WSO2 Agent Manager v0.16.0

🚀 Highlights

This release introduces an identity and access management layer with a full RBAC permission model, per-agent rate limiting, gateway-routed LLM-as-judge support across all providers, an instrumentation compatibility-matrix test suite with the 0.3.0 instrumentation baseline, scripted standalone/VM installers, and an improved Agent Overview experience.

Key Updates

• Identity & Access Management (RBAC)

  • New identity management layer with a role-based access control permission model with predefined roles and a read-only flag to prevent editing built-in roles

• Per-Agent Rate Limiting & LLM Configuration

  • Per-agent (per-consumer) rate limit configuration option
  • Partial LLM configuration creation with catalog filtering by environment

• Evaluation & LLM-as-Judge

  • Adopted any-llm as the LLM-as-judge client
  • Gateway-routed LLM judges now supported across all providers, including Azure AI Foundry and Bedrock
  • Fixed empty-output templated LLM-judge scores and eval monitor error messages

• Instrumentation & Compatibility Matrix

  • Instrumentation bumped to 0.3.0 on traceloop-sdk 0.61.0, set as the default for new agents

• Installation & Deployment

  • Scripted standalone install for Agent Manager on a VM with Docker
  • Config-driven advanced VM installer with custom domains and TLS modes
  • AMP Console branding and layout configuration exposed through the Helm chart

• Console & UI

  • Improved Agent Overview page with observability and evaluation surfaces, build status, and metrics visualization

📦 Components

Component	Description
amp-console	React 19 + Oxygen UI web dashboard with RBAC user management, improved Agent Overview, and configurable branding
amp-api	Go-based backend API with identity management (RBAC), per-agent rate limiting, and environment-scoped LLM configuration
amp-traces-observer	Trace query API service with in-memory trace I/O fallback for export
amp-evaluation-monitor	Evaluation monitor service with any-llm judge client and gateway-routed providers
amp-python-instrumentation-provider	Init container for automatic Python agent instrumentation (0.3.0 / traceloop-sdk 0.61.0)
amp-quick-start	Quick start setup container
amctl	CLI for managing agents, projects, deployments, observability, and skills

🐳 Docker Images

ghcr.io/wso2/amp-console:v0.16.0
ghcr.io/wso2/amp-api:v0.16.0
ghcr.io/wso2/amp-traces-observer:v0.16.0
ghcr.io/wso2/amp-evaluation-monitor:v0.16.0
ghcr.io/wso2/amp-quick-start:v0.16.0
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.10
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.11
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.12
ghcr.io/wso2/amp-python-instrumentation-provider:0.3.0-python3.13

⎈ Helm Charts

oci://ghcr.io/wso2/wso2-agent-manager:0.16.0
oci://ghcr.io/wso2/wso2-amp-observability-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-platform-resources-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-thunder-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-evaluation-extension:0.16.0
oci://ghcr.io/wso2/wso2-amp-api-platform-gateway-extension:0.16.0

📚 Samples

• Customer Support Agent - Sample travel booking agent showcasing LangGraph integration
• Hotel Booking Agent - Sample hotel booking agent with chat interface and Pinecone knowledge base integration
• IT Support Agent - IT support agent sample
• Manual Instrumentation Agent - Sample demonstrating manual OpenTelemetry instrumentation with tool-calling

📖 Documentation

See the Quick Start Guide for installation and setup instructions.

🔧 What's Changed

Identity & Access Management (RBAC)

• feat: add identity management with RBAC permission model by @lashinijay in #914
• Enable rbac by default in the setup by @lashinijay in #1020
• Improvements to rbac implementation by @lashinijay in #1021
• Assign admin role to amp-api-client application by @lashinijay in #1024
• Disabling modifying permissions of predefined roles by @lashinijay in #1034
• Refactor resource names to follow <resource-server>:<resource>:<action> format by @lashinijay in #1040
• Update default admin credentials for Agent Manager by @lashinijay in #1044
• Remove level 2 sub resources from resource server by @lashinijay in #1047
• Fix floating labels in add user view by @lashinijay in #1055
• Add new admins group by default and remove Administrators group from thunder by @lashinijay in #1060

