Repository navigation
Releases: hawcx/hawcx_agentic_sdk
Release list
v0.1.4
HAAP SDK release v0.1.4.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image (supports linux/amd64 and
linux/arm64):
ghcr.io/hawcx/hx-agent-sdk:v0.1.4
Prereleases (alpha/beta/rc) also move the matching channel
tag (:alpha, :beta, :rc). :latest is reserved for
GA releases.
Contents
Multi-call binary (Phase 3-5 cutover, 2026-05-22): the
tarball / image now ships ONE real binary, hawcx-manager,
with 7 legacy-name symlinks (Unix) or .exe copies (Windows)
that dispatch by argv[0] to the corresponding role:
haap-supervisor→hawcx-manager supervisor(lifecycle, zero crypto material)haap-authenticator→hawcx-manager authenticator(holds IK_i, X3DH per §4.2.1)haap-tqs-precompute→hawcx-manager tqs-precompute(session-scoped K_session_root per §40)haap-tqs-jit→hawcx-manager tqs-jit(request-scoped, paired 1:1 with Assembler)haap-assembler→hawcx-manager assembler(single-flight crypto-proxy per §39)haap-eib→hawcx-manager eib(External Identity Broker, OAuth bearer per §45)haap-sdk→hawcx-manager sdk(demo / debug CLI)
Existing customer scripts that invoke haap-supervisor,
haap-authenticator, etc. continue to work unchanged — the
symlinks preserve every legacy call site. Direct invocation
via hawcx-manager <subcommand> is also supported.
On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.
MCP server-side sidecar (haap-rsv) ships from a
separate image as of 2026-05-21:
ghcr.io/hawcx/haap-rsv:v0.1.4. Source lives
in hx_agent_authorizer/crates/haap-rsv-bin. It is Unix-only
by design (UDS + peer-credential checks for the
local-sidecar trust model per §39.12.1).
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.4 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
v0.1.3
HAAP SDK release v0.1.3.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image (supports linux/amd64 and
linux/arm64):
ghcr.io/hawcx/hx-agent-sdk:v0.1.3
Prereleases (alpha/beta/rc) also move the matching channel
tag (:alpha, :beta, :rc). :latest is reserved for
GA releases.
Contents
Multi-call binary (Phase 3-5 cutover, 2026-05-22): the
tarball / image now ships ONE real binary, hawcx-manager,
with 7 legacy-name symlinks (Unix) or .exe copies (Windows)
that dispatch by argv[0] to the corresponding role:
haap-supervisor→hawcx-manager supervisor(lifecycle, zero crypto material)haap-authenticator→hawcx-manager authenticator(holds IK_i, X3DH per §4.2.1)haap-tqs-precompute→hawcx-manager tqs-precompute(session-scoped K_session_root per §40)haap-tqs-jit→hawcx-manager tqs-jit(request-scoped, paired 1:1 with Assembler)haap-assembler→hawcx-manager assembler(single-flight crypto-proxy per §39)haap-eib→hawcx-manager eib(External Identity Broker, OAuth bearer per §45)haap-sdk→hawcx-manager sdk(demo / debug CLI)
Existing customer scripts that invoke haap-supervisor,
haap-authenticator, etc. continue to work unchanged — the
symlinks preserve every legacy call site. Direct invocation
via hawcx-manager <subcommand> is also supported.
On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.
MCP server-side sidecar (haap-rsv) ships from a
separate image as of 2026-05-21:
ghcr.io/hawcx/haap-rsv:v0.1.3. Source lives
in hx_agent_authorizer/crates/haap-rsv-bin. It is Unix-only
by design (UDS + peer-credential checks for the
local-sidecar trust model per §39.12.1).
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.3 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
v0.1.0-alpha.13
HAAP SDK release v0.1.0-alpha.13.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image (supports linux/amd64 and
linux/arm64):
ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.13
Prereleases (alpha/beta/rc) also move the matching channel
tag (:alpha, :beta, :rc). :latest is reserved for
GA releases.
Contents
Multi-call binary (Phase 3-5 cutover, 2026-05-22): the
tarball / image now ships ONE real binary, hawcx-manager,
with 7 legacy-name symlinks (Unix) or .exe copies (Windows)
that dispatch by argv[0] to the corresponding role:
haap-supervisor→hawcx-manager supervisor(lifecycle, zero crypto material)haap-authenticator→hawcx-manager authenticator(holds IK_i, X3DH per §4.2.1)haap-tqs-precompute→hawcx-manager tqs-precompute(session-scoped K_session_root per §40)haap-tqs-jit→hawcx-manager tqs-jit(request-scoped, paired 1:1 with Assembler)haap-assembler→hawcx-manager assembler(single-flight crypto-proxy per §39)haap-eib→hawcx-manager eib(External Identity Broker, OAuth bearer per §45)haap-sdk→hawcx-manager sdk(demo / debug CLI)
Existing customer scripts that invoke haap-supervisor,
haap-authenticator, etc. continue to work unchanged — the
symlinks preserve every legacy call site. Direct invocation
via hawcx-manager <subcommand> is also supported.
On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.
MCP server-side sidecar (haap-rsv) ships from a
separate image as of 2026-05-21:
ghcr.io/hawcx/haap-rsv:v0.1.0-alpha.13. Source lives
in hx_agent_authorizer/crates/haap-rsv-bin. It is Unix-only
by design (UDS + peer-credential checks for the
local-sidecar trust model per §39.12.1).
