@drakon-systems/ekho-sdk 0.4.2 → 0.4.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -4,6 +4,20 @@ All notable changes to Ekho are documented here.
|
|
|
4
4
|
|
|
5
5
|
## [Unreleased]
|
|
6
6
|
|
|
7
|
+
## [0.4.4] - 2026-08-19
|
|
8
|
+
|
|
9
|
+
### Security
|
|
10
|
+
- **Revoke audit actor is authenticated, not client-supplied (#53).** `DELETE /v1/operator/keys/:keyId` previously wrote the caller's `?actor_key_id=` query param as the audit event's `actor_id`; it is now always the authenticated session's operator id.
|
|
11
|
+
- **Unrevoke apply-time is compare-and-swap against the live tombstone (#52).** Both agent-side appliers now refuse to clear a tombstone when the signed `revoked_at_being_cleared` does not match the current live value.
|
|
12
|
+
|
|
13
|
+
### Notes
|
|
14
|
+
- Relay hot path. OpenClaw/Hermes agent plugins are version-bumped in lockstep; no agent protocol break.
|
|
15
|
+
|
|
16
|
+
## [0.4.3] - 2026-08-18
|
|
17
|
+
|
|
18
|
+
### Security
|
|
19
|
+
- `unrevokePayload` now binds `revoked_at_being_cleared`, `issued_at`, and a non-empty nonce (#48). Empty nonce is rejected.
|
|
20
|
+
|
|
7
21
|
## [0.4.2] - 2026-08-17
|
|
8
22
|
|
|
9
23
|
### Fixed
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@drakon-systems/ekho-sdk",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.4",
|
|
4
4
|
"description": "Agent SDK for Ekho \u2014 the private communication layer for distributed AI agents.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"author": "Drakon Systems <hello@drakonsystems.com> (https://drakonsystems.com)",
|