Proto commits in golemcloud/golem

These commits are when the Protocol Buffers files have changed: (only the last 100 relevant commits are shown)

2026-07-08

Get agent wallet support

2026-07-03

Merge branch 'main' into port-snapshot-recovery-main

agent-permissions: handle card expiration (#3672) * agent-permissions: cli integration * resolve conflict * simplify card serde * cleanup card code * fix cli schema * update diff model fingerpint * agent-permissions: various cleanups and improvements * further cleanups * wip * factor out reverse index * fmt * fixes * host card install via queue * handle card expiration * new dedicated oplog entry * fixes * update scala dts * fix scala dts * OpenAPI --------- Co-authored-by: Daniel Vigovszky <daniel.vigovszky@gmail.com>

The documentation is generated from this commit.

2026-07-02

Merge branch 'main' into port-snapshot-recovery-main

2026-07-01

agent-permissions: cli integration & api improvements (#3646) * agent-permissions: cli integration * resolve conflict * simplify card serde * cleanup card code * fix cli schema * update diff model fingerpint * Some cleanups for agent-permissions cli integration (#3678) * fix plugin and fs diffing * bump diff model and revert v2 fingerprint * fix manifest schema change --------- Co-authored-by: Daniel Vigovszky <daniel.vigovszky@gmail.com> Co-authored-by: Dávid István Bíró <noise64@gmail.com>

2026-06-30

Fix snapshot recovery

Rust tool definition macros (#3673) * phase 0-2 * phase 3 * phase 4 * SDK updates * Removed txt * Removed md * Fix * Made implicit body usable on all sub-levels * Fix * Fix * fix

Fix snapshot recovery

2026-06-29

Opaque secrets (#3674) * phase 0 * Phase 1 * Phase 2 * Phase 3 * Phase 4 * phase 5 * phase 6 * phase 7 * phase 8+9 * Fixes * Format * Review comment fixes * Review comment fixes * Fix reveiew comment

2026-06-26

handle card expiration

host card install via queue

Phase 3

phase 0-2

Phase 1

wip

further cleanups

2026-06-25

simplify card serde

agent-permissions: cli integration

2026-06-24

agent-permissions: card installation host function (#3637) * agent-permissions: card installation host function * clean dts * installed card preservation test * test green * fmt * rebuild plugins * comment: make monomorphize non-fallible * comments

2026-06-23

wip

further cleanups

agent-permissions: cli integration

test green

agent-permissions: card installation host function

agent-permissions: store agent cards in registry service (#3631) * agent-permissions: store cards in registry service * basic revocation * update executor * wip * update * regenerate openapi * cleanup wip * store card as enum * update dts * fix compilation * resolve conflicts * fmt * rebuild plugin wasm

2026-06-22

Value type refactoring 5 (#3629) * Restructuring * New agent WIT, invocation migrated * Optimization * Oplog and invocation gRPC/REST API migration Amp-Thread-ID: https://ampcode.com/threads/T-019eb504-80dd-723a-b519-2fc53141eb19 Co-authored-by: Amp <amp@ampcode.com> * Fixes * More migrations * ParsedAgentId migrations * Cleanup * Split out golem-schema crate * Rust SDK, WIP * Migrated the Rust SDK (initial version) * Rust SDK fixes * Test migration * Fixes * More migrations * More migrations * Format * Integration tests migrated * Better poem schemas * Migrated TS SDK, WIP * Cleanups and bridge migration for TS * Scala SDK migration * MoonBit SDK migration * Lot more migrations * unstructurted text/binary fixes * More config migration * Secret migrations * Removed golem-wasm * Redirected cargo target dir fixes * Fixes * Plugin rebuilt * Fixes * Scala SDK fix * Fixes * Fixes * Hot path optimizations * Format * Increased timeout * Increased timeout * Bridge generator related fixes * Test fix * Fixes * Fix moonbit templates * Serialize perf improvement * Enable wasmtime fscache for integ tests * Fix --------- Co-authored-by: Amp <amp@ampcode.com>

wip

further cleanups

2026-06-20

Merge branch 'main' into value-type-refactoring-5

Removed golem-wasm

2026-06-19

Secret migrations

More config migration

Lot more migrations

2026-06-18

wip

wip

cleanup

wip

surface calculation fixes

update

cleanup

cleanup

agent-permissions: card installation host function

basic revocation

agent-permissions: store cards in registry service

agent-permissions: initial agent wallet (#3627) * agent-permissions: initial agent wallet * wip * card cleanup wip * wip * fix compilation errors * fix test * fix test * add monomorphization tests * executor auth cleanup * fix tests

