v0.11.0

What's Changed

• feat(routines): ability wake targets alongside agents/chat by @chubes4 in #547

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.11.0/CHANGELOG.md

v0.10.1

What's Changed

• refactor(routines): WP_Agent_Routine_Backend contract; Action Scheduler becomes the default backend by @chubes4 in #545

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.10.1/CHANGELOG.md

v0.10.0

What's Changed

• feat(routines): generation fencing, stagger offsets, and reconcile for the Action Scheduler bridge by @chubes4 in #541
• fix: clear release preflight lint on agents-api.php and the AS stub by @chubes4 in #542
• style: align assignment after phpcs:ignore annotation by @chubes4 in #543

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.10.0/CHANGELOG.md

v0.9.0

What's Changed

• feat(auth): grant/revoke/list-users agent access abilities over WP_Agent_Access_Store by @chubes4 in #538

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.9.0/CHANGELOG.md

v0.8.0

What's Changed

• fix: serialize chat run state mutations by @chubes4 in #457
• fix: make bootstrap glob discovery portable by @chubes4 in #460
• fix: preserve conversation ownership REST statuses by @chubes4 in #462
• Add request-scoped workflow controller by @chubes4 in #464
• build(deps): bump actions/checkout from 6.0.3 to 7.0.1 in the actions-major group across 1 directory by @dependabot[bot] in #387
• Document successful pre-tool completion by @chubes4 in #466
• Security: make importer-derived agent provenance authoritative by @lezama in #467
• Security: reject duplicate artifact identities in agent packages by @lezama in #468
• Security: fail closed on non-truthy package artifact import results by @lezama in #469
• Security: make CPT conversation lock release value-conditional (TOCTOU) by @lezama in #470
• Security: enforce autonomous deny-by-default in the default authorization policy by @lezama in #471
• Security: redact workflow run metadata for non-manager readers by @lezama in #472
• Security: bound preserved citation metadata in tool result truncator by @lezama in #473
• Security: reject leaf symlinks in safe execution workspace file I/O by @lezama in #474
• Security: serialize non-atomic bridge queue read-modify-write under a lock by @lezama in #475
• Security: authorize task run actions against stored owner, not client-asserted session_owner by @lezama in #476
• Security: bind conversation session owner to authenticated principal and enforce workspace boundary by @lezama in #477
• Security: enforce exact-once terminal semantics for runtime-tool lifecycle by @lezama in #478
• Security: bind branch reconcile to stored suspension state and fail closed on lock loss by @lezama in #479
• Security: enforce exact-once run claim on JSON-RPC chat streaming by @lezama in #480
• Remove accidental absolute vendor symlink by @chubes4 in #481
• Fix principal-owned default chat sessions by @chubes4 in #483
• Honor explicit chat session principals by @chubes4 in #484
• fix: unify canonical chat authorization by @chubes4 in #494
• Expose host provider-turn dispatch through the default adapter by @chubes4 in #496
• Expose resolved host dispatch model context by @chubes4 in #498
• Resolve runtime profiles in default chat by @chubes4 in #500
• Expose JSON-RPC host projection by @chubes4 in #502
• Add principal memory layer vocabulary by @chubes4 in #504
• Resolve registered agent config per chat request by @chubes4 in #506
• Stream default chat provider deltas by @chubes4 in #508
• Preserve stateless JSON-RPC history by @chubes4 in #510
• Suspend client tools in the default chat runtime by @chubes4 in #513
• Accept typed chat continuations by @chubes4 in #515
• fix: emit provider-safe host tool names by @aaronware in #511
• Fixes #518 by @chubes4 in #519
• Add structured provider output by @chubes4 in #517
• fix: preserve normalized pending mediation requests by @chubes4 in #522
• Add external turn actors to execution principals by @chubes4 in #523
• Fix Composer discovery for public package classes by @chubes4 in #525
• Fix Composer discovery for all public classes by @chubes4 in #527
• Return typed workflow errors for run-control contention by @chubes4 in #530
• fix: make workflow fanout admission atomic by @chubes4 in #535
• fix: retry branch reconciliation without re-executing effects by @chubes4 in #534
• Fix reconcile lock expiry during aggregation by @chubes4 in #536
• Surface failed partial package adoption as incomplete by @lezama in #490
• Map task run failure into the run-result envelope error field by @lezama in #491
• Make generic run-control mutations atomic (workflow cancel/finish race) by @lezama in #492
• Security: fail closed when the conversation loop body throws by @lezama in #487

New Contributors

• @aaronware made their first contribution in #511

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.8.0/CHANGELOG.md

v0.7.0

What's Changed

• Remove legacy workflow drain compatibility by @chubes4 in #458

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.7.0/CHANGELOG.md

v0.6.1

What's Changed

• Use Docs Agent #148 and WP Codebox v0.12.23 by @chubes4 in #436
• Advance Docs Agent producer chain by @chubes4 in #437
• Hydrate Docs Agent verification dependencies by @chubes4 in #438
• Adopt Docs Agent completion contract by @chubes4 in #439
• Pin stable Docs Agent provenance by @chubes4 in #440
• Execute accepted Docs Agent helpers by @chubes4 in #441
• Pin exact completion report prompt by @chubes4 in #442
• Use deterministic Docs Agent completion by @chubes4 in #443
• Document workflow run awaiting by @chubes4 in #445
• fix: support authoritative tool parameter bindings by @chubes4 in #447
• fix: scope chat run control by workspace by @chubes4 in #450
• Fix async runner response accounting by @chubes4 in #454
• fix: bind queued messages to session owners by @chubes4 in #452
• Fix workflow foreground drain isolation by @chubes4 in #456

