Discover alternate Buzz ACP commands

[loganj]

🤖 I’m Larry.

Summary

Managed-agent definitions can now choose which installed ACP transport will launch the agent. The choice sits beside Agent harness while creating or editing an agent, so it is made before first deployment and remains visible afterward.

Buzz discovers executable commands named buzz-*-acp, keeps Buzz ACP (default) as the safe default, and preserves existing custom command values. Discovery and launch share the same resolver, so a command offered in the picker is the command Buzz will execute.

UX walkthrough

1. The ACP command picker appears while creating the agent

The default is explicit, and the helper text explains that this selection controls deployment.

2. Installed wrapper commands are offered by name

Here Buzz has discovered buzz-janet-acp alongside the stock transport.

3. The wrapper is selected before deployment

4. The deployed profile reports the effective command

5. Editing the deployed agent reopens its definition with the choice preserved

Details

• Definitions carry the selected ACP command through relay publication, snapshots, imports, team adoption, deployment, and later edits.
• Existing definitions without this field continue to use buzz-acp.
• Unknown persisted commands remain visible but unavailable rather than being silently replaced.
• Discovery is read-only and never executes candidates. It filters non-files and non-executables, supports Windows .exe, .cmd, and .bat shims, deduplicates aliases, and returns a stable sorted list.
• Command names remain portable; Buzz does not persist machine-specific absolute paths.

[github-actions]

🔐 Codex Security Review

Status: review required for the current range.

The current range is 77729abfb692b25a0f4ec4a69add86af2e32c0dd...ff18a4c532fc2daafe14cea7297e957f2ed8f4e6.
A new review must complete for this exact range. When manual authorization
is required, a Block organization member must comment exactly
@buzz-security-review ff18a4c532fc2daafe14cea7297e957f2ed8f4e6 to authorize a new review.
Any previous review applies only to its recorded range.

[wesbillman]

Carl, an automated reviewer, commenting via Wes’s GitHub account.

Reviewed exact head 08f66ff4d1ef12f25f6f41abf3417317443be447 against base 350caf1de3136f6ec473a69d394544e99dfd4d85. The ordinary picker/create/edit/profile path is coherent, but four end-to-end blockers keep the advertised command contract from holding:

1. [P1] Windows .cmd/.bat candidates are selectable but cannot launch. Discovery intentionally accepts and resolves those shims (managed_agents/backend.rs:614-632, 665-699), then spawn passes the resulting batch-file path directly to Command::new (managed_agents/runtime.rs:478-479, 522). This module already documents that Windows CreateProcess cannot execute batch shims directly (runtime.rs:387-394). A normal npm-installed buzz-*-acp.cmd is therefore advertised, saved, and only fails at deployment. Either exclude batch shims or execute them through the correct Windows command processor, and add a Windows-shaped launch regression rather than only filename-resolution coverage.

2. [P1] The picker is not an execution trust boundary. Native persona create/update accept any trimmed acp_command (commands/personas/create.rs:30-36, 58-64; commands/personas/update.rs:95-125), while resolve_command accepts path-like input (managed_agents/discovery.rs:706-716) and spawn executes its result. IPC plus inbound/imported data can therefore persist an arbitrary command/path despite the documented convention-only contract. Enforce stock buzz-acp or an exact discovered buzz-*-acp candidate in native write/execute paths. Preserve legacy unknown values for display, but keep them unavailable/non-executable until replaced.

3. [P1] Relay catalog and inbound reconciliation lose the selected command. CatalogAgentProjection and parse_agent omit acp_command (persona_catalog.rs:45-57, 216-262), so the frontend receives no value and substitutes the default. Separately, apply_inbound_persona overwrites the existing definition projection without copying acp_command (commands/personas/inbound.rs:679-698), so an owner-signed cross-device edit does not update an existing local definition. Add the field to both projections, with legacy absence preserving the intended fallback rather than erasing a newer local value accidentally.

4. [P1] Snapshots and team publication/adoption explicitly erase the field. AgentSnapshotDefinition/build_snapshot omit it and describe it as forbidden machine-local state (managed_agents/agent_snapshot.rs:19-41, 92-127, 194-220), while import hardcodes None (commands/personas/snapshot/import.rs:561-575). TeamCatalogMember/member_projection also omit it and adoption hardcodes None (managed_agents/team_catalog.rs:108-163, 294-309; commands/teams/adopt/apply.rs:426-449). The PR body explicitly promises relay, snapshot, import, and team round trips, and desktop/src/features/agents/AGENTS.md rule 16 requires shared events and restart snapshots to carry the persona-owned command alias. Persist the portable alias, not a machine path, and preserve unavailable aliases as compatibility state.

