Block Release Notes

Desktop and shared changes

test(desktop): stabilize unread and audio release smoke fixtures (#7821) (fe56d311a7156802408afb04023c3f75d4015007)

fix(desktop): remember Inbox unread-only choice (#7672) (312cf674fad5563c24a66ec5350d306d192ed64a)

fix(desktop): refresh channels after access-revoked closure (#7784) (a024b83d5448598928d512364fea099ca96b373c)

fix(desktop): bound startup request bursts and recover quota refusals (#7790) (c213d90d5c450e2e579505da4a4145f528ecbcf2)

fix(desktop): register macOS badges for new and existing installs (#7783) (a3117a4762e3349054474e221c2e9cc5fea60dd9)

fix(workflows): make deletion persistent and retryable (#7735) (5079c770fe30bb3d8204822ce6c2431eacac6d4b)

fix(relay): exclude ephemeral activity from message quota (#7736) (5511b56fcf0047f9d0d4887dc75125b6933a6bbd)

Replace personal and internal data in desktop test fixtures (#7748) (f18ea456984a1a94d444615fa3b38ec326a79793)

fix(desktop): keep managed agent avatars usable across communities (#7732) (8953cbfff58ed768d996677fed3af0e3bac64a20)

Isolate S3 storage metrics from the relay (#7543) (6b1e45d2f6084a3754a09bb1b800f370ce5399dd)

refactor(desktop): share relay request construction (#7667) (6d1f488d2273dd314184fc2ec805f8982327dc51)

Fix desktop onboarding regressions (#7659) (a9dd4d3bd771b47f0efb4e7f6f7329a5921372b5)

Refresh desktop onboarding flow (#7528) (81fba7bda4da0f2c5891eec31852c4f98a6949bf)

Fix Apple Silicon iOS simulator builds (#7646) (7c789dee09d198469bded1cb5be902eaf5562ad9)

feat(buzz-agent): add opt-in workspace-scoped Databricks reuse (#7606) (4cd82f513214aad11c2b742ce7cc7c681e8e32a0)

fix(acp): improve hints in pi agent setup guide (#7594) (6c35e82bd50f4ad6587554eeb429e7378d474ba7)

Configure ACP session scope per agent (#7578) (78618804ec86a014524ad7d1fb55928e8f5c3edf)

fix(avatars): scale agent squircles from normalized paths (#7307) (ec11f8e2f30d921a6148d79c688414833af8b1c5)

fix(desktop): isolate quota backoff and reuse channel discovery rosters (#6998) (f3408fc62045654183c704ceba2076b529a8140c)

test(desktop): isolate login-shell probe measurements (#7570) (9847b0967d72adbd50b4acae31d318575a962c07)

fix(acp): integrate the Buzz Pi adapter fork (#7552) (813bbd14121edacc6cb4733301a3af12131aa10e)

fix(markdown): align mention chip wrapping (#7501) (092c6a7277698bd373ccbc1d008fc1507094ae74)

fix(desktop): let inbox title and message author names truncate under narrow panes (#7550) (cec5c8fd9280d30f56effac701e1e19d5cfe6fea)

fix(desktop): require a Codex adapter with Astra support (#7427) (12023a3cba60e9a6336bf790bf3565b271af929f)

fix(desktop): order unnamed roster members by full canonical npub (#7503) (ad9591c43bdb7e221ee93964b09d5dadf820497f)

fix(desktop): npub identity controls across profile, agents, and workflows (#7489) (2226b6f95b0218d5ba896a8afa6ea217706cc8a3)

fix(desktop): npub identity displays for mention, member, and workflow surfaces (#7495) (ad2a84131ee99d087b8dba95cff0f319785209df)

fix(desktop): shared npub identity foundation (canonicalNpub, PubKey gate, strict parser) (#7488) (bfc384855889432df4a333a0edf3080f332ee169)

fix(link-preview): keep composer fetches user-paced (#7211) (218633b8fd6ee41aee8eb18ba9806e8d90694751)

feat(mesh): upgrade to mesh-llm 0.76.0-rc8 and recommend Qwen3.8 27B (#6189) (44316ff72f5f7de014c66b01cbf534298a70c249)

fix(agent): route GPT-5+ model-service FQNs to Responses (#7358) (cd54e26823117259e0bde16bd71a9531e729046b)

Other repository changes

feat(mobile-infra): support development App Attest (#7744) (7e96f9122961d58159e6c6e6838b2026caaec3cd)

docs(nip-fi): clarify federated identity amendments (#7803) (26ede6dfa2496993aa62ce5781d2112df4c2d009)

fix(audit): frame hash inputs with TLV (#7492) (7881447c193edf2ed3a860d959d11dc94f0946fb)

fix(admin): allow cold storage worker DB startup (#7770) (a929532a04cd010705c359ae29c91887c333ee92)

feat(relay): add admin HTTP routes for member restriction management (#7302) (77729abfb692b25a0f4ec4a69add86af2e32c0dd)

fix(relay): fire kick live side effects at convergence; persist target; fence re-add race with held lock (#7298) (ce41be9c4b1ca50dea0b04379333eb082826ba0f)

feat(relay): add atomic complete read-state snapshots (#7572) (6a86531ac9d27b5123cca14636ced581578975df)

fix(mobile): avoid opening empty threads on message tap (#7756) (a61239f0d8036aff58176f5c0ce7f080c66e21b7)

fix(mobile): preserve thread replies through refresh failures (#7757) (ef2aa1ae38fadcc0bc22b8bf6ed96b35933146be)

fix(mobile): keep iOS message menu actions responsive after rebuilds (#7758) (4ee9f8b35a612b5c83459af2fcee9f77000a29f6)

release: push gateway chart 0.3.1 (#7749) (4e65148e76bd4f8dff757da4014a37fbc95fcc12)

fix(push): label plaintext push gateway service as HTTP (#7717) (fe808eae0e1194be48923567c4e0f179aead5acf)

Add mobile VISION (#7710) (4e1770aa3ee7552e2bb50e897e113c22e30488de)

fix(mobile): keep relay sessions stable during push lease updates (#7745) (4af2324d85e927518c59adc8ad15043233d8cd53)

fix(mobile): fail open when age checks are unavailable (#7714) (779af8886caae1317b4de962082429867ab61503)

fix(ci): don't run desktop tests for purely mobile client changes (#7709) (01b6174a1cbad249e93f31df97d4b2ed1d0e8638)

fix(mobile): temporarily disable age gating (#7708) (d1cae93c1a584d14abc1563132892f9f953e8c1c)

feat(db): expose connection setup metrics (#7286) (4c2086c0844c30a0956aa1e3b1c2901f0357fb56)

fix(web): route mobile invite downloads to app stores (#7702) (4ab4f786085a23fe6126529861840eff6048ceee)

feat(mobile): show build number with version in settings (#7697) (b36600fc440615e2565f94bffc800e0495180f6b)

release(mobile-infra): buzz-push-gateway 0.3.0 (#7685) (6dfd145cde4bf0d45091de1cc5e6c7e3462d5703)

Add authenticated WebSocket recovery telemetry (#7546) (891208914ed51c55b11ef6102f10ed08b5d9bb30)

