecutionRoutingSpec;
     plan?: UnlearningExecutionPlanSpec;
 }
 interface UnlearningJobSummary {
@@ -412,8 +462,8 @@ declare class Forg3tClient {
     getUnlearningRequest(projectId: string, unlearningRequestId: string, requestId?: string): Promise<UnlearningRequest>;
     listApiKeys(projectId: string, requestId?: string): Promise<ApiKey[]>;
     createApiKey(projectId: string, data: CreateApiKeyRequest, requestId?: string): Promise<CreateApiKeyResponse>;
-    rotateApiKey(keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
-    revokeApiKey(keyId: string, requestId?: string): Promise<ApiKey>;
+    rotateApiKey(projectId: string, keyId: string, requestId?: string): Promise<CreateApiKeyResponse>;
+    revokeApiKey(projectId: string, keyId: string, requestId?: string): Promise<RevokeApiKeyResponse>;
     submitJob(projectId: string, data: SubmitJobRequest, requestId?: string): Promise<Job>;
     /**
      * Creates a new job with deduplication support via an optional idempotency key.
@@ -475,6 +525,7 @@ declare class Forg3tClient {
     }, requestId?: string): Promise<void>;
     private assertCreateUnlearningRequest;
     private assertModelUnlearnPreflight;
+    private assertAdapterUnlearnPreflight;
 }
 
 declare class Forg3tError extends Error {
@@ -754,4 +805,4 @@ declare const ENTERPRISE_STRICT_QUALITY_GATE_POLICY: Required<WhiteboxQualityGat
 declare function assertDeploymentCompatibility(options: DeploymentCompatibilityOptions): void;
 declare function buildWhiteboxWorkerOptions(profile: Forg3tDeploymentProfile, baseOptions: WhiteboxWorkerBaseOptions): WhiteboxWorkerOptions;
 
-export { AccessLevel, type AdapterCommandSpec, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type Project, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };
+export { AccessLevel, type AdapterCommandSpec, type AdapterIntegrationConfig, type ApiKey, type AuditEvent, type AuditEventFilters, type AuditEventListResponse, type BaseAdapterConfig, type BootstrapTenantRequest, type BootstrapTenantResponse, type BuildModelUnlearningJobInput, type ClaimAssertion, type ClaimJobsRequest, type ClaimScope, type ClaimType, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateIntegrationRequest, type CreateUnlearningRequestParams, type CreateWebhookRequest, type CurrentUserResponse, DEFAULT_WHITEBOX_QUALITY_GATE_POLICY, type DeploymentCompatibilityOptions, ENTERPRISE_STRICT_QUALITY_GATE_POLICY, type EvidenceArtifact, type EvidencePdfResponse, type EvidenceStatusResponse, type ExecutionPlan, type ExecutionStep, type Forg3tAdapterMode, Forg3tApiConnectionError, Forg3tAuthenticationError, Forg3tClient, type Forg3tClientOptions, type Forg3tDeploymentProfile, Forg3tError, Forg3tNotFoundError, Forg3tNotImplementedError, Forg3tRateLimitError, HttpTrainingAdapter, type HttpTrainingAdapterOptions, type Integration, IntegrationMode, IntegrationType, type Job, type JobConfig, type JobError, type JobMutationOptions, type JobResult, type JobStatus, type JobType, type LangChainAdapterConfig, type LocalCommandAdapterOptions, LocalCommandTrainingAdapter, type ModelArtifactReference, type NativeAdapterConfig, type OpenRouterAdapterConfig, type PaginationParams, type PgVectorIntegrationConfig, type Project, type RevokeApiKeyResponse, type SubmitJobRequest, type TrainingBackendAdapter, type UnlearningClaim, type UnlearningExecutionAdapterSpec, type UnlearningExecutionModelRef, type UnlearningExecutionPlanSpec, type UnlearningExecutionRagSpec, type UnlearningExecutionRoutingSpec, type UnlearningExecutionSpec, type UnlearningExecutionTargetSpec, type UnlearningJobSummary, type UnlearningRequest, type UnlearningScope, type UnlearningTarget, type UpdateWebhookRequest, WHITEBOX_QUALITY_GATE_PRESETS, WHITEBOX_QUALITY_GATE_PRESET_EXPLANATIONS, type Webhook, type WebhookDelivery, type WebhookDeliveryFilters, type WhiteboxEvaluationInput, type WhiteboxEvaluationOutput, type WhiteboxJobContext, type WhiteboxQualityGateDecision, type WhiteboxQualityGatePolicy, type WhiteboxQualityGatePreset, type WhiteboxTargetSpec, type WhiteboxUnlearningInput, type WhiteboxUnlearningOutput, type WhiteboxUnlearningPlan, WhiteboxWorker, type WhiteboxWorkerBaseOptions, type WhiteboxWorkerLogger, type WhiteboxWorkerOptions, assertDeploymentCompatibility, buildModelUnlearningPayload, buildWhiteboxWorkerOptions, createNativeTrainingAdapter, evaluateWhiteboxQualityGate, resolveWhiteboxQualityGatePolicy };

