@agents24/node 0.5.0 → 0.5.2

package/README.md

@@ -1,6 +1,6 @@
 # `@agents24/node`
 
-Last Updated: 2026-08-24
+Last Updated: 2026-09-01
 
 Trusted-server Agents24 SDK for organization-authenticated control-plane, server embed, authoring, artifact, client-deployment, and client-session mint operations. It supports Node 22 and 24 with ESM and CJS entrypoints.
 
@@ -63,7 +63,7 @@ This package is server-only. Never expose an organization API key to browser cod
 
 `@agents24/node/bff` exports `createAgents24BffHandler(...)`. Mount its
 returned Fetch handler at a same-origin path, provide an API-key client plus
-an `agents` array plus `conversationScope`, and resolve a stable customer
+an `agents` array plus a stable `integrationId`, and resolve a stable customer
 `subject`. Supply an optional `issuer` only when an authenticated customer
 needs organization-wide governance. The bridge keeps the API key, configured
 Agents, and any optional exact Agent versions on the server; it does not use a
@@ -76,12 +76,10 @@ and `DELETE /threads/{threadId}` operate across the configured Agent set.
 Run-owned routes resolve the authoritative Agent from the stored run. The same
 browser client continues to use `createBffAgentClient({ basePath })`.
 
-Subject-only BFF principals use that stable subject directly with no identity
-or Resource Policy preflight. When `issuer` is present, the BFF resolves one
-opaque organization customer principal through
-`agents24.embed.resolveCustomerPrincipal({ issuer, subject })`, caches that
-lookup with a bounded 60-second single-flight window across conversation-scoped routes,
-and fetches Resource Policy only for explicit policy/bootstrap UI needs.
+The BFF resolves every host principal to an opaque integration-scoped customer
+principal through `agents24.embed.resolveCustomerPrincipal(...)`, caches that
+lookup with a bounded 60-second single-flight window across BFF routes, and
+fetches Resource Policy only for explicit policy/bootstrap UI needs.
 
 ## Customer Resource Policies
 

package/compatibility.json

@@ -1,5 +1,5 @@
 {
-  "contractHash": "55fa8df5285c62edb41ce640b217eafbb17f32296ead83ae1b8d34c96d0c21f1",
+  "contractHash": "8746b5e49cbfa63e5dc88c2846180935ee61b89cf3a8ae540c86dc51e1eb0c11",
   "contractVersion": "0.3.0",
   "corpus": "conformance/v1/corpus.json",
   "generatedBy": "@agents24/sdk-contract",
@@ -19,7 +19,7 @@
       "runtime": "run-stream.v3"
     },
     "@agents24/node": {
-      "contract": "55fa8df5285c62edb41ce640b217eafbb17f32296ead83ae1b8d34c96d0c21f1",
+      "contract": "8746b5e49cbfa63e5dc88c2846180935ee61b89cf3a8ae540c86dc51e1eb0c11",
       "node": "^22.0.0 || ^24.0.0"
     },
     "@agents24/react": {
@@ -31,7 +31,7 @@
       "protocolOwner": "@agents24/client"
     },
     "agents24": {
-      "contract": "55fa8df5285c62edb41ce640b217eafbb17f32296ead83ae1b8d34c96d0c21f1",
+      "contract": "8746b5e49cbfa63e5dc88c2846180935ee61b89cf3a8ae540c86dc51e1eb0c11",
       "python": ">=3.10"
     }
   },

package/dist/bff.d.cts

@@ -1,4 +1,4 @@
-import { A as Agents24 } from './client-xWr_OGEe.cjs';
+import { A as Agents24 } from './client-B-fZ0Vk_.cjs';
 import '@agents24/client/protocol';
 
 interface AgentBffPrincipal {

package/dist/bff.d.ts

@@ -1,4 +1,4 @@
-import { A as Agents24 } from './client-xWr_OGEe.js';
+import { A as Agents24 } from './client-B-fZ0Vk_.js';
 import '@agents24/client/protocol';
 
 interface AgentBffPrincipal {

package/dist/{client-xWr_OGEe.d.cts → client-B-fZ0Vk_.d.cts}

@@ -972,7 +972,6 @@ type ResourceInstallationPlan = {
     package_name: string;
     package_hash: string;
     actions: Array<Record<string, unknown>>;
-    content: Array<Record<string, unknown>>;
     external_requirements: Array<Record<string, unknown>>;
     artifact_actions: Array<Record<string, unknown>>;
     artifact_readiness: Array<{

package/dist/{client-xWr_OGEe.d.ts → client-B-fZ0Vk_.d.ts}

@@ -972,7 +972,6 @@ type ResourceInstallationPlan = {
     package_name: string;
     package_hash: string;
     actions: Array<Record<string, unknown>>;
-    content: Array<Record<string, unknown>>;
     external_requirements: Array<Record<string, unknown>>;
     artifact_actions: Array<Record<string, unknown>>;
     artifact_readiness: Array<{