Instrument database pool roles (#7356) (213092074c269bee90c87163672f9c2b8d714cfe)

fix(db): allow naturally expired push lease replacement (#7653) (c507a4d488ca27796e78d876b9c24ee38442cc1b)

perf(mobile): verify notification cache events in background (#7650) (b8aa0233f9e36afa1ea83b02ecc5b1ebd20cbee4)

feat(push): make gateway origin configurable (#7261) (76f7e5ef0cc4a7d71d9562ecfb3e4a6887a51461)

perf(mobile): move profile sig checks off main thread (#7648) (41c5ace93740261ee5a5d962c2a17e8d846c2c1b)

perf(mobile): avoid redundant message list sorting (#7647) (5b9dbcb4c26f9ae507e99e1957a8c6201a5242c9)

perf(mobile): avoid reparsing unchanged Markdown (#7649) (98a6db5d67cb4797f5f878bc09674d4f69611cf5)

Deduplicate thread context by ACP session delivery (#7620) (4d08194ea96e6942cbaad03f8a0abd347dff79c1)

feat(mobile): hard-block under-18 users on the store age signal (#4665) (f78a32cf03aa90b0da36b44d075daecd8f85d7d8)

Document incoming Buzz turn structure (#7624) (deda09c18c78d48847b032557c331f28faf64ee8)

fix(ci): pull pinned MinIO images from Quay (#7599) (f3940ff21e8b6050ff617c645578aefa45db7e9f)

refactor(buzz-acp): point agents at buzz --help instead of a command table (#7586) (e17cdd9d5c7e2b836b4670ae88bb87a79f94337a)

feat(buzz-cli): render an agent-friendly command tree in --help (#7584) (44c1cc7df8e0067c9d578a93ad8e4393304422b3)

fix(mobile): bind same-name mentions to exact selected identities (#7385) (d074576871a66c72e4a9eb5ad59ec0b22a7f0081)

feat(git): add default-branch management to relay and CLI (#7562) (6146c4fd16f734b525f9ac31e1a3433ccc1ec96f)

fix(relay): reject presence updates when Redis storage fails (#7532) (00209076c7a10d9e4a475466c313e8ebecf041f5)

fix(buzz-acp): report missing models without retrying (#7538) (051c3a270be9c73da9ab06700bcab7d5552fceaa)

fix(mobile): standardize public-key identity display on npub (#7493) (82656ffea080cc28cec9163ebbf7d1c6be327e43)

fix(mobile): render push notification sender identity as npub (#7494) (93761e411ced557d859c00df1933ab053d8d854b)

fix(acp): pace targeted overflow recovery on consumer capacity (#7325) (c045321a7fb3ca8939f28519ce7a555a6f597728)

fix(buzz-acp): wake held ACP threads and fence forked sessions (#7340) (86c189e8571d4254726f4d0519a500df9b9d947e)

fix(mobile): style inline code with the app mono face (#6631) (fa1b27bcc8e0f076076b766273b305407b593f60)

Compare desktop-v0.5.23...desktop-v0.5.24

Original source

Why

This PR moves the S3 storage scan out of the serving relay and into a separate batch job. The job saves a complete result in PostgreSQL. The relay reads that result, exports the existing storage totals, and reports the snapshot's freshness and database-read health.

Today: relay -> scan S3 -> calculate totals -> Datadog metrics

After rollout: CronJob -> scan S3 -> PostgreSQL snapshot -> relay -> Datadog metrics

The code in this PR is the new pipeline. It adds the worker, database snapshot, relay read mode, and Helm CronJob template. It does not enable the pipeline in production. The chart keeps the CronJob disabled, and the relay keeps its current inline mode by default.

squareup/builderbot-platform-core-infrastructure#244 will set the production limits, enable the job, and switch the relay to the saved snapshot after this PR merges.

The relay currently lists the media bucket once an hour and calculates storage totals inside the serving process. The production bucket now exceeds the relay's one million object cap, so each sweep fails and the last good per-community values remain stale. The Datadog dashboard can no longer show current storage use by community.

Raising that cap inside the serving relay would move a larger, memory-heavy scan into the process that owns live WebSocket connections. The scan retains state for unique blob hashes and community bindings, so its memory use grows with the bucket. A large scan could raise relay memory use, trigger restarts, and drop user connections.

The goal is to restore current metrics without putting a production-scale bucket scan in the relay's failure domain. No media objects move or change. Only the process that calculates the totals and the handoff to the relay change.

What

• Add buzz-admin storage-snapshot, a run-once worker that scans S3 and saves one complete accounting snapshot in PostgreSQL.
• Add external relay mode to read the saved snapshot. Keep the current inline mode as the default, and add off as a fail-closed option.
• Add an opt-in Helm CronJob for the worker. The 10 million object cap exists only on this Job.
• Keep the current fleet and per-community gauges, and add snapshot age, generation duration, configured cap, cap utilization, and database-load health gauges.
• Add an additive migration for the latest complete snapshot and its run metadata.

Overall plan

Merge this PR to add the worker, database handoff, relay modes, and disabled-by-default chart support. This step does not change production behavior.

Publish the relay image and Helm chart 0.1.9 from main.

Update squareup/builderbot-platform-core-infrastructure#244 to pin those final artifacts and rerender its manifests.

Use the infrastructure PR to deploy the CronJob with a 10 million object cap, a one-hour deadline, and a 20 GiB memory limit.

Start one manual Job during a staffed window and verify its snapshot, duration, memory use, relay stability, and Datadog output.

Keep the daily schedule and external relay mode only after that gate passes, then add alerts for stale snapshots, snapshot-load failure, failed jobs, cap pressure, duration, and worker memory.

The code and infrastructure remain separate so this PR can ship the mechanism without silently enabling a production-scale scan. The infrastructure PR owns the production settings and rollout gate.

How

Complete snapshot handoff

The worker takes a deployment-wide PostgreSQL advisory lock before it lists S3. This prevents scheduled and manual workers from overlapping, even if Kubernetes starts both.

The final database replacement runs through that same lock-owning session. If the session dies during the scan, publication fails instead of letting the stale worker overwrite its successor. A worker that no longer owns the lock cannot publish through another pooled connection.

The worker reads S3 in pages of 1,000 objects and folds each page into physical totals, logical per-community usage, and anomaly counts. It stops before folding a page that would exceed --max-objects and emits structured progress every 100,000 objects.

The worker replaces the singleton database row only after the full scan succeeds. A listing error, malformed page, cap breach, serialization error, lost lock session, or database error cannot publish a partial snapshot. The last completed snapshot stays available. Each stored result includes its completion time, duration, cap, and image or source revision.

PostgreSQL is the handoff between the batch worker and the relay. The worker writes one complete deployment-wide snapshot, and the relay reads that snapshot on its normal leader metrics tick. No new network service or worker endpoint is required.

Relay behavior

BUZZ_STORAGE_METRICS=inline keeps the existing in-process sweep and its one million object default. external loads the newest completed worker snapshot on each leader metrics tick. off emits no storage-family metrics. An unknown value fails closed to off.

External mode republishes the existing fleet, per-community, and anomaly metric names, so those current queries remain valid. Snapshot handoff health uses a separate family: buzz_storage_snapshot_age_seconds, buzz_storage_snapshot_duration_seconds, buzz_storage_snapshot_max_objects, buzz_storage_snapshot_cap_utilization, and buzz_storage_snapshot_load_ok.

