Skip to content

ROAR Protocol SDK v0.2.2

Choose a tag to compare

View all tags
@kdairatchi kdairatchi released this 13 Mar 16:34
· 71 commits to main since this release
v0.2.2
0df3830

Full Changelog: v0.2.1...v0.2.2

ROAR Protocol SDK v0.2.2

Real-time Open Agent Runtime — first stable release.

What's in the box

TypeScript SDK (@roar-protocol/sdk)

Zero external dependencies. Node.js 18+. 30/30 conformance.

Layer 1 — Identity

  • Ed25519 key generation and signing
  • did:roar, did:key, did:web DID methods
  • W3C DID Documents
  • Cryptographic delegation tokens with TTL + autonomy levels
  • WATCH → GUIDE → DELEGATE → AUTONOMOUS capability model

Layer 2 — Discovery

  • In-memory AgentDirectory
  • SQLite-backed persistent directory (node:sqlite, zero deps)
  • TTL+LRU DiscoveryCache

Layer 3 — Connect

  • HTTP transport (ROARClient, ROARServer)
  • Native WebSocket (RFC 6455, no ws library)
  • Server-Sent Events
  • stdio transport for CLI agents

Layer 4 — Exchange

  • 7 message intents: execute, delegate, update, ask, respond, notify, discover
  • HMAC-SHA256 signing — byte-for-byte compatible with the Python SDK
  • Protocol auto-detection: ROAR / MCP / A2A / ACP

Layer 5 — Stream

  • EventBus with AIMD backpressure
  • Replay-safe IdempotencyGuard

Python SDK

30/30 conformance. Feature-complete across all 5 layers, including ROARHub with federation.

Security

Full security audit completed. All Critical/High/Medium findings resolved.

  • timingSafeEqual throughout — no timing oracles
  • 1 MiB caps on all network inputs
  • Path canonicalization on SQLite directory
  • trustProxy flag for X-Forwarded-For (off by default)

CI

GitHub Actions runs typecheck + 30-check conformance suite on every PR.

Install

npm install @roar-protocol/sdk

Links

- ./SPEC.md · ./SDK-ROADMAP.md · ./SECURITY-AUDIT-FINAL.md

---

## Your Manual Steps

**1. npm publish** — run this from your terminal:
```bash
cd /home/anon/dev/roar-protocol/ts
npm run build
npm publish --provenance --access public
(Requires npm login + 2FA. --provenance ties the package to the GitHub Actions run — supply chain proof.)

2. GitHub Release — go to github.com/ProwlrBot/roar-protocol/releases/new, tag v1.0.0, paste the release notes above.

3. Tweet copy (I'll draft one):

Just shipped ROAR Protocol SDK v0.2.1 🎉

Real-time Open Agent Runtime — a 5-layer protocol for agents that discover each other, sign messages, delegate capabilities, and
stream events.

• Zero external deps (Node 18+ built-ins only)
• 30/30 conformance, security audited
• TypeScript + Python, cross-language signatures
• did:key, did:web, W3C DID Documents

npm install @roar-protocol/sdk

github.com/ProwlrBot/roar-protocol

---
v0.2.0 roadmap (for after launch):
- WebCrypto async signing (crypto.subtle) — makes the TS SDK browser/Deno/Worker native
- Python DelegationToken server-side use-count enforcement
- ROARHub federation in TypeScript
Assets 2
Loading