dominus-sdk-nodejs 11.0.2 → 11.0.5

package/docs/agent-guide/2026-06-27-0849-sdk-orient/06-workflows-commands-and-ci.md

@@ -1,58 +1,58 @@
-# 06 Workflows, Commands, And CI
-
-All commands from `package.json` `scripts`.
-
-## Install
-
-```bash
-npm ci        # CI / reproducible
-npm install   # local
-```
-
-## Build / Dev
-
-```bash
-npm run build   # tsc -> dist/
-npm run dev     # tsc --watch
-npm run clean   # rm -rf dist
-```
-
-## Typecheck / Lint
-
-```bash
-npm run typecheck   # tsc --noEmit
-npm run lint        # tsc --noEmit (lint == typecheck in this repo)
-npm run test:types  # tsc -p tsconfig.type-tests.json (the *.typecheck.ts files)
-```
-
-## Test
-
-```bash
-npm test
-```
-
-`npm test` = `build` + `test:types` + an explicit `node --test` file list (24
-files under `tests/`). Run before finalizing substantial changes (`CLAUDE.md`
-Validation). Tests are committed and present — the older "no committed tests"
-note is stale.
-
-## Fast Local Validation
-
-`npm run typecheck` (or `lint`) for a quick compile check; `npm run test:types`
-for the type-level contract tests.
-
-## Full Validation
-
-`npm test` (build + type tests + unit/contract tests).
-
-## CI Workflows
-
-| Workflow | Trigger | Signal |
-|---|---|---|
-| `.github/workflows/publish-production.yml` | push to `production` | `npm ci` + build + npm publish (skips if version already on registry; falls back to provenance publish). |
-| `.github/workflows/publish-staging.yml` | (staging branch) | npm publish lane. |
-| `.github/workflows/publish-development.yml` | (development branch) | npm publish lane. |
-
-Per workspace reality, only the `production` lane is the live publish path for
-this repo. Publishing is version-gated: bump `package.json` `version` or the
-publish step no-ops.
+# 06 Workflows, Commands, And CI
+
+All commands from `package.json` `scripts`.
+
+## Install
+
+```bash
+npm ci        # CI / reproducible
+npm install   # local
+```
+
+## Build / Dev
+
+```bash
+npm run build   # tsc -> dist/
+npm run dev     # tsc --watch
+npm run clean   # rm -rf dist
+```
+
+## Typecheck / Lint
+
+```bash
+npm run typecheck   # tsc --noEmit
+npm run lint        # tsc --noEmit (lint == typecheck in this repo)
+npm run test:types  # tsc -p tsconfig.type-tests.json (the *.typecheck.ts files)
+```
+
+## Test
+
+```bash
+npm test
+```
+
+`npm test` = `build` + `test:types` + an explicit `node --test` file list (24
+files under `tests/`). Run before finalizing substantial changes (`CLAUDE.md`
+Validation). Tests are committed and present — the older "no committed tests"
+note is stale.
+
+## Fast Local Validation
+
+`npm run typecheck` (or `lint`) for a quick compile check; `npm run test:types`
+for the type-level contract tests.
+
+## Full Validation
+
+`npm test` (build + type tests + unit/contract tests).
+
+## CI Workflows
+
+| Workflow | Trigger | Signal |
+|---|---|---|
+| `.github/workflows/publish-production.yml` | push to `production` | `npm ci` + build + npm publish (skips if version already on registry; falls back to provenance publish). |
+| `.github/workflows/publish-staging.yml` | (staging branch) | npm publish lane. |
+| `.github/workflows/publish-development.yml` | (development branch) | npm publish lane. |
+
+Per workspace reality, only the `production` lane is the live publish path for
+this repo. Publishing is version-gated: bump `package.json` `version` or the
+publish step no-ops.

package/docs/agent-guide/2026-06-27-0849-sdk-orient/07-operations-release-and-live-proof.md

