@oxdeai/sdk 2.0.0 → 2.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -1
- package/README.md +1 -1
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -7,7 +7,18 @@ This project follows Semantic Versioning.
|
|
|
7
7
|
|
|
8
8
|
---
|
|
9
9
|
|
|
10
|
-
## [2.0.
|
|
10
|
+
## [2.0.1] - 2026-10-04
|
|
11
|
+
|
|
12
|
+
Dependency release of `@oxdeai/sdk`. It packs against `@oxdeai/core@2.0.1`
|
|
13
|
+
(exact dependency). No SDK source, public API or type declaration change.
|
|
14
|
+
|
|
15
|
+
### Security
|
|
16
|
+
|
|
17
|
+
- Pins `@oxdeai/core@2.0.1` (GHSA-48xw-c298-546r). Because the SDK re-exports
|
|
18
|
+
`@oxdeai/core`, a `PolicyEngine` imported from `@oxdeai/sdk@2.0.0` is the
|
|
19
|
+
affected `core@2.0.0` engine; upgrade to this release.
|
|
20
|
+
|
|
21
|
+
## [2.0.0] - 2026-09-25
|
|
11
22
|
|
|
12
23
|
**Baseline for this entry:** the published `@oxdeai/sdk@1.3.3` npm artifact
|
|
13
24
|
(2026-04-23), compared file-by-file against the current candidate.
|
package/README.md
CHANGED
|
@@ -6,7 +6,7 @@ Builds intents/states and guard boundaries that fail closed at execution.
|
|
|
6
6
|
|
|
7
7
|
Release policy note: OxDeAI uses package-scoped versions and package-scoped tags. `@oxdeai/sdk` has its own package version line; coordinated release commits do not imply shared package versions across `core`, `sdk`, or `conformance`. See [`docs/release/RELEASE.md`](../../docs/release/RELEASE.md).
|
|
8
8
|
|
|
9
|
-
Current `@oxdeai/sdk` package line: **2.0.
|
|
9
|
+
Current `@oxdeai/sdk` package line: **2.0.1**. `export * from "@oxdeai/core"`
|
|
10
10
|
re-exports core's 2.0 surface, so every core 2.0 breaking change (in particular
|
|
11
11
|
the required `evaluationTime` argument and the now-required
|
|
12
12
|
`maxClockSkewSeconds` / `maxIntentAgeSeconds` engine options) is a consumer-visible
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@oxdeai/sdk",
|
|
3
|
-
"version": "2.0.
|
|
3
|
+
"version": "2.0.1",
|
|
4
4
|
"license": "Apache-2.0",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|
|
@@ -22,7 +22,7 @@
|
|
|
22
22
|
"LICENSE"
|
|
23
23
|
],
|
|
24
24
|
"dependencies": {
|
|
25
|
-
"@oxdeai/core": "2.0.
|
|
25
|
+
"@oxdeai/core": "2.0.1"
|
|
26
26
|
},
|
|
27
27
|
"scripts": {
|
|
28
28
|
"typecheck": "tsc -p tsconfig.json --noEmit",
|