@hybridaione/hybridclaw 0.8.2 → 0.8.4

package/CHANGELOG.md

@@ -2,6 +2,52 @@
 
 ## [Unreleased]
 
+## [0.8.4](https://github.com/HybridAIOne/hybridclaw/tree/v0.8.4)
+
+### Added
+
+- **Local plugin runtime and admin plugin visibility**: Added local plugins
+  with typed manifests, plugin tools, memory layers, prompt hooks, lifecycle
+  hooks, CLI/TUI `plugin` management commands, and a dedicated `Plugins` page
+  in the embedded admin console.
+- **Installable QMD memory plugin**: Added the repo-shipped
+  `plugins/qmd-memory` source plus maintainer docs for markdown-backed
+  retrieval and optional session-transcript export into QMD collections.
+- **In-loop context compaction guard**: Added token-budget-aware context
+  compaction with reusable guard config so long sessions can flush durable
+  memory and trim prompt context before requests exceed model budgets.
+- **Recalled memory citations**: Added citation metadata for recalled memory
+  snippets so injected context can be traced back to its originating memory.
+
+### Fixed
+
+- **Docker runtime packaging and login redirect gating**: Fixed the published
+  container image startup path by shipping `container/shared/` in the runtime
+  stage, and restricted browser login redirects to Docker deployments instead
+  of forcing them on localhost web sessions.
+- **Cloudflare-tolerant web fetch retries**: `web_fetch` can retry with a
+  bot-style user agent when the first attempt lands on a Cloudflare challenge
+  page.
+- **Model catalog sync and LM Studio metadata handling**: Synced HybridAI bot
+  models and display labels more consistently, and restored LM Studio v1
+  context-window metadata detection.
+
+## [0.8.3](https://github.com/HybridAIOne/hybridclaw/tree/v0.8.3)
+
+### Added
+
+- **Landing-page release highlights**: Added the 0.8.1 and 0.8.2 user-facing
+  updates to the docs landing page so the latest shipped changes are visible
+  from the project site.
+
+### Fixed
+
+- **Browser click fallbacks for JS-only cards**: `browser_click` can fall back
+  to visible text or CSS selectors when snapshot refs are missing, resolves a
+  likely clickable ancestor before dispatching the click, keeps provider-safe
+  tool schema metadata, and preserves backward-compatible mixed-target
+  priority of `text`, then `selector`, then `ref`.
+
 ## [0.8.2](https://github.com/HybridAIOne/hybridclaw/tree/v0.8.2)
 
 ### Added

package/README.md

@@ -7,6 +7,7 @@
 [![License](https://img.shields.io/github/license/HybridAIOne/hybridclaw)](https://github.com/HybridAIOne/hybridclaw/blob/main/LICENSE)
 [![Docs](https://img.shields.io/badge/docs-github%20pages-blue)](https://hybridaione.github.io/hybridclaw/)
 [![Powered by HybridAI](https://img.shields.io/badge/powered%20by-HybridAI-blueviolet)](https://hybridai.one)
+[![Discord](https://img.shields.io/badge/Discord-join%20chat-5865F2?logo=discord&logoColor=white)](https://discord.gg/jsVW4vJw27)
 
 <img width="540" height="511" alt="image" src="docs/hero.png" />
 
@@ -17,6 +18,9 @@ HybridClaw keeps one assistant brain across team chat, inbox, browser, and
 document workflows with shared memory, approvals, scheduling, and bundled
 skills for office docs, GitHub, Notion, Stripe, WordPress, Google Workspace,
 and Apple apps.
+Local plugins can extend the gateway with typed manifests, plugin tools,
+memory layers, prompt hooks, and lifecycle hooks, including the installable
+QMD-backed memory layer shipped in `plugins/qmd-memory`.
 
 Operators can also health-check the runtime with `hybridclaw doctor`, tune
 skill availability globally or per channel, and review adaptive skill health
@@ -94,7 +98,7 @@ hybridclaw tui
 
