hybridclaw

Operator workflows

- Install from npm, source, or the multi-arch Nix flake; a preview Homebrew formula is available for --HEAD builds while stable tap publication is prepared. - hybridclaw gateway status reports sandbox/runtime details, and in container mode it includes the configured image name plus the resolved version and short image id. - hybridclaw backup creates a WAL-safe archive of the runtime home, and hybridclaw backup restore <archive.zip> validates the archive before replacing local runtime state. - hybridclaw update --yes upgrades a global npm install and auto-restarts a running local gateway with its original launch parameters when possible, falling back to hybridclaw gateway restart if not. - /admin/agents edits allowlisted bootstrap markdown files such as AGENTS.md, keeps saved revisions, and restores earlier versions from the browser. - /admin/statistics reports message, session, token, cost, and channel trends across a selected date range. - The Usage rollup surfaces loading skeletons, cost metrics, and per-model spend summaries without scanning every stored session on page load. - /admin/agent-scoreboard ranks agents by observed skill scores, reliability, timing, best skills, and CV links. - hybridclaw agent config accepts generated JSON payloads to upsert agent metadata, write bootstrap markdown, import profile images into the agent workspace, and optionally activate the agent. - /admin/channels edits transport config, encrypted channel credentials, Signal QR linking, Twilio voice settings, and per-channel instructions that are injected into prompts at runtime. - slack_webhook targets provide outbound-only Slack Incoming Webhook delivery with encrypted webhook URLs, named destinations, Block Kit text chunking, reachability status, and POST-only network policy grants. - discord_webhook targets provide outbound-only Discord Incoming Webhook delivery with encrypted webhook URLs, named destinations, message chunking, reachability status, and POST-only network policy grants. - /admin/approvals manages approval policies from the browser. - Approval policy evaluation runs through a hook-fed rule pipeline, so workspace policy ordering and plugin tool-use hooks share one approval path. - /admin/a2a-inbox shows read-only A2A message threads across the instance, with sender, recipient, timestamp, intent, and content for each message. - /admin/a2a-trust shows the local A2A public-key trust ledger for paired peer instances. - /admin/gateway reloads runtime config and refreshes secrets from the browser, and shows public URL plus tunnel status, without tearing down the enclosing workspace container; keep hybridclaw gateway restart for local/manual full restarts. - /context and the web chat context ring show current context-window usage, remaining headroom, and compaction counts for the active session. - /goal stores a standing completion condition for the current thread and queues supervised continuations until the goal is judged complete, paused, cleared, interrupted, or blocked by approval policy. - proactive.delegation.model can pin delegated work to a different model from the parent turn; /status shows delegate token totals and local-token share when that split is configured. - deployment.mode, deployment.public_url, deployment.tunnel.provider, and deployment.tunnel.health_check_interval_ms describe local/cloud exposure and tunnel health cadence. The built-in ngrok, Tailscale Funnel, and Cloudflare Tunnel providers read NGROK_AUTHTOKEN, TS_AUTHKEY, CLOUDFLARE_TUNNEL_TOKEN, and Cloudflare certificate credentials from the encrypted runtime secret store. - container.warmPool keeps a bounded adaptive pool of idle host/container runtimes for recently active agents when low cold-start latency matters. - container.persistBashState controls whether bash tool calls share shell state (cd, exported env vars, aliases) across turns in the same active runtime session; /admin/config exposes the same setting as Persistent bash state. - security.confidentialRedactionEnabled controls whether optional .confidential.yml rules redact prompts and block matching outbound text; /admin/config exposes the same setting as Confidential leak guard. - hybridclaw audit scan-leaks scans historical audit logs against optional .confidential.yml rules for NDA-class client, project, person, keyword, and regex matches. - Generated artifacts remain downloadable and attachable even when the sandbox exposes a custom workspace display root such as /app. - hybridclaw tui includes live delegate progress, pulsing tool rows, completion checkmarks, rendered Markdown tables, a keyboard-driven approval picker, and a ready-to-run hybridclaw tui --resume <sessionId> command on exit. Pressing Esc stops the active run and returns control to the prompt. - hybridclaw doctor checks runtime health including resource hygiene maintenance for stale gateway artifacts. hybridclaw doctor browser-use checks the local Playwright browser automation substrate and can install missing Chromium support with --fix. - hybridclaw onboarding and related local setup flows can restore the last known-good saved config snapshot or roll back to a tracked revision when config.json becomes invalid. - hybridclaw skill import supports community sources, local directories, and .zip archives. - hybridclaw skill install <source>, skill upgrade, skill revisions, and skill rollback manage packaged business skills with manifests, audit events, and snapshots. - hybridclaw skill list blocked and hybridclaw skill unblock <name> let local operators review scanner-blocked skills and record a bypass marker for the installed copy when the finding has been accepted. - The bundled tutorials cover owner, GTM, marketing, sales, DevRel, content, invoicing, webinar, and release-launch workflows that can run from the TUI, web chat, or connected channels. - hybridclaw eval hybridai-skills turns the bundled skills pages' "Try it yourself" prompts into a local eval suite, and live summaries surface the observed skill, artifact presence, and counted tool-call totals. - Channel delivery stays predictable: email seeds its first mailbox cursor from the current head instead of replaying old inbox mail, retry-aware transports honor server Retry-After backoff, expected transient Discord/Email/WhatsApp transport outages stay local with rate-limited logging, and WhatsApp startup avoids intermittent init-query bad-request failures.

Built for real workflows

• channels
• versioned agent workspace prompt files with saved revisions and restore
• browser sessions
• office docs
• skills / plugins / MCP
• persistent workspaces

How HybridClaw compares