Skip to content

Releases: hawcx/hawcx_agentic_sdk

v0.1.4

Choose a tag to compare

@github-actions github-actions released this 11 Jun 09:25

HAAP SDK release v0.1.4.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image (supports linux/amd64 and
linux/arm64):

ghcr.io/hawcx/hx-agent-sdk:v0.1.4

Prereleases (alpha/beta/rc) also move the matching channel
tag (:alpha, :beta, :rc). :latest is reserved for
GA releases.

Contents

Multi-call binary (Phase 3-5 cutover, 2026-05-22): the
tarball / image now ships ONE real binary, hawcx-manager,
with 7 legacy-name symlinks (Unix) or .exe copies (Windows)
that dispatch by argv[0] to the corresponding role:

  • haap-supervisor → hawcx-manager supervisor (lifecycle, zero crypto material)
  • haap-authenticator → hawcx-manager authenticator (holds IK_i, X3DH per §4.2.1)
  • haap-tqs-precompute → hawcx-manager tqs-precompute (session-scoped K_session_root per §40)
  • haap-tqs-jit → hawcx-manager tqs-jit (request-scoped, paired 1:1 with Assembler)
  • haap-assembler → hawcx-manager assembler (single-flight crypto-proxy per §39)
  • haap-eib → hawcx-manager eib (External Identity Broker, OAuth bearer per §45)
  • haap-sdk → hawcx-manager sdk (demo / debug CLI)

Existing customer scripts that invoke haap-supervisor,
haap-authenticator, etc. continue to work unchanged — the
symlinks preserve every legacy call site. Direct invocation
via hawcx-manager <subcommand> is also supported.

On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.

MCP server-side sidecar (haap-rsv) ships from a
separate image as of 2026-05-21:
ghcr.io/hawcx/haap-rsv:v0.1.4. Source lives
in hx_agent_authorizer/crates/haap-rsv-bin. It is Unix-only
by design (UDS + peer-credential checks for the
local-sidecar trust model per §39.12.1).

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.4 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

v0.1.3

Choose a tag to compare

@github-actions github-actions released this 10 Jun 15:00

HAAP SDK release v0.1.3.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image (supports linux/amd64 and
linux/arm64):

ghcr.io/hawcx/hx-agent-sdk:v0.1.3

Prereleases (alpha/beta/rc) also move the matching channel
tag (:alpha, :beta, :rc). :latest is reserved for
GA releases.

Contents

Multi-call binary (Phase 3-5 cutover, 2026-05-22): the
tarball / image now ships ONE real binary, hawcx-manager,
with 7 legacy-name symlinks (Unix) or .exe copies (Windows)
that dispatch by argv[0] to the corresponding role:

  • haap-supervisor → hawcx-manager supervisor (lifecycle, zero crypto material)
  • haap-authenticator → hawcx-manager authenticator (holds IK_i, X3DH per §4.2.1)
  • haap-tqs-precompute → hawcx-manager tqs-precompute (session-scoped K_session_root per §40)
  • haap-tqs-jit → hawcx-manager tqs-jit (request-scoped, paired 1:1 with Assembler)
  • haap-assembler → hawcx-manager assembler (single-flight crypto-proxy per §39)
  • haap-eib → hawcx-manager eib (External Identity Broker, OAuth bearer per §45)
  • haap-sdk → hawcx-manager sdk (demo / debug CLI)

Existing customer scripts that invoke haap-supervisor,
haap-authenticator, etc. continue to work unchanged — the
symlinks preserve every legacy call site. Direct invocation
via hawcx-manager <subcommand> is also supported.

On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.

MCP server-side sidecar (haap-rsv) ships from a
separate image as of 2026-05-21:
ghcr.io/hawcx/haap-rsv:v0.1.3. Source lives
in hx_agent_authorizer/crates/haap-rsv-bin. It is Unix-only
by design (UDS + peer-credential checks for the
local-sidecar trust model per §39.12.1).

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.3 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

v0.1.0-alpha.13

v0.1.0-alpha.13 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 29 May 17:28
ee1b7cf

HAAP SDK release v0.1.0-alpha.13.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image (supports linux/amd64 and
linux/arm64):

ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.13

Prereleases (alpha/beta/rc) also move the matching channel
tag (:alpha, :beta, :rc). :latest is reserved for
GA releases.