2026-06-17

More migrations

More migrations

2026-06-16

Concurrent durability (#3628) * New oplog entries * Initial concurrent durability implementation * Durability scopes * Further fixes of the new helpers * Migration * SDKs * Fixes * Fixes * Fixes * SDK updates and OpenAPI fix * Some more migration to the new oplog reading logic * Adjusted some comments * Proto fix

2026-06-15

More migrations

2026-06-11

Oplog and invocation gRPC/REST API migration Amp-Thread-ID: https://ampcode.com/threads/T-019eb504-80dd-723a-b519-2fc53141eb19 Co-authored-by: Amp <amp@ampcode.com>

2026-06-10

agent-permissions: make cards more typesafe & consistently use account email everywhere (#3616) * agent-permissions: make cards more typesafe & consistently use account email everywhere * fix test * fix test * stored created by email in create oplog entry * adjust wit * revert oplog change in favour of taking email from component metadata * adjust test * comments * fmt * fmt

agent-permissions: remove old environment-shares logic & add permission shares to cli (#3613) * agent-permissions: remove old environment-shares logic * agent-permissions: remove environment shares * fix test * regenerate openapi * fix migrations

Migrated MCP export (#3621) * Migrated MCP export * Missing files * Do not add prompts of rejected methods * Schema fix and prop tests * Collision handling * Switched multimodal reprsentation to variants and migrated MCP to the new JSON schema * Clippy * Get rid of legacy mcp json format

2026-06-09

agent-permissions: use cards for existing permission checks (3) (#3612) * agent-permissions: port remaining apis to cards * migrate remaining apis * cleanup * mark get plan as broken * debugging service fixes * more test fixes * fmt * comments

2026-06-08

agent-permissions: use cards for existing permission checks (2) (#3610) * agent-permissions: migrate account_usage, plugin_registration, account * agent-permissions: migrate environment * remaining environment methods * fix list visible environments test * more test fixes * invocation fixes * invoke fixes * fmt * cleanup * cleanup * regenerate openapi * more migrations and test fixes * fix test

agent-permissions: remove token root card (#3602) * agent-permissions: remove token root card * regenerate openapi * regenerate openapi

agent-permissions: use cards for existing permission checks (1) (#3599) * agent-permissions: use cards for report permission checks * cleanup * port more entities * refactor to use permissiontarget for auth * regenerate openapi

2026-06-01

Handle read-only method cache on the HTTP API level (#3583) * Introducing read-only methods in agent type and all SDKs * Rebuild * Fixes * Fixes * Read-only method side-effect violation error * d.ts updates * Read-only method result caching * Handle read-only method cache on the HTTP API level * Including the agent fingerprint in the etag

2026-05-29

Read-only method side-effect violation error (#3574) * Introducing read-only methods in agent type and all SDKs * Rebuild * Fixes * Fixes * Read-only method side-effect violation error * d.ts updates * Side-effect checking centralized and DurableFunctionType based * Format

2026-05-28

agent-permissions: card data model and postgres schema (#3515) * Card data model and Postgres schema * add domain model * repo cleanup * proper error on failed parent locking * fix

2026-05-27

Introducing read-only methods in agent type and all SDKs (#3572) * Introducing read-only methods in agent type and all SDKs * Rebuild * Fixes * Fixes

2026-05-20

update sdk versions (#3482)

2026-05-19

impersonation api (#3469) * impersonation api * stop admins for bypassing visibility rules * comments

Environment deletion (#3466) * Stop agents on environment deletion * wip * wip * more tests * fix queries * rely on service level checks * revert plugin repo changes * comments

