@openclaw/buzz 2026.10.2 → 2026.10.5-beta.2

package/dist/.setup/{adapter.runtime-DE9Zjy2H.mjs → adapter.runtime-Diltpvcm.mjs}

@@ -1,6 +1,6 @@
 import { m as parseBuzzTarget, n as decodeBuzzPrivateKey, o as resolveBuzzPublicKey, u as buildBuzzTarget } from "./types-DRUZMyTx.mjs";
-import { c as openBuzzRelaySubscription, i as parseBuzzRoomMembershipEvent, l as queryBuzzRelaySnapshot, m as isNewerBuzzRevision, o as connectAuthenticatedBuzzRelaySession, s as parseBuzzAuthTag, t as BUZZ_ROOM_MEMBERSHIP_KIND } from "./room-membership-CDDvS9rG.mjs";
-import { i as buildBuzzMessageTags, s as parseBuzzMessageEvent } from "./message-event-X_aBiM1X.mjs";
+import { c as openBuzzRelaySubscription, i as parseBuzzRoomMembershipEvent, l as queryBuzzRelaySnapshot, m as isNewerBuzzRevision, o as connectAuthenticatedBuzzRelaySession, s as parseBuzzAuthTag, t as BUZZ_ROOM_MEMBERSHIP_KIND } from "./room-membership-F-VBtTXf.mjs";
+import { i as buildBuzzMessageTags, s as parseBuzzMessageEvent } from "./message-event-Do0ixXJ6.mjs";
 import { z } from "zod";
 import { finalizeEvent } from "nostr-tools";
 import { isLoopbackHost } from "openclaw/plugin-sdk/ssrf-runtime";
@@ -10,12 +10,8 @@ import fs from "node:fs/promises";
 import path from "node:path";
 //#region extensions/buzz/src/qa/credentials.ts
 function isSafeBuzzQaRelayUrl(value) {
-	try {
-		const relayUrl = new URL(value);
-		return relayUrl.protocol === "wss:" || relayUrl.protocol === "ws:" && isLoopbackHost(relayUrl.hostname);
-	} catch {
-		return false;
-	}
+	const relayUrl = URL.parse(value);
+	return relayUrl?.protocol === "wss:" || relayUrl?.protocol === "ws:" && isLoopbackHost(relayUrl.hostname);
 }
 const buzzQaCredentialPayloadSchema = z.object({
 	relayUrl: z.string().url().refine(isSafeBuzzQaRelayUrl),