The buzz_storage_sweep_* gauges remain inline-only because they describe a scan attempted by the relay process. External mode does not synthesize sweep_ok=1 from the last successful database row: an old row proves only that an earlier worker completed. Kubernetes CronJob/Job status is authoritative for the latest worker result, including non-zero exit, deadline expiry, and OOM termination.

The relay keeps the last complete snapshot available when a worker run fails. Snapshot age shows that no replacement arrived on schedule, while buzz_storage_snapshot_load_ok distinguishes staleness from a missing row, database read failure, or invalid payload. If a community disappears, changes host, or leaves the configured emission scope, the relay zeroes the old labeled series instead of leaving stale values behind.

Per-community bytes are logical referenced media usage. If two communities reference the same blob, each community receives the blob's bytes. Fleet physical totals still count each S3 object once. This PR preserves those existing metric semantics.

Deployment boundary

The CronJob is disabled by default. When enabled, it uses concurrencyPolicy: Forbid, no retry, a configurable active deadline, bounded history, explicit CPU and memory resources, a read-only root filesystem, and no Istio sidecar by default.

The worker receives only DATABASE_URL, S3 settings, optional S3 credential references, and the code revision. It does not receive the relay private key, Git hook HMAC secret, Redis URL, or the full relay secret as environment variables. Operators may reuse the Buzz service account or select a dedicated one.

Non-goals

• This PR does not enable the worker or external mode in production.
• This PR does not change media uploads, object ownership, retention, or deletion.
• This PR does not change the names or meaning of the existing fleet, per-community, or anomaly storage gauges.
• This PR does not add a lease service or allow multiple workers to publish concurrently.

Risk

The application and chart defaults do not enable the new worker or raise the serving relay's cap. The database change is an additive deployment-global singleton table. The relay's default remains inline, so merging this PR alone does not change the active metrics path.

The main rollout risk is worker memory use because the fold retains state for distinct blob hashes and community bindings. The first production-sized run must confirm peak memory and duration before the schedule is trusted. The 10 million cap and one-hour deadline bound the first deployment, but they do not replace measurement.

External mode also needs stale-snapshot, snapshot-load, and job-failure monitors because the relay intentionally keeps publishing the last complete result after a failed job or read error. This behavior avoids gaps and partial data, while snapshot age and load health tell operators when the result or PostgreSQL handoff needs attention. Job status remains necessary for immediate failures and termination reasons that a killed process cannot record itself.

Testing

No production S3 scan was run from this PR.

Automated regressions verify that external mode keeps stale last-good totals visible without emitting inline attempt-health gauges, reports database-load failure while retaining the cache, and leaves inline telemetry unchanged. Mutation checks also prove those tests fail if external mode is routed through inline emission or a failed load is reported as healthy.

After deployment, create one manual Job from the CronJob during a staffed window. Require a completed Job, exactly one new snapshot, fewer objects than the configured cap, acceptable duration and peak memory, no relay restart regression, restored Datadog points, and no OpenMetrics sample truncation.

Next steps

• Complete review and merge this PR.
• Publish chart 0.1.9 and the final main-branch relay image.
• Replace the provisional pins in squareup/builderbot-platform-core-infrastructure#244, rerender, and require clean CI.
• Run the staffed manual Job gate and record object count, peak memory, duration, snapshot revision, and relay stability.
• Confirm the relay reads the new snapshot in external mode and the existing block.buzz_relay.* storage series update again.
• Enable the daily 03:17 UTC schedule and add dashboard panels and monitors for snapshot age, snapshot-load health, Job failures, cap pressure, duration, and worker memory.
• If production must roll back to an older relay image, set BUZZ_STORAGE_METRICS=off first. Older images do not understand external and would resume the failing inline scan.

Bigger picture

This is the application half of the storage-metrics repair. The paired infrastructure PR owns the production resource limits, schedule, artifact pins, secret boundary, and monitored rollout. Keeping those changes separate lets this PR remain safe by default while still providing a complete path to current per-community S3 totals.

Related issue: N/A. No matching issue or pull request exists in block/buzz.

Generated with Codex

Signed-off-by: Ravneet Arora [email protected]

Co-authored-by: Codex [email protected]

Original source

Desktop and shared changes

fix(desktop): keep packaged frontendDist relative so Windows embeds assets (#7177) (dad5a33865fc81a2e55b3b60746632f615ec1e3a)

fix(sidebar): simplify unread indicators and emphasize priority activity (#7134) (f038cbbb0d4092a72ffd93f17916f84d2b39bb43)

feat(buzz-acp): update base prompt; add buzz context and skills to Pi agents (#7335) (4beffef6979347f7ebdc760705865bdd04d23508)

fix(desktop): restore mention chip identity icons (#7338) (4afef8649ab11d60b423893e9e4f8cd36868d35a)

Persist video playback speed preference (#7336) (5d107836c6bd6a57e2da28560ec0acc0d016b8d9)

feat(desktop): invite owned agents from standalone forums (#7125) (e7e29937a145aca7a3c7f5436b07e32c6c20087f)

fix(desktop): authorize remote mentions at publication (#7124) (d595806fc3b9c9758992e39b9b51cbb5f55791b0)

fix(acp): rename system tag to agent-instructions (#7332) (ce9decb235f628c484631ac923db96466460fc3f)

fix(desktop): bind duplicate mention selections to exact recipients (#7133) (ee883d73fb84752d26f52c6606ad3cadc9f12cc7)

feat(desktop): preserve mentions across copy and paste (#7228) (b1f6b7ef770dddbb7f33c9f5861c379a47bca1d6)

test(desktop): await Bestie drag and profile hover endpoints (#7294) (4b0744d7f3161d9f045dd67a73e014e4440c2b47)

Collapse contiguous join messages (#7262) (2ac0aa1dd18c0b9d4fa722658c4692b0c79a496f)

Other repository changes

Add generic information-flow control core (#7293) (4d447b9c20a23fb33c94778e6cf309424abea6c8)

Verify ACP relay events before prompt routing (#7010) (e09f715c9d0ee2cb7bf8a39061e601f3a502f588)

fix(buzz-acp): bound busy-owner hold to prevent cross-channel starvation (#7337) (b17c0776b7438d59904e8c38926148bf692fa5f5)

refactor(relay): extract NIP-29 membership authorization (#7285) (cd02b693aae86444b0b5636474a3d202c6fc8f26)

