@hybridaione/hybridclaw 0.12.11 → 0.13.1

package/CHANGELOG.md

@@ -2,6 +2,156 @@
 
 ## Unreleased
 
+## [0.13.1](https://github.com/HybridAIOne/hybridclaw/tree/v0.13.1) - 2026-04-24
+
+### Added
+
+- **Delegation runtime reporting**: Delegated agent runs now persist their own
+  request logs, audit tool events, model usage, token counts, and artifacts.
+  `/status` rolls first-level delegate usage into the session summary when a
+  dedicated delegate model is configured.
+- **Dedicated proactive delegate model**: Added
+  `proactive.delegation.model`, allowing operators to run delegated tasks on a
+  different model from the parent orchestration turn.
+- **Live delegate progress in the TUI**: Delegate batches now stream status
+  blocks, child tool progress, token totals, and synthesized final-answer
+  deltas into local TUI sessions without interrupting the active prompt.
+- **Shared gateway command parsing helpers**: Added common parsing utilities
+  for command ids, lower-case subcommands, and integer arguments across
+  policy, concierge, skill, session, usage, export, audit, and schedule
+  commands.
+
+### Changed
+
+- **Delegation prompts and approvals are clearer**: Delegation metadata moves
+  into the child user prompt, subagents get more explicit tool-use guidance,
+  duplicate delegate task titles are tracked independently, and `delegate` is
+  classified as green because child tool calls are approved separately.
+- **TUI activity rendering is more stable**: Running tools pulse in place,
+  completed tools switch to a green checkmark, streamed text row counts are
+  tracked incrementally, and delegate tool calls suppress partial parent text
+  until delegate output is ready.
+- **Console chat navigation is easier to reach**: The chat sidebar collapses
+  to an icon rail on desktop, exposes a mobile topbar trigger, and respects
+  reduced-motion preferences.
+- **Encrypted web-search credentials feed runtimes consistently**: Brave,
+  Perplexity, and Tavily API keys are resolved through the runtime secret store
+  and injected into host/container agent runtimes from the active encrypted
+  credentials, with environment variables used as fallback.
+- **Liquid/LFM local model tool prompts are more compatible**: Local
+  OpenAI-compatible Liquid/LFM requests include a compact tool list in the
+  system prompt while preserving normal tool-choice request fields.
+
+### Fixed
+
+- **WhatsApp shutdown no longer waits on stale inbound batches**: Runtime
+  shutdown cancels debounced WhatsApp batches, aborts in-flight handlers,
+  stops typing indicators, and avoids starting new typing state after shutdown
+  begins.
+- **Console audit inspection stays visible while browsing events**: The audit
+  detail panel remains sticky as the event list scrolls.
+- **Whitespace-padded command arguments normalize consistently**: Gateway
+  command handlers now trim ids and lower-case subcommands through shared
+  helpers before dispatching.
+
+## [0.13.0](https://github.com/HybridAIOne/hybridclaw/tree/v0.13.0) - 2026-04-22
+
+### Added
+
+- **Direct Anthropic provider**: Added first-class `anthropic/...` model
+  routing with `hybridclaw auth login anthropic`, direct Messages API support,
+  optional official `claude -p` transport in host sandbox mode, runtime model
+  discovery, doctor/onboarding coverage, and container-side Anthropic provider
+  execution.
+- **JSON agent configuration command**: Added `hybridclaw agent config` for
+  platform-generated agent JSON payloads. The command can upsert agent
+  metadata, write bootstrap markdown files, optionally activate the agent, and
+  import `imageAsset` URLs or local files into the agent workspace.
+- **Bundled `gog` Google Workspace skill**: Added API-backed Gmail, Google
+  Calendar, Drive, Contacts, Sheets, and Docs workflows through the `gog` CLI,
+  including the Homebrew install helper and Google OAuth setup via
+  `hybridclaw auth login google`. HybridClaw stores the OAuth client secret
+  and refresh token in encrypted runtime secrets, mints short-lived access
+  tokens on the host, and injects only `GOG_ACCESS_TOKEN` plus `GOG_ACCOUNT`
+  into the agent runtime.
+- **Bundled `gws` Google Workspace skill**: Added a Google Workspace CLI skill
+  with progressive disclosure, auth preflight, and focused reference material
+  for Calendar, Gmail, Drive, Docs, Sheets, and common workflows.
+- **Bundled `gh-issues` skill**: Added a HybridClaw-native GitHub issue queue
+  workflow that can fetch live issue lists, filter batches, confirm selected
