mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
Review finding (Wren): fetch_avatar buffered the full response before checking MAX_AVATAR_FETCH_BYTES, so a missing or dishonest Content-Length could consume unbounded network/memory. Now preflights content_length() and streams with a running cap check that rejects before appending any chunk that would cross 10 MiB — same contract as media_download.rs. Accumulator boundary extracted for unit testing. Co-authored-by: Tyler Longwell <tlongwell@block.xyz> Signed-off-by: Tyler Longwell <tlongwell@block.xyz>
Buzz
Desktop chat shell with:
- Tauri + React + TypeScript + Vite
- Tailwind CSS
- shadcn/ui-ready shared components
- Biome (lint/format/check)
- Feature-driven frontend structure
Scripts
pnpm dev- run the web frontendpnpm tauri dev- run the desktop apppnpm build- typecheck and build frontendpnpm typecheck- TypeScript checkspnpm lint- Biome lintpnpm format- Biome format (write)pnpm check- Biome check
Structure
src/shared- reusable app-wide code (ui,lib,styles)src/features- feature modules (vertical slices)src/app- top-level app composition