Compare desktop-v0.5.22...desktop-v0.5.23

Original source

Desktop and shared changes

chore(release): release Buzz Desktop version 0.5.21 (#7301) (75f101d8b4f5b4b26f9891b73b87c67fedac25a0)
fix(desktop): wrap message tables within the available pane (#7279) (6cf514ed90981d1db4acdb97a272543ecca83993)
🤖 fix(desktop): harden smoke E2E tests against Bestie overlay and toast timing (#7270) (7a9a5233d9d755e715be0c585cf7850e935d28cf)
Show status and huddle indicators beside names (#7112) (c6ca9d94d94230a315257a87beb8dc116fec56cc)
perf(desktop): publish mention sends before waking agents (#7154) (40220d5618fc7dbe06421f358053ca77ed0f67d7)
fix(desktop): unify owned-agent cloud provenance markers (#7129) (5073e075d7e7d95558c57f24d86d5db6196491c4)
fix(desktop): derive agent availability from relay presence (#7127) (d5a73b9f35feaa81ef9afb13d1ec8943e8ec6ca9)
fix(desktop): preserve spacing after multi-word mentions (#7128) (44d19f59a593dfb541bf40dcadbed313ca4a8f97)
feat(cli): add buzz gifs command group and NIP-30 emoji tags on messages (#7259) (47d068e2109d077414cbf2f4f1c927f6d051037a)
feat(desktop): add persistent Bestie experience (#7223) (ac5a18697c8294e9237f505a2e01ec6fc374849a)
fix(desktop): harden profile batch and thread-reply fetches against relay slowness (#7188) (6f6093243eaea5160db79b7e054f06dfffd207aa)
fix(composer): align wrapped inline chip fragments (#7242) (b6dc533b7c2aadb70a8f011a88a5bd2f06d800f2)
fix(desktop): keep explicit agent profiles bound to their exact key (#7131) (83e596298449ab1cb57481221d0e41ce69e52814)
fix(desktop): discover authenticated owned relay agents (#7122) (434dafe958d82ca07d2b42b0f7d023ab923c2ff9)
feat(agents): harness-agnostic effort write path and spawn bridge (#4625) (0dbd036f5bff33e7ade75e7639f3218d424a6e73)
fix(desktop): retain automatic mentions only in threads (#7144) (1c8321cd08feb597f8bcff5195c21148fb3e98ed)
feat: add databricks fable 5.1 model capabilities (#7213) (560fea7b4fc5e96a4de45d988e039ffb3fd66662)
feat(desktop): add Pi agent preset (#7208) (42aeb1571cc1f1ed4d73f05b420474be970021ab)
feat(buzz-agent): add DatabricksAuthCoordinator single-flight OAuth (#5545) (5aed49b505a7e27f3b0e34dafa53d6c4e8cdcd64)
fix(desktop): preserve keyring identity during recovery (#7203) (e5a7e26a1008227ff6a0b9430a6df2470475bec1)
ci: relax file-size ceilings by surface (#6485) (4794a5cecf058ebbe2b367f40b1ce6ff80791e91)
fix(dev-mcp): extend shell timeout cap to 20 minutes and align outer budgets (#7185) (cae158ce7fd72dee1f34d264f6790711d82d46bf)
feat(buzz-auth): add production NIP-FI federated assertion runtime (#7109) (70895b355fcea9f99894b426c020052b715bd368)
Hide download action on voice notes (#7182) (ac4aa94b05417c2830e5489ddda0c87f6a9d1dbf)
Add voice notes to desktop messages (#6978) (114dbf745f1fe0bdbecb70e07a07f03c23687bdc)
feat(desktop): add thread-scoped ACP session experiment (#6909) (59328d5ae38a51a618dd2fddd7faf1343d42096f)
fix(desktop): scope composer autocomplete to focus (#6860) (571c1902d0ca55cfd4ccf6b91eeb731909cc10be)
feat(desktop): add isolated named demo builds (#6407) (4a9de1a3a121285ef475d630b2b5764044c02cde)
fix(model-capabilities): humanize databricks goose model names (#7135) (0affe527e880ddd300ae7d4dac3f0600c79b4f5e)
fix(desktop): back split thread headers (#7137) (b47b5a50127c080a74ed4de19a43534cd9a7b563)
add public descriptions to agent personas (#7126) (cb3144999bebc4939cb15b2200b373281d493b52)
feat(desktop): add protected-build Bestie experiment (#6902) (5673c3307e248530beeea060da437350d3939a4b)
fix(relay): reject a frame on its own acknowledgement channel (#6961) (2f3dd850db3afe27e56f18cbcd3548eabdd9b9c2)
feat: render agent avatars as squircles (#7106) (bc006f67087b049e2f9c4d8a2f26faceff628225)
Enforce NIP-OA authorization time bounds (#7004) (e47690c21b519128b40c917456b3e3f33f018fe4)
feat(desktop): use segmented controls for channel creation (#6845) (c3132c3ee982d194cd0198ad07b57ec8bd726e4e)
feat(buzz-agent): surface stop reason and silent-turn WARN in telemetry (#7038) (eed74bde2f4797714335ac10c56c0b0244c1def4)
fix(desktop): surface channel history load failures (#7013) (00e61eafa917d296104006576b7a2ddbfd58bb5a)
fix(composer): polish automatic mentions (#6956) (8dbc65d9e2c80d9d8516e17b751c46e0568100e6)
fix(desktop): resolve bundled sidecar on cheap path and bound login-shell spawns (#6904) (2c99ee7af5a20d239e95ec5368407887449795c9)
refactor(db): extract domain stores from database runtime (#6987) (a3730784fc851bb1125b40cca9b0a30788a293c1)
feat(desktop): add team sharing to community catalog (#3995) (2f66ee24a0bf5efa958378069a6b155e99a1d068)
fix(desktop): complete project empty and context states (#6980) (a89f5df4c52c3aa5875d9fccb0eaf2222aee4084)
fix(desktop): resolve exact typed mentions on space (#6862) (b49675894b39f87215e4dfc8c1ad4a3c28c6097e)
perf(desktop): restore project context during startup (#6939) (973386351646d01efca2735ad4921c0d219cff85)
fix(desktop): lift right auxiliary pane above shared header backdrop (#6966) (350caf1de3136f6ec473a69d394544e99dfd4d85)
feat(desktop): implement 30178 team catalog backend (#5112) (a7c7414a7fadfe1585b8a90af0f29d6593bb6126)
feat(model-capabilities): humanize Databricks UC model families (#6955) (ae0ecd9a676c692876116fee7265cba5f18cbd90)
feat(agent): discover Databricks Unity Catalog models (#6918) (be8d7756d5f17285f1e8a4b77d67f7d7cfb6f9e7)
preserve channel description paragraph breaks (#6946) (69096c9a8db726eebd83422cdc5e6c72ed9d4f90)
fix(projects): allow owners to delete agent projects (#6533) (9176e34405ae59fdefc50dc585454b7e9cb3833a)
Fade expanded video controls on hover (#6926) (27c1a7c91b658535c8a655dbe8f2421af9099b80)
fix(client): resurface hidden DMs from live activity (#6885) (4d77175c78f4df48e13398b25b271e3ac1b31dd3)
fix(desktop): keep the draft space when typing right after a mention pick (#6875) (c856be0fb954c9e5267d622841098c24e3381e8f)
broker: define the agent-to-broker action contract (#6742) (b622003f74aa5bf9b659786452813299a25e4897)
fix(desktop): keep project sheets independent from threads (#6901) (cada3028ceda7ebdae61329f15b5364ca0d23dd4)
fix(desktop): accent-colored mention badges that count thread mentions (#6900) (ceb8ba605f43728bdab64aa461211baeeb54364a)
fix(desktop): show edited head content in thread panel (#6887) (eb8e97cfe74afbe560d92f3a8f470967a992767f)
fix(desktop-tooltip): increase surface contrast (#6897) (03bfc837cbe463de9ef59a86742825a4863fb603)
Apply access policy when reusing channel agents (#6838) (01c87a350b0fda89c8d333a5dd6c0e9d89d0c03f)
feat(sidebar): prioritize unread DMs in overflow navigation (#6842) (4f554b6385065b698db819498a6f359b17a45459)
feat(projects): add agent and CLI project-home support (#6590) (de188ebf06f701ca0f47c51f859da21e19a35f04)
feat(desktop): restore message quick reactions (#6892) (22cdda441d19da1b15dd7db4d932d2f067cd87b3)
Use paired tags for standing & per-turn context (#6701) (f177f4909d55ad48a36e86a682cd5be4f006f0fe)
fix(cli): preserve signatures in event reads (#6884) (583af02299e20cbd8603044c7844bc128e4e06cd)
fix(desktop): stop pulsing addressed agents on send (#6873) (db514b153a8cb17631d6e80b91c95fdc45deb147)
fix(desktop): prioritize sidebar channel status (#6861) (4f529a45f219f55bc6038f304cd69e3f51ec0533)
feat(desktop): hyperlink selected composer text on link paste (#6684) (e8172b5baccd0f4a711f5e19a3bc4313708f1c78)