package/dist/index.js

@@ -132,10 +132,14 @@ var Transport = class {
   async request(path, options = {}, requestId) {
     const url = `${this.baseUrl}${path.startsWith("/") ? "" : "/"}${path}`;
     const headers = {
-      "Content-Type": "application/json",
       "Accept": "application/json",
       ...options.headers || {}
     };
+    const hasExplicitContentType = Object.keys(headers).some((key) => key.toLowerCase() === "content-type");
+    const hasBody = options.body !== void 0 && options.body !== null;
+    if (hasBody && !hasExplicitContentType) {
+      headers["Content-Type"] = "application/json";
+    }
     if (this.apiKey) {
       headers["x-api-key"] = this.apiKey;
     }
@@ -395,11 +399,29 @@ var Forg3tClient = class {
       body: JSON.stringify(data)
     }, requestId);
   }
-  async rotateApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/rotate`, { method: "POST" }, requestId);
+  async rotateApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("rotateApiKey requires both projectId and keyId.");
+    }
+    const existingKeys = await this.listApiKeys(projectId, requestId);
+    const current = existingKeys.find((item) => item.id === keyId);
+    if (!current) {
+      throw new Forg3tNotFoundError(`API key ${keyId} was not found in project ${projectId}.`, requestId);
+    }
+    const rotated = await this.createApiKey(projectId, {
+      name: current.name,
+      ...current.expiresAt ? { expiresAt: current.expiresAt } : {}
+    }, requestId);
+    await this.revokeApiKey(projectId, keyId, requestId);
+    return rotated;
   }
-  async revokeApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/revoke`, { method: "POST" }, requestId);
+  async revokeApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("revokeApiKey requires both projectId and keyId.");
+    }
+    return this.transport.request(`/v1/projects/${projectId}/api-keys/${keyId}`, {
+      method: "DELETE"
+    }, requestId);
   }
   // --- Jobs ---
   async submitJob(projectId, data, requestId) {
@@ -409,6 +431,8 @@ var Forg3tClient = class {
     };
     if (data.type === "MODEL_UNLEARN") {
       this.assertModelUnlearnPreflight(normalizedPayload);
+    } else if (data.type === "ADAPTER_UNLEARN") {
+      this.assertAdapterUnlearnPreflight(normalizedPayload);
     }
     const res = await this.transport.request(`/v1/projects/${projectId}/jobs`, {
       method: "POST",
@@ -633,18 +657,67 @@ var Forg3tClient = class {
       }
     }
     if (data.accessLevel === "layer_a_only") {
+      const rag = data.execution?.rag;
       const target = data.execution?.target;
-      if (!target) {
-        throw new Error("createUnlearningRequest: execution.target is required for layer_a_only.");
+      const adapter = data.execution?.adapter;
+      if (adapter) {
+        throw new Error("createUnlearningRequest: execution.adapter is only valid for layer_a_and_b.");
       }
-      if ((target.provider === "openai" || target.provider === "groq") && !target.model?.trim()) {
-        throw new Error(`createUnlearningRequest: execution.target.model is required when provider=${target.provider}.`);
+      if (target && rag) {
+        throw new Error("createUnlearningRequest: execution.target and execution.rag are mutually exclusive for layer_a_only.");
       }