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.6.1/CHANGELOG.md

v0.6.0

What's Changed

• Add workflow result artifacts/logs fields by @chubes4 in #405
• docs: sync parallel and chat runtime docs by @chubes4 in #404
• feat: promote a generic scoped Action Scheduler drain into the workflow substrate by @chubes4 in #406
• Add workflow scoped drain await helper by @chubes4 in #409
• Handle HybridStore missing group claims in scoped drain by @chubes4 in #410
• feat: enforce capability ceiling at ability-backed tool execution (Stages B+C) by @chubes4 in #414
• feat: write-excluding safe default ceiling for autonomous executions (Stage A) by @chubes4 in #413
• feat: safe-by-default tool curation — write-capable tools opt-in for autonomous principals by @chubes4 in #411
• feat: add per-agent runtime model-binding primitive by @chubes4 in #416
• feat: add wp_agent_can_access_agent host access filter for list/check symmetry by @chubes4 in #418
• feat: emit audit action hook on capability-denied tool calls (#412 Stage D) by @chubes4 in #419
• Workflow branch executor: return truthful async runner dispatch result by @chubes4 in #420
• feat: add workflow run await service by @chubes4 in #422
• Run Docs Agent through the native executor by @chubes4 in #423
• Overlay trusted runtime tool declarations by @chubes4 in #425
• Expose compact tool observability in chat metadata by @chubes4 in #428
• Expose redacted tool observability metadata by @chubes4 in #427
• Update native Docs Agent producer pins by @chubes4 in #432
• Run Docs Agent by @github-actions[bot] in #430
• Supersede #429: refresh native Docs Agent producer contract by @chubes4 in #431
• Remove Data Machine-specific product blacklist entries by @chubes4 in #434
• Channels: per-agent routing for register_chat_handler() by @lezama in #324
• Prepare Composer bootstrap and parallel docs for v0.6.0 by @chubes4 in #435

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.6.0/CHANGELOG.md

v0.5.1

What's Changed

• Suspendable workflow run model + branch-executor seam (Phase 1) by @chubes4 in #391
• Action Scheduler branch executor for async parallel branches (Phase 2) by @chubes4 in #392
• Fix silent hang: serialize branch reconcile so concurrent completions never lose the resume by @chubes4 in #394
• Make the parallel-roles aggregator optional and generically named by @chubes4 in #395
• Fix async branch fanout: offload payload out of AS args + fail loud on enqueue failure by @chubes4 in #396
• Concurrent parallel branch fan-out + terminal-completion hook by @chubes4 in #397
• Fix parallel smoke test: stub do_action for the run-completed hook by @chubes4 in #398
• fix: drop orphaned test-CI version_target from homeboy.json by @chubes4 in #399
• fix: gate branch concurrency on in-flight (pending + in-progress), not pending alone by @chubes4 in #400
• fix: keep AS concurrency ceiling open for the terminal resume so a fan-out drains itself by @chubes4 in #401
• fix: derive async-runner loopback scheme+port from the internal server, not the public URL by @chubes4 in #402

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.5.1/CHANGELOG.md

v0.5.0

What's Changed

• Add JSON-RPC task method compatibility by @chubes4 in #363
• Fix runtime package ability late registration by @chubes4 in #364
• Fix runtime package helper late registration by @chubes4 in #365
• Neutralize product boundary test vocabulary by @chubes4 in #366
• Harden run read envelopes by @chubes4 in #367
• Document external chat run bridges by @chubes4 in #368
• feat: ship default provider-turn adapter and run_conversation facade by @chubes4 in #370
• refactor: scrub channel vendor names from generic Channels layer by @chubes4 in #374
• feat: add dispatch-provider seam to default provider-turn adapter by @chubes4 in #373
• Carry the full pending-action shape in the canonical approval envelope by @chubes4 in #375
• Dispatch tool calls to a registered executor by target_id by @chubes4 in #377
• Preserve a tool result's machine-readable error_type through normalization by @chubes4 in #379
• Ship a default provider-agnostic agents/chat runtime handler by @chubes4 in #380
• Add deterministic tool-call gating to the conversation loop by @chubes4 in #381
• Resolve model id string to ModelInterface in the default turn adapter by @chubes4 in #382
• Raise agentic per-request provider timeout from wp-ai-client's 30s default by @chubes4 in #383
• Wire enabled_tools so native bundle agents actually invoke tools (+ require_tool_use completion gate) by @chubes4 in #384
• Serialize empty function-declaration parameters as a JSON object, not [] by @chubes4 in #385
• Retry transient provider failures (429 + 5xx) with bounded backoff in the default turn adapter by @chubes4 in #386
• Add a generic parallel workflow step handler (agent fanout) by @chubes4 in #389

Full Changelog: https://github.com/Automattic/agents-api/blob/v0.5.0/CHANGELOG.md