chore(main): release 2.0.0

[github-actions]

🤖 I have created a release beep boop

2.0.0 (2026-09-12)

⚠ BREAKING CHANGES

• vs-agent: read VPR state through the indexer, not the ledger RPC (#686)
• anoncreds trust decision service credentialschema derivation and present time participant check (#695)
• anoncreds publish the anoncreds schema of a vtjsc (#691)
• vs-agent: align the vpr.notification payload with the spec (#681)
• vs-agent: return the invitation object instead of an agent-built url (#684)
• exposed anoncreds service in did document should correspond to the did method used (#670)
• vs-agent: carry the flow record in the vt.flows event (#669)
• vs-agent: drop callbackUrl and ref from createPresentationRequest (#667)
• vs-agent: align webhook event delivery with the Events API (#663)
• add getFlow and state fields to flow records (#660)
• vs-agent: compose ECS credential claims from ECS_CLAIMS_* and drop the self-TR example registry (#649)
• vs-agent: single port admin API with trusted network classification (#637)
• vs-agent: derive, create and publish the public DID at startup (#634)
• vs-agent: admin API v2 vt flows and service endpoints (#626)
• require a VERIFIED trust outcome in the VS-CONN-VS gate (#596)
• vs-agent: remove AGENT_DIDCOMM_VERSIONS (#627)
• bump resolve-version in CI
• vt-flow: anchor the signed credential digest via verre (#565)
• vs-agent: rename self-issued org env vars to v4 names (#567)
• vs-agent: enforce required v4 env config (#527)

Features

• add getFlow and state fields to flow records (#660) (bb3107b)
• add the missing accept methods to the v2 didcomm controllers (#661) (e32ece9)
• admin api add a v2 api router (#621) (3220c91)
• admin api anoncreds credential definitions (#643) (9d82be7)
• admin api anoncreds credential revocation (#648) (ce4e123)
• admin api didcomm connection methods (#639) (19768fc)
• admin api didcomm presentations (#640) (150b656)
• admin api implement vsa adm ag info (#629) (493d1de)
• admin api revocation registries (#647) (e808666)
• admin api v2 liveness and readiness probes (#624) (29b2b5b)
• agent-sdk: serve the ECS badge schema and 404 unknown schemaIds (#573) (217d984)
• anoncreds check the issuer before you accept an offer check the verifier before you present (#698) (89c12ad)
• anoncreds publish the anoncreds schema of a vtjsc (#691) (d7f37f2)
• anoncreds trust decision service credentialschema derivation and present time participant check (#695) (0562ff3)
• exposed anoncreds service in did document should correspond to the did method used (#670) (1e8d34e)
• helm chart and deployment configuration using v2 (#651) (49ebbda)
• implement api key set pagination (#646) (94b15f7)
• implement the didcomm decline methods and the declined state (#662) (7659ee1)
• implement v2 credential exchanges (#644) (a51ca56)
• support VCDM 2.0 credentials (#690) (a1a0e85)
• vs-agent: add the receipts module to the v2 didcomm api (#685) (7c10b11)
• vs-agent: admin API v2 vt flows and service endpoints (#626) (34d7427)
• vs-agent: align the vpr.notification payload with the spec (#681) (ae22cc2)
• vs-agent: align webhook event delivery with the Events API (#663) (967127b)
• vs-agent: anchor digestJCS in admin jsonld issuance (#586) (4dfa8e4)
• vs-agent: carry the flow record in the vt.flows event (#669) (c102dec)
• vs-agent: compose ECS credential claims from ECS_CLAIMS_* and drop the self-TR example registry (#649) (fe0044e)
• vs-agent: derive, create and publish the public DID at startup (#634) (0331897)
• vs-agent: drop callbackUrl and ref from createPresentationRequest (#667) (0ca7d1f)
• vs-agent: enforce required v4 env config (#527) (769d931)
• vs-agent: full v4 lifecycle e2e and local demo environment (#520) (b6a4831)
• vs-agent: remove AGENT_DIDCOMM_VERSIONS (#627) (89e81fc)
• vs-agent: rename self-issued org env vars to v4 names (#567) (ac09461)
• vs-agent: require mnemonic and standalone trusted ECS DIDs (#529) (fe92358)
• vs-agent: return the invitation object instead of an agent-built url (#684) (c387689)
• vs-agent: single port admin API with trusted network classification (#637) (415725a)
• vt-flow: anchor the signed credential digest via verre (#565) (6f0ed05)
• vt-flow: support onboarding without credential offer (#625) (711d5aa)

Bug Fixes

• admin api global error envelope and code vocabulary (#622) (35927bf)
• agent-sdk: bound the VS-CONN-VS verdict cache to trusted outcomes (#645) (066b7e6)
• agent-sdk: check schema ownership before publishing a VTJSC (#583) (2d7510f)
• agent-sdk: keep self-issued ECS credentials detached once a real one is stored (#585) (86a760b)
• agent-sdk: let the ecosystem's own agent self-issue its Org/Persona credential (#587) (6b3c647)
• agent-sdk: pin the e2e chain to dev.30 for the operator grant convention (#572) (74be218)
• agent-sdk: send subscribe before draining indexer catch-up (#575) (2d3b3ba)
• agent-sdk: spec-compliant ECS publication and VTJSC digestSRI (#523) (f116333)
• bump resolve-version in CI (3a2b952)
• calculate digest over plain JSON object (#590) (c798f55)
• ECS credential anchoring, cross-Corporation issuers, and four fixes found on devnet (#589) (dba0af9)
• listConnections cannot filter by didcommVersion v1 (#642) (1e99ff2)
• precompute SRI of default content (#584) (aa48f8a)
• prevent duplicated connections by using publicDid tag (#618) (50918d0)
• rebuild the self-issued ECS credential when the stored one no longer matches the DID Document (#638) (e7b22b2)
• require a VERIFIED trust outcome in the VS-CONN-VS gate (#596) (ce162ec)
• resolve VPR schema references on any chain (#595) (ba1aa92)
• self-tr integrity data calculation (#593) (cdb5d46)
• store digest of ECS credentials (self issuing case) (#588) (4cd617e)
• use onboarding process for delegated mode (#628) (6ad0a2c)
• vs-agent: align ECS test mocks and self-tr docs with v4 (#566) (f9313ab)
• vt-flow: validate schema before issuing credential (#592) (347d501)
• wait for DID Document availability on delegated mode (#591) (5b2b2b5)
• wait for the indexer subscribed acknowledgement before the catch-up (#594) (e00c8aa)
• withdraw the self-issued ECS credential when its ISSUER participant is revoked (#632) (b53bf99)
• withdraw VTJSCs of ecosystems the agent no longer controls (#633) (f0cd6c9)

Code Refactoring

• vs-agent: read VPR state through the indexer, not the ledger RPC (#686) (3ed7be1)

---

This PR was generated with Release Please. See documentation.