v3.0.1

Patch release over v3.0.0 — closes the read side of the persistent-memory loop.

🐛 Fixes

• Recorded memory now re-enters context at session start (closes #225; follow-on to #217). v3.0.0's memory-extraction reliably wrote durable facts to .claude/memory/*.md, but no SessionStart hook read them back — the sole session-start injector surfaced SESSION-STATE.md, a different store — so recorded facts stayed inert across a context reset. Recording was durable; influence was not.

  A new deterministic memory-inject.sh SessionStart hook now surfaces the .claude/memory/MEMORY.md index (bounded, one line per fact, framed as reference DATA; the agent opens specific fact files on demand), mirroring session-state-inject.sh and wired repo-only to match memory-extract.sh's posture. The root cause was architectural: memory write was a deterministic hook, but memory read relied on a prompt rule the agent drops under attention — now both are hooks.

  Also corrects the memory-extraction skill docs that mis-delegated session-start reads to the wrong hook, and updates SECURITY.md.

No installer-logic or API changes vs v3.0.0 — the awareness harness gains a read hook. Verified: validate.sh + validate-test.sh (37/0) + a new memory-inject-hook-test.sh (4/0).

📦 Install

curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v3.0.1/install.sh | bash

irm https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v3.0.1/install.ps1 | iex

Verify the download out-of-band:

7fca2eb60fe898b1eae17975a9d1bbecde21b4c813f42ef9e5ee94a87353eaea  agentic-os-v3.0.1.tar.gz

Commits since v3.0.0

• e5b5c43 release: pin v3.0.1 install digest (#227)
• 8a80059 fix(memory): inject MEMORY.md index at SessionStart — close the read loop (closes #225) (#226)

Full Changelog: v3.0.0...v3.0.1

v3.0.0

Major release. Breaking: the Cursor integration is removed. Also lands a deterministic end-of-session memory-extraction pass and a hardened, unified installer.

⚠️ Breaking changes

• Cursor integration removed entirely (#222). All .cursor/ hooks and rules, install-cursor.sh / install-cursor.ps1, the dispatch-gate hook libraries (scripts/lib/dispatch-gate-*.sh), and the Cursor-specific test suites are gone — the failed experiment is retired and only the Claude Code harness ships (net ≈ −4,800 lines). If you installed via the Cursor one-liner, switch to install.sh / install.ps1.

✨ Features

• Deterministic end-of-session memory extraction (#217 → #219, #220, #221). A Stop hook now reliably drives the memory-extraction skill at session close, replacing best-effort in-conversation self-classification, so durable facts get swept into .claude/memory/ even when a session ends abruptly. The memory write-rule is reframed around a durable-fact predicate — a fact is saved only when it is both decision-relevant and non-derivable from the repo/git/tools.

🔧 Installer & packaging

• Pinned, SHA-256-verified v3.0.0 release — asset agentic-os-v3.0.0.tar.gz, sha256 7bf07e64…de92; both installers verify the digest before extracting and abort on mismatch.
• Unified hook-merge semantics (#224): the macOS/Linux installer now replaces the whole hooks block (jq '.hooks = $h'), matching install.ps1 and SECURITY.md — the previous bash-deep-merge vs PowerShell-replace divergence is gone.
• Native-PowerShell hook registration (#224): install.ps1 no longer shells out to bash+jq, so hook registration no longer silently no-ops when jq is absent on Windows. settings.json is written BOM-free via [IO.File]::WriteAllText, and the fresh-install path writes the template verbatim to avoid the Windows PowerShell 5.1 single-element-array unwrap.
• Windows install fixes, CI hook-test coverage, and a fail-closed ship-gate (#223): the block-bad-bash hook is now exercised in CI, and the PR ship-gate fails closed.

📝 Docs & security

• SECURITY.md now documents shipped skill helper scripts (.py / .sh) as a second, user-invoked executable surface — distinct from hooks, which run automatically and remain the primary concern (#224).
• RELEASING.md asset-contents list corrected to match scripts/release.sh ARCHIVE_PATHS; README custom-path note clarified (Windows needs no jq) (#224).

📦 Install

curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v3.0.0/install.sh | bash

irm https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v3.0.0/install.ps1 | iex

Verify the download out-of-band:

7bf07e64924f552f52d3eeb09ce20579be13d2d6a773397b8937f43eb249de92  agentic-os-v3.0.0.tar.gz

Commits since v2.6.0

• 238b606 release: v3.0.0 — installer hardening + hook-merge unification (#224)
• 0f0d22f fix: pre-release findings — Windows install, CI hook coverage, ship-gate fail-closed (#223)
• e86d282 chore: remove Cursor integration (failed experiment) (#222)
• e0d2e0b docs(memory): point the write-rule at the extraction pass (#221)
• cf09f68 feat(memory): deterministic end-of-session extraction pass — Phase 1 (#220)
• 5c7b2ad fix(memory): reframe write-rule around a predicate (#219)

Full Changelog: v2.6.0...v3.0.0

v2.6.0

v2.6.0

Doctrine delivery fix + restored dispatch rules.

• Restored briefing + anti-patterns operating rules (cut by the v2 razor on the refuted assumption the model applies them by default), with Cursor .mdc twins. Rules are project-local: clone the repo and Cursor auto-loads .cursor/rules/*.mdc + AGENTS.md; Claude Code reads the flat CLAUDE.md. Rules are not copied by the global installers.
• CLAUDE.md is now a generated flat file: .claude/rules/*.md flattened by the new scripts/build-claude-md.sh — no @-imports, so doctrine is visible to non-import-aware consumers. New Tier 0 claude-flat-sync invariant in validate.sh gates drift.
• install.ps1 fix: backtick-escape $HOME/$hd in the jq here-string — PowerShell was interpolating them, producing a broken jq program so hook-path rewriting never applied on Windows.

