feat: import Chinese-localized Buzz source snapshot

Signed-off-by: cls_宁波本机 <908705107@qq.com>

desktop/scripts/check-pubkey-truncation.mjs

@@ -0,0 +1,46 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { runPubkeyTruncationCheck } from "../../scripts/check-pubkey-truncation-core.mjs";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const projectRoot = path.resolve(__dirname, "..");
+
+// Truncated pubkey prefixes are forgeable (vanity grinding), so all display
+// truncation goes through the canonical `truncatePubkey` / `<PubKey>` — this
+// guard keeps ad-hoc `pubkey.slice(0, N)` forms from fragmenting again.
+const rules = [
+  {
+    root: "src",
+    extensions: new Set([".ts", ".tsx"]),
+  },
+];
+
+// Non-display uses: array windows over pubkey lists, color/initials
+// derivation where the value is never presented as an identity.
+const overrides = new Set([
+  // HexAvatar: 6-char badge + hue derivation inside a color-coded disc,
+  // clearly decorative (paired with a full truncatePubkey aria-label).
+  "src/features/huddle/components/ParticipantList.tsx:150",
+  "src/features/huddle/components/ParticipantList.tsx:151",
+  // clientId (not a pubkey) sliced in a debug log next to the real thing.
+  "src/features/channels/readState/readStateManager.ts:338",
+  // Array windows (first N pubkeys), not string truncation.
+  "src/features/messages/lib/threadPanel.ts:395",
+  "src/features/projects/ui/ProjectsView.tsx:166",
+  "src/features/projects/ui/ProjectsOverviewPanel.tsx:209",
+]);
+
+await runPubkeyTruncationCheck({
+  projectRoot,
+  rules,
+  overrides,
+  allowedFiles: new Set([
+    // The canonical helper itself.
+    "src/shared/lib/pubkey.ts",
+    // E2E mock bridge fabricates ids/nsecs from pubkeys; nothing here is a
+    // user-facing identity display.
+    "src/testing/e2eBridge.ts",
+  ]),
+  label: "Desktop",
+  scriptPath: "desktop/scripts/check-pubkey-truncation.mjs",
+});