@@ -1,40 +1,40 @@
-# 07 Operations, Release, And Live Proof
-
-## Deployment Lane
-
-This is a published npm package, not a deployed service. "Release" = npm publish.
-
-- Push to `production` → `.github/workflows/publish-production.yml` →
-  `npm publish --access public`.
-- Per workspace convention this repo's production branch is `production` (NOT
-  `dominus-production`, which is the convention for other Dominus repos).
-- Requires GitHub Environment `production` with `NPM_TOKEN` (or npm OIDC trusted
-  publishing for the provenance-only retry).
-
-## Release Files And Version Rules
-
-- `package.json` `version` is the single source of truth (6.6.0 at this
-  snapshot). The publish step checks `npm view <name>@<version>` and skips if the
-  version already exists, so **a version bump is required to publish**.
-- `CHANGELOG.md` records each version's changes; update it with the bump.
-- `package.json` `files` ships `dist`, `README.md`, and `docs`.
-- `prepublishOnly` runs `npm run build` so `dist/` is fresh in the tarball.
-
-## Live Proof
-
-- Registry: `npm view dominus-sdk-nodejs version` should match the pushed
-  `package.json` version after the workflow succeeds.
-- CI: the publish-production workflow run on the `production` push.
-
-## Done Definitions
-
-- **Local done:** `npm test` green (build + type tests + unit/contract tests).
-- **CI done:** publish-production workflow succeeds.
-- **Release done:** new version visible on npm.
-
-## Rollback
-
-Per `docs/workflow-hard-cut-release.md`: downgrade target is the previously
-published production SDK version. Trigger: customers report Authority-backed
-recipe launch or native pipelines cannot start. (npm versions are immutable;
-"rollback" means consumers pin the prior version.)
+# 07 Operations, Release, And Live Proof
+
+## Deployment Lane
+
+This is a published npm package, not a deployed service. "Release" = npm publish.
+
+- Push to `production` → `.github/workflows/publish-production.yml` →
+  `npm publish --access public`.
+- Per workspace convention this repo's production branch is `production` (NOT
+  `dominus-production`, which is the convention for other Dominus repos).
+- Requires GitHub Environment `production` with `NPM_TOKEN` (or npm OIDC trusted
+  publishing for the provenance-only retry).
+
+## Release Files And Version Rules
+
+- `package.json` `version` is the single source of truth (6.6.0 at this
+  snapshot). The publish step checks `npm view <name>@<version>` and skips if the
+  version already exists, so **a version bump is required to publish**.
+- `CHANGELOG.md` records each version's changes; update it with the bump.
+- `package.json` `files` ships `dist`, `README.md`, and `docs`.
+- `prepublishOnly` runs `npm run build` so `dist/` is fresh in the tarball.
+
+## Live Proof
+
+- Registry: `npm view dominus-sdk-nodejs version` should match the pushed
+  `package.json` version after the workflow succeeds.
+- CI: the publish-production workflow run on the `production` push.
+
+## Done Definitions
+
+- **Local done:** `npm test` green (build + type tests + unit/contract tests).
+- **CI done:** publish-production workflow succeeds.
+- **Release done:** new version visible on npm.
+
+## Rollback
+
+Per `docs/workflow-hard-cut-release.md`: downgrade target is the previously
+published production SDK version. Trigger: customers report Authority-backed
+recipe launch or native pipelines cannot start. (npm versions are immutable;
+"rollback" means consumers pin the prior version.)

package/docs/agent-guide/2026-06-27-0849-sdk-orient/08-security-privacy-and-secrets.md

