Buzz Updates & Release Notes

Desktop and shared changes

fix(desktop): keep packaged frontendDist relative so Windows embeds assets (#7177) (dad5a33865fc81a2e55b3b60746632f615ec1e3a)

fix(sidebar): simplify unread indicators and emphasize priority activity (#7134) (f038cbbb0d4092a72ffd93f17916f84d2b39bb43)

feat(buzz-acp): update base prompt; add buzz context and skills to Pi agents (#7335) (4beffef6979347f7ebdc760705865bdd04d23508)

fix(desktop): restore mention chip identity icons (#7338) (4afef8649ab11d60b423893e9e4f8cd36868d35a)

Persist video playback speed preference (#7336) (5d107836c6bd6a57e2da28560ec0acc0d016b8d9)

feat(desktop): invite owned agents from standalone forums (#7125) (e7e29937a145aca7a3c7f5436b07e32c6c20087f)

fix(desktop): authorize remote mentions at publication (#7124) (d595806fc3b9c9758992e39b9b51cbb5f55791b0)

fix(acp): rename system tag to agent-instructions (#7332) (ce9decb235f628c484631ac923db96466460fc3f)

fix(desktop): bind duplicate mention selections to exact recipients (#7133) (ee883d73fb84752d26f52c6606ad3cadc9f12cc7)

feat(desktop): preserve mentions across copy and paste (#7228) (b1f6b7ef770dddbb7f33c9f5861c379a47bca1d6)

test(desktop): await Bestie drag and profile hover endpoints (#7294) (4b0744d7f3161d9f045dd67a73e014e4440c2b47)

Collapse contiguous join messages (#7262) (2ac0aa1dd18c0b9d4fa722658c4692b0c79a496f)

Other repository changes

Add generic information-flow control core (#7293) (4d447b9c20a23fb33c94778e6cf309424abea6c8)

Verify ACP relay events before prompt routing (#7010) (e09f715c9d0ee2cb7bf8a39061e601f3a502f588)

fix(buzz-acp): bound busy-owner hold to prevent cross-channel starvation (#7337) (b17c0776b7438d59904e8c38926148bf692fa5f5)

refactor(relay): extract NIP-29 membership authorization (#7285) (cd02b693aae86444b0b5636474a3d202c6fc8f26)

