4194 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jared	91f82d60e3	Merge pull request 'A stalled server no longer reads as "your clock is ahead"' (#251) from clock-skew-lag into lotus ... Merge pull request #251: a stalled server no longer reads as a wrong clock	2026-09-28 22:40:13 -04:00
Lotus CI	f0865115a4	Merge remote-tracking branch 'origin/lotus' into clock-skew-lag	2026-09-28 22:11:31 -04:00
jared	899e160aed	Merge pull request 'Offline outbox: unsent messages survive reload and retry (#112)' (#250) from offline-outbox into lotus ... Merge pull request #250: Offline outbox (#112)	2026-09-28 22:08:28 -04:00
Lotus CIandClaude Opus 5.5	3e5fdd0dab	test(e2e): clock-ahead warning needs a minute of samples (#158) ... "Ahead" is now reported only once it has held for a minute of fresh samples (a stalled server delivers late and reads as ahead). The test sends its ticks, checks nothing is shown yet, fast-forwards the page clock past a minute and sends two more. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-28 22:08:13 -04:00
Lotus CIandClaude Opus 5.5	bb569d69a2	fix: a stalled server no longer reads as "your clock is ahead" ... Incident 2026-09-29: the homeserver's host ran out of memory and stalled for ~2 minutes. The /sync that finally went out carried events whose `age` was computed ~30 s before it arrived, so every client showed "Your computer's clock is 30 seconds ahead of the server" while the real problem was the server (all host clocks were within 0.25 s the whole evening). The skew estimate was the median of the last 5 samples, and a sample is local skew + delivery delay, so one late /sync with a handful of events tripped it. - Estimate = the LOWEST sample of the last 5 minutes: delay only ever adds, so the fastest-delivered event is the truest. - "Behind" (which a delay can't cause) is reported as soon as there are 3 samples, like before. "Ahead" must hold across samples received at least a minute apart, so a single late burst never trips it. - Samples are aged on the monotonic clock, and a change of the local clock (someone fixing it) resets the measurement, so the warning clears at once. - Only events stamped by our own homeserver are sampled: a federated event's origin_server_ts is the other server's clock. - Wording: "This device's clock is … Voice calls and encrypted messages can fail until it's corrected." / call bar "Device clock … : calls may fail" (was "will fail"). Unit tests: the incident (late burst after normal traffic, and a fresh client whose first samples are all late), mixed slow/fast deliveries, ahead only after a minute, behind at once, hysteresis, clock fixed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-28 21:40:02 -04:00
Lotus CIandClaude Opus 5.5	02d86caeb0	feat: offline outbox — unsent messages survive reload and retry (#112) ... Until now a send that failed (offline, homeserver down, a blip) went straight to "Failed to send": nothing retried it, and a reload dropped it without trace (chronological pending ordering keeps local echoes in memory only). - Outbox (utils/outbox.ts + features/outbox/OutboxFeature): own message sends (text, stickers, reactions, polls; not call signalling or redactions) are mirrored to localStorage from their first local echo until the server confirms them or the user cancels. - After a reload they come back as local echoes via room.addPendingEvent, same shape as the SDK's own. Recent ones (< 1 h) are sent again with the same txnId; older ones come back as "Failed to send" for the user to retry or cancel. Ones the server already has (transaction id seen in /sync) are dropped, so no duplicates. - Retries: network failures (ConnectionError, 408/429/5xx) are re-sent when the connection returns (sync recovers or the browser goes back online), and after a blip while online (5 s, backing off, max 10 per message). Oldest first, in order per room. 4xx / consent / encryption failures are left to the user. - UI: a network failure while offline shows a clock, "Queued. Will send when you're back online" (thread view too), not the red ✕. The ✕ is now a button: click to retry. - Logout wipes the outbox with the other plaintext caches (the content is decrypted, like drafts). Tested end to end against a local Synapse (Chromium): offline → queued → sent once on reconnect; homeserver unreachable → queued → sent once; failed send → reload → sent once and shown once; server accepted but response lost → reload → no duplicate; 2 h old entry → failed, not sent, click ✕ → sent; cancel → gone after reload; encrypted room → restored message goes out as m.room.encrypted with no plaintext and decrypts; one-off failure retried by itself in ~5 s; no page errors. Unit tests for the pure parts; Playwright 20 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-28 21:02:45 -04:00
jared	c0c93213c1	Merge pull request 'Desktop: Lotus links use the public web app and open in-app (#248)' (#249) from desktop-lotus-links into lotus ... Merge pull request #249: Desktop Lotus links use the public web app (#248)	2026-09-28 19:53:20 -04:00
