aep-foundation · nkavian · Sep 4, 2026 · Sep 4, 2026
diff --git a/.changeset/bright-credentials-revoke.md b/.changeset/bright-credentials-revoke.md
diff --git a/.changeset/calm-keys-replay.md b/.changeset/calm-keys-replay.md
diff --git a/.changeset/calm-problems-align.md b/.changeset/calm-problems-align.md
diff --git a/.changeset/clear-headers-present.md b/.changeset/clear-headers-present.md
diff --git a/.changeset/cool-platform-boundary.md b/.changeset/cool-platform-boundary.md
diff --git a/.changeset/fair-lifecycles-align.md b/.changeset/fair-lifecycles-align.md
diff --git a/.changeset/fresh-dependencies-update.md b/.changeset/fresh-dependencies-update.md
diff --git a/.changeset/kind-turkeys-tap.md b/.changeset/kind-turkeys-tap.md
diff --git a/.changeset/strict-assertion-expiration.md b/.changeset/strict-assertion-expiration.md
diff --git a/.changeset/strict-platforms-authorize.md b/.changeset/strict-platforms-authorize.md
diff --git a/.changeset/strong-dids-agree.md b/.changeset/strong-dids-agree.md
diff --git a/.changeset/tidy-platform-pagination.md b/.changeset/tidy-platform-pagination.md
diff --git a/packages/adapters/express/CHANGELOG.md b/packages/adapters/express/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @aep-foundation/express
 
+## 0.2.4
+
+### Patch Changes
+
+- [#40](https://github.com/aep-foundation/aep-node/pull/40) [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the Core command idempotency header, Agent-and-key replay scope, and cross-command conflict behavior.
+
+- Updated dependencies [[`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1), [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d), [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a), [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b), [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0), [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256), [`4cec092`](https://github.com/aep-foundation/aep-node/commit/4cec092232fc1fa5f90598d80a2a986bf16f3172), [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a)]:
+  - @aep-foundation/core@0.6.0
+  - @aep-foundation/service@0.3.4
+
 ## 0.2.3
 
 ### Patch Changes

diff --git a/packages/adapters/express/package.json b/packages/adapters/express/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/express",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Express adapter for AEP Service handlers.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",

diff --git a/packages/adapters/fastify/CHANGELOG.md b/packages/adapters/fastify/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @aep-foundation/fastify
 
+## 0.2.4
+
+### Patch Changes
+
+- [#40](https://github.com/aep-foundation/aep-node/pull/40) [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the Core command idempotency header, Agent-and-key replay scope, and cross-command conflict behavior.
+
+- Updated dependencies [[`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1), [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d), [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a), [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b), [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0), [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256), [`4cec092`](https://github.com/aep-foundation/aep-node/commit/4cec092232fc1fa5f90598d80a2a986bf16f3172), [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a)]:
+  - @aep-foundation/core@0.6.0
+  - @aep-foundation/service@0.3.4
+
 ## 0.2.3
 
 ### Patch Changes

diff --git a/packages/adapters/fastify/package.json b/packages/adapters/fastify/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/fastify",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Fastify adapter for AEP Service handlers.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",

diff --git a/packages/adapters/hono/CHANGELOG.md b/packages/adapters/hono/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @aep-foundation/hono
 
+## 0.2.4
+
+### Patch Changes
+
+- [#40](https://github.com/aep-foundation/aep-node/pull/40) [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the Core command idempotency header, Agent-and-key replay scope, and cross-command conflict behavior.
+
+- Updated dependencies [[`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1), [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d), [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a), [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b), [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0), [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256), [`4cec092`](https://github.com/aep-foundation/aep-node/commit/4cec092232fc1fa5f90598d80a2a986bf16f3172), [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a)]:
+  - @aep-foundation/core@0.6.0
+  - @aep-foundation/service@0.3.4
+
 ## 0.2.3
 
 ### Patch Changes

diff --git a/packages/adapters/hono/package.json b/packages/adapters/hono/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/hono",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Hono adapter for AEP Service handlers.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",

diff --git a/packages/adapters/next/CHANGELOG.md b/packages/adapters/next/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @aep-foundation/next
 
