TOGISHI

Togishi

A togishi is a Japanese sword polisher. LunarWing v2.0.1.0 follows that theme: it does not replace the v2 foundation, but sharpens its channel boundaries, Engine V2 compatibility, skill lifecycle, migration tooling, and multi-tenant operations.

LunarWing v2.0.1.0 is a compatibility, security, and operations release built on v2.0.0.0. Its largest change is the completion of the local Engine V2 compatibility matrix and the associated channel-parity work for WeeChat and DarkIRC. The release also completes the current B-1/B-2/B-3 self-improving skill lifecycle behind its default-off feature gate, adds automatic and secret-safe WeeChat relay bootstrap, introduces encrypted Kawarimi bundles, adds source-registry validation, and hardens OpenRC tenant environment loading.

Highlights

  • Engine V2 now has hermetic local compatibility coverage through real MCP HTTP/OAuth, Wasmtime tool execution, skill migration and selection, TensorZero-shaped streaming, channel delivery, and the browser gateway.
  • CHPAR-001 through CHPAR-011 are implemented and verified: secret-safe channel configuration, WeeChat proactive delivery, UTF-8-safe output, auth privacy, pairing-by-default DMs, Engine V2 attachments, external-waiting statuses, secure owner routing, real IRC WASM tests included in a new comprehensive testing suite, and versioned IRC identities.
  • WeeChat fresh installs now default DMs to pairing; existing persisted policy remains authoritative unless an operator explicitly overrides it.
  • Ordinary Engine V2 turns can receive sanitized attachment context and transient image bytes without persisting image payloads or data URLs.
  • Engine V2 authentication now resumes the exact waiting thread after token or OAuth completion, refreshes newly activated tool leases, and avoids duplicate completion delivery.
  • Self-improving skills gained scoped terminal feedback, automatic-demotion quarantine, reviewed pruning, registry publication, update detection, validated downloads, and owner-only shared-skill mutation. The subsystem remains disabled by default.
  • Fresh multi-tenant installs can generate a loopback-only WeeChat relay configuration automatically, with a supported opt-out and recovery path.
  • Kawarimi exports now default to encrypted, header-protected 7z bundles; imports accept both the new format and legacy plaintext tar bundles.
  • lunarwing registry validate reports malformed, duplicate, or semantically invalid source registry manifests before installation.
  • OpenRC services load tenant environment files only after privilege drop through a literal parser with strict path, ownership, mode, symlink, and hardlink checks.
  • DarkIRC-enabled tenants seed the adapter credential into the encrypted secrets store through the authenticated loopback gateway without putting the credential or gateway token in curl arguments.
  • Bug, architecture, and proposal documentation was reconciled against current source and tests.

For full release notes, check the repository as always.