Per-Agent Rate Limiting & LLM Configuration

• Implement per-agent rate limit configuration option by @menakaj in #982
• Allow partial llm configuration creation and filter catalog based on environment by @menakaj in #978
• Fix agent-llm configs not deleting when agent is deleted by @menakaj in #1011

Evaluation & LLM-as-Judge

• Adopt any-llm as the LLM-as-judge client by @RAVEENSR in #1010
• Support all providers for gateway-routed LLM judges by @RAVEENSR in #1014
• Fix Azure and Bedrock judge routing through the gateway by @RAVEENSR in #1016
• Use generic LLM wording in eval user-facing surfaces by @RAVEENSR in #998
• Fix empty-output templated LLM-judge scores by @RAVEENSR in #1050
• Fix eval monitors error messages by @menakaj in #953

Instrumentation & Compatibility Matrix

• Add instrumentation compatibility-matrix test suite by @RAVEENSR in #970
• Make the instrumentation-matrix heavy tier run green in CI by @RAVEENSR in #977
• Add a deployable CrewAI sample for the heavy-tier per-framework axis by @RAVEENSR in #980
• Fix the deployed CrewAI agent crashing on a read-only HOME by @RAVEENSR in #983
• Bump instrumentation to 0.3.0 (traceloop-sdk 0.61.0) by @RAVEENSR in #987
• Update lingering 0.60.0/0.2.1 references to 0.61.0/0.3.0 by @RAVEENSR in #990
• Write CoreDNS host aliases before k3d restart by @RAVEENSR in #993
• Localize heavy-tier span-delivery failures to a pipeline boundary by @RAVEENSR in #995
• Make CrewAI sample docs outsider-friendly by @RAVEENSR in #997
• Request RBAC scopes in heavy matrix token call by @RAVEENSR in #1033
• Use dedicated instrumentation test secrets in matrix workflows by @RAVEENSR in #1043

Gateway & CORS

• Add CORS configuration section to deployment drawer by @AnoshanJ in #959
• Fix api key events not being delivered on gw-cold start by @menakaj in #969
• Move jwt-auth header config from gateway system params to user params for tracing-proxy by @AnoshanJ in #976
• Add authheaderscheme field to apiGateway system configuration by @AnoshanJ in #991

Installa...

WSO2 Agent Manager - Python Instrumentation v0.3.0

What's Changed

• Bump instrumentation to 0.3.0 (traceloop-sdk 0.61.0) by @RAVEENSR in #987

Documentation

See the Quick Start Guide for detailed setup instructions.

Contributors

• @RAVEENSR

Full Changelog: amctl/v0.2.0...amp-instrumentation/v0.3.0

WSO2 Agent Manager v0.15.0

🚀 Highlights

This release introduces Agent Catalog, API key security for agents, amctl CLI observability and skills commands, CORS policy management via the API platform gateway, cost-based rate limiting, improved trace aggregation, and file mount support.

Key Updates

• Agent Catalog

  • Agent Catalog for managing reusable Agent Kinds published from source-code-based agents
  • Agent instance creation from published Agent Kinds
  • Agent Kind CRUD operations, versioning, and version metadata management
  • Catalog UI with listing, detail views, Swagger spec viewer, and publish flow

• API Key Security for Agents

  • Agents exposed via the gateway can now be secured with API keys scoped per environment
  • Integrated deployment checks and OpenChoreo client for API key artifact management

• CORS Policy via API Platform Gateway

  • Replaced HTTPRoute CORS filter with API Platform CORS policy
  • CORS policy automatically attached at agent creation time

• Cost-Based Rate Limiting

  • LLM cost policies enabled by default in the Rate Limiting tab
  • Non-LLM and unsupported policies filtered from the policy hub
  • Per-agent resource limit max values now configurable

• File Mount Support

  • File-based configuration support for agents
  • Support for mounting both secret and non-secret configuration files
  • File mount configuration support during agent creation and deployment

• Trace & Observer Improvements

  • Trace-list enrichment cascaded through child spans with parallelised aggregation
  • gen_ai parts[] tool calls and tool responses now rendered correctly
  • System message synthesized from gen_ai.system_instructions
  • Preview tooltips and partial-token markers in TracesTable
  • Time range selector component with configurable defaults