Lotus CIandClaude Opus 5.5	1ea6987083	fix(desktop): Lotus links use the public web app, and open in-app (#248) ... Lotus permalinks (#130) were built from window.location.origin. In the desktop app that's the local tauri-plugin-localhost server (hash-routed), so "Copy Lotus Link" copied e.g. http://localhost:…/#/home/!room…, which works for nobody else. And the link recogniser only knew that local base, so a real https://chat.lotusguild.org/home/… link in a message opened the browser instead of the room. - useLotusShareBase: in the desktop app, links for other people use config `webAppUrl` (https only, set by cinny-desktop #23) in web path-routing form; otherwise the origin, as before. Used by "Copy Lotus Link" on messages, the space menu and space tabs. - The recogniser accepts several bases: the origin, plus `webAppUrl` in the desktop app. - The web app is unchanged. Verified with a simulated desktop (Tauri bridge + webAppUrl) against a local Synapse. Copied links are https://chat.lotusguild.org/home/<room>/<event> and https://chat.lotusguild.org/<space>. A public link in a message renders as the room pill and clicking it opens the room in-app, with nothing sent to the system browser. The web app still copies origin links. Unit tests for the base selection; Playwright 20 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-28 19:39:48 -04:00
jared	be8e49a2bb	Merge pull request #247: readable poll card (#246)	2026-09-27 23:28:48 -04:00
Lotus CIandClaude Opus 5.5	1e217592fc	fix(polls): readable poll card: counts, visible bars/indicators, no chip overflow (#246) ... Rendering only; the vote logic (tally, optimistic votes, end poll, keyboard radiogroup, voters) is unchanged. - Every row shows "N votes · P%". Multiple choice looked broken as "100% / 100%" with no counts; the footer now says "voters" there. - Results are a thin progress bar under each answer: accent for your pick, success for the winner, neutral otherwise. The old full-row fill was the same grey as the row, so a 100% answer just looked disabled. - Radio and checkbox indicators are 18px with a 2px border in a colour mixed from the theme's text colour. Primary.ContainerLine was nearly invisible, especially in dark themes. - The winner shows a star and "Winner" instead of a second check mark. - Bordered card, 460px wide (max 100%, same width for every poll). The header is now "Poll · Single choice | Pick up to N | Results hidden until the end | Final results", replacing the letter-spaced "◉ POLL · …" line. - Footer: plain muted text that wraps, and chips ("Who voted", "End poll") that never wrap. Previously the chip label broke onto two lines inside a one-line chip and spilled out of it. Reproduced before/after in Lotus Terminal at 150% zoom, a 360px phone, and dark at 125%. - Lotus Terminal theme: data-winner gets its own green border rule. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-27 23:18:25 -04:00
jared	ffe1d5a81e	Merge pull request #245: desktop without WebRTC offers "Open in browser"	2026-09-27 17:10:50 -04:00
Lotus CIandClaude Opus 5.5	fff583fca5	feat(call): desktop without WebRTC offers "Open in browser" instead of a dead end ... The Linux desktop app runs on WebKitGTK, which ships without WebRTC (2.52 has no RTCPeerConnection; 2.54 disables it outright pending a libwebrtc backend around 2.56), so calls can't work there. Until now the call button just disappeared, the call room said "Your browser does not support WebRTC" with Join disabled, and an incoming call couldn't be answered. In the desktop app (isTauri) without WebRTC: - call rooms: "Calls aren't available in the desktop app on Linux yet: its web engine has no WebRTC" + an "Open in browser" button; - incoming-call overlay: the same, with "Answer in browser"; - room header: the call button stays, and opens the room in the browser. The link is the room in the web app (config.json `webAppUrl`, https only, new key); the user presses Join there. Deliberately not an auto-join link: a crafted URL must not be able to join a call and open someone's mic. It opens through the desktop's new-window handler (web/mail schemes only → the system browser). Without `webAppUrl` the explanation shows with no button; browsers without WebRTC keep the old message. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-27 16:54:29 -04:00
jared	e2b23397bd	Merge pull request #244: screenshare stays on the call bar in Firefox/Safari (#43)	2026-09-27 13:54:11 -04:00
Lotus CIandClaude Opus 5.5	b929cbf74b	chore(call): pin element-call-embedded 0.25.0-lotus.22 (#43) ... lotus.22 draws the "Share your screen?" prompt inside the call frame on request and drops the corner button. Verified against the published package: no-delegation (Firefox path) cross- and same-origin — bar button, in-frame prompt, Cancel, Share → screenshare tracks, bar Stop; Chromium unchanged; picture-in-picture prompt fits and Share works; room policy hides the button and refuses the prompt. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-27 13:32:45 -04:00
