v1.6.0

What's Changed

• Fix panic during oplog archive of agent in deleted environment by @mschuwalow in #3568
• maintenance branches by @vigoo in #3576
• Updated to wasmtime v45 by @vigoo in #3385
• Introducing read-only methods in agent type and all SDKs by @vigoo in #3572
• Using the new test-r shared dependency features by @vigoo in #3573
• CLI CI opt by @noise64 in #3575
• Make wasm-rpc resource creation durable by @mschuwalow in #3566
• agent-permissions: card data model and postgres schema by @mschuwalow in #3515
• agent-permissions: make account-email immutable after creation by @mschuwalow in #3580
• Skill harness fixes by @vigoo in #3579
• agent-permissions: pattern-grant types and subsumption engine by @mschuwalow in #3578
• agent-permissions: permission share crud by @mschuwalow in #3582
• Disable periodic skill-harness runs by @vigoo in #3588
• Use postgres 17.7 in tests (same as in prod) by @vigoo in #3587
• Read-only method side-effect violation error by @vigoo in #3574
• Read-only method result caching by @vigoo in #3581
• Handle read-only method cache on the HTTP API level by @vigoo in #3583
• agent-permissions: implement permission share logic and validations by @mschuwalow in #3584
• agent-permissions: account-wide token root cards by @mschuwalow in #3589
• Fixes tracing configuration for host-rpc test deps in integration tests by @vigoo in #3592
• Executor and integration tests and fixes for read-only method caching by @vigoo in #3594
• Windows moonbit fixes + add missing tool version checks by @noise64 in #3598
• Add observability metrics for cloud density benchmarks by @kmatasfp in #3590
• feat: cloud-mode TestMode::Cloud for benchmarks with best-effort cleanup by @kmatasfp in #3596
• Value type refactoring 1 by @vigoo in #3593
• Merging the docs repo to golem by @vigoo in #3597
• Fixed vercel deploy by @vigoo in #3608
• Agent status record optimization by @vigoo in #3618
• agent-permissions: account root card by @mschuwalow in #3595
• agent-permissions: use cards for existing permission checks (1) by @mschuwalow in #3599
• Value type refactoring 2 by @vigoo in #3605
• agent-permissions: remove token root card by @mschuwalow in #3602
• agent-permissions: use cards for existing permission checks (2) by @mschuwalow in #3610
• agent-permissions: use cards for existing permission checks (3) by @mschuwalow in #3612
• Unified agent error formatting for CLI and REPL by @noise64 in #3624
• Migrated MCP export by @vigoo in #3621
• agent-permissions: remove old environment-shares logic & add permission shares to cli by @mschuwalow in #3613
• Migrated OpenAPI exporter by @vigoo in #3622
• Toon format, stream event cleanups and manifest upgrade handling by @noise64 in #3609
• agent-permissions: make cards more typesafe & consistently use account email everywhere by @mschuwalow in #3616
• agent-permission: list_visible_environments cleanup by @mschuwalow in #3617
• Missing cases in proptest strategy by @vigoo in #3635
• Read-only methods skills & doc by @vigoo in #3634
• Concurrent durability by @vigoo in #3628
• agent-permissions: various repo and service cleanups by @mschuwalow in #3619
• Minor skill update by @vigoo in #3645
• Trap-based retry delay and interruption handling fixes by @vigoo in #3636
• agent-permissions: initial agent wallet by @mschuwalow in #3627
• feat(worker-executor): replace memory semaphore with measured-headroom admission controller by @kmatasfp in #3640
• perf(worker-executor): use mimalloc with metrics, enable thin LTO and pin target-cpu by @kmatasfp in #3642
• feat(worker-executor): expose tokio runtime metrics via tokio-metrics crate by @kmatasfp in #3641
• test-r update by @vigoo in #3648
• Value type refactoring 5 by @vigoo in #3629
• Optimize cranelift in dev/dev-ci builds by @vigoo in #3650
• social net blogpost by @justcoon in #3614
• agent-permissions: store agent cards in registry service by @mschuwalow in #3631
• Using the forked wit-bindgen by @vigoo in #3651
• Update to latest desert-rust by @vigoo in #3656
• agent-permissions: per agent revoked card queue by @mschuwalow in #3632
• TS SDK Optimization by @vigoo in #3660
• fix(worker-executor): bound component cache size and concurrent compilations by @kmatasfp in #3643
• MoonBit bridge generator by @vigoo in #3659
• Scala bridge by @vigoo in #3655
• Value type refactoring 5 fix 1 by @vigoo in #3657
• Follow-up tests and fixes for the schema refactor by @vigoo in #3661
• Retries and increaesd pool size by @vigoo in #3663
• CLI structured output cleanups by @noise64 in #3633
• agent-permissions: card installation host function by @mschuwalow in #3637
• Tools WIT, initial version by @vigoo in #3665
• Fix: ephemeral worker cleanup after invocation completion by @kmatasfp in #3652
• Value type refactoring 6 by @vigoo in #3662
• Better agent invocation oplog entry rendering in cli by @vigoo in #3668
• Introduce localServer and subdomain for deployments. by @noise64 in #3667
• Reworked WIT syncing to avoid retriggered builds on repeated cargo make build by @noise64 in #3670
• Add metadata to SKILL.md for CLI manifest schema modification skill by @noise64 in #3675
• Ephemeral agent listing fixes by @vigoo in #3671
• Avoid reactivating rpc targets during replay by @vigoo in #3669
• Retry executor test cleanup by @vigoo in #3676
• Opaque secrets by @vigoo in #3674
• Rust tool definition macros by @vigoo in #3673
• agent-permissions: cli integration & api improvements by @mschuwalow in #3646
• Matrix dependency for sqlite/psql integ tests by @vigoo in #3682
• Rust tool client generator macro by @vigoo in #3681
• agent-permissions: various cleanups and improvements by @mschuwalow in #3649
