v0.3.0 Release Notes¶
Release Date: May 11, 2026
Highlights¶
This release adds two new production-ready adapters for integrating agent-protocols with OAuth infrastructure:
- SharkAuth Adapter - Agent delegation with
may_act_grantsand DPoP proof-of-possession - Ory Adapter - Custom Fosite OAuth handlers and Hydra client integration
New Features¶
SharkAuth Adapter¶
The SharkAuth adapter (adapters/sharkauth/) provides integration with SharkAuth, an OAuth 2.0 server purpose-built for agent delegation.
Key Features:
- RFC 8693 Token Exchange for agent tokens
- DPoP proof-of-possession binding per RFC 9449
may_act_grantsAPI for structured delegation- Cascade revocation support
- Full AAuth protocol integration
Example:
import "github.com/aistandardsio/agent-protocols/adapters/sharkauth"
client, _ := sharkauth.NewClient("https://auth.example.com",
sharkauth.WithClientCredentials("client-id", "client-secret"),
)
// Create delegation grant
grant, _ := client.CreateDelegationGrant(ctx, sharkauth.DelegationGrantRequest{
ActorSubject: "agent:calendar-bot",
UserSubject: "user:alice",
Scopes: []string{"calendar:read"},
TTL: 24 * time.Hour,
})
// Exchange token with DPoP
proof, _ := sharkauth.CreateDPoPProof(privateKey, "POST", client.TokenURL())
resp, _ := client.ExchangeAAuthToken(ctx, agentToken,
sharkauth.WithDPoP(proof.Token),
)
Ory Adapter¶
The Ory adapter (adapters/ory/) provides integration with the Ory ecosystem.
Fosite Subpackage:
- Custom OAuth grant handlers for ID-JAG assertions
- Custom OAuth grant handlers for AAuth agent tokens
- Token storage interface with in-memory implementation
- Pluggable scope and audience validation strategies
Hydra Subpackage:
- Client for Hydra public and admin APIs
- RFC 8693 Token Exchange support
- JWT Bearer grant support (RFC 7523)
- Token introspection with actor claim support
Example:
import "github.com/aistandardsio/agent-protocols/adapters/ory/hydra"
client, _ := hydra.NewClient("https://hydra.example.com",
hydra.WithAdminURL("https://hydra-admin.example.com"),
)
// Exchange ID-JAG assertion
resp, _ := client.ExchangeIDJAG(ctx, assertion,
hydra.WithScope("read write"),
)
// Introspect token
introspect, _ := client.IntrospectToken(ctx, resp.AccessToken)
Documentation¶
Examples¶
New working examples demonstrating adapter usage:
# SharkAuth with AAuth
go run ./adapters/sharkauth/examples/aauth
# Ory Hydra with ID-JAG
go run ./adapters/ory/examples/idjag
Three-Tier Architecture Progress¶
With this release, the adapter tier is now complete:
| Adapter | Status | Version |
|---|---|---|
| Zitadel | Complete | v0.2.0 |
| SharkAuth | Complete | v0.3.0 |
| Ory | Complete | v0.3.0 |
The next phase (v0.4.0) will focus on production demos with Docker Compose and full infrastructure examples.
Installation¶
Changelog¶
See the full changelog for all changes.