@@ -1,38 +1,38 @@
-# 08 Security, Privacy, And Secrets
-
-## Auth Boundaries
-
-- **Service auth:** `DOMINUS_TOKEN` PSK → minted short-lived JWT via gateway
-  `/jwt/mint`, cached (`src/lib/client.ts`). Default for namespace calls.
-- **User auth:** optional `userToken` passes a caller JWT through unchanged;
-  the backend authorizes the user context.
-- **Selected-scope:** `mintSelectedScopeJwt(targetOrgId, targetEnv)` is the only
-  supported selected-scope mint helper; scope keys off org + environment.
-- **Local JWT helpers:** `verifyJwtLocally`, `isJwtValid`, `auth.validateJwt`
-  (local payload/expiry checks — not full remote introspection), `auth.getJwks`
-  (cached public keys).
-
-Identity-family rule (workspace policy): service token, service JWT, portal user
-JWT, client JWT, and selected-scope operator token are NOT interchangeable. Do
-not forward a user or machine JWT to admin-only planes.
-
-Service-side 401 rule (`CLAUDE.md`): a non-`/portal/auth/*` 401 must not be
-laundered into user-session expiry by callers. Classify by
-`DominusError.endpoint`, not message strings — every `getServiceJwt` throw
-carries `endpoint='/jwt/mint'`.
-
-## Secret / Config Resolution
-
-- `src/lib/config.ts` resolves gateway/proxy/url config and `DOMINUS_TOKEN`
-  from env. No secret values are committed.
-- `.gitignore` excludes `.env`, `.env.local`, `.env.*.local`, `.npmrc`.
-
-## PHI / Sensitive-Data Rules
-
-- This SDK carries no PHI itself, but it transports caller data to backends.
-- Never log or write into docs: PHI, secret values, tokens, cookies, JWTs, raw
-  request/response bodies.
-
-## Must Never Be Written Into Docs
-
-Tokens, PSKs, JWTs, secret values, raw response bodies, customer/patient data.
+# 08 Security, Privacy, And Secrets
+
+## Auth Boundaries
+
+- **Service auth:** `DOMINUS_TOKEN` PSK → minted short-lived JWT via gateway
+  `/jwt/mint`, cached (`src/lib/client.ts`). Default for namespace calls.
+- **User auth:** optional `userToken` passes a caller JWT through unchanged;
+  the backend authorizes the user context.
+- **Selected-scope:** `mintSelectedScopeJwt(targetOrgId, targetEnv)` is the only
+  supported selected-scope mint helper; scope keys off org + environment.
+- **Local JWT helpers:** `verifyJwtLocally`, `isJwtValid`, `auth.validateJwt`
+  (local payload/expiry checks — not full remote introspection), `auth.getJwks`
+  (cached public keys).
+
+Identity-family rule (workspace policy): service token, service JWT, portal user
+JWT, client JWT, and selected-scope operator token are NOT interchangeable. Do
+not forward a user or machine JWT to admin-only planes.
+
+Service-side 401 rule (`CLAUDE.md`): a non-`/portal/auth/*` 401 must not be
+laundered into user-session expiry by callers. Classify by
+`DominusError.endpoint`, not message strings — every `getServiceJwt` throw
+carries `endpoint='/jwt/mint'`.
+
+## Secret / Config Resolution
+
+- `src/lib/config.ts` resolves gateway/proxy/url config and `DOMINUS_TOKEN`
+  from env. No secret values are committed.
+- `.gitignore` excludes `.env`, `.env.local`, `.env.*.local`, `.npmrc`.
+
+## PHI / Sensitive-Data Rules
+
+- This SDK carries no PHI itself, but it transports caller data to backends.
+- Never log or write into docs: PHI, secret values, tokens, cookies, JWTs, raw
+  request/response bodies.
+
+## Must Never Be Written Into Docs
+
+Tokens, PSKs, JWTs, secret values, raw response bodies, customer/patient data.

