chore(release): 0.8.2

.github/workflows/publish.yaml

@@ -111,7 +111,7 @@ jobs:
           # Downstream-only patch releases: versions upstream never published,
           # each mapped to the upstream release its tree is ported from.
           case "$VERSION" in
-            0.8.1) BASE_VERSION="0.8.0" ;;
+            0.8.1 | 0.8.2) BASE_VERSION="0.8.0" ;;
             *) BASE_VERSION="$VERSION" ;;
           esac
           TAG="@openrouter/agent@${BASE_VERSION}"

pyproject.toml

@@ -8,7 +8,7 @@ name = "openrouter-agent-sdk"
 # says plainly which upstream version it is a port of. The verifier enforces the
 # match against upstream's package.json during a sync. See the Package Version
 # section of .upstreamer/upstreamer.md.
-version = "0.8.1"
+version = "0.8.2"
 description = "Python port of @openrouter/agent: OpenRouter tool orchestration, streaming, state, and format compatibility."
 readme = "README.md"
 requires-python = ">=3.10"

upstreamer-changelog.md

@@ -1,5 +1,12 @@
 # openrouter-agent-sdk Changelog
 
+## 0.8.2 — stop-condition approval fix
+
+Downstream-only fix on top of the 0.8.0 port; no new upstream work.
+
+- **Security:** tool calls that run when a `stop_when` condition fires (final-response handling) now go through the same approval check as a normal turn. Calls that require approval, including tools with `require_approval=True`, pause as `awaiting_approval` instead of executing. Before this, they ran with no approval decision.
+- `call_model` raises when two client tools share a name (shipped in 0.8.1 but missing from its notes).
+
 ## 0.8.1 — approval fix
 
 Downstream-only fix on top of the 0.8.0 port; no new upstream work.