Contents

Multi-call binary (Phase 3-5 cutover, 2026-05-22): the
tarball / image now ships ONE real binary, hawcx-manager,
with 7 legacy-name symlinks (Unix) or .exe copies (Windows)
that dispatch by argv[0] to the corresponding role:

  • haap-supervisor → hawcx-manager supervisor (lifecycle, zero crypto material)
  • haap-authenticator → hawcx-manager authenticator (holds IK_i, X3DH per §4.2.1)
  • haap-tqs-precompute → hawcx-manager tqs-precompute (session-scoped K_session_root per §40)
  • haap-tqs-jit → hawcx-manager tqs-jit (request-scoped, paired 1:1 with Assembler)
  • haap-assembler → hawcx-manager assembler (single-flight crypto-proxy per §39)
  • haap-eib → hawcx-manager eib (External Identity Broker, OAuth bearer per §45)
  • haap-sdk → hawcx-manager sdk (demo / debug CLI)

Existing customer scripts that invoke haap-supervisor,
haap-authenticator, etc. continue to work unchanged — the
symlinks preserve every legacy call site. Direct invocation
via hawcx-manager <subcommand> is also supported.

On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.

MCP server-side sidecar (haap-rsv) ships from a
separate image as of 2026-05-21:
ghcr.io/hawcx/haap-rsv:v0.1.0-alpha.13. Source lives
in hx_agent_authorizer/crates/haap-rsv-bin. It is Unix-only
by design (UDS + peer-credential checks for the
local-sidecar trust model per §39.12.1).

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.0-alpha.13 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

v0.1.0-alpha.9

v0.1.0-alpha.9 Pre-release
Pre-release

Choose a tag to compare

@ravi-hawcx ravi-hawcx released this 22 May 01:29
9c3f557

HAAP SDK release v0.1.0-alpha.9.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image:

ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.9
ghcr.io/hawcx/hx-agent-sdk:latest

Supports linux/amd64 and linux/arm64.

Contents

Agent-side runtime (all platforms — Linux, macOS, Windows):
the supervisor and the 5 protected child processes that form
the per-agent runtime per CS v7.2.5 §35.6:

  • haap-supervisor — lifecycle, zero crypto material
  • haap-authenticator — holds IK_i, performs X3DH (§4.2.1)
  • haap-tqs-precompute — session-scoped, holds K_session_root (§40)
  • haap-tqs-jit — request-scoped, paired 1:1 with Assembler
  • haap-assembler — single-flight crypto-proxy (§39)
  • haap-eib — External Identity Broker, OAuth bearer isolation (§45)

On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.

SDK CLI (all platforms): haap-sdk

MCP server-side sidecar (Linux / macOS only): haap-rsv
sits in front of the resource server and is deployed by MCP
server operators (typically as a Linux container). It is
Unix-only by design (UDS + peer-credential checks for the
local-sidecar trust model).

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.0-alpha.9 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

v0.1.0-alpha.10

v0.1.0-alpha.10 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 22 May 14:50

HAAP SDK release v0.1.0-alpha.10.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image:

ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.10
ghcr.io/hawcx/hx-agent-sdk:latest

Supports linux/amd64 and linux/arm64.

Contents

Agent-side runtime (all platforms — Linux, macOS, Windows):
the supervisor and the 5 protected child processes that form
the per-agent runtime per CS v7.2.5 §35.6:

  • haap-supervisor — lifecycle, zero crypto material
  • haap-authenticator — holds IK_i, performs X3DH (§4.2.1)
  • haap-tqs-precompute — session-scoped, holds K_session_root (§40)
  • haap-tqs-jit — request-scoped, paired 1:1 with Assembler
  • haap-assembler — single-flight crypto-proxy (§39)
  • haap-eib — External Identity Broker, OAuth bearer isolation (§45)

On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.

SDK CLI (all platforms): haap-sdk

MCP server-side sidecar (Linux / macOS only): haap-rsv
sits in front of the resource server and is deployed by MCP
server operators (typically as a Linux container). It is
Unix-only by design (UDS + peer-credential checks for the
local-sidecar trust model).

