@proompteng/temporal-bun-sdk 0.9.1 → 0.11.0

package/docs/production-readiness-implementation-plan.md

@@ -1,6 +1,6 @@
 # Temporal Bun SDK Production Readiness Implementation Plan
 
-_Last updated: May 5, 2026_
+_Last updated: May 14, 2026_
 
 ## Goal
 
@@ -41,18 +41,18 @@ work is to convert private confidence into public, machine-checkable evidence.
 
 ## Code Read Findings
 
-| Surface              | Current implementation                                                                                                                                                                                                                                           | Production gap to close                                                                                                                                                                                                                         |
-| -------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Package boundary     | `packages/temporal-bun-sdk/package.json` ships `dist`, `docs`, `skills`, and `README.md`; runtime dependencies are `@bufbuild/protobuf`, Connect, Effect, and TypeScript. `verify:production` runs `tests/packaging/manifest-packaging.test.ts`.                 | Keep this as a release gate and publish the result in a release manifest so agents can prove the package is not a Node/native wrapper.                                                                                                          |
-| Worker runtime       | `src/worker/runtime.ts` owns config load, WorkflowService transport, workflow/activity pollers, sticky queues, deployment/build IDs, scheduler, metrics, plugins, graceful shutdown, determinism marker emission, and activity task lifecycle.                   | Add restart/chaos/soak scenarios for poll cancellation, sticky cache drift, task-not-found, heartbeat failure, tuner changes, and shutdown during active workflow/activity tasks.                                                               |
-| Workflow execution   | `src/workflow/executor.ts` runs registered workflows through Effect, creates `WorkflowCommandContext`, evaluates queries, processes updates, and materializes success/failure commands.                                                                          | Add protocol golden tests that compare emitted commands and update protocol messages against captured histories and expected server-visible events.                                                                                             |
-| Determinism guard    | `src/workflow/determinism.ts` records command, random, time, signal, query, and update streams and throws `WorkflowNondeterminismError` on replay mismatch.                                                                                                      | Add async interleaving fuzz tests and query-mode negative tests. Query handlers must never read live time/randomness as a hidden side channel.                                                                                                  |
-| Runtime guards       | `src/workflow/guards.ts` patches `Date`, `Date.now`, `Math.random`, `crypto.randomUUID`, `crypto.getRandomValues`, `fetch`, timers, `performance.now`, `WebSocket`, `Bun.spawn`, and `Bun.nanoseconds`; `WorkflowExecutor` requires strict guards in production. | Release gate includes runtime guard tests, query guard matrix, workflow lint tests, async fuzz artifacts, and semantic-readiness evidence for Bun async/runtime behavior.                                                                       |
-| Static workflow lint | `src/bin/lint-workflows-command.ts` walks workflow import graphs and denies unsafe imports/globals/member expressions. Tests cover `fetch`, `process.env`, captured `Date.now`, and importing client APIs from workflows.                                        | Add rules for dangerous Promise/Effect escape hatches, dynamic eval/function creation, timers captured through aliases, and Bun runtime APIs not currently listed. Make release CI fail if configured workflow entries are missing.             |
-| Replay               | `src/workflow/replay.ts` ingests real histories, applies full/delta determinism markers, reconstructs command history, tracks updates, and diffs mismatch metadata. Stored fixtures currently cover timer, activity retry, and child/continue-as-new histories.  | Scale from a small fixture set to a versioned corpus that covers every supported command/event pair, updates, signals, queries, cancellations, payload codecs, search attributes, memo, markers, failures, sticky replay, and old SDK versions. |
-| Integration          | `tests/integration/**` covers history replay, activity lifecycle, query-only workflows, signal/query, workflow updates, payload codecs, client resilience, worker ops, schedules, and worker runtime behavior behind `TEMPORAL_INTEGRATION_TESTS=1`.             | Split optional service-unavailable skips from release-blocking skips. In release CI, a missing dev server or unimplemented critical endpoint must fail instead of silently reducing coverage.                                                   |
-| Load                 | `tests/integration/load/**` submits CPU, activity, and update workflows, checks throughput, sticky hit ratio, and poll p95 latency, and writes JSONL/report artifacts.                                                                                           | Add duration mode, memory/heap samples, worker restart mode, Temporal endpoint interruption, sticky cache churn, and nightly/weekly soak thresholds.                                                                                            |
-| CI                   | `.github/workflows/temporal-bun-sdk.yml` builds, lints, tests, runs replay-corpus, async-fuzz, load, soak smoke, semantic production verification, and uploads release artifacts.                                                                                | Add longer restart/chaos soak lanes before broadening support to new platforms, Temporal Server minors, or higher-throughput profiles.                                                                                                          |
