switchroom 0.19.48 → 0.20.1

package/bin/handoff-briefing.sh

@@ -47,7 +47,29 @@ HINDSIGHT_BANK="${HINDSIGHT_BANK_ID:-}"
 AGENT_DIR="${AGENT_DIR:-}"
 WORKSPACE_DIR="${WORKSPACE_DIR:-$AGENT_DIR}"
 MAX_MESSAGES="${HANDOFF_BRIEFING_MAX_MESSAGES:-20}"
-HINDSIGHT_TIMEOUT="${HANDOFF_BRIEFING_HINDSIGHT_TIMEOUT:-4}"
+# Hindsight is the only network hop; cap it at 3s so it finishes well inside
+# start.sh's outer `timeout 10` kill budget (was 4s under a 5s outer, which
+# left almost no margin — a slow recall could be killed mid-write). Local
+# SQLite + daily-memory reads are sub-second, so 3s is the whole network cost.
+HINDSIGHT_TIMEOUT="${HANDOFF_BRIEFING_HINDSIGHT_TIMEOUT:-3}"
+
+# Chat/thread scope for the recent-conversation section (#continuity). A
+# forum/group agent's history.db holds messages from many topics; an unscoped
+# "last 20" briefing pollutes the reorientation with unrelated threads. Prefer
+# the surface that was mid-turn when the prior session ended (exported by
+# start.sh from the pending-turn env on an interrupted boot); otherwise the
+# python fallback derives the single most-recently-active (chat_id, thread_id)
+# surface straight from the DB. Empty chat ⇒ let python derive it.
+#
+# TARGET_THREAD_ID is tri-state: a numbered thread scopes to that topic; the
+# literal sentinel `NULL` means the surface's thread is genuinely NULL (a DM /
+# forum General topic) and scopes with `thread_id IS NULL`; empty means the
+# thread is UNKNOWN and falls back to chat-only scope (all threads). The
+# pending-turn env writer emits `NULL` when it knows the interrupted turn's
+# thread was null, so a General-topic interrupt reboots correctly scoped
+# instead of pulling in every other topic's messages.
+TARGET_CHAT_ID="${SWITCHROOM_PENDING_CHAT_ID:-}"
+TARGET_THREAD_ID="${SWITCHROOM_PENDING_THREAD_ID:-}"
 
 # Determine output mode
 STDOUT_MODE=0
@@ -61,28 +83,119 @@ if [ -n "$TELEGRAM_STATE" ] && [ -d "$TELEGRAM_STATE" ]; then
   HISTORY_DB="$TELEGRAM_STATE/history.db"
   if [ -f "$HISTORY_DB" ] && command -v python3 >/dev/null 2>&1; then
     # Use python3's stdlib sqlite3 — no bun:sqlite, no extra deps.
-    # Query the most recent $MAX_MESSAGES rows ordered by ts DESC, then
-    # reverse for chronological display. We skip system messages (role NULL).
-    TELEGRAM_ROWS=$(python3 - "$HISTORY_DB" "$MAX_MESSAGES" 2>/dev/null <<'PYEOF'
+    # Query the most recent $MAX_MESSAGES rows for the ACTIVE surface only
+    # (chat/thread-scoped, see above), ordered by ts DESC, then reverse for
+    # chronological display. We skip system messages (role NULL). The scope
+    # source is logged to stderr for boot diagnostics.
+    # python stderr is NOT suppressed: the script's only stderr output is the
+    # intentional scope breadcrumb + a single graceful line on any caught error
+    # (every DB path is wrapped in try/except → sys.exit(0)). start.sh runs this
+    # under `2>/dev/null`, so the breadcrumb is a debug/manual-run diagnostic.
+    TELEGRAM_ROWS=$(python3 - "$HISTORY_DB" "$MAX_MESSAGES" "$TARGET_CHAT_ID" "$TARGET_THREAD_ID" <<'PYEOF'
 import sys, sqlite3, datetime
 
 db_path = sys.argv[1]
 limit = int(sys.argv[2])
+target_chat = sys.argv[3] if len(sys.argv) > 3 else ""
+target_thread = sys.argv[4] if len(sys.argv) > 4 else ""
 
 try:
     conn = sqlite3.connect(db_path)
     conn.row_factory = sqlite3.Row
     cur = conn.cursor()
-    # Fetch most recent rows; reverse for chronological output.
+
+    # Resolve the surface to scope to.
+    #  - explicit env target (pending-turn chat/thread) wins — UNLESS that chat
+    #    has zero rows (rotated/fresh DB), in which case we fall through to
+    #    db-latest so a stale env target doesn't yield an empty section;
+    #  - else derive the single most-recently-active (chat_id, thread_id).