• amctl CLI — Observability & Skills

  • amctl agent logs, metrics, traces list, traces export, and trace (span detail) commands
  • amctl agent status command for deployment health checks
  • Skills engine: amctl skills install/remove/list with remote GitHub tarball source
  • Agent type/subtype shown in amctl agent get output
  • CI check for amctl client codegen drift

• Instrumentation Updates

  • wrapt<2 cap and v0.2.1 release for amp-instrumentation
  • Instrumentation doc URLs derived from config
  • Daily watcher for new traceloop-sdk releases
  • Manual-instrumentation sample agent added

📦 Components

Component	Description
amp-console	React 19 + Oxygen UI web dashboard with Agent Kinds catalog and time range selector
amp-api	Go-based backend API with API key security, CORS policy, and cost-based rate limiting
amp-traces-observer	Trace query API service with child-span enrichment and GenAI parts rendering
amp-evaluation-monitor	Evaluation monitor service
amp-python-instrumentation-provider	Init container for automatic Python agent instrumentation
amp-quick-start	Quick start setup container
amctl	CLI for managing agents, projects, deployments, observability, and skills

🐳 Docker Images

ghcr.io/wso2/amp-console:v0.15.0
ghcr.io/wso2/amp-api:v0.15.0
ghcr.io/wso2/amp-traces-observer:v0.15.0
ghcr.io/wso2/amp-evaluation-monitor:v0.15.0
ghcr.io/wso2/amp-quick-start:v0.15.0
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.1-python3.10
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.1-python3.11
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.1-python3.12
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.1-python3.13

⎈ Helm Charts

oci://ghcr.io/wso2/wso2-agent-manager:0.15.0
oci://ghcr.io/wso2/wso2-amp-observability-extension:0.15.0
oci://ghcr.io/wso2/wso2-amp-platform-resources-extension:0.15.0
oci://ghcr.io/wso2/wso2-amp-thunder-extension:0.15.0
oci://ghcr.io/wso2/wso2-amp-evaluation-extension:0.15.0
oci://ghcr.io/wso2/wso2-amp-api-platform-gateway-extension:0.15.0

📚 Samples

• Customer Support Agent - Sample travel booking agent showcasing LangGraph integration
• Hotel Booking Agent - Sample hotel booking agent with chat interface and Pinecone knowledge base integration
• IT Support Agent - IT support agent sample
• Manual Instrumentation Agent - Sample demonstrating manual OpenTelemetry instrumentation with tool-calling

📖 Documentation

See the Quick Start Guide for installation and setup instructions.

🔧 What's Changed

API Key Security for Agents as Resources

• Add API Key Security for Agents as Resources by @AnoshanJ in #830
• Update documentation for securing agent endpoints with API keys by @AnoshanJ in #879
• Add API key authentication to e2e endpoint invocation tests by @hanzjk in #885

Agent Kinds (Catalog & Publish)

• Add agent kind version management endpoints by @nadheesh in #872
• Add Agent Kind UI updates by @rasika2012 in #866
• Add Logo mount point by @rasika2012 in #880
• Add warning alert for missing trace details in TraceExplorer by @rasika2012 in #889
• Refactor agent handling to replace 'fromKind' with 'kindName' by @rasika2012 in #891
• Update Catalog.KindDetails for new API and enhance key validation by @rasika2012 in #909
• Prevent workflow env value update for agent kind by @hanzjk in #894
• Support file-based configurations for agent by @hanzjk in #851
• Fix file mount UI update issues by @hanzjk in #954

amctl CLI

curl -fsSL https://raw.githubusercontent.com/wso2/agent-manager/main/scripts/install-amctl.sh | sh

• CLI Logs, Metrics and Trace commands by @jhivandb in #868
• Add amctl skills install/remove/list commands by @jhivandb in #861
• Add agent status command by @jhivandb in #943
• Show agent type and subtype in amctl agent get output by @jhivandb in #886
• Add CI check for amctl client codegen drift by @jhivandb in #888
• Pin oapi-codegen to v2.6.0 in amctl-gen-client by @jhivandb in #919
• Add amctl CLI installation and reference docs by @jhivandb in #887