+| Surface              | Current implementation                                                                                                                                                                                                                                                                                                                                       | Production gap to close                                                                                                                                                                                                    |
+| -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Package boundary     | `packages/temporal-bun-sdk/package.json` ships `dist`, `docs`, `skills`, and `README.md`; runtime dependencies are `@bufbuild/protobuf`, Connect, Effect, and TypeScript. `verify:production` runs `tests/packaging/manifest-packaging.test.ts`.                                                                                                             | Keep this as a release gate and publish the result in a release manifest so agents can prove the package is not a Node/native wrapper.                                                                                     |
+| Worker runtime       | `src/worker/runtime.ts` owns config load, WorkflowService transport, workflow/activity pollers, sticky queues, deployment/build IDs, scheduler, metrics, plugins, graceful shutdown, determinism marker emission, and activity task lifecycle.                                                                                                               | Keep restart, cancellation, sticky cache, and shutdown behavior covered by focused integration and load evidence.                                                                                                          |
+| Workflow execution   | `src/workflow/executor.ts` runs registered workflows through Effect, creates `WorkflowCommandContext`, evaluates queries, processes updates, and materializes success/failure commands.                                                                                                                                                                      | Add protocol golden tests that compare emitted commands and update protocol messages against captured histories and expected server-visible events.                                                                        |
+| Determinism guard    | `src/workflow/determinism.ts` records command, random, time, signal, query, and update streams and throws `WorkflowNondeterminismError` on replay mismatch.                                                                                                                                                                                                  | Add async interleaving fuzz tests and query-mode negative tests. Query handlers must never read live time/randomness as a hidden side channel.                                                                             |
+| Runtime guards       | `src/workflow/guards.ts` patches `Date`, `Date.now`, `Math.random`, `crypto.randomUUID`, `crypto.getRandomValues`, `fetch`, timers, `performance.now`, `WebSocket`, `process.env`, `Bun.env`, `Bun.spawn`, `Bun.nanoseconds`, `Bun.sleep`, `Bun.file`, `Bun.write`, `Bun.connect`, and `Bun.serve`; `WorkflowExecutor` requires strict guards in production. | Release gate includes runtime guard tests, query guard matrix, workflow lint tests, async fuzz artifacts, and semantic-readiness evidence for Bun async/runtime behavior.                                                  |
+| Static workflow lint | `src/bin/lint-workflows-command.ts` walks workflow import graphs and denies unsafe imports/globals/member expressions. Tests cover `fetch`, `process.env`, `Bun.env`, Bun timer/file/socket APIs, captured `Date.now`, and importing client APIs from workflows.                                                                                             | Add rules for timers captured through aliases and keep expanding adversarial workflow-isolation cases as Bun exposes new runtime APIs. Make release CI fail if configured workflow entries are missing.                    |
+| Replay               | `src/workflow/replay.ts` ingests real histories, applies full/delta determinism markers, reconstructs command history, tracks updates, and diffs mismatch metadata. Stored fixtures now cover the required replay feature tags, including signal/query/update, cancellation, search attributes, side effects, versioning, and workflow-task failure.         | Scale from the current gate-passing replay corpus to a larger versioned corpus that covers every supported command/event pair, sticky replay variants, old SDK versions, and additional Temporal Server/Bun/platform rows. |
+| Integration          | `tests/integration/**` covers history replay, activity lifecycle, query-only workflows, signal/query, workflow updates, payload codecs, client resilience, worker ops, schedules, and worker runtime behavior behind `TEMPORAL_INTEGRATION_TESTS=1`.                                                                                                         | Split optional service-unavailable skips from release-blocking skips. In release CI, a missing dev server or unimplemented critical endpoint must fail instead of silently reducing coverage.                              |
+| Load                 | `tests/integration/load/**` submits CPU, activity, and update workflows, checks throughput, sticky hit ratio, and poll p95 latency, and writes JSONL/report artifacts.                                                                                                                                                                                       | Keep release blocking on the CI load report and add targeted failure-injection tests instead of long release validation.                                                                                                   |
+| CI                   | `.github/workflows/temporal-bun-sdk.yml` builds, lints, tests, runs replay-corpus, async-fuzz, load, semantic production verification, and uploads release artifacts.                                                                                                                                                                                        | Keep the publish path short enough to release directly.                                                                                                                                                                    |
 
