BYWallace · Oct 28, 2026 · Oct 28, 2026
diff --git a/.changeset/browser-pay-event-redaction.md b/.changeset/browser-pay-event-redaction.md
diff --git a/.changeset/browser-pay-intercept-diagnostics.md b/.changeset/browser-pay-intercept-diagnostics.md
diff --git a/.changeset/browser-pay-refusal-pass-through.md b/.changeset/browser-pay-refusal-pass-through.md
diff --git a/.changeset/core-remove-list-transactions-params.md b/.changeset/core-remove-list-transactions-params.md
diff --git a/.changeset/drop-retired-docs-links.md b/.changeset/drop-retired-docs-links.md
diff --git a/.changeset/mcp-platform-events-subscribable.md b/.changeset/mcp-platform-events-subscribable.md
diff --git a/.changeset/run-connectors-selection.md b/.changeset/run-connectors-selection.md
diff --git a/.changeset/sdk-shared-credential-transport.md b/.changeset/sdk-shared-credential-transport.md
diff --git a/.changeset/slack-history-whoami.md b/.changeset/slack-history-whoami.md
diff --git a/packages/agent-core/CHANGELOG.md b/packages/agent-core/CHANGELOG.md
@@ -1,5 +1,50 @@
 # @sapiom/orchestration-core
 
+## 0.16.0
+
+### Minor Changes
+
+- a76b8bd: The tenant API key now only travels over HTTPS, or plain HTTP to a loopback
+  host, from every SDK client, and never follows a redirect to another origin.
+  One function, `credentialFetch` from the new `@sapiom/analytics-core/credential`
+  subpath, is the only code that sets the key header.
+
+  Behavior changes, shipped as 0.x minor bumps: a plain `http://` URL to a
+  non-loopback host is now refused, and the key headers are stripped on a
+  cross-origin redirect. `@sapiom/core` and `@sapiom/browser-pay` gain their
+  first runtime dependency, `@sapiom/analytics-core`.
+
+  - `@sapiom/core`, `@sapiom/agent-core` and `@sapiom/mcp`: a plain `http://`
+    URL to a non-loopback host (for example a Docker service name or a LAN IP)
+    now fails before the request is sent. On a trusted private network, opt in
+    with `new SapiomClient({ allowInsecureHttp: true })` (core),
+    `createClient({ allowInsecureHttp: true })` (agent-core) or
+    `SAPIOM_ALLOW_INSECURE_HTTP=1` (all clients). `localhost`, `*.localhost`,
+    `127.0.0.1` and `[::1]` work as before. Core does not retry a refused channel.
+  - `@sapiom/analytics-core`: on such an endpoint the batch is still sent, without
+    the key. A redirect to a refused channel drops the batch.
+  - Every client follows redirects itself: the first hop to another origin drops
+    `x-api-key`, `x-sapiom-api-key` and every `x-sapiom-*` header.
+  - `@sapiom/core`: `getHttpClient().defaults.headers` no longer carries the key;
+    read `defaults.credential` instead.
+  - `@sapiom/browser-pay`: the payment relay uses the shared rule, so a
+    `*.localhost` base URL and `SAPIOM_ALLOW_INSECURE_HTTP=1` are now accepted, and
+    a refused base URL throws a `CredentialChannelError`. Redirects are still
+    refused.
+  - `@sapiom/tools`: no behavior change. A refused call now throws a
+    `CredentialChannelError`, a `TypeError` subclass that keeps `name: "TypeError"`.
+
+### Patch Changes
+
+- 1b9a5f6: Stop linking docs.sapiom.ai pages that no longer exist. The `sapiom-agent-authoring` skill and its scaffold copies, the Agent Studio system prompt, help palette and welcome screen, and the `@sapiom/agent` README drop links to the agent quick start, authoring guide, MCP setup, call-surface, credentials and signals guides. The first-run telemetry notice drops its link to a `/telemetry` page that never existed. Links to `/capabilities` pages are unchanged.
+- Updated dependencies [1b9a5f6]
+- Updated dependencies [89f1829]
+- Updated dependencies [a76b8bd]
+- Updated dependencies [ec08398]
+  - @sapiom/agent@0.14.12
+  - @sapiom/analytics-core@0.3.0
+  - @sapiom/tools@0.48.0
+
 ## 0.15.7
 
 ### Patch Changes

diff --git a/packages/agent-core/package.json b/packages/agent-core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sapiom/agent-core",
-  "version": "0.15.7",
+  "version": "0.16.0",
   "description": "Pure, stateless core functions for scaffolding, validating, and operating Sapiom agents — shared by the CLI and MCP packages.",
   "license": "MIT",
   "author": "Sapiom",

diff --git a/packages/agent-core/src/version-fallback.generated.ts b/packages/agent-core/src/version-fallback.generated.ts
@@ -4,6 +4,6 @@
 // @sapiom/agent + @sapiom/tools versions and the offline scaffold fallback can no
 // longer drift.
 export const VERSION_FALLBACK = {
-  agent: "0.14.11",
-  tools: "0.47.0",
+  agent: "0.14.12",
+  tools: "0.48.0",
 } as const;
diff --git a/packages/agent-studio/CHANGELOG.md b/packages/agent-studio/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @sapiom/agent-studio
 
