jerry/buzz

mirror of https://github.com/block/buzz.git synced 2026-11-05 00:41:28 +00:00

Files

Wes e972169768 desktop: relay-canonical managed-agent authority foundation

Introduce the Desktop safety foundation for the relay-canonical managed-agent
migration. State + classification only — no migration enablement, no
destructive local mutation. Every existing record defaults to LegacyOnly, so an
upgrade that predates any migration deserializes unchanged and keeps local JSON
+ keyring authoritative.

- Add `managed_agents::authority` with a single internally-tagged
  `RelayAuthority` enum (`LegacyOnly` | `RelayAuthoritative { evidence }`), so
  impossible states are unrepresentable: authoritative structurally carries a
  verified head, legacy structurally cannot. No `{"state":{"state":...}}`
  nesting — persisted shape is `{"authority":"legacy_only"}` /
  `{"authority":"relay_authoritative","evidence":{...}}`, asserted exactly.
- Add `#[serde(default)] relay_authority: RelayAuthority` to
  `ManagedAgentRecord`; a store predating the field deserializes as LegacyOnly.
- Add an exhaustive field→codec-home classification table
  (`FIELD_CLASSIFICATIONS`) as a single source of truth, verified against the
  ACTUAL PersonaEventContent (30175) / ManagedAgentEventContent (30177)
  builders and the 30177 exclusion asserts — not intent:
  * start_on_app_launch, auto_restart_on_config_change, provider_binary_path,
    persona_team_dir carry through NO codec slot -> TransientLocal.
  * avatar_url IS carried by 30175 -> stays DefinitionProjected.
- Tighten the exhaustiveness test to exact set equality: every record field has
  a class AND every class key still names a live field (no stale drift).
- Populate `relay_authority` explicitly (`RelayAuthority::legacy()`) at every
  production/test constructor rather than relying on a struct-wide default.

Foundation-only classification/authority API is consumed by the not-yet-landed
reconcile/migration lanes; suppression is per-item with a named consumer, not
module-wide.

Co-authored-by: Mongo <5c25403eab7271f9f94ddd4f2b270e8cac2c92e2c830c51877cca6ec974ffb3f@buzz.block.builderlab.xyz>
Signed-off-by: Wes <wesbillman@users.noreply.github.com>

2026-08-05 13:21:53 -06:00