Other repository changes

fix(scripts): copy global-agent-config.json in buzz-adopt-prod-agents (#7303) (8e7b275cb07fc1abea55b34e8db90136d039bd08)
feat(relay): add early startup lifecycle logs (#7258) (88687876f7808a2fd742b7eb2e4b9f87d999ad8d)
docs(nip-fi): add Blossom kind-24242 media possession-proof exception (#7278) (752cbfc0375efc8bac3d5cc2a5716250bc0be234)
Add mobile voice notes (#7121) (6f5ec4a731901bf3ff2a370c7ccbfbc3fba93368)
docs(nip-fi): document Git smart-HTTP credential exemption (#7268) (c328202cb08cac5b8c1610d2d373e69889772b4e)
docs(nip-fi): adopt deny-until-TTL and extend enforcement to HTTP ingress (#7254) (187df22252fa24cce2f3295fb9df9f4dc211b30a)
Add operation-aware database pool acquisition metrics (#7195) (91ab9d31b8f7249ff1db141ae9d8bb3f2a20bcdd)
chore(db): drop Phase-A NIP-FI relay-side authority ledger (#7221) (04babf02655440b4dfd37f2e2df605ead0a030d8)
fix(acp): replace real user name in base prompt mention example (#7250) (2af9773d6271ce62cbe5dfbd28fbe5dd79372465)
ci: split CI into reusable workflows (#7168) (0e878664b08cdf7fb2d89d940bc2aa92cdc485f7)
docs(nip-fi): rewrite NIP-FI as stateless OSS Buzz spec v2 (#7214) (d4420eb47f9d48bd81358f928dfe6dee6804ac13)
feat(relay): add detailed readiness metrics (#7149) (beb76406c12ab8a7af9b2fcf7547c353e3369c34)
feat(mobile): prepare buzz-push-gateway for deployment (#7158) (42b42447b0dc47c3e1a4d95caab893567dcd1677)
fix(mobile): isolate extension linker flags; complete iOS build in CI (#7187) (b270437a62bc1049b27745799dc44268d0c23489)
chore(ci): lower Codex security review effort (#7179) (4365883151698cd30e31cf4091629543b61c2478)
fix(dev): keep the canonical profile when launching from desktop/ (#7143) (e17a0d44c379b2ae40b91b8ba43f9a9c5bede90f)
ci: run PostgreSQL tests in isolated lane (#6730) (bd73490418266f267d9bb3bdf13e64582adc8e80)
feat(db): add NIP-FI identity and final-admission schema foundation (#6994) (9ab163190b4d4994a742a66d5fa4cae23c35fa4e)
feat(buzz-acp): give each channel thread its own agent session (#6732) (674c173eb7b2805864fd8375297c849c3a758f69)
docs: add review-proven failure-path & async-state rules to AGENTS.md (#7061) (4952f5810290d00a1dd9413235b39e9a7154acf6)
fix(acp): wake agents from workflow messages (#6953) (93237b4a745b14cb8bfe292053bf34adef652d29)
fix(ci): salvage Codex review output on PTY-shutdown hang (#7042) (17ecf0b8c9c0f4bb9d098f25c2a2ece6a3500a4c)
fix: retrieving cold memories; add regression task (#6950) (f463e726dd173146c3c2bcbf7fdba03c9790dd3a)
feat(db): configurable writer session timeouts (lock, idle-txn, statement) (#6229) (3ed623bb217bf9697b0ce4562529254977e0ea04)
perf(mobile): reduce cold startup and channel rendering delays (#6996) (b593c7d7feb6bf4207dbf3439906c25a714b703f)
feat(mobile): push notifications MVP (#6269) (c432a111ca9ddd31a85e1312d5995f8b92191b82)
Refresh mobile utility surfaces and theme picker (#6944) (ed11c8d8bf0a17402be5cf243724f89471530d2f)
Fix mobile jump-to-latest flicker (#6807) (58cc4b7e9be71223f7898ea5f930a4248830ccfb)
refactor(relay): NIP-98 admin auth with Operator/Moderator roles and NIP-11 discovery (#3777) (86b9142a09f2af3ba2fff7effa6a6cd53b40f51c)
refactor(db): split channel membership store (#6782) (e76c81968b65b0755b83efdd59dc3375c59ddf40)
feat(auth): add NIP-FI canonical assertion verifier and contracts (#6776) (953a1798b23b04289b3a225f463e60a172c1aac3)
fix(ci): bump Codex CLI to 0.150.1 to unhang security review jobs (#6962) (80177e4c8e97e7bf1f1a3760c4e3503aace22860)
test(db): use canonical channel roster fixtures (#6819) (57216c942f171db305135bcb6a4ede2d87e0be8a)
fix(cli): enrich template cardinality error with per-candidate presence and profile hints (#4825) (0808ab485c39c3c12ef02af2188c65a5145eb99d)
Fix Codex security review authorization (#6913) (745ff6066c92372ea1ee6a5fe05862cdd9b81303)
fix(db): disable heartbeat vacuum truncation (#6898) (0ccf934b88f610f5f235862ecd51e2dcbae2cb74)
chore(deps): update rui314/setup-mold digest to 7e4f20a (#6663) (c363ce13c07cb454d6fa92b96d65cb52322c13e9)
chore(deps): update dependency vitest to v4.1.11 (#6667) (525007af4b2f644ce07fab92ef4863c46cbae8a3)
chore(deps): update dependency @tanstack/react-virtual to v3.14.10 (#6666) (30596d3addf69a6954d034ce28f886539604f2c8)
chore(deps): update ubuntu:24.04 docker digest to 33ceb71 (#6664) (82e748085e3f06b8e297387b33f7615a6db23501)
fix(db): exclude kind:30179 ciphertext from brownfield FTS (#6822) (b3baa56ba83d01a0b7292d81aae9370f5616c62b)
Add gated security reviews (#6816) (cdab765748ddfeba10830a9a5331b6157bd321df)
Add Buzz benchmark evaluation layers (#6823) (79df468255b50f6aa7bd9cb19a622a4a37b88dac)
Deduplicate ACP thread prompt context (#6706) (8f3566ad9ebbd225e53ce66a7072ceee074eb25a)
refactor(db): finish replaceable event store extraction (#6777) (ef0d2025683869418e8eee22ac5b5ac16c5198b7)
Fix Admin feedback filter overflow (#6825) (dcee330b5ca984de8657a6d8cf36e34e1d825d4a)

