Proto commits in golemcloud/golem

These commits are when the Protocol Buffers files have changed: (only the last 100 relevant commits are shown)

2026-10-06

Add response headers for mounted files Amp-Thread-ID: https://ampcode.com/threads/T-01a10d06-b631-73c4-9d9f-fab427fd91ee Co-authored-by: Amp <amp@ampcode.com>

2026-10-03

merge: integrate pinned main to unblock CI Merge 64bdddef587a2e415daffb6609f91239f3ad9f71. Retain monthly policy, stop ownership and isolated test admission. Compose blob quota reporting and HTTP resend observation. Refs GOL-442

2026-10-02

move schema protos into golem-schema and publish it for the rust sdk (#4027)

The documentation is generated from this commit.

Add per-account blob storage quota (#3954)

chore: merge main into resource-limit branch Integrate reviewed main through 0f4bd0e4 without losing Worker-owned quota settlement or typed host observation. Keep login and routing SQL after the monthly-accounting migrations. Preserve immutable metadata shortcuts and release-pinned built-in artifact provisioning. Record latest main ancestry in a source-identical follow-up merge. Refs GOL-442

2026-10-01

Add snapshot-assisted automatic agent updates (#3968) * Implement snapshot-assisted automatic agent updates Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0d31f-408f-7032-87b7-5bc4c365cfd6 * Format golem-api-host mock with Prettier Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> * Fix clippy violations and stale baseline folding in worker executor - Gate the now test-only ReplayState::switch_to_live wrapper behind #[cfg(test)]; production publishes through prepare_replay_to_live and publish_primary_live separately. - Drop a redundant clone of the Copy Option<AuthoritativeSnapshot> field. - Fix worker-executor test-target compile errors: pass the positional read scope to get_oplog_entry and the fingerprint argument to lookup_durable_stream_control_metadata in tests. - Update replay-to-live tests to the split settle/publish contract. - Invalidate status baselines whose oplog index falls inside a newly deleted region so incremental folds cannot retain state folded from entries a later revert removed. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> * Retrigger CI (synchronize event not delivered) Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> * Rebuild OTLP exporter plugin against the current oplog WIT The GOL-516 oplog entry changes (snapshot-assisted update details and update-description variants) changed the golem:api/oplog interface the committed plugin was built against, so oplog-processor export loading failed at runtime with a type conversion error. Rebuild the WASM from the in-tree golem-rust bindings and sync its managed skill files. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> * Fix automatic update review semantics Remove assisted replay diagnostics, unify update attempt identity, and reuse shared automatic finalization while preserving promoted snapshot recovery and source-tail replay. Amp-Thread-ID: https://ampcode.com/threads/T-01a0e6ee-b35b-70eb-90b1-e7b8b8b714ff Co-authored-by: Amp <amp@ampcode.com> * Regenerate automatic update contracts and artifacts Synchronize WIT, OpenAPI, SDK bindings, CLI schema, documentation, fixture migrations, and the OTLP exporter with the reviewed update contract. Amp-Thread-ID: https://ampcode.com/threads/T-01a0e6ee-b35b-70eb-90b1-e7b8b8b714ff Co-authored-by: Amp <amp@ampcode.com> * Satisfy update lifecycle lint Keep exited-worker admission failure as the match expression result. Amp-Thread-ID: https://ampcode.com/threads/T-01a0e6ee-b35b-70eb-90b1-e7b8b8b714ff Co-authored-by: Amp <amp@ampcode.com> * Add CLI update await correlation coverage Exercise exact admitted-attempt selection for manual and automatic updates through the real CLI integration harness, including bulk partial admission and repeated failures. Amp-Thread-ID: https://ampcode.com/threads/T-01a0e6ee-b35b-70eb-90b1-e7b8b8b714ff Co-authored-by: Amp <amp@ampcode.com> * Fix MCP worker client update mock Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> * Update manual update admission index tests Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> * Select automatic update strategy at activation Preserve exact admission identity while persisting queue-head snapshot selection, tighten bulk update targeting, and identify pending CLI progress. Amp-Thread-ID: https://ampcode.com/threads/T-01a0e6ee-b35b-70eb-90b1-e7b8b8b714ff Co-authored-by: Amp <amp@ampcode.com> * Fix API-changing update oplog expectation Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Support authorization code flow with PKCE for HTTP APIs (#3995) * Add authorization code flow with PKCE Implement Golem-issued authorization codes and opaque bearer credentials for third-party frontends, backed by atomic Redis and SQLite storage and verified upstream OIDC claims. Add scheme-qualified routes, CORS and OpenAPI support, CLI and registry contracts, generated artifacts, real-provider fixtures, backend acceptance coverage, and frontend documentation. Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec31-7436-743b-bd58-ce96ba860d01 Co-authored-by: Amp <amp@ampcode.com> * Default existing security schemes to cookie login Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee2d-3e0c-75eb-9392-c80d41cdb2e7 Co-authored-by: Amp <amp@ampcode.com> * Serialize HTTP routing mutations Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec31-7436-743b-bd58-ce96ba860d01 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Merge origin/main into gol-442-unify-resource-limits

2026-09-30

Add per-account blob storage quota Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0cd4a-2974-72fc-8c91-80746e20a8c0

Add first-class UUID schema support (#3990) * Add first-class UUID schema support Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Fix MoonBit test UUID host import Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Regenerate OpenAPI UUID schemas Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Fix UUID CI regressions Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Update UUID schema test fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Format UUID oplog matcher tests Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Update UUID schema test values Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Fix remaining UUID integration fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Fix Scala UUID bridges and rebuild OTLP plugin Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Fix CI artifact handoffs Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Support UUIDs in Effect direct wire codecs Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Fix UUID encoding in static TypeScript codecs Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Rebuild built-in tools for UUID schema Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Fix UUID direct schema equivalence Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> * Support UUIDs in MoonBit external bridges Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Fix MoonBit UUID decode diagnostics Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Increase unit test CI timeout Amp-Thread-ID: https://ampcode.com/threads/T-01a0ed32-8f95-7505-aac7-2839ed477ed7 Co-authored-by: Amp <amp@ampcode.com> * Undo GitHub Actions changes Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Store the shard manager's quota state in etcd in distributed mode (#3980) * Store the shard manager's quota state in etcd in distributed mode * Reload quota resources after unknown write outcomes, read the store once at startup, fix the tombstone panic and document etcd's transaction limit * Read quota prefixes at one etcd revision and shrink pages that exceed the response limit

Add optional tool stderr end to end (#3992) * Implement optional tool stderr end to end Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0e77a-3626-746e-b264-49a1636b51b2 * Fix clippy output completion checks Amp-Thread-ID: https://ampcode.com/threads/T-01a0edcb-92bc-77c8-97ce-8878f45fa452 Co-authored-by: Amp <amp@ampcode.com> * Fix native invocation session schema test Amp-Thread-ID: https://ampcode.com/threads/T-01a0edcb-92bc-77c8-97ce-8878f45fa452 Co-authored-by: Amp <amp@ampcode.com> * Fix native stream mapping test Amp-Thread-ID: https://ampcode.com/threads/T-01a0edcb-92bc-77c8-97ce-8878f45fa452 Co-authored-by: Amp <amp@ampcode.com> * Fix stderr-only clients and oplog rendering Amp-Thread-ID: https://ampcode.com/threads/T-01a0e77a-3626-746e-b264-49a1636b51b2 Co-authored-by: Amp <amp@ampcode.com> * Format TypeScript stderr changes Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Fix Rust SDK stderr test fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Update Scala tool client snapshot Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Fix Scala stderr capability fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Fix MoonBit tool streaming error matches Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Fix Rust tool host stderr argument Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Bump filesystem tools for stderr ABI Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Rebuild filesystem tools for stderr ABI Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Fix post-merge stderr regressions Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> * Restore synchronous middleware output streams Amp-Thread-ID: https://ampcode.com/threads/T-01a0ee7c-fe4a-760e-9dce-a8052eb623ec Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

2026-09-29

Merge remote-tracking branch 'origin/main' into feat/first-class-uuid-schema Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com> # Conflicts: # cli/golem-cli/src/bridge_gen/rust/schema_graph.rs # sdks/moonbit/golem_sdk/gen/interface/golem/agent/guest/ffi.mbt # sdks/moonbit/golem_sdk/gen/interface/golem/tool/guest/ffi.mbt # sdks/moonbit/golem_sdk/gen/interface/golem/tool/tool-middleware-guest/ffi.mbt # sdks/moonbit/golem_sdk/interface/golem/api/oplog/top.mbt # sdks/moonbit/golem_sdk/interface/golem/core/types/ffi.mbt # sdks/moonbit/golem_sdk/interface/golem/tool/host/top.mbt # sdks/moonbit/golem_sdk/scripts/split-middleware-lift.py

