feat: external project agent dispatch + Twilio SMS operator routing

.env.example

@@ -250,3 +250,36 @@ RUST_LOG=buzz_relay=debug,buzz_datastore=info,buzz_db=debug,buzz_auth=debug,buzz
 # BUZZ_TERMS_OF_SERVICE_MARKDOWN="# Terms of Service\n\nFull terms here."
 # BUZZ_PRIVACY_POLICY_MARKDOWN="# Privacy Policy\n\nFull policy here."
 # BUZZ_AGE_ATTESTATION_REQUIRED=true
+
+# ── Twilio SMS bridge (optional) ─────────────────────────────────────────────
+# Inbound SMS arrives at POST /hooks/sms/inbound; replies posted into the
+# inbox channel that thread back to an inbound message are sent out as SMS.
+# Every value below is optional — leaving any unset simply disables the
+# corresponding half of the bridge, and inbound requests are rejected rather
+# than processed without signature validation.
+#
+# Auth token from the Twilio console. Validates X-Twilio-Signature on inbound
+# requests — the sole trust boundary, since Twilio cannot hold a Nostr key.
+# Also used as the Basic Auth password for outbound sends. Inbound rejects
+# every request when unset; there is no permissive fallback.
+# TWILIO_AUTH_TOKEN=your_twilio_auth_token
+#
+# The exact, full URL configured in the Twilio console for the inbound
+# webhook. Twilio signs against this literal string, so it comes from config
+# rather than being reconstructed from request headers — behind a proxy or
+# load balancer those can disagree with what Twilio actually signed.
+# TWILIO_WEBHOOK_URL=https://relay.example.com/hooks/sms/inbound
+#
+# UUID of the channel inbound SMS is posted into. Inbound SMS is rejected
+# (rather than silently dropped) when unset.
+# TWILIO_SMS_INBOX_CHANNEL=00000000-0000-0000-0000-000000000000
+#
+# Account SID — outbound Messages API path component and Basic Auth username.
+# TWILIO_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+#
+# E.164 number outbound replies are sent from. Outbound is skipped when unset.
+# TWILIO_FROM_NUMBER=+15551234567
+#
+# Twilio REST API base URL. Defaults to https://api.twilio.com; override only
+# to point outbound sends at a mock server in tests.
+# TWILIO_API_BASE_URL=https://api.twilio.com

.gitignore

@@ -72,3 +72,13 @@ identity.key
 
 # Helm dependency tarballs — regenerable from Chart.lock via `helm dependency build`
 deploy/charts/*/charts/*.tgz
+
+# Claude Code context
+.claude_context_tree
+
+# Stray artifacts from a Windows-path-into-POSIX-shell-script test bug
+# (fixed in pool.rs, kept as a safety net against recurrence)
+crates/buzz-acp/*Temp*
+crates/buzz-acp/*tmp-build*
+/st.txt
+*.concat

Cargo.toml

@@ -104,6 +104,7 @@ chrono  = { version = "0.4", features = ["serde"] }
 reqwest = { version = "0.13", features = ["json", "rustls"], default-features = false }
 
 # Cryptography
+sha1      = "0.11"
 sha2      = "0.11"
 hex       = "0.4"
 hmac      = "0.13"