feat(desktop): repository-first projects with git workflows by thomaspblock · Pull Request #1471 · block/buzz

thomaspblock · 2026-07-02T18:40:30Z

Summary

Explorations making the desktop Projects section repository-first, with GitHub-style git workflows built on the relay's git hosting.

Repository browser — file tree navigation with file previews, per-file change times, branch picker, and local/remote repo state (ProjectRepositoryPanel, ProjectRepositorySource)
Pull requests — PR list and detail views with real diffs (files-changed panel with patch rendering), status headers, and rich-composer comments
Issues — issue lists and detail pages wired to git issue events
Commits & activity — feed-style activity timeline scoped to the active branch, with git contributors only
Overview panels — GitHub-style overview for both the projects landing page and individual project detail (stats, people rail, README/languages)
Open in Terminal — opens the OS terminal at a project's local checkout, cloning first (authenticated via git-credential-nostr with env-only key handling) when only a remote exists
Projects toolbar polish — grid/list view modes, filters (Overview/Mine/Local/Repositories/PRs/Issues/Agents/Users), sorting, persisted view preferences

Backend (Tauri)

New command modules under desktop/src-tauri/src/commands/:

project_git.rs — repo snapshots, sync status, push
project_git_diff.rs — PR diff computation (remote shallow clone + local checkout paths)
project_git_exec.rs — shared git subprocess plumbing with ephemeral env-only auth (nsec never touches disk or git config)
project_repo_paths.rs — local checkout resolution under the configured repos roots
project_terminal.rs — OS terminal launcher (macOS/Linux/Windows)

Test plan

Desktop unit tests (1494 passing)
Tauri Rust unit tests (867 passing)
Biome lint, tsc, file-size and px-text guards
Manual pass over projects list, detail tabs, PR diffs, issue pages
Terminal open/clone flows on macOS (local checkout + remote-only project)

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

…acing Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com> # Conflicts: # desktop/src/app/AppTopChrome.tsx # desktop/src/features/projects/ui/ProjectDetailScreen.tsx # desktop/src/features/projects/ui/ProjectsView.tsx

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Make the project detail header overlay scrolling content so its backdrop blur matches channel chrome behavior.

Keep the measured channel-style project chrome from the remote branch while preserving the local file-size guard correction.

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Offset project content inside the scroll area so blurred chrome matches channel behavior without pulling content up on load.

Keep the measured overlaid project chrome while incorporating the latest remote branch history.

Shift project cards away from branch-like metadata and move branch selection into project detail.

Add repository filtering and clone-path context while tightening project detail branch and README presentation.

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

…zz-explorations

Hydrate PR branches from their fetchable refs and make selected pull requests use focused conversation, commits, checks, and files tabs.

Render pull request file changes from Git diff data so local and remote project sources show the correct patch context.

Group project card metadata with the title and show pull request changed files with the same hierarchical icon treatment as the repository file browser.

Issues get a detail view with comments and deep links like PRs. Repository cards show latest commit and distinct commit counts. PR detail leads with its title above the tab row, and overview stat pills navigate to their sections with an accurate local count.

Add a Terminal action to project cards and the repository source card. Opens the OS terminal at the local checkout, or clones the selected branch into the repos dir first (authenticated via the identity key) when only a remote exists. Local checkout resolution moves to a shared project_repo_paths module to keep project_git under the size limit.

Move the Terminal action onto the project tabs row with a label, slim project cards and list rows (clone path becomes a footer icon, avatars left / activity right, middle list column removed), add a People rail box to the projects overview, drop the detail rail's descriptive text, rename Activity to Commits and All to Overview, and clean up the sort/view toggle chrome.

Extract shared git subprocess/auth logic into project_git_exec.rs so project_git, project_git_diff, and project_terminal share one implementation instead of three copies. Move the duplicated frontend open-terminal toast/invalidation flow into a useOpenProjectTerminal hook used by both the projects list and detail screens.

The card redesign moved the agent identity into the footer people stack and the delete action into the overflow menu, the detail view now lands on Overview instead of Files, and seeded issues need the comments field the issue model gained. Update the spec's seams accordingly and cover the new terminal menu action.

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

thomaspblock · 2026-07-02T19:16:34Z

Screenshots — Projects section walkthrough

Captured on a staging instance of this branch @ 7b60f83d (BUZZ_SHARE_IDENTITY=1 just staging), using the Bee Garden Game repo as example content. Local checkout detection is active (~/.buzz/REPOS/bee-garden-game, main @ 480508e).