Add built-in filesystem tools and complete SDK size optimizations (#3939) * Simplify SDKs to a single agent world Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Format TypeScript Rollup config Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Preserve the middleware runtime binding world Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Update MoonBit template command count Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Declare Scala middleware integration fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Implement unified MoonBit middleware exports Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Fix unified middleware CLI fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Recalibrate tests for unified Rust component Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Allow unified Rust bridge build to complete Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Trigger CI for timeout recalibration Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Extend sparse memory usage test timeout Amp-Thread-ID: https://ampcode.com/threads/T-01a0c36a-7622-747a-80f5-f801d67a09c0 Co-authored-by: Amp <amp@ampcode.com> * Specialize generated standalone tool metadata and cache validated descriptors Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-4d2f-755a-848c-bf81509bc183 Co-authored-by: Amp <amp@ampcode.com> * Install Rust guest capability runtimes only from implementation constructors Keep mandatory agent, tool, middleware and snapshot exports in one guest world, dispatching absent capabilities without retaining their runtimes. Register immutable prepared tool descriptors once and test native behavior, linked exports, metadata discovery and runtime retention across five capability combinations. Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-4575-705f-8dcf-295fa7aac1b4 Co-authored-by: Amp <amp@ampcode.com> * Keep Rust guest schema validation lean while preserving rich host contracts Integrate the schema feature work from 95e3fb2cc475a27d9a3bedfee30d2255548ce8c0 while retaining immutable prepared tool descriptors rather than Rc lookup. Validate all five capability combinations with lean and rich-validation guests, and refresh streaming fixture lockfiles through the CLI rebuild. Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-4575-705f-8dcf-295fa7aac1b4 Co-authored-by: Amp <amp@ampcode.com> * Generate minimal same-world MoonBit export runtime hooks Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-685a-73ca-819c-142fb75f68d6 Co-authored-by: Amp <amp@ampcode.com> * Regenerate MoonBit bindings and batch provider stdout writes Pin wit-bindgen 9c6dce16 and regenerate the full guest world through the SDK script. Use its bounded 64 KiB callback window for handwritten ProviderStdout, retain multi-chunk drain coverage, and assert the real-tool burst submission count. The MoonBit generator change batches byte streams but does not share export-result lowering across interfaces. Keep the same-world minimal export implementation in the preceding commit. Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-685a-73ca-819c-142fb75f68d6 Co-authored-by: Amp <amp@ampcode.com> * Generate capability-sensitive Scala guest export roots Select full agent, tool and middleware implementations from registered source capabilities while retaining minimal mandatory exports for absent capabilities. Keep the full guest ABI and allow Scala.js to eliminate unused dispatch and host imports. Cover all capability combinations, projected/client-only tools, linked entry discovery and invocation, snapshot error behavior and typed client RPC through a host stub. Document reproducible bundle/component size and boundary latency measurements. Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-7223-7153-b12c-ef1aa822aedc Co-authored-by: Amp <amp@ampcode.com> * Bundle capability-specific TypeScript guest exports Keep the single full guest world while moving SDK reachability into the application bundle. Select static empty exports for absent capabilities and preserve synchronous discovery after module initialization. Cover empty, tool-only, agent-only, middleware-only and mixed bundles, opaque registration helpers, tool invocation and agent snapshot roundtrips. Add a release size and preinitialization measurement harness. Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-8011-70cd-a2ea-668ac1be48da Co-authored-by: Amp <amp@ampcode.com> * Generate capability-sensitive Effect component exports Amp-Thread-ID: https://ampcode.com/threads/T-01a0c98e-876f-71c8-83fd-cf9cee9a5a55 Co-authored-by: Amp <amp@ampcode.com> * Add component size analysis and strip Rust release symbols Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Add production filesystem tools and finish SDK follow-ups Add Rust and MoonBit read/write/edit filesystem tool components, provision their releases, and cover direct and guest-invoked behavior. Integrate capability-sensitive SDK exports, bounded MoonBit stream batching, shared cross-interface ABI helpers, release stripping, reproducible size analysis, and final performance reports while preserving the unified full world. Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Remove filesystem investigation reports Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Guard reflection retention in generated clients Amp-Thread-ID: https://ampcode.com/threads/T-01a0cd68-61c9-769c-9bd6-99c100137204 Co-authored-by: Amp <amp@ampcode.com> * Use minimal canonical ABI exports for absent SDK capabilities Retain the unified five-interface export contract while linking typed lifting and lowering only for registered capabilities. Generate MoonBit reexports from source capability discovery and cover canonical ownership, post-return, async signatures and structural WIT contracts. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cd68-5968-745a-9d12-522e1ab909af Co-authored-by: Amp <amp@ampcode.com> * Add direct guest wire conversion traits and derives Convert concrete values without owned schema models, with resource preflight and affine transfer. Cover nested values, structural errors, rich fields, result payloads, derive hygiene, and skipped generic fields. Generated tool and agent invocation integration remains separate. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cda0-794b-75c8-a7c7-2de98adf1682 Co-authored-by: Amp <amp@ampcode.com> * Keep agent snapshot JSON off the generic value model Serialize typed version/principal envelopes and retain raw JSON state. Decode snapshot principals directly from tagged raw payloads while retaining the generic Principal serde API for dynamic callers. Cover old envelope semantics, exact canonical bytes, field ordering, nulls, and invalid versions. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cda0-794b-75c8-a7c7-2de98adf1682 Co-authored-by: Amp <amp@ampcode.com> * Encode string agent errors directly to their wire schema Avoid building and validating a generic schema graph for statically known string errors. This removes the Empty fixture validation root while preserving its custom-error wire payload. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cda0-794b-75c8-a7c7-2de98adf1682 Co-authored-by: Amp <amp@ampcode.com> * Generate direct MoonBit agent wire codecs and descriptors Use transactional wire ownership for generated dispatch, RPC clients, typed streams, configuration, and tool results. Keep model-based APIs for dynamic consumers. Generated tool input dispatch and tool descriptors remain to be specialized. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 * Precompute generated Scala tool command bindings Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Assert reflection modules are absent from Effect component bundles Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Release rejected MoonBit tool inputs directly from the wire arena Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Generate contextual MoonBit tool invocation with direct wire decoding Match paths statically and decode concrete arguments with a shared wire reader. Carry grafted global layouts into child invokers and release unused fields without constructing schema values. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Use direct TypeScript wire codecs for supported concrete payloads Decode nested records, options, lists and results without intermediate schema values. Check concrete scalar shapes and numeric restrictions without reapplying source transforms. Keep unsupported resource and forwarding paths explicit until their specialization lands. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Generate direct Rust tool invocation and flat concrete result schemas Match tool commands statically, decode FromWire inputs and encode IntoWire results and errors. Add WireSchema derives and flat arena metadata, handle named record roots, check ownership edges in unused fields, and isolate subtree aliases from sibling and nested records. Keep native tool error derivation independent of guest wire codecs. Descriptor registration and generated agent invocation remain model-based and require further Option B work. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Use direct wire codecs for typed streams and quota tokens Preserve lazy stream forwarding and affine quota preflight without recursive value conversion on typed paths. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Add direct wire schemas and codecs for unstructured agent values Encode text and binary variants directly while retaining language, MIME and payload-shape checks. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Use direct wire stream codecs in Rust integration fixtures and filesystem tool Add bytes::Bytes binary codecs and verify that byte-list inputs are rejected. Rebuild the filesystem plugin and update fixture locks from CLI builds. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Generate direct custom-error schema cases and payload decoders Append payload schemas to one wire arena and decode concrete error payloads without invoking model conversion. Test nested payloads using panicking model implementations and reject malformed payload structures. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Add direct wire codecs for rich values and nominal host IDs Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Dispatch Rust agent constructors and methods directly through wire codecs Preserve principal and config injection while consuming positional input trees without owned schema models. Encode return values and multimodal payloads directly, and update agent fixture payloads and public host types. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Separate tool composition from its schema representation Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Emit Rust guest descriptors and typed clients directly on wire carriers Keep native descriptors behind explicit reflection APIs. Generate agent config and client carriers with direct codec preflight and emit tool descriptors with a shared wire arena. The unchanged option-B retention gate passes for both negative fixtures and the positive reflection fixture. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Emit MoonBit tool descriptors directly into shared wire type pools Resolve inherited metadata during generation and reconstruct native tool definitions only for dynamic callers. Check named-type conflicts without constructing owned schema models. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Generate MoonBit tool clients with direct wire codecs Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Generate Scala tool wire descriptors and concrete dispatch at compile time Use direct flat-wire codecs and static command paths for generated tools, retaining owned descriptors only for explicit reflection. Stream bridges carry flat wire values and roll back moved endpoints on failed conversion. Validated model JVM/JS suites, macros and core tests, testAgents linking, focused UUID/resource regressions, and linked tool ABI/import checks. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Generate Scala agent dispatch and metadata without owned schema models Compile constructor, method, and configuration codecs and descriptor pools. Keep owned metadata behind reflection, encode string errors directly, and finalize untransferred output streams on lowering failure. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Keep MoonBit snapshot identity and failed tool cleanup wire-native Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Generate Scala wire clients and preserve asynchronous resource transfer Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Close Scala tool stdout when asynchronous input encoding fails Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Compile TypeScript tool and agent descriptors and concrete wire dispatch Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Emit Scala client stream boundary flags at compile time Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Emit concrete rich TypeScript codecs and preserve unstructured restrictions Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Specialize TypeScript typed tool clients Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Compile Effect contracts and invoke through concrete wire codecs Emit static metadata, typed clients, config and direct stream codecs while keeping reflection and dynamic middleware pay-only-if-used. Preserve affine resource rollback and cleanup across asynchronous boundaries. Verified 901 SDK tests, six real-runtime integration cases, bundle retention assertions, types, lint, formatting and rebuilt template artifacts. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Resolve shorthand metadata and transpiled TypeScript component inputs Apply source-position edits before transpilation so the production Rollup load hook and fixture bundler use the same metadata rewrite. Verified 928 SDK tests, 12 bundle tests, lint, formatting and the real stream bridge end-to-end test. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Complete wire-native Rust client generation and snapshot restoration Encode generated tool and RPC clients directly, keep reusable wire results affine, and decode unknown custom errors only on explicit inspection. Preflight nested stream payloads before endpoint preparation. Keep snapshot constructor parameters wire-native and update downstream consumers and fixtures. Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Refresh filesystem plugin with final direct-wire SDK Amp-Thread-ID: https://ampcode.com/threads/T-01a0cdf0-c7cd-724a-9c3d-0d203160a4f9 Co-authored-by: Amp <amp@ampcode.com> * Audit post-B SDK residue Amp-Thread-ID: https://ampcode.com/threads/T-01a0d20e-3743-72b2-a716-f6693dd0d190 Co-authored-by: Amp <amp@ampcode.com> * Integrate shared resource and async canonical ABI walkers Pin the local wit-bindgen revision, regenerate MoonBit bindings and filesystem components, and add pure typed/raw floors with a mixed retention fixture. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d24c-3562-702a-afc6-ab09e639a67a Co-authored-by: Daniel Vigovszky <me@vigoo.dev> * Format merged Scala macro Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix SDK CI after optimization merge Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix direct-wire canonical input carriers Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix Scala integration after main merge Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix MoonBit streaming fixture error matching Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Support HTTP namespace in static TS metadata Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Distinguish tool and agent client calls Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Update Rust streaming middleware fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Exclude only agent identity clients from tool compilation Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Update Rust streaming provider fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Refresh built-in filesystem tools after SDK changes Regenerate the committed Rust and MoonBit filesystem tool components with the current SDK contracts and ensure their CI builder installs protoc for the golem binary dependency graph. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d * Update Rust streaming caller fixture Use the direct-wire and configuration derives required by the optimized Rust SDK for the secret-policy caller component. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d * Refresh external durable streams lockfile Update the standalone fixture lockfile to the current Rust SDK dependency graph and pinned wit-bindgen revision. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d * Fix merged SDK generation regressions Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Preserve canonical HTTP schemas in Scala wire metadata Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Preserve Effect WitCodec package identity Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix integration checks after SDK size optimization Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Align integration fixtures with built-in tools Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix durable stream session index test fingerprints Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix SDK integration after main merge Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix optimized SDK runtime integration Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Regenerate filesystem tool after SDK integration Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Revert "Regenerate filesystem tool after SDK integration" This reverts commit 6efc5d71d2c5c5b399c38fd84b416b944a066102. * Temporarily capture regenerated filesystem tool Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Commit CI-reproducible filesystem tool artifact Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Pin test component wit-bindgen runtime Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Complete SDK size follow-ups Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d * Fix SDK tests after main merge Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Rebuild filesystem tools artifact Amp-Thread-ID: https://ampcode.com/threads/T-01a0e878-cb2b-73cd-9672-cc338f41592d Co-authored-by: Amp <amp@ampcode.com> * Rebuild filesystem tools artifact in CI environment Amp-Thread-ID: https://ampcode.com/threads/T-01a0e878-cb2b-73cd-9672-cc338f41592d Co-authored-by: Amp <amp@ampcode.com> * Separate built-in tools from plugins Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Address SDK size optimization review Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix SDK filesystem metadata fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Complete Rust tool metadata fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Complete tool metadata test fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Support Node 20 in Scala capability checks Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix SDK capability validation drift Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Fix SDK streaming CI regressions Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Make Effect component tests source-backed Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Allow component graph tests more time Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Refresh trapped leaf observer lockfile Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> * Document built-in filesystem tool bindings Amp-Thread-ID: https://ampcode.com/threads/T-01a0c87f-eeaa-77b9-a78f-21483cb9b54d Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Add authorization code flow with PKCE Implement Golem-issued authorization codes and opaque bearer credentials for third-party frontends, backed by atomic Redis and SQLite storage and verified upstream OIDC claims. Add scheme-qualified routes, CORS and OpenAPI support, CLI and registry contracts, generated artifacts, real-provider fixtures, backend acceptance coverage, and frontend documentation. Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec31-7436-743b-bd58-ce96ba860d01 Co-authored-by: Amp <amp@ampcode.com>