CORS Policy via API Platform Gateway

• Replace HTTPRoute CORS filter with API Platform CORS policy by @AnoshanJ in #947

Cost-Based Rate Limiting & Policy Management

• Filter non-LLM policies and unsupported policies from the policy hub by @menakaj in #850
• Enable Cost based ratelimit in the Rate Limiting tab by @menakaj in #940
• Configure LLM cost policies defaults by @menakaj in #922
• Set per agent resource limit max values configurable by @menakaj in #944

Trace & Observer Improvements

• Cascade trace-list enrichment through child spans and parallelise by @RAVEENSR in #904
• fix(traces-observer): render gen_ai parts[] tool calls and tool responses by @RAVEENSR in #884
• fix(traces-observer): synthesize system message from gen_ai.system_instructions by @RAVEENSR in #895
• Add preview tooltips and partial-token marker to TracesTable by @rasika2012 in #909
• Refactor TimeRangeSelector component by @rasika2012 in #946

Instrumentation

• fix(instrumentation): cap wrapt<2 and release 0.2.1 by [@RAVEENSR](https://github.com/RAV...

WSO2 Agent Manager - CLI v0.2.0

amctl v0.2.0

Adds AI assistant skills management and an observability surface for agents — logs, metrics, and traces.

Added

• amctl skills install | list | remove — manage AI assistant skills on disk.
• amctl agent logs <agent> — stream agent logs with --since, --level, --grep, --limit, and --sort filters.
• amctl agent metrics <agent> — show agent metrics over a --since window (default 24h).
• amctl agent traces <agent> — list recent traces with --since, --limit, --sort, and condition filters (--condition error_status | high_latency | high_token_usage | tool_call_fails | excessive_steps, tunable via --max-latency, --max-tokens, --max-spans).
• amctl agent trace <agent> <traceId> — inspect a single trace; drill into one span with --span, control window with --since and --limit.
• amctl agent traces export <agent> — export traces over a required --since window with --limit and --sort.

Not in this release

• External-provisioned agents (--provisioning external).

Install

curl -fsSL https://raw.githubusercontent.com/wso2/agent-manager/main/scripts/install-amctl.sh | sh

Pin a version: curl -fsSL <url> | AMCTL_VERSION=0.2.0 sh. Override the install directory: curl -fsSL <url> | AMCTL_INSTALL_DIR=$HOME/bin sh.

Manual — download the archive below, extract, and put amctl on your PATH. Verify with checksums.txt (SHA-256).

Platform	Asset
macOS (Intel)	amctl_v0.2.0_darwin_amd64.tar.gz
macOS (Apple)	amctl_v0.2.0_darwin_arm64.tar.gz
Linux (x86_64)	amctl_v0.2.0_linux_amd64.tar.gz
Linux (arm64)	amctl_v0.2.0_linux_arm64.tar.gz
Windows (x86_64)	amctl_v0.2.0_windows_amd64.zip

WSO2 Agent Manager — Python Instrumentation v0.2.1

What's Changed

• fix(instrumentation): cap wrapt<2 and release 0.2.1 by @RAVEENSR in #881

Documentation

See the Quick Start Guide for detailed setup instructions.

Contributors

• @RAVEENSR

Full Changelog: amctl/v0.1.0...amp-instrumentation/v0.2.1

WSO2 Agent Manager - CLI v0.1.0

amctl v0.1.0

First pre-release of amctl, the CLI for WSO2 Agent Manager. Command surface,

Added

• amctl login — interactive PKCE login; client_credentials grant when
  --client-secret is supplied; --auth-server to skip OAuth metadata
  discovery.
• amctl context instance — add, list, switch, and remove configured
  instances.
• amctl context org — set / show the active organization.
• amctl context link / amctl context unlink — bind the working directory
  to an org / project / agent so commands resolve context automatically.
• amctl context show — print the resolved context.
• amctl project create | list | get | delete.
• amctl agent create — internal-provisioned agents, chat-api and
  custom-api subtypes, buildpack and docker build types, model config
  from file, --env / --env-secret / --env-from-secret,
  --no-auto-instrumentation.
• amctl agent list | get | delete.
• amctl agent build create | get | list | logs.
• amctl agent deploy — deploy latest or named build with --build-name
  and --env; prompts on env conflict.
• amctl completion — bash, zsh, fish, PowerShell, with custom completers
  for org / project / agent / build / env values.
• amctl version and amctl --version — version, commit, build date.
• Global --json for structured envelopes; global --org override.

