fix(desktop): mention remote channel agents

[100yenadmin]

Summary

• admit active-channel bot members into desktop mention autocomplete without treating them as locally managed runtimes
• preserve relay directory response policy as the invocation gate
• verify exact pubkey p tags, direct/shared rooms, room isolation, policy denial, and local lifecycle regressions

This is an upstream-candidate staging PR for #7, based on current block/buzz:main at 9cc9652c7dec9145b0bf0ce2c4b46c8191d215f8. It reuses the minimal implementation direction from block#2333 with attribution. The Electric fork main currently trails upstream by 23 commits, so GitHub may show those already-upstream commits in the staging comparison; the authored change is the final commit.

Focused proof

• pnpm -C desktop exec biome check ...
• pnpm -C desktop exec node --import ./test-loader.mjs --experimental-strip-types --test src/features/agents/lib/agentAutocompleteEligibility.test.mjs (19 passed)
• pnpm -C desktop typecheck
• pnpm -C desktop build:e2e
• pnpm -C desktop exec playwright test tests/e2e/mentions.spec.ts --grep ... (6 passed)
• ../bin/flutter test test/features/channels/mentions/mention_candidates_test.dart (14 passed; unchanged mobile path parity)

Scope

No Supabase, Electric Sheep/evaOS branding, managed-business behavior, relay policy, profile republish, deployment, or runtime changes. Full kind:0 profile-field preservation remains tracked by block#2534.

Closes #7

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 80694fef-72b6-4f5e-8008-2a3425114711

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feature/7-remote-agent-discovery

---

_{Comment @coderabbitai help to get the list of available commands.}

[100yenadmin]

Stable source gate — exact head

• Head: 1fde7c483f050f37b5be610d8233b45fc1c909d1
• Upstream base: block/buzz:main@9cc9652c7dec9145b0bf0ce2c4b46c8191d215f8
• Focused proof: eligibility 19/19; desktop shared/direct/policy/room/local-lifecycle smoke 6/6; unchanged mobile mention candidates 14/14; Biome, desktop typecheck, and E2E build passed.
• Canonical CI: https://github.com/electricsheephq/buzz/actions/runs/30087652896 — success on the exact head, including all desktop smoke/integration shards, Relay E2E, Mobile, macOS, Windows, Rust, and security jobs.
• CodeQL: https://github.com/electricsheephq/buzz/actions/runs/30087650796 — success.
• Independent semantic review: PASS with no findings on the exact authored delta. Review surfaces: 0 inline threads, 0 actionable, pagination complete.

Terminal dispositions:

• CodeRabbit was optional and skipped because the PR is draft; the required independent exact-head review is complete.
• Two auxiliary push-gateway Docker jobs built successfully but failed only while exporting caches to ghcr.io/block/... from the Electric fork (permission_denied: requested installation does not exist). This is accepted as fork infrastructure, not a Buzz Upstream: discover and mention authorized remote agents on every client #7 source regression; no workflow or registry scope is added to this generic diff. The amd64/arm64 primary Docker builds passed.
• Review findings: none.

Gate status: COMPLETE — ADVANCE for the Buzz #7 source/PR gate. The PR remains draft and unmerged; this does not prove release, deployment, live relay/VM behavior, or customer readiness.

[100yenadmin]

This pre-reset staging PR is closed as superseded by merged upstream-first reset PR #37 and the current thin-adapter tracker #1/#36.

No code is being deleted. The branch and review history remain available. Retained behavior was replayed narrowly in #37; dropped managed brokers, blanket guards, duplicate UI, and control-signed routine collaboration must not be revived from this PR.