Changelog

0.1.0-rc.3 (2026-11-03)

Changed

• A model call waits up to five minutes for an answer, and as long on a stream gone quiet. Set :model_timeouts on start_agent/2 to change them.
• durable_server is pinned to 0.1.7: list/1 reads its backend's listing.

Fixed

• list/1 reads only keys from the backend, not every agent's state.

0.1.0-rc.2 (2026-11-02)

Breaking

• start_agent/2 takes an optional :conversation. Agents are keyed by {agent_id, conversation}; nil is the main history.
• list/1 and placements/1 return those keys. whereis/2, delete/2 and move/3 take a key, or an agent ID alone for its main history.
• Event metadata and WardrikCore.Context carry conversation.
• WardrikCore.Credentials and WardrikCore.Keys callbacks take a request struct, then their options: WardrikCore.Credentials.Request or WardrikCore.Keys.Request.
• WardrikCore.Keys.fetch/2 returns {:ok, key} or {:error, reason}, as the other callbacks do. {:error, :not_found} says there's none.
• WardrikCore.evaluate/2 takes the context, then :model, :state and :questions.
• WardrikCore.move/3 takes the node as to:.
• WardrikCore.Retry.run/3 takes :transient and :announce by name.

0.1.0-rc.1 (2026-10-30)

• Durable agents that run a model and its tools in a loop, kept in any DurableServer backend. They pick up where they left off after a crash. WardrikCore.Backends.MemoryStore keeps them in memory for tests.
• Capabilities that hand an agent its tools, and middleware that wraps every turn, model call and tool call. Middleware can answer a step, or park it until a person resumes it.
• Tool annotations, like read_only and idempotent. A call lost in a crash is repeated only if its tool is idempotent, and parks as :in_doubt otherwise.
• Principals, as in IAM. The turn that answers a message acts on behalf of whoever sent it, and each step's span says so as enduser.id.
• WardrikCore.Credentials and WardrikCore.Keys, which give tools and model calls the credentials and keys of whoever the agent works for. A credential not yet granted parks the call on a WardrikCore.Authorization.
• WardrikCore.subagent/3, which runs a subagent on its parent's model, middleware and tools.
• WardrikCore.Event, which sends each event to :telemetry and to the agent's WardrikCore.Events sink. Text streams as [:wardrik_core, :message, :delta].
• Every turn a trace and every step a span, with what each tool reports it cost. WardrikCore.evaluate asks an evaluation model questions about a step.