Projects — main tabs

Overview — workspace summary (22 repos, 4 PRs, 2 local checkouts, 1 issue), People strip, repo grid

Mine — repos the current identity is a member of

Local — detected local checkouts

Repositories — full repo grid

PRs — cross-project PR list with status + action buttons (Review PR / View merge / View draft)

Issues — cross-project issue list

Agents — agent-involved repos

Users — user-owned repos

Repo detail — Bee Garden Game

Overview — README render, Local/Remote switch on Local with checkout path, languages, repository facts

Commits

PRs

Issues (empty state)

Files — per-file last commit + author

Contributors

PR detail — "Create bee garden game" #4396c5a7

Conversation — status header, summary body, Updates, Discussion

Commits

Checks (empty state — not wired yet)

Files changed — file tree with filter + diff pane (+7/−156)

thomaspblock · 2026-07-02T19:27:07Z

This is NOT the design this is simply getting the elements in. The actual visual design happens in the end.

# Conflicts: # desktop/src/features/workspaces/ui/WorkspaceSwitcher.tsx

wesbillman · 2026-07-02T19:45:36Z

        "**/identity-archive-hide.spec.ts",
        "**/relay-connectivity.spec.ts",
+        "**/history-icons-screenshots.spec.ts",
+        "**/projects-avatar-screenshot.spec.ts",


Do we want to include these screenshot tests here?

🤖 Removed in 204cd04 — both screenshot specs deleted and dropped from the smoke suite.

wpfleger96

Team review (4 parallel passes: Rust/security, data/protocol, UI panels, views/nav) at tip a87de0f. 22 inline comments: 2 blocking, 9 should-fix, 11 nits.

Also verified clean, for the record: the nsec-never-touches-disk claim holds (env-only via GIT_CONFIG_*/NOSTR_PRIVATE_KEY, no disk writes, credential helper disabled by default); no shell injection (proper argv throughout, terminal launchers included); path traversal handled (canonicalize + starts_with guards); no XSS in the markdown/diff rendering paths; temp-dir lifecycle and spawn_blocking usage correct; new kinds (1617-1633, 30617/30618) match the NIP-34 registry with no collisions.

Blockers: - Resolve projects by {owner, dtag} identity (NIP-34 address) instead of dtag alone — routing, fetch filters, and query cache keys now use the canonical owner:dtag id - Only accept PR update events (1619) from the PR author or repo owner Trust: - Restrict issue/PR status events (1630-1633) to root author/repo owner - Validate kind-5 deletion requests against the project owner pubkey - Tighten contributor-profile matching to exact identifiers and label git-author-based matches as unverified in the UI Robustness: - Filter malformed/empty tag values in shared tag helpers - Unify branch sanitization (clean_branch) across git commands; reject leading dashes, traversal, and refs/heads prefixes - Add a 60s wall-clock timeout to spawned git subprocesses - Only set-url origin when the remote URL actually differs - Cap per-file diff patches at 2k lines with a truncation notice - Neutralize repo-local git hooks (core.hooksPath) so credentials never leak into hook scripts; validate clone URLs against the Buzz git path Also removes the unused projectEvents module, dead filter branches, the dead-end Create Project CTA, and strips local paths from surfaced git errors. Adds unit tests for the new trust rules and branch/URL validation.

Issue/PR comments are kind:1 text notes (the relay doesn't register NIP-22 kind 1111), so they were bleeding into Pulse social feeds as orphaned replies whose parent — a 1618/1621 git event — could never be resolved. Filter them out of the global, timeline, my-notes, and liked-notes queries by their NIP-34 repo-address `a` tag; single-note deep links still resolve. Also documents the remaining protocol deviations flagged in review: the read-only non-NIP-34 extension tags in eventToProject (whose write path was already removed) and the 1633 Draft → Triage status mapping.

thomaspblock added 30 commits June 23, 2026 16:11

Tighten history button spacing

7726d1b

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Add project git activity data plumbing

d8baf23

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Refine project workspace UI

2bf75ca

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Refine project UI surfaces

9ad0acf

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Improve project repository browser

2a2be6b

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Show repository file change times

73d5029

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Add project repository git workflow UI

aa184fe

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Merge origin/main into gitbuzz-explorations

7ac1274

Match projects header chrome blur

e04ff69

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Fix project detail header blur

84594c4

Make the project detail header overlay scrolling content so its backdrop blur matches channel chrome behavior.