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.0-alpha.13 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
v0.1.0-alpha.9
HAAP SDK release v0.1.0-alpha.9.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image:
ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.9
ghcr.io/hawcx/hx-agent-sdk:latest
Supports linux/amd64 and linux/arm64.
Contents
Agent-side runtime (all platforms — Linux, macOS, Windows):
the supervisor and the 5 protected child processes that form
the per-agent runtime per CS v7.2.5 §35.6:
haap-supervisor— lifecycle, zero crypto materialhaap-authenticator— holds IK_i, performs X3DH (§4.2.1)haap-tqs-precompute— session-scoped, holds K_session_root (§40)haap-tqs-jit— request-scoped, paired 1:1 with Assemblerhaap-assembler— single-flight crypto-proxy (§39)haap-eib— External Identity Broker, OAuth bearer isolation (§45)
On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.
SDK CLI (all platforms): haap-sdk
MCP server-side sidecar (Linux / macOS only): haap-rsv
sits in front of the resource server and is deployed by MCP
server operators (typically as a Linux container). It is
Unix-only by design (UDS + peer-credential checks for the
local-sidecar trust model).
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.0-alpha.9 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
v0.1.0-alpha.10
HAAP SDK release v0.1.0-alpha.10.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image:
ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.10
ghcr.io/hawcx/hx-agent-sdk:latest
Supports linux/amd64 and linux/arm64.
Contents
Agent-side runtime (all platforms — Linux, macOS, Windows):
the supervisor and the 5 protected child processes that form
the per-agent runtime per CS v7.2.5 §35.6:
haap-supervisor— lifecycle, zero crypto materialhaap-authenticator— holds IK_i, performs X3DH (§4.2.1)haap-tqs-precompute— session-scoped, holds K_session_root (§40)haap-tqs-jit— request-scoped, paired 1:1 with Assemblerhaap-assembler— single-flight crypto-proxy (§39)haap-eib— External Identity Broker, OAuth bearer isolation (§45)
On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.
SDK CLI (all platforms): haap-sdk
MCP server-side sidecar (Linux / macOS only): haap-rsv
sits in front of the resource server and is deployed by MCP
server operators (typically as a Linux container). It is
Unix-only by design (UDS + peer-credential checks for the
local-sidecar trust model).
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.0-alpha.10 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
v0.1.0-alpha.8
HAAP SDK release v0.1.0-alpha.8.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image:
ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.8
ghcr.io/hawcx/hx-agent-sdk:latest
Supports linux/amd64 and linux/arm64.
Contents
Agent-side runtime (all platforms — Linux, macOS, Windows):
the supervisor and the 5 protected child processes that form
the per-agent runtime per CS v7.2.5 §35.6:
haap-supervisor— lifecycle, zero crypto materialhaap-authenticator— holds IK_i, performs X3DH (§4.2.1)haap-tqs-precompute— session-scoped, holds K_session_root (§40)haap-tqs-jit— request-scoped, paired 1:1 with Assemblerhaap-assembler— single-flight crypto-proxy (§39)haap-eib— External Identity Broker, OAuth bearer isolation (§45)
On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.
SDK CLI (all platforms): haap-sdk
MCP server-side sidecar (Linux / macOS only): haap-rsv
sits in front of the resource server and is deployed by MCP
server operators (typically as a Linux container). It is
Unix-only by design (UDS + peer-credential checks for the
local-sidecar trust model).
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.0-alpha.8 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
HAAP V0.1.0 alpha
First alpha release.
Artifacts:
- Binary tarballs in the workflow run artifacts (linked below)
- Docker image at ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.1
Pre-product release. Customer evaluation only. Production deployment not yet recommended.
v0.1.0-alpha.6
HAAP SDK release v0.1.0-alpha.6.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image:
ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.6
ghcr.io/hawcx/hx-agent-sdk:latest
Supports linux/amd64 and linux/arm64.
Contents
hx_labs binaries: haap-authenticator, haap-tqs-precompute, haap-tqs-jit, haap-assembler, haap-supervisor
SDK binaries: haap-rsv, haap-sdk
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.0-alpha.6 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
v0.1.0-alpha.5
HAAP SDK release v0.1.0-alpha.5.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image:
ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.5
ghcr.io/hawcx/hx-agent-sdk:latest
Supports linux/amd64 and linux/arm64.
Contents
hx_labs binaries: haap-authenticator, haap-tqs-precompute, haap-tqs-jit, haap-assembler, haap-supervisor
SDK binaries: haap-rsv, haap-sdk
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.0-alpha.5 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.
v0.1.0-alpha.4
HAAP SDK release v0.1.0-alpha.4.
Distribution
Binary tarballs (attached below):
- Linux x86_64 / aarch64
- macOS aarch64 (Apple Silicon)
- Windows x86_64 / aarch64
Multi-arch Docker image:
ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.4
ghcr.io/hawcx/hx-agent-sdk:latest
Supports linux/amd64 and linux/arm64.
Contents
hx_labs binaries: haap-authenticator, haap-tqs-precompute, haap-tqs-jit, haap-assembler, haap-supervisor
SDK binaries: haap-rsv, haap-sdk
Evaluation bundle
A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:
git clone -b v0.1.0-alpha.4 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose upSee docker/bundle/README.md for details.
Status
Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.
See build workflow run for build details.