v0.1.56

What's Changed

• Fix published Runtime SDK contract pin by @kinzhi in #27
• Harden OAuth handoff storage by @kinzhi in #26
• Persist immutable Runtime transport evidence by @kinzhi in #28
• Preserve deployed migration 079 and move transport evidence to 080 by @kinzhi in #29
• feat(userdash): expose runtime transport in call records by @kinzhi in #30
• fix(auth): default OAuth codes to subject-only by @kinzhi in #31
• build(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #23
• build(deps): bump github.com/alicebob/miniredis/v2 from 2.35.0 to 2.38.0 by @dependabot[bot] in #24
• build(deps): bump golang.org/x/crypto from 0.52.0 to 0.54.0 by @dependabot[bot] in #25
• docs: add Chinese Runtime load-test guide by @kinzhi in #32
• fix: harden platform flows and runtime dispatch by @kinzhi in #33
• perf: event-drive Runtime and high-frequency Core work by @kinzhi in #36
• build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot[bot] in #35
• build(deps): bump actions/setup-go from 5 to 7 by @dependabot[bot] in #34
• feat(runtime): add automatic mTLS credentials by @kinzhi in #37
• fix(runtime): default to token-only transport by @kinzhi in #38
• test(a2a): lock native REST route dispatch by @kinzhi in #39
• Use lease-backed Runtime session availability by @kinzhi in #40
• refactor: squash Core schema into current initializer by @kinzhi in #41
• fix(runtime): authorize token-only Agent delegation by @kinzhi in #42
• fix(migrations): match deployed schema fingerprint by @kinzhi in #43
• perf: reduce database read write amplification by @kinzhi in #44
• feat(runtime): complete plugin lifecycle and trusted conversations by @kinzhi in #45
• fix(runtime): expose attach-only discovery policy by @kinzhi in #46
• fix(runtime): persist trusted conversation metadata at creation by @kinzhi in #47
• fix: bound runtime credential revocation by @kinzhi in #48
• perf(runtime): bound WebSocket attempt concurrency by @kinzhi in #49
• feat(runtime): attach opaque Core-owned authority by @kinzhi in #50
• feat: enforce Browser Agent execution profile and human control by @kinzhi in #52
• test: configure Runtime principal scope roots by @kinzhi in #53
• Revoke JWT sessions after password changes by @kinzhi in #54
• feat(browser): enforce full interaction authority by @kinzhi in #55
• fix(migrations): allow reviewed schema 88 bridge by @kinzhi in #57
• Fix Runtime A2A blocking and reviewed v86 migration bridge by @kinzhi in #58
• fix: optimize audit-remediation database reads by @kinzhi in #59
• perf: avoid duplicate workflow and artifact reads by @kinzhi in #60
• fix(api): complete browser findings remediation by @kinzhi in #61
• fix(runtime): sanitize third-party Agent metadata by @kinzhi in #65
• fix(agent): let owners inspect disabled agents by slug by @kinzhi in #66
• fix(runtime): keep workbench aligned with live leases by @kinzhi in #67
• build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in #63
• build(deps): bump github.com/redis/go-redis/v9 from 9.21.0 to 9.22.0 by @dependabot[bot] in #62
• build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @dependabot[bot] in #56
• fix(runtime): preserve attempt identity in browser observation by @kinzhi in #72
• fix(runtime): accept canonical base64 frame bytes by @kinzhi in #73
• fix: close browser observation on run cancel by @kinzhi in #74
• fix(observer): harden frame decoding and lifecycle closure by @kinzhi in #76
• fix(runtime): preserve Playground Browser continuity by @kinzhi in #77
• feat(runtime): follow Browser observation across conversation Runs by @kinzhi in #78

Full Changelog: v0.1.41...v0.1.56