+## 0.2.4
+
+### Patch Changes
+
+- [#40](https://github.com/aep-foundation/aep-node/pull/40) [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the Core command idempotency header, Agent-and-key replay scope, and cross-command conflict behavior.
+
+- Updated dependencies [[`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1), [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d), [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a), [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b), [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0), [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256), [`4cec092`](https://github.com/aep-foundation/aep-node/commit/4cec092232fc1fa5f90598d80a2a986bf16f3172), [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a)]:
+  - @aep-foundation/core@0.6.0
+  - @aep-foundation/service@0.3.4
+
 ## 0.2.3
 
 ### Patch Changes

diff --git a/packages/adapters/next/package.json b/packages/adapters/next/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/next",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Next.js adapter for AEP Service handlers.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",

diff --git a/packages/agent/CHANGELOG.md b/packages/agent/CHANGELOG.md
@@ -1,5 +1,24 @@
 # @aep-foundation/agent
 
+## 0.5.0
+
+### Minor Changes
+
+- [#41](https://github.com/aep-foundation/aep-node/pull/41) [`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1) Thanks [@nkavian](https://github.com/nkavian)! - Require stable Service-issued identifiers for built-in credentials, type per-grant-type Revoke capabilities, and remove every locally stored credential covered by a successful Revoke.
+
+### Patch Changes
+
+- [#49](https://github.com/aep-foundation/aep-node/pull/49) [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b) Thanks [@nkavian](https://github.com/nkavian)! - Move shared Platform client contracts and request builders into Core, remove the Agent package's dependency on the Platform implementation, and preserve Platform compatibility exports.
+
+- [#42](https://github.com/aep-foundation/aep-node/pull/42) [`4064f3c`](https://github.com/aep-foundation/aep-node/commit/4064f3cedf93ced6080297988f1fabb9999a6fd5) Thanks [@nkavian](https://github.com/nkavian)! - Require advertised protected-resource authentication methods and explicit operation-aware Platform authorization.
+
+- [#38](https://github.com/aep-foundation/aep-node/pull/38) [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the normative client-assertion JOSE header, Agent identity binding, lifetime, protected-resource URI, and HTTPS `did:web` resolution requirements.
+
+- [#48](https://github.com/aep-foundation/aep-node/pull/48) [`030cf0e`](https://github.com/aep-foundation/aep-node/commit/030cf0e6233af36ad7e917f8a8528389de7b2a32) Thanks [@nkavian](https://github.com/nkavian)! - Reject invalid Platform identity-list pagination metadata and prevent Platform producers from constructing invalid totals.
+
+- Updated dependencies [[`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1), [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d), [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a), [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b), [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0), [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256), [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a)]:
+  - @aep-foundation/core@0.6.0
+
 ## 0.4.0
 
 ### Minor Changes

diff --git a/packages/agent/package.json b/packages/agent/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/agent",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Agent-side workflows for the Agent Enrollment Protocol.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",

diff --git a/packages/conformance/CHANGELOG.md b/packages/conformance/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @aep-foundation/conformance
 
+## 0.4.0
+
+### Minor Changes
+
+- [#41](https://github.com/aep-foundation/aep-node/pull/41) [`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1) Thanks [@nkavian](https://github.com/nkavian)! - Require stable Service-issued identifiers for built-in credentials, type per-grant-type Revoke capabilities, and remove every locally stored credential covered by a successful Revoke.
+
+### Patch Changes
+
+- [#40](https://github.com/aep-foundation/aep-node/pull/40) [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the Core command idempotency header, Agent-and-key replay scope, and cross-command conflict behavior.
+
+- [#45](https://github.com/aep-foundation/aep-node/pull/45) [`f70ad26`](https://github.com/aep-foundation/aep-node/commit/f70ad260e91e8ce928ce99df4673b47f3e13d817) Thanks [@nkavian](https://github.com/nkavian)! - Align the API-key wrong-header vector with the Service-selected presentation header semantics.
+
+- [#44](https://github.com/aep-foundation/aep-node/pull/44) [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0) Thanks [@nkavian](https://github.com/nkavian)! - Return the complete Service lifecycle vocabulary from Enroll when an existing enrollment is found.
+
+- [#51](https://github.com/aep-foundation/aep-node/pull/51) [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256) Thanks [@nkavian](https://github.com/nkavian)! - Refresh the Core runtime dependencies and synchronize the AEP conformance artifacts.
+
+- [#42](https://github.com/aep-foundation/aep-node/pull/42) [`4064f3c`](https://github.com/aep-foundation/aep-node/commit/4064f3cedf93ced6080297988f1fabb9999a6fd5) Thanks [@nkavian](https://github.com/nkavian)! - Require advertised protected-resource authentication methods and explicit operation-aware Platform authorization.
+
+- Updated dependencies [[`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1), [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d), [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a), [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b), [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0), [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256), [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a)]:
+  - @aep-foundation/core@0.6.0
+
 ## 0.3.5
 