+## 0.1.39
+
+### Patch Changes
+
+- Updated dependencies [1b9a5f6]
+  - @sapiom/harness@0.22.1
+
 ## 0.1.38
 
 ### Patch Changes

diff --git a/packages/agent-studio/package.json b/packages/agent-studio/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sapiom/agent-studio",
-  "version": "0.1.38",
+  "version": "0.1.39",
   "description": "Agent Studio — build, test, deploy, and run Sapiom agents with your coding agent in a local workspace.",
   "keywords": [
     "sapiom",

diff --git a/packages/agent/CHANGELOG.md b/packages/agent/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @sapiom/orchestration
 
+## 0.14.12
+
+### Patch Changes
+
+- 1b9a5f6: Stop linking docs.sapiom.ai pages that no longer exist. The `sapiom-agent-authoring` skill and its scaffold copies, the Agent Studio system prompt, help palette and welcome screen, and the `@sapiom/agent` README drop links to the agent quick start, authoring guide, MCP setup, call-surface, credentials and signals guides. The first-run telemetry notice drops its link to a `/telemetry` page that never existed. Links to `/capabilities` pages are unchanged.
+- Updated dependencies [89f1829]
+- Updated dependencies [a76b8bd]
+- Updated dependencies [ec08398]
+  - @sapiom/tools@0.48.0
+
 ## 0.14.11
 
 ### Patch Changes

diff --git a/packages/agent/package.json b/packages/agent/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sapiom/agent",
-  "version": "0.14.11",
+  "version": "0.14.12",
   "description": "Versioned public contract for authoring Sapiom agents: types, directive constructors/guards, defineAgent, defineStep, InMemoryContextStore. Shared by customer agent definitions, the sandbox step-runner, and the engine.",
   "license": "MIT",
   "author": "Sapiom",

diff --git a/packages/analytics-core/CHANGELOG.md b/packages/analytics-core/CHANGELOG.md
@@ -1,5 +1,43 @@
 # @sapiom/analytics-core
 
+## 0.3.0
+
+### Minor Changes
+
+- a76b8bd: The tenant API key now only travels over HTTPS, or plain HTTP to a loopback
+  host, from every SDK client, and never follows a redirect to another origin.
+  One function, `credentialFetch` from the new `@sapiom/analytics-core/credential`
+  subpath, is the only code that sets the key header.
+
+  Behavior changes, shipped as 0.x minor bumps: a plain `http://` URL to a
+  non-loopback host is now refused, and the key headers are stripped on a
+  cross-origin redirect. `@sapiom/core` and `@sapiom/browser-pay` gain their
+  first runtime dependency, `@sapiom/analytics-core`.
+
+  - `@sapiom/core`, `@sapiom/agent-core` and `@sapiom/mcp`: a plain `http://`
+    URL to a non-loopback host (for example a Docker service name or a LAN IP)
+    now fails before the request is sent. On a trusted private network, opt in
+    with `new SapiomClient({ allowInsecureHttp: true })` (core),
+    `createClient({ allowInsecureHttp: true })` (agent-core) or
+    `SAPIOM_ALLOW_INSECURE_HTTP=1` (all clients). `localhost`, `*.localhost`,
+    `127.0.0.1` and `[::1]` work as before. Core does not retry a refused channel.
+  - `@sapiom/analytics-core`: on such an endpoint the batch is still sent, without
+    the key. A redirect to a refused channel drops the batch.
+  - Every client follows redirects itself: the first hop to another origin drops
+    `x-api-key`, `x-sapiom-api-key` and every `x-sapiom-*` header.
+  - `@sapiom/core`: `getHttpClient().defaults.headers` no longer carries the key;
+    read `defaults.credential` instead.
+  - `@sapiom/browser-pay`: the payment relay uses the shared rule, so a
+    `*.localhost` base URL and `SAPIOM_ALLOW_INSECURE_HTTP=1` are now accepted, and
+    a refused base URL throws a `CredentialChannelError`. Redirects are still
+    refused.
+  - `@sapiom/tools`: no behavior change. A refused call now throws a
+    `CredentialChannelError`, a `TypeError` subclass that keeps `name: "TypeError"`.
+
+### Patch Changes
+
+- 1b9a5f6: Stop linking docs.sapiom.ai pages that no longer exist. The `sapiom-agent-authoring` skill and its scaffold copies, the Agent Studio system prompt, help palette and welcome screen, and the `@sapiom/agent` README drop links to the agent quick start, authoring guide, MCP setup, call-surface, credentials and signals guides. The first-run telemetry notice drops its link to a `/telemetry` page that never existed. Links to `/capabilities` pages are unchanged.
+
 ## 0.2.1
 
 ### Patch Changes

diff --git a/packages/analytics-core/package.json b/packages/analytics-core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sapiom/analytics-core",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Zero-dependency usage analytics emitter shared by Sapiom SDK packages — consent-aware, batched, and guaranteed to never throw or block the host application.",
   "license": "MIT",
   "author": "Sapiom",

diff --git a/packages/axios/CHANGELOG.md b/packages/axios/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @sapiom/axios
 
