chore(deps): update dependency vite to v6 [security]

2026-05-12 11:45:11 +00:00
841 changed files with 16435 additions and 65952 deletions
@@ -1,15 +0,0 @@
 {
  "defaultHomeserver": 0,
  "homeserverList": ["matrix.lotusguild.org"],
  "allowCustomHomeservers": false,
  "featuredCommunities": {
    "openAsDefault": false,
    "spaces": [],
    "rooms": [],
    "servers": []
  },
  "hashRouter": {
    "enabled": false,
    "basename": "/"
  }
 }
@@ -1,17 +0,0 @@
 {
  "defaultHomeserver": 0,
  "homeserverList": [
    "matrix.lotusguild.org"
  ],
  "allowCustomHomeservers": false,
  "featuredCommunities": {
    "openAsDefault": false,
    "spaces": [],
    "rooms": [],
    "servers": []
  },
  "hashRouter": {
    "enabled": false,
    "basename": "/"
  }
 }
@@ -1 +0,0 @@
 VITE_APP_VERSION=lotus
@@ -0,0 +1,2 @@
 experiment
 node_modules
@@ -0,0 +1,72 @@
 module.exports = {
  env: {
    browser: true,
    es2021: true,
  },
  extends: [
    "eslint:recommended",
    "plugin:react/recommended",
    "plugin:react-hooks/recommended",
    "plugin:@typescript-eslint/eslint-recommended",
    "plugin:@typescript-eslint/recommended",
    'airbnb',
    'prettier',
  ],
  parser: "@typescript-eslint/parser",
  parserOptions: {
    ecmaFeatures: {
      jsx: true,
    },
    ecmaVersion: 'latest',
    sourceType: 'module',
  },
  "globals": {
    JSX: "readonly"
  },
  plugins: [
    'react',
    '@typescript-eslint'
  ],
  rules: {
    'linebreak-style': 0,
    'no-underscore-dangle': 0,
    "no-shadow": "off",
    "import/prefer-default-export": "off",
    "import/extensions": "off",
    "import/no-unresolved": "off",
    "import/no-extraneous-dependencies": [
      "error",
      {
        devDependencies: true,
      },
    ],
    'react/no-unstable-nested-components': [
      'error',
      { allowAsProps: true },
    ],
    "react/jsx-filename-extension": [
      "error",
      {
        extensions: [".tsx", ".jsx"],
      },
    ],
    "react/require-default-props": "off",
    "react/jsx-props-no-spreading": "off",
    "react-hooks/rules-of-hooks": "error",
    "react-hooks/exhaustive-deps": "error",
    "@typescript-eslint/no-unused-vars": "error",
    "@typescript-eslint/no-shadow": "error"
  },
  overrides: [
    {
      files: ['*.ts'],
      rules: {
        'no-undef': 'off',
      },
    },
  ],
 };
@@ -1,118 +0,0 @@
 name: CI
 on:
  push:
    branches: [lotus]
  pull_request:
    branches: [lotus]
 jobs:
  build:
    name: Build & Quality Checks
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version-file: '.node-version'
          cache: npm
      - name: Install dependencies
        # Harden against transient registry network failures (ECONNRESET etc.):
        # raise npm's built-in fetch retries/timeouts and retry `npm ci` up to
        # 3 times with backoff before failing the build.
        run: |
          npm config set fetch-retries 5
          npm config set fetch-retry-mintimeout 20000
          npm config set fetch-retry-maxtimeout 120000
          npm config set fetch-timeout 600000
          for attempt in 1 2 3; do
            echo "npm ci attempt $attempt…"
            npm ci && break
            if [ "$attempt" = "3" ]; then
              echo "npm ci failed after 3 attempts" >&2
              exit 1
            fi
            echo "npm ci failed; retrying in $((attempt * 15))s…" >&2
            sleep $((attempt * 15))
          done
      # ── Critical gate — if this fails, nothing deploys ──────────────────
      - name: Build
        run: npm run build
        env:
          NODE_OPTIONS: '--max_old_space_size=4096'
          VITE_APP_VERSION: ${{ github.sha }}
      # Unit tests are a hard gate too — deterministic pure-logic tests on Node's
      # built-in runner via tsx (no vitest — Vite 8 is ahead of vitest's range).
      # A failure blocks the deploy.
      - name: Unit tests
        run: npm test
      # ── Quality checks (informational — pre-existing issues exist) ───────
      - name: TypeScript
        run: npm run typecheck
        continue-on-error: true
      - name: ESLint
        run: npm run check:eslint
        continue-on-error: true
      - name: Prettier
        run: npm run check:prettier
        continue-on-error: true
      # ── Security ─────────────────────────────────────────────────────────
      - name: Audit (high/critical)
        run: npm audit --audit-level=high --omit=dev
        continue-on-error: true
      # ── Bundle size report ───────────────────────────────────────────────
      - name: Report bundle sizes
        run: |
          echo "### Bundle sizes" >> $GITHUB_STEP_SUMMARY
          echo "" >> $GITHUB_STEP_SUMMARY
          echo "| File | Size | Gzip |" >> $GITHUB_STEP_SUMMARY
          echo "|------|------|------|" >> $GITHUB_STEP_SUMMARY
          find dist/assets -name "*.js" -not -name "*.map" | sort | while read f; do
            name=$(basename "$f")
            size=$(du -sh "$f" | cut -f1)
            gzip_size=$(gzip -c "$f" | wc -c | awk '{printf "%.1f kB", $1/1024}')
            echo "| $name | $size | $gzip_size |" >> $GITHUB_STEP_SUMMARY
          done
  # ── Desktop build trigger ──────────────────────────────────────────────
  # Gated on `build` succeeding so a broken push (e.g. failing `npm ci` or
  # `npm run build`) never bumps the cinny-desktop submodule and kicks off the
  # slow Tauri release builds, which would only error out downstream. Only
  # runs on a real push to lotus — not on pull_request CI runs.
  trigger-desktop:
    name: Trigger Desktop Build
    needs: build
    if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/lotus' }}
    runs-on: ubuntu-latest
    steps:
      - name: Bump cinny submodule
        env:
          TOKEN: ${{ secrets.RELEASE_TOKEN }}
        run: |
          CINNY_SHA="${{ github.sha }}"
          git clone "https://x-access-token:$TOKEN@code.lotusguild.org/LotusGuild/cinny-desktop.git" desktop
          cd desktop
          git config user.email "ci@lotusguild.org"
          git config user.name "Lotus CI"
          git submodule update --init cinny
          git -C cinny fetch origin
          git -C cinny checkout "$CINNY_SHA"
          git add cinny
          if git diff --cached --quiet; then
            echo "Submodule already at $CINNY_SHA, nothing to do"
          else
            git commit -m "chore: bump cinny submodule to ${CINNY_SHA:0:8}"
            git push origin main
            echo "Pushed — cinny-desktop release.yml will start via on:push trigger"
          fi
@@ -1,4 +1,4 @@
-labels: ['needs-confirmation']
+labels: ["needs-confirmation"]
 body:
  - type: markdown #add faqs in future
    attributes:
@@ -7,7 +7,7 @@ body:
        > Please read through [the Discussion rules](https://github.com/cinnyapp/cinny/discussions/2653) and check for both existing [Discussions](https://github.com/cinnyapp/cinny/discussions?discussions_q=) and [Issues](https://github.com/cinnyapp/cinny/issues?q=sort%3Areactions-desc) prior to opening a new Discussion.
  - type: markdown
    attributes:
-      value: '# Issue Details'
+      value: "# Issue Details"
  - type: textarea
    attributes:
      label: Issue Description
@@ -119,7 +119,7 @@ body:
        > Use these links to review the existing Cinny [Discussions](https://github.com/cinnyapp/cinny/discussions?discussions_q=) and [Issues](https://github.com/cinnyapp/cinny/issues?q=sort%3Areactions-desc).
  - type: checkboxes #add faqs in future
    attributes:
-      label: 'I acknowledge that:'
+      label: "I acknowledge that:"
      options:
        - label: I have searched the Cinny repository (both open and closed Discussions and Issues) and confirm this is not a duplicate of an existing issue or discussion.
          required: true
@@ -2,29 +2,29 @@
 version: 2
 updates:
-  #   - package-ecosystem: npm
+#   - package-ecosystem: npm
-  #     directory: /
+#     directory: /
-  #     schedule:
+#     schedule:
-  #       interval: weekly
+#       interval: weekly
-  #       day: "tuesday"
+#       day: "tuesday"
-  #       time: "01:00"
+#       time: "01:00"
-  #       timezone: "Asia/Kolkata"
+#       timezone: "Asia/Kolkata"
-  #     open-pull-requests-limit: 15
+#     open-pull-requests-limit: 15
  - package-ecosystem: github-actions
    directory: /
    schedule:
      interval: weekly
-      day: 'tuesday'
+      day: "tuesday"
-      time: '01:00'
+      time: "01:00"
-      timezone: 'Asia/Kolkata'
+      timezone: "Asia/Kolkata"
    open-pull-requests-limit: 5
  - package-ecosystem: docker
    directory: /
    schedule:
      interval: weekly
-      day: 'tuesday'
+      day: "tuesday"
-      time: '01:00'
+      time: "01:00"
-      timezone: 'Asia/Kolkata'
+      timezone: "Asia/Kolkata"
    open-pull-requests-limit: 5
@@ -16,7 +16,7 @@ jobs:
      - name: Setup node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
-          node-version-file: '.node-version'
+          node-version-file: ".node-version"
          package-manager-cache: false
      - name: Install dependencies
        run: npm ci
@@ -1,9 +1,9 @@
 name: Deploy PR to Netlify
-run-name: 'Deploy PR to Netlify (${{ github.event.workflow_run.head_branch }})'
+run-name: "Deploy PR to Netlify (${{ github.event.workflow_run.head_branch }})"
 on:
  workflow_run:
-    workflows: ['Build pull request']
+      workflows: ["Build pull request"]
      types: [completed]
 jobs:
@@ -21,15 +21,9 @@ jobs:
          workflow: ${{ github.event.workflow.id }}
          run_id: ${{ github.event.workflow_run.id }}
          name: pr
-      - name: Validate and output pr number
+      - name: Output pr number
        id: pr
-        run: |
+        run: echo "id=$(<pr.txt)" >> $GITHUB_OUTPUT
          PR_ID=$(<pr.txt)
          if ! [[ "${PR_ID}" =~ ^[0-9]+$ ]]; then
            echo "::error::pr.txt contains non-numeric content: ${PR_ID}"
            exit 1
          fi
          echo "id=${PR_ID}" >> "${GITHUB_OUTPUT}"
      - name: Download artifact
        uses: dawidd6/action-download-artifact@b6e2e70617bc3265edd6dab6c906732b2f1ae151 # v21
        with:
@@ -42,13 +36,13 @@ jobs:
        uses: nwtgck/actions-netlify@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654 # v3.0.0
        with:
          publish-dir: dist
-          deploy-message: 'Deploy PR ${{ steps.pr.outputs.id }}'
+          deploy-message: "Deploy PR ${{ steps.pr.outputs.id }}"
          alias: ${{ steps.pr.outputs.id }}
          # These don't work because we're in workflow_run
          enable-pull-request-comment: false
          enable-commit-comment: false
        env:
-          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN_PR }}
+          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID_PR_CINNY }}
        timeout-minutes: 1
      - name: Comment preview on PR
@@ -22,11 +22,11 @@ jobs:
        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
      - name: Login to Docker Hub #Do not update this action from a outside PR
        if: github.event.pull_request.head.repo.fork == false
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
@@ -34,7 +34,7 @@ jobs:
      - name: Login to the Github Container registry #Do not update this action from a outside PR
        if: github.event.pull_request.head.repo.fork == false
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
@@ -43,14 +43,14 @@ jobs:
      - name: Extract metadata (tags, labels) for Docker, GHCR
        id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
        with:
          images: |
            ajbura/cinny
            ghcr.io/${{ github.repository }}
      - name: Build Docker image (no push)
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
          platforms: linux/amd64
@@ -15,7 +15,7 @@ jobs:
      - name: Setup node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
-          node-version-file: '.node-version'
+          node-version-file: ".node-version"
          package-manager-cache: false
      - name: Install dependencies
        run: npm ci
@@ -1,23 +1,39 @@
 name: Production deploy
 on:
-  release:
+  workflow_dispatch:
    types: [published]
 jobs:
  deploy-and-tarball:
    name: Netlify deploy and tarball
    outputs:
      version: ${{ steps.vars.outputs.tag }}
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0
      - name: Setup node
        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
        with:
-          node-version-file: '.node-version'
+          node-version-file: ".node-version"
          package-manager-cache: false
      - name: Install dependencies
        run: npm ci
      - name: Run semantic release
        run: npm run semantic-release
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GIT_AUTHOR_NAME: ${{ secrets.GIT_AUTHOR_NAME }}
          GIT_AUTHOR_EMAIL: ${{ secrets.GIT_AUTHOR_EMAIL }}
          GIT_COMMITTER_NAME: ${{ secrets.GIT_AUTHOR_NAME }}
          GIT_COMMITTER_EMAIL: ${{ secrets.GIT_AUTHOR_EMAIL }}
      - name: Get version from tag
        id: vars
        run: |
          TAG=$(git describe --tags --abbrev=0) 
          echo "tag=$TAG" >> $GITHUB_OUTPUT
      - name: Build app
        env:
          NODE_OPTIONS: '--max_old_space_size=4096'
@@ -26,7 +42,7 @@ jobs:
        uses: nwtgck/actions-netlify@4cbaf4c08f1a7bfa537d6113472ef4424e4eb654 # v3.0.0
        with:
          publish-dir: dist
-          deploy-message: 'Prod deploy ${{ github.ref_name }}'
+          deploy-message: 'Prod deploy ${{ steps.vars.outputs.tag }}'
          enable-commit-comment: false
          github-token: ${{ secrets.GITHUB_TOKEN }}
          production-deploy: true
@@ -36,9 +52,6 @@ jobs:
          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID_APP }}
        timeout-minutes: 1
      - name: Get version from tag
        id: vars
        run: echo "tag=${GITHUB_REF#refs/*/}" >> $GITHUB_OUTPUT
      - name: Create tar.gz
        run: tar -czvf cinny-${{ steps.vars.outputs.tag }}.tar.gz dist
      - name: Sign tar.gz
@@ -54,12 +67,16 @@ jobs:
      - name: Upload tagged release
        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
        with:
          tag_name: ${{ steps.vars.outputs.tag }}
          files: |
            cinny-${{ steps.vars.outputs.tag }}.tar.gz
            cinny-${{ steps.vars.outputs.tag }}.tar.gz.asc
  publish-image:
    name: Push Docker image to Docker Hub, GHCR
    needs: deploy-and-tarball
    env:
      VERSION: ${{ needs.deploy-and-tarball.outputs.version }}
    runs-on: ubuntu-latest
    permissions:
      contents: read
@@ -67,30 +84,35 @@ jobs:
    steps:
      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          fetch-depth: 0
      - name: Set up QEMU
        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
      - name: Login to Docker Hub #Do not update this action from a outside PR
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
      - name: Login to the Github Container registry #Do not update this action from a outside PR
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Extract metadata (tags, labels) for Docker, GHCR
        id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
+        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
        with:
          images: |
            ${{ secrets.DOCKER_USERNAME }}/cinny
            ghcr.io/${{ github.repository }}
          tags: |
            type=raw,value=${{ env.VERSION }}
            type=raw,value=latest
      - name: Build and push Docker image
-        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
        with:
          context: .
          platforms: linux/amd64,linux/arm64
@@ -4,5 +4,4 @@ node_modules
 devAssets
 .DS_Store
-.ideapackage-lock.json
+.idea
 public/decorations/
@@ -1,3 +1,2 @@
 legacy-peer-deps=true
 save-exact=true
@lotusguild:registry=https://code.lotusguild.org/api/packages/LotusGuild/npm/
@@ -17,23 +17,23 @@ diverse, inclusive, and healthy community.
 Examples of behavior that contributes to a positive environment for our
 community include:
- Demonstrating empathy and kindness toward other people
+* Demonstrating empathy and kindness toward other people
- Being respectful of differing opinions, viewpoints, and experiences
+* Being respectful of differing opinions, viewpoints, and experiences
- Giving and gracefully accepting constructive feedback
+* Giving and gracefully accepting constructive feedback
- Accepting responsibility and apologizing to those affected by our mistakes,
+* Accepting responsibility and apologizing to those affected by our mistakes,
  and learning from the experience
- Focusing on what is best not just for us as individuals, but for the
+* Focusing on what is best not just for us as individuals, but for the
  overall community
 Examples of unacceptable behavior include:
- The use of sexualized language or imagery, and sexual attention or
+* The use of sexualized language or imagery, and sexual attention or
  advances of any kind
- Trolling, insulting or derogatory comments, and personal or political attacks
+* Trolling, insulting or derogatory comments, and personal or political attacks
- Public or private harassment
+* Public or private harassment
- Publishing others' private information, such as a physical or email
+* Publishing others' private information, such as a physical or email
  address, without their explicit permission
- Other conduct which could reasonably be considered inappropriate in a
+* Other conduct which could reasonably be considered inappropriate in a
  professional setting
 ## Enforcement Responsibilities
@@ -5,7 +5,6 @@ First off, thanks for taking the time to contribute! ❤️
 All types of contributions are encouraged and valued. Please make sure to read the relevant section before making your contribution. It will make it a lot easier for us maintainers and smooth out the experience for all involved. The community looks forward to your contributions. 🎉
 > And if you like the project, but just don't have time to contribute, that's fine. There are other easy ways to support the project and show your appreciation, which we would also be very happy about:
 >
 > - Star the project
 > - Tweet about it (tag @cinnyapp)
 > - Refer this project in your project's readme
@@ -19,7 +18,6 @@ Bug reports and feature suggestions must use descriptive and concise titles and
 ## Pull requests
 > ### Legal Notice
 >
 > When contributing to this project, you must agree that you have authored 100% of the content, that you have the necessary rights to the content and that the content you contribute may be provided under the project license. You will also be asked to [sign the CLA](https://github.com/cinnyapp/cla) upon submiting your pull request.
 **NOTE: If you want to add new features, please discuss with maintainers before coding or opening a pull request.** This is to ensure that we are on same track and following our roadmap.
@@ -28,9 +26,9 @@ Bug reports and feature suggestions must use descriptive and concise titles and
 Example:
-| Not ideal                           | Better                                        |
+|Not ideal|Better|
-| ----------------------------------- | --------------------------------------------- |
+|---|----|
-| Fixed markAllAsRead in RoomTimeline | Fix read marker when paginating room timeline |
+|Fixed markAllAsRead in RoomTimeline|Fix read marker when paginating room timeline|
 It is not always possible to phrase every change in such a manner, but it is desired.
@@ -41,7 +39,6 @@ Also, we use [ESLint](https://eslint.org/) for clean and stylistically consisten
 **For any query or design discussion, join our [Matrix room](https://matrix.to/#/#cinny:matrix.org).**
 ## Helpful links
 - [BEM methodology](http://getbem.com/introduction/)
 - [Atomic design](https://bradfrost.com/blog/post/atomic-web-design/)
 - [Matrix JavaScript SDK documentation](https://matrix-org.github.io/matrix-js-sdk/index.html)
@@ -1,736 +0,0 @@
 # Lotus Chat — Manual Testing Guide
 **Generated:** June 2026 · **Updated:** July 2026 (added §O — threads, per-thread notifications, math, search cache, session hardening, audit wave, desktop CSP)
 **Scope:** Everything landed on the `lotus` branch since the v4.12.3 merge that I (Claude) could **not** verify statically and that needs a human in a real environment to confirm. Work through it top-to-bottom; the highest-risk / hardest-to-reproduce items are first.
 > **How to report back:** For each numbered check, tell me **PASS** / **FAIL** (or **partial**). On any FAIL, include: what you saw vs. expected, the browser/OS (and whether web LXC 106 or the desktop/Tauri build), the theme you were on, and any **browser console** errors (F12 → Console). Screenshots help for anything visual.
 ## Environment notes
 - You push from your own machine; these commits are local on `lotus` until you do.
 - Test the **web** build (LXC 106 / `code.lotusguild.org`) first; re-run the **call** + **poll** sections on the **desktop (Tauri)** build too, since CSP and the EC iframe behave differently there.
 - Several call features need a **second participant** (second account on another device/browser, or a colleague). Items that need this are marked **👥 2 people**.
 - A couple of call items need a **third room/call** in parallel — marked **👥👥**.
 ---
 ## Commits covered
 | Commit     | Area                                                                         |
 | :--------- | :--------------------------------------------------------------------------- |
 | `caf6318a` | Poll vote buttons → folds tokens (N4)                                        |
 | `c67aed01` | In-call incoming-call banner (#4b)                                           |
 | `4a875884` | Selectable ringtone (#4a)                                                    |
 | `0394fce9` | EC iframe load watchdog + recovery UI; avatar decorations on call tiles (#3) |
 | `d2946c00` | Upload retry/backoff, presence-on-unload, typed m.direct                     |
 | `b7e1f89c` | Timeline/composer/emoji perf memoization                                     |
 | `c0f98672` | Upstream **Element Call 0.20.1** merge (regression sweep)                    |
 ---
 ## A. Calls — new ringtone + notification work (highest priority)
 ### A1. Ringtone selection — preview in Settings
 **Steps**
 1. Open **Settings → General**, scroll to the **Calls** section.
 2. Find the new **Ringtone** dropdown (just above **Ringtone Volume**).
 3. Select each option in turn: **Classic, Chime, Soft, Retro, Silent**.
 **Expected**
 - Selecting **Classic** plays the existing `call.ogg` clip (cut off after a few seconds).
 - **Chime / Soft / Retro** each play a short, distinct synthesized preview.
 - **Silent** plays nothing.
 - Changing **Ringtone Volume** then re-selecting a ringtone previews at the new volume.
 - No console errors.
 > ⚠️ **Known browser limitation:** the synthesized tones use WebAudio. If a preview is ever silent, click anywhere on the page once (a "user gesture") and retry — browsers suspend audio until the page has been interacted with. The Settings preview is _after_ a click so it should always sound; this note matters more for A3.
 ### A2. Ringtone selection persists
 1. Set Ringtone to **Retro**, reload the app.
 2. **Expected:** the dropdown still shows **Retro** (setting persisted).
 3. Bonus: in devtools, set `localStorage.settings` to a bogus `ringtoneId` and reload → it should fall back to **Classic**, not break.
 ### A3. Incoming call uses the selected ringtone — 👥 2 people
 **Setup:** Account A (you) and Account B in a **DM** or a **private (invite-only) group** room.
 1. As A, pick a non-silent ringtone (e.g. **Chime**).
 2. From B, **start a call** in that DM/room. Do **not** answer on A.
 **Expected on A**
 - The full-screen **Incoming Call** dialog appears (caller name, room avatar, Answer / Reject).
 - The **selected ringtone loops** until you answer/reject/ignore (at the set volume).
 - Answer → joins the call. Reject (DM) / Ignore (group) → dialog dismisses and ring stops.
 - Set ringtone to **Silent** and repeat → dialog still appears, **no sound**.
 ### A4. In-call banner for a second incoming call — 👥👥 (the trickiest one)
 **Setup:** You (A) already **in a call** in Room 1. Account B can call you in a **different** Room 2 (a DM or private group you share). Ideally a third account C, or B leaves Room 1's call first.
 1. While A is **actively in Room 1's call**, trigger an incoming call to A from **Room 2**.
 **Expected on A**
 - **No** full-screen takeover. Instead a **compact banner appears in the top-right corner** with the caller's avatar, room name, "Incoming voice/video call", and **Answer / Reject (or Ignore)** buttons.
 - It plays a **single soft ping**, _not_ a looping ring (so it doesn't talk over your active call).
 - The banner does **not** cover your active call's controls/PiP in a way that blocks them.
 - **Answer** → switches you into Room 2's call. **Reject/Ignore** → banner disappears.
 - The banner auto-dismisses if the caller hangs up / the call times out.
