What's New
Features
- Subagent delegation —
list_subagents and delegate_to_subagent tools. Define subagents in .zora/subagents/<name>/SUBAGENT.md with scoped tool access and system prompts. CLI: zora-agent subagent list/info
- Encrypted secrets —
zora-agent secret set/get/list/delete. AES-256-GCM at rest, JIT decryption, PBKDF2 key derivation. Set ZORA_MASTER_PASSWORD to enable
- Capability token enforcement — Per-job
WorkerCapabilityToken created in submitTask(), enforced in the canUseTool gate for path and command actions
- Memory reflection —
ReflectorWorker now wired: extracts structured MemoryItems from daily note consolidation and session-tier token overflow
- Integrity guardian — SHA-256 baselines on
SOUL.md, policy.toml, config.toml checked every boot. zora-agent doctor shows status
- TLCI workflow planner, agent-callable skill tools, tool-level hooks (ShellSafety, AuditLog, RateLimit, SecretRedact)
Bug Fixes
zora-agent ask no longer hangs on exit — node-cron's task.stop() was keeping timer handles alive; switched to task.destroy() in HeartbeatSystem and RoutineManager- TypeScript
moduleResolution — switched from bundler to node16; fixes node:* import resolution and Node.js globals across the entire codebase
AbortSignal typing in canUseTool wrapper corrected
Upgrade
npm install -g zora-agent@0.10.0
