[morgmart]

Summary

This lets agents work in a channel's Git repository with no Git knowledge needed from the people involved. Ask an agent to build something, and it can find the repository bound to the channel or create one, then clone and push to it.

• New repo tool for agents. It looks up the repository bound to a channel, or creates one when asked. The new repository is protected against force pushes and branch deletion. The tool returns a clone command that includes a short-lived Git header.
• Only the channel's leads are trusted. Any member can bind a repository to a channel, so lookup counts only repositories announced by the channel's owners or admins, or by agents attested to them through NIP-OA. Creating a repository is refused unless the agent or its owner leads the channel. The tool also refuses a name the agent already uses, because announcing it again would move that repository.
• The app signs the Git header natively. A new native command signs a NIP-98 header scoped to one repository URL in the agent's own community. The agent's key never leaves the app, and the header is valid for about a minute.
• Agents may publish repository announcements. The agent controller now allows kind 30617.

Screenshots

This change adds no interface. It is an agent tool plus native signing, so there is nothing visual to capture.

Testing

• Rust agent-controller tests pass (61), including a new test that the Git header is signed for one repository in the agent's own community.
• src/buzz-mcp Vitest passes (120). It covers trusted lookup that ignores impostor and other-channel repositories, choosing among several repositories, protected create, refusal of a duplicate name or a second repository, lead-only create, and refusal without a key.
• tsc is clean, and design-system and clippy pre-push lanes pass.
• In the full local pre-push run, 7 unrelated UI and relay tests timed out because the machine was under load. All 6 of those files pass when run alone (390 tests).

Not yet verified live: that the relay's repos:write scope accepts an announcement signed by an agent, and a push from two agents. Codex pins its tool list per thread, so a Codex agent needs a fresh thread to see repo.

🤖 Generated with Claude Code

[wesbillman]

🤖 Star Lord’s automated source review via Wes’s account.

Reviewed head a941228cc56f31de05d1ce578e221ae359ce3822, base/merge-base 7d50425b7fda7c0bfdccb897df0507a286d6bbac.

8/10: three P2 correctness findings inline. Native signing, repository URL scoping, NIP-OA ownership checks and the intentional owner/admin trust policy are consistent with the inspected contracts. The findings concern branch protection coverage, incomplete discovery and create’s no-move guarantee.

Optional wording improvements: describe create explicitly as the new repository’s name; distinguish “no trusted repository” from “no repository”; and tell callers to retry without create if publication succeeded but obtaining the Git header failed. These do not require changing the deliberate trust policy.

Coverage: Rocket systems/performance/lifecycle and Git transport; Mantis correctness/security/concurrency; Groot product and tool error/retry flows; integrated by Star Lord. Reviewed all 18 changed files, supported callers, public description and feature commit messages. No attached images or actionable public-disclosure finding. No rendered UI changed; focus/accessibility behavior was not exercised. Supplemental relay contracts were inspected at block/buzz revisions d051350f693bfb158bbb560299d5764991b2e98b and 6e6173acd58029bac800583c4cc7482dafed693a; these are source references, not deployment evidence.

Source-only: no PR code, tests, builds, app launches or live Git operations executed. Current CI was not checked. Live announcement acceptance, two-agent clone/push, replica/concurrent-create recovery, performance and human acceptance remain unverified. This is a non-blocking COMMENT review, not approval or merge authorization.

[wesbillman]

🤖 Star Lord’s automated source review via Wes’s account.

Reviewed head 64a1aa3e058561cab52e29f1afe03d9f8aa11d19, base f63082f7124f5d1f900180dd887c2498159d3d9a, merge-base abdc0e4913952690644e6b645e7ae1152c8ad3be.

9/10: no new actionable findings in this follow-up. The three P2s from the previous review are addressed in source: recursive branch protection, bounded discovery that preserves incomplete results, and serialized same-agent creation with writer-backed checks and binding confirmation. The rebased native/tool integration preserves the inspected contracts.

The serialization guarantee covers the supported Desktop host: Claude, Goose and Codex route tools through the shared app implementation. It does not establish coordination between separate devices using the same identity. Relay pagination, writer routing and recursive ref matching were checked against source references d051350f693bfb158bbb560299d5764991b2e98b and 6e6173acd58029bac800583c4cc7482dafed693a, not a deployed relay.

Optional wording refinements in src/buzz-mcp/tools.ts: after an accepted announcement whose confirmation read fails, suggest retrying lookup without create; distinguish an absent confirmation from a confirmed different binding (lines 1805–1811). When the five-page budget is exhausted, explain that limit so an unchanged retry is not presented as the only remedy (lines 1063–1066, 1771–1774). These are optional improvements, not required changes.

Coverage: Rocket systems/performance/lifecycle and native/Git boundaries; Mantis correctness/security/concurrency; Groot product and error/retry flows; integrated by Star Lord. Reviewed the public description and feature commit messages: no attachments or actionable disclosure finding. No rendered UI changed.

Source-only: no PR code, tests, builds, apps or live Git operations executed. One hosted-check snapshot showed JavaScript, Rust and browser jobs still running, with Windows skipped; it was not a final CI result. Live create/clone/push, deployed-relay behavior, performance and human acceptance remain unverified. This is a non-blocking COMMENT review, not approval or merge authorization.

[kalvinnchau]

🤖 Approved: no actionable findings in the reviewed changes. The repository creation serialization, pagination and recursive branch protection repairs address the prior findings within a single app instance. Cross-host creation exclusion and native/live-relay Git integration remain unverified. The failing WebKit CI job still needs resolution before merge.