# pkg.do

pkg.do is the estate’s first-party ESM CDN. One versioned artifact per package — /{pkg}@{version}/index.mjs (a flat ES module), /index.d.ts (the types the npm artifact carries), /meta.json (the provenance object). The same URL works as a package.json dependency, a browser import-map entry, and a dynamic-worker isolate import. Every artifact enumerates its FULL module set — {package, version, npmIntegrity, integrityVerified} per bundled module — and every build input is a sha-512-verified registry.npmjs.org tarball; the digest attests the served bytes. npm is the attested input, never in the serving loop.

Example: https://pkg.do/ms@2.1.3/index.mjs

The machine faces: /.well-known/agents.json, /openapi.json, /pricing.json, /llms.txt.