Let outside services and computers' browser notifications give bots work

A bot hook (bot_hooks) is a secret URL, POST /api/hooks/<token>, whose
calls queue the hook's brief plus the raw body as a task, per user and
bot like a routine. Only the token's hash is kept (shown once, rotatable);
an optional HMAC-SHA256 signing secret is stored encrypted. Calls are
rate limited per address and per hook, recorded in bot_hook_events
(pruned daily), deduplicated by delivery id, and a call while the last
run still waits joins its brief instead of queueing another. The payload
is fenced data and HookRunNote tells the bot never to take instructions
from it; failed runs retry like routines.

A hook can instead watch a computer's browser notifications: the app
installs a small watcher that owns org.freedesktop.Notifications on the
sandbox's session bus, so Chrome hands it every notification (it only
looks for that service at start-up, so Chrome is restarted once, never
mid-task), and it posts each one to its hooks, optionally filtered.
Computers reach the app at COMPUTER_APP_URL or the app container's name.

Users make hooks in the conversation's Hooks modal and manage them all
on /admin/routines; bots never create or change hooks.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/functions/backend/db/bot-hooks/merge-hook-call-sql.ts

@@ -0,0 +1,23 @@
+type Params = {
+    job_id: number;
+    /**
+     * The call as the brief shows it (`hookPayloadBlock`).
+     */
+    block: string;
+    now: number;
+};
+
+/**
+ * Adds a hook call to the end of its last run's brief, only while that
+ * run is still waiting and was never tried: a run that has started (or
+ * failed once and waits to retry) is left as it is. The check and the
+ * change are one statement, so a run claimed meanwhile is never touched.
+ * `RETURNING id` says whether it joined.
+ */
+export default function mergeHookCallSql({ job_id, block, now }: Params) {
+    return {
+        sql: `UPDATE bots_queue SET instructions = COALESCE(instructions, '') || ?, updated_at = ?
+            WHERE id = ? AND status = 'pending' AND COALESCE(attempts, 0) = 0 RETURNING id`,
+        values: [`\n\nAnother call came in before this run started:\n\n${block}`, now, job_id] as (string | number)[],
+    };
+}