mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
RemindersPanel dereffed content.target unconditionally and decryptReminder trusted JSON.parse output as ReminderContent with no validation. A note-only reminder (no target — explicitly valid per NIP-ER) or malformed self-decrypted plaintext crashed the 60s due-check loop or rendered fake reminders. Make target optional, validate decrypted content fail-closed (object shape, known status, target/note structure), and guard every target deref with a note fallback. Mirror the relay's strict not_before parser so the client ignores values the relay rejects, and use 16 random bytes for the d-tag to meet the spec's 128-bit entropy MUST (randomUUID is only 122 bits). Co-authored-by: Will Pfleger <pfleger.will@gmail.com> Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
Buzz
Desktop chat shell with:
- Tauri + React + TypeScript + Vite
- Tailwind CSS
- shadcn/ui-ready shared components
- Biome (lint/format/check)
- Feature-driven frontend structure
Scripts
pnpm dev- run the web frontendpnpm tauri dev- run the desktop apppnpm build- typecheck and build frontendpnpm typecheck- TypeScript checkspnpm lint- Biome lintpnpm format- Biome format (write)pnpm check- Biome check
Structure
src/shared- reusable app-wide code (ui,lib,styles)src/features- feature modules (vertical slices)src/app- top-level app composition