Compare desktop-v0.5.22...desktop-v0.5.23

Original source

Desktop and shared changes

chore(release): release Buzz Desktop version 0.5.21 (#7301) (75f101d8b4f5b4b26f9891b73b87c67fedac25a0)
fix(desktop): wrap message tables within the available pane (#7279) (6cf514ed90981d1db4acdb97a272543ecca83993)
🤖 fix(desktop): harden smoke E2E tests against Bestie overlay and toast timing (#7270) (7a9a5233d9d755e715be0c585cf7850e935d28cf)
Show status and huddle indicators beside names (#7112) (c6ca9d94d94230a315257a87beb8dc116fec56cc)
perf(desktop): publish mention sends before waking agents (#7154) (40220d5618fc7dbe06421f358053ca77ed0f67d7)
fix(desktop): unify owned-agent cloud provenance markers (#7129) (5073e075d7e7d95558c57f24d86d5db6196491c4)
fix(desktop): derive agent availability from relay presence (#7127) (d5a73b9f35feaa81ef9afb13d1ec8943e8ec6ca9)
fix(desktop): preserve spacing after multi-word mentions (#7128) (44d19f59a593dfb541bf40dcadbed313ca4a8f97)
feat(cli): add buzz gifs command group and NIP-30 emoji tags on messages (#7259) (47d068e2109d077414cbf2f4f1c927f6d051037a)
feat(desktop): add persistent Bestie experience (#7223) (ac5a18697c8294e9237f505a2e01ec6fc374849a)
fix(desktop): harden profile batch and thread-reply fetches against relay slowness (#7188) (6f6093243eaea5160db79b7e054f06dfffd207aa)
fix(composer): align wrapped inline chip fragments (#7242) (b6dc533b7c2aadb70a8f011a88a5bd2f06d800f2)
fix(desktop): keep explicit agent profiles bound to their exact key (#7131) (83e596298449ab1cb57481221d0e41ce69e52814)
fix(desktop): discover authenticated owned relay agents (#7122) (434dafe958d82ca07d2b42b0f7d023ab923c2ff9)
feat(agents): harness-agnostic effort write path and spawn bridge (#4625) (0dbd036f5bff33e7ade75e7639f3218d424a6e73)
fix(desktop): retain automatic mentions only in threads (#7144) (1c8321cd08feb597f8bcff5195c21148fb3e98ed)
feat: add databricks fable 5.1 model capabilities (#7213) (560fea7b4fc5e96a4de45d988e039ffb3fd66662)
feat(desktop): add Pi agent preset (#7208) (42aeb1571cc1f1ed4d73f05b420474be970021ab)
feat(buzz-agent): add DatabricksAuthCoordinator single-flight OAuth (#5545) (5aed49b505a7e27f3b0e34dafa53d6c4e8cdcd64)
fix(desktop): preserve keyring identity during recovery (#7203) (e5a7e26a1008227ff6a0b9430a6df2470475bec1)
ci: relax file-size ceilings by surface (#6485) (4794a5cecf058ebbe2b367f40b1ce6ff80791e91)
fix(dev-mcp): extend shell timeout cap to 20 minutes and align outer budgets (#7185) (cae158ce7fd72dee1f34d264f6790711d82d46bf)
feat(buzz-auth): add production NIP-FI federated assertion runtime (#7109) (70895b355fcea9f99894b426c020052b715bd368)
Hide download action on voice notes (#7182) (ac4aa94b05417c2830e5489ddda0c87f6a9d1dbf)
Add voice notes to desktop messages (#6978) (114dbf745f1fe0bdbecb70e07a07f03c23687bdc)
feat(desktop): add thread-scoped ACP session experiment (#6909) (59328d5ae38a51a618dd2fddd7faf1343d42096f)
fix(desktop): scope composer autocomplete to focus (#6860) (571c1902d0ca55cfd4ccf6b91eeb731909cc10be)
feat(desktop): add isolated named demo builds (#6407) (4a9de1a3a121285ef475d630b2b5764044c02cde)
fix(model-capabilities): humanize databricks goose model names (#7135) (0affe527e880ddd300ae7d4dac3f0600c79b4f5e)
fix(desktop): back split thread headers (#7137) (b47b5a50127c080a74ed4de19a43534cd9a7b563)
add public descriptions to agent personas (#7126) (cb3144999bebc4939cb15b2200b373281d493b52)
feat(desktop): add protected-build Bestie experiment (#6902) (5673c3307e248530beeea060da437350d3939a4b)
fix(relay): reject a frame on its own acknowledgement channel (#6961) (2f3dd850db3afe27e56f18cbcd3548eabdd9b9c2)
feat: render agent avatars as squircles (#7106) (bc006f67087b049e2f9c4d8a2f26faceff628225)
Enforce NIP-OA authorization time bounds (#7004) (e47690c21b519128b40c917456b3e3f33f018fe4)
feat(desktop): use segmented controls for channel creation (#6845) (c3132c3ee982d194cd0198ad07b57ec8bd726e4e)
feat(buzz-agent): surface stop reason and silent-turn WARN in telemetry (#7038) (eed74bde2f4797714335ac10c56c0b0244c1def4)
fix(desktop): surface channel history load failures (#7013) (00e61eafa917d296104006576b7a2ddbfd58bb5a)
fix(composer): polish automatic mentions (#6956) (8dbc65d9e2c80d9d8516e17b751c46e0568100e6)
fix(desktop): resolve bundled sidecar on cheap path and bound login-shell spawns (#6904) (2c99ee7af5a20d239e95ec5368407887449795c9)
refactor(db): extract domain stores from database runtime (#6987) (a3730784fc851bb1125b40cca9b0a30788a293c1)
feat(desktop): add team sharing to community catalog (#3995) (2f66ee24a0bf5efa958378069a6b155e99a1d068)
fix(desktop): complete project empty and context states (#6980) (a89f5df4c52c3aa5875d9fccb0eaf2222aee4084)
fix(desktop): resolve exact typed mentions on space (#6862) (b49675894b39f87215e4dfc8c1ad4a3c28c6097e)
perf(desktop): restore project context during startup (#6939) (973386351646d01efca2735ad4921c0d219cff85)
fix(desktop): lift right auxiliary pane above shared header backdrop (#6966) (350caf1de3136f6ec473a69d394544e99dfd4d85)
feat(desktop): implement 30178 team catalog backend (#5112) (a7c7414a7fadfe1585b8a90af0f29d6593bb6126)
feat(model-capabilities): humanize Databricks UC model families (#6955) (ae0ecd9a676c692876116fee7265cba5f18cbd90)
feat(agent): discover Databricks Unity Catalog models (#6918) (be8d7756d5f17285f1e8a4b77d67f7d7cfb6f9e7)
preserve channel description paragraph breaks (#6946) (69096c9a8db726eebd83422cdc5e6c72ed9d4f90)
fix(projects): allow owners to delete agent projects (#6533) (9176e34405ae59fdefc50dc585454b7e9cb3833a)
Fade expanded video controls on hover (#6926) (27c1a7c91b658535c8a655dbe8f2421af9099b80)
fix(client): resurface hidden DMs from live activity (#6885) (4d77175c78f4df48e13398b25b271e3ac1b31dd3)
fix(desktop): keep the draft space when typing right after a mention pick (#6875) (c856be0fb954c9e5267d622841098c24e3381e8f)
broker: define the agent-to-broker action contract (#6742) (b622003f74aa5bf9b659786452813299a25e4897)
fix(desktop): keep project sheets independent from threads (#6901) (cada3028ceda7ebdae61329f15b5364ca0d23dd4)
fix(desktop): accent-colored mention badges that count thread mentions (#6900) (ceb8ba605f43728bdab64aa461211baeeb54364a)
fix(desktop): show edited head content in thread panel (#6887) (eb8e97cfe74afbe560d92f3a8f470967a992767f)
fix(desktop-tooltip): increase surface contrast (#6897) (03bfc837cbe463de9ef59a86742825a4863fb603)
Apply access policy when reusing channel agents (#6838) (01c87a350b0fda89c8d333a5dd6c0e9d89d0c03f)
feat(sidebar): prioritize unread DMs in overflow navigation (#6842) (4f554b6385065b698db819498a6f359b17a45459)
feat(projects): add agent and CLI project-home support (#6590) (de188ebf06f701ca0f47c51f859da21e19a35f04)
feat(desktop): restore message quick reactions (#6892) (22cdda441d19da1b15dd7db4d932d2f067cd87b3)
Use paired tags for standing & per-turn context (#6701) (f177f4909d55ad48a36e86a682cd5be4f006f0fe)
fix(cli): preserve signatures in event reads (#6884) (583af02299e20cbd8603044c7844bc128e4e06cd)
fix(desktop): stop pulsing addressed agents on send (#6873) (db514b153a8cb17631d6e80b91c95fdc45deb147)
fix(desktop): prioritize sidebar channel status (#6861) (4f529a45f219f55bc6038f304cd69e3f51ec0533)
feat(desktop): hyperlink selected composer text on link paste (#6684) (e8172b5baccd0f4a711f5e19a3bc4313708f1c78)