Not in this release

• External-provisioned agents (--provisioning external).

Install

curl -fsSL https://raw.githubusercontent.com/wso2/agent-manager/main/scripts/install-amctl.sh | sh

Pin a version: curl -fsSL <url> | AMCTL_VERSION=0.1.0 sh. Override the
install directory: curl -fsSL <url> | AMCTL_INSTALL_DIR=$HOME/bin sh.

Manual — download the archive below, extract, and put amctl on your
PATH. Verify with checksums.txt (SHA-256).

Platform	Asset
macOS (Intel)	amctl_v0.1.0_darwin_amd64.tar.gz
macOS (Apple)	amctl_v0.1.0_darwin_arm64.tar.gz
Linux (x86_64)	amctl_v0.1.0_linux_amd64.tar.gz
Linux (arm64)	amctl_v0.1.0_linux_arm64.tar.gz
Windows (x86_64)	amctl_v0.1.0_windows_amd64.zip

WSO2 Agent Manager v0.14.0

🚀 Highlights

This release introduces gateway support for evaluation monitors, the initial version of the amctl CLI, an MCP server for agent management, OpenChoreo v1.0.1 migration, and significant log view improvements.

Key Updates

• Gateway Support for Monitors

  • Evaluation monitors now route LLM-judge calls through the organization-level API gateway proxy
  • Replaced the standalone evaluator LLM provider API with gateway-native provider resolution
  • Added org-level LLM provider picker in the monitor wizard, removing the separate credential form

• Log View Improvements

  • Improved log panel readability: removed line numbers, added wrap/unwrap options
  • Enhanced copy functionality and dark mode styling fixes
  • Better log and trace loading experience with span icon previews

• OpenChoreo Migration

  • Upgraded to OpenChoreo v1.0.1
  • Thunder extension updated to create system applications with org-specific auth

• Initial Version of amctl CLI

  • PKCE-based interactive login and client-credential authentication
  • Agent, project, and context management commands (list, get, delete, build)
  • Shell completion, --json output, and cross-platform install script

• MCP Server

  • Built-in MCP server with tool sets for project, agent, build, deployment, and observability management
  • Enables AI-assisted agent lifecycle management through any MCP-compatible client

• Instrumentation Updates

  • Per-version init-container images for Python instrumentation
  • init_otel() helper and pinned traceloop-sdk for reproducible instrumentation
  • Instrumentation version tracking via instrumentation_version column

• Observer Enhancements

  • Complete OTel GenAI semantic convention extraction
  • Improved retriever vector-DB detection
  • Trace score fetching and sorting with flexible sortOrder parameter

📦 Components

Component	Description
amp-console	React 19 + Oxygen UI web dashboard
amp-api	Go-based backend API with gateway-native LLM provider resolution
amp-traces-observer	Trace query API service with full OTel GenAI semconv support
amp-evaluation-monitor	Evaluation monitor service with gateway proxy integration
amp-python-instrumentation-provider	Init container for automatic Python agent instrumentation
amp-quick-start	Quick start setup container
amctl	CLI for managing agents, projects, and deployments

🐳 Docker Images

ghcr.io/wso2/amp-console:v0.14.0
ghcr.io/wso2/amp-api:v0.14.0
ghcr.io/wso2/amp-traces-observer:v0.14.0
ghcr.io/wso2/amp-evaluation-monitor:v0.14.0
ghcr.io/wso2/amp-quick-start:v0.14.0
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.0-python3.10
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.0-python3.11
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.0-python3.12
ghcr.io/wso2/amp-python-instrumentation-provider:0.2.0-python3.13

