openclaw-nostr 2026.9.2 → 2026.9.4

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 ## Unreleased (Cascadia Fork)
 
+### Fixes — plugin fails to load on openclaw >= 2026.8 (ocn-o66w)
+- **`ERR_PACKAGE_PATH_NOT_EXPORTED: './plugin-sdk/zod'`**: openclaw retired the `openclaw/plugin-sdk/zod` exports subpath (upstream `dceb2c343c4`, an early retirement of the August 15 compat batch), so gateways running openclaw 2026.8.x or newer failed to load the whole plugin at `index.ts`. The two importers (`src/config-schema.ts`, `src/nostr-profile-http.ts`) now import `z` from the `zod` package directly, as the upstream migration guide instructs, and `zod` is declared as a runtime dependency pinned to `4.4.3` to match the host's copy. Because openclaw inlines its own zod into `dist`, the plugin-built config schema is structurally identical but nominally distinct to TypeScript at the `buildChannelConfigSchema` boundary; the two host call sites carry a documented cast. Runtime behavior is unchanged.
+
+### Fixes — Blossom auth helper
+- **Blossom uploads now have a BUD-11 auth helper**: added `buildBlossomAuthEvent`, `getBlossomAuthToken`, bus-level `getBlossomAuthToken`, and channel-level `getNostrBlossomAuthToken` for kind:24242 Blossom auth events with `t`, `x`, `expiration`, and optional `server` tags. Updated docs/comments that previously pointed Blossom upload callers at generic NIP-98 kind:27235 tokens, which BUD-11-only Blossom servers reject before storage.
+
+### Fixes — relay AUTH regression in 2026.9.2 (ocn-a4wg)
+- **Upgrade from 2026.9.2.** That release swallowed every `relay.auth()` rejection and returned `false`, on the mistaken premise that nostr-tools never handles it. It handles it in two of three call sites: `SimplePool.subscribeMap` retries a CLOSED `auth-required:` via `auth().then(re-subscribe).catch(stop)`, and `SimplePool.publish` awaits it before republishing. Returning `false` made both treat a **failed** AUTH as success, so a NIP-29 room with `auth:true` re-subscribed unauthenticated in a loop — `closed: auth-required` → reconnect → repeat — with the relay's real refusal reason suppressed, which reads exactly like `auth:true` being ignored. `auth()` now rejects again; the returned promise carries a no-op `.catch()`, which marks it handled for Node's unhandled-rejection detection without consuming it, so the unawaited call in `AbstractRelay._onmessage` still cannot crash the process (the ocn-n5g guarantee) while awaiting callers keep their retry semantics.
+
 ### Fixes — relay AUTH refusal crashed the process (ocn-n5g, ocn-uao2)
 - **A relay refusing NIP-42 AUTH no longer takes the gateway down (ocn-n5g)**: a relay answering our AUTH event with `["OK", <id>, false, "error: relay needs serviceUrl to be configured before AUTH can work"]` — a misconfigured relay that can never authenticate anyone — rejected the auth promise inside nostr-tools' `AbstractRelay._onmessage`, which invokes `this.auth(this.onauth)` without awaiting or catching it. The rejection escaped as an unhandled rejection and killed the process (stability bundle written), with a stack containing no frames of ours. Our prototype patch previously swallowed only `SendingOnClosedConnection` and `"auth timed out"`, so relay-side refusals sailed through. It now swallows every auth rejection and returns `false` — since the sole caller never handles the promise, rethrowing can only ever crash — and clears the memoized `authPromise` so a later challenge retries instead of replaying a cached rejection forever. The patch moved to `nostr-bus-relay.ts` and is now installed by the fleet-tasks pool too, which sets `automaticallyAuth` but never ran it and carried the same latent crash.
 - **Failing relays are now named in the logs (ocn-uao2)**: the swallowed failure was reported as a bare string, so the offending relay was unidentifiable. Failures now carry a structured report (relay URL, kind, relay-supplied reason, occurrence and suppressed counts) and are classified `closed_connection` / `timed_out` / `no_challenge` / `relay_refused`, separating self-healing races from a relay that will never authenticate. Refusals route to `onError` so they are always visible in production logs; races route to `onDebug` and are lifted to `warn`. Repeats are throttled per relay+kind (first immediately, then at most one line per minute carrying the suppressed count) because a refusing relay re-refuses on every reconnect. AUTH sends dropped by the closed-connection guard, previously swallowed in silence, are now named too. Emits `relay.auth.rejected` tagged by relay and kind.