+    # thread is tri-state: a real value, NULL (DM / general), or unknown.
+    #  - target_thread == "NULL" (sentinel from start.sh / pending-turn-env)
+    #    means the surface's thread is GENUINELY NULL (DM / general topic) —
+    #    scope with `thread_id IS NULL`, do NOT pull in numbered-thread rows.
+    #  - target_thread == "" (empty) means UNKNOWN — chat-only scope (all
+    #    threads), the safe backward-compatible fallback.
+    scope_chat = None
+    scope_thread = None          # int thread id
+    scope_thread_known = False   # True once we know the exact thread (incl. NULL)
+    scope_thread_is_null = False # True when the surface's thread is NULL
+    scope_source = "unscoped"
+
+    def _chat_has_rows(chat_id):
+        cur.execute(
+            "SELECT 1 FROM messages WHERE role IN ('user', 'assistant') "
+            "AND chat_id = ? LIMIT 1",
+            [chat_id],
+        )
+        return cur.fetchone() is not None
+
+    def _derive_db_latest():
+        # The single most-recently-active (chat_id, thread_id) surface.
+        cur.execute(
+            """
+            SELECT chat_id, thread_id
+            FROM messages
+            WHERE role IN ('user', 'assistant')
+            ORDER BY ts DESC
+            LIMIT 1
+            """
+        )
+        return cur.fetchone()
+
+    # Env target — accept it only when its chat actually has rows (2b). A
+    # rotated/fresh DB can leave a pending-turn chat with no persisted
+    # messages; scoping to it would silently emit an empty section, so we
+    # fall through to db-latest instead.
+    if target_chat and _chat_has_rows(target_chat):
+        scope_chat = target_chat
+        scope_source = "env"
+        if target_thread == "NULL":
+            scope_thread_is_null = True
+            scope_thread_known = True
+        elif target_thread != "":
+            try:
+                scope_thread = int(target_thread)
+                scope_thread_known = True
+            except ValueError:
+                scope_thread = None  # unparseable → chat-only scope
+        # else: unknown thread → chat-only scope (all threads of the chat)
+
+    if scope_chat is None:
+        latest = _derive_db_latest()
+        if latest is not None:
+            scope_chat = latest["chat_id"]
+            scope_source = "db-latest"
+            scope_thread_known = True
+            if latest["thread_id"] is None:
+                scope_thread_is_null = True
+            else:
+                scope_thread = latest["thread_id"]
+
+    if scope_chat is None:
+        # Empty DB (nothing to scope) — nothing to show.
+        sys.stderr.write("handoff-briefing: no messages to scope; empty section\n")
+        sys.exit(0)
+
+    where = ["role IN ('user', 'assistant')", "chat_id = ?"]
+    params = [scope_chat]
+    if scope_thread_known:
+        if scope_thread_is_null:
+            where.append("thread_id IS NULL")
+        else:
+            where.append("thread_id = ?")
+            params.append(scope_thread)
+    params.append(limit)
+
+    sys.stderr.write(
+        "handoff-briefing: scoping recent conversation to chat=%s thread=%s (source=%s)\n"
+        % (scope_chat, "NULL" if scope_thread_is_null else (scope_thread if scope_thread_known else "any"), scope_source)
+    )
+
     cur.execute(
-        """
-        SELECT role, user, ts, text
-        FROM messages
-        WHERE role IN ('user', 'assistant')
-        ORDER BY ts DESC
-        LIMIT ?
-        """,
-        (limit,),
+        "SELECT role, user, ts, text FROM messages WHERE "
+        + " AND ".join(where)
+        + " ORDER BY ts DESC LIMIT ?",
+        params,
     )
     rows = list(reversed(cur.fetchall()))
     conn.close()
@@ -110,6 +223,70 @@ $TELEGRAM_ROWS"
   fi
 fi
 
+# ── Header (cheap, no network) — computed early so the recent-conversation
+# section can be flushed to disk BEFORE the slow Hindsight hop. ──────────────
+# Restart timestamp — model-facing: it lands in the resume-turn system prompt
+# via --append-system-prompt ("You just restarted at …"). Render the agent's
+# LOCAL am/pm wall clock, NOT UTC, so the restart turn never sees a competing
+# UTC "now". Same SWITCHROOM_TIMEZONE → TZ → UTC cascade the daily section uses.