⎈ Helm Charts

oci://ghcr.io/wso2/wso2-agent-manager:0.14.0
oci://ghcr.io/wso2/wso2-amp-observability-extension:0.14.0
oci://ghcr.io/wso2/wso2-amp-platform-resources-extension:0.14.0
oci://ghcr.io/wso2/wso2-amp-thunder-extension:0.14.0
oci://ghcr.io/wso2/wso2-amp-evaluation-extension:0.14.0
oci://ghcr.io/wso2/wso2-amp-api-platform-gateway-extension:0.14.0

📚 Samples

• Customer Support Agent - Sample travel booking agent showcasing LangGraph integration
• Hotel Booking Agent - Sample hotel booking agent with chat interface and Pinecone knowledge base integration

📖 Documentation

See the Quick Start Guide for installation and setup instructions.

🔧 What's Changed

Gateway Support for Monitors (LLM-Judge)

• Route monitor LLM evaluation through gateway manage LLM providers by @nadheesh in #762
• Add org uuid to the trace publishing token by @menakaj in #756
• Fix monitor llm proxy credential provisioning by @menakaj in #812
• Support per-org publisher credentials for multi-tenant monitor scheduling by @nadheesh in #790
• Improvements to the llm-service provider and log views by @menakaj in #815
• Fix monitor cleanup schedule oc invocation by @menakaj in #818
• Remove org validation when publishing monitor scores by @menakaj in #799
• Add per-org audience validation support for traces-observer and remove score publishing org validation by @menakaj in #779
• Fix LLM proxy name collision across agents/projects by @menakaj in #791

OpenChoreo Migration

• Upgrade to oc v1.0.1 by @hanzjk in #833

Log View Improvements

• Improve logs copy and add wrap, unwrap options by @menakaj in #808
• Fix logs panel styles in dark mode by @menakaj in #836
• Fix log transparency issue in error log sections by @menakaj in #820
• Improve Logs view and Trace Table UX by @rasika2012 in #805

amctl CLI

Install cli

curl -fsSL https://raw.githubusercontent.com/wso2/agent-manager/main/scripts/install-amctl.sh | sh

• Add amctl CLI for managing agents from the terminal by @jhivandb in #753
• Add RFC 9728 OAuth 2.0 Protected Resource Metadata by @jhivandb in #773
• Add amctl agent build subcommands with buildable-agent validation by @jhivandb in #803
• Add link/unlink commands for directory-bound context by @jhivandb in #826
• Add (platform) agent create command by @jhivandb in #823
• Add AGENTS.md for CLI development conventions by @jhivandb in #854

MCP Server

• Adding MCP Server with auth and basic provisioning tools by @sathsaraniii in #778
• Adding observability tools set to MCP Server by @sathsaraniii in #813

Agent Kinds

• Agent Kind CRUD, versioning, and kind-based agent instantiation by @nadheesh in #822

Instrumentation

• amp-instrumentation: pin traceloop-sdk; add init_otel() helper by @RAVEENSR in #849
• agent_configs: add instrumentation_version column by @RAVEENSR in #848
• instrumentation: per-version init-container image (build + resolve) by @RAVEENSR in #852
• agent_configs: per-agent instrumentation version (API + override + backfill) by @RAVEENSR in #857
• ci: standalone workflow to release instrumentation images on demand by @RAVEENSR in #856
• Update traceloop-sdk dependency version to support new features by @AnoshanJ in #783

Observer & Traces

• observer: build trace view from OpenTelemetry GenAI semantic-convention attributes by @RAVEENSR in #839
• Align ComponentSearchScope field names with observer service terminology by @AnoshanJ in #772
• fix(traces): show span icons before span details load by @AnoshanJ in #821
• Upda...

WSO2 Agent Manager — Python Instrumentation v0.2.0

This release reshapes how AMP delivers Python agent instrumentation. The instrumentation version is now customer-selectable and decoupled from the AMP product version: each amp-instrumentation release pins a specific traceloop-sdk, ships matching pre-built init-container images, and is published independently. It also documents a manual instrumentation contract based on OpenTelemetry GenAI semantic conventions, so customers running custom or non-frontier frameworks can emit spans that AMP renders with full fidelity.

Pinned in this release: amp-instrumentation==0.2.0 → traceloop-sdk==0.60.0 → init-container images for Python 3.10 / 3.11 / 3.12 / 3.13.