package/README.md

@@ -989,6 +989,7 @@ import {
   getNostrRelayCapabilities,
   // Auth
   getNostrHttpAuthToken,
+  getNostrBlossomAuthToken,
   // Media
   publishNostrFileMetadata,
   // Social
@@ -1041,8 +1042,12 @@ await bus.sendChannelMessage({
   relayUrl: "wss://relay.example",
 });
 
-// Generate NIP-98 auth token for a Blossom upload
-const token = await bus.getNip98Token("https://media.example.com/upload", "POST");
+// Generate BUD-11 auth token for a Blossom upload
+const token = await bus.getBlossomAuthToken({
+  verb: "upload",
+  hashes: ["<sha256>"],
+  server: "https://media.example.com",
+});
 ```
 
 ### Tier 3 Extras (Namespace Imports)
@@ -1117,7 +1122,7 @@ pnpm vitest run --config vitest.extensions.config.ts extensions/nostr/src/nostr-
 - Event signatures are verified before processing
 - Use environment variables for keys, never commit to config files
 - Consider using `allowlist` mode in production
-- NIP-98 tokens are signed with the bus's key — scope them to specific URLs
+- NIP-98 and BUD-11 Blossom tokens are signed with the bus's key — scope them to specific URLs/servers and hashes
 - NIP-44 conversation keys are derived from the bus's secret key
 - HTTP mutation endpoints (PUT, POST, DELETE) are restricted to loopback addresses
 - **NIP-46**: The client secret (`nip46Secret`) is distinct from the identity key — store it via `NOSTR_NIP46_SECRET` env var or a `SecretRef` (`env`, `file`, `exec`), never in raw config

package/node_modules/cascadia-ts/cascadia.ts

@@ -116,32 +116,32 @@ export const KindMeta: Record<number, {
   [CTXVM_SERVER_ANNOUNCEMENT]: {
     symbol: "CTXVM_SERVER_ANNOUNCEMENT",
     family: "ContextVM",
-    eventForm: "replaceable",
-    requiredTags: [],
+    eventForm: "regular",
+    requiredTags: ["p"],
   },
   [CTXVM_TOOLS_ANNOUNCEMENT]: {
     symbol: "CTXVM_TOOLS_ANNOUNCEMENT",
     family: "ContextVM",
-    eventForm: "replaceable",
-    requiredTags: [],
+    eventForm: "regular",
+    requiredTags: ["p"],
   },
   [CTXVM_RESOURCES_ANNOUNCEMENT]: {
     symbol: "CTXVM_RESOURCES_ANNOUNCEMENT",
     family: "ContextVM",
-    eventForm: "replaceable",
-    requiredTags: [],
+    eventForm: "regular",
+    requiredTags: ["p"],
   },
   [CTXVM_RESOURCE_TEMPLATES_ANNOUNCEMENT]: {
     symbol: "CTXVM_RESOURCE_TEMPLATES_ANNOUNCEMENT",
     family: "ContextVM",
-    eventForm: "replaceable",
-    requiredTags: [],
+    eventForm: "regular",
+    requiredTags: ["p"],
   },
   [CTXVM_PROMPTS_ANNOUNCEMENT]: {
     symbol: "CTXVM_PROMPTS_ANNOUNCEMENT",
     family: "ContextVM",
-    eventForm: "replaceable",
-    requiredTags: [],
+    eventForm: "regular",
+    requiredTags: ["p"],
   },
   [NIP59_EPHEMERAL_GIFT_WRAP]: {
     symbol: "NIP59_EPHEMERAL_GIFT_WRAP",
@@ -1443,6 +1443,91 @@ export function validateCascadiaLoomWorkerV1Payload(payload: CascadiaLoomWorkerV
   return errors;
 }
 
+export interface CascadiaMaintenancePressureResultV1Mount {
+  path: string;
+  total_bytes: number;
+  free_bytes: number;
+  used_pct: number;
+  total_inodes: number;
+  free_inodes: number;
+}
+
+export function validateCascadiaMaintenancePressureResultV1Mount(payload: CascadiaMaintenancePressureResultV1Mount): string[] {
+  const errors: string[] = [];
+  if (payload.path === undefined || payload.path === null || payload.path === '') errors.push("cascadia.maintenance.pressure-result.v1.mounts[].path is required");
+  if (payload.total_bytes === undefined || payload.total_bytes === null) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_bytes is required");
+  if (payload.total_bytes !== undefined && payload.total_bytes < 0) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_bytes must be >= 0");
+  if (payload.free_bytes === undefined || payload.free_bytes === null) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_bytes is required");
+  if (payload.free_bytes !== undefined && payload.free_bytes < 0) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_bytes must be >= 0");
+  if (payload.used_pct === undefined || payload.used_pct === null) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].used_pct is required");
+  if (payload.used_pct !== undefined && payload.used_pct < 0) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].used_pct must be >= 0");
+  if (payload.used_pct !== undefined && payload.used_pct > 100) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].used_pct must be <= 100");
