fix(sdk): publish neutral declarations without Zod leakage - #120
Merged
Conversation
The 0.20.0 publish was blocked because z.infer made the neutral SDK declaration bundle reference an unpacked Zod path. Freeze the public request shape explicitly, keep the runtime schema checked against it, and extend the package gate to reject the same leak from every neutral entry. Bump SDK to 0.20.1 so the failed 0.20.0 tag remains an immutable audit record.
The release PR exposed two timing-sensitive tests under the shared CI runner: federation hydration could consume its deadline before the assertion path, and the integration dialog could render after RTL's one-second default. Give both tests explicit budgets that preserve their behavior while avoiding unrelated release failures.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
问题
sdk-v0.20.0的发布在 tarball 校验阶段失败：mailbox device 声明通过z.infer暴露了 Zod 内部模块路径，打包后的dist/device.d.ts引用了包内不存在的dist/v4/classic/external.cjs。修复
WireDeviceOperationListRequest改为显式 wire 接口，并让运行时 schema 通过ZodType校验该接口@tool-bridge/sdk升至0.20.1验证
pnpm verifypnpm turbo run buildnode scripts/pack-and-verify-package.mjs packages/sdk --output-dir <tmp>packages/sdk/dist/index.js包含0.20.1