+  issues, deduplicate issue-fix branches, delegate focused PRs, watch queues,
+  and revisit review feedback on open issue-fix PRs.
+- **Bundled `excalidraw` skill**: Added editable `.excalidraw` diagram
+  creation and revision guidance with reference material for colors, dark
+  mode, examples, and an upload helper.
+- **Small-business workflow tutorials**: Added a top-level Tutorials section
+  covering practical owner, GTM, marketing, sales, DevRel, content, webinar,
+  invoicing, and release-launch workflows.
+- **Roman personality option**: Added a bundled Roman personality profile.
+- **Console view switch and chat route refresh**: Added a shared view switch,
+  larger admin brand treatment, collapsible desktop navigation, and a refreshed
+  top-level `/chat` SPA route.
+- **Release image promotion action**: Added a dedicated GitHub Action for
+  release image promotion and tightened release-image workflow caching.
+
+### Changed
+
+- **Anthropic provider handling is production-routed**: Anthropic auth status,
+  provider probing, model discovery, task routing, stream parsing, timeout
+  behavior, Claude CLI credential lookup, and credential environment handling
+  now use provider-specific code paths instead of OpenAI-compatible fallbacks.
+- **Google Workspace skill routing prefers `gog` for API access**: The
+  browser-oriented `google-workspace` skill now defers to the bundled `gog`
+  skill when API-backed Gmail, Calendar, Drive, Contacts, Sheets, or Docs
+  access is available.
+- **Browser chat is the primary local web surface**: The gateway root routes to
+  chat, `/chat` is mounted as a top-level console SPA route, the standalone
+  chat view owns its viewport, and server-rendered pages use document
+  navigation where appropriate.
+- **Chat composer and message actions were refined**: Assistant message actions
+  are always visible, regenerate precedes copy, the composer uses a two-row
+  layout and the full main-column width, active sessions use accent text, and
+  the new-conversation/send controls use lighter chrome.
+- **Channel runtime lifecycle code is shared**: Built-in channel transports now
+  use a shared runtime factory for common lifecycle handling, with explicit
+  opt-outs where a transport needs custom behavior.
+- **Provider discovery is more consistent**: Discovery caches and lookup
+  aliases are shared across providers, HybridAI model alias lookup is indexed,
+  provider integer parsing is centralized, and discovery refresh failures are
+  logged consistently.
+- **Prompt and tool summaries are cleaner**: Message-tool advertising is scoped
+  to active channels, and prompt hook output avoids redundant comment noise.
+
+### Fixed
+
+- **Gateway restarts no longer hang during shutdown**: The gateway shutdown
+  path now drains pending credential-save work in order, avoiding a restart
+  hang during WhatsApp shutdown.
+- **Honcho memory prefetch races are closed**: Prompt-context assembly waits
+  for in-flight Honcho prefetch work before reading memory context.
+- **Inactive channel send tools no longer leak into prompts**: The runtime only
+  advertises message-send tools for channels that are active in the current
+  configuration.
+- **OpenRouter free-model lookups normalize correctly**: OpenRouter discovery
+  handles free model lookup aliases consistently.
+- **Slack runtime sends are guarded more tightly**: Slack send handling now
+  validates runtime state before attempting delivery.
+- **Agent avatars load behind web auth**: Chat agent avatars are fetched with
+  authenticated requests and eagerly loaded when chat state initializes.
+- **Chat replay restores request context from history**: Regenerating from a
+  historic assistant message hydrates the stored replay request before
+  resubmitting.
+- **Collapsed sidebars keep the expected width**: The collapsed console rail
+  shrinks to icon width and exposes nav tooltips instead of leaving excess
+  sidebar space.
+- **Google Workspace replies preserve user-visible addresses**: Assistant
+  replies and streamed chat text no longer redact ordinary email addresses
+  before they reach the user. Redaction still applies to audit, logging,
+  approval/control previews, and observability paths.
+- **HybridAI streaming avoids duplicate assistant text**: The HybridAI stream
+  adapter now handles chunks that include both cumulative `message.content` and
+  incremental `delta.content` without emitting the same text twice.
+
 ## [0.12.11](https://github.com/HybridAIOne/hybridclaw/tree/v0.12.11)
 