-      if ((target.provider === "http_generic" || target.provider === "custom") && !target.endpoint?.trim()) {
-        throw new Error(`createUnlearningRequest: execution.target.endpoint is required when provider=${target.provider}.`);
+      if (rag) {
+        if (rag.backend !== "pgvector_postgres") {
+          throw new Error("createUnlearningRequest: execution.rag.backend must be pgvector_postgres.");
+        }
+        if (data.target.type !== "document_id") {
+          throw new Error("createUnlearningRequest: the official RAG lane currently supports target.type=document_id only.");
+        }
+        if (!Array.isArray(data.scope?.integrationIds) || data.scope.integrationIds.length !== 1) {
+          throw new Error("createUnlearningRequest: the official RAG lane requires exactly one scope.integrationIds entry.");
+        }
+        if (data.execution?.routing?.lane && data.execution.routing.lane !== "project_scoped") {
+          throw new Error("createUnlearningRequest: execution.routing.lane must be project_scoped for the official RAG lane.");
+        }
+      } else {
+        if (!target) {
+          throw new Error("createUnlearningRequest: execution.target is required for layer_a_only unless execution.rag is provided.");
+        }
+        if ((target.provider === "openai" || target.provider === "groq") && !target.model?.trim()) {
+          throw new Error(`createUnlearningRequest: execution.target.model is required when provider=${target.provider}.`);
+        }
+        if ((target.provider === "http_generic" || target.provider === "custom") && !target.endpoint?.trim()) {
+          throw new Error(`createUnlearningRequest: execution.target.endpoint is required when provider=${target.provider}.`);
+        }
       }
     }
     if (data.accessLevel === "layer_a_and_b") {
+      const adapter = data.execution?.adapter;
+      if (adapter) {
+        if (adapter.backend !== "peft_lora_safetensors") {
+          throw new Error("createUnlearningRequest: execution.adapter.backend must be peft_lora_safetensors.");
+        }
+        if (data.execution?.model?.uri?.trim()) {
+          throw new Error("createUnlearningRequest: execution.adapter and execution.model are mutually exclusive for layer_a_and_b.");
+        }
+        if (!Array.isArray(data.scope?.integrationIds) || data.scope.integrationIds.length !== 1) {
+          throw new Error("createUnlearningRequest: the official adapter lane requires exactly one scope.integrationIds entry.");
+        }
+        if (data.execution?.routing?.lane && data.execution.routing.lane !== "project_scoped") {
+          throw new Error("createUnlearningRequest: execution.routing.lane must be project_scoped for the official adapter lane.");
+        }
+        const method = String(adapter.method || "attenuate_adapter").trim();
+        if (!["disable_adapter", "attenuate_adapter"].includes(method)) {
+          throw new Error("createUnlearningRequest: execution.adapter.method must be disable_adapter or attenuate_adapter.");
+        }
+        if (method === "attenuate_adapter") {
+          const scaleFactor = Number(adapter.scaleFactor);
+          if (!Number.isFinite(scaleFactor) || scaleFactor <= 0 || scaleFactor >= 1) {
+            throw new Error("createUnlearningRequest: execution.adapter.scaleFactor must be a finite number between 0 and 1 for attenuate_adapter.");
+          }
+        }
+        return;
+      }
       if (!data.execution?.model?.uri?.trim()) {
         throw new Error("createUnlearningRequest: execution.model.uri is required for layer_a_and_b.");
       }
@@ -716,6 +789,40 @@ var Forg3tClient = class {
       );
     }
   }
+  assertAdapterUnlearnPreflight(payload) {
+    if (!payload || typeof payload !== "object") {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload must be an object.");
+    }
+    const asRecord = payload;
