agent-engine: v0.4.0

0.4.0 (2026-07-31)

Features

• add agent auto mode config (a1d1016)
• add approval lifecycle primitives (5a9422f)
• add data class for hidm (6b0d71a)
• add examples/starter — a small, complete reference system (a27d072)
• add scoped session approval repository (ad5d487)
• approvals: propagate identity and grant metadata through HITL (3f46464)
• build first layer engine for hidm (3fa3b49)
• cli: handle tool approvals in local chat (03e26de)
• cli: share session approvals across application lifetime (621d8c4)
• composition: manage session approval repository lifetime (db5b0e3)
• coordinate function that decide when to invoke tool or wait for approve (be30aee)
• enable auto mode in enterprise knowledge example (62c1b87)
• examples: add deterministic approval demo (a69ac63)
• examples: add real LLM local MCP approval flow (854cae2)
• examples: demonstrate MCP session approvals (4597748)
• execute tool after approve (c690438)
• expose approval resume API (e633f98)
• fail startup validation on declared-but-unimplemented plugin stubs (0b6ee39)
• one-command local dev stack for the flagship example (b88ed5f)
• scaffold missing prompt files during generate and validate them at startup (#18) (cdefacb)
• startup validation fails on declared-but-unimplemented plugin stubs (89355a1)
• support fallback models and automatic retries on LLM failure (#25) (cfce637)
• support fallback models and automatic retries on LLM failure (#25) (b6b5018)
• widget: context-usage meter backed by the agent manager (160813d)
• widget: context-usage meter backed by the agent manager (2239cd5)
• widget: conversation thread list — list, new, switch, auto-title (40175e1)
• widget: conversation thread list — list, new, switch, auto-title (6a3d111)
• widget: fluent assistant-ui-style UI and internal refactor (ee6ec09)
• widget: fluent assistant-ui-style UI and internal refactor (5dde997)
• wire approvals into langgraph runtime (2b325ed)

Bug Fixes

• approvals: harden interrupted tool resumption (4da978b)
• bundle all built-in providers and optional integrations into base deps (d2284bb)
• bundle all built-in providers and optional integrations into base deps (c862e54)
• change the pending object property to description (9186999)
• deploy: publish multi-arch container image and optimize Docker layer caching (d1be5de)
• deploy: revert Dockerfile layer caching optimization to fix build backend lookup (73fb756)
• generate: derive the plugin package from import_roots, not the folder name (56f24f3)
• generate: derive the plugin package from import_roots, not the folder name (50e1db9)
• GHSA-f4xh-w4cj-qxq8 security vulnerability (3529eaf)
• hooks: log only meaningful hook actions (25b25f2)
• make hidm docs simple (2fda83d)
• orchestrator: load both system and orchestrator prompt files (65b2812)
• orchestrator: load both system and orchestrator prompt files (677cca2), closes #38
• orchestrator: load both system and orchestrator prompt files (8b1eec5), closes #38
• persistence: make create_session insert atomically (506d21d)
• persistence: write nothing when the conversation id is taken (144cb4c)
• publish multi-arch container image (linux/amd64 + linux/arm64) — closes #37 (cbd37c0)
• resolve pre-existing lint and mypy errors so CI lands green (7976bdc)
• runtime: pass structured conversation history (19f8281)
• support backward compatible for auto mode (cb4b695)
• test: repair the header name in the conversation listing test (2f44394)
• upgrade langsmith to >=0.8.18 to address GHSA-f4xh-w4cj-qxq8 (9ba25f8)
• upgrade langsmith to 0.8.18 (GHSA-f4xh-w4cj-qxq8) (3399cfd)
• use typing_extensions.TypedDict in local MCP tools for Python 3.11 (98cd6c1)
• widget: authorize conversations against the caller, not the id (3aa5b40)
• widget: close the remaining ownership-write and identity edges (ea80caf)
• widget: derive turn identity from the session, scope storage per user (f074134)
• widget: fix the owner of a conversation at creation (eb998d2)
• widget: name the meter for what it measures — a token budget (e4705b0)

Reverts

• leave the enterprise example exactly as it was (be900bf)

Documentation

• add human-in-the-loop approval guide (c1e78d1)
• add human-in-the-loop approval guide (d249b6f)
• add human-in-the-loop design (d9d321b)
• document agent-level auto field for HITL approval bypass (0de6731)
• document agent-level auto field for HITL (e43851b)
• hitl: document session approval scope and lifecycle (a7dfedd)
• restore README docs paths (a083a24)
• runtime: document conversational MCP validation (1e44ffe)
• update hidm docs (bf60f9e)
• update YAML and add auto property (2e3d05e)

---

Container image:

docker pull ghcr.io/extra-org/extra:agent-engine-v0.4.0