AIWG 2026.7.21 - Portable skills, session intelligence, and conversational guidance
AIWG 2026.7.21 - Portable skills, session intelligence, and conversational guidance
Released: 2026-07-27 Channel: stable
AIWG 2026.7.21 adds secure portable Agent Skills and an evidence-preserving session catalog across supported providers, while making the first-run experience substantially clearer for people who should not need to operate the framework from a command reference.
Highlights
- Portable Agent Skills - validate and safely import a local directory or a
pinned Git source, bind activation to reviewed content, deploy compatible projections across providers, inspect drift, and export strict portable bundles without executing imported scripts.
- Cross-provider session catalog - import normalized, redacted evidence
from Claude Code, Codex, Copilot, Cursor, Factory, Hermes, OpenCode, OpenClaw, OpenHuman, Warp, Devin Desktop/Windsurf, or the declared generic interchange. Search is authorized by workspace and provider before matching or snippet generation.
- Review before memory - extraction produces cited candidates. Nothing
becomes durable project memory until a reviewer accepts the exact candidate, acknowledges any security warning, previews the destination, and confirms promotion.
- Bounded Line Memory - the new addon offers a small, inspectable,
recency-retained facts file for projects that do not need a wiki, graph, or semantic store.
- Clearer first-run guidance - public documentation now leads with
installation, `aiwg use all --provider <provider>`, reopening the provider, invoking `aiwg-regenerate`, and verifying the project connection. Detailed flags, automation, JSON contracts, and recovery procedures live in a stable agent/operator corpus.
- Stronger release evidence - SQLite session suites, provider conformance,
and production-path performance checks are blocking CI gates with preserved machine-readable results.
Agent Skills
The managed lifecycle includes validation, dry-run import, digest-bound trust, activation, provider deployment, update, uninstall, doctor diagnostics, and strict export. AIWG preserves scripts, references, assets, licenses, and other accepted files as data; validation and deployment do not execute them.
Unpinned Git revisions, credential-bearing URLs, traversal, symlinks, special files, unsafe collisions, and unreviewed content changes fail closed. Provider projections report loss or unsupported behavior instead of silently discarding source meaning.
Session intelligence
The new `aiwg sessions` namespace manages a project-local catalog. SQLite/FTS5 is the reference local backend and requires the optional `better-sqlite3@^12.8.0` peer dependency. Without it, the rest of AIWG remains available and `aiwg sessions doctor --json` reports that the catalog backend is unavailable.
Imports never modify provider-owned logs. Search requires an explicit workspace, applies authorization before matching, and returns stable evidence citations. Deletion previews by default: tombstone is reversible, while purge requires confirmation, actor/reason classifications, and an explicit disposition for promoted dependents.
Candidate extraction treats transcript text as inert input. Review and promotion are separate operations, and promotion writes only through a confirmation-bound gateway with lineage receipts. Semantic retrieval remains optional and preview-gated; local lexical retrieval is the standalone default.
Documentation and onboarding
People beginning with AIWG now get a single respectful journey that defines the terminal, project root, and provider; explains where each action happens; and states what changes, when approval is required, what success looks like, and how to recover.
The complete CLI and provider references were not deleted. They moved to `docs/agents/`, where agents and advanced operators receive exact commands, preconditions, structured output, diagnostics, and failure handling. The corpus ships inside the npm package and the signed release `reference.tar.zst` bundle, but is excluded from `docs.aiwg.io` navigation, search, sitemap, and rendered pages.
Reliability and fixes
- Citation sidecar tables with recognized shifted or variant columns now
normalize correctly, and graph statistics distinguish declarations from canonical edges.
- The `nlp-prod` addon again includes its declared executable command modules
and doctor coverage.
- Codex uses the shared `.agents/skills/` projection, preventing duplicate
skill installations from consuming its context budget.
- AIWG now pins `@fortemi/[email protected]` and carries shard lifecycle and state
transfer semantics through current producer/consumer receipts.
Package matrix
All three packages are prepared to publish in CalVer lockstep:
[email protected]
@aiwg/[email protected]
@aiwg/[email protected]The signed release tag will publish the npm packages with provenance, create Gitea release assets and checksums, package the agent reference corpus, and mirror the stable release to GitHub. This document prepares that release; it does not itself publish or promote any package or channel.
Upgrade
Full local-corpus distribution:
npm install --global [email protected]Lightweight signed-web distribution:
npm install --global @aiwg/[email protected]Existing local-corpus workflows remain compatible. The session catalog is opt-in and requires the optional SQLite peer described above.