 **Also verify the no-op case:** while in Room 1's call, if a notification for **Room 1 itself** arrives, **nothing** should pop up (no banner, no dialog).
 ### A5. Camera focus during screenshare (#1) — 👥 2 people
 **Setup:** You (A) and B in a call; B (or another participant) **sharing their screen**, and at least one person with **camera on**.
 1. As A, open the **participant glance** (the stacked avatars / member list for the call) and click a participant who has their **camera on**.
 2. In the menu, click **"Focus camera"**.
 **Expected**
 - The view switches to **spotlight** and **pins that person's camera tile**, overriding the auto-spotlighted screenshare.
 - It **stays** on that camera (doesn't immediately snap back to the screenshare).
 - If you pick someone with their camera **off**, it should at worst just toggle spotlight (graceful fallback), not error.
 ### A6. Avatar decorations on call tiles (#3) — 👥 2 people
 **Setup:** A participant in the call has an **avatar decoration** set (Settings → Profile decoration).
 1. Join a call with that participant.
 2. Look at **our** participant roster / prescreen tiles (not the avatars rendered inside the Element Call video grid — those are EC's and out of scope).
 **Expected:** the decoration ring/overlay renders around that participant's avatar on the call tile, the same way it does in member lists.
 ### A7. EC iframe load watchdog + recovery UI (#EC, N96)
 This guards against a permanently-stuck "Loading…" call. Also covers the N96 button-label fix (the old "Retry" and "Leave" buttons were identical — now there is a single **"Back"** button).
 1. Normal case: **join a call** → it should connect within a few seconds as usual (the watchdog stays invisible).
 2. Failure case (best-effort to reproduce): throttle your network hard (devtools → Network → Offline) **right as** you click join, or block the Element Call origin, so the iframe can't finish loading.
 **Expected**
 - On a genuine failure/timeout (~25s), instead of an endless spinner you get a **visible error overlay with a single "Back" button** (the old "Retry" + "Leave" pair is gone — they did the same thing and "Retry" was misleading).
 - Clicking **Back** returns you to the call prescreen, where you can manually click Join to try again.
 - Normal joins must **not** trigger the error overlay (no false positives) — this is the important part to confirm.
 - **Self-heal:** if the error overlay appears on a slow network but EC then finishes loading anyway, the overlay should **dismiss itself** and drop you into the live call. Worth confirming on a deliberately throttled-but-not-blocked connection.
 ---
 ## B. Polls (N4) — render correctly on non-TDS themes
 This was the actual bug: poll buttons used undefined CSS variables, so on the **default (non-Lotus-Terminal) themes** they rendered with invisible borders / no selected state.
 ### B1. Poll renders on a default theme — ✅ PASS
 1. Switch to a **default Cinny theme** (Settings → Appearance — **not** Lotus Terminal / TDS). Test both a **dark** and a **light** theme.
 2. In any room, create a poll (composer → poll button): a **single-choice** poll with 3 options.
 **Expected**
 - Each option is a clearly **bordered** button with visible rounded corners.
 - A **radio circle** indicator is visible on the left of each option.
 - Text, and (after votes) the percentage, are legible.
 ### B2. Voting + selected/progress state
 1. **Vote** on an option.
   **Expected**
 - The selected option shows a **filled accent border + filled radio**, and an **accent progress-bar fill** grows behind it proportional to the vote %.
 - The percentage and total vote count update.
 - Click again / pick another option → selection moves correctly (single-choice replaces; the bar redraws).
 ### B3. Multiple-choice poll
 1. Create a poll allowing **multiple selections**.
   **Expected**
 - Indicators are **square checkboxes** (not circles); selected ones show a **✓** that's legible against the filled box.
 - You can select **several** options; each shows its own progress fill.
 ### B4. Lotus Terminal theme regression — ✅ PASS
 1. Switch to **Lotus Terminal / TDS** theme and re-open a poll.
   **Expected:** still looks correct (the fix uses theme tokens, so the TDS accent should now drive it) — no worse than before.
 ---
 ## C. Robustness / background behavior
 ### C1. Presence updates on tab close
 1. Open the app, then **close the tab** (or quit the browser).
 2. From another session/device, check your **presence** shortly after.
   **Expected:** you go **offline/away** reliably (the unload now uses `fetch({keepalive})`). Previously this could be missed.
 ### C2. Upload retry on flaky network (best-effort)
 1. In devtools → Network, set a throttle that drops/slows requests, or toggle Offline briefly **during** a file upload.
   **Expected**
 - A transient failure **retries** (up to 3×, with backoff) and the upload can still succeed once the network recovers.
 - A genuine, permanent rejection (e.g. file too large / 4xx) still **fails fast** with the usual error — it should **not** spin retrying.
 ### C3. General timeline/composer perf (no functional regression)
 The memoization changes are invisible if correct. Just confirm **nothing broke**:
 - Open a busy room; scrolling, jump-to-latest, mark-as-read all still work.
 - Composer: send a message, upload a file, share a location, pick an emoji and a sticker — all still work.
 ---
 ## D. Element Call 0.20.1 merge — regression sweep (👥 2 people)
 The upstream bump changed EC's internals and DOM selectors; our call controls drive that iframe, so sweep them. In a live call with 2 people, confirm **each** of our control-bar buttons works:
 - [ ] **Mic** mute/unmute (icon + actual audio)
 - [ ] **Camera** on/off
 - [ ] **Deafen / Sound** toggle (your deafen key too)
 - [ ] **Screenshare** start/stop (and the "Share your screen?" confirm)
 - [ ] **Screenshare audio** mute toggle
 - [ ] **Fullscreen** toggle
 - [ ] **⋮ More** menu → **Spotlight/Grid**, **Reactions**, **Settings** each open the right EC panel
 - [ ] **End** call leaves cleanly
 - [ ] **PTT** (push-to-talk) if enabled: hold key = transmit, release = mute; releasing on blur works
 - [ ] **AFK auto-mute** if enabled: goes muted after the timeout
 - [ ] **PiP** (picture-in-picture) mini window: drag, resize, fullscreen button, return-to-call; the "You muted" / "All muted" badges show on the right person
 - [ ] **Denoise** (if ML noise suppression enabled): call audio still flows, no silence
 If any control does nothing, that usually means an EC DOM selector changed — capture the console and tell me which button.
 ---
 ## D2. Element Call **fork** — Phase 2 feature sweep (👥 2 people) — `0.20.1-lotus.1`
 > The whole EC iframe is now our **self-built fork** (`@lotusguild/element-call-embedded@0.20.1-lotus.1`).
 > Five features are **active** (the host sets their flags / sends their actions); two ship **dormant**.
 > **Confirm you're on the fork first:** EC iframe console prints `Element Call embedded-v0.20.1-lotus.1`
 > (the old build prints `embedded-v0.20.1`). If it says the old version, the web deploy hasn't landed —
 > the fork features won't be present, so don't test D2 yet.
 > For non-dev testers, each item below also states the plain "✅ good if / ❌ tell us if" outcome.
 ### D2-1. Denoise **in-source** — survives reconnect (fixes A7) ⭐ highest risk (everyone's mic)
 Flag: cinny sets `lotusDenoiseSource=1` when ML denoise is selected (the old build-time getUserMedia
 shim is **removed**). This is the single change with the widest blast radius — test deliberately.
 - [ ] **Audio flows, no silence** with ML denoise on (baseline, also §D line 204).
 - [ ] **Reconnect (the A7 fix):** in a call with ML denoise on, kill network ~10 s (devtools → Offline)
      so EC shows "Connection lost / Reconnect", then restore. **Mic still works AND still denoised**
      afterward, **without** End+rejoin. _(This is the exact bug that was reintroduced then fixed; if it
      regresses, mic dies on every reconnect.)_
 - [ ] **Mic device switch mid-call** (Settings → change microphone): audio keeps working (same
      `restart()` path as reconnect).
 - [ ] **Mute → unmute** a few times: audio returns each time.
 - [ ] **Each model** if the picker offers them: `rnnoise` (default), `speex`, `dtln`, `deepfilternet` —
      each loads + denoises, no silence. (All four are in-source now; DTLN runs at 16 kHz, others 48 kHz.)
 - [ ] **No double-processing:** audio isn't over-suppressed/artifacted (would mean the old shim is still
      injected alongside the in-source engine).
 - **Rollback if bad for everyone:** revert the cinny deploy commit (restores the shim + `@element-hq` parity).
 ### D2-2. Speaking + mute indicators from widget **events** (#2)
 Flag: `lotusCallState=1`. cinny now reads speaker/mute state from `io.lotus.call_state` events instead of
 scraping EC's DOM (DOM fallback retained). Overlaps **G1**.
 - [ ] **Speaking glow** lights the **correct** person when they talk (you, then your friend).
 - [ ] **PiP "All muted" / "You muted" badge** points at the right person and updates on mute/unmute.
 ### D2-3. Focus camera **during a screenshare** (#4 / A5)
 Action: cinny sends `io.lotus.focus_participant` (the DOM `.click()` hack is gone). Overlaps **A5 / G2**.
 - [ ] Person A screenshares; Person B camera on; **MemberGlance → Focus camera** on B → B's camera is
      spotlighted **alongside/over** the shared screen (not ignored).
 - [ ] Camera-**off** target = graceful (no error, no kick out of the screenshare).
 ### D2-4. In-call avatar decorations (#6) — **NEW, beyond A6**
 Action: cinny pushes `io.lotus.decorations`. **A6 only covered the lobby roster** and called in-call EC
 tiles out of scope — that's now in scope.
 - [ ] A participant with a **Profile decoration** joins **camera off** → the decoration ring renders on
      their **in-call video-tile avatar** (inside EC, not just the lobby), correctly sized/positioned.
 - [ ] Decoration tracks the right person across grid/spotlight layout changes; disappears when they leave.
 ### D2-5. Native transparent background (#5)
 Flag: `lotusTransparent=1` (native, replacing the injected `background:none !important`).
 - [ ] Call background looks right — host wallpaper/surface shows through; **no** black box, bad
      see-through, or layout breakage (also covered loosely by §D2 "looks right").
 ### D2-7. In-Call Soundboard (#3 / P5-15) — 👥 2 people — **NEW**
 Flag: `lotusAudioInject=1`. A 🔔 **Soundboard** button now sits in the call controls bar (left group,
 next to the chat button). Clips are user-uploadable and sync across your devices like emoji packs.
 _Prereq:_ Settings → General → Calls → **Soundboard** must be ON (default on).
 - [ ] **Upload:** open the soundboard popout → **Upload** → pick a short audio file (mp3/ogg/wav, ≤ 1 MB).
      It appears as a clip tile. (Too-big / too-many shows an error, doesn't crash.)
 - [ ] **Plays into the call:** with a second person in the call, click a clip. **They hear it**, and
      **you hear it locally** too. ✅ good if both hear it; ❌ tell us if only one side does.
 - [ ] **Sync:** the uploaded clip shows up on your **other device**/session (account-data sync).
 - [ ] **Delete:** the ✕ on a tile removes it (everywhere, after sync).
 - [ ] **Off switch:** turn Settings → Calls → **Soundboard** off → the call-bar button disappears.
 - [ ] Injecting a clip does **not** mute/interrupt your mic or anyone else's audio.
 ### D2-8. Call Quality Controls (#7 / P5-31) — 👥 2 people — **NEW**
 Action: `io.lotus.set_quality`. User settings in **Settings → General → Calls** (Microphone Bitrate,
 Screenshare Bitrate, Screenshare Framerate; all default **Auto**). Admin caps in **Room Settings →
 General → Voice → Call Quality Caps**.
 - [ ] **No regression at Auto:** with everything on **Auto**, calls/screenshare work exactly as before.
 - [ ] **User cap takes effect:** set Microphone Bitrate to **32 kbps**, rejoin/continue a call — audio
      still flows (thinner is fine). Set Screenshare Framerate to **15 fps** and share your screen — it
      still shares. ❌ tell us if any setting kills audio/screenshare.
 - [ ] **Applies mid-call:** changing a setting **during** a call takes effect without End+rejoin.
 - [ ] **Room-admin cap (admin needed):** as a room admin, set **Max Microphone Bitrate = 64 kbps** in
      Room Settings → Voice. A member whose user setting is higher (e.g. 256) should be **clamped to 64**
      (best-effort/UX — this is client-side; hard server enforcement is a separate follow-up).
 - [ ] Resetting a setting back to **Auto** removes the cap for the rest of the call.
 > Soundboard + quality are no longer "dormant" — if either does nothing, grab the **EC iframe console**
 > and check for `io.lotus.inject_audio` / `io.lotus.set_quality` rejections.
 ### D2-9. Call Permissions — HARD server-side, cross-client (👥 2 people, admin) — **NEW**
 This is enforced by the `voice-limit-guard` on the server (re-signs the LiveKit JWT), so it applies to
 **every** client, not just Lotus Chat. Set in **Room Settings → General → Voice → Call Permissions**.
 _(Requires the guard deployed on LXC 151 — auto-deploys on a `matrix` repo push.)_
 - [ ] **Disable screenshare:** as admin, turn **Allow Screen Sharing** off. In a call, the
      **screenshare button disappears** in Lotus Chat. ✅ good if no one can screenshare.
 - [ ] **Cross-client (the important one):** have someone join the **same room from stock Element / Element
      X** and try to screenshare → the server **refuses** the track (it won't publish). This proves it's
      not just our client hiding a button.
 - [ ] **Audio-only room:** turn **Allow Camera** off too → the camera button disappears and cameras are
      server-blocked for all clients; **microphones still work**.
 - [ ] **⭐ Live kill (mid-call):** while someone is **actively screensharing**, an admin turns **Allow
      Screen Sharing** off. Within a few seconds their screenshare should **stop for everyone** on its own
      (no rejoin needed) — this is the server reconcile loop revoking it live. Works even if the sharer is
      on stock Element. ✅ good if the share drops within ~3–5 s; ❌ tell us if it keeps going.
 - [ ] **Turning it back on** restores the ability to screenshare/camera (start a new share).
 - [ ] **No policy = no change:** a room with Call Permissions left on defaults behaves exactly as before.
 > If any D2 item fails, grab the **EC iframe console** (right-click the call → inspect the iframe) — a
 > widget-action/payload mismatch shows up there as a `io.lotus.*` rejection or a `MissingKey`/transport log.
 ---
 # Backlog of previously-fixed-but-unverified items
 > Sections A–D above are **this session's** work. Everything below was fixed in earlier waves and is still flagged **⚠️ UNTESTED** (see the outstanding-verification backlog below / `LOTUS_TODO.md`). They're grouped by what kind of environment you need (mobile, desktop, screen reader, etc.) so you can knock out a whole category at once. None of these are urgent the way A–D are; do them as you have the right device handy.
 ## E. Mobile / responsive (needs a real phone, or devtools device emulation)
 ### E1. Composer toolbar touch targets (#7)
 On a phone, open a room and the composer toolbar. Tap each button (attach, format, sticker, emoji, GIF, location, poll, schedule, send).
 **Expected:** every button is comfortably tappable (≥44×44px), no mis-taps hitting the wrong icon.
 ### E2. Room Settings — no horizontal overflow (#8)
 On a narrow phone screen, open **Room Settings**.
 **Expected:** the settings nav panel fills the full width; **no** horizontal scrollbar / sideways scrolling anywhere in the panel.
 ### E3. Modals go fullscreen on mobile (#9)
 On a phone, open several dialogs: Leave Room, Create Room, Create Space, Invite User, Report (room/user/message), Edit History, Forward Message, Remind Me, Schedule Message, Device Verification, Poll Creator.
 **Expected:** each opens **fullscreen** (no floating box, no rounded corners / max-width margins). On desktop the same modals should still be the normal centered boxes.
 ### E4. Composer not hidden by the keyboard (#10) — iOS Safari especially
 On a phone (priority: **iOS Safari**), tap into the composer so the on-screen keyboard appears.
 **Expected:** the composer input stays **visible above** the keyboard; the layout shrinks rather than the composer sliding under the keyboard.
 ### E5. Mobile "Saved Messages" access (Mobile Bookmarks)
 On a phone, **inside a room**, open the room header **··· More Options** menu.
 **Expected:** a **"Saved Messages"** item is present; tapping it opens the bookmarks panel. (This was the only in-room access point missing on mobile.)
 ---
 ## F. Visual / theming
 ### F1. Animated chat background — no flicker (#2)
 Settings → set an **animated** chat background (e.g. anim-rain / anim-aurora / anim-stars). Watch the message text and composer while it animates.
 **Expected:** smooth animation, **no flickering / shimmering** on message text or the composer, especially after scrolling. Note your GPU/browser if you see artifacts.
 ### F2. Background vs. Seasonal theme are mutually exclusive (#6)
 In Settings → Appearance:
 1. Pick a **chat background** → confirm any **seasonal theme** auto-switches off.
 2. Pick a **seasonal theme** → confirm the **chat background** auto-clears to none.
 3. (Edge) If you have old data with both set, after reload only one should visibly apply (no double-overlay clutter).
 ### F3. Background / seasonal picker grid layout (N81)
 In Settings → Appearance, look at the **Chat Background** and **Seasonal Theme** swatch grids; resize the window narrow→wide.
 **Expected:** swatches reflow to fill each row evenly (responsive grid), with no lopsided/orphaned last row at any width.
 ---
 ## G. Calls — additional unverified (👥 2 people)
 ### G1. PiP mute badges point at the right person (#12)
 In a call with at least one other person, pop out the **Picture-in-Picture** mini window.
 - **You** mute your own mic → a **"You"/muted badge appears bottom-left** (your status).
 - A **remote** participant (or all of them) mutes → an **"All muted"** badge appears **top-right** (clearly about other people).
  **Expected:** the bottom-left badge is **never** triggered by someone else muting — that was the original bug (it looked like your own mic was muted when it wasn't).
 ### G2. Full-screen camera broadcasts
 1. In a **camera-only** call (no screenshare), confirm the **Fullscreen** button is available (previously only showed during screenshare).
 2. Use **MemberGlance → Focus camera** to full-screen/spotlight a specific person's camera. (Overlaps **A5**; if you've done A5 you can skip.)
 ### G3. PTT badge renders on all themes (N53)
 Enable **Push-to-talk** (Settings → Calls) and join a call. Hold the PTT key.
 **Expected:** the floating PTT badge above the controls shows "PTT — Hold KEY" when idle and "● Live" (green) while held — on **both** a default theme and Lotus Terminal (it's now a single folds Chip; the old terminal-only variant was removed).
 ---
 ## H. Media / performance (needs a room with many images)
 ### H1. Lazy image decryption (P5-5 / MediaGallery)
 Open a room / media gallery with **many images** (ideally encrypted). Scroll down through them.
 **Expected:** images decrypt/load as they **approach the viewport**, not all at once on open; scrolling stays smooth and memory doesn't balloon. Off-screen images shouldn't all decode up front.
 ### H2. Thumbnail framing (P5-6)
 Look at **tall portrait** images in the timeline and in the media gallery.
 **Expected:** thumbnails are framed **center-top** (so faces/subjects at the top aren't cropped out); no awkward stretching. Opening the full-size viewer still shows the **whole** image (contain, not cropped).
 ---
 ## I. Accessibility (needs a screen reader: VoiceOver / NVDA / TalkBack)
 With a screen reader on, navigate message hover-actions and content and confirm each control **announces a meaningful label** (not "button" / blank):
 - [ ] **Reaction** buttons announce the emoji + count (e.g. "thumbsup reaction, 3 people").
 - [ ] **Edit history** button announces "View edit history".
 - [ ] **Thread indicator** announces "View thread".
 - [ ] **Reply** (jump to original) announces "Jump to original message".
 ---
 ## J. Desktop / Tauri build only
 ### J1. Proactive update notifications (P5-40)
 In the **desktop (Tauri)** build, with an update available, launch the app (and/or leave it running ~12h).
 **Expected:** an in-app toast/badge alerts you that an update is available, without manually checking Settings. (Needs an actual newer release to point at.)
 ### J2. DTLN noise suppression sanity
 In Settings → Calls, enable **ML noise suppression** with the **DTLN** model, then join a call.
 **Expected:** your mic audio still flows (no silence/robotic dropouts) and background noise is reduced. Confirmed working earlier but flagged for a final real-call check; verify on **both** web and desktop.
 ---
 ## K. Features — end-to-end unverified
 ### K1. Remind Me Later
 On a message, **··· → Remind Me**, pick a short preset (the 20-min one, or wait one out).
 **Expected:** when due, a Lotus toast fires linking to that message; the reminder then clears itself. Survives a reload while pending (stored in account data).
 ### K2. Advanced search filters (P4-9)
 In message search: use the **sender picker** (instead of typing `from:@user`), the **date-range** quick presets (Today / Last week / Last month / Last year), and the **Has link** toggle.
 **Expected:** each narrows results correctly and reflects in the search.
 ### K3. Notification content + click target (P5-20 partial)
 Trigger a desktop/browser notification for a new message.
 **Expected:** it shows the **real message body** (`username: message`, not "New inbox notification from…"); **clicking it** brings the window to front and navigates **directly to that message** (not just the inbox).
 ---
 ## L. Fixed — verify
 ### L1. AFK auto-mute releases the OS microphone indicator on mute (N95) — 👥 live call
 **Context (now FIXED):** `useAfkAutoMute.ts` opened its own `getUserMedia` level-monitor capture for the whole call, so the OS recording indicator (green dot on macOS, mic icon on Windows/Linux) stayed lit even when muted. The capture is now gated on the reactive mic-on state — it runs only while unmuted, so muting releases the stream.
 **To verify:**
 1. Enable **AFK auto-mute** in Settings → Calls and **join a call**.
 2. Manually **mute your mic** using the call controls → the **OS recording indicator should clear** within ~a second.
 3. **Unmute** → the indicator should re-appear (capture re-acquired).
 4. Also confirm AFK still works end-to-end: stay unmuted and silent past the configured timeout → mic auto-mutes with the "muted after inactivity" toast, and the indicator clears.
 ### L2. Maskable PWA icon (N108) — Android install
 1. On **Android Chrome**, install Lotus Chat as a PWA (Add to Home Screen).
 2. Look at the **home-screen icon**.
 **Expected:** the icon fills the adaptive-icon shape cleanly (the logo centered with safe-zone padding on the dark background), **not** clipped at the corners or floating in an odd box. Also worth a quick check in Chrome DevTools → Application → Manifest that the two `purpose: maskable` icons load without a 404 (this also validates the manifest's icon paths resolve in production — a pre-existing path convention I couldn't verify statically).
 ---
 ## M. New features (this round)
 ### M1. Search: `has:image` / `has:file` / `has:video` filters
 1. Open message search (in a room with shared images/files/videos in history).
 2. Run a broad search, then toggle the **Images**, **Files**, **Video** chips (in the filter bar, next to "Has link").
 **Expected:**
 - Each chip narrows the visible results to that message type; multiple active chips = union (any of them).
 - Toggling them off restores the full results. The existing room/sender/date/has-link filters still work alongside.
 - **Known limitation (by design):** filtering is client-side over already-fetched results, so the visible count can be lower than the server's total for that query — paginating/loading more pulls in more to filter. Confirm this reads acceptably.
 ### M2. Search: recent searches
 1. Run a few different searches, then **clear the search box** and focus it.
 **Expected:** your last (up to 10) distinct searches appear as clickable chips; clicking one re-runs it. A **Clear** affordance wipes the list. The list **persists across a page refresh** (localStorage).
 ### M3. Custom accent color (non-TDS themes) — ⚠️ needs your visual judgment
 1. Make sure **Lotus Terminal (TDS)** is **off**. Settings → Appearance → **Custom Accent Color** → pick a color.
 **Expected:**
 - The app's accent (buttons, selected/active states, links, primary chips) recolors to your choice **live**.
 - **Look critically at quality** (this is the part I can't verify): button **text legibility** (OnMain contrast) on the accent buttons; **hover/active** shades; and **selected-row / chip** backgrounds (the translucent "Container" tints). Try a **light** color and a **dark** color and a **saturated** one.
  - If a dark accent makes selected-row text (OnContainer) hard to read, tell me — that's the one spot in the auto-derived palette most likely to need tuning.
