SDK migration & versioning

Published release: SDK 0.1.3 is publicly available on npm. Package installation does not activate new backend features.

The first public Kordiva SDK release was 0.1.0. The current public packages documented here are 0.1.3: server SDK, browser checkout and React button. Pin 0.1.3 while integrating; initial 0.x APIs may change in later minor releases.

1. Inventory your existing catalog, Checkout Link and raw HTTP integration.
2. Replace only supported calls with the matching typed methods. Keep legacy price decimals separate from normalized v1 minor-unit money.
3. Move keys out of browser code and retain server-side customer/cart authorization.
4. Keep stable cart/session references. Do not duplicate checkout during migration or rotate keys while an uncertain attempt remains unreconciled.
5. Validate using isolated TEST fixtures; then separately review LIVE eligibility and deployment.

This SDK deliberately forces hosted checkout, requires a LIVE creation idempotency key and does not retry POST. Those differ from permissive raw HTTP/native integrations. Existing backend native checkout remains unchanged; the SDK does not wrap it.

Public npm downloads do not grant API access or make new server features LIVE. Deploy and verify the corresponding Kordiva Store API entitlement policy separately, then use the environment-matched key with the approved merchant, product and market. Backend checkout idempotency replay remains bounded, not atomically exactly-once.

The Kordiva CMS storefront, Checkout Links and direct HTTP API remain supported without SDK. You can use the SDK and existing CMS together; Booking and Rent-a-Car remain separate modules.

Historical 0.1.0 compatibility notes

The credential-bearing SDK is blocked at browser import. Local HTTP navigation requires explicit { environment: 'TEST', allowLocalTest: true }, supports .localhost tenants and rejects LIVE handoffs. These notes describe the first public 0.1.0 behavior; use the current 0.1.3 examples for new integrations.

Related guides

SDK · Checkout · Security · API

0.1.3 additions

Compared with the earlier 0.1.1/0.1.2 releases, 0.1.3 adds Business subscriptions.get/list, checkout.createSubscription and the HMAC @kordiva/sdk/merchant-webhooks verifier. The old P-256 namespace and one-time confirmation states remain unchanged. Subscriptions · Business events. These additions are publicly available in 0.1.3 on npm.