Lotus CIandClaude Opus 5.5	8520de232d	feat(call): screenshare stays on the call bar in Firefox/Safari via the in-frame prompt (#43) ... With a fork that reports `screensharePrompt` (element-call lotus-screenshare- prompt), the call bar and status bar keep their screenshare button on every engine. Where the click can't be delegated, starting asks the fork to show "Share your screen?" inside the call frame (io.lotus.prompt_screenshare) instead of our own confirm; its Share click starts the share. Stopping works from the bar as before (no click needed in the frame). Chromium is unchanged. - useScreenshareMode: hidden (older fork's corner button) | prompt | direct. - The room's call policy is also pushed to the fork in prompt mode, so the prompt never opens where sharing is forbidden. - Picture-in-picture: the "Return to call" overlay covers the frame; while the fork reports the prompt open it lets clicks through to it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-27 12:48:12 -04:00
jared	773e41311e	Merge pull request #243: optional Element Call origin via config.json elementCallUrl (#43)	2026-09-27 02:24:47 -04:00
Lotus CIandClaude Opus 5.5	da78bff316	chore(call): pin element-call-embedded 0.25.0-lotus.21 (#43) ... lotus.21 checks widget messages against the host's origin (works same- and cross-origin) and accepts soundboard clip bytes. Same-origin behaviour is unchanged; verified against the published package: join, both screenshare paths, PTT/deafen in the frame, layout/reactions/settings, speaking and mic level, soundboard, avatars, muted-speech warning, per-person volume, and the foreign-frame spoof stays blocked. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-27 02:05:18 -04:00
Lotus CIandClaude Opus 5.5	4dcc5176e2	feat(call): optional Element Call origin via config.json elementCallUrl (#43) ... Groundwork for serving the call page from its own origin (call.chat.lotusguild.org). Inert until config.json sets `elementCallUrl`: without it the bundled same-origin page is used exactly as today. - callPageUrl: resolves `elementCallUrl` — absolute https only (http only on localhost for development); anything else, and the desktop app, fall back to the bundled page so a bad value can't break calls. Set once from the loaded client config. - CallEmbed builds the widget URL from it; the widget origin (used by the message guard and Capability Delegation) follows automatically. - Soundboard: a host blob: URL can't be fetched from another origin, so io.lotus.inject_audio now also carries the clip's bytes (`audio`). Forks that predate it ignore the field and use `url`, so this is safe on the released fork. Needs element-call's lotus-call-origin branch (host-origin message check + inject_audio bytes) released and pinned before `elementCallUrl` is set. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 23:24:24 -04:00
Lotus CIandClaude Opus 5.5	df395776b4	fix(security): widget API only accepts messages from the widget's own frame ... matrix-widget-api's host transport handled a message from ANY window on the page as long as it carried the widget's id; its strictOriginCheck only compares with the host's own origin and is off by default. The call's id is the fixed 'call-embed', so any other frame (a room widget, a URL-preview embed) could post fromWidget actions as the call. Reproduced locally: an opaque-origin frame posting one io.lotus.hotkey keydown for the PTT key turned a push-to-talk user's mic on ("● Live"). restrictWidgetMessages() swaps each ClientWidgetApi transport's listener for one that requires ev.source === the widget iframe's window and ev.origin === the widget's origin. Applied to the call and to room widgets (so one widget can't impersonate another). Verified: the spoof no longer opens the mic; PTT/deafen from inside the call, screenshare, speaking indicator and room widgets (capability prompt, send, live events) unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 22:22:57 -04:00
Lotus CIandClaude Opus 5.5	49dec686f1	feat(call): screenshare from inside the frame where delegation is missing; host stops reading the call frame (#43) ... Firefox, Safari and the WebKitGTK desktop app can't hand the user's click to the call frame (no Capability Delegation), and getDisplayMedia needs it. The host used to click EC's hidden footer button through the DOM instead, which dies with same-origin. Now (pins element-call-embedded 0.25.0-lotus.20): - those engines get `lotusFrameScreenshare`, the fork shows EC's own screenshare button in the frame, and the call bar and status bar hide theirs once controls_state reports `frameScreenshare`; the screenshare-audio mute stays; - the room's call policy is pushed with io.lotus.set_frame_screenshare, so the frame button hides where the server would refuse a share, like ours; - Chromium keeps the delegated io.lotus.set_screenshare from the host bar. Removed the fallbacks for forks older than lotus.14, which read or clicked EC's DOM: the screenshare/layout/settings/reactions/leave button lookups and their MutationObservers, the frame-window hotkey binding, and the speaking/muted tile scrape in useCallSpeakers (io.lotus.call_state is the only source now). getCallDocument is gone; the host's only handle on the frame is postMessage. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 22:04:54 -04:00
