J3vbandClaude Opus 4.8 81a0b63e65 feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI ...

WIP save point. Server + W2-4/W3-3 complete and gate-green; F3 voice E2EE
identity keys + TOFU implemented and MITM-verified-closed; the F3 voice-panel
UI (safety-number display, verified/mismatch badge, re-pin modal) is still TODO.

- W2-4 attachment link (coverage confirmed); W3-3a XFF CIDR pre-parse;
  W3-3b update-binary TOCTOU (single-handle verify + O_EXCL staging)
- F3 server: migration 017 identity_public_key, PATCH /users/me persist,
  ready/member_join/user_update carry key, signed voice_e2ee_announce
- F3 client: ECDSA identity keypair (keyring + pin store), publish wired into
  ready, verifyPeerAnnounce pin-before-legacy, rePinPeerIdentity recovery
- Gates: server full CI mirror green (-race/-deadlock/lint/4 build tags);
  client typecheck/lint/format + 3337 vitest green. Rust CI-verify only.

Next: build F3 voice-panel UI, then adversarial review, then finalize commit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-23 21:07:09 +02:00

..

authz_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

can_send_ready_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

can_send_test.go

feat(client): optimistic message send + composer permission gating

2026-07-19 17:47:39 +00:00

channel_visibility_agreement_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

client.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

command_test.go

refactor: migrate WS handlers to V2 Command/Event architecture

2026-04-05 19:03:22 +02:00

command.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

coverage_boost2_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

coverage_boost_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

deps.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

dm_handlers_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

emit_test.go

test(ws): update emit-test hub literal for the single event channel

2026-07-19 09:33:33 +02:00

emit.go

fix(ci): resolve all golangci-lint and ESLint failures on PR #1132

2026-04-07 10:10:38 +02:00

errors.go

fix: Go E2EE security hardening — key holder tracking, base64 loose validation, rate limits, test schema

2026-04-04 23:16:31 +02:00

event_persister_test.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

event_persister.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

event_pruner_test.go

fix(review): address 11 Copilot review findings on PR #1132

2026-04-06 13:48:41 +00:00

event_pruner.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

event_test.go

chore(server): delete production-dead code; move test helpers to export_test

2026-07-23 15:28:41 +02:00

event.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

eventstore.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

export_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

extract_event_type_test.go

test+feat(phase-bc): pass 4 — test coverage, install endpoint, CHANGELOG

2026-04-06 10:30:18 +00:00

handler_v2_channel_focus_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handler_v2_migration_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handler_v2_ping_test.go

refactor: migrate WS handlers to V2 Command/Event architecture

2026-04-05 19:03:22 +02:00

handler_v2_voice_e2ee_offer_test.go

test(ws): lock rotation-burst admission for E2EE offers (W1-2)

2026-07-19 08:46:28 +02:00

handler_v2_voice_e2ee_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

handler_v2_voice_token_test.go

refactor: migrate WS handlers to V2 Command/Event architecture

2026-04-05 19:03:22 +02:00

handlers_chat.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_command_test.go

refactor(server): remove the store abstraction layer (D3)

2026-07-19 16:33:58 +00:00

handlers_command.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_ping.go

refactor: migrate WS handlers to V2 Command/Event architecture

2026-04-05 19:03:22 +02:00

handlers_presence.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_reaction.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

handlers_voice.go

feat(ws): finish the V2 dispatch migration and delete V1

2026-07-20 11:41:58 +02:00

handlers.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

hub_seedseq_test.go

test+feat(phase-bc): pass 4 — test coverage, install endpoint, CHANGELOG

2026-04-06 10:30:18 +00:00

hub_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

hub.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

livekit_process.go

fix(server): regenerate empty livekit.yaml instead of treating it as user-managed

2026-07-19 11:20:14 +00:00

livekit_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

livekit_webhook.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

livekit.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

message_types.go

feat(server,client): protocol codegen + audit quick-wins batch

2026-07-19 13:32:58 +00:00

messages_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

messages.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

origin_test.go

fix: resolve 24 critical and high issues from full code & security review

2026-04-01 09:23:17 +02:00

origin.go

chore(deps): migrate nhooyr.io/websocket to github.com/coder/websocket

2026-07-20 16:54:19 +02:00

pubsub_test.go

fix(ci): resolve all golangci-lint and ESLint failures on PR #1132

2026-04-07 10:10:38 +02:00

pubsub.go

fix(lint): delete dead ws broadcast cluster; demote phase-header comments

2026-07-18 12:55:22 +02:00

reconnect_db_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

registry_test.go

feat(ws): finish the V2 dispatch migration and delete V1

2026-07-20 11:41:58 +02:00

registry.go

feat(ws): finish the V2 dispatch migration and delete V1

2026-07-20 11:41:58 +02:00

ringbuffer_test.go

fix: encrypt TOTP secrets at rest and filter replay buffer by permissions

2026-04-02 15:05:56 +02:00

ringbuffer.go

fix: encrypt TOTP secrets at rest and filter replay buffer by permissions

2026-04-02 15:05:56 +02:00

serve_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

serve.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

topic_rate_limiter.go

migrate upload/profile handlers, add topic rate limiter, wire voice topics

2026-04-05 21:34:32 +00:00

voice_broadcast.go

chore(server): delete production-dead code; move test helpers to export_test

2026-07-23 15:28:41 +02:00

voice_controls.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

voice_e2ee_test.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

voice_e2ee.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

voice_handlers_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

voice_join.go

feat(e2ee): F3 identity/TOFU + W2-4/W3-3 hardening — checkpoint before F3 UI

2026-07-23 21:07:09 +02:00

voice_leave.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

voice_perm_stale_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00

ws_integration_test.go

refactor(server): thread context.Context through the db layer and all callers

2026-07-23 17:03:52 +02:00