Claude 330fd8eed7 feat: add end-to-end encryption for voice/video via LiveKit SFrame ...

Server generates a per-channel 256-bit symmetric key (crypto/rand) when
the first participant joins voice. The key is distributed to all
participants via the voice_token WS message (already TLS-encrypted) and
cleared when the channel empties for forward secrecy per session.

Client configures LiveKit Room with ExternalE2EEKeyProvider and an
SFrame e2ee-worker. All audio/video frames are encrypted client-side
before reaching the SFU — the server never sees plaintext media.

Changes:
- Server: new VoiceE2EEKeys store, e2ee_key in voice_token payload
- Client: E2EE Room options, key provider wiring for connect/reconnect
- CSP: added worker-src 'self' blob: for the E2EE Web Worker

https://claude.ai/code/session_01KKo3RwjdmcNzkgXNfUkgNT

2026-04-04 16:34:52 +00:00

..

admin

chore: merge dev — resolve conflicts between Linux support and signing hardening

2026-04-03 08:59:57 +02:00

api

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

auth

fix: resolve all 12 golangci-lint issues

2026-04-03 08:33:55 +02:00

config

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

db

fix: security hardening — 11 findings across auth, WS, upload, admin, data

2026-04-02 14:51:16 +02:00

migrations

fix: security hardening — 11 findings across auth, WS, upload, admin, data

2026-04-02 14:51:16 +02:00

permissions

chore: remove soundboard feature entirely

2026-04-02 17:00:27 +02:00

scripts

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

storage

fix: resolve remaining LOW security findings (L2-L14)

2026-04-02 15:22:03 +02:00

syncutil

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

updater

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

ws

feat: add end-to-end encryption for voice/video via LiveKit SFrame

2026-04-04 16:34:52 +00:00

.air.toml

refactor: extensibility overhaul — handler registry, permission checker, sidebar decomposition, DX improvements

2026-03-29 12:19:08 +02:00

.dockerignore

feat: Linux client port, ARM64 CI, and server Docker image

2026-04-03 14:26:26 +02:00

.env.example

feat: add docker-compose with LiveKit for server Docker deployment

2026-04-03 14:32:20 +02:00

.golangci.yml

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

.gremlins.yaml

chore: add dev tooling — Stryker, gremlins, k6, toxiproxy, Coraza WAF, Zod

2026-04-01 13:49:06 +02:00

docker-compose.yml

feat: add docker-compose with LiveKit for server Docker deployment

2026-04-03 14:32:20 +02:00

Dockerfile

feat: Linux client port, ARM64 CI, and server Docker image

2026-04-03 14:26:26 +02:00

go.mod

fix: harden server update signing

2026-04-02 23:35:11 +02:00

go.sum

fix: harden server update signing

2026-04-02 23:35:11 +02:00

livekit.yaml.example

feat: add docker-compose with LiveKit for server Docker deployment

2026-04-03 14:32:20 +02:00

main.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00