@@ -79,8 +79,12 @@ jobs:
             echo "tag v$tag does not match android versionName ${{ steps.apk.outputs.version }}"; exit 1
           fi
 
+      # Only an APK signed with the release key goes on a release: a debug-signed one would
+      # install, but could never be updated by (or update) a properly signed build. Without
+      # the secrets the APK is a workflow artifact and the maintainer attaches the one built
+      # with the key kept outside the repository (docs/android.md).
       - name: Attach to the release
-        if: startsWith(github.ref, 'refs/tags/v')
+        if: startsWith(github.ref, 'refs/tags/v') && secrets.ANDROID_KEYSTORE_B64 != ''
         uses: softprops/action-gh-release@v2
         with:
           files: |
 
@@ -4,8 +4,13 @@ All notable changes to OpenMuse. The format follows [Keep a Changelog](https://k
 
 ## [Unreleased]
 
+## [0.6.0] — 2026-09-23
+
+The app as Meta Muse looks, and an Android app. A plush avatar that moves while it works, one blue accent, a feed written for you, a stop button — and `openmuse.apk` on every release, so the phone gets notifications with the app closed.
+
 ### Added
 
+- **An Android app.** `android/` is a native shell around the web app: connect by scanning the QR code `openmuse serve` prints (or paste the link), then the same app in a WebView — with the file picker for attachments, downloads to the phone, links opening in the real browser, and plain HTTP on the LAN. What the browser could not do: a foreground service keeps one WebSocket open to your server while the app is closed, so approvals, questions and the last word of background work arrive as notifications that open the right chat; a resolved approval takes its notification down; reconnects after a network change or a reboot. Inside the app, *Settings → Notifications* shows the phone's switch instead of Web Push, and *About* has *Disconnect from this server*. Built by `.github/workflows/android.yml` and attached to each release as `openmuse-<version>.apk` and as `openmuse.apk`, so `https://github.com/OpenMuseAgent/OpenMuse/releases/latest/download/openmuse.apk` always points at the current one (Android 8.0+). See [docs/android.md](docs/android.md).
 - **A feed written for you.** The Feed tab opens with *Feed instructions* — one prompt in your words: topics to follow, nudges on your goals, a morning plan, the tone — and posts the agent writes from that and what it knows about you (memory, goals, today's calendar, the last conversation): a few short Markdown posts a day, in your language, each with a follow-up you can send to the chat. A new batch is written once a day while background work is on and outside quiet hours, or on demand (*New posts*); the phone gets one notification per batch. What happened while you were away stays below, as before. `GET /api/feed/posts`, `PUT /api/feed/instructions`, `POST /api/feed/posts/refresh`, `DELETE /api/feed/posts/{id}`.
 - **A stop button.** The status sheet (tap the avatar) shows *Stop* while a run is on: the run ends, a card waiting on you expires, what was queued behind it is dropped, and the transcript is left in a shape the model can continue from. `POST /api/threads/{id}/stop`.
 - **Plush avatars.** Six dolls to pick from in setup and in Settings, with an idle breath, a sway while working and a hop while waiting for you (still under *reduce motion*); tap one and it wiggles. An emoji on a colour is still there for anyone who prefers it. `profile.avatar` in the settings API; old profiles keep their emoji.
@@ -14,8 +19,13 @@ All notable changes to OpenMuse. The format follows [Keep a Changelog](https://k
 
