feat: add Go SDK and documentation

Author: ZhiXiao-Lin

.github/workflows/ci.yml

@@ -81,6 +81,18 @@ jobs:
       - name: Check Python SDK
         run: cargo check --manifest-path sdk/python/Cargo.toml
 
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "1.23.x"
+          cache-dependency-path: sdk/go/go.mod
+
+      - name: Check Go SDK
+        run: |
+          cargo build --package a3s-code-go-bridge --bin a3s-code-go-bridge
+          A3S_CODE_GO_BRIDGE_TEST_BINARY="$PWD/../../target/debug/a3s-code-go-bridge" \
+            go test -race ./...
+        working-directory: sdk/go
+
   windows-check:
     name: Windows check
     runs-on: windows-latest
@@ -103,3 +115,16 @@ jobs:
 
       - name: Library tests
         run: cargo test --workspace --lib
+
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "1.23.x"
+          cache-dependency-path: sdk/go/go.mod
+
+      - name: Go SDK integration
+        shell: pwsh
+        working-directory: sdk/go
+        run: |
+          cargo build --package a3s-code-go-bridge --bin a3s-code-go-bridge
+          $env:A3S_CODE_GO_BRIDGE_TEST_BINARY = (Resolve-Path "..\..\target\debug\a3s-code-go-bridge.exe").Path
+          go test ./...

.github/workflows/publish-go.yml

@@ -0,0 +1,131 @@
+name: Publish Go SDK
+
+on:
+  workflow_call:
+
+permissions:
+  contents: write
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  build-bridge:
+    name: Build Go bridge (${{ matrix.settings.target }})
+    strategy:
+      fail-fast: false
+      matrix:
+        settings:
+          - host: ubuntu-latest
+            target: x86_64-unknown-linux-gnu
+            executable: a3s-code-go-bridge
+            suffix: ""
+          - host: macos-15-intel
+            target: x86_64-apple-darwin
+            executable: a3s-code-go-bridge
+            suffix: ""
+          - host: windows-latest
+            target: x86_64-pc-windows-msvc
+            executable: a3s-code-go-bridge.exe
+            suffix: .exe
+    runs-on: ${{ matrix.settings.host }}
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Setup workspace context
+        shell: bash
+        run: bash .github/setup-workspace.sh
+
+      - name: Install Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.settings.target }}
+
+      - uses: Swatinem/rust-cache@v2
+
+      - name: Install protobuf compiler
+        uses: arduino/setup-protoc@v3
+
+      - name: Build bridge
+        run: >-
+          cargo build
+          --release
+          --package a3s-code-go-bridge
+          --bin a3s-code-go-bridge
+          --target ${{ matrix.settings.target }}
+
+      - name: Package bridge
+        shell: bash
+        run: |
+          set -euo pipefail
+          VERSION="${GITHUB_REF_NAME#v}"
+          SOURCE="target/${{ matrix.settings.target }}/release/${{ matrix.settings.executable }}"
+          ASSET="a3s-code-go-bridge-v${VERSION}-${{ matrix.settings.target }}${{ matrix.settings.suffix }}"
+          mkdir -p dist
+          cp "$SOURCE" "dist/$ASSET"
+          (
+            cd dist
+            if command -v sha256sum >/dev/null 2>&1; then
+              sha256sum "$ASSET" > "$ASSET.sha256"
+            else
+              shasum -a 256 "$ASSET" > "$ASSET.sha256"
+            fi
+          )
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: go-bridge-${{ matrix.settings.target }}
+          path: dist/*
+          if-no-files-found: error
+
+  publish:
+    name: Publish Go module tag and bridge assets
+    needs: [build-bridge]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: go-bridge-*
+          path: dist
+          merge-multiple: true
+
+      - name: Create path-prefixed Go module tag
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          VERSION="${GITHUB_REF_NAME#v}"
+          MAJOR="${VERSION%%.*}"
+          grep -qx "module github.com/A3S-Lab/Code/sdk/go/v${MAJOR}" sdk/go/go.mod
+          GO_TAG="sdk/go/v${VERSION}"
+          if git ls-remote --exit-code --tags origin "refs/tags/${GO_TAG}" >/dev/null 2>&1; then
+            test "$(git rev-list -n 1 "refs/tags/$GO_TAG")" = "$GITHUB_SHA"
+          else
+            git config user.name "github-actions[bot]"
+            git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+            git tag -a "$GO_TAG" "$GITHUB_SHA" -m "A3S Code Go SDK v${VERSION}"
+            git push origin "$GO_TAG"
+          fi
+
+      - name: Upload bridge assets
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          cat dist/*.sha256 > dist/a3s-code-go-bridge-SHA256SUMS
+          if ! gh release view "$GITHUB_REF_NAME" >/dev/null 2>&1; then
+            gh release create "$GITHUB_REF_NAME" \
+              --title "$GITHUB_REF_NAME" \
+              --notes "Release assets are being published." || true
+          fi
+          for attempt in 1 2 3 4 5; do
+            gh release view "$GITHUB_REF_NAME" >/dev/null 2>&1 && break
+            sleep 2
+          done
+          gh release upload "$GITHUB_REF_NAME" \
+            dist/a3s-code-go-bridge-* \
+            --clobber