 - **Reset** clears it back to the theme default.
 - Turn **Lotus Terminal ON** → the custom accent should be **ignored** (TDS fixed palette wins) and the picker shows a "non-TDS only" note; turn it back off → custom accent returns.
 - Reload → the chosen accent **persists**.
 ---
 ### M4. Search: "Pinned only" filter
 In message search, toggle the **Pinned** chip.
 **Expected:** results narrow to messages currently pinned in their room; composes with the Images/Files/Video chips and room/sender/date filters; toggling off restores results. It also narrows the **encrypted/local-cache** results section (not just server results). Needs a room with actually pinned messages.
 ### M5. New theme presets (Cyberpunk / Ocean / Blood Red / Classic Matrix / Midnight) — ⚠️ visual judgment
 Settings → Appearance → theme picker → try each of the 5 new themes.
 **Expected:** each applies a complete, legible dark palette. Code review computed WCAG contrast and all pass AA, but **eyeball these specifically**: **Midnight** (lowest-contrast accent `#6b7ca8` — selected/focus states), **Classic Matrix** (green accents, light-green body text on near-black), **Blood Red** (white-ish text on bright-red buttons). Confirm Success/Warning/Critical (save/leave/delete) still look correctly green/amber/red, not recolored. Switching back to a stock theme should fully revert.
 ---
 ## N. OIDC / Next-Gen Auth login (MSC3861) — P4-6
 The Lotus client can now sign into OIDC-native homeservers (ones that delegate
 auth to a Matrix Authentication Service / MAS), e.g. mozilla.org. lotusguild's
 own server is **not** MSC3861, so test EITHER against a **local MAS dev loop**
 (full setup in `dev/oidc-test/README.md` — docker-compose + Synapse `msc3861`
 delta + a `config.json` override) OR against **mozilla.org** with a real account.
 ### N1. OIDC login flow (the core test) — needs a MAS homeserver
 1. On the login screen, select the OIDC homeserver (local `localhost:8008`, or `mozilla.org`).
 2. **Expected:** instead of the username/password form, a single **"Continue with single sign-on"** button appears (password + legacy-SSO are suppressed for that server).
 3. Click it → redirected to the provider's login page (MAS / `chat.mozilla.org`).
 4. Authenticate there → redirected back to `…/auth/oidc/callback` → a brief "Signing you in…" spinner → you land in the app, logged in.
 **Expected:** no console CSP violations; you reach the room list as the OIDC user.
 ### N2. Session persists across reload (token storage)
 After N1, hard-refresh the page.
 **Expected:** you stay logged in — the OIDC session (access + refresh token + issuer/clientId/claims) was persisted (`cinny_refresh_token`, `cinny_oidc_*` keys in localStorage).
 ### N3. Token refresh (long-lived session)
 Leave the session past the access-token lifetime (MAS default is short — or revoke the access token in the MAS admin UI to force a 401).
 **Expected:** the client refreshes transparently (no logout); the stored access token rotates (reactive 401 refresh via the wired `OidcTokenRefresher`).
 ### N4. Logout revokes at the issuer
 Log out from Settings.
 **Expected:** back to login; OIDC tokens are revoked at the issuer's `revocation_endpoint` (best-effort) and all `cinny_*` / `cinny_oidc_*` keys are cleared. Logging back in works.
 ### N5. Account-management deep-link
 Settings → Account.
 **Expected:** on an OIDC server a **"Manage account"** card appears (opens the provider's account page in a new tab). On a non-OIDC server (lotusguild) the card is **absent**.
 ### N6. Non-OIDC regression — password login unchanged
 Log into **matrix.lotusguild.org** (password) and **matrix.org**.
 **Expected:** identical to before — username/password form (+ SSO button where offered). The OIDC path only activates when discovery advertises an issuer, so nothing changes for these servers.
 ---
 ## O. July 2026 batch — threads, notifications, math, search cache, audit wave
 Everything landed after the OIDC work. These mirror the checklists in `LOTUS_TODO.md` (§P3-8, §P4-1) and the outstanding-verification backlog below (P3-8/P4-1/P4-4/P4-8/N97a/AW-1…4). **⚠️ Threads change the main timeline** — thread replies no longer render inline; that's intended (see O1).
 ### O1. Thread Panel (P3-8) — 👥 2 people help for live replies
 1. Hover a message → **Reply in Thread** (message menu). The right-side **thread panel** opens with that message as the root.
 2. Send text, an emoji, and a file upload into the thread; have the second person reply too.
 3. Reply to a reply _inside_ the panel.
 **Expected:** the panel shows the root at top + an "N replies" divider + the reply timeline (own composer at the bottom). Your sends appear immediately (pending → confirmed). A reply-to-a-reply is a proper thread reply. In the **main** timeline the replies do **not** appear inline — the root message instead shows a **"N replies · time"** chip. Clicking the chip (or a reply's thread indicator) opens the panel. **×** or **Escape** closes it; on mobile the panel is fullscreen. Scrolled up in a long thread → a **Jump to Latest** chip appears. Reload the page → the root/reply split persists; in an **encrypted** room the thread replies decrypt (not "Unable to decrypt").
 ### O2. Per-thread notifications (P4-1, Slack-style) — 👥 2 people
 1. Have the second person reply in a thread **you have posted in** → expect a notification + sound.
 2. Have them reply in a thread **you have never touched** and don't @mention you → expect **silence** (only the chip's unread badge updates).
 3. Have them **@mention** you in any thread → expect a notification regardless of participation.
 4. Open the panel's **bell menu** (header) → set the thread to **Mute** → expect no notifications, the chip's unread badge gone (bell-mute glyph shown), and the room's **sidebar badge drops** by that thread's count. Try **All** (every reply notifies) and **Mentions only** (only @mentions).
 5. On a **second device**, confirm the same per-thread modes are set (they sync via account data).
 6. Room-level **Mute** (room context menu) still silences everything, including thread overrides.
 **Known caveat:** Mentions-only can under-notify in E2EE rooms (the decision runs before decryption). Muted-thread badge subtraction is Lotus-only.
 ### O3. Math / LaTeX (P4-4)
 Send each and confirm rendering: `$x^2 + y^2$` (inline), `$$\int_0^1 f(x)\,dx$$` (block, centered), `$5 and $10 for lunch` (**stays plain text** — currency guard), and a code block containing `$x$` (**stays literal** inside the code block). **Expected:** the first two render as math (KaTeX); the last two are untouched. First math of the session may show the raw `$…$` for a beat while the KaTeX chunk lazy-loads, then renders.
 ### O4. Encrypted search cache (P4-8) — opt-in
 In an **encrypted** room's message search, enable **"Persist search index on this device"** (Encrypted Rooms panel). Search, then **reload** and search the same term. **Expected:** coverage survives the reload (results without re-paginating everything). **Clear cached index** empties it. **Log out** → the cache is wiped (privacy). Toggling the setting OFF does **not** wipe (only Clear/logout do).
 ### O5. Session hardening (N97a) — cross-tab
 1. Log in on a build that predates the change, then load this build → you stay logged in (legacy keys migrate to the `cinny_session_v1` blob; check DevTools → Application → Local Storage).
 2. Open the app in **two tabs**; **log out** in tab A → tab B reloads to the auth screen within a moment. Log in again in one tab → the other reloads too.
 ### O6. Audit-wave correctness fixes (AW-1)
 - **Scheduled-message cancel:** schedule a message, then cancel it **with the network cut** (DevTools offline) → the item **stays** with an inline error (it does **not** silently disappear and still send). Restore network, retry → cancels cleanly.
 - **Escape coordination:** in a thread panel, open the mention autocomplete or set a reply draft, press **Escape** → it dismisses the autocomplete/reply **without** closing the panel. A bare Escape (nothing to dismiss) still marks the room read / closes the panel as before.
 - **Panel exclusivity:** on mobile, opening a thread while the media gallery (or members drawer) is open shows only **one** right panel (thread wins), not stacked fullscreen overlays.
 - **Emoji board (AW-2):** the **first** time you open the emoji board / autocomplete in a session, the grid **and search** populate with unicode emoji (they don't stay empty). Reactions still show a label.
 ### O7. Desktop (Tauri) — CSP tighten + native stack (AW-4) — 🖥️ desktop build only
 The webview CSP was tightened and the full native module set now compiles. Smoke-test the desktop build:
 1. App **boots**, avatars + media thumbnails load, the **VT323** terminal font renders (Lotus Terminal theme), a **location message** embeds its OpenStreetMap map, **calls** connect (EC iframe), **deep links** (`matrix:` / clicking a room link) navigate.
 2. **Native features:** minimize to tray (notifications still arrive), a message notification is a **rich toast** (click opens the room; reply box sends), the taskbar **Jump List** lists recent rooms, in a call the taskbar thumbnail shows **Mute/Deafen/End**, Windows **Focus Assist** silences Lotus.
 3. **Console** (desktop devtools) shows **no CSP violations** during normal use. If something visual/media is blocked, that's the CSP to loosen — note exactly what and where.
 ### O8. E2EE / call-key cluster (KE-1→4) — 👥 2 people, during a real call
 We shipped the diagnostics kit + a **Crypto Diagnostics** card (**Settings → Developer Tools**). During your next call that glitches (audio cutouts, "Unable to decrypt"), open it and **Download report**, and note whether the symptoms even still occur now that we're on **matrix-js-sdk 41.7.0** (crypto-wasm 18.3.1). Send me the report; the KE-1..4 diagnosis + capture guidance is in `LOTUS_TODO.md` (Encryption / E2EE), with the full original runbook in git history.
 ---
 ## P. Accessibility (P3-4) — needs a browser + a screen reader
 The compliance fixes are gate-verified in code; these confirm the runtime a11y behavior only a human + AT can check. Tools: browser DevTools "axe" extension / Lighthouse a11y, plus **VoiceOver** (macOS ⌘F5) or **NVDA** (Windows).
 ### P1. Keyboard-only golden path (no mouse)
 Tab from page load: **skip-to-content** link appears first (Enter jumps to the timeline). Tab reaches the room list (rooms are focusable, active room announced), open a room (Enter), type a character → focus lands in the composer, send with Enter (or Shift+Enter per your `enterForNewline` setting). No keyboard trap; visible focus ring throughout.
 ### P2. `?` shortcuts dialog
 Press **?** (Shift+/) with focus NOT in a text field → the keyboard-shortcuts dialog opens, is focus-trapped, Escape closes it and focus returns to where you were. Pressing `?` while typing in the composer/search inserts a literal `?` (does NOT open the dialog).
 ### P3. Screen-reader: reading messages
 With VoiceOver/NVDA on, arrow through the timeline: each message is announced as an article with **sender name + time** — critically, this includes **collapsed messages** (consecutive messages from the same person), which previously announced only the body with no sender. Reactions, "edited", replies, and delivery status are announced with labels.
 ### P4. Screen-reader: live announcements
 - **New message** arrives while you're reading → announced (polite).
 - **Someone starts typing** → "X is typing" announced once (not spammed per keystroke).
 - **Editing a message** → the edit box announces "Editing message from X".
 ### P5. Focus return from dialogs
 Open then close (Escape or ×): the **room topic viewer**, a **reaction viewer** (click a reaction count), and **Search** → focus returns to the button/element you opened them from (not lost to `<body>`). Inline popouts (emoji picker, autocomplete, hover menus) intentionally keep focus in context — that's expected, not a bug.
 ### P6. axe / Lighthouse scan
 Run the axe DevTools extension (or Lighthouse → Accessibility) on a room view, Settings, and the login screen. Expect **no critical/serious** "missing accessible name" or "ARIA" violations on the golden path. Report any that appear (note: far-scrolled timeline history being virtualized out is a known, accepted limitation — not a finding).
 ---
 ## Priority if you're short on time
 1. **O1 + O2** (threads + per-thread notifications) — the largest new surface; the main-timeline change is user-visible.
 2. **O7** (desktop CSP smoke) — CI can't catch CSP breakage; a wrong directive silently breaks media/fonts/maps.
 3. **O5** (session cross-tab) + **O6** (scheduled-cancel ghost-send) — auth-critical + a real data-loss-class fix.
 4. **A4** (in-call banner) + **A3** (ringtone) — newest call logic, hardest to reproduce.
 5. **D** (EC control sweep) — guards against the fork breaking calls.
 6. Everything else.
 ---
 ## Outstanding verification backlog
 **Room Widgets (MSC1236, 2026-07 — needs the CSP `frame-src` widening + `nginx -s reload` first):** In a room, the header **Widgets** button (grid icon, desktop) opens a right-side panel. As an admin (PL to modify widgets): **Add Widget** with a name + an https URL (e.g. an Etherpad `https://…` or any embeddable page) → it appears in the list; click it → it renders in a sandboxed iframe in the panel; **Remove** clears it. A non-admin sees the list + can open widgets but has no Add/Remove. Check: a non-https or same-origin URL is rejected on Add with a clear message; the panel is a full-screen overlay on mobile and is mutually exclusive with the Thread/Gallery/Members panels; if a widget stays blank, the prod CSP `frame-src` still needs widening. Widgets get only benign display capabilities (they can't send/read room events in v1).
 **QR Device Verification (2026-07):** With two logged-in Lotus sessions (or Lotus + Element), start a device verification. On the **Ready** step you now see your own QR code plus a **"Scan their QR code"** button and a **"Verify with emoji instead"** fallback. Have one device **scan** the other's code (grant camera permission) → the showing device asks you to **Confirm**, and both reach **verified**. Check: emoji-SAS still works unchanged; denying camera shows a graceful "verify with emojis instead" message; a deliberately-wrong scan cancels cleanly. Desktop (WebView2) auto-grants the camera; web needs the Permissions-Policy camera allowance (already set).
 **Disappearing Messages (MSC1763 `m.room.retention`, 2026-07):** In Room Settings → General → **Message Retention**, an admin picks Off / 1 Day / 1 Week / 1 Month (non-admins see the buttons disabled). After setting e.g. 1 Day, messages older than a day **vanish from the timeline** for everyone in Lotus (toggle Settings → General → **Show Hidden Events** to reveal them again). Setting back to **Off** restores them. Separately, each user can enable Settings → General → **Enforce Message Retention** (default OFF) → their OWN expired messages then get **permanently redacted** within ~30 s (verify: OTHER people's messages are NEVER redacted by this; only your own). Note true server-side purge also needs Synapse `retention:` configured.
 **Mark as Unread + Low Priority (MSC2867 / m.lowpriority, 2026-07):** Right-click a room in the sidebar → **Mark as Unread** puts a dot on the row (bold name) even with no new messages; opening/reading the room clears it, and it syncs to another device. **Mark as Read** on a marked room clears it too. Right-click → **Add to Low Priority** moves the room into a collapsed "Low Priority" category at the bottom of the room list (and removes it from Favorites if it was there, and vice-versa); **Remove from Low Priority** returns it to Rooms.
 **Windows rich toast (D6, 2026-07 — desktop/Windows build only):** get a message notification while the desktop app is backgrounded → the toast is attributed to **Lotus Chat** (not "PowerShell"/generic) and shows an inline **reply box + Send**; typing a reply + Send **posts it to that room**; clicking the toast body **opens the room**. Previously these silently fell back to a plain toast (no reply/click). If it still falls back, check that a `Lotus Chat.lnk` exists in the Start-Menu Programs folder.
 **Invite QR is now generated LOCALLY (2026-07):** Room settings → Share Room → the QR code renders (a black-on-white SVG in a white box) with **no network request** to `api.qrserver.com` (check DevTools Network — there should be no external QR fetch, and it should work offline / behind strict CSP). **Scan it** with a phone camera / Matrix app → it opens the correct `matrix.to` room-invite link. (`api.qrserver.com` was removed from the prod CSP img-src, so a regression would make the QR blank rather than silently phone home.)
 **Unread dot on federated rooms + avatar-decoration console storm (2026-07):**
 - **Read receipts (regression guard — highest priority):** open several rooms and open the Home/Direct tabs (which mark all orphan rooms read on mount) → rooms **stay read**, unread dots clear and don't come back. (A prior attempt sent a receipt for the thread _root_ when a thread's replies weren't loaded, which the SDK treats as a main receipt at an old event and re-unread every room on every mark-read. Fixed + locked by `notifications.test.ts`.)
 - **Thread dot:** a room with an unread reply in a thread whose replies are loaded → its dot clears on read; for a thread not yet loaded, the dot clears once you open/load the thread. (mark-as-read now sends a threaded receipt only for a genuine loaded reply, never the root.)
 - With DevTools console open on federated rooms, the `io.lotus.avatar_decoration` `403`/`502` (and federated media) errors should **not** repeat on every scroll/mount — each failing user is now requested at most ~twice per session, so the storm (and its homeserver load) is gone.
 **Custom Window Chrome (Beta) fix (2026-07):** on the desktop build, Settings → General → toggle **Custom Window Chrome** — it should reload and come up with the Lotus title bar and a normal, stable feed (no screen-expand / auto-scroll-into-the-past). Toggle back off → reloads to the native frame.
 _Ported from the retired `LOTUS_BUGS.md` (2026-07). Compact index of shipped-but-not-live-tested items; the detailed steps are in the lettered sections above._
 Implemented and gate-green; confirm each per `LOTUS_TESTING.md`, then delete the row.
 | ID   | Item                                                                                                                                    | File / area                                                                | Test                                                                                                                                                                                      |
 | :--- | :-------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | #2   | Chat-background animation flicker (`contain:paint`)                                                                                     | `lotus/chatBackground.ts`                                                  | F1                                                                                                                                                                                        |
 | #4   | Ringtone re-fixes: classic loudness + caller decline notice (A2 ✓ live)                                                                 | `CallEmbedProvider.tsx`, `ringtones.ts`                                    | A1,A3,A4                                                                                                                                                                                  |
 | #6   | Background vs. seasonal theme mutual exclusion                                                                                          | `state/settings.ts`, `General.tsx`                                         | F2                                                                                                                                                                                        |
 | #7   | Composer toolbar touch targets (≥44px)                                                                                                  | `room/RoomInput.tsx`                                                       | E1                                                                                                                                                                                        |
 | #8   | Room Settings horizontal overflow (mobile)                                                                                              | `components/page/style.css.ts`                                             | E2                                                                                                                                                                                        |
 | #9   | Modal fullscreen on mobile (`useModalStyle`)                                                                                            | 22+ modal files                                                            | E3                                                                                                                                                                                        |
 | #10  | Composer not hidden by keyboard (`100dvh`)                                                                                              | `src/index.css`                                                            | E4                                                                                                                                                                                        |
 | #12  | PiP "All muted" badge re-fixed (was firing on any single mute)                                                                          | `hooks/useCallSpeakers.ts`                                                 | G1                                                                                                                                                                                        |
 | N96  | Call-recovery overlay single "Back" button                                                                                              | `call/CallView.tsx`                                                        | A7                                                                                                                                                                                        |
 | N95  | AFK-monitor mic released on mute (OS indicator clears)                                                                                  | `hooks/useAfkAutoMute.ts`                                                  | L1                                                                                                                                                                                        |
 | N108 | Maskable PWA icons (Android adaptive)                                                                                                   | `public/manifest.json` + `res/android/maskable-*`                          | L2                                                                                                                                                                                        |
 | EC   | EC iframe load watchdog + self-heal + recovery UI                                                                                       | `plugins/call/CallEmbed.ts`, `CallView.tsx`                                | A7                                                                                                                                                                                        |
 | N105 | Notification clicks work after tab close (SW `notificationclick` + `showNotification`)                                                  | `sw.ts`, `utils/dom.ts`, `ClientNonUIFeatures.tsx`                         | get a msg notif, close the tab, click it → app focuses/opens + routes to the room                                                                                                         |
 | Gal  | MediaGallery lazy-decrypt (true virtualization deferred)                                                                                | `room/MediaGallery.tsx`                                                    | H1                                                                                                                                                                                        |
 | a11y | aria-labels: edit-history / reaction / thread / reply                                                                                   | `message/*` (`FallbackContent`, `Reaction`, `Reply`)                       | I                                                                                                                                                                                         |
 | P3-8 | Thread Panel (side drawer, chips, threaded receipts, thread composer)                                                                   | `features/room/thread/*`, `RoomTimeline/RoomInput`                         | 6-step checklist in LOTUS_TODO §P3-8                                                                                                                                                      |
 | P4-4 | KaTeX math (`$…$`, `$$…$$`, data-mx-maths; lazy chunk)                                                                                  | `utils/mathParse.ts`, `components/math/`                                   | send `$x^2$`, `$$\int f$$`, `$5 and $10` (stays text), math inside code block (stays text)                                                                                                |
 | P4-8 | Encrypted-search cache (opt-in toggle, clear button, logout wipe)                                                                       | `utils/searchCache.ts`, message-search                                     | enable in search panel → search → reload → coverage persists; logout wipes                                                                                                                |
 | N97a | Session blob migration + cross-tab logout sync                                                                                          | `state/sessions.ts`, `useSessionSync`                                      | login on old build → new build migrates; logout in tab A → tab B drops to auth                                                                                                            |
 | P4-1 | Slack-style thread notifications (participating default, All/Mentions/Mute, badge math)                                                 | `utils/threadNotifications.ts`, `ClientNonUIFeatures`, `roomToUnread`      | 6-step checklist in LOTUS_TODO §P4-1                                                                                                                                                      |
 | AW-1 | Scheduled-message cancel no longer ghost-sends (error row on failure)                                                                   | `ScheduledMessagesTray.tsx`                                                | schedule → cancel with network cut → item stays + error; retry works                                                                                                                      |
 | AW-2 | Emoji lazy-load (search/autocomplete/recents fill in; board opens fast)                                                                 | `plugins/emoji.ts` + consumers                                             | first emoji-board open of a session: grid+search populate; reactions still label                                                                                                          |
 | AW-3 | SW precache (repeat-visit near-instant; deploys still picked up immediately)                                                            | `sw.ts`, `vite.config.js`                                                  | load app twice (2nd = cached assets); deploy → reload picks new version                                                                                                                   |
 | AW-4 | Desktop CSP tighten + Escape/panel fixes + thread Jump to Latest                                                                        | `tauri.conf.json`, Room/ThreadPanel                                        | desktop: boots, avatars/media load, VT323 font renders, location maps embed, calls connect, deep links work                                                                               |
 | P3-4 | Accessibility compliance pass (collapsed-msg SR sender, form/overlay labels, typing announce, focus-return, `?` help, jsx-a11y CI gate) | `message/*`, `RoomViewTyping`, `features/shortcuts/*`, `eslint.config.mjs` | LOTUS_TESTING §P — axe-core + VoiceOver/NVDA on the golden path                                                                                                                           |
 | P6-1 | Desktop Linux parity (no-sleep in calls, launcher badge), autostart toggle, tray Do-Not-Disturb                                         | `native/power.rs`, `lib.rs`, `useTauriDnd`, `General.tsx`                  | Linux desktop: no display sleep during a call; tray DND silences notifications; launch-on-login persists; Unity badge (Ubuntu); DND toggle polarity                                       |
 | P6-2 | EC deafen/screenshare-audio-mute via `io.lotus.set_deafen` (retires the `<audio>.muted` iframe hack)                                    | fork `lotusDeafen.ts`, cinny `CallControl.ts`                              | AFTER publish+pin-bump: deafen silences remote audio + survives a reconnect / new screenshare / late joiner (the cases the DOM hack failed); screenshare-audio-mute toggles independently |
 | P6-3 | Forward-to-multiple-rooms (multi-select + partial-failure summary) + live bookmark previews (edits/redactions, snapshot fallback)       | `ForwardMessageDialog.tsx`+`forwardContent.ts`, `BookmarksPanel.tsx`       | forward one msg to 3 rooms (incl. 1 you cannot post to = partial summary); bookmark then edit shows edited; redact shows deleted; leave room shows snapshot                               |
 | P6-4 | HSTS + Permissions-Policy on prod nginx (+ contrib examples)                                                                            | `matrix/cinny/nginx.conf`, `contrib/nginx`, `contrib/caddy`                | after `nginx -s reload`: `curl -sI https://chat.lotusguild.org` shows HSTS + Permissions-Policy; a call (cam/mic/screenshare) + location share still work                                 |
 **Verified working in live testing (2026-06):** A2, B1–B4, C1, C3, D (mic/camera/deafen/screenshare/fullscreen/more-menu/PiP). Denoise quality in D is still poor — tracked under the denoise project, not a regression.
