ZeroClaw v0.8.3 — Procedures and Plugins

ZeroClaw v0.8.3 is the biggest release since the v0.8.0 rewrite: 379 commits from 56 contributors, and two genuinely new subsystems — a Standard Operating Procedure engine and a WebAssembly plugin host — alongside a Git forge channel, the desktop app's return, and a broad security wave.

The SOP engine, end to end

Standard Operating Procedures graduate from design to a running subsystem. A daemon maintenance tick drives live procedures with typed step contracts, enforcing step scope, mode, routing, and schemas at the engine boundary. Cron, filesystem, and calendar no-show triggers wire into the tick. The out-of-band approval plane fails closed on timeout, and deterministic capability steps run through a registry that fails closed on driverless steps — automation you can supervise, resume, and audit rather than fire and forget.

There's also an experimental procedural-memory workshop with web visual authoring, channel fan-in, and a selectable agent.

A WebAssembly plugin host

A wasmtime component-model host now backs tool, channel, and memory plugins — with wasi:http channel bindings, an inbound queue, and a config jail. Plugins get per-call execution limits, honor the configured signature policy at load, and can be found and installed by name through registry search. Extension without trusting arbitrary native code.

A channel for your forge

A new Git forge channel ships with GitHub and Gitea/Forgejo providers, a unified git_forge tool, and SOP ingress — the agent can live where your code reviews happen. Operators can also bind identities without the /bind code round-trip, tool approvals can route to a distinct approver channel, and WhatsApp picks up native location pins.

The desktop returns

The kernel now ships as a Tauri sidecar, bringing back a self-contained desktop app built around Quickstart — the companion experience for people who don't live in a terminal.

Runtime, cost, and security

• Cost and usage accounting gains a task-attributed usage ledger, an offline pricing catalog, and by-period and org-billed views in zerocode.
• Memory gets unified context injection keyed on ingress provenance, plus a durable store seam with supersede/dedup/budget handling and automatic vector migration.
• Observability lands process RAM/CPU sampling on macOS, Windows, and FreeBSD, and a model-context-window bar in the TUI, gateway chat, and CLI.
• Security hardening across the board — multiple SSRF gaps closed, constant-time token comparison, signing-key leak prevention, path-traversal fixes, and dependency bumps clearing several RUSTSEC advisories.

Full details in the release notes.