fix(security): corrigir 7 alertas do code scanning (CodeQL)

.github/workflows/ci.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test (Node ${{ matrix.node-version }})

.gitignore

@@ -9,7 +9,7 @@ node_modules/
 bower_components/
 jspm_packages/
 openspec/
-
+nfeio-docs
 # ----------------------------------------------------------------------------
 # Build Outputs
 # ----------------------------------------------------------------------------

CLAUDE.md

@@ -4,7 +4,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Project Overview
 
-Official NFE.io SDK for Node.js -- TypeScript native client for Brazilian electronic fiscal document APIs (NFS-e, NF-e, CT-e, CF-e). Version 3.x is a complete rewrite from the legacy v2 JavaScript/callback codebase that still lives in `lib/`.
+Official NFE.io SDK for Node.js -- TypeScript native client for Brazilian electronic fiscal document APIs (NFS-e, NF-e, CT-e, CF-e). Version 3.x is a complete rewrite from the legacy v2 JavaScript/callback codebase (v2 lives in git history and is published as `nfe-io@2.x` on npm).
 
 ## Build & Development Commands
 
@@ -32,12 +32,7 @@ Coverage thresholds: 80% for branches, functions, lines, and statements. Test se
 
 ## Architecture
 
-### Dual Codebase (v2 + v3)
-
-- **v3 (active)**: `src/` -- TypeScript, async/await, Fetch API, zero runtime dependencies
-- **v2 (legacy)**: `lib/` -- JavaScript, `when` promises, `BaseResource.extend()` pattern
-
-### v3 Source Structure
+### Source Structure
 
 - `src/index.ts` -- Barrel export for all public API (`NfeClient`, types, errors)
 - `src/core/client.ts` -- Main `NfeClient` class with lazy-initialized resource getters and polling utilities

README.md

@@ -1050,12 +1050,9 @@ Veja [tests/integration/README.md](./tests/integration/README.md) para documenta
 
 ### Geração de Tipos OpenAPI
 
-O SDK gera tipos TypeScript automaticamente a partir de especificações OpenAPI:
+O SDK gera tipos TypeScript automaticamente a partir de especificações OpenAPI. As specs são mantidas manualmente em `openapi/spec/`:
 
 ```bash
-# Baixar specs mais recentes da API (se disponível)
-npm run download:spec
-
 # Validar todas as specs OpenAPI
 npm run validate:spec