 ### Added
@@ -1279,7 +1429,7 @@
   through shared routing for Discord, WhatsApp, email, and local clients,
   including native vision/audio injection paths and stronger preference for
   current-turn local files over history rediscovery.
-- **Auxiliary task/provider routing**: Added Hermes-style auxiliary routing and
+- **Auxiliary task/provider routing**: Added auxiliary routing and
   tighter provider fallback handling so deferred or background tasks pick the
   right model more predictably.
 - **Discord activation config cleanup**: Removed the obsolete

package/README.md

@@ -114,6 +114,9 @@ Once the gateway is running, open HybridClaw locally:
 - `/admin/agents` edits allowlisted bootstrap markdown files such as
   `AGENTS.md`, keeps saved revisions, and restores earlier versions from the
   browser.
+- `hybridclaw agent config` accepts generated JSON payloads to upsert agent
+  metadata, write bootstrap markdown, import profile images into the agent
+  workspace, and optionally activate the agent.
 - `/admin/channels` edits transport config, encrypted channel credentials,
   Twilio voice settings, and per-channel instructions that are injected into
   prompts at runtime.
@@ -121,13 +124,17 @@ Once the gateway is running, open HybridClaw locally:
 - `/admin/gateway` reloads runtime config and refreshes secrets from the
   browser without tearing down the enclosing workspace container; keep
   `hybridclaw gateway restart` for local/manual full restarts.
+- `proactive.delegation.model` can pin delegated work to a different model
+  from the parent turn; `/status` shows delegate token totals and local-token
+  share when that split is configured.
 - `container.persistBashState` controls whether bash tool calls share shell
   state (`cd`, exported env vars, aliases) across turns in the same active
   runtime session; `/admin/config` exposes the same setting as `Persistent bash state`.
 - Generated artifacts remain downloadable and attachable even when the sandbox
   exposes a custom workspace display root such as `/app`.
-- `hybridclaw tui` includes a keyboard-driven approval picker and prints a
-  ready-to-run `hybridclaw tui --resume <sessionId>` command on exit.
+- `hybridclaw tui` includes live delegate progress, pulsing tool rows,
+  completion checkmarks, a keyboard-driven approval picker, and a ready-to-run
+  `hybridclaw tui --resume <sessionId>` command on exit.
 - `hybridclaw doctor` checks runtime health including resource hygiene
   maintenance for stale gateway artifacts.
 - `hybridclaw onboarding` and related local setup flows can restore the last
@@ -135,6 +142,9 @@ Once the gateway is running, open HybridClaw locally:
   `config.json` becomes invalid.
 - `hybridclaw skill import` supports community sources, local directories,
   and `.zip` archives.
+- The bundled tutorials cover owner, GTM, marketing, sales, DevRel, content,
+  invoicing, webinar, and release-launch workflows that can run from the TUI,
+  web chat, or connected channels.
 - `hybridclaw eval hybridai-skills` turns the bundled skills pages' "Try it
   yourself" prompts into a local eval suite, and live summaries surface the
   observed skill, artifact presence, and counted tool-call totals.
@@ -146,14 +156,25 @@ Once the gateway is running, open HybridClaw locally:
 