package/docs/agent-guide/2026-06-27-0849-sdk-orient/09-known-risks-and-debt.md

@@ -1,34 +1,34 @@
-# 09 Known Risks And Debt
-
-## Stale Docs (corrected this pass)
-
-- `docs/architecture.md` §10 and `CLAUDE.md` Validation note claimed "no
-  committed automated tests". STALE — `tests/` has 24 committed files run by
-  `npm test`. Corrected in both files in this janitor pass. If a future edit
-  re-introduces the claim, fix it; do not trust it.
-
-## Doc Maintenance Burden
-
-- `docs/usage-reference.md` is ~98 KB and `docs/routes-services.md` cites
-  "450 commands across 29 namespace surfaces". These hand-maintained counts can
-  drift from source. Treat `src/namespaces/*.ts` + `src/index.ts` as authority;
-  re-derive counts before quoting them. (At this snapshot: 27 namespace files,
-  24 test files.)
-
-## Generated Residue
-
-- `dist/` (~1.6 MB) is built output, gitignored; safe to delete and rebuild with
-  `npm run build`. Auto-cleaned this pass (see janitor audit). `node_modules/`
-  likewise reproducible via `npm ci`.
-
-## Ownership / Boundaries
-
-- The SDK must conform to kernel contracts (identity families, error envelope,
-  routing) defined in the Dominus workers — it does not define them. Changes that
-  touch wire protocol, JWT TTLs, or route transforms are contract-sensitive and
-  warrant `dominus-expert` review before shipping.
-
-## Cleanup Links
-
-- Janitor audit: `docs/janitor/2026-06-27-0849-sdk-orient-cleanup-audit.md`.
-- No `docs/atlas/` exists; run `kyle-atlas` if truth becomes scattered.
+# 09 Known Risks And Debt
+
+## Stale Docs (corrected this pass)
+
+- `docs/architecture.md` §10 and `CLAUDE.md` Validation note claimed "no
+  committed automated tests". STALE — `tests/` has 24 committed files run by
+  `npm test`. Corrected in both files in this janitor pass. If a future edit
+  re-introduces the claim, fix it; do not trust it.
+
+## Doc Maintenance Burden
+
+- `docs/usage-reference.md` is ~98 KB and `docs/routes-services.md` cites
+  "450 commands across 29 namespace surfaces". These hand-maintained counts can
+  drift from source. Treat `src/namespaces/*.ts` + `src/index.ts` as authority;
+  re-derive counts before quoting them. (At this snapshot: 27 namespace files,
+  24 test files.)
+
+## Generated Residue
+
+- `dist/` (~1.6 MB) is built output, gitignored; safe to delete and rebuild with
+  `npm run build`. Auto-cleaned this pass (see janitor audit). `node_modules/`
+  likewise reproducible via `npm ci`.
+
+## Ownership / Boundaries
+
+- The SDK must conform to kernel contracts (identity families, error envelope,
+  routing) defined in the Dominus workers — it does not define them. Changes that
+  touch wire protocol, JWT TTLs, or route transforms are contract-sensitive and
+  warrant `dominus-expert` review before shipping.
+
+## Cleanup Links
+
+- Janitor audit: `docs/janitor/2026-06-27-0849-sdk-orient-cleanup-audit.md`.
+- No `docs/atlas/` exists; run `kyle-atlas` if truth becomes scattered.