• agent-permissions: handle card expiration by @mschuwalow in #3672
• Rust guest bridge generation by @vigoo in #3683
• Tools support for the Scala SDK by @vigoo in #3687
• REST API and CLI commands for permissions card management by @vigoo in #3688
• RAG blogpost by @justcoon in #3686
• Clippy fixes for Rust 1.97 by @vigoo in #3689
• Add app version resolution by @noise64 in #3684
• Scala tool bridge by @vigoo in #3693
• TS SDK redesign by @noise64 in #3680
• Fix snapshot recovery by @kmatasfp in #3679
• Moonbit tool definition support by @vigoo in #3698
• Performance regression fix by @vigoo in #3701
• Ephemeral hot path optimization by @vigoo in #3699
• MoonBit guest bridge generator by @vigoo in #3704
• Port batch oplog replay by @kmatasfp in #3697
• Use SchemaValue instead of raw Json in the API by @vigoo in #3710
• website: add Google Ads and Contentsquare tracking tags by @mdegoes in #3706
• wit-bindgen version fix by @vigoo in #3713
• TypeScript tool definition and typed client by @vigoo in #3708
• Better ts config handling, TS docs and skill fixes by @noise64 in #3711
• Port scheduler improvements by @kmatasfp in #3703
• WASI P3 migration by @vigoo in #3638
• Fix promise completion wakeup races by @kmatasfp in #3715
• Fix oplog index race behind checkout_v2_regressions flakiness by @vigoo in #3717
• Follow-up fixes for the ephemeral hot-path optimisation by @vigoo in #3714
• TS guest rpc/tool bridge by @vigoo in #3716
• Fix localServer to drive the builtin local env everywhere. by @noise64 in #3721
• TS SDK cleanups by @noise64 in #3722
• Add storage billing and per-agent limits by @kmatasfp in #3723
• Update wasm-rquickjs to 0.4.1 by @noise64 in #3725
• Scope spans to operations and link handed-off work by @kmatasfp in #3726
• Bill allocated linear memory by @kmatasfp in #3727
• Unify wasmtime configuration to fix precompilation by @vigoo in #3730
• Unified union discriminator overlap validation in all SDKs by @vigoo in #3733
• MoonBit tool implementation fixes by @vigoo in #3734
• CLI cleanups by @noise64 in #3709
• Fix behavior parity issues between various rpc clients by @vigoo in #3735
• Fix OTLP benchmark tracing guidance by @kmatasfp in #3732
• Rename account usage CLI heading to "Account usage" by @kmatasfp in #3731
• Directly generating SchemaGraph literals in bridges by @vigoo in #3736
• Upgrade Ignite RDBMS backend to ignite-v2-client 1.0.1 by @JohnSColeman in #3729
• Tool definition in manifest and registry by @vigoo in #3738
• Tool definition host functions by @vigoo in #3739
• Support running nightly benchmarks in Amp orbs by @vigoo in #3741
• Removed persistence mode and redesigned custom durability by @vigoo in #3740
• Add runner metadata to benchmark results by @vigoo in #3744
• Add production Amp orb benchmark publishing by @vigoo in #3745
• Analyze nightly Amp orb benchmark regressions by @vigoo in #3747
• Tool sidecar instances by @vigoo in #3750
• Reduce default workspace dependency graph by @vigoo in #3751
• Install Rust quality components in Amp orbs by @vigoo in #3753
• Fix replay of durable calls completed in the crash window by @vigoo in #3749
• Agent permissions by @vigoo in #3712
• Update test-r to 3.0.12 by @vigoo in #3760
• Update the pinned Wasmtime revision and thread MemoryKind through the limiter by @kmatasfp in #3765
• Extract durable call session coordination by @vigoo in #3767
• Fix stale nightly benchmark components by @vigoo in #3769
• Rust tool middlewares by @vigoo in #3758
• Scope local verification guidance by @vigoo in #3770
• Centralize worker lifecycle authority by @vigoo in #3762
• Make card transfer test oplog assertions agent-scoped by @vigoo in #3768
• Simplify durable host call state machines by @vigoo in #3772
• Key compiled components by Wasmtime compatibility by @vigoo in #3759
• Clean orb benchmark state before nightly runs by @vigoo in #3776
• Fix replay ordering for streaming HTTP body delivery by @vigoo in #3771
• Streaming invocation by @vigoo in #3746
• Use a canonical oplog reader by @vigoo in #3778
• TS tool middleware support by @vigoo in #3775
• Scala tool middleware definition supprot by @vigoo in #3780
• MoonBit tool middleware definition support by @vigoo in #3779
• Update to the latest zio-blocks by @vigoo in #3781
• Keep Amp orb benchmark toolchain in sync by @vigoo in #3784
• Update Desert to 0.1.10 by @vigoo in #3785
• Clean benchmark object store before Amp orb runs by @vigoo in #3791
• Fix P3 HTTP replay after missing consume-body scope start by @vigoo in #3786
• Fix snapshot recovery across automatic updates by @vigoo in #3782
• Optimize Amp orb setup by @vigoo in #3794
• Agent instructions improvements by @vigoo in #3793
• Update to MoonBit 0.10.11 by @vigoo in #3792
• vouch by @vigoo in #3803
• Stop durable stream reconciler before deleting oplog by @vigoo in #3800
• Fix CLI streaming invocation close race by @vigoo in #3804
• Resolve MCP agent types during deployment by @vigoo in #3783
• Fix MoonBit multi-component embed paths by @vigoo in #3806
• Replace the shard manager's pod-keyed routing table with an executor-keyed ShardLeaseState by @Aditya1404Sal in #3757
• Unify filesystem storage accounting by @kmatasfp in #3728
• Final TS streaming support by @vigoo in #3810
• Make the shard manager's persistence compare-and-swap based across local and distributed backends by @Aditya1404Sal in #3790
• Replay resumed output streams in tree order (fix flaky concurrent_nested_sibling_output_replays_after_executor_restart) by @vigoo in #3814
• Unify account usage reporting across API and CLI by @kmatasfp in #3809
• Final Scala streaming support by @vigoo in #3815
• Reject streaming agent methods from MCP export by @vigoo in #3807
