chore: full SDK code review — findings catalog

[yaron-thenvoi]

Overview

This PR adds a comprehensive code review of packages/sdk/ — 199 findings across 9 areas (5 Blockers, 71 Major, 85 Minor, 38 Nits), with a top-level triage document linking to per-area detail files.

This PR is not for merge. It exists so the team can read, discuss, and act on the findings. Each finding lives in a markdown file that GitHub renders inline; treat the PR as a viewing surface, not a code change.

How to read it

Read review.md in full — it includes detailed instructions on how the review is organized, what each area file contains, and how to navigate between the triage layer (the main file) and the per-finding detail (the files under review/).

What was checked

• Static analysis of the entire packages/sdk/src/ tree (every file read; counts grounded in direct text searches).
• tsc --noEmit (passes cleanly with peers installed).
• npm test (all 670 tests across 86 files pass).
• A separate verification pass that fact-checked every Blocker, Major, and Minor/Nit against the actual code; counts re-grepped and cited paths re-confirmed.

What wasn't checked

• Security audit (no threat modeling, no dependency-vulnerability scan).
• Runtime / production behavior (findings about lifecycle bugs are static reads).
• Performance / load profiling.
• Examples actually executed end-to-end.

Findings count

Area	Blockers	Major	Minor	Nits	Total
Public API & exports	1	6	6	2	15
Core / Agent / Runtime	2	10	18	8	38
Network layer	1	7	9	5	22
Adapters	0	11	10	6	27
Verticals (MCP + Linear)	0	4	7	3	14
Type safety	0	5	5	1	11
Error / async / cleanup / logging	0	9	7	5	21
Build / tests / docs / examples	1	10	11	2	24
Cross-module consistency & architecture	0	9	12	6	27
Total	5	71	85	38	199