HydeClaw v0.30.0

HydeClaw v0.30.0

A large feature release centered on autonomous goals, durable resumption, and a broad security-hardening pass. (Released under the old name HydeClaw; the project was renamed to OPEX in v0.31.0.)

Autonomous goals (/goal)

• Goal driver loop — /goal and /subgoal slash commands start a background driver that runs a turn, delivers the result, asks an LLM judge whether to continue, and decides the next step (GoalDriverPool, session_goals table, verdict/command parsers).
• Per-session serialization — user turns are serialized against the goal driver via a per-session lock, so a live message never races the autonomous loop.
• Cron-driven goals — autonomous_goal is reachable through the agent cron tool (create/update/run_once) with durable channel delivery.

Durable resumption (Phase 1)

• Re-drive of crashed goals — a startup resumer re-drives autonomous cron goals that crashed between turns, backed by an atomic claim_redrive primitive and a redrivable-goal query.
• Interrupted-verify guard — blocks blind re-runs of non-idempotent work after an interruption.
• Owner notifications — owners are notified (via channel push) of interrupted interactive /goal runs.

Security hardening

• Domain blocklist — [security] blocked_domains config + a glob url_policy matcher, enforced on browser_action, web_fetch, and URL args of YAML tools (browser / screenshot_web).
• Code-execution scanning — pre-exec scan of code_exec (block on host, warn in sandbox) plus non-blocking dangerous-code warnings on workspace_write/workspace_edit.
• Prompt-injection blocking — high-severity injection patterns in SOUL.md/IDENTITY.md system-prompt files are now blocked (not just logged); patterns tagged with severity and expanded to cover C2 / exfiltration / persistence.

Channels & voice

• Per-chat voice mode — /voice on|off|status (DB-backed, channel_voice_modes); when on, every reply is also sent as a voice message.
• Richer browser automation — browser_action gains scroll / hover / drag / back / press and JS-dialog handling, with a testable dispatch extraction.
• In-session todo tool — session_todos table + an Active TODO block injected into the system prompt each turn (survives compaction).
• /compact surfaced in the chat slash-menu autocomplete.

Providers & media

• Web search — search_web via toolgate /v1/search with a live active-provider list; new websearch capability with searxng / ollama / brave plugins; SearXNG replaced by Ollama Cloud web search.
• New media providers — vendored Silero TTS (with EN→Cyrillic transliteration), Xiaomi MiMo (TTS/STT/Vision), and OpenRouter STT (Whisper / GPT-4o-transcribe).
• gemini-cloudcode provider (feature-gated) — full LlmProvider impl with Google OAuth routes, streaming delta synthesis, and integration tests.

UI & infrastructure

• Provider capability groups + web-search + priority editor; adoption of the Field/EmptyState/neu-card design system with a11y badges; an i18n pass and mobile UX polish (shortcuts, swipe, lightbox, shiki tool output).
• Startup sweep that deletes orphaned tool-result rows; MetricsRegistry counters for re-drive / interactive-notify events.

---

Full changelog: git log v0.29.0..v0.30.0