 ---
@@ -1,244 +0,0 @@
 # Lotus Chat — Work Backlog
 **Repo:** `lotus` branch at `https://code.lotusguild.org/LotusGuild/cinny`
 **Deploy:** push to `lotus` → CI → auto-deploy to `chat.lotusguild.org` (~11 min)
 > Completed features are documented in [LOTUS_FEATURES.md](./LOTUS_FEATURES.md). Manual test steps live in [LOTUS_TESTING.md](./LOTUS_TESTING.md). This file is **open work only** — resolved audit findings and shipped-feature write-ups were removed 2026-07 (full history in git).
 Status legend: `[ ]` pending · `[~]` in progress / shipped-awaiting-QA · `[x]` done · `[BLOCKED]` server/upstream-gated · `[DEFERRED]`/`[DROPPED]`/`[WON'T FIX]` decided.
 ---
 ## ⚠️ TDS DESIGN LAW — READ BEFORE TOUCHING ANY UI
 > **ALL Lotus Terminal Design System (TDS) styling — colors, animations, glows, borders, fonts, spacing — MUST come exclusively from `/root/code/web_template/base.css` CSS variables.**
 > Do NOT hardcode hex values. Do NOT invent new variable names. Canonical tokens: `--lt-accent-orange`, `--lt-accent-cyan`, `--lt-accent-green`, `--lt-glow-*`, `--lt-box-glow-*`, `--lt-border-color`, `--lt-font-mono`. Syntax-highlight token classes: `.tok-kw .tok-str .tok-num .tok-cmt .tok-fn`.
 > Reference patterns: `/root/code/tinker_tickets/` (markdown.js, base.js, ticket.css). Applies to every task without exception.
 > New components must respect both TDS dark (`LotusTerminalTheme`) and TDS light (`LotusTerminalLightTheme`); non-TDS theme work uses vanilla-extract (match `src/lotus-terminal.css.ts`).
 ## 🧩 NATIVE-CINNY LAW — EVERY FEATURE MUST FEEL LIKE STOCK CINNY
 > **Every feature must feel native to upstream Cinny — indistinguishable from what the Cinny team would ship.** Reference: <https://github.com/cinnyapp/cinny>.
 >
 > - **Use the `folds` design system, not bespoke UI** (`Button`, `Chip`, `IconButton`, `Menu`, `MenuItem`, `Dialog`, `Modal`, `Input`, `Switch`, `Badge`, `SettingTile`, `SequenceCard`, …) and folds tokens (`color.*`, `config.space.*`, `config.radii.*`). **Use folds `Icon`/`Icons`, never literal emoji, in UI chrome.** No hardcoded hex/`rgba()`, no invented CSS variables.
 > - **Match Cinny's existing patterns** — find the closest existing component/flow and mirror it before adding UI.
 > - **The ONE exception:** explicit **TDS** features, which follow the TDS Design Law above (opt-in, only in Lotus Terminal mode).
 ---
 ## ✅ Audit (2026-07) — closed out
 A three-wave feature bug-hunt (~15 parallel agents, each batch independently reviewed) plus a low-tail cleanup. All confirmed 🔴/🟠 and the clean 🟡 tail are **fixed, reviewed, and gate-green**; details in git history + LOTUS_FEATURES. Only the minor items below remain open.
 **Still open (low tail — all 🟡 minor):**
 - **Calls host:** C-M1 deafen DOM-fallback leaks late-added `<audio>` tracks; C-M2 `.click()`-by-testid toggles no-op if EC renames — **both retire via EC-fork P6-2**. C-L1 AFK mic not released if EC elides the echo; C-L2 ringtone-preview global cross-cancel; C-L3 first ring after cold load can be silent (ctx not unlocked); C-L5 speaker-observer churn on membership change; C-L7 all-muted DOM miscount if EC label format differs; C-L8 PiP sw/nw resize anchor jitter at min size.
 - **Threads:** T5 `participating` detection is server-bundle-only (`thread.hasCurrentUserParticipated`) → can under-notify a thread you just replied to; T6 room "Mentions & Keywords" not honored for participated/Default thread replies (over-notify); T7 account-data thread-mute write is a lost-update race.
 - **Crypto/session:** F5 OIDC refresh drops `expiresAt` on persist (`persistTokens` can't reach the expiry without SDK-internal plumbing; refresh is reactive on 401).
 - **Native/desktop:** D7 Unity badge `application://cinny.desktop` id may not match the installed `.desktop` basename — **runtime-verify** on the `.deb`/AppImage. H10 room-name setter fire-and-forget/silent length reject (trivial). N6 per-message read-receipt avatars may not refresh on membership change (emitter uncertain, low impact).
 - **EC fork (EC1–EC6 fixed on `element-call:lotus`, needs a republish):** re-apply `setTimeout` cleanup, remote-gated subscription → `allConnections$`, per-call decoration state leak, re-subscribe-every-render, focus-clear on missing `userId`. Rides with **P6-2 phase 2**.
 ---
 ## ✅ Shipped — Awaiting Live Verification
 Built and gate-green; verify per [LOTUS_TESTING.md](./LOTUS_TESTING.md), then graduate to LOTUS_FEATURES.md. Includes the **desktop/native Tier A/B stack** (P5-35/36/41/42/43/44/46/47/48/49/55/56/57, P6-1 Linux parity) — all **CI-compile-verified, runtime-verify on Windows/Linux** — plus:
 | Area                                                                        | Test guide            |
 | :-------------------------------------------------------------------------- | :-------------------- |
 | Full-Screen Camera Broadcasts (per-participant focus)                       | A5 / G2               |
 | Advanced search filters + virtualized infinite scroll                       | K2 / M1 / M2 / M4     |
 | Custom Accent Color Picker (non-TDS) · 5 Color Theme Presets                | M3 / M5               |
 | Intersection lazy media loading · context-aware thumbnails                  | H1 / H2               |
 | Thread Panel (side drawer) + per-thread notification modes (P4-1)           | (thread QA)           |
 | Encrypted message search indexing/caching (opt-in, default OFF)             | search backlog        |
 | Remind Me Later · Mobile Bookmarks access                                   | K1 / E5               |
 | In-Call Soundboard (P5-15) · Quality Controls (P5-31) · Permissions (P5-31) | D2-7 / D2-8 / D2-9    |
 | Desktop proactive update notifications (P5-40)                              | J1                    |
 | OIDC/SSO login (P4-6, needs an MSC3861 server — pick mozilla.org on login)  | OIDC                  |
 | Windows native WinRT toast quick-reply / click-to-open (D6, AUMID)          | rich-toast (§backlog) |
 ---
 ## 🔴 Open — Actionable
 ### ✅ Unread/read-receipt flakiness (reported 2026-07) — FIXED (pending prod QA)
 Room unread dots were inconsistent: reading a message sometimes cleared the dot, sometimes left it stuck, sometimes it resurrected. Root cause (confirmed by tracing + diffing upstream cinny `dev`): **our own "N4" change.** `handleReceipt` recomputed via `getUnreadInfo`, which reads `room.getUnreadNotificationCount()` — server-computed and **stale on the synchronous synthetic receipt echo** (SDK only zeroes it immediately when the last event is your own message) → it PUT the stale non-zero count back → stuck/resurrecting. Compounded by `hasUnread = !!unread` lighting the dot on any present map entry, incl. phantom `{0,0}` PUTs from our `UnreadNotifications` listener. Plus a Mark-as-Unread (MSC2867) flag that never cleared on opening an already-read room (no receipt → no auto-clear).
 **Fix:** `roomToUnread.ts` — `handleReceipt` reverts to upstream's optimistic `DELETE` on own receipt; reducer collapses `{0,0}` PUT → DELETE. `notifications.ts markAsRead` clears the marked-unread flag directly. `markedUnread.ts onReceipt` gated to main/unthreaded receipts (`myMainReceiptPresent`). Unit tests added; 700/700 pass, typecheck + build clean. Deploy + manual QA (read → dot clears & stays; thread read; mark-unread → open → clears; reconnect no resurrect).
 ### 🧨 Encryption / E2EE — ⚠️ EXTREME COMPLEXITY · 🧠 PLANNING SESSION REQUIRED
 Observed live in prod 2026-06-30 during a 2-person **Element Call** (E2EE). These span client rust-crypto (`matrix-js-sdk@41.7.0`) ↔ Synapse ↔ EC MatrixRTC E2EE and are **interrelated** — do NOT spot-fix. **Capture first:** run **Settings → Developer Tools → Crypto Diagnostics** during the next affected call + a synapse-side trace before any fix. (Full runbook was in `LOTUS_E2EE_INVESTIGATION.md`, now in git history.) None are caused by the EC fork work.
 - **KE-1 — OTK upload conflict storm (CRITICAL, root-cause candidate).** `POST /keys/upload` returns `400 M_UNKNOWN: One time key … already exists` continuously — the rust-crypto store and Synapse have **diverged OTK state** (upstream `matrix-rust-sdk#5200`, OPEN: on the 400 the SDK never marks the request sent → re-uploads forever; **not** fixed in 41.7.0). Leading web trigger: cinny never calls **`navigator.storage.persist()`**, so the IndexedDB crypto store is evictable while the `localStorage` session survives → device resurrects with a blank store. **Buildable preventive fix (no call needed):** request persistent storage on login (+ optional multi-tab guard + a 400-loop→recovery prompt). Healing an already-diverged device still needs a clean logout+login.
 - **KE-2 — EC media keys not arriving/decrypting → audio/video cut out (CRITICAL).** `MissingKey … for participant`, unexpected encrypted to-device `io.element.call.encryption_keys`. Almost certainly downstream of KE-1 (broken Olm sessions). This is the "friend's audio cuts out" symptom.
 - **KE-3 — Timeline decrypt error: missing `algorithm` field (HIGH).** rust-crypto can't parse a malformed/legacy encrypted event — capture the offending event id + raw content.
 - **KE-4 — MatrixRTC delayed-event / membership timeouts (MEDIUM-HIGH).** `Restart delayed event timed out`, repeated `msc4157.update_delayed_event` — may be partly HS responsiveness; correlate with synapse latency. Same planning session (shares the call-reliability surface).
 ### Security & Privacy
 - **N97 — Access token + device id in plaintext `localStorage`** (`state/sessions.ts`), XSS-exposed. Architectural — needs a token-protection / session-storage redesign.
 - **Persisted PII without encryption:** user status message + expiry (`Profile.tsx`), unsent composer drafts (`RoomInput.tsx`). Leak risk on shared devices.
 ### PWA / Offline / Web Push
 - **N107 — Web Push is non-functional:** `src/sw.ts` has no `push` handler. Needs a `push` listener + Matrix push-gateway integration. **The one substantive remaining feature** (session/crypto groundwork it waited on has landed).
 - **No app-asset caching strategy** in `src/sw.ts` — no offline capability.
 ### Dependencies / Build / Hygiene
 - Build-time: `lotusDenoise` does heavy sequential `fs` in `closeBundle`; `viteStaticCopy` has redundant renames — could be streamlined.
 - `patch-folds.mjs` edits `node_modules` directly (robust today; `patch-package` considered but more brittle to folds restructuring — WON'T-DO unless it breaks).
 - `types/matrix/` mirrors SDK types instead of importing them — drift risk; spot-fix highest-risk only.
 - `contrib/nginx`/`contrib/caddy` examples: headers + `try_files` already synced with prod; the prod nginx `add_header` isn't inherited by cache `location` blocks (pre-existing; SPA entry `/` still gets all headers).
 - `as any` casts across `src/` — gradual typing cleanup. Keep commits scoped (bisect-friendly). Keep README fork-sync version/logo current.
 ---
 ## 🌐 Matrix Protocol Gaps
 Genuine Matrix client-spec / MSC features Lotus does **not** yet implement (audited 2026-07 against the codebase — almost everything else is built: pinning, stickers+picker, room directory, mutual rooms MSC2666, blurhash, key backup/recovery/SSSS, SAS verification, ignore list, invite spam-filter, voice messages, polls, threads, spaces, OIDC, extended profiles, delayed events, authed media). Build each **fully** — spec-correct events, native-Cinny folds UI, tests. Order = clean wins first.
 **Phase A ✅ (2026-07, gate-green 683 tests):**
 - [x] **Mark as Unread — MSC2867 `m.marked_unread`.** Room account data `{ unread: true }` (+ unstable `com.famedly.marked_unread`) via `mx.setRoomAccountData`; clear on read. Context-menu item in `RoomNavItem` + light the existing unread dot; integrate `state/room/roomToUnread.ts`.
 - [x] **Low Priority rooms — `m.lowpriority` tag.** Mirror the favourite impl (`RoomNavItem.tsx:331-337` `setRoomTag/deleteRoomTag` + the favourites category in `home/Home.tsx`): context-menu toggle + a collapsed "Low Priority" category sorted to the bottom, excluded from normal unread nudging.
 **Phase B ✅ (2026-07, gate-green 688 tests):**
 - [x] **Disappearing Messages — MSC1763 `m.room.retention`.** PL-gated room-settings `SettingTile` to set `{ max_lifetime }`; retention badge; a client-side sweep hides/self-redacts own expired events (pattern like the mute-timer restore in `ClientNonUIFeatures.tsx`). True server deletion also wants Synapse `retention:` (LXC 151).
 - [x] **QR Device Verification — reciprocate QR.** Add the QR path beside emoji-SAS in `components/DeviceVerification.tsx`: render with `qrcode.react` (already a dep), scan via `BarcodeDetector` (fallback `jsQR`); uses the SDK `VerificationRequest` QR/reciprocate support.
 **Phase C (Room Widgets ✅ 2026-07; Sliding Sync ❌ evaluated — parked):**
 - [x] **Room Widgets — MSC1236 + widget API.** No general widget UI exists (only the PL entry `im.vector.modular.widgets`; the EC call widget is hardcoded). Read `im.vector.modular.widgets`/`m.widget` state, add an Add/Manage panel + sandboxed iframe renderer via `matrix-widget-api` — **extend the existing EC widget plumbing** (`plugins/call/CallEmbed.ts`). Enables Etherpad/notes/dashboards/integrations.
 - **[PARKED] Sliding Sync — MSC3575 / simplified MSC4186** (evaluated 2026-07, 3 research passes). Server side is GA (`simplified_msc3575`), but the **client** side is not viable for a safe rollout: matrix-js-sdk's `SlidingSync`/`SlidingSyncSdk` are `_internal_`/`@experimental` (Element shipped labs-only, never GA in ~2 yrs, moved to the Rust SDK); **presence isn't delivered over sliding sync** (regresses Lotus presence badges/rings/status); **no upstream Cinny impl** to follow; and Cinny's whole nav (sidebar/spaces/DM/unread) is derived from the **full local room set** (`allRoomsAtom` ← `mx.getRooms()`), so ~14 subsystems (4 core) need re-architecting to a server-windowed list. ~10% confidence a full rollout wouldn't break/regress (missing rooms/messages/unread = worst failure class). **Revisit only if we adopt the Rust SDK or accounts grow large enough that startup latency is a real complaint; an off-by-default experimental spike is possible but not recommended.** Full assessment: git plan history.
 **Room Widgets v1 follow-ups:** capability-approval consent prompt (let widgets request send/read room events); Jitsi/stickerpicker special types; account-data (user/sticker) widgets; per-widget popout / always-on-screen. Requires the prod CSP `frame-src` widening (done in `matrix/cinny/nginx.conf` → **`nginx -s reload`**) or external widgets are blocked.
 **Server-gated / advanced (capture, don't build yet):** QR sign-in for a new device (**MSC4108** rendezvous — needs an HS-side endpoint); dehydrated devices (**MSC3814** — offline key delivery, also helps the E2EE KE cluster); E2EE history key sharing on invite (**MSC3061** `shared_history`, niche); voice broadcast (Element MSC3888, low value — skip).
 ### Remaining spec/MSC gaps (2026-07 full-surface survey)
 After Phases A–C the client spec is ~complete. What's left, flagged by **what unblocks it**:
 **✅ Buildable NOW (client-only, no server/infra change):**
 - [ ] **Custom room tags / sections** — user-defined room categories in the sidebar via standard `u.*` room tags (beyond the built-in Favourite / Low-Priority). Mirrors the favourite/low-priority category pattern (`RoomNavItem` context-menu + `Home.tsx` categories). _Medium._ The only substantive client-only feature left.
 **🔧 Needs INFRASTRUCTURE (NOT a Synapse-flag flip — you'd have to stand it up):**
 - **Invite by email / 3PID invite** — we invite by Matrix user-ID only (`mx.invite` is user-ID-only). Email invites need an **identity server** (lotusguild runs none). Build only if an identity server is deployed.
 - QR sign-in for a new device (**MSC4108**) — needs a **rendezvous** endpoint. Dehydrated devices (**MSC3814**) — needs server support. (Also listed above.)
 **🚫 BLOCKED until a Synapse upgrade enables the flag** — re-run `/_matrix/client/versions` `unstable_features` after each upgrade; client work is ready the moment the flag flips. See the **Blocked Features** section below:
 - Live Location Sharing (**MSC3489** + **MSC3672** — both `false`)
 - Reaction / relation redaction (**MSC3892** — `false`)
 - Room preview before joining (**MSC3266** — summary endpoint 404s on 1.155)
 - Thread subscriptions (**MSC4306** — `false`)
 **Niche / low-value (noted, not planned):** E2EE history-key-on-invite (MSC3061), voice broadcast (MSC3888), a native account-deactivation flow (currently delegated to the OIDC provider for OIDC accounts).
 **Already implemented (verified, not gaps):** space reordering (drag — confirmed working in the desktop client), pinning, stickers + picker, room directory, mutual rooms (MSC2666), blurhash, key backup / recovery / SSSS / cross-signing / key export-import, SAS **and** QR verification, ignore list, invite spam-filter, voice messages, polls, threads + per-thread notifs, spaces, OIDC, extended profiles, delayed/scheduled events, authed media, report user/room/message, 3PID contact-info display, disappearing messages, mark-unread, low-priority, room widgets.
 ---
 ## 📋 Open Feature Backlog
 ### [ ] P4-4 · Math / LaTeX Rendering (LOW PRIORITY)
 Render `$…$` / `$$…$$` via KaTeX; graceful fallback to raw text. **Sanitizer must be patched** — `src/app/utils/sanitize.ts` (sanitize-html, `disallowedTagsMode:'discard'`) strips all MathML: add `<math><mi><mo><mn><mrow><mfrac><msqrt><mroot><msub><msup><msubsup><munder><mover><mtable><mtr><mtd>…` + `annotation` to `permittedHtmlTags`, and `xmlns`/`display`/`mathvariant` to `permittedTagToAttributes`. Parser: split text nodes on `/(\$\$.*?\$\$|\$.*?\$)/g` in `react-custom-html-parser.tsx` → `<KaTeX>`. Lazy-import `katex/dist/katex.min.css` only when a math block renders. Verify KaTeX bundle-size impact.
 ### [~] P5-20 · Quick Reply from Browser Notification (partial)
 Done: notifications show the real body, click navigates to the specific event + focuses the tab. **Remaining:** inline reply via Notification Actions API needs the SW `push`+`notificationclick` pipeline (switch `new Notification()` → `serviceWorkerRegistration.showNotification()` so the SW receives `notificationclick`; on `event.action==='reply'` POST `m.room.message` with the stored `{roomId, threadId}`). Ties into N107.
 ### [~] P5-30 · Advanced ML Noise Suppression — open verification
 Shipped in the EC fork (DeepFilterNet3 default-capable / DTLN / RNNoise / Speex; AEC on, AGC off for ML tier; never-silent watchdog). **Open:** real-call by-ear **A/B** — model choice, `lotusDenoiseFloor`, AGC on/off (LOTUS_TESTING §D2-1 / J2). **GTCRN (deferred):** tiny MIT 16 kHz model beating RNNoise, but no drop-in browser package — needs `onnxruntime-web` in a Web Worker behind a custom AudioWorklet ring-buffer (ORT can't run in an AudioWorklet, issue #13072); ~1-week build. Revisit only if low-power quality proves insufficient. HW-gated (FRCRN/Maxine) = desktop-Rust-only future.
 ### [~] P6-2 · Element Call fork — retire remaining DOM hacks (Phase 2 needs publish)
 Phase 1 shipped: `io.lotus.set_deafen` (LiveKit-source deafen/screenshare-audio-mute) replaces the brittle `<audio>.muted` iframe hack; cinny sends it join-gated alongside the transitional DOM fallback. **Phase 2 (blocked on user npm publish):** publish fork `0.20.1-lotus.2` → bump cinny pin `lotus.1`→`lotus.2` → delete the `CallControl.ts` `.muted` fallback + the EC1–EC6 fixes ship. **Deferred pieces (P6-2b):** the `useCallSpeakers` DOM-scrape is a dormant fallback behind `io.lotus.call_state`; `.click()`-by-`data-testid` UI toggles are low-value fork surface. Divergence to confirm: deafen doesn't silence soundboard/`Unknown`-source audio (setVolume type limit).
 ### [ ] Mobile audit
 Comprehensive audit of all LOTUS_FEATURES.md features for mobile PWA usability + responsiveness. Method: 44px touch targets, no horizontal overflow, full-screen modals/drawers on mobile, composer not obscured by keyboard.
 ### Deferred / dropped (decided — kept for context)
 - **[DEFERRED] P5-51** Federated "Identity Contexts" (session isolation) — multi-sprint, touches auth/crypto/storage core; smaller intermediate step = plain multi-account switch. **[DROPPED] P5-52** per-room sync governor — js-sdk can't truly per-room filter `/sync`; only a cosmetic hide. **[DEFERRED] P5-53** local scripting plugin — prefer a declarative automation-rules feature (no arbitrary code). **[DEFERRED] Audit-3** profile banner — MSC4427 open/unmerged; revisit on merge. **[WON'T FIX] P5-50** Windows HW media pipeline (WebRTC decode lives in WebView2; not injectable). **[MOVED] P5-9** LFG → LotusBot `!lfg`.
 ---
 ## 🚫 Blocked Features (server / upstream gated)
 Re-run `/_matrix/client/versions` + `unstable_features` after each Synapse upgrade.
 - **[BLOCKED] Live Location Sharing** (MSC3489 + MSC3672 both `false`) — real-time GPS beacons over the existing static share.
 - **[BLOCKED] Reaction/Relation Redaction** (MSC3892 `false`) — remove a reaction without redacting the parent; current full-redaction fallback is acceptable.
 - **[BLOCKED] Room Preview before joining** (MSC3266) — `GET /v1/rooms/{id}/summary` returns 404 `M_UNRECOGNIZED` on Synapse 1.155 despite `msc3266_enabled:true`.
 - **[BLOCKED] Thread Subscriptions** (MSC4306 `false`) — "Follow thread" button (depends on the shipped Thread Panel).
 ---
 ## 📖 Reference
 ### Server Capabilities (as of 2026-06)
 - **Homeserver** `matrix.lotusguild.org` · **Synapse** `1.155.0` · **Matrix spec** up to `v1.12` (+ MSC `unstable_features`).
 - **MSC ON:** `msc4140` · `msc3771` · `msc3440.stable` · `msc4133.stable` · `simplified_msc3575` · `msc4222` · `msc3266` (flag on but v1 summary 404s) · `msc3401_matrix_rtc`. **OFF/blocked:** `msc4306` · `msc3882` · `msc3912` · `msc4155` · `msc3489`/`msc3672` · `msc3892`.
 - **Live endpoints:** Report User (MSC4260) **200** ✅ · Report Room (MSC4151) ✅.
 - **Homeserver access (audits):** Synapse = LXC 151 (`pct exec 151 -- bash`), config `/etc/matrix-synapse/homeserver.yaml`. Web deploy = LXC 106. Voice guard = `voice-limit-guard.py` on LXC 151.
