v3.4.0

• chore(release): bump version to 3.4.0 (#60)
• test(orchestration): comprehensive unit + real-LLM coverage (#43) (#59)
• docs(orchestration): grammar README section + SDK examples (Phase 5e) (#58)
• feat(orchestration): Python SDK parallel/resumable/pipeline (Phase 5c/5d) (#57)
• feat(orchestration): Node pipeline with callback stages (Phase 5b) (#56)
• feat(orchestration): expose executor + Node parallel/resumable (Phase 5a) (#55)
• feat(orchestration): resumable + migratable workflow checkpoints (Phase 4) (#54)
• feat(orchestration): pipeline combinator (Phase 3) (#53)
• feat(orchestration): schema-forced step output (Phase 2) (#52)
• feat(orchestration): AgentExecutor seam + parallel combinator (Phase 1) (#51)
• docs(sdk): codify FFI panic-safety contract at the napi/PyO3 boundary (#32) (#50)
• test(core): persisted-schema round-trip fuzz + reject future checkpoint versions (#31) (#49)

v3.3.0

• test(bootstrap): make cache-dir assertion version-agnostic (#48)
• test(real-llm): end-to-end cluster-feature tests against a live provider
• chore(release): prepare v3.3.0
• style(sdk): cargo fmt node + python lib sources
• fix(sdk): BudgetGuard fail-closed + disconnect_idle_mcp parity (H1/M4/L2)
• fix(core): cluster-pillars review hardening (H2/H3/H4 + M1/M2/M3 + L1)
• test(integration): cluster ops consolidated lifecycle (two-node sim)
• feat(sdk): SessionRetentionLimits via Python dict + Node object
• docs(readme): add retention / MCP idle / BudgetGuard examples
• feat(sdk/node): BudgetGuard bridge + runtime-mutable guard slot
• feat(sdk/python): BudgetGuard bridge — Python class → Rust dyn BudgetGuard
• feat(mcp): idle disconnect — release FDs + bg workers from quiet servers
• test(resume_run): E2E happy-path coverage with mock LLM
• feat(retention): FIFO caps on RunStore / TraceSink / SubagentTracker
• docs(readme): cluster-grade extensibility section
• feat(sdk): propagate identity labels + resume_run to Node and Python
• feat(session): AgentSession::resume_run replays a checkpointed run (P3 cut 2)
• feat(loop-checkpoint): per-tool-round checkpoints (P3 cut 1)
• feat(host_env): inject IdGenerator + Clock for deterministic replay (P2)
• feat(budget): BudgetGuard trait + LLM-entry enforcement (P4)
• feat(events): cluster-platform event variants — BudgetThresholdHit / PassivationRequested / PeerInvocation (P6)
• feat(session): host-provided identity labels — tenant / principal / template / correlation (P5)
• feat(store): persist subagent task tracker across save/resume (P1)
• test(session-close): cross-module integration + SDK smoke tests
• feat(sdk): expose Agent.close / closeSession and Session.isClosed
• feat(agent): session registry + Agent::close_session / close
• feat(session): parent CancellationToken hierarchy for cascading cancel
• feat(session): graceful close with closed-state guard

v3.2.1

• feat(python-sdk): pure-Python bootstrap on PyPI fetches native wheels from GH Releases
• ci(publish-python): drop PyPI wheel push, GH Release becomes canonical
• ci(publish-python): twine upload --verbose to expose 400 cause

v3.2.0

Native Python wheel assets

v3.1.0

• fix: satisfy clippy on release CI
• feat: add automatic subagent parallelization
• fix: address config and skill review feedback
• feat(config): parse model token limits from ACL
• fix(skills): support legacy allowed-tools formats
• fix(core): use published a3s common dependency
• docs(readme): refresh for v3.0 — typed errors + cloud workspace + Cargo dep

v3.0.0

• fix(tools): add error_kind to windows-gated bash ToolOutput literal
• chore(release): prepare v3.0.0 release
• feat(workspace)(sdk): typed ToolErrorKind end-to-end pipeline (Phase 8)
• feat(workspace)!: v3.0.0 — typed WorkspaceError on fs trait surface
• feat(workspace): WorkspaceError typed enum (additive; no signature changes)
• test(workspace): consolidate CAS test fixture onto InMemoryFileSystem
• test(workspace): backend conformance suite + InMemoryFileSystem reference
• fix(workspace): bound RemoteGit diff client-side via streaming + hard cap
• fix(workspace): with_remote_git no longer drops local_root or future fields
• perf(workspace): parallelize S3 grep via futures::buffer_unordered
• feat(workspace): implement mTLS for RemoteGitBackend
• feat(sdk): expose Phase 1-4 workspace options through Node + Python SDKs
• feat(workspace): RemoteGitBackend — HTTP/JSON git provider for cloud workspaces
• feat(workspace): S3 ls not-found semantics + per-call metering events
• feat(workspace): opt-in degraded grep/glob on S3 backend
• feat(workspace): optimistic concurrency for S3 edit/patch via ETag
• feat(workspace): enforce read_text size ceiling on S3 backend
• docs: README — direct tool methods + S3 workspace backend examples

v2.6.0

• chore: bump all SDK versions to 2.6.0 + CHANGELOG
• feat(workspace): S3-compatible workspace backend
• refactor(workspace): pluggable backend abstraction + 16 optimizations
• docs: enhance README with comprehensive API examples

v2.5.0

• fix(test): wrap SearchConfig in Arc for test_web_search_headless
• chore: update examples package-lock.json to v2.5.0
• chore: bump version to v2.5.0
• docs(sdk): document confirmation_inheritance in Node and Python SDK READMEs
• test(sdk): add integration tests for ConfirmationInheritance in Python and Node SDKs
• feat(sdk): expose ConfirmationInheritance in Python and Node SDKs
• test(task): add mock LLM contract tests for task delegation
• feat(task): add ChildRunContext for explicit parent capability inheritance
• refactor(tools): remove redundant guard_policy from ToolExecutor
• feat(task): add ConfirmationInheritance for child run Ask resolution
• refactor(task): unify AgentDefinition → AgentConfig via apply_to()
• test: add integration test for task permission inheritance (Issue #28)
• fix(task): inherit permission checker from agent definition in child runs
• docs: update README for v2.4.0 — add generate_object and structured output

v2.4.0

• feat: add generate_object tool for structured JSON output
• docs: clarify run observability and AHP contract

v2.3.0

• chore: bump all SDK versions to 2.3.0
• perf(tools): wrap SearchConfig in Arc to reduce ToolContext clone cost
• refactor(core): split config, store, permissions into focused modules
• refactor(ahp): reduce function parameters using struct pattern