Files
buzz/desktop
npub1qyvc0c5kl4gqv2fd97fsk46tu378sqgy35vc83rvgfwne90sel7s0ed67dandTyler Longwell a299cd6fff feat(desktop,dev-mcp): attach Blossom t=get auth to relay media reads
Desktop: mint a server-scoped kind-24242 t=get Authorization header
(BUD-01: server tag, no x tag; 600s expiration) from the app's signing
keys and attach it in the localhost media proxy, the buzz-media://
scheme handler, and the media download/import fetch path. Fail-open to
an unsigned request when signing keys are unavailable (recovery mode),
so media keeps rendering while the relay's read-auth flag is off.

Dev MCP: view_image detects relay-hosted /media/ URLs (host + effective
port must match BUZZ_RELAY_URL; ws/wss default ports compare equal to
http/https) and attaches the same t=get header signed from
BUZZ_PRIVATE_KEY. Never signs for non-relay origins, so the bearer
token cannot leak to third parties. An unauthenticated 401/403 names
the missing key in the error.

Client lanes for the authenticated-media-GET rollout; the relay-side
verifier (BUZZ_REQUIRE_MEDIA_READ_AUTH) lands separately.

Co-authored-by: Tyler Longwell <tlongwell@block.xyz>
Signed-off-by: Tyler Longwell <tlongwell@block.xyz>
2026-07-15 17:51:53 -04:00
..
2026-06-11 15:06:24 +00:00

Buzz

Desktop chat shell with:

  • Tauri + React + TypeScript + Vite
  • Tailwind CSS
  • shadcn/ui-ready shared components
  • Biome (lint/format/check)
  • Feature-driven frontend structure

Scripts

  • pnpm dev - run the web frontend
  • pnpm tauri dev - run the desktop app
  • pnpm build - typecheck and build frontend
  • pnpm typecheck - TypeScript checks
  • pnpm lint - Biome lint
  • pnpm format - Biome format (write)
  • pnpm check - Biome check

Structure

  • src/shared - reusable app-wide code (ui, lib, styles)
  • src/features - feature modules (vertical slices)
  • src/app - top-level app composition