• Streaming invocation public API and bridge support by @vigoo in #3789
• Warm up restored SQLite connections and fall back to full replay when a snapshot's tail diverges by @vigoo in #3818
• Add global known-flaky-tests report by @vigoo in #3823
• Replace flaky test reporter with Rust by @vigoo in #3825
• Speed up CI: single-pass build, more it-cli shards, parallel SDK tests by @vigoo in #3822
• Separate active and resolved flaky tests by @vigoo in #3826
• Avoid flaky report API rate exhaustion by @vigoo in #3827
• Finish durable streaming sessions completed during replay and stop worker loops on executor shutdown by @vigoo in #3817
• Add MoonBit streaming method support by @vigoo in #3821
• Use tools from other environments by @vigoo in #3788
• Tool invoke implementation by @vigoo in #3787
• Evict exclusively cached unloaded workers after TTL by @vigoo in #3835
• Reduce copies in agent invocation hot path by @vigoo in #3831
• Fix indeterminate oplog writes and batch persistence by @vigoo in #3833
• Avoid cloning durable host call responses by @vigoo in #3832
• Bound invocation result state in worker status by @vigoo in #3820
• Configure local server system memory overrides by @noise64 in #3840
• Restore invocation performance and optimize durable streaming (GOL-514) by @vigoo in #3837
• Shard manager Leader Election Implementation by @Aditya1404Sal in #3824
• MoonBit related fixes by @noise64 in #3808
• Fix the build on main: launch test's RunDetails is missing leadership by @kmatasfp in #3847
• Port #3830 improvements to main by @kmatasfp in #3846
• Restore exclusive monotonic clock calls and verify real recovery history by @vigoo in #3855
• Port #3764 to main: report a delete whose reply was lost as having succeeded by @kmatasfp in #3851
• Port #3752 to main: answer callers whose agent moved by @kmatasfp in #3850
• Port #3748 to main: executor client connect timeout by @kmatasfp in #3852
• Port #3774 to main: retry transient key-value storage failures in every backend by @kmatasfp in #3853
• Port #3763 to main: fix the second snapshot-based update on an agent by @kmatasfp in #3849
• Expose entity-aware owner oplog attribution by @vigoo in #3816
• Port #3720 to main: cap http benchmark retries and log failure bodies by @kmatasfp in #3848
• Prevent external capability forgery and support guest RPC bridges by @vigoo in #3836
• Redesign snapshot restoration for agents by @vigoo in #3819
• Support streaming agent methods in generated guest bridges by @vigoo in #3838
• Add assignment tracking test coverage by @vigoo in #3859
• Use HTTPS Ubuntu mirrors in managed XFS CI by @vigoo in #3866
• Remove ineffective promise pre-registration by @vigoo in #3858
• Add worker executor durable execution guidance (AGENTS.md files and skill) by @vigoo in #3865
• Add generic agent reflection and TypeScript clients by @noise64 in #3777
• Preserve streaming RPC idempotency across atomic rollback by @vigoo in #3869
• Fix snapshot recovery for component initializer host calls by @vigoo in #3856
• Fix HTTP replay settlement and cancellation with unobserved trailers by @vigoo in #3857
• Reduce worker execution allocation and copying by @vigoo in #3844
• Fix snapshot recovery after manual component updates by @vigoo in #3860
• Atomic CLI related leftovers around name based lookups by @noise64 in #3798
• Effect.ts SDK for Golem 1.6 by @vigoo in #3867
• Implement Shard lease protocol: RenewShardLease, Deregister, epoch in AssignShards by @Aditya1404Sal in #3834
• Built-in and native tools by @vigoo in #3841
• Clarify ambient deployment tool documentation by @vigoo in #3885
• Invalidate deletion caches before unloading workers by @vigoo in #3889
• Fix MoonBit tool stdout ownership and completion by @vigoo in #3883
• Fix Scala tool stdout validation and lifecycle by @vigoo in #3881
• cargo make clean by @vigoo in #3871
• Catch up worker status across automatic oplog commits by @vigoo in #3887
• Honor immediate recovery for suspended and retrying workers by @vigoo in #3888
• Fix durable host recovery with generic replay-tail resolution by @vigoo in #3861
• Allow revert across successful snapshot updates by @vigoo in #3879
• Persist agent startup and replay failures by @vigoo in #3882
• Tool middleware registry and cli support by @vigoo in #3842
• Add failed invocation recovery guidance by @vigoo in #3878
• CLI cleanups: builtin profiles, usage errors, best-effort agent bulk ops, local server port warning, config file locking by @noise64 in #3898
• Harden agent file handling and TypeScript runtime packaging by @noise64 in #3797
• Preserve filesystem ownership across failed deletion by @kmatasfp in #3899
• Port #3802 to main: archive ephemeral oplogs from a sweep by @kmatasfp in #3886
• Fix RPC permit deadlocks with scheduled caller suspension by @vigoo in #3870
• Durable Streams: initial export side (DS-1–DS-6) by @vigoo in #3854
• Delete blob directories by key range instead of a case-insensitive LIKE by @kmatasfp in #3893
• Make delete_dir behave the same on every blob storage backend by @kmatasfp in #3896
• Native external-tool invocation on existing and ephemeral agents by @vigoo in #3897
• Publish fork targets atomically from hidden oplog stages by @vigoo in #3918
• Implement tool middleware invocation chains (GOL-439) by @vigoo in #3914
• Durable Streams support follow-up by @vigoo in #3877
• DS-7: external Durable Streams reads and appends across SDKs by @vigoo in #3913
• Stop tracking generated Effect SDK WASMs by @vigoo in #3919
• GOL-172 Add local semantic retries to MoonBit SDK by @vigoo in #3903
• GOL-172: Add user-space retry execution to TypeScript SDK by @vigoo in #3905
• GOL-172: Add user-space retry policies to Rust SDK by @vigoo in #3904