+  if (payload.total_inodes === undefined || payload.total_inodes === null) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_inodes is required");
+  if (payload.total_inodes !== undefined && payload.total_inodes < 0) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_inodes must be >= 0");
+  if (payload.free_inodes === undefined || payload.free_inodes === null) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_inodes is required");
+  if (payload.free_inodes !== undefined && payload.free_inodes < 0) errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_inodes must be >= 0");
+  return errors;
+}
+
+/** Bounded fleet hygiene disk and inode pressure result payload
+ * Schema: cascadia.maintenance.pressure-result.v1
+ * CUE: schemas/control-plane/maintenance-pressure-result.cue (MaintenancePressureResult, MountPressure)
+ */
+export interface CascadiaMaintenancePressureResultV1Payload {
+  mounts: CascadiaMaintenancePressureResultV1Mount[];
+  sampled_at: string;
+}
+
+export function validateCascadiaMaintenancePressureResultV1Payload(payload: CascadiaMaintenancePressureResultV1Payload): string[] {
+  const errors: string[] = [];
+  if (payload.mounts === undefined || payload.mounts === null) errors.push("cascadia.maintenance.pressure-result.v1.mounts is required");
+  if (payload.mounts !== undefined) payload.mounts.forEach((item) => errors.push(...validateCascadiaMaintenancePressureResultV1Mount(item)));
+  if (payload.sampled_at === undefined || payload.sampled_at === null || payload.sampled_at === '') errors.push("cascadia.maintenance.pressure-result.v1.sampled_at is required");
+  return errors;
+}
+
+export interface CascadiaMaintenanceScanResultV1Candidate {
+  id: string;
+  path: string;
+  class: "dup-clone" | "orphan-clone" | "misplaced-backup" | "cruft";
+  reason?: string;
+  canonical?: string;
+  blocked?: "dirty-tree" | "orphan" | "in-use" | "policy" | "protected-root";
+}
+
+export function validateCascadiaMaintenanceScanResultV1Candidate(payload: CascadiaMaintenanceScanResultV1Candidate): string[] {
+  const errors: string[] = [];
+  if (payload.id === undefined || payload.id === null || payload.id === '') errors.push("cascadia.maintenance.scan-result.v1.candidates[].id is required");
+  if (payload.path === undefined || payload.path === null || payload.path === '') errors.push("cascadia.maintenance.scan-result.v1.candidates[].path is required");
+  if (payload.class === undefined || payload.class === null) errors.push("cascadia.maintenance.scan-result.v1.candidates[].class is required");
+  if (payload.class !== undefined && !["dup-clone", "orphan-clone", "misplaced-backup", "cruft"].includes(payload.class as string)) errors.push("cascadia.maintenance.scan-result.v1.candidates[].class must be one of: dup-clone, orphan-clone, misplaced-backup, cruft");
+  if (payload.blocked !== undefined && !["dirty-tree", "orphan", "in-use", "policy", "protected-root"].includes(payload.blocked as string)) errors.push("cascadia.maintenance.scan-result.v1.candidates[].blocked must be one of: dirty-tree, orphan, in-use, policy, protected-root");
+  return errors;
+}
+
+/** Bounded fleet hygiene scan result payload
+ * Schema: cascadia.maintenance.scan-result.v1
+ * CUE: schemas/control-plane/maintenance-scan-result.cue (MaintenanceScanResult, MaintenanceCandidate)
+ */
+export interface CascadiaMaintenanceScanResultV1Payload {
+  candidates: CascadiaMaintenanceScanResultV1Candidate[];
+  scanned_at: string;
+  roots?: string[];
+  total_candidates: number;
+  truncated?: boolean;
+}
+
+export function validateCascadiaMaintenanceScanResultV1Payload(payload: CascadiaMaintenanceScanResultV1Payload): string[] {
+  const errors: string[] = [];
+  if (payload.candidates === undefined || payload.candidates === null) errors.push("cascadia.maintenance.scan-result.v1.candidates is required");
+  if (payload.candidates !== undefined && payload.candidates.length > 500) errors.push("cascadia.maintenance.scan-result.v1.candidates must contain at most 500 items");
+  if (payload.candidates !== undefined) payload.candidates.forEach((item) => errors.push(...validateCascadiaMaintenanceScanResultV1Candidate(item)));
+  if (payload.scanned_at === undefined || payload.scanned_at === null || payload.scanned_at === '') errors.push("cascadia.maintenance.scan-result.v1.scanned_at is required");
+  if (payload.total_candidates === undefined || payload.total_candidates === null) errors.push("cascadia.maintenance.scan-result.v1.total_candidates is required");
