WSO2 Agent Manager v0.16.0
Pre-release
Pre-release
·
341 commits
to main
since this release
🚀 Highlights
This release introduces an identity and access management layer with a full RBAC permission model, per-agent rate limiting, gateway-routed LLM-as-judge support across all providers, an instrumentation compatibility-matrix test suite with the 0.3.0 instrumentation baseline, scripted standalone/VM installers, and an improved Agent Overview experience.
Key Updates
-
Identity & Access Management (RBAC)
- New identity management layer with a role-based access control permission model with predefined roles and a read-only flag to prevent editing built-in roles
-
Per-Agent Rate Limiting & LLM Configuration
- Per-agent (per-consumer) rate limit configuration option
- Partial LLM configuration creation with catalog filtering by environment
-
Evaluation & LLM-as-Judge
- Adopted
any-llmas the LLM-as-judge client - Gateway-routed LLM judges now supported across all providers, including Azure AI Foundry and Bedrock
- Fixed empty-output templated LLM-judge scores and eval monitor error messages
- Adopted
-
Instrumentation & Compatibility Matrix
- Instrumentation bumped to
0.3.0ontraceloop-sdk 0.61.0, set as the default for new agents
- Instrumentation bumped to
-
Installation & Deployment
- Scripted standalone install for Agent Manager on a VM with Docker
- Config-driven advanced VM installer with custom domains and TLS modes
- AMP Console branding and layout configuration exposed through the Helm chart
-
Console & UI
- Improved Agent Overview page with observability and evaluation surfaces, build status, and metrics visualization
📦 Components
| Component | Description |
|---|---|
| amp-console | React 19 + Oxygen UI web dashboard with RBAC user management, improved Agent Overview, and configurable branding |
| amp-api | Go-based backend API with identity management (RBAC), per-agent rate limiting, and environment-scoped LLM configuration |
| amp-traces-observer | Trace query API service with in-memory trace I/O fallback for export |
| amp-evaluation-monitor | Evaluation monitor service with any-llm judge client and gateway-routed providers |
| amp-python-instrumentation-provider | Init container for automatic Python agent instrumentation (0.3.0 / traceloop-sdk 0.61.0) |
| amp-quick-start | Quick start setup container |
| amctl | CLI for managing agents, projects, deployments, observability, and skills |
🐳 Docker Images
ghcr.io/wso2/amp-console:v0.16.0
ghcr.io/wso2/amp-api:v0.16.0
ghcr.io/wso2/amp-traces-observer:v0.16.0
ghcr.io/wso2/amp-evaluation-monitor:v0.16.0
ghcr.io/wso2/amp-quick-start:v0.16.0
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.10
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.11
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.12
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.13
⎈ Helm Charts
oci://ghcr.io/wso2/wso2-agent-manager:0.16.0
oci://ghcr.io/wso2/wso2-amp-observability-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-platform-resources-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-thunder-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-evaluation-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-api-platform-gateway-extension:0.16.0
📚 Samples
- Customer Support Agent - Sample travel booking agent showcasing LangGraph integration
- Hotel Booking Agent - Sample hotel booking agent with chat interface and Pinecone knowledge base integration
- IT Support Agent - IT support agent sample
- Manual Instrumentation Agent - Sample demonstrating manual OpenTelemetry instrumentation with tool-calling
📖 Documentation
See the Quick Start Guide for installation and setup instructions.
