feat(agents2): teams and channel templates

.github/workflows/release.yml

@@ -102,7 +102,7 @@ jobs:
           entitlements-plist-path: src-tauri/entitlements.plist
           artifact-name: buzz-app-${{ github.run_id }}-${{ github.run_attempt }}-arm64
 
-      - name: Verify release DMG and bundled runtime
+      - name: Verify release DMG
         env:
           SIGNED_DMG: ${{ steps.codesign.outputs.signed-dmg-path }}
         run: |
@@ -116,23 +116,6 @@ jobs:
           xcrun stapler validate "$app"
           codesign --display --entitlements :- "$app" > "$RUNNER_TEMP/signed-entitlements.plist"
           test "$(/usr/libexec/PlistBuddy -c 'Print :com.apple.security.device.audio-input' "$RUNNER_TEMP/signed-entitlements.plist")" = true || { echo '::error::Signed app is missing microphone entitlement'; exit 1; }
-          node --input-type=module - "$app/Contents/Resources/agent-runtime" <<'JS'
-          import { readFileSync, lstatSync } from 'node:fs';
-          import assert from 'node:assert/strict';
-          const directory = process.argv[2];
-          const source = JSON.parse(readFileSync('runtime/agent-runtime.json', 'utf8'));
-          const manifest = JSON.parse(readFileSync(`${directory}/manifest.json`, 'utf8'));
-          assert.equal(manifest.version, 2);
-          assert.deepEqual(manifest.goose, source.goose);
-          assert.equal(manifest.revision, source.revision);
-          assert.equal(manifest.target, 'aarch64-apple-darwin');
-          assert.deepEqual(Object.keys(manifest.files).sort(), [...source.tools].sort());
-          for (const name of source.tools) {
-            const path = `${directory}/${name}`;
-            assert.ok(lstatSync(path).isFile(), `${name} must be a regular file`);
-            assert.ok(lstatSync(path).mode & 0o111, `${name} must be executable`);
-          }
-          JS
 
       - name: Stage release assets and checksums
         env:
@@ -321,20 +304,9 @@ jobs:
       - run: pnpm install --frozen-lockfile
       - name: Set candidate version
         run: node scripts/candidate-version.mjs
-      # Vendored OpenSSL (Goose runtime) runs Configure with `perl`. In this
-      # job's bash shell that is Git's MSYS perl, which lacks modules the
-      # Configure script needs. Use the image's Strawberry Perl instead.
-      - name: Select Strawberry Perl for vendored OpenSSL
-        shell: pwsh
-        run: |
-          $perl = 'C:\Strawberry\perl\bin\perl.exe'
-          if (!(Test-Path $perl)) { throw "Strawberry Perl not found at $perl" }
-          & $perl -MLocale::Maketext::Simple -MIPC::Cmd -e 1
-          if ($LASTEXITCODE -ne 0) { throw 'Strawberry Perl lacks OpenSSL Configure modules' }
-          "OPENSSL_SRC_PERL=$perl" >> $env:GITHUB_ENV
       - name: Build NSIS installer
         run: pnpm tauri build --ci --no-sign --bundles nsis --config "$RUNNER_TEMP/candidate.json" -- --locked
-      - name: Install into disposable runner and verify resource payload
+      - name: Install into disposable runner and verify app executable
         shell: pwsh
         run: |
           $installers = @(Get-ChildItem target/release/bundle/nsis/*.exe)
@@ -344,8 +316,6 @@ jobs:
           $process = Start-Process $installers[0].FullName -ArgumentList "/S /D=$destination" -Wait -PassThru
           if ($process.ExitCode -ne 0) { throw "Installer failed: $($process.ExitCode)" }
           if (!(Test-Path "$destination\buzz-foundation.exe")) { throw 'App executable missing' }
-          node scripts/verify-runtime-bundle.mjs "$destination\agent-runtime" x86_64-pc-windows-msvc
-          if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
       - name: Stage candidate and checksum
         run: |
           mkdir release-assets
@@ -403,19 +373,20 @@ jobs:
         run: node scripts/candidate-version.mjs
       - name: Build deb and AppImage
         run: pnpm tauri build --ci --no-sign --bundles deb,appimage --config "$RUNNER_TEMP/candidate.json" -- --locked
-      - name: Repair AppImage and verify both packaged resource payloads
+      - name: Repair AppImage and verify packaged app executables
         run: |
           shopt -s nullglob
           debs=(target/release/bundle/deb/*.deb)
           images=(target/release/bundle/appimage/*.AppImage)
           test "${#debs[@]}" -eq 1 && test "${#images[@]}" -eq 1
           bash scripts/fix-appimage.sh "${images[0]}"
           dpkg-deb -x "${debs[0]}" "$RUNNER_TEMP/deb"
-          node scripts/verify-runtime-bundle.mjs "$RUNNER_TEMP/deb/usr/lib/Buzz Foundation/agent-runtime" x86_64-unknown-linux-gnu
+          test -x "$RUNNER_TEMP/deb/usr/bin/buzz-foundation"
           image=$(realpath "${images[0]}")
           mkdir "$RUNNER_TEMP/appimage"
           (cd "$RUNNER_TEMP/appimage" && "$image" --appimage-extract >/dev/null)
-          node scripts/verify-runtime-bundle.mjs "$RUNNER_TEMP/appimage/squashfs-root/usr/lib/Buzz Foundation/agent-runtime" x86_64-unknown-linux-gnu
+          test -x "$RUNNER_TEMP/appimage/squashfs-root/usr/bin/buzz-foundation"
+          test -x "$RUNNER_TEMP/appimage/squashfs-root/usr/bin/buzz-foundation.bin"
           mkdir release-assets
           cp "${debs[0]}" "release-assets/Buzz_${VERSION}_amd64.deb"
           cp "${images[0]}" "release-assets/Buzz_${VERSION}_x86_64.AppImage"

.gitignore

@@ -31,7 +31,6 @@ coverage/
 dist-author/
 dist-plugins/
 
-# Generated immutable agent runtime resources.
+# Leftover generated v1 runtime resources from older checkouts.
 src-tauri/resources/agent-runtime/*
-!src-tauri/resources/agent-runtime/README.md
 dist-buzz-mcp/

AGENTS.md

@@ -272,3 +272,14 @@ communities load. Do not expose credentials in logs or responses. If the identit
 or community loading cannot be verified, report that limitation before presenting
 the build as ready to test. Follow the worktree bootstrap instructions above;
 do not hardcode identity values into tracked files.
+
+## Inspect a live agent session
+
+When asked to inspect or debug an Agent conversation, open its live session viewer
+for the human:
+
+```sh
+bin/node scripts/session-debug.mjs '<Buzz thread ID or link>'
+```
+
+Keep it running for live updates. See [details](docs/session-debugging.md) if needed.