This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryFixes silent delivery failure when using ${VAR} in # Output: agent targets.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fixes silent delivery failure for # Output: agent: ${VAR} targets Fixes silent delivery failure for # Output: agent: ${VAR} targets Source: llm_adapter@2026-07-19 Confidence: low |
— |
Full changelog
Upgrade impact: none (additive fix) — just upgrade. If you ran a skill with # Output: agent: ${VAR} on 0.36.0 it was silently delivering to nobody; this fixes it.
0.36.0 shipped with a real delivery bug, and we own it. A # Output: agent: ${VAR} declaration substituted the message body but not the delivery target — so it addressed a phantom agent literally named "${VAR}" and reached nobody. It affected any skill using the ${VAR} target form; it surfaced through the 0.36.0 supervisor's own example (# Output: agent: ${SUPERVISOR_AGENT}), which, as shipped, notified nobody — the failures were detected and the handler ran, but its alert went to a nonexistent recipient. Only a live dispatch test could catch it (thanks Perry), since compile-time already resolved the target and every static check passed.
- Fix: the runtime's
# Output:dispatch now resolves the target withsubstituteRuntime(target, vars)— deliver-class, wake-class, the@sessionrouting check, and the receiptagent_id— the same substitution the body always got. A literal (non-${VAR}) target is unchanged.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Skillscript
All releases →Related context
Related tools
Earlier breaking changes
- v0.35.0 Editing `# Deadline:` on an approved skill drops it to Draft (signature invalidates).
Beta — feedback welcome: [email protected]