cloudflare · mattzcarey · Jul 22, 2026 · Jul 22, 2026
diff --git a/.changeset/agent-initialization-span.md b/.changeset/agent-initialization-span.md
diff --git a/.changeset/agents-observability-ai-tracing.md b/.changeset/agents-observability-ai-tracing.md
diff --git a/.changeset/calm-mcp-catalogs.md b/.changeset/calm-mcp-catalogs.md
diff --git a/.changeset/codemode-host-apis.md b/.changeset/codemode-host-apis.md
diff --git a/.changeset/fix-error-reconnect-streaming-state.md b/.changeset/fix-error-reconnect-streaming-state.md
diff --git a/.changeset/friendly-props-start.md b/.changeset/friendly-props-start.md
diff --git a/.changeset/gentle-turndown-diagnostics.md b/.changeset/gentle-turndown-diagnostics.md
diff --git a/.changeset/khaki-donuts-shout.md b/.changeset/khaki-donuts-shout.md
diff --git a/.changeset/mcp-oauth-callback-robustness.md b/.changeset/mcp-oauth-callback-robustness.md
diff --git a/.changeset/mcp-reconnect-hardening.md b/.changeset/mcp-reconnect-hardening.md
diff --git a/.changeset/mcp-stale-session-self-heal.md b/.changeset/mcp-stale-session-self-heal.md
diff --git a/.changeset/redos-import-regex.md b/.changeset/redos-import-regex.md
diff --git a/.changeset/salty-balloons-melt.md b/.changeset/salty-balloons-melt.md
diff --git a/.changeset/think-alarm-owned-submissions.md b/.changeset/think-alarm-owned-submissions.md
diff --git a/.changeset/think-out-of-box-tracing.md b/.changeset/think-out-of-box-tracing.md
diff --git a/.changeset/warn-system-prompt-skills.md b/.changeset/warn-system-prompt-skills.md
diff --git a/agent-think/CHANGELOG.md b/agent-think/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @cloudflare/agent-think
 
+## 0.0.2
+
+### Patch Changes
+
+- Updated dependencies [[`f5b1dd8`](https://github.com/cloudflare/agents/commit/f5b1dd814b5d7b415152afda053b5a52e086e12e), [`f5b1dd8`](https://github.com/cloudflare/agents/commit/f5b1dd814b5d7b415152afda053b5a52e086e12e), [`a3cbed1`](https://github.com/cloudflare/agents/commit/a3cbed1d9944690cf856238f1466940def9a3101), [`3ce98ff`](https://github.com/cloudflare/agents/commit/3ce98ff084fcd5f0f8433e1f20352f0a170e3e4a), [`ed9f42b`](https://github.com/cloudflare/agents/commit/ed9f42b447f244a20801cf2cbcba72a191f73c9d), [`fff4131`](https://github.com/cloudflare/agents/commit/fff413112915cfafcbca013a764065abc6105db1), [`6861933`](https://github.com/cloudflare/agents/commit/6861933da2a73d699b6cc26a283cc1fee597f155), [`c19d58a`](https://github.com/cloudflare/agents/commit/c19d58aeef5dbf18e6382de9dd773775aafdb6c8), [`33e59c4`](https://github.com/cloudflare/agents/commit/33e59c4af9a120fafea2d9dd7ceb1181d5813267), [`f5b1dd8`](https://github.com/cloudflare/agents/commit/f5b1dd814b5d7b415152afda053b5a52e086e12e), [`f5b1dd8`](https://github.com/cloudflare/agents/commit/f5b1dd814b5d7b415152afda053b5a52e086e12e), [`32e7390`](https://github.com/cloudflare/agents/commit/32e73900f4c6bf9cec1b09bb08085fbe46073a99)]:
+  - agents@0.18.0
+  - @cloudflare/ai-chat@0.9.4
+  - @cloudflare/think@0.14.0
+
 ## 0.0.1
 
 ### Patch Changes

diff --git a/agent-think/package.json b/agent-think/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/agent-think",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "private": true,
   "type": "module",
   "description": "Think agent that reproduces and fixes cloudflare/agents GitHub issues in a container-backed Workspace. Invoked as `@agent-think repro|pr` via the gh-app webhook service; streams a live thread UI and reports back on the issue.",

diff --git a/packages/agents/CHANGELOG.md b/packages/agents/CHANGELOG.md
@@ -1,5 +1,29 @@
 # @cloudflare/agents
 
+## 0.18.0
+
+### Minor Changes
+
+- [#1860](https://github.com/cloudflare/agents/pull/1860) [`f5b1dd8`](https://github.com/cloudflare/agents/commit/f5b1dd814b5d7b415152afda053b5a52e086e12e) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Group SDK-managed initialization, startup, chat interactions, turns, and durable submissions into semantic phases. Storage-heavy setup, hydration, recovery, request persistence, and response persistence each receive a named bucket, keeping inference and tool spans visible without discarding lower-level Durable Object SQLite spans. Each span records agent identity, storage phase, a stable marker for UI grouping, and operation-specific metadata. No-op on runtimes without the `tracing` API.
+
+- [#1860](https://github.com/cloudflare/agents/pull/1860) [`f5b1dd8`](https://github.com/cloudflare/agents/commit/f5b1dd814b5d7b415152afda053b5a52e086e12e) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Add `agents/observability/ai` with `wrapAISDK` for AI SDK v6 and `createAISDKTelemetry` for AI SDK v7. Both project Cloudflare-native `invoke_agent {agent}`, `chat {model}`, and `execute_tool {tool}` spans using scalar OpenTelemetry GenAI attributes, including request settings, token usage, finish reasons, tool-call IDs, model-call time to first chunk, bounded AI SDK v6 approval lifecycle spans, and conditional AI Gateway log references. Payload storage is opt-in: `storeMessages` writes OTel-schema input/output message arrays to `chat` (`{ role, parts }`, canonical text/reasoning/tool parts, and output `finish_reason`; oldest messages are dropped past the budget while protecting the first two), and `storeTools` writes arguments/results to `execute_tool`. The flags themselves are never emitted as span attributes. Schemas, request headers, provider options, and raw errors remain excluded.
+
+### Patch Changes
+
+- [#1959](https://github.com/cloudflare/agents/pull/1959) [`a3cbed1`](https://github.com/cloudflare/agents/commit/a3cbed1d9944690cf856238f1466940def9a3101) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Cache MCP JSON Schema conversion for the current catalog on each live connection, and let Think agents skip direct MCP AI-tool exposure when those tools are exposed through Code Mode or another mechanism outside Think's automatic tool set.
+
+- [#1963](https://github.com/cloudflare/agents/pull/1963) [`3ce98ff`](https://github.com/cloudflare/agents/commit/3ce98ff084fcd5f0f8433e1f20352f0a170e3e4a) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Reconcile stale `useAgentChat` server-streaming state after an errored client reconnects.
+
+  Reconnect probes now include correlation IDs, and `STREAM_RESUME_NONE` distinguishes globally idle agents from active continuations owned by another connection. The hook clears fallback streaming state only for a correlated idle response. Reconnect opens are retained while a prior resume or status transition settles, in-flight handshakes are retransmitted on replacement sockets, and all AI SDK resume entry points share one serialization gate.
+
+- [#1944](https://github.com/cloudflare/agents/pull/1944) [`fff4131`](https://github.com/cloudflare/agents/commit/fff413112915cfafcbca013a764065abc6105db1) Thanks [@cjol](https://github.com/cjol)! - Make the `agents/vite` `turndown` stub fail with a diagnostic error when app code calls it directly, and document the `stubTurndown: false` opt-out for applications that use `turndown` themselves.
+
+- [#1926](https://github.com/cloudflare/agents/pull/1926) [`6861933`](https://github.com/cloudflare/agents/commit/6861933da2a73d699b6cc26a283cc1fee597f155) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Verify MCP OAuth callback state before changing a connection. Forged, expired, and replayed callbacks no longer disrupt the genuine authorization flow, and `addMcpServer()` refreshes auth URLs whose embedded state has expired.
+
+- [#1924](https://github.com/cloudflare/agents/pull/1924) [`c19d58a`](https://github.com/cloudflare/agents/commit/c19d58aeef5dbf18e6382de9dd773775aafdb6c8) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Harden MCP connection recovery: honor retry budgets for resolved connection failures, finish in-flight restore work before stable-id migration, and close connections replaced by the legacy `connect()` path.
+
+- [#1923](https://github.com/cloudflare/agents/pull/1923) [`33e59c4`](https://github.com/cloudflare/agents/commit/33e59c4af9a120fafea2d9dd7ceb1181d5813267) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Recover streamable HTTP connections when a server rejects a persisted session with HTTP 404. The client clears the stale session from memory and storage, initializes a new session, and rediscovers capabilities once.
+
 ## 0.17.4
 
 ### Patch Changes

diff --git a/packages/agents/package.json b/packages/agents/package.json
@@ -9,7 +9,7 @@
     "durable objects"
   ],
   "type": "module",
-  "version": "0.17.4",
+  "version": "0.18.0",
   "license": "MIT",
   "repository": {
     "directory": "packages/agents",

diff --git a/packages/ai-chat/CHANGELOG.md b/packages/ai-chat/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @cloudflare/ai-chat
 
+## 0.9.4
+
+### Patch Changes
+
+- [#1860](https://github.com/cloudflare/agents/pull/1860) [`f5b1dd8`](https://github.com/cloudflare/agents/commit/f5b1dd814b5d7b415152afda053b5a52e086e12e) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Group SDK-managed initialization, startup, chat interactions, turns, and durable submissions into semantic phases. Storage-heavy setup, hydration, recovery, request persistence, and response persistence each receive a named bucket, keeping inference and tool spans visible without discarding lower-level Durable Object SQLite spans. Each span records agent identity, storage phase, a stable marker for UI grouping, and operation-specific metadata. No-op on runtimes without the `tracing` API.
+
+- [#1963](https://github.com/cloudflare/agents/pull/1963) [`3ce98ff`](https://github.com/cloudflare/agents/commit/3ce98ff084fcd5f0f8433e1f20352f0a170e3e4a) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Reconcile stale `useAgentChat` server-streaming state after an errored client reconnects.
+
+  Reconnect probes now include correlation IDs, and `STREAM_RESUME_NONE` distinguishes globally idle agents from active continuations owned by another connection. The hook clears fallback streaming state only for a correlated idle response. Reconnect opens are retained while a prior resume or status transition settles, in-flight handshakes are retransmitted on replacement sockets, and all AI SDK resume entry points share one serialization gate.
+
 ## 0.9.3
 
 ### Patch Changes

diff --git a/packages/ai-chat/package.json b/packages/ai-chat/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/ai-chat",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "description": "Cloudflare Agents (x) AI SDK Chat",
   "keywords": [
     "cloudflare",

diff --git a/packages/codemode/CHANGELOG.md b/packages/codemode/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @cloudflare/codemode
 
+## 0.4.4
+
+### Patch Changes
+
+- [#1969](https://github.com/cloudflare/agents/pull/1969) [`80ad8de`](https://github.com/cloudflare/agents/commit/80ad8deecfe9606d8ef1d505ad0115bbdb8e7073) Thanks [@mattzcarey](https://github.com/mattzcarey)! - Add framework-neutral `execute`, `search`, and `describe` methods to the durable Code Mode runtime handle so MCP servers and other non-AI-SDK hosts can invoke execution and discovery directly. Search and describe results now identify methods that require approval.
+
 ## 0.4.3
 
 ### Patch Changes

diff --git a/packages/codemode/package.json b/packages/codemode/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/codemode",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "Code Mode: use LLMs to generate executable code that performs tool calls",
   "repository": {
     "directory": "packages/codemode",

diff --git a/packages/hono-agents/package.json b/packages/hono-agents/package.json
@@ -5,7 +5,7 @@
   },
   "description": "Add Cloudflare Agents to your Hono app",
   "devDependencies": {
-    "agents": "^0.17.1",
+    "agents": "^0.18.0",
     "hono": "^4.12.27"
   },
   "publishConfig": {

diff --git a/packages/shell/CHANGELOG.md b/packages/shell/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @cloudflare/shell
 
+## 0.4.2
+
+### Patch Changes
+
+- [#1716](https://github.com/cloudflare/agents/pull/1716) [`8ecdb61`](https://github.com/cloudflare/agents/commit/8ecdb618ada65fa393367374ea8b852d52bc92b5) Thanks [@mattzcarey](https://github.com/mattzcarey)! - fix(shell): replace LIKE pattern matching with primary-key range scans in `Workspace.rm({ recursive: true })` and the `glob` prefilter. D1 can reject the previous `LIKE ? ESCAPE ?` queries with `D1_ERROR: LIKE or GLOB pattern too complex: SQLITE_ERROR`; the range predicate (`path >= '{dir}/' AND path < '{dir}0'`) avoids that limit, scans the `path` index directly, and needs no escaping of `%`/`_` in path names.
+
 ## 0.4.1
 
 ### Patch Changes

diff --git a/packages/shell/package.json b/packages/shell/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/shell",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Experimental sandboxed JS execution and filesystem runtime for Cloudflare Workers agents",
   "repository": {
     "directory": "packages/shell",