 # Embedded admin console
 # open http://127.0.0.1:9090/admin
-# Includes Dashboard, Sessions, Channels, Config, Models, Scheduler, MCP, Audit, Skills, and Tools
+# Includes Dashboard, Gateway, Sessions, Bindings, Models, Scheduler, MCP, Audit, Skills, Plugins, Tools, and Config
 # If WEB_API_TOKEN is unset, localhost access opens without a login prompt
 # If WEB_API_TOKEN is set, /chat, /agents, and /admin all prompt for the same token
 ```
@@ -209,6 +213,7 @@ HybridClaw creates `~/.hybridclaw/config.json` on first run and hot-reloads most
 - `sessionReset.*` controls automatic daily and idle session expiry. The default policy resets both daily and after 24 hours idle at `04:00` in the gateway host's local timezone; set `sessionReset.defaultPolicy.mode` to `none` to disable automatic resets.
 - `sessionRouting.*` controls DM continuity scope. The default `per-channel-peer` mode keeps direct messages isolated by transport and peer identity; `per-linked-identity` plus `sessionRouting.identityLinks` can collapse verified aliases onto one shared main session.
 - `skills.disabled` and `skills.channelDisabled.{discord,msteams,whatsapp,email}` control global and per-channel skill availability. Use `hybridclaw skill enable|disable <name> [--channel <kind>]` or the TUI `/skill config` checklist to manage them.
+- `plugins.list[]` controls plugin overrides such as `enabled`, custom `path`, and top-level `config` values. Use `hybridclaw plugin config <plugin-id> [key] [value|--unset]` for focused edits without rewriting the full config file.
 - `adaptiveSkills.*` controls observation, inspection, amendment staging, and rollback for the self-improving skill loop. See [docs/development/adaptive-skills.md](./docs/development/adaptive-skills.md) for the operator workflow.
 - `email.pollIntervalMs` defaults to `30000` (30 seconds) and is clamped to a minimum of `1000`.
 - `ops.webApiToken` (or `WEB_API_TOKEN`) gates the built-in `/chat`, `/agents`, and `/admin` surfaces plus the admin API. When unset, localhost browser access stays open without a login prompt.
@@ -458,6 +463,9 @@ CLI runtime commands:
 - `hybridclaw skill enable <skill-name> [--channel <kind>]`, `disable`, `toggle` — Manage global and per-channel skill availability
 - `hybridclaw skill inspect <skill-name>` / `hybridclaw skill inspect --all`, `runs`, `amend`, `history` — Review adaptive skill health, observations, and amendment history
 - `hybridclaw skill install <skill> [install-id]` — Run a declared skill dependency installer
+- `hybridclaw plugin list` — Show discovered plugins, enabled state, registered tools/hooks, and load errors
+- `hybridclaw plugin config <plugin-id> [key] [value|--unset]` — Inspect or change one top-level `plugins.list[].config` override
+- `hybridclaw plugin install <path|npm-spec>`, `reinstall`, `uninstall` — Manage plugins installed under `~/.hybridclaw/plugins`
 - `hybridclaw update [status|--check] [--yes]` — Check for updates and upgrade global npm installs (source checkouts get git-based update instructions)
 - `hybridclaw audit ...` — Verify and inspect structured audit trail (`recent`, `search`, `approvals`, `verify`, `instructions`)
 - `hybridclaw audit instructions [--sync]` — Compare runtime instruction copies under `~/.hybridclaw/instructions/` against installed sources and restore shipped defaults when needed
@@ -499,7 +507,8 @@ Up/Down on an empty prompt recalls earlier prompts. Use `/agent`, `/agent list`,
 the agent/default model chain, and `/model info` to inspect the active scope.
 `/status` shows both the current session and agent; `/compact` handles session
 compaction; `/reset` runs the confirmed workspace reset flow; `/skill config`
-opens the interactive skill availability checklist; and `/mcp ...` manages
-runtime MCP servers. When a TUI session exits, HybridClaw prints the
+opens the interactive skill availability checklist; `/plugin list`,
+`/plugin config ...`, and `/plugin reload` manage runtime plugins; and
+`/mcp ...` manages runtime MCP servers. When a TUI session exits, HybridClaw prints the
 input/output token split, tool/file totals, and a ready-to-run
 `hybridclaw tui --resume <sessionId>` command for that session.

package/config.example.json

@@ -1,5 +1,5 @@
 {
-  "version": 16,
+  "version": 17,
   "security": {
     "trustModelAccepted": false,
     "trustModelAcceptedAt": "",
@@ -345,6 +345,13 @@
       "enabled": true,
       "maxMessages": 80,
       "maxChars": 24000
+    },
+    "inLoopGuard": {
+      "enabled": true,
+      "perResultShare": 0.5,
+      "compactionRatio": 0.75,
+      "overflowRatio": 0.9,
+      "maxRetries": 3
     }
   },
   "promptHooks": {