ZeroClaw v0.8.2 — Two New Front Doors

ZeroClaw v0.8.2 opens two new front doors. A2A agent discovery lets agents describe and discover one another over the gateway — the first agent-to-agent interop path. And the skills story gets richer: user-configured extra skill registries via registry:<name>/<skill>, and typed slash-command options declared in SKILL.md frontmatter. Installation also now adds zeroclaw to PATH automatically, with a --no-modify-path opt-out.

The release spans 152 commits from 31 contributors — and most of them are the quieter half of the story.

The posture release

v0.8.2 treats every inbound payload as untrusted and tightens the seams an attacker would reach for:

• Universal ingress policy layer — every inbound turn passes one SOP-backed policy layer before a model sees it, on every transport, including mid-turn steering injections.
• SOP trigger-payload framing — MQTT and webhook trigger topics and payloads are capped, sanitized, and framed in untrusted-content markers, so an injected event cannot forge instructions into the step context.
• Plugin SSRF guard and config isolation — zc_http_request blocks SSRF including DNS-rebinding and redirect bypasses; plugin config is scoped per-alias and raw environment access is removed.
• HMAC tool receipts wired through the ACP, gateway WebSocket, and CLI turn paths.
• Secret redaction — the Telegram bot token routes through the canonical global leak detector instead of channel-local regexes.
• MCP tool scoping per agent, with the denylist enforced across all connect sites.

Most of this is invisible at the surface. It shows up as fewer leaks, fewer duplicate launches, and turns that behave the same on every transport.

Also in this release

A durable run/task control plane backs SOP run-state, live run metrics, and delegate supervision in SQLite. Discord picks up interaction components — buttons, selects, modals, autocomplete, buttoned approval — and rich outbound embeds. Slack gains attachments, WhatsApp gains group allowlists, and the gateway adds xAI OAuth login and email-login for OAuth2 email channels.

Full details in the release notes.