• GOL-172: Add user-space retry execution to Scala SDK by @vigoo in #3906
• TS and Effect reflection cleanups + tools by @noise64 in #3873
• Rust SDK: agent and tool reflection by @noise64 in #3874
• Roll out stable indexed scans by @vigoo in #3908
• Compact raw oplog entries by @vigoo in #3912
• Validate raw retry policy factors at host ingress by @vigoo in #3920
• Scala SDK: agent and tool reflection by @noise64 in #3875
• MoonBit SDK: agent and tool reflection by @noise64 in #3876
• Defer invocation completion status folding (GOL-628) by @vigoo in #3935
• Document MoonBit cross-component agent RPC by @vigoo in #3941
• Simplify SDKs to a single agent world by @vigoo in #3923
• Upgrade to Effect v4 rc.117 by @vigoo in #3934
• Implement durable stream expiry and recreation by @vigoo in #3928
• Add skills for streaming agent methods by @vigoo in #3952
• Add streaming CLI templates by @vigoo in #3951
• Align tool stdout completion across SDKs by @vigoo in #3921
• Add Effect AI tool integration by @vigoo in #3924
• Redesign Scala typed tool clients around shared projections by @vigoo in #3930
• Support independent secret restrictions for tool middleware by @vigoo in #3936
• Fix span recording test callsite race by @vigoo in #3955
• MCP imports: durable native bridge, OAuth and typed clients by @vigoo in #3907
• Remove the debugging service by @vigoo in #3956
• Make labelled blob storage facade consistent by @vigoo in #3946
• Stop durable stream reconciliation on executor shutdown by @vigoo in #3948
• Custom HTTP handlers by @vigoo in #3880
• Scope worker caches by agent fingerprint by @vigoo in #3917
• Add Durable Streams route customizations by @vigoo in #3957
• Add Effect HttpRouter and generated OpenAPI integration (GOL-566) by @vigoo in #3959
• Fix host-managed TimeBox recovery semantics by @vigoo in #3922
• Fix synchronous RPC replay across suspension and restart by @vigoo in #3962
• Update public documentation for Golem 1.6 by @vigoo in #3964
• Retain unclaimed durable Starts during replay and attribute shared-cursor positional reads by @vigoo in #3967
• Replace durable-stream attachment polling with lifecycle recovery by @vigoo in #3958
• Complete Durable Streams documentation, templates, and skills by @vigoo in #3965
• Add durable streaming recovery benchmarks by @vigoo in #3966
• Hide HTTP routers from agent tooling by @vigoo in #3960
• Embed span lifecycle in durable operations and update OTLP telemetry (GOL-458) by @vigoo in #3969
• Fix nightly benchmark component build by @vigoo in #3971
• Finish reflection follow-ups and exhaustive validation by @noise64 in #3937
• Implement Oplog epoch fencing: oplog_metadata, epoch-checked appends, ShardLost relinquish by @Aditya1404Sal in #3845
• Certify custom HTTP handler conformance by @vigoo in #3973
• ci: drop effect sdk windows package check job by @noise64 in #3974
• Run storage contract tests in CI by @vigoo in #3975
• Fix nested tool trap cleanup stranding the owner invocation by @vigoo in #3978
• Make entity Store disposal explicit and verify trap cleanup by @vigoo in #3983
• CLI leftovers by @noise64 in #3972
• Remove loaded configuration dump flags by @vigoo in #3984
• Move S3 test infrastructure to Adobe S3Mock by @vigoo in #3945
• Fix Sep 28 nightly benchmark failures by @vigoo in #3977
• Document embedded SQLite and Turso support by @vigoo in #3985
• Fix P2 response body retry permit handoff by @vigoo in #3987
• Test the shard manager's service layer against SQLite, Postgres and etcd, and add a distributed-mode compose example by @Aditya1404Sal in #3963
• Use native SchemaValue JSON for invocation sessions by @vigoo in #3982
• Add built-in filesystem tools and complete SDK size optimizations by @vigoo in #3939
• Add optional tool stderr end to end by @vigoo in #3992
• Add Jev and Golem decision-making blog post by @vigoo in #3997
• Migrate Scala SDK streams to ZIO Blocks async streams by @vigoo in #3991
• Recover workers from HTTP payload outages by @vigoo in #3998
• Generate MoonBit WIT bindings on demand by @vigoo in #4000
• Remove duplicated Golem app skills by @vigoo in #4004
• Store the shard manager's quota state in etcd in distributed mode by @Aditya1404Sal in #3980
• Add first-class UUID schema support by @vigoo in #3990
• Make oplog archive failures non-fatal by @vigoo in #3953
• Fix standalone server not catching SIGINT/SIGTERM by @baltasarblanco in #3799
• Fix platform-independent blob storage keys by @vigoo in #3943
• Fix Amp-orb nightly benchmark recovery failures by @vigoo in #3996
• Address tool stderr review follow-ups by @vigoo in #3999
• Fix streaming history benchmark invocation encoding by @vigoo in #4010
• Fix gRPC recovery test fork/fd-inheritance race by @vigoo in #4011
• Support authorization code flow with PKCE for HTTP APIs by @vigoo in #3995
• Add snapshot-assisted automatic agent updates by @vigoo in #3968
• Fix sandbox positional I/O on Windows by @vigoo in #4012
• Generate client-free type-only external Rust bridges by @vigoo in #4003
• Add configurable Rust bridge derives and dependencies by @vigoo in #4001
• Add built-in JavaScript and TypeScript tools by @noise64 in #4005
• Update Effect SDK to Effect 4 by @vigoo in #4020
• Add built-in web fetch tool by @vigoo in #4009
• Add filesystem discovery tools and path policy middleware by @vigoo in #4007
• Fix HTTP response resume offsets after oplog jumps by @vigoo in #4014
• Sort public resume cursors by durable stream ID by @vigoo in #4016
• Publish npm SDK prereleases under the next dist-tag by @noise64 in #4023
• Make P2 HTTP resend header waits interruptible by @vigoo in #4021
• Pin npm 11 in SDK publish workflows by @noise64 in #4024
