Releases

• Added /use-native-credential-proxy skill — opt-in restoration of the built-in .env-based credential proxy for users who prefer it over OneCLI
• Removed dead src/credential-proxy.ts code (unused since v1.2.22)
• Updated token count to 39.8k tokens (20% of context window)
• Upgraded Zod dependency from v3 to v4 (^4.3.6)

• Replaced credential proxy with OneCLI gateway for container credential injection
• Updated container base image from node:22-slim to node:24-slim
• Updated token count to 40.7k tokens (20% of context window)

• Added opt-in diagnostics via PostHog — collects anonymous system info (OS, architecture, version, selected channels) during /setup and /update-nanoclaw with explicit user consent
• Three-option prompt: Yes (send once), No (skip), Never ask again (permanently opt out)
• No runtime telemetry — diagnostics run only in skill workflows, not in the application itself

• Added ESLint configuration with error-handling rules across the codebase

• Reduced docker stop timeout for faster container restarts (-t 1 flag — containers are stateless)

​

Security

• User prompt content is no longer logged on container errors — only input metadata (prompt length, session ID)

​

Channel

• Added Japanese README translation

• Added read-only /capabilities and /status container-agent skills

• Tasks snapshot now refreshes immediately after IPC task mutations (contributed by @mbravorus)

• Fixed remote-control prompt auto-accept to prevent immediate exit
• Added KillMode=process so remote-control survives service restarts (contributed by @gabi-simons)

• Added /remote-control command for host-level Claude Code access from within containers

​

Features

• Skills live as skill/* git branches merged via git merge — no more marketplace or plugin system
• Added Docker Sandboxes announcement and manual setup guide
• Added nanoclaw-docker-sandboxes to fork dispatch list

​

Breaking

• Skills are no longer installed via marketplace or plugin commands — use git merge workflow

​

Fixes

• Fixed setup registration to use initDatabase/setRegisteredGroup with correct CLI commands
• Auto-resolve package-lock conflicts when merging forks
• Bumped claude-agent-sdk to ^0.2.76

​

Features

• Added /compact skill for manual context compaction

​

Security

• Enhanced container environment isolation via credential proxy — API keys injected at runtime via local proxy instead of environment variables

​

Features

• PDF reader skill: Read and analyze PDF attachments
• Image vision skill: Image analysis for WhatsApp
• WhatsApp reactions skill: Emoji reactions and status tracker

​

Fixes

• Fixed task container to close promptly when agent uses IPC-only messaging
• Fixed WhatsApp pairing code written to file for immediate access
• Fixed WhatsApp DM-with-bot registration to use sender’s JID

• Added LIMIT to unbounded message history queries for better performance

​

Features

• Agent prompts now include timezone context for accurate time references

​

Fixes

• Fixed voice-transcription skill dropping WhatsApp registerChannel call

• Fixed misleading send_message tool description for scheduled tasks

• Added /add-ollama skill for local model inference
• Added update_task tool and return task ID from schedule_task

• Updated claude-agent-sdk to 0.2.68

• CI formatting fix

• Fixed _chatJid rename to chatJid in onMessage callback

• Added sender allowlist for per-chat access control to restrict who can interact with the agent

​

Features

• Added /use-local-whisper skill for local voice transcription
• Atomic task claims prevent scheduled tasks from executing twice

​

Fixes

• Fixed WhatsApp messages.upsert error handling

• Version bump (no functional changes)

​

Features

• Channel registry: Channels self-register at module load time via registerChannel() factory pattern
• isMain flag: Explicit boolean replaces folder-name-based main group detection
• Channel-prefixed group folders: Groups use whatsapp_main, telegram_family-chat convention to prevent cross-channel collisions
• Unconfigured channels now emit WARN logs naming the exact missing variable

​

Breaking

• WhatsApp moved to skill: No longer part of core — apply with /add-whatsapp
• ENABLED_CHANNELS removed: Orchestrator uses getRegisteredChannelNames(); channels detected by credential presence
• All channel skills simplified: No more *_ONLY flags — all use self-registration pattern

​

Fixes

• Prevent scheduled tasks from executing twice when container runtime exceeds poll interval

​

Migration

• Added CJK font support (fonts-noto-cjk) for Chromium screenshots (contributed by @neocode24)

• Fixed wrapped WhatsApp message normalization before reading content

• Added third-party model support — use models beyond Claude
• Added /update-nanoclaw skill for syncing customized installs with upstream (replaces old /update)
• Added Husky and format:fix script for consistent formatting

​

Features

• Added /add-slack skill
• Restructured add-gmail skill for new architecture with graceful startup when credentials missing
• Removed deterministic caching from skills engine
• Added .nvmrc specifying Node 22
• CI optimization, logging improvements, and codebase formatting
• Added CONTRIBUTORS.md and CODEOWNERS

​

Fixes

• Fixed WhatsApp QR data handling
• Rebased core skills (Telegram, Discord, voice) to latest main

• Improved error handling for WhatsApp Web version fetch (follow-up to v1.1.1)

​

Features

• Added official Qodo skills and codebase intelligence
• Rewrote README for broader audience

​

Fixes

• Fixed WhatsApp 405 connection failures via fetchLatestWaWebVersion

​

Features

• Added /update skill to pull upstream changes from within Claude Code
• Replaced ‘ask the user’ with AskUserQuestion tool in skills

​

Security

• Fixed critical skills path-remap root escape (including symlink traversal)

​

Fixes

• Fixed empty messages from polling queries
• Fixed fallback name from ‘AssistantNameMissing’ to ‘Assistant’