Add first-class UUID schema support Amp-Thread-ID: https://ampcode.com/threads/T-01a0ec88-63d8-7659-88bc-624363c34af7 Co-authored-by: Amp <amp@ampcode.com>

Merge main into GOL-516 update branch Resolve snapshot-assisted update changes against shard fencing, durable streams, reflection, and current generated contracts. Amp-Thread-ID: https://ampcode.com/threads/T-01a0e6ee-b35b-70eb-90b1-e7b8b8b714ff Co-authored-by: Amp <amp@ampcode.com>

2026-09-28

Merge main into filesystem-snapshot Brings in the 51 commits of main since 1fd490109. The oplog WIT keeps main's snapshot fields and adds filesystem-snapshot; the generated SDK copies, the MoonBit bindings and the OTLP exporter plugin are rebuilt against it. Main's get_range_stream uses the normalized blob path rules on every backend, and the in-memory staged oplog key holds no agent name.

Fix automatic update review semantics Remove assisted replay diagnostics, unify update attempt identity, and reuse shared automatic finalization while preserving promoted snapshot recovery and source-tail replay. Amp-Thread-ID: https://ampcode.com/threads/T-01a0e6ee-b35b-70eb-90b1-e7b8b8b714ff Co-authored-by: Amp <amp@ampcode.com>

Implement Oplog epoch fencing: oplog_metadata, epoch-checked appends, ShardLost relinquish (#3845) * Implement Oplog epoch fencing: oplog_metadata, epoch-checked appends, ShardLost relinquish * Fixes * Update the shard ownership tests for relinquish-on-revoke * Surface refused oplog commits, fail fast after a fence, and relinquish without deadlocks * Fixes for findings * Fix stale and duplicated comments * Rename relinquish to give up * Drop the shard epoch from AgentInvocationStarted * Make the storage fence generic and enforce it on every backend * Default the indexed storage to SQLite * Bound the epoch a floor raise stores and ignore claims on other executors' shards * Name the shard manager process on every delivery so a repaired grant is applied * Carry the executor error on a streaming routing miss instead of a new rejection reason * Classify the stop's fence before failing its waiters, and sweep an agent created as its shard left * Record the epoch once per open, meter the fence, and clear up the review-round comments * Use the reviewer's wording for the routing-miss doc and drop the stray wit comment * Say what the unix gate costs on Windows, which is nothing * Propagate refused oplog writes the merge left discarded * Fail the test injection loudly when the oplog refuses it * clippy fixes * Fence agent deletion, bound implausible epoch jumps, and close the rest of the adversarial review * Let a retried deletion finish and a revoked shard's deletion complete * Rename the shard-lease claim to held epochs * minor nits * Stop a given-up agent's status writes, return session write errors instead of panicking, and hand fenced deletion cleanup to the new owner * Pin the given-up status guard, a stage's unfenced commit, and recovery skipping a revoked shard with tests * Remove try_abort_transfer, which has no production caller, with its doc and test * Remove give-up re-checks that the queued ShardLost interrupt and the flusher's early return already cover * Drop the archive refusal for a given-up agent and leave the archive-trim gap to #3766 * Remove the latched-fence reclassification of a failed p3 HTTP send and its test module * Remove the trap on a refused rdbms BEGIN; the latch already refuses every later write * Move the ShardLost metric label, fenced-frame logging, a stale-delivery metric and a TaskScope tweak to a follow-up * Move the compressed archive's repeated-chunk reconciliation and its test to a follow-up * Remove the test helpers the removed tests left unused * Remove the p3 test oplog's unused fence latch * Address the 2026-09-25 review: required incarnation, typed fence errors, one retirement path, main's delete order, no automatic epoch repair * Carry the fence typed through every session trap boundary and retire the agent when stream maintenance meets it

Embed span lifecycle in durable operations and update OTLP telemetry (GOL-458) (#3969) * Embed span lifecycle in durable operations and update OTLP telemetry Replace positional span records with structured Start/End/Cancelled metadata, convert runtime producers, and update the built-in exporter and all in-tree contracts, SDKs, generated artifacts, tests, and documentation. Includes the GOL-458 implementation plan and verification ledger. Collector end-to-end execution remains pending because the local Docker engine is unavailable. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d430-1494-759f-b1b3-720ab1243661 Co-authored-by: Amp <amp@ampcode.com> * Persist executing span context for oplog processor recovery Pass the invocation loop's actual context to the invocation-start writer instead of deriving an unrelated context from processor payloads. Cover processor and method context reconstruction without changing replay or span matching. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d430-1494-759f-b1b3-720ab1243661 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

2026-09-27

Merge main into GOL-442 resource limits

2026-09-26

Merge remote-tracking branch 'origin/main' into gol-458-embedded-span-lifecycle Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0dc4c-6181-77ef-a0c5-a74ab8563be3 # Conflicts: # golem-worker-executor/src/durable_host/concurrent/call.rs # golem-worker-executor/src/durable_host/mod.rs # golem-worker-executor/src/durable_host/replay_state/claims.rs

Embed span lifecycle in durable operations and update OTLP telemetry Replace positional span records with structured Start/End/Cancelled metadata, convert runtime producers, and update the built-in exporter and all in-tree contracts, SDKs, generated artifacts, tests, and documentation. Includes the GOL-458 implementation plan and verification ledger. Collector end-to-end execution remains pending because the local Docker engine is unavailable. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d430-1494-759f-b1b3-720ab1243661 Co-authored-by: Amp <amp@ampcode.com>

2026-09-25

Merge remote-tracking branch 'origin/main' into gol-516-snapshot-assisted-automatic-update Amp-Thread-ID: https://ampcode.com/threads/T-01a0d8dd-9edd-7614-a3e9-0a7195c91ab6 Co-authored-by: Amp <amp@ampcode.com> # Conflicts: # golem-worker-executor/src/services/worker/session_index_tests.rs

