Skip to content

OpenAgentID SDK 0.7.3

Choose a tag to compare

View all tags
@l1feorg l1feorg released this 17 Oct 14:31
· 18 commits to main since this release
v0.7.3
50edd40
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Published to npm on 2026-10-12 22:07 UTC.

0.7.3 — current package compatibility, 2026-10-12

  • Restore deterministic X25519 public keys from seeds with real WASM bindings;
    expose public-from-secret and retain recovery compatibility with 0.1.1's
    RFC 7748 base-point operation. Remove the random-key recovery fallback.

  • Require Node 20.19+ to match abort-signal and integration runtime support.

  • Read the receiver clock on every ACT verification; keep compatibility with
    crypto-wasm 0.1.1 and fix the WASM default clock in crypto-wasm 0.1.2.

  • Preserve native Request method, headers, body and cancellation in credential
    proxy calls; align the exported SDK VERSION with its package version.

  • Add explicit adapters for the shipped OAS, Arsenal, AEGIS and skills-policy
    contracts, with real-package integration examples and required trust context.

  • Release HTTP, MCP, Claude hooks, SCIM and EAS 0.2.0 integrations with current
    SDK support, authenticated flows and fail-closed revocation/replay behavior.
    HTTP now requires authoritative key resolution and atomic nonce admission;
    EAS requires trusted attesters; SCIM requires actual identity provisioning.

  • Update sdk-testing 0.1.2 and create-openagent 0.5.3; preserve Autos as the
    default, SpaceX and all existing families, colors, accessories and live state.

  • Replace placeholder deployment handlers with complete ACT receivers and
    executable examples; add packed-package checks against SDK 0.7.2 and 0.7.3.
    OIDC 0.2.0 keeps its API and gains a full current-SDK authentication test.

Packages in this release

Package Version
@openagentid/sdk 0.7.3 published 2026-10-12 22:07 UTC
@openagentid/sdk-testing 0.1.2 published 2026-10-12 22:23 UTC
@openagentid/http 0.2.0 published 2026-10-12 22:10 UTC
@openagentid/mcp 0.2.0 published 2026-10-12 22:12 UTC
@openagentid/claude-agent 0.2.0 published 2026-10-12 22:16 UTC
@openagentid/scim 0.2.0 published 2026-10-12 22:20 UTC
@openagentid/oidc 0.2.0 unchanged
@openagentid/crypto-wasm 0.1.2 published 2026-10-12 22:04 UTC
create-openagent 0.5.3 published 2026-10-12 22:26 UTC

Source and verification

This tag points at 50edd40, the merge of #15 on main. npm recorded no gitHead for these versions. Every source embedded in the SDK tarball's sourcemaps, and each other package's manifest, README, CHANGELOG and licenses, match this commit byte for byte. @openagentid/crypto-wasm 0.1.2 is wasm-pack output: its README matches, and crates/openagent-crypto-wasm is unchanged here since 0c0f4db, which set version 0.1.2. These versions were published by hand before the release workflow existed, so they carry no provenance attestation. The attached tarballs are the files npm serves (their sha512 equals npm's integrity):

gh release download v0.7.3 --repo OpenAgentID/openagent-sdk
shasum -a 256 -c SHA256SUMS
Assets 11
Loading