mirror of
https://github.com/block/buzz.git
synced 2026-08-18 06:50:31 +02:00
Add hermit-managed shim scripts for uv/uvx/npx/node that provide config-isolated toolchain execution for MCP servers, preventing ambient system toolchains from leaking user config into agent processes. Security hardening: - Private mktemp temp dir with cleanup trap (no predictable paths) - Lock mutual exclusion via kill-0 + /proc start-time verification - Atomic bootstrap recovery (staged download + validated mv) - Desktop fail-loud validation of shim resources before env export Co-authored-by: Will Pfleger <pfleger.will@gmail.com> Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
Buzz
Desktop chat shell with:
- Tauri + React + TypeScript + Vite
- Tailwind CSS
- shadcn/ui-ready shared components
- Biome (lint/format/check)
- Feature-driven frontend structure
Scripts
pnpm dev- run the web frontendpnpm tauri dev- run the desktop apppnpm build- typecheck and build frontendpnpm typecheck- TypeScript checkspnpm lint- Biome lintpnpm format- Biome format (write)pnpm check- Biome check
Structure
src/shared- reusable app-wide code (ui,lib,styles)src/features- feature modules (vertical slices)src/app- top-level app composition