[allora2026]

Summary

• add typed IAM entitlement client commands and schemas
• evaluate equals, oneOf, and exists filters against plaintext event payloads
• send the opt-in condition header when updating conditional policies
• include built artifacts for immutable Git consumers during coordinated rollout

Compatibility

Existing IAM validation commands and unconditional policies retain their behavior. Filter evaluation fails closed for malformed or encrypted payload envelopes.

Validation

• bun test: 248 pass, 0 fail
• bun run typecheck
• bun run lint
• PR CI: green

Rollout

Release this SDK first. Downstream PRs are temporarily pinned to commit b22b8f2 and must move to the released semver before merge.