package/dist/.setup/{channel-BbJ5DvVO.mjs → channel-Ba25iqfd.mjs}

@@ -1,14 +1,14 @@
 import { a as resolveBuzzAccountConfig, c as BuzzConfigSchema, d as isConfiguredBuzzChannel, f as looksLikeBuzzTarget, i as resolveBuzzAccount, m as parseBuzzTarget, n as decodeBuzzPrivateKey, o as resolveBuzzPublicKey, p as normalizeBuzzTarget, r as listBuzzAccountIds, s as resolveDefaultBuzzAccountId, t as assertBuzzAccountAvailable, u as buildBuzzTarget } from "./types-DRUZMyTx.mjs";
 import { n as listBuzzDirectoryPeersFromConfig, t as listBuzzDirectoryGroupsFromConfig } from "./directory-config-M9KSexdh.mjs";
-import { a as connectAuthenticatedBuzzRelay, c as openBuzzRelaySubscription, d as resolveBuzzSubscriptionBudget, f as BUZZ_ROOM_METADATA_KIND, i as parseBuzzRoomMembershipEvent, l as queryBuzzRelaySnapshot, m as isNewerBuzzRevision, n as BUZZ_ROOM_SYSTEM_KIND, o as connectAuthenticatedBuzzRelaySession, p as BuzzDirectoryState, r as parseBuzzRoomMembershipChangeEvent, s as parseBuzzAuthTag, t as BUZZ_ROOM_MEMBERSHIP_KIND, u as BUZZ_MAX_CONFIGURED_ROOMS } from "./room-membership-CDDvS9rG.mjs";
-import { a as formatBuzzMessageForAgent, c as inspectBuzzMentionSyntax, i as buildBuzzMessageTags, l as resolveBuzzMessageMentions, n as BUZZ_INBOUND_MESSAGE_KINDS, o as isBuzzInboundMessageKind, r as BUZZ_TYPING_INDICATOR_KIND, s as parseBuzzMessageEvent, t as BUZZ_DIFF_MESSAGE_KIND } from "./message-event-X_aBiM1X.mjs";
-import { i as startBuzzRoomMembershipNotifications, n as buzzSetupContract, r as discoverBuzzRooms, t as buzzSetupWizard } from "./setup-surface-D3hfsPy6.mjs";
+import { a as connectAuthenticatedBuzzRelay, c as openBuzzRelaySubscription, d as resolveBuzzSubscriptionBudget, f as BUZZ_ROOM_METADATA_KIND, i as parseBuzzRoomMembershipEvent, l as queryBuzzRelaySnapshot, m as isNewerBuzzRevision, n as BUZZ_ROOM_SYSTEM_KIND, o as connectAuthenticatedBuzzRelaySession, p as BuzzDirectoryState, r as parseBuzzRoomMembershipChangeEvent, s as parseBuzzAuthTag, t as BUZZ_ROOM_MEMBERSHIP_KIND, u as BUZZ_MAX_CONFIGURED_ROOMS } from "./room-membership-F-VBtTXf.mjs";
+import { a as formatBuzzMessageForAgent, c as inspectBuzzMentionSyntax, i as buildBuzzMessageTags, l as resolveBuzzMessageMentions, n as BUZZ_INBOUND_MESSAGE_KINDS, o as isBuzzInboundMessageKind, r as BUZZ_TYPING_INDICATOR_KIND, s as parseBuzzMessageEvent, t as BUZZ_DIFF_MESSAGE_KIND } from "./message-event-Do0ixXJ6.mjs";
+import { i as startBuzzRoomMembershipNotifications, n as buzzSetupContract, r as discoverBuzzRooms, t as buzzSetupWizard } from "./setup-surface-CtPEPYrT.mjs";
 import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-B2-Mrm4v.mjs";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { buildChannelOutboundSessionRoute, buildThreadAwareOutboundSessionRoute, createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
 import { createChannelMessageAdapterFromOutbound, waitUntilAbort } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelDirectoryAdapter } from "openclaw/plugin-sdk/directory-runtime";
-import { parseThreadSessionSuffix } from "openclaw/plugin-sdk/routing";
+import { parseThreadSessionSuffix, resolveAgentRoute } from "openclaw/plugin-sdk/routing";
 import { createComputedAccountStatusAdapter, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
 import { compareEvents, finalizeEvent, verifyEvent } from "nostr-tools";
 import { asNonArrayRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -18,11 +18,12 @@ import { attachChannelToResult } from "openclaw/plugin-sdk/channel-send-result";
 import { createDeferred } from "openclaw/plugin-sdk/extension-shared";
 import { channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
 import { computeBackoff, sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
+import { captureEffectAuthority } from "openclaw/plugin-sdk/fetch-runtime";
 import { createChannelReplayGuard } from "openclaw/plugin-sdk/persistent-dedupe";
 import { createDeferred as createDeferred$1 } from "openclaw/plugin-sdk/concurrency-runtime";
 import { createAsyncLock } from "openclaw/plugin-sdk/async-lock-runtime";
 import { normalizeURL } from "nostr-tools/utils";
-import { buildChannelInboundEventContext, logInboundDrop, recordDroppedChannelInboundHistory, resolveChannelInboundRouteEnvelope } from "openclaw/plugin-sdk/channel-inbound";
+import { buildChannelInboundEventContext, createChannelInboundEnvelopeBuilderAsync, logInboundDrop, recordDroppedChannelInboundHistory } from "openclaw/plugin-sdk/channel-inbound";
 import { createSubsystemLogger } from "openclaw/plugin-sdk/logging-core";
 import { buildHistoryContext, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
@@ -63,7 +64,6 @@ async function queryBuzzDirectoryProfiles(params) {
 		onEvent: (event) => {
 			params.state.applyProfileEvent(event);
 		},
-		onTimeout: params.onTimeout,
 		signal: params.signal
 	});
 }
@@ -238,10 +238,21 @@ function hasConfiguredAuthTag(event, authTag) {
 	const authTags = event?.tags.filter((tag) => tag[0] === "auth") ?? [];
 	return authTags.length === 1 && JSON.stringify(authTags[0]) === JSON.stringify(authTag);
 }
-async function queryCurrentProfiles(params) {
+function buildProfileEvent(params) {
+	const now = Math.floor(Date.now() / 1e3);
+	return finalizeEvent({
+		kind: params.kind,
+		content: JSON.stringify(params.content),
+		created_at: params.current ? Math.max(now, params.current.created_at + 1) : now,
+		tags: params.tags
+	}, params.secretKey);
+}
+async function syncBuzzProfile(params) {
+	const displayName = params.displayName.trim();
+	if (!displayName) return;
 	params.signal?.throwIfAborted();
-	const latestByKind = /* @__PURE__ */ new Map();
-	return await queryBuzzRelaySnapshot({
+	const currentProfiles = /* @__PURE__ */ new Map();
+	await queryBuzzRelaySnapshot({
 		relay: params.relay,
 		filters: [{
 			kinds: [PROFILE_KIND],
@@ -259,27 +270,10 @@ async function queryCurrentProfiles(params) {
 		closeReason: "profile query complete",
 		closeMessage: (reason) => `Buzz profile query closed: ${reason}`,
 		onEvent: (event) => {
-			const current = latestByKind.get(event.kind);
-			if (!current || compareEvents(event, current) < 0) latestByKind.set(event.kind, event);
+			const current = currentProfiles.get(event.kind);
+			if (!current || compareEvents(event, current) < 0) currentProfiles.set(event.kind, event);
 		},
-		result: () => latestByKind,
-		onTimeout: params.onTimeout
-	});
-}
-function buildProfileEvent(params) {
-	const now = Math.floor(Date.now() / 1e3);
-	return finalizeEvent({
-		kind: params.kind,
-		content: JSON.stringify(params.content),
-		created_at: params.current ? Math.max(now, params.current.created_at + 1) : now,
-		tags: params.tags
-	}, params.secretKey);
-}
-async function syncBuzzProfile(params) {
-	const displayName = params.displayName.trim();
-	if (!displayName) return { status: "unchanged" };
-	const currentProfiles = await queryCurrentProfiles({
-		...params,
+		result: () => currentProfiles,
 		onTimeout: params.onFatalError
 	});
 	params.signal?.throwIfAborted();
@@ -320,16 +314,13 @@ async function syncBuzzProfile(params) {
 		secretKey: params.secretKey
 	}));
 	const lastEvent = events.at(-1);
-	if (!lastEvent) return { status: "unchanged" };
+	if (!lastEvent) return;
 	for (const event of events) {
 		params.signal?.throwIfAborted();
 		await params.relay.publish(event);
 	}
 	params.signal?.throwIfAborted();
-	return {
-		status: "published",
-		eventId: lastEvent.id
-	};
+	return lastEvent.id;
 }
 //#endregion
 //#region extensions/buzz/src/replay-dispatch.ts
@@ -973,6 +964,7 @@ function buildBuzzTextEvent(params) {
 	}, params.secretKey);
 }
 async function sendBuzzTextOneShot(params) {
+	const effect = captureEffectAuthority();
 	const secretKey = decodeBuzzPrivateKey(params.privateKey);
 	const mentionSyntax = inspectBuzzMentionSyntax(params.text);
 	const needsDirectory = mentionSyntax.hasAtMention || mentionSyntax.hasExplicitIdentity;
@@ -1019,7 +1011,10 @@ async function sendBuzzTextOneShot(params) {
 			secretKey,
 			mentionedPubkeys
 		});
-		await relay.publish(event);
+		await effect.initiate(() => {
+			signal?.throwIfAborted();
+			return relay.publish(event);
+		});
 		return event.id;
 	} finally {
 		relay.close();
@@ -1125,6 +1120,7 @@ async function startBuzzBus(options) {
 			return root?.channelId === channelId && root.isBotOwned;
 		},
 		sendText: async ({ channelId, text, threadId, replyToId }) => {
+			const effect = captureEffectAuthority();
 			signal.throwIfAborted();
 			const mentionSyntax = inspectBuzzMentionSyntax(text);
 			const mentionedPubkeys = mentionSyntax.hasAtMention || mentionSyntax.hasExplicitIdentity ? resolveBuzzMessageMentions({
@@ -1140,7 +1136,10 @@ async function startBuzzBus(options) {
 				replyToId,
 				mentionedPubkeys
 			});
-			await relay.publish(event);
+			await effect.initiate(() => {
+				signal.throwIfAborted();
+				return relay.publish(event);
+			});
 			rememberThreadRoot(event);
 			return event.id;
 		},
@@ -1156,7 +1155,10 @@ async function startBuzzBus(options) {
 					replyToId
 				})
 			}, secretKey);
-			await relay.send(JSON.stringify(["EVENT", event]));
+			await captureEffectAuthority().initiate(() => {
+				signal.throwIfAborted();
+				return relay.send(JSON.stringify(["EVENT", event]));
+			});
 		},
 		close: async () => {
 			lifecycleAbort.abort(/* @__PURE__ */ new Error("Buzz bus closed"));
@@ -1282,8 +1284,8 @@ async function startBuzzBus(options) {
 			authTag,
 			onFatalError: reportFatalError,
 			signal
-		}).then((result) => {
-			if (!signal.aborted && result.status === "published") options.onProfilePublished?.(result.eventId);
+		}).then((eventId) => {
+			if (!signal.aborted && eventId !== void 0) options.onProfilePublished?.(eventId);
 		}).catch((error) => {
 			if (signal.aborted) return;
 			options.onProfileError?.(error instanceof Error ? error : new Error("Buzz profile sync failed", { cause: error }));
@@ -1386,7 +1388,7 @@ async function handleBuzzInbound(params) {
 	const channelId = parseBuzzTarget(message.channelId);
 	const target = buildBuzzTarget(channelId);
 	const textForAgent = formatBuzzMessageForAgent(message);
-	const { route, buildEnvelope } = resolveChannelInboundRouteEnvelope({
+	const route = resolveAgentRoute({
 		cfg,
 		channel: "buzz",
 		accountId: account.accountId,
@@ -1482,7 +1484,10 @@ async function handleBuzzInbound(params) {
 	});
 	const senderName = bus.directory.resolveSenderName(message.senderPubkey);
 	const roomName = bus.directory.resolveRoomName(channelId);
-	const body = buildEnvelope({
+	const body = (await createChannelInboundEnvelopeBuilderAsync({
+		cfg,
+		route
+	}))({
 		channel: "Buzz",
 		from: senderName,
 		timestamp: /* @__PURE__ */ new Date(message.createdAt * 1e3),