Lotus CIandClaude Opus 5.5	ba48e95993	feat(media): Media Gallery includes media posted in threads (#165) ... The SDK routes thread replies out of every room timeline set, the gallery's detached one included, into the room's Thread objects, so photos posted in a thread never reached the gallery. The gallery now merges media from the loaded threads (deduped, newest first) and refreshes on ThreadEvent.NewReply, waiting for decryption in encrypted rooms. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 19:31:10 -04:00
Lotus CIandClaude Opus 5.5	a8db61f79f	fix(threads): viewing a room no longer marks threads you follow read (#217) ... markAsRead ran on every room visit (timeline at the bottom and focused) and sent a threaded receipt for every unread thread, so a reply in a thread you started or replied in lost its unread badge the moment you glanced at the room, without opening the thread. Reads from just viewing the timeline are now "passive": - threads you follow (started, replied in, or were mentioned in) stay unread until their panel is opened; other threads are still cleared so they don't keep the room dot lit forever; - while a followed thread has an unread reply, the main receipt is scoped to the main timeline instead of unthreaded, because an unthreaded receipt also reads every older thread reply (the next main message would clear the thread anyway). The check also asks whether the latest reply is read, since the thread's count lags when the reply and a main message share a sync; - the thread open in the panel is skipped, as the panel sends its own receipt (was two identical receipts per reply). Explicit "mark as read" (room menu, Escape, bulk actions) still clears everything. Unit tests for each rule plus a local-homeserver e2e that checks the server's per-thread count survives a reply + newer main message. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 19:31:00 -04:00
Lotus CIandClaude Opus 5.5	f5d3c43b6c	fix(viewer): thread media steps through the thread; add Copy image (#164) ... Thread images opened the room media lightbox, which looks the event up in the room's detached media timeline. Thread replies never reach that timeline, so a thread image always showed "1 / 1" with no prev/next, after paging the room's media up to six times. The thread panel now builds the viewer's items from its own root + loaded replies, and "Go to message" scrolls the thread panel instead of the room. The viewer gains a "Copy image" button: fetches the displayed media (blob URL for E2EE, authenticated URL otherwise), re-encodes to PNG when needed, and writes it via ClipboardItem with a promise so Safari keeps the click's user activation. Hidden where ClipboardItem is missing. No "open in new tab": an E2EE blob URL is revoked when the viewer closes and authenticated media 401s in a bare tab. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 19:02:49 -04:00
Lotus CIandClaude Opus 5.5	502b9dfd83	feat(call): stop injecting CSS and key listeners into the call frame (#43) ... Pins @lotusguild/element-call-embedded 0.25.0-lotus.19. - Styles: the fork now hides its own footer (`lotusHostControls=1`) and sets its root color-scheme from the theme, so the host no longer injects `#lotus-ec-styles` or sets inline styles on EC's DOM. The two other injected rules matched nothing in EC 0.25 (dead). The transparent background was already the fork's (`lotusTransparent`). - Hotkeys: PTT / deafen keys pressed with focus inside the call frame now arrive as `io.lotus.hotkey` (the host sends the codes via `io.lotus.set_hotkeys`), instead of listeners on the frame's window. The window binding stays only for a fork that doesn't report `hotkeys`. - Fixes (with lotus.19): pressing the deafen key M with focus in the call also hit EC's own "M = toggle mic" shortcut, so the first press turned the mic ON instead of deafening — even in push-to-talk mode. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 14:35:44 -04:00
Lotus CIandClaude Opus 5.5	024edbf546	feat(call): screenshare over the widget API with Capability Delegation (#43) ... The call bar's Start/Stop Screenshare no longer clicks EC's hidden button on Chromium (incl. WebView2): it sends io.lotus.set_screenshare with postMessage `{ delegate: "display-capture" }` inside the user's click, so the frame can call getDisplayMedia on engines that require the click. matrix-widget-api has no postMessage options, so its sendInternal is swapped for that one synchronous send; delegation needs the frame's real origin, not `*`. Firefox, Safari and WebKitGTK (Linux desktop) have no delegation and still click EC's button (needs same-origin, which is still on). Gated on the fork reporting `screenshareAction` in controls_state. Pins @lotusguild/element-call-embedded 0.25.0-lotus.17. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 13:27:42 -04:00
