chore(deps): bump @qvac/sdk from 0.10.2 to 0.12.2

[dependabot]

Bumps @qvac/sdk from 0.10.2 to 0.12.2.

Release notes

Sourced from @​qvac/sdk's releases.

QVAC SDK v0.12.2

📦 NPM: https://www.npmjs.com/package/@​qvac/sdk/v/0.12.2

This patch release unblocks React Native and BareKit apps that bundle @qvac/sdk or @qvac/bare-sdk. Metro and Bare static analysis no longer reject the config loader, and clients can import the model registry through a dedicated subpath without pulling the full SDK graph into the bundle.

New APIs

@qvac/sdk/models and @qvac/bare-sdk/models subpaths

React Native apps that only need model constant names previously had to import from the package root, which dragged server-side modules into Metro. v0.12.2 adds a ./models export on both @qvac/sdk and @qvac/bare-sdk so you can depend on the registry alone.

import { LLAMA_3_2_1B_INST_Q4_0 } from "@qvac/sdk/models";
// or on Bare-only clients:
import { LLAMA_3_2_1B_INST_Q4_0 } from "@qvac/bare-sdk/models";

Bug Fixes

Bare config loader works under Metro static analysis

BareKit and Expo consumers could fail at bundle time with errors such as Invalid call: import(filePath) when the SDK resolved qvac.config.js. The Bare config loader used dynamic import() with a runtime path, which Metro and Bare reject because the target is not a string literal.

v0.12.2 loads .js and .json config files with require(filePath) instead, which satisfies static analysis while keeping the same resolution order (QVAC_CONFIG_PATH, then project-root qvac.config.js / qvac.config.json, then defaults). Supported extensions are centralized in SUPPORTED_CONFIG_FILE_EXTS so discovery and validation stay aligned. TypeScript config files (.ts) are explicitly rejected on the Bare path with a clear error — use .js or .json in RN/Bare projects.

QVAC SDK v0.12.1

📦 NPM: https://www.npmjs.com/package/@​qvac/sdk/v/0.12.1

This is a patch release on top of v0.12.0. It surfaces two new error classes so callers can distinguish a crashed bare worker from an in-flight call cancelled by SDK shutdown, and it fixes a Qwen 3.5/3.6 tool-call regression where capitalised booleans were silently dropping the entire tool call.

New APIs

Distinguish bare worker crashes from shutdown cancellations

Calls made through a bare worker (e.g. sdk.embed, sdk.complete) previously rejected with a generic RPC error if the worker process died mid-request or if sdk.close() was called while the request was in flight. Both cases looked identical to callers, so retry/UX logic had to guess.

v0.12.1 introduces two structured RPC errors that propagate from the worker bridge:

• WorkerCrashedError — the bare worker died unexpectedly. Exposes exitCode and exitSignal so you can tell a SIGKILL from a clean non-zero exit and decide whether to respawn.
• WorkerShutdownError — the SDK is shutting down (sdk.close() was called) while this request was still in flight. Safe to swallow on intentional teardown; surfaces an actionable label for callers who want to log it.

import { WorkerCrashedError, WorkerShutdownError } from "@qvac/sdk";
try {
await sdk.embed({ modelId, text: "hi" });
} catch (err) {
if (err instanceof WorkerCrashedError) {
</tr></table>

... (truncated)

Changelog

Sourced from @​qvac/sdk's changelog.

[0.12.2]

📦 NPM: https://www.npmjs.com/package/@​qvac/sdk/v/0.12.2

This patch release unblocks React Native and BareKit apps that bundle @qvac/sdk or @qvac/bare-sdk. Metro and Bare static analysis no longer reject the config loader, and clients can import the model registry through a dedicated subpath without pulling the full SDK graph into the bundle.

New APIs

@qvac/sdk/models and @qvac/bare-sdk/models subpaths

React Native apps that only need model constant names previously had to import from the package root, which dragged server-side modules into Metro. v0.12.2 adds a ./models export on both @qvac/sdk and @qvac/bare-sdk so you can depend on the registry alone.

import { LLAMA_3_2_1B_INST_Q4_0 } from "@qvac/sdk/models";
// or on Bare-only clients:
import { LLAMA_3_2_1B_INST_Q4_0 } from "@qvac/bare-sdk/models";

Bug Fixes

Bare config loader works under Metro static analysis

BareKit and Expo consumers could fail at bundle time with errors such as Invalid call: import(filePath) when the SDK resolved qvac.config.js. The Bare config loader used dynamic import() with a runtime path, which Metro and Bare reject because the target is not a string literal.

v0.12.2 loads .js and .json config files with require(filePath) instead, which satisfies static analysis while keeping the same resolution order (QVAC_CONFIG_PATH, then project-root qvac.config.js / qvac.config.json, then defaults). Supported extensions are centralized in SUPPORTED_CONFIG_FILE_EXTS so discovery and validation stay aligned. TypeScript config files (.ts) are explicitly rejected on the Bare path with a clear error — use .js or .json in RN/Bare projects.

[0.12.1]

📦 NPM: https://www.npmjs.com/package/@​qvac/sdk/v/0.12.1

This is a patch release on top of v0.12.0. It surfaces two new error classes so callers can distinguish a crashed bare worker from an in-flight call cancelled by SDK shutdown, and it fixes a Qwen 3.5/3.6 tool-call regression where capitalised booleans were silently dropping the entire tool call.

New APIs

Distinguish bare worker crashes from shutdown cancellations

Calls made through a bare worker (e.g. sdk.embed, sdk.complete) previously rejected with a generic RPC error if the worker process died mid-request or if sdk.close() was called while the request was in flight. Both cases looked identical to callers, so retry/UX logic had to guess.

v0.12.1 introduces two structured RPC errors that propagate from the worker bridge:

• WorkerCrashedError — the bare worker died unexpectedly. Exposes exitCode and exitSignal so you can tell a SIGKILL from a clean non-zero exit and decide whether to respawn.
• WorkerShutdownError — the SDK is shutting down (sdk.close() was called) while this request was still in flight. Safe to swallow on intentional teardown; surfaces an actionable label for callers who want to log it.

import { WorkerCrashedError, WorkerShutdownError } from "@qvac/sdk";
try {
await sdk.embed({ modelId, text: "hi" });
} catch (err) {
if (err instanceof WorkerCrashedError) {
</tr></table>

... (truncated)

Commits

• fc5baa1 QVAC-20016 fix: bare config loader require() and models subpath for Metro (#2...
• 29e0682 test[notask]: e2e guard for dynamic-tools kvCache reuse across model reload (...
• a5866d3 QVAC-19817 test[skiplog]: fix flaky e2e completion tests, migrate to generati...
• e45a497 QVAC-19777 chore[skiplog]: release sdk 0.12.1 (#2397)
• f8d60a0 QVAC-19050 test: restructure sdk test buckets — add test/bare, split unit/bar...
• 9dc3476 fix: accept non-lowercase booleans in qwen35 tool-call parser (#2372)
• f99636b QVAC-19304 fix[api]: surface bare worker crash and shutdown as RPC errors (#2...
• 4c9ac9b test[skiplog]: remove stale completion e2e tests (#2339)
• f39d694 fix[notask|skiplog]: repair SDK 0.12.0 breaking.md AFTER extraction (#2365)
• ea7b363 QVAC-17940 chore[skiplog]: release sdk 0.12.0 (#2346)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #7.