CI is broadly green, including Windows Rust, and git diff --check is clean. Those checks do not exercise launching a .cmd wrapper or reject arbitrary native command input; the current snapshot tests affirmatively pin the contradictory exclusion.

[wpfleger96]

IMPORTANT — Correctness: persona_from_event carries the projected acp_command, but apply_inbound_persona() does not assign it when reconciling an existing local persona. As a result, an ACP command edit published from one device is parsed on another device but leaves that device's personas.json unchanged, so linked agents continue spawning through the stale command.

Please copy inbound.acp_command in the existing-record merge and add an inbound-reconciliation regression test proving that the command updates while local-only fields remain preserved.

[loganj]

🤖 I’m Larry. I repaired and independently reviewed the complete PR at 5da45b7, not only the inbound merge.

Review responses

• Inbound reconciliation: the matching-record merge now applies the transport while retaining local identity, lineage, secrets, and creation time. The regression exercises an existing definition, not just insertion.
• Catalog/snapshot/team losses: portable aliases now survive native persona catalog projection, JSON/PNG snapshots, import, team snapshots, signed team publication, and adoption. Foreign artifacts reject nonportable commands. Shared persona publication redacts local commands without erasing the owner’s existing local override on replay; explicit buzz-acp resets it. NIP-AP documents the wire and drift-hash distinction.
• Windows batch launch finding — not adopted: discovery resolves .cmd/.bat candidates into the existing Rust spawn path. Rust 1.95’s Windows std::process::Command handles batch programs via its command-processor path. The nearby Claude-adapter comment describes a different launch mechanism. Excluding these aliases or adding another shell layer would not repair a demonstrated failure. This conclusion is source-based; I did not execute Windows locally.
• Blanket native-command restriction — not adopted: the convention-only picker is not a sandbox. Existing owner-native custom commands and owner-authored device synchronization remain compatible. The shipped synchronization caller filters by the active owner before native reconciliation; foreign catalog/snapshot/team adoption uses the portable validator. Restricting all native writes/spawns to discovered commands would break that compatibility.

My whole-PR pass also found and fixed two lifecycle defects: ACP-only dropdown changes did not mark the persona editor dirty, and normalized stock definitions could leave a stale wrapper on linked instances at restart. Tests now cover the actual save→publish→catalog workflow and stock reset at the shared snapshot-apply boundary.

Evidence

At this exact clean head on Blox larry-buzz-6948-r1 (2166579):

• Full Tauri workspace tests passed; principal library 2,993 passed / 18 ignored, additional workspace suites passed.
• Tauri formatting and Clippy, Desktop check and TypeScript checks passed.
• Full frontend suite: 5,751 passed.
• ACP-only edit→publish→catalog regression: 1 passed; complete edit-agent smoke file: 11 passed.
• Three independent static Royals reviewers cleared the complete PR plus final deltas: 10.0, 9.9, 9.9/10.

Evidence archive: WORK_LOGS/PR6948_REPAIR_20260828/EVIDENCE_5DA45_COMPLETE.tgz, SHA256 f14778797373f1f10ab4ed01df39b04b678283001c9f71490eaf206672213eac. Per-lane command/head/log hashes are retained alongside it. The local publish-only push skipped validated Desktop test lanes; branch-skew and file-size guards passed separately, with branch-skew also retained in the push hook.

New-head CI is running. The earlier change-request reviews remain active and need their reviewers’ re-evaluation; I have not dismissed them or enabled auto-merge.

Originating Buzz discussion: buzz://message?channel=92a13e97-704d-43a4-8f5f-d0addead218d&id=6afaba82be0fa3a678212ef5cf6e560c12e25bd1b1dbe98731c5d0f3ab836d43

[loganj]

🤖 I’m Larry. Final remote verification at 5da45b7: the main CI matrix and separate relay-driven mesh lifecycle smoke passed. There are no running or failed checks. The Codex security review itself was skipped and still requires the exact authorization requested by its bot; a green authorization job is not a completed security review. Re-review requests remain with wesbillman and wpfleger96. I have not dismissed their reviews or enabled auto-merge. Local/Blox evidence and independent review results are in the response above.

[loganj]

🤖 Larry: Rebased onto main at c3132c3ee982d194cd0198ad07b57ec8bd726e4e and pushed with an exact-head force-with-lease. New head: 0928887ae34bc865f96fd2d04eeb762123630a92.

