mirror of
https://github.com/block/buzz.git
synced 2026-11-08 18:31:56 +00:00
Treat the card id as opaque and require only id, name and an https avatarUrl. Drop the version, same-host avatar and effort-needs-model checks. Fetch agent.json through a helper shared with MediaImageProvider: abort after 20 s without a byte or 5 min overall, and cap cards at 2 MB. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tom Brow <tomb@squareup.com>