feat: push server notifications to agents via signaling WebSocket

Add PushNotification method to signaling Hub for delivering notification
messages to connected agents. Wire the notification emitter to push
notifications through signaling in addition to the dashboard WebSocket,
enabling OpenClaw integration where agents forward notifications to
OpenClaw conversations.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: gcmsg

cmd/peerclawd/main.go

@@ -2,6 +2,7 @@ package main
 
 import (
 	"context"
+	"encoding/json"
 	"flag"
 	"log/slog"
 	"os"
@@ -227,6 +228,9 @@ func main() {
 		logger.Info("user ACL service initialized")
 	}
 
+	// Forward-declare sigHub so the notification emitter closure can reference it.
+	var sigHub *signaling.Hub
+
 	// Initialize notification service.
 	var notificationSvc *notification.Service
 	var notifHub *notification.DashboardHub
@@ -242,9 +246,15 @@ func main() {
 		// Set emitter: WebSocket push + optional email for critical events.
 		emailSender := userauth.NewEmailSender(cfg.SMTP, logger)
 		notificationSvc.SetEmitter(func(n *notification.Notification) {
-			// Push via WebSocket.
+			// Push via WebSocket (dashboard).
 			notifHub.Push(n)
 
+			// Push via signaling to agent (for OpenClaw integration).
+			if sigHub != nil && n.AgentID != "" {
+				payload, _ := json.Marshal(n)
+				_ = sigHub.PushNotification(context.Background(), n.AgentID, payload)
+			}
+
 			// Send email for critical events if enabled.
 			if cfg.Notification.EmailEnabled && n.Severity == notification.SeverityCritical {
 				if cfg.Notification.EmailOnOffline || n.Type != notification.TypeAgentOffline {
@@ -281,7 +291,6 @@ func main() {
 	}
 
 	// Initialize signaling hub.
-	var sigHub *signaling.Hub
 	if cfg.Signaling.Enabled {
 		var turnCfg *signaling.TURNConfig
 		if len(cfg.Signaling.TURN.URLs) > 0 {

internal/signaling/ws.go

@@ -359,6 +359,36 @@ func (h *Hub) Forward(ctx context.Context, msg signaling.SignalMessage) {
 	h.DeliverLocal(ctx, msg)
 }
 
+// PushNotification sends a notification to a connected agent via WebSocket signaling.
+func (h *Hub) PushNotification(ctx context.Context, agentID string, payload json.RawMessage) error {
+	h.mu.RLock()
+	conn, ok := h.conns[agentID]
+	h.mu.RUnlock()
+
+	if !ok {
+		return fmt.Errorf("agent %s not connected", agentID)
+	}
+
+	msg := signaling.SignalMessage{
+		Type:    signaling.MessageTypeNotification,
+		From:    "server",
+		To:      agentID,
+		Payload: payload,
+	}
+
+	data, err := json.Marshal(msg)
+	if err != nil {
+		return fmt.Errorf("marshal notification message: %w", err)
+	}
+
+	if err := conn.Write(ctx, websocket.MessageText, data); err != nil {
+		return fmt.Errorf("deliver notification: %w", err)
+	}
+
+	h.logger.Debug("pushed notification via signaling", "agent_id", agentID)
+	return nil
+}
+
 // DeliverEnvelope sends a bridge_message to a connected agent via WebSocket.
 func (h *Hub) DeliverEnvelope(ctx context.Context, agentID string, envPayload json.RawMessage) error {
 	h.mu.RLock()