feat(agents): durable managed-agent runtime (configurable orchestration workflows)

AGENTS.md

@@ -66,6 +66,7 @@ crates/
   buzz-media          # Blossom/S3 media storage
   # Agent surface
   buzz-acp            # ACP harness bridging Buzz events to AI agents
+  buzz-runtime     # Local managed-agent runtime: durable job store, artifacts, control server/client
   buzz-agent          # Minimal ACP-compliant agent (non-streaming, tool-calls-as-output)
   buzz-dev-mcp        # Developer MCP server — shell + file-edit tools
   buzz-persona        # Agent persona packs

ARCHITECTURE.md

@@ -89,6 +89,7 @@ buzz-core    (zero I/O — types, verification, filter matching, kind registry)
 buzz-acp            (agent harness — bridges relay @mentions → AI agents via ACP/JSON-RPC)
 buzz-sdk            (typed Nostr event builders — used by buzz-acp and buzz-cli)
 buzz-media          (Blossom/S3 media storage)
+buzz-runtime (local managed-agent runtime substrate: durable job store, artifact vault, control protocol)
 buzz-cli            (agent-first CLI)
 buzz-admin          (operator CLI: relay membership + key generation)
 buzz-test-client    (integration test harness + manual CLI)

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+
+## Unreleased
+
+### Desktop and shared changes
+
+- feat(agents): durable managed agents — serialized inboxes, resumable channel sessions, authenticated detached jobs, signed relay progress, Desktop reattachment, and persistent assignment state
+
 ## v0.5.17
 
 ### Desktop and shared changes

Cargo.toml

@@ -10,6 +10,7 @@ members = [
     "crates/buzz-search",
     "crates/buzz-audit",
     "crates/buzz-acp",
+    "crates/buzz-runtime",
     "crates/buzz-agent",
     "crates/sprig",
     "crates/buzz-test-client",
@@ -56,6 +57,7 @@ tower-http  = { version = "0.6", features = ["trace", "cors", "compression-gzip"
 sqlx = { version = "0.9", features = [
     "runtime-tokio", "tls-rustls", "postgres", "uuid", "chrono", "json"
 ] }
+rusqlite = { version = "0.37", features = ["bundled"] }
 
 # Redis
 redis        = { version = "1.0", features = ["tokio-comp", "connection-manager", "tokio-rustls-comp"] }
@@ -80,6 +82,7 @@ iroh = { version = "1.0.0-rc.0", default-features = false, features = ["tls-ring
 serde_json  = "1"
 serde_yaml  = "0.9"
 evalexpr    = "11"
+fs2         = "0.4"
 cron        = "0.16"
 # Observability
 tracing                     = "0.1"
@@ -111,6 +114,7 @@ base64    = "0.22"
 
 # Randomness
 rand = "0.10"
+windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_Security", "Win32_Storage_FileSystem"] }
 subtle = "2.6"
 zeroize = "1.8"
 
@@ -146,6 +150,7 @@ buzz-media = { path = "crates/buzz-media" }
 buzz-sdk = { path = "crates/buzz-sdk" }
 buzz-ws-client = { path = "crates/buzz-ws-client" }
 buzz-relay-mesh = { path = "crates/buzz-relay-mesh" }
+buzz-runtime = { path = "crates/buzz-runtime" }
 buzz-datastore-tracing = { path = "crates/buzz-datastore-tracing" }
 
 # CI profile — builds the relay for desktop e2e. Dependencies keep full

crates/buzz-acp/Cargo.toml

@@ -20,6 +20,7 @@ path = "src/main.rs"
 buzz-core = { workspace = true }
 buzz-sdk = { workspace = true }
 buzz-persona = { path = "../buzz-persona" }
+buzz-runtime = { workspace = true }
 
 # Nostr
 nostr = { workspace = true }
@@ -61,6 +62,7 @@ tracing-subscriber = { workspace = true }
 # Error handling
 thiserror = { workspace = true }
 anyhow = { workspace = true }
+fs2 = { workspace = true }
 
 # CLI
 clap = { version = "4", features = ["derive", "env"] }
@@ -71,11 +73,16 @@ toml = "1.0"
 # Filter expressions
 evalexpr = { workspace = true }
 
-# Process-group kill (safe wrapper around killpg) — Unix-only; kill_process_group
-# has a #[cfg(not(unix))] fallback in acp.rs.
+# Process-group kill is Unix-only; Windows adapter trees use buzz-runtime's
+# Job Object helper, and other targets retain the direct-child fallback.
 [target.'cfg(unix)'.dependencies]
-nix = { version = "0.31", default-features = false, features = ["signal"] }
+nix = { version = "0.31", default-features = false, features = ["process", "signal"] }
+signal-hook = "0.3"
+
+[target.'cfg(windows)'.dependencies]
+windows-sys = { version = "0.61", features = ["Win32_Foundation", "Win32_Security", "Win32_Security_Authorization", "Win32_System_JobObjects", "Win32_System_Memory", "Win32_System_Threading"] }
 
 [dev-dependencies]
 tokio = { workspace = true, features = ["test-util"] }
 httparse = "1"
+tempfile = "3"