J3vbandClaude Opus 4.8 81a0b63e65 feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI ...

WIP save point. Server + W2-4/W3-3 complete and gate-green; F3 voice E2EE
identity keys + TOFU implemented and MITM-verified-closed; the F3 voice-panel
UI (safety-number display, verified/mismatch badge, re-pin modal) is still TODO.

- W2-4 attachment link (coverage confirmed); W3-3a XFF CIDR pre-parse;
  W3-3b update-binary TOCTOU (single-handle verify + O_EXCL staging)
- F3 server: migration 017 identity_public_key, PATCH /users/me persist,
  ready/member_join/user_update carry key, signed voice_e2ee_announce
- F3 client: ECDSA identity keypair (keyring + pin store), publish wired into
  ready, verifyPeerAnnounce pin-before-legacy, rePinPeerIdentity recovery
- Gates: server full CI mirror green (-race/-deadlock/lint/4 build tags);
  client typecheck/lint/format + 3337 vitest green. Rust CI-verify only.

Next: build F3 voice-panel UI, then adversarial review, then finalize commit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-23 21:07:09 +02:00

..

static

chore: delete dead code and tracked junk (deletion audit 2026-07-23)

2026-07-23 14:54:59 +02:00

admin_handler_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

admin.go

chore(server): delete production-dead code; move test helpers to export_test

2026-07-23 15:28:41 +02:00

api_edge_cases_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

api_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

api.go

feat(server,admin): private channels via per-role permission overrides

2026-07-19 10:50:11 +00:00

export_test.go

chore(server): delete production-dead code; move test helpers to export_test

2026-07-23 15:28:41 +02:00

handlers_backup_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_backup.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_channel_perms_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_channel_perms.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_channels_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

handlers_channels.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_settings.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_users.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

helpers.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

logstream_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

logstream.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

middleware_and_spawn_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

middleware_coverage_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

middleware.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

setup_handler_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

setup_handler.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

types.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

update_handlers_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

update_handlers.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00