Skip to content

v0.2.0

Latest

Choose a tag to compare

@github-actions github-actions released this 17 Oct 00:03
· 19 commits to main since this release
v0.2.0
f113381

agentsessions v0.2.0

Pre-1.0: the wire contract and the Go SPI may both change. agentsessions.v1 is a proto
namespace, not a stability promise.

There is no authentication, authorization, or transport security. Do not expose a host to an
untrusted network or treat it as multi-tenant. See docs/security.md.

Changelog

Features

  • f4cfb77 feat(agentsessionsd): add WithToolExecutors option (#161)
  • cfc6b5b feat(agentsessionsd): configure Unix-socket tool executors (#166)
  • b0d9e94 feat(api): add approval contract and storage projection (#130)
  • be79f98 feat(api): carry tool calls and results as message parts (#103)
  • e680ea1 feat(chatagent): read a system prompt from execution config (#78)
  • ca85f47 feat(client): pass execution config through ExecOptions (#124)
  • 7cbc035 feat(controller): approval engine and wire protocol
  • 552a23b feat(session): activate approval controls (#132)
  • 3366943 feat(session): add expected_last_seq to Resume (#141)
  • f41e942 feat(session): implement permanent soft deletion (#123)
  • e748c3f feat(site): polish prose measure, API reference, 404, nav state and diagrams (#167)
  • 7310d53 feat(substrate): reach harnesses through atenet-router on current substrate main (#91)
  • 8f519e2 feat: add reference conversational chat harness (#64)
  • 8d97860 feat: add the harness registry API and gate new sessions on retire (#100)
  • 01248d0 feat: register a harness by address instead of by recompiling (#70)
  • 773b0a9 feat: serve harness registry on a loopback operator listener (#121)

Fixes

  • 63e1927 fix(controller): check tool calls during replay and recovery (#86)
  • b212d49 fix(controller): keep each execution's config for replay and resume (#76)
  • c37ca4f fix(controller): preserve recorded intent after mediation rejection (#113)
  • a6a4176 fix(controller): preserve replay execution boundaries (#63)
  • 25522be fix(controller): recover a turn cut during a model call on resume (#94)
  • 15d9869 fix(controller): replay and resume v0.1.2 journals (#106)
  • 3a7b0a2 fix(harnesswire): keep declared tools in Describe (#84)
  • 3316c93 fix(openai): refuse redirects that leave the base URL's origin (#133)
  • 41021e7 fix(placement): keep suspended actors so Resume works (#83)
  • 4c1cead fix(placement): pass the host tool executor to controllers (#85)
  • 5c9fa53 fix(session): isolate unservable harness registrations (#120)
  • e050570 fix(session): reject identity on Fork (#77)
  • dabbff5 fix(session): resume the recorded harness and check its version (#107)
  • 5b23d52 fix(site): fix accessibility and layout defects on the docs site (#159)
  • 5ac10b1 fix(substrate): read the held snapshot from the actor snapshots list (#137)
  • 4b397d1 fix(wire): decode an empty bytes source as no bytes (#165)
  • 805d37a fix: make sink serialization cancellation-aware (#136)
  • c8c4ab4 fix: model transport fixes for real providers (#138)

Documentation

  • 74186b6 docs(site): serve the site from sessions.agent-primitives.dev (#142)
  • 1532a50 docs: add Copilot code review instructions (#148)
  • f5f49f5 docs: add draft AgentSessions protocol specification (#152)
  • c3d4b8f docs: add the project website (#67)
  • c56ebea docs: clarify deletion listing, cursor errors and journal upgrades (#162)
  • 9a3d755 docs: correct claims that predate the first release (#69)
  • cee2dd4 docs: fix install instructions and add a Kubernetes deployment (#66)
  • a4b2e5a docs: link the README to the site, and check markdown links in CI (#68)
  • d6f2d34 docs: relicense under MIT (#163)

Build and CI

  • 506e3d3 build(deps): bump golang.org/x/net to v0.60.0 and Go toolchain to 1.26.9 (#105)
  • 6030823 build(deps): bump the actions group with 11 updates (#73)
  • 1713bd3 build(deps): bump the go-dependencies group across 2 directories with 3 updates (#118)
  • 8cbff28 ci(substrate-e2e): cache substrate builds and add a main canary (#147)
  • ae06649 ci: group Dependabot Go updates across both modules (#117)
  • f22b9d9 ci: report required checks on every PR with a path filter job (#151)

Other

  • 18fddb9 chore: move project ownership to the agent-primitives maintainers (#143)
  • f113381 chore: prepare v0.2.0 (#172)
  • 2431601 refactor!: move Go module to github.com/agent-primitives/sessions (#146)
  • 14b4cf7 refactor(sqlitelog): drop unused COMPLETE deletion state (#164)

Verify an artifact

Every archive is checksummed, and each carries an SBOM alongside it:

sha256sum -c checksums.txt --ignore-missing

Public releases also carry signed build provenance, which ties an archive to the workflow,
commit, and runner that produced it:

gh attestation verify <file> --repo agent-primitives/sessions

Container images

ghcr.io/agent-primitives/sessions/agentsessionsd:v0.2.0
ghcr.io/agent-primitives/sessions/harnessnode:v0.2.0

Multi-arch (amd64 and arm64), built with ko from the tagged source, each with an SBOM pushed
alongside it. agentsessionsd runs as uid 65532; give its journal path a writable volume.