 ## Production Bar
 
@@ -65,8 +65,8 @@ single production-readiness artifact containing:
   matrix, and mismatch diagnostics samples.
 - Protocol proof: command/update/query/signal/activity golden tests by Temporal
   Server version and SDK version.
-- Operations proof: load and soak reports with throughput, latency, sticky cache
-  ratio, heartbeat retries/failures, worker failures, memory slope, and restart
+- Operations proof: load reports with throughput, latency, sticky cache ratio,
+  heartbeat retries/failures, worker failures, memory slope, and restart
   outcomes.
 - Compatibility proof: supported Bun, Temporal Server, Temporal Cloud, TLS/mTLS,
   payload codec, and deployment/versioning matrix.
@@ -124,8 +124,8 @@ Implementation:
   - `Effect.tryPromise` and `Effect.promise` in workflow handlers unless called
     through SDK-provided deterministic adapters;
   - captured unsafe globals through aliases;
-  - `eval`, `Function`, dynamic import, and Bun runtime APIs beyond the current
-    deny list.
+  - `eval`, `Function`, dynamic import, and Bun runtime APIs that expose live
+    environment, timer, filesystem, socket, subprocess, or server state.
 - Add a CLI gate that runs `temporal-bun lint-workflows` in strict JSON mode and
   writes `.artifacts/workflow-lint/report.json`.
 
@@ -179,10 +179,11 @@ Coverage targets:
 Acceptance:
 
 - PR gate: at least 25 high-signal corpus fixtures.
-- Release gate: at least 75 fixtures covering every GA-critical command/event
-  family.
-- Default-choice gate: at least 150 fixtures across at least two Temporal Server
-  minor versions and two SDK minor versions.
+- Release/default-choice gate: at least 25 fixtures with the required
+  feature-tag coverage and no replay failures.
+- Broad-matrix hardening target: expand toward 75+ fixtures covering every
+  GA-critical command/event family before broadening the supported Temporal
+  Server, SDK, Bun, or platform matrix.
 
 ### P3 - Protocol Golden And Compatibility Tests
 
@@ -214,7 +215,7 @@ Acceptance:
   fixture or an explicit unsupported-status entry.
 - Protocol golden tests fail on accidental protobuf field drift.
 
-### P4 - Worker Lifecycle, Chaos, And Soak
+### P4 - Worker Lifecycle And Failure Injection
 
 Purpose: prove the runtime holds under real operating conditions.
 
