feat: add managed agents to channels from profiles - #196

…rs-support

* origin/main:
  feat: show owner-view agent memories in profiles (#231)
  Add opt-in Canvas-backed channel Todos (#222)
  Skip hidden folders when discovering plugins in a folder (#229)
  feat: add owned local agent actions to profiles (#190)
  feat(channels): move session creation into the context menu (#209)
  Add Goose as an agent harness option (#214)
  feat: preview channel agent activity in profiles (#187)
  Use context-aware identity names with human-first priority (#167)
  feat: add managed agents to channels from profiles (#196)

Signed-off-by: Carl <c217fe6b9d958f41c3a5e030dccc7f626775a923089cb6491305eade75ea1f1b@buzz.block.builderlab.xyz>

# Conflicts:
#	src/features/relay/outbox.ts

## Why

Desktop users need a clear way to find and apply Git plugin updates
during normal use.

## What

Offer shell notices and a Plugins menu entry for Git plugins that
declare update support. The plugin sets the default for background
checks. A saved per-plugin user choice overrides it. Plugins without the
declaration receive no background checks. Check at startup and hourly
while Buzz is visible. Checks do not install or reload plugins.

## How

Clicking the notice body opens that plugin’s update checkbox in Manage
plugins. The notice has a hover state and keyboard access. Update,
Review permissions, Later, and Dismiss keep their own actions. Back
restores the prior destination. Explicit Close retires matching plugin
visits.

Fetch a fresh immutable preview on action. Apply updates without added
access after confirmation from the notice. Require the existing access
review for added access or a publisher change. Preserve source identity,
managed pins, enabled state, signing rules, import concurrency, and
rollback limits.

Later hides the current candidate for the app run. Failed checks and
installs offer retry. Activation failures offer retry and the existing
rollback confirmation outside Settings.

Nexus needs the matching manifest declaration and host pin in [draft PR
#196](squareup/buzz-nexus#196). Older hosts
reject the new manifest field.

## Risk

An enabled plugin reloads as soon as the update installs. The notice
tells users to save unfinished forms and stop plugin workers first.

## Testing

At `7a433af38`, Blox passes all three push checks: TypeScript with 8,025
related frontend tests, design types and guards, and Clippy. The native
plugin crate passes 105 tests. The policy regression fails on the old
owner. The deferred-authorization regression fails before its fix and
passes after it. Scoped independent review finds no remaining blockers.
All 34 focused update tests pass. Clock and deferred-discovery tests
reproduce both review findings before the fixes. They also cover
recovery without a repeated zero-delay timer.

The full Toast browser file passes in Chromium and WebKit at
`29ca9f643`: 13 tests pass and one existing test skips. One browser case
adds real pointer hit tests and keyboard use for notice navigation. It
checks light/narrow and dark/wide layouts. Component and app tests cover
the settings checkbox and Back/Close history. No browser cases are
removed.

Native checks use the signed macOS app at `646ae3a94` and the real
relay. Published Nexus builds cover the notice in both themes, Later and
the Plugins menu, an enabled update, and access review with
cancellation. The app restores after restart. Native policy checks also
verify saved overrides across package replacement and restart. The
fixture adds only the update declaration to published Nexus code.

The signed app at `755afe96` contains the new notice navigation. Later
commits add browser types and fix check timing and pending Retry clicks.
They preserve the notice layout and navigation. Native acceptance passes
at `755afe96` with the saved sign-in, helper, signer, and profile. The
app restores its community and update notice after restart. A native
pointer click on the notice title opens Nexus details and focuses the
checked update setting. The operator confirms the flow on 2026-11-05.
The existing screenshots show the native notice, access review, and
checkbox. The operator authorizes merge as is; small dialog UX fixes
belong in a separate PR. All 41 CI checks pass at `7a433af38`. Human
review approves the PR. Both review threads are resolved.

## Screenshots

Native macOS debug app at `646ae3a94`, connected to the real relay.
Conversation content is blurred for privacy.

| Light | Dark |
| --- | --- |
| ![Plugin update notice in light
mode](https://github.com/user-attachments/assets/46400b53-d0ca-4e07-ad9a-b408b19d3613)
| ![Plugin update notice in dark
mode](https://github.com/user-attachments/assets/83a33698-2335-4039-9dd0-f040e5f82ec3)
|


| Access review · light | Access review · dark |
| --- | --- |
| ![Plugin access increase review in light
mode](https://github.com/user-attachments/assets/bb839091-8620-4d71-8c4e-a1ecfcac02a6)
| ![Plugin access increase review in dark
mode](https://github.com/user-attachments/assets/0c3a5283-b715-4115-9d72-1c0ab086bbd7)
|

The per-plugin setting uses the native app at `cba7d609`. The local
Nexus fixture adds the update declaration to published plugin bytes. Its
code and host access stay the same. The production declaration is in the
linked plugin PR.

| Checks on | Checks off |
| --- | --- |
| ![Automatic update checks
enabled](https://github.com/user-attachments/assets/a4a47c44-b238-4b98-b449-7fcd366a229f)
| ![Automatic update checks
disabled](https://github.com/user-attachments/assets/5f80a74a-3cc6-4e85-9ff6-df4bd12009fa)
|

buzz-review-completed

Generated with Codex

---------

Signed-off-by: Daniel Rouleau <[email protected]>
Co-authored-by: OpenAI Codex <[email protected]>
Co-authored-by: Codex <[email protected]>