Other repository changes

fix(scripts): copy global-agent-config.json in buzz-adopt-prod-agents (#7303) (8e7b275cb07fc1abea55b34e8db90136d039bd08)
feat(relay): add early startup lifecycle logs (#7258) (88687876f7808a2fd742b7eb2e4b9f87d999ad8d)
docs(nip-fi): add Blossom kind-24242 media possession-proof exception (#7278) (752cbfc0375efc8bac3d5cc2a5716250bc0be234)
Add mobile voice notes (#7121) (6f5ec4a731901bf3ff2a370c7ccbfbc3fba93368)
docs(nip-fi): document Git smart-HTTP credential exemption (#7268) (c328202cb08cac5b8c1610d2d373e69889772b4e)
docs(nip-fi): adopt deny-until-TTL and extend enforcement to HTTP ingress (#7254) (187df22252fa24cce2f3295fb9df9f4dc211b30a)
Add operation-aware database pool acquisition metrics (#7195) (91ab9d31b8f7249ff1db141ae9d8bb3f2a20bcdd)
chore(db): drop Phase-A NIP-FI relay-side authority ledger (#7221) (04babf02655440b4dfd37f2e2df605ead0a030d8)
fix(acp): replace real user name in base prompt mention example (#7250) (2af9773d6271ce62cbe5dfbd28fbe5dd79372465)
ci: split CI into reusable workflows (#7168) (0e878664b08cdf7fb2d89d940bc2aa92cdc485f7)
docs(nip-fi): rewrite NIP-FI as stateless OSS Buzz spec v2 (#7214) (d4420eb47f9d48bd81358f928dfe6dee6804ac13)
feat(relay): add detailed readiness metrics (#7149) (beb76406c12ab8a7af9b2fcf7547c353e3369c34)
feat(mobile): prepare buzz-push-gateway for deployment (#7158) (42b42447b0dc47c3e1a4d95caab893567dcd1677)
fix(mobile): isolate extension linker flags; complete iOS build in CI (#7187) (b270437a62bc1049b27745799dc44268d0c23489)
chore(ci): lower Codex security review effort (#7179) (4365883151698cd30e31cf4091629543b61c2478)
fix(dev): keep the canonical profile when launching from desktop/ (#7143) (e17a0d44c379b2ae40b91b8ba43f9a9c5bede90f)
ci: run PostgreSQL tests in isolated lane (#6730) (bd73490418266f267d9bb3bdf13e64582adc8e80)
feat(db): add NIP-FI identity and final-admission schema foundation (#6994) (9ab163190b4d4994a742a66d5fa4cae23c35fa4e)
feat(buzz-acp): give each channel thread its own agent session (#6732) (674c173eb7b2805864fd8375297c849c3a758f69)
docs: add review-proven failure-path & async-state rules to AGENTS.md (#7061) (4952f5810290d00a1dd9413235b39e9a7154acf6)
fix(acp): wake agents from workflow messages (#6953) (93237b4a745b14cb8bfe292053bf34adef652d29)
fix(ci): salvage Codex review output on PTY-shutdown hang (#7042) (17ecf0b8c9c0f4bb9d098f25c2a2ece6a3500a4c)
fix: retrieving cold memories; add regression task (#6950) (f463e726dd173146c3c2bcbf7fdba03c9790dd3a)
feat(db): configurable writer session timeouts (lock, idle-txn, statement) (#6229) (3ed623bb217bf9697b0ce4562529254977e0ea04)
perf(mobile): reduce cold startup and channel rendering delays (#6996) (b593c7d7feb6bf4207dbf3439906c25a714b703f)
feat(mobile): push notifications MVP (#6269) (c432a111ca9ddd31a85e1312d5995f8b92191b82)
Refresh mobile utility surfaces and theme picker (#6944) (ed11c8d8bf0a17402be5cf243724f89471530d2f)
Fix mobile jump-to-latest flicker (#6807) (58cc4b7e9be71223f7898ea5f930a4248830ccfb)
refactor(relay): NIP-98 admin auth with Operator/Moderator roles and NIP-11 discovery (#3777) (86b9142a09f2af3ba2fff7effa6a6cd53b40f51c)
refactor(db): split channel membership store (#6782) (e76c81968b65b0755b83efdd59dc3375c59ddf40)
feat(auth): add NIP-FI canonical assertion verifier and contracts (#6776) (953a1798b23b04289b3a225f463e60a172c1aac3)
fix(ci): bump Codex CLI to 0.150.1 to unhang security review jobs (#6962) (80177e4c8e97e7bf1f1a3760c4e3503aace22860)
test(db): use canonical channel roster fixtures (#6819) (57216c942f171db305135bcb6a4ede2d87e0be8a)
fix(cli): enrich template cardinality error with per-candidate presence and profile hints (#4825) (0808ab485c39c3c12ef02af2188c65a5145eb99d)
Fix Codex security review authorization (#6913) (745ff6066c92372ea1ee6a5fe05862cdd9b81303)
fix(db): disable heartbeat vacuum truncation (#6898) (0ccf934b88f610f5f235862ecd51e2dcbae2cb74)
chore(deps): update rui314/setup-mold digest to 7e4f20a (#6663) (c363ce13c07cb454d6fa92b96d65cb52322c13e9)
chore(deps): update dependency vitest to v4.1.11 (#6667) (525007af4b2f644ce07fab92ef4863c46cbae8a3)
chore(deps): update dependency @tanstack/react-virtual to v3.14.10 (#6666) (30596d3addf69a6954d034ce28f886539604f2c8)
chore(deps): update ubuntu:24.04 docker digest to 33ceb71 (#6664) (82e748085e3f06b8e297387b33f7615a6db23501)
fix(db): exclude kind:30179 ciphertext from brownfield FTS (#6822) (b3baa56ba83d01a0b7292d81aae9370f5616c62b)
Add gated security reviews (#6816) (cdab765748ddfeba10830a9a5331b6157bd321df)
Add Buzz benchmark evaluation layers (#6823) (79df468255b50f6aa7bd9cb19a622a4a37b88dac)
Deduplicate ACP thread prompt context (#6706) (8f3566ad9ebbd225e53ce66a7072ceee074eb25a)
refactor(db): finish replaceable event store extraction (#6777) (ef0d2025683869418e8eee22ac5b5ac16c5198b7)
Fix Admin feedback filter overflow (#6825) (dcee330b5ca984de8657a6d8cf36e34e1d825d4a)