package/dist/.setup/{message-event-X_aBiM1X.mjs → message-event-Do0ixXJ6.mjs}

@@ -3,8 +3,6 @@ import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { Buffer } from "node:buffer";
 const BUZZ_AMBIGUITY_CANDIDATE_LIMIT = 5;
 const HEX_PUBLIC_KEY_PATTERN$1 = /^[0-9a-f]{64}$/u;
-const NIP_27_PREFIX = "nostr:npub1";
-const NPUB_LENGTH = 63;
 function asciiLowercase(value) {
 	return value.replace(/[A-Z]/gu, (character) => character.toLowerCase());
 }
@@ -58,31 +56,18 @@ function stripCodeRegions(content) {
 	return output;
 }
 function extractNostrPubkeys(content) {
-	const publicKeys = [];
-	const seen = /* @__PURE__ */ new Set();
-	let searchFrom = 0;
-	while (searchFrom < content.length) {
-		const start = content.indexOf(NIP_27_PREFIX, searchFrom);
-		if (start === -1) break;
-		const npubStart = start + 6;
-		const candidate = content.slice(npubStart, npubStart + NPUB_LENGTH);
-		searchFrom = start + 11;
-		if (candidate.length !== NPUB_LENGTH || !/^[0-9a-z]+$/iu.test(candidate)) continue;
-		try {
-			const decoded = nip19.decode(asciiLowercase(candidate));
-			if (decoded.type !== "npub" || typeof decoded.data !== "string") continue;
-			const publicKey = decoded.data.toLowerCase();
-			if (HEX_PUBLIC_KEY_PATTERN$1.test(publicKey) && !seen.has(publicKey)) {
-				seen.add(publicKey);
-				publicKeys.push(publicKey);
-			}
-		} catch {}
-	}
-	return publicKeys;
+	const publicKeys = /* @__PURE__ */ new Set();
+	for (const match of content.matchAll(/nostr:npub1[0-9a-zA-Z]{58}/gu)) try {
+		const decoded = nip19.decode(asciiLowercase(match[0].slice(6)));
+		if (decoded.type !== "npub" || typeof decoded.data !== "string") continue;
+		const publicKey = decoded.data.toLowerCase();
+		if (HEX_PUBLIC_KEY_PATTERN$1.test(publicKey)) publicKeys.add(publicKey);
+	} catch {}
+	return [...publicKeys];
 }
 function extractMentionNames(content, knownNames) {
 	if (!content.includes("@")) return [];
-	const sortedNames = knownNames.map((name) => name.trim()).filter(Boolean).toSorted((left, right) => right.length - left.length);
+	const sortedNames = knownNames.toSorted((left, right) => right.length - left.length);
 	const names = [];
 	const seen = /* @__PURE__ */ new Set();
 	for (let index = 0; index < content.length; index += 1) {
@@ -103,8 +88,7 @@ function extractMentionNames(content, knownNames) {
 	return names;
 }
 function hasAtMentionCandidate(content) {
-	for (let index = 0; index < content.length; index += 1) if (content[index] === "@" && (index === 0 || isAsciiWhitespace(content[index - 1])) && index + 1 < content.length && !isAsciiWhitespace(content[index + 1])) return true;
-	return false;
+	return /(?:^|[\t-\r ])@[^\t-\r ]/u.test(content);
 }
 function normalizeMembers(members) {
 	const normalized = /* @__PURE__ */ new Map();
@@ -128,12 +112,12 @@ function inspectBuzzMentionSyntax(text) {
 function resolveBuzzMessageMentions(params) {
 	const stripped = stripCodeRegions(params.text);
 	const explicitPublicKeys = extractNostrPubkeys(stripped);
-	if (!(hasAtMentionCandidate(stripped) || explicitPublicKeys.length > 0)) return [];
+	const hasAtMention = hasAtMentionCandidate(stripped);
+	if (!hasAtMention && explicitPublicKeys.length === 0) return [];
 	if (!params.members) throw new Error("Buzz room membership is unavailable; retry after the room directory loads");
 	const members = normalizeMembers(params.members);
 	const senderPublicKey = params.senderPublicKey.trim().toLowerCase();
-	const mentions = [];
-	for (const publicKey of explicitPublicKeys) if (publicKey !== senderPublicKey && !mentions.includes(publicKey)) mentions.push(publicKey);
+	const mentions = explicitPublicKeys.filter((publicKey) => publicKey !== senderPublicKey);
 	if (mentions.length > 50) throw new Error(`Buzz messages support at most 50 mentions`);
 	const missingPublicKeys = mentions.filter((publicKey) => !members.has(publicKey));
 	if (missingPublicKeys.length > 0) throw new Error(`Buzz mentioned public key is not a current room member: ${missingPublicKeys.join(", ")}`);
@@ -145,8 +129,8 @@ function resolveBuzzMessageMentions(params) {
 		matches.push(member.publicKey);
 		namesToPublicKeys.set(name, matches);
 	}
-	const names = extractMentionNames(stripped, [...members.values()].map((member) => member.displayName).filter((name) => Boolean(name)));
-	if (hasAtMentionCandidate(stripped) && names.length === 0 && explicitPublicKeys.length === 0) throw new Error("Buzz mention does not match a current room member; use nostr:npub... for an explicit identity");
+	const names = extractMentionNames(stripped, [...namesToPublicKeys.keys()]);
+	if (hasAtMention && names.length === 0 && explicitPublicKeys.length === 0) throw new Error("Buzz mention does not match a current room member; use nostr:npub... for an explicit identity");
 	for (const name of names) {
 		const matches = namesToPublicKeys.get(name) ?? [];
 		if (matches.length === 0) {
@@ -160,9 +144,7 @@ function resolveBuzzMessageMentions(params) {
 			const candidateSuffix = hiddenCandidateCount > 0 ? `, and ${hiddenCandidateCount} more` : "";
 			throw new Error(`Buzz mention "@${name}" is ambiguous; candidates: ${visibleCandidates}${candidateSuffix}. Use nostr:npub... for an explicit identity`);
 		}
-		const publicKey = matches[0];
-		if (!publicKey) throw new Error("Buzz mention resolution lost its unique room member");
-		if (publicKey !== senderPublicKey && !mentions.includes(publicKey)) {
+		for (const publicKey of matches) if (publicKey !== senderPublicKey && !mentions.includes(publicKey)) {
 			if (mentions.length >= 50) throw new Error(`Buzz messages support at most 50 mentions`);
 			mentions.push(publicKey);
 		}
@@ -187,16 +169,12 @@ const BUZZ_INBOUND_MESSAGE_KIND_SET = new Set(BUZZ_INBOUND_MESSAGE_KINDS);
 function isBuzzInboundMessageKind(kind) {
 	return BUZZ_INBOUND_MESSAGE_KIND_SET.has(kind);
 }
-function tagValue(event, name) {
-	const value = event.tags.find((tag) => tag[0] === name)?.[1]?.trim();
-	return value ? value : void 0;
-}
 function markerTagValue(event, marker) {
 	const value = event.tags.find((tag) => tag[0] === "e" && tag[3] === marker)?.[1]?.trim();
 	return value ? value : void 0;
 }
-function isHexAtLeast(value, minimumLength) {
-	return value.length >= minimumLength && /^[a-f0-9]+$/iu.test(value);
+function isCommitSha(value) {
+	return value.length >= 7 && /^[a-f0-9]+$/iu.test(value);
 }
 function parseBuzzDiffMetadata(event) {
 	let repoUrl;
@@ -220,14 +198,14 @@ function parseBuzzDiffMetadata(event) {
 				repoUrl ??= value;
 				break;
 			case "commit":
-				if (!isHexAtLeast(value, 7)) return null;
+				if (!isCommitSha(value)) return null;
 				commitSha ??= value;
 				break;
 			case "file":
 				filePath ??= value;
 				break;
 			case "parent-commit":
-				if (!isHexAtLeast(value, 7)) return null;
+				if (!isCommitSha(value)) return null;
 				parentCommitSha ??= value;
 				break;
 			case "branch":
@@ -302,7 +280,7 @@ function formatBuzzMessageForAgent(message) {
 }
 function parseBuzzMessageEvent(event) {
 	if (!isBuzzInboundMessageKind(event.kind) || !event.content.trim() || Buffer.byteLength(event.content, "utf8") > (event.kind === 40008 ? BUZZ_DIFF_CONTENT_MAX_BYTES : BUZZ_MESSAGE_CONTENT_MAX_BYTES)) return null;
-	const channelId = tagValue(event, "h");
+	const channelId = event.tags.find((tag) => tag[0] === "h")?.[1]?.trim();
 	if (!channelId) return null;
 	const rootId = markerTagValue(event, "root");
 	const replyToId = markerTagValue(event, "reply");

package/dist/.setup/{room-membership-CDDvS9rG.mjs → room-membership-F-VBtTXf.mjs}