+  if (payload.total_candidates !== undefined && payload.total_candidates < 0) errors.push("cascadia.maintenance.scan-result.v1.total_candidates must be >= 0");
+  return errors;
+}
+
 /** Fleet hygiene (Swabbie) maintenance command payload
  * Schema: cascadia.maintenance.v1
  * CUE: schemas/control-plane/maintenance.cue (Maintenance)

package/node_modules/cascadia-ts/dist/cascadia.d.ts

@@ -675,6 +675,45 @@ export interface CascadiaLoomWorkerV1Payload {
     pricing?: Record<string, unknown>;
 }
 export declare function validateCascadiaLoomWorkerV1Payload(payload: CascadiaLoomWorkerV1Payload): string[];
+export interface CascadiaMaintenancePressureResultV1Mount {
+    path: string;
+    total_bytes: number;
+    free_bytes: number;
+    used_pct: number;
+    total_inodes: number;
+    free_inodes: number;
+}
+export declare function validateCascadiaMaintenancePressureResultV1Mount(payload: CascadiaMaintenancePressureResultV1Mount): string[];
+/** Bounded fleet hygiene disk and inode pressure result payload
+ * Schema: cascadia.maintenance.pressure-result.v1
+ * CUE: schemas/control-plane/maintenance-pressure-result.cue (MaintenancePressureResult, MountPressure)
+ */
+export interface CascadiaMaintenancePressureResultV1Payload {
+    mounts: CascadiaMaintenancePressureResultV1Mount[];
+    sampled_at: string;
+}
+export declare function validateCascadiaMaintenancePressureResultV1Payload(payload: CascadiaMaintenancePressureResultV1Payload): string[];
+export interface CascadiaMaintenanceScanResultV1Candidate {
+    id: string;
+    path: string;
+    class: "dup-clone" | "orphan-clone" | "misplaced-backup" | "cruft";
+    reason?: string;
+    canonical?: string;
+    blocked?: "dirty-tree" | "orphan" | "in-use" | "policy" | "protected-root";
+}
+export declare function validateCascadiaMaintenanceScanResultV1Candidate(payload: CascadiaMaintenanceScanResultV1Candidate): string[];
+/** Bounded fleet hygiene scan result payload
+ * Schema: cascadia.maintenance.scan-result.v1
+ * CUE: schemas/control-plane/maintenance-scan-result.cue (MaintenanceScanResult, MaintenanceCandidate)
+ */
+export interface CascadiaMaintenanceScanResultV1Payload {
+    candidates: CascadiaMaintenanceScanResultV1Candidate[];
+    scanned_at: string;
+    roots?: string[];
+    total_candidates: number;
+    truncated?: boolean;
+}
+export declare function validateCascadiaMaintenanceScanResultV1Payload(payload: CascadiaMaintenanceScanResultV1Payload): string[];
 /** Fleet hygiene (Swabbie) maintenance command payload
  * Schema: cascadia.maintenance.v1
  * CUE: schemas/control-plane/maintenance.cue (Maintenance)

package/node_modules/cascadia-ts/dist/cascadia.js

@@ -88,32 +88,32 @@ export const KindMeta = {
     [CTXVM_SERVER_ANNOUNCEMENT]: {
         symbol: "CTXVM_SERVER_ANNOUNCEMENT",
         family: "ContextVM",
-        eventForm: "replaceable",
-        requiredTags: [],
+        eventForm: "regular",
+        requiredTags: ["p"],
     },
     [CTXVM_TOOLS_ANNOUNCEMENT]: {
         symbol: "CTXVM_TOOLS_ANNOUNCEMENT",
         family: "ContextVM",
-        eventForm: "replaceable",
-        requiredTags: [],
+        eventForm: "regular",
+        requiredTags: ["p"],
     },
     [CTXVM_RESOURCES_ANNOUNCEMENT]: {
         symbol: "CTXVM_RESOURCES_ANNOUNCEMENT",
         family: "ContextVM",
-        eventForm: "replaceable",
-        requiredTags: [],
+        eventForm: "regular",
+        requiredTags: ["p"],
     },
     [CTXVM_RESOURCE_TEMPLATES_ANNOUNCEMENT]: {
         symbol: "CTXVM_RESOURCE_TEMPLATES_ANNOUNCEMENT",
         family: "ContextVM",
-        eventForm: "replaceable",
-        requiredTags: [],
+        eventForm: "regular",
+        requiredTags: ["p"],
     },
     [CTXVM_PROMPTS_ANNOUNCEMENT]: {
         symbol: "CTXVM_PROMPTS_ANNOUNCEMENT",
         family: "ContextVM",
-        eventForm: "replaceable",
-        requiredTags: [],
+        eventForm: "regular",
+        requiredTags: ["p"],
     },
     [NIP59_EPHEMERAL_GIFT_WRAP]: {
         symbol: "NIP59_EPHEMERAL_GIFT_WRAP",
@@ -945,6 +945,74 @@ export function validateCascadiaLoomWorkerV1Payload(payload) {
         errors.push("cascadia.loom.worker.v1.capacity is required");
     return errors;
 }
+export function validateCascadiaMaintenancePressureResultV1Mount(payload) {
+    const errors = [];
+    if (payload.path === undefined || payload.path === null || payload.path === '')
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].path is required");