+    const config = asRecord.config && typeof asRecord.config === "object" && !Array.isArray(asRecord.config) ? asRecord.config : null;
+    if (!config) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config is required.");
+    }
+    const targetConfig = config.target_config && typeof config.target_config === "object" && !Array.isArray(config.target_config) ? config.target_config : null;
+    const parameters = config.parameters && typeof config.parameters === "object" && !Array.isArray(config.parameters) ? config.parameters : null;
+    const adapter = parameters?.adapter && typeof parameters.adapter === "object" && !Array.isArray(parameters.adapter) ? parameters.adapter : null;
+    if (!targetConfig) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config.target_config is required.");
+    }
+    if (String(targetConfig.backend || "").trim() !== "peft_lora_safetensors") {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config.target_config.backend must be peft_lora_safetensors.");
+    }
+    const adapterUri = String(targetConfig.adapter_uri || "").trim();
+    const adapterUriEnvVar = String(targetConfig.adapter_uri_env_var || "").trim();
+    if (!adapterUri && !adapterUriEnvVar) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config.target_config requires adapter_uri or adapter_uri_env_var.");
+    }
+    const method = String(adapter?.method || "attenuate_adapter").trim();
+    if (!["disable_adapter", "attenuate_adapter"].includes(method)) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: parameters.adapter.method must be disable_adapter or attenuate_adapter.");
+    }
+    if (method === "attenuate_adapter") {
+      const scaleFactor = Number(adapter?.scaleFactor);
+      if (!Number.isFinite(scaleFactor) || scaleFactor <= 0 || scaleFactor >= 1) {
+        throw new Error("ADAPTER_UNLEARN preflight failed: parameters.adapter.scaleFactor must be between 0 and 1 for attenuate_adapter.");
+      }
+    }
+  }
 };
 
 // src/types.ts
@@ -728,6 +835,8 @@ var IntegrationType = /* @__PURE__ */ ((IntegrationType2) => {
   IntegrationType2["LANGCHAIN"] = "langchain";
   IntegrationType2["OPENROUTER"] = "openrouter";
   IntegrationType2["OPENAI"] = "openai";
+  IntegrationType2["PGVECTOR"] = "pgvector";
+  IntegrationType2["ADAPTER"] = "adapter";
   IntegrationType2["CUSTOM"] = "custom";
   return IntegrationType2;
 })(IntegrationType || {});
@@ -1431,10 +1540,19 @@ var ENTERPRISE_STRICT_QUALITY_GATE_POLICY = {
   ...WHITEBOX_QUALITY_GATE_PRESETS.strict
 };
 function assertDeploymentCompatibility(options) {
-  const normalizedHost = parseHost(options.apiUrl);
-  if (!normalizedHost) {
+  const parsedApiUrl = parseApiUrl(options.apiUrl);
+  if (!parsedApiUrl) {
     throw new Error(`Invalid FORG3T_API_URL: ${options.apiUrl}`);
   }
+  const normalizedHost = parsedApiUrl.hostname.toLowerCase();
+  if (options.profile === "customer_online") {
+    const publicHost = !isPrivateHost(normalizedHost);
+    if (publicHost && parsedApiUrl.protocol !== "https:") {
+      throw new Error(
+        `Customer online profile requires HTTPS for public control-plane hosts. Received ${options.apiUrl}.`
+      );
+    }
+  }
   if (options.profile !== "customer_airgapped") {
     return;
   }
@@ -1465,10 +1583,9 @@ function buildWhiteboxWorkerOptions(profile, baseOptions) {
     logger: baseOptions.logger
   };
 }
-function parseHost(apiUrl) {
+function parseApiUrl(apiUrl) {
   try {
-    const parsed = new URL(apiUrl);
-    return parsed.hostname.toLowerCase();
+    return new URL(apiUrl);
   } catch {
     return null;
   }

package/dist/index.mjs

@@ -74,10 +74,14 @@ var Transport = class {
   async request(path, options = {}, requestId) {
     const url = `${this.baseUrl}${path.startsWith("/") ? "" : "/"}${path}`;
     const headers = {
-      "Content-Type": "application/json",
       "Accept": "application/json",
       ...options.headers || {}