🔧 What's Changed
Identity & Access Management (RBAC)
- feat: add identity management with RBAC permission model by @lashinijay in #914
- Enable rbac by default in the setup by @lashinijay in #1020
- Improvements to rbac implementation by @lashinijay in #1021
- Assign admin role to
amp-api-clientapplication by @lashinijay in #1024 - Disabling modifying permissions of predefined roles by @lashinijay in #1034
- Refactor resource names to follow
<resource-server>:<resource>:<action>format by @lashinijay in #1040 - Update default admin credentials for Agent Manager by @lashinijay in #1044
- Remove level 2 sub resources from resource server by @lashinijay in #1047
- Fix floating labels in add user view by @lashinijay in #1055
- Add new admins group by default and remove Administrators group from thunder by @lashinijay in #1060
Per-Agent Rate Limiting & LLM Configuration
- Implement per-agent rate limit configuration option by @menakaj in #982
- Allow partial llm configuration creation and filter catalog based on environment by @menakaj in #978
- Fix agent-llm configs not deleting when agent is deleted by @menakaj in #1011
Evaluation & LLM-as-Judge
- Adopt any-llm as the LLM-as-judge client by @RAVEENSR in #1010
- Support all providers for gateway-routed LLM judges by @RAVEENSR in #1014
- Fix Azure and Bedrock judge routing through the gateway by @RAVEENSR in #1016
- Use generic LLM wording in eval user-facing surfaces by @RAVEENSR in #998
- Fix empty-output templated LLM-judge scores by @RAVEENSR in #1050
- Fix eval monitors error messages by @menakaj in #953
Instrumentation & Compatibility Matrix
- Add instrumentation compatibility-matrix test suite by @RAVEENSR in #970
- Make the instrumentation-matrix heavy tier run green in CI by @RAVEENSR in #977
- Add a deployable CrewAI sample for the heavy-tier per-framework axis by @RAVEENSR in #980
- Fix the deployed CrewAI agent crashing on a read-only HOME by @RAVEENSR in #983
- Bump instrumentation to 0.3.0 (traceloop-sdk 0.61.0) by @RAVEENSR in #987
- Update lingering 0.60.0/0.2.1 references to 0.61.0/0.3.0 by @RAVEENSR in #990
- Write CoreDNS host aliases before k3d restart by @RAVEENSR in #993
- Localize heavy-tier span-delivery failures to a pipeline boundary by @RAVEENSR in #995
- Make CrewAI sample docs outsider-friendly by @RAVEENSR in #997
- Request RBAC scopes in heavy matrix token call by @RAVEENSR in #1033
- Use dedicated instrumentation test secrets in matrix workflows by @RAVEENSR in #1043
Gateway & CORS
- Add CORS configuration section to deployment drawer by @AnoshanJ in #959
- Fix api key events not being delivered on gw-cold start by @menakaj in #969
- Move jwt-auth header config from gateway system params to user params for tracing-proxy by @AnoshanJ in #976
- Add authheaderscheme field to apiGateway system configuration by @AnoshanJ in #991
Installation & Deployment
- Add scripted standalone install for Agent Manager on a VM with Docker by @RAVEENSR in #1017
- Add config-driven advanced VM installer with custom domains and TLS modes by @RAVEENSR in #1051
- Add AMP Console branding and layout configuration to Helm chart by @rasika2012 in #973
amctl CLI
- Simplify agent create model config: flat
--llm-*flags + provider check by @jhivandb in #1023 - Add amctl PR checks workflow by @jhivandb in #986
- Add OAuth scopes to docker compose service by @jhivandb in #1036
Console & UI
- Improve Agent Overview Page by @rasika2012 in #963
- Add route for publishing agent kind by @rasika2012 in #1067
- Enhance Protected component to resolve landing organization and project navigation by @rasika2012 in #1054
Documentation
- Add CORS configuration tutorial to documentation by @AnoshanJ in #974
- Update cloud documentation to add plans and pricing by @menakaj in #992
- Add component assessment to design proposal template by @jhivandb in #1022
- Fix npm security vulnerabilities in documentation by @RAVEENSR in #1039
- Update docs by @RAVEENSR in #1066
Infrastructure & Bug Fixes
- Fix go.mod and imports for traces-observer by @jhivandb in #971
- Pin Node-20 GitHub Actions to their Node-24 versions by @RAVEENSR in #979
👥 Contributors
Full Changelog: amp/v0.15.0...amp/v0.16.0