Skip to content
This repository was archived by the owner on Jun 5, 2026. It is now read-only.

Releases: true-alter/alter-identity

v0.5.0

18 May 00:58
@maxchop maxchop
v0.5.0
847065e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
v0.5.0 Latest
Latest

Resynced from canonical monorepo source. Closes the public-mirror gap between 0.2.4 (last tagged mirror release) and 0.5.0 (the version shipping on npm as @truealter/sdk since 2026-05-11). Intermediate npm releases 0.2.4, 0.3.0, 0.4.2, 0.4.3, and 0.5.0 are summarised below.

Added

  • helloAgent() + resolveHandle() methods wrapping the live hello_agent handshake and the public ~handle-wedge alter_resolve_handle tool (0.2.4).
  • wire / unwire subcommands + wire-state.json provenance artefact (0.3.0). Single-step idempotent merge of ALTER into Claude Code / Cursor / Claude Desktop / VS Code with atomic SHA-256-validated writes, timestamped backups, and synced-volume refusal.
  • generateClaudeDesktopConfig() adapter + --claude-desktop CLI flag (0.3.0).
  • MCPClient.extraHeaders option + alter-mcp-bridge env-var hooks for Cloudflare Access service-token creds (0.4.3).

Fixed

  • loadPrivateKey no longer crashes under ESM (0.4.3). Static import replaces lazy require('node:crypto') that the tsup bundler converted into a __require shim throwing Dynamic require of "crypto" is not supported.

Security

  • verifyProvenance now validates the iss claim (0.4.2) after ES256 signature verification, closing a cross-identity substitution vector. Defaults to did:alter:platform; overridable via expectedIss. Fixes IaI clause #2 (provenance) violation S8-H-1.

Changed

  • Version unification with @truealter/cli 0.5.0 + well-known publication parity (0.5.0). All three surfaces (@truealter/sdk on npm, truealter.com/.well-known/alter-versions.json, truealter.com/.well-known/mcp.json) now publish 0.5.0 from the same commit.

Full changelog at CHANGELOG.md.

Assets 2
Loading