Merge remote project header chrome fix

01e97c9

Keep the measured channel-style project chrome from the remote branch while preserving the local file-size guard correction.

Offset projects content below glass header

03b753f

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Flow projects content below chrome header

14d5849

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Fix project chrome content offset

257a727

Offset project content inside the scroll area so blurred chrome matches channel behavior without pulling content up on load.

Merge remote project chrome offset attempts

c0f809b

Keep the measured overlaid project chrome while incorporating the latest remote branch history.

Make projects repository-first

7fe46d4

Shift project cards away from branch-like metadata and move branch selection into project detail.

Polish project repository details

32bdcbb

Add repository filtering and clone-path context while tightening project detail branch and README presentation.

Add project pull request surfaces

842a3d0

Make project activity feel like a feed.

0afad70

Show only git contributors in project contributors

9acf798

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Merge origin/main into gitbuzz-explorations

a541360

Polish project detail header

f12da7d

Merge origin/gitbuzz-explorations into gitbuzz-explorations

e1ee052

Polish project activity timeline

6ee2ee9

Polish project navigation chrome

369dfa5

Scope project contributors to active branch

5eaa7d5

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Condense project detail helper sections

32a5c60

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Merge origin/main into gitbuzz-explorations

59aaff6

Merge remote-tracking branch 'origin/gitbuzz-explorations' into gitbu…

3b4c294

…zz-explorations

thomaspblock added 14 commits June 30, 2026 20:57

Merge origin/main into gitbuzz-explorations

470f29e

Fix local project repo discovery fallback

3f61153

Improve project pull request views

98354e4

Hydrate PR branches from their fetchable refs and make selected pull requests use focused conversation, commits, checks, and files tabs.

Show real project pull request diffs

22fe14d

Render pull request file changes from Git diff data so local and remote project sources show the correct patch context.

Polish project file navigation

91bc43b

Group project card metadata with the title and show pull request changed files with the same hierarchical icon treatment as the repository file browser.

Add GitHub-style overview panels for projects

3f010f5

Improve project pull request overview

d388430

Polish projects overview and card details

83da77c

Merge remote-tracking branch 'origin/main' into gitbuzz-explorations

aa36cd1

thomaspblock added a commit that referenced this pull request Jul 2, 2026

screenshots: PR #1471

d4fe57d

Co-authored-by: Thomas Petersen <thomasp@squareup.com> Signed-off-by: Thomas Petersen <thomasp@squareup.com>

Retrigger CI

3adfccd

thomaspblock closed this Jul 2, 2026

thomaspblock reopened this Jul 2, 2026

Merge remote-tracking branch 'origin/main' into gitbuzz-explorations

a87de0f

# Conflicts: # desktop/src/features/workspaces/ui/WorkspaceSwitcher.tsx

thomaspblock marked this pull request as ready for review July 2, 2026 19:41

wesbillman reviewed Jul 2, 2026

View reviewed changes

Remove one-off screenshot specs from smoke suite

204cd04

wpfleger96 reviewed Jul 2, 2026

View reviewed changes

thomaspblock added 2 commits July 2, 2026 22:46

thomaspblock merged commit 8e3c0ee into main Jul 3, 2026
28 checks passed

thomaspblock deleted the gitbuzz-explorations branch July 3, 2026 12:11

wesbillman mentioned this pull request Jul 3, 2026

chore(release): release Buzz Desktop version 0.3.42 #1479

Merged

Uh oh!

Conversation

thomaspblock commented Jul 2, 2026

Summary

Backend (Tauri)

Test plan

Uh oh!

thomaspblock commented Jul 2, 2026

Screenshots — Projects section walkthrough

Projects — main tabs

Repo detail — Bee Garden Game

PR detail — "Create bee garden game" #4396c5a7

Uh oh!

thomaspblock commented Jul 2, 2026

Uh oh!

wesbillman Jul 2, 2026

Choose a reason for hiding this comment

Uh oh!

thomaspblock Jul 2, 2026

Choose a reason for hiding this comment

Uh oh!

thomaspblock Jul 2, 2026

Choose a reason for hiding this comment

Uh oh!

thomaspblock Jul 2, 2026

Choose a reason for hiding this comment

Uh oh!

wpfleger96 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants