OpenAgentID SDK 0.2.1

OpenAgentID now separates an agent’s skin from its live-eye expression. Autos is the default skin; SpaceX provides eight simple shapes. Both share sixteen expressions and animated pill eyes, with bounded blink and gaze controls. The same DID deterministically generates the same base character, while profile preferences and HTTPS overrides remain changeable.

This release publishes @openagentid/sdk@0.2.1. @openagentid/oidc@0.2.0 remains the existing published identity adapter.

The SDK adds generateCharacter, renderCharacterSvg, skin/expression catalogs, strict profile appearance parsing, and the characters and character-api package exports. Identity documents support avatarSkin and avatarExpression; setting avatarSkin to null explicitly preserves the OAS Glyph. Existing avatarOverride takes priority. Use animated: false for a static pose or reduced motion.

The stateless open character API provides deterministic JSON and SVG generation, skin catalogs, and OpenAPI documentation. It supports GET/HEAD/POST/OPTIONS, public CORS, strong ETags, bounded input and restrictive SVG content policy. It does not modify or authenticate an identity. The same service retains the existing Glyph SVG endpoint.

Source: OpenAgentID/openagent-sdk PR #3, qualified head c9c4e4854fe9223e2adeada8e8e2ddc66c0630b7. All 14 CI jobs passed; shared conformance passed 222 Rust and 222 TypeScript vectors with zero drift. Remote qualification passed 470 SDK tests, 127 unchanged OIDC tests, eight real HTTP service tests, installed ESM/CommonJS/CLI checks and production-container HTTP checks.

The attached SDK archive is the exact qualified publication candidate: 91 files, 688,291 compressed bytes, SHA-256 8f7a2d17f3f5aef148c1a3ab4f199b74ecf2cb91a8c913c3af09cddacbba2351.

Iris Core Review returned full PASS at the exact source head on October 11, 2026 at 14:23:46 CT, with no follow-ups. PR #3 merged as d8ba1ac5845799e71f84be477ce8c5b5dae7525b; the complete merged tree matches the qualified head. Public npm metadata and downloaded archive bytes verify the published SDK artifact above; OIDC stays at 0.2.0.

Live character demo · Skin catalog · OpenAPI · SDK documentation

The public service is hosted in the existing Google Cloud project l1fe-minds-fc, us-central1, using the qualified immutable production image. Actual public verification passed 163 HTTP requests across 12 checks. Browser captures verified rendering, expression-preserving skin switches, synchronized eye-height blinking and shared gaze movement. Orbit received the published SDK/profile contract and live endpoints.

Hosting note: Cloud Run intercepts the internal /healthz path. Hosted readiness was verified through the actual demo/catalog and generation routes; Google documents reserved paths ending in z. This does not affect the published character endpoints.

Packages in this release

Package	Version
@openagentid/sdk	0.2.1	published 2026-10-11 19:27 UTC
@openagentid/sdk-testing	0.1.1	unchanged
@openagentid/http	0.1.1	unchanged
@openagentid/mcp	0.1.1	unchanged
@openagentid/claude-agent	0.1.1	unchanged
@openagentid/scim	0.1.1	unchanged
@openagentid/oidc	0.2.0	unchanged
@openagentid/crypto-wasm	0.1.1	unchanged
create-openagent	0.1.1	unchanged

Source and verification

This tag points at d8ba1ac, the merge of #3 on main. npm recorded no gitHead for these versions. Every source embedded in the SDK tarball's sourcemaps, and each package's manifest, README, CHANGELOG and licenses, match this commit byte for byte. These versions were published by hand before the release workflow existed, so they carry no provenance attestation. The attached tarballs are the files npm serves (their sha512 equals npm's integrity):

gh release download v0.2.1 --repo OpenAgentID/openagent-sdk
shasum -a 256 -c SHA256SUMS