• Add per-account blob storage quota by @vigoo in #3954
• Run moon update before MoonBit binding checks in the publish workflow by @noise64 in #4025
• Publish MoonBit modules outside the moon.work workspace by @noise64 in #4026
• Fix ephemeral durable stream admission race by @vigoo in #4015
• Implement local Git built-in tool workflows by @vigoo in #4002
• Qualify automatic update walkthrough SVG for the full replay strategy by @vigoo in #4028
• Move schema protos into golem-schema and publish it for the Rust SDK by @noise64 in #4027
• Add execution-only Bash as a built-in Golem tool by @Aditya1404Sal in #3929
• Publish golem-tool-metadata with Golem releases by @noise64 in #4030
• Separate aggregate throughput benchmarks by @vigoo in #4029
• Fence the oplog archive transfer on the shard epoch (GOL-676) by @Aditya1404Sal in #3979
• Bump CLI default SDK versions to the 1.6 release candidates by @noise64 in #4032
• Fix nightly benchmark result publication by @vigoo in #4036
• Update GitHub Actions benchmark publisher by @vigoo in #4037
• Serve queued quota demand immediately after a demand-blind acquire by @vigoo in #4031
• Fix per-handle websocket reconnect race with concurrent accessors by @vigoo in #4033
• Fix Effect SDK capability-detection by @vigoo in #4040
• KGS blogpost by @justcoon in #4022
• Fix Effect tool client invocation scopes by @vigoo in #4042
• Derive SDK component entries from package exports by @vigoo in #4041
• Fix worker lifecycle unit reconstruction by @vigoo in #4034
• Analyze and reduce Cargo dependencies by @vigoo in #4039
• Remove some accidentally committed files by @vigoo in #4047
• Fix detached status reconstruction and causal suffix recovery by @vigoo in #4038
• Fix interruption of pending P2 HTTP blocking splice by @vigoo in #4048
• Fix invocation context lifetime for streaming output by @vigoo in #4051
• Fix process-wide Tokio runtime metrics installation by @vigoo in #4050
• Isolate recoverable tool collection failures in Scala and MoonBit by @vigoo in #4055
• Fence the blob oplog archive layer through a manifest in indexed storage by @Aditya1404Sal in #3993
• Add golem ssh: an interactive UX for external bash-tool invocation by @Aditya1404Sal in #3994
• Remove static metadata compilation from TypeScript SDKs (GOL-736, GOL-739) by @vigoo in #4052
• Optimize runtime codec preparation in both TypeScript SDKs by @vigoo in #4053
• Support mounted-file response headers across SDKs by @vigoo in #4043
• Agent tools conformance tests by @vigoo in #4006
• Allow universal middleware on per-tool bindings by @vigoo in #4049
• Fix empty multi-SQLite database reclamation by @vigoo in #4057
• Document the vouch system in CONTRIBUTING.md by @baltasarblanco in #4069
• Filesystem snapshot support by @kmatasfp in #4061
• Fix concurrent clock and WebSocket worker deadlock (GOL-750) by @vigoo in #4063
• Fix entity invocation replay after worker forks (GOL-760) by @vigoo in #4066
• Fix OSX build by @vigoo in #4076
• Fix flaky test repetition handling and report scaling by @vigoo in #4079
• GOL-706: fix automatic suspension with owner-wide eligibility by @vigoo in #4062
• GOL-723: select existing phantom agents from HTTP mounts by @vigoo in #4064
• Align blob storage backend and root-container contracts by @vigoo in #3947
• Reject root object names in blob storage by @vigoo in #3942
• Wait for an active entity body before a replay claim reports a missing Start by @kmatasfp in #4073
• Reduce CI dependencies and repeated build work by @vigoo in #4078
• docs: explain snapshot state schema evolution by @vigoo in #4081
• Optimize multipart snapshots in TypeScript and Effect SDKs by @vigoo in #4082
• golem ssh: ask the terminal nothing and give the band one colour (GOL-747) by @Aditya1404Sal in #4065
• GOL-720: Reduce invocation conversion and SDK wire overhead by @vigoo in #4080
• Add custom multipart snapshots across all five SDKs by @vigoo in #4056
• Fix pending update recovery and unsupported target refusal by @vigoo in #4075
• Reject self-revert and align Effect checkpoints with invocation-local rollback by @vigoo in #4074
• Fix Durable Streams Stream-Closed semantics by @vigoo in #4086
• link sdks/http-contract into the ts sdk instead of letting pnpm copy it by @noise64 in #4092
• Update wasm-rquickjs to 0.4.10 for snapshot recovery by @vigoo in #4091
• Bound suspension retirement state and align worker test stacks by @vigoo in #4090
• Fix durable self identity in TypeScript and Effect SDKs by @vigoo in #4085
• Keep the agent filesystem valid after a sandbox escape refusal by @kmatasfp in #4084
• Fix retained entity Store destruction before owner cleanup by @vigoo in #4095
• Build the Effect SDK before benchmark fixtures by @vigoo in #4096
• Fix directory capabilities for recursive guest filesystem removal by @vigoo in #4077
• Reject shared S3 filesystem snapshot buckets by @kmatasfp in #4083
• Make worker persistence tests independent of scheduling by @vigoo in #4098
• Pin Rust SDK publishing to shared crates 1.6.0-rc1.1 by @vigoo in #4103
• Fix Effect duplex stream replay after a crash by @vigoo in #4094
• Use the next SDK release candidates for Golem RC2 by @vigoo in #4104
• git-tool fixes by @Aditya1404Sal in #4087
• Skip unused Scala and MoonBit setup in CLI CI jobs by @vigoo in #4108
• Remove unnecessary worker executor test hooks by @vigoo in #4110
• Read pending card events at the card event boundary from the agent status by @vigoo in #4111
• Fix local external durable stream transport by @vigoo in #4089
• Keep a manual update pending when its snapshot load is interrupted by @kmatasfp in #4072
• Reduce TypeScript and Effect SDK wire conversion overhead by @vigoo in #4112