@@ -365,12 +365,6 @@ async function waitWithSignal(promise, signal) {
 		promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
 	});
 }
-function createBuzzAuthSigner(params) {
-	return async (template) => finalizeEvent({
-		...template,
-		tags: params.authTag ? [...template.tags, params.authTag] : template.tags
-	}, params.secretKey);
-}
 function isLoopbackRelayUrl(relayUrl) {
 	const hostname = new URL(relayUrl).hostname.toLowerCase();
 	return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]";
@@ -401,10 +395,11 @@ async function resolveBuzzRelayPublicKey(params) {
 	}
 }
 async function connectAndAuthenticateBuzzRelay(params) {
-	const signAuth = createBuzzAuthSigner({
-		secretKey: params.secretKey,
-		authTag: params.authTag
-	});
+	const { secretKey, authTag } = params;
+	const signAuth = async (template) => finalizeEvent({
+		...template,
+		tags: authTag ? [...template.tags, authTag] : template.tags
+	}, secretKey);
 	await params.relay.connect({ abort: params.signal });
 	await authenticateBuzzRelay({
 		relay: params.relay,

package/dist/.setup/setup-plugin-api-DOqDYVDO.mjs

@@ -0,0 +1,2 @@
+import { t as buzzSetupPlugin } from "./setup-plugin-api-mJRSnC3g.mjs";
+export { buzzSetupPlugin };

package/dist/.setup/{setup-plugin-api-1zcpIc0A.mjs → setup-plugin-api-mJRSnC3g.mjs}

@@ -1,5 +1,5 @@
 import { c as BuzzConfigSchema, i as resolveBuzzAccount, r as listBuzzAccountIds, s as resolveDefaultBuzzAccountId } from "./types-DRUZMyTx.mjs";
-import { n as buzzSetupContract, t as buzzSetupWizard } from "./setup-surface-D3hfsPy6.mjs";
+import { n as buzzSetupContract, t as buzzSetupWizard } from "./setup-surface-CtPEPYrT.mjs";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 //#region extensions/buzz/src/channel.setup.ts
 const buzzSetupPlugin = {