+_TZ_VAL="${SWITCHROOM_TIMEZONE:-${TZ:-UTC}}"
+TIMESTAMP=$(TZ="$_TZ_VAL" date '+%A %Y-%m-%d %I:%M %p %Z' 2>/dev/null || date '+%A %Y-%m-%d %I:%M %p %Z')
+RESTART_REASON="unknown"
+if [ -n "$AGENT_DIR" ] && [ -f "$AGENT_DIR/.restart-reason" ]; then
+  RESTART_REASON=$(cat "$AGENT_DIR/.restart-reason" 2>/dev/null | head -1 | tr -d '\r\n')
+fi
+if [ -n "${SWITCHROOM_PENDING_ENDED_VIA:-}" ]; then
+  RESTART_REASON="$SWITCHROOM_PENDING_ENDED_VIA"
+fi
+BRIEFING_HEADER="You just restarted at ${TIMESTAMP}. Previous session ended via: ${RESTART_REASON}. Consult this briefing before responding."
+
+# Resolve the output destination up front (file mode only).
+OUTPUT_FILE=""
+OUTPUT_TMP=""
+if [ "$STDOUT_MODE" != "1" ] && [ -n "$AGENT_DIR" ]; then
+  OUTPUT_FILE="$AGENT_DIR/.handoff-briefing.md"
+  OUTPUT_TMP="${OUTPUT_FILE}.tmp.$$"
+fi
+
+# Incremental emit (#continuity). Sections are flushed to the output file as
+# each source resolves — the recent-conversation section (the highest-value,
+# always-local part) is written BEFORE the network-bound Hindsight hop. So a
+# late-stage kill (e.g. start.sh's outer `timeout`, SIGTERM by default) mid-Hindsight still
+# leaves the recent conversation on disk instead of nothing. The first flush
+# writes header+section atomically via tmp+mv; later sections append. In
+# stdout/no-AGENT_DIR mode we buffer and print once at the end instead.
+FILE_STARTED=0
+STDOUT_BUFFER=""
+emit_section() {
+  # $1 = section content (assumed non-empty)
+  section="$1"
+  if [ -n "$OUTPUT_FILE" ]; then
+    if [ "$FILE_STARTED" = "0" ]; then
+      # First section: header + divider + section, written atomically.
+      printf '%s\n\n---\n\n%s' "$BRIEFING_HEADER" "$section" > "$OUTPUT_TMP" \
+        && mv -f "$OUTPUT_TMP" "$OUTPUT_FILE"
+      FILE_STARTED=1
+    else
+      printf '\n\n---\n\n%s' "$section" >> "$OUTPUT_FILE"
+    fi
+  else
+    if [ -z "$STDOUT_BUFFER" ]; then
+      STDOUT_BUFFER="$section"
+    else
+      STDOUT_BUFFER="$STDOUT_BUFFER
+
+---
+
+$section"
+    fi
+  fi
+}
+
+# Flush the recent-conversation section NOW, before Hindsight.
+if [ -n "$TELEGRAM_SECTION" ]; then
+  emit_section "$TELEGRAM_SECTION"
+fi
+
 # ── Source 2: Hindsight recall ──────────────────────────────────────────────────
 HINDSIGHT_SECTION=""
 if [ -n "$HINDSIGHT_URL" ] && [ -n "$HINDSIGHT_BANK" ] && command -v curl >/dev/null 2>&1 && command -v jq >/dev/null 2>&1; then
@@ -133,14 +310,16 @@ $RECALL_TEXT"
     fi
   fi
 fi
+if [ -n "$HINDSIGHT_SECTION" ]; then
+  emit_section "$HINDSIGHT_SECTION"
+fi
 
 # ── Source 3: Today's daily memory ─────────────────────────────────────────────
-# Resolve "today" in the agent's LOCAL time — NOT the process default (UTC on
-# most hosts/CI). TODAY keys the daily-memory lookup (memory/${TODAY}.md); using
-# UTC here would look up the wrong day's file during the window where the local
-# date is ahead of/behind UTC, silently dropping today's memory. Same
-# SWITCHROOM_TIMEZONE → TZ → UTC cascade the restart-timestamp render below uses.
-_TZ_VAL="${SWITCHROOM_TIMEZONE:-${TZ:-UTC}}"
+# TODAY keys the daily-memory lookup (memory/${TODAY}.md) in the agent's LOCAL
+# time (_TZ_VAL, resolved in the header block above) — NOT the process default
+# (UTC on most hosts/CI). Using UTC here would look up the wrong day's file
+# during the window where the local date is ahead of/behind UTC, silently
+# dropping today's memory.