Add durable streaming recovery benchmarks (#3966) * Add streaming benchmark foundation Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Add trusted invocation sessions and deterministic crash-recovery fixtures Verify worker-service reconnect, exact-cursor Takeover, asymmetric siblings, and second-restart session retirement. Include nested mid-production regression coverage exposing terminal resume cursor propagation. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d328-73c0-7761-a589-2e04adc193e3 Co-authored-by: Amp <amp@ampcode.com> * Propagate authoritative terminal resume cursors in invocation acceptance Initialize all private protocol validators from executor-verified terminal cursors. Require unique requested output offsets, preserve closed roots across Takeover, and continue requiring child output terminals. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d328-73c0-7761-a589-2e04adc193e3 Co-authored-by: Amp <amp@ampcode.com> * Register streaming recovery tests and benchmarks centrally Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Preserve benchmark diagnostics and artifact provenance Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Add streaming history and cold reconstruction benchmarks Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Add read-only live session index inspection for reconnect benchmarks Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0d380-a61a-70a1-b5a9-cef0af93ffa0 * Clean benchmark ownership without deleting deployed components Keep domain, environment, application, and owning account cleanup best effort, recording every real failure. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d380-a61a-70a1-b5a9-cef0af93ffa0 Co-authored-by: Amp <amp@ampcode.com> * Benchmark streaming reconnect and flat sibling nested crash recovery Measure trusted resume and takeover phases with deterministic gated prefixes, physical older-session index checks, exact suffix validation, and public retirement observations. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d380-a61a-70a1-b5a9-cef0af93ffa0 Co-authored-by: Amp <amp@ampcode.com> * Register streaming recovery benchmark suites Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Fix streaming benchmark provenance and read guard Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Adapt streaming benchmarks to fingerprinted storage Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Clarify streaming benchmark descriptions Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Address streaming benchmark review feedback Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Keep benchmark workflow output unchanged Amp-Thread-ID: https://ampcode.com/threads/T-01a0d300-a45d-754b-9fb1-373a5f1f640a Co-authored-by: Amp <amp@ampcode.com> * Fix InvocationAccepted and control-metadata lookups after main merge Populate the terminal_cursor_stream_ids field added to the durable streaming protocol on the main-side rewritten RPC acceptance path (a fresh start carries no output cursors, so the list is empty), and pass the session callee fingerprint to lookup_durable_stream_control_metadata in the session index tests, matching the fingerprint-scoped signature. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d842-615a-746d-a864-29d8de10614c Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Implement snapshot-assisted automatic agent updates Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0d31f-408f-7032-87b7-5bc4c365cfd6

2026-09-24

Propagate authoritative terminal resume cursors in invocation acceptance Initialize all private protocol validators from executor-verified terminal cursors. Require unique requested output offsets, preserve closed roots across Takeover, and continue requiring child output terminals. Amp-Thread-ID: https://ampcode.com/threads/T-01a0d328-73c0-7761-a589-2e04adc193e3 Co-authored-by: Amp <amp@ampcode.com>

Add Durable Streams route customizations (#3957) * docs: add durable stream customization plan Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * model: add durable stream route metadata Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a * moonbit-sdk: regenerate agent WIT bindings Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * registry: resolve durable stream route policies Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * worker-service: enforce durable stream route policies Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * worker-service: align durable stream OpenAPI and CORS Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * rust-sdk: expose durable stream route options Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * ts-sdk: expose durable stream route options Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * effect-sdk: expose durable stream route options Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * scala-sdk: expose durable stream route annotations Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * moonbit-sdk: expose durable stream route attributes Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * tests: cover customized durable stream routes end to end Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * docs: document durable stream route customizations Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * worker-service: satisfy clippy in CORS test Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * tests: avoid redundant OpenAPI path formatting Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * worker-service: preserve durable stream error precedence Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * Fix HTTP schema test metadata Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * Fix registry integration test metadata Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> * Align h2c dispatch test with route policy Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Merge remote-tracking branch 'origin/main' into gol-102-durable-stream-route-customizations Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com> # Conflicts: # golem-api-grpc/proto/golem/customapi/core.proto # golem-common/src/schema/agent/wit.rs # golem-registry-service/src/services/deployment/route_compilation.rs # golem-service-base/src/custom_api/mod.rs # golem-service-base/src/custom_api/protobuf.rs # golem-worker-service/src/custom_api/cors.rs # golem-worker-service/src/custom_api/durable_streams/append.rs # golem-worker-service/src/custom_api/durable_streams/encoding.rs # golem-worker-service/src/custom_api/durable_streams/mod.rs # golem-worker-service/src/custom_api/durable_streams/read.rs # golem-worker-service/src/custom_api/openapi/http_openapi_spec/mod.rs # golem-worker-service/src/custom_api/openapi/tests.rs # golem-worker-service/src/custom_api/request_handler/tests.rs # golem-worker-service/src/mcp/invoke/test_support.rs # sdks/moonbit/golem_sdk/gen/interface/golem/agent/guest/ffi.mbt # sdks/moonbit/golem_sdk/gen/interface/golem/tool/guest/ffi.mbt # sdks/moonbit/golem_sdk/gen/interface/golem/tool/tool-middleware-guest/ffi.mbt # sdks/moonbit/golem_sdk/interface/golem/agent/common/pkg.generated.mbti # sdks/moonbit/golem_sdk/interface/golem/agent/host/top.mbt # sdks/moonbit/golem_sdk_tools/lib/agents.mbt # sdks/moonbit/golem_sdk_tools/lib/http_emit_helpers.mbt # sdks/rust/golem-rust/tests/agent.rs # sdks/scala/macros/src/main/scala-3/golem/runtime/macros/AgentDefinitionMacro.scala

Custom HTTP handlers (#3880)

registry: resolve durable stream route policies Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a Co-authored-by: Amp <amp@ampcode.com>

model: add durable stream route metadata Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0cebb-d57b-755d-874f-93a5cc73f29a

MCP imports: durable native bridge, OAuth and typed clients (#3907) * Add exact-deployment tool state retrieval for replay Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Persist ordered MCP import deployment configuration Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Implement deterministic MCP tool projection and bounded value conversion Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Add MCP transport and outbound grant storage foundations Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Implement bounded MCP OAuth discovery and token protocol Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Coordinate MCP OAuth consent and owner-scoped credential refresh Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Probe deployed MCP endpoints before OAuth consent discovery Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Share canonical outbound network permission targets Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Admit registry MCP requests under owner authority and monthly usage Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Configure and bootstrap the registry MCP OAuth coordinator Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Add MCP import OAuth operator API and structured CLI workflow Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Expose policy-aware MCP runtime credentials and generation-fenced rejection feedback Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Verify runtime credential RPC consumer regressions Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Implement MCP import resolution, durable native invocation and operator clients Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Fix merged deployment fixtures and registry lint checks Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Fix MCP test lock scopes and strict lint warnings Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Fix incomplete entity replay test scope after main merge Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Refresh nested stream mappings under the session lock Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Repair merged CI assertions and test lint Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Make MCP stdout cancellation checkpoints deterministic Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Allow bounded headroom for the full CI executables build Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Adapt MCP test consumers and snapshot checks to merged contracts Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Share pure tool middleware compiler for dynamic MCP activation Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Complete dynamic MCP middleware integration and repair merged CI regressions Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Initialize middleware configuration in service-base snapshot test Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Complete MCP client and quota acceptance and repair deployment fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Derive archive watermark without racing observer primary growth Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * docs: record completed MCP integration and green acceptance Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com> * Connect native tools to guest bridge generation (#3926) Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3fa-3e3c-7649-8acc-433ec554c000 Co-authored-by: Amp <amp@ampcode.com> * Fix MCP tool canonical schema integration Amp-Thread-ID: https://ampcode.com/threads/T-01a0cf72-0a25-7509-90e5-421a9a1c4eef Co-authored-by: Amp <amp@ampcode.com> * Renumber registry migrations after main merge Amp-Thread-ID: https://ampcode.com/threads/T-01a0cf72-0a25-7509-90e5-421a9a1c4eef Co-authored-by: Amp <amp@ampcode.com> * Fix optional tool option admission rendering Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0cf72-0a25-7509-90e5-421a9a1c4eef --------- Co-authored-by: Amp <amp@ampcode.com>

2026-09-23

Support per-middleware secret restrictions (#3936) Amp-Thread-ID: https://ampcode.com/threads/T-01a0c830-f8f2-776e-8b45-488def8f4c6b Co-authored-by: Amp <amp@ampcode.com>

Add per-account blob storage quota Amp-Thread-ID: https://ampcode.com/threads/T-01a0cd4a-2974-72fc-8c91-80746e20a8c0 Co-authored-by: Amp <amp@ampcode.com>

Implement durable stream expiry and recreation (#3928) * Implement durable stream expiry and recreation Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com> * Keep durable stream bindings out of agent status Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com> * Implement staged lookup in debugging oplog Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com> * Preserve fork stream continuation semantics Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com> * Distinguish concrete and export fork sessions Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com> * Address durable stream expiry review findings Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com> * Park quiescent durable stream maintenance * Retry transient SQLite indexed storage initialization * Restore stream maintenance demand across cold reconstruction Amp-Thread-ID: https://ampcode.com/threads/T-01a0cd74-b013-75dd-b5bf-9d5f8a21e245 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com> Co-authored-by: Dávid István Bíró <noise64@gmail.com>

Merge remote-tracking branch 'origin/main' into gol-542-durable-stream-expiry Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com> # Conflicts: # golem-worker-executor/src/services/worker_fork/export.rs # golem-worker-executor/src/storage/indexed/mod.rs

2026-09-22

Support per-middleware secret restrictions Amp-Thread-ID: https://ampcode.com/threads/T-01a0c830-f8f2-776e-8b45-488def8f4c6b Co-authored-by: Amp <amp@ampcode.com>

Compact raw oplog entries (#3912) * Compact raw oplog entries Amp-Thread-ID: https://ampcode.com/threads/T-01a0af2f-e46f-73a8-8b8d-0485edd31c0b Co-authored-by: Amp <amp@ampcode.com> * Fix post-merge clippy failures Amp-Thread-ID: https://ampcode.com/threads/T-01a0af2f-e46f-73a8-8b8d-0485edd31c0b Co-authored-by: Amp <amp@ampcode.com> * Rebuild OTLP exporter for compact oplog ABI Amp-Thread-ID: https://ampcode.com/threads/T-01a0af2f-e46f-73a8-8b8d-0485edd31c0b Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Roll out stable indexed scans (#3908)

Implement durable stream expiry and recreation Amp-Thread-ID: https://ampcode.com/threads/T-01a0c3f9-2a89-745e-a286-486bd9969a77 Co-authored-by: Amp <amp@ampcode.com>

2026-09-21

Simplify filesystem scheduling and HTTP routing after review Integrate native filesystem work into common resident scheduling and normal lifecycle handling. Remove file-read admission policy and release ownership after bounded production.\n Use ordinary ephemeral OpenAPI invocations and the shared snapshot-keyed cache without provider-specific deadlines or freshness fencing. Restructure HTTP session transport and preserve resume attempts across ambiguous failures. Apply the agreed module, macro and body-schema changes, add recovery regressions, and align executor configuration and guidance. Amp-Thread-ID: https://ampcode.com/threads/T-01a09fef-5b1e-75be-89e8-6a7c32655f65 Co-authored-by: Amp <amp@ampcode.com>