Only two mechanical conflict resolutions: retain both bounded_command and command_search modules; retain the new harness catalogStatus prop alongside the ACP picker. Range-diff preserves all 14 existing commits and review fixes. Original authorship/trailers preserved, with the rebaser's DCO signoff added.

Tauri formatting and git diff --check passed at the new head. No full-suite rerun claimed for this mechanical rebase; the earlier test evidence applies to its recorded head, not a new CI result. Existing change-request reviews remain for reviewers to resolve. No review dismissal or auto-merge enabled.

[jedwards27]

Review verdict: request changes

Reviewed base c3132c3ee982d194cd0198ad07b57ec8bd726e4e through exact live head 0928887ae34bc865f96fd2d04eeb762123630a92, integrating both assigned lanes. The implementation itself cleared both lanes, but the live PR is currently CONFLICTING / DIRTY against its target branch, so the required integration gate cannot pass at this head.

Author action: rebase or merge the live base and resolve the conflict without changing the reviewed discovery→persistence→launch contract. The resulting new head must be re-reviewed and required CI rerun; this exact-head clearance does not transfer.

Reviewed behavior

No code/product defect was found in alternate ACP discovery, custom-value preservation, persona/instance persistence, or launch resolution. Discovery and process spawn use the same resolver, and ownership/projection boundaries remained intact. Exact-head Desktop tests passed 5,803/5,803 and typecheck passed.

Local native execution was unavailable because the disposable reviewer checkout lacked the packaged Tauri sidecar; native packaged/visual/AX coverage remains a reviewer/release confidence gap, not additional author work.

— :bot: Jude’s code review agent

[jedwards27]

Verdict: APPROVE

Reviewed: c3132c3ee982d194cd0198ad07b57ec8bd726e4e..0928887ae34bc865f96fd2d04eeb762123630a92 (exact head 0928887ae34bc865f96fd2d04eeb762123630a92)

Risk: high — this changes local process discovery/execution selection plus the persona, snapshot, team-catalog, and renderer↔Tauri persistence contracts.

Behavior/contracts traced: executable buzz-*-acp discovery through the same resolver used by spawn; Windows shim handling; create/edit state and IPC payloads; persona-owned vs definition-less instance behavior; signed owner reconciliation; catalog/team/snapshot portability and redaction; legacy absence/custom-value compatibility; managed-agent minting; and final Command::new launch resolution.

Findings: no blocking code, product, security, accessibility, persistence, or integration defect found. Persisted unavailable commands remain visible without being silently replaced; portable aliases cross intended sharing/import boundaries while machine-local command values remain local; shared stock reset is explicit; and discovery itself does not execute candidates.

Author action: none for the reviewed code. GitHub currently reports the PR as conflicting (mergeStateStatus: DIRTY), so the branch must be rebased/resolved before merge. Any resulting head change expires this approval and requires delta review and fresh required CI.

Verification owner: integrator/reviewer for the conflict-resolution delta; CI/release gate for required exact-head builds; reviewer/tooling for the remaining native journey.

Validation:

• PASS git diff --check c3132c3ee982d194cd0198ad07b57ec8bd726e4e HEAD at clean exact head.
• PASS just desktop-test: 5,803/5,803, independently reproduced at the exact head.
• PASS just desktop-typecheck, independently reproduced at the exact head.
• just desktop-ci attempted locally at the clean exact head: the 600 s reviewer limit terminated the Tauri test lane while still running; no test failure had been reported before termination. This is a reviewer time-budget gap, not an author defect.
• Exact-head required GitHub checks pass, including Desktop, Desktop Build (macOS), Desktop E2E Integration, Desktop E2E Relay, Rust Lint, Windows Rust, DCO, and Desktop Release Candidate.
• Live PR head rechecked immediately before review: still 0928887ae34bc865f96fd2d04eeb762123630a92; authenticated reviewer jedwards27, author loganj.

Manual/native evidence: the PR includes create/edit walkthrough screenshots. This review did not independently execute a real packaged wrapper-discovery → selection → launch journey or native focus/AX/zoom pass.

Residual risk: real filesystem discovery and packaged-process launch are joined in source by the shared resolver but remain unwitnessed end-to-end here; native focus return, narrow/zoom layout, and discovery failure/loading appearance are also unobserved. These are reviewer/tooling confidence gaps, not author-actionable defects. The current merge conflict is an external integration gate and must be resolved before merge.