 DAILY_SECTION=""
 TODAY=$(TZ="$_TZ_VAL" date +%Y-%m-%d 2>/dev/null || date +%Y-%m-%d 2>/dev/null || true)
 if [ -n "$TODAY" ] && [ -n "$WORKSPACE_DIR" ]; then
@@ -154,66 +333,26 @@ $DAILY_CONTENT"
     fi
   fi
 fi
-
-# ── Assemble briefing ───────────────────────────────────────────────────────────
-# Restart timestamp — model-facing: it lands in the resume-turn system prompt
-# via --append-system-prompt ("You just restarted at …"). Render the agent's
-# LOCAL am/pm wall clock, NOT UTC, so the restart turn never sees a competing
-# UTC "now" (the whole point of the deterministic-local-time work). Same
-# SWITCHROOM_TIMEZONE → TZ → UTC cascade and `%A %Y-%m-%d %I:%M %p %Z` am/pm
-# format the UserPromptSubmit local-time hook (bin/timezone-hook.sh) uses.
-# (_TZ_VAL is computed once above, in the daily-memory section.)
-TIMESTAMP=$(TZ="$_TZ_VAL" date '+%A %Y-%m-%d %I:%M %p %Z' 2>/dev/null || date '+%A %Y-%m-%d %I:%M %p %Z')
-
-# Determine restart reason if available
-RESTART_REASON="unknown"
-if [ -n "$AGENT_DIR" ] && [ -f "$AGENT_DIR/.restart-reason" ]; then
-  RESTART_REASON=$(cat "$AGENT_DIR/.restart-reason" 2>/dev/null | head -1 | tr -d '\r\n')
+if [ -n "$DAILY_SECTION" ]; then
+  emit_section "$DAILY_SECTION"
 fi
-# Also check SWITCHROOM_PENDING_ENDED_VIA if set by start.sh
-if [ -n "${SWITCHROOM_PENDING_ENDED_VIA:-}" ]; then
-  RESTART_REASON="$SWITCHROOM_PENDING_ENDED_VIA"
-fi
-
-# Build the briefing body
-SECTIONS=""
-for section in "$TELEGRAM_SECTION" "$HINDSIGHT_SECTION" "$DAILY_SECTION"; do
-  if [ -n "$section" ]; then
-    if [ -n "$SECTIONS" ]; then
-      SECTIONS="$SECTIONS
-
----
 
-$section"
-    else
-      SECTIONS="$section"
-    fi
+# ── Finalize ────────────────────────────────────────────────────────────────────
+# Every section was flushed as it resolved (emit_section). Here we only close
+# out the chosen sink. An all-empty briefing wrote nothing — leave it that way
+# so start.sh skips the --append-system-prompt arg.
+if [ -n "$OUTPUT_FILE" ]; then
+  # File mode. FILE_STARTED=1 means at least one section was written atomically
+  # (header+first) with the rest appended; add the trailing newline the
+  # single-shot writer used to emit. If nothing was written, no file exists.
+  if [ "$FILE_STARTED" = "1" ]; then
+    printf '\n' >> "$OUTPUT_FILE"
   fi
-done
-
-# Empty briefing — nothing to inject
-if [ -z "$SECTIONS" ]; then
-  exit 0
-fi
-
-BRIEFING="You just restarted at ${TIMESTAMP}. Previous session ended via: ${RESTART_REASON}. Consult this briefing before responding.
-
----
-
-${SECTIONS}"
-
-# ── Output ──────────────────────────────────────────────────────────────────────
-if [ "$STDOUT_MODE" = "1" ]; then
-  printf '%s\n' "$BRIEFING"
 else
-  if [ -z "$AGENT_DIR" ]; then
-    # Fallback: write to stdout if AGENT_DIR is not set
-    printf '%s\n' "$BRIEFING"
-    exit 0
+  # stdout / no-AGENT_DIR mode — buffered; print the whole briefing once.
