BYOK SDK 0.25.0 · keys 0.10.0

BYOK SDK 0.25.0 · keys 0.10.0

Nine packages are published under npm's latest dist-tag. Eight aligned SDK
packages use 0.25.0. Independently versioned keys uses 0.10.0 and pins core
0.25.0. The published rc.2 train remains on rc.

• Protocol v2 removes SDK permission policy, executable attestation, the trusted
  launch-cwd wrapper and egress sanitization. Upgrade server and client together.
• Sessions use the user's Claude, Codex and Pi configuration under the
  minimal-guardrails contract. Direct adapter hosts can import buildRuntimeEnv;
  injected Codex adapters take their sandbox setting directly.
• Pi is pinned to 1.1.0. The private OAR source is 0.45.1, retaining the six BYOK
  modifications; raw launch-argument and service-tier options remain internal.
• SQLite startup rejects unsupported pending mailbox wire majors before serving
  traffic. Keys rejects old profile schemas before WAL setup or DDL and leaves
  refused legacy files intact.
• Keys' OpenAI-compatible and Anthropic clients support requestTimeoutMs.
  Client imports work in a single-file Host bundle, and undici is pinned to 8.11.2.

Upgrade requirements

Drain v1 mailbox work with the previous SDK before upgrading. The new server
neither converts nor deletes old pending rows. Custom writers must store numeric
v: 2 envelopes. Recreate preparations for record version 10, binding and surface
digests v3, Pi MCP fingerprint v2 and the Pi 1.1.0 runtime identity. Remove retired
SDK configuration and implementation-identity imports, and update keys launcher
flags to --pi-projection-dir. Node 24.15.0 or later is required.

The existing documented residuals remain: re-parented POSIX background jobs can
outlive SDK disposal, timing flakes are tracked separately, and recorded real-agent
acceptance does not qualify every sandbox/profile lane. Host budget,
Summary/ContextPack acceptance and the new Agent-home capability requests remain
separate work. No new final-stable live Host/provider receipt, Host deployment or
data migration is included.

Release source and tag target: 3278b834172efefb50d0dbdd07a29db18521349b.
Main push CI
passed all 24 jobs. The attached tarballs and schema-3 release manifest are the
original accepted CI artifacts. Registry readback verifies exact versions,
integrities, runtime dependency edges, dist-tags and a clean installed consumer
before tagging. The retired implementation-identity package is excluded.

Publication ran locally with npm write 2FA. GitHub Actions OIDC provenance is not
attached. See the attached publication record and release manifest for exact
package and integrity evidence.