• Fix snapshot load interruption test after test hook removal by @vigoo in #4120
• Use the local Rust SDK in benchmark component builds by @vigoo in #4127
• Fix replay retained-Start delivery-gate deadlock by @vigoo in #4113
• Retain durable input ownership across native read cancellation by @vigoo in #4124
• Render raw outputs nested in option/result and allow them in all SDKs by @vigoo in #4105
• Report the local server startup phase to clients by @vigoo in #4106
• Fix Scala and MoonBit human-in-the-loop templates by @vigoo in #4129
• GOL-804: Add opt-in WebSocket reconstruction session-loss reporting by @vigoo in #4101
• Add an HTML oplog viewer and carry schema defs in public oplog values by @vigoo in #4109
• Accept *.localhost HTTP URLs in OIDC security scheme validation by @vigoo in #4114
• GOL-705: Reject ephemeral agents that enable snapshotting in the SDKs and the CLI by @kmatasfp in #4132
• Add the built-in bash tool to every deployment by default (GOL-749) by @Aditya1404Sal in #4067
• Git remote workflows with released JavaScript dependencies by @vigoo in #4102
• GOL-779: Fail an update cleanly when blob storage refuses the executor at the update point by @kmatasfp in #4133
• Fix deployed component metadata cache invalidation by @vigoo in #4122
• Complete SDK wire schema support and restore the Schema derive by @vigoo in #4134
• Implement structural tool permission matching and subsumption (GOL-833) by @vigoo in #4128
• Support filesystem snapshots on APFS for local development by @kmatasfp in #4100
• Add a Postgres session store to the worker service by @vigoo in #4123
• Dual-stack listeners and an advertised executor address by @vigoo in #4121
• docs: correct atomic-region retry guidance by @vigoo in #4137
• Fix bridge reconnect attachment-state race by @vigoo in #4139
• Enforce Tool permission cards on middleware Underlying invocations by @vigoo in #4136
• Say in the custom snapshot skills what happens to the agent's files (GOL-734) by @kmatasfp in #4142
• Add guides for generated built-in and MCP tool clients by @vigoo in #4141
• Render host errors consistently and document SDK permissions by @vigoo in #4130
• Fix PromiseId snapshots in TypeScript and Effect SDKs by @vigoo in #4140
• GOL-709: Claim every durable call by its place in the guest call order by @vigoo in #4131
• Configure the single-executable golem server for production by @vigoo in #4118
• Go SDK by @noise64 in #3719
• Park callers of tasks cancelled by the runtime shutdown by @vigoo in #4145
• GOL-877: Synchronize HTTP cancellation replay test by @vigoo in #4149
• Avoid cyclic garbage in TypeScript scalar validation by @vigoo in #4148
• docs: clarify preset defaults and opt-in overrides (GOL-788) by @vigoo in #4150
• Support gRPC trace context without OTLP export by @vigoo in #4138
• Disable Rust incremental compilation in Amp orbs by @vigoo in #4154
• Restore from marked packs and treat a refused storage call as permanent in the rustic store by @kmatasfp in #4146
• docs: clarify deploy reset behavior by @vigoo in #4155
• Add a regression test for websocket receives replayed to the wrong socket (GOL-862) by @vigoo in #4162
• Invalidate CLI-owned caches across CLI versions by @vigoo in #4156
• GOL-808: Cache built-in tool metadata across restarts by @vigoo in #4160
• Align durable-stream retry defaults across the SDKs by @vigoo in #4153
• Serve HTTP APIs and MCP on one port, routed by host by @vigoo in #4125
• Support Node HTTP servers through TypeScript custom routers by @vigoo in #4093
• Let the local server restart after an interrupted first start (GOL-721) by @Aditya1404Sal in #4116
• Add a single-bucket S3 mode with namespace prefixes in object keys by @vigoo in #4126
• Clarify SDK invocation inputs and fix host-injected method arguments by @vigoo in #4143
• Run the service images as a non-root user, and move the XFS quota calls into xfs-quotad by @kmatasfp in #4151
• test(benchmark): add cloud benchmark suites and CloudMode fixes for running them by @kmatasfp in #3644
• Use the wit-bindgen-golem-1.6 fork branch in the Rust template by @noise64 in #4170
• Add a built-in Python tool and shared process exit status by @vigoo in #4135
• End a CLI command quietly when the reader of its output closes the pipe (GOL-741) by @Aditya1404Sal in #4117
• Fix replay prefetch re-reads and a stale authority snapshot deadlock in the worker executor by @vigoo in #4174
• bash conformance: sort the output of two find sweep cases whose order depends on the file system by @Aditya1404Sal in #4171
• Route the golem server's main API by a management host by @vigoo in #4166
• Accept an xfs-quotad peer in another PID namespace by its uid (GOL-888) by @kmatasfp in #4181
• go bridge: a slow output stream reader keeps its connection by @noise64 in #4158
• go sdk: retry.Schedule runs a retry policy around the agent's own code by @noise64 in #4164
• go tools: the stdin pump stops when the tool no longer reads stdin by @noise64 in #4163
• go sdk: process exit status for command tools by @noise64 in #4185
• Fix retry policy state JSON in oplog responses by @vigoo in #4189
• go bridge generator: one-element tuples, named non-composite definitions, recursive optional records, quantity defaults by @noise64 in #4159
• Make tool attachments durable with read-side payloads by @vigoo in #4176
• Use optional CLI-only names and URL selectors for MCP imports by @vigoo in #4167
• Allow an implicit separator for unambiguous verbatim tool arguments (GOL-869) by @vigoo in #4188
• Fix middleware-presented tool clients across SDKs by @vigoo in #4157
• Scan replay recovery metadata only after the execution snapshot by @vigoo in #4194
• Reduce CI artifact transfers and redundant CLI setup by @vigoo in #4192
