Skip to main content

​
Changelog Highlights

Track the evolution of ZeroClaw with notable changes, improvements, and fixes.
For the complete changelog, see CHANGELOG.md in the repository.

​
Unreleased

Upcoming features and fixes currently in development:

​
Security

Legacy Encryption Migration

The enc: prefix (XOR cipher) is now deprecated. Secrets using this format will be automatically migrated to enc2: (ChaCha20-Poly1305 AEAD) when decrypted via decrypt_and_migrate(). A warning is emitted when legacy values are encountered.
New APIs:
  • SecretStore::decrypt_and_migrate() — Decrypts and migrates legacy secrets
  • SecretStore::needs_migration() — Check if a value uses legacy format
  • SecretStore::is_secure_encrypted() — Check if a value uses secure enc2: format

​
Added

New feishu_doc tool with comprehensive document operations:
  • read — Read document content
  • write — Write to documents
  • append — Append content
  • create — Create new documents
  • list_blocks — List document blocks
  • get_block — Get specific block
  • update_block — Update block content
  • delete_block — Delete block
  • create_table — Create tables
  • write_table_cells — Write table data
  • create_table_with_values — Create populated tables
  • upload_image — Upload images
  • upload_file — Upload files
New mention_only config option for Telegram channel:
[channels.telegram]
mention_only = true  # Bot only responds to @mentions in groups
When enabled, the bot only responds to messages that @-mention it in group chats. Direct messages always work regardless of this setting. Default: false
Session persistence guidance now includes explicit backend/strategy/TTL key names for rollout planning.

​
Deprecated

enc: prefix for encrypted secrets — Use enc2: (ChaCha20-Poly1305) instead. Legacy values are still decrypted for backward compatibility but should be migrated.

​
Fixed

Responses from thinking models (e.g., gemini-3-pro-preview) are now handled correctly:
  • Skips internal reasoning parts (thought: true)
  • Skips signature parts (thoughtSignature)
  • Extracts only the final answer text
  • Falls back to thinking content when no non-thinking response is available
  • Default gateway port updated to 42617
  • Removed all user-facing references to port 3000
Fixed compiler warnings: channel menu dispatch now uses an enum-backed selector instead of hard-coded numeric match arms, preventing duplicated pattern warnings in src/onboard/wizard.rs.
Fixed compile-time type mismatch: native tool spec parsing now uses owned serializable/deserializable structs when validating tool schemas before API calls.

​
v0.1.0 (2026-02-13)

Initial release of ZeroClaw — a trait-based, production-ready agent framework.

​
Core Architecture

Trait-Based Pluggability

Every subsystem is swappable through well-defined traits:
  • Provider: LLM backends
  • Channel: Messaging platforms
  • Observer: Metrics and logging
  • RuntimeAdapter: Platform adapters
  • Tool: Agent capabilities
  • Memory: Persistent storage

​
Providers

OpenRouter

Single API to access Claude, GPT-4, Llama, Gemini, and more

​
Channels

CLI Channel

Interactive and single-message modes for command-line usage

​
Observability

  • NoopObserver: Zero overhead for production
  • LogObserver: Tracing integration
  • MultiObserver: Fan-out to multiple backends

​
Security

  • Workspace sandboxing: Restrict file access to workspace
  • Command allowlisting: Only approved commands can run
  • Path traversal blocking: Prevent directory escape attacks
  • Autonomy levels: ReadOnly, Supervised, Full
  • Rate limiting: Prevent runaway execution
  • Forbidden path protection: Block access to /etc, /root, ~/.ssh

​
Tools

Shell

Sandboxed command execution

FileRead

Path-checked file reading

FileWrite

Path-checked file writing

​
Memory (Brain)

SQLite Backend

Persistent, searchable memory that survives restarts

Markdown Backend

Plain-text, human-readable memory files

​
Features

Periodic task execution from HEARTBEAT.md for scheduled operations.
Native adapter for Mac, Linux, and Raspberry Pi with minimal overhead.
TOML-based configuration system with sensible defaults and easy overrides.
Interactive CLI wizard with workspace scaffolding for quick setup.

​
CLI Commands

zeroclaw agent

​
CI/CD

Cross-Platform Builds

GitHub Actions with automated builds for:
  • Linux (x86_64, ARM64)
  • macOS (Intel, Apple Silicon)
  • Windows

​
Testing

Comprehensive Test Coverage

159 inline tests covering all modules and edge cases:
  • Unit tests for each subsystem
  • Integration tests for workflows
  • Security boundary tests
  • Error handling validation

​
Performance

Binary Size

3.1MB optimized release build (includes bundled SQLite)

Memory Usage

<5MB RAM for typical agent operations

Startup Time

<10ms cold start on release builds

Hardware Support

Runs on devices with as little as 5MB RAM

​
Security (v0.1.0)

  • Path traversal attack prevention
  • Command injection blocking
  • Workspace escape prevention
  • Forbidden system path protection

​
Version History

v0.1.0

Initial release - Feb 13, 2026

Full Changelog

Complete version history

​
Release Philosophy

ZeroClaw follows Semantic Versioning and maintains a detailed changelog based on Keep a Changelog.
Each release includes:
  • Added: New features and capabilities
  • Changed: Updates to existing functionality
  • Deprecated: Features marked for removal
  • Removed: Deleted features
  • Fixed: Bug fixes and corrections
  • Security: Security improvements and patches

​
Stay Updated

GitHub Releases

Subscribe to release notifications

X @zeroclawlabs

Follow for announcements

Telegram

Join the community channel

Reddit

Discuss on r/zeroclawlabs

Build docs developers (and LLMs) love

Get started for freeTalk to us