[AnthonyRonning]

The monorepo SDKs now use @mapleai/sdk for TypeScript/React and maple-sdk (maple_sdk imports) for Rust. Research, Agent and the proxy consume the renamed in-tree packages, with matching package metadata, examples, build artifacts and dependency checks.

This PR changes source package identities and in-tree consumers; it does not publish either SDK. Registry bootstrap and protected publishing workflows are a separate next step.

The existing SDK versions remain 3.5.2 (TypeScript) and 3.6.2 (Rust). Exported APIs such as OpenSecretProvider and OpenSecretClient, backend identity, configuration variables, protocol headers, encrypted transport and signed-PCR verification remain unchanged.

Fresh tarball consumers exposed two inherited packaging defects. The CommonJS entry now uses .cjs with a matching .d.cts declaration and conditional type exports. The existing pinned OpenAI dependency moves from development to package dependencies because public Model declarations import its types. These corrections preserve the exported API.

Local validation: TypeScript SDK 123 tests pass (3 credential-dependent skips); the seven-file package passes ESM, CommonJS, UMD, strict Bundler and strict NodeNext consumer checks. All 45 runtime exports and public declarations match the original package. Research's full frontend gate passes 818 tests. Rust SDK strict Clippy, 85 tests, rustdoc and extracted 34-file crate build pass. Proxy strict Clippy, 27 tests, rustdoc and Machete pass; Research native tests pass 415 tests (2 ignored). Both consumer dependency verifiers and all nine local root flake checks pass. Independent source/integration review found no actionable issue.

The complete normal commit hook passes, including all 818 frontend and 415 native Research tests (2 existing ignores), with two Rust test workers to reduce local VM contention. Canonical Research formatting and strict Clippy pass on its actual pinned 1.94.1 toolchain; the extra all-target Clippy run reports eight existing test-only diagnostics in unchanged code. SDK and proxy formatting/strict Clippy also pass with their actual pinned 1.89.0 tools.

Local Cargo subcommand lookup initially selected rustup's installed toolchain; corrected checks use process-local RUSTUP_TOOLCHAIN pointing to each Nix toolchain, without global configuration changes. Agent's warning-denied workspace build, 725 workspace tests and 30 headless tests pass (755 total, with 3 existing ignores); formatting and all four strict Clippy modes also pass on its actual pinned 1.98.0 toolchain. Proxy crates.io packaging requires the new SDK to be published; local path builds are the validation available in this source-only round.

[github-actions]

Maple development preview: https://ae5b602f.maple-ca8.pages.dev

Commit: 17587134338d531d93dc0247515de662af3cf27e

Uses development API, billing, flags and PCR configuration. Cloudflare Access applies.