     };
+    const hasExplicitContentType = Object.keys(headers).some((key) => key.toLowerCase() === "content-type");
+    const hasBody = options.body !== void 0 && options.body !== null;
+    if (hasBody && !hasExplicitContentType) {
+      headers["Content-Type"] = "application/json";
+    }
     if (this.apiKey) {
       headers["x-api-key"] = this.apiKey;
     }
@@ -337,11 +341,29 @@ var Forg3tClient = class {
       body: JSON.stringify(data)
     }, requestId);
   }
-  async rotateApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/rotate`, { method: "POST" }, requestId);
+  async rotateApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("rotateApiKey requires both projectId and keyId.");
+    }
+    const existingKeys = await this.listApiKeys(projectId, requestId);
+    const current = existingKeys.find((item) => item.id === keyId);
+    if (!current) {
+      throw new Forg3tNotFoundError(`API key ${keyId} was not found in project ${projectId}.`, requestId);
+    }
+    const rotated = await this.createApiKey(projectId, {
+      name: current.name,
+      ...current.expiresAt ? { expiresAt: current.expiresAt } : {}
+    }, requestId);
+    await this.revokeApiKey(projectId, keyId, requestId);
+    return rotated;
   }
-  async revokeApiKey(keyId, requestId) {
-    return this.transport.request(`/v1/api-keys/${keyId}/revoke`, { method: "POST" }, requestId);
+  async revokeApiKey(projectId, keyId, requestId) {
+    if (!projectId || !keyId) {
+      throw new Error("revokeApiKey requires both projectId and keyId.");
+    }
+    return this.transport.request(`/v1/projects/${projectId}/api-keys/${keyId}`, {
+      method: "DELETE"
+    }, requestId);
   }
   // --- Jobs ---
   async submitJob(projectId, data, requestId) {
@@ -351,6 +373,8 @@ var Forg3tClient = class {
     };
     if (data.type === "MODEL_UNLEARN") {
       this.assertModelUnlearnPreflight(normalizedPayload);
+    } else if (data.type === "ADAPTER_UNLEARN") {
+      this.assertAdapterUnlearnPreflight(normalizedPayload);
     }
     const res = await this.transport.request(`/v1/projects/${projectId}/jobs`, {
       method: "POST",
@@ -575,18 +599,67 @@ var Forg3tClient = class {
       }
     }
     if (data.accessLevel === "layer_a_only") {
+      const rag = data.execution?.rag;
       const target = data.execution?.target;
-      if (!target) {
-        throw new Error("createUnlearningRequest: execution.target is required for layer_a_only.");
+      const adapter = data.execution?.adapter;
+      if (adapter) {
+        throw new Error("createUnlearningRequest: execution.adapter is only valid for layer_a_and_b.");
       }
-      if ((target.provider === "openai" || target.provider === "groq") && !target.model?.trim()) {
-        throw new Error(`createUnlearningRequest: execution.target.model is required when provider=${target.provider}.`);
+      if (target && rag) {
+        throw new Error("createUnlearningRequest: execution.target and execution.rag are mutually exclusive for layer_a_only.");
       }
-      if ((target.provider === "http_generic" || target.provider === "custom") && !target.endpoint?.trim()) {
-        throw new Error(`createUnlearningRequest: execution.target.endpoint is required when provider=${target.provider}.`);
+      if (rag) {
+        if (rag.backend !== "pgvector_postgres") {
+          throw new Error("createUnlearningRequest: execution.rag.backend must be pgvector_postgres.");
+        }
+        if (data.target.type !== "document_id") {
+          throw new Error("createUnlearningRequest: the official RAG lane currently supports target.type=document_id only.");
+        }
+        if (!Array.isArray(data.scope?.integrationIds) || data.scope.integrationIds.length !== 1) {
+          throw new Error("createUnlearningRequest: the official RAG lane requires exactly one scope.integrationIds entry.");