+  if [ -n "$STDOUT_BUFFER" ]; then
+    printf '%s\n\n---\n\n%s\n' "$BRIEFING_HEADER" "$STDOUT_BUFFER"
   fi
-  OUTPUT_FILE="$AGENT_DIR/.handoff-briefing.md"
-  OUTPUT_TMP="${OUTPUT_FILE}.tmp.$$"
-  printf '%s\n' "$BRIEFING" > "$OUTPUT_TMP" && mv -f "$OUTPUT_TMP" "$OUTPUT_FILE"
 fi
 
 exit 0

package/dist/agent-scheduler/index.js

@@ -11216,6 +11216,7 @@ var SessionContinuitySchema = exports_external.object({
   max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
   resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
   resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale."),
+  briefing: exports_external.enum(["gateway", "legacy"]).optional().describe("Which mechanism assembles the fresh-session reorientation briefing " + "(default 'legacy'). 'legacy' keeps today's behaviour: the Stop-hook " + ".handoff.md and/or bin/handoff-briefing.sh, injected via " + "--append-system-prompt. 'gateway' moves it to a gateway boot-time " + "builder sourced from the durable history.db (crash-independent, " + "surface-scoped, token-budgeted) and injects it as a synthetic " + '<channel source="boot_briefing"> inbound over the durable spool — ' + "keeping the system-prompt prefix stable for cross-session prompt " + "caching. Suppressed automatically when resume_mode is " + "'continue'/'auto' (the transcript may be replayed) and on a /reset " + "force-fresh boot. Threaded to the gateway as " + "SWITCHROOM_SESSION_BRIEFING."),
   boot_resume: exports_external.enum(["always", "in-flight", "never"]).optional().describe("How the gateway auto-resumes a turn that was IN FLIGHT when the " + "agent restarted. 'in-flight' (default) resumes genuinely " + "interrupted work even after a deliberate/operator restart — a " + "sanctioned restart landing mid-turn no longer silently drops the " + "work. 'always' forces resume unconditionally (same as the " + "SWITCHROOM_BOOT_RESUME_ALWAYS=1 escape hatch). 'never' is the " + "quota-saving posture: don't auto-replay work across a clean " + "restart — but the user is STILL sent a passive notice of what was " + "in flight (silence is never used). Independent of the at-most-once " + "resume ledger and the bounded resume-chain loop-guard, which always " + "apply. Threaded to the gateway as SWITCHROOM_BOOT_RESUME."),
   session_retention_max_count: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): keep at most this many " + "newest session transcripts under .claude/projects; older ones " + "past both this count and the age bound are pruned by the Stop " + "hook. The newest sessions (and the handoff source) are always " + "kept. Default 20; set 0 to disable the count bound."),
   session_retention_max_age_days: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): prune session transcripts " + "older than this many days (a file is deleted only when it is BOTH " + "over the count bound and older than this). Default 30; set 0 to " + "disable the age bound.")
@@ -11348,8 +11349,24 @@ var TelegramChannelSchema = exports_external.object({
   }
   return tg;
 });
+var BuzzChannelSchema = exports_external.object({
+  enabled: exports_external.boolean().default(false).describe("Master switch for the per-agent Buzz sidecar. Default false — the " + "channel ships dark; start.sh forks the sidecar only when true."),
+  relay_url: exports_external.string().regex(/^wss?:\/\//, "relay_url must be a ws:// or wss:// URL").describe("CANONICAL WebSocket URL of the closed Buzz relay — the exact string " + "the relay expects in the NIP-42 `relay` auth tag (e.g. " + "'ws://127.0.0.1:3000'). A live probe proved the relay validates this " + "tag as an exact string match against its own URL BEFORE the " + "membership check, so it is the relay's advertised identity, NOT " + "necessarily the address the sidecar dials. Set relay_dial_url when " + "the reachable address differs (a docker-network IP)."),
+  relay_dial_url: exports_external.string().regex(/^wss?:\/\//, "relay_dial_url must be a ws:// or wss:// URL").optional().describe("Reachable ws:// / wss:// address the sidecar DIALS when it differs " + "from the canonical relay_url (e.g. a docker-network IP the relay's " + "own 127.0.0.1 can't stand in for). The NIP-42 auth tag still uses " + "relay_url. Defaults to relay_url when unset."),