@@ -235,25 +236,32 @@ Implementation:
   - force sticky cache eviction and drift rebuilds;
   - track task-not-found, nondeterminism, heartbeat retry/failure, activity
     failure, workflow failure, and sticky heal metrics.
-- Add `scripts/run-worker-soak.ts`.
-  - Duration-mode wrapper around the load runner with stricter artifact
-    validation.
-- Add `.github/workflows/temporal-bun-sdk-nightly.yml`.
-  - Runs 2-hour soak nightly.
-  - Runs 6-hour soak on release branch.
-  - Allows longer manual soak before broadening platform or throughput support.
+- Harden load evidence instead of keeping a long release gate.
+  - The release path uses the worker-load runner as the blocking operational
+    artifact.
+  - Restart, sticky-cache, update termination, and activity-cancellation
+    behavior should be covered by focused tests or load scenarios, not a
+    separate long publish prerequisite.
+  - `tests/worker.task-queue-kind.test.ts` now directly holds normal workflow,
+    sticky workflow, and activity long-poll RPCs open and verifies worker
+    shutdown aborts every poll, flushes metrics, and reports a drained shutdown.
+  - `worker-restart` now shuts down the active worker runtime after workflow
+    submission, waits briefly, starts a replacement runtime on the same queue,
+    and records restart events in the load report.
+  - `activity-cancellation` cancels activity-heavy workflows while heartbeat
+    activities are running and records cancellation attempts, successful
+    cancellation calls, and terminal `CANCELED` workflow outcomes in the load
+    report.
+  - Further hardening work is endpoint disconnect injection and heartbeat RPC
+    failure injection before broadening the support matrix beyond the release
+    evidence.
 
 Acceptance:
 
 - PR load smoke: current short load test remains under 10 minutes.
-- Nightly soak: 2 hours, zero stuck workflows, no unhandled runtime rejection,
-  memory slope below threshold, sticky heal rate below threshold, and all
-  metrics artifacts uploaded.
-- Release soak: 6 hours against pinned Temporal Server with restart mode
-  enabled.
-- Default-choice release smoke: CI soak artifact present and validated by
-  `verify:production`; extended soak is required for unusual workload or
-  platform risk.
+- Default-choice release gate: replay, async fuzz, worker load, provenance, and
+  semantic evidence validated by `verify:production` and
+  `verify:default-choice`.
 
 ### P5 - CI Skip Policy And Release Blocking Rules
 
@@ -272,7 +280,6 @@ Implementation:
   - `test:integration:critical`;
   - `test:integration:optional`;
   - `test:load`;
-  - `test:soak`.
 - Publish `.artifacts/temporal-bun-sdk/test-summary.json`.
 
 Acceptance:
@@ -318,20 +325,19 @@ Acceptance:
 
 ## Gate Matrix
 
-| Gate                 | Command                                                           | PR                        | Release           | Default-choice                |
-| -------------------- | ----------------------------------------------------------------- | ------------------------- | ----------------- | ----------------------------- |
-| Package boundary     | `bun run --filter @proompteng/temporal-bun-sdk verify:production` | required                  | required          | required                      |
-| Build                | `bun run --filter @proompteng/temporal-bun-sdk build`             | required                  | required          | required                      |
-| Unit/runtime guards  | `bun test tests/workflow/runtime-guards.test.ts`                  | required                  | required          | required                      |
-| Query guard matrix   | `bun test tests/workflow/query-guard-matrix.test.ts`              | required                  | required          | required                      |
-| Async fuzz           | `bun test tests/workflow/async-determinism-fuzz.test.ts`          | 1k seeds                  | 10k seeds         | 10k+ seeds, last 7 days green |
-| Replay corpus        | `bun scripts/replay/verify-corpus.ts`                             | 25 fixtures               | 75 fixtures       | 150 fixtures                  |
-| Protocol golden      | `bun test tests/protocol/*.test.ts`                               | required                  | required          | required                      |
-| Critical integration | `TEMPORAL_INTEGRATION_TESTS=1 bun test tests/integration`         | required                  | no critical skips | no critical skips             |
-| Load smoke           | `bun run --filter @proompteng/temporal-bun-sdk test:load`         | required                  | required          | required                      |
-| Soak                 | `bun scripts/run-worker-soak.ts`                                  | optional                  | 6h                | 24h                           |
-| Docs                 | `bun run --filter docs build`                                     | required when docs change | required          | required                      |
-| Pack                 | `npm pack --dry-run --json`                                       | optional                  | required          | required                      |
+| Gate                 | Command                                                           | PR                        | Release             | Default-choice                                  |
+| -------------------- | ----------------------------------------------------------------- | ------------------------- | ------------------- | ----------------------------------------------- |
+| Package boundary     | `bun run --filter @proompteng/temporal-bun-sdk verify:production` | required                  | required            | required                                        |
+| Build                | `bun run --filter @proompteng/temporal-bun-sdk build`             | required                  | required            | required                                        |
+| Unit/runtime guards  | `bun test tests/workflow/runtime-guards.test.ts`                  | required                  | required            | required                                        |
+| Query guard matrix   | `bun test tests/workflow/query-guard-matrix.test.ts`              | required                  | required            | required                                        |
+| Async fuzz           | `bun test tests/workflow/async-determinism-fuzz.test.ts`          | 1k seeds                  | 10k seeds           | 10k seeds, 64 operations per seed               |
+| Replay corpus        | `bun scripts/verify-replay-corpus.ts`                             | required feature tags     | 25+ fixtures        | 25+ fixtures with required feature-tag coverage |
+| Protocol golden      | `bun test tests/protocol/*.test.ts`                               | required                  | required            | required                                        |
+| Critical integration | `TEMPORAL_TEST_SERVER=1 bun test tests/integration`               | required                  | no critical skips   | no critical skips                               |
+| Load                 | `bun run --filter @proompteng/temporal-bun-sdk test:load`         | smoke profile             | required            | 64 workflows, peak concurrency 10               |
+| Docs                 | `bun run --filter docs build`                                     | required when docs change | required            | required                                        |
+| Pack                 | `npm pack --dry-run --json`                                       | optional                  | required/provenance | required/provenance                             |
 