 - **The look, after Meta Muse.** Near-white and near-black surfaces, one blue accent, grey bubbles for the agent and light-blue for you with the time between groups of messages, a floating icon-only tab bar, a centred avatar header with the live status line, and a single *+ Message* composer. Type is [Figtree](https://github.com/erikdkennedy/figtree) (OFL), bundled. Goals list as *Tracking* / *Goals* rows with a check circle and one line of status; Ideas are rows grouped by area; the approval card reads "*{name} wants to … at host*" with *Deny* / *Allow*; artifact cards and the Library show live previews of pages and pictures; the status sheet has a four-way control (Approvals, Activity, Permissions, Upcoming).
 - **It is called OpenMuse.** The default agent name, the CLI prompt, the console, push notifications and every screen say *OpenMuse* unless you named it; "Meta Muse" is used only when comparing with the original.
+- **The README** is short and scannable: a start-here table, what it can do, install, a three-command quick start, the Android download, deploy, then the details. Screenshots are of the new look; links are absolute so PyPI renders them. The package is marked Beta.
+
+### Fixed
 
-- **An Android app.** `android/` is a native shell around the web app: connect by scanning the QR code `openmuse serve` prints (or paste the link), then the same app in a WebView — with the file picker for attachments, downloads to the phone, links opening in the real browser, and plain HTTP on the LAN. What the browser could not do: a foreground service keeps one WebSocket open to your server while the app is closed, so approvals, questions and the last word of background work arrive as notifications that open the right chat; a resolved approval takes its notification down; reconnects after a network change or a reboot. Inside the app, *Settings → Notifications* shows the phone's switch instead of Web Push, and *About* has *Disconnect from this server*. Built by `.github/workflows/android.yml` and attached to each release as `openmuse-<version>.apk` (Android 8.0+). See [docs/android.md](docs/android.md).
+- **Sandboxed commands failed from a relative workspace.** With the config's default `workspace = "./workspace"`, bubblewrap was told to change into `workspace` *after* pivoting to the new root, where no such directory exists — every `shell` and `python_execute` call ended in "Can't chdir to workspace" while the sandbox self-check (which uses `/`) passed. The directory is now made absolute first.
+- **The wrong provider's key was never sent.** With `llm.api_key` empty, `DEEPSEEK_API_KEY` used to stand in whatever the `base_url` — a config pointed at OpenAI could go out with DeepSeek's key. Now DeepSeek's variable is used for `*.deepseek.com` only and `OPENAI_API_KEY` for every other host (OpenAI, OpenRouter, a gateway, vLLM).
+- **The approval card said "at df".** The host line is shown for network tools only, a recipient line for mail; the chat header's status line is about the open chat, not whichever thread happens to be working.
 
 ## [0.5.0] — 2026-09-23
 
@@ -118,7 +128,8 @@ First public release.
 - Mobile-first web app built with React, Vite and Tailwind, shipped inside the package.
 - Docker image and Compose file; GitHub Actions CI; PyPI publishing through Trusted Publishing.
 
-[Unreleased]: https://github.com/OpenMuseAgent/OpenMuse/compare/v0.5.0...HEAD
+[Unreleased]: https://github.com/OpenMuseAgent/OpenMuse/compare/v0.6.0...HEAD
+[0.6.0]: https://github.com/OpenMuseAgent/OpenMuse/compare/v0.5.0...v0.6.0
 [0.5.0]: https://github.com/OpenMuseAgent/OpenMuse/compare/v0.4.0...v0.5.0
 [0.4.0]: https://github.com/OpenMuseAgent/OpenMuse/compare/v0.3.0...v0.4.0
 [0.3.0]: https://github.com/OpenMuseAgent/OpenMuse/compare/v0.2.0...v0.3.0
 
@@ -7,7 +7,7 @@ authors:
 repository-code: "https://github.com/OpenMuseAgent/OpenMuse"
 url: "https://github.com/OpenMuseAgent/OpenMuse"
 license: MIT
-version: 0.5.0
+version: 0.6.0
 date-released: 2026-09-23
 keywords:
   - personal agent
 
@@ -24,8 +24,8 @@ android {
         applicationId = "io.github.openmuseagent.openmuse"
         minSdk = 26
         targetSdk = 36
-        versionCode = 500
-        versionName = "0.5.0"
+        versionCode = 600
+        versionName = "0.6.0"
     }
 
     signingConfigs {
 
@@ -13,7 +13,7 @@ Everything else is the same web app, served by your `openmuse serve`.
 
