a self-hosted multitenant nostr relay with sites, file storage, git hosting, and inbox and outbox delivery https://src.rest/cat/tinyrelay/ 2026-10-17T16:55:34-06:00 e06f6c9390854c97978cc796fe2cd4cbecb402b5 cat 2026-10-17T16:55:34-06:00 forge attest runs .forge/ci in a clean worktree of each commit and signs the result into refs/notes/ci; forge push sends it with the branch. The script installs the JavaScript dependencies with npm ci, then runs make verify: Go tests, go vet, the bundle check and the JavaScript tests. 92682824e5668ced1ecd25f7358730d82194beb3 Dami 2026-09-23T16:38:23-06:00 561b0a75cca1a1dab534d7503b8deccaf7aef994 Dami 2026-09-23T12:08:56-06:00 Define a canonical Nostr filter context and addressable cursor event for cross-client resume positions. Document relay-scoped group identity, replacement behavior, privacy, and the limits of derived feeds. 46d32538d616d6bc85850f22eb02a8e1ad9032ee Dami 2026-09-15T11:46:35-06:00 Each task request runs in its own session so Hermes cannot merge two requests into one turn, and a request Hermes still merges ends with an error naming the carrier. The session is assigned before subscribing so events delivered ahead of the acknowledgment cannot reach a missing helper. A file-only task whose deliveries the adapter observed publishes a result even when Hermes core grades the turn as failed. Events are marked seen only after Hermes issues an admission receipt, terminal cards are retried, the private key and settings resolve through the profile's secret scope, identity locks live in a root shared by all profiles, and the replay cache keeps every ID inside its window. 64d4ccea8f3d2ee0c28d75a72c2d59714dd6c325 Dami 2026-09-15T11:37:23-06:00 The facade signs a relay-supplied event template only when writes are enabled, the called tool is a write tool and the template's kind is one that tool publishes; any other template is returned unsigned with an error the model can see. tools/list still offers tiny_diagnose when the relay table cannot load, and structuredContent is bounded at 256 KiB. diagnose treats only an unsupported-method answer as an old relay, reports a rate limit as unreachable and other 4xx answers as errors, never as an accepted signature. d90c59f67254b76283f04ee589f96a266ab4db30 Dami 2026-09-15T11:23:22-06:00 Agent runners treat any agents.md as an instruction file for themselves, and this page is user documentation about relay agents, so it now lives at docs/agent-access.md. Links follow. 4c4f3249a74b6ad0148005dcd96d5f8287e4406e Dami 2026-09-15T10:41:52-06:00 A kind 43001 request addressed to the agent becomes a Hermes turn in a thread anchored at the request. The adapter publishes one accepted event when processing starts, throttled progress while the turn runs, and exactly one result or error when it ends, skipping requests that already carry a terminal answer. A kind 43005 from the requester, or a !cancel mention in Buzz's convention, stops the turn. Handoffs open a kind 11 thread so a handed-off session continues in its own thread. 7472b16121c5ed4ccbce9e324aba80cd86f409bb Dami 2026-09-15T10:40:51-06:00 browsegrant lets any signed key read its own membership, grant state and effective scope, and reports which requested rooms and kinds the grant is missing. tinyagent diagnose, its rpc method and the facade's tiny_diagnose tool probe reachability, signature acceptance, membership and grant coverage, and answer with a verdict that separates authorization failures from transport failures and advises a request_grant call when scope is missing. e5002d7633eedc71044a4d60582bf9843321b192 Dami 2026-09-15T10:39:06-06:00 c1cb426afbb03b7357c41bd09742865bd03e1484 Dami 2026-09-15T10:38:20-06:00 The chat activity panel gains an Ask an agent form that publishes a kind 43001 request to one of the room's agents, scoped to the thread when the panel is, and a Cancel button on open cards the signed-in requester owns that publishes a kind 43005. Cards show the status, the newest progress line, assignees, results with artifact links and errors, and keep rendering without JavaScript. fc78fb98e165ce877adcac1af1537ad73060d2ed Dami 2026-09-15T10:30:12-06:00 NIP-90 is marked unrecommended upstream. Long tasks now use kinds 43001 to 43006 (request, accepted, progress, result, cancel, error) with Tinyrelay's own tag contract: a request names its room and the keys asked, every answer names the request and the requester and stays in the request's room, and only asked keys may answer. Task cards, browsejobs and browsejob, push notices, the MCP tools (request_job, accept_job, job_progress, job_result, job_error, cancel_job), WebMCP, the agent runner, the QA fixtures and the docs follow the new shape. Agent grants keep the jobs tag with request, serve and both. 242a31ff4c0fe2c17967727d91dd85f709863600 Dami 2026-09-15T10:27:32-06:00 The replay cache no longer advances its floor past live seconds when it fills: IDs outside the replay window are dropped first, and the floor moves only when the cache is still over budget. Events are marked as seen only after Hermes accepts them, with a bounded attempt count so a poison event retires after three failures. When the Go helper dies the adapter marks the platform disconnected, respawns the helper with backoff and resubscribes from the persisted cursor. The helper now receives a minimal environment, state lives under the active Hermes home, and an identity lock stops two