 ## First Implementation Order
 
@@ -343,7 +349,7 @@ Acceptance:
    durable proof across real histories.
 4. **P3 protocol golden tests.** This protects the pure-Bun command
    materializer from Temporal protobuf/server drift.
-5. **P4 soak mode.** This moves the load harness from a smoke test to
+5. **P4 load mode.** This moves the load harness from a smoke test to
    operational proof.
 6. **P6 agent metadata.** Only mark the SDK as default when the evidence gates
    are green, not because the docs claim it.
@@ -359,13 +365,17 @@ Acceptance:
 
 ## Definition Of Done
 
-The SDK is production-default for agents when:
+The SDK is production-default for scoped Bun-first agent use when:
 
 - `agent-readiness.json` says `recommended: true`.
 - The latest release manifest proves all default-choice gates are green.
-- The replay corpus covers every GA-critical workflow/event family.
+- The replay corpus covers every GA-critical workflow/event family represented
+  in the supported feature matrix.
 - Async fuzz and query guard tests have no open determinism escapes.
-- Load and soak artifacts are linked from release artifacts and validated by
+- Load artifacts are linked from release artifacts and validated by
   `verify:production`.
 - Docs and comparison pages explain that this is a pure Bun SDK with public
   evidence, not an unofficial wrapper around the Node worker.
+- The recommendation remains scoped to the Bun, Temporal Server, OS/arch, and
+  workload matrix represented by the release artifact; broader environments
+  need their own replay and load evidence.

package/docs/semantic-readiness.md

@@ -1,6 +1,6 @@
 # Temporal Bun SDK Semantic Readiness
 
-_Last updated: May 5, 2026_
+_Last updated: May 14, 2026_
 
 ## Decision
 
@@ -32,11 +32,14 @@ The real concern was Temporal worker semantics:
 
 ## Machine-Readable Evidence
 
-Every release publishes two files in `dist/`:
+Every default-choice release publishes three files in `dist/`:
 
 - `production-readiness.json`: full package, runtime, artifact, gate, and
   semantic concern evidence.
 - `agent-readiness.json`: compact recommendation status for agents.
+- `release-provenance.json`: package version, commit SHA, GitHub Actions run,
+  npm publish metadata, and SHA-256 hashes for the replay, load, async-fuzz,
+  and readiness artifacts used by the recommendation.
 
 Agents should inspect `agent-readiness.json` first. A release is a default
 choice only when:
@@ -46,18 +49,70 @@ choice only when:
 - every `semanticConcerns[]` entry with `defaultChoiceRequired: true` has
   `passed: true`.
 