 ## Install
 
-Download `openmuse-<version>.apk` from the [latest release](https://github.com/OpenMuseAgent/OpenMuse/releases/latest) and open it on the phone. Android asks once to allow installs from your browser or file manager. Android 8.0 (API 26) or newer, any CPU.
+Download [`openmuse.apk`](https://github.com/OpenMuseAgent/OpenMuse/releases/latest/download/openmuse.apk) (always the current release; the same file is also there as `openmuse-<version>.apk`) and open it on the phone. Android asks once to allow installs from your browser or file manager. Android 8.0 (API 26) or newer, any CPU. Every release is signed with the same key, so a newer APK installs over the old one and keeps its connection.
 
 Then:
 
@@ -65,7 +65,7 @@ The same four values can come from the environment as `OPENMUSE_STOREFILE`, `OPE
 
 ## Releases
 
-`.github/workflows/android.yml` builds the APK on every change under `android/` and, on a `v*` tag, attaches `openmuse-<version>.apk` to the GitHub release. For a properly signed release APK the repository needs four secrets: `ANDROID_KEYSTORE_B64` (the `.jks` file, base64), `ANDROID_KEYSTORE_PASSWORD`, `ANDROID_KEY_ALIAS`, `ANDROID_KEY_PASSWORD`. Without them the workflow still produces an APK, signed with a throwaway debug key.
+`.github/workflows/android.yml` builds the APK on every change under `android/` and, on a `v*` tag, attaches `openmuse-<version>.apk` and `openmuse.apk` to the GitHub release — but only when it could sign with the release key, which the repository gets from four secrets: `ANDROID_KEYSTORE_B64` (the `.jks` file, base64), `ANDROID_KEYSTORE_PASSWORD`, `ANDROID_KEY_ALIAS`, `ANDROID_KEY_PASSWORD`. Without them the workflow still builds an APK signed with a throwaway debug key and keeps it as a workflow artifact; the maintainer then attaches the APK built locally with the real key. A debug-signed APK never goes on a release, because it could not be updated by a properly signed one.
 
 The `versionName` in `android/app/build.gradle.kts` must match the tag, like the Python package's version does.
 
 
@@ -19,7 +19,7 @@ These win over the file. They cover the settings people change most often and wh
 | Variable | Setting |
 |---|---|
 | `OPENMUSE_LLM_PROVIDER`, `OPENMUSE_LLM_MODEL`, `OPENMUSE_LLM_BASE_URL`, `OPENMUSE_LLM_API_KEY`, `OPENMUSE_LLM_TOOL_MODE` | `[llm]` |
-| `DEEPSEEK_API_KEY`, `OPENAI_API_KEY` | used as `llm.api_key` when it is empty |
+| `DEEPSEEK_API_KEY`, `OPENAI_API_KEY` | used as `llm.api_key` when it is empty — DeepSeek's for a `*.deepseek.com` `base_url`, OpenAI's for every other host (OpenAI itself, OpenRouter, a gateway, vLLM) |
 | `OPENMUSE_DATA_DIR` | `data_dir` (default `~/.openmuse`) |
 | `OPENMUSE_WORKSPACE` | `agent.workspace` (default `./workspace`) |
 | `OPENMUSE_SENTINEL_MODE` | `sentinel.mode` |
 
@@ -6,5 +6,5 @@
 ``openmuse serve`` adds the phone app.
 """
 
-__version__ = "0.5.0"
+__version__ = "0.6.0"
 __all__ = ["__version__"]
@@ -23,6 +23,7 @@
 import tomllib
 from pathlib import Path
 from typing import Any, Literal
+from urllib.parse import urlparse
 
 from pydantic import BaseModel, Field, field_validator
 
@@ -388,6 +389,20 @@ def find_config_file(explicit: str | Path | None = None) -> Path | None:
     return None
 
