v1.6.0-rc3

What's Changed

• git-tool fixes by @Aditya1404Sal in #4087
• Skip unused Scala and MoonBit setup in CLI CI jobs by @vigoo in #4108
• Remove unnecessary worker executor test hooks by @vigoo in #4110
• Read pending card events at the card event boundary from the agent status by @vigoo in #4111
• Fix local external durable stream transport by @vigoo in #4089
• Keep a manual update pending when its snapshot load is interrupted by @kmatasfp in #4072
• Reduce TypeScript and Effect SDK wire conversion overhead by @vigoo in #4112
• Fix snapshot load interruption test after test hook removal by @vigoo in #4120
• Use the local Rust SDK in benchmark component builds by @vigoo in #4127
• Fix replay retained-Start delivery-gate deadlock by @vigoo in #4113
• Retain durable input ownership across native read cancellation by @vigoo in #4124
• Render raw outputs nested in option/result and allow them in all SDKs by @vigoo in #4105
• Report the local server startup phase to clients by @vigoo in #4106
• Fix Scala and MoonBit human-in-the-loop templates by @vigoo in #4129
• GOL-804: Add opt-in WebSocket reconstruction session-loss reporting by @vigoo in #4101
• Add an HTML oplog viewer and carry schema defs in public oplog values by @vigoo in #4109
• Accept *.localhost HTTP URLs in OIDC security scheme validation by @vigoo in #4114
• GOL-705: Reject ephemeral agents that enable snapshotting in the SDKs and the CLI by @kmatasfp in #4132
• Add the built-in bash tool to every deployment by default (GOL-749) by @Aditya1404Sal in #4067
• Git remote workflows with released JavaScript dependencies by @vigoo in #4102
• GOL-779: Fail an update cleanly when blob storage refuses the executor at the update point by @kmatasfp in #4133
• Fix deployed component metadata cache invalidation by @vigoo in #4122
• Complete SDK wire schema support and restore the Schema derive by @vigoo in #4134
• Implement structural tool permission matching and subsumption (GOL-833) by @vigoo in #4128
• Support filesystem snapshots on APFS for local development by @kmatasfp in #4100
• Add a Postgres session store to the worker service by @vigoo in #4123
• Dual-stack listeners and an advertised executor address by @vigoo in #4121
• docs: correct atomic-region retry guidance by @vigoo in #4137
• Fix bridge reconnect attachment-state race by @vigoo in #4139
• Enforce Tool permission cards on middleware Underlying invocations by @vigoo in #4136
• Say in the custom snapshot skills what happens to the agent's files (GOL-734) by @kmatasfp in #4142
• Add guides for generated built-in and MCP tool clients by @vigoo in #4141
• Render host errors consistently and document SDK permissions by @vigoo in #4130
• Fix PromiseId snapshots in TypeScript and Effect SDKs by @vigoo in #4140
• GOL-709: Claim every durable call by its place in the guest call order by @vigoo in #4131
• Configure the single-executable golem server for production by @vigoo in #4118
• Go SDK by @noise64 in #3719
• Park callers of tasks cancelled by the runtime shutdown by @vigoo in #4145
• GOL-877: Synchronize HTTP cancellation replay test by @vigoo in #4149
• Avoid cyclic garbage in TypeScript scalar validation by @vigoo in #4148
• docs: clarify preset defaults and opt-in overrides (GOL-788) by @vigoo in #4150
• Support gRPC trace context without OTLP export by @vigoo in #4138
• Disable Rust incremental compilation in Amp orbs by @vigoo in #4154
• Restore from marked packs and treat a refused storage call as permanent in the rustic store by @kmatasfp in #4146
• docs: clarify deploy reset behavior by @vigoo in #4155
• Add a regression test for websocket receives replayed to the wrong socket (GOL-862) by @vigoo in #4162
• Invalidate CLI-owned caches across CLI versions by @vigoo in #4156
• GOL-808: Cache built-in tool metadata across restarts by @vigoo in #4160
• Align durable-stream retry defaults across the SDKs by @vigoo in #4153
• Serve HTTP APIs and MCP on one port, routed by host by @vigoo in #4125
• Support Node HTTP servers through TypeScript custom routers by @vigoo in #4093