 - **SDK notes:** no arbitrary profile-field methods (use `mx.http.authedRequest()` for MSC4133); js-sdk can't per-room filter `/sync`; sanitizer strips `<math>`/MathML; SW exists at `src/sw.ts`; `getMatrixToRoom()` builds invite URLs; EC audio-inject unblocked via the fork's `io.lotus.inject_audio`.
 ### Key File Reference
 | What                           | File                                                                | Lines               |
 | ------------------------------ | ------------------------------------------------------------------- | ------------------- |
 | Global keydown / room nav      | `hooks/useKeyDown.ts` · `hooks/useRoomNavigate.ts`                  | whole / 19-72       |
 | Room unread counts atom        | `state/room/roomToUnread.ts`                                        | `roomToUnreadAtom`  |
 | Overlay portal provider        | `pages/App.tsx` · `index.html`                                      | 65 / 101            |
 | Room settings tabs             | `features/room-settings/RoomSettings.tsx`                           | 27-56               |
 | State event read/write pattern | `features/common-settings/general/RoomEncryption.tsx`               | 42-52               |
 | Power levels                   | `hooks/usePowerLevels.ts`                                           | whole               |
 | Slash commands                 | `hooks/useCommands.ts`                                              | 140-537             |
 | Chat background picker/defs    | `features/settings/general/General.tsx` · `lotus/chatBackground.ts` | 945-981 / whole     |
 | Matrix.to URL builder          | `plugins/matrix-to.ts`                                              | `getMatrixToRoom()` |
 | Media URL conversion           | `utils/matrix.ts`                                                   | `mxcUrlToHttp()`    |
 | Search pagination / virtual    | `features/message-search/{useMessageSearch,MessageSearch}.tsx`      | 74-121 / 234-365    |
 | Call mic control               | `plugins/call/CallControl.ts`                                       | 206-212             |
 | Knock support check            | `utils/matrix.ts`                                                   | 376-391             |
 | Notification mute push rules   | `hooks/useRoomsNotificationPreferences.ts`                          | 110-150             |
 ### Element Call fork — operational reference
 Fork = `LotusGuild/element-call` (branch `lotus`, from upstream tag `v0.20.1`); cinny consumes the npm package `@lotusguild/element-call-embedded` (built bundle copied into `public/element-call/`).
 **Publish a new version (manual; needs the Gitea npm token):** bump `embedded/web/package.json` (current unpublished `0.20.1-lotus.2`) → `pnpm run build:embedded` (Node 24, pnpm 10.33) → `cd embedded/web && npm version <tag> --no-git-tag-version && npm publish` (Gitea registry) → in cinny bump the `@lotusguild/element-call-embedded` pin (currently `0.20.1-lotus.1`) → `npm install` → build.
 **`io.lotus.*` widget actions** (add new toWidget actions to the enum + `LOTUS_TO_WIDGET_ACTIONS` in `src/lotus/lotusActions.ts`; only send AFTER call-join or a 10s timeout fires):
 | Action                       | Dir     | Purpose                                                | Module                |
 | :--------------------------- | :------ | :----------------------------------------------------- | :-------------------- |
 | `io.lotus.call_state`        | EC→host | speaker/mute/camera stream (`lotusCallState=1`)        | `lotusCallState.ts`   |
 | `io.lotus.focus_participant` | host→EC | spotlight (works during screenshare)                   | `lotusFocus.ts`       |
 | `io.lotus.inject_audio`      | host→EC | soundboard clip mixed into call (`lotusAudioInject=1`) | `lotusAudioInject.ts` |
 | `io.lotus.set_quality`       | host→EC | audio/screenshare bitrate/fps caps                     | `lotusQuality.ts`     |
 | `io.lotus.decorations`       | host→EC | in-call avatar decorations                             | `lotusDecorations.ts` |
 | `io.lotus.set_deafen`        | host→EC | LiveKit-source deafen (P6-2)                           | `lotusDeafen.ts`      |
 Also flag-gated: `lotusTransparent`/`lotusTheme`, `lotusDenoiseSource=1` (in-source ML denoise).
 ### CI/CD + per-feature checklist
 ```
 edit → commit → git push origin lotus
 → Gitea Actions: tsc --noEmit, eslint, prettier (~3 min)
 → lotus_deploy.sh on LXC 106 polls CI → npm ci && npm run build → rsync → live (~11 min)
 ```
 Before marking a feature complete: `npx tsc --noEmit` (0 errors) · `npx eslint src/` (0 new) · `npx prettier --check src/` · `npm test` (Node runner via tsx, hard CI gate — colocated `*.test.ts`) · update `README.md`/`landing/index.html` for Lotus-custom features · visually verify on `chat.lotusguild.org`.
@@ -1,204 +1,115 @@
-# Lotus Chat
+# Cinny
 <p>
    <a href="https://github.com/ajbura/cinny/releases">
        <img alt="GitHub release downloads" src="https://img.shields.io/github/downloads/ajbura/cinny/total?logo=github&style=social"></a>
    <a href="https://hub.docker.com/r/ajbura/cinny">
        <img alt="DockerHub downloads" src="https://img.shields.io/docker/pulls/ajbura/cinny?logo=docker&style=social"></a>
    <a href="https://fosstodon.org/@cinnyapp">
        <img alt="Follow on Mastodon" src="https://img.shields.io/mastodon/follow/106845779685925461?domain=https%3A%2F%2Ffosstodon.org&logo=mastodon&style=social"></a>
    <a href="https://twitter.com/intent/follow?screen_name=cinnyapp">
        <img alt="Follow on Twitter" src="https://img.shields.io/twitter/follow/cinnyapp?logo=twitter&style=social"></a>
    <a href="https://cinny.in/#sponsor">
        <img alt="Sponsor Cinny" src="https://img.shields.io/opencollective/all/cinny?logo=opencollective&style=social"></a>
 </p>
-A Matrix chat client built for Lotus Guild — fast, private, and packed with the features you actually want.
+A Matrix client focusing primarily on simple, elegant and secure interface. The main goal is to have an instant messaging application that is easy on people and has a modern touch.
 - [Roadmap](https://github.com/orgs/cinnyapp/projects/1)
 - [Contributing](./CONTRIBUTING.md)
-**Deployed at [chat.lotusguild.org](https://chat.lotusguild.org)** &nbsp;|&nbsp; Forked from [Cinny](https://github.com/cinnyapp/cinny), synced through v4.12.3
+> [!IMPORTANT] 
 We are currently in the [process of replacing the matrix-js-sdk](https://github.com/cinnyapp/cinny/issues/257#issuecomment-3714406704) with our own SDK. As a result, we will not be accepting any pull requests until further notice.
 Thank you for your understanding.
---
+<img align="center" src="https://raw.githubusercontent.com/cinnyapp/cinny-site/main/assets/preview2-light.png" height="380">
-## Licensing & Attribution
+## Getting started
 The web app is available at [app.cinny.in](https://app.cinny.in/) and gets updated on each new release. The `dev` branch is continuously deployed at [dev.cinny.in](https://dev.cinny.in) but keep in mind that it could have things broken.
-The source code is licensed under [AGPLv3](LICENSE), the same license as the upstream Cinny project. The source for this fork is public at [code.lotusguild.org/LotusGuild/cinny](https://code.lotusguild.org/LotusGuild/cinny).
+You can also download our desktop app from the [cinny-desktop repository](https://github.com/cinnyapp/cinny-desktop).
-The Lotus Chat logo (`public/res/Lotus.png`) is a derivative work based on the original Cinny logo by Ajay Bura and contributors, used under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/). The modified logo is © Lotus Guild and is also made available under CC BY 4.0.
+## Self-hosting
 To host Cinny on your own, simply download the tarball from [GitHub releases](https://github.com/cinnyapp/cinny/releases/latest), and serve the files from `dist/` using your preferred webserver. Alternatively, you can just pull the docker image from [DockerHub](https://hub.docker.com/r/ajbura/cinny) or [GitHub Container Registry](https://github.com/cinnyapp/cinny/pkgs/container/cinny).
---
+* The default homeservers and explore pages are defined in [`config.json`](config.json).
-## Features
+* You need to set up redirects to serve the assests. Example configurations; [netlify](netlify.toml), [nginx](contrib/nginx/cinny.domain.tld.conf), [caddy](contrib/caddy/caddyfile).
    * If you have trouble configuring redirects you can [enable hash routing](config.json#L35) — the url in the browser will have a `/#/` between the domain and open channel (ie. `app.cinny.in/#/home/` instead of `app.cinny.in/home/`) but you won't have to configure your webserver.
-### Messaging
+* To deploy on subdirectory, you need to rebuild the app youself after updating the `base` path in [`build.config.ts`](build.config.ts).
    * For example, if you want to deploy on `https://cinny.in/app`, then set `base: '/app'`.
- Threads: reply in a thread and read/write the whole conversation in a side panel — root messages show a "N replies" chip with an unread badge (threaded replies live in the panel now, not inline in the room)
+<details><summary><b>PGP Public Key to verify tarball</b></summary>
 - Slack-style thread notifications: by default you're only pinged for threads you're in or where you're @mentioned; set any thread to All / Mentions-only / Mute from the panel's bell menu (muted threads stop bumping badges; syncs across devices)
 - See who has read each message, and track delivery status (sending / sent / failed)
 - Bookmark any message and revisit saved messages from the sidebar
 - Schedule messages to send at a specific time
 - Click "edited" on any message to see the full edit history
 - Drafts are saved automatically and survive page reloads
 - Long messages collapse automatically — click "Read more" to expand
 - Forward messages to other rooms
 - Create and view polls directly in chat
 - Share your location with an inline map embed
 - Add captions to image and video uploads
 - Optionally compress images before uploading — shows before/after file sizes
 - GIF links from Giphy and Tenor auto-preview inline
 - Search for and send GIFs from a built-in GIF picker
 - Control voice message playback speed: 0.75× / 1× / 1.5× / 2×
 - Search messages with a date range filter
 - Optional persistent search index for encrypted rooms (off by default — stores decrypted text on your device; clearable, wiped on logout)
 - Write math with LaTeX: `$inline$` and `$$block$$` render via KaTeX (spec `data-mx-maths` supported)
 - Room topics support rich formatting (bold, links, italics)
 - Deleted messages show a placeholder instead of disappearing
 - Code blocks highlight syntax for JS/TS, Python, and Rust
 - Rich link preview cards for YouTube, GitHub, Twitter/X, Reddit, Spotify, Twitch, Steam, Wikipedia, Discord, npm, Stack Overflow, and IMDb
 ### Calls & Voice
 - Push to Talk with a configurable keybind (default: Space)
 - Push to Deafen with the M key
 - Camera starts turned off by default when joining a call
 - Screenshare requires confirmation before going live
 - Toggle noise suppression on or off
 - Calls float in a draggable picture-in-picture window when you navigate away
 - Your chat background shows through the call view
 - Dark/light mode inside calls matches your Lotus Chat theme
 - Calls are available in DMs and private groups only — no accidental mass rings
 - AFK auto-mute: mic is automatically silenced after a configurable idle timeout (1–30 min); a toast confirms the action
 - Voice channel user limit: admins can cap how many people can be in a room's call — enforced server-side for every Matrix client (not just Lotus Chat); others see "Channel Full" until a spot opens
 - Custom join/leave sound effects when someone enters or leaves your call — choose Chime, Soft, Retro, or off
 - Soundboard: upload your own short audio clips (like custom emojis — they sync across your devices) and play them into a call so everyone hears them
 - Call quality settings: cap your microphone bitrate, screenshare bitrate, and screenshare framerate — handy on a slow connection (Settings → Calls)
 - Room call permissions: admins can turn off screen sharing or make a room audio-only (no cameras) — enforced server-side for every Matrix client, and it stops an in-progress share within seconds of being switched off
 ### Customization & Appearance
 - LotusGuild Terminal Design System (TDS) — a CRT terminal-inspired dark theme
 - TDS light mode variant for daytime use
 - 20+ static chat background patterns
 - 5 animated chat backgrounds: Digital Rain, Star Drift, Grid Pulse, Aurora Flow, Fireflies (with improved per-layer looping, phosphor-flicker rain, fluid aurora sweep, and organic firefly bioluminescence)
 - 11 seasonal & holiday theme overlays — Halloween, Christmas, New Year, Autumn, Valentine's Day, St. Patrick's Day, Earth Day, Lunar New Year, April Fools', Deep Space, and Retro Arcade; auto-selected by date with a manual override in Settings → Appearance
 - Avatar decorations — 99 animated APNG overlays (Gaming, Cyber, Space, Fantasy, Nature, Spooky, Cozy, and more) that frame your avatar across the timeline, members list, and @mention autocomplete; visible to all Lotus Chat users; select in Settings → Account → Avatar Decoration
 - Toggle to pause background animations
 - Glassmorphism sidebar — frosted glass effect that lets the background show through
 - Night Light / blue light filter with an adjustable intensity slider
 - Emoji prefixes on room names render larger in the sidebar (e.g. 🎮 general)
 - Rename any room for yourself only — other members see the original name
 - Emoji picker on all room name inputs
 ### Presence & Profile
 - Discord-style presence selector: Online, Idle, Do Not Disturb, Invisible, or Auto
 - Custom status message with emoji and an optional auto-clear timer (changing your status is never silently overwritten by activity events)
 - Colored presence ring on member avatars (green / yellow / red)
 - Profile fields for pronouns and timezone
 - When a user's timezone is set, their current local time appears in their profile
 - Private notes on any user's profile — freeform text visible only to you, auto-saves and syncs across devices
 - Unread count shown in the browser tab title
 ### Moderation & Privacy
 - Report any room to homeserver admins from the room menu
 - View policy lists and ban lists (Draupnir-compatible, read-only)
 - Toggle private read receipts so others can't see when you've read messages
 - Optional warning when an encrypted room contains unverified devices
 - Full push rule editor in notification settings
 - View and edit Server ACL rules in room settings
 - Filterable room activity / mod log (joins, kicks, bans, power level changes, etc.)
 - Room stats and insights panel (active members, top reactions, media breakdown, activity heatmap)
 - Export room history as plain text, JSON, or HTML with optional date range filter
 ### Notifications
 - In-app toast notifications appear bottom-right when the window is focused
 - Custom notification sounds per category (messages, invites)
 - Quiet hours — suppress notifications during a configured time window
 - Click a toast to jump directly to the room or DM
 ### UX
 - Filter and search rooms in the sidebar
 - Favorite rooms sync across devices and appear in a pinned section
 - Sort rooms by recent activity, alphabetical, or unread first
 - DM rows show a message preview and relative timestamp
 - Right-click a room for a context menu: mute with duration, copy link, mark as read
 - Quick emoji reactions appear on message hover — one click to react
 - Knock-to-join: request access to a room; admins approve or deny from the members list
 - Media gallery drawer: browse all images, videos, and files shared in a room
 - Invite link and QR code in room settings
 - Pending knock requests shown in the members list for room admins with a live badge count on the Members button
 - Homeserver support contact displayed in Help & About (MSC1929)
 - Server notice rooms are visually distinct from regular DMs
 ---
 ## Desktop App
 Lotus Chat has a desktop app for Windows, macOS, and Linux. It wraps the same web client in a native window with automatic background updates — no need to reinstall for new versions.
 ### Download
 Download the latest release from the [Releases page on code.lotusguild.org](https://code.lotusguild.org).
 ### SmartScreen Warning (Windows)
 When you first run the installer on Windows, you may see a popup that says **"Windows protected your PC"** with the app listed as an unknown publisher. This is normal.
 **Why it happens:** Windows SmartScreen flags any app that does not have an expensive commercial code-signing certificate from a major CA. Lotus Chat is signed with its own key for update verification, but that key is not in Microsoft's pre-approved list.
 **How to install anyway:**
 1. Click **"More info"** in the SmartScreen dialog.
 2. A **"Run anyway"** button will appear.
 3. Click it to proceed with installation.
 After the first install, automatic in-app updates handle all future versions — you will not see this prompt again for updates.
 ### Desktop-Specific Features
 Beyond the web client, the desktop app adds native OS integration (Windows-focused; graceful no-ops elsewhere). See [`LOTUS_FEATURES.md`](./LOTUS_FEATURES.md#desktop-app-features) for detail.
 - **Native rich notifications** — Windows toasts you can click to open the room or reply to inline, right from the toast.
 - **Focus Assist sync** — Lotus silences its own notifications while Windows Focus Assist / Quiet Hours is on.
 - **Windows Jump List** — right-click the taskbar icon for quick access to your most-active rooms.
 - **Taskbar call controls** — Mute / Deafen / End Call buttons on the taskbar thumbnail during a call, plus call status in the volume flyout (SMTC).
 - **Stays awake in calls** — the system won't sleep or dim during a voice/video call.
 - **Network awareness** — reconnects promptly when Windows connectivity changes.
 - **Custom window chrome** (opt-in) — a Lotus-styled title bar in place of the OS one.
 - **Recursive folder drag-drop** — drop a whole folder onto the composer to upload everything inside it.
 - **Automatic background updates** with a one-click update toast.
 ---
 ## For Developers
 The source code lives in `/root/code/cinny`. All changes should be made on the `lotus` branch. Push to `origin/lotus` and CI will automatically build and deploy to [chat.lotusguild.org](https://chat.lotusguild.org) in approximately 11 minutes — no manual build or deploy steps required.
 See [LOTUS_FEATURES.md](LOTUS_FEATURES.md) for the full feature changelog and [LOTUS_TODO.md](LOTUS_TODO.md) for the work backlog.
 ### 🔱 Element Call fork ("Lotus Call") — LIVE
 Voice/video channels embed **Element Call**, which is now our **self-built fork**
 (`@lotusguild/element-call-embedded` `0.20.1-lotus.1`, source at
 `LotusGuild/element-call`), published to our private Gitea npm registry and served
 same-origin. We no longer depend on the upstream prebuilt bundle, so in-call
 behavior is editable source instead of fragile DOM/widget hacks.
 **Shipped via the fork:** denoise as an in-source LiveKit audio stage (survives
 reconnects), in-call speaking/mute events, focus-a-participant during screenshare,
 avatar decorations on EC video tiles, and a native transparent background.
 **Built but dormant (need cinny UI):** real call-audio injection
 (`io.lotus.inject_audio` → in-call soundboard) and quality controls
 (`io.lotus.set_quality`).
 The fork's `io.lotus.*` action catalog + the publish procedure are in
 **[`LOTUS_TODO.md`](LOTUS_TODO.md)** ("Element Call fork — operational reference");
 infra/hosting + build-pipeline notes live in the `LotusGuild/matrix` repo README.
 Search the docs for the **`[EC-FORK]`** tag to find every related note.
 ### Build
 ```bash
 npm ci && npm run build   # outputs to dist/
 ```
 If the build is killed due to out-of-memory:
 ```bash
 NODE_OPTIONS=--max_old_space_size=6144 npm run build
 ```
 ### CI/CD
 ```
-edit → commit → git push    →    ~11 min    →    live at chat.lotusguild.org
+-----BEGIN PGP PUBLIC KEY BLOCK-----
 mQGNBGJw/g0BDAC8qQeLqDMzYzfPyOmRlHVEoguVTo+eo1aVdQH2X7OELdjjBlyj
 6d6c1adv/uF2g83NNMoQY7GEeHjRnXE4m8kYSaarb840pxrYUagDc0dAbJOGaCBY
 FKTo7U1Kvg0vdiaRuus0pvc1NVdXSxRNQbFXBSwduD+zn66TI3HfcEHNN62FG1cE
 K1jWDwLAU0P3kKmj8+CAc3h9ZklPu0k/+t5bf/LJkvdBJAUzGZpehbPL5f3u3BZ0
 leZLIrR8uV7PiV5jKFahxlKR5KQHld8qQm+qVhYbUzpuMBGmh419I6UvTzxuRcvU
 Frn9ttCEzV55Y+so4X2e4ZnB+5gOnNw+ecifGVdj/+UyWnqvqqDvLrEjjK890nLb
 Pil4siecNMEpiwAN6WSmKpWaCwQAHEGDVeZCc/kT0iYfj5FBcsTVqWiO6eaxkUlm
 jnulqWqRrlB8CJQQvih/g//uSEBdzIibo+ro+3Jpe120U/XVUH62i9HoRQEm6ADG
 4zS5hIq4xyA8fL8AEQEAAbQdQ2lubnlBcHAgPGNpbm55YXBwQGdtYWlsLmNvbT6J
 AdQEEwEIAD4CGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AWIQSRri2MHidaaZv+
 vvuUMwx6UK/M8wUCZqEDwAUJFvwIswAKCRCUMwx6UK/M877qC/4lxXOQIoWnLLkK
 YiRCTkGsH6NdxgeYr6wpXT4xuQ45ZxCytwHpOGQmO/5up5961TxWW8D1frRIJHjj
 AZGoRCL3EKEuY8nt3D99fpf3DvZrs1uoVAhiyn737hRlZAg+QsJheeGCmdSJ0hX5
 Yud8SE+9zxLS1+CEjMrsUd/RGre/phme+wNXfaHfREAC9ewolgVChPIbMxG2f+vs
 K8Xv52BFng7ta9fgsl1XuOjpuaSbQv6g+4ONk/lxKF0SmnhEGM3dmIYPONxW47Yf
 atnIjRra/YhPTNwrNBGMmG4IFKaOsMbjW/eakjWTWOVKKJNBMoDdRcYYWIMCpLy8
 AQUrMtQEsHSnqCwrw818S5A6rrhcfVGk36RGm0nOy6LS5g5jmqaYsvbCcBGY9B2c
 SUAVNm17oo7TtEajk8hcSXoZod1t++pyjcVKEmSn3nFK7v5m3V+cPhNTxZMK459P
 3x1Ucqj/kTqrxKw6s2Uknuk0ajmw0ljV+BQwgL6maguo9BKgCNW5AY0EYnD+DQEM
 ANOu/d6ZMF8bW+Df9RDCUQKytbaZfa+ZbIHBus7whCD/SQMOhPKntv3HX7SmMCs+
 5i27kJMu4YN623JCS7hdCoXVO1R5kXCEcneW/rPBMDutaM472YvIWMIqK9Wwl5+0
 Piu2N+uTkKhe9uS2u7eN+Khef3d7xfjGRxoppM+xI9dZO+jhYiy8LuC0oBohTjJq
 QPqfGDpowBwRkkOsGz/XVcesJ1Pzg4bKivTS9kZjZSyT9RRSY8As0sVUN57AwYul
 s1+eh00n/tVpi2Jj9pCm7S0csSXvXj8v2OTdK1jt4YjpzR0/rwh4+/xlOjDjZEqH
 vMPhpzpbgnwkxZ3X8BFne9dJ3maC5zQ3LAeCP5m1W0hXzagYhfyjo74slJgD1O8c
 LDf2Oxc5MyM8Y/UK497zfqSPfgT3NhQmhHzk83DjXw3I6Z3A3U+Jp61w0eBRI1nx
 H1UIG+gldcAKUTcfwL0lghoT3nmi9JAbvek0Smhz00Bbo8/dx8vwQRxDUxlt7Exx
 NwARAQABiQG8BBgBCAAmAhsMFiEEka4tjB4nWmmb/r77lDMMelCvzPMFAmahA9IF
 CRb8CMUACgkQlDMMelCvzPPQgQv/d5/z+fxgKqgfhQX+V49X4WgTVxZ/CzztDoJ1
 XAq1dzTNEy8AFguXIo6eVXPSpMxec7ZreN3+UPQBnCf3eR5YxWNYOYKmk0G4E8D2
 KGUJept7TSA42/8N2ov6tToXFg4CgzKZj0fYLwgutly7K8eiWmSU6ptaO8aEQBHB
 gTGIOO3h6vJMGVycmoeRnHjv4wV84YWSVFSoJ7cY0he4Z9UznJBbE/KHZjrkXsPo
 N+Gg5lDuOP5xjKzM5SogV9lhxBAhMWAg3URUF15yruZBiA8uV1FOK8sal/9C1G7V
 M6ygA6uOZqXlZtcdA94RoSsW2pZ9eLVPsxz2B3Zko7tu11MpNP/wYmfGTI3KxZBj
 n/eodvwjJSgHpGOFSmbNzvPJo3to5nNlp7wH1KxIMc6Uuu9hgfDfwkFZgV2bnFIa
 Q6gyF548Ub48z7Dz83+WwLgbX19ve4oZx+dqSdczP6ILHRQomtrzrkkP2LU52oI5
 mxFo+ioe/ABCufSmyqFye0psX3Sp
 =WtqZ
 -----END PGP PUBLIC KEY BLOCK-----
 ```
 </details>
 ## Local development
 > [!TIP]
 > We recommend using a version manager as versions change very quickly. You will likely need to switch between multiple Node.js versions based on the needs of different projects you're working on. [NVM on windows](https://github.com/coreybutler/nvm-windows#installation--upgrades) on Windows and [nvm](https://github.com/nvm-sh/nvm) on Linux/macOS are pretty good choices. Recommended nodejs version is Krypton LTS (v24.13.1).