gateways from running one key. Home-channel auto-configuration returns the structured object Hermes expects, typing resumes after an approval resolves, and pending request cards are bounded and swept. c1fefe784b4facc2e6b2f730fe9bdfb7e86ab721 Dami 2026-09-15T10:26:31-06:00 tinyagent mcp is a stdio MCP server Hermes runs like any other server entry. It forwards tools/list and tools/call to the relay's stateless MCP endpoint with a fresh NIP-98 signature and the relay's header and _meta contract on every request, offers a curated read set by default and a write set behind --allow-writes, signs the unsigned events write tools return and resubmits them, and reports permission refusals and transport failures as distinct tool errors. e98cef486f70dcbe7d2d88b5aff0dc60577b86e1 Dami 2026-09-15T10:21:26-06:00 The standalone Approvals page now renders the same choice card as the room timeline for Tiny agent questions, approvals and confirmations: single and multiple selection, free-text answers and combined answers. It reuses the chat-decision element so one implementation publishes kind 1111 answers from both pages. bdd572c1db4a716eb9761a8fd283bdad422b84d6 Dami 2026-09-15T08:24:53-06:00 File links, the file catalog, same-document navigation and the WebMCP open tools use the path scheme; the QA scripts follow. f35f8dff89e66aebe8a44ec0fd7c41a71485a6a1 Dami 2026-09-15T08:24:53-06:00 Approval, push notice, file, folder and wiki proposal links use the path scheme, with people written by member name when they have one. 196be3813d45b7d852cc18e69856e0ca47cd76c3 Dami 2026-09-15T08:24:53-06:00 Repositories, stored files, file collections, approval requests, agents, wiki proposals and addressed social threads are reached by path segments instead of query parameters. A person in a path is the member name when the relay has one, else the hex pubkey; name, npub and hex all resolve. The query keeps only filters, cursors and the branch. The old query forms are gone. ddccb24bbf0bd23b4d8a3d573e2e22975351913c Dami 2026-09-15T08:04:52-06:00 Controls share one radius scale, a 32px height and an accent focus ring. Management, publish and room forms sit on flat bordered surfaces with stacked labels. Alerts render as callouts, empty lists as quiet dashed states, and disclosures use a turning chevron. Hover and pressed states transition briefly unless motion is reduced. 6b2b10970f6c620fe5d99bd13ecff4af1339f8af Dami 2026-09-15T07:59:42-06:00 57e8eb326beb7ed24daec8bf073d30bb282c57e8 Dami 2026-09-15T07:59:02-06:00 The timeline scrolls to its end on load, after layout and after assets settle, and in-app navigation into a room no longer resets it to the top. c8053d2f3cc58c68c6abe37bfbdf7fe28ea4a88a Dami 2026-09-15T07:59:02-06:00 Row tables use a fixed layout everywhere so long cells truncate instead of widening the page. The answered approvals table gets asker and answer columns of fixed width and clamps the request to two lines on phones. The sites blurb is gone. e9ffeddda9b3ca5a13ae3151a04df06a071167c6 Dami 2026-09-15T07:59:02-06:00 Hover rules apply only on pointer devices, every interactive element gets a matching active state, row highlights paint the row instead of each cell, and the browser tap highlight is switched off. 86bcf35c230c5d0c7b424e6551144b0832ba98c9 Dami 2026-09-14T22:42:57-06:00 54bb70e9819f25c49b2eeff42b7fbf2c28a3f573 Dami 2026-09-14T22:42:57-06:00 Pulls from relays that send an unsolicited AUTH challenge no longer fail; only a CLOSED with an auth-required or restricted reason stops the pull, and that reason is surfaced in the job error. a17b474809e2f2c6e2ee31fe66119b8f46adb553 Dami 2026-09-14T22:42:57-06:00 Keys a members-only or private relay does not admit see a short notice instead of management forms that fail once signed. Paths that match no page return 404 instead of rendering the home page. d9651de022c4c2283f82eb390a00bde09f477cc8 Dami 2026-09-14T22:42:57-06:00 Mark one primary action per view and destructive actions as danger, show access, state and agent markers as badges, label rail groups, render errors as sentences, hide forms guests and restricted keys cannot use, and drop explanatory paragraphs across the pages. 660e78b96c421647fa7ebe3a6cf06ad10e88a789 Dami 2026-09-14T22:42:27-06:00 Add navGroupLabel, friendlyError, restricted, authRequired, refName and safeURL to the template function map, and title invite pages Join. 2a6a4e0799246808479eadce40e738a21baa2af6 Dami 2026-09-14T22:42:20-06:00 Add wait and surface tokens for both themes, a primary and danger button level, a status-badge element, rail group labels and counts, a square tier from 681 to 1023 pixels with a page header and slide-over panel, and a bottom sheet for page details on phones. 91db918a29027af86590e14623551125bebfae76 Dami 2026-09-14T21:42:56-06:00 Keep questions, approvals and follow-up attachments with their originating conversation. Accept selected options with explanatory text, show readable answers and give mobile choices separate touch targets. Validate with mainline and installed Hermes adapter suites, the disposable integration lab, repository checks, race tests and mobile browser checks. 1e42b938a8831675a48bf0f911175677196522a5 Dami 2026-09-14T16:15:35-06:00 Use the public approval hook across Hermes versions and preserve configured mention requirements for incoming messages. Verify exact approval callbacks and trigger behavior against mainline and Hermes 0.21.1.