• Let the local server restart after an interrupted first start (GOL-721) by @Aditya1404Sal in #4116
• Add a single-bucket S3 mode with namespace prefixes in object keys by @vigoo in #4126
• Clarify SDK invocation inputs and fix host-injected method arguments by @vigoo in #4143
• Run the service images as a non-root user, and move the XFS quota calls into xfs-quotad by @kmatasfp in #4151
• test(benchmark): add cloud benchmark suites and CloudMode fixes for running them by @kmatasfp in #3644
• Use the wit-bindgen-golem-1.6 fork branch in the Rust template by @noise64 in #4170
• Add a built-in Python tool and shared process exit status by @vigoo in #4135
• End a CLI command quietly when the reader of its output closes the pipe (GOL-741) by @Aditya1404Sal in #4117
• Fix replay prefetch re-reads and a stale authority snapshot deadlock in the worker executor by @vigoo in #4174
• bash conformance: sort the output of two find sweep cases whose order depends on the file system by @Aditya1404Sal in #4171
• Route the golem server's main API by a management host by @vigoo in #4166
• Accept an xfs-quotad peer in another PID namespace by its uid (GOL-888) by @kmatasfp in #4181
• go bridge: a slow output stream reader keeps its connection by @noise64 in #4158
• go sdk: retry.Schedule runs a retry policy around the agent's own code by @noise64 in #4164
• go tools: the stdin pump stops when the tool no longer reads stdin by @noise64 in #4163
• go sdk: process exit status for command tools by @noise64 in #4185
• Fix retry policy state JSON in oplog responses by @vigoo in #4189
• go bridge generator: one-element tuples, named non-composite definitions, recursive optional records, quantity defaults by @noise64 in #4159
• Make tool attachments durable with read-side payloads by @vigoo in #4176
• Use optional CLI-only names and URL selectors for MCP imports by @vigoo in #4167
• Allow an implicit separator for unambiguous verbatim tool arguments (GOL-869) by @vigoo in #4188
• Fix middleware-presented tool clients across SDKs by @vigoo in #4157
• Scan replay recovery metadata only after the execution snapshot by @vigoo in #4194
• Reduce CI artifact transfers and redundant CLI setup by @vigoo in #4192
• Keep owner wallets coherent across primary and entity Stores by @vigoo in #4177
• Use WASI HTTP p3 in Rust templates and guidance by @vigoo in #4199
• Reject reserved TypeScript agent state fields by @vigoo in #4183
• ts repl: agent id completion reads agentId from agent list output by @noise64 in #4191
• bash: let the time limit stop a loop that starts a pipeline in each round (GOL-842) by @Aditya1404Sal in #4161
• Fix the faulty worker-service and request-recorder metric exports (GOL-903) by @kmatasfp in #4184
• GOL-903: Export shard lease expiry, renewal and admission refusal metrics by @kmatasfp in #4205
• go docs: parameter encoding in the invocation skills, manual update limitation by @noise64 in #4210
• Align native tool lifecycle semantics across all six SDKs by @vigoo in #4175
• Export filesystem snapshot storage, prune, delete, retention and skip metrics (GOL-903) by @kmatasfp in #4209
• Retain sibling Starts when a replay claim finds no matching Start (GOL-911) by @vigoo in #4211
• Add agent_sockets.enabled executor setting, off by default by @kmatasfp in #4206
• Resolve node eval requires from the tool working directory (GOL-866) by @vigoo in #4190
• Fix tool stdin terminals for client calls (GOL-898, GOL-897) by @vigoo in #4212
• Share durable stream auth context and allocate nested-reader introductions lazily by @vigoo in #4216
• GOL-888: Add --run-deadline-secs to the benchmarks, with 600s as the default by @kmatasfp in #4203
• Make WASI P3 HTTP crash recovery call-local for effectively idempotent requests (GOL-910) by @vigoo in #4198
• Fix stdin admission and environment deletion test races by @vigoo in #4219
• Omit large entries from oplog pages and read them in full on demand by @vigoo in #4186
• Apply declared defaults in reflected tool JSON input across SDKs (GOL-870) by @vigoo in #4218
• Typed permission-card management in every SDK by @vigoo in #4178
