SDK Compatibility Matrix

Maps npm package versions to minimum catalog-info.yaml and builder versions.

Used by the builder and preflight to validate SDK usage against platform requirements.

Updated whenever a new SDK version is published.

Last updated: 2026-02-27

schema_version: "1.0"

sdks: "@insureco/bio": description: "Bio-ID OAuth and JWT verification SDK" repo: iec-bio-sdk current: "0.3.0" versions: "0.3.0": released: "2026-01-10" catalog_min: "0.4.0" builder_min: "0.9.0" node_min: "18" auth_model: "RS256+JWKS" breaking_from: "0.2.0" changelog: "changelogs/sdk-bio-0.3.0.yaml" status: current "0.2.x": catalog_min: "0.2.0" auth_model: "HS256+shared-secret" status: deprecated eol: "2026-06-01" deprecation_message: > @insureco/bio 0.2.x uses HS256 shared-secret JWT — a security risk. Upgrade to 0.3.0 which uses RS256+JWKS. No shared secret required. "0.1.x": status: eol eol: "2025-12-01"

"@insureco/relay": description: "InsureRelay email and SMS SDK" repo: iec-relay-sdk current: "0.5.0" versions: "0.5.0": released: "2026-01-15" catalog_min: "0.3.0" builder_min: "0.9.0" node_min: "18" auth_model: "bio-client-credentials" breaking_from: "0.4.0" changelog: "changelogs/sdk-relay-0.5.0.yaml" status: current "0.4.x": catalog_min: "0.2.0" auth_model: "bio-client-credentials or jwt-secret" status: deprecated eol: "2026-06-01" deprecation_message: > @insureco/relay 0.4.x uses deprecated fromEmail/from field and legacy JWT_SECRET auth. Upgrade to 0.5.0. "0.3.x": status: eol eol: "2025-12-01"

"@insureco/wallet": description: "Token wallet debit/credit and balance SDK" repo: iec-wallet-sdk current: "0.3.0" versions: "0.3.0": released: "2025-11-01" catalog_min: "0.2.0" builder_min: "0.8.0" node_min: "18" breaking_from: "0.2.0" status: current "0.2.x": status: deprecated eol: "2026-06-01"

"@insureco/docman": description: "Document generation (PDF fill, HTML-to-PDF, templates)" repo: iec-docman-sdk current: "1.1.2" versions: "1.1.x": released: "2026-01-20" catalog_min: "0.4.0" builder_min: "0.9.0" node_min: "18" breaking_from: "1.0.0" status: current notes: > Major version bump from 0.x. Full API redesign. Not backward compatible with any 0.x version. "1.0.x": released: "2025-10-01" catalog_min: "0.3.0" status: deprecated eol: "2026-06-01" "0.x": status: eol eol: "2025-12-01"

"@insureco/septor": description: "Immutable audit trail event emission SDK" repo: insureco-septor-sdk current: "0.2.0" versions: "0.2.0": released: "2025-12-01" catalog_min: "0.2.0" builder_min: "0.8.0" node_min: "18" status: current

"@insureco/storage": description: "S3-compatible object storage SDK" repo: tawa-storage current: "0.1.0" versions: "0.1.0": released: "2026-01-01" catalog_min: "0.3.0" builder_min: "0.9.0" node_min: "18" status: current notes: > Requires spec.storage[] in catalog-info.yaml. Builder provisions storage credentials automatically.

── Catalog versions ─────────────────────────────────────────────────────────

catalog_versions: "0.5.0": released: "2026-01-01" builder_min: "0.10.0" features: - spec.tests.smoke - insureco.io/catalog-version annotation required for tests changelog: "changelogs/catalog-0.5.0.yaml" status: current

"0.4.0": released: "2025-11-01" builder_min: "0.9.0" features: - spec.dependencies (with transport and scopes) changelog: "changelogs/catalog-0.4.0.yaml" status: supported

"0.3.0": released: "2025-09-01" builder_min: "0.8.0" features: - spec.storage - spec.storage[].tier changelog: "changelogs/catalog-0.3.0.yaml" status: supported

"0.2.0": released: "2025-07-01" builder_min: "0.7.0" features: - insureco.io/framework annotation required - insureco.io/health-endpoint annotation required - spec.owner required (not 'unknown') - spec.lifecycle required - spec.type required status: supported

"0.1.0": released: "2025-05-01" builder_min: "0.5.0" features: - spec.databases - spec.routes - spec.internalDependencies - spec.config status: deprecated eol: "2026-06-01"

Last updated: February 28, 2026