0.13.6 spec/v0.6.0
microsoft/agent-host-protocolJul 17, 2026 → Jul 20, 20264 days between releases
What's New
Spec 0.6.0 adds changeset review, tool auth, and notification metadata, with two breaking renames from 0.13.6.
Breaking Changes
- The `changeset/filesReviewedChanged` action is renamed to `changeset/filesReviewChanged` and its `fileIds` field becomes `files`.
- Input requests are relocated into the turn's `responseParts`, so consumers reading them from the previous location must be updated.
- Because the older release is a CLI build (0.13.6) and the newer is a protocol spec (0.6.0), the version schemes are not directly comparable and the delta is inferred from the spec notes.
New Features
- `Changeset.capabilities` with a `review` presence flag lets a changeset advertise per-file review support up-front on the session's changeset list.
- Asynchronous tool-call risk assessments now return a model-provided explanation and a normalized safety score.
- New `ToolCallStatus.AuthRequired` state plus `chat/toolCallAuthRequired` and `chat/toolCallAuthResolved` actions let MCP tool calls pause on an OAuth challenge and resume after authentication.
- A `toolAuthentication` `SessionInputRequest` variant surfaces pending tool authentication at the session level.
- Connection liveness checks are available via `AHPCommands.ping(id:)`.
Improvements
- `SystemNotificationResponsePart` gains an optional `_meta` slot following the MCP convention, enabling categorization, grouping, filtering, and localization without parsing `content`.
- Turn lifecycle events now carry timing data: `startedAt` on `chat/turnStarted` and elapsed `duration` on completion, cancellation, and error events.
- `AuthenticateParams` accepts an optional `scopes` field and now resolves resources from live `McpServerAuthRequiredState` or `ToolCallAuthRequiredState` in addition to `AgentInfo.protectedResources`.
- The spec mirrors the Swift package implementation, keeping the two surfaces aligned.
Upgrade Notes
Update any client or server handling `changeset/filesReviewedChanged` to the new `changeset/filesReviewChanged` name and `files` field, and move input-request handling into the turn's `responseParts`. Implement the new `AuthRequired` tool-call state and auth-required/auth-resolved actions if you invoke MCP tools that may hit OAuth challenges. Treat this as a spec-level jump: regenerate or re-validate bindings rather than assuming wire compatibility with the 0.13.6 CLI artifacts.
The Two Releases
0.13.6
Jul 17, 2026· 3 months ago
Releases Browser Harness 0.1.6 as part of the 0.13.6 CLI update.
Full release notesAHP Spec v0.6.0
Jul 20, 2026· 3 months ago
Defines the protocol specification for AHP 0.6.0, mirroring the Swift package implementation with support for changeset reviews, tool authentication, and notification metadata.
Full release notes