fix: harden runtime lifecycle, storage boundaries, and release safety - #11

Merged

matej21 merged 39 commits into

mainfrom

refactor/audit-cleanup

Aug 18, 2026

Commits on Aug 11, 2026

fix(sdk): tell a request timeout apart from a caller cancel

matej21
and
claude
committed
62cdce7
chore: drop three unreachable modules and five unused dependencies

matej21
and
claude
committed
98d1abb
docs: correct two claims that are false

matej21
and
claude
committed
208bdb2
ci: run the test suite before publishing, and let the e2e REST test run

matej21
and
claude
committed
7f83c07
test(sdk): make the service wait helpers fail loudly on timeout

matej21
and
claude
committed
5743727
chore: ignore .smellhunt/ audit scratch output

matej21
and
claude
committed
23bfa76

Commits on Aug 18, 2026

fix: repair four defects in what actually gets published

matej21
and
claude
committed
41bd221
fix: stop four silent failure modes in shutdown, stdin, notifications and tests

matej21
and
claude
committed
05f6809
refactor: collapse three duplicated definitions onto one owner each

matej21
and
claude
committed
0865c49
refactor(sdk): give the logger levels and the HTTP error envelope one owner

matej21
and
claude
committed
ce3bbb0
refactor(debug): lift the duplicated ResumeAgentButton into its own module

matej21
and
claude
committed
f705c04
refactor: import the file-upload wire contract instead of re-typing it

matej21
and
claude
committed
4c434ae
fix: declare @roj-ai/sdk where shared and debug actually need it

matej21
and
claude
committed
970643f
refactor(sdk): remove all five import cycles

matej21
and
claude
committed
19f559a
fix(standalone-server): type the platform handlers against the shared contract

matej21
and
claude
committed
b8f57e7
fix(demo): make snapshot workflows explicit
matej21
committed
ff9d6e1
test(transport): cover send buffer overflow policy
matej21
committed
43387bf
test(sdk): cover shell stdin EPIPE handling
matej21
committed
aeedfa1
fix(sdk): keep provider cancellation intact through body reads
matej21
committed
b99e90e
test: cover rejected signal shutdowns
matej21
committed
472bf9b
ci: validate all package artifacts before publishing
matej21
committed
c2902fd
fix(sdk): report a cancelled inference as aborted, not as the failure before it

matej21
and
claude
committed
8381d94
fix(sdk): watch a service's exit and output from the moment it spawns

matej21
and
claude
committed
d29937d
fix: stop publishing test sources, and let the validator see them

matej21
and
claude
committed
33b078f
fix(sdk): add shared zip archive inspection
matej21
committed
6832e8d
fix(sdk): await session cleanup during shutdown
matej21
committed
cb243c7
fix(sdk): stop retry backoff promptly
matej21
committed
96ac977
fix(sdk): surface shell stdin delivery failures
matej21
committed
5389ca6
fix(sdk): contain served files within session roots
matej21
committed
5f64981
fix(sdk): validate resources before extraction
matej21
committed
85c9d30
fix(standalone): secure session resource startup
matej21
committed
16b35d5
fix(sdk): make service lifecycle replacement safe
matej21
committed
f6da93a
fix(release): validate packed artifacts before publish
matej21
committed
24e2574
ci: enforce release validation gates
matej21
committed
906a9c2
test(sdk): type-check test sources
matej21
committed
b65f279
fix(sdk): make upload preprocessing abort-safe
matej21
committed
c77e679
fix(runtime): make server shutdown race-safe
matej21
committed
dc95f69
fix(sdk): make upload deletion durable
matej21
committed
a8ffc22
fix(sdk): make archive limits configurable
matej21
committed
b0d4e06