package/docs/agent-guide/2026-06-27-0849-sdk-orient/10-agent-playbook.md

@@ -1,48 +1,48 @@
-# 10 Agent Playbook
-
-## If You Are Changing X, Read Y First
-
-- **A namespace command** → `src/namespaces/<name>.ts` + the relevant rows in
-  `docs/routes-services.md`. Follow the Public API Change Checklist in
-  `CLAUDE.md` (update namespace, wire in `src/index.ts` if new, export types,
-  update `docs/usage-reference.md` and `routes-services.md`).
-- **Transport / auth / retries / streaming / binary** → `src/lib/client.ts` and
-  `docs/architecture.md` §3,§5,§6,§7. The 55-min JWT cache TTL is load-bearing;
-  do not regress it without raising the jwt-worker `JWT_EXPIRY_SECONDS` first.
-- **A new public type or root shortcut** → `src/index.ts` (constructor + export).
-- **Errors** → `src/lib/errors.ts`; pass `endpoint` on service-auth throws so
-  callers can classify by `DominusError.endpoint`.
-- **Env/gateway config** → `src/lib/config.ts`.
-
-## If Validation Fails
-
-- Build/type errors → `npm run typecheck`; the repo's lint IS tsc.
-- Type-contract failures → `npm run test:types` (the `*.typecheck.ts` files).
-- Unit/contract failures → `npm test` runs an explicit file list; run a single
-  file with `node --test tests/<file>.test.js` after `npm run build`.
-
-## Common Traps
-
-- Importing from a subpath — there is only one export entry; import from
-  `'dominus-sdk-nodejs'`.
-- Treating `dist/` as source — it is generated; edit `src/`.
-- Forgetting the version bump — publish-production no-ops if the version already
-  exists on npm.
-- Using `dominus-production` as this repo's branch — it is `production` here.
-- Pointing `browser` methods at worker-local `/runs/*` — use `/api/browser/*`
-  with `useGateway: true`.
-
-## Which Kyle Skill For Common Work
-
-- Behavior change / bug fix → `kyle-fix` (test-first via `kyle-tdd`).
-- Root-cause unknown → `kyle-diagnose`.
-- Plan a larger change → `kyle-plan`.
-- Review a diff → `kyle-review`.
-- Contract-sensitive change (wire protocol, JWT, routing) → route to
-  `dominus-expert` before shipping.
-- Docs/cleanup drift → `kyle-janitor` (this pack).
-
-## Handoff Expectations
-
-This is a Dominus platform repo: cross-contract or wire-protocol changes need
-`dominus-expert` review. Releases are npm publishes gated on a version bump.
+# 10 Agent Playbook
+
+## If You Are Changing X, Read Y First
+
+- **A namespace command** → `src/namespaces/<name>.ts` + the relevant rows in
+  `docs/routes-services.md`. Follow the Public API Change Checklist in
+  `CLAUDE.md` (update namespace, wire in `src/index.ts` if new, export types,
+  update `docs/usage-reference.md` and `routes-services.md`).
+- **Transport / auth / retries / streaming / binary** → `src/lib/client.ts` and
+  `docs/architecture.md` §3,§5,§6,§7. The 55-min JWT cache TTL is load-bearing;
+  do not regress it without raising the jwt-worker `JWT_EXPIRY_SECONDS` first.
+- **A new public type or root shortcut** → `src/index.ts` (constructor + export).
+- **Errors** → `src/lib/errors.ts`; pass `endpoint` on service-auth throws so
+  callers can classify by `DominusError.endpoint`.
+- **Env/gateway config** → `src/lib/config.ts`.
+
+## If Validation Fails
+
+- Build/type errors → `npm run typecheck`; the repo's lint IS tsc.
+- Type-contract failures → `npm run test:types` (the `*.typecheck.ts` files).
+- Unit/contract failures → `npm test` runs an explicit file list; run a single
+  file with `node --test tests/<file>.test.js` after `npm run build`.
+
+## Common Traps
+
+- Importing from a subpath — there is only one export entry; import from
+  `'dominus-sdk-nodejs'`.
+- Treating `dist/` as source — it is generated; edit `src/`.
+- Forgetting the version bump — publish-production no-ops if the version already
+  exists on npm.
+- Using `dominus-production` as this repo's branch — it is `production` here.
+- Pointing `browser` methods at worker-local `/runs/*` — use `/api/browser/*`
+  with `useGateway: true`.
+
+## Which Kyle Skill For Common Work
+
+- Behavior change / bug fix → `kyle-fix` (test-first via `kyle-tdd`).
+- Root-cause unknown → `kyle-diagnose`.
+- Plan a larger change → `kyle-plan`.
+- Review a diff → `kyle-review`.
+- Contract-sensitive change (wire protocol, JWT, routing) → route to
+  `dominus-expert` before shipping.
+- Docs/cleanup drift → `kyle-janitor` (this pack).
+
+## Handoff Expectations
+
+This is a Dominus platform repo: cross-contract or wire-protocol changes need
+`dominus-expert` review. Releases are npm publishes gated on a version bump.