 Execute the following commands to start a development server:
 ```sh
 npm ci # Installs all dependencies
 npm start # Serve a development version
 ```
 To build the app:
 ```sh
 npm run build # Compiles the app into the dist/ directory
 ```
 ### Running with Docker
 This repository includes a Dockerfile, which builds the application from source and serves it with Nginx on port 80. To
 use this locally, you can build the container like so:
 ```
 docker build -t cinny:latest .
 ```
 You can then run the container you've built with a command similar to this:
 ```
 docker run -p 8080:80 cinny:latest
 ```
 This will forward your `localhost` port 8080 to the container's port 80. You can visit the app in your browser by navigating to `http://localhost:8080`.
@@ -1,357 +0,0 @@
 /*
 * Lotus Chat — client-side ML noise suppression shim for Element Call.
 *
 * Element Call runs as a same-origin iframe widget that captures the mic
 * internally (via livekit-client -> getUserMedia) and publishes it to LiveKit.
 * We can't reach that track from the host. Instead this classic <script> is
 * injected (by the vite `lotus-denoise` plugin) into EC's index.html BEFORE its
 * deferred module entry, so it runs first and monkeypatches getUserMedia. When
 * the "ml" tier is selected (lotusDenoise=ml in the widget URL) we route the
 * captured mic through an RNNoise AudioWorklet (@sapphi-red/web-noise-suppressor)
 * and hand the processed track back to EC/LiveKit.
 *
 * RNNoise REQUIRES mono, 48 kHz float audio. Feeding it anything else (stereo,
 * or 44.1 kHz data the model treats as 48 kHz) produces loud static. So we:
 *   - run a 48 kHz AudioContext (which handles resampling from the hardware),
 *   - use the SIMD build if supported for better performance,
 *   - keep browser-native stationary suppression ON so the fans are removed
 *     before RNNoise focuses on transient noises (keyboard, dogs, etc.).
 *
 * Any failure falls back to the unprocessed mic so calls never break.
 */
 (function () {
  'use strict';
  var params;
  try {
    params = new URLSearchParams(window.location.search);
    if (params.get('lotusDenoise') !== 'ml') return;
  } catch (e) {
    return;
  }
  // Derive the parent origin for postMessage targetOrigin from the parentUrl
  // widget param (a full URL) so denoise-status messages aren't broadcast with
  // '*'. Fall back to this frame's own origin if parentUrl is missing/malformed.
  var targetOrigin;
  try {
    var parentUrl = params.get('parentUrl');
    targetOrigin = parentUrl ? new URL(parentUrl).origin : window.location.origin;
  } catch (e) {
    targetOrigin = window.location.origin;
  }
  var md = navigator.mediaDevices;
  if (!md || typeof md.getUserMedia !== 'function') return;
  if (typeof AudioWorkletNode === 'undefined' || typeof AudioContext === 'undefined') return;
  var ASSET_BASE = './denoise/';
  var MODEL = params.get('lotusModel') || 'rnnoise';
  // DTLN (@workadventure) targets 16 kHz and does not resample internally, so
  // its whole graph runs in a 16 kHz context; RNNoise/Speex (sapphi) and
  // DeepFilterNet 3 are 48 kHz fullband. The processed MediaStreamTrack is
  // published to LiveKit either way (WebRTC/Opus resamples as needed).
  var SAMPLE_RATE = MODEL === 'dtln' ? 16000 : 48000;
  var USE_NATIVE_NS = params.get('lotusNativeNS') === 'true';
  var USE_GATE = params.get('lotusGate') === 'true';
  var GATE_THRESHOLD = parseFloat(params.get('lotusGateThreshold') || '-45');
  var PROCESSORS = {
    rnnoise: {
      name: '@sapphi-red/web-noise-suppressor/rnnoise',
      script: 'rnnoiseWorklet.js',
      wasm: 'rnnoise.wasm',
      simdWasm: 'rnnoise_simd.wasm',
    },
    speex: {
      name: '@sapphi-red/web-noise-suppressor/speex',
      script: 'speexWorklet.js',
      wasm: 'speex.wasm',
    },
    dtln: {
      // @workadventure/noise-suppression is a self-contained ES module that
      // resolves its own AudioWorklet processor + LiteRT WASM + TFLite models
      // via import.meta.url. We dynamic-import this helper and let it build the
      // node, rather than addModule-ing a flat worklet ourselves.
      helper: 'workadventure/audio-worklet.js',
    },
    deepfilternet: {
      // deepfilternet3-noise-filter ships an ESM whose AudioWorklet processor +
      // wasm-bindgen glue are INLINED as a string (loaded via a Blob URL — no
      // CDN for the worklet). The only assets it fetches are its single-threaded
      // df_bg.wasm + ONNX model, which we vendor + self-host under
      // deepfilternet/v2/... We dynamic-import the ESM, build a DeepFilterNet3Core
      // pointed at the self-hosted base, and let it create the worklet node.
      esm: 'deepfilternet/index.esm.js',
    },
    gate: {
      name: '@sapphi-red/web-noise-suppressor/noise-gate',
      script: 'noiseGateWorklet.js',
    },
  };
  var origGetUserMedia = md.getUserMedia.bind(md);
  var wasmPromises = {};
  var ctxPromise = null;
  function checkSimd() {
    try {
      return WebAssembly.validate(
        new Uint8Array([
          0, 97, 115, 109, 1, 0, 0, 0, 1, 5, 1, 96, 0, 1, 123, 3, 2, 1, 0, 10, 10, 1, 8, 0, 65, 0,
          253, 15, 253, 98, 11,
        ]),
      )
        ? Promise.resolve(true)
        : Promise.resolve(false);
    } catch (e) {
      return Promise.resolve(false);
    }
  }
  function loadWasm(modelId) {
    if (wasmPromises[modelId]) return wasmPromises[modelId];
    var p = PROCESSORS[modelId];
    if (!p || !p.wasm) return Promise.resolve(null);
    wasmPromises[modelId] = (modelId === 'rnnoise' ? checkSimd() : Promise.resolve(false)).then(
      function (simd) {
        var file = simd && p.simdWasm ? p.simdWasm : p.wasm;
        return fetch(ASSET_BASE + file).then(function (r) {
          if (!r.ok) {
            if (simd && p.simdWasm)
              return fetch(ASSET_BASE + p.wasm).then(function (r2) {
                if (!r2.ok) throw new Error(modelId + ' wasm failed');
                return r2.arrayBuffer();
              });
            throw new Error(modelId + ' wasm failed');
          }
          return r.arrayBuffer();
        });
      },
    );
    return wasmPromises[modelId];
  }
  function getContext() {
    if (!ctxPromise) {
      ctxPromise = (function () {
        var ctx = new AudioContext({ sampleRate: SAMPLE_RATE });
        if (ctx.sampleRate !== SAMPLE_RATE) {
          try {
            ctx.close();
          } catch (e) {}
          return Promise.reject(new Error('SampleRate mismatch: ' + ctx.sampleRate));
        }
        // Load worklet modules. DTLN registers its own processor via the
        // dynamic-imported helper (see buildMlNode), so it needs nothing here.
        var scripts = [];
        if (MODEL === 'rnnoise' || MODEL === 'speex') scripts.push(PROCESSORS[MODEL].script);
        if (USE_GATE) scripts.push(PROCESSORS.gate.script);
        return Promise.all(
          scripts.map(function (s) {
            return ctx.audioWorklet.addModule(ASSET_BASE + s);
          }),
        ).then(function () {
          return ctx.state === 'suspended'
            ? ctx.resume().then(function () {
                return ctx;
              })
            : ctx;
        });
      })();
      ctxPromise.catch(function () {
        ctxPromise = null;
      });
    }
    return ctxPromise;
  }
  var hasNotifiedActive = false;
  // Build the ML denoise AudioWorkletNode. RNNoise/Speex are flat sapphi
  // worklets we instantiate directly with the fetched WASM binary. DTLN comes
  // from @workadventure's self-contained helper, which we dynamic-import; it
  // resolves its own processor + LiteRT WASM + TFLite models internally and
  // returns the node. Resolves to { node, ready, dispose }.
  function buildMlNode(ctx, wasmBinary) {
    if (MODEL === 'dtln') {
      return import(ASSET_BASE + PROCESSORS.dtln.helper).then(function (mod) {
        // bypassUntilReady: pass raw audio through until the model is loaded so
        // the call never has a silent/missing track during init.
        return mod.createNoiseSuppressionAudioWorklet(ctx, { bypassUntilReady: true });
      });
    }
    if (MODEL === 'deepfilternet') {
      // Resolve an absolute self-hosted base so the package's cdnUrl override
      // fetches our vendored df_bg.wasm + ONNX model (never the upstream CDN).
      var dfnBase = new URL(ASSET_BASE + 'deepfilternet', window.location.href).href;
      return import(ASSET_BASE + PROCESSORS.deepfilternet.esm).then(function (mod) {
        var core = new mod.DeepFilterNet3Core({
          sampleRate: SAMPLE_RATE,
          noiseReductionLevel: 80,
          assetConfig: { cdnUrl: dfnBase },
        });
        // initialize() fetches + compiles the wasm and loads the model on the
        // main thread; the worklet node only exists once that resolves, so the
        // graph is connected with a ready model (no half-initialised passthrough).
        return core.initialize().then(function () {
          return core.createAudioWorkletNode(ctx).then(function (node) {
            return {
              node: node,
              ready: Promise.resolve(),
              dispose: function () {
                try {
                  core.destroy();
                } catch (e) {}
              },
            };
          });
        });
      });
    }
    var node = new AudioWorkletNode(ctx, PROCESSORS[MODEL].name, {
      channelCount: 1,
      numberOfInputs: 1,
      numberOfOutputs: 1,
      processorOptions: { maxChannels: 1, wasmBinary: wasmBinary },
    });
    return Promise.resolve({
      node: node,
      ready: Promise.resolve(),
      dispose: function () {
        try {
          node.port.postMessage('destroy');
        } catch (e) {}
      },
    });
  }
  function processStream(stream) {
    var audioTracks = stream.getAudioTracks();
    if (audioTracks.length === 0) return Promise.resolve(stream);
    return Promise.all([loadWasm(MODEL), getContext()])
      .then(function (res) {
        var wasmBinary = res[0];
        var ctx = res[1];
        var source = ctx.createMediaStreamSource(stream);
        var dest = ctx.createMediaStreamDestination();
        var head = source;
        // 1. Optional Noise Gate
        if (USE_GATE) {
          var gateNode = new AudioWorkletNode(ctx, PROCESSORS.gate.name, {
            processorOptions: {
              openThreshold: GATE_THRESHOLD,
              closeThreshold: GATE_THRESHOLD - 5,
              holdMs: 150,
              maxChannels: 1,
            },
          });
          head.connect(gateNode);
          head = gateNode;
        }
        // 2. ML Processor
        return buildMlNode(ctx, wasmBinary).then(function (ml) {
          var mlNode = ml.node;
          head.connect(mlNode);
          mlNode.connect(dest);
          // Surface async init failures (e.g. DTLN model load) without blocking
          // the track handoff — audio flows via bypassUntilReady meanwhile.
          if (ml.ready && typeof ml.ready.then === 'function') {
            ml.ready.catch(function (err) {
              var m = err instanceof Error ? err.message : String(err);
              console.error('[lotus-denoise] ' + MODEL + ' init failed:', m);
            });
          }
          var origTrack = audioTracks[0];
          var processedTrack = dest.stream.getAudioTracks()[0];
          var torndown = false;
          function cleanup() {
            if (torndown) return;
            torndown = true;
            try {
              ml.dispose();
            } catch (e) {}
            try {
              source.disconnect();
              mlNode.disconnect();
            } catch (e) {}
            try {
              if (gateNode) gateNode.disconnect();
            } catch (e) {}
            try {
              origTrack.stop();
            } catch (e) {}
          }
          var rawStop = processedTrack.stop.bind(processedTrack);
          processedTrack.stop = function () {
            cleanup();
            rawStop();
          };
          origTrack.addEventListener('ended', function () {
            try {
              rawStop();
            } catch (e) {}
            cleanup();
          });
          if (!hasNotifiedActive) {
            hasNotifiedActive = true;
            window.parent.postMessage(
              {
                type: 'lotus-denoise-status',
                active: true,
                model: MODEL,
                nativeNS: USE_NATIVE_NS,
                gate: USE_GATE,
              },
              targetOrigin,
            );
          }
          var out = new MediaStream();
          out.addTrack(processedTrack);
          stream.getVideoTracks().forEach(function (t) {
            out.addTrack(t);
          });
          return out;
        });
      })
      .catch(function (e) {
        var msg = e instanceof Error ? e.message : String(e);
        console.error('[lotus-denoise] Setup failed:', msg);
        window.parent.postMessage(
          { type: 'lotus-denoise-status', active: false, error: msg },
          targetOrigin,
        );
        return stream;
      });
  }
  navigator.mediaDevices.getUserMedia = function (constraints) {
    var wantsAudio = !!(constraints && constraints.audio);
    var effective = constraints;
    if (wantsAudio) {
      var audioC =
        typeof constraints.audio === 'object' ? Object.assign({}, constraints.audio) : {};
      audioC.noiseSuppression = USE_NATIVE_NS;
      audioC.channelCount = 1;
      if (audioC.echoCancellation === undefined) audioC.echoCancellation = true;
      if (audioC.autoGainControl === undefined) audioC.autoGainControl = true;
      effective = Object.assign({}, constraints, { audio: audioC });
    }
    return origGetUserMedia(effective).then(function (stream) {
      return wantsAudio ? processStream(stream) : stream;
    });
  };
 })();
@@ -1,16 +1,32 @@
 {
-  "defaultHomeserver": 0,
+  "defaultHomeserver": 1,
-  "homeserverList": ["matrix.lotusguild.org", "matrix.org", "mozilla.org"],
+  "homeserverList": ["converser.eu", "matrix.org", "mozilla.org", "unredacted.org", "xmr.se"],
  "allowCustomHomeservers": true,
  "featuredCommunities": {
    "openAsDefault": false,
-    "spaces": [],
+    "spaces": [
-    "rooms": [],
+      "#cinny-space:matrix.org",
-    "servers": []
+      "#community:matrix.org",
      "#space:unredacted.org",
      "#science-space:matrix.org",
      "#libregaming-games:tchncs.de",
      "#mathematics-on:matrix.org",
      "#stickers-and-emojis:tastytea.de"
    ],
    "rooms": [
      "#cinny:matrix.org",
      "#freesoftware:matrix.org",
      "#pcapdroid:matrix.org",
      "#gentoo:matrix.org",
      "#PrivSec.dev:arcticfoxes.net",
      "#disroot:aria-net.org"
    ],
    "servers": ["matrixrooms.info", "matrix.org", "mozilla.org", "unredacted.org"]
  },
  "hashRouter": {
    "enabled": false,
    "basename": "/"
-  },
+  }
  "gifApiKey": ""
 }
@@ -1,17 +1,6 @@
 # more info: https://caddyserver.com/docs/caddyfile/patterns#single-page-apps-spas
 cinny.domain.tld {
  root * /path/to/cinny/dist
-  try_files {path} /index.html
+  try_files {path} / index.html
  file_server
  # Security headers (generic; add a Content-Security-Policy suited to your
  # homeserver + any embedded services). Caddy serves HTTPS automatically, so
  # HSTS is delivered over TLS.
  header {
    X-Frame-Options SAMEORIGIN
    X-Content-Type-Options nosniff
    Referrer-Policy strict-origin-when-cross-origin
    Strict-Transport-Security "max-age=63072000; includeSubDomains"
    Permissions-Policy "accelerometer=(), autoplay=(self), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(self), midi=(), payment=(), usb=()"
  }
 }
@@ -17,15 +17,6 @@ server {
    listen [::]:443 ssl;
    server_name cinny.domain.tld;
    # Security headers (generic; add a Content-Security-Policy suited to your
    # homeserver + any embedded services). NOTE: nginx does not inherit
    # server-level add_header into a location that sets its own add_header.
    add_header X-Frame-Options SAMEORIGIN always;
    add_header X-Content-Type-Options nosniff always;
    add_header Referrer-Policy strict-origin-when-cross-origin always;
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains" always;
    add_header Permissions-Policy "accelerometer=(), autoplay=(self), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(self), midi=(), payment=(), usb=()" always;
    location / {
        root /opt/cinny/dist/;
@@ -1,112 +0,0 @@
 # Local OIDC / next-gen-auth (MSC3861) test loop
 The Lotus client gained MSC3861/MSC2965 OIDC login (P4-6). lotusguild's own
 homeserver is **not** MSC3861, so to exercise the flow without a mozilla.org
 tester you need a local homeserver that delegates auth to a **Matrix
 Authentication Service (MAS)**. This is the dev loop.
 > Status: the Lotus-client side is unit-tested + gate-green; this server loop is
 > the manual end-to-end check. It hasn't been run in CI (no container runtime
 > there), so treat version pins as a starting point and bump as needed.
 ## 1. Stand up MAS + Synapse
 The simplest path is the **upstream MAS docker-compose quickstart** — it's
 maintained and handles key generation + the database:
 <https://element-hq.github.io/matrix-authentication-service/setup/installation.html>
 (`docker compose` section). Use it to get MAS + Synapse + Postgres running, then
 apply the two Lotus-specific deltas below.
 A minimal `compose.yaml` skeleton (generate MAS keys first — do **not** hand-write them):
 ```yaml
 services:
  postgres:
    image: postgres:16
    environment: { POSTGRES_USER: synapse, POSTGRES_PASSWORD: pw, POSTGRES_DB: synapse }
  mas:
    image: ghcr.io/element-hq/matrix-authentication-service:latest
    command: server
    ports: ['8090:8080'] # MAS issuer on http://localhost:8090
    volumes: ['./mas:/data']
    # First run once: `docker compose run --rm mas config generate -o /data/config.yaml`
    # then edit /data/mas/config.yaml (see §1a) before `up`.
  synapse:
    image: ghcr.io/element-hq/synapse:latest
    ports: ['8008:8008'] # client/federation API
    volumes: ['./synapse:/data']
    depends_on: [postgres, mas]
 ```
 ### 1a. MAS `config.yaml` — the parts that matter
 After `config generate` (which fills in `secrets.keys` + `encryption`), set:
 ```yaml
 http:
  public_base: http://localhost:8090/
  issuer: http://localhost:8090/
 database:
  uri: postgresql://synapse:pw@postgres/synapse
 matrix:
  homeserver: localhost          # the server_name
  endpoint: http://synapse:8008/
  secret: "REPLACE_WITH_A_LONG_SHARED_ADMIN_TOKEN"
 clients:
  - client_id: "0000000000000000000SYNAPSE"
    client_auth_method: client_secret_basic
    client_secret: "REPLACE_WITH_A_SHARED_CLIENT_SECRET"
 passwords:               # so you can create a local test account in the MAS UI
  enabled: true
 ```
 ### 1b. Synapse `homeserver.yaml` — delegate auth to MAS
 See `synapse-msc3861.yaml` in this folder; the key block is:
 ```yaml
 experimental_features:
  msc3861:
    enabled: true
    issuer: http://localhost:8090/
    client_id: "0000000000000000000SYNAPSE"
    client_auth_method: client_secret_basic
    client_secret: "REPLACE_WITH_A_SHARED_CLIENT_SECRET"   # == MAS clients[].client_secret
    admin_token: "REPLACE_WITH_A_LONG_SHARED_ADMIN_TOKEN"  # == MAS matrix.secret
    account_management_url: "http://localhost:8090/account"
 ```
 Create a test user via the MAS UI (`http://localhost:8090/`) or
 `docker compose exec mas mas-cli manage register-user`.
 Sanity check discovery (the client relies on this):
 ```bash
 curl -s http://localhost:8008/.well-known/matrix/client | jq '."m.authentication"'
 # -> { "issuer": "http://localhost:8090/", "account": "http://localhost:8090/account" }
 ```
 ## 2. Point the Lotus dev client at it
 Run the client: `npm start` (vite dev). Override `public/config.json` so the
 local server is selectable and custom servers are allowed:
 ```json
 {
  "defaultHomeserver": 0,
  "homeserverList": ["localhost:8008"],
  "allowCustomHomeservers": true,
  "hashRouter": { "enabled": false, "basename": "/" }
 }
 ```
 Dynamic client registration handles the redirect URI automatically — it's
 `<vite-origin>/auth/oidc/callback` (e.g. `http://localhost:5173/auth/oidc/callback`),
 and MAS allows `http://localhost` redirects in dev.
 ## 3. Run the checklist
 See **section N** of `../../LOTUS_TESTING.md` for the actual pass/fail steps
 (login redirect, callback, session-persist-on-reload, token refresh, logout
 revocation, account-management link, and the non-OIDC-regression check).
 ## Files here
 - `synapse-msc3861.yaml` — the Synapse experimental-features delta.
 - `config.local.json` — the Lotus `public/config.json` override.