2026-05-07

latest -> current renames (#3347)

Avoid suspending ephemeral agents (#3339) * Avoid suspending ephemeral agents * Fix * Fixes

2026-05-05

Agent mode dependent oplog namespace (#3319) * Initial split of durable vs ephemeral oplogs * Handle potential changes of agent mode during component updates * Agent enumeration filtering * Remove extra kv-store cache * Format * Fixes * Fixes * Rebuilt otlp plugin * Filter improvement * More filter logic cleanups * cli: do not update ephemeral agents or ones at correct version (#3336) * cli: do not update ephemeral agents or ones at correct version * comments * fix test --------- Co-authored-by: Maxim Schuwalow <maxim.schuwalow@gmail.com>

Do not run scheduled invocations for deleted / recreated agents (#3320) * Do not run scheduled invocations for deleted / recreated agents * break backwards compat * cleanup protobuf: * update generated types * regenerate openapi * put back conversions

Support UnstructuredText in HTTP endpoints (#3332) * Support UnstructuredText in HTTP endpoints * Missing file and openapi yaml * Removed unnecessary header check * Removed unnecessary tests

2026-04-29

agents openapi spec - add description for routes (#3269)

2026-04-24

Fix App Deletion (#3254) * registry-service: emit DeploymentChanged events on app/env deletion * registry-service: wrap app/env delete results in RequiresNotificationSignal * registry-service: introduce ApplicationDeleted and EnvironmentDeleted invalidation events * feat: remove redundant comment * registry-service: targeted cache invalidation on app/env deletion * feat: improved naming * revert * cleanup * more cleanup --------- Co-authored-by: kmatasfp <33095685+kmatas@users.noreply.github.com> Co-authored-by: Dávid István Bíró <noise64@gmail.com>

2026-04-23

Wasi config unification (#3227) * unified config / wasi-config * unified config / wasi-config * cleanup * cleanup * redo schema changes on top of dev.4 * cleanups / make fix * fmt * fix ts sdk * fix scala sdk * cleanups * also remove wasi_config from app_raw * cleanup after merge * do not escape config strings in "flat" representation

2026-04-22

Custom OpenAPI export endpoint (#3212) * Initial implementation * add tests and update integration tests * clean up the tests * ci test fixes * update --------- Co-authored-by: Maxim Schuwalow <maxim.schuwalow@gmail.com>

Removed binary_wit and exporst from component metadata (#3238) * Removed binary_wit and exporst from component metadata * Fix

2026-04-15

Flaky oplog_processor_locality_recovery fix (#3185) * increased startup timeout for oplog_processor_locality_recovery * Fix oplog processor delivery during locality recovery * Format and remove temporary non_flaky

Skill harness 3 (#3178) * Skill and TS/Scala SDK fixes * annotate-agent scenario and new step type to get agent metadata * Scala SDK to let user exceptions out as panicks * add-http-endpoint scenario * Fix scenario * http-endpoint-auth scenario and TS SDK auth fix * add-cors scenario, CORS fix in Scala SDK and on the server side * configure-api-domain scenario * Update sdks/ts/packages/golem-ts-sdk/src/decorators/httpEndpoint.ts Co-authored-by: Maxim Schuwalow <maxim.schuwalow@gmail.com> * make-http-request scenario and harness and scala sdk fixes * Removed redundancy in cors implementation * Code style revert * Code style revert * Fixed eslint config * Cleanup --------- Co-authored-by: Maxim Schuwalow <maxim.schuwalow@gmail.com>

quota and config test flakyness fixes (#3194) * Add agent secret changes invalidation events * wip * wip * wip * quota service wiring * fmt * fix unit test

