v0.3.1
Defensive hardening + test coverage (patch)
Outcome of a multi-agent code review. No API changes.
- Formatters/client now degrade gracefully on malformed/partial API payloads (null embed blocks, missing variable ids, empty 204 write bodies, bare-string video links) instead of aborting a tool call.
- 403 errors no longer assert a bad key (covers non-moderator permission denials); pagination clamps to the API's 200-per-page cap; client enforces the documented
times/ reject-reason contracts; notifications fetch is bounded. - +16 tests (46 offline): all five write tools verified to refuse in read-only mode (incl. the irreversible
delete_run), 420/404 status mapping, pagination walk, empty-body writes.