Compare desktop-v0.5.20...desktop-v0.5.22

Original source

A few things to prepare for deploying the Buzz push gateway as implemented in #6269:

• Cut buzz-push-gateway chart 0.2.0 from the current config
  (certificate auth, dogfood client)
• Datadog-compatible metrics
• Align the desired schema, metrics docs, and production ingress guidance with the current dogfood deployment contract

Links

• BUZZ-17: Publish the MVP-compatible gateway chart
• BUZZ-26: Add Datadog-compatible push-gateway metrics and correct source drift

Signed-off-by: Tom Brow [email protected]

Co-authored-by: Codex [email protected]

Original source

Desktop and shared changes

• feat(desktop): add KLIPY GIF search to composers (#5554) (8471049c430073474939336dfc6aa98272bc8762)
• fix(desktop): respect automatic mention preference after send (#6837) (e8cd7516e6df62c2a9025d7a821bf98e0e8f83b4)

Other repository changes

• fix(release): attribute desktop candidates to the operator (#6831) (820a8589971df49bb9285a236ce1e2955a301abd)
• fix(ci): check out source in docker.yml merge job (#6833) (cae7f826b39b38e7d49a90d342499234dec007bf)

Compare desktop-v0.5.19...desktop-v0.5.20

Original source

Desktop and shared changes

docs(nest): make commit attribution policy-neutral (#6707) (22f32c99e2e983b7e015e8c058cac47438d05b2f)

fix(desktop-messages): preserve inline agent mentions with persistent addressing (#6793) (b58de7cfa7a13b1a6dbb2fc269186439a6fb79a0)

feat(desktop): persist agent addressing across composer messages (#6714) (7ba1197aa6b01616b5920487dd585a37d2e7f74d)

feat: navigate images across message threads (#6705) (a526dca9bcaa08dfb5db77999cc1f584a17a9d64)

revert fixed mention highlight (#6716) (12f3fea26e4c638a5fae20dce1ec0876e3bbca41)

highlight search terms in results and messages (#6702) (29f2054c69f2e0ea4ee90141ac6a80503e5f9bd1)

fix(desktop): make lightbox zoom controls interactive (#6710) (9b6a637d014607760d116b90c57062f82ab27cf3)

Support community deletion in versioned media buckets (#6738) (d12dea4e67c5224a626d9c00f45e68d1def72d4c)

Fix TipTap editor mount race (#6779) (bb5b9357a7c8ddeaee73f6252c7d9f8a9014dbc9)

feat(buzz-agent): gate LLM tool calls on session/request_permission (#5712) (a1219070fa6c3263c8a29637c70b7a317d4ecd9d)

Fix mobile Huddle agent voice turn states (#6611) (8b812017a79c9279594330fb2b04c1eaf0e6e6c1)

fix(desktop): polish inline chip states (#6718) (a8e1c66c4a5017a32e41e04e2ba6059e2dfcae21)

feat(workflows): discover trigger filter values (#6712) (e760c51820b2103d965c22b44254678e10fb689a)

feat(desktop): simplify the message action rail (#6529) (c5166f2164035ca96787daee6528d5dc04c4a02e)

fix(desktop): restore icon-only remote marker (#6491) (30d2fc52f96138311f2006627ffc1a6d5ff1865b)

fix(composer): wrap Buzz chip labels without orphaning icons (#6581) (f79d346a178408661fcad85122364ac2ad7e9cb2)

fix(desktop): bound thread /query and surface load errors, not false-empty (#6447) (f6e6617a9dcc2308d5039f8afaab974b49fb9577)

