4391 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Lotus CIandClaude Opus 5.5	adf94d7bc1	fix(acl): a missing allow_ip_literals means allowed (#261) ... The Server ACL editor treated an absent allow_ip_literals as false, so the first save in a room with no ACL (or one omitting the field) silently banned IP-literal servers. The spec default is true. normalizeServerAcl() fills the spec defaults once and feeds the initial state, the dirty check and the save. It also stops showing an existing ACL with no allow list as allow-all: per spec that allows no servers, and the /acl command already keeps it as-is. The checkbox is driven by onClick (folds has no onChange), now readOnly so React stops warning about a checked input without onChange. Fixes #261 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 14:07:03 -04:00
jared	0eccf9bea9	Merge pull request 'feat(lotus): load avatar decorations from chat.lotusguild.org (matrix #22)' (#425) from feat/decorations-host into lotus	2026-10-19 13:43:54 -04:00
Lotus CIandClaude Opus 5.5	62c9ac8436	feat(lotus): load avatar decorations from chat.lotusguild.org (matrix #22) ... DECORATION_CDN moves from Nextcloud's public DAV (a PHP session and four cookies per image, no cache headers) to https://chat.lotusguild.org/decorations, static files from the versioned avatar-decorations package with a one-week cache. Pin @lotusguild/element-call-embedded 0.25.0-lotus.26, whose call tiles accept the new origin. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 12:54:23 -04:00
jared	aaf75fe74a	Merge pull request 'fix(calls): the call bar shows "Call disconnected" and reconnects when sync is back (#318)' (#418) from fix/call-disconnected-bar into lotus	2026-10-19 12:42:07 -04:00
Lotus CI	968507b4b1	Merge remote-tracking branch 'origin/fix/call-disconnected-bar' into fix/call-disconnected-bar	2026-10-19 12:14:52 -04:00
Lotus CI	893bf0f6c4	Merge remote-tracking branch 'origin/lotus' into fix/call-disconnected-bar ... # Conflicts: # package-lock.json # package.json # src/app/plugins/call/CallControl.ts # src/app/plugins/call/CallEmbed.ts	2026-10-19 12:12:28 -04:00
jared	8459427c1e	Merge pull request 'fix(desktop): the Linux update command verifies the signed SHA256SUMS before installing (cinny-desktop #36)' (#422) from fix/linux-update-verify into lotus	2026-10-19 04:40:01 -04:00
Lotus CIandClaude Opus 5.5	ec47d542dd	ci(gitleaks): allowlist the desktop updater minisign public key ... utils/updateErrors.ts embeds the public key that verifies Linux downloads (cinny-desktop #36); gitleaks' generic-api-key rule matched it. It is a published public key, not a secret. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 04:24:51 -04:00
jared	ef3849eb2f	Merge pull request 'perf: load the Settings dialog on demand; entry chunk 351.8 → 277.1 kB gzip' (#420) from perf/lazy-settings into lotus	2026-10-19 02:56:11 -04:00
jared	aaa915fe6b	Merge pull request 'fix(presence): Do Not Disturb is real "busy" presence and keeps your status (#283)' (#424) from fix/dnd-busy-presence into lotus	2026-10-19 02:44:20 -04:00
jared	029550c855	Merge pull request 'fix(threads): viewing a room no longer reads threads you don't follow (#314)' (#423) from fix/threads-stay-unread into lotus	2026-10-19 02:33:25 -04:00
jared	5bc0942eea	Merge pull request 'fix(profile): private notes say they are stored unencrypted on the homeserver (#329)' (#421) from fix/private-note-wording into lotus	2026-10-19 02:07:07 -04:00
jared	a937831e6b	Merge pull request 'fix(calls): the call-bar output menu uses the call frame's devices (#310)' (#417) from fix/audio-output-frame-ids into lotus	2026-10-19 01:13:19 -04:00
Lotus CI	0b940a6df7	Merge remote-tracking branch 'origin/lotus' into perf/lazy-settings ... # Conflicts: # src/app/features/settings/account/Profile.tsx	2026-10-19 01:07:39 -04:00
Lotus CIandClaude Opus 5.5	00f962a463	fix(presence): Do Not Disturb is real "busy" presence and keeps your status (#283) ... DND was sent as presence unavailable with the literal status text "dnd": it replaced your status, and other clients showed "dnd". Where the server supports MSC3026 (busy_presence), DND now sends presence org.matrix.msc3026.busy and leaves the status alone (Synapse keeps busy across /sync set_presence=online). Busy renders as red "Do Not Disturb" with the real status line; the legacy unavailable + "dnd" encoding is still recognised and still used on servers without it. Status saves / clears no longer downgrade busy. The SDK rejects non-spec presences, so busy goes through a direct authed PUT. Fixes #283 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 01:04:27 -04:00
