chore: update @smscode/sdk (generated from the SMSCode monorepo)

Author: dzevs

docs/ai.md

@@ -7,7 +7,7 @@ Compact integration guidance for coding agents building on the SMSCode virtual-n
 
 ## Rules
 
-1. **Public surfaces only — `/v1` and `/v2`.** NEVER call `/internal`, `/admin`, or `/mobile`. Those are private surfaces (the web app, the admin panel, the Android app) and are not part of the public contract — they require different auth and can change without notice.
+1. **Public surfaces only — `/v1` and `/v2`.** Use only the documented public surfaces; do not depend on undocumented endpoints — they are outside the public contract and may change without notice.
 2. **Prefer `/v2` (USD-native).** `/v2` returns USD money objects with the exact IDR canonical amount and an FX receipt (`meta.fx`). `/v1` is the legacy IDR-only API (money is an integer in IDR minor units). Pick ONE version per integration; do not mix shapes.
 3. **Auth is `Authorization: Bearer <token>`** on every request (token from Account Settings). No cookies, no separate API-key header.
 4. **Idempotency is money safety.** Order create sends an `idempotency-key`. On a FAILED create, **retry with the SAME key — never mint a new one.** A new key on retry can double-charge you (the server dedups by key → at-most-once). With the SDK, the key is on the thrown error: reuse `error.idempotencyKey`.

docs/openapi/openapi.yaml

@@ -24,8 +24,8 @@ info:
       with `/v1`; pick one per integration.
 
 
-    Only these public surfaces are documented here. The internal admin, web,
-    and mobile surfaces are private and out of scope.
+    Only `/v1` and `/v2` are documented as public surfaces. Undocumented
+    endpoints are out of scope and may change without notice.
 
 
     ## Authentication

packages/sdk-js/README.md

@@ -7,7 +7,7 @@ Official TypeScript/JavaScript SDK for the [SMSCode](https://smscode.gg) virtual
 - **Typed errors**: branch on `instanceof` (or `err.code`), never on `err.message`.
 - **Zero runtime dependencies**, isomorphic (Node 18+, Bun, Deno, browsers — anything with `fetch` + Web Crypto).
 
-> AI agents: see [`docs/ai.md`](https://github.com/smscode-gg/sdks/blob/main/docs/ai.md) for compact integration rules. Coding agents should **prefer `/v2`** and **never** call `/internal`, `/admin`, or `/mobile`.
+> AI agents: see [`docs/ai.md`](https://github.com/smscode-gg/sdks/blob/main/docs/ai.md) for compact integration rules. Coding agents should **prefer `/v2`** and use only the documented public API surfaces.
 
 ## Install
 

packages/sdk-js/test/orders.idempotency.test.ts

@@ -456,7 +456,7 @@ describe("MONEY-SAFETY: retry exhaustion keeps the SAME key (never a new one)",
   });
 });
 
-describe("MONEY-SAFETY: a POST-SUCCESS decode error still carries the key (swarm PI367-BLOCKER-1)", () => {
+describe("MONEY-SAFETY: a POST-SUCCESS decode error still carries the key", () => {
   const PROVIDED = "stable-key";
 
   it("/v2 success with an UNSAFE canonical_amount → INVALID_MONEY error carries the resolved key", async () => {
@@ -497,7 +497,7 @@ describe("MONEY-SAFETY: a POST-SUCCESS decode error still carries the key (swarm
     expect(err.idempotencyKey).toBe(PROVIDED);
   });
 
-  it("/v2 success with valid meta.fx but an order item MISSING `amount` → a TYPED SmscodeError (not a raw TypeError) carries the resolved key (PI367-BLOCKER-1B)", async () => {
+  it("/v2 success with valid meta.fx but an order item MISSING `amount` → a TYPED SmscodeError (not a raw TypeError) carries the resolved key", async () => {
     const calls: Captured[] = [];
     const client = new SmscodeClient({
       token: "t",

packages/sdk-js/test/orders.mutations.test.ts

@@ -252,7 +252,7 @@ describe("orders mutations — NO auto-retry (no idempotency key)", () => {
   });
 });
 
-describe("orders /v2 reads — TYPED error on a malformed 2xx envelope (swarm note)", () => {
+describe("orders /v2 reads — TYPED error on a malformed 2xx envelope", () => {
   // A `/v2` order summary with valid money but NO `meta.fx` on the 2xx envelope.
   // These are reads — no idempotency key is involved (do NOT assert one).
   const V2_ORDER_OK = {