fix(messages): route edits to the owning composer (#6575) (4bf80978f52981f0035e6c0b86bdf1108bbf64c8)

fix(desktop): align jump-to-latest pill with composer height (#6606) (9f55bf67456be10ff7c8238bf0d9e12e582848f6)

fix(desktop): emit singular mention feed category so alerts route correctly (#6665) (db5617dd1541aeab7bacaf039b6ca98f856776d0)

show mention counts in channel notifications (#6696) (0e69b3fd7c44c09da62e2c4e89fdb4a26e666869)

fix(desktop): hide selection formatting tray on composer right-click (#6683) (2f13e30e88e84851e7ad336364dd3cfd547b8c16)

fix(desktop): stabilize members dialog scrolling (#6670) (72ba987c365abb98939153c4d43dde73257c1264)

fix(desktop): keep member runtime status off the UI thread (#6445) (17af15effac63e6bc5338448326ce52ba4426e5f)

perf(desktop): persist channel heads, collapse thread reads and reply sends (#6572) (2d280376ad36134cec1f23bead6d866d30bed147)

Downgrade desktop Huddles to audio protocol v2 (#6610) (0720f5380ce8a6c050afac159f8462c06cd51ab5)

perf(desktop): make the Projects surface render-cheap (#6460) (040b203f73576e15ef749b0ff0ee6243f06a5c48)

refactor(acp): clarify agent prompt sections (#6501) (f99532585a0715bac73b4a6361a9b4966bdb5095)

Add mobile Huddles voice MVP (#6056) (8c0f42e187ca82d701251fc849217530178ebace)

feat(desktop-messages): keep agents addressed across messages (#6315) (a2d8be5efa126221c7676f7797555dfb2bf5b0e0)

fix(desktop): remove Buzz entity link previews (#6512) (723affe5d1340896209bf3aca94c7b791bdcf38b)

fix(composer): preserve caret when inserting mentions mid-message (#6531) (074561233eef71df9690ec22c2a9c5e798c297a7)

chore(deps): update rust crate futures-util to v0.3.33 (#5448) (d874d67c117e4582cc9549ebe85c942e5e49faf7)

fix(desktop): restore true zoom by scaling the root rem (#6514) (97b1fee5c3d9ad574196e974b520061fccc47d07)

chore(desktop): drop unused ORIGINAL_CONTENT from empty-edit-delete spec (#6517) (eb484387d5816b6f9155ad3a0be79ede3c3d7ad5)

feat(workflows): clarify workflow setup and activation (#6470) (0e48ff26915aa32d5f05208847b9aba75f4f19cd)

perf(desktop): stop the Projects fan refetching on re-entry and running after leave (#6458) (b85d680fb1e3cc7eef6d31d47598741b35836a2e)

perf(desktop): keep the member roster off the channel-switch path (#6456) (b0466ac465336cb773fbf7355ec05f7d61f4a3aa)

Clarify huddle message destination (#6496) (7da8f9abf3245d7ab31ba6e4ad72598b03471f2b)

feat(archive): add observer-frame retention schema and gated DB adapter (#5719) (fc2ce6728b3b4805040c0a2f2cc5c15f1c1806ce)

fix(desktop): restore human barge-in over agent TTS in huddles (#6431) (6039fed565fd73a07cdddc3143c86733cad91709)

Other repository changes

Remove public relay signing key fallback (#6729) (ee6ca5fa28bce04dfecb6717de65b08a57f2ac47)

Qualify canonical relay images for staged delivery (#6781) (f24971033178926153b49d320bd876d15d9cb2bf)

Add database pressure observability (#6700) (113a33b7e49b7173ee1767c49ef2f49c63803034)

Add staging dev relay image workflow (#6709) (931747c9c42df14d5c23c87fe57e30b995321ae3)

Extract community persistence (#6668) (9d1e4b257657f382d3111ce748f3da8d063b7671)

Add inline profile camera capture (#6680) (9aa332af03b4fb416dd8648b320447617ffd6fa5)

Hide Huddles in mobile agent DMs (#6676) (822c5ab231bc253d809d2d13da4b381f723dcd25)

Centralize replaceable event persistence (#6660) (8d2d0ff5ad42733e9949442c4b6358d0ba87f9a8)

fix(ci): prevent poisoned Rust caches (#6618) (69b1225923c9bd98784e86a6976bbc34a3dc8630)

docs(security): route reports through private advisories (#6728) (02dc49f0e60f75027e926e33a2d0021f7b4e0cd3)

fix(mobile): join starter channels after accepting invite (#5915) (6eff84d1271eb1b90e07c5a0673343a76a0753fc)

Add mobile profile editing (#6583) (a0298539f7043cd0f2d961030e60cc0fd82970b1)

fix(mobile): recover stale and shuffled messages (#6691) (01091c15a15d6057d80463dfd828e6e1e4b60743)

feat(mobile): browse and join open channels (#6243) (26f4c3ed304db2c273f0bd4d2746aa9598f38366)

Polish Huddle participant interactions (#6312) (e23632941331502c0330e51d407e667bea26ef57)

