From b541ef78edc083c5d234c63909f6fc8a9f403cda Mon Sep 17 00:00:00 2001 From: Saurabh Jain Date: Wed, 6 May 2026 13:19:57 +0200 Subject: [PATCH] =?UTF-8?q?chore(release):=20v7.7.0=20=E2=80=94=20X-Axonfl?= =?UTF-8?q?ow-Client=20header=20+=20scope-aware=20license=20validation=20[?= =?UTF-8?q?skip-runtime-e2e]?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Companion release to platform v7.7.0. The Java SDK now sends X-Axonflow-Client: sdk-java/ on every governed request, which the agent (v7.7.0+) uses to derive SDK request scope and validate against any license token's audience claim per the ADR-050 license matrix. Single substantive change since v7.0.0 (#161 — header injection). Supporting commits since v7.0.0 (DCO sign-off docs, definition-of-done CI gate, v7.0.0 changelog typo correction) are infrastructure and not user-facing. No public API changes. Existing v7.0.x callers update 7.7.0 and rebuild against v7.7.0 with no source changes. Backward-compatible against pre-v7.7.0 agents (header silently dropped). [skip-runtime-e2e] — version + CHANGELOG bump only; the underlying header behavior shipped + was runtime-tested when #161 landed. Signed-off-by: Saurabh Jain --- CHANGELOG.md | 41 +++++++++++++++++++++++++++++++++++++++++ pom.xml | 2 +- 2 files changed, 42 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7a56793..a5d48a2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,47 @@ All notable changes to the AxonFlow Java SDK will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [7.7.0] - 2026-05-06 — X-Axonflow-Client header + scope-aware license validation + +**Companion release to platform v7.7.0.** The Java SDK now sends an +`X-Axonflow-Client` identification header on every governed request, which +the agent uses to derive the SDK request scope and validate it against any +license token's audience claim per the ADR-050 license matrix. + +### Added + +- **`X-Axonflow-Client: sdk-java/` header** on every governed + outbound request. Set automatically by the SDK transport; not + configurable. Agents at v7.7.0+ derive request scope from this header + and reject cross-quadrant token misuse (e.g. a SaaS Plugin Pro token + paired with an SDK request) at the validator boundary. Older agents + (pre-v7.7.0) ignore the header and continue to work unchanged. + +### Compatibility + +- **No public API changes.** Existing v7.0.x callers update + `7.7.0` on the `axonflow-sdk` dependency and + rebuild against v7.7.0 with no source changes. +- **Backward-compatible against pre-v7.7.0 agents.** The header is + silently dropped by older agents; the SDK behaves identically against + v7.0.x / v7.1.x / v7.6.x agents as before. +- **Forward-compatible.** Future agent releases that require the header + on specific governed surfaces will work with this SDK without further + client changes. + +### Companion releases (same day) + +- **Platform v7.7.0** — V1 SaaS Plugin Pro launch, license matrix, + per-tenant tier resolution, GDPR right-to-erasure + ([CHANGELOG](https://github.com/getaxonflow/axonflow/blob/main/CHANGELOG.md)) +- **Go SDK v7.7.0** / **Python SDK v7.7.0** / + **TypeScript SDK v7.7.0** — same `X-Axonflow-Client` injection +- **Plugins** — Claude Code / Cursor / Codex v1.2.0; OpenClaw v2.2.0 + with Pro license token paste activating Pro features + +axonflow-sdk-rust remains at v0.1.0 (preview); SDK-Rust will gain the +header in a future preview release. + ## [7.0.0] - 2026-04-29 — Production, quality, and security hardening — upgrade encouraged **Upgrade strongly recommended.** Over the past month we've shipped substantial production, quality, and security hardening across the AxonFlow SDKs and platform — upgrade to the latest major for a more secure, reliable, and bug-free experience. diff --git a/pom.xml b/pom.xml index 24f0b51..2d58515 100644 --- a/pom.xml +++ b/pom.xml @@ -6,7 +6,7 @@ com.getaxonflow axonflow-sdk - 7.0.0 + 7.7.0 jar AxonFlow Java SDK