ag-ui-protocol/ag-ui release/2026-10-08

Release 2026-10-08

on GitHub

Packages Published

TypeScript (npm) - published at 07:54:52 UTC

@ag-ui/mcp-apps-middleware@0.1.2

• Preserve prerequisite history and structured results during tool execution.
• Discover and execute supporting tools.
• Declare protocolVersion and use the input threadId on synthesized proxy runs.

Breaking changes

None.

Python (PyPI) - published at 07:54:55 UTC

ag_ui_adk@0.8.0

• Declares protocolVersion on every RUN_STARTED event and raises the ag-ui-protocol floor to >=1.0.0.
• Keeps null JSON Patch values on the SSE wire so TS clients no longer reject StateDeltaEvent deltas.
• Enforces interrupt resume rules (INTERRUPT_RESUME_REQUIRED, INTERRUPT_RESUME_INCOMPLETE) when emit_interrupt_outcome is on.
• Keeps answers retryable until the continuation starts, so refused starts no longer drop tool results or confirmations.
• Ends the run after a batch reports RUN_ERROR instead of dispatching later batches.
• Reports warm-path session read failures as SESSION_LOOKUP_ERROR rather than BACKGROUND_EXECUTION_ERROR.
• Keeps failed session lookups retryable on tool-result resume.
• Enforces max_sessions_per_user when tracking a found session.
• Reads only listed native session IDs on every backend that can list, avoiding cross-user ID reads.
• Warns once per SessionManager when the backend cannot list sessions.
• Preserves complete arguments after LRO streaming previews; closes nested continuation generators on errors.
• Adds optional keyword-only user_id to get_processed_message_ids and mark_messages_processed, scoping processed IDs per (app, user, thread).

Breaking changes

• Requires ag-ui-protocol>=1.0.0; upgrade the dependency.
• Removed exclude_none from model_dump_json, changing SSE serialization (unset optional fields still omitted, but null patch values now retained).
• RUN_STARTED now carries protocolVersion; verify clients accept it.
• Failed session reads now fail the lookup and end the run instead of creating a replacement session.
• Custom session services must honor the get_session contract (return None when absent); re-verify behavior.
• Interrupt resume enforcement rejects runs lacking required resumes when emit_interrupt_outcome is enabled.

ag-ui-langgraph@0.0.47

• Non-streamed tool calls now name the owning assistant message as the parent instead of reusing the result message id.
• Image and video filenames are preserved through native conversion; filenames no longer lost when threads are stored and reopened.
• Provider failures now surface as terminal run errors; run errors documented.
• Non-image media types preserved across runtimes.
• RUN_FINISHED.usage / RUN_ERROR.usage now populated from provider metadata in Python (previously always absent).
• Model-end token usage recorded for non-streaming model calls, which previously reported no usage.
• Token counts capped at Number.MAX_SAFE_INTEGER rather than int64.
• Malformed tool_call.arguments JSON no longer crashes agui_messages_to_langchain.
• Plain string entries in list-form multimodal content are preserved instead of silently dropped.
• Reasoning content blocks guarded against non-mapping values that previously killed the stream.
• Whitespace-only and leading-whitespace image_url values now rejected like empty values.
• FastAPI endpoint helpers forward route kwargs (name, tags, summary, operation_id, dependencies, include_in_schema).
• Adapters follow 1.0 model part renames, flatten tool result content, and drop unsupported file sources with a warning.
• CustomEventNames.Exit documented as advisory-only; forwarded as CUSTOM(name="exit") and never terminates the stream.
• Removed unused should_exit flag.
• Command tool args now serialized safely.
• Changelog URLs added to published package metadata; ag-ui-protocol floor raised to >=0.1.21.

Breaking changes

• Adapters now take validators from @ag-ui/core/schemas and follow the 1.0 model part renames; file sources that are provider handles are dropped with a warning rather than forwarded.
• ag-ui-protocol>=0.1.21 is now required.
• Whitespace-only or leading-whitespace image_url payloads are now rejected (tightened validation).
• CustomEventNames.Exit is advisory and does not terminate the stream; verify if you relied on exit behavior.
• Tool-call parent ids changed for non-streamed calls; re-verify client assumptions about shared message ids.