AgentScope Java Files

AgentScope Java 2.0.1 is the first maintenance release after 2.0.0 GA. It expands the model-provider ecosystem, hardens Harness subagent / HITL / permission behavior, and fixes a set of production-critical issues. Quick links: Quickstart | V1 Migration Guide | Going to Production

Added

Core / Agent

• Middleware execution ordering via MiddlewareBase.order() (higher values wrap outer); ReActAgent.Builder.build() stably sorts descending after all registrations (#2532, #2449)
• Session context clear API on ReActAgent / HarnessAgent to clear model-visible conversation context without creating a new session (#2499, #2496)
• Expose ReActAgent state-cache cleanup APIs for long-lived instances (#2572)
• Emit UserConfirmResultEvent when resuming permission HITL, correlatable with the prior RequireUserConfirmEvent via replyId (#2511)
• Anthropic: support configuring disable_parallel_tool_use (#2257)

Model Providers

• Add OpenAI-compatible extension package as a shared base for third-party compatible vendors (#2208)
• Add DeepSeek as a first-class model provider (deepseek:<model>, DEEPSEEK_API_KEY) (#2307, #2211)
• Add GLM (Zhipu AI) provider and dedicated formatters (#2316)
• Add Kimi (Moonshot AI) provider and dedicated formatters (#2320, #2213)
• Add MiniMax OpenAI-compatible provider (#2299)

Harness / Tools

• Remote subagent event streaming and HITL resume (#2559)
• Wait for async tool results by taskId (#2529)
• Default workspace via AGENTSCOPE_WORKSPACE env var for image packaging (#2310)

AG-UI

• Upgrade AG-UI module event mechanism (#2306, #2202)
• Introduce typed MessageContent / InputContent for multimodal AG-UI messages (#2518, #551)

Spring Boot Starters

• Add Ollama Spring Boot Starter (#2176, #2172)

Refactored

• Change Toolkit default execution mode to parallel and improve related docs (#2558, follow-up of #2529)
• Abstract session metadata storage to decouple builders from concrete store implementations (#2258, #2068)
• Rebase Kubernetes sandbox store on agent-sandbox CRDs / controllers, with the cluster owning sandbox lifecycle and warm pools (#2308)

Fixed

Core / Agent

• Prevent pending recovery from consuming HITL approvals (#2109, #2534)
• Apply transformed onModelCall text deltas to the final message so native structured-output parsing does not see stale text (#2469, #2385)
• Repair null streaming tool args from complete raw JSON (#2451, #768)
• Unbind state-saver on ReActAgent.close() to prevent graceful-shutdown registry growth / OOM (#2322, #2321)
• Unbind ShutdownStateSaver on ReActAgent.close() to fix a memory leak (#2384)
• Mark user interrupts with interrupted reason (#2260)
• Handle malformed Unicode when writing agent state files (UnmappableCharacterException) (#2255, #2204)
• Forward reasoning middleware events (e.g. InboxMiddleware HintBlockEvent) to streamEvents() (#2179, #2160)
• Mark ToolResultBlock.error as a structured error (#2174, #2157, #2111)

Model Providers

• DashScope: route qwen3.8-max to the multimodal endpoint (#2553)
• DashScope: preserve SSE error response body so callers can read request_id (#2278, #2197)
• OpenAI: wrap streaming branch in Flux.defer so retries re-issue HTTP requests (#2079)
• OpenAI: terminate stream on [DONE] sentinel (#2104)
• OpenAI: drop non-chunk summary event messages to avoid content duplication (#2367)
• OpenAI: sanitize name field in OpenAIMessageConverter (#2346)
• OpenAI AutoConfiguration: make api-key optional (#2175)
• DeepSeek formatter: preserve system role (#2189, #2168)
• Ollama: honor stream flag in OllamaChatModel (#2415)
• Anthropic: map ToolChoice.None to disable tools (previously incorrectly forced tool use) (#2232, #2221)
• Model provider optimizations and compatibility tweaks (#2474)

Harness / Tools / Sandbox

• Stamp taskId on remote subagent forwarded events (#2575)
• Gate memory prompt guidance on disable flags (#2565)
• Emit subagent end before parent completion to avoid dropped events (#2544)
• Close subagent event stream when the parent is cancelled (#2481, #2480)
• Enforce parent DENY rules for spawned subagents (#2477)
• Preserve RuntimeContext during skill promotion (#2465)
• Enforce Plan Mode for subagents (#2377)
• Reject workspace path traversal (e.g. ../) (#2358)
• Support Windows local shell execution (working-directory commands and charset decoding) (#2304, #2268)
• Isolate static subagent registries by runtime context to prevent multi-tenant crosstalk (#2371, #2328)
• Retain prior summaries in chained compaction to preserve user intent (#2360)
• Preserve skill isolation and tool result history (#2319)
• RemoteFilesystem recursive glob matches files at the search root (#2343)
• Mark optional FilesystemTool params as required=false (#2227)
• Optimize shell-execute working_directory parameter and tool usage hints (#2107)
• Declared subagents inherit parent modelExecutionConfig / toolExecutionConfig (#2252)
• Correct sessionId parameter description (#2195)

Storage / Transport

• PostgreSQL BaseStore schema support (#2273, #2192)
• Fix PostgreSQL upsert SQL syntax error (#2167, #2166)
• Fix JdkHttpTransport SSE stream being cut by absolute timeouts (#1322, #1302)