2026-04-14

Agent type level provision configuration (#3166) * wip * extracted raw agent props * wip * wip * cascade json prop + tests for cascade * config as json * extract config with warns * add agent_type_name to component files * add agent_type_name to repo * cleanup * golem-api-grpc: AgentTypeProvisionConfig * golem-api-grpc: Component -> Agent file renames * golem-common: base model changes * golem-common: model changes wip * golem-common: model changes wip * golem-common: model changes wip * golem-service-base: model changes * golem-registry-service: cleanup migration * naming cleanup * golem-registry-service: update for the new models * golem-worker-executor: update for the new models * golem-worker-executor: cleanups * golem-worker-service: update for new model * golem-client: update for new model * golem-registry-service: migration cleanups * golem-debugging-service: update for new model * worker test updates * cleanup * integration-tests: update for new model * cleanups * cli: updates for new model WIP * cli: updates for new model WIP * cli: updates for new model WIP * cleanups * cleanups * make fix * test fixes * test fix * update config * fix test manifest * copy manifest json schema 1.5.0-dev.2 as 1.5.0.dev.3 * manifest updates * leftover naming cleanups * fix ifs * make fix * oplog plugin resolve fixes * revert some wasi config renames for now * make fix * regen * fix rust bridge gen config * fix ts bridge gen config * fix create agent request

2026-04-10

Add RPC auth check for local direct worker invocations (#3112)

quotas: sdks & integration tests (#3135) * quotas: sdks & basic integration tests * fix * fix * improve quota implementation * simplify * improve allocation formula in shard manager * fix deadlocking tests * improve locking during acquire * hold lock for all slots during batch renew

Rate limited oplog write (#3131) * wip: rate limited oplog write * feat: read rate limit from AtomicResourceEntry * feat: update Plan * feat: update config * chore: regenerate openapi * fix: sql query * fix: make sure rate limited oplog write is wired in * chore: improve the dynamic rate swap * regenerate config * fix: formatting * feat: rate limit also plugin oplog writes * fix merge issue * feat: more thread safe ratelimiter update * fix: another merge issue * feat: record account_id and environment_id when reporting backpressure metrics --------- Co-authored-by: kmatasfp <33095685+kmatas@users.noreply.github.com>

Semantic retries (#3104) * Semantic retry model, wip * Semantic retry model, wip * Semantic retry model, wip * Semantic retry model, wip * Doc comments * Semantic retry model, wip * Semantic retry model, wip * Semantic retry model, wip * Semantic retries, wip * Semantic retries, registry service layer * Transporting retry policies from registry service to executor * Ability to define defualt retry policies in the manifest * Semantic retries, CLI and SDK integration * Tests and fixes * Fixes * SDK fixes * New manifest schema * Properly typed public oplog entries * Fixes * Format * enable macOS code signing and notarization in CI publish flow - Uncomment the signing/notarization steps - Fix: remove invalid --wait false from notarytool submit - Add KEYCHAIN_PATH to GITHUB_ENV for cross-step access Amp-Thread-ID: https://ampcode.com/threads/T-019d5348-9fb4-741d-b20e-4177610a3bdb Co-authored-by: Amp <amp@ampcode.com> * Revert "enable macOS code signing and notarization in CI publish flow" This reverts commit 6d376c5ae6b47332e2fb4a297c44d22694b3bff4. * Fixes * Clippy & format * Rust SDK fix * Fix TS SDK * Align CLI commands with the old ones and fix Scala SDK * Test fix * Fixed scala sdk * Fix * Default policy * wasm-rquickjs 0.2.1 * Fix * Fixes * Format * Scala fixes * Fixes * Fix * Fix * HTTP retry fix * Fixes * Migration collision fix * Plugin related auth fix * Do not disable worker executor's env cache for all tests/benchmarks * Oplog processor test fixes * Lookup fix * More oplog processor test hardening --------- Co-authored-by: Amp <amp@ampcode.com>

2026-04-09

HTTP error handling improvements (#3134) * use local openapi generator for openapi merge * progress with retries and common error info * move service_name to generator * common status related error info methods, more cleanups * cleanups * error gen cleanups + adding error code everywhere * cli http error handling cleanups * span for cli clients * add missing error codes * group codes * middleware cleanups * make fix * fix missing content-type

Support custom oauth providers (#3143) * Support custom oauth providers * Clippy & format * Regenerated OpenAPI * Fixed provider type

2026-04-08

improve quota implementation

Support custom oauth providers

quotas: worker-executor host functions (#3114) * quotas: worker executor host functions * comments

