chore: update intent layer

.github/workflows/ci.yml

@@ -24,7 +24,7 @@ jobs:
         run: npm ci
 
       - name: Security audit
-        run: npm audit
+        run: npm audit --audit-level=critical
 
       - name: Typecheck
         run: npm run typecheck

.gitignore

@@ -33,3 +33,6 @@ Thumbs.db
 # Misc
 *.map
 
+# Docs
+docs/
+

CLAUDE.md

@@ -39,13 +39,13 @@ npm run dev:client-demo
 
 Read the relevant Intent Node before working in that area:
 
-- `src/types/CLAUDE.md` - Type definitions and contracts
-- `src/core/CLAUDE.md` - ServerOrchestrator, DynamicToolManager, ToolRegistry
-- `src/mode/CLAUDE.md` - ModuleResolver, validation utilities
-- `src/server/CLAUDE.md` - createMcpServer, createPermissionBasedMcpServer
-- `src/http/CLAUDE.md` - FastifyTransport, endpoints, SSE
-- `src/session/CLAUDE.md` - SessionContextResolver, ClientResourceCache
-- `src/permissions/CLAUDE.md` - PermissionResolver, access control
+- `src/types/AGENTS.md` - Type definitions and contracts
+- `src/core/AGENTS.md` - ServerOrchestrator, DynamicToolManager, ToolRegistry
+- `src/mode/AGENTS.md` - ModuleResolver, validation utilities
+- `src/server/AGENTS.md` - createMcpServer, createPermissionBasedMcpServer
+- `src/http/AGENTS.md` - FastifyTransport, endpoints, SSE
+- `src/session/AGENTS.md` - SessionContextResolver, ClientResourceCache
+- `src/permissions/AGENTS.md` - PermissionResolver, access control
 
 ### Maintaining the Intent Layer
 
@@ -55,7 +55,7 @@ Read the relevant Intent Node before working in that area:
 - **Change component behavior** → Update the affected Intent Node's description
 - **Add new components** → Add them to the Key Components section
 - **Discover an anti-pattern** → Add it to the Anti-patterns section
-- **Create a new module** → Create a corresponding `CLAUDE.md` Intent Node
+- **Create a new module** → Create a corresponding `AGENTS.md` Intent Node
 
 Intent Nodes should remain concise (~100 lines max). Focus on what an agent needs to know to work safely in that area.
 

src/core/CLAUDE.md → src/core/AGENTS.md

@@ -81,9 +81,9 @@ notifyToolsChanged() (unless skipNotification)
 
 ## See Also
 
-- `src/mode/CLAUDE.md` - How tools are resolved
-- `src/server/CLAUDE.md` - How orchestrator is created
-- `src/types/CLAUDE.md` - ExposurePolicy, ToolingErrorCode
+- `src/mode/AGENTS.md` - How tools are resolved
+- `src/server/AGENTS.md` - How orchestrator is created
+- `src/types/AGENTS.md` - ExposurePolicy, ToolingErrorCode
 
 ---
 *Keep this Intent Node updated when modifying core orchestration. See root CLAUDE.md for maintenance guidelines.*

src/http/CLAUDE.md → src/http/AGENTS.md

@@ -97,9 +97,9 @@ definePermissionAwareEndpoint({...})
 
 ## See Also
 
-- `src/session/CLAUDE.md` - SessionContextResolver, ClientResourceCache
-- `src/permissions/CLAUDE.md` - PermissionAwareFastifyTransport
-- `src/server/CLAUDE.md` - How transport is configured
+- `src/session/AGENTS.md` - SessionContextResolver, ClientResourceCache
+- `src/permissions/AGENTS.md` - PermissionAwareFastifyTransport
+- `src/server/AGENTS.md` - How transport is configured
 
 ---
 *Keep this Intent Node updated when modifying HTTP transport. See root CLAUDE.md for maintenance guidelines.*

src/mode/CLAUDE.md → src/mode/AGENTS.md

@@ -54,8 +54,8 @@ Return flattened McpToolDefinition[]
 
 ## See Also
 
-- `src/core/CLAUDE.md` - How resolved tools are registered
-- `src/types/CLAUDE.md` - ModuleLoader type definition
+- `src/core/AGENTS.md` - How resolved tools are registered
+- `src/types/AGENTS.md` - ModuleLoader type definition
 
 ---
 *Keep this Intent Node updated when modifying mode resolution. See root CLAUDE.md for maintenance guidelines.*

src/permissions/CLAUDE.md → src/permissions/AGENTS.md

@@ -83,9 +83,9 @@ Return bundle (cached if non-anonymous)
 
 ## See Also
 
-- `src/http/CLAUDE.md` - FastifyTransport base class
-- `src/server/CLAUDE.md` - createPermissionBasedMcpServer
-- `src/types/CLAUDE.md` - PermissionConfig type
+- `src/http/AGENTS.md` - FastifyTransport base class
+- `src/server/AGENTS.md` - createPermissionBasedMcpServer
+- `src/types/AGENTS.md` - PermissionConfig type
 
 ---
 *Keep this Intent Node updated when modifying permissions. See root CLAUDE.md for maintenance guidelines.*

src/server/CLAUDE.md → src/server/AGENTS.md

@@ -99,9 +99,9 @@ Always STATIC per client, no meta-tools
 
 ## See Also
 
-- `src/core/CLAUDE.md` - ServerOrchestrator internals
-- `src/http/CLAUDE.md` - Transport layer
-- `src/permissions/CLAUDE.md` - Permission resolution
+- `src/core/AGENTS.md` - ServerOrchestrator internals
+- `src/http/AGENTS.md` - Transport layer
+- `src/permissions/AGENTS.md` - Permission resolution
 
 ---
 *Keep this Intent Node updated when modifying server creation. See root CLAUDE.md for maintenance guidelines.*

src/session/CLAUDE.md → src/session/AGENTS.md

@@ -69,8 +69,8 @@ Return {context, cacheKeySuffix}
 
 ## See Also
 
-- `src/http/CLAUDE.md` - How session context integrates with HTTP transport
-- `src/types/CLAUDE.md` - SessionContextConfig type definition
+- `src/http/AGENTS.md` - How session context integrates with HTTP transport
+- `src/types/AGENTS.md` - SessionContextConfig type definition
 
 ---
 *Keep this Intent Node updated when modifying session handling. See root CLAUDE.md for maintenance guidelines.*

src/types/CLAUDE.md → src/types/AGENTS.md

@@ -56,7 +56,7 @@ Defines all TypeScript interfaces, types, and contracts for the Toolception syst
 ## See Also
 
 - `src/errors/ToolingError.ts` - Error class using ToolingErrorCode (18 LOC)
-- `src/core/CLAUDE.md` - How types are used in orchestration
+- `src/core/AGENTS.md` - How types are used in orchestration
 
 ---
 *Keep this Intent Node updated when modifying types. See root CLAUDE.md for maintenance guidelines.*