Severity: P4 — Improvement/Test-gap
Where: package.json (build/prepublishOnly), src/core/http.ts
Problem
build is bare tsc (no clean), so stale dist artifacts can be packed by a local prepublishOnly. src/core/http.ts is the only source file with no direct test despite real branch logic (joinUrl, safeJson, isRateLimited, jsonBody).
Suggested fix
Prepend a clean step to build/prepublishOnly; add an http.test.ts.
Filed from an internal code audit (2026-07). File references are against main at audit time.
Severity: P4 — Improvement/Test-gap
Where:
package.json(build/prepublishOnly),src/core/http.tsProblem
buildis baretsc(no clean), so staledistartifacts can be packed by a local prepublishOnly.src/core/http.tsis the only source file with no direct test despite real branch logic (joinUrl, safeJson, isRateLimited, jsonBody).Suggested fix
Prepend a clean step to build/prepublishOnly; add an http.test.ts.
Filed from an internal code audit (2026-07). File references are against
mainat audit time.