Compare desktop-v0.5.20...desktop-v0.5.22

Original source

A few things to prepare for deploying the Buzz push gateway as implemented in #6269:

• Cut buzz-push-gateway chart 0.2.0 from the current config
  (certificate auth, dogfood client)
• Datadog-compatible metrics
• Align the desired schema, metrics docs, and production ingress guidance with the current dogfood deployment contract

Links

• BUZZ-17: Publish the MVP-compatible gateway chart
• BUZZ-26: Add Datadog-compatible push-gateway metrics and correct source drift

Signed-off-by: Tom Brow [email protected]

Co-authored-by: Codex [email protected]

Original source

Desktop and shared changes

• feat(desktop): add KLIPY GIF search to composers (#5554) (8471049c430073474939336dfc6aa98272bc8762)
• fix(desktop): respect automatic mention preference after send (#6837) (e8cd7516e6df62c2a9025d7a821bf98e0e8f83b4)

Other repository changes

• fix(release): attribute desktop candidates to the operator (#6831) (820a8589971df49bb9285a236ce1e2955a301abd)
• fix(ci): check out source in docker.yml merge job (#6833) (cae7f826b39b38e7d49a90d342499234dec007bf)

Compare desktop-v0.5.19...desktop-v0.5.20

Original source

Desktop and shared changes

docs(nest): make commit attribution policy-neutral (#6707) (22f32c99e2e983b7e015e8c058cac47438d05b2f)

fix(desktop-messages): preserve inline agent mentions with persistent addressing (#6793) (b58de7cfa7a13b1a6dbb2fc269186439a6fb79a0)

feat(desktop): persist agent addressing across composer messages (#6714) (7ba1197aa6b01616b5920487dd585a37d2e7f74d)

feat: navigate images across message threads (#6705) (a526dca9bcaa08dfb5db77999cc1f584a17a9d64)

revert fixed mention highlight (#6716) (12f3fea26e4c638a5fae20dce1ec0876e3bbca41)

highlight search terms in results and messages (#6702) (29f2054c69f2e0ea4ee90141ac6a80503e5f9bd1)

fix(desktop): make lightbox zoom controls interactive (#6710) (9b6a637d014607760d116b90c57062f82ab27cf3)

Support community deletion in versioned media buckets (#6738) (d12dea4e67c5224a626d9c00f45e68d1def72d4c)

Fix TipTap editor mount race (#6779) (bb5b9357a7c8ddeaee73f6252c7d9f8a9014dbc9)

feat(buzz-agent): gate LLM tool calls on session/request_permission (#5712) (a1219070fa6c3263c8a29637c70b7a317d4ecd9d)

Fix mobile Huddle agent voice turn states (#6611) (8b812017a79c9279594330fb2b04c1eaf0e6e6c1)

fix(desktop): polish inline chip states (#6718) (a8e1c66c4a5017a32e41e04e2ba6059e2dfcae21)

feat(workflows): discover trigger filter values (#6712) (e760c51820b2103d965c22b44254678e10fb689a)

feat(desktop): simplify the message action rail (#6529) (c5166f2164035ca96787daee6528d5dc04c4a02e)

fix(desktop): restore icon-only remote marker (#6491) (30d2fc52f96138311f2006627ffc1a6d5ff1865b)

fix(composer): wrap Buzz chip labels without orphaning icons (#6581) (f79d346a178408661fcad85122364ac2ad7e9cb2)

fix(desktop): bound thread /query and surface load errors, not false-empty (#6447) (f6e6617a9dcc2308d5039f8afaab974b49fb9577)

fix(messages): route edits to the owning composer (#6575) (4bf80978f52981f0035e6c0b86bdf1108bbf64c8)

fix(desktop): align jump-to-latest pill with composer height (#6606) (9f55bf67456be10ff7c8238bf0d9e12e582848f6)

fix(desktop): emit singular mention feed category so alerts route correctly (#6665) (db5617dd1541aeab7bacaf039b6ca98f856776d0)

show mention counts in channel notifications (#6696) (0e69b3fd7c44c09da62e2c4e89fdb4a26e666869)

fix(desktop): hide selection formatting tray on composer right-click (#6683) (2f13e30e88e84851e7ad336364dd3cfd547b8c16)

fix(desktop): stabilize members dialog scrolling (#6670) (72ba987c365abb98939153c4d43dde73257c1264)

fix(desktop): keep member runtime status off the UI thread (#6445) (17af15effac63e6bc5338448326ce52ba4426e5f)

perf(desktop): persist channel heads, collapse thread reads and reply sends (#6572) (2d280376ad36134cec1f23bead6d866d30bed147)

Downgrade desktop Huddles to audio protocol v2 (#6610) (0720f5380ce8a6c050afac159f8462c06cd51ab5)

perf(desktop): make the Projects surface render-cheap (#6460) (040b203f73576e15ef749b0ff0ee6243f06a5c48)

refactor(acp): clarify agent prompt sections (#6501) (f99532585a0715bac73b4a6361a9b4966bdb5095)

Add mobile Huddles voice MVP (#6056) (8c0f42e187ca82d701251fc849217530178ebace)

feat(desktop-messages): keep agents addressed across messages (#6315) (a2d8be5efa126221c7676f7797555dfb2bf5b0e0)

fix(desktop): remove Buzz entity link previews (#6512) (723affe5d1340896209bf3aca94c7b791bdcf38b)

fix(composer): preserve caret when inserting mentions mid-message (#6531) (074561233eef71df9690ec22c2a9c5e798c297a7)

chore(deps): update rust crate futures-util to v0.3.33 (#5448) (d874d67c117e4582cc9549ebe85c942e5e49faf7)

fix(desktop): restore true zoom by scaling the root rem (#6514) (97b1fee5c3d9ad574196e974b520061fccc47d07)

chore(desktop): drop unused ORIGINAL_CONTENT from empty-edit-delete spec (#6517) (eb484387d5816b6f9155ad3a0be79ede3c3d7ad5)

feat(workflows): clarify workflow setup and activation (#6470) (0e48ff26915aa32d5f05208847b9aba75f4f19cd)

perf(desktop): stop the Projects fan refetching on re-entry and running after leave (#6458) (b85d680fb1e3cc7eef6d31d47598741b35836a2e)

perf(desktop): keep the member roster off the channel-switch path (#6456) (b0466ac465336cb773fbf7355ec05f7d61f4a3aa)

Clarify huddle message destination (#6496) (7da8f9abf3245d7ab31ba6e4ad72598b03471f2b)

feat(archive): add observer-frame retention schema and gated DB adapter (#5719) (fc2ce6728b3b4805040c0a2f2cc5c15f1c1806ce)

fix(desktop): restore human barge-in over agent TTS in huddles (#6431) (6039fed565fd73a07cdddc3143c86733cad91709)

Other repository changes

Remove public relay signing key fallback (#6729) (ee6ca5fa28bce04dfecb6717de65b08a57f2ac47)

Qualify canonical relay images for staged delivery (#6781) (f24971033178926153b49d320bd876d15d9cb2bf)

Add database pressure observability (#6700) (113a33b7e49b7173ee1767c49ef2f49c63803034)