+    if (payload.total_bytes === undefined || payload.total_bytes === null)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_bytes is required");
+    if (payload.total_bytes !== undefined && payload.total_bytes < 0)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_bytes must be >= 0");
+    if (payload.free_bytes === undefined || payload.free_bytes === null)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_bytes is required");
+    if (payload.free_bytes !== undefined && payload.free_bytes < 0)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_bytes must be >= 0");
+    if (payload.used_pct === undefined || payload.used_pct === null)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].used_pct is required");
+    if (payload.used_pct !== undefined && payload.used_pct < 0)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].used_pct must be >= 0");
+    if (payload.used_pct !== undefined && payload.used_pct > 100)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].used_pct must be <= 100");
+    if (payload.total_inodes === undefined || payload.total_inodes === null)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_inodes is required");
+    if (payload.total_inodes !== undefined && payload.total_inodes < 0)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].total_inodes must be >= 0");
+    if (payload.free_inodes === undefined || payload.free_inodes === null)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_inodes is required");
+    if (payload.free_inodes !== undefined && payload.free_inodes < 0)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts[].free_inodes must be >= 0");
+    return errors;
+}
+export function validateCascadiaMaintenancePressureResultV1Payload(payload) {
+    const errors = [];
+    if (payload.mounts === undefined || payload.mounts === null)
+        errors.push("cascadia.maintenance.pressure-result.v1.mounts is required");
+    if (payload.mounts !== undefined)
+        payload.mounts.forEach((item) => errors.push(...validateCascadiaMaintenancePressureResultV1Mount(item)));
+    if (payload.sampled_at === undefined || payload.sampled_at === null || payload.sampled_at === '')
+        errors.push("cascadia.maintenance.pressure-result.v1.sampled_at is required");
+    return errors;
+}
+export function validateCascadiaMaintenanceScanResultV1Candidate(payload) {
+    const errors = [];
+    if (payload.id === undefined || payload.id === null || payload.id === '')
+        errors.push("cascadia.maintenance.scan-result.v1.candidates[].id is required");
+    if (payload.path === undefined || payload.path === null || payload.path === '')
+        errors.push("cascadia.maintenance.scan-result.v1.candidates[].path is required");
+    if (payload.class === undefined || payload.class === null)
+        errors.push("cascadia.maintenance.scan-result.v1.candidates[].class is required");
+    if (payload.class !== undefined && !["dup-clone", "orphan-clone", "misplaced-backup", "cruft"].includes(payload.class))
+        errors.push("cascadia.maintenance.scan-result.v1.candidates[].class must be one of: dup-clone, orphan-clone, misplaced-backup, cruft");
+    if (payload.blocked !== undefined && !["dirty-tree", "orphan", "in-use", "policy", "protected-root"].includes(payload.blocked))
+        errors.push("cascadia.maintenance.scan-result.v1.candidates[].blocked must be one of: dirty-tree, orphan, in-use, policy, protected-root");
+    return errors;
+}
+export function validateCascadiaMaintenanceScanResultV1Payload(payload) {
+    const errors = [];
+    if (payload.candidates === undefined || payload.candidates === null)
+        errors.push("cascadia.maintenance.scan-result.v1.candidates is required");
+    if (payload.candidates !== undefined && payload.candidates.length > 500)
+        errors.push("cascadia.maintenance.scan-result.v1.candidates must contain at most 500 items");
+    if (payload.candidates !== undefined)
+        payload.candidates.forEach((item) => errors.push(...validateCascadiaMaintenanceScanResultV1Candidate(item)));
+    if (payload.scanned_at === undefined || payload.scanned_at === null || payload.scanned_at === '')
+        errors.push("cascadia.maintenance.scan-result.v1.scanned_at is required");
+    if (payload.total_candidates === undefined || payload.total_candidates === null)
+        errors.push("cascadia.maintenance.scan-result.v1.total_candidates is required");