Lotus CIandClaude Opus 5.5	ba5b1ffe7d	feat(embeds): fallback for hung embeds and deleted X posts (#200) ... Probed how real providers fail before picking signals: - X renders an EMPTY frame for a deleted/private/suspended post and says so only via postMessage `twttr.private.no_results`. The post embed now swaps to "This post isn't available…" with an "Open on X" link. - A hung frame never fires `load`. After 20 s every player (media, rich posts, TikTok, Steam widget, X) overlays "This embed is taking too long to load" with Retry (remounts the iframe) and "Open on <site>". A late `load` clears it. - Instagram and Bluesky show their own "removed / not found" page, and a refused request still fires `load` (browser error page), so neither needs or can use a guess. A missing height message is not treated as failure. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 11:54:16 -04:00
Lotus CIandClaude Opus 5.5	1b5e6a37f5	fix(a11y): stable reaction labels — emoji glyph, custom emoji shortcode (#179) ... The reaction button's aria-label used getShortcodeFor(), which returns undefined until the lazily loaded emoji data arrives. The same button read "🎉 reaction, 1 person" on first render and "tada reaction, 2 people" after any later re-render. It now always uses the emoji itself (screen readers speak it by its proper name, e.g. "party popper"). Custom (mxc) emoji were labelled just "custom emoji"; they now use the shortcode carried on the reaction event (":lotus_blob: reaction"). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 11:34:03 -04:00
Lotus CIandClaude Opus 5.5	52d94058cf	fix(decorations): drop clyde_invaders (Discord Clyde artwork) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 00:21:19 -04:00
Lotus CIandClaude Opus 5.5	e6388fe294	fix(decorations): drop warp_helmet (Clyde-visor design) ... Same Discord Clyde-visor artwork as the helmets excluded in 78b1a2ff. Anyone who had it equipped now shows no decoration: the slug no longer passes isValidDecorationSlug. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-26 00:10:45 -04:00
Lotus CIandClaude Opus 5.5	78b1a2ff6f	feat(decorations): 530 new avatar decorations, thumbnail-first picker ... Adds 530 decorations in 19 new categories (631 total). Decorations that contain Discord branding (the Clyde-visor helmets) are excluded. The decorations are ~1 MB animated PNGs, so a picker that rendered every one would pull ~590 MB while scrolling. The picker now: - shows static 144px WebP thumbnails (~9.5 KB each, `thumbs/` on the CDN) and loads the animated file only on hover, focus or selection, with a fallback to the full file if a thumbnail is missing; - mounts one category at a time behind tabs, plus a name search across all categories. scripts/makeDecorationThumbs.py builds the thumbnails from the busiest frame of each animation (many start on an empty frame). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 23:50:12 -04:00
Lotus CIandClaude Opus 5.5	4323babfb9	fix(composer): a fully typed user ID + Enter sends as typed ... d2503332 made Enter pick the mention suggestion, which also caught "/kick @alice:server" + Enter (the e2e "/kick failure is reported" test): typing a complete ID opens the mention list too, and Enter picked it instead of running the command. Enter now picks only while a partial name is being typed (no ':' in the query); a complete @user:server or #alias:server sends as typed, like before. Chromium e2e 19 passed; "@bo" + Enter still picks, ":smi" + Enter still sends. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 18:20:04 -04:00
Lotus CIandClaude Opus 5.5	d250333290	fix(composer): Enter picks the @-mention / #room / command suggestion ... With the mention list open, pressing Enter sent the half-typed text ("hey @bo") instead of inserting the highlighted person — found while investigating the "composer hit a snag" report; only Tab picked. Enter now picks the top suggestion for people, rooms and commands, as in Discord, Slack and Element. useAutocompleteEnter listens in the window capture phase (so it runs before the composer's submit handler) and only while the list has suggestions — with no command match Enter still sends. Emoji suggestions are deliberately left on Tab only, so "lol :p" + Enter still sends rather than inserting an emoji. IME composition and Shift/Ctrl+Enter are untouched. Tab now inserts the member's display name, same as a click. Verified: "@bo" + Enter inserts the mention and sends nothing; the next Enter sends "hey @bob hi" with m.mentions; ":smi" + Enter still sends. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 18:13:47 -04:00