@@ -1,7 +0,0 @@
 {
  "defaultHomeserver": 0,
  "homeserverList": ["localhost:8008"],
  "allowCustomHomeservers": true,
  "featuredCommunities": { "openAsDefault": false, "spaces": [], "rooms": [], "servers": [] },
  "hashRouter": { "enabled": false, "basename": "/" }
 }
@@ -1,16 +0,0 @@
 # Synapse experimental-features delta to delegate auth to a local MAS (MSC3861).
 # Merge this into your test homeserver.yaml. The client_secret + admin_token MUST
 # match the MAS config (clients[].client_secret and matrix.secret respectively).
 experimental_features:
  msc3861:
    enabled: true
    issuer: http://localhost:8090/
    client_id: '0000000000000000000SYNAPSE'
    client_auth_method: client_secret_basic
    client_secret: 'REPLACE_WITH_A_SHARED_CLIENT_SECRET'
    admin_token: 'REPLACE_WITH_A_LONG_SHARED_ADMIN_TOKEN'
    account_management_url: 'http://localhost:8090/account'
 # With msc3861 enabled, Synapse disables its own password/SSO login and advertises
 # `m.authentication` in /.well-known/matrix/client — which is exactly what the
 # Lotus client's getOidcIssuer() reads to switch into the OIDC flow.
@@ -1,159 +0,0 @@
 import { FlatCompat } from '@eslint/eslintrc';
 import js from '@eslint/js';
 import tsPlugin from '@typescript-eslint/eslint-plugin';
 import tsParser from '@typescript-eslint/parser';
 import reactPlugin from 'eslint-plugin-react';
 import reactHooksPlugin from 'eslint-plugin-react-hooks';
 import jsxA11yPlugin from 'eslint-plugin-jsx-a11y';
 import eslintConfigPrettier from 'eslint-config-prettier';
 import globals from 'globals';
 import path from 'path';
 import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 const compat = new FlatCompat({
  baseDirectory: __dirname,
  recommendedConfig: js.configs.recommended,
  allConfig: js.configs.all,
 });
 export default [
  { ignores: ['node_modules/**', 'dist/**', 'experiment/**'] },
  js.configs.recommended,
  tsPlugin.configs['flat/eslint-recommended'],
  ...tsPlugin.configs['flat/recommended'],
  reactPlugin.configs.flat.recommended,
  reactHooksPlugin.configs.flat.recommended,
  // Register jsx-a11y plugin (rules selectively enabled below)
  { plugins: { 'jsx-a11y': jsxA11yPlugin } },
  // airbnb-base via FlatCompat (JS/import rules; no React plugin, no getFilename issue)
  ...compat.extends('airbnb-base'),
  eslintConfigPrettier,
  {
    languageOptions: {
      parser: tsParser,
      globals: {
        ...globals.browser,
        ...globals.es2021,
        JSX: 'readonly',
      },
      parserOptions: {
        ecmaFeatures: { jsx: true },
        ecmaVersion: 'latest',
        sourceType: 'module',
      },
    },
    settings: {
      react: {
        version: '18.2.0',
      },
    },
    rules: {
      'linebreak-style': 0,
      'no-unused-vars': 'off', // handled by @typescript-eslint/no-unused-vars
      'no-underscore-dangle': 0,
      'no-shadow': 'off',
      // Stylistic rules — off for this codebase
      'no-console': 'off',
      'no-continue': 'off',
      'no-nested-ternary': 'off',
      'no-plusplus': 'off',
      'no-param-reassign': 'off',
      'no-restricted-syntax': 'off',
      'no-restricted-globals': 'off',
      'no-constant-condition': 'off',
      'prefer-destructuring': 'off',
      'no-useless-assignment': 'off',
      'preserve-caught-error': 'off',
      'consistent-return': 'off',
      'no-use-before-define': 'off',
      'import/prefer-default-export': 'off',
      'import/extensions': 'off',
      'import/no-unresolved': 'off',
      'import/no-extraneous-dependencies': [
        'error',
        {
          devDependencies: true,
        },
      ],
      'react/no-unstable-nested-components': ['error', { allowAsProps: true }],
      'react/jsx-filename-extension': [
        'error',
        {
          extensions: ['.tsx', '.jsx'],
        },
      ],
      'react/display-name': 'off',
      'react/require-default-props': 'off',
      'react/jsx-props-no-spreading': 'off',
      'react-hooks/rules-of-hooks': 'error',
      'react-hooks/exhaustive-deps': 'error',
      // React Compiler rules added in react-hooks v7 — disabled until React Compiler is adopted
      'react-hooks/react-compiler': 'off',
      'react-hooks/incompatible-library': 'off',
      'react-hooks/refs': 'off',
      'react-hooks/set-state-in-effect': 'off',
      'react-hooks/set-state-in-render': 'off',
      'react-hooks/immutability': 'off',
      'react-hooks/purity': 'off',
      'react-hooks/use-memo': 'off',
      '@typescript-eslint/no-unused-vars': [
        'error',
        { argsIgnorePattern: '^_', varsIgnorePattern: '^_', caughtErrorsIgnorePattern: '^_' },
      ],
      '@typescript-eslint/no-shadow': 'error',
      '@typescript-eslint/no-explicit-any': 'warn',
      // jsx-a11y — media captions not required for this app
      'jsx-a11y/media-has-caption': 'off',
      'jsx-a11y/no-noninteractive-element-interactions': 'off',
      'jsx-a11y/alt-text': 'off',
      // A11y regression gate (P3-4). A CURATED set — correctness rules that catch
      // real WCAG gaps (missing accessible names, malformed ARIA) without
      // flooding on the pre-existing clickable-div patterns. The heavier
      // interaction rules (no-static-element-interactions,
      // click-events-have-key-events) are a separate cleanup and stay OFF.
      'jsx-a11y/aria-props': 'error',
      'jsx-a11y/aria-proptypes': 'error',
      'jsx-a11y/aria-role': ['error', { ignoreNonDOM: true }],
      'jsx-a11y/aria-unsupported-elements': 'error',
      'jsx-a11y/role-has-required-aria-props': 'error',
      'jsx-a11y/role-supports-aria-props': 'error',
      'jsx-a11y/no-redundant-roles': 'error',
      'jsx-a11y/anchor-has-content': 'error',
      'jsx-a11y/heading-has-content': 'error',
      'jsx-a11y/label-has-associated-control': ['error', { assert: 'either', depth: 5 }],
      // NOT enabled: control-has-associated-label. This repo labels most inputs
      // with folds `<Text as="label" htmlFor>` — a component the rule's static
      // analysis can't see as a <label>, producing false positives on correctly
      // labeled controls. The genuinely-unlabeled controls it surfaced (sliders,
      // file input, media players, notes) were fixed directly with aria-label.
    },
  },
  {
    files: ['**/*.ts', '**/*.tsx'],
    rules: {
      'no-undef': 'off',
    },
  },
  {
    // Test files commonly define several small mock/fake classes and named
    // function expressions used as constructor mocks (e.g.
    // `setGlobal('AudioWorkletNode', function AudioWorkletNode(){})`), which must
    // NOT be rewritten to arrows (arrows aren't constructable). Relax the
    // stylistic class/callback rules here.
    files: ['**/*.test.ts', '**/*.test.tsx'],
    rules: {
      'max-classes-per-file': 'off',
      'lines-between-class-members': 'off',
      'prefer-arrow-callback': 'off',
    },
  },
 ];
@@ -1,42 +1,36 @@
-<!doctype html>
+<!DOCTYPE html>
 <html lang="en">
  <head>
    <meta charset="UTF-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" />
-    <title>Lotus Chat</title>
+    <title>Cinny</title>
-    <meta name="name" content="Lotus Chat" />
+    <meta name="name" content="Cinny" />
-    <meta name="author" content="Lotus Guild" />
+    <meta name="author" content="Ajay Bura" />
    <meta
      name="description"
-      content="Lotus Chat — the Lotus Guild Matrix client. Secure, fast, and built for our community."
+      content="A Matrix client where you can enjoy the conversation using simple, elegant and secure interface protected by e2ee with the power of open source."
    />
    <meta name="keywords" content="lotus chat, lotus guild, matrix, matrix client" />
    <meta property="og:type" content="website" />
    <meta property="og:title" content="Lotus Chat" />
    <meta property="og:url" content="https://chat.lotusguild.org" />
    <meta
-      property="og:image"
+      name="keywords"
-      content="https://chat.lotusguild.org/public/res/android/android-chrome-192x192.png"
+      content="cinny, cinnyapp, cinnychat, matrix, matrix client, matrix.org, element"
    />
    <meta property="og:title" content="Cinny" />
    <meta property="og:url" content="https://cinny.in" />
    <meta property="og:image" content="https://cinny.in/assets/favicon-48x48.png" />
    <meta
      property="og:description"
-      content="Lotus Chat — the Lotus Guild Matrix client. Secure, fast, and built for our community."
+      content="A Matrix client where you can enjoy the conversation using simple, elegant and secure interface protected by e2ee with the power of open source."
    />
    <meta name="theme-color" content="#000000" />
    <meta name="color-scheme" content="dark light" />
    <link rel="preconnect" href="https://fonts.googleapis.com" crossorigin />
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
    <link href="https://fonts.googleapis.com/css2?family=VT323&display=swap" rel="stylesheet" />
    <link rel="stylesheet" href="/fonts/custom-fonts.css" />
    <link id="favicon" rel="shortcut icon" href="./public/favicon.ico" />
    <link rel="manifest" href="/manifest.json" />
    <meta name="mobile-web-app-capable" content="yes" />
-    <meta name="application-name" content="Lotus Chat" />
+    <meta name="application-name" content="Cinny" />
-    <meta name="apple-mobile-web-app-title" content="Lotus Chat" />
+    <meta name="apple-mobile-web-app-title" content="Cinny" />
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
@@ -1,7 +1,7 @@
 {
-  "name": "lotus-chat",
+  "name": "cinny",
-  "version": "4.12.3-lotus",
+  "version": "4.11.1",
-  "description": "Lotus Chat — Matrix client for Lotus Guild",
+  "description": "Yet another matrix client",
  "main": "index.js",
  "type": "module",
  "engines": {
@@ -16,11 +16,9 @@
    "check:prettier": "prettier --check .",
    "fix:prettier": "prettier --write .",
    "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test $(find src -name '*.test.ts')",
+    "prepare": "husky install",
    "prepare": "husky",
    "commit": "git-cz",
-    "postinstall": "node scripts/patch-folds.mjs",
+    "semantic-release": "semantic-release"
    "sync:decorations": "node scripts/syncDecorations.mjs"
  },
  "lint-staged": {
    "*.{ts,tsx,js,jsx}": "eslint",
@@ -31,123 +29,132 @@
      "path": "./node_modules/cz-conventional-changelog"
    }
  },
  "release": {
    "branches": [
      "dev"
    ],
    "plugins": [
      "@semantic-release/commit-analyzer",
      "@semantic-release/release-notes-generator",
      [
        "@semantic-release/exec",
        {
          "prepareCmd": "node scripts/update-version.js ${nextRelease.version}"
        }
      ],
      [
        "@semantic-release/git",
        {
          "assets": [
            "package.json",
            "package-lock.json",
            "src/app/features/settings/about/About.tsx",
            "src/app/pages/auth/AuthFooter.tsx",
            "src/app/pages/client/WelcomePage.tsx"
          ],
          "message": "chore(release): ${nextRelease.version} [skip ci]"
        }
      ],
      "@semantic-release/github"
    ]
  },
  "keywords": [],
  "author": "Ajay Bura",
  "license": "AGPL-3.0-only",
  "dependencies": {
-    "@atlaskit/pragmatic-drag-and-drop": "1.8.1",
+    "@atlaskit/pragmatic-drag-and-drop": "1.1.6",
-    "@atlaskit/pragmatic-drag-and-drop-auto-scroll": "2.1.5",
+    "@atlaskit/pragmatic-drag-and-drop-auto-scroll": "1.3.0",
-    "@atlaskit/pragmatic-drag-and-drop-hitbox": "1.1.0",
+    "@atlaskit/pragmatic-drag-and-drop-hitbox": "1.0.3",
-    "@eslint/eslintrc": "3.3.5",
+    "@fontsource/inter": "4.5.14",
-    "@eslint/js": "10.0.1",
+    "@tanstack/react-query": "5.24.1",
-    "@fontsource-variable/inter": "5.2.8",
+    "@tanstack/react-query-devtools": "5.24.1",
-    "@giphy/js-fetch-api": "5.8.0",
+    "@tanstack/react-virtual": "3.2.0",
-    "@giphy/js-types": "5.1.0",
+    "@vanilla-extract/css": "1.9.3",
-    "@giphy/js-util": "5.2.0",
+    "@vanilla-extract/recipes": "0.3.0",
-    "@giphy/react-components": "10.1.2",
+    "@vanilla-extract/vite-plugin": "3.7.1",
    "@sapphi-red/web-noise-suppressor": "0.3.5",
    "@tanstack/react-query": "5.100.13",
    "@tanstack/react-query-devtools": "5.100.13",
    "@tanstack/react-virtual": "3.13.25",
    "@workadventure/noise-suppression": "0.0.4",
    "await-to-js": "3.0.0",
    "badwords-list": "2.0.1-4",
-    "blurhash": "2.0.5",
+    "blurhash": "2.0.4",
    "browser-encrypt-attachment": "0.3.0",
-    "chroma-js": "3.2.0",
+    "chroma-js": "3.1.2",
-    "classnames": "2.5.1",
+    "classnames": "2.3.2",
    "dateformat": "5.0.3",
-    "dayjs": "1.11.20",
+    "dayjs": "1.11.10",
-    "deepfilternet3-noise-filter": "1.2.1",
+    "domhandler": "5.0.3",
-    "domhandler": "6.0.1",
+    "emojibase": "15.3.1",
-    "emojibase": "17.0.0",
+    "emojibase-data": "15.3.2",
    "emojibase-data": "17.0.0",
    "file-saver": "2.0.5",
-    "focus-trap-react": "12.0.2",
+    "focus-trap-react": "10.0.2",
    "folds": "2.6.2",
-    "globals": "17.6.0",
+    "html-dom-parser": "4.0.0",
-    "html-dom-parser": "7.1.0",
+    "html-react-parser": "4.2.0",
-    "html-react-parser": "6.1.2",
+    "i18next": "23.12.2",
-    "i18next": "26.2.0",
+    "i18next-browser-languagedetector": "8.0.0",
-    "i18next-browser-languagedetector": "8.2.1",
+    "i18next-http-backend": "2.5.2",
-    "i18next-http-backend": "4.0.0",
+    "immer": "9.0.16",
    "immer": "11.1.8",
    "is-hotkey": "0.2.0",
-    "jotai": "2.20.0",
+    "jotai": "2.6.0",
-    "jsqr": "1.4.0",
+    "linkify-react": "4.3.2",
-    "katex": "0.16.11",
+    "linkifyjs": "4.3.2",
-    "linkify-react": "4.3.3",
+    "matrix-js-sdk": "38.2.0",
-    "linkifyjs": "4.3.3",
+    "matrix-widget-api": "1.13.0",
    "matrix-js-sdk": "41.7.0",
    "matrix-widget-api": "1.17.0",
    "millify": "6.1.0",
-    "pdfjs-dist": "5.7.284",
+    "pdfjs-dist": "4.2.67",
    "prismjs": "1.30.0",
-    "qrcode": "1.5.4",
+    "react": "18.2.0",
-    "qrcode.react": "4.2.0",
+    "react-aria": "3.29.1",
-    "react": "19.2.6",
+    "react-blurhash": "0.2.0",
-    "react-aria": "3.48.0",
+    "react-colorful": "5.6.1",
-    "react-blurhash": "0.3.0",
+    "react-dom": "18.2.0",
-    "react-colorful": "5.7.0",
+    "react-error-boundary": "4.0.13",
-    "react-dom": "19.2.6",
+    "react-google-recaptcha": "2.1.0",
-    "react-error-boundary": "6.1.1",
+    "react-i18next": "15.0.0",
-    "react-google-recaptcha": "3.1.0",
+    "react-range": "1.8.14",
-    "react-i18next": "17.0.8",
+    "react-router-dom": "6.30.3",
-    "react-range": "1.10.0",
+    "sanitize-html": "2.12.1",
-    "react-router-dom": "7.15.1",
+    "slate": "0.123.0",
-    "sanitize-html": "2.17.4",
+    "slate-dom": "0.123.0",
    "slate": "0.124.1",
    "slate-dom": "0.124.1",
    "slate-history": "0.113.1",
-    "slate-react": "0.124.2",
+    "slate-react": "0.123.0",
-    "styled-components": "6.4.2",
+    "ua-parser-js": "1.0.35"
    "ua-parser-js": "2.0.10",
    "workbox-precaching": "7.4.1"
  },
  "devDependencies": {
-    "@lotusguild/element-call-embedded": "0.20.1-lotus.1",
+    "@element-hq/element-call-embedded": "0.16.3",
-    "@rollup/plugin-inject": "5.0.5",
+    "@esbuild-plugins/node-globals-polyfill": "0.2.3",
-    "@rollup/plugin-wasm": "6.2.2",
+    "@rollup/plugin-inject": "5.0.3",
-    "@types/chroma-js": "3.1.2",
+    "@rollup/plugin-wasm": "6.1.1",
-    "@types/file-saver": "2.0.7",
+    "@semantic-release/exec": "7.1.0",
    "@semantic-release/git": "10.0.1",
    "@types/chroma-js": "3.1.1",
    "@types/file-saver": "2.0.5",
    "@types/is-hotkey": "0.1.10",
-    "@types/katex": "0.16.8",
+    "@types/node": "18.11.18",
-    "@types/node": "25.9.1",
+    "@types/prismjs": "1.26.0",
-    "@types/prismjs": "1.26.6",
+    "@types/react": "18.2.39",
-    "@types/qrcode": "1.5.6",
+    "@types/react-dom": "18.2.17",
-    "@types/react": "19.2.15",
+    "@types/react-google-recaptcha": "2.1.8",
-    "@types/react-dom": "19.2.3",
+    "@types/sanitize-html": "2.9.0",
-    "@types/react-google-recaptcha": "2.1.9",
+    "@types/ua-parser-js": "0.7.36",
-    "@types/sanitize-html": "2.16.1",
+    "@typescript-eslint/eslint-plugin": "5.46.1",
-    "@types/ua-parser-js": "0.7.39",
+    "@typescript-eslint/parser": "5.46.1",
-    "@typescript-eslint/eslint-plugin": "8.59.4",
+    "@vitejs/plugin-react": "4.2.0",
    "@typescript-eslint/parser": "8.59.4",
    "@vanilla-extract/css": "1.20.1",
    "@vanilla-extract/recipes": "0.5.7",
    "@vanilla-extract/vite-plugin": "5.2.2",
    "@vitejs/plugin-react": "6.0.2",
    "buffer": "6.0.3",
    "cz-conventional-changelog": "3.3.0",
-    "eslint": "9.39.4",
+    "eslint": "8.29.0",
    "eslint-config-airbnb": "19.0.4",
-    "eslint-config-prettier": "10.1.8",
+    "eslint-config-prettier": "8.5.0",
-    "eslint-plugin-import": "2.32.0",
+    "eslint-plugin-import": "2.29.1",
-    "eslint-plugin-jsx-a11y": "6.10.2",
+    "eslint-plugin-jsx-a11y": "6.6.1",
-    "eslint-plugin-react": "7.37.5",
+    "eslint-plugin-react": "7.31.11",
-    "eslint-plugin-react-hooks": "7.1.1",
+    "eslint-plugin-react-hooks": "4.6.0",
    "husky": "9.1.7",
-    "lint-staged": "17.0.5",
+    "lint-staged": "16.3.2",
-    "prettier": "3.8.3",
+    "prettier": "2.8.1",
-    "tsx": "4.22.4",
+    "semantic-release": "25.0.3",
-    "typescript": "6.0.3",
+    "typescript": "4.9.4",
-    "vite": "8.0.14",
+    "vite": "6.4.2",
-    "vite-plugin-pwa": "1.3.0",
+    "vite-plugin-pwa": "0.20.5",
-    "vite-plugin-static-copy": "4.1.0"
+    "vite-plugin-static-copy": "1.0.4",
-  },
+    "vite-plugin-top-level-await": "1.4.4"
  "overrides": {
    "@giphy/js-util": {
      "dompurify": ">=3.3.4"
    },
    "js-cookie": ">=3.0.6"
  }
 }
@@ -1,16 +0,0 @@
 {
  "defaultHomeserver": 0,
  "homeserverList": ["matrix.lotusguild.org", "matrix.org", "mozilla.org"],
  "allowCustomHomeservers": true,
  "featuredCommunities": {
    "openAsDefault": false,
    "spaces": [],
    "rooms": [],
    "servers": []
  },
  "hashRouter": {
    "enabled": false,
    "basename": "/"
  },
  "gifApiKey": ""
 }
@@ -1,11 +0,0 @@
 <!DOCTYPE html>
 <html lang=en>
  <meta charset=utf-8>
  <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
  <title>Error 404 (Not Found)!!1</title>
  <style>
    *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}
  </style>
  <a href=//www.google.com/><span id=logo aria-label=Google></span></a>
  <p><b>404.</b> <ins>That’s an error.</ins>
  <p>The requested URL <code>/s/jetbrainsmono/v18/tDbY2o-flEEny0FZhsfKu5WU4xD-IQ.woff2</code> was not found on this server.  <ins>That’s all we know.</ins>
@@ -1,11 +0,0 @@
 <!DOCTYPE html>
 <html lang=en>
  <meta charset=utf-8>
  <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
  <title>Error 404 (Not Found)!!1</title>
  <style>
    *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}
  </style>
  <a href=//www.google.com/><span id=logo aria-label=Google></span></a>
  <p><b>404.</b> <ins>That’s an error.</ins>
  <p>The requested URL <code>/s/jetbrainsmono/v18/tDbY2o-flEEny0FZhsfKu5WU4xD-IQ.woff2</code> was not found on this server.  <ins>That’s all we know.</ins>
@@ -1,11 +0,0 @@
 <!DOCTYPE html>
 <html lang=en>
  <meta charset=utf-8>
  <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">
  <title>Error 404 (Not Found)!!1</title>
  <style>
    *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}
  </style>
  <a href=//www.google.com/><span id=logo aria-label=Google></span></a>
  <p><b>404.</b> <ins>That’s an error.</ins>
  <p>The requested URL <code>/s/jetbrainsmono/v18/tDbY2o-flEEny0FZhsfKu5WU4xD-IQ.woff2</code> was not found on this server.  <ins>That’s all we know.</ins>
@@ -1,51 +0,0 @@
 /* Self-hosted fonts — avoids tracking prevention in desktop WebView2 */
@font-face {
  font-family: 'JetBrains Mono';
  font-style: italic;
  font-weight: 400;
  font-display: swap;
  src: url('/fonts/JetBrainsMono-italic-400.woff2') format('woff2');
  unicode-range:
    U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329,
    U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
 }
@font-face {
  font-family: 'JetBrains Mono';
  font-style: normal;
  font-weight: 400;
  font-display: swap;
  src: url('/fonts/JetBrainsMono-normal-400.woff2') format('woff2');
  unicode-range:
    U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329,
    U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
 }
@font-face {
  font-family: 'JetBrains Mono';
  font-style: normal;
  font-weight: 700;
  font-display: swap;
  src: url('/fonts/JetBrainsMono-normal-700.woff2') format('woff2');
  unicode-range:
    U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329,
    U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
 }
@font-face {
  font-family: 'Fira Code';
  font-style: normal;
  font-weight: 400;
  font-display: swap;
  src: url('/fonts/FiraCode-400.woff2') format('woff2');
  unicode-range:
    U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329,
    U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
 }
@font-face {
  font-family: 'Fira Code';
  font-style: normal;
  font-weight: 600;
  font-display: swap;
  src: url('/fonts/FiraCode-600.woff2') format('woff2');
  unicode-range:
    U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329,
    U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
 }
@@ -2,57 +2,6 @@
  "Organisms": {
    "RoomCommon": {
      "changed_room_name": " changed room name"
    },
    "CreateRoom": {
      "chat_room": "Chat Room",
      "chat_room_desc": "Messages, photos, and videos.",
      "voice_room": "Voice Room",
      "voice_room_desc": "Live audio and video conversations."
    },
    "ImageViewer": {
      "download": "Download"
    },
    "Message": {
      "open_location": "Open Location",
      "thread": "Thread"
    },
    "ImageContent": {
      "view": "View",
      "spoiler": "Spoiler",
      "retry": "Retry"
    },
    "DeviceVerification": {
      "close": "Close",
      "accept": "Accept",
      "they_match": "They Match",
      "okay": "Okay",
      "do_not_match": "Do not Match",
      "please_accept": "Please accept the request from other device.",
      "waiting_accept": "Waiting for request to be accepted...",
      "click_accept": "Click accept to start the verification process.",
      "request_accepted": "Verification request has been accepted.",
      "waiting_response": "Waiting for the response from other device...",
      "starting_emoji": "Starting verification using emoji comparison...",
      "confirm_emoji": "Confirm the emoji below are displayed on both devices, in the same order:",
      "device_verified": "Your device is verified.",
      "verification_canceled": "Verification has been canceled."
    },
    "UrlPreview": {
      "join_server": "Join Server"
    },
    "InviteUser": {
      "invite": "Invite"
    },
    "UploadBoard": {
      "files": "Files",
      "send": "Send",
      "upload_failed": "Upload Failed"
    },
    "PasswordStage": {
      "account_password": "Account Password",
      "password": "Password",
      "invalid_password": "Invalid Password!",
      "authenticate_prompt": "To perform this action you need to authenticate yourself by entering you account password."