Highlights

Customer-selectable instrumentation version

• The Console exposes an AMP instrumentation version selector when creating a Python agent with auto-instrumentation enabled, pre-filled with the platform default. Once an agent is created its version is pinned, so future default bumps never silently move existing agents. (#864)
• The Python languageVersion field is now a dropdown of buildpack-supported versions (3.10/3.11/3.12/3.13), so deployments cannot ask for an init-container image that was never built. (#864)
• The REST API accepts configurations.instrumentationVersion on agent create and validates it against the supported set. The MCP create_internal_agent_python tool surfaces the same instrumentation_version field. (#857, #867)
• A new agent_configs.instrumentation_version column persists the per-agent pin; existing rows are backfilled to the current default (0.2.0) so a later default bump leaves them unchanged. (#848, #857)

Per-version pre-built init-container images

• The init-container image is now keyed off the AMP-instrumentation version, not the product version. Tag scheme: ghcr.io/wso2/amp-python-instrumentation-provider:<instr_version>-python<X.Y> (e.g. 0.2.0-python3.11). The agent-manager service resolves an agent's pinned version (or the platform default) to the matching image at deploy time. (#852)
• The image build matrix is data-driven from .github/release-config.json, so adding a new AMP-instrumentation version or supported Python is a config edit. (#852)
• A new standalone workflow publishes instrumentation images on demand, decoupled from the AMP product release cycle. Cutting a new AMP-instrumentation version no longer requires a full product release. (#856)

Manual instrumentation contract

• New documentation page describing the OTel-GenAI-semconv-based contract customers can target from custom/non-frontier frameworks: OTLP/HTTP transport, the x-amp-api-key header, and the enumerated supported attributes per span kind (llm, embedding, tool, agent, retriever, plus the OpenLLMetry extension keys for the gaps OTel hasn't standardized — chain/rerank kinds and tool I/O). Spans that follow the contract get the full rich UI + evaluators. (d4d46b0)
• The observer (traces-observer-service) now reads pure OTel GenAI semconv spans end-to-end. A span carrying only gen_ai.* keys yields a complete trace view for the five OTel-covered kinds. Detection by gen_ai.operation.name (execute_tool, invoke_agent, create_agent), the new OTel DB-semconv keys (db.system.name, db.collection.name, type-flexible top_k), and gen_ai.input/output.messages as a tool-I/O fallback are all wired in. CrewAI handling is unchanged. (#839)

amp-instrumentation package changes

• traceloop-sdk is now pinned to a specific version (==0.60.0) instead of the prior >=0.47.0,<=0.60.0 range. Each future amp-instrumentation release pins exactly one SDK version, removing the unpredictability of range-based installs. (#849)
• New init_otel() helper for the manual path: configures an OTLP exporter against the AMP gateway with the API-key header, with no instrumentation of its own. Use it when you instrument your own framework. (#849)
• __version__ is now derived dynamically from the installed package metadata. (#849)

Documentation

• New Manual Instrumentation guide under Concepts.
• AMP-instrumentation ↔ traceloop-sdk ↔ Python image-matrix mapping table added to the amp-instrumentation component reference; first row published: 0.2.0 → 0.60.0 → python 3.10–3.13.
• observability.mdx updated to describe the two paths (auto via the AMP-managed library + version selector; manual via the contract).
• New python-instrumentation-provider/RELEASING.md runbook for cutting a new AMP-instrumentation version or adjusting the supported Python set. (d4d46b0, #852)

Migration notes

• No action required for existing agents. All rows in agent_configs are backfilled to instrumentation_version = '0.2.0', so they continue to use the same image tag as before the upgrade.
• traceloop-sdk dependency is now pinned, not ranged. If you were pinning a different traceloop-sdk alongside amp-instrumentation, expect a resolver conflict. Either remove your pin or upgrade to amp-instrumentation==0.2.0 (which pins traceloop-sdk==0.60.0).
• Image tag scheme changed from …amp-python-instrumentation-provider:v{AMP_VERSION}-python{X.Y} to …:{instrumentation_version}-python{X.Y}. If you mirror images into a private registry, update your sync to the new tag pattern.