package/dist/.setup/{setup-surface-D3hfsPy6.mjs → setup-surface-CtPEPYrT.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveBuzzAccountConfig, i as resolveBuzzAccount, l as BUZZ_CHANNEL_ID_PATTERN, m as parseBuzzTarget, n as decodeBuzzPrivateKey, o as resolveBuzzPublicKey, r as listBuzzAccountIds } from "./types-DRUZMyTx.mjs";
-import { c as openBuzzRelaySubscription, i as parseBuzzRoomMembershipEvent, l as queryBuzzRelaySnapshot, m as isNewerBuzzRevision, o as connectAuthenticatedBuzzRelaySession, s as parseBuzzAuthTag, t as BUZZ_ROOM_MEMBERSHIP_KIND } from "./room-membership-CDDvS9rG.mjs";
+import { c as openBuzzRelaySubscription, i as parseBuzzRoomMembershipEvent, l as queryBuzzRelaySnapshot, m as isNewerBuzzRevision, o as connectAuthenticatedBuzzRelaySession, s as parseBuzzAuthTag, t as BUZZ_ROOM_MEMBERSHIP_KIND } from "./room-membership-F-VBtTXf.mjs";
 import { generateSecretKey, nip19 } from "nostr-tools";
 import { sleep, sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
@@ -149,12 +149,8 @@ async function discoverBuzzRooms(params) {
 //#endregion
 //#region extensions/buzz/src/setup-core.ts
 function validRelayUrl(value) {
-	try {
-		const url = new URL(value ?? "");
-		return url.protocol === "ws:" || url.protocol === "wss:";
-	} catch {
-		return false;
-	}
+	const url = URL.parse(value ?? "");
+	return url?.protocol === "ws:" || url?.protocol === "wss:";
 }
 function patchBuzzAccountConfig(params) {
 	const { accountId, allowEnv } = resolveBuzzAccountConfig(params);
@@ -260,9 +256,6 @@ const DISCOVERY_RETRY_DELAYS_MS = [
 	1500
 ];
 const DISCOVERY_POLL_INTERVAL_MS = 2e3;
-function hasTag(event, name, value) {
-	return event.tags.some((tag) => tag[0] === name && tag[1] === value);
-}
 function hasValidRoomTag(event) {
 	return event.tags.some((tag) => tag[0] === "h" && Boolean(tag[1]?.toLowerCase().match(BUZZ_CHANNEL_ID_PATTERN)));
 }
@@ -354,7 +347,7 @@ async function waitForBuzzRoomAccess(params) {
 				since: Math.floor(Date.now() / 1e3) - 30
 			}], {
 				onevent: (event) => {
-					if (event.kind !== 44100 || seenEvents.has(event.id) || !hasTag(event, "p", publicKey) || !hasValidRoomTag(event)) return;
+					if (event.kind !== 44100 || seenEvents.has(event.id) || !event.tags.some((tag) => tag[0] === "p" && tag[1] === publicKey) || !hasValidRoomTag(event)) return;
 					seenEvents.add(event.id);
 					checkRooms(true);
 				},
@@ -441,12 +434,9 @@ async function verifyBuzzAfterSetup(params) {
 //#region extensions/buzz/src/setup-surface.ts
 const channel = "buzz";
 function validateRelayUrl(value) {
-	try {
-		const url = new URL(value.trim());
-		return url.protocol === "ws:" || url.protocol === "wss:" ? void 0 : "Use a ws:// or wss:// relay URL";
-	} catch {
-		return "Enter a valid Buzz relay WebSocket URL";
-	}
+	const url = URL.parse(value.trim());
+	if (!url) return "Enter a valid Buzz relay WebSocket URL";
+	return url.protocol === "ws:" || url.protocol === "wss:" ? void 0 : "Use a ws:// or wss:// relay URL";
 }
 function isRemoteInsecureRelayUrl(value) {
 	const url = new URL(value);
@@ -500,14 +490,14 @@ async function resolvePrivateKey(params) {
 		};
 	}
 	if (params.secretInputMode !== "ref") {
-		let accountKeys = params.generatedPrivateKeys.get(params.prompter);
+		let accountKeys = generatedPrivateKeys.get(params.prompter);
 		if (!accountKeys) {
 			accountKeys = /* @__PURE__ */ new Map();
-			params.generatedPrivateKeys.set(params.prompter, accountKeys);
+			generatedPrivateKeys.set(params.prompter, accountKeys);
 		}
 		let privateKey = accountKeys.get(params.accountId);
 		if (!privateKey) {
-			privateKey = nip19.nsecEncode(params.generate());
+			privateKey = nip19.nsecEncode(generateSecretKey());
 			accountKeys.set(params.accountId, privateKey);
 		}
 		return {
@@ -523,7 +513,7 @@ async function resolvePrivateKey(params) {
 			resolvedPrivateKey: privateKey
 		};
 	}
-	const secretStep = await params.runSecretStep({
+	const secretStep = await runSingleChannelSecretStep({
 		cfg: params.cfg,
 		prompter: params.prompter,
 		providerHint: channel,
@@ -596,190 +586,179 @@ async function noteBuzzAccessInstructions(params) {
 		"Never paste that human private key into OpenClaw."
 	].join("\n"), "Buzz room access required");
 }
-function createBuzzSetupWizard(dependencies = {}) {
-	const discoverRooms = dependencies.discoverRooms ?? discoverBuzzRooms;
-	const generate = dependencies.generateSecretKey ?? generateSecretKey;
-	const runSecretStep = dependencies.runSecretStep ?? runSingleChannelSecretStep;
-	const waitForRoomAccess = dependencies.waitForRoomAccess ?? waitForBuzzRoomAccess;
-	const verifyAfterWrite = dependencies.verifyAfterWrite ?? verifyBuzzAfterSetup;
-	const generatedPrivateKeys = /* @__PURE__ */ new WeakMap();
-	return {
-		channel,
-		getStatus: async ({ cfg, accountOverrides }) => {
-			const { configured, enabled } = resolveBuzzAccount({
-				cfg,
-				accountId: accountOverrides.buzz
-			});
-			const status = !configured ? "needs relay URL and bot identity" : enabled ? "configured" : "configured but disabled";
-			return {
-				channel,
-				configured,
-				statusLines: [`Buzz: ${status}`],
-				selectionHint: status
-			};
-		},
-		configure: async ({ cfg, prompter, options, accountOverrides, shouldPromptAccountIds }) => {
-			let accountId = resolveBuzzAccountConfig({
-				cfg,
-				accountId: accountOverrides.buzz
-			}).accountId;
-			if (shouldPromptAccountIds && !accountOverrides.buzz?.trim()) accountId = await promptAccountId({
