Skip to content

fix(acp): wake agents on workflow @mentions under owner-only gate - #3889

Open
Chessing234 wants to merge 3 commits into
block:mainfrom
Chessing234:fix/workflow-mention-author-gate
Open

fix(acp): wake agents on workflow @mentions under owner-only gate#3889
Chessing234 wants to merge 3 commits into
block:mainfrom
Chessing234:fix/workflow-mention-author-gate

Conversation

@Chessing234

Copy link
Copy Markdown
Contributor

Summary

  • Resolve the workflow owner's pubkey from relay-signed send_message events before author_allowed runs, so scheduled @mentions reach mention matching instead of being dropped as relay-authored noise.
  • Verify the event signer against the relay's NIP-11 self identity and fail closed when provenance is missing or forged.
  • Apply the same attribution in setup-listener mode so setup nudges respect owner-only policy for workflow mentions.

Fixes #3858

Test plan

  • cargo test -p buzz-acp workflow_author
  • cargo test -p buzz-acp
  • Trigger a workflow send_message that @mentions a managed agent under default owner-only mode and confirm the agent receives a turn

Made with Cursor

Workflow send_message events are relay-signed; attribute the workflow
owner from actor/p tags before author_allowed runs so mention wake works
under default owner-only mode. Fail closed when provenance is missing.

Signed-off-by: Taksh <takshkothari09@gmail.com>
Fetch the relay self pubkey over unauthenticated NIP-11 so buzz-acp can
verify relay-signed workflow output before delegating to the owner.

Signed-off-by: Taksh <takshkothari09@gmail.com>
Use the attributed workflow owner for author_allowed and prompt metadata
in normal and setup-listener modes so scheduled @mentions wake agents.

Signed-off-by: Taksh <takshkothari09@gmail.com>
@Chessing234
Chessing234 requested a review from a team as a code owner July 31, 2026 10:28
@Chessing234

Copy link
Copy Markdown
Contributor Author

@tlongwell-block @wesbillman @wpfleger96 mind taking a look when you get a chance?

@Chessing234
Chessing234 force-pushed the fix/workflow-mention-author-gate branch from 4b5ec81 to a0cb11b Compare August 5, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] Workflow send_message @mentions never wake the mentioned agent: author_allowed drops relay-signed workflow events before mention matching

1 participant