v0.0.16

Faster everywhere, Autobot in your editor, files delivered on every channel, a safer skills hub, and project files checked for prompt injection.

Faster

• autobot starts in about 6 ms, down from about 105 ms. Connections to your own machine no longer load the system's certificate store.
• autobot serve handles about twice as many turns per second, and long conversations need about half as many model calls per turn.
• Both services use less memory. autobot serve keeps at most 64 idle conversations per bot in memory; the rest stay on disk.

Autobot in your editor

• autobot acp speaks the Agent Client Protocol, so Zed and other ACP editors can use Autobot as their agent. Edits arrive as diffs, approvals as the editor's permission prompts, and reads and writes go through the editor's open buffers. The README shows how to add it to Zed.

Files on every channel

• Speech and images now arrive as real files on Slack, Signal, Matrix, WhatsApp and email, as they already did on Telegram and Discord.
• The agent API takes photos in a turn, so the app's photos reach the node agent.

Skills hub

• autobot skills check tells you which installed skills have updates, are gone from their source, or were edited locally.
• autobot skills update shows exactly what changes, with a risk scan, and asks before replacing anything. It restores the old skill if the update fails.
• autobot skills audit scans a skill for risky scripts and shows how far its source is trusted. uninstall removes one.

Safer project files

• AGENTS.md, CLAUDE.md and the others are checked for prompt injection. A suspicious file is not dropped: the model gets it quoted as data under a warning, and /context marks it.
• A restart no longer repeats a subfolder's instructions that a conversation already had.

Smaller things

• autobot config get shows the value in effect, and whether it is a default.
• autobot sessions prune --days N removes conversations untouched that long.
• Property tests and a nightly soak test found and fixed five bugs, including an unbounded allocation from a malformed tool call and a hang when splitting long Markdown.

Verify

echo 'invincible-release ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/0fXPq1j51BcfGY0Jp9QfPGy6kHVQQ+W282VFPR/Qo' > allowed_signers
ssh-keygen -Y verify -f allowed_signers -I invincible-release -n invincible-release -s SHA256SUMS.sig < SHA256SUMS
shasum -a 256 -c SHA256SUMS