    }
  }
 }
@@ -1,86 +1,59 @@
 {
-  "name": "Lotus Chat",
+  "name": "Cinny",
-  "short_name": "Lotus Chat",
+  "short_name": "Cinny",
-  "description": "Lotus Chat \u2014 the Lotus Guild Matrix client",
+  "description": "Yet another matrix client",
  "dir": "auto",
  "lang": "en-US",
  "display": "standalone",
  "orientation": "portrait",
  "start_url": "./",
-  "background_color": "#0a0a0a",
+  "background_color": "#fff",
-  "theme_color": "#980000",
+  "theme_color": "#fff",
  "icons": [
    {
-      "src": "./res/android/android-chrome-36x36.png",
+      "src": "./public/android/android-chrome-36x36.png",
      "sizes": "36x36",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-48x48.png",
+      "src": "./public/android/android-chrome-48x48.png",
      "sizes": "48x48",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-72x72.png",
+      "src": "./public/android/android-chrome-72x72.png",
      "sizes": "72x72",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-96x96.png",
+      "src": "./public/android/android-chrome-96x96.png",
      "sizes": "96x96",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-144x144.png",
+      "src": "./public/android/android-chrome-144x144.png",
      "sizes": "144x144",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-192x192.png",
+      "src": "./public/android/android-chrome-192x192.png",
      "sizes": "192x192",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-256x256.png",
+      "src": "./public/android/android-chrome-256x256.png",
      "sizes": "256x256",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-384x384.png",
+      "src": "./public/android/android-chrome-384x384.png",
      "sizes": "384x384",
      "type": "image/png"
    },
    {
-      "src": "./res/android/android-chrome-512x512.png",
+      "src": "./public/android/android-chrome-512x512.png",
      "sizes": "512x512",
      "type": "image/png"
    },
    {
      "src": "./res/android/maskable-192x192.png",
      "sizes": "192x192",
      "type": "image/png",
      "purpose": "maskable"
    },
    {
      "src": "./res/android/maskable-512x512.png",
      "sizes": "512x512",
      "type": "image/png",
      "purpose": "maskable"
    }
  ],
  "categories": ["social", "communication", "productivity"],
  "shortcuts": [
    {
      "name": "New Message",
      "short_name": "DM",
      "description": "Open a new direct message",
      "url": "/",
      "icons": [
        {
          "src": "res/android/android-chrome-96x96.png",
          "sizes": "96x96"
        }
      ]
    }
  ]
 }
@@ -1,14 +1,13 @@
-<svg viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+<svg width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
-  <g fill="#980000" fill-opacity="0.88">
+<g clip-path="url(#clip0_2707_1961)">
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(0,9,9)"/>
+<path d="M10.5867 17.3522C10.0727 17.4492 9.54226 17.5 9 17.5C4.30558 17.5 0.5 13.6944 0.5 9C0.5 4.30558 4.30558 0.5 9 0.5C13.6944 0.5 17.5 4.30558 17.5 9C17.5 9.54226 17.4492 10.0727 17.3522 10.5867C16.6511 10.2123 15.8503 10 15 10C12.2386 10 10 12.2386 10 15C10 15.8503 10.2123 16.6511 10.5867 17.3522Z" fill="white"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(45,9,9)"/>
+<path d="M10 6.39999C10 6.67614 9.77614 6.89999 9.5 6.89999C9.22386 6.89999 9 6.67614 9 6.39999C9 6.12385 9.22386 5.89999 9.5 5.89999C9.77614 5.89999 10 6.12385 10 6.39999Z" fill="black"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(90,9,9)"/>
+<path fill-rule="evenodd" clip-rule="evenodd" d="M9 0C4 0 0 4 0 9C0 14 4 18 9 18C9.63967 18 10.263 17.9345 10.8636 17.8099C10.3186 17.0091 10 16.0417 10 15C10 12.2386 12.2386 10 15 10C16.0417 10 17.0091 10.3186 17.8099 10.8636C17.9345 10.263 18 9.63967 18 9C18 4 14 0 9 0ZM1.2 10.8L4.7 8.5V8.2C4.7 6.4 6 5 7.8 4.8H8.2C9.4 4.8 10.5 5.4 11.1 6.4C11.4 6.3 11.7 6.3 12 6.3C12.4 6.3 12.8 6.3 13.2 6.4C13.9 6.6 14.6 6.9 15.2 7.3C14.6 7.1 14 7 13.3 7C12.1 7 11.1 7.4 10.4 8.4C9.7 9.3 9.3 10.4 9.3 11.6C9.3 13.1 8.9 14.5 8 15.8C7.93744 15.8834 7.87923 15.9625 7.82356 16.0381C7.6123 16.325 7.43739 16.5626 7.2 16.8C4.2 16.1 1.9 13.8 1.2 10.8Z" fill="black"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(135,9,9)"/>
+<path d="M18 15C18 16.6569 16.6569 18 15 18C13.3431 18 12 16.6569 12 15C12 13.3431 13.3431 12 15 12C16.6569 12 18 13.3431 18 15Z" fill="#45B83B"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(180,9,9)"/>
+</g>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(225,9,9)"/>
+<defs>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(270,9,9)"/>
+<clipPath id="clip0_2707_1961">
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(315,9,9)"/>
+<rect width="18" height="18" fill="white"/>
-  </g>
+</clipPath>
-  <circle cx="9" cy="9" r="2.2" fill="#cc2000"/>
+</defs>
  <circle cx="14.5" cy="14.5" r="3" fill="#45B83B"/>
 </svg>
@@ -1,14 +1,13 @@
-<svg viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+<svg width="18" height="18" viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
-  <g fill="#980000" fill-opacity="0.88">
+<g clip-path="url(#clip0_2707_2015)">
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(0,9,9)"/>
+<path d="M10.5867 17.3522C10.0727 17.4492 9.54226 17.5 9 17.5C4.30558 17.5 0.5 13.6944 0.5 9C0.5 4.30558 4.30558 0.5 9 0.5C13.6944 0.5 17.5 4.30558 17.5 9C17.5 9.54226 17.4492 10.0727 17.3522 10.5867C16.6511 10.2123 15.8503 10 15 10C12.2386 10 10 12.2386 10 15C10 15.8503 10.2123 16.6511 10.5867 17.3522Z" fill="white"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(45,9,9)"/>
+<path d="M10 6.39999C10 6.67614 9.77614 6.89999 9.5 6.89999C9.22386 6.89999 9 6.67614 9 6.39999C9 6.12385 9.22386 5.89999 9.5 5.89999C9.77614 5.89999 10 6.12385 10 6.39999Z" fill="black"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(90,9,9)"/>
+<path fill-rule="evenodd" clip-rule="evenodd" d="M9 0C4 0 0 4 0 9C0 14 4 18 9 18C9.63967 18 10.263 17.9345 10.8636 17.8099C10.3186 17.0091 10 16.0417 10 15C10 12.2386 12.2386 10 15 10C16.0417 10 17.0091 10.3186 17.8099 10.8636C17.9345 10.263 18 9.63967 18 9C18 4 14 0 9 0ZM1.2 10.8L4.7 8.5V8.2C4.7 6.4 6 5 7.8 4.8H8.2C9.4 4.8 10.5 5.4 11.1 6.4C11.4 6.3 11.7 6.3 12 6.3C12.4 6.3 12.8 6.3 13.2 6.4C13.9 6.6 14.6 6.9 15.2 7.3C14.6 7.1 14 7 13.3 7C12.1 7 11.1 7.4 10.4 8.4C9.7 9.3 9.3 10.4 9.3 11.6C9.3 13.1 8.9 14.5 8 15.8C7.93744 15.8834 7.87923 15.9625 7.82356 16.0381C7.6123 16.325 7.43739 16.5626 7.2 16.8C4.2 16.1 1.9 13.8 1.2 10.8Z" fill="black"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(135,9,9)"/>
+<path d="M18 15C18 16.6569 16.6569 18 15 18C13.3431 18 12 16.6569 12 15C12 13.3431 13.3431 12 15 12C16.6569 12 18 13.3431 18 15Z" fill="#989898"/>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(180,9,9)"/>
+</g>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(225,9,9)"/>
+<defs>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(270,9,9)"/>
+<clipPath id="clip0_2707_2015">
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(315,9,9)"/>
+<rect width="18" height="18" fill="white"/>
-  </g>
+</clipPath>
-  <circle cx="9" cy="9" r="2.2" fill="#cc2000"/>
+</defs>
  <circle cx="14.5" cy="14.5" r="3" fill="#989898"/>
 </svg>
@@ -1,13 +1,19 @@
-<svg viewBox="0 0 18 18" fill="none" xmlns="http://www.w3.org/2000/svg">
+<!-- Generator: Adobe Illustrator 18.0.0, SVG Export Plug-In  -->
-  <g fill="#980000" fill-opacity="0.88">
+<svg version="1.1"
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(0,9,9)"/>
+	 xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(45,9,9)"/>
+	 x="0px" y="0px" width="18px" height="18px" viewBox="0 0 18 18" enable-background="new 0 0 18 18" xml:space="preserve">
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(90,9,9)"/>
+<defs>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(135,9,9)"/>
+</defs>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(180,9,9)"/>
+<g>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(225,9,9)"/>
+	<g>
-  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(270,9,9)"/>
+		<circle fill="#FFFFFF" cx="9" cy="9" r="8.5"/>
  <path d="M9,9 Q6.4,4.8 9,1.2 Q11.6,4.8 9,9Z" transform="rotate(315,9,9)"/>
 	</g>
-  <circle cx="9" cy="9" r="2.2" fill="#cc2000"/>
+	<g>
 		<path d="M9,0C4,0,0,4,0,9c0,5,4,9,9,9c5,0,9-4,9-9C18,4,14,0,9,0z M1.2,10.8l3.5-2.3c0-0.1,0-0.2,0-0.3c0-1.8,1.3-3.2,3.1-3.4
 			c0.1,0,0.2,0,0.4,0c1.2,0,2.3,0.6,2.9,1.6c0.3-0.1,0.6-0.1,0.9-0.1c0.4,0,0.8,0,1.2,0.1c0.7,0.2,1.4,0.5,2,0.9
 			C14.6,7.1,14,7,13.3,7c-1.2,0-2.2,0.4-2.9,1.4c-0.7,0.9-1.1,2-1.1,3.2c0,1.5-0.4,2.9-1.3,4.2c-0.3,0.4-0.5,0.7-0.8,1
 			C4.2,16.1,1.9,13.8,1.2,10.8z"/>
 		<circle cx="9.5" cy="6.4" r="0.5"/>
 	</g>
 </g>
 </svg>
@@ -1,35 +0,0 @@
 import { readFileSync, writeFileSync } from 'fs';
 import { fileURLToPath } from 'url';
 import { join, dirname } from 'path';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const foldsPath = join(__dirname, '../node_modules/folds/dist/index.js');
 try {
  let content = readFileSync(foldsPath, 'utf8');
  // Defensive guard: if src is not a function, render null instead of crashing
  const original = 'children: src(filled)';
  const patched = 'children: typeof src === "function" ? src(filled) : null';
  if (content.includes(patched)) {
    console.log('folds patch already applied.');
  } else if (content.includes(original)) {
    content = content.replace(original, patched);
    writeFileSync(foldsPath, content, 'utf8');
    console.log('Applied defensive Icon src guard to folds.');
  } else {
    // Genuine "patch could not be applied" case: the target string is gone
    // (folds renamed/restructured it) AND it isn't already patched. Fail hard
    // so the postinstall hook / CI breaks loudly instead of silently shipping
    // an unpatched folds (which crashes at render with "src is not a function").
    console.error(
      'ERROR: folds Icon patch target not found - folds may have updated. ' +
        'Update the patch target string in scripts/patch-folds.mjs before building.',
    );
    process.exit(1);
  }
 } catch (e) {
  console.error('ERROR: Could not patch folds:', e.message);
  process.exit(1);
 }
@@ -1,123 +0,0 @@
 #!/usr/bin/env node
 /**
 * Syncs avatarDecorations.ts with what's actually available on the Nextcloud CDN.
 *
 * Usage:
 *   npm run sync:decorations
 *
 * Workflow after deleting files from Nextcloud:
 *   1. Delete decoration files from your Nextcloud share.
 *   2. Run: npm run sync:decorations
 *   3. It probes each catalog slug via HTTP HEAD and removes entries
 *      whose files returned 404. Empty categories are dropped automatically.
 *   4. Commit the updated avatarDecorations.ts.
 */
 import { readFileSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const root = join(__dirname, '..');
 const catalogPath = join(root, 'src', 'app', 'features', 'lotus', 'avatarDecorations.ts');
 // Single source of truth: the CDN base URL lives in avatarDecorations.ts as
 // `export const DECORATION_CDN`. We extract it from there at runtime rather than
 // re-declaring it here, so the build script and the app can never drift. This
 // .mjs script can't cleanly import the browser-side .ts module (it's outside the
 // Vite/TS app graph), so we parse the constant out of the file text instead.
 // If you migrate the CDN, change it ONLY in avatarDecorations.ts.
 const catalog = readFileSync(catalogPath, 'utf8');
 const cdnMatch = catalog.match(/export const DECORATION_CDN\s*=\s*['"]([^'"]+)['"]/);
 if (!cdnMatch) {
  console.error(
    'Could not find `export const DECORATION_CDN` in avatarDecorations.ts — ' +
      'the constant may have been renamed. Update scripts/syncDecorations.mjs.',
  );
  process.exit(1);
 }
 const CDN = cdnMatch[1];
 // Extract all slugs from the catalog file
 const slugMatches = [...catalog.matchAll(/slug: '([^']+)'/g)].map((m) => m[1]);
 if (slugMatches.length === 0) {
  console.error('No slugs found in catalog — check the file path.');
  process.exit(1);
 }
 console.log(`Checking ${slugMatches.length} decorations against ${CDN} …`);
 console.log('(This makes one HEAD request per decoration)\n');
 // Probe all slugs in parallel batches of 16
 async function headCheck(slug) {
  try {
    const res = await fetch(`${CDN}/${slug}.png`, { method: 'HEAD' });
    return { slug, ok: res.ok, status: res.status };
  } catch {
    // Network/DNS/TLS failure — NOT a confirmation the file is gone.
    return { slug, ok: false, status: 0, networkError: true };
  }
 }
 const BATCH = 16;
 const results = [];
 for (let i = 0; i < slugMatches.length; i += BATCH) {
  const batch = slugMatches.slice(i, i + BATCH);
  const batchResults = await Promise.all(batch.map(headCheck));
  results.push(...batchResults);
 }
 // Only a CONFIRMED HTTP 404 means the file is genuinely gone and safe to
 // remove. A network error or any other non-ok status (5xx, 403, timeout) is
 // ambiguous — the CDN may be unreachable — so refuse to remove anything and
 // abort, otherwise a transient outage would wipe the whole catalog from source
 // control (N119).
 const transient = results.filter((r) => !r.ok && r.status !== 404);
 if (transient.length > 0) {
  console.error(
    `Aborting: ${transient.length} decoration(s) returned a non-404 failure ` +
      `(network error / server error). The CDN may be unreachable — refusing to ` +
      `remove entries to avoid wiping the catalog.`,
  );
  transient
    .slice(0, 8)
    .forEach((r) =>
      console.error(`  ${r.slug}: ${r.networkError ? 'network error' : `HTTP ${r.status}`}`),
    );
  process.exit(1);
 }
 const missing = results.filter((r) => r.status === 404);
 const found = results.filter((r) => r.ok);
 if (missing.length === 0) {
  console.log(`All ${found.length} decorations are available — catalog is up to date.`);
  process.exit(0);
 }
 console.log(`Found: ${found.length}  Missing: ${missing.length}\n`);
 missing.forEach((r) => console.log(`  Removing (HTTP ${r.status}): ${r.slug}`));
 const missingSet = new Set(missing.map((r) => r.slug));
 // Remove individual entries for missing slugs
 let updated = catalog.replace(/^[ \t]*\{ slug: '([^']+)', name: .+\},?\r?\n/gm, (match, slug) =>
  missingSet.has(slug) ? '' : match,
 );
 // Drop category blocks that now have an empty decorations array
 updated = updated.replace(
  /  \{\n    id: '[^']+',\n    label: '[^']+',\n    decorations: \[\n?[ \t]*\],?\n  \},?\n/g,
  '',
 );
 // Clean up stray blank lines
 updated = updated.replace(/\n{3,}/g, '\n\n');
 writeFileSync(catalogPath, updated, 'utf8');
 console.log(
  `\nDone. Removed ${missing.length} entr${missing.length === 1 ? 'y' : 'ies'} from the catalog.`,
 );
 console.log('Review with: git diff src/app/features/lotus/avatarDecorations.ts');
@@ -1,7 +1,7 @@
-import fs from 'fs';
+import fs from "fs";
-import path from 'path';
+import path from "path";
-import { execSync } from 'child_process';
+import { execSync } from "child_process";
-import { fileURLToPath } from 'url';
+import { fileURLToPath } from "url";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -9,26 +9,26 @@ const __dirname = path.dirname(__filename);
 const version = process.argv[2];
 if (!version) {
-  console.error('Version argument missing');
+  console.error("Version argument missing");
  process.exit(1);
 }
-const root = path.resolve(__dirname, '..');
+const root = path.resolve(__dirname, "..");
 const newVersionTag = `v${version}`;
 // Update package.json + package-lock.json safely
 execSync(`npm version ${version} --no-git-tag-version`, {
  cwd: root,
-  stdio: 'inherit',
+  stdio: "inherit",
 });
 console.log(`Updated package.json and package-lock.json → ${version}`);
 // Update UI version references
 const files = [
-  'src/app/features/settings/about/About.tsx',
+  "src/app/features/settings/about/About.tsx",
-  'src/app/pages/auth/AuthFooter.tsx',
+  "src/app/pages/auth/AuthFooter.tsx",
-  'src/app/pages/client/WelcomePage.tsx',
+  "src/app/pages/client/WelcomePage.tsx",
 ];
 files.forEach((filePath) => {
@@ -39,7 +39,7 @@ files.forEach((filePath) => {
    return;
  }
-  const content = fs.readFileSync(absPath, 'utf8');
+  const content = fs.readFileSync(absPath, "utf8");
  const updated = content.replace(/v\d+\.\d+\.\d+/g, newVersionTag);
  fs.writeFileSync(absPath, updated);
@@ -54,7 +54,7 @@ function AccountDataEdit({
  const { handleKeyDown, operations, getTarget } = useTextAreaCodeEditor(
    textAreaRef,
-    EDITOR_INTENT_SPACE_COUNT,
+    EDITOR_INTENT_SPACE_COUNT
  );
  const [submitState, submit] = useAsyncCallback<void, MatrixError, [string, object]>(submitChange);
@@ -127,7 +127,6 @@ function AccountDataEdit({
            <Input
              variant={type.length > 0 || submitting ? 'SurfaceVariant' : 'Background'}
              name="typeInput"
              aria-label="Account data type"
              size="400"
              radii="300"
              readOnly={type.length > 0 || submitting}
@@ -171,7 +170,6 @@ function AccountDataEdit({
        <TextAreaComponent
          ref={textAreaRef}
          name="contentTextArea"
          aria-label="JSON content"
          style={{
            fontFamily: 'monospace',
          }}
@@ -213,7 +211,6 @@ function AccountDataView({ type, defaultContent, onEdit }: AccountDataViewProps)
          <Text size="L400">Account Data</Text>
          <Input
            variant="SurfaceVariant"
            aria-label="Account data type"
            size="400"
            radii="300"
            readOnly
@@ -279,7 +276,7 @@ export function AccountDataEditor({
  const contentJSONStr = useMemo(
    () => JSON.stringify(data.content, null, EDITOR_INTENT_SPACE_COUNT),
-    [data.content],
+    [data.content]
  );
  return (
@@ -297,7 +294,7 @@ export function AccountDataEditor({
            </Chip>
          </Box>
          <Box shrink="No">
-            <IconButton onClick={requestClose} variant="Surface" aria-label="Close">
+            <IconButton onClick={requestClose} variant="Surface">
              <Icon src={Icons.Cross} />
            </IconButton>
          </Box>
@@ -45,11 +45,11 @@ export function AuthFlowsLoader({ fallback, error, children }: AuthFlowsLoaderPr
      };
      return authFlows;
-    }, [mx]),
+    }, [mx])
  );
  useEffect(() => {
-    load().catch(() => {});
+    load();
  }, [load]);
  if (state.status === AsyncStatus.Idle || state.status === AsyncStatus.Loading) {
@@ -1,71 +0,0 @@
 import React, { useId } from 'react';
 export function AuthSkeleton() {
  const id = useId().replace(/:/g, '');
  const shimmerKeyframes = `
    @keyframes shimmer-${id} {
      0%   { background-position: -400px 0; }
      100% { background-position: 400px 0; }
    }
  `;
  const shimmer = {
    background:
      'linear-gradient(90deg, var(--skeleton-base) 25%, var(--skeleton-shine) 50%, var(--skeleton-base) 75%)',
    backgroundSize: '800px 100%',
    animation: `shimmer-${id} 1.6s ease-in-out infinite`,
    borderRadius: '4px',
  } as React.CSSProperties;
  return (
    <>
      <style>{shimmerKeyframes}</style>
      <div
        style={
          {
            display: 'flex',
            flexDirection: 'column',
            alignItems: 'center',
            justifyContent: 'center',
            minHeight: '100dvh',
            padding: '16px',
            '--skeleton-base': 'color-mix(in srgb, currentColor 8%, transparent)',
            '--skeleton-shine': 'color-mix(in srgb, currentColor 15%, transparent)',
          } as React.CSSProperties
        }
      >
        {/* Card */}
        <div
          style={{
            width: '100%',
            maxWidth: '360px',
            display: 'flex',
            flexDirection: 'column',
            gap: '24px',
          }}
        >
          {/* Logo + app name */}
          <div
            style={{ display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '12px' }}
          >
            <div style={{ ...shimmer, width: '64px', height: '64px', borderRadius: '50%' }} />
            <div style={{ ...shimmer, width: '100px', height: '20px' }} />
          </div>
          {/* Server picker */}
          <div style={{ display: 'flex', flexDirection: 'column', gap: '8px' }}>
            <div style={{ ...shimmer, width: '80px', height: '12px' }} />
            <div style={{ ...shimmer, width: '100%', height: '40px', borderRadius: '8px' }} />
          </div>
          {/* Form fields */}
          <div style={{ display: 'flex', flexDirection: 'column', gap: '12px' }}>
            <div style={{ ...shimmer, width: '100%', height: '40px', borderRadius: '8px' }} />
            <div style={{ ...shimmer, width: '100%', height: '40px', borderRadius: '8px' }} />
            <div style={{ ...shimmer, width: '100%', height: '40px', borderRadius: '8px' }} />
          </div>
        </div>
      </div>
    </>
  );
 }
@@ -24,7 +24,7 @@ export function BackRouteHandler({ children }: BackRouteHandlerProps) {
          caseSensitive: true,
          end: false,
        },
-        location.pathname,
+        location.pathname
      )
    ) {
      navigate(getHomePath());
@@ -37,7 +37,7 @@ export function BackRouteHandler({ children }: BackRouteHandlerProps) {
          caseSensitive: true,
          end: false,
        },
-        location.pathname,
+        location.pathname
      )
    ) {
      navigate(getDirectPath());
@@ -49,7 +49,7 @@ export function BackRouteHandler({ children }: BackRouteHandlerProps) {
        caseSensitive: true,
        end: false,
      },
-      location.pathname,
+      location.pathname
    );
    const encodedSpaceIdOrAlias = spaceMatch?.params.spaceIdOrAlias;
    const decodedSpaceIdOrAlias =
@@ -66,7 +66,7 @@ export function BackRouteHandler({ children }: BackRouteHandlerProps) {
          caseSensitive: true,
          end: false,
        },
-        location.pathname,
+        location.pathname
      )
    ) {
      navigate(getExplorePath());
@@ -79,7 +79,7 @@ export function BackRouteHandler({ children }: BackRouteHandlerProps) {
          caseSensitive: true,
          end: false,
        },
-        location.pathname,
+        location.pathname
      )
    ) {
      navigate(getInboxPath());
@@ -157,7 +157,7 @@ export function BackupRestoreTile({ crypto }: BackupRestoreTileProps) {
          setRestoreProgress(progress);
        },
      });
-    }, [crypto, setRestoreProgress]),
+    }, [crypto, setRestoreProgress])
  );
  const handleRestore = () => {
@@ -178,7 +178,6 @@ export function BackupRestoreTile({ crypto }: BackupRestoreTileProps) {
          )}
          <IconButton
            aria-pressed={!!menuCords}
            aria-label="Backup options"
            size