Skip to content

Latest commit

 

History

History
116 lines (65 loc) · 5.5 KB

ROADMAP.md

File metadata and controls

116 lines (65 loc) · 5.5 KB

🦐 PicoClaw Roadmap

Vision: To build the ultimate lightweight, secure, and fully autonomous AI Agent infrastructure.automate the mundane, unleash your creativity

🚀 1. Core Optimization: Extreme Lightweight

Our defining characteristic. We fight software bloat to ensure PicoClaw runs smoothly on the smallest embedded devices.

  • Memory Footprint Reduction
    • Goal: Run smoothly on 64MB RAM embedded boards (e.g., low-end RISC-V SBCs) with the core process consuming < 20MB.
    • Context: RAM is expensive and scarce on edge devices. Memory optimization takes precedence over storage size.
    • Action: Analyze memory growth between releases, remove redundant dependencies, and optimize data structures.

🛡️ 2. Security Hardening: Defense in Depth

Paying off early technical debt. We invite security experts to help build a "Secure-by-Default" agent.

  • Input Defense & Permission Control

    • Prompt Injection Defense: Harden JSON extraction logic to prevent LLM manipulation.
    • Tool Abuse Prevention: Strict parameter validation to ensure generated commands stay within safe boundaries.
    • SSRF Protection: Built-in blocklists for network tools to prevent accessing internal IPs (LAN/Metadata services).

  • Sandboxing & Isolation

    • Filesystem Sandbox: Restrict file R/W operations to specific directories only.
    • Context Isolation: Prevent data leakage between different user sessions or channels.
    • Privacy Redaction: Auto-redact sensitive info (API Keys, PII) from logs and standard outputs.

  • Authentication & Secrets

    • Crypto Upgrade: Adopt modern algorithms like ChaCha20-Poly1305 for secret storage.
    • OAuth 2.0 Flow: Deprecate hardcoded API keys in the CLI; move to secure OAuth flows.

🔌 3. Connectivity: Protocol-First Architecture

Connect every model, reach every platform.

  • Provider

    • Architecture Upgrade: Refactor from "Vendor-based" to "Protocol-based" classification (e.g., OpenAI-compatible, Ollama-compatible). (Status: In progress by @Daming, ETA 5 days)
    • Local Models: Deep integration with Ollama, vLLM, LM Studio, and Mistral (local inference).
    • Online Models: Continued support for frontier closed-source models.

  • Channel

    • IM Matrix: QQ, WeChat (Work), DingTalk, Feishu (Lark), Telegram, Discord, WhatsApp, LINE, Slack, Email, KOOK, Signal, ...
    • Standards: Support for the OneBot protocol.
    • attachment: Native handling of images, audio, and video attachments.

  • Skill Marketplace

    • Discovery skills: Implement find_skill to automatically discover and install skills from the [GitHub Skills Repo] or other registries.

🧠 4. Advanced Capabilities: From Chatbot to Agentic AI

Beyond conversation—focusing on action and collaboration.

  • Operations

    • MCP Support: Native support for the Model Context Protocol (MCP).
    • Browser Automation: Headless browser control via CDP (Chrome DevTools Protocol) or ActionBook.
    • Mobile Operation: Android device control (similar to BotDrop).

  • Multi-Agent Collaboration

    • Basic Multi-Agent implement
    • Model Routing: "Smart Routing" — dispatch simple tasks to small/local models (fast/cheap) and complex tasks to SOTA models (smart).
    • Swarm Mode: Collaboration between multiple PicoClaw instances on the same network.
    • AIEOS: Exploring AI-Native Operating System interaction paradigms.

📚 5. Developer Experience (DevEx) & Documentation

Lowering the barrier to entry so anyone can deploy in minutes.

  • QuickGuide (Zero-Config Start)

    • Interactive CLI Wizard: If launched without config, automatically detect the environment and guide the user through Token/Network setup step-by-step.

  • Comprehensive Documentation

    • Platform Guides: Dedicated guides for Windows, macOS, Linux, and Android.
    • Step-by-Step Tutorials: "Babysitter-level" guides for configuring Providers and Channels.
    • AI-Assisted Docs: Using AI to auto-generate API references and code comments (with human verification to prevent hallucinations).

🤖 6. Engineering: AI-Powered Open Source

Born from Vibe Coding, we continue to use AI to accelerate development.

  • AI-Enhanced CI/CD
    • Integrate AI for automated Code Review, Linting, and PR Labeling.
    • Bot Noise Reduction: Optimize bot interactions to keep PR timelines clean.
    • Issue Triage: AI agents to analyze incoming issues and suggest preliminary fixes.

🎨 7. Brand & Community

  • Logo Design: We are looking for a Mantis Shrimp (Stomatopoda) logo design!
    • Concept: Needs to reflect "Small but Mighty" and "Lightning Fast Strikes."

🤝 Call for Contributions

We welcome community contributions to any item on this roadmap! Please comment on the relevant Issue or submit a PR. Let's build the best Edge AI Agent together!