STAR ODK Runtime v4.1.0

STAR ODK Runtime v4.1.0

The STAR ODK Runtime contains the WEB5 STAR engine, STAR CLI and reusable CLI library used to create, package and run OAPPs, quests, missions, GeoHotSpots and STARNET content.

What's new in v4.1.0

Features

• Add API-backed Anorak GeoNFT quest flow (a78b6f4)
• Add durable GeoHotSpot trigger transactions (81ec910)
• Add end-to-end Edge offline synchronization (b2844f2)
• Add gRPC endpoints to Web5/STAR ODK WebAPI (cf2566a)
• Add Hot Chocolate GraphQL endpoint to Web5/STAR ODK WebAPI (118dff0)
• Add NuGet package metadata to 22 new packages (963489b)
• Add ONETConfig to OASISDNA and wire BootstrapServers/NetworkType (8c93394)
• Add ONODE Manager system: ONODEService supervisor, ONODE.Client library, Avalonia tray app, CLI extensions, Web4 Holon bridge endpoints (57fb8a5)
• Add playable GeoHotSpot quest matrix (43e69a7)
• Add rate limiting and API key middleware to Web5-Web10 WebAPIs (5565ce5)
• Add safe subscription administration rollout (d9f3a8f)
• Add STAR API Dockerfile and entrypoint (296e938)
• Add WEB5-WEB10 API release history files; wire OASISBootLoader versions for WEB6-WEB10 (0684086)
• chore: add STAR ODK and WEB6 as private git submodules (39586b5)
• Configure Kestrel Http1AndHttp2 on Railway PORT for gRPC support across Web4-Web10 (eaa31ab)
• docs: add README.md for 57 providers + bump submodule pointers (87b2b85)
• Expand Web5 and Web6 GraphQL schemas with full domain coverage (9616ee9)
• feat: add ArweaveOASIS permanent storage provider (07e0704)
• feat: add ArweaveOASIS to WebAPI provider switch, swagger docs, and MCP tool description (fc3b780)
• feat: add OQuake2/OQuake2-RTX/OQuake3 integrations; complete 10-game Omniverse (3536665)
• feat: complete Edge offline runtime and release automation (279c090)
• feat: document GeoHotSpot trigger integration (aba3042)
• feat: implement UnlockPortal across all 10 games + PortalsController STAR API (ecdbac7)
• feat(omniverse): implement player warp + entity spawn across all 10 OGames (4e249a6)
• feat(star-api): add Teleport, SpawnEvents, Stories, and MapEntities controllers (31275c1)
• feat(web5): deploy quest score rewards and test seeds (836a862)
• Fix audit report: implement controller stubs, TokenHelper, WifUtility, XRPLOASIS, COSMICManager (685faff)
• Fix build errors: WebSocket usings, AutoMapper downgrade, add ONODE.Client to sln (acc7921)
• Fix web5 STAR WebAPI build errors: cast MetaData object to string for TryParse; add async to mission controller methods (b1cea02)
• Implement all remaining TODO stubs: MissionsController delegates to MissionManager, ParksController uses HolonManager, AvatarService/AztecOASIS/RadixOASIS/COSMIC TODO comments converted to notes (9b98652)
• Implement atomic WEB4 usage ledger and durable cross-service settlement (d08668a)
• Karma: add Benevolent platform action enums, fill all GetKarmaForType cases; fix STAR 401 (635458e)

Fixes and hardening

• FIX (5ad3e6a)
• Fix all 13 security audit findings (dfc260c)
• Fix NuGet pack issues: correct logo paths, remove missing README refs, fix LineaOASIS compile errors (a32a229)
• Fix provider CI and patch database dependencies (fb68db4)
• Fix remaining NuGet pack failures: compile errors, PackagePath, README refs (85c0cc3)
• Fix WEB4 STAR DNA loading (3b25025)
• Fix Web5 MetaData gRPC/GraphQL: correct UpdateAsync, DeleteAsync, CloneAsync, PublishAsync, LoadVersionsAsync, SearchAsync signatures (3f9182c)
• Fix Web5 STAR ODK GraphQL cosmic type namespaces and method signatures (d3a2252)
• fix: delete BerrachainOASIS (typo duplicate), fix BerachainOASIS ProviderType enum ref, clean up solution and Startup.cs (8e4eabc)
• fix: persist quest authorship in test fixtures (f6cfb0d)
• fix: point Web4OasisApiBaseUrl to dev API instead of localhost:7777 (521ed3b)
• fix: point Web4OasisApiBaseUrl to prod API instead of localhost:7777 (e784ed4)
• fix: restore missing CLI partial class methods lost in prior splits (576ea17)
• fix: restore NFT MetaData query and local dev port/HTTPS config (24a8c18)
• fix(ONET): signed peer exchange, redacted ONET config, replay-safe auth; bump ONODE Core and STAR ODK (f2a9d2b)
• fix(ONODE): stop serving or replacing the full OASISDNA over HTTP; bump ONODE Core, STAR ODK, WEB6 (17a4c51)
• fix(web5): deploy objective rewards in game summaries (b1a21c5)

