Skip to content

AgentOS 2026.7.26

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Jul 17:25
v2026.7.26
a5a576a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A memory-durability release, plus a breaking change to how channels authorize. 49 commits since v2026.7.25.

Warning

Breaking: channel roles, scoped tokens, access modes, and unauthenticated public Control are removed. Configs that use them need to move to pairing surfaces before upgrading.

Highlights

  • Channel roles replaced by pairing surfaces (#104). Authorization is now two connection surfaces — Control and Channel — backed by explicit RPC audiences, instead of roles and scopes. Telegram pairing is durable, group admission is explicit, and grants are revalidated before every turn and tool call. Owner/admin elevation is gone from tools, cron, the CLI, and the Control UI; sandbox and approval policy are unchanged.
  • Curated memory actually survives now (#106–#114). Turn captures are written atomically, so an interrupted write can't leave a truncated capture behind. Curated writes are locked on Windows, the injection scan covers more paths, the hermes durability guards are restored, and the MEMORY.md migration no longer overwrites an existing file. Unreadable curated files are surfaced instead of silently skipped — previously the agent went blind to memory it couldn't read.
  • Memory writes itself (#108). Curated memory only ever filled up when something explicitly asked the agent to save; left alone, an agent ran hundreds of turns against an empty MEMORY.md. A short background review now runs every N user turns (default 10, [memory.nudge], interval = 0 disables) after the reply is already on the wire, so it never competes with your task for model attention. Cron, heartbeat, subagent, and recall traffic are excluded and don't advance the counter.
  • /new and /reset stopped eating sessions (#102, #117). Both are non-destructive when flush is unavailable — the session is no longer discarded on a path that can't produce a receipt, and compaction only demands a flush receipt when flush can actually produce one.
  • OpenCAP LLM gateway support (#63).
  • Channel command fixes across the board (#93–#101). Slack dispatches Socket Mode slash commands and classifies slash-command conversations correctly. Discord completes native interaction responses and tolerates registration failures instead of failing adapter startup. Telegram handles native bot-command mentions, preserves forum reply targets, renders markdown, allows admitted DM slash commands, shows a typing indicator during turns, and keeps pairing state serializable.

Changed

  • Cron job management is scoped to the active profile — jobs from one profile are no longer listed or mutated from another.
  • Daily notes the injection budget would discard are no longer read at all, cutting per-turn memory I/O.
  • SECURITY.md documents GitHub private vulnerability reporting as the intake path.

Removed

  • Dream consolidation, the orphaned flush_status, the memory repair service, and the agentos memory flush-session command.

Install

uv tool install --python 3.12 "use-agent-os[recommended]==2026.7.26"

Full Changelog: v2026.7.25...v2026.7.26

Assets 6
Loading