 ### Patch Changes

diff --git a/packages/conformance/package.json b/packages/conformance/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/conformance",
-  "version": "0.3.5",
+  "version": "0.4.0",
   "description": "Conformance helpers for checking AEP SDK outputs against schemas and test vectors.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,25 @@
 # @aep-foundation/core
 
+## 0.6.0
+
+### Minor Changes
+
+- [#41](https://github.com/aep-foundation/aep-node/pull/41) [`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1) Thanks [@nkavian](https://github.com/nkavian)! - Require stable Service-issued identifiers for built-in credentials, type per-grant-type Revoke capabilities, and remove every locally stored credential covered by a successful Revoke.
+
+- [#49](https://github.com/aep-foundation/aep-node/pull/49) [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b) Thanks [@nkavian](https://github.com/nkavian)! - Move shared Platform client contracts and request builders into Core, remove the Agent package's dependency on the Platform implementation, and preserve Platform compatibility exports.
+
+### Patch Changes
+
+- [#40](https://github.com/aep-foundation/aep-node/pull/40) [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the Core command idempotency header, Agent-and-key replay scope, and cross-command conflict behavior.
+
+- [#43](https://github.com/aep-foundation/aep-node/pull/43) [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a) Thanks [@nkavian](https://github.com/nkavian)! - Align Problem Details and Inspect validation with the Core protocol.
+
+- [#44](https://github.com/aep-foundation/aep-node/pull/44) [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0) Thanks [@nkavian](https://github.com/nkavian)! - Return the complete Service lifecycle vocabulary from Enroll when an existing enrollment is found.
+
+- [#51](https://github.com/aep-foundation/aep-node/pull/51) [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256) Thanks [@nkavian](https://github.com/nkavian)! - Refresh the Core runtime dependencies and synchronize the AEP conformance artifacts.
+
+- [#38](https://github.com/aep-foundation/aep-node/pull/38) [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a) Thanks [@nkavian](https://github.com/nkavian)! - Enforce the normative client-assertion JOSE header, Agent identity binding, lifetime, protected-resource URI, and HTTPS `did:web` resolution requirements.
+
 ## 0.5.1
 
 ### Patch Changes

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/core",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "description": "Core Agent Enrollment Protocol types, constants, validation, and HTTP binding primitives.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",

diff --git a/packages/extensions/service-policy/CHANGELOG.md b/packages/extensions/service-policy/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @aep-foundation/service-policy
 
+## 0.1.6
+
+### Patch Changes
+
+- Updated dependencies [[`6aadb9e`](https://github.com/aep-foundation/aep-node/commit/6aadb9ed25a5ac084ffc2c5be5161de1e30f92a1), [`9af941c`](https://github.com/aep-foundation/aep-node/commit/9af941c948a4a4a5383960bb614f9ea4d126264d), [`22422a5`](https://github.com/aep-foundation/aep-node/commit/22422a52fef708b957613bd13a9e506a4bf7f27a), [`df158eb`](https://github.com/aep-foundation/aep-node/commit/df158eb98dca14a9b0242d15b82840bac39a402b), [`3ec9a20`](https://github.com/aep-foundation/aep-node/commit/3ec9a20217e23a755065091b20b7cfa285f2e6f0), [`fade141`](https://github.com/aep-foundation/aep-node/commit/fade141bd82125c2cb84f58265cd2758c28a0256), [`bb9e9a3`](https://github.com/aep-foundation/aep-node/commit/bb9e9a398a48f8e4d7cd3a607377bd5b9432b47a)]:
+  - @aep-foundation/core@0.6.0
+
 ## 0.1.5
 
 ### Patch Changes

diff --git a/packages/extensions/service-policy/package.json b/packages/extensions/service-policy/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aep-foundation/service-policy",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "Service Policy extension package for AEP.",
   "homepage": "https://www.aep.foundation/",
   "type": "module",