@adonis-agora/agent 0.94.0 → 0.96.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @adonis-agora/agent
 
+## 0.96.0
+
+### Minor Changes
+
+- [#525](https://github.com/DavideCarvalho/adonis-agora-agent/pull/525) [`4069400`](https://github.com/DavideCarvalho/adonis-agora-agent/commit/4069400fdf7bc8a03f085e3f0ab68126110f4e33) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Add `withRag`, a Lucid model mixin that declares RAG on the model: `doc.ragIndex()`, `doc.ragRemove()` and `Model.ragSearch(query, { scope })`. A declared `scope` is mandatory on search and a `filter` cannot override it. Deleting through the model removes the chunks; saving never indexes. `PgVectorStore` gains `vectorType: 'halfvec'`.
+
+## 0.95.0
+
+### Minor Changes
+
+- [#516](https://github.com/DavideCarvalho/adonis-agora-agent/pull/516) [`758bca8`](https://github.com/DavideCarvalho/adonis-agora-agent/commit/758bca886e2319213c751921d931352f0aeb8c41) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Poppy: update to Personal Agent Protocol Draft 0.3, without compatibility with earlier drafts (experimental API). Needs `@adonis-agora/authkit-server` on Draft 0.3.
+  
+  The client sends a `Poppy-Session` JWT signed with a delegated key on every request, signs in with plain OAuth (no Session in the token endpoint), finds the issuer from protected resource metadata and treats DPoP as optional. Browsers join in three steps with a one-time code, Mediated Sign-In is the extension grant, and it adds excluded tasks and feedback. The Company side uses the new authenticate contract: `invalid_session`, a code-less 401 and 429; `author` replaces `sender`.
+  
+  Breaking: `sign_in_required`, `POPPY_READ_SCOPE`/`POPPY_WRITE_SCOPE`, `createBrowserAssertion`/`autoSubmitFormHtml`/`serveOneShotPage`, `token()` session fields and `bearerFor` are gone. `poppy-connections` `readScopes` now defaults to the scopes hinted `changes: none`.
+
 ## 0.94.0
 
 ### Minor Changes