Other changes

• Advance ordered quest enforcement (0937335)
• Advance STAR GeoHotSpot validation (2adb7f3)
• Advance validated GeoHotSpot creation API (62f0ed5)
• Align WEB5 histories to exact release boundaries (1f2cec0)
• Automate coordinated OASIS platform releases (7ed2053)
• Build authoritative Our World talking-tree quest flow (67e2f40)
• Build out real subscription system replacing all mock stubs (7e9640b)
• build: advance STAR ODK GeoHotSpot contract (1f45567)
• Bump all 85 OASIS packages to 2.0.1 so NuGet publish is not skipped (c0b168f)
• Bump WEB5 STAR API to v2.0.0 (4120bca)
• Centralize WEB5-WEB10 subscriptions in WEB4 (d71586b)
• chore: bump ONODE.Core and STAR ODK submodule pointers (4f2b67f)
• chore: bump STAR ODK submodule — search param normalisation (6833a31)
• chore: remove STAR ODK and WEB6 — moving to private repos as submodules (4b2015a)
• chore: sync submodule pointers and update test harness (fb8e5d6)
• chore: update STAR ODK and WEB6 submodule pointers — source now pushed to private repos (2a832c5)
• cleaning up (a8bd928)
• Complete GeoHotSpot integration docs and dependency pin (753ad16)
• Complete GeoHotSpot quest trigger integration (a804c7a)
• Create API quests as persisted STAR holons (a35a1b0)
• Default game clients to hosted development APIs (5e1f777)
• Deliver canonical quest events to Our World (0d10c84)
• Deploy aligned WEB5 JWT runtime (ab5b981)
• Deploy quest objective order contract (742b9cb)
• Deploy shared JWT runtime invariant (c0c5b77)
• docs: 150 providers / 65 storage; restore moved ONODE projects to the solutions (287e8b0)
• docs: bump Provider-Summary last-updated date; bump STAR ODK submodule pointer (bae0af4)
• docs: define quest objective ordering contract (97accc7)
• docs: define WEB4 and WEB5 GeoNFT architecture (be47c24)
• Eliminate remaining NuGet vulnerabilities (739aeee)
• Enforce public GUID holon persistence across APIs (a9513df)
• Extend holon lifecycle validation to game and mission APIs (faa7991)
• Finalize cross-game release artifacts and dependency pins (d7dd1a3)
• Grant test avatar enterprise API access (73a0c30)
• Make API release histories complete and traceable (1854da6)
• Move entrypoint scripts to Docker/ and update Dockerfile references (72764d1)
• new script and missing grpc endpoints (22844b2)
• Order API release histories chronologically (35b6b8e)
• Persist WEB5 quest seeds reliably (866a68d)
• Phase 3+4: AvatarRepository upsert fallback; comment out redundant IsNewHolon/CreatedDate (3f9941e)
• Phase 5: provider configuration across Manager, CLI, Web4 API, ONODEService (0746085)
• Pin merged subscription admin dependencies (a9e9702)
• Pin resilient WEB5 and WEB6 development hosts (1b00ac7)
• Pin resilient WEB5 and WEB6 production hosts (605e415)
• Pin verified STAR API references and Postman collection (ca75e84)
• Preserve failover diagnostics in WEB5 quest responses (2530c1a)
• Publish karma settings initialization and quest completion timestamps (0fa3c06)
• Publish verified MCP documentation across releases (17dfc5f)
• Publish WEB5 and WEB6 API histories publicly (aa99685)
• Redirect / to /swagger on both ONODE and STAR APIs (fb7fbdd)
• refactor: cross-game story arcs are Chapter→Mission→Quest→Objective (cc4e1f1)

The summary lists the newest 100 of 154 component changes. The full comparison below contains every commit.

Full changelog

STAR-ODK-Runtime-v4.0.1...STAR-ODK-Runtime-v4.1.0