• Build development built-ins from source and pin tagged releases by @vigoo in #4221
• Coalesce durable stream consumer observation commits by @vigoo in #4222
• Verify CLI and golem-client WebSockets with an explicit rustls provider (GOL-914) by @kmatasfp in #4196
• Export agent filesystem and HTTP stream metrics (GOL-903) by @kmatasfp in #4213
• GOL-920: Make durable recovery call-local and remove suffix rollback by @vigoo in #4207
• Ignore the Go default JSON snapshot recovery test by @vigoo in #4223
• Isolate custom durability scopes across concurrent Rust futures by @vigoo in #4195
• GOL-839, GOL-841: Run accessor call starts in owned tasks and drain the reads of a dropped wait by @vigoo in #4220
• GOL-812: Compare entry types in the coalesced read-only follower test by @vigoo in #4224
• Record filesystem permission denials in the oplog by @vigoo in #4217
• GOL-714: Test that completed JavaScript tool calls replay after a restart by @vigoo in #4225
• Fix TypeScript parsing of nested options behind named types by @vigoo in #4215
• Publish an all-in-one golem image with an optional Litestream entrypoint by @vigoo in #4179
• Publish a golem-router image that routes by host by @vigoo in #4180
• GOL-825: Read each directory once per call in the ls and grep tools by @Aditya1404Sal in #4187
• Fix built-in npm and TypeScript completion by @noise64 in #4169
• Fail only the agent whose oplog archive does not read (GOL-797) by @kmatasfp in #4147
• Test APFS free space, clone failures and unreadable repository keys (GOL-743) by @kmatasfp in #4144
• Install Docker Engine and Buildx in Amp orb setup by @vigoo in #4228
• Fix conflicting Docker APT sources in orb setup by @vigoo in #4233
• Run the golem-router image on Envoy by @vigoo in #4230
• GOL-895: Record self-wallet and self-version observations by @vigoo in #4226
• fix(worker-service): keep idle sessions alive by @kmatasfp in #4208
• Fix cargo make install-release for stale TypeScript SDK installs and redirected cargo target directories by @vigoo in #4236
• golem new: validate the template plan before the layout upgrade, merge Scala build files by @noise64 in #4214
• GOL-902: Keep durable sessions open across transient session history read failures by @vigoo in #4229
• GOL-931: Record permission denials in the call start so recovery completes them as denied by @vigoo in #4237
• Deliver post-commit status rebuild failures to the owning worker (GOL-901) by @vigoo in #4234
• Settle a cancelled entity Store until its tool children resolve by @vigoo in #4239
• Fix invocation logs cut off by nested calls by @vigoo in #4243
• GOL-939: Make the HTTP, WebSocket and HTTP/2 limits configurable by @kmatasfp in #4231
• Reject multi-domain HTTP deployments early, quiet dependency Rollup warnings, finish the bridge generator TODOs (GOL-732, GOL-754, GOL-329) by @noise64 in #4238
• golem-router: smaller HTTP/2 windows, concurrency, metrics port, least-request by @kmatasfp in #4240
• GOL-899: Record permission-card handle liveness by @vigoo in #4227
• Show component tools, middlewares, and initial files by @vigoo in #4242
• GOL-937: Return corruption for invalid oplog serialization by @vigoo in #4246
• Release cached workers on executor shutdown by @vigoo in #4250
• Fix the snapshot promotion test race by @vigoo in #4251
• GOL-936: Record permission-card authorization decisions by @vigoo in #4232
• Derive persistent permission-card templates by @vigoo in #4245
• Align unreleased 1.6 docs with next and fix review findings by @vigoo in #4249
• Separate shared crate releases and automate Golem release preparation by @vigoo in #4252
• GOL-888: Use mimalloc in worker-service, as in worker-executor by @kmatasfp in #4247
• Fix npm init -y and the working directory of the built-in JavaScript tools by @noise64 in #4235
• Bound best-effort component compilation admission by @vigoo in #4256
• Let a component tool body read a client's stdin as recorded guest reads by @vigoo in #4258
• Repair detached status before returning worker metadata by @vigoo in #4253

Full Changelog: v1.6.0-rc2...v1.6.0-rc3