Skip to content

MetallicClaw v0.4.1

Latest
Latest

Choose a tag to compare

View all tags
@sethupavan12 sethupavan12 released this 20 May 10:58
v0.4.1
d1f1f89

MetallicClaw v0.4.1

Patch release from a post-release C quality review. This fixes security and correctness bugs in the v0.4.0 memory/tool/search/Telegram work.

Fixes

  • Dangerous tools now fail closed when tool_policy contains an unknown value instead of silently allowing execution.
  • web_search now parses SearXNG result objects with } characters inside JSON strings.
  • Telegram photo messages without captions now reach the agent with the default image prompt instead of being skipped.
  • Telegram debounce follow-up polling no longer skips unrelated updates that arrive before a later same-chat follow-up.
  • web_search response bodies are capped to avoid unbounded memory growth from a malicious or broken SearXNG backend.
  • Memory state allocation failure now returns a tool error instead of risking a null dereference.

Verification

  • make test
  • make clean && make CFLAGS='-std=c11 -O1 -g -fsanitize=address,undefined -fno-omit-frame-pointer' test
  • make clean && make
  • ./build/metallicclaw bench --runs 50
  • macOS archive extraction and checksum verification

Benchmark sample

  • Binary size: 154688 bytes
  • Startup average: 4.737 ms
  • Skill scan average: 0.314 ms
  • Session append average: 0.045 ms
  • Read file tool average: 0.010 ms
Assets 10
Loading