Swift SDK

OpenAgentSDK is the Swift SDK for Apple platforms and Linux — verify-first, with the façade over the OAS resolver stack when you need identity.

Private preview. The package resolves from the private repository with OpenAgentID organization access.

// Package.swift
.package(url: "https://github.com/OpenAgentID/openagent-sdk", from: "0.1.0")

Verify an ACT

let verifier = try ACT.Verifier(
    trustedKeys: [brokerPublicKey],   // raw 32-byte Ed25519 keys
    expectedIssuer: "arsenal:broker:prod-1",
    expectedAudience: "my-service"
)
let claims = try verifier.verify(tokenBytes)

Verification follows the normative procedure of act/SPECIFICATION.md in order: envelope decode with a scoped CBOR decoder owned by the package (no codec dependency — indefinite-length items and tags are refused, as the canonical format never produces them), version/algorithm checks, Ed25519 signature verification (swift-crypto) before any claim check, temporal checks with leeway, and issuer/audience/scope policy with the non-widening rule.

The façade

let agent = try await Agent.create(name: "my-agent")
let session = try await agent.authenticate(baseURL: URL(string: "https://api.example.com")!)
// session.authorizationHeader == "OpenAgent <token>"

authenticate runs the Core Protocol challenge-response flow: fetch an openagent-challenge-v1, sign the JCS-canonical bytes, prove, hold the session.

Key custody

let keys = try Keys.generate()
try Keys.saveSeed(keys, to: seedURL)              // owner-only (0600)
let restored = try Keys.fromSeedFile(seedURL)
// or: Keys.fromEnv("AGENT_SEED_HEX")

Everything derives deterministically from one 32-byte seed (Ed25519 signing keypair + X25519 encryption keypair), with a portable CSPRNG across platforms. Swift custody uses HMAC-SHA256 keyed derivation (documented); the canonical cross-SDK derivation is BLAKE3.

In the box

Area	What it does
`ACT.Verifier`	Canonical verification + pinned-clock/leeway variants
`Agent` / `Session`	Façade, Core Protocol flow
`Keys`	Seed-based custody, env/file restore
`Scope`	Three-segment grammar + non-widening
CBOR	Scoped decoder (owned, vector-gated)

Conformance

12 swift-testing tests, including the 13 canonical ACT vectors via VectorTests on every swift test run — the same vectors the other five languages run.

Getting Started

Feature Stack

OpenAgent SDK

OpenAgent Client

OpenAgent Server

Verify an ACT

The façade

Key custody

In the box

Conformance

Next

​Verify an ACT

​The façade

​Key custody

​In the box

​Conformance

​Next

Verify an ACT

The façade

Key custody

In the box

Conformance

Next