ur-agent 1.48.0 → 1.49.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +16 -0
- package/dist/cli.js +240 -180
- package/docs/AGENT_FEATURES.md +13 -0
- package/docs/VALIDATION.md +1 -1
- package/documentation/index.html +1 -1
- package/extensions/jetbrains-ur/build.gradle.kts +1 -1
- package/extensions/vscode-ur-inline-diffs/package.json +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,21 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.49.0
|
|
4
|
+
|
|
5
|
+
- Added cryptographically signed A2A Agent Cards: RFC 7515 detached JWS over
|
|
6
|
+
the RFC 8785 canonical form of the card, using Ed25519 (`alg: "EdDSA"`).
|
|
7
|
+
Verification recomputes the payload with `signatures` excluded, so a card can
|
|
8
|
+
carry several independent signatures, and rejects algorithm substitution
|
|
9
|
+
rather than honoring a caller-supplied `alg`. Signing is opt-in through the
|
|
10
|
+
card builder's `signingKey`, so deployments without a provisioned key
|
|
11
|
+
continue serving byte-identical unsigned cards. Replaces the previous
|
|
12
|
+
`signatures: []` placeholder, which was typed so that it could never hold a
|
|
13
|
+
signature.
|
|
14
|
+
- Fixed `release:check` failing on a clean tree: `release-hygiene.mjs` forbids
|
|
15
|
+
`.claude/settings.local.json` in release archives, but the ignore policy did
|
|
16
|
+
not exclude it, so the untracked file entered the source archive candidate
|
|
17
|
+
through `git ls-files --others`.
|
|
18
|
+
|
|
3
19
|
## 1.48.0
|
|
4
20
|
|
|
5
21
|
- Added managed cloud fan-out with durable, idempotent steering, owner-scoped
|