From 13d08c3fd7ff36396fbf308d7b6f0e863915e941 Mon Sep 17 00:00:00 2001 From: Jared Vititoe Date: Thu, 2 Jul 2026 22:19:42 -0400 Subject: [PATCH] docs: mark H5 invite-QR fixed (local generation) Co-Authored-By: Claude Opus 4.8 --- LOTUS_TODO.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LOTUS_TODO.md b/LOTUS_TODO.md index af96816df..76cdbcc16 100644 --- a/LOTUS_TODO.md +++ b/LOTUS_TODO.md @@ -100,7 +100,7 @@ Tier-2 bug-hunt (desktop/native, crypto/session/infra, messaging data) by 3 para Tier-3 bug-hunt (theming/visual, presence/UX/composer, rooms-customization/moderation) by 3 parallel agents. Higher-severity than expected in the non-theming areas. `[P#]`=presence/UX, `[H#]`=rooms/moderation, `[T#]`=theming. -**✅ FIXED (2026-07), reviewed + gate-green (677 tests):** the ACL cluster [H1–H4] (empty-allow block, self-ban warning w/ case-insensitive glob match, glob validation, confirm dialog), [P1] wrong-room menu, [P2] presence override, [H6] insights overflow, [H7/H8] mod-log labels, [P3/P4/P5] mute-restore + status-expiry + timezone-`m.tz`, [P6–P9] favorites/charCount/DM-preview, and theming [T-P1/P2/P4/P5]. **DEFERRED:** [H5] invite-QR local generation (needs a bundled QR lib — not added). +**✅ FIXED (2026-07), reviewed + gate-green (677 tests):** the ACL cluster [H1–H4] (empty-allow block, self-ban warning w/ case-insensitive glob match, glob validation, confirm dialog), [P1] wrong-room menu, [P2] presence override, [H6] insights overflow, [H7/H8] mod-log labels, [P3/P4/P5] mute-restore + status-expiry + timezone-`m.tz`, [P6–P9] favorites/charCount/DM-preview, and theming [T-P1/P2/P4/P5]. **[H5] invite-QR ✅ FIXED (2026-07):** now generated locally via `qrcode.react` (no api.qrserver.com); removed from the prod CSP. **🔴 High (fixing/fixed this pass):**