Merge remote-tracking branch 'origin/main' into gol-588-oplog-entry-compaction Amp-Thread-ID: https://ampcode.com/threads/T-01a0af2f-e46f-73a8-8b8d-0485edd31c0b Co-authored-by: Amp <amp@ampcode.com> # Conflicts: # golem-common/src/base_model/oplog/mod.rs # golem-common/src/model/oplog/protobuf.rs # golem-worker-executor/src/durable_host/durable_stream/metadata.rs # golem-worker-executor/src/durable_host/durable_stream/registration.rs # golem-worker-executor/src/durable_host/durable_stream/tests.rs # golem-worker-executor/src/durable_host/mod.rs # golem-worker-executor/src/model/public_oplog/mod.rs # golem-worker-executor/src/model/public_oplog/wit.rs # golem-worker-executor/src/services/oplog/tests.rs # golem-worker-executor/src/services/oplog_sweep.rs # golem-worker-executor/src/services/worker.rs # golem-worker-executor/src/services/worker/session_index_tests.rs # golem-worker-executor/src/services/worker_fork.rs # golem-worker-executor/src/worker/mod.rs # golem-worker-executor/src/worker/status/tests.rs # plugins/otlp-exporter.wasm # sdks/effect/wasm/agent_guest.wasm # sdks/effect/wasm/agent_tool_middleware_guest.wasm # sdks/effect/wasm/tool_middleware_guest.wasm # sdks/moonbit/golem_sdk/gen-agent-tool-middleware/interface/golem/agent/guest/ffi.mbt # sdks/moonbit/golem_sdk/gen-agent-tool-middleware/interface/golem/tool/guest/ffi.mbt # sdks/moonbit/golem_sdk/gen-agent-tool-middleware/interface/golem/tool/tool-middleware-guest/ffi.mbt # sdks/moonbit/golem_sdk/gen-tool-middleware/interface/golem/tool/tool-middleware-guest/ffi.mbt # sdks/moonbit/golem_sdk/gen/interface/golem/agent/guest/ffi.mbt # sdks/moonbit/golem_sdk/gen/interface/golem/tool/guest/ffi.mbt # sdks/moonbit/golem_sdk/interface/golem/api/oplog/top.mbt

2026-09-20

Complete dynamic MCP middleware integration and repair merged CI regressions Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com>

Merge latest main into MCP import implementation Preserve dynamic MCP activation and durable discovery with pinned middleware plans and component-baseline bindings. Regenerate API schemas, advance the combined diff fingerprint, and resolve migration numbering collisions. Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com>

Merge latest main into HTTP handler work Preserve mounted-file and OpenAPI provider behavior alongside durable stream forks and tool ownership changes. Regenerate combined SDK interfaces and advance the deployment diff model fingerprint. Amp-Thread-ID: https://ampcode.com/threads/T-01a09fef-5b1e-75be-89e8-6a7c32655f65 Co-authored-by: Amp <amp@ampcode.com>

Merge remote-tracking branch 'origin/main' into gol-522-stable-indexed-scan Amp-Thread-ID: https://ampcode.com/threads/T-01a0af36-09c8-7438-af12-1a7ff5aa7dfb Co-authored-by: Amp <amp@ampcode.com> # Conflicts: # golem-worker-executor/src/storage/indexed/memory.rs

Durable Streams support follow-up (#3877) * Implement DS-1 stream-aware HTTP route registration (GOL-540) Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Implement DS-2 durable stream protocol foundation (GOL-101) Share authorized and attached stream reads, session admission, slot operations, and producer idempotency with the existing streaming runtime. Make producer mutations, ordered publication, retirement, and deletion cancellation-safe. Finalize sessions with lazily externalized payloads and an atomic terminal batch. Validated with 74 common tests, 369 executor tests, two lifecycle integration tests, scoped format/build/clippy checks, full Oracle approval, and a clean bug-finder review. Strict local clippy remains blocked by pre-existing macOS sandbox warnings. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fix DS-2 session ID generation in client builds Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fence durable stream writes before executor shutdown Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Recognize committed stream finalization after producer retirement Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Drain stream writes without flushing buffered host calls on shutdown Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Wait for reconstructed calls before primary atomic replay Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Retain ephemeral stream producers until response drain Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Use HTTPS Ubuntu mirrors for managed XFS CI setup Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Implement DS-3 read-only Durable Streams HTTP exposure Expose invocation sessions and stream slots through PUT, HEAD, catch-up, long-poll and SSE with reader caps and reference-client coverage. Reuse streaming RPC state and committed progress notifications. Preserve cancellation and suspension semantics, and release disconnected gateway bodies without a Poem fork. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fix Durable Streams fixture bounds for bidirectional stream codecs Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Recalibrate read-only eviction test for the expanded Rust fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Implement DS-4 cooperative stream cancellation and durable tombstones Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fix durable stream cancellation docs callout import Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Update durable stream route guard expectation for DELETE Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Persist interrupts when retiring an unloaded worker Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Admit ephemeral responses before archival or join owner removal Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Preserve parked worker recovery and invalidate deleted environment caches Honor recovery requests without converting suspended or retrying workers into permanent interrupts. Invalidate deleted-environment admission caches before draining their owners. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 * Implement DS-5 HTTP input appends with idempotent producers Drive input slots through the existing durable producer and AppendToStreamSlot RPC. Commit framed values and producer offsets atomically; preserve independent attached transport sequences across HTTP interleaving, nested values, and reconstruction. Discard fresh attached input after a foreign terminal without failing the invocation; retain protocol errors after the attached producer own End. Document early admission limits and producer retry behavior. Validated 169 producer/session tests, 19 HTTP unit tests, seven HTTP SQLite integration tests, and seven existing streaming RPC SQLite regressions. Oracle approved; final bug-finder clean. Refs GOL-105 Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Add DS-6 reference-client export compatibility harness Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Catch up worker status across automatic oplog commits Detect gaps in commit receipts and fold the committed suffix in bounded chunks before publishing status. Preserve the ephemeral DurableOnly fast path and invalidate authority snapshots after catch-up. Add a deterministic threshold-zero invocation regression and document commit/status catch-up. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Address Durable Streams review feedback Extract oversized inline test modules and use the standard test-r import. Run the reference-client compatibility tests in a dedicated prebuilt-components CLI suite and CI job, without delaying existing CLI shards. Include the new job in reports and the release gate. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Test first-terminal-wins session cancellation Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Generate deployment OpenAPI for Durable Streams routes Describe session and concrete slot operations, preserve REST routing precedence, and support producer headers in browser CORS. Add deployment snapshots and a validated, generated TypeScript client integration test covering creation, appends, and reads. Refs GOL-107 Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Use UUIDs for generated Durable Streams sessions Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Make Durable Streams route family construction explicit Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Run Durable Streams reference client through the integration framework Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Split Durable Streams HTTP handling into focused modules Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Move the primary atomic replay fix to the separate GOL-581 PR Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Move Durable Streams session orchestration into Worker Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Remove V1 suffixes from durable stream model types Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 * Decompose durable stream producer and test pre-receipt caller cancellation Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Simplify stream finalization, mutation ownership and retirement Use ordinary threshold-based vector batches for session finalization, serialize mutation bodies on one producer task while polling completion work independently, and share the archival/interruption quiescence sequence. Preserve cancellation-safe accepted mutations, separate lifecycle admission, ephemeral response fences and durable unloaded-worker interruption. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 * Separate stream-slot domain operations from gRPC transport Replace positional slot schema data with named fields and associated operations. Document stream and session API contracts and test transport conversion boundaries. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Separate stream store ownership from session runtime state Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Pass stream write ownership explicitly through nested operations Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Separate admitted session orchestration from serial stream writes Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Give durable input endpoints ownership of consumer reads Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Keep session values and domain stream mappings together Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Name stream read, registration and recovery results Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Document durable stream ownership in a browsable architecture guide Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Encapsulate session control state and clarify streaming API visibility Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Keep explicitly interrupted workers stopped during shard recovery Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Implement durable stream forks and exact-prefix recovery Add lineage-aware stream reconstruction, atomic staged fork publication, shared remote invocation joins, export fork protocol handling, and self-revert recovery. Cover storage backends, guest/RPC fork windows, HTTP and reference-client behavior, and deployment OpenAPI. Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Refresh stacked PR CI after resolving base merge Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Trigger CI after repairing GitHub stack merge ref Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Fix live recovery at retained invocation starts Complete the guarded replay-to-live transition before entering an invocation with no retained body. Preserve its recorded start while publishing stderr and handling traps as live execution. Compare the retained fork cut entry rather than the appended provenance marker, and align both walkthrough modes with the recovery boundary. Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Update executor integration fixtures for merged RPC interfaces Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Refresh rebuilt update fixtures for current SDK metadata dependency Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Fix fork lifecycle and recovery test synchronization after main merge Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Make durable stream records owner-relative Reconstruct consumer observations from the owning oplog and replace fork identity remapping with local stream coordinates and compact cut markers. Preserve foreign binding identity, RPC origin joins, cancellation authority, and revert generation fencing. Extend fork/revert coverage through the retained caller-attempt cut point and update the executor walkthrough. Keep GOL-609 staged publication intact for later extraction. Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Publish fork oplogs atomically from hidden stages Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Adapt fork and archive regressions to staged publication Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Fix retained stream attachment recovery and independent fork outputs Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Let forked streaming RPC callers observe the original invocation Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Keep forked and forwarded RPC reader cancellation local to its attachment Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Align merged test fixtures and stream metadata with CI checks Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Avoid cloning a session identity in fork metadata assertion Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Fix same-owner stream forwarding and cold metadata reconstruction Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Commit captured export-fork horizons before staging Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Preserve foreign stream authority through loopback and nested forwarding Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Record export fork admissions in the agent oplog Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> * Remove obsolete fork admission storage from debugging bootstrap Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