Downgrade mobile Huddles to audio protocol v2 (#6558) (4baccd5394d6166bb68ff03b24e376e322281a59)

chore(deps): update rust crate async-trait to v0.1.92 (#6094) (f7942167372501576c9f0f589cf2c166882668bb)

chore(deps): update dependency sonner to v2.0.8 (#6093) (2d93ea095535e42ee3a9933f00a4c0bd5e9e1c67)

chore(deps): update rust crate http-body-util to v0.1.4 (#5452) (9390e11c9babeef221aeb0a22cc61a52700d168f)

chore(deps): update rust crate http to v1.4.2 (#5451) (1a0a27d3586b14fb79ec8e162441e610f8548188)

chore(deps): update rust crate futures to v0.3.33 (#5445) (2cef92df676490654f13ebe1de56923b2636123f)

chore(deps): update dependency @tauri-apps/api to v2.11.1 (#5444) (f84511c169cf9a98ac03e9c1acb6bf4d68de5cb8)

chore(deps): update ubuntu:24.04 docker digest to 561618e (#5442) (9008a4d1724afbd8dba0fd99e99cd8305b5d2ecb)

chore(deps): update swatinem/rust-cache digest to 6323deb (#5441) (694d804b24cd0b97403b3caf159a55ffd1fc3b08)

fix(deletion): allow IRSA S3 credentials (#6495) (47526784d5c1967de6b2c5d1ee642bccfefbfab9)

docs(nips): comprehensive NIP-FI — core + claimable profiles (EDGE/LIFECYCLE/DELEG/CONF) (#5946) (d97780b4777f2fe3430b4e30a7d47fc6837ee059)

fix(benchmarks): wait for scripted event delivery (#6487) (025425591ed67518a63870316f1473ffd02dd520)

Polish mobile channel navigation and message sends (#6488) (aeb741fd31044ec560d953b0986dec2e7e93e2c6)

Compare desktop-v0.5.18...desktop-v0.5.19

Original source

Why

Phase 1 of progressive delivery needs an explicit eligibility boundary before deployment automation can safely consume relay artifacts. Today the canonical Docker workflow can publish independently of the same-SHA CI result, the relay does not expose its source/build identity, and the Helm chart only renders mutable tags. The existing ghcr.io/block/buzz-staging-dev workflow in #6709 remains a manual pre-merge preview lane. It is deliberately not a canonical promotion input.

What changed

Compile the full source SHA and GitHub Actions build identity into canonical relay binaries and expose it at /_status.

Gate creation of tagged multi-architecture manifests on the latest exact-SHA CI push run succeeding on main or release.

Preserve the signed SLSA provenance and add a signed, release-only deployment-eligibility predicate with source, build run, qualifying CI run, and exact compatible Buzz chart version.

Keep failed or pending builds untagged and without an eligibility predicate; preview-package artifacts are excluded by package and signer contract.

Add optional image.digest support to Buzz chart 0.1.8, retaining the existing tag fallback.

Document verification and the intentional boundary between image/chart compatibility and backwards-compatible database migrations.

Risk and rollout

Canonical tag publication now waits for same-SHA CI and fails closed when the newest matching run fails. Per-architecture blobs may remain untagged after a failed qualification; they are not promotion inputs. Debug manifests are also CI-gated but do not receive the release eligibility predicate.

There are no migration or schema-orchestration changes. The companion BuilderBot infrastructure PR will pin a separately verified canonical main digest and expose a read-only running-deployment inspection command. Signed eligibility is available only for artifacts published after this workflow lands.

Verification

• Blox: workflow contract fixtures, including stale-green rejection and predicate structure
• Blox: actionlint for ci.yml and docker.yml
• Blox: 46 Helm unit tests, chart lint, and production/quickstart render fixtures
• Blox: relay status unit test, workspace Rust formatting, and workspace all-target clippy
• Live evidence: exact-SHA CI selector chose successful run 32857345153 for source 9d1e4b257657f382d3111ce748f3da8d063b7671
• Existing canonical digest provenance verified with gh attestation verify

References

• #6709 — developer-preview precursor; intentionally separate from canonical eligibility
• docs/deployment-identity.md

Generated with Codex

Signed-off-by: Luke Tornquist [email protected]

