chore(release): sdk 0.11.0, cli 0.6.0, python 0.11.0 — offline V3 mandate verify

packages/autogen/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/autogen",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Microsoft AutoGen adapter for CodeSpar — convert session tools to AutoGen function tool format",
   "type": "module",
   "main": "./dist/index.js",
@@ -38,7 +38,7 @@
     "directory": "packages/autogen"
   },
   "peerDependencies": {
-    "@codespar/sdk": "^0.10.0"
+    "@codespar/sdk": "^0.10.0 || ^0.11.0"
   },
   "devDependencies": {
     "@codespar/sdk": "*",

packages/camel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/camel",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "CAMEL-AI adapter for CodeSpar — convert session tools to CAMEL function format",
   "type": "module",
   "main": "./dist/index.js",
@@ -38,7 +38,7 @@
     "directory": "packages/camel"
   },
   "peerDependencies": {
-    "@codespar/sdk": "^0.10.0"
+    "@codespar/sdk": "^0.10.0 || ^0.11.0"
   },
   "devDependencies": {
     "@codespar/sdk": "*",

packages/claude/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/claude",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Claude Agent SDK adapter for CodeSpar — convert MCP tools to Claude tool format",
   "type": "module",
   "main": "./dist/index.js",
@@ -37,7 +37,7 @@
     "directory": "packages/claude"
   },
   "peerDependencies": {
-    "@codespar/sdk": "^0.10.0"
+    "@codespar/sdk": "^0.10.0 || ^0.11.0"
   },
   "devDependencies": {
     "@codespar/sdk": "*",

packages/cli/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @codespar/cli — changelog
 
+## 0.6.0 — 2026-07-05
+
+Offline V3 mandate verification from the terminal. See
+[codespar/codespar-core#114](https://github.com/codespar/codespar-core/pull/114).
+
+### Added
+
+- `codespar mandate verify <token>` — decodes a V3 presentation token,
+  reconstructs the canonical signing string, and verifies the agent and
+  issuer Ed25519 signatures. Pure-offline mode with `--agent-pubkey` /
+  `--issuer-pubkey` (no network, no API key); default network mode
+  resolves public keys via the agent's did:web document
+  (id.codespar.dev), still with no API key. `--json` supported; the
+  exit code tracks signature verification.
+
 ## 0.4.0 — 2026-05-04
 
 Sugar commands wrapping the SDK 0.9.0 typed meta-tool methods. None

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/cli",
-  "version": "0.5.5",
+  "version": "0.6.0",
   "description": "CodeSpar CLI. The agentic OS for money movement in Latin America, from your terminal: authenticate, browse servers, mint mandates, execute tools, manage sessions, stream logs.",
   "type": "module",
   "bin": {
@@ -46,7 +46,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@codespar/sdk": "^0.10.1",
+    "@codespar/sdk": "^0.11.0",
     "commander": "^13.0.0"
   },
   "devDependencies": {

packages/core/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @codespar/sdk — CHANGELOG
 
+## 0.11.0
+
+Offline V3 mandate verification lands on the SDK as a dedicated subpath. See [codespar/codespar-core#114](https://github.com/codespar/codespar-core/pull/114).
+
+### Added
+
+- `@codespar/sdk/mandate` subpath export: `verifyMandateToken(token, { agentPublicKey, issuerPublicKey })`, `decodeMandateToken`, `reconstructSigningString`, and `verifyEd25519`. Verifies the V3 dual Ed25519 signatures (agent + platform issuer) with `node:crypto` only — no API call, no credential. Lives on a subpath (like `./testing`) so `node:crypto` stays out of the edge-safe main graph; the zero-runtime-dependency rule holds (`node:crypto` is a builtin).
+- The canonical signing string is byte-locked against the platform's frozen fixture in tests; the same fixture guards the CLI and Python implementations, so any codec drift fails all of them loudly.
+
 ## 0.10.0
 
 The hosted test-mode SDK surface lands across `@codespar/sdk`, `@codespar/types`, and the `codespar` Python package. See [codespar/codespar-core#54](https://github.com/codespar/codespar-core/pull/54).

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/sdk",
-  "version": "0.10.11",
+  "version": "0.11.0",
   "description": "Commerce SDK for AI agents — sessions, managed auth, Complete Loop orchestration for Latin American APIs",
   "type": "module",
   "main": "./dist/index.js",

packages/crewai/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/crewai",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "CrewAI adapter for CodeSpar — convert session tools to CrewAI tool format",
   "type": "module",
   "main": "./dist/index.js",
@@ -37,7 +37,7 @@
     "directory": "packages/crewai"
   },
   "peerDependencies": {
-    "@codespar/sdk": "^0.10.0"
+    "@codespar/sdk": "^0.10.0 || ^0.11.0"
   },
   "devDependencies": {
     "@codespar/sdk": "*",

packages/google-genai/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/google-genai",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Google Gemini/GenAI adapter for CodeSpar — convert session tools to Gemini FunctionDeclaration format",
   "type": "module",
   "main": "./dist/index.js",
@@ -38,7 +38,7 @@
     "directory": "packages/google-genai"
   },
   "peerDependencies": {
-    "@codespar/sdk": "^0.10.0"
+    "@codespar/sdk": "^0.10.0 || ^0.11.0"
   },
   "devDependencies": {
     "@codespar/sdk": "*",

packages/hermes/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/hermes",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Hermes Agent adapter for CodeSpar — convert session tools to Hermes MCP/plugin tool format",
   "type": "module",
   "main": "./dist/index.js",
@@ -39,7 +39,7 @@
     "directory": "packages/hermes"
   },
   "peerDependencies": {
-    "@codespar/sdk": "^0.10.0"
+    "@codespar/sdk": "^0.10.0 || ^0.11.0"
   },
   "devDependencies": {
     "@codespar/sdk": "*",