2026-09-19

Implement tool middleware invocation chains (GOL-439) (#3914) * Permit overlapping Rust middleware calls and add runtime fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Declare middleware installation schemas and pin entity invocation plans Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Apply compiled tool projections with infallible stream disposal Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Execute pinned tool middleware chains with durable streaming and overlap Implement GOL-439 runtime traversal, typed boundary streams, scoped entity lifetime and replay, and concurrent underlying calls across all five SDKs. Preserve RPC-style early result visibility, filesystem-capable staging, recorded entity idempotency, and observer-drop versus explicit-cancel semantics. Add real crash, native parity, fan-out, and cross-language coverage; align generated bindings, runtime artifacts, and authoring documentation. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 * Separate entity model tests from definitions Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Fix middleware CI contracts and primary RPC stream teardown Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Fix remaining middleware CI contract and lint checks Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Gate reconstruction test helpers in production builds Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Synchronize common tool WIT after main merge Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Await snapshot failure events independently of invocation response Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com> * Review fixes --------- Co-authored-by: Amp <amp@ampcode.com>

Make durable stream records owner-relative Reconstruct consumer observations from the owning oplog and replace fork identity remapping with local stream coordinates and compact cut markers. Preserve foreign binding identity, RPC origin joins, cancellation authority, and revert generation fencing. Extend fork/revert coverage through the retained caller-attempt cut point and update the executor walkthrough. Keep GOL-609 staged publication intact for later extraction. Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com>

Native external-tool invocation on existing and ephemeral agents (#3897) * test: characterize ephemeral invocation admission Pin queue ordering, idempotency, interruption and resumption behavior that native external-tool owners must preserve. * feat: inherit and persist component-level tool bindings Add component tool-binding layers alongside environment and agent bindings. Carry the effective bindings through manifests, deployment state, persistence, schemas and regression tests. * feat: persist independent component configuration Store and validate a component configuration baseline independently of agent types, while inheriting it into real agents. Include deployment hashing, transport, manifest and generated API contracts. * feat: provision explicit external-tool owner identity and permissions Distinguish component agents from host-only ephemeral owners, persist binding ownership, and provision component permission cards and owner context. Keep ownership WIT and generated SDK bindings together; require provisioned metadata rather than synthesizing default permission cards. * feat: queue native tool invocations on existing agents Add the external-tool invocation and result contracts, pinned activation snapshots, durable queue execution, replay and oplog projections. Include protocol/SDK artifacts and executor fixtures covering invocation ordering, authorization and recovery. * feat: execute tools with host-only ephemeral owners Create component-backed external-tool owners without instantiating the owner guest. Apply ephemeral admission, lifecycle, resource accounting and capability restrictions with dedicated regression coverage. * feat: expose native tool invocation through REST and resumable sessions Support existing-agent and fresh-component targets through the public API, typed results and byte stdin/stdout sessions. Include authentication, target-bound resume tokens, trusted internal admission, deployment revision fencing, generated clients/docs, and updates to existing method-session consumers. * feat: add CLI native tool invocation and streaming I/O Expose golem tool invoke with explicit owner selection, typed input, idempotent lookup, triggering and scheduling. Drive live byte streams without mixing structured reports into raw stdout; include argument and output-schema coverage. * fix: resolve new tool admissions against the active deployment Prefer the active deployment when it contains the owner component revision, including after rollback. Fall back to the latest matching deployment only for older owner revisions; preserve already accepted activation snapshots and test both cases. * refactor: share native tool constraint validation Move constraint validation into golem-schema so executor dispatch and MCP argument projection use the same rules. Retain executor error mapping and add shared validator tests. * feat: compile and persist native tool MCP exports Declare component-backed tool exports in MCP deployments, validate owner bindings and security, and compile command aliases, filters and JSON schemas. Carry exports through manifest diffs, registry persistence, protobuf/OpenAPI contracts and projection tests. * feat: invoke MCP tools through native ephemeral sessions Authenticate against the exact compiled deployment and invoke exported commands with fresh component-backed ephemeral owners and least-privilege scope. Pin sessions to deployment revisions, invalidate capability caches, bound and drain byte streams, propagate cancellation, and document the complete MCP feature. * Reduce external-tool enum sizes without changing wire contracts Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Align CLI tool binding schemas and MCP test fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Provision built-in components with their owner permission cards Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Apply generated-code lint policy to every generated module Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Sync Scala oplog declarations for external-tool invocations Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Complete external-tool variant handling in test fixtures Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Allow twenty minutes for the workspace CI binary build Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * test: align session, card and MCP fixtures with native tool contracts Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * fix(cli): hash and deploy explicit ambient component bindings Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * fix(executor): recover non-agent component worker metadata Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * ci: capture native stacks for worker group3 crashes Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * test(cli): identify initial permission cards through agent wallet Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * ci: install debugger before capturing worker cores Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Preserve non-agent guest workers in owner-context resolution Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Guard worker reconstruction with the native invocation stack Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * test(executor): expect external owner update ingress rejection Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * ci: remove resolved worker stack crash diagnostics Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * fix(plugins): rebuild OTLP exporter for owner-kind oplog ABI Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Split native MCP tool tests into a separate module Amp-Thread-ID: https://ampcode.com/threads/T-01a0ae37-6fd5-74fc-b906-d1eabf7f5ad7 Co-authored-by: Amp <amp@ampcode.com> * Share tool WIT error types through golem core Amp-Thread-ID: https://ampcode.com/threads/T-01a0ae37-79da-70ca-b17c-b7207cd3b377 Co-authored-by: Amp <amp@ampcode.com> * fix(test-components): use shared tool RPC error type Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * fix(test-components): retain generated tool metadata dependency Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * fix(executor): instantiate component-backed external tool owners Require a component Instance for every primary runtime without selecting or constructing an agent for component-baseline owners. Use resolved owner roles for ephemeral initialization replay, retain fail-stop behavior through core initialization, and apply ordinary resource accounting. Cover same-key convergence and reconstruction with real component fixtures and align runtime documentation. Amp-Thread-ID: https://ampcode.com/threads/T-01a0ae37-8515-73d4-ab20-c24099a47d42 Co-authored-by: Amp <amp@ampcode.com> * Allow five minutes to extract the CI binary archive Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Align tool WIT contract test with core error ownership Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Wait for recovery completion before asserting snapshot retry status Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> * Lower tool attachments onto ordinary durable streams Use typed internal input/result envelopes and early output mappings, sharing replay-safe byte draining and attachment pumping with method streams. Preserve early stdout, durable handle binding, cancellation, replay validation, and declaration retry identity. Amp-Thread-ID: https://ampcode.com/threads/T-01a0b044-994e-756a-9384-a308dc97d3d6 Co-authored-by: Amp <amp@ampcode.com> * Expose metadata-driven CLI tool invocation and address review feedback Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

2026-09-18

Carry deployment OpenAPI origin scheme through configuration and route snapshots Amp-Thread-ID: https://ampcode.com/threads/T-01a0b43b-fce5-706f-9f9b-587a3f8fba4f Co-authored-by: Amp <amp@ampcode.com>

Merge main into GOL-439 and adapt middleware stream sessions Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com>

Merge latest main and reconcile HTTP and executor integration Amp-Thread-ID: https://ampcode.com/threads/T-01a09fef-5b1e-75be-89e8-6a7c32655f65 Co-authored-by: Amp <amp@ampcode.com>

Merge branch 'main' into filesystem-snapshot Routine catch-up: 43 commits of main since 10 September. Both sides' behaviour is kept everywhere. Ported, not merged textually: - worker/status.rs was promoted to worker/status/{mod,tests}.rs on main (#3854). Main's deletion is accepted and the epic's change is ported into the new module: the FilesystemSnapshotName import, the last_automatic_snapshot_filesystem_snapshot and last_automatic_snapshot_confirmed fields threaded through calculate_update_fields, update_status_with_precomputed_regions and AgentStatusRecord, the SnapshotConfirmed arms, and the six new tests plus the snapshot_with_filesystem/snapshot_confirmed builders in worker/status/tests.rs. Regenerated, not hand-merged: - sdks/moonbit/golem_sdk/**: bash scripts/regen-bindings.sh, run from sdks/moonbit/golem_sdk with the repo-pinned golemcloud/wit-bindgen fork at 36866deb. Regeneration was required, not cosmetic: the epic's new WIT type shifts wit-bindgen's type-index counter, so the agent/guest/ffi.mbt files that git auto-merged without conflict still held stale __wit_bindgen_lower_tNNN indices. - openapi/golem-service.yaml, openapi/golem-worker-service.yaml, openapi/golem-registry-service.yaml and the REST API docs MDX: cargo make generate-openapi. - plugins/otlp-exporter.wasm: main's build artifact is taken; the epic changed no plugin source. - sdks/effect/wit/deps: cargo make wit. sdks/effect is new in main and had never received the epic's oplog WIT additions. Conflicts resolved by keeping both sides: - The OplogEntry match arms in golem-common oplog/mod.rs and worker-executor public_oplog/mod.rs take main's shape with SnapshotConfirmed added beside Snapshot. Main had already moved the Card*/Stream*/retry-policy variants into an earlier arm, so only SnapshotConfirmed is genuinely new. - Both sides claimed the same protobuf field numbers. Main's numbering is kept and the epic's SnapshotConfirmed moves to the next free tag: public_oplog.proto 65 -> 67, raw_oplog.proto 64 -> 66. - sandbox_filesystem/adapter.rs keeps the epic's copy_contents and main's delete_and_verify(self) -> Result<(), DeleteError<Self>>; call sites in adapter.rs and xfs.rs are adapted to the by-value signature. - The remaining conflicts are import lists, resolved as unions.