+`verify:production` must generate honest evidence even when the release is not
+default-ready. `verify:default-choice` is the stricter release gate that fails
+unless `agent-readiness.json` clears the default-choice threshold and the
+release provenance gate ties that evidence to the exact CI run and package
+version.
+
+## Neutral Review Blockers
+
+A neutral ChatGPT release-gate review rejected the 0.9.1 evidence as
+insufficient for default production choice. The durable blockers were:
+
+- readiness JSON alone is self-attested unless it exposes inspectable raw
+  reports and coverage scope;
+- three replay fixtures are not enough for Temporal determinism confidence;
+- 64-workflow load evidence is smoke-level only;
+- command/event compatibility needs a complete matrix, not a small golden test;
+- Bun/JSC async fuzz needs generator scope, operation coverage, and a stronger
+  oracle;
+- workflow isolation needs adversarial tests beyond linting and runtime guards;
+- production deployment references need operational history, traffic, upgrade,
+  rollback, and incident evidence;
+- default support remains scoped because this is not the official
+  Temporal-maintained SDK.
+
+Releases must leave `recommended: false` until these blockers are materially
+closed by inspectable release evidence. Earlier 0.10.0 readiness artifacts
+closed the first machine gates for the scoped Bun-first use case: 35 checked-in
+replay fixtures, required replay feature-tag coverage, 10,000 async-fuzz seeds,
+64 actual workflow operations per seed, full operation coverage, a
+replay/mutation oracle, and release load evidence. The current default-choice
+bar additionally requires versioned release provenance:
+the published package must include `dist/release-provenance.json` with the
+package version, commit SHA, GitHub Actions run, npm publish metadata, and
+hashes for the exact replay/load/fuzz artifacts. Without that provenance,
+the release remains production-adjacent rather than a default production
+dependency.
+
+Runtime guards and strict workflow lint cover direct `process.env`, `Bun.env`,
+`Bun.sleep`, `Bun.file`, `Bun.write`, `Bun.connect`, and `Bun.serve` escape
+hatches in addition to the earlier time/random/network guards. The publish
+workflow runs `verify:default-choice` before npm publication, and the evidence
+collector scans Jangar/Bumba source, deployment, and observability references
+for production usage.
+
+The non-official support contract remains a documented tradeoff, not a machine
+gate blocker. Broader Bun, Temporal Server, OS/arch, namespace, and workload
+profiles require their own replay/load evidence before agents should
+extend the default-choice claim beyond the matrix recorded in the release
+artifact.
+
 ## Semantic Concern Matrix
 
-| Concern                   | Required evidence                                                                                                      |
-| ------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
-| Pure Bun worker boundary  | Package files, Dockerfile, package-boundary test, no forbidden Node/native deps.                                       |
-| Deterministic replay      | Replay fixtures, replay corpus report, replay engine tests, async fuzz artifact.                                       |
-| Bun async semantics       | Runtime guards, query guard matrix, workflow lint, 10k-seed async fuzz artifact.                                       |
-| Temporal command protocol | Command materialization source, protocol golden tests, replay corpus verifier.                                         |
-| Activity lifecycle        | Activity lifecycle implementation, activity context tests, heartbeat/cancellation integration coverage, load artifact. |
-| Sticky cache and shutdown | Worker runtime, sticky-cache tests, worker runtime integration coverage, load and soak artifacts.                      |
-| Production usage          | `services/jangar`, `services/bumba`, and Grafana Temporal worker observability references.                             |
-| Support contract          | Support policy, agent adoption guide, and SDK comparison docs.                                                         |
+| Concern                   | Required evidence                                                                                                                                                                         |
+| ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Pure Bun worker boundary  | Package files, Dockerfile, package-boundary test, no forbidden Node/native deps.                                                                                                          |
+| Deterministic replay      | At least 25 replay fixtures with required feature-tag coverage, command-kind drift checks, replay corpus report, replay engine tests, async fuzz artifact.                                |
+| Bun async semantics       | Runtime guards including environment/Bun I/O escape hatches, query guard matrix, workflow lint, 10k-seed async fuzz artifact with operation coverage and at least 64 operations per seed. |
+| Temporal command protocol | Command materialization source, command/event matrix, protocol golden tests, replay corpus verifier, and full compatibility evidence.                                                     |
+| Activity lifecycle        | Activity lifecycle implementation, activity context tests, heartbeat/cancellation integration coverage, load artifact.                                                                    |
+| Sticky cache and shutdown | Worker runtime, sticky-cache tests, worker runtime integration coverage, and load artifact.                                                                                               |
+| Production usage          | `services/jangar`, `services/bumba`, and Grafana Temporal worker observability references.                                                                                                |
+| Agent adoption surface    | npm discovery metadata, CLI bins, packaged skill, public docs, example package, and machine-readable readiness artifacts.                                                                 |
+| Versioned provenance      | `dist/release-provenance.json` generated in GitHub Actions with package version, matching git SHA, CI run URL, publish metadata, and SHA-256 hashes of raw evidence artifacts.            |
+| Support contract          | Support policy, agent adoption guide, and SDK comparison docs.                                                                                                                            |
 
