…t-surface

feat(fs-http): timeout option with 30000ms default (Doctrine #8 library-author extension)

…-http-docs

docs(fs-http): surface Doctrine #8 timeout contract; collapse README duplication

…ctrine

Four edits to CLAUDE.md, sourced from Adjutant M2 doctrine inquiry
(2026-05-07):

- Add `## Versioning Discipline (Pre-1.0)` — encodes the mechanical
  per-bump checklist (widen ranges, patch-bump siblings, regenerate
  lock, verify no nested registry copies). Notes that `workspace:*`
  is not an option on npm (rejected as EUNSUPPORTEDPROTOCOL).
- Add `### Internal Dependency Coordination` sub-section under
  `## Conventions` — captures the string-ts version-sync discipline
  between fs-helpers and fs-translation. Reframes the "duplicate
  bundle" claim against verified npm dedupe behavior.
- Add `## Doctrine #8 — HTTP Timeout Surface (fs-http)` — surfaces
  fs-http as the war-room reference implementation of the
  library-author extension to Architectural Principle #8 (verbatim
  quote from war-room CLAUDE.md). Documents the 5-axis surface.
- Fix TypeScript version line: `5.9+` → `^6.0` (matches root
  package.json#devDependencies.typescript).

No code or test changes; markdown only.

Order: orders/fs-packages/claude-md-doctrine-consolidation-engineer-deployment.md
Adjutant field report: reports/fs-packages/field/2026-05-07-adjutant-doctrine-inquiry-cascade-tax-string-ts.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Add an Authentication & XSRF section to docs/packages/http.md sibling-
level to the Doctrine #8 Timeout block, naming Laravel Sanctum SPA
explicitly, explaining the XSRF-TOKEN cookie + axios 1.x withXSRFToken
mechanics, and stating the HTTP 419 failure mode (which mocked
transports do not surface, per ADR-0017). Stateless / token / non-
Sanctum stacks documented as the inverse case. Expand the API
Reference row for options.withXSRFToken with the same guidance and a
cross-link to the new section.

Add a one-line README pointer mirroring the Timeout pointer shape
landed by Engineer PR #68 (no full duplication; docs page is source of
truth).

Closes enforcement queue #22 docs path. Commander disposition: docs-
only. Library default of withXSRFToken: false stays as-is. No oxlint
call-site rule. No source code changes. No version bump.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>