@hybridaione/hybridclaw 0.2.7 → 0.2.8

package/CHANGELOG.md

@@ -4,6 +4,29 @@
 
 No unreleased changes.
 
+## [0.2.8](https://github.com/HybridAIOne/hybridclaw/tree/v0.2.8)
+
+### Added
+
+- **Discord send policy controls**: Added runtime config for `discord.sendPolicy` (`open|allowlist|disabled`) with global/channel/guild/user/role allowlist checks for outbound sends.
+- **Channel-aware prompt adapters**: Added channel-specific message-tool hint adapters (including Discord action/component guidance) injected into system prompts.
+- **Expanded Discord message actions**: Added `react`, `quote-reply`, `edit`, `delete`, `pin`, `unpin`, `thread-create`, and `thread-reply` actions to the `message` tool path.
+- **Message-tool regression coverage**: Added focused unit coverage for action aliases, target normalization, member/channel lookup behavior, send-policy checks, and channel hint injection.
+
+### Changed
+
+- **Message-tool intent guidance**: System prompt guidance now includes explicit send/post/DM/notify triggers, send parameter guidance (`to` + message), and reply suppression token handling for tool-only sends.
+- **Action alias + target normalization**: Message action normalization now supports natural aliases (`dm`, `post`, `reply`, `respond`, `history`, `fetch`, `lookup`, `whois`) and normalizes Discord prefixes/mentions.
+- **Tool description enrichment**: `message` tool descriptions now emphasize natural-language intent phrases and enumerate current/other configured Discord channels with supported actions.
+- **Single-call DM targeting**: `send` now resolves user targets inline (IDs, mentions, usernames/display names with guild context), including fallback via `user`/`username` when no explicit channel target is passed.
+- **Discord action API flexibility**: `/api/discord/action` now accepts normalized aliases and extended send payload fields (`components`, `contextChannelId`, threading/message mutation fields).
+
+### Fixed
+
+- **Structured target-resolution errors**: Member/user lookup failures now return structured JSON errors with disambiguation candidates and actionable hints.
+- **Ambiguous target handling**: Added `resolveAmbiguous` support (`error|best`) to allow safe candidate return or best-match auto-resolution for member/user lookups.
+- **Duplicate send-reply leakage**: Gateway chat responses now strip the message-send silent reply token and normalize final user-visible success text.
+
 ## [0.2.7](https://github.com/HybridAIOne/hybridclaw/tree/v0.2.7)
 
 ### Added

package/README.md

@@ -11,17 +11,16 @@ npm install -g @hybridaione/hybridclaw
 hybridclaw onboarding
 ```
 
-Latest release: [v0.2.7](https://github.com/HybridAIOne/hybridclaw/releases/tag/v0.2.7)
+Latest release: [v0.2.8](https://github.com/HybridAIOne/hybridclaw/releases/tag/v0.2.8)
 
-## Release highlights (v0.2.7)
+## Release highlights (v0.2.8)
 
-- Private approval flow via `/approve [view|yes|session|agent|no] [approval_id]` with ephemeral responses, and DM-ready global slash registration for `/status` + `/approve`.
-- Discord command access controls now support `discord.commandMode` (`public|restricted`) plus `discord.commandAllowedUserIds` (with legacy `commandUserId` compatibility).
-- Free-mode Discord replies now apply stronger relevance gating (for example short acknowledgements/URL-only chatter are skipped, and messages mentioning other users are de-prioritized).
-- `browser_upload` now supports selector targets and automatic fallback from wrapper refs to detected `input[type="file"]` elements.
-- HybridAI status/usage context metrics now use a curated static context-window catalog (Claude/Gemini/GPT-5) with family-aware fallback matching, and runtime supports `hybridai.maxTokens` for default completion budgeting.
-- Model-usage telemetry now captures cache read/write token counters where providers expose them, and prompt-dump diagnostics include media plus allowed/blocked tool context.
-- CLI container readiness checks now resolve the package install root to avoid non-root invocation failures.
+- Discord `message` tool now supports richer actions (`send`, `read`, `member-info`, `channel-info`, `react`, `quote-reply`, `edit`, `delete`, `pin`, `unpin`, `thread-create`, `thread-reply`).
+- Send intent handling is more natural: aliases like `dm`, `post`, `reply`, `respond`, `history`, `fetch`, `lookup`, and `whois` normalize automatically.
+- Single-call DM routing is now supported for user targets (`user`/`username`, `@mentions`, IDs), including inline resolution when no explicit `channelId` is provided.
+- Message-tool descriptions now include intent phrases and enumerate configured channels so isolated/cron runs can discover available Discord targets.
+- Discord send governance gained runtime allowlist controls via `discord.sendPolicy` plus channel/guild/user/role checks.
+- Lookup failures now return structured errors with disambiguation candidates and optional `resolveAmbiguous=best` auto-pick behavior.
 
 ## HybridAI Advantage
 

package/config.example.json

@@ -19,6 +19,8 @@
     "commandAllowedUserIds": [],
     "commandUserId": "",
     "groupPolicy": "open",
+    "sendPolicy": "open",
+    "sendAllowedChannelIds": [],
     "freeResponseChannels": [],
     "textChunkLimit": 2000,
     "maxLinesPerMessage": 17,

package/container/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "hybridclaw-agent",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "hybridclaw-agent",
-      "version": "0.2.7",
+      "version": "0.2.8",
       "dependencies": {
         "@mozilla/readability": "^0.6.0",
         "agent-browser": "^0.15.1",

package/container/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hybridclaw-agent",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "type": "module",
   "scripts": {
     "build": "tsc",

package/container/src/index.ts

@@ -23,6 +23,7 @@ import {
 } from './token-usage.js';
 import {
   executeTool,
+  getMessageToolDescription,
   getPendingSideEffects,
   resetSideEffects,
   setGatewayContext,
@@ -940,6 +941,16 @@ function resolveTools(input: ContainerInput): ToolDefinition[] {
     );
     tools = tools.filter((tool) => !blocked.has(tool.function.name));
   }
+  tools = tools.map((tool) => {
+    if (tool.function.name !== 'message') return tool;
+    return {
+      ...tool,
+      function: {
+        ...tool.function,
+        description: getMessageToolDescription(input.channelId),
+      },
+    };
+  });
   // Sort alphabetically for deterministic tool ordering (request/cache stability)
   tools.sort((a, b) => a.function.name.localeCompare(b.function.name));
   return tools;
@@ -979,6 +990,7 @@ async function main(): Promise<void> {
     firstInput.gatewayBaseUrl,
     firstInput.gatewayApiToken,
     firstInput.channelId,
+    firstInput.configuredDiscordChannels,
   );
   setModelContext(
     firstInput.baseUrl,
@@ -1074,6 +1086,7 @@ async function main(): Promise<void> {
       input.gatewayBaseUrl,
       input.gatewayApiToken,
       input.channelId,
+      input.configuredDiscordChannels,
     );
     setModelContext(input.baseUrl, apiKey, input.model, input.chatbotId);
     setMediaContext(input.media);