jared	46da76c21b	Merge pull request 'feat(calls): minimise the call PiP to a small bar; phones start minimised (#323)' (#414) from fix/pip-minimise into lotus	2026-10-19 01:00:16 -04:00
Lotus CIandClaude Opus 5.5	fee3fbb7fc	fix(threads): viewing a room no longer reads threads you don't follow (#314) ... A passive read (just looking at the room) sent a threaded receipt for every unread thread you don't follow, so the Threads panel's Unread filter and Mark all read only ever worked for followed threads. Decision (2026-10-19): leave them unread until opened, but stop counting unfollowed threads toward the room's unread dot (getUnreadInfo subtracts them like muted threads; a mention makes a thread followed, so highlights are never hidden). isThreadFollowed moves to utils/room. Adds a Playwright regression. Fixes #314 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 00:52:04 -04:00
jared	a20accd446	Merge pull request 'fix(translate): no "use the Lotus desktop app" advice inside the desktop app (#349)' (#409) from fix/translate-unavailable-copy into lotus	2026-10-19 00:47:26 -04:00
Lotus CIandClaude Opus 5.5	674aef94fb	fix(desktop): the Linux update command verifies the signed SHA256SUMS before installing (cinny-desktop #36) ... The pacman / apt update command installed the downloaded package with no integrity check. Download it with the release's SHA256SUMS.txt and .minisig into a fresh temp dir, verify the signature with the updater key (minisign), check the hash, then install. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 00:37:34 -04:00
jared	080831d4ea	Merge pull request 'fix(status): any Lotus device clears an auto-expiring status, not just the one that set it (#300)' (#394) from fix/status-expiry-account-data into lotus	2026-10-19 00:35:05 -04:00
Lotus CIandClaude Opus 5.5	2ac764cd45	fix(profile): private notes say they are stored unencrypted on the homeserver (#329) ... "Notes only visible to you" overstated it: notes live in plain account data that homeserver admins can read. Say so under the note box (and link it as the box's description): "Only you can see this in Lotus Chat. It's stored on your homeserver and isn't end-to-end encrypted." Fixes #329 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 00:28:39 -04:00
Lotus CIandClaude Opus 5.5	8b6464c8b9	perf: load the Settings dialog on demand; entry chunk 351.8 → 277.1 kB gzip ... Settings (every page, pickers, the denoise tester) was in the entry chunk though it only renders when opened. Load it lazily behind a focusable spinner (it opens inside a FocusTrap), and warm the chunk when the app goes idle. SettingsPages and the status localStorage keys move to tiny modules so callers don't pull the dialog back in. sanitize-html (+postcss, htmlparser2) and chroma-js get their own vendor chunks; with Settings gone the chunk graph had dropped them into the entry chunk. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 00:00:19 -04:00
jared	2a9b7f68b7	Merge branch 'lotus' into fix/call-disconnected-bar	2026-10-18 23:40:50 -04:00
jared	2815767d47	Merge branch 'lotus' into fix/audio-output-frame-ids	2026-10-18 23:40:49 -04:00
jared	7ef24c14e0	Merge branch 'lotus' into fix/pip-minimise	2026-10-18 23:40:47 -04:00
jared	ca284a75e3	Merge branch 'lotus' into fix/translate-unavailable-copy	2026-10-18 23:40:46 -04:00
jared	179be38e2c	Merge branch 'lotus' into fix/status-expiry-account-data	2026-10-18 23:40:44 -04:00
Lotus CI	708e5c2c14	Merge remote-tracking branch 'origin/lotus' into fix/pip-minimise ... # Conflicts: # src/app/components/CallEmbedProvider.tsx	2026-10-18 23:40:18 -04:00
Lotus CI	b07eb35159	Merge remote-tracking branch 'origin/lotus' into fix/translate-unavailable-copy ... # Conflicts: # src/app/utils/translation/langUtils.ts	2026-10-18 23:37:54 -04:00
jared	04605f2680	Merge pull request 'ci: re-seed the bundle budget after the October audit fix batch' (#419) from ci/reseed-bundle-budget into lotus	2026-10-18 23:28:45 -04:00