Original source

Desktop and shared changes

fix(desktop): simplify duplicate agent provenance (#6401) (aea0ef8df9fc24d9aa8bf5c761ab2910026a601b)
fix(desktop): sender names in notifications + macOS click-through routing (#6427) (4e3c9e619c93dd26677b392ad1f8cf0d12c8f855)
polish(desktop): finish Projects navigation and context chrome (#6429) (9b32e055fed45864e1982f3d99c5402ba35cd8a6)
fix(desktop): clarify add agents channel action (#6374) (9891e64f6b8358d78aa85f2ba248310d58b51ec0)
feat(desktop-messages): show compact Buzz link metadata (#6252) (de8a2741c7598c27e0d27cd4562d76b947934e2f)
feat(workflows): reply in-thread from send_message action (#6178) (c6e3fe7dfa751096d8c4083aaf15d6f6af296572)
perf(desktop): split discover_acp_providers into cheap and forced paths (#6330) (c63ac746cd4622e043574c305ff54021b07b847b)
fix(desktop): restore recent channel sorting (#6402) (569308c23c9c2bf620dd3a9a5e4baecbcfa22e16)
fix(desktop): isolate main timeline stacking context from focus drawer (#6398) (b298a175c4b9da1638f84c1f287e42d16a690a61)
fix(desktop): make reconnect repair lossless (#6415) (06e8be9098f099ff9036cfbe637390d5ac982809)
perf(desktop): resolve references without directory scans (#6328) (54bbe7305b9ec82a6ac03f84ff5887f77858c0b6)
feat(llm): stamp thinking effort on call-completed log line (#6424) (b728a2af3197db52e2d847b095f27209f99dc977)
Fix cross-owner relay agent mentions in owner-only builds (#6338) (ee0c7076af83fe9e2aafdc1baf4113ad988f53bd)
feat(workflows): add workflow editor (#6248) (1934e83bf5a5d8cd00f0cf28b558547b8d0dffb0)
fix(desktop): preserve huddle speech boundaries (#6397) (7ebe3ea699a24b2f95573b88db8f8fe5f1187eb4)
test(desktop): use a wordlist-safe separator in passphrase word-count test (#6356) (886cef7f723a539c4026d12e6a0605062bf2208b)
fix(models): curate Databricks alias-aware labels for 5 missing endpoints (#6360) (2ce8df8533d8c8598ab3d7a2faa797f8b5ee2eea)
feat(desktop): refine context-aware Projects collaboration (#6396) (3c228b1082a93aca302c7b6a67ec274c51ed5eaf)
fix(desktop): distinguish duplicate agent devices (#6337) (2e7583bf5ad5926ca32367af9954bc79d108e42d)
feat(desktop): close Buzz window with Cmd+W (#6314) (e5d1dfef7bf24ad527c9c8c1785b613abad574f7)
feat(desktop): make Projects workspaces selectable (#6368) (2b7be9340dd0785bd04795d55e004a6dfedd4998)
feat(desktop): make the Projects overview follow the selected section (#6335) (f88cda9eb886500ec7d205e1d265ac6f654aa433)
refactor(desktop): coordinate TTS playback (#6341) (09718fbb60c1acd5a4c1aff1bd91248008977129)
fix(desktop): show complete repository trees (#5102) (9c2f05346fdf3f058e4c579f6eea03dbe65fcca4)
Add appearance preference previews (#6193) (9a1e861ab8507ee28e5f03010b7f36d1b74ec919)
fix(desktop): restore emoji recents (#6263) (f96f1883c5ad94825d43a856e5d25e307a0540cb)
perf(desktop): move five hot renderer paths from JS into Rust (#6024) (bbd20fae75ecc3bd7a83cc12a65379fac22a2b79)
fix(media): accept portrait video resolutions (#6058) (196d62f97c21d053ddf8715d75ef57e92bd0051f)
fix(desktop): hide archived channels from #/Tab autocomplete (#6156) (fe7c6808e7430d185498178e07e58e378d2e4c7d)
fix(desktop): morph the drawer panel icon instead of sliding it (#6306) (e5a6e2022fb59c3928b054bc8d51874465fbe3df)
feat(desktop): refine repository-aware project workspaces (#6003) (87f8ff82ae5d3fdd99831c62a869b39138e65a57)
perf(desktop): parallelize relay agent directory rebuild (#6258) (a362fecc2389955f942c9581bdfeba379ab115b3)
fix(desktop): exclude archived agents from nest, order regeneration (#5905) (121e4b3ce7acab6ac310257f444997f58a97cb2e)
Add font size and conversation density preferences (#5644) (7e2651791d598a3938ef4560a41801223fb9b2c9)
fix(desktop): emit camelCase config-write payload fields (#6062) (6e8d078ffe1ab27b8dde6bb697551b7d2d1a85b5)
fix(desktop): downscale large avatars for agent-share PNG body (#6260) (e2ade93f02f6d1b4db23e0c442a2c65608e54d36)
fix(desktop): preserve early relay auth challenges (#3320) (6ea7a2b2211438359b227a9991cf8ccad2927fe2)
feat(managed-agents): close five Claude Code agent-config gaps (#4557) (50a71137e6f1c56f66e2f7348a917b2d2a1798f0)
fix(shared-ui): delay hover disclosures by default (#5821) (d7e8fdb10ca5e055b7af6d22f67d9a8f42cec8ed)
fix(desktop-chrome): preserve balanced layout when sidebar collapses (#6000) (c442a90a176845e3989436f2bb24eb6d0ca79d47)