package/docs/agent-guide/2026-08-04-sdk-nodejs/00-reading-order.md

@@ -1,11 +1,11 @@
-# Dominus SDK for Node.js — reading order
-
-Snapshot: 2026-08-04, production source commit `0e68c79`.
-
-1. `README.md` for package usage, namespace coverage, and lifecycle guidance.
-2. `package.json` for the single export entry and release scripts.
-3. `src/index.ts` and namespace modules for the public surface.
-4. `src/client.ts`/transport and typed error helpers for gateway behavior.
-5. `tests/` plus `tsconfig.type-tests.json` for runtime and compile contracts.
-6. `.github/workflows/publish-production.yml` for registry publication.
-7. `docs/atlas/2026-08-04-sdk-nodejs-truthmap.md` and the pending-work summary.
+# Dominus SDK for Node.js — reading order
+
+Snapshot: 2026-08-04, production source commit `0e68c79`.
+
+1. `README.md` for package usage, namespace coverage, and lifecycle guidance.
+2. `package.json` for the single export entry and release scripts.
+3. `src/index.ts` and namespace modules for the public surface.
+4. `src/client.ts`/transport and typed error helpers for gateway behavior.
+5. `tests/` plus `tsconfig.type-tests.json` for runtime and compile contracts.
+6. `.github/workflows/publish-production.yml` for registry publication.
+7. `docs/atlas/2026-08-04-sdk-nodejs-truthmap.md` and the pending-work summary.

package/docs/agent-guide/2026-08-04-sdk-nodejs/01-purpose-and-boundaries.md

@@ -1,14 +1,14 @@
-# Purpose and boundaries
-
-The Node SDK is the typed ESM facade for Dominus gateway-first services. It
-packages namespace APIs for application auth, data/DDL, storage and Artifact
-V2, AI/runtime, browser automation, jobs, workflows, Authority, logs,
-platform/coder, Publisher, admin, and control-plane operations.
-
-The package owns client-side request shaping, gateway route transforms,
-service error decoding, and public type contracts. Server-side authorization,
-scope truth, lifecycle truth, and durable records remain owned by the relevant
-Dominus services.
-
-The supported package surface is the single root export. Internal source files
-are not stable subpath imports.
+# Purpose and boundaries
+
+The Node SDK is the typed ESM facade for Dominus gateway-first services. It
+packages namespace APIs for application auth, data/DDL, storage and Artifact
+V2, AI/runtime, browser automation, jobs, workflows, Authority, logs,
+platform/coder, Publisher, admin, and control-plane operations.
+
+The package owns client-side request shaping, gateway route transforms,
+service error decoding, and public type contracts. Server-side authorization,
+scope truth, lifecycle truth, and durable records remain owned by the relevant
+Dominus services.
+
+The supported package surface is the single root export. Internal source files
+are not stable subpath imports.

package/docs/agent-guide/2026-08-04-sdk-nodejs/03-api-surface.md

@@ -1,16 +1,16 @@
-# API surface
-
-Import from the root package:
-
-```ts
-import { dominus } from 'dominus-sdk-nodejs';
-```
-
-The singleton exposes namespace groups including `auth`, `db`, `ddl`, `files`,
-`stash`, `ai`, `browser`, `jobs`, `workflow`, `authority`, `logs`, `platform`,
-`coder`, `publisher`, `admin`, and control-plane helpers. The exact exported
-types are generated by `npm run build` from `src/`.
-
-`workflow.ensure` is the preferred Authority-backed lifecycle entry. Use the
-Authority namespace for run timeline truth and the explicit archive/repair
-helpers for proof-first maintenance.
+# API surface
+
+Import from the root package:
+
+```ts
+import { dominus } from 'dominus-sdk-nodejs';
+```
+
+The singleton exposes namespace groups including `auth`, `db`, `ddl`, `files`,
+`stash`, `ai`, `browser`, `jobs`, `workflow`, `authority`, `logs`, `platform`,
+`coder`, `publisher`, `admin`, and control-plane helpers. The exact exported
+types are generated by `npm run build` from `src/`.
+
+`workflow.ensure` is the preferred Authority-backed lifecycle entry. Use the
+Authority namespace for run timeline truth and the explicit archive/repair
+helpers for proof-first maintenance.

package/docs/agent-guide/2026-08-04-sdk-nodejs/10-agent-playbook.md

@@ -1,14 +1,14 @@
-# Agent playbook
-
-Before changing an SDK method, trace its route transform, request body, typed
-error contract, and corresponding worker/service endpoint. Run:
-
-```text
-npm run build
-npm run test:types
-npm test
-```
-
-For a package release, update the version intentionally and verify the new
-version is not already published before pushing the `production` lane. A
-local SDK test pass does not prove server or registry state.
+# Agent playbook
+
+Before changing an SDK method, trace its route transform, request body, typed
+error contract, and corresponding worker/service endpoint. Run:
+
+```text
+npm run build
+npm run test:types
+npm test
+```
+
+For a package release, update the version intentionally and verify the new
+version is not already published before pushing the `production` lane. A
+local SDK test pass does not prove server or registry state.