.github/workflows/release.yml

@@ -71,6 +71,18 @@ jobs:
       - name: Check Python SDK
         run: cargo check --manifest-path sdk/python/Cargo.toml
 
+      - uses: actions/setup-go@v6
+        with:
+          go-version: "1.23.x"
+          cache-dependency-path: sdk/go/go.mod
+
+      - name: Check Go SDK
+        run: |
+          cargo build --package a3s-code-go-bridge --bin a3s-code-go-bridge
+          A3S_CODE_GO_BRIDGE_TEST_BINARY="$PWD/../../target/debug/a3s-code-go-bridge" \
+            go test -race ./...
+        working-directory: sdk/go
+
       - name: Reclaim build space before tests
         run: |
           cargo clean --manifest-path sdk/node/Cargo.toml
@@ -177,12 +189,18 @@ jobs:
     uses: ./.github/workflows/publish-python-bootstrap.yml
     secrets: inherit
 
+  publish-go:
+    name: Go SDK
+    needs: [publish-crate, publish-python]
+    uses: ./.github/workflows/publish-go.yml
+    secrets: inherit
+
   # ───────────────────────────────────────────────
   # Create GitHub Release
   # ───────────────────────────────────────────────
   github-release:
     name: GitHub Release
-    needs: [publish-crate, publish-node, publish-python, publish-python-bootstrap]
+    needs: [publish-crate, publish-node, publish-python, publish-python-bootstrap, publish-go]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Added a pure-Go v6 SDK backed by a long-lived, capability-checked Rust bridge,
+  covering sessions, lossless events, direct tools, run observation,
+  verification, persistence, Skills, and MCP without requiring CGO.
+- Added version-matched x86-64 Linux, macOS, and Windows bridge release assets
+  with SHA-256 checksums, Go protocol-alignment checks, CI integration, and
+  bilingual website documentation.
+
 ## [6.5.2] - 2026-07-28
 
 ### Added

Cargo.lock

@@ -2,6 +2,7 @@
 resolver = "2"
 members = [
     "core",
+    "sdk/go/bridge",
 ]
 # Native SDK crates require special toolchains (Python/Node.js)
 # Build them individually: cargo build -p a3s-code-node / a3s-code-py

Cargo.toml

@@ -14,7 +14,7 @@
 **A3S Code** is an async Rust runtime for building governed coding agents. It
 keeps the agent loop, workspace tools, model adapters, policy decisions,
 versioned events, and durable evidence behind explicit contracts. Use it from
-Rust, Node.js, Python, or through the `a3s code` terminal application.
+Rust, Node.js, Python, Go, or through the `a3s code` terminal application.
 
