J3vbandClaude Opus 4.8 81a0b63e65 feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI ...

WIP save point. Server + W2-4/W3-3 complete and gate-green; F3 voice E2EE
identity keys + TOFU implemented and MITM-verified-closed; the F3 voice-panel
UI (safety-number display, verified/mismatch badge, re-pin modal) is still TODO.

- W2-4 attachment link (coverage confirmed); W3-3a XFF CIDR pre-parse;
  W3-3b update-binary TOCTOU (single-handle verify + O_EXCL staging)
- F3 server: migration 017 identity_public_key, PATCH /users/me persist,
  ready/member_join/user_update carry key, signed voice_e2ee_announce
- F3 client: ECDSA identity keypair (keyring + pin store), publish wired into
  ready, verifyPeerAnnounce pin-before-legacy, rePinPeerIdentity recovery
- Gates: server full CI mirror green (-race/-deadlock/lint/4 build tags);
  client typecheck/lint/format + 3337 vitest green. Rust CI-verify only.

Next: build F3 voice-panel UI, then adversarial review, then finalize commit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-23 21:07:09 +02:00

..

dbgen

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

queries/sqlite

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

account_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

account.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

admin_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

admin_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

attachment_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

attachment_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

audit_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

audit.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

auth_queries_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

auth_queries.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

backup_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

block_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

channel_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

channel_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

coverage_boost_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

db_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

db.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

dm_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

dm_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

errors_test.go

test: add server core test coverage (Session 1)

2026-04-01 08:41:09 +02:00

errors.go

fix: atomic invite registration, fail-closed search, proxy-aware rate limiting

2026-03-29 19:39:22 +02:00

event_queries.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

invite_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

lockout_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

mappers.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

message_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

message_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

migrate_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

migrate.go

fix: handle BEGIN...END blocks in SQL migration splitter

2026-04-01 15:35:50 +02:00

models_test.go

test: boost server coverage — auth 60→95%, db 69→81%, config 75→85%

2026-04-01 11:38:11 +02:00

models.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

persisted_event.go

feat: scaffold Phase B + C (events, telemetry, plugins, Solid.js)

2026-04-06 09:00:47 +00:00

plugin_queries.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

profile_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

profile_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

role_invite_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

role_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

sanitize_test.go

fix: resolve 4 server bugs (Phase 1: BUG-085, BUG-087, BUG-090, BUG-091)

2026-04-01 17:52:06 +02:00

voice_queries_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

voice_queries.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00