-				cfg,
-				prompter,
-				label: "Buzz",
-				currentId: accountId,
-				listAccountIds: listBuzzAccountIds,
-				defaultAccountId: accountId
-			});
-			const { config: existingBuzzConfig } = resolveBuzzAccountConfig({
-				cfg,
-				accountId
-			});
-			const rootPolicy = cfg.channels?.buzz;
-			const rawAccount = rootPolicy?.accounts?.[accountId];
-			const hasExistingAccessConfig = rootPolicy?.groupPolicy !== void 0 || rootPolicy?.groupAllowFrom !== void 0 || rawAccount?.groupPolicy !== void 0 || rawAccount?.groupAllowFrom !== void 0 || existingBuzzConfig.groups !== void 0;
-			const existingAccount = resolveBuzzAccount({
-				cfg,
-				accountId
-			});
-			const useFreshAccessDefaults = !existingAccount.configured && !hasExistingAccessConfig;
-			const configuredRelayUrl = existingAccount.relayUrl;
-			const relayUrl = await resolveRelayUrl({
-				configuredValue: configuredRelayUrl,
-				prompter
-			});
-			let next = patchBuzzAccountConfig({
-				cfg,
-				accountId,
-				patch: {
-					enabled: true,
-					relayUrl
-				}
-			});
-			const identity = await resolvePrivateKey({
-				cfg: next,
-				accountId,
-				prompter,
-				secretInputMode: options?.secretInputMode,
-				generate,
-				generatedPrivateKeys,
-				runSecretStep
-			});
-			next = identity.cfg;
-			const privateKey = identity.resolvedPrivateKey;
-			const publicKey = resolveBuzzPublicKey(privateKey);
-			let discoveredRooms = [];
-			let discoveryError;
-			const authTag = await resolveSetupCredential({
-				cfg: next,
-				accountId,
-				field: "authTag"
-			});
-			const discoverAuthorizedRooms = async () => {
-				try {
-					const rooms = await discoverRooms({
-						relayUrl,
-						privateKey,
-						...authTag ? { authTag } : {}
-					});
-					discoveryError = rooms.length === 0 ? "No authorized rooms were returned for this bot." : void 0;
-					return rooms;
-				} catch (error) {
-					discoveryError = `Authenticated room discovery failed: ${error instanceof Error ? error.message : String(error)}.`;
-					return [];
-				}
-			};
-			discoveredRooms = await discoverAuthorizedRooms();
-			if (discoveredRooms.length === 0) {
-				await noteBuzzAccessInstructions({
+const generatedPrivateKeys = /* @__PURE__ */ new WeakMap();
+const buzzSetupWizard = {
+	channel,
+	getStatus: async ({ cfg, accountOverrides }) => {
+		const { configured, enabled } = resolveBuzzAccount({
+			cfg,
+			accountId: accountOverrides.buzz
+		});
+		const status = !configured ? "needs relay URL and bot identity" : enabled ? "configured" : "configured but disabled";
+		return {
+			channel,
+			configured,
+			statusLines: [`Buzz: ${status}`],
+			selectionHint: status
+		};
+	},
+	configure: async ({ cfg, prompter, options, accountOverrides, shouldPromptAccountIds }) => {
+		let accountId = resolveBuzzAccountConfig({
+			cfg,
+			accountId: accountOverrides.buzz
+		}).accountId;
+		if (shouldPromptAccountIds && !accountOverrides.buzz?.trim()) accountId = await promptAccountId({
+			cfg,
+			prompter,
+			label: "Buzz",
+			currentId: accountId,
+			listAccountIds: listBuzzAccountIds,
+			defaultAccountId: accountId
+		});
+		const { config: existingBuzzConfig } = resolveBuzzAccountConfig({
+			cfg,
+			accountId
+		});
+		const rootPolicy = cfg.channels?.buzz;
+		const rawAccount = rootPolicy?.accounts?.[accountId];
+		const hasExistingAccessConfig = rootPolicy?.groupPolicy !== void 0 || rootPolicy?.groupAllowFrom !== void 0 || rawAccount?.groupPolicy !== void 0 || rawAccount?.groupAllowFrom !== void 0 || existingBuzzConfig.groups !== void 0;
+		const existingAccount = resolveBuzzAccount({
+			cfg,
+			accountId
+		});
+		const useFreshAccessDefaults = !existingAccount.configured && !hasExistingAccessConfig;
+		const configuredRelayUrl = existingAccount.relayUrl;
+		const relayUrl = await resolveRelayUrl({
+			configuredValue: configuredRelayUrl,
+			prompter
+		});
+		let next = patchBuzzAccountConfig({
+			cfg,
+			accountId,
+			patch: {
+				enabled: true,
+				relayUrl
+			}
+		});
+		const identity = await resolvePrivateKey({
+			cfg: next,
+			accountId,
+			prompter,
+			secretInputMode: options?.secretInputMode
+		});
+		next = identity.cfg;
+		const privateKey = identity.resolvedPrivateKey;
+		const publicKey = resolveBuzzPublicKey(privateKey);
+		let discoveredRooms = [];
+		let discoveryError;
+		const authTag = await resolveSetupCredential({
+			cfg: next,
+			accountId,
+			field: "authTag"
+		});
+		const discoverAuthorizedRooms = async () => {
+			try {
+				const rooms = await discoverBuzzRooms({
 					relayUrl,
-					publicKey,
-					prompter,
-					discoveryError
+					privateKey,
+					...authTag ? { authTag } : {}
 				});
-				const progress = prompter.progress("Waiting for Buzz room access...");
-				try {
-					discoveredRooms = await waitForRoomAccess({
-						relayUrl,
-						privateKey,
-						...authTag ? { authTag } : {}
-					});
-					progress.stop(discoveredRooms.length > 0 ? "Buzz room access confirmed" : "Buzz room access wait expired");
-				} catch (error) {
-					progress.stop("Buzz room access check failed");
-					await prompter.note(error instanceof Error ? error.message : String(error), "Buzz room access check failed");
-				}
+				discoveryError = rooms.length === 0 ? "No authorized rooms were returned for this bot." : void 0;
+				return rooms;
+			} catch (error) {
+				discoveryError = `Authenticated room discovery failed: ${error instanceof Error ? error.message : String(error)}.`;
