HybridClaw v0.17.0

Release Date: May 12, 2026

The media, search, and federation release — native image/video generation, new business and research skills, Threema outbound delivery, Camofox browser automation, A2A inbound trust surfaces, and a cleaner admin/docs foundation for the next wave of coworker workflows.

---

Highlights

• Native media generation — Added image_generate and video_generate with provider adapters, managed artifact persistence, reference-media validation, usage metering, and bundled image/video generation skills.
• New business and research skills — Added Airtable, FastBill, Firecrawl, HeyGen, Google Ads, and SearXNG-backed search workflows covering records, invoices, crawl/extract, avatar video, ads operations, and sovereign search.
• A2A federation advances — Added JSON-RPC Agent Card inbound delivery, signed delegation bearer tokens, public-key trust ledger support, and admin trust visibility for paired peer instances.

Changed

• Browser automation options — Added Camofox provider support and narrowed browser credential fills through SecretRef-gated injection.
• Admin console and usage surfaces — Moved admin pages toward a shared card primitive, improved usage rollup loading/metrics, added live transport toasts, and rebuilt slash-command suggestions for better keyboard and accessibility behavior.
• Test and release infrastructure — Consolidated Vitest into project-based config and tightened npm supply-chain and release-publish tooling around Node 22/npm 11.

Fixed

• A2A delegation cleanup — Expired delegation-token revocation records are pruned when new revocations are written.
• Runtime and console correctness — Blocked skills surface clearly, context-ring usage reads from the correct source, auxiliary max-token limits are honored, and IME composition no longer trips composer shortcuts.
• Media path safety — Host paths that only share a display prefix are no longer remapped as sandbox media paths.

Contributors

Core

• @furukama — release coordination, documentation, federation, skills, media generation, browser, admin console, policy, and CI/release work
• @maxnoller — admin console card migration, usage rollup redesign, live transport toasts, slash-command suggestions, IME handling, Vite proxying, test config consolidation, and Linux desktop packaging
• @snoller — console skill ZIP overwrite support with explicit --force handling
• @neotea — media-path security fix for host paths that share a display prefix

All Contributors

@furukama, @maxnoller, @snoller, @neotea

---

Full Changelog: v0.16.0...v0.17.0