Skip to content

BYOK SDK 0.28.0 · keys 0.13.0

Choose a tag to compare

View all tags
@Ancienttwo Ancienttwo released this 20 Oct 20:02
· 1041 commits to main since this release
v0.28.0
ad0d2d2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.28.0 publication record

Date: 2026-10-21 (Asia/Taipei).
Status: all nine packages are published on npm latest. Complete frozen-integrity and runtime-dependency readback passed. The isolated npm install passed.

Changes

  • Update SDK-owned OAR source to 0.68.2 (60ad09b). Keep the nine BYOK deltas.
  • Add Grok and Hermes adapters, MCP HTTP, Bot outcome fragments and calendar routines.
  • Add Host execution and collaboration examples, Cross-Bot delegation and local execution records.
  • Add Pi profile API fields and strict SDK-owned macOS memory helpers. See the migration notes before upgrading.

Source and accepted artifacts

  • OAR PR: #597, merged as 6c2812ba.
  • Release preparation: #596, merged as ad0d2d2591d8b5eb6ebb4c7f47cfc5463ca5f779.
  • The accepted candidate 448cb102 passed all 54 push and PR CI jobs. The final main tree is identical to that candidate tree.
  • The owner directed skipping the repeated main CI run. That run was cancelled after its accepted tarballs were retained. It is not reported as a green run.
  • Publication uses the original release-pack-ad0d2d2591d8b5eb6ebb4c7f47cfc5463ca5f779 artifact, id 12293701928, from main CI 39485454515.
  • Its schema-3 manifest SHA-256 is 31b766407b868c63d65048f86d7b2889111e1621049534487cf56761bd9cacbe.
  • All nine tarballs are byte-identical to the accepted candidate's tarballs. No rebuild or repack supplied the upload bytes.
  • The packed client provenance records OAR 0.68.2, upstream commit 60ad09b9b97bdd005360504fda2de0d59826f08c, and 82 maintained files.

npm execution

The account is ancienttwo, with auth-and-writes 2FA. Each upload used browser authentication. This local route has no GitHub OIDC provenance attestation. The target stable dist-tag is latest. No upload was repeated.

The initial publisher reached its registry-visibility limit after all uploads succeeded. The final standalone readback then passed. It verified one exact nine-package graph, core 0.28.0 only, and the official Pi 1.3.0 closure. No upload was repeated.

Tag and GitHub Release

After complete readback passed, the operator created the annotated v0.28.0 tag at the exact source above. Its message is v0.28.0, a blank line, then sourceGitSha ad0d2d2591d8b5eb6ebb4c7f47cfc5463ca5f779.

The tag object is 11be00087d63bf26ce24f20d02bd2a64605a2d59. The remote tag was pushed and read back. The stable GitHub Release uses this tag.

Accepted tarballs

Package Version SHA-256
@byok-sdk/core 0.28.0 6643a1b941b118077af6517f892de0fa4cf7da69a20f07b68a9e7cdd10de55aa
@byok-sdk/protocol 0.28.0 fc285c52b81f2e7cc89af3b80bb389a419c351c1a5d4f3a6ff5092aef23b8176
@byok-sdk/server 0.28.0 907667e8ce90161ee0032c8fed8149af2bac924d18e5aed4c496bc0a8793034b
@byok-sdk/cloud 0.28.0 49c986b069cecebc95492cbdd11adc5590899b20637edff2c870c0de2a69deca
@byok-sdk/client 0.28.0 a3d7523880dfd37584c2d0129c39a0bb831622dfd0c076cf2317a3e008233d6b
@byok-sdk/cloud-dataplane 0.28.0 7e1d0daa456283798f08f357bd3932be98dcb78b397f3d0e517312726405f3d5
@byok-sdk/cloud-do 0.28.0 ee37dcfa9af6bcb419e7ce6c770021ef49f33af98fb105603207c81953f29329
@byok-sdk/ui-runtime 0.28.0 8dd6a5851a7e918a33b6cc901c14b896395a8dea8d118c58a22ea0c2aab008b8
@byok-sdk/keys 0.13.0 1c25673d00cc0140474da2afb92e5365f34bfd6f383ccb3795728b5f37e753f6

Release boundary

Wire major remains 3. The v3 floor remains 0.27.0. No new PostgreSQL migration ships after 0026. Remove the old DaemonConfig.agentMemoryFilesystem configuration and use the SDK helper assets. Recreate Pi 1.2.0 preparations for Pi 1.3.0.

Windows memory intents remain closed. Live Grok/Hermes provider sessions were not tested in this release task. npm publication does not migrate or deploy a Host.

See the release notes for the candidate scope and upgrade steps.

Assets 2
Loading