+## 0.5.2
+
+### Patch Changes
+
+- Updated dependencies [a8068d8]
+- Updated dependencies [a76b8bd]
+  - @sapiom/core@0.6.0
+
 ## 0.5.1
 
 ### Patch Changes

diff --git a/packages/axios/package.json b/packages/axios/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sapiom/axios",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Axios integration for Sapiom SDK",
   "keywords": [
     "sapiom",

diff --git a/packages/browser-pay/CHANGELOG.md b/packages/browser-pay/CHANGELOG.md
@@ -1,5 +1,51 @@
 # @sapiom/browser-pay
 
+## 0.2.0
+
+### Minor Changes
+
+- b386258: Interceptor event URLs are origin-only, and refusal reasons on events are sanitized. CDP attach errors use fixed messages to avoid forwarding transport details.
+- 8d77192: A refused event may include optional `retryable` and `requestId`. When `retryable` is missing, the event leaves it unset. The SDK does not invent it, and polling still follows only `relay_in_progress`.
+
+  A reason on that event passes through when it matches `/^[a-z]+(_[a-z]+)*$/` and is at most 48 characters, including a reason this package does not list. Every other reason is `unrecognized`. `RefusalReason` is that open set. `KnownRefusalReason` names the reasons the relay emits today.
+
+- a76b8bd: The tenant API key now only travels over HTTPS, or plain HTTP to a loopback
+  host, from every SDK client, and never follows a redirect to another origin.
+  One function, `credentialFetch` from the new `@sapiom/analytics-core/credential`
+  subpath, is the only code that sets the key header.
+
+  Behavior changes, shipped as 0.x minor bumps: a plain `http://` URL to a
+  non-loopback host is now refused, and the key headers are stripped on a
+  cross-origin redirect. `@sapiom/core` and `@sapiom/browser-pay` gain their
+  first runtime dependency, `@sapiom/analytics-core`.
+
+  - `@sapiom/core`, `@sapiom/agent-core` and `@sapiom/mcp`: a plain `http://`
+    URL to a non-loopback host (for example a Docker service name or a LAN IP)
+    now fails before the request is sent. On a trusted private network, opt in
+    with `new SapiomClient({ allowInsecureHttp: true })` (core),
+    `createClient({ allowInsecureHttp: true })` (agent-core) or
+    `SAPIOM_ALLOW_INSECURE_HTTP=1` (all clients). `localhost`, `*.localhost`,
+    `127.0.0.1` and `[::1]` work as before. Core does not retry a refused channel.
+  - `@sapiom/analytics-core`: on such an endpoint the batch is still sent, without
+    the key. A redirect to a refused channel drops the batch.
+  - Every client follows redirects itself: the first hop to another origin drops
+    `x-api-key`, `x-sapiom-api-key` and every `x-sapiom-*` header.
+  - `@sapiom/core`: `getHttpClient().defaults.headers` no longer carries the key;
+    read `defaults.credential` instead.
+  - `@sapiom/browser-pay`: the payment relay uses the shared rule, so a
+    `*.localhost` base URL and `SAPIOM_ALLOW_INSECURE_HTTP=1` are now accepted, and
+    a refused base URL throws a `CredentialChannelError`. Redirects are still
+    refused.
+  - `@sapiom/tools`: no behavior change. A refused call now throws a
+    `CredentialChannelError`, a `TypeError` subclass that keeps `name: "TypeError"`.
+
+### Patch Changes
+
+- 150bbd7: Better debug logging for browser-pay: an optional logger now receives browser step failures, and CDP errors name the method.
+- Updated dependencies [1b9a5f6]
+- Updated dependencies [a76b8bd]
+  - @sapiom/analytics-core@0.3.0
+
 ## 0.1.1
 
 ### Patch Changes

diff --git a/packages/browser-pay/package.json b/packages/browser-pay/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sapiom/browser-pay",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Browser-side payment interceptor. Pause a placeholder card request over CDP and relay it.",
   "keywords": [
     "sapiom",

diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @sapiom/cli
 
+## 21.0.1
+
+### Patch Changes
+
+- Updated dependencies [1b9a5f6]
+- Updated dependencies [a76b8bd]
+  - @sapiom/agent-core@0.16.0
+  - @sapiom/agent@0.14.12
+  - @sapiom/harness@0.22.1
+  - @sapiom/analytics-core@0.3.0
+  - @sapiom/sandbox-preview@0.1.34
+
 ## 21.0.0
 
 ### Patch Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sapiom/cli",
-  "version": "21.0.0",
+  "version": "21.0.1",
   "description": "The Sapiom command-line interface — scaffold, validate, and ship Sapiom agents.",
   "license": "MIT",
   "author": "Sapiom",
@@ -46,7 +46,7 @@
     "zod": "^3.25.76"
   },
   "peerDependencies": {
-    "@sapiom/harness": ">=0.22.0"
+    "@sapiom/harness": ">=0.22.1"
   },
   "peerDependenciesMeta": {
     "@sapiom/harness": {