Add staging dev relay image workflow (#6709) (931747c9c42df14d5c23c87fe57e30b995321ae3)

Extract community persistence (#6668) (9d1e4b257657f382d3111ce748f3da8d063b7671)

Add inline profile camera capture (#6680) (9aa332af03b4fb416dd8648b320447617ffd6fa5)

Hide Huddles in mobile agent DMs (#6676) (822c5ab231bc253d809d2d13da4b381f723dcd25)

Centralize replaceable event persistence (#6660) (8d2d0ff5ad42733e9949442c4b6358d0ba87f9a8)

fix(ci): prevent poisoned Rust caches (#6618) (69b1225923c9bd98784e86a6976bbc34a3dc8630)

docs(security): route reports through private advisories (#6728) (02dc49f0e60f75027e926e33a2d0021f7b4e0cd3)

fix(mobile): join starter channels after accepting invite (#5915) (6eff84d1271eb1b90e07c5a0673343a76a0753fc)

Add mobile profile editing (#6583) (a0298539f7043cd0f2d961030e60cc0fd82970b1)

fix(mobile): recover stale and shuffled messages (#6691) (01091c15a15d6057d80463dfd828e6e1e4b60743)

feat(mobile): browse and join open channels (#6243) (26f4c3ed304db2c273f0bd4d2746aa9598f38366)

Polish Huddle participant interactions (#6312) (e23632941331502c0330e51d407e667bea26ef57)

Downgrade mobile Huddles to audio protocol v2 (#6558) (4baccd5394d6166bb68ff03b24e376e322281a59)

chore(deps): update rust crate async-trait to v0.1.92 (#6094) (f7942167372501576c9f0f589cf2c166882668bb)

chore(deps): update dependency sonner to v2.0.8 (#6093) (2d93ea095535e42ee3a9933f00a4c0bd5e9e1c67)

chore(deps): update rust crate http-body-util to v0.1.4 (#5452) (9390e11c9babeef221aeb0a22cc61a52700d168f)

chore(deps): update rust crate http to v1.4.2 (#5451) (1a0a27d3586b14fb79ec8e162441e610f8548188)

chore(deps): update rust crate futures to v0.3.33 (#5445) (2cef92df676490654f13ebe1de56923b2636123f)

chore(deps): update dependency @tauri-apps/api to v2.11.1 (#5444) (f84511c169cf9a98ac03e9c1acb6bf4d68de5cb8)

chore(deps): update ubuntu:24.04 docker digest to 561618e (#5442) (9008a4d1724afbd8dba0fd99e99cd8305b5d2ecb)

chore(deps): update swatinem/rust-cache digest to 6323deb (#5441) (694d804b24cd0b97403b3caf159a55ffd1fc3b08)

fix(deletion): allow IRSA S3 credentials (#6495) (47526784d5c1967de6b2c5d1ee642bccfefbfab9)

docs(nips): comprehensive NIP-FI — core + claimable profiles (EDGE/LIFECYCLE/DELEG/CONF) (#5946) (d97780b4777f2fe3430b4e30a7d47fc6837ee059)

fix(benchmarks): wait for scripted event delivery (#6487) (025425591ed67518a63870316f1473ffd02dd520)

Polish mobile channel navigation and message sends (#6488) (aeb741fd31044ec560d953b0986dec2e7e93e2c6)

Compare desktop-v0.5.18...desktop-v0.5.19

Original source

Why

Phase 1 of progressive delivery needs an explicit eligibility boundary before deployment automation can safely consume relay artifacts. Today the canonical Docker workflow can publish independently of the same-SHA CI result, the relay does not expose its source/build identity, and the Helm chart only renders mutable tags. The existing ghcr.io/block/buzz-staging-dev workflow in #6709 remains a manual pre-merge preview lane. It is deliberately not a canonical promotion input.

What changed

Compile the full source SHA and GitHub Actions build identity into canonical relay binaries and expose it at /_status.

Gate creation of tagged multi-architecture manifests on the latest exact-SHA CI push run succeeding on main or release.

Preserve the signed SLSA provenance and add a signed, release-only deployment-eligibility predicate with source, build run, qualifying CI run, and exact compatible Buzz chart version.

Keep failed or pending builds untagged and without an eligibility predicate; preview-package artifacts are excluded by package and signer contract.

Add optional image.digest support to Buzz chart 0.1.8, retaining the existing tag fallback.

Document verification and the intentional boundary between image/chart compatibility and backwards-compatible database migrations.

Risk and rollout

Canonical tag publication now waits for same-SHA CI and fails closed when the newest matching run fails. Per-architecture blobs may remain untagged after a failed qualification; they are not promotion inputs. Debug manifests are also CI-gated but do not receive the release eligibility predicate.

There are no migration or schema-orchestration changes. The companion BuilderBot infrastructure PR will pin a separately verified canonical main digest and expose a read-only running-deployment inspection command. Signed eligibility is available only for artifacts published after this workflow lands.

Verification

• Blox: workflow contract fixtures, including stale-green rejection and predicate structure
• Blox: actionlint for ci.yml and docker.yml
• Blox: 46 Helm unit tests, chart lint, and production/quickstart render fixtures
• Blox: relay status unit test, workspace Rust formatting, and workspace all-target clippy
• Live evidence: exact-SHA CI selector chose successful run 32857345153 for source 9d1e4b257657f382d3111ce748f3da8d063b7671
• Existing canonical digest provenance verified with gh attestation verify

References

• #6709 — developer-preview precursor; intentionally separate from canonical eligibility
• docs/deployment-identity.md

Generated with Codex

Signed-off-by: Luke Tornquist [email protected]