Merge remote-tracking branch 'origin/main' into gol-588-oplog-entry-compaction Amp-Thread-ID: https://ampcode.com/threads/T-01a0af2f-e46f-73a8-8b8d-0485edd31c0b Co-authored-by: Amp <amp@ampcode.com> # Conflicts: # golem-worker-executor/src/worker/status.rs

Compact raw oplog entries Amp-Thread-ID: https://ampcode.com/threads/T-01a0af2f-e46f-73a8-8b8d-0485edd31c0b Co-authored-by: Amp <amp@ampcode.com>

2026-09-17

Execute pinned tool middleware chains with durable streaming and overlap Implement GOL-439 runtime traversal, typed boundary streams, scoped entity lifetime and replay, and concurrent underlying calls across all five SDKs. Preserve RPC-style early result visibility, filesystem-capable staging, recorded entity idempotency, and observer-drop versus explicit-cancel semantics. Add real crash, native parity, fan-out, and cross-language coverage; align generated bindings, runtime artifacts, and authoring documentation. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43

Lower tool attachments onto ordinary durable streams Use typed internal input/result envelopes and early output mappings, sharing replay-safe byte draining and attachment pumping with method streams. Preserve early stdout, durable handle binding, cancellation, replay validation, and declaration retry identity. Amp-Thread-ID: https://ampcode.com/threads/T-01a0b044-994e-756a-9384-a308dc97d3d6 Co-authored-by: Amp <amp@ampcode.com>

Merge remote-tracking branch 'origin/main' into gol-442-unify-resource-limits # Conflicts: # .agents/skills/understanding-durable-execution/SKILL.md # golem-worker-executor-test-utils/src/lib.rs # golem-worker-executor/src/worker/invocation_loop.rs # golem-worker-executor/worker-executor-walkthrough.html

Roll out stable indexed scans Amp-Thread-ID: https://ampcode.com/threads/T-01a0af36-09c8-7438-af12-1a7ff5aa7dfb Co-authored-by: Amp <amp@ampcode.com>

Merge main into MCP imports draft and reconcile deployment contracts Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com>

Merge main into durable streams with lifecycle and RPC integration Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com>

Merge main durable stream changes into native tool invocations Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com>

Implement MCP import resolution, durable native invocation and operator clients Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com>

Durable Streams: initial export side (DS-1–DS-6) (#3854) * Implement DS-1 stream-aware HTTP route registration (GOL-540) Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Implement DS-2 durable stream protocol foundation (GOL-101) Share authorized and attached stream reads, session admission, slot operations, and producer idempotency with the existing streaming runtime. Make producer mutations, ordered publication, retirement, and deletion cancellation-safe. Finalize sessions with lazily externalized payloads and an atomic terminal batch. Validated with 74 common tests, 369 executor tests, two lifecycle integration tests, scoped format/build/clippy checks, full Oracle approval, and a clean bug-finder review. Strict local clippy remains blocked by pre-existing macOS sandbox warnings. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fix DS-2 session ID generation in client builds Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fence durable stream writes before executor shutdown Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Recognize committed stream finalization after producer retirement Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Drain stream writes without flushing buffered host calls on shutdown Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Wait for reconstructed calls before primary atomic replay Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Retain ephemeral stream producers until response drain Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Use HTTPS Ubuntu mirrors for managed XFS CI setup Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Implement DS-3 read-only Durable Streams HTTP exposure Expose invocation sessions and stream slots through PUT, HEAD, catch-up, long-poll and SSE with reader caps and reference-client coverage. Reuse streaming RPC state and committed progress notifications. Preserve cancellation and suspension semantics, and release disconnected gateway bodies without a Poem fork. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fix Durable Streams fixture bounds for bidirectional stream codecs Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Recalibrate read-only eviction test for the expanded Rust fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Implement DS-4 cooperative stream cancellation and durable tombstones Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fix durable stream cancellation docs callout import Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Update durable stream route guard expectation for DELETE Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Persist interrupts when retiring an unloaded worker Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Admit ephemeral responses before archival or join owner removal Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Preserve parked worker recovery and invalidate deleted environment caches Honor recovery requests without converting suspended or retrying workers into permanent interrupts. Invalidate deleted-environment admission caches before draining their owners. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 * Implement DS-5 HTTP input appends with idempotent producers Drive input slots through the existing durable producer and AppendToStreamSlot RPC. Commit framed values and producer offsets atomically; preserve independent attached transport sequences across HTTP interleaving, nested values, and reconstruction. Discard fresh attached input after a foreign terminal without failing the invocation; retain protocol errors after the attached producer own End. Document early admission limits and producer retry behavior. Validated 169 producer/session tests, 19 HTTP unit tests, seven HTTP SQLite integration tests, and seven existing streaming RPC SQLite regressions. Oracle approved; final bug-finder clean. Refs GOL-105 Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Add DS-6 reference-client export compatibility harness Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Catch up worker status across automatic oplog commits Detect gaps in commit receipts and fold the committed suffix in bounded chunks before publishing status. Preserve the ephemeral DurableOnly fast path and invalidate authority snapshots after catch-up. Add a deterministic threshold-zero invocation regression and document commit/status catch-up. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Address Durable Streams review feedback Extract oversized inline test modules and use the standard test-r import. Run the reference-client compatibility tests in a dedicated prebuilt-components CLI suite and CI job, without delaying existing CLI shards. Include the new job in reports and the release gate. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Test first-terminal-wins session cancellation Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Use UUIDs for generated Durable Streams sessions Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Make Durable Streams route family construction explicit Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Run Durable Streams reference client through the integration framework Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Split Durable Streams HTTP handling into focused modules Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Move the primary atomic replay fix to the separate GOL-581 PR Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Move Durable Streams session orchestration into Worker Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Remove V1 suffixes from durable stream model types Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 * Decompose durable stream producer and test pre-receipt caller cancellation Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Simplify stream finalization, mutation ownership and retirement Use ordinary threshold-based vector batches for session finalization, serialize mutation bodies on one producer task while polling completion work independently, and share the archival/interruption quiescence sequence. Preserve cancellation-safe accepted mutations, separate lifecycle admission, ephemeral response fences and durable unloaded-worker interruption. Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 * Separate stream-slot domain operations from gRPC transport Replace positional slot schema data with named fields and associated operations. Document stream and session API contracts and test transport conversion boundaries. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Separate stream store ownership from session runtime state Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Pass stream write ownership explicitly through nested operations Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Separate admitted session orchestration from serial stream writes Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Give durable input endpoints ownership of consumer reads Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Keep session values and domain stream mappings together Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Name stream read, registration and recovery results Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Document durable stream ownership in a browsable architecture guide Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Encapsulate session control state and clarify streaming API visibility Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Keep explicitly interrupted workers stopped during shard recovery Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Fix durable stream review findings - Commit externally sequenced slot appends under the session lock so a concurrent slot or session delete cannot tombstone the slot between the writability check and the commit - Allow Stream-Closed and Producer-* request headers in durable stream CORS preflight and expose the Producer-* response headers - Log instead of panic when draining ephemeral streams fails during executor shutdown - Document why stream_slot_session_matches ignores the execution config Amp-Thread-ID: https://ampcode.com/threads/T-01a0adfd-4cd2-7460-8700-ddfcebbf1e45 Co-authored-by: Amp <amp@ampcode.com> * Heap-pin invocation session futures across cancellation scopes Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Install protoc only in CI jobs that build etcd-client Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> * Refresh tool-streaming fixture lockfile after SDK metadata extraction Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Merge main and preserve durable stream lifecycle ownership Resolve lazy worker initialization, deletion, and oplog ownership changes against the durable stream refactor. Preserve response leases, reusable oplog tasks, generation-safe retirement, and deletion maintenance drainage. Document HTTP stream-session execution configuration matching. Expand durable stream routes through an explicit endpoint table and return validation errors on route ID exhaustion. Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com>

Fix RPC permit deadlocks with scheduled caller suspension (#3870) * Suspend durable callers during long RPC waits Amp-Thread-ID: https://ampcode.com/threads/T-01a08612-7aac-73bd-bf42-452a091396a0 Co-authored-by: Amp <amp@ampcode.com> * Preserve RPC trap context and verify recovery identity after rebase Amp-Thread-ID: https://ampcode.com/threads/T-01a08612-7aac-73bd-bf42-452a091396a0 Co-authored-by: Amp <amp@ampcode.com> * Align executor guidance and walkthrough with RPC suspension Amp-Thread-ID: https://ampcode.com/threads/T-01a08612-7aac-73bd-bf42-452a091396a0 Co-authored-by: Amp <amp@ampcode.com> * Implement prepare in debugging-service test worker proxy Amp-Thread-ID: https://ampcode.com/threads/T-01a08612-7aac-73bd-bf42-452a091396a0 Co-authored-by: Amp <amp@ampcode.com> * Require both agents to participate in quota capability round-trip test Amp-Thread-ID: https://ampcode.com/threads/T-01a08612-7aac-73bd-bf42-452a091396a0 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

2026-09-16

Merge remote-tracking branch 'origin/main' into gol-442-unify-resource-limits # Conflicts: # cli/golem/src/command_handler.rs # cli/golem/src/launch.rs

Merge durable-streams-1 into durable-streams-2 Integrate DS9 fork and revert semantics with the stream store and session refactor. Restore fork-aware readers, consumer projection and recovery coverage. Serialize SQLite fork publication across independent executor connections. Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com>

Declare middleware installation schemas and pin entity invocation plans Amp-Thread-ID: https://ampcode.com/threads/T-01a0a94d-ba14-716c-9f45-1f7766424d43 Co-authored-by: Amp <amp@ampcode.com>

Implement durable stream forks and exact-prefix recovery Add lineage-aware stream reconstruction, atomic staged fork publication, shared remote invocation joins, export fork protocol handling, and self-revert recovery. Cover storage backends, guest/RPC fork windows, HTTP and reference-client behavior, and deployment OpenAPI. Amp-Thread-ID: https://ampcode.com/threads/T-01a09ed0-4b3f-726c-b5ae-393071644e5b Co-authored-by: Amp <amp@ampcode.com>