+        }
+        if (data.execution?.routing?.lane && data.execution.routing.lane !== "project_scoped") {
+          throw new Error("createUnlearningRequest: execution.routing.lane must be project_scoped for the official RAG lane.");
+        }
+      } else {
+        if (!target) {
+          throw new Error("createUnlearningRequest: execution.target is required for layer_a_only unless execution.rag is provided.");
+        }
+        if ((target.provider === "openai" || target.provider === "groq") && !target.model?.trim()) {
+          throw new Error(`createUnlearningRequest: execution.target.model is required when provider=${target.provider}.`);
+        }
+        if ((target.provider === "http_generic" || target.provider === "custom") && !target.endpoint?.trim()) {
+          throw new Error(`createUnlearningRequest: execution.target.endpoint is required when provider=${target.provider}.`);
+        }
       }
     }
     if (data.accessLevel === "layer_a_and_b") {
+      const adapter = data.execution?.adapter;
+      if (adapter) {
+        if (adapter.backend !== "peft_lora_safetensors") {
+          throw new Error("createUnlearningRequest: execution.adapter.backend must be peft_lora_safetensors.");
+        }
+        if (data.execution?.model?.uri?.trim()) {
+          throw new Error("createUnlearningRequest: execution.adapter and execution.model are mutually exclusive for layer_a_and_b.");
+        }
+        if (!Array.isArray(data.scope?.integrationIds) || data.scope.integrationIds.length !== 1) {
+          throw new Error("createUnlearningRequest: the official adapter lane requires exactly one scope.integrationIds entry.");
+        }
+        if (data.execution?.routing?.lane && data.execution.routing.lane !== "project_scoped") {
+          throw new Error("createUnlearningRequest: execution.routing.lane must be project_scoped for the official adapter lane.");
+        }
+        const method = String(adapter.method || "attenuate_adapter").trim();
+        if (!["disable_adapter", "attenuate_adapter"].includes(method)) {
+          throw new Error("createUnlearningRequest: execution.adapter.method must be disable_adapter or attenuate_adapter.");
+        }
+        if (method === "attenuate_adapter") {
+          const scaleFactor = Number(adapter.scaleFactor);
+          if (!Number.isFinite(scaleFactor) || scaleFactor <= 0 || scaleFactor >= 1) {
+            throw new Error("createUnlearningRequest: execution.adapter.scaleFactor must be a finite number between 0 and 1 for attenuate_adapter.");
+          }
+        }
+        return;
+      }
       if (!data.execution?.model?.uri?.trim()) {
         throw new Error("createUnlearningRequest: execution.model.uri is required for layer_a_and_b.");
       }
@@ -658,6 +731,40 @@ var Forg3tClient = class {
       );
     }
   }
+  assertAdapterUnlearnPreflight(payload) {
+    if (!payload || typeof payload !== "object") {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload must be an object.");
+    }
+    const asRecord = payload;
+    const config = asRecord.config && typeof asRecord.config === "object" && !Array.isArray(asRecord.config) ? asRecord.config : null;
+    if (!config) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config is required.");
+    }
+    const targetConfig = config.target_config && typeof config.target_config === "object" && !Array.isArray(config.target_config) ? config.target_config : null;
+    const parameters = config.parameters && typeof config.parameters === "object" && !Array.isArray(config.parameters) ? config.parameters : null;
+    const adapter = parameters?.adapter && typeof parameters.adapter === "object" && !Array.isArray(parameters.adapter) ? parameters.adapter : null;
+    if (!targetConfig) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config.target_config is required.");