+    if (payload.total_candidates !== undefined && payload.total_candidates < 0)
+        errors.push("cascadia.maintenance.scan-result.v1.total_candidates must be >= 0");
+    return errors;
+}
 export function validateCascadiaMaintenanceV1Payload(payload) {
     const errors = [];
     return errors;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openclaw-nostr",
-  "version": "2026.9.2",
+  "version": "2026.9.4",
   "description": "Nostr channel plugin for OpenClaw",
   "type": "module",
   "files": [
@@ -16,14 +16,16 @@
     "CHANGELOG.md"
   ],
   "scripts": {
-    "build": "tsc --noEmit --noCheck --module NodeNext --moduleResolution NodeNext --target ES2023 index.ts api.ts runtime-api.ts setup-api.ts setup-entry.ts src/*.ts test/setup.ts vitest.config.ts",
+    "build": "tsc -p tsconfig.json --noCheck",
     "test:bootstrap": "node --test test/nostr-claw-bootstrap.test.mjs",
-    "test:scanner": "vitest run test/runtime-security-scanner.test.ts"
+    "test:scanner": "vitest run test/runtime-security-scanner.test.ts",
+    "typecheck": "tsc -p tsconfig.json"
   },
   "dependencies": {
     "cascadia-ts": "file:../cascadia-nips/generated/typescript",
     "nostr-tools": "2.23.3",
-    "ws": "^8.18.0"
+    "ws": "^8.18.0",
+    "zod": "4.4.3"
   },
   "bundledDependencies": [
     "cascadia-ts"

package/src/channel-directory.ts

@@ -40,7 +40,7 @@ type RoomConfigLike = {
 type NostrChannelCfgLike = {
   channels?: {
     nostr?: {
-      allowFrom?: readonly string[];
+      allowFrom?: readonly (string | number)[];
       profile?: { name?: string; displayName?: string };
       nostr_channels?: Record<string, RoomConfigLike | undefined>;
     };
@@ -82,8 +82,10 @@ function toNpub(pubkeyHex: string): string {
   }
 }
 
-function normalizeEntryPubkey(value: string): string | undefined {
-  const trimmed = value.trim();
+// See normalizeAllowEntry in nostr-taskflow-tool.ts: allowFrom entries may be
+// numbers, so stringify before trimming.
+function normalizeEntryPubkey(value: string | number): string | undefined {
+  const trimmed = String(value).trim();
   if (!trimmed || trimmed === "*") {
     return undefined;
   }

package/src/channel.ts

@@ -104,6 +104,7 @@ import type {
   ReactionTarget,
   DeletionOptions,
   RepostOptions,
+  BlossomAuthTokenOptions,
   FileMetadataObject,
 } from "./nostr-capabilities.js";
 import {
@@ -356,7 +357,7 @@ type NostrGroupInboundContextParams = {
   roomConfig?: NostrRoomChannelMap[string];
   preflight?: NostrGroupPreflightResult;
   cfg?: unknown;
-  accountAllowFrom?: readonly string[];
+  accountAllowFrom?: readonly (string | number)[];
   commandHelpers?: NostrGroupPreflightCommandHelpers;
   /** P3: a pending-commitment reminder injected as untrusted context for this turn. */
   commitmentReminder?: string;
@@ -373,7 +374,8 @@ type NostrChannelInboundEventContextParams = {
   messageIdFull?: string;
   timestamp?: number;
   from: string;
-  sender: {
+  /** Optional: system-authored room events have no actor pubkey. */
+  sender?: {
     id?: string;
     name?: string;
     displayLabel?: string;
@@ -509,12 +511,12 @@ function buildChannelInboundEventContextCompat(params: NostrChannelInboundEventC
     ConversationLabel: params.conversation.label,
     GroupSubject: params.conversation.kind !== "direct" ? params.conversation.label : undefined,
     UntrustedStructuredContext: params.supplemental?.untrustedContext,
-    SenderName: params.sender.name ?? params.sender.displayLabel,
-    SenderId: params.sender.id,
-    SenderIsBot: params.sender.isBot,
-    SenderUsername: params.sender.username,
-    SenderTag: params.sender.tag,
-    MemberRoleIds: params.sender.roles,
+    SenderName: params.sender?.name ?? params.sender?.displayLabel,
+    SenderId: params.sender?.id,
+    SenderIsBot: params.sender?.isBot,
+    SenderUsername: params.sender?.username,
+    SenderTag: params.sender?.tag,
+    MemberRoleIds: params.sender?.roles,
     Timestamp: params.timestamp,
     Provider: params.provider ?? params.channel,
     Surface: params.surface ?? params.provider ?? params.channel,
@@ -922,8 +924,11 @@ async function assertBackedNostrRoomCommitment(params: {
     }),
   );
   const assessment = await assessCommitment(params.text, roomKey, (reference) => {
+    // `effective` is a FleetTaskEventSnapshot; the status lives on its `task`
+    // payload. Reading it off the snapshot yielded undefined, so every
+    // referenced task — closed ones included — counted as still active.
