J3vbandClaude Opus 4.8 81a0b63e65 feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI ...

WIP save point. Server + W2-4/W3-3 complete and gate-green; F3 voice E2EE
identity keys + TOFU implemented and MITM-verified-closed; the F3 voice-panel
UI (safety-number display, verified/mismatch badge, re-pin modal) is still TODO.

- W2-4 attachment link (coverage confirmed); W3-3a XFF CIDR pre-parse;
  W3-3b update-binary TOCTOU (single-handle verify + O_EXCL staging)
- F3 server: migration 017 identity_public_key, PATCH /users/me persist,
  ready/member_join/user_update carry key, signed voice_e2ee_announce
- F3 client: ECDSA identity keypair (keyring + pin store), publish wired into
  ready, verifyPeerAnnounce pin-before-legacy, rePinPeerIdentity recovery
- Gates: server full CI mirror green (-race/-deadlock/lint/4 build tags);
  client typecheck/lint/format + 3337 vitest green. Rust CI-verify only.

Next: build F3 voice-panel UI, then adversarial review, then finalize commit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-23 21:07:09 +02:00

..

auth_handler_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

auth_handler.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

channel_authz_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

channel_handler_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

channel_handler.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

client_update_test.go

fix(updater): make client auto-update work end-to-end and Linux server self-update verifiable

2026-07-23 18:38:22 +02:00

client_update.go

fix(updater): make client auto-update work end-to-end and Linux server self-update verifiable

2026-07-23 18:38:22 +02:00

clientip_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

constants_test.go

fix: Go E2EE security hardening — key holder tracking, base64 loose validation, rate limits, test schema

2026-04-04 23:16:31 +02:00

constants.go

feat(api): proxy Klipy GIF requests server-side so no key ships to clients

2026-07-20 13:29:46 +02:00

contract_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

coverage_push_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

diagnostics_handler_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

diagnostics_handler.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

dm_handler_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

dm_handler.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

export_test.go

chore(server): delete production-dead code; move test helpers to export_test

2026-07-23 15:28:41 +02:00

gif_handler_test.go

feat(api): proxy Klipy GIF requests server-side so no key ships to clients

2026-07-20 13:29:46 +02:00

gif_handler.go

feat(api): proxy Klipy GIF requests server-side so no key ships to clients

2026-07-20 13:29:46 +02:00

invite_handler_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

invite_handler.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

livekit_proxy_test.go

feat: voice/video polish — refactor, AudioWorklet VAD, bug fixes, UX improvements

2026-03-29 00:51:54 +01:00

livekit_proxy.go

chore(deps): migrate nhooyr.io/websocket to github.com/coder/websocket

2026-07-20 16:54:19 +02:00

livekit_ratelimit_test.go

test(api): lock client-update bucket isolation (W2-1)

2026-07-19 08:50:34 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

metrics_handler_test.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

metrics_handler.go

fix: resolve 20 code review bugs across Rust, TypeScript, and Go

2026-04-03 23:18:06 +02:00

middleware_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

middleware.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

plugins_handler_test.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

plugins_handler.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

profile_handler_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

profile_handler.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

router_test.go

fix(phase-bc): address review findings — auth, SSRF, seq alignment

2026-04-06 09:29:29 +00:00

router.go

feat(api): proxy Klipy GIF requests server-side so no key ships to clients

2026-07-20 13:29:46 +02:00

totp_handler_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

totp_handler.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

upload_handler_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

upload_handler.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

waf_test.go

fix: update tests and fix pending-join drain regression for CI

2026-04-04 21:50:57 +02:00

waf.go

fix(security): harden server against verified code-review findings

2026-07-17 21:08:54 +02:00