 
+def _provider_key_vars(base_url: str) -> tuple[str, ...]:
+    """The environment variables that may stand in for a missing ``llm.api_key``.
+
+    A key belongs to one provider: DeepSeek's key is only tried for ``api.deepseek.com``
+    and OpenAI's only for ``api.openai.com``, so a config pointed at one provider never
+    sends the other's key. Any other OpenAI-compatible host (a gateway, vLLM, OpenRouter)
+    gets ``OPENAI_API_KEY`` alone — the convention such endpoints share.
+    """
+    host = (urlparse(base_url).hostname or "").lower()
+    if host == "deepseek.com" or host.endswith(".deepseek.com"):
+        return ("DEEPSEEK_API_KEY",)
+    return ("OPENAI_API_KEY",)
+
+
 def _apply_env_overrides(raw: dict[str, Any]) -> None:
     llm = raw.setdefault("llm", {})
     mapping = {
@@ -402,7 +417,8 @@ def _apply_env_overrides(raw: dict[str, Any]) -> None:
         if (val := os.environ.get(env)) not in (None, ""):
             llm[key] = val
     if not llm.get("api_key"):
-        for env in ("DEEPSEEK_API_KEY", "OPENAI_API_KEY"):
+        base_url = llm.get("base_url") or LLMSettings.model_fields["base_url"].default or ""
+        for env in _provider_key_vars(str(base_url)):
             if val := os.environ.get(env):
                 llm["api_key"] = val
                 break
 
@@ -4,15 +4,15 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openmuse"
-version = "0.5.0"
+version = "0.6.0"
 description = "Open-source version of Meta's Muse: a personal agent with a phone app, a Sentinel gatekeeper, a credential vault, memory and goals. Bring your own model."
 readme = "README.md"
 license = { text = "MIT" }
 requires-python = ">=3.11"
 authors = [{ name = "OpenMuse Contributors" }]
 keywords = ["agent", "ai", "llm", "personal-assistant", "muse", "meta-muse", "deepseek", "mcp"]
 classifiers = [
-  "Development Status :: 3 - Alpha",
+  "Development Status :: 4 - Beta",
   "Intended Audience :: Developers",
   "License :: OSI Approved :: MIT License",
   "Programming Language :: Python :: 3",
 
@@ -64,3 +64,24 @@ def test_defaults_without_file(tmp_path: Path, monkeypatch: pytest.MonkeyPatch):
     s = load_settings()
     assert s.llm.api_key == "sk-from-env"
     assert s.source == "defaults+env"
+
+
+def test_provider_key_fallback_follows_the_host(tmp_path: Path, monkeypatch: pytest.MonkeyPatch):
+    """A missing api_key is filled from the provider's own variable, never another's."""
+    monkeypatch.setenv("DEEPSEEK_API_KEY", "sk-deepseek")
+    monkeypatch.setenv("OPENAI_API_KEY", "sk-openai")
+    monkeypatch.delenv("OPENMUSE_LLM_API_KEY", raising=False)
+    cfg = tmp_path / "config.toml"
+
+    def key_for(base_url: str | None) -> str | None:
+        line = f'base_url = "{base_url}"\n' if base_url else ""
+        cfg.write_text(f'data_dir = "{tmp_path / "data"}"\n[llm]\n{line}')
+        return load_settings(cfg).llm.api_key
+
+    assert key_for(None) == "sk-deepseek"  # the default endpoint is DeepSeek's
+    assert key_for("https://api.deepseek.com") == "sk-deepseek"
+    assert key_for("https://api.openai.com/v1") == "sk-openai"
+    assert key_for("https://openrouter.ai/api/v1") == "sk-openai"  # the shared convention
+    monkeypatch.delenv("OPENAI_API_KEY")
+    assert not key_for("https://api.openai.com/v1")  # DeepSeek's key does not stand in
+    assert key_for("https://api.deepseek.com") == "sk-deepseek"