Files
buzz/desktop
Duncan 0b967b5d45 fix(acp): bound Publishing entries and require edit provenance for resolved cards
Two blocking review findings on the permission-policy surface.

Rust: the admission preflight counted only Pending|Writing against
PERMISSION_MAP_CAP, and every admitted Ask request overwrote the single
sentinel_ack_result_rx slot. With relay ACKs withheld a broken adapter could
create unbounded Publishing entries/cards and strand all but the last ACK.
Count Publishing toward the cap and admit at most one Publishing at a time —
the single ACK slot is now correct by construction and the live set is bounded.

Desktop: a kind-9 signed by the agent whose content is born state:"resolved"
passed the D1 signer gate alone and rendered as a completed card with no edit
provenance. Require editSignerPubkey, messageId, and a parseable pending
preEditContent for any resolved payload; the legit history-replay path always
overlays the kind-40003 edit and supplies all three, so no valid path regresses.

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
2026-08-26 12:42:42 -04:00
..
…

Buzz

Desktop chat shell with:

  • Tauri + React + TypeScript + Vite
  • Tailwind CSS
  • shadcn/ui-ready shared components
  • Biome (lint/format/check)
  • Feature-driven frontend structure

Scripts

  • pnpm dev - run the web frontend
  • pnpm tauri dev - run the desktop app
  • pnpm build - typecheck and build frontend
  • pnpm typecheck - TypeScript checks
  • pnpm lint - Biome lint
  • pnpm format - Biome format (write)
  • pnpm check - Biome check

Structure

  • src/shared - reusable app-wide code (ui, lib, styles)
  • src/features - feature modules (vertical slices)
  • src/app - top-level app composition