Lotus CIandClaude Opus 5.5	4c9af57a97	fix(composer): recover silently from a composer render error; capture details ... Reported on chat.lotusguild.org: picking a name from the @-mention list showed "The message composer hit a snag." — clicking OK continued with the draft intact. The composer's known failure mode is a transient render error right after an autocomplete insert (slate-react's DOM selection sync racing the model; 477df4ae fixed one such path). It did not reproduce locally in 60 attempts (click / Enter / Tab, fast and slow, display names with spaces and emoji, Chromium and WebKit), so this makes it harmless and diagnosable: - ComposerErrorBoundary: the first failure clears the selection and remounts the composer immediately, with no notice (the draft is intact). A second failure within 5 s shows the notice, now saying the draft is safe, with "Reload composer" and "Copy details" (time, error, stack, component stack, browser). Every failure is logged to the console as "[composer] render error". - Used for the room composer and, newly, the thread panel composer (which had no boundary, so the same error took the whole panel down). Verified with a temporary injected crash (not committed): one crash recovers with the draft kept and no notice; two within 5 s show the notice, Copy details copies the report, Reload composer restores the full draft. Chromium e2e 19 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 18:08:33 -04:00
Lotus CIandClaude Opus 5.5	afd14719ef	fix(settings): say when GIF search isn't set up instead of a dead switch ... The GIF button needs a Giphy key in the client config. Without one (the desktop app until now), switching "GIF Picker" on did nothing and nothing said why. With no key the tile now explains it and the switch is disabled; with a key it is unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 15:50:22 -04:00
jaredandClaude Opus 5.5	7c26268e38	Merge pull request 'Seasonal: Halloween redesign (#239), needs human approval' (#242) from seasonal/halloween into lotus ... Merge seasonal/halloween: Halloween redesign (#239), approved by Jared Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 15:33:53 -04:00
Lotus CIandClaude Opus 5.5	fda6e0f74e	feat(seasonal): Halloween — more going on: wisps, a witch, a swarm (#239) ... Jared felt the first redesign was too sparse for a full theme: most of the time only two webs and a spider were on screen. - Will-o'-the-wisps: six soft green/orange glows wandering and pulsing, always present while animating (not in the still scene, where static glows would sit on text). - A witch on a broom crosses just below the header about once a minute (redrawn so she reads as a seated figure, not a blob). - Bats every 20 s (was 30), plus a faster swarm of eight every 60 s. - The big spider now climbs up its thread and drops back with a bounce. - A second, small spider on the left web; a tiny jack-o'-lantern with a flickering candle hangs by the right web (desktop). Rendered and inspected at the witch/swarm moments in light, dark and phone, plus reduced; still 60 fps on vs off. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 15:17:33 -04:00
Lotus CIandClaude Opus 5.5	14731f2229	feat(seasonal): Halloween redesign — webs, a spider, bats, a ghost; no tint (#239) ... Draft for human review (#239 must be approved and closed by a human). - Removed the full-screen purple wash, fog and the blurred green "moon" that sat over the member list and made it unreadable. - Corner cobwebs (generated radial threads + sagging rings), thin and readable in both themes, smaller on phones. - A spider on a thread in the empty space under the member list (near the top on phones), bobbing and swaying. - Every 30 s a group of four bats flaps across the top of the screen (a real bat silhouette; wing beat without flattening them into dashes). - Every 50 s a small, see-through ghost rises and fades (outlined so it shows on light themes; text stays readable through it). - Theme-aware ink via --hw-ink/--hw-web: dark silhouettes on light themes, pale dusk-violet on dark ones. - Reduced motion: webs and the spider at rest. Settings swatch: night sky, crescent moon with a bat across it, a corner web. Rendered and inspected: light/dark/phone at the bat and ghost moments, reduced on desktop and phone, the Settings swatch; 60 fps on vs off. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 14:50:35 -04:00
Lotus CIandClaude Opus 5.5	6bb3f2af27	perf: load the QR libraries only for device verification (bundle budget) ... The main chunk had crept to 356.9 kB gzip against a 349.9 kB budget (a hard gate on pull requests, only a warning on pushes, so it went unnoticed until PR #241). jsQR (camera scanning) and qrcode (drawing the QR) were statically imported by the device-verification components, so every startup loaded them. Both are now dynamic imports: jsQR when the scanner opens (fetched in parallel with the camera permission), qrcode when a QR is drawn. Main chunk 356.9 → 302.5 kB gzip (largest chunk is now matrix-sdk at 304.7 kB, within budget); chromium e2e 19 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 14:33:24 -04:00