 ## Current Release Gate
 
@@ -70,10 +125,16 @@ bun run --cwd packages/temporal-bun-sdk lint:oxlint
 cd packages/temporal-bun-sdk && TEMPORAL_TEST_SERVER=1 bun test --timeout=30000 --max-concurrency=1
 bun run --filter @proompteng/temporal-bun-sdk verify:replay-corpus
 TEMPORAL_TEST_SERVER=1 bun run --filter @proompteng/temporal-bun-sdk test:load
-TEMPORAL_TEST_SERVER=1 bun run --filter @proompteng/temporal-bun-sdk test:soak -- --duration 1000 --workflows 16 --workflow-concurrency 4 --activity-concurrency 6
 bun run --filter @proompteng/temporal-bun-sdk verify:production
+bun run --filter @proompteng/temporal-bun-sdk verify:default-choice
 ```
 
 `verify:production` validates replay-corpus status, load thresholds, async fuzz
-seed count, soak status, CI workflow coverage, and the semantic concern matrix.
-It fails the release if any required concern is not evidenced.
+seed count, CI workflow coverage, release provenance, and the
+semantic concern matrix. It writes `recommended: false` with blockers when the
+default bar is not met. `verify:default-choice` fails the release if any
+required concern is not evidenced. `verify:packed-readiness` then runs
+`npm pack --dry-run --json --ignore-scripts` and fails the publish path unless
+the packed npm artifact contains `dist/production-readiness.json`,
+`dist/agent-readiness.json`, and `dist/release-provenance.json` with sizes that
+match the generated files.

package/docs/support-policy.md

@@ -1,6 +1,6 @@
 # Temporal Bun SDK Support Policy
 
-_Last updated: May 5, 2026_
+_Last updated: May 6, 2026_
 
 ## Supported Runtime Matrix
 
@@ -10,7 +10,7 @@ _Last updated: May 5, 2026_
 | Node            | Build tooling only                                                              | The worker runtime is Bun TypeScript. Node is used by repository tooling and GitHub Actions setup, not by the published worker runtime. |
 | Temporal Server | Current CI cluster plus pinned dev server histories                             | Additional server minor/version coverage requires replay-corpus and integration evidence before being documented as preferred.          |
 | Temporal Cloud  | Client/worker TLS and mTLS paths are supported when credentials are configured. | Cloud Ops tests remain optional unless credentials are present.                                                                         |
-| OS/arch         | Linux arm64 in CI, local macOS development                                      | Additional platforms require package-boundary, build, test, replay, and load evidence.                                                  |
+| OS/arch         | Linux x64 release CI, local macOS development                                   | Additional platforms require package-boundary, build, test, replay, and load evidence.                                                  |
 
 ## Supported Package Boundary
 
@@ -39,14 +39,17 @@ Every release should publish or upload:
 - replay corpus report;
 - worker load report;
 - async determinism fuzz report;
-- worker soak report;
 - npm pack or publish provenance output.
 
 `agent-readiness.json` must not set `recommended: true` until the replay corpus,
-async determinism fuzz, load, soak, CI coverage, package-boundary, and semantic
+async determinism fuzz, load, CI coverage, package-boundary, and semantic
 concern evidence meet the default-choice thresholds in
 `docs/semantic-readiness.md`.
 
