v4.1.1

Full Changelog: v4.1.0...v4.1.1

v4.1.0 - reject lone surrogates in JCS (RFC 8785)

Fixed / Security

• JCS canonicalization now rejects lone surrogates (RFC 8785). canonicalizeJCS and the signing paths that call it previously accepted strings carrying an unpaired UTF-16 surrogate (U+D800 to U+DFFF) and let it reach the canonical output, so input that is not valid Unicode could be signed and could canonicalize differently across implementations. Such input is now rejected before hashing with a stable error, matching the Python and Go SDKs and the RFC 8785 requirement that input be valid Unicode.

Behavior change

• Input that was previously accepted is now rejected. A value carrying a lone surrogate on a canonicalization or signing path throws instead of producing a signature. Callers that never emit unpaired surrogates see no change. This is why the minor version moves rather than the patch.

Internal

• Reversibility-fold v0 groundwork landed (per-effect classifier and profile registry). It is not exported from the package entry and adds no public API. No consumer action.

v4.0.0

What's Changed

• visibility batch: agent-passport-system by @aeoess in #72

Full Changelog: v3.3.1...v4.0.0

v3.3.1

What's Changed

• audit fixes: revocation axis ceiling, checkAudience null hardening, CLI audit honesty, node_modules untrack by @aeoess in #71

Full Changelog: v3.3.0...v3.3.1

v3.3.0

What's Changed

• docs: point llms.txt reference at canonical protocol domain by @aeoess in #63
• Update copyright year in README.md by @aeoess in #64
• feat(bilateral-pair): action_ref slot in signed body + pair reconcili… by @aeoess in #66
• feat(evidence-bundle): F5 bundle primitives, claim-boundary report, C… by @aeoess in #68
• feat(revocation-enforcement): RevocationObservation per FREEZE-VWE F4 by @aeoess in #67
• fix(action-ref): canonicalize scopeRequired per spec 4.1 (NFC + code-… by @aeoess in #69
• feat(jurisdiction-selection): add jurisdiction selection provenance p… by @aeoess in #70
• Evidence integration: action_ref canonicalization, bilateral pair reconciliation, revocation observation, evidence bundle CLI, jurisdiction selection by @aeoess in #65

Full Changelog: v3.2.0...v3.3.0

v3.2.0

What's Changed

• build(deps): bump libsodium-wrappers from 0.8.2 to 0.8.4 by @dependabot[bot] in #57
• build(deps): bump actions/checkout from 4.2.2 to 7.0.0 by @dependabot[bot] in #48
• build(deps): bump actions/setup-python from 5.6.0 to 6.3.0 by @dependabot[bot] in #50
• build(deps): bump actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #51
• build(deps): bump openai from 6.34.0 to 6.45.0 by @dependabot[bot] in #52
• ci: bump codeql-action to v4.37.0 (init, analyze, upload-sarif together) by @aeoess in #59
• chore: drop three unused runtime deps, @types/uuid, and pin tsconfig types by @aeoess in #60
• build(deps-dev): bump typescript from 5.9.3 to 7.0.2 by @dependabot[bot] in #56
• feat: coverage-guided fuzzing infrastructure + 2 real bug fixes by @aeoess in #61
• ci: tag-triggered release workflow (npm Trusted Publishing + SLSA provenance) by @aeoess in #62

New Contributors

• @dependabot[bot] made their first contribution in #57

Full Changelog: v3.1.0...v3.2.0