Original source

Desktop and shared changes

fix(desktop): simplify duplicate agent provenance (#6401) (aea0ef8df9fc24d9aa8bf5c761ab2910026a601b)
fix(desktop): sender names in notifications + macOS click-through routing (#6427) (4e3c9e619c93dd26677b392ad1f8cf0d12c8f855)
polish(desktop): finish Projects navigation and context chrome (#6429) (9b32e055fed45864e1982f3d99c5402ba35cd8a6)
fix(desktop): clarify add agents channel action (#6374) (9891e64f6b8358d78aa85f2ba248310d58b51ec0)
feat(desktop-messages): show compact Buzz link metadata (#6252) (de8a2741c7598c27e0d27cd4562d76b947934e2f)
feat(workflows): reply in-thread from send_message action (#6178) (c6e3fe7dfa751096d8c4083aaf15d6f6af296572)
perf(desktop): split discover_acp_providers into cheap and forced paths (#6330) (c63ac746cd4622e043574c305ff54021b07b847b)
fix(desktop): restore recent channel sorting (#6402) (569308c23c9c2bf620dd3a9a5e4baecbcfa22e16)
fix(desktop): isolate main timeline stacking context from focus drawer (#6398) (b298a175c4b9da1638f84c1f287e42d16a690a61)
fix(desktop): make reconnect repair lossless (#6415) (06e8be9098f099ff9036cfbe637390d5ac982809)
perf(desktop): resolve references without directory scans (#6328) (54bbe7305b9ec82a6ac03f84ff5887f77858c0b6)
feat(llm): stamp thinking effort on call-completed log line (#6424) (b728a2af3197db52e2d847b095f27209f99dc977)
Fix cross-owner relay agent mentions in owner-only builds (#6338) (ee0c7076af83fe9e2aafdc1baf4113ad988f53bd)
feat(workflows): add workflow editor (#6248) (1934e83bf5a5d8cd00f0cf28b558547b8d0dffb0)
fix(desktop): preserve huddle speech boundaries (#6397) (7ebe3ea699a24b2f95573b88db8f8fe5f1187eb4)
test(desktop): use a wordlist-safe separator in passphrase word-count test (#6356) (886cef7f723a539c4026d12e6a0605062bf2208b)
fix(models): curate Databricks alias-aware labels for 5 missing endpoints (#6360) (2ce8df8533d8c8598ab3d7a2faa797f8b5ee2eea)
feat(desktop): refine context-aware Projects collaboration (#6396) (3c228b1082a93aca302c7b6a67ec274c51ed5eaf)
fix(desktop): distinguish duplicate agent devices (#6337) (2e7583bf5ad5926ca32367af9954bc79d108e42d)
feat(desktop): close Buzz window with Cmd+W (#6314) (e5d1dfef7bf24ad527c9c8c1785b613abad574f7)
feat(desktop): make Projects workspaces selectable (#6368) (2b7be9340dd0785bd04795d55e004a6dfedd4998)
feat(desktop): make the Projects overview follow the selected section (#6335) (f88cda9eb886500ec7d205e1d265ac6f654aa433)
refactor(desktop): coordinate TTS playback (#6341) (09718fbb60c1acd5a4c1aff1bd91248008977129)
fix(desktop): show complete repository trees (#5102) (9c2f05346fdf3f058e4c579f6eea03dbe65fcca4)
Add appearance preference previews (#6193) (9a1e861ab8507ee28e5f03010b7f36d1b74ec919)
fix(desktop): restore emoji recents (#6263) (f96f1883c5ad94825d43a856e5d25e307a0540cb)
perf(desktop): move five hot renderer paths from JS into Rust (#6024) (bbd20fae75ecc3bd7a83cc12a65379fac22a2b79)
fix(media): accept portrait video resolutions (#6058) (196d62f97c21d053ddf8715d75ef57e92bd0051f)
fix(desktop): hide archived channels from #/Tab autocomplete (#6156) (fe7c6808e7430d185498178e07e58e378d2e4c7d)
fix(desktop): morph the drawer panel icon instead of sliding it (#6306) (e5a6e2022fb59c3928b054bc8d51874465fbe3df)
feat(desktop): refine repository-aware project workspaces (#6003) (87f8ff82ae5d3fdd99831c62a869b39138e65a57)
perf(desktop): parallelize relay agent directory rebuild (#6258) (a362fecc2389955f942c9581bdfeba379ab115b3)
fix(desktop): exclude archived agents from nest, order regeneration (#5905) (121e4b3ce7acab6ac310257f444997f58a97cb2e)
Add font size and conversation density preferences (#5644) (7e2651791d598a3938ef4560a41801223fb9b2c9)
fix(desktop): emit camelCase config-write payload fields (#6062) (6e8d078ffe1ab27b8dde6bb697551b7d2d1a85b5)
fix(desktop): downscale large avatars for agent-share PNG body (#6260) (e2ade93f02f6d1b4db23e0c442a2c65608e54d36)
fix(desktop): preserve early relay auth challenges (#3320) (6ea7a2b2211438359b227a9991cf8ccad2927fe2)
feat(managed-agents): close five Claude Code agent-config gaps (#4557) (50a71137e6f1c56f66e2f7348a917b2d2a1798f0)
fix(shared-ui): delay hover disclosures by default (#5821) (d7e8fdb10ca5e055b7af6d22f67d9a8f42cec8ed)
fix(desktop-chrome): preserve balanced layout when sidebar collapses (#6000) (c442a90a176845e3989436f2bb24eb6d0ca79d47)

Other repository changes

test(benchmarks): expand Buzz-native dataset (#6448) (b56a52ca11296b86ee41c41278a1169f92f245b6)
docs: clarify two-layer moderation ownership (#6481) (8740a1fa94dd14a3eb5cd2a570b0be2c4a68cbfe)
Fix mobile thread tail and iOS channel header (#6399) (ffb12d3b05fe1ebd62006dbcd2f079be4e210b70)
chore(deps): pin earshot below 1.2.0 pending a VAD threshold re-pick (#6392) (2edacde4d4c01490834725774aa878dbc373c41d)
Repair stale large channel roster snapshots (#6251) (24ec6a468ec9d0d425ee58fbfc4d416412c446ad)
fix(hooks): scope pre-push lanes to branch merge-base diff (#6423) (cd0d33f08507d07c8e8b8511bba92290c046ef03)
Enforce a three-day dependency cooldown (#6426) (3ee465e12b815a191d902856440e2f3348bda506)
feat(cli): accept Buzz message links for thread reads (#6359) (84c095f8bea14b55373e2d867100abe37aa6061e)
fix(acp): guard against unrequested public relay skills (#6394) (d274a6e94928d64e27648f75320ab8af961396da)
refactor(prompt): simplify Buzz agent guidance (#6340) (2a236e413723f207c2f6c1e8921fab4f071d0445)
Add Buzz-native collaboration benchmarks (#6264) (a9640c7cc4d55b0a0ac987aab4af02a204009d19)
Polish mobile timeline and emoji interactions (#6297) (da818eddc2f470c006a1073c8c5452f8a989f272)
chore: serialize mobile pre-push checks (#6322) (81567b76a5d164b052c4e8526f453cf7a6ef43dc)
fix(buzz-acp): loosen workspace-scan guardrail to allow named paths (#6261) (934f3325c3fdaa3a6f23134b74518139aac8ca3f)
fix(buzz-dev-mcp): expand leading ~ in read_file/str_replace paths (#6271) (7f69b13b4586acedf6d898edf1be2a6babea3626)
Unify mobile channel details (#6113) (a567dfc2df870878dcf079550502a09a89cc8091)
Revert "fix(acp): gate relay-signed workflow messages on their attributed author" (#6311) (08eb46ef3c0894baa7e48d9229f45349751a4a57)
Fix mobile Activity thread navigation (#5850) (93114c9c65138397de39729fde0a816eb9f314ab)
Refine the mobile emoji picker (#5853) (359fe646758d253ee94bf054a87904efd1dce7d1)
Polish mobile message actions (#5873) (78267b0c3a75840d035ff0cc9ad1984def773886)
Refine mobile pairing confirmation (#6018) (40f1dac6913d04c87d72610a69ed53bd12377b84)
chore(scripts): add buzz-adopt-prod-agents.sh (#6250) (4f9727a4b3d76389f862faa15241e16e2dd36108)
chore(hooks): keep mobile analysis out of pre-commit (#6236) (b74700daafa823e56c60b4e6470740ab28330888)
Polish mobile timeline navigation (#5874) (417eea2230c1864e8c77f6440dbcfa109bfb63f6)
fix(prompt): simplify pickup follow-through (#6186) (d2cfd377e27dab8fdef0236dd8e92c89efbae829)
fix(mcp): scope todo usage (#6216) (5694e78def8b6ea674e101c1c988a5f17c9baf9d)

Compare desktop-v0.5.17...desktop-v0.5.18

Original source