• Keep owner wallets coherent across primary and entity Stores by @vigoo in #4177
• Use WASI HTTP p3 in Rust templates and guidance by @vigoo in #4199
• Reject reserved TypeScript agent state fields by @vigoo in #4183
• ts repl: agent id completion reads agentId from agent list output by @noise64 in #4191
• bash: let the time limit stop a loop that starts a pipeline in each round (GOL-842) by @Aditya1404Sal in #4161
• Fix the faulty worker-service and request-recorder metric exports (GOL-903) by @kmatasfp in #4184
• GOL-903: Export shard lease expiry, renewal and admission refusal metrics by @kmatasfp in #4205
• go docs: parameter encoding in the invocation skills, manual update limitation by @noise64 in #4210
• Align native tool lifecycle semantics across all six SDKs by @vigoo in #4175
• Export filesystem snapshot storage, prune, delete, retention and skip metrics (GOL-903) by @kmatasfp in #4209
• Retain sibling Starts when a replay claim finds no matching Start (GOL-911) by @vigoo in #4211
• Add agent_sockets.enabled executor setting, off by default by @kmatasfp in #4206
• Resolve node eval requires from the tool working directory (GOL-866) by @vigoo in #4190
• Fix tool stdin terminals for client calls (GOL-898, GOL-897) by @vigoo in https://github.com/golemcloud/golem/pull/4212
• Share durable stream auth context and allocate nested-reader introductions lazily by @vigoo in https://github.com/golemcloud/golem/pull/4216
• GOL-888: Add --run-deadline-secs to the benchmarks, with 600s as the default by @kmatasfp in https://github.com/golemcloud/golem/pull/4203
• Make WASI P3 HTTP crash recovery call-local for effectively idempotent requests (GOL-910) by @vigoo in https://github.com/golemcloud/golem/pull/4198
• Fix stdin admission and environment deletion test races by @vigoo in https://github.com/golemcloud/golem/pull/4219
• Omit large entries from oplog pages and read them in full on demand by @vigoo in https://github.com/golemcloud/golem/pull/4186
• Apply declared defaults in reflected tool JSON input across SDKs (GOL-870) by @vigoo in https://github.com/golemcloud/golem/pull/4218
• Typed permission-card management in every SDK by @vigoo in https://github.com/golemcloud/golem/pull/4178
• Build development built-ins from source and pin tagged releases by @vigoo in https://github.com/golemcloud/golem/pull/4221
• Coalesce durable stream consumer observation commits by @vigoo in https://github.com/golemcloud/golem/pull/4222
• Verify CLI and golem-client WebSockets with an explicit rustls provider (GOL-914) by @kmatasfp in https://github.com/golemcloud/golem/pull/4196
• Export agent filesystem and HTTP stream metrics (GOL-903) by @kmatasfp in https://github.com/golemcloud/golem/pull/4213
• GOL-920: Make durable recovery call-local and remove suffix rollback by @vigoo in https://github.com/golemcloud/golem/pull/4207
• Ignore the Go default JSON snapshot recovery test by @vigoo in https://github.com/golemcloud/golem/pull/4223
• Isolate custom durability scopes across concurrent Rust futures by @vigoo in https://github.com/golemcloud/golem/pull/4195
• GOL-839, GOL-841: Run accessor call starts in owned tasks and drain the reads of a dropped wait by @vigoo in https://github.com/golemcloud/golem/pull/4220
• GOL-812: Compare entry types in the coalesced read-only follower test by @vigoo in https://github.com/golemcloud/golem/pull/4224
• Record filesystem permission denials in the oplog by @vigoo in https://github.com/golemcloud/golem/pull/4217
• GOL-714: Test that completed JavaScript tool calls replay after a restart by @vigoo in https://github.com/golemcloud/golem/pull/4225
• Fix TypeScript parsing of nested options behind named types by @vigoo in https://github.com/golemcloud/golem/pull/4215
• Publish an all-in-one golem image with an optional Litestream entrypoint by @vigoo in https://github.com/golemcloud/golem/pull/4179
• Publish a golem-router image that routes by host by @vigoo in https://github.com/golemcloud/golem/pull/4180
• GOL-825: Read each directory once per call in the ls and grep tools by @Aditya1404Sal in https://github.com/golemcloud/golem/pull/4187
• Fix built-in npm and TypeScript completion by @noise64 in https://github.com/golemcloud/golem/pull/4169
• Fail only the agent whose oplog archive does not read (GOL-797) by @kmatasfp in https://github.com/golemcloud/golem/pull/4147
• Test APFS free space, clone failures and unreadable repository keys (GOL-743) by @kmatasfp in https://github.com/golemcloud/golem/pull/4144
• Install Docker Engine and Buildx in Amp orb setup by @vigoo in https://github.com/golemcloud/golem/pull/4228
• Fix conflicting Docker APT sources in orb setup by @vigoo in https://github.com/golemcloud/golem/pull/4233
• Run the golem-router image on Envoy by @vigoo in https://github.com/golemcloud/golem/pull/4230
• GOL-895: Record self-wallet and self-version observations by @vigoo in https://github.com/golemcloud/golem/pull/4226
• fix(worker-service): keep idle sessions alive by @kmatasfp in https://github.com/golemcloud/golem/pull/4208
• Fix cargo make install-release for stale TypeScript SDK installs and redirected cargo target directories by @vigoo in https://github.com/golemcloud/golem/pull/4236
• golem new: validate the template plan before the layout upgrade, merge Scala build files by @noise64 in https://github.com/golemcloud/golem/pull/4214
• GOL-902: Keep durable sessions open across transient session history read failures by @vigoo in https://github.com/golemcloud/golem/pull/4229
• GOL-931: Record permission denials in the call start so recovery completes them as denied by @vigoo in https://github.com/golemcloud/golem/pull/4237
