Show BRC-169 handles for commit authors

[shruggr]

Shows commit authors as verified BRC-169 handles, modelled on git: the handle is whatever is in the commit's author/committer email slot. Nothing changes in the head token; nothing is required of users; resolution is best effort and never breaks a page.

Rules

1. Parse (lib/handles.ts parseHandle): accepts handle@domain (paymail form, BRC-169 2.1.7) and @handle@domain, with an optional +tag, and normalises to lowercase @handle@domain. Plain names, dotless ecosystems (aliases), and grammar violations are left as plain text and never touch the network.
2. Discover: https://<domain>/manifest.json must carry metanet.handles with major version 1; its resolve URL is used (default /.well-known/metanet-handles/resolve when absent). No metanet.handles means unresolvable, and the well-known path is not probed.
3. Resolve: GET <resolve>?handle=<handle> with the tag stripped. Only a 200 with a well-formed identityKey and a certificate object counts (subject/handle/domain echoes are checked when present; revoked: true rejects). 404/410/other/timeouts are unresolved. Manifests and bindings are cached in memory server-side: ttl clamped to 60 s..24 h, failures 5 min, 3 s timeouts, in-flight lookups shared.
4. Verify per head: a handle is verified only when the resolved identityKey equals the identity that signed the head being viewed. The same commit on someone else's head shows the author as plain text there. No cross-head lookups, no overlay index.
5. Display (components/handle-link.tsx): verified handles render as @[email protected] with a verified mark, linking to the identity page. A host-supplied displayName is only surfaced in the tooltip, labelled unattested (2.4.8). Unverified authors render exactly as before. The repo header labels the owner and duplicate branch-picker entries with the handle from that identity's own verified current head on the origin; the pubkey display stays.
6. Server-side: lib/handles-server.ts holds the shared resolver; server pages call authorHandles / commitHandles. The client-only "My repos" page goes through GET /api/handles and applies the same matchAuthorHandles rule locally.

Not implemented on purpose: search, reverse, aliases, messaging, payments, delegation, certificate signature/revocation checks.

Verification

• lib/handles.test.ts (23 tests, mocked fetch): grammar and normalisation (valid, paymail, tagged, invalid, alias), manifest handling (resolve URL, default path, missing metanet.handles → no probing, bad major/non-https), ttl clamping, resolve-response validation, the verification rule (matching vs non-matching signer), and the resolver's caching (ttl expiry, negative and positive manifest ttl, shared in-flight lookups, error statuses).
• bun run lint, bun run typecheck, bun test (37 pass), and bun run build all pass. Lint needed a one-line biome-ignore for a pre-existing control-character regex finding in branch-button.tsx.
• README and CLAUDE.md document the rule.

🤖 Generated with Claude Code

https://claude.ai/code/session_01EM5trZ4BfZpW7pBjq2onqX

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
gibhub	Ready	Preview	Sep 20, 2026 3:26am UTC