jaredandClaude Opus 5.5	27c6dacc60	Merge pull request 'Seasonal: Autumn redesign (#237), needs human approval' (#241) from seasonal/autumn into lotus ... Merge seasonal/autumn: Autumn redesign (#237), approved by Jared Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 14:29:08 -04:00
Lotus CIandClaude Opus 5.5	3e132069c0	feat(seasonal): Autumn pass 2 — no tint, a gust, a real preview (#237) ... Draft for human review (#237 must be approved and closed by a human). - Removed the full-screen amber wash, sun-shaft bands and vignette: they turned the user's theme beige (muddy brown on dark) and lowered contrast everywhere. The leaves carry the season on their own. Also removed the dust motes (invisible specks) and the now-unused keyframes. - Gust: every 42 s (first ~8 s after load) five leaves blow across the screen together, rising and spinning, in ~5 s. Linear timing — an eased curve is applied per keyframe segment and made them hang mid-air for a second. - Softer flutter (leaves flattened into slivers mid-flip), stronger leaf colour (opacity 0.58–0.73, less pale gold tip), brighter on dark themes. - Reduced motion on phones: no icon rail there, so the resting leaves tuck further off-edge and smaller instead of landing on the timeline icons. - Settings swatch: new optional `preview` prop on seasonal overlays; Autumn draws a warm backdrop with arranged leaves (the reduced scene rendered in the tile as a black square with two edge fragments). Rendered and inspected: light/dark/phone at 10/15/20 s, reduced on desktop and phone, gust tracked frame by frame, the Settings swatch; 60 fps with the theme on vs off (p95 frame 16.7 ms both). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 13:58:15 -04:00
Lotus CIandClaude Opus 5.5	e080059f37	feat(seasonal): Autumn: leaves actually fall; real leaf shapes and palette (#237) ... Draft for human review (#237 must be approved and closed by a human). - Bug: every falling leaf sat in a leaf-sized wrapper pinned at the top of the screen with `contain: layout paint style`. Paint containment clips children to that box, so a leaf stopped being drawn as soon as it fell out of its first ~40 px: the animated theme showed almost nothing while the DOM reported 10–16 leaves on screen. Now `contain: layout style`. - Leaf shapes: a flag-style maple (bold lobes, stem) that stays recognisable at 30 px (the old outline read as a star/splat), an oak with a stem, and an aspen; gradient body with darker veins. - Palette: crimson, pumpkin orange, gold, russet, burnt orange (was muted tans that read as beige on the light theme). - 12 leaves at 28–52 px, opacity 0.5–0.65 so text under a passing leaf stays readable; brightened on the dark themes, where they sank into the wash. - Reduced motion: resting leaves moved into empty layout areas (middle of the left rail, under the member list), partly off-edge, instead of on the sidebar, members, composer and corner controls. Rendered and inspected at 10/15/20 s in light, dark, phone and reduced motion (screenshots on #237). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 13:36:13 -04:00
Lotus CIandClaude Opus 5.5	75951f9040	feat(search): in:, before:/after:, has:, is:pinned operators (#106) ... Typed operators alongside the existing from:, each one setting the filter the buttons already set (so typing and clicking end in the same state, shown in the filter bar): in:general in:"voice lounge" room by name / alias / id (unique partial name ok); a room outside this page's scope switches to all rooms after:2026-09-01 before:7d date range; relative h/d/w/m/y has:link | image | video | file contains-link / media filters is:pinned pinned-only filter - searchOperators.ts: pure parser + room resolver (unit-tested); quoted values; keys case-insensitive; only at a word start, so URLs and times aren't mistaken for operators; anything it doesn't understand stays in the searched text with a notice listing the valid operators. - Notices: no matching room; operators with no words or from: ("Add a word to search for, or a from:@user.") — then the text is kept in the box. - from:bob now resolves to a known @bob:server (this homeserver first); the old path sent "@bob", which matched nobody unless picked from autocomplete. Verified in Chromium on a local Synapse: `raid in:"Thread Lab" from:bob` sets rooms=!…Thread Lab, senders=@bob:localhost and finds bob's message; dates, an unknown room, operators-only and has:gif give the expected params and notices. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 12:54:10 -04:00
Lotus CIandClaude Opus 5.5	06bb896a00	chore(deps): element-call 0.25.0-lotus.16 (#146) ... io.lotus.mic_level for the mute-button level meter. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 12:14:29 -04:00
