[thiva-k]

Purpose

ThunderID is changing an agent's owner from a string to an object, so the owner can be a person managed in another identity system (thunder-id/thunderid#6435):

"owner": {"id": "jane@example.com", "idType": "email", "isLocal": false}

The SDK still models owner as a string. Agent details render it as text, so once the server returns the object, AgentDetails throws (React error #31) and the whole admin page goes blank. This is what fails the agent e2e tests on thunder-id/thunderid#6435, whose data plane admin console uses @thunderid/react's AgentDetails. Agent create also sends the owner as a string, which the server now rejects with 400 AGT-1001.

---

⚠️ Breaking Changes

🔧 Summary of Breaking Changes

• owner on Agent, CreateAgentRequest and UpdateAgentRequest changes from string to AgentOwner.
• The owner prop of AgentCreate (React and Vue) changes from string to AgentOwner.

💥 Impact

Code that reads agent.owner as a string, or passes a string owner to AgentCreate or the create and update requests, no longer type-checks. It must ship together with thunder-id/thunderid#6435, since the server change breaks the string form anyway.

🔄 Migration Guide

Read the owner's ID from agent.owner?.id, and pass the owner as an object:

<AgentCreate owner={{id: userId}} />

idType defaults to uuid and isLocal to true, so {id: userId} names a user of the same deployment.

---

Approach

• @thunderid/javascript: adds AgentOwner (id, optional idType, optional isLocal) and AgentOwnerIdType. Both are exported and used on Agent, CreateAgentRequest and UpdateAgentRequest.
• @thunderid/react and @thunderid/vue: BaseAgentDetails shows agent.owner?.id, still falling back to "No owner". AgentCreate takes the owner as an AgentOwner and sends it unchanged, so a caller can also name an external owner.
• Playgrounds (React, Vue, Next.js, Nuxt): the sample agents use the object, and the React AgentCreate story passes and prints the owner as {id}.

No new strings, so no translation changes.

Related Issues

• N/A

Related PRs

• Store an agent's owner as an object that can name an external owner thunderid#6435: the server change this follows. Its agent e2e tests pass once it moves to a release with this change.
• Samples: none affected. No sample reads an agent's owner or passes owner to AgentCreate (b2b/manage and the quickstarts were checked).

SDK parity

• Read and send an agent's owner as an object ios-sdks#43
• Read and send an agent's owner as an object android-sdks#51
• Read and send an agent's owner as an object flutter-sdks#65

Verification

• turbo run build typecheck --continue passes for every package and playground (the playgrounds failed before they were updated). The one exception is the @thunderid/nuxt typecheck, which cannot run locally because vue-tsc is not installed.
• Unit tests: @thunderid/javascript 1160 passed, @thunderid/react 730 passed, including new tests for the owner in BaseAgentDetails and the owner object sent by AgentCreate. In @thunderid/vue the admin component tests (64, including the new owner tests) pass. 12 tests in five unrelated files (flow select, user select wiring, consent decisions, key-value list, OTP field) fail locally with Failed to set an indexed property [0] on 'CSSStyleDeclaration'. None of them touch agents, and they were not run against main to confirm they fail there too.
• prettier --check passes on the changed files. lint reports existing errors in javascript, nextjs and express, none in the changed files.

Checklist

• Followed the contribution guidelines.
• Manual test round performed and verified.
• Documentation provided. (Add links if there are any)
• Tests provided. (Add links if there are any)
  • Unit Tests
  • Integration Tests
• Breaking changes. (Fill if applicable)
  • Breaking changes section filled.
  • breaking change label added. (The repository has no such label.)
• Cross-SDK parity. Exactly one of parity/prs-raised or parity/prs-not-needed added.
  • If parity/prs-raised, the port links are posted as a reply on the parity check's comment.

Security checks

• Followed secure coding standards.
• Confirmed that this PR doesn't commit any keys, passwords, tokens, usernames, or other secrets.

🤖 Generated with Claude Code

[coderabbitai]

Important

• Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: thunder-id/javascript-sdks
• Branch: main
• File: .coderabbit.yaml
• Commit: 3f130d1
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 6d427fec-e39d-4176-bd50-651f7d9204df

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[github-actions]

🔀 Cross-SDK feature parity, ports raised

This pull request is labelled parity/prs-raised, so the capability it introduces is expected in the other ThunderID SDKs as well.

Ports (DO NOT EDIT)

• thunder-id/ios-sdks, iOS => #43
• thunder-id/android-sdks, Android => #51
• thunder-id/flutter-sdks, Flutter => #65

3 of 3 sibling SDKs accounted for.

Every sibling SDK is accounted for.

The contract is in the SDK development specification.