mirror of
https://github.com/block/buzz.git
synced 2026-11-13 04:41:12 +00:00
Two blocking review findings on the permission-policy surface. Rust: the admission preflight counted only Pending|Writing against PERMISSION_MAP_CAP, and every admitted Ask request overwrote the single sentinel_ack_result_rx slot. With relay ACKs withheld a broken adapter could create unbounded Publishing entries/cards and strand all but the last ACK. Count Publishing toward the cap and admit at most one Publishing at a time — the single ACK slot is now correct by construction and the live set is bounded. Desktop: a kind-9 signed by the agent whose content is born state:"resolved" passed the D1 signer gate alone and rendered as a completed card with no edit provenance. Require editSignerPubkey, messageId, and a parseable pending preEditContent for any resolved payload; the legit history-replay path always overlays the kind-40003 edit and supplies all three, so no valid path regresses. Co-authored-by: Will Pfleger <pfleger.will@gmail.com> Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
Buzz
Desktop chat shell with:
- Tauri + React + TypeScript + Vite
- Tailwind CSS
- shadcn/ui-ready shared components
- Biome (lint/format/check)
- Feature-driven frontend structure
Scripts
pnpm dev- run the web frontendpnpm tauri dev- run the desktop apppnpm build- typecheck and build frontendpnpm typecheck- TypeScript checkspnpm lint- Biome lintpnpm format- Biome format (write)pnpm check- Biome check
Structure
src/shared- reusable app-wide code (ui,lib,styles)src/features- feature modules (vertical slices)src/app- top-level app composition