chore: version packages

packages/ai-autopilot/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @gemstack/ai-autopilot
 
+## 0.9.1
+
+### Patch Changes
+
+- 734da1a: fix(ai-autopilot): EventStream iterators are now cancellable
+
+  A consumer's async iterator gained a `return()` that drops its waiter from the stream and settles any pending `next()`. Previously a consumer that stopped iterating (e.g. a disconnected SSE client) left its waiter registered until the next `push`/`close`, so many short-lived consumers on an idle stream leaked. Live iteration and history replay are unchanged.
+
 ## 0.9.0
 
 ### Minor Changes

packages/ai-autopilot/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gemstack/ai-autopilot",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Orchestration for @gemstack/ai-sdk agents: a Supervisor that plans, dispatches subagents (bounded concurrency + budget guardrails), and synthesizes the result.",
   "keywords": [
     "ai",

packages/framework/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @gemstack/framework
 
+## 0.8.1
+
+### Patch Changes
+
+- 734da1a: fix(framework): harden the run relay and workspace sandbox against resource exhaustion
+
+  - The relay now caps how many runs it holds in memory and evicts the least-recently-used one on overflow. Because it is unauthenticated, an anonymous request to `/r/<id>/…` could previously create per-run state that was never freed; run creation is now bounded (`maxRuns`, default 200).
+  - A disconnected SSE viewer now cancels its stream iterator, releasing its waiter immediately instead of lingering on the stream until the next event (which may never arrive for an idle run).
+  - `snapshotWorkspace` checks a file's size before reading it, so a large asset in the workspace is skipped without ever being loaded into memory during a `--sandbox docker` sync.
+  - `relayPublisher`'s POST has a timeout, so a relay that accepts a connection but never responds can no longer hang the CLI on exit (`flush()`).
+
+- Updated dependencies [734da1a]
+  - @gemstack/ai-autopilot@0.9.1
+
 ## 0.8.0
 
 ### Minor Changes

packages/framework/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gemstack/framework",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "The (AI) Framework: turnkey, zero-config AI orchestration that wraps a coding-agent CLI (Claude Code) as a black box and takes you from an idea to a running app. Vite for AI.",
   "keywords": [
     "ai",