New Features

• Added a repository-owned black-box conformance suite with eight A2A probes, replacing the unavailable external TCK dependency with a reproducible local and explicitly gated remote test path.
• Added an authenticated Prometheus /metrics endpoint and Python 3.14 support.

Changes and Fixes

• Aligned JSON-RPC and HTTP+JSON behavior with A2A 1.0: required message fields are validated before execution, unsupported push notification configuration returns the protocol-specific error, and subscriptions to terminal tasks are rejected consistently.
• OpenAPI descriptions for core JSON-RPC methods are now generated from the SDK dispatcher source of truth, keeping the published interface aligned with runtime behavior.

Full changelog: v1.3.1...v1.3.2

Changes and Fixes

• Fixed outbound A2A authentication and request metadata propagation through SDK transports, ensuring credentials, protocol version, trace context, and extension headers reach both JSON-RPC and HTTP+JSON requests.
• Prevented SQLite connection leaks when database setup fails, while preserving file-path hardening before and after connection creation.

Full changelog: v1.3.0...v1.3.1

New Features

• Added per-credential rate limiting and bounded SSE streaming budgets: throttled requests return HTTP 429 with Retry-After, and over-budget streams are terminated cleanly with an SSE error frame.

Changes and Fixes

• Closed the security audit items: outbound A2A calls now enforce a host allowlist and private-network blocklist with credential binding; inbound requests are validated against Origin/Host boundaries to block CSRF and DNS-rebinding attacks; SQLite persistence files are hardened with strict permissions, ownership checks, and symlink rejection.
• Discovery and workspace responses are normalized to whitelisted fields and the workspace root is gated, removing passthrough of upstream raw records and local paths; error responses redact absolute paths.
• Releases now publish a SHA256SUMS integrity manifest, and the security surface and residual risk register were documented as a maintained reference.

Full changelog: v1.2.0...v1.3.0

Breaking Changes

• HTTP-JSON transport now serves A2A REST routes at the root path; the /v1 URL prefix is dropped. Clients that call /v1/... directly must switch to the root path.

New Features

• Added optional HTTP Basic authentication (OPENCODE_AUTH_USERNAME / OPENCODE_AUTH_PASSWORD) for upstream OpenCode calls when the upstream server is protected by a password.
• Declared the supported OpenCode runtime line (1.18.x) in the compatibility docs and added a live integration smoke check that keeps it verified.

Changes and Fixes

• Hardened runtime defaults and restricted persistence to SQLite-backed stores.
• Upgraded dependencies and resolved vulnerability audit findings.

Full changelog: v1.1.2...v1.2.0

Changes and Fixes

• Resolved dependency audit findings by moving runtime and development locks to fixed package versions and tightening minimum constraints where needed.
• Simplified redundant internal code paths identified by the audit without changing public behavior.
• Reduced Dependabot noise from protobuf major updates that cannot satisfy the current package constraints.

Full changelog: v1.1.1...v1.1.2

Changes and Fixes

• Refined internal helper boundaries and serve CLI guidance, with targeted regression coverage to keep the cleanup safe.

Full changelog: v1.1.0...v1.1.1

Contract Changes

• Clarified successful non-streaming message:send result semantics: full assistant output is carried in Task.artifacts, while terminal Task.status.message remains a short completion status.
• Canonicalized opencode-a2a extension identifiers to urn:opencode-a2a:extension:<contract>:v1 and narrowed shared streaming disclosure to the stable public contract fields.

Changes and Fixes

• Redacted sensitive query parameters from database URLs in persistence and SDK compatibility logs.
• Tightened local compatibility surfaces for session-query and client transport inputs, with broader regression coverage for parsing, CLI, error mapping, interrupt, and extension-contract behavior.
• Split doctor.sh into explicit fix, verify, and package phases while keeping ./scripts/doctor.sh as the standard validation entrypoint.

Full changelog: v1.0.0...v1.1.0

Breaking Changes

• opencode-a2a v1.0.0 is a breaking release that supports only the A2A 1.0 protocol line.
• If you need compatibility with A2A 0.3, stay on v0.8.2.

New Features

• Added durable database-backed runtime stores for task state, push configuration, and SDK compatibility data so long-running and reconnecting task flows preserve consistent state across runtime boundaries.

Changes and Fixes

• Completed the migration to a2a-sdk 1.0 and finalized the runtime, discovery, and extension-contract surfaces around the A2A 1.0 wire model.
• Tightened task output, stream artifact, terminal-state, and provider-private contract behavior so send, stream, reconnect, and follow-up task reads stay aligned under the 1.0 runtime.

Full changelog: v0.8.2...v1.0.0

Changes and Fixes

• Reduced default runtime log noise by downgrading normal or recoverable control-flow logs to DEBUG, including client disconnect cleanup, stream retries, snapshot rewrite suppression, and local upstream concurrency backpressure.
• Reported mapped OpenCode HTTP status and timeout failures as default WARNING summaries while keeping traceback details available at DEBUG.
• Replaced raw request text, response text, and stream chunk content in non-payload debug logs with length fields such as text_len and content_len.
• Clarified documentation that lightweight metric log records are emitted at A2A_LOG_LEVEL=DEBUG.

Full changelog: v0.8.1...v0.8.2

Changes and Fixes

• Aligned SDK ClientConfig.polling with the existing opencode A2A client polling fallback policy.
• Preserved the default blocking message/send behavior by keeping SDK polling disabled unless the fallback policy is enabled.

Full changelog: v0.8.0...v0.8.1