External/buzz

mirror of https://github.com/block/buzz.git synced 2026-08-18 06:50:31 +02:00

Files

T

History

Will Pfleger 7962d46ae9 feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)

Phase 1 of hybrid E2E encryption for DMs: 2-party pairwise NIP-44, reusing
the engram/observer "store ciphertext the relay can't read" pattern.

A new `encryption_activated_at` latch column on channels (migration 0004)
marks a DM as E2E from creation. It is relay-owned and write-once at the
`create_dm` INSERT -- `ChannelUpdate` has no such field, so the dynamic
update path structurally cannot move or clear it, making the encryption-start
boundary tamper-evident by construction. Only 2-party DMs latch; group DMs
(3-9) stay plaintext until Phase 2 brings group keys, since pairwise NIP-44
has no single peer to encrypt to.

Ingest rule 15c enforces the boundary fail-visible: a latched channel rejects
any kind:9 that is not NIP-44 v2 ciphertext (strong validator: base64 +
decoded-len >= 99 + 0x02 version byte). Enforcement is latch-PRESENCE only --
no `created_at` comparison -- so a backdated timestamp (drift window or the
clamp-exempt proxy:submit path) cannot smuggle plaintext below the latch.
Dispatch skips search indexing and workflow triggers for private/DM channels
(fail-closed) so ciphertext never reaches Typesense.

Desktop gains `nip44_encrypt_to_peer`/`nip44_decrypt_from_peer` Tauri
commands (private key stays in Rust) plus TS bindings. Encrypt-on-send and
decrypt-on-render in the message pipeline are a follow-up (Phase 1b).

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>

2026-06-25 17:36:16 -04:00

..

chore: remove LLM-slop comments across the codebase (#1277 )

2026-06-25 11:03:05 -04:00

feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)

2026-06-25 17:36:16 -04:00

feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)

2026-06-25 17:36:16 -04:00

feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)

2026-06-25 17:36:16 -04:00

feat(desktop): refresh Agents tab live on inbound relay sync (#1256 )

2026-06-25 14:10:06 -04:00

.gitignore

…

biome.json

…

components.json

…

index.html

Rename desktop app to Buzz (#960 )

2026-06-11 15:06:24 +00:00

package.json

chore(release): release Buzz Desktop version 0.3.34 (#1289 )

2026-06-25 18:42:01 +00:00

playwright.config.ts

feat(desktop): refresh Agents tab live on inbound relay sync (#1256 )

2026-06-25 14:10:06 -04:00

playwright.perf.config.ts

fix(desktop): single-owner anchored scroll for dynamic loading (#1115 )

2026-06-18 20:40:05 -04:00

postcss.config.js

…

README.md

Rename desktop app to Buzz (#960 )

2026-06-11 15:06:24 +00:00

tailwind.config.js

Use Inter for app typography (#899 )

2026-06-17 18:56:57 +01:00

test-loader-hooks.mjs

fix(delete): make agent-deleted messages disappear from desktop UI immediately (#918 )

2026-06-09 23:02:13 -07:00

test-loader.mjs

…

tsconfig.json

feat: preview features (experiments settings UI) (#888 )

2026-06-09 09:53:09 -07:00

tsconfig.node.json

…

vite.config.ts

feat: preview features (experiments settings UI) (#888 )

2026-06-09 09:53:09 -07:00

README.md

Buzz

Desktop chat shell with:

Tauri + React + TypeScript + Vite
Tailwind CSS
shadcn/ui-ready shared components
Biome (lint/format/check)
Feature-driven frontend structure

Scripts

pnpm dev - run the web frontend
pnpm tauri dev - run the desktop app
pnpm build - typecheck and build frontend
pnpm typecheck - TypeScript checks
pnpm lint - Biome lint
pnpm format - Biome format (write)
pnpm check - Biome check

Structure

src/shared - reusable app-wide code (ui, lib, styles)
src/features - feature modules (vertical slices)
src/app - top-level app composition