Lotus CI	e4b2405a19	Merge remote-tracking branch 'origin/lotus' into fix/status-expiry-account-data ... # Conflicts: # src/app/pages/client/ClientNonUIFeatures.tsx # src/types/matrix/accountData.ts	2026-10-18 23:20:44 -04:00
Lotus CIandClaude Opus 5.5	bc7458ac99	ci: re-seed the bundle budget after the October audit fix batch ... The entry chunk on lotus (d7bc6d94) is 360238 bytes gzip, past the 358317 budget seeded in September, so every PR now fails Build & Quality Checks. The growth is ~40 merged fixes (call-state, status, notification, search and settings changes), not one regression. Re-seed per the file's rule: measured sizes +10% (total 1666894 → 1833583, largest 360238 → 396262). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-18 23:14:50 -04:00
Lotus CIandClaude Opus 5.5	6648ca928d	chore(call): pin element-call-embedded 0.25.0-lotus.25 (call_error / reconnect, #318) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-18 15:42:35 -04:00
Lotus CI	258ffc88be	Merge remote-tracking branch 'origin/lotus' into fix/call-disconnected-bar ... # Conflicts: # src/app/components/CallEmbedProvider.tsx	2026-10-18 15:39:59 -04:00
Lotus CIandClaude Opus 5.5	338b24c43f	chore(call): pin element-call-embedded 0.25.0-lotus.24 (frame audio outputs, #310) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-18 15:26:44 -04:00
Lotus CI	562198860f	Merge remote-tracking branch 'origin/lotus' into fix/audio-output-frame-ids	2026-10-18 15:24:58 -04:00
jared	d7bc6d94bb	Merge pull request 'fix(calls): explain when the soundboard is not allowed in a voice channel (EC #47)' (#415) from fix/soundboard-not-permitted into lotus	2026-10-18 11:24:49 -04:00
jared	9c3fdfff39	Merge pull request 'fix(calls): say when ML noise suppression fails or falls back; drop the spoofable listener (#260)' (#413) from fix/denoise-state-notice into lotus	2026-10-18 10:53:39 -04:00
jared	6191690389	Merge pull request 'docs: document the 55 features missing from LOTUS_FEATURES.md; refresh the Synapse re-check (#294)' (#412) from docs/features-catchup into lotus	2026-10-18 10:34:23 -04:00
jared	3845d2e4a8	Merge pull request 'fix(settings): desktop-only settings get their own Desktop section (#290)' (#411) from fix/desktop-settings-section into lotus	2026-10-18 10:18:09 -04:00
jared	4bfb51c5fe	Merge pull request 'fix(dev): ML noise suppression works on npm start; no lotusTheme warning per call (#293)' (#410) from fix/dev-denoise-theme into lotus	2026-10-18 09:59:52 -04:00
jared	72db4c110e	Merge pull request 'fix(pwa): the installed app can rotate, and "New Message" opens a new DM (#292)' (#408) from fix/pwa-manifest into lotus	2026-10-18 09:23:21 -04:00
jared	a02eda05cb	Merge pull request 'fix(translate): say why Translate did nothing (#287)' (#407) from fix/translate-feedback into lotus	2026-10-18 08:59:30 -04:00
jared	8a2d37b5a1	Merge pull request 'fix(desktop): without a tray, the first-close dialog defaults to Quit (cinny-desktop #37)' (#416) from fix/close-no-tray into lotus	2026-10-18 08:18:30 -04:00
jared	3f94d73c7a	Merge pull request 'fix(media): "Compress image" no longer blackens transparent images or freezes animations (#331)' (#399) from fix/compress-alpha-anim into lotus	2026-10-18 07:23:09 -04:00
jared	1b887de81d	Merge pull request 'fix(consent): a retry that fails again reopens the terms prompt (#311)' (#406) from fix/consent-retry-snooze into lotus	2026-10-18 06:51:24 -04:00
jared	1037d458f4	Merge pull request 'fix(privacy): "Remove Photo Metadata" also covers emoji/sticker packs and badges (#332)' (#405) from fix/strip-metadata-packs into lotus	2026-10-18 06:31:31 -04:00
jared	8a3b2eeb61	Merge pull request 'fix(previews): no genuine preview card for a site a deceptive link only pretends to be (#286)' (#404) from fix/preview-deceptive-links into lotus	2026-10-18 06:15:46 -04:00
jared	099ada5d18	Merge pull request 'fix(previews): a page can no longer pose as a YouTube (etc.) player via its og:url (#326)' (#403) from fix/embed-ogurl-provider into lotus	2026-10-18 05:54:22 -04:00
jared	80ef1179c9	Merge pull request 'fix(settings): valid HTML in setting tiles; start uploads in an effect (#291)' (#402) from fix/settingtile-nesting into lotus	2026-10-18 05:37:06 -04:00