AG-UI A2UI Middleware 0.0.15 removes action context from public transcripts and records UI actions in signed model history
AG-UI released @ag-ui/a2ui-middleware 0.0.15 on November 10. The update protects private action context from the public transcript, represents UI actions as user input in signed model history, and fixes exhausted-recovery state, duplicate legacy-approval handling, cross-adapter context identity, visibility serialization, and malformed generation that failed to settle at stream termination.
Why it matters
Generative UI security and traceability depend on clear boundaries between a public record, private execution context, and the signed history sent to a model. Leaking private parameters into a transcript or omitting a UI action from verifiable user history can corrupt audits, recovery, and later model reasoning.
A closer look
The release lists seven changes: retain exhausted recovery state after streaming; consume legacy approval before continuation; preserve action-context identity across adapters; stabilize context visibility across serialization and event representations; exclude private action context from public transcripts; represent UI actions as user input in signed model history; and settle malformed generation when the stream ends. AG-UI explicitly marks transcript access, signed-history interpretation, and context serialization as breaking changes.
Who this is for
Frontend, agent-platform, security, and compliance teams using AG-UI A2UI Middleware, approvals, signed history, cross-adapter recovery, or audit records.
Original sources
Revisions & corrections (1)
— Official immutable release documents material privacy, signed-history, recovery and serialization changes with explicit breaking changes.