+  relay_host: exports_external.string().regex(/^(\[[0-9a-fA-F:]+\]|[^\s/?#:@]+)(:\d+)?$/, "relay_host must be a bare host[:port] authority — no scheme, path, or userinfo (e.g. '127.0.0.1:3000')").describe("REQUIRED HTTP Host header authority sent verbatim on the WS upgrade " + "(e.g. '127.0.0.1:3000', port included). The relay resolves its " + "community from this header before the upgrade and returns HTTP 404 if " + "it is missing/wrong, so it must match the relay's configured " + "authority and is deployment config, never derived from the dial URL."),
+  nsec_vault_key: exports_external.string().default("buzz/{agent}-nsec").describe("Vault KEY NAME for the agent's Nostr secret key. Broker-fetched " + "in-process at sidecar boot; NEVER resolved into env or logged. " + "'{agent}' is substituted with the agent name."),
+  operator_pubkey: exports_external.string().regex(/^(npub1[02-9ac-hj-np-z]{58}|[0-9a-f]{64})$/, "operator_pubkey must be a bech32 npub or 64-char hex pubkey").describe("The operator's Nostr pubkey (npub or hex). Always in the effective " + "inbound allowlist — the fail-closed default is operator-only."),
+  authorized_pubkeys: exports_external.array(exports_external.string()).default([]).describe("Additional pubkeys (npub or hex) whose signed events may become " + "turns. Effective allowlist = this ∪ {operator_pubkey}. Empty by " + "default (operator-only)."),
+  mirror: exports_external.enum(["both", "origin", "off"]).default("both").describe("Cross-surface mirror mode. 'both' answers on the origin channel AND " + "mirrors a copy to the other; 'off' is a true kill-switch that disables " + "the channel in BOTH directions (the inbound sidecar exits idle). " + "Phase 2b (S2): 'origin' is DEFERRED — the hub's mirror hook lives only " + "in sendReply, so 'origin' cannot be honored soundly; a configured " + "'origin' is degraded to 'off' (dark) at runtime by both the sidecar " + "config loader and the hub (channel-route.ts parseConfiguredMirrorMode). " + "Only 'both' and 'off' ship live in 2b."),
+  chat_id: exports_external.string().min(1, "chat_id must be a non-empty Telegram chat id").describe("Telegram chat id an injected Buzz turn is routed to. Phase 1 is " + "inbound-only, so the agent's reply lands here on Telegram (the " + "authoritative surface); in later phases this is the chat the Buzz " + "turn's Telegram copy maps to. Required — the sidecar refuses to run " + "live without it (BUZZ_CHAT_ID)."),
+  default_channel_id: exports_external.string().describe("Relay-minted group UUID (the NIP-29 `h` tag) the sidecar subscribes " + "to and stamps on injected turns."),
+  channel_map: exports_external.record(exports_external.string(), exports_external.string()).default({}).describe("Optional map of extra group UUIDs → friendly labels."),
+  pubkey_names: exports_external.record(exports_external.string(), exports_external.string()).default({}).describe("Optional petnames: hex/npub pubkey → display name, used to label " + "the sender on injected turns."),
+  pinned_relay_digest: exports_external.string().optional().describe("Pinned relay image digest (M4). RESERVED — no consumer of this field " + "exists; the existing compat-check (compat-check.ts) validates only " + "the wire contract (AUTH kind, message kind, tag names) and does not " + "read this field. Kept in the schema so the intended digest-pin can " + "be wired without a config shape change.")
+}).strict();
 var ChannelsSchema = exports_external.object({
-  telegram: TelegramChannelSchema
+  telegram: TelegramChannelSchema,
+  buzz: BuzzChannelSchema.optional()
 }).optional();
 var TIMEZONE_REGEX = /^UTC$|^[A-Z][A-Za-z0-9_+-]+(\/[A-Z][A-Za-z0-9_+-]+){1,2}$/;
 var ApproverIdSchema = exports_external.union([exports_external.number(), exports_external.string().regex(/^\d+$/)]);

package/dist/auth-broker/index.js

@@ -10994,7 +10994,7 @@ var init_observation_scopes = __esm(() => {
 });
 
 // src/config/schema.ts
-var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, ObservationScopesSchema, ObservationScopeStrategySchema, AntiConfabulationDirectiveSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleServiceTokenSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