• Deliver post-commit status rebuild failures to the owning worker (GOL-901) by @vigoo in https://github.com/golemcloud/golem/pull/4234
• Settle a cancelled entity Store until its tool children resolve by @vigoo in https://github.com/golemcloud/golem/pull/4239
• Fix invocation logs cut off by nested calls by @vigoo in https://github.com/golemcloud/golem/pull/4243
• GOL-939: Make the HTTP, WebSocket and HTTP/2 limits configurable by @kmatasfp in https://github.com/golemcloud/golem/pull/4231
• Reject multi-domain HTTP deployments early, quiet dependency Rollup warnings, finish the bridge generator TODOs (GOL-732, GOL-754, GOL-329) by @noise64 in https://github.com/golemcloud/golem/pull/4238
• golem-router: smaller HTTP/2 windows, concurrency, metrics port, least-request by @kmatasfp in https://github.com/golemcloud/golem/pull/4240
• GOL-899: Record permission-card handle liveness by @vigoo in https://github.com/golemcloud/golem/pull/4227
• Show component tools, middlewares, and initial files by @vigoo in https://github.com/golemcloud/golem/pull/4242
• GOL-937: Return corruption for invalid oplog serialization by @vigoo in https://github.com/golemcloud/golem/pull/4246
• Release cached workers on executor shutdown by @vigoo in https://github.com/golemcloud/golem/pull/4250
• Fix the snapshot promotion test race by @vigoo in https://github.com/golemcloud/golem/pull/4251
• GOL-936: Record permission-card authorization decisions by @vigoo in https://github.com/golemcloud/golem/pull/4232
• Derive persistent permission-card templates by @vigoo in https://github.com/golemcloud/golem/pull/4245
• Align unreleased 1.6 docs with next and fix review findings by @vigoo in https://github.com/golemcloud/golem/pull/4249
• Separate shared crate releases and automate Golem release preparation by @vigoo in https://github.com/golemcloud/golem/pull/4252
• GOL-888: Use mimalloc in worker-service, as in worker-executor by @kmatasfp in https://github.com/golemcloud/golem/pull/4247
• Fix npm init -y and the working directory of the built-in JavaScript tools by @noise64 in https://github.com/golemcloud/golem/pull/4235
• Bound best-effort component compilation admission by @vigoo in https://github.com/golemcloud/golem/pull/4256
• Let a component tool body read a client's stdin as recorded guest reads by @vigoo in https://github.com/golemcloud/golem/pull/4258
• Repair detached status before returning worker metadata by @vigoo in https://github.com/golemcloud/golem/pull/4253
• Pool and rotate fixed-target gRPC connections by @vigoo in https://github.com/golemcloud/golem/pull/4255
• GOL-922: Share retained wallet prefixes during replay by @vigoo in https://github.com/golemcloud/golem/pull/4244
• Fix permission checks at replay-tail admission (GOL-930) by @vigoo in https://github.com/golemcloud/golem/pull/4257
• GOL-888: Make the HTTP/2 reset stream limits of the HTTP servers configurable by @kmatasfp in https://github.com/golemcloud/golem/pull/4254
• Port the chaos suite to 1.6 by @kmatasfp in https://github.com/golemcloud/golem/pull/4173
• GOL-938: Classify payload failures during status reconstruction by @vigoo in https://github.com/golemcloud/golem/pull/4248
• Prepare Golem 1.6.0-rc3 with published SDK release candidates by @vigoo in https://github.com/golemcloud/golem/pull/4260
• Fix Golem release preflight permissions by @vigoo in https://github.com/golemcloud/golem/pull/4265
• Revise SDK guides and organize usage documentation by @vigoo in https://github.com/golemcloud/golem/pull/4266
• Connect the shard manager to etcd over TLS, with client certificates and users (GOL-908) by @Aditya1404Sal in https://github.com/golemcloud/golem/pull/4200
• Fix the websocket reconnect close test observation race by @vigoo in https://github.com/golemcloud/golem/pull/4261
• Fix Python setup for built-in publication and document recovery by @vigoo in https://github.com/golemcloud/golem/pull/4267
• Align agent templates across guest languages by @vigoo in https://github.com/golemcloud/golem/pull/4259
• Let distributed shard managers roll like an ordinary service (GOL-908) by @Aditya1404Sal in https://github.com/golemcloud/golem/pull/4201
• Initialize the Rust environment cache before saving snapshots by @vigoo in https://github.com/golemcloud/golem/pull/4268
• Apply limited improvements to the RC3 release flow by @vigoo in https://github.com/golemcloud/golem/pull/4270
• Finalize the application manifest schema for 1.6.0 by @noise64 in https://github.com/golemcloud/golem/pull/4272
• Prepare Golem 1.6.0-rc4 with the next SDK candidates by @vigoo in https://github.com/golemcloud/golem/pull/4273
• Wait for owner retirement after a failed replay preparation by @vigoo in https://github.com/golemcloud/golem/pull/4274
• Run TypeScript in the built-in node and npx tools, enable the TypeScript runtime in Effect and Scala guests by @noise64 in https://github.com/golemcloud/golem/pull/4264
• Stop a running command with Ctrl+C in golem ssh (GOL-748) by @Aditya1404Sal in https://github.com/golemcloud/golem/pull/4115
• Fix invocation payload size errors and limit HTTP API bodies by @vigoo in https://github.com/golemcloud/golem/pull/4276
• Use larger Blacksmith runners for native release builds by @vigoo in https://github.com/golemcloud/golem/pull/4277
• Add a production checklist and deployment guides for self-hosted Golem by @vigoo in https://github.com/golemcloud/golem/pull/4168
• Unify account resource limits by @kmatasfp in https://github.com/golemcloud/golem/pull/3894

New Contributors

• @mdegoes made their first contribution in #3706
• @Aditya1404Sal made their first contribution in #3757
• @baltasarblanco made their first contribution in #3799

Full Changelog: v1.5.3...v1.6.0