Install (pinned, SHA-256 verified):

curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.6.0/install.sh | bash

SHA-256: 9edd168cd78b40314131b59785e7ae76888beea575296a1ff4b7c4dd086798a6

v2.5.0

v2.5.0

Added

• Dispatch-enforcement hook layer (#213): Tier 0/1 Cursor hooks that mechanically block the main thread when dispatch is skipped — research gate (before-read), impl gate (after file edit), and stop gate. Ships disabled by default; enable via toggles in docs/dispatch-enforcement.md. Salvages #212's measurement + activation work onto the new hook layer.

Fixed

• Release asset allowlist (#214): scripts/release.sh now ships docs/cursor-orchestrator-gap.md and docs/dispatch-enforcement.md in the asset, fixing dangling relative links from session-state/SKILL.md and subagent-dispatch.mdc/.md that would have broken in consumer installs.

Install

• Cursor (macOS/Linux): curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.5.0/install-cursor.sh | bash
• Claude Code (macOS/Linux): curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.5.0/install.sh | bash
• Windows (Claude Code): irm https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.5.0/install.ps1 | iex

Asset: agentic-os-v2.5.0.tar.gz — SHA-256 a012d5bf9066b9cb0992deaf6cf24500465157c1d264aa154cc792eccce7146c.

v2.4.0

Highlights

• README Features section — plain-language overview of skills, agents, harness capabilities, and getting started
• Ship gate DAG — canonical review orchestration (gate-dag.md, gate-plan.sh, CI checkbox enforcement)
• DATA_MODEL pipeline — data-model-documenter agent (Wave 1), data-model-verifier agent (Wave 2), JSON Schema Tier 0 extractors
• Implementation close — stack specialist agents dispatch data-model-documenter at session close before returning

Install

# Claude Code
curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.4.0/install.sh | bash

# Cursor
curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.4.0/install-cursor.sh | bash

Asset SHA-256: 4ba796045726c51a609f8d15f92e6171cdeb2917ad62449417022309414be2b8

v2.3.3

v2.3.3

Cursor best-practices alignment from #187.

Highlights

• Dual-path skill resolution — repo .claude/skills/ with fallbacks to ~/.cursor/skills/ and ~/.claude/skills/
• compatibility frontmatter on all 35 skills
• Tier 0 check_cursor_rules_frontmatter for .cursor/rules/*.mdc
• install-paths-test.sh + validate-test cases 4d/4e/32
• Automated-only Cursor hook verification — manual live-fire retired
• install-cursor.ps1 — chmod parity, clearer bash-missing errors, SHA-pin strategy documented

Install

curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.3.3/install-cursor.sh | bash
curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.3.3/install.sh | bash

SHA-256: 15554c8e7b0a5932fbaa62a09b9691736e8e2e669729a92f51ebedd9d92c7c47

v2.3.2

Canonical release from main after PR #186.

Highlights

• Awareness harness + block-bad-bash active by default on install (global settings.json / hooks.json merge)
• Tier 0 ship gates: PR reviewer checkboxes CI, tag-from-main workflow
• Install DEST hardening (bash + PowerShell) for CLAUDE_DIR / CURSOR_DIR
• Consumer hook templates + install-hook-settings.sh with path rewriting

Upgrade from v2.3.1

v2.3.1 was tagged pre-merge from a feature branch. Use v2.3.2 as the default pinned install — same feature set plus ship-gate and hardening commits on main.

Install

curl -fsSL https://raw.githubusercontent.com/LazyIsEfficient/agentic-os/v2.3.2/install-cursor.sh | bash

v2.3.1

v2.3.1 — hooks active by default (install.sh fix)

Use v2.3.1, not v2.3.0 — v2.3.0 install.sh called a wrong function name and failed to register hooks.

• Awareness harness + block-bad-bash merge into global config on install
• SHA-256: e86841ebed75d02bed633488079156d4993cf54031924ae1deb174eff684486a

v2.3.0

v2.3.0 — hooks active by default

• Installers merge awareness harness + block-bad-bash into global settings.json / hooks.json
• Consumer templates in assets/consumer/; paths rewritten for custom CLAUDE_DIR
• SHA-256: 14caa199e97b71ba5040bd25148f1505efd515c6efb11155912151535d9367e2

To disable: remove the hooks block from ~/.claude/settings.json or ~/.cursor/hooks.json.

v2.2.0

Cursor subagent dispatch parity

• AGENTS.md — Cursor runtime entry (orchestrator mode, parallel Task fan-out)
• .cursor/rules/*.mdc — always-on doctrine (.md no longer used; cursor-rules-format invariant enforces)
• Stock Cursor Task parameters documented in subagent-dispatch.mdc (explore, code-reviewer, best-of-n-runner, custom agents from ~/.cursor/agents/)

Release asset

• Production .cursor/hooks/ payload (excluding *-probe.sh spike fixtures)
• docs/awareness-harness-activation.md for shipped skill links
• install-cursor.sh / install-cursor.ps1 — Cursor global install path

Verify

curl -fsSL https://github.com/LazyIsEfficient/agentic-os/releases/download/v2.2.0/agentic-os-v2.2.0.tar.gz | shasum -a 256
# 85343fd78c8bcc03066da29a69bcd2d205caa22d0d08e4da80a955be9230ff5c