+				return [];
 			}
-			while (discoveredRooms.length === 0) {
-				await prompter.select({
-					message: "Buzz room access is not ready",
-					options: [{
-						value: "retry",
-						label: "Retry authenticated room discovery",
-						hint: "Use after the bot has been added to a room with the Bot role"
-					}],
-					initialValue: "retry"
+		};
+		discoveredRooms = await discoverAuthorizedRooms();
+		if (discoveredRooms.length === 0) {
+			await noteBuzzAccessInstructions({
+				relayUrl,
+				publicKey,
+				prompter,
+				discoveryError
+			});
+			const progress = prompter.progress("Waiting for Buzz room access...");
+			try {
+				discoveredRooms = await waitForBuzzRoomAccess({
+					relayUrl,
+					privateKey,
+					...authTag ? { authTag } : {}
 				});
-				const progress = prompter.progress("Checking Buzz room access...");
-				discoveredRooms = await discoverAuthorizedRooms();
-				progress.stop(discoveredRooms.length > 0 ? "Buzz room access confirmed" : "Buzz room access not found");
-				if (discoveredRooms.length === 0 && discoveryError) await prompter.note(discoveryError, "Buzz room access not ready");
+				progress.stop(discoveredRooms.length > 0 ? "Buzz room access confirmed" : "Buzz room access wait expired");
+			} catch (error) {
+				progress.stop("Buzz room access check failed");
+				await prompter.note(error instanceof Error ? error.message : String(error), "Buzz room access check failed");
 			}
-			const configuredGroups = existingBuzzConfig.groups ?? {};
-			const roomIds = await promptRooms({
-				rooms: discoveredRooms,
-				configuredRoomIds: Object.keys(configuredGroups),
-				prompter
-			});
-			const existingDefault = existingBuzzConfig.defaultTo;
-			const defaultTo = roomIds.length === 1 ? roomIds[0] : await prompter.select({
-				message: "Choose the default Buzz room target",
-				options: roomIds.map((roomId) => {
-					return {
-						value: roomId,
-						label: discoveredRooms.find((candidate) => candidate.id === roomId)?.name ?? roomId,
-						hint: roomId
-					};
-				}),
-				initialValue: existingDefault && roomIds.includes(existingDefault) ? existingDefault : roomIds[0]
-			});
-			next = patchBuzzAccountConfig({
-				cfg: next,
-				accountId,
-				patch: {
-					...useFreshAccessDefaults ? {
-						groupPolicy: "open",
-						groupAllowFrom: void 0
-					} : {},
-					groups: Object.fromEntries(roomIds.map((roomId) => [roomId, {
-						...configuredGroups[roomId],
-						enabled: configuredGroups[roomId]?.enabled ?? true,
-						requireMention: configuredGroups[roomId]?.requireMention ?? !useFreshAccessDefaults
-					}])),
-					defaultTo
-				}
-			});
-			options?.onPostWriteHook?.({
-				channel,
-				accountId,
-				run: async ({ runtime }) => await verifyAfterWrite({
-					accountId,
-					target: defaultTo,
-					runtime
-				})
+		}
+		while (discoveredRooms.length === 0) {
+			await prompter.select({
+				message: "Buzz room access is not ready",
+				options: [{
+					value: "retry",
+					label: "Retry authenticated room discovery",
+					hint: "Use after the bot has been added to a room with the Bot role"
+				}],
+				initialValue: "retry"
 			});
-			return {
-				cfg: next,
-				accountId
-			};
-		},
-		disable: (cfg) => patchTopLevelChannelConfigSection({
-			cfg,
+			const progress = prompter.progress("Checking Buzz room access...");
+			discoveredRooms = await discoverAuthorizedRooms();
+			progress.stop(discoveredRooms.length > 0 ? "Buzz room access confirmed" : "Buzz room access not found");
+			if (discoveredRooms.length === 0 && discoveryError) await prompter.note(discoveryError, "Buzz room access not ready");
+		}
+		const configuredGroups = existingBuzzConfig.groups ?? {};
+		const roomIds = await promptRooms({
+			rooms: discoveredRooms,
+			configuredRoomIds: Object.keys(configuredGroups),
+			prompter
+		});
+		const existingDefault = existingBuzzConfig.defaultTo;
+		const defaultTo = roomIds.length === 1 ? roomIds[0] : await prompter.select({
+			message: "Choose the default Buzz room target",
+			options: roomIds.map((roomId) => {
+				return {
+					value: roomId,
+					label: discoveredRooms.find((candidate) => candidate.id === roomId)?.name ?? roomId,
+					hint: roomId
+				};
+			}),
+			initialValue: existingDefault && roomIds.includes(existingDefault) ? existingDefault : roomIds[0]
+		});
+		next = patchBuzzAccountConfig({
+			cfg: next,
+			accountId,
+			patch: {
+				...useFreshAccessDefaults ? {
+					groupPolicy: "open",
+					groupAllowFrom: void 0
+				} : {},
+				groups: Object.fromEntries(roomIds.map((roomId) => [roomId, {
+					...configuredGroups[roomId],
+					enabled: configuredGroups[roomId]?.enabled ?? true,
+					requireMention: configuredGroups[roomId]?.requireMention ?? !useFreshAccessDefaults
+				}])),
+				defaultTo
+			}
+		});
+		options?.onPostWriteHook?.({
 			channel,
-			patch: { enabled: false }
-		})
-	};
-}
-const buzzSetupWizard = createBuzzSetupWizard();
+			accountId,
+			run: async ({ runtime }) => await verifyBuzzAfterSetup({
+				accountId,
+				target: defaultTo,
+				runtime
+			})
+		});
+		return {
+			cfg: next,
+			accountId
+		};
+	},
+	disable: (cfg) => patchTopLevelChannelConfigSection({
+		cfg,
+		channel,
+		patch: { enabled: false }
+	})
+};
 //#endregion
 export { startBuzzRoomMembershipNotifications as i, buzzSetupContract as n, discoverBuzzRooms as r, buzzSetupWizard as t };

