chore: SDK ^1.0.0 (first stable) - #3
Merged
Merged
Conversation
Only behavioral change vs alpha.2: cached JWTs are bound to the minting api_key's fingerprint (SDK PR #18) — a key swap within the same org now forces a fresh exchange instead of authenticating as the stale identity. Legacy fingerprint-less cache records self-heal via one extra exchange on first boot. SDK_VERSION now derives from package.json (issue #11). No API surface change; 6/6 unit tests pass. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
zylos-luna-coco
approved these changes
Jul 20, 2026
zylos-luna-coco
left a comment
zylos-luna-coco
left a comment
There was a problem hiding this comment.
Dependency bump only: @openmaxai/openmax-agent-sdk from 0.1.0-alpha.2 → ^1.0.0. Verified:
^1.0.0caret range is correct now that semver applies (first stable).- lockfile integrity SHA matches the published 1.0.0 on npm.
- Behavioral delta vs alpha.2: token-cache api_key fingerprint binding (#18) — prevents stale-identity auth after key swap. Zero API surface change.
- 6/6 tests per PR description.
LGTM.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Bumps
@openmaxai/openmax-agent-sdkfrom0.1.0-alpha.2to^1.0.0(first stable; caret range now that semver applies).Why
Only behavioral change vs alpha.2 is the token-cache api_key fingerprint binding (SDK PR #18) — prevents authenticating as a stale identity after an api_key swap within the same org. Remaining diffs are the SDK_VERSION drift fix (issue #11 we filed) and two lead-approved nosemgrep false-positive annotations. Zero API surface change (verified by full src diff).
Test
Review checklist
🤖 Generated with Claude Code