     const task = activeFleetTaskServices.get(params.accountId)?.getTask(reference)?.effective;
-    if (task && task.status !== "closed") return true;
+    if (task && task.task.status !== "closed") return true;
     return resolveNostrTaskFlowBackingActive(
       getNostrRuntime(),
       params.accountId,
@@ -1297,8 +1302,11 @@ function localIsNostrAbortRequestText(text: string): boolean {
   return /^(?:abort|cancel|stop)\b/i.test(text.trim());
 }
 
-function normalizeNostrAllowEntry(value: string): string | undefined {
-  const trimmed = value.trim();
+// allowFrom entries may be numbers (the host's shared AllowFromListSchema is
+// ZodArray<ZodUnion<[ZodString, ZodNumber]>>), so stringify before trimming —
+// .trim() on a number throws, and this path gates control-command authorization.
+function normalizeNostrAllowEntry(value: string | number): string | undefined {
+  const trimmed = String(value).trim();
   if (!trimmed || trimmed === "*") {
     return undefined;
   }
@@ -1306,7 +1314,7 @@ function normalizeNostrAllowEntry(value: string): string | undefined {
 }
 
 function nostrAllowListExplicitlyIncludesSender(
-  allowFrom: readonly string[] | undefined,
+  allowFrom: readonly (string | number)[] | undefined,
   senderPubkey: string,
 ): boolean {
   const normalizedSender = senderPubkey.toLowerCase();
@@ -1317,7 +1325,7 @@ function resolveNostrCommandAuthorized(params: {
   hasControlCommand: boolean;
   senderPubkey: string;
   roomConfig?: NostrRoomChannelMap[string];
-  accountAllowFrom?: readonly string[];
+  accountAllowFrom?: readonly (string | number)[];
 }): boolean {
   if (!params.hasControlCommand) {
     return false;
@@ -1446,7 +1454,7 @@ export function resolveNostrGroupPreflight(params: {
   route: Pick<NostrGroupRouteFacts, "agentId">;
   meta: InboundGroupMessageMeta;
   roomConfig?: NostrRoomChannelMap[string];
-  accountAllowFrom?: readonly string[];
+  accountAllowFrom?: readonly (string | number)[];
   commandHelpers?: NostrGroupPreflightCommandHelpers;
   /** True when the sender is a peer for implicit-mention suppression (P1); may include unknownAsPeer. */
   senderIsPeer?: boolean;
@@ -1612,13 +1620,17 @@ function buildNostrGroupMembershipInboundEventContext(params: {
     messageIdFull: params.meta.eventId,
     timestamp: params.meta.createdAt ? params.meta.createdAt * 1000 : Date.now(),
     from: params.meta.actorPubkey ? `nostr:${params.meta.actorPubkey}` : "nostr:system",
-    sender: params.meta.actorPubkey
+    // Omit `sender` entirely when there is no actor, rather than setting it to
+    // undefined: the host's param type does not accept an explicit undefined.
+    ...(params.meta.actorPubkey
       ? {
-          id: params.meta.actorPubkey,
-          name: nip19.npubEncode(params.meta.actorPubkey),
-          displayLabel: nip19.npubEncode(params.meta.actorPubkey),
+          sender: {
+            id: params.meta.actorPubkey,
+            name: nip19.npubEncode(params.meta.actorPubkey),
+            displayLabel: nip19.npubEncode(params.meta.actorPubkey),
+          },
         }
-      : undefined,
+      : {}),
     conversation: {
       kind: "group",
       id: roomKey,
@@ -2199,7 +2211,10 @@ export const nostrPlugin: ChannelPlugin<ResolvedNostrAccount> = {
     unsend: true,
   },
   reload: { configPrefixes: ["channels.nostr"] },
-  configSchema: buildChannelConfigSchema(NostrConfigSchema),
+  // See config-schema.ts: bridges the host-bundled vs. package zod type seam.