What's Changed

• observer: build trace view from OpenTelemetry GenAI semantic-convention attributes by @RAVEENSR in #839
• agent_configs: add instrumentation_version column by @RAVEENSR in #848
• amp-instrumentation: pin traceloop-sdk; add init_otel() helper by @RAVEENSR in #849
• instrumentation: per-version init-container image (build + resolve) by @RAVEENSR in #852
• ci: standalone workflow to release instrumentation images on demand by @RAVEENSR in #856
• instrumentation: per-agent version override, API validation, and backfill by @RAVEENSR in #857
• console: AMP instrumentation version selector + Python languageVersion dropdown by @RAVEENSR in #864
• mcp: surface instrumentation_version on create_internal_agent_python by @RAVEENSR in #867
• docs: manual instrumentation guide + AMP-instrumentation version mapping by @RAVEENSR (commit d4d46b0)

Documentation

• Manual Instrumentation
• Observability
• amp-instrumentation component reference (incl. version mapping)

Contributors

• @RAVEENSR

Full Changelog: amp-instrumentation/v0.1.7...amp-instrumentation/v0.2.0

WSO2 Agent Manager - Python Instrumentation v0.1.7

What's Changed

• Update traceloop-sdk dependency version to support new features
  @AnoshanJ in #783

Documentation

See the Quick Start Guide for detailed setup instructions.

Contributors

• @AnoshanJ

Full Changelog: https://github.com/wso2/agent-manager/commits/amp-instrumentation/v0.1.7

WSO2 Agent Manager v0.13.1

🚀 Highlights

This release includes a critical fix for a bug related to pulling the Prometheus metrics adapter image in OpenChoreo.

Key Updates

• OpenChoreo Adapter Version Fix
  • Explicitly pinned the metrics-adapter-prometheus adapter version to resolve pod startup failures

📦 Components

Component	Description
amp-console	React 19 + Oxygen UI web dashboard
amp-api	Go-based backend API with explicit adapter version pinning
amp-traces-observer	Trace query API service
amp-evaluation-monitor	Evaluation monitor service
amp-python-instrumentation-provider	Init container for automatic Python agent instrumentation
amp-quick-start	Quick start setup container

🐳 Docker Images

ghcr.io/wso2/amp-console:v0.13.1
ghcr.io/wso2/amp-api:v0.13.1
ghcr.io/wso2/amp-traces-observer:v0.13.1
ghcr.io/wso2/amp-evaluation-monitor:v0.13.1
ghcr.io/wso2/amp-quick-start:v0.13.1
ghcr.io/wso2/amp-python-instrumentation-provider:v0.13.1-python3.10
ghcr.io/wso2/amp-python-instrumentation-provider:v0.13.1-python3.11
ghcr.io/wso2/amp-python-instrumentation-provider:v0.13.1-python3.12
ghcr.io/wso2/amp-python-instrumentation-provider:v0.13.1-python3.13

⎈ Helm Charts

oci://ghcr.io/wso2/wso2-agent-manager:0.13.1
oci://ghcr.io/wso2/wso2-amp-observability-extension:0.13.1
oci://ghcr.io/wso2/wso2-amp-platform-resources-extension:0.13.1
oci://ghcr.io/wso2/wso2-amp-secrets-extension:0.13.1
oci://ghcr.io/wso2/wso2-amp-thunder-extension:0.13.1
oci://ghcr.io/wso2/wso2-amp-evaluation-extension:0.13.1
oci://ghcr.io/wso2/wso2-amp-ai-gateway-extension:0.13.1

📚 Samples

• Customer Support Agent - Sample travel booking agent showcasing LangGraph integration
• Hotel Booking Agent - Sample hotel booking agent with chat interface and Pinecone knowledge base integration

📖 Documentation

See the Quick Start Guide for installation and setup instructions.

🔧 What's Changed

OpenChoreo Adapter Fix

• Explicitly set metrics-adapter-prometheus version to fix pod configuration error by @hanzjk in hansi-patch-13.1

👥 Contributors

• @hanzjk

---

Full Changelog: amp/v0.13.0...amp/v0.13.1