AIWG 2026.8.3 - Plugin lifecycle and release reliability
AIWG 2026.8.3 - Plugin lifecycle and release reliability
Release date: 2026-08-03 Channel: stable
AIWG 2026.8.3 fixes three lifecycle and publication regressions and moves the MCP server dependency graph onto the advisory-free Hono v2 line.
What changed
- Project-local removal records the provider-transformed bytes that were
actually deployed. Freshly deployed skills are therefore removable as pristine, while later user edits remain protected.
- `aiwg install-plugin --source` handles local legacy manifests through the
correct framework root and gives project-local wrappers actionable guidance to use `.aiwg/plugins/` plus `aiwg use`.
- GitHub release creation waits for the operator-pushed signed annotated tag
and verifies its expected commit before publishing a stable release.
- `@modelcontextprotocol/sdk` 1.30.0 allows the package graph to use
`@hono/node-server` 2.0.11, removing the affected Windows static-serving dependency route.
Verification
The release candidate passed the main test/build workflow, documentation build and deployment workflows, and Fortemi shard conformance on the delivered dependency commit. The production dependency audit reports no MCP SDK or Hono finding and no moderate-severity findings.
Package matrix
All three packages publish in CalVer lockstep:
[email protected]
@aiwg/[email protected]
@aiwg/[email protected]Upgrade
Full local-corpus distribution:
npm install --global [email protected]Lightweight signed-web distribution:
npm install --global @aiwg/[email protected]Install or refresh Cockpit through the base CLI to keep its version in lockstep:
aiwg use cockpit
aiwg cockpitRollback
Roll back all three packages together to `2026.8.2`. That version does not contain the plugin lifecycle fixes or the MCP SDK dependency update described above.