Merge main and integrate native tool activation and error contracts Amp-Thread-ID: https://ampcode.com/threads/T-01a09fe5-f1ff-7034-8fdf-d5cd66e97b6b Co-authored-by: Amp <amp@ampcode.com>

Merge main and regenerate combined SDK bindings Preserve mounted HTTP review fixes alongside upstream tool middleware and oplog changes. Resolve the moved registry tests, retain both import sets and refresh Effect/MoonBit generated bindings from the merged contracts. Amp-Thread-ID: https://ampcode.com/threads/T-01a09fef-5b1e-75be-89e8-6a7c32655f65 Co-authored-by: Amp <amp@ampcode.com>

Address HTTP handler review feedback and reuse upload hashes Clarify provider method metadata and use shared schema helpers and typed validation errors. Follow module conventions and explain filesystem inspection lifecycle and its existing CLI/REST consumers. Remove executor read deadlines while preserving bounded admission and cancellation cleanup. Reuse upload-time BLAKE3 metadata for immutable router indexes instead of downloading and hashing blobs during deployment; align codecs, configuration, corpus and generated artifacts. Amp-Thread-ID: https://ampcode.com/threads/T-01a09fef-5b1e-75be-89e8-6a7c32655f65 Co-authored-by: Amp <amp@ampcode.com>

Expose policy-aware MCP runtime credentials and generation-fenced rejection feedback Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com>

Merge main into durable-streams-1 Amp-Thread-ID: https://ampcode.com/threads/T-01a089b5-acc7-732b-b00f-866eba6f3c44 Co-authored-by: Amp <amp@ampcode.com>

feat: compile and persist native tool MCP exports Declare component-backed tool exports in MCP deployments, validate owner bindings and security, and compile command aliases, filters and JSON schemas. Carry exports through manifest diffs, registry persistence, protobuf/OpenAPI contracts and projection tests.

feat: expose native tool invocation through REST and resumable sessions Support existing-agent and fresh-component targets through the public API, typed results and byte stdin/stdout sessions. Include authentication, target-bound resume tokens, trusted internal admission, deployment revision fencing, generated clients/docs, and updates to existing method-session consumers.

feat: queue native tool invocations on existing agents Add the external-tool invocation and result contracts, pinned activation snapshots, durable queue execution, replay and oplog projections. Include protocol/SDK artifacts and executor fixtures covering invocation ordering, authorization and recovery.

feat: provision explicit external-tool owner identity and permissions Distinguish component agents from host-only ephemeral owners, persist binding ownership, and provision component permission cards and owner context. Keep ownership WIT and generated SDK bindings together; require provisioned metadata rather than synthesizing default permission cards.

feat: persist independent component configuration Store and validate a component configuration baseline independently of agent types, while inheriting it into real agents. Include deployment hashing, transport, manifest and generated API contracts.

feat: inherit and persist component-level tool bindings Add component tool-binding layers alongside environment and agent bindings. Carry the effective bindings through manifests, deployment state, persistence, schemas and regression tests.

Simplify filesystem reads back to exact absolute paths Restore CanonicalFilePath and the file_path protobuf field while retaining metadata-first bounded streaming and no-symlink inspection. Resolve mounted targets in the HTTP layer and preserve directory intent there. Update inspection guidance and tests, including rejection before normalization and activation. The attached M03/F02 contract on GOL-554 and downstream issue references now describe the exact-path boundary. Amp-Thread-ID: https://ampcode.com/threads/T-01a09fef-5b1e-75be-89e8-6a7c32655f65 Co-authored-by: Amp <amp@ampcode.com>

Add failed invocation recovery guidance (#3878) * Add failed invocation recovery guidance Amp-Thread-ID: https://ampcode.com/threads/T-01a09f01-c474-77ff-9990-30f4e0fa5d05 Co-authored-by: Amp <amp@ampcode.com> * Address recovery guidance review Amp-Thread-ID: https://ampcode.com/threads/T-01a09f01-c474-77ff-9990-30f4e0fa5d05 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Merge remote-tracking branch 'origin/main' into gol-442-unify-resource-limits # Conflicts: # openapi/golem-registry-service.yaml # openapi/golem-service.yaml # sdks/effect/src/Mysql/internal/codec.ts

Tool middleware registry and cli support (#3842) * Tool middleware registry and cli support * Address middleware registry and CLI review findings Amp-Thread-ID: https://ampcode.com/threads/T-01a07aed-7396-722a-a583-967d17439941 Co-authored-by: Amp <amp@ampcode.com> * Fix merged launch fixture and MoonBit unknown tool error handling Amp-Thread-ID: https://ampcode.com/threads/T-01a07aed-7396-722a-a583-967d17439941 Co-authored-by: Amp <amp@ampcode.com> * Update CLI planner fixtures to current extracted metadata format Amp-Thread-ID: https://ampcode.com/threads/T-01a07aed-7396-722a-a583-967d17439941 Co-authored-by: Amp <amp@ampcode.com> * Synchronize poll-loop interrupt tests with guest execution Amp-Thread-ID: https://ampcode.com/threads/T-01a08713-5484-7365-9b7e-0e0b927e38d1 Co-authored-by: Amp <amp@ampcode.com> * Fix tool output contract in merged public oplog fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a08713-5484-7365-9b7e-0e0b927e38d1 Co-authored-by: Amp <amp@ampcode.com> * Regenerate middleware REST docs after main generator update Amp-Thread-ID: https://ampcode.com/threads/T-01a08713-5484-7365-9b7e-0e0b927e38d1 Co-authored-by: Amp <amp@ampcode.com> * Address middleware review feedback and persist environment compatibility policy Amp-Thread-ID: https://ampcode.com/threads/T-01a08713-5484-7365-9b7e-0e0b927e38d1 Co-authored-by: Amp <amp@ampcode.com> * Align bridge and native streaming tests with generated contracts Amp-Thread-ID: https://ampcode.com/threads/T-01a08713-5484-7365-9b7e-0e0b927e38d1 Co-authored-by: Amp <amp@ampcode.com> * Rename manifest deployment option to toolCompatibilityMode Amp-Thread-ID: https://ampcode.com/threads/T-01a08713-5484-7365-9b7e-0e0b927e38d1 Co-authored-by: Amp <amp@ampcode.com> * Preserve early years in Effect MySQL temporal decoding Amp-Thread-ID: https://ampcode.com/threads/T-01a08713-5484-7365-9b7e-0e0b927e38d1 Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Merge remote-tracking branch 'origin/main' into gol-442-unify-resource-limits

Persist agent startup and replay failures (#3882) * Persist agent recovery failures in oplog Amp-Thread-ID: https://ampcode.com/threads/T-01a09f02-a1a0-717f-acd6-6ebbc1cb40dd Co-authored-by: Amp <amp@ampcode.com> * Fix Scala oplog error roundtrip fixture Amp-Thread-ID: https://ampcode.com/threads/T-01a09f02-a1a0-717f-acd6-6ebbc1cb40dd Co-authored-by: Amp <amp@ampcode.com> * Fix recovery failure retry handling Amp-Thread-ID: https://ampcode.com/threads/T-01a09f02-a1a0-717f-acd6-6ebbc1cb40dd Co-authored-by: Amp <amp@ampcode.com> * Classify durable recovery failures Amp-Thread-ID: https://ampcode.com/threads/T-01a09f02-a1a0-717f-acd6-6ebbc1cb40dd Co-authored-by: Amp <amp@ampcode.com> * Rebuild OTLP plugin for recovery oplog ABI Amp-Thread-ID: https://ampcode.com/threads/T-01a09f02-a1a0-717f-acd6-6ebbc1cb40dd Co-authored-by: Amp <amp@ampcode.com> * Address durable recovery review findings Amp-Thread-ID: https://ampcode.com/threads/T-01a09f02-a1a0-717f-acd6-6ebbc1cb40dd Co-authored-by: Amp <amp@ampcode.com> --------- Co-authored-by: Amp <amp@ampcode.com>

Merge remote-tracking branch 'origin/main'

2026-09-15

Integrate GOL-556 routing and GOL-557 streaming filesystem inspection Amp-Thread-ID: https://ampcode.com/threads/T-01a09fef-5b1e-75be-89e8-6a7c32655f65 Co-authored-by: Amp <amp@ampcode.com>

Persist ordered MCP import deployment configuration Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com>

Add exact-deployment tool state retrieval for replay Amp-Thread-ID: https://ampcode.com/threads/T-01a0a44d-b3d8-706a-9f0e-bece137e98a9 Co-authored-by: Amp <amp@ampcode.com>

Wire metadata-first bounded filesystem reads through executor and clients Amp-Thread-ID: https://ampcode.com/threads/T-01a0a416-3a9f-758e-9c49-839039333771 Co-authored-by: Amp <amp@ampcode.com>

Keep unavailable HTTP security as a terminal selection barrier Amp-Thread-ID: https://ampcode.com/threads/T-01a0a416-30eb-77d5-a492-84dce752c251 Co-authored-by: Amp <amp@ampcode.com>

Persist mounted HTTP dispatch descriptors and codecs Amp-Thread-ID: https://ampcode.com/threads/T-01a0a416-30eb-77d5-a492-84dce752c251 Co-authored-by: Amp <amp@ampcode.com>

Define metadata-first filesystem byte selections and outcomes Amp-Thread-ID: https://ampcode.com/threads/T-01a0a416-3a9f-758e-9c49-839039333771 Co-authored-by: Amp <amp@ampcode.com>

Add validated root-bounded filesystem read targets Amp-Thread-ID: https://ampcode.com/threads/T-01a0a416-3a9f-758e-9c49-839039333771 Co-authored-by: Amp <amp@ampcode.com>

feat: unify aggregate resource policy Attribute billable usage to the policy revision applied by each agent, independently from consent-mode revisions. Expose resolved allowances, grant provenance, and exact non-price excess through the public contract.\n\nBREAKING CHANGE: account resource policy fields and revision transport replace the previous aggregate limit representation.\n\nRefs GOL-584