diff --git a/src/pulumi/README.md b/src/pulumi/README.md
index e0e5660..ea1f989 100644
--- a/src/pulumi/README.md
+++ b/src/pulumi/README.md
@@ -92,5 +92,9 @@ of the project it is attached to (the project-scope guard only gates
   encrypted, in Pulumi state. Use an encrypted state backend.
 - **Serialization:** this package is CommonJS on purpose — Pulumi serializes the
   provider object, and the CJS build lets its module references (`./engine`,
-  `./kinds`) be captured and re-required at runtime. Validate end-to-end with a
-  real `pulumi up` against a disposable mcpd before relying on it in production.
+  `./kinds`) be captured and re-required at runtime. For the same reason the
+  package intentionally has **no `exports` map**: Pulumi's closure serializer
+  reaches the internal `dist/*.js` submodules by subpath, which an `exports`
+  allowlist would block ("package.json export path ... not found"). Validate
+  end-to-end with a real `pulumi up` against a disposable mcpd before relying on
+  it in production.
diff --git a/src/pulumi/package.json b/src/pulumi/package.json
index c22a535..1e91cc4 100644
--- a/src/pulumi/package.json
+++ b/src/pulumi/package.json
@@ -1,18 +1,12 @@
 {
   "name": "@mcpctl/pulumi",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "Pulumi dynamic provider for mcpctl resources (llms, servers, projects, ...). Manage mcpctl declaratively from any TypeScript Pulumi program.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
     "dist"
   ],
-  "exports": {
-    ".": {
-      "require": "./dist/index.js",
-      "types": "./dist/index.d.ts"
-    }
-  },
   "scripts": {
     "build": "tsc --build",
     "clean": "rimraf dist",