Repository navigation
agentsessions v0.2.0
Pre-1.0: the wire contract and the Go SPI may both change. agentsessions.v1 is a proto
namespace, not a stability promise.
There is no authentication, authorization, or transport security. Do not expose a host to an
untrusted network or treat it as multi-tenant. See docs/security.md.
Changelog
Features
f4cfb77feat(agentsessionsd): add WithToolExecutors option (#161)cfc6b5bfeat(agentsessionsd): configure Unix-socket tool executors (#166)b0d9e94feat(api): add approval contract and storage projection (#130)be79f98feat(api): carry tool calls and results as message parts (#103)e680ea1feat(chatagent): read a system prompt from execution config (#78)ca85f47feat(client): pass execution config through ExecOptions (#124)7cbc035feat(controller): approval engine and wire protocol552a23bfeat(session): activate approval controls (#132)3366943feat(session): add expected_last_seq to Resume (#141)f41e942feat(session): implement permanent soft deletion (#123)e748c3ffeat(site): polish prose measure, API reference, 404, nav state and diagrams (#167)7310d53feat(substrate): reach harnesses through atenet-router on current substrate main (#91)8f519e2feat: add reference conversational chat harness (#64)8d97860feat: add the harness registry API and gate new sessions on retire (#100)01248d0feat: register a harness by address instead of by recompiling (#70)773b0a9feat: serve harness registry on a loopback operator listener (#121)
Fixes
63e1927fix(controller): check tool calls during replay and recovery (#86)b212d49fix(controller): keep each execution's config for replay and resume (#76)c37ca4ffix(controller): preserve recorded intent after mediation rejection (#113)a6a4176fix(controller): preserve replay execution boundaries (#63)25522befix(controller): recover a turn cut during a model call on resume (#94)15d9869fix(controller): replay and resume v0.1.2 journals (#106)3a7b0a2fix(harnesswire): keep declared tools in Describe (#84)3316c93fix(openai): refuse redirects that leave the base URL's origin (#133)41021e7fix(placement): keep suspended actors so Resume works (#83)4c1ceadfix(placement): pass the host tool executor to controllers (#85)5c9fa53fix(session): isolate unservable harness registrations (#120)e050570fix(session): reject identity on Fork (#77)dabbff5fix(session): resume the recorded harness and check its version (#107)5b23d52fix(site): fix accessibility and layout defects on the docs site (#159)5ac10b1fix(substrate): read the held snapshot from the actor snapshots list (#137)4b397d1fix(wire): decode an empty bytes source as no bytes (#165)805d37afix: make sink serialization cancellation-aware (#136)c8c4ab4fix: model transport fixes for real providers (#138)
Documentation
74186b6docs(site): serve the site from sessions.agent-primitives.dev (#142)1532a50docs: add Copilot code review instructions (#148)f5f49f5docs: add draft AgentSessions protocol specification (#152)c3d4b8fdocs: add the project website (#67)c56ebeadocs: clarify deletion listing, cursor errors and journal upgrades (#162)9a3d755docs: correct claims that predate the first release (#69)cee2dd4docs: fix install instructions and add a Kubernetes deployment (#66)a4b2e5adocs: link the README to the site, and check markdown links in CI (#68)d6f2d34docs: relicense under MIT (#163)
Build and CI
506e3d3build(deps): bump golang.org/x/net to v0.60.0 and Go toolchain to 1.26.9 (#105)6030823build(deps): bump the actions group with 11 updates (#73)1713bd3build(deps): bump the go-dependencies group across 2 directories with 3 updates (#118)8cbff28ci(substrate-e2e): cache substrate builds and add a main canary (#147)ae06649ci: group Dependabot Go updates across both modules (#117)f22b9d9ci: report required checks on every PR with a path filter job (#151)
Other
18fddb9chore: move project ownership to the agent-primitives maintainers (#143)f113381chore: prepare v0.2.0 (#172)2431601refactor!: move Go module to github.com/agent-primitives/sessions (#146)14b4cf7refactor(sqlitelog): drop unused COMPLETE deletion state (#164)
Verify an artifact
Every archive is checksummed, and each carries an SBOM alongside it:
sha256sum -c checksums.txt --ignore-missing
Public releases also carry signed build provenance, which ties an archive to the workflow,
commit, and runner that produced it:
gh attestation verify <file> --repo agent-primitives/sessions
Container images
ghcr.io/agent-primitives/sessions/agentsessionsd:v0.2.0
ghcr.io/agent-primitives/sessions/harnessnode:v0.2.0
Multi-arch (amd64 and arm64), built with ko from the tagged source, each with an SBOM pushed
alongside it. agentsessionsd runs as uid 65532; give its journal path a writable volume.