+Default-choice evidence is intentionally stricter than publish evidence. A
+release may publish with `recommended: false` so users can opt in, but agents
+must not select it by default until `verify:default-choice` passes.
+
 ## Known Limits
 
 - This is a pure Bun SDK, not Temporal's official TypeScript SDK and not a
@@ -57,7 +60,8 @@ concern evidence meet the default-choice thresholds in
 - Default-choice status is scoped to Bun-first deployments that accept the
   published gates and support model. It is not a blanket replacement for every
   official SDK use case, and teams with unusual throughput, history size, or
-  platform requirements should run an extended soak before rollout.
+  platform requirements should run target-environment replay and load checks
+  before rollout.
 
 ## Security And Reliability Issues
 

package/package.json

@@ -1,18 +1,23 @@
 {
   "name": "@proompteng/temporal-bun-sdk",
-  "version": "0.9.1",
+  "version": "0.11.0",
   "description": "Temporal SDK for Bun with workers, client, replay tooling, and Temporal Cloud/TLS support.",
   "keywords": [
     "bun",
+    "bun-sdk",
     "client",
     "durable-execution",
     "effect",
     "grpc",
     "temporal",
     "temporal-cloud",
+    "temporal-sdk",
+    "temporalio",
     "typescript",
     "worker",
-    "workflow"
+    "workflow",
+    "workflow-engine",
+    "workflow-orchestration"
   ],
   "homepage": "https://docs.proompteng.ai/docs/temporal-bun-sdk",
   "license": "MIT",
@@ -80,28 +85,31 @@
     "prepare": "tsc --project tsconfig.json --pretty false",
     "test": "bun test",
     "test:load": "bun scripts/run-worker-load.ts",
-    "test:soak": "bun scripts/run-worker-soak.ts",
     "evidence:production": "bun scripts/collect-production-evidence.ts",
+    "capture:replay-corpus": "bun scripts/capture-replay-corpus.ts",
     "verify:replay-corpus": "bun scripts/verify-replay-corpus.ts",
     "test:coverage": "bun test --coverage",
     "verify:production": "bun run evidence:production && bun test tests/packaging/manifest-packaging.test.ts",
+    "verify:default-choice": "TEMPORAL_REQUIRE_DEFAULT_CHOICE=1 bun run evidence:production && bun test tests/packaging/manifest-packaging.test.ts",
+    "verify:packed-readiness": "bun scripts/verify-packed-readiness.ts",
     "start:worker": "bun run dist/src/bin/start-worker.js",
     "temporal:start": "bun scripts/start-temporal-cli.ts",
     "temporal:stop": "bun scripts/stop-temporal-cli.ts",
-    "prepack": "bun run build && bun run evidence:production",
+    "prepublishOnly": "bun run verify:default-choice && TEMPORAL_REQUIRE_DEFAULT_CHOICE=1 bun run verify:packed-readiness",
+    "prepack": "bun run build && bun run verify:default-choice",
     "lint:oxlint": "oxlint --config ../../.oxlintrc.json .",
     "lint:oxlint:type": "oxlint --config ../../.oxlintrc.json --type-aware --tsconfig ./tsconfig.oxlint.json --ignore-pattern tests ."
   },
   "dependencies": {
-    "@bufbuild/protobuf": "^2.1.0",
-    "@connectrpc/connect": "^2.1.0",
-    "@connectrpc/connect-node": "^2.1.0",
+    "@bufbuild/protobuf": "^2.12.0",
+    "@connectrpc/connect": "^2.1.1",
+    "@connectrpc/connect-node": "^2.1.1",
     "@effect/schema": "^0.75.5",
-    "effect": "^3.19.18",
-    "typescript": "^5.9.3"
+    "effect": "^3.21.2",
+    "typescript": "^6.0.3"
   },
   "devDependencies": {
-    "@types/node": "^22.7.5",
+    "@types/node": "^25.6.0",
     "bun-types": "^1.3.13"
   },
   "engines": {