Yachiyo Claw v0.0.18

v0.0.18 strengthens the Android Agent execution loop, makes browser work more reliable, and removes the initial Alpine rootfs download.

Agent Kernel

Adds host-managed agent_environment_status, agent_complete, and agent_blocked tools to explicit Agent runs.
Requires actionable Agent work to finish through a verified completion or blocking result instead of silently ending with an ordinary text response.
Keeps a 48-step runaway ceiling as a last resort while allowing tools to recover from retryable errors.
Makes Yachiyo's Bing and other configured web-search tools available to any model with generic tool calling, without requiring proprietary provider-native search metadata.
Preserves the existing Skill, MCP, workspace, Linux sandbox, approval, and audit prompt composition.

Replaces large raw HTML snapshots with bounded semantic snapshots and stable element references.
Adds reference-based click and type plus scroll, wait, select, back, forward, reload, and screenshot operations.
Limits snapshots to visible text and at most 250 interactive elements so browser state uses less model context.

Bundles verified Alpine 3.24.1 minirootfs archives for arm64 and x86_64 directly in the APK.
Verifies the bundled archive size and SHA-256 before extraction. Installing Alpine no longer creates a rootfs network download.
Python, Node.js, Git, and optional Android tools remain independently installable through the configured Alpine mirror.

Fixes the Agent workspace selector's Android touch handling so selecting a workspace does not activate the external-folder button underneath it.
Removes a generated Electron package-lock.json from source control and prevents it from returning.
Makes Dependabot compatible with its Node 24 runtime, groups dependency updates, and limits concurrent automated pull requests.
Adds JavaScript/TypeScript CodeQL analysis and dependency overrides for current fast-uri and shell-quote advisories.

Passed TypeScript checks, Android foundation and native-log checks, 2,033 unit tests, web build, Capacitor Android sync, Gradle unit tests, and debug APK assembly.
Smoke-tested on Android 12 at 1200x2608: app startup, task navigation, Agent workspace selection, and a clean bundled-Alpine installation.
Verified the clean installation produced /bin/sh and the Alpine ready marker without adding a rootfs item to the download cache.

Ubuntu 24.04 is intentionally deferred to an optional plugin. The built-in Alpine environment remains the small, immediately available default.