Other repository changes

test(benchmarks): expand Buzz-native dataset (#6448) (b56a52ca11296b86ee41c41278a1169f92f245b6)
docs: clarify two-layer moderation ownership (#6481) (8740a1fa94dd14a3eb5cd2a570b0be2c4a68cbfe)
Fix mobile thread tail and iOS channel header (#6399) (ffb12d3b05fe1ebd62006dbcd2f079be4e210b70)
chore(deps): pin earshot below 1.2.0 pending a VAD threshold re-pick (#6392) (2edacde4d4c01490834725774aa878dbc373c41d)
Repair stale large channel roster snapshots (#6251) (24ec6a468ec9d0d425ee58fbfc4d416412c446ad)
fix(hooks): scope pre-push lanes to branch merge-base diff (#6423) (cd0d33f08507d07c8e8b8511bba92290c046ef03)
Enforce a three-day dependency cooldown (#6426) (3ee465e12b815a191d902856440e2f3348bda506)
feat(cli): accept Buzz message links for thread reads (#6359) (84c095f8bea14b55373e2d867100abe37aa6061e)
fix(acp): guard against unrequested public relay skills (#6394) (d274a6e94928d64e27648f75320ab8af961396da)
refactor(prompt): simplify Buzz agent guidance (#6340) (2a236e413723f207c2f6c1e8921fab4f071d0445)
Add Buzz-native collaboration benchmarks (#6264) (a9640c7cc4d55b0a0ac987aab4af02a204009d19)
Polish mobile timeline and emoji interactions (#6297) (da818eddc2f470c006a1073c8c5452f8a989f272)
chore: serialize mobile pre-push checks (#6322) (81567b76a5d164b052c4e8526f453cf7a6ef43dc)
fix(buzz-acp): loosen workspace-scan guardrail to allow named paths (#6261) (934f3325c3fdaa3a6f23134b74518139aac8ca3f)
fix(buzz-dev-mcp): expand leading ~ in read_file/str_replace paths (#6271) (7f69b13b4586acedf6d898edf1be2a6babea3626)
Unify mobile channel details (#6113) (a567dfc2df870878dcf079550502a09a89cc8091)
Revert "fix(acp): gate relay-signed workflow messages on their attributed author" (#6311) (08eb46ef3c0894baa7e48d9229f45349751a4a57)
Fix mobile Activity thread navigation (#5850) (93114c9c65138397de39729fde0a816eb9f314ab)
Refine the mobile emoji picker (#5853) (359fe646758d253ee94bf054a87904efd1dce7d1)
Polish mobile message actions (#5873) (78267b0c3a75840d035ff0cc9ad1984def773886)
Refine mobile pairing confirmation (#6018) (40f1dac6913d04c87d72610a69ed53bd12377b84)
chore(scripts): add buzz-adopt-prod-agents.sh (#6250) (4f9727a4b3d76389f862faa15241e16e2dd36108)
chore(hooks): keep mobile analysis out of pre-commit (#6236) (b74700daafa823e56c60b4e6470740ab28330888)
Polish mobile timeline navigation (#5874) (417eea2230c1864e8c77f6440dbcfa109bfb63f6)
fix(prompt): simplify pickup follow-through (#6186) (d2cfd377e27dab8fdef0236dd8e92c89efbae829)
fix(mcp): scope todo usage (#6216) (5694e78def8b6ea674e101c1c988a5f17c9baf9d)

Compare desktop-v0.5.17...desktop-v0.5.18

Original source

Desktop and shared changes

fix(desktop): bound remote agent mention authorization (#6224) (3fdf289b78c40f80abce86575c25b5ed6361d82c)

fix(desktop): bind presence retry timers (#6213) (081910424a5b6f01b283ad632b0718240c6b3cbf)

ci: make file-size policy a first-class gate (#6187) (6d45f98665004d314468d98e50084996f4046cdf)

fix(desktop): eliminate mounted-view CPU burn — compositor-safe shimmer, observer append fast path, poll-tick disk reads (#6198) (f0234f1449ab8a6d52d45a9e1ec19cc675b40fe9)

Other repository changes

fix: bump h2 for RUSTSEC-2026-0258 (#6222) (cc8a8b0dcbf5c01311b2ac7e1827ff3e582299f3)

Compare desktop-v0.5.16...desktop-v0.5.17

Original source

Desktop and shared changes

perf(desktop): persist channel snapshot hash (#5684) (c86443c5997c96c42829ce200e73e6e6efe52d96)

fix(agent): raise output limit and allow 3 recoveries (#5475) (72d56e7bd3a94fa3ee20b5a50bd1b868a9329d9c)

fix(desktop): defer foreground resume work (#5696) (59f613c404958d8ac99525b4aaaf26843257de31)

perf(desktop): coalesce thread-activity localStorage writes (#5693) (c6c6e7eca70d6b526c43af925e596e8616b19fb8)

Batch observer-store publications per relay envelope (#5680) (c3b0ccf383fe4ee936abbe6b9c9134b5728cc2b5)

feat(buzz-acp): idle re-sleep for woken lazy pools (#5682) (dc2dbfe0f570abb818d3f3da8a71ea235555ed27)

fix(desktop): preserve agent mention separator after send (#5623) (a8e5c89e23b85ee93306f2c3c11d8fe6300cd360)

fix(link-previews): proxy sent preview media (#5627) (884ed8a5d35dfba3892fc40437f39e08856dec7d)

feat(deletion): add durable whole-community deletion (#4425) (8a2c9af2dbe0cf315e77f43a4560d3572da5e554)

fix(desktop): preserve live channel timelines (#5662) (63d14a0e95c8d5ae19f3f80123027729ec209bb2)

Refine channel settings and profile panels (#5574) (63f961c7e4818a1d29f1185002c123e486bd4a19)

fix(deps): bump webbrowser to 1.2.4 for RUSTSEC-2026-0257 (#5659) (c966b862fe8b9018c68c384b1680ca0173d0128c)

fix(desktop): launch Databricks OAuth from passive model discovery (#5607) (1ff98fa685fdb7133dbc18437d23dcdeeb42ce6e)

Other repository changes

feat(acp): report standard adapter usage (#4950) (4749bc7be3cdb78c2db4ce4864775ba7ab60b4cc)

fix(mobile): settle hydrated threads on latest reply (#4702) (7634fe74563ea7f3c86fb6017a0ad647a9934477)

feat(acp): deliver channel description in prompt [Context] (#4552) (6e0631f6b5d2139e4e080bf94e27ecee8a3d4d74)

Compare desktop-v0.5.10...desktop-v0.5.11

Original source