mirror of
https://github.com/block/buzz.git
synced 2026-10-29 13:31:44 +00:00
Add existing agent admitted an existing record on pubkey/persona/community and then reported a healthy duplicate or repaired a missing key without ever checking the saved NIP-OA attestation. A legacy record with a missing, foreign, or invalid saved owner link could pass Add while launch preparation later refuses it as unowned. Under the existing commit locks, commit_verified now validates the saved record's attestation for the exact current owner and agent via the same runtime_configurations::verify_owner predicate launch preparation applies, before both the healthy-duplicate return and the key-repair write. Absent, foreign, and invalid links are refused with a redacted error and zero writes; no silent re-attestation or owner migration is introduced. Regression coverage at the real commit seam crosses healthy and missing saved keys with absent, foreign, and structurally-valid-but-unverifiable attestations, asserting refusal preserves raw store bytes and key state; positive valid-duplicate and explicit-repair controls are retained. Signed-off-by: Logan Johnson <loganj@squareup.com>
Buzz
Desktop chat shell with:
- Tauri + React + TypeScript + Vite
- Tailwind CSS
- shadcn/ui-ready shared components
- Biome (lint/format/check)
- Feature-driven frontend structure
Scripts
pnpm dev- run the web frontendpnpm tauri dev- run the desktop apppnpm build- typecheck and build frontendpnpm typecheck- TypeScript checkspnpm lint- Biome lintpnpm format- Biome format (write)pnpm check- Biome check
Structure
src/shared- reusable app-wide code (ui,lib,styles)src/features- feature modules (vertical slices)src/app- top-level app composition