 <p align="center">
   <a href="#start-in-60-seconds">Start</a> ·
@@ -352,23 +352,29 @@ multiple agents or behaviors need one auditable shared model.
 | Rust | [`a3s-code-core`](https://crates.io/crates/a3s-code-core) | Complete runtime API and extension traits |
 | Node.js | [`@a3s-lab/code`](https://www.npmjs.com/package/@a3s-lab/code) | Native N-API bindings for async lifecycle, streams, tools, stores, orchestration, MCP, and state graph |
 | Python | [`a3s-code`](https://pypi.org/project/a3s-code/) | Native PyO3/bootstrap package with sync and async application APIs |
+| Go | [`github.com/A3S-Lab/Code/sdk/go/v6`](sdk/go/README.md) | Pure-Go client with a versioned local bridge for sessions, streams, tools, runs, verification, and MCP |
 
 ```bash
 # Node.js
 npm install @a3s-lab/code
 
 # Python
 python -m pip install a3s-code
+
+# Go
+go get github.com/A3S-Lab/Code/sdk/go/v6
 ```
 
-The native SDK crates enable the Core `s3` and `serve` features. See their
-[Node.js](sdk/node/README.md) and [Python](sdk/python/README.md) guides for
-surface-specific examples and intentional API differences.
+The native SDK crates enable the Core `s3` and `serve` features. The pure-Go
+package uses the matching `a3s-code-go-bridge` release asset and requires no
+CGO. See the [Node.js](sdk/node/README.md), [Python](sdk/python/README.md), and
+[Go](sdk/go/README.md) guides for surface-specific examples and intentional API
+differences.
 
 ## Architecture
 
 ```text
-Rust host / Node SDK / Python SDK / a3s code
+Rust host / Node SDK / Python SDK / Go SDK / a3s code
                          │
                        Agent
                          │
@@ -392,6 +398,8 @@ hooks, security, MCP transports, and graph stores.
 Source is grouped by concern under `agent_api/`, `tools/`, `workspace/`,
 `context/`, `llm/`, `mcp/`, `orchestration/`, `store/`, and `state_graph/`.
 Node.js and Python bindings remain separate native crates over the same Core.
+The Go SDK reaches that Core through a long-lived, capability-checked local
+bridge process.
 
 ## Filesystem-first agents and releases
 
@@ -442,6 +450,7 @@ the v1 schema.
 | [User Guide](manual/USER_GUIDE.md) · [Chinese](manual/USER_GUIDE_CN.md) | Installation, configuration, sessions, tools, and common workflows |
 | [Advanced Developer Manual](manual/ADVANCED_DEVELOPER_MANUAL.md) · [Chinese](manual/ADVANCED_DEVELOPER_MANUAL_CN.md) | Extension contracts, security, lifecycle, and production integration |
 | [SDK API Design](manual/SDK_API_DESIGN.md) | Cross-language API conventions and alignment |
+| [Go SDK](sdk/go/README.md) | Bridge installation, sessions, event streaming, direct tools, errors, and release compatibility |
 | [Code Intelligence Design](manual/CODE_INTELLIGENCE_DESIGN.md) | Language runtime, capability boundary, lifecycle, and verification |
 | [Agent Directory Tools](manual/AGENT_DIR_TOOLS_DESIGN.md) | Filesystem-first tool and agent definitions |
 | [Agent Release Contract](manual/AGENT_RELEASE_CONTRACT.md) | Admission schema, identity, compatibility, and security boundary |
@@ -457,6 +466,8 @@ cargo test -p a3s-code-core
 cargo test -p a3s-code-core --all-features
 cargo clippy -p a3s-code-core --all-targets --all-features -- -D warnings
 node scripts/sdk_api_alignment_check.mjs
+cargo test -p a3s-code-go-bridge
+go -C sdk/go test ./...
 ```
 