package/docs/agent-guide/INDEX.md

@@ -1,14 +1,14 @@
-# Agent Guide Index
-
-Last updated: 2026-08-04 local
-Current snapshot: `2026-08-04-sdk-nodejs/00-reading-order.md`
-
-## Read Order
-
-1. `2026-08-04-sdk-nodejs/00-reading-order.md`
-2. `2026-08-04-sdk-nodejs/01-purpose-and-boundaries.md`
-3. `2026-08-04-sdk-nodejs/03-api-surface.md`
-4. `2026-08-04-sdk-nodejs/10-agent-playbook.md`
-
-The published package entry point and `src/` remain authoritative. Historical
-guide packs are retained for prior release context.
+# Agent Guide Index
+
+Last updated: 2026-08-04 local
+Current snapshot: `2026-08-04-sdk-nodejs/00-reading-order.md`
+
+## Read Order
+
+1. `2026-08-04-sdk-nodejs/00-reading-order.md`
+2. `2026-08-04-sdk-nodejs/01-purpose-and-boundaries.md`
+3. `2026-08-04-sdk-nodejs/03-api-surface.md`
+4. `2026-08-04-sdk-nodejs/10-agent-playbook.md`
+
+The published package entry point and `src/` remain authoritative. Historical
+guide packs are retained for prior release context.

package/docs/agent-guide/current.md

@@ -1,22 +1,22 @@
-# Current Agent-Guide Snapshot
-
-Latest snapshot: `2026-06-27-0849-sdk-orient/00-reading-order.md`
-
-Generated 2026-06-27 from SDK v6.6.0 (`package.json`) on branch `production`.
-
-## Top Five Facts To Refresh Before Editing
-
-1. **Version + changelog.** Confirm `package.json` `version` and the top of
-   `CHANGELOG.md`; this pack was written at `6.6.0`.
-2. **Namespace count.** `src/namespaces/` had 27 files, each wired as a
-   `public readonly` property in `src/index.ts`. Re-count before claiming a
-   surface is missing.
-3. **Tests exist.** `tests/` has 24 test files run by `npm test`. The older
-   claim in `docs/architecture.md` §10 / `CLAUDE.md` ("no committed tests") was
-   stale and is corrected in this pass.
-4. **Storage rule.** `dominus.stash.*` is the primary storage surface;
-   `redis`/`db`/`files`/`artifacts` are building blocks (see
-   `docs/architecture.md` §2a).
-5. **Release lane.** Push to `production` triggers
-   `.github/workflows/publish-production.yml` (npm publish). Do not commit/push
-   from janitor work.
+# Current Agent-Guide Snapshot
+
+Latest snapshot: `2026-06-27-0849-sdk-orient/00-reading-order.md`
+
+Generated 2026-06-27 from SDK v6.6.0 (`package.json`) on branch `production`.
+
+## Top Five Facts To Refresh Before Editing
+
+1. **Version + changelog.** Confirm `package.json` `version` and the top of
+   `CHANGELOG.md`; this pack was written at `6.6.0`.
+2. **Namespace count.** `src/namespaces/` had 27 files, each wired as a
+   `public readonly` property in `src/index.ts`. Re-count before claiming a
+   surface is missing.
+3. **Tests exist.** `tests/` has 24 test files run by `npm test`. The older
+   claim in `docs/architecture.md` §10 / `CLAUDE.md` ("no committed tests") was
+   stale and is corrected in this pass.
+4. **Storage rule.** `dominus.stash.*` is the primary storage surface;
+   `redis`/`db`/`files`/`artifacts` are building blocks (see
+   `docs/architecture.md` §2a).
+5. **Release lane.** Push to `production` triggers
+   `.github/workflows/publish-production.yml` (npm publish). Do not commit/push
+   from janitor work.