feat(sdk): add Go client SDK with full API-tree parity

.claude/commands/cover.md

@@ -1,6 +1,6 @@
 ---
 description: Render coverage HTML for a suite and surface drops below threshold
-argument-hint: [unit|integration|e2e|sdk|merge|all] (default: merge whatever exists)
+argument-hint: [unit|integration|e2e|go-sdk|ts-unit|ts-e2e|ts-total|merge|all] (default: merge whatever exists)
 ---
 
 Generate the coverage report and surface anything below threshold from `.testcoverage.yml`.
@@ -13,10 +13,11 @@ Behavior:
 - **unit**: `make test-unit` (gates per-suite + writes `tmp/coverage/unit/`)
 - **integration**: `make test-integration` (requires Docker)
 - **e2e**: `make test-e2e` (requires Docker; orchestrator + cover binary)
-- **ts-unit**: `make test-ts` (SDK unit tests + coverage + gate against `suites.ts-unit`)
+- **go-sdk**: `make test-sdk-go` (nested module `clients/go`; gates against `suites.go-sdk`, rendered separately and never merged into the Go total)
+- **ts-unit**: `make test-sdk-ts` (TS SDK unit tests + coverage + gate against `suites.ts-unit`)
 - **ts-e2e**: emitted as a side effect of `make test-e2e` (the orchestrator always passes `--coverage` to the e2e vitest run; informational only, no standalone gate)
 - **ts-total**: `make cov` (runs `cov report` — one consolidated Go + TS summary with per-suite HTML links + all gates; fails if *no* suite has data)
-- **all**: `make test-all` (all four suites sequentially + `make cov`)
+- **all**: `make test-all` (every coverage-producing suite sequentially + `make cov`; `test-sdk-go-e2e` is excluded, it needs a live server it did not start and runs uninstrumented)
 
 After the run completes:
 

.github/dependabot.yml

@@ -1,8 +1,11 @@
 version: 2
 updates:
-  # Go modules
+  # Go modules. TWO directories: Dependabot does not descend into nested
+  # modules, so clients/go needs its own entry (stdlib-only today).
   - package-ecosystem: gomod
-    directory: /
+    directories:
+      - /
+      - /clients/go
     schedule:
       interval: weekly
       day: monday

.github/labeler.yml

@@ -43,7 +43,9 @@
   - changed-files:
     - any-glob-to-any-file:
       - "clients/ts/**"
+      - "clients/go/**"
       - "tests/e2e/sdk/**"
+      - "tests/conformance/**"
 
 "area/docs":
   - changed-files:
@@ -83,8 +85,8 @@
 dependencies:
   - changed-files:
     - any-glob-to-any-file:
-      - "go.mod"
-      - "go.sum"
+      - "**/go.mod"
+      - "**/go.sum"
       - "**/package.json"
       - "**/pnpm-lock.yaml"
       - "**/package-lock.json"

.github/workflows/ci.yml

@@ -204,8 +204,10 @@ jobs:
         uses: ./.github/actions/setup-env
         with:
           go-cache-suffix: "-unit"
-      - name: Run Go unit tests + SDK vitest tests
-        run: make test-unit test-ts COV_DEFER=1
+      - name: Run Go unit tests + both SDK suites
+        run: make test-unit test-sdk COV_DEFER=1
+      # One fragment, three suites (unit, ts-unit, go-sdk) — all deferred to
+      # the `coverage` job. Whole-tree path so a new suite needs no edit here.
       - name: Upload coverage fragment
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:

.testcoverage.yml

@@ -13,6 +13,7 @@
 # coverage number — unit alone covers only `./internal/...` packages
 # exercised by `*_test.go` files (below total threshold); merged
 # coverage adds integration- and e2e-only paths and clears it.
+# Nested-module suites (go-sdk) are gated separately — see suites.go-sdk.
 profile: tmp/coverage/total/coverage.txt
 local-prefix: github.com/Wave-RF/WaveHouse
 
@@ -22,14 +23,33 @@ local-prefix: github.com/Wave-RF/WaveHouse
 threshold:
   total: 80
 
-# Per-suite coverage thresholds (custom key — read by scripts/coverage.sh,
+# Per-suite coverage thresholds (custom key — read by scripts/cov,
 # silently ignored by go-test-coverage). Single source of truth for what
 # percentage each suite must hit before it counts as passing.
 #
 suites:
   unit: 80
   integration: 20
   e2e: 60
+  # Go SDK (clients/go) — a NESTED module, so the root module's
+  # `-coverpkg=./...` can never reach it: rendered and gated on its own,
+  # never merged into the total above, nothing to add under exclude.paths.
+  # 75 vs 88.5% measured. The gap is deliberate slack, matching how every other
+  # floor here is set (ts-unit is 40 against a measured 76%): these are
+  # regression floors, not targets, so ordinary churn doesn't red the build.
+  # Raise it when a real regression slips under 75.
+  #
+  # ONE key here, three for the TS SDK below, because the TS SDK has two
+  # coverage-PRODUCING suites and this has one. `ts-unit` is vitest, `ts-e2e`
+  # is the same SDK source re-measured by the orchestrator's live-server run,
+  # and `ts-total` exists only because those two have to be merged before a
+  # meaningful floor can be applied. `make test-sdk-go` is the Go SDK's only
+  # instrumented suite, so a `go-sdk-total` would be a copy of this number and
+  # a `go-sdk-e2e` would gate a suite that emits no covdata: `test-sdk-go-e2e`
+  # drives a server it did not start and runs uninstrumented. Wiring that suite
+  # into the orchestrator so it earns the same three-gate shape is #518 — add
+  # the other two keys with it, not before.
+  go-sdk: 75
   # TypeScript SDK suites — see scripts/cov for the merge / render logic.
   # vitest gates via --coverage.thresholds.statements; the merged ts-total
   # is gated by `cov ts-merge` against the value below. Tune ts-total