* chore(workflows): raise subagent effort tiers (sonnet/haiku to xhigh, prove opus to high)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* fix(voice): 6 defect(s) (OC-0098, OC-0004, OC-0005, OC-0006, OC-0007, OC-0020)
* fix(db): 1 defect(s) (OC-0096)
* fix(admin): 1 defect(s) (OC-0097)
* fix(auth): 2 defect(s) (OC-0099, OC-0021)
* fix(voice): 1 defect(s) (OC-0018)
* fix(admin): 1 defect(s) (OC-0045)
* fix(api): 1 defect(s) (OC-0103)
* fix(client): 1 defect(s) (OC-0105)
* fix(client): 1 defect(s) (OC-0107)
* fix(api): 1 defect(s) (OC-0109)
* fix(api): 1 defect(s) (OC-0112)
* test(admin): compare restore bytes with bytes.Equal
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* fix(voice): 2 defect(s) (OC-0095, OC-0014)
OC-0095: createRoom never called setE2EEEnabled(true), so the full ECDH/HKDF/AES-GCM key exchange completed but frames still reached the SFU in plaintext.
OC-0014: token refresh timer was 23h while the server mints LiveKit tokens with a 5-minute TTL, so any reconnect after minute 5 presented an expired token.
* fix(profile): 2 defect(s) (OC-0100, OC-0102)
* fix(service): 1 defect(s) (OC-0022)
Archived channels were only read-only for SendMessage/DeleteMessage. Edit, reaction, pin and purge sinks bypassed the check. Route every write sink through a shared requireChannelWritable gate.
* fix(api): 1 defect(s) (OC-0048)
* chore(workflows): correct stale model labels in bughunt-fix phase details
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* fix(client): 1 defect(s) (OC-0015)
* fix(voice): 1 defect(s) (OC-0002)
* test: fix two CI-only failures in the batch-4 test suite
The delete-account broadcast test now observes member_ban on a second
client's socket: the hub broadcasts and then force-disconnects the target,
so on a slow runner the close could beat the target's own copy of the
frame. The observer is also the party the event exists for.
The voice e2e mock now echoes the real joined channel id on voice_leave
(it hardcoded channel_id 0, which the dispatcher's channel-matched
self-leave teardown correctly ignores), and the rejoin test waits for the
mock's delayed echoes to settle before clicking the row again — clicking
inside the echo window toggled a leave instead of a join.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
