@vorim/sdk 3.4.0 → 3.4.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -296,7 +296,9 @@ await vorim.emit({
296
296
  });
297
297
  ```
298
298
 
299
- To verify signatures server-side, the API operator sets `VORIM_VERIFY_AUDIT_SIGNATURES=true`. The canonical bytes signed are `event_type|action|resource|input_hash|output_hash|result`.
299
+ To verify signatures server-side, the API operator sets `VORIM_VERIFY_AUDIT_SIGNATURES=true`.
300
+
301
+ **Canonical form.** Since 3.4.0 the SDK defaults to **v1** canonical form: RFC 8785 JSON Canonicalization Scheme (JCS) over the whole event minus `signature` and `canonical_form`. This brings metadata, replayable-evidence fields (`model_version`, `tool_catalogue_hash`, `system_prompt_hash`, `prev_event_hash`), and delegation context (`on_behalf_of`, `delegator_agent_id`, `delegation_chain_id`, `delegation_depth`) under the signature. The previous v0 form was a pipe-joined six-field string `event_type|action|resource|input_hash|output_hash|result` and is now deprecated — passing `canonicalForm: 'v0'` explicitly still works for verifier-compat scenarios but emits a deprecation warning. Use `@vorim/verify@0.2.0+` to verify v1 events offline. Both forms are byte-equivalent across the TypeScript and Python SDKs and the server, locked by `scripts/check-replay-parity.sh`.
300
302
 
301
303
  **Restoring keys across process restarts.** The in-memory keyring is lost on restart. Load the private key from your secret store and call:
302
304
 
package/dist/index.cjs CHANGED
@@ -117,7 +117,7 @@ async function prepareReplayContext(inputs) {
117
117
  }
118
118
 
119
119
  // src/index.ts
120
- var SDK_VERSION = true ? "3.4.0" : "0.0.0";
120
+ var SDK_VERSION = true ? "3.4.3" : "0.0.0";
121
121
  var USER_AGENT = `vorim-sdk/${SDK_VERSION}`;
122
122
  function canonicalPayloadV0(event) {
123
123
  return [
package/dist/index.js CHANGED
@@ -70,7 +70,7 @@ async function prepareReplayContext(inputs) {
70
70
  }
71
71
 
72
72
  // src/index.ts
73
- var SDK_VERSION = true ? "3.4.0" : "0.0.0";
73
+ var SDK_VERSION = true ? "3.4.3" : "0.0.0";
74
74
  var USER_AGENT = `vorim-sdk/${SDK_VERSION}`;
75
75
  function canonicalPayloadV0(event) {
76
76
  return [
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@vorim/sdk",
3
- "version": "3.4.0",
3
+ "version": "3.4.3",
4
4
  "description": "Official TypeScript SDK for Vorim AI — AI Agent Identity, Permissions & Audit",
5
5
  "type": "module",
6
6
  "main": "dist/index.cjs",