Lotus CIandClaude Opus 5.5	3449338b3e	feat(call): mic level meter on the mute button (#146) ... While unmuted, the microphone button (call view and the bottom call bar) shows three small green bars in the icon's corner driven by the fork's io.lotus.mic_level (element-call v0.25.0-lotus.16), so you can see the mic is actually picking you up. Nothing is drawn while muted or silent; the button's label is unchanged (the bars are decorative). Your own name no longer appears in the "… is speaking" line: that is now for everyone else, and your voice is on the meter. Avatar speaking rings still include you, and the "You're muted" talking-while-muted notice is unchanged. Verified in a local call with a fake-tone mic: data-mic-level cycles 3/2/1 with the tone on both buttons, disappears on mute and returns on unmute; the status line reads "bob is speaking..." only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 12:09:34 -04:00
Lotus CIandClaude Opus 5.5	75d55e861b	feat(composer): offer to format pasted code as a code block (#107) ... When a multi-line paste looks like code, a chip above the composer asks "That looks like code. Format it as a code block (js)?" with Format as code / No thanks. It never converts on its own; typing, No, or 8 s dismiss it, and Settings → Editor → "Offer to Format Pasted Code" turns it off. - utils/looksLikeCode.ts (pure, tested): ≥ 3 lines and ≥ 2 of indentation with depth changes, statement terminators, operators + brackets, keywords, monospace/<pre> clipboard HTML, or SQL clause lines. Prose guards: quoted replies, URL lists, long sentence-punctuated lines, plain-word lines, markdown lists. Language guess only when fairly sure (js/ts/python/sql/ rust/c/php). - Accept rebuilds the pasted paragraphs as one code block from their plain text (code lines hold text only) and leaves the caret after it. - Code blocks carry an optional lang → <code class="language-js"> (whitelisted identifier only). Verified in Chromium: pasting a JS function shows the chip; Format as code → sent formatted_body is <pre><code class="language-js"> with indentation intact; a three-line prose paste shows no chip; typing after a paste dismisses it. Unit tests: 14 detector fixtures + 2 output tests; chromium e2e 19 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 11:05:49 -04:00
Lotus CIandClaude Opus 5.5	e91b5fe10e	chore(deps): element-call 0.25.0-lotus.15 (element-call #36) ... Each person's call volume is now remembered across calls, reloads and reconnects (per Matrix user, local only). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-25 10:09:12 -04:00
Lotus CIandClaude Opus 5.5	1ab7514741	fix(a11y): open a message image from the keyboard (#164) ... Timeline images were focusable (tabIndex 0) but only opened on click, so a keyboard user could Tab to one and do nothing with it, and screen readers heard a plain image. They are now role="button" labelled "View image: <name>" and open the viewer on Enter or Space. Focus already returns to the image when the viewer closes (checked for mouse and keyboard). Verified in Chromium: Tab → Enter opens the viewer, Escape returns focus to "View image: red.png", Space opens it again; chromium e2e suite 19 passed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-24 23:39:43 -04:00
Lotus CIandClaude Opus 5.5	2b1f4ee5bc	feat(threads): "View Thread (N replies)" on a thread's root message (#165) ... The SDK gives a thread root its own id as threadRootId, so the `!isThreadedMessage` guard hid the thread action on exactly the message that has a thread; the "N replies" chip was the only way in. Roots now get the action in both the hover bar and the ⋮ menu, labelled "View thread" / "View Thread (14 replies)" with the thread icon; other messages keep "Reply in Thread". Same handler, which opens the thread panel. Verified in Chromium: on a 14-reply root both entries show and open the panel; an ordinary message still shows "Reply in thread". Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-24 22:35:39 -04:00
Lotus CIandClaude Opus 5.5	b71f9c95c6	fix(emoji): flags render on Windows; "Twitter emoji" works again ... Windows' emoji font has no flag glyphs, so 🇺🇸 (:flag_us:) showed as the letters "US". Two fixes: - A TwemojiFlags @font-face over the bundled Twemoji file, limited by unicode-range to the regional-indicator letters (U+1F1E6–1F1FF), is put in the font stack on Windows only. Every other emoji stays native, other platforms keep their own flags, and the file is fetched only when a flag is on screen. - The Appearance font setting overwrote --font-secondary with a stack that had no emoji families at all, so neither this nor the existing "Twitter emoji" switch reached message text. The font map now keeps var(--font-flags), var(--font-emoji) before the generic family. Verified in Chromium via CDP platform fonts: with a Windows user agent 🇺🇸 is drawn by "Twemoji Mozilla" while 😀 stays on the system emoji font; with a Linux user agent both stay native. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-24 22:33:23 -04:00
Lotus CIandClaude Opus 5.5	c0e8334f03	chore(deps): element-call 0.25.0-lotus.14 (#43) ... Layout / settings / reactions over the widget API plus the io.lotus.controls_state report the call bar now uses. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA	2026-09-24 22:24:06 -04:00