+var CodeRepoEntrySchema, AgentBindMountSchema, HttpDiffPollSchema, PollSpecSchema, TelegramMessageActionSchema, WebhookActionSchema, ActionSpecSchema, ScheduleEntrySchema, AgentSoulSchema, AgentToolsSchema, ObservationScopesSchema, ObservationScopeStrategySchema, AntiConfabulationDirectiveSchema, AgentMemorySchema, HookEntrySchema, AgentHooksSchema, SubagentSchema, SessionSchema, SessionContinuitySchema, webhookDispatchRule, TelegramChannelSchema, BuzzChannelSchema, ChannelsSchema, TIMEZONE_REGEX, ApproverIdSchema, GoogleWorkspaceTierSchema, GoogleServiceTokenSchema, GoogleWorkspaceConfigSchema, LiteLLMConfigSchema, HindsightPerOpLlmSchema, HindsightConfigSchema, MicrosoftWorkspaceConfigSchema, NotionWorkspaceConfigSchema, AgentGoogleWorkspaceConfigSchema, MicrosoftAccountEmailSchema, MicrosoftToolTokenSchema, MicrosoftAccountBindingSchema, AgentMicrosoftWorkspaceConfigSchema, AgentNotionWorkspaceConfigSchema, ReactionsSchema, ReactionDispatchSchema, releaseBlockFields, ReleaseBlock, RootReleaseBlock, NetworkIsolationSchema, servesField, knowsField, profileFields, ProfileSchema, _omitExtends, defaultsFields, AgentDefaultsSchema, AgentSchema, TelegramConfigSchema, MemoryBackendConfigSchema, VaultConfigSchema, QuotaConfigSchema, AutoReleaseCheckSchema, HostControlConfigSchema, WebServiceConfigSchema, FleetHealthConfigSchema, HostdConfigSchema, CronEgressSchema, CronConfigSchema, UserSchema, SwitchroomConfigSchema;
 var init_schema = __esm(() => {
   init_zod();
   init_observation_scopes();
@@ -11241,6 +11241,7 @@ var init_schema = __esm(() => {
     max_turns_in_briefing: exports_external.number().int().positive().optional().describe("Cap on recent user/assistant turn pairs fed to the summarizer."),
     resume_mode: exports_external.enum(["auto", "continue", "handoff", "none"]).optional().describe("How to resume the next session. 'handoff' (default as of #362) " + "never passes --continue; a fresh Claude starts each restart and " + "reads a briefing assembled from recent Telegram messages, Hindsight " + "recall, and today's daily memory file. 'auto' uses --continue when " + "the latest JSONL is smaller than resume_max_bytes, else falls back " + "to the handoff briefing. 'continue' always passes --continue. " + "'none' starts completely fresh every time."),
     resume_max_bytes: exports_external.number().int().positive().optional().describe("Byte threshold above which 'auto' mode falls back to handoff " + "instead of --continue. Default 2_000_000 (~2MB). Large transcripts " + "can blow out the context window even with prefix caching, and " + "--continue replay is known-fragile at scale."),
+    briefing: exports_external.enum(["gateway", "legacy"]).optional().describe("Which mechanism assembles the fresh-session reorientation briefing " + "(default 'legacy'). 'legacy' keeps today's behaviour: the Stop-hook " + ".handoff.md and/or bin/handoff-briefing.sh, injected via " + "--append-system-prompt. 'gateway' moves it to a gateway boot-time " + "builder sourced from the durable history.db (crash-independent, " + "surface-scoped, token-budgeted) and injects it as a synthetic " + '<channel source="boot_briefing"> inbound over the durable spool — ' + "keeping the system-prompt prefix stable for cross-session prompt " + "caching. Suppressed automatically when resume_mode is " + "'continue'/'auto' (the transcript may be replayed) and on a /reset " + "force-fresh boot. Threaded to the gateway as " + "SWITCHROOM_SESSION_BRIEFING."),
     boot_resume: exports_external.enum(["always", "in-flight", "never"]).optional().describe("How the gateway auto-resumes a turn that was IN FLIGHT when the " + "agent restarted. 'in-flight' (default) resumes genuinely " + "interrupted work even after a deliberate/operator restart — a " + "sanctioned restart landing mid-turn no longer silently drops the " + "work. 'always' forces resume unconditionally (same as the " + "SWITCHROOM_BOOT_RESUME_ALWAYS=1 escape hatch). 'never' is the " + "quota-saving posture: don't auto-replay work across a clean " + "restart — but the user is STILL sent a passive notice of what was " + "in flight (silence is never used). Independent of the at-most-once " + "resume ledger and the bounded resume-chain loop-guard, which always " + "apply. Threaded to the gateway as SWITCHROOM_BOOT_RESUME."),
     session_retention_max_count: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): keep at most this many " + "newest session transcripts under .claude/projects; older ones " + "past both this count and the age bound are pruned by the Stop " + "hook. The newest sessions (and the handoff source) are always " + "kept. Default 20; set 0 to disable the count bound."),
     session_retention_max_age_days: exports_external.number().int().nonnegative().optional().describe("Session-JSONL retention (issue #2792): prune session transcripts " + "older than this many days (a file is deleted only when it is BOTH " + "over the count bound and older than this). Default 30; set 0 to " + "disable the age bound.")
