v0.5.0

What's New

• Android device control — Feature-gated ADB tool with screen perception, 22 actions, stuck detection, and security hardening
• Voice transcription — WhatsApp Cloud voice message transcription
• Telegram /model command — Runtime LLM switching from chat with per-chat persistence
• Agent modes — Category-based autonomy (Observer, Assistant, Autonomous)
• 11 new tools — Git, Stripe, Project, PDF, HTTP, Transcribe, Hardware, Android, Skills search/install, Web screenshot
• 3 new channels — Lark, Email, WhatsApp Cloud API (8 total)
• Response cache, device pairing, provider plugins, skill registry
• 2,300+ tests, 29 built-in tools, 8 channels, 9 providers

Security

• Android tool URL scheme allowlist, busybox/toybox bypass prevention, shell metacharacter blocking
• Plugin SHA256 verification, audit logging, WhatsApp sender auth, Apple Container gating

See CHANGELOG for full details.

cargo install zeptoclaw --git https://github.com/qhkm/zeptoclaw

What's Changed

• feat: security hardening — audit logging, WhatsApp auth, plugin SHA256, Apple Container gating by @qhkm in #28
• feat: add Nvidia NIM endpoint support by @qhkm in #36
• feat: time awareness — live timezone in system prompt + message envelopes by @qhkm in #37
• feat: UX hardening — dry-run, memory cleanup, session SLOs by @qhkm in #34
• feat(runtime): provider fallback chain + channel lock scope refactor + loop extraction by @qhkm in #38
• feat: agent dry-run, memory TTL, session SLO + updated roadmap by @qhkm in #35
• feat(runtime): wire retry wrapper and preferred fallback ordering by @chumyin in #40
• fix: code review fixes since v0.4.0 by @qhkm in #41
• feat(skills): add skill-creator builtin skill by @orangebread in #45
• feat: Auto-install WhatsApp bridge at gateway startup by @qhkm in #43
• feat: add WhatsApp Cloud API channel by @qhkm in #53
• feat: pluggable memory search backends by @qhkm in #50
• feat(cron): add jitter and missed schedule handling by @qhkm in #52
• fix: prevent UTF-8 truncation panic in web.rs and custom.rs by @qhkm in #58
• feat(auth): OAuth authentication with CLI commands by @orangebread in #46
• feat: add status, emit, and create actions to R8rTool by @qhkm in #60
• feat(onboard): add OpenRouter setup and provider menu by @orangebread in #61
• feat: close integration gaps — plugins, rich actions, rotation, E2E, screenshot by @qhkm in #64
• fix: RISC-V getrandom SIGSEGV via build.rs cfg override by @qhkm in #59
• feat(memory): embedding + HNSW search backends and memory prompt fix by @qhkm in #75
• feat(swarm): parallel dispatch, aggregation, scratchpad, cost-aware routing by @qhkm in #77
• feat: production polish — sandbox, heartbeat, extensibility (Phase 4) by @qhkm in #79
• feat(tools): Stripe tool with production hardening by @qhkm in #81
• fix: remove broken interactive prompts from setup.sh by @montanaflynn in #86
• docs: add provider configuration guide for all 9 providers by @montanaflynn in #87
• feat: channel delivery + cron scheduler resilience improvements by @qhkm in #70
• feat(tools): add Git, Project, and Stripe tools by @qhkm in #74
• feat: implement UTF-8 safe string preview helpers and update message truncation across channels by @pootow in #73
• feat(auth): Claude Code subscription token support by @montanaflynn in #89
• feat: smarter retry, HTTP/PDF tools, Gemini native, Lark, Email by @qhkm in #82
• feat: add response cache, agent modes, device pairing, and hardware support by @qhkm in #90
• feat: Telegram /model command for runtime LLM switching by @qhkm in #71
• feat: voice transcription (WhatsApp Cloud) + richer skill manifest by @qhkm in #84
• feat: agent runtime improvements and platform capabilities by @qhkm in #91
• feat: add Android device control tool (feature-gated) by @qhkm in #93

New Contributors

• @chumyin made their first contribution in #40
• @orangebread made their first contribution in #45
• @montanaflynn made their first contribution in #86
• @pootow made their first contribution in #73

Full Changelog: v0.4.0...v0.5.0