Release 2026.11.0: AI Agents, sgcChat, sgcSpreadsheet, sgcRichEdit and More

Release 2026.11.0 is out for every product at once. sgcWebSockets, sgcWebSockets .NET, sgcUI, sgcUI .NET, sgcSign, sgcSign .NET, sgcOpenAPI and sgcIndy all shipped on 10 November, with 1,179 changes between them.

It is the release where your application learns to think, talk and collaborate. A Delphi app can now run an AI agent with your own methods as tools, show its answers in a native chat, open a spreadsheet or a document inside its own forms, and publish eleven new kinds of web page. This post is the map: what changed in each product, with a link to the full article for every big feature.

The Release at a Glance

sgcWebSockets 2026.11

Your Delphi App, Now Agent Ready

This sgcWebSockets release puts an AI agent loop in one component, gives sgcHTML eleven new components, and adds OpenPGP, Kerberos and an HTTP gateway to the server side.

An Agent in a Few Lines

The agent offers your tools to the model, executes the calls the model asks for, feeds the results back and returns the final answer. Read-only tools run straight away, and anything that changes data can wait for approval.

oChat := TsgcAIChat.Create(nil);
oChat.Provider := aicpAnthropic;
oChat.ChatOptions.ApiKey := 'API_KEY';
oChat.ChatOptions.Model := 'claude-opus-5-5';

oAgent := TsgcAIAgent.Create(nil);
oAgent.Chat := oChat;

oTool := oAgent.Tools.Add('get_weather', 'Current weather of a city');
oTool.AddParam('city', aatpString, 'City name');
oTool.ReadOnly := True;
oTool.OnExecute := DoGetWeather;

Memo1.Lines.Add(oAgent.Run('Do I need an umbrella in Paris today?'));

OpenPGP Without an External Tool

uses
  sgcCrypto_PGP, sgcCrypto_PGP_Cert;

var
  oAlice: TsgcPGPKey;
begin
  // a v4 Ed25519 + Curve25519 key
  oAlice := sgcPGP_GenerateKey('Alice <alice@example.com>', 'secret',
    pgpkEd25519, 4);
  try
    Memo1.Text := oAlice.SaveToArmored(False);  // public key, share it
    SaveSecretKey(oAlice.SaveToArmored(True));  // protected secret key
  finally
    oAlice.Free;
  end;
end;

Also in sgcWebSockets 2026.11

• Kerberos single sign-on. With Authentication.Negotiate enabled, users of an Active Directory or MIT Kerberos domain sign in without a password prompt, on Windows and Linux, over HTTP and WebSocket. Enterprise edition.
• TLS certificate reload. Call ReloadCertificates after a renewal: new connections get the new certificate and open ones keep working. A certificate that fails to load is rejected and the old one stays.
• TsgcHTTPGateway. The HTTP server forwards requests to FastCGI and SCGI backends over TCP, selected by path, prefix or extension, so no separate web server is needed in front of them.
• TsgcAIVoiceTranslator. Realtime speech to speech translation: it streams the microphone, plays the translated speech and raises live transcripts of both sides.
• AI under control. TsgcAIUsageMeter prices every request and enforces budgets, TsgcAIGuardrails filters tools and redacts personal data, and model aliases, fallbacks and MCP tool pinning keep a shipped application working.
• More sgcCrypto. HPKE (RFC 9180), the AES-OCB and AES-EAX authenticated modes, and DEFLATE and ZLIB compression, all in pure Object Pascal.

// the certificate files were renewed on disk:
// new connections use the new certificate, open ones keep working
oServer.ReloadCertificates;

sgcWebSockets .NET 2026.11

The Same Agent, in C#

The .NET library tracks the Delphi one: TsgcAIAgent runs the tool loop on every provider with your public methods and the tools of your MCP servers, with the same guardrails, model fallbacks, model aliases, usage meter and MCP tool pinning. Kerberos single sign-on and certificate reload without a restart arrive too, and so do dozens of sgcHTML upgrades for .NET web apps. 59 changes in all, listed in the changelog.

sgcUI 2026.11

Chat, Spreadsheets and Documents, Inside Your Own App

sgcUI grows by three products in one release. Each one is a native control for VCL and FireMonkey on Delphi and C++ Builder, and for WinForms, WPF and Avalonia on .NET, drawn by sgcUI itself and themed like the rest of the suite.

One Line for the Windows 11 Look

uses
  sgcUICore_Theme;

// every sgcUI control of the application takes the Windows 11 look
sgcUISetApplicationThemePreset('Fluent');

sgcUI .NET 2026.11

The Whole Suite on WinForms, WPF and Avalonia

Everything above ships for .NET in the same release: sgcChat, sgcSpreadsheet and sgcRichEdit, the Realtime UI pack and the Fluent theme, plus new report designer controls for WinForms, WPF and Avalonia. 417 changes in all, with sgcGrid, sgcUICore and sgcReports taking the largest share. They are listed in the changelog.

sgcSign 2026.11

Stricter Verification, a Stronger Signing Server

This sgcSign release is about trusting less and checking more, and most of it came from customer reports and requests.

• A stricter Authenticode verifier. A certificate table with more than one entry, or an unauthenticated attribute other than a timestamp or a nested signature, is now rejected, because neither is covered by the file digest. Files signed by sgcSign, by signtool and by Microsoft verify as before.
• OCSP issuer hashes in the open. HashIssuerName and HashIssuerKey of TsgcOCSPClient are public, and a CertID can be built and matched with SHA-256, SHA-384 or SHA-512 as well as SHA-1.
• Chain validation on its own. The new ValidateCertificateChain method of TsgcSignatureVerifier validates a certificate chain outside any signature format, up to your trust anchors.
• Timestamp tokens, checked offline. TsgcTSAClient.VerifyToken verifies an existing RFC 3161 token, for example one embedded in a signature, without contacting the timestamp authority.

The signing server gets 15 fixes: admin console rendering and validation, stricter webhook checks, backups that restore to every configured path and keep their schedule after a restart, and clearer timestamp and master key errors. Several PKCS#11 providers can now share one module, and the setup registers the Delphi 7 packages when Delphi is installed under Program Files.

sgcSign .NET 2026.11 brings the same stricter Authenticode verifier and the public OCSP issuer hashes with SHA-2 CertIDs.

sgcOpenAPI and sgcIndy 2026.11

Smaller Releases, Useful Fixes

One More Thing, and It Is Free

Before You Upgrade

Four sgcUI changes can reach existing code. C++ Builder: enum values whose names clashed with other headers have new C++ names, for example bkNone is now bkNoHit; Delphi code and .dfm files are unchanged. sgcDiagram: three palette and minimap strings moved to sgcDiagram_Strings. sgcGrid: in Excel mode the XLSX import and export follow the sheet layout, so row 1 is a data row; files saved by older versions still load. sgcMaps: the package is split into sgcMaps, sgcMapsVCL and sgcMapsFMX, so projects that list the runtime package also need the VCL or FMX one.

Questions or feedback? Get in touch, you will get a reply from the people who wrote the code.