@@ -11373,8 +11374,24 @@ var init_schema = __esm(() => {
     }
     return tg;
   });
+  BuzzChannelSchema = exports_external.object({
+    enabled: exports_external.boolean().default(false).describe("Master switch for the per-agent Buzz sidecar. Default false — the " + "channel ships dark; start.sh forks the sidecar only when true."),
+    relay_url: exports_external.string().regex(/^wss?:\/\//, "relay_url must be a ws:// or wss:// URL").describe("CANONICAL WebSocket URL of the closed Buzz relay — the exact string " + "the relay expects in the NIP-42 `relay` auth tag (e.g. " + "'ws://127.0.0.1:3000'). A live probe proved the relay validates this " + "tag as an exact string match against its own URL BEFORE the " + "membership check, so it is the relay's advertised identity, NOT " + "necessarily the address the sidecar dials. Set relay_dial_url when " + "the reachable address differs (a docker-network IP)."),
+    relay_dial_url: exports_external.string().regex(/^wss?:\/\//, "relay_dial_url must be a ws:// or wss:// URL").optional().describe("Reachable ws:// / wss:// address the sidecar DIALS when it differs " + "from the canonical relay_url (e.g. a docker-network IP the relay's " + "own 127.0.0.1 can't stand in for). The NIP-42 auth tag still uses " + "relay_url. Defaults to relay_url when unset."),
+    relay_host: exports_external.string().regex(/^(\[[0-9a-fA-F:]+\]|[^\s/?#:@]+)(:\d+)?$/, "relay_host must be a bare host[:port] authority — no scheme, path, or userinfo (e.g. '127.0.0.1:3000')").describe("REQUIRED HTTP Host header authority sent verbatim on the WS upgrade " + "(e.g. '127.0.0.1:3000', port included). The relay resolves its " + "community from this header before the upgrade and returns HTTP 404 if " + "it is missing/wrong, so it must match the relay's configured " + "authority and is deployment config, never derived from the dial URL."),
+    nsec_vault_key: exports_external.string().default("buzz/{agent}-nsec").describe("Vault KEY NAME for the agent's Nostr secret key. Broker-fetched " + "in-process at sidecar boot; NEVER resolved into env or logged. " + "'{agent}' is substituted with the agent name."),
+    operator_pubkey: exports_external.string().regex(/^(npub1[02-9ac-hj-np-z]{58}|[0-9a-f]{64})$/, "operator_pubkey must be a bech32 npub or 64-char hex pubkey").describe("The operator's Nostr pubkey (npub or hex). Always in the effective " + "inbound allowlist — the fail-closed default is operator-only."),
+    authorized_pubkeys: exports_external.array(exports_external.string()).default([]).describe("Additional pubkeys (npub or hex) whose signed events may become " + "turns. Effective allowlist = this ∪ {operator_pubkey}. Empty by " + "default (operator-only)."),
+    mirror: exports_external.enum(["both", "origin", "off"]).default("both").describe("Cross-surface mirror mode. 'both' answers on the origin channel AND " + "mirrors a copy to the other; 'off' is a true kill-switch that disables " + "the channel in BOTH directions (the inbound sidecar exits idle). " + "Phase 2b (S2): 'origin' is DEFERRED — the hub's mirror hook lives only " + "in sendReply, so 'origin' cannot be honored soundly; a configured " + "'origin' is degraded to 'off' (dark) at runtime by both the sidecar " + "config loader and the hub (channel-route.ts parseConfiguredMirrorMode). " + "Only 'both' and 'off' ship live in 2b."),
+    chat_id: exports_external.string().min(1, "chat_id must be a non-empty Telegram chat id").describe("Telegram chat id an injected Buzz turn is routed to. Phase 1 is " + "inbound-only, so the agent's reply lands here on Telegram (the " + "authoritative surface); in later phases this is the chat the Buzz " + "turn's Telegram copy maps to. Required — the sidecar refuses to run " + "live without it (BUZZ_CHAT_ID)."),
+    default_channel_id: exports_external.string().describe("Relay-minted group UUID (the NIP-29 `h` tag) the sidecar subscribes " + "to and stamps on injected turns."),
+    channel_map: exports_external.record(exports_external.string(), exports_external.string()).default({}).describe("Optional map of extra group UUIDs → friendly labels."),
+    pubkey_names: exports_external.record(exports_external.string(), exports_external.string()).default({}).describe("Optional petnames: hex/npub pubkey → display name, used to label " + "the sender on injected turns."),
+    pinned_relay_digest: exports_external.string().optional().describe("Pinned relay image digest (M4). RESERVED — no consumer of this field " + "exists; the existing compat-check (compat-check.ts) validates only " + "the wire contract (AUTH kind, message kind, tag names) and does not " + "read this field. Kept in the schema so the intended digest-pin can " + "be wired without a config shape change.")
+  }).strict();
   ChannelsSchema = exports_external.object({
-    telegram: TelegramChannelSchema
+    telegram: TelegramChannelSchema,
+    buzz: BuzzChannelSchema.optional()
   }).optional();
   TIMEZONE_REGEX = /^UTC$|^[A-Z][A-Za-z0-9_+-]+(\/[A-Z][A-Za-z0-9_+-]+){1,2}$/;
   ApproverIdSchema = exports_external.union([exports_external.number(), exports_external.string().regex(/^\d+$/)]);