Skip to content

BYOK SDK 0.32.0 · keys 0.32.0

Choose a tag to compare

@Ancienttwo Ancienttwo released this 01 Nov 05:43
· 746 commits to main since this release
5f97595

0.32.0 publication record

Date: 2026-11-01 (UTC).
Status: all nine packages are published on npm latest at 0.32.0. The complete registry readback passed.

Release SHA: 5f9759558911d76d0d61a5f4fa4eea2116c0dbe1 on main (the merge of #1250). The tarballs are the release-pack-5f975955… artifact (sha256:9ee33f01…) from release-validation CI run 41274113989, and every registry dist.integrity matches them. The packages were published from a local npm session without provenance; the trusted-publishing workflow stopped with ENEEDAUTH before any upload (run 41277301045).

0.32.0 is a MINOR release under the default pre-1.0 policy. The upgrade manifest from 0.31.0 holds 28 breaking and 19 additive entries. These notes do not say that 0.32.0, or a Host on it, is ready for production. AiphaBee skips 0.32.0 and adopts once at 0.33.0 (owner, 2026-11-01); the product loop gates (#977, #978) are anchored to 0.33.0.

Upgrade

  • Upgrade the Host before its devices (expiresIn, #1114), and stop every SDK process that shares a protected target first (path-mutation gate, #1149).
  • Postgres migrations 0031 to 0034. 0034 drops activity_tail and starts an empty activity log with no pre-cutover history and no application-only rollback. Server SQLite upgrades a schema 6 file to 7 in place.
  • Tool authorization: one policy document per daemon (D3), file scope v1 for ordinary Pi RPC on darwin and linux (#1061), Host-only tool approval (#1101).
  • The daemon no longer inherits its environment; list Host-set runtime variables in runtimeEnvironment.pass (#1095).
  • The K4 execution core is @byok-sdk/server/execution-core; the Agent memory contract is @byok-sdk/protocol/agent-memory (#1106).

The full list, with one row per Host step, is in CHANGELOG.md, docs/releases/v0.32.0.md, docs/releases/host-upgrade-0.32.0.md and packages/client/upgrade-manifest.json.

Not in 0.32.0

#1113 A2b to A5 (SQLite activity adapter, canonical lifecycle, cross-instance wakes, restart-resumable tasks.events), Grok runtimes (#1094, #1255) and the DeepSeek Harness adapter (#1258) target 0.33.0. #1061 v2 residuals (Windows, non-Pi native runtimes, prepared and durable lanes, OS sandbox) decline file_scope_unsupported before claim.

Known issue

On macOS and Linux bash, the durable-shell gate can source the user's ~/.bashrc before shell ownership is acknowledged, and any rc output joins the tool output. The fix (--norc on the gate spawn) targets 0.33.0.