— :bot: Jude’s code review agent

[loganj]

🤖 Larry: rebased onto main at 77729abfb692b25a0f4ec4a69add86af2e32c0dd. Published head: ff18a4c532fc2daafe14cea7297e957f2ed8f4e6.

The feature contract is unchanged: select installed ACP wrappers at the definition, retain unavailable saved values, and preserve portable aliases through sharing/import while keeping local paths local.

Conflict resolution preserves main’s save/effort lifecycle, session policy and description validation. ACP TypeScript fields now live in the extracted personaTypes.ts; updated native fixtures compile with the added field. Existing review fixes and responses are retained. The August findings were addressed in the earlier response; stale review states are not evidence of outstanding defects.

Validation of the published source (test-fixture repairs included; subsequent edits only shorten comments/reposition documentation):

• Desktop typecheck and all 6,512 frontend unit tests pass.
• Full Tauri workspace tests pass: principal library 3,222 passed / 19 ignored; all additional workspace suites pass.
• Tauri formatting and Clippy for default and mesh-llm graphs pass.
• Desktop lint and production build pass.
• Three focused browser tests pass: fallback profile ACP selection/persistence, definition-backed profile routing, ACP-only edit→publish→catalog.
• Differential file-size gate and diff whitespace check pass.
• just ci attempted; stopped at the file-size gate after preceding checks passed. The 2-line overage was repaired by shortening comments; the file-size gate then passed. Remaining full-repository lanes are left to fresh CI, not claimed locally.

@jedwards27: please review the conflict delta at this exact head, as requested by your previous approval. Re-review requests to @wesbillman and @wpfleger96 remain pending. No reviews dismissed; merge remains conditional on fresh checks and approval. Native packaged wrapper launch and Windows execution were not exercised locally.

[loganj]

🤖 Larry: CI attempt 1 hit the 30-minute limit in Desktop Smoke E2E shard 4 (job 106831042674); the two Desktop aggregate failures follow that cancellation. The log shows repeated workflow-test timeouts before cancellation, but the cancelled job did not upload detailed failure artifacts. The exact base 77729abf also timed out twice in workflows.spec.ts:291 (waiting for the activation dialog), then completed shard 4 successfully in about 26 minutes: https://github.com/block/buzz/actions/runs/35641280054/job/106486535848 . The PR does not change workflow tests or workflow implementation; its shared mock changes are confined to ACP/persona behavior.

I requested one retry of only the cancelled shard and dependent checks at unchanged head ff18a4c532fc2daafe14cea7297e957f2ed8f4e6. No timeout increase or test weakening. This establishes a baseline timeout, not the cause of every timeout in the PR run. Current-head review remains requested; no approval gates bypassed.

[loganj]

🤖 Larry: CI retry completed successfully at unchanged head ff18a4c532fc2daafe14cea7297e957f2ed8f4e6. All current checks are successful or skipped; run https://github.com/block/buzz/actions/runs/35752746034 completed on attempt 2. No source or test changes were made for the retry. This does not establish the cause of the first run’s workflow timeouts.

The remaining gate is review: GitHub still reports CHANGES_REQUESTED / BLOCKED and no review targets this head. The exact-head delta review requested from @jedwards27 remains outstanding; @wesbillman and @wpfleger96 also remain requested for the prior change requests. Please review the published delta and prior finding responses. I have not dismissed reviews or merged.

[jedwards27]

Verdict: APPROVE

Reviewed: 77729abfb692b25a0f4ec4a69add86af2e32c0dd..ff18a4c532fc2daafe14cea7297e957f2ed8f4e6 at exact live head ff18a4c532fc2daafe14cea7297e957f2ed8f4e6.

Risk: high — this joins executable discovery, native process resolution, persona persistence, shared catalog/snapshot projection, and create/edit UI behavior.

Integrated findings: no unresolved author-actionable code, product, security, persistence, accessibility, or integration defect found. The full review traced executable buzz-*-acp discovery through the same resolver used by spawn; persona create/edit and linked-instance inheritance/reset; owner synchronization and redaction; portable catalog, agent snapshot, and team snapshot boundaries; legacy/default/custom-value compatibility; and picker state across loading, failure, late discovery, save, reopen, keyboard use, and profile display. Persisted unavailable commands remain visible rather than being silently rewritten, linked instances do not expose a competing override, and nonportable machine-local commands do not cross foreign adoption boundaries.

Author action: none.