2026-04-07

quotas: basic quota allocation in worker executor (#3111) * quotas: basic quota allocation in worker executor * regenerate openapi * fix

2026-04-02

Cancellable RPC invocations and integration of abortable pollables (#3110)

2026-04-01

Error classification (#3030) * Executor error classification for retry decisions * Recompiled test components * Fix * Regenerated OpenAPI

2026-03-31

Maximum concurrent live agents per account per executor (#3082) * feat: added ConcurrentAgentsSemaphore * feat: update plan to support max concurrent agents per executor * chore: regenerate sample config and openapi def * fix: query * feat: make sure eveyrhing is wired together, integration tests * fix: tests * fix: tests * fix: unlimited -> limited transition * fix: safety treat proto 0 as unlimited briefly when going from old version to new version of registry service * fix: make sure we do not over add when multiple concurrent syncs * fix: integration test assertion * test improvements * fix: add missing proto fields in service-base model tests * fix: merge issues * fix: some more merge issues * fix: another merge issue --------- Co-authored-by: kmatasfp <33095685+kmatas@users.noreply.github.com>

2026-03-30

2973 http and rpc call limits (#3068)

quotas: shard-manager persistence (#3078) * quotas: shard-manager persistence * fix

Registry service notification cleanups (#3074) * always insert even records inside transaction and use advisory lock for serializing events * extract lock key * pg notify as part of the transaction. * switch from notify to signal new events available, and use dedupped local sqlite worker for local mode * doc updates * update to new notifications after main merge * notification helpers * cleanup * naming * add current_depoyment_revision to DeploymentChanged event, and use that as safety guard for cache updates * Remove unused agent_type resolve endpoints, and add current_deployment_revision, based on filters to resolve_agent_type_by_names * make fix * No replay without last_seen_event_id * Extract common listener loop to registry service client and also extract config * make fix * cleanup, adding RegistryInvalidationHandler * cleanups * test updates * skip legacy DeploymentChanged events to support rolling deployments * cleanups * cleanups

2026-03-27

Sqlite snapshotting (#3080) * Support for automatic sqlite snapshotting with the TS SDK * Tests and fixes * wasm-rquickjs 0.1.4 * CI fix * Update node.js * CI fix * Reuse stored TS SDK * CI fix

2026-03-25

quotas: shard manager api to acquire/renew/release leases (#3069) * quotas: shard manager api to acquire/renew/release leases * fix * shard manager better errors * fix

quotas: track quota state in shard-manager (#3062) * quotas: track quota state in shard-manager * update * fix

2026-03-24

File system quota (#3033)

quotas: registry-service grpc api for quotas (#3060) * quotas: registry-service grpc api for quotas * fix

2026-03-19

OpenTelemetry exporter plugin, and built-in plugin provision (#3014) * Deterministic idempotency key * oplog forwarding unit tests * Fixed existing oplog-processor tests * More oplog processor tests and supporting code * OplogProcessorCheckpoint oplog entry * Tracking oplog processor checkpoints in agent status record * New get-last-processed-index method to oplog processor interface * ForwardingOplog live path improvements * Fix * Periodic locality recovery * Logging skill * Oplog processor test component updates * Some more tests * Test fix * Updated testing skill and idempotency_key check fix * Fixes * Fix how locality recovery determines that the target already processed the entries * Accept pending state too * Clippy & format * Missing file * TS SDK fix * Updated openapi * Fix build-components.sh * Rebuilt test components * Fix * Clippy * OTLP plugin initial version * Abort fix * Sequential test running * Initial tests and fixes for the otlp plugin * Fixes and debug tools * Log and metrics export * Clippy, format and regenerate * Use golem_version as plugin version * Tagged the new plugin and otlp tests and running them in a new CI job * Fixes * Remove unnecessary step from the provisioning * Trying to fix the docker issue on CI * Separate account for built-in plugins * Hash based component check in provision * Cleanup the provision logic * Do not allow deleting built-in plugin grants * Fix * Fixes * Regenerated plugins * Rebuilt wasms * Rebuilt wasm * Oplog processor fixes * Fix flaky test * Flaky test fix