ZeroAI 0.3.0

Highlights

🔍 Meta Search — new default web search

On-device multi-engine search fusion (DuckDuckGo, Mojeek, Wikipedia, Marginalia) — keyless, no API accounts needed. Engines are declarative specs with a self-repair ladder: golden probe → bundled revert → selector induction → on-device Gemini Nano → provider model, all gated by model-free validation. Per-engine health is surfaced live in the plugin UI, and repair cooldowns escalate for persistently broken engines.

🔐 SSH key security overhaul

• SSH keys encrypted at rest behind an in-process ssh-agent
• Device-credential app-lock gating: the agent holds keys only while the app is unlocked
• Hardware tier: StrongBox / Titan M2-backed keys that never leave the secure element

🤖 On-device AI (Beta)

• Local Gemma agent via LiteRT (E2B QAT, plus E4B @ 24K context GPU variant) with an OpenAI-compatible local server
• Has issues replying outside terminal
• Gemini Nano integration for on-device fallbacks and search-engine self-repair

💻 Terminal & SSH

• Bundled native SSH client (zssh) replaces the in-app SSH path
• Theme-aware terminal, two-row key layout, application cursor keys (DECCKM), live cursor and theme-repaint fixes

⚙️ Settings & UX

• Settings tab restructure: Appearance hub, Provider Logins, Scheduled Tasks; autonomy gating now actually gates
• Network scanner understands VPNs and skips CGNAT space
• Model suggestions are fetched live from providers
• Vision plugin UI no longer shows a misleading enable toggle

Verification

Full release gate green: Android-target clippy (workspace, all targets), spotless + detekt, cargo-deny, on-device Rust suites (zeroclaw-ffi 632, zeroai 206), app unit tests, signed APK + AAR, version sync 0.3.0.

Requires Android 9+ (arm64-v8a / x86_64).

Re-release fixes (2026-06-11)

The original 0.3.0 binary was pulled over three launch-day bugs, all fixed here:

• On-device model downloads were blocked for everyone — the RAM gate checked momentary free RAM instead of device capability (total RAM)
• Starting a model download crash-looped the app — WorkManager foreground-service type mismatch (dataSync vs connectedDevice)
• ChatGPT/Codex login froze at the organization screen — the authorize request now matches the official Codex CLI (simplified-flow params + originator), the fallback port moved to the allow-listed 1457, and the login window was extended to 5 minutes. Note: completing this login requires a paid ChatGPT plan on OpenAI's side.

Kotlin gates (ktlint, detekt, unit tests) re-run green for the fix batch; the Rust engine is unchanged from the original 0.3.0 gate.