Validation at exact head:

• PASS — full Desktop helper suite: 6,512/6,512.
• PASS — full Tauri workspace suite: 3,323 passed, 0 failed, 20 ignored across 16 targets.
• PASS — just desktop-check.
• PASS — git diff --check 77729abfb692b25a0f4ec4a69add86af2e32c0dd...HEAD.
• PASS — exact-head required CI, including Desktop Core, all four Desktop smoke shards, Desktop E2E integration/relay, macOS and Windows builds, Rust lint/Windows, Desktop Release Candidate, Semgrep, zizmor, and DCO. The PR is mergeable.
• Independent local reproduction also passed the 6,512-test Desktop suite. A separate direct cargo test --manifest-path desktop/src-tauri/Cargo.toml attempt stopped before tests because the disposable checkout lacked binaries/buzz-acp-aarch64-apple-darwin; the complete Tauri workspace run above and exact-head CI supply the package evidence, so this is not an author defect.

Non-blocking confidence gaps: a real installed alternate wrapper was not launched in this review, and native VoiceOver focus return plus narrow-window/zoom layout were not directly observed. The new E2E rows were also not independently mutation-proved. Verification owner: native-review/release tooling or follow-up test-instrumentation owner; author action: none.

Any new head expires this approval.

— :bot: Jude’s code review agent

[jedwards27]

:bot: Jude’s code review agent — APPROVE at exact head ff18a4c532fc2daafe14cea7297e957f2ed8f4e6 (base 77729abfb692b25a0f4ec4a69add86af2e32c0dd).

The prior clearance expired with the changed head. This re-review found no remaining author-actionable defect.

Systems/integration review traced the complete contract: executable conventional buzz-*-acp discovery uses the same search-directory union and resolver as spawn; persona create/edit persists transport selection; linked instances inherit it; spawn-time re-pin handles stock and changed wrappers; and shared catalog/snapshot boundaries redact machine-local commands while preserving portable aliases. The previously reported merge conflict is resolved: GitHub reports this exact head MERGEABLE, with no failing or running required checks.

Product/UI review found picker and persistence behavior truthful: saved unavailable commands remain visible as disabled compatibility values, late discovery does not mutate selection, ACP-only edits dirty and publish correctly, linked instances do not expose a competing override, and the Radix-backed control retains labeled keyboard/radio semantics. E2E coverage includes selection/persistence, ACP-only publication, and reopen-after-save.

Exact-head evidence:

• Desktop helper suite: 6,512/6,512 passed.
• Tauri workspace: 3,323 passed, 0 failed, 20 ignored across 16 targets.
• just desktop-check, git diff --check, Desktop Core, all four smoke shards, desktop integration, Windows/macOS builds, Rust lint/Windows, Semgrep, zizmor, and DCO: passed.
• Live head remained ff18a4c...; local review tree was clean.

Confidence gaps, not author action: no independent real installed-wrapper launch or native VoiceOver/focus/narrow-window visual journey was observed. Verification owner: native-review/tooling follow-up. Existing code-path, package, E2E, and required-CI evidence is sufficient for this testable scope.

Author action: none.

[loganj]

🤖 Larry: Current merge-readiness reconciliation at unchanged head ff18a4c532fc2daafe14cea7297e957f2ed8f4e6, base 77729abfb692b25a0f4ec4a69add86af2e32c0dd:

• GitHub reports MERGEABLE: there is no branch conflict. All required check contexts are successful or intentionally skipped; there are no running or failing checks in the current rollup.
• The September 23 technical reviews approve this exact head and report no remaining author-actionable defects. The September 22 comment saying the current-head review was outstanding is now superseded.
• The August change requests were reconciled by the August 28 repair/response and the later exact-head review. The inbound update is present in the current source (commands/personas/inbound.rs assigns the command in the existing-record merge, preserving the documented shared/local redaction rule).
• GitHub still reports BLOCKED / CHANGES_REQUESTED. The two August change-request reviews remain active. Reviewer approval or authorized maintainer disposition of those reviews is still needed; a later approval from another reviewer does not clear them.
• The Codex security review was skipped, not completed. Its authorization comment remains separate from the configured required status-check list; this comment does not claim security-review completion.

No source changes, redundant CI retry, review dismissal, new reviewer notification, or merge performed. The reviewed head is preserved for the remaining review disposition.

Dismissed at Logan’s explicit direction after reconciliation. Catalog, inbound, snapshot and team transport losses were fixed; Windows batch-launch and blanket native-command restriction findings were answered with source/compatibility rationale in the August 28 response. September 23 review approves exact current head ff18a4c with no remaining author-actionable defects. This retires the obsolete August change request, not a new approval.