_client_common.py owns request building and EOR signing for both clients; types follow the Backend contract; the deprecated issue_token alias and token response aliases are removed; crypto, utils, and CLI comments trimmed.
Claude-Session: https://claude.ai/code/session_01Agoc9bRVE9KL7mmWtey9Vq
Land the crash-recoverable managed-file transaction engine (journal,
staging, commit, restart recovery, opaque snapshots, private artifacts,
Windows DACL hardening) and the Kiro IDE 1.0 workspace hook plugin with
legacy migration.
Repair five defects that kept the suite red (426 failures to zero):
- Anchor the transaction state directory at ~/.elydora/transactions
instead of the shared system temp directory. The recovery journal now
shares fate with the runtimes it repairs, survives temp cleaners, and
isolates naturally under per-test fake homes.
- Skip pending-transaction recovery when no state directory exists so
rejected installs never create runtime directories.
- Create the runtime root's parent before hardening it, matching the Go
SDK's expand behavior for fresh homes.
- Stop using file timestamps as identity evidence: Windows exposes
mtime/ctime with delayed cross-handle visibility. Reads now prove
stability through a verification re-read; snapshots compare device,
inode, size, and SHA-256.
- Stop comparing synthetic Windows permission bits across stat
boundaries: path stats derive execute bits from file extensions while
handle stats do not, which falsely flagged every managed .cmd wrapper.
Snapshots store raw modes for restoration and compare portable bits.
Reservation cleanup now verifies content before discarding so a
concurrent writer's file at a rollback path is preserved, and the
install-failure tests assert the precise contract: no agent runtime
residue, with the durable state directory allowed to remain.
Gates: pytest 807 passed, mypy clean, pip check clean, wheel builds.
- Add DeprecationWarning to login() and register() static methods
- Update docstrings with .. deprecated:: notices
- Sync types with backend changes
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Remove previous_token_grace_until from RotateApiTokenResponse
- Update client/async_client docstrings
- Update CLI help text and README
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Mirror client.py retry fix in async_client.py (range + boundary alignment)
- Sync _kid default to agent_id + '-key-1' in async client
- Fix TOCTOU in opencode.py uninstall (try/except vs exists+remove)
- Update docstring to reflect new plugin path and filename
- Remove redundant deferred json import in _js_str
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Fix critical OpenCode plugin: read private key from file instead of embedding in JS
- Add default KID (agent_id + '-key-1') matching Node and Go SDKs
- Fix Operation.subject and Operation.action types from str to Dict[str, Any]
- Fix retry off-by-one to give max_retries+1 total attempts
- Fix OpenCode operation_type from 'tool_use' to 'ai.tool_use'
- Update plugin path to .config/opencode/plugins matching Node SDK
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Fix AsyncElydoraClient _prev_chain_hash from empty string to GENESIS_CHAIN_HASH
- Add list_agents, unfreeze_agent, delete_agent, get_me, issue_token, download_export, health
- Add methods to both sync and async clients
- Add corresponding response types to types.py
- Export new types from __init__.py
- Document all previously undocumented exports in README
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
雷电芽衣
ZacharyZhang-NY