 ## Models, Skills, and Memory
 
-- `hybridclaw auth login` and `/model list` cover HybridAI, Codex, OpenRouter,
-  Mistral, Hugging Face, Gemini, DeepSeek, xAI, Z.AI, Kimi, MiniMax,
-  DashScope, Xiaomi, Kilo Code, and local backends such as Ollama, LM Studio,
-  llama.cpp, and vLLM. Remote OpenAI-compatible providers can merge
-  runtime-discovered model catalogs with operator-pinned lists.
+- `hybridclaw auth login` and `/model list` cover HybridAI, Codex,
+  Anthropic, OpenRouter, Mistral, Hugging Face, Gemini, DeepSeek, xAI, Z.AI,
+  Kimi, MiniMax, DashScope, Xiaomi, Kilo Code, and local backends such as
+  Ollama, LM Studio, llama.cpp, and vLLM. Remote OpenAI-compatible providers
+  can merge runtime-discovered model catalogs with operator-pinned lists.
+- Anthropic can run through the direct Messages API with `ANTHROPIC_API_KEY`
+  or through the official Claude CLI transport in host sandbox mode.
+- Brave, Perplexity, and Tavily web-search credentials can live in the
+  encrypted runtime secret store and are passed into host or container agent
+  runtimes from the active config.
+- Google OAuth credentials for Workspace skills live in the encrypted runtime
+  secret store; agent runtimes receive short-lived access tokens for `gog` and
+  `gws` instead of long-lived refresh tokens.
 - Skills can be enabled or disabled globally or per channel from
   `hybridclaw skill enable|disable`, TUI `/skill config`, or the admin
   `Skills` page.
+- Bundled skills include API-backed Google Workspace workflows (`gog`, `gws`),
+  GitHub issue queue processing (`gh-issues`), and editable Excalidraw diagram
+  creation.
 - Built-in office skills handle longer PDF creation flows cleanly: the bundled
   PDF creator wraps long lines, honors explicit `\n`, and adds pages
   automatically when reports or invoices spill past the first page.
@@ -215,8 +236,9 @@ Once the gateway is running, open HybridClaw locally:
 - **Gateway service** (Node.js) — shared message/command handlers, SQLite persistence (KV + semantic + knowledge graph + canonical sessions + usage events), scheduler, heartbeat, web/API, loopback OpenAI-compatible API, and channel integrations for Discord, Slack, Microsoft Teams, Telegram, iMessage, WhatsApp, Twilio voice, and email
 - **TUI client** — thin client over HTTP (`/api/chat`, `/api/command`) with
   a structured startup banner that surfaces model, sandbox, gateway, and
-  chatbot context before the first prompt, an interactive approval picker for
-  pending approvals, and an exit summary with a ready-to-run resume command
+  chatbot context before the first prompt, live delegate status/progress,
+  an interactive approval picker for pending approvals, and an exit summary
+  with a ready-to-run resume command
 - **Container** (Docker, ephemeral) — HybridAI API client, sandboxed tool executor, and preinstalled browser automation runtime with cursor-aware snapshots for JS-heavy custom UI
 - Communication via file-based IPC (input.json / output.json)
 
@@ -250,6 +272,10 @@ Browse the full manual at
   [WhatsApp](https://www.hybridclaw.io/docs/channels/whatsapp),
   [iMessage](https://www.hybridclaw.io/docs/channels/imessage), and
   [Microsoft Teams](https://www.hybridclaw.io/docs/channels/msteams)
+- Tutorials:
+  [Practical Workflows](https://www.hybridclaw.io/docs/tutorials) for owner,
+  GTM, marketing, sales, DevRel, content, invoicing, webinar, and release
+  launch workflows
 - Skills and plugins:
   [Extensibility](https://www.hybridclaw.io/docs/extensibility),
   [Bundled Skills](https://www.hybridclaw.io/docs/guides/bundled-skills),

package/community-skills/himalaya/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: himalaya
-description: Manage email with the Himalaya CLI: configure accounts, list folders, read or search messages, draft replies, send mail, or download attachments from the terminal.
+description: "Manage email with the Himalaya CLI: configure accounts, list folders, read or search messages, draft replies, send mail, or download attachments from the terminal."
 user-invocable: true
 metadata:
   hybridclaw:

package/config.example.json

@@ -231,6 +231,12 @@
   "codex": {
     "baseUrl": "https://chatgpt.com/backend-api/codex"
   },
+  "anthropic": {
+    "enabled": false,
+    "baseUrl": "https://api.anthropic.com/v1",
+    "method": "api-key",
+    "models": ["anthropic/claude-sonnet-4-6"]
+  },
   "openrouter": {
     "enabled": false,
     "baseUrl": "https://openrouter.ai/api/v1",
@@ -519,6 +525,7 @@
     },
     "delegation": {
       "enabled": true,
+      "model": "",
       "maxConcurrent": 3,
       "maxDepth": 2,
       "maxPerTurn": 3