+    }
+    if (String(targetConfig.backend || "").trim() !== "peft_lora_safetensors") {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config.target_config.backend must be peft_lora_safetensors.");
+    }
+    const adapterUri = String(targetConfig.adapter_uri || "").trim();
+    const adapterUriEnvVar = String(targetConfig.adapter_uri_env_var || "").trim();
+    if (!adapterUri && !adapterUriEnvVar) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: payload.config.target_config requires adapter_uri or adapter_uri_env_var.");
+    }
+    const method = String(adapter?.method || "attenuate_adapter").trim();
+    if (!["disable_adapter", "attenuate_adapter"].includes(method)) {
+      throw new Error("ADAPTER_UNLEARN preflight failed: parameters.adapter.method must be disable_adapter or attenuate_adapter.");
+    }
+    if (method === "attenuate_adapter") {
+      const scaleFactor = Number(adapter?.scaleFactor);
+      if (!Number.isFinite(scaleFactor) || scaleFactor <= 0 || scaleFactor >= 1) {
+        throw new Error("ADAPTER_UNLEARN preflight failed: parameters.adapter.scaleFactor must be between 0 and 1 for attenuate_adapter.");
+      }
+    }
+  }
 };
 
 // src/types.ts
@@ -670,6 +777,8 @@ var IntegrationType = /* @__PURE__ */ ((IntegrationType2) => {
   IntegrationType2["LANGCHAIN"] = "langchain";
   IntegrationType2["OPENROUTER"] = "openrouter";
   IntegrationType2["OPENAI"] = "openai";
+  IntegrationType2["PGVECTOR"] = "pgvector";
+  IntegrationType2["ADAPTER"] = "adapter";
   IntegrationType2["CUSTOM"] = "custom";
   return IntegrationType2;
 })(IntegrationType || {});
@@ -1373,10 +1482,19 @@ var ENTERPRISE_STRICT_QUALITY_GATE_POLICY = {
   ...WHITEBOX_QUALITY_GATE_PRESETS.strict
 };
 function assertDeploymentCompatibility(options) {
-  const normalizedHost = parseHost(options.apiUrl);
-  if (!normalizedHost) {
+  const parsedApiUrl = parseApiUrl(options.apiUrl);
+  if (!parsedApiUrl) {
     throw new Error(`Invalid FORG3T_API_URL: ${options.apiUrl}`);
   }
+  const normalizedHost = parsedApiUrl.hostname.toLowerCase();
+  if (options.profile === "customer_online") {
+    const publicHost = !isPrivateHost(normalizedHost);
+    if (publicHost && parsedApiUrl.protocol !== "https:") {
+      throw new Error(
+        `Customer online profile requires HTTPS for public control-plane hosts. Received ${options.apiUrl}.`
+      );
+    }
+  }
   if (options.profile !== "customer_airgapped") {
     return;
   }
@@ -1407,10 +1525,9 @@ function buildWhiteboxWorkerOptions(profile, baseOptions) {
     logger: baseOptions.logger
   };
 }
-function parseHost(apiUrl) {
+function parseApiUrl(apiUrl) {
   try {
-    const parsed = new URL(apiUrl);
-    return parsed.hostname.toLowerCase();
+    return new URL(apiUrl);
   } catch {
     return null;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@forg3t/sdk",
-    "version": "0.1.4",
+    "version": "0.1.6",
     "description": "Official TypeScript SDK for Forg3t Protocol",
     "main": "./dist/index.js",
     "module": "./dist/index.mjs",
@@ -28,7 +28,9 @@
         "test:whitebox": "node ../../node_modules/ts-node/dist/bin.js tools/whitebox_hardening_smoke.ts",
         "test:example": "npx tsx examples/quickstart.ts",
         "smoke:staging": "node ../../node_modules/ts-node/dist/bin.js examples/staging-smoke.ts",
-        "smoke:customer-onboarding": "node ../../node_modules/ts-node/dist/bin.js examples/staging-smoke.ts",
+        "smoke:customer-onboarding": "npx tsx examples/bootstrap-onboarding.ts",
+        "smoke:cleanroom": "node scripts/run_cleanroom_smoke.js",
+        "example:bootstrap": "npx tsx examples/bootstrap-onboarding.ts",
         "test:breaking": "node scripts/detect-breaking-changes.js",
         "test:contract": "node tools/probe_contract.mjs",
         "test:exports": "node tools/exports_smoke_esm.mjs && node tools/exports_smoke_cjs.cjs",