OpenAgentID SDK 0.4.0

Published to npm on 2026-10-12 02:36 UTC.

0.4.0 — public developer tooling, 2026-10-11

• Add a Node-only persistent local identity authority with real Ed25519 keys,
  explicit receiver-controlled public identity trust, bounded issued challenges,
  signature verification, durable replay prevention and local revocation.
  Reuse the existing identity verifier without a mandatory Life service or
  private repository dependency.
• Expand oaid with workspace initialization, agent creation/export/trust/revoke,
  challenge/proof commands, local verification, diagnostics and character SVGs.
• Add the working create-openagent 0.2 starter and public-package qualification;
  retire unsupported generator selectors with explicit migration errors.
• Correct first-run documentation and facade configuration guidance. The new
  local authority uses private persistent single-host storage; it does not claim
  distributed storage or grant access outside the receiving application's policy.

Packages in this release

Package	Version
@openagentid/sdk	0.4.0	published 2026-10-12 02:36 UTC
@openagentid/sdk-testing	0.1.1	unchanged
@openagentid/http	0.1.1	unchanged
@openagentid/mcp	0.1.1	unchanged
@openagentid/claude-agent	0.1.1	unchanged
@openagentid/scim	0.1.1	unchanged
@openagentid/oidc	0.2.0	unchanged
@openagentid/crypto-wasm	0.1.1	unchanged
create-openagent	0.2.0	published 2026-10-12 02:39 UTC

Source and verification

This tag points at 01c4512, #6 on main. npm recorded no gitHead for these versions. Every source embedded in the SDK tarball's sourcemaps, and each package's manifest, README, CHANGELOG and licenses, match this commit byte for byte. These versions were published by hand before the release workflow existed, so they carry no provenance attestation. The attached tarballs are the files npm serves (their sha512 equals npm's integrity):

gh release download v0.4.0 --repo OpenAgentID/openagent-sdk
shasum -a 256 -c SHA256SUMS