Upstream sync audit: block/buzz

[github-actions]

This issue is maintained by the weekly read-only audit.

Buzz upstream sync audit

• Local branch: main
• Local HEAD: de52ae8f0d57a3556c8362367dab443f20b90630
• Upstream: upstream/main at a5dbdf5e61e4c512acd99c219c79c154ddb57295
• Merge base: 485d03a358b6d695aaf97879f3fbaf2f308d0755
• Local-only commits: 80
• Upstream-only commits: 111

Status

⚠️ Upstream review is required before the next scheduled sync window.

Feebee protected-zone review

These paths are never accepted automatically:

• miniapp
• desktop/src/features/feebee
• desktop/public/feebee-characters
• desktop/src/shared/styles/globals/feebee.css
• desktop/src/shared/i18n

No upstream changes touch an exact protected path.

Desktop UI changes outside these exact paths still require visual review:
keep Feebee's visual shell and assets while adopting upstream behavior.

Pending upstream commits (latest 30)

• a5dbdf5e6 fix(mobile): recover and pace live subscriptions (fix(mobile): recover and pace live subscriptions block/buzz#3053)
• 7ff5fc318 feat(acp): deliver system prompt via _meta.systemPrompt for claude-agent-acp (feat(acp): deliver system prompt via _meta.systemPrompt for claude-agent-acp block/buzz#4395)
• 318fbf896 fix(security): bump nostr crates for RUSTSEC-2026-0225..0232 + default sprig image to published digest (fix(security): bump nostr crates for RUSTSEC-2026-0225..0232 + default sprig image to published digest block/buzz#4392)
• f86cfc736 fix(desktop): back/forward via keyboard chords, mouse X1/X2 buttons, and swipe gestures (fix(desktop): back/forward via keyboard chords, mouse X1/X2 buttons, and swipe gestures block/buzz#3778)
• 6530b58a6 feat(k8s): Kubernetes backend plugin + desktop deploy path (feat(k8s): Kubernetes backend plugin + desktop deploy path block/buzz#4289)
• fc598f5f8 fix(git): allow deleting the default branch (fix(git): allow deleting the default branch block/buzz#4297)
• b7bb15122 feat(projects): add buzz projects CLI commands (NIP-MP kind:30621) (feat(projects): add buzz projects CLI commands (NIP-MP kind:30621) block/buzz#4020)
• 28ae6cd21 docs: formal spec for remote agents and their management (docs: formal spec for remote agents and their management block/buzz#3748)
• 89bf03c05 fix(nip-oa): accept raw Nostr tag form in parse_json_array (fix(nip-oa): accept raw Nostr tag form in parse_json_array block/buzz#4203)
• ac4fa13b8 perf(relay): serve relay-membership checks from the read replica (perf(relay): serve relay-membership checks from the read replica block/buzz#4124)
• 9d6726e5b chore(deps): bump nostr-relay-pool for RUSTSEC-2026-0224 (chore(deps): bump nostr-relay-pool for RUSTSEC-2026-0224 block/buzz#4139)
• 756dd7f65 docs(nostr): document #h requirement for live reaction subscriptions (docs(nostr): document #h requirement for live reaction subscriptions block/buzz#3487)
• 36cf932ff docs(chart): fix ArgoCD example for native OCI sources (full artifact repoURL + path) (docs(chart): fix ArgoCD example for native OCI sources (full artifact repoURL + path) block/buzz#3426)
• 8d5afb606 docs(readme): clarify which release asset to download per platform (docs(readme): clarify which release asset to download per platform block/buzz#3481)
• 5765fc74b fix(relay): allow open relays to set their NIP-11 workspace icon (kind:9033) (fix(relay): allow open relays to set their NIP-11 workspace icon (kind:9033) block/buzz#3998)
• 3d7712cc3 docs: note that addressable channel events scope by d, not h (docs: note that addressable channel events scope by d, not h block/buzz#4103)
• 909a3b2c3 docs: fix stale kind count, quick-start numbering, and empty Further Reading (docs: fix stale kind count, quick-start numbering, and empty Further Reading block/buzz#2613)
• 8e81afa43 fix(desktop): keep thread-open affordance in archived channels (fix(desktop): keep thread-open affordance in archived channels block/buzz#4012)
• 19d57b0d4 docs: add one-click Railway deploy for a hosted relay (docs: add one-click Railway deploy for a hosted relay block/buzz#2733)
• 3ade48d50 fix(desktop): point Oh My Pi preset at omp.sh (fix(desktop): point Oh My Pi preset at omp.sh block/buzz#3516)
• fa1a5b1a7 fix(mesh): stop restarting a busy or loading shared-compute node (fix(mesh): stop restarting a busy or loading shared-compute node block/buzz#3909)
• 45314fc50 fix(desktop): preserve first huddle speech (fix(desktop): preserve first huddle speech block/buzz#3962)
• eb049ddf8 feat(desktop): Agent Trading Cards — mintable agent-snapshot card PNGs with optional NIP-44 lock (feat(desktop): Agent Trading Cards — mintable agent-snapshot card PNGs with optional NIP-44 lock block/buzz#3278)
• b1b283cd4 fix(buzz-acp): thread cache-read tokens into NIP-AM kind:44200 events (fix(buzz-acp): thread cache-read tokens into NIP-AM kind:44200 events block/buzz#3999)
• cb9701cd3 feat(relay): accept kind:30621 multi-repo projects at ingest (feat(relay): accept kind:30621 multi-repo projects at ingest block/buzz#3171)
• e5e5bac2a fix(release): preserve main in desktop PR body (fix(release): preserve main in desktop PR body block/buzz#3979)
• 3a96acea0 chore(release): release Buzz Desktop version 0.5.3 (chore(release): release Buzz Desktop version 0.5.3 block/buzz#3972)
• 54c8ef30a fix(release): require exact-head approval for desktop tags (fix(release): require exact-head approval for desktop tags block/buzz#3973)
• db7e84d4f fix(release): make desktop tagging squash-safe (fix(release): make desktop tagging squash-safe block/buzz#3965)
• bb34bc4d9 Revert "chore(release): release Buzz Desktop version 0.5.3" (Revert "chore(release): release Buzz Desktop version 0.5.3" block/buzz#3960)

Next sync window

• Review on Monday.
• Merge during the Wednesday sync window.
• Use the conflict policy in UPSTREAM_SYNC.md.