Merge main and move every unreleased SDK change log entry to 1.43

#1541 added SDK entries for 1.41 and 1.42, which will never be tagged:
the next shared release is 1.43.0. Fold the Go 1.41 Breaking items into
the Go 1.43 entry, rename the Python, TypeScript, Rust, and Java entries
to 1.43, and fix the version markers: Python FlowConfig is changed in
1.43.0, and the Go ErrorWithStack change already shipped in 1.40.2.

Author: longquanzheng

.cursor/rules/project-core.mdc

@@ -173,9 +173,7 @@ still not describe downstream products.
 ## User-Facing Concept Boundary
 
 User-facing docs, examples and skills describe Dex concepts and guarantees only.
-Do not mention Continue-As-New except in the Flow options reference for the
-Continue-As-New threshold and the TriggerContinueAsNew Client API reference. Do
-not describe server-zd engine internals (apply, commands, partitions, history
+Do not describe server-zd engine internals (apply, commands, partitions, history
 mechanics) as part of the application model; state the Dex behavior instead.
 Deployment and operations guidance may name server-zd and its configuration.
 

.github/workflows/agents-ci.yml

@@ -35,14 +35,15 @@ jobs:
       packages: ${{ steps.discover.outputs.packages }}
     steps:
       - uses: actions/checkout@v7
-      # Every package with an executable agents/<language>/<package>/ci.sh gets a matrix job.
+      # Every package with an executable agents/<language>/<package>/ci.sh or
+      # agents/cli/<language>/<package>/ci.sh gets a matrix job.
       - name: List packages with an executable ci.sh
         id: discover
         run: |
           set -euo pipefail
           shopt -s nullglob
           package_paths=()
-          for script in agents/*/*/ci.sh; do
+          for script in agents/*/*/ci.sh agents/cli/*/*/ci.sh; do
             if [[ ! -x "$script" ]]; then
               echo "::error file=$script::$script is not executable; run chmod +x and commit it"
               exit 1
@@ -56,7 +57,10 @@ jobs:
           packages="$(printf '%s\n' "${package_paths[@]}" | jq -R -s -c '
             split("\n")
             | map(select(length > 0))
-            | map({path: ., language: (split("/")[1]), name: (split("/")[2])})
+            | map(if (split("/") | length) == 4
+                  then {path: ., language: (split("/")[2]), name: ("cli-" + split("/")[3])}
+                  else {path: ., language: (split("/")[1]), name: (split("/")[2])}
+                  end)
           ')"
           echo "packages=$packages" >> "$GITHUB_OUTPUT"
           jq . <<<"$packages"

AGENTS.md

@@ -322,9 +322,7 @@ still not describe downstream products.
 ### User-Facing Concept Boundary
 
 User-facing docs, examples and skills describe Dex concepts and guarantees only.
-Do not mention Continue-As-New except in the Flow options reference for the
-Continue-As-New threshold and the TriggerContinueAsNew Client API reference. Do
-not describe server-zd engine internals (apply, commands, partitions, history
+Do not describe server-zd engine internals (apply, commands, partitions, history
 mechanics) as part of the application model; state the Dex behavior instead.
 Deployment and operations guidance may name server-zd and its configuration.
 

CLAUDE.md

@@ -245,9 +245,7 @@ still not describe downstream products.
 ## User-Facing Concept Boundary
 
 User-facing docs, examples and skills describe Dex concepts and guarantees only.
-Do not mention Continue-As-New except in the Flow options reference for the
-Continue-As-New threshold and the TriggerContinueAsNew Client API reference. Do
-not describe server-zd engine internals (apply, commands, partitions, history
+Do not describe server-zd engine internals (apply, commands, partitions, history
 mechanics) as part of the application model; state the Dex behavior instead.
 Deployment and operations guidance may name server-zd and its configuration.
 

agents/CHANGELOG.md

@@ -36,6 +36,62 @@ for the Dex SDK and framework versions each release supports.
   polling. It used to fail the poll attempt.
 - `agents/conformance/mcp_dex_conventions.json` fixes the conventions for every
   core.
+- TypeScript core: **McpToolSource.executeDeferredToolCall** takes an optional
+  second argument, `executeDeferredToolCall(call, { requestMeta })`, and
+  **McpToolCallOptions** has `requestMeta`: more entries for the `tools/call`
+  request's `_meta`, such as the identity the caller expects the tool to have.
+  The idempotency key entry wins on a name clash.
+- TypeScript core: new **McpToolSource.willResumeToolTaskWithoutSending(call)**
+  is `true` only when `executeDeferredToolCall` will return a session-polled
+  task that an earlier attempt started and can never send `tools/call` for the
+  call. A task polled inside the tool Step, such as one bound to a protocol
+  session, may be called again when the server no longer knows it.
+
+### Images
+
+- Python and TypeScript cores: user messages and tool results can carry
+  images. Session state stores only an **AgentImageReference**
+  (`{"type": "image", "uri", "mime_type", "sha256", "size_bytes"}`); the bytes
+  live in a **MediaStore**, one object per image under
+  `<prefix>/sha256/<sha256>`, so uploads are idempotent and a replay reads the
+  same bytes.
+- New fields, all empty by default: **AgentUserMessage.images**,
+  **AgentMessage.images** (display copy), **AgentToolCall.images**,
+  **ToolExecutionResult.images**, and **FrameworkMessage.images**. Every
+  writer now stores `"images": []`; earlier Workers ignore the field, so send
+  images only after every Worker of the Flow type runs 0.5.0.
+- **S3MediaStore** (`dex_agents.s3`, extra `dex-agents[s3]`;
+  `@superdurable/dex-agents/s3`, optional peer `@aws-sdk/client-s3`) keeps
+  images in AWS S3 or an S3-compatible bucket, with credentials from the
+  standard AWS chain. **InMemoryMediaStore** is for tests.
+- PNG, JPEG, GIF, and WebP, detected from the bytes with a cheap structural
+  check, up to **MAX_IMAGE_BYTES** (`maxImageBytes`, 3,750,000 bytes,
+  5,000,000 bytes as base64) each, and at most **MAX_IMAGES_PER_MESSAGE**
+  (`maxImagesPerMessage`, 20) per message or tool result. A `uri` is at most
+  **MAX_IMAGE_URI_LENGTH** (`maxImageUriLength`, 1024) bytes as UTF-8.
+  **ImageValidationError** names what is wrong.
+- Reads check the SHA-256, the size, and the type: **verify_image_bytes**
+  (`verifyImageBytes`) refuses bytes that are not a well-formed image of the
+  reference's `mime_type`. **S3MediaStore** uploads with `If-None-Match: *`
+  (412 means stored; a 409 conflict retries, then needs a `HEAD` that finds
+  the object),
+  refuses an object whose `Content-Length` differs from the reference, and
+  reads at most one byte past `size_bytes`. It takes explicit credentials
+  (`access_key_id` and `secret_access_key`; `credentials`) for a local
+  development bucket, and the standard AWS chain by default.
+- The session checks the images of every `FrameworkMessage` a runner returns
+  before it stores any. Keep each object for as long as sessions can replay
+  it; a missing object fails the turn with **MediaStoreError**.
+- `send_user_message` returns `false` for invalid images, or for images when
+  the runner does not implement **ImageUserMessageBuilder**
+  (`buildUserMessageWithImages`). No built-in runner implements it yet; image
+  input for Stepwise and the framework adapters comes later.
+- Runners read bytes with **load_images** (`loadImages`) and may choose them
+  with **collect_turn_images** (`collectTurnImages`).
+- Go core: no image input. Its values carry `images`, so a value written by
+  another core round-trips, and `send_user_message` returns `false` for a
+  message with images.
+- Shared cases: `agents/conformance/images.json`.
 
 ### Changed
 

agents/cli/typescript/runtime/.gitignore

@@ -0,0 +1,2 @@
+dist/
+node_modules/

agents/cli/typescript/runtime/.npmrc

@@ -0,0 +1 @@
+install-links=true

agents/cli/typescript/runtime/LICENSE

@@ -0,0 +1,105 @@
+# License
+
+Copyright (c) 2026 Super Durable, Inc.
+
+Portions of this software are licensed as follows:
+
+- Legacy Materials remain under their original licenses as described in
+  `LEGACY_NOTICES.md`.
+- Third-Party Materials remain under the licenses provided by their owners.
+- The `docs/` and `examples/` directories are not licensed under the
+  Sustainable Use License and retain their existing licensing status.
+- All other material owned or licensable by Super Durable, Inc. is available
+  under the Sustainable Use License below.
+
+See `LEGACY_NOTICES.md` for the applicable legacy and third-party notices.
+
+## Sustainable Use License
+
+Version 1.0
+
+### Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+### Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject
+to the limitations below.
+
+### Limitations
+
+You may use or modify the software only for your own internal business purposes
+or for non-commercial or personal use. You may distribute the software or
+provide it to others only if you do so free of charge for non-commercial
+purposes. You may not alter, remove, or obscure any licensing, copyright, or
+other notices of the licensor in the software. Any use of the licensor's
+trademarks is subject to applicable law.
+
+### Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software.
+
+If you or your company make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license for the software
+granted under these terms ends immediately. If your company makes such a claim,
+your patent license ends immediately for work on behalf of your company.
+
+### Notices
+
+You must ensure that anyone who gets a copy of any part of the software from
+you also gets a copy of these terms. If you modify the software, you must
+include in any modified copies of the software a prominent notice stating that
+you have modified the software.
+
+### No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+### Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your license will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your license will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your license
+to terminate automatically and permanently.
+
+### No Liability
+
+As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.
+
+### Definitions
+
+The "licensor" is the entity offering these terms.
+
+The "software" is the software the licensor makes available under these terms,
+including any portion of it.
+
+"You" refers to the individual or entity agreeing to these terms.
+
+"Your company" is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that organization.
+Control means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+Control can be direct or indirect.
+
+"Your license" is the license granted to you for the software under these
+terms.
+
+"Use" means anything you do with the software requiring your license.
+
+"Trademark" means trademarks, service marks, and similar rights.