 Real-provider, browser-runtime, and S3 tests are ignored unless their external

README.md

@@ -42,7 +42,7 @@ from pathlib import Path
 
 version = sys.argv[1]
 path = Path(sys.argv[2])
-data = json.loads(path.read_text())
+data = json.loads(path.read_text(encoding="utf-8"))
 
 if data.get("name") == "@a3s-lab/code":
     data["version"] = version
@@ -56,7 +56,7 @@ for package in data.get("packages", {}).values():
             if name.startswith("@a3s-lab/code-"):
                 optional[name] = version
 
-path.write_text(json.dumps(data, indent=2) + "\n")
+path.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
 PY
 }
 
@@ -90,6 +90,16 @@ sed -i.bak "s/^version = \".*\"/version = \"${VERSION}\"/" sdk/python/Cargo.toml
 sed -i.bak "s/a3s-code-core = { version = \"[^\"]*\"/a3s-code-core = { version = \"${VERSION}\"/" sdk/python/Cargo.toml
 rm -f sdk/python/Cargo.toml.bak
 
+echo "  Updating sdk/go/bridge/Cargo.toml..."
+sed -i.bak "s/^version = \".*\"/version = \"${VERSION}\"/" sdk/go/bridge/Cargo.toml
+sed -i.bak "s/a3s-code-core = { version = \"[^\"]*\"/a3s-code-core = { version = \"${VERSION}\"/" sdk/go/bridge/Cargo.toml
+rm -f sdk/go/bridge/Cargo.toml.bak
+
+GO_MAJOR="${VERSION%%.*}"
+echo "  Updating sdk/go/go.mod major path..."
+sed -i.bak "s#^module github.com/A3S-Lab/Code/sdk/go/v[0-9][0-9]*#module github.com/A3S-Lab/Code/sdk/go/v${GO_MAJOR}#" sdk/go/go.mod
+rm -f sdk/go/go.mod.bak
+
 # Update Node SDK package.json
 echo "  Updating sdk/node/package.json..."
 sed -i.bak "s/\"version\": \".*\"/\"version\": \"${VERSION}\"/" sdk/node/package.json
@@ -124,6 +134,12 @@ echo "----------------------------------------"
 cargo check --workspace
 cargo check --manifest-path sdk/node/Cargo.toml
 cargo check --manifest-path sdk/python/Cargo.toml
+cargo build --package a3s-code-go-bridge --bin a3s-code-go-bridge
+(
+    cd sdk/go
+    A3S_CODE_GO_BRIDGE_TEST_BINARY="$PWD/../../target/debug/a3s-code-go-bridge" \
+        go test ./...
+)
 echo "✅ Cargo.lock updated"
 echo ""
 
@@ -158,7 +174,7 @@ fi
 git add -A
 git commit -m "chore: bump version to ${VERSION}
 
-- Update Rust, Node.js, and Python package versions
+- Update Rust, Node.js, Python, and Go package versions
 - Refresh release validation for A3S Code
 - Require real-provider ACL env integration before tagging
 "
@@ -169,6 +185,7 @@ git tag -a "v${VERSION}" -m "Release v${VERSION}
 ## Tests
 - cargo test --workspace
 - cargo test --workspace --all-features --lib
+- go test ./...
 - git diff --check
 - scripts/check_release_versions.sh
 - REQUIRE_REAL_PROVIDER=1 scripts/release_preflight.sh
@@ -209,7 +226,8 @@ echo "  1. Run CI checks"
 echo "  2. Publish to crates.io"
 echo "  3. Publish Node SDK to npm"
 echo "  4. Build Python SDK wheels and attach to GitHub Release (PyPI no longer used)"
-echo "  5. Create GitHub Release"
+echo "  5. Publish the Go module tag and native bridge assets"
+echo "  6. Create GitHub Release"
 echo ""
 echo "Monitor progress at:"
 echo "  https://github.com/A3S-Lab/Code/actions"