Skip to content

v2026.7.21

Choose a tag to compare

View all tags
@jmagly jmagly released this 28 Jul 00:13
· 342 commits to main since this release
v2026.7.21
This tag was signed with the committer’s verified signature.
jmagly Joseph Magly
GPG key ID: 839584D0E25E5126
Verified
Learn about vigilant mode.
d6edfad
This commit was signed with the committer’s verified signature.
jmagly Joseph Magly
GPG key ID: 454C68C4A2174CE9
Verified
Learn about vigilant mode.

AIWG 2026.7.21 - Portable skills, session intelligence, and conversational guidance

Released: 2026-07-27
Channel: stable

AIWG 2026.7.21 adds secure portable Agent Skills and an evidence-preserving
session catalog across supported providers, while making the first-run
experience substantially clearer for people who should not need to operate the
framework from a command reference.

Highlights

  • Portable Agent Skills - validate and safely import a local directory or a
    pinned Git source, bind activation to reviewed content, deploy compatible
    projections across providers, inspect drift, and export strict portable
    bundles without executing imported scripts.
  • Cross-provider session catalog - import normalized, redacted evidence
    from Claude Code, Codex, Copilot, Cursor, Factory, Hermes, OpenCode,
    OpenClaw, OpenHuman, Warp, Devin Desktop/Windsurf, or the declared generic
    interchange. Search is authorized by workspace and provider before matching
    or snippet generation.
  • Review before memory - extraction produces cited candidates. Nothing
    becomes durable project memory until a reviewer accepts the exact candidate,
    acknowledges any security warning, previews the destination, and confirms
    promotion.
  • Bounded Line Memory - the new addon offers a small, inspectable,
    recency-retained facts file for projects that do not need a wiki, graph, or
    semantic store.
  • Clearer first-run guidance - public documentation now leads with
    installation, aiwg use all --provider <provider>, reopening the provider,
    invoking aiwg-regenerate, and verifying the project connection. Detailed
    flags, automation, JSON contracts, and recovery procedures live in a stable
    agent/operator corpus.
  • Stronger release evidence - SQLite session suites, provider conformance,
    and production-path performance checks are blocking CI gates with preserved
    machine-readable results.

Agent Skills

The managed lifecycle includes validation, dry-run import, digest-bound trust,
activation, provider deployment, update, uninstall, doctor diagnostics, and
strict export. AIWG preserves scripts, references, assets, licenses, and other
accepted files as data; validation and deployment do not execute them.

Unpinned Git revisions, credential-bearing URLs, traversal, symlinks, special
files, unsafe collisions, and unreviewed content changes fail closed. Provider
projections report loss or unsupported behavior instead of silently discarding
source meaning.

Session intelligence

The new aiwg sessions namespace manages a project-local catalog. SQLite/FTS5
is the reference local backend and requires the optional
better-sqlite3@^12.8.0 peer dependency. Without it, the rest of AIWG remains
available and aiwg sessions doctor --json reports that the catalog backend is
unavailable.

Imports never modify provider-owned logs. Search requires an explicit
workspace, applies authorization before matching, and returns stable evidence
citations. Deletion previews by default: tombstone is reversible, while purge
requires confirmation, actor/reason classifications, and an explicit
disposition for promoted dependents.

Candidate extraction treats transcript text as inert input. Review and
promotion are separate operations, and promotion writes only through a
confirmation-bound gateway with lineage receipts. Semantic retrieval remains
optional and preview-gated; local lexical retrieval is the standalone default.

Documentation and onboarding

People beginning with AIWG now get a single respectful journey that defines the
terminal, project root, and provider; explains where each action happens; and
states what changes, when approval is required, what success looks like, and
how to recover.

The complete CLI and provider references were not deleted. They moved to
docs/agents/, where agents and advanced operators receive exact commands,
preconditions, structured output, diagnostics, and failure handling. The corpus
ships inside the npm package and the signed release reference.tar.zst bundle,
but is excluded from docs.aiwg.io navigation, search, sitemap, and rendered
pages.

Reliability and fixes

  • Citation sidecar tables with recognized shifted or variant columns now
    normalize correctly, and graph statistics distinguish declarations from
    canonical edges.
  • The nlp-prod addon again includes its declared executable command modules
    and doctor coverage.
  • Codex uses the shared .agents/skills/ projection, preventing duplicate
    skill installations from consuming its context budget.
  • AIWG now pins @fortemi/core@2026.7.14 and carries shard lifecycle and state
    transfer semantics through current producer/consumer receipts.

Package matrix

All three packages are prepared to publish in CalVer lockstep:

aiwg@2026.7.21
@aiwg/cli@2026.7.21
@aiwg/cockpit@2026.7.21

The signed release tag will publish the npm packages with provenance, create
Gitea release assets and checksums, package the agent reference corpus, and
mirror the stable release to GitHub. This document prepares that release; it
does not itself publish or promote any package or channel.

Upgrade

Full local-corpus distribution:

npm install --global aiwg@2026.7.21

Lightweight signed-web distribution:

npm install --global @aiwg/cli@2026.7.21

Existing local-corpus workflows remain compatible. The session catalog is
opt-in and requires the optional SQLite peer described above.

Assets 8
Loading