package/dist/api.js

@@ -1,3 +1,3 @@
 import { i as resolveBuzzAccount, r as listBuzzAccountIds, s as resolveDefaultBuzzAccountId } from "./.setup/types-DRUZMyTx.mjs";
-import { n as getBuzzRuntime, r as setBuzzRuntime, t as buzzPlugin } from "./.setup/channel-BbJ5DvVO.mjs";
+import { n as getBuzzRuntime, r as setBuzzRuntime, t as buzzPlugin } from "./.setup/channel-Ba25iqfd.mjs";
 export { buzzPlugin, getBuzzRuntime, listBuzzAccountIds, resolveBuzzAccount, resolveDefaultBuzzAccountId, setBuzzRuntime };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as buzzPlugin } from "./.setup/channel-BbJ5DvVO.mjs";
+import { t as buzzPlugin } from "./.setup/channel-Ba25iqfd.mjs";
 export { buzzPlugin };

package/dist/qa-runner-api.js

@@ -1,7 +1,7 @@
 import { createLazyCliRuntimeLoader, createLiveTransportQaCliRegistration, runLiveTransportQaSuiteCommand } from "openclaw/plugin-sdk/qa-runner-runtime";
 //#region extensions/buzz/src/qa/cli.ts
 const DEFAULT_BUZZ_QA_SCENARIOS = ["channel-canary", "channel-mention-gating"];
-const loadBuzzQaAdapterRuntime = createLazyCliRuntimeLoader(() => import("./.setup/adapter.runtime-DE9Zjy2H.mjs"));
+const loadBuzzQaAdapterRuntime = createLazyCliRuntimeLoader(() => import("./.setup/adapter.runtime-Diltpvcm.mjs"));
 async function runQaBuzz(options) {
 	await runLiveTransportQaSuiteCommand({
 		channelId: "buzz",

package/dist/setup-entry.js

@@ -4,7 +4,7 @@ import { fileURLToPath } from "node:url";
 var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-ebTNvTyI.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-DOqDYVDO.mjs", import.meta.url).href),
 		exportName: "buzzSetupPlugin"
 	},
 	secrets: {

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as buzzSetupPlugin } from "./.setup/setup-plugin-api-1zcpIc0A.mjs";
+import { t as buzzSetupPlugin } from "./.setup/setup-plugin-api-mJRSnC3g.mjs";
 export { buzzSetupPlugin };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/buzz",
-  "version": "2026.10.2",
+  "version": "2026.10.5-beta.2",
   "description": "Connect OpenClaw agents to Buzz rooms",
   "repository": {
     "type": "git",
@@ -12,7 +12,7 @@
     "zod": "4.6.5"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.10.2"
+    "openclaw": ">=2026.10.5-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -84,10 +84,10 @@
       "minHostVersion": ">=2026.7.2"
     },
     "compat": {
-      "pluginApi": ">=2026.10.2"
+      "pluginApi": ">=2026.10.5-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.10.2"
+      "openclawVersion": "2026.10.5-beta.2"
     },
     "release": {
       "publishToClawHub": true,

package/dist/.setup/setup-plugin-api-ebTNvTyI.mjs

@@ -1,2 +0,0 @@
-import { t as buzzSetupPlugin } from "./setup-plugin-api-1zcpIc0A.mjs";
-export { buzzSetupPlugin };