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.0-alpha.10 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

v0.1.0-alpha.8

v0.1.0-alpha.8 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 21 May 22:51

HAAP SDK release v0.1.0-alpha.8.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image:

ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.8
ghcr.io/hawcx/hx-agent-sdk:latest

Supports linux/amd64 and linux/arm64.

Contents

Agent-side runtime (all platforms — Linux, macOS, Windows):
the supervisor and the 5 protected child processes that form
the per-agent runtime per CS v7.2.5 §35.6:

  • haap-supervisor — lifecycle, zero crypto material
  • haap-authenticator — holds IK_i, performs X3DH (§4.2.1)
  • haap-tqs-precompute — session-scoped, holds K_session_root (§40)
  • haap-tqs-jit — request-scoped, paired 1:1 with Assembler
  • haap-assembler — single-flight crypto-proxy (§39)
  • haap-eib — External Identity Broker, OAuth bearer isolation (§45)

On Windows, supervisor↔child IPC uses Named Pipes with DACL
restricting access to the current user SID + SYSTEM, per
CS v7.2.5 §39.12.2. On Linux / macOS, IPC uses Unix domain
sockets with SO_PEERCRED / LOCAL_PEERCRED, per §39.12.1.

SDK CLI (all platforms): haap-sdk

MCP server-side sidecar (Linux / macOS only): haap-rsv
sits in front of the resource server and is deployed by MCP
server operators (typically as a Linux container). It is
Unix-only by design (UDS + peer-credential checks for the
local-sidecar trust model).

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.0-alpha.8 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

HAAP V0.1.0 alpha

Choose a tag to compare

@ravi-hawcx ravi-hawcx released this 17 May 02:35

First alpha release.

Artifacts:

  • Binary tarballs in the workflow run artifacts (linked below)
  • Docker image at ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.1

Pre-product release. Customer evaluation only. Production deployment not yet recommended.

v0.1.0-alpha.6

v0.1.0-alpha.6 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 17 May 23:23

HAAP SDK release v0.1.0-alpha.6.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image:

ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.6
ghcr.io/hawcx/hx-agent-sdk:latest

Supports linux/amd64 and linux/arm64.

Contents

hx_labs binaries: haap-authenticator, haap-tqs-precompute, haap-tqs-jit, haap-assembler, haap-supervisor

SDK binaries: haap-rsv, haap-sdk

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.0-alpha.6 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

v0.1.0-alpha.5

v0.1.0-alpha.5 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 17 May 22:44

HAAP SDK release v0.1.0-alpha.5.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image:

ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.5
ghcr.io/hawcx/hx-agent-sdk:latest

Supports linux/amd64 and linux/arm64.

Contents

hx_labs binaries: haap-authenticator, haap-tqs-precompute, haap-tqs-jit, haap-assembler, haap-supervisor

SDK binaries: haap-rsv, haap-sdk

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.0-alpha.5 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.

v0.1.0-alpha.4

v0.1.0-alpha.4 Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 17 May 20:04

HAAP SDK release v0.1.0-alpha.4.

Distribution

Binary tarballs (attached below):

  • Linux x86_64 / aarch64
  • macOS aarch64 (Apple Silicon)
  • Windows x86_64 / aarch64

Multi-arch Docker image:

ghcr.io/hawcx/hx-agent-sdk:v0.1.0-alpha.4
ghcr.io/hawcx/hx-agent-sdk:latest

Supports linux/amd64 and linux/arm64.

Contents

hx_labs binaries: haap-authenticator, haap-tqs-precompute, haap-tqs-jit, haap-assembler, haap-supervisor

SDK binaries: haap-rsv, haap-sdk

Evaluation bundle

A Docker Compose bundle that spins up CAA + RSV together for local
evaluation is available at docker/bundle/:

git clone -b v0.1.0-alpha.4 https://github.com/hawcx/hx_agentic_sdk
cd hx_agentic_sdk/docker/bundle
cp .env.example .env
# Edit .env with tenant credentials
docker compose up

See docker/bundle/README.md for details.

Status

Pre-product alpha release. Customer evaluation only. Production deployment not yet recommended.

See build workflow run for build details.