+  configSchema: buildChannelConfigSchema(
+    NostrConfigSchema as unknown as Parameters<typeof buildChannelConfigSchema>[0],
+  ),
 
   config: {
     listAccountIds: (cfg) => listNostrAccountIds(cfg),
@@ -2868,7 +2883,7 @@ export const nostrPlugin: ChannelPlugin<ResolvedNostrAccount> = {
                   );
                 }
               }
-              nip46SessionState = sessionState;
+              nip46SessionState = sessionState ?? undefined;
 
               ctx.setStatus({
                 accountId: account.accountId,
@@ -3226,6 +3241,10 @@ export const nostrPlugin: ChannelPlugin<ResolvedNostrAccount> = {
               hasControlCommand: runtime.channel.text?.hasControlCommand,
               shouldHandleTextCommands: runtime.channel.commands?.shouldHandleTextCommands,
             };
+            const accountAllowFrom = resolveNostrAccount({
+              cfg,
+              accountId: account.accountId,
+            }).config.allowFrom;
             // Classify the sender via the kind:0 bot index. isPeerAgent is a
             // synchronous cache read that schedules a background fetch on a
             // miss — safe on the admission-gate path. A DEFINITIVE known bot
@@ -3248,7 +3267,7 @@ export const nostrPlugin: ChannelPlugin<ResolvedNostrAccount> = {
               roomConfig,
               route,
               meta,
-              accountAllowFrom: account.config.allowFrom,
+              accountAllowFrom,
               commandHelpers,
               senderIsPeer,
               senderIsKnownBot,
@@ -3614,7 +3633,6 @@ export const nostrPlugin: ChannelPlugin<ResolvedNostrAccount> = {
               route: prepared.route,
               meta,
               cfg: prepared.cfg,
-              accountAllowFrom: account.config.allowFrom,
               commandHelpers: prepared.commandHelpers,
               preflight: prepared.preflight,
               commitmentReminder,
@@ -4304,7 +4322,6 @@ export const nostrPlugin: ChannelPlugin<ResolvedNostrAccount> = {
                   route,
                   meta,
                   cfg,
-                  accountAllowFrom: account.config.allowFrom,
                   commandHelpers,
                   preflight,
                   commitmentReminder,
@@ -5448,6 +5465,27 @@ export async function getNostrHttpAuthToken(
   return bus.getNip98Token(url, method);
 }
 
+// ============================================================================
+// BUD-11: Blossom Auth
+// ============================================================================
+
+/**
+ * Generate a BUD-11 Blossom auth token.
+ * @param opts - Blossom operation, optional hash scopes, expiration, and server
+ * @param accountId - Account ID (defaults to "default")
+ * @returns Base64url encoded kind:24242 auth event without the "Nostr " prefix
+ */
+export async function getNostrBlossomAuthToken(
+  opts: BlossomAuthTokenOptions,
+  accountId: string = DEFAULT_ACCOUNT_ID,
+): Promise<string> {
+  const bus = activeBuses.get(accountId);
+  if (!bus) {
+    throw nostrBusNotRunningError(accountId);
+  }
+  return bus.getBlossomAuthToken(opts);
+}
+
 // ============================================================================
 // NIP-94: File Metadata
 // ============================================================================

package/src/config-schema.ts

@@ -4,7 +4,7 @@ import {
   DmPolicySchema,
   MarkdownConfigSchema,
 } from "openclaw/plugin-sdk/channel-config-primitives";
-import { z } from "openclaw/plugin-sdk/zod";
+import { z } from "zod";
 
 /**
  * Validates https:// URLs only (no javascript:, data:, file:, etc.)
@@ -686,4 +686,9 @@ export type NostrConfig = z.infer<typeof NostrConfigSchema>;
 /**
  * JSON Schema for Control UI (converted from Zod)
  */
-export const nostrChannelConfigSchema = buildChannelConfigSchema(NostrConfigSchema);
+// The host bundles its own zod copy into openclaw/dist, so a schema built with
+// the `zod` package is structurally identical but nominally distinct to TS.
+// Runtime is unaffected (both are zod 4.4.3); the cast bridges the type seam.
+export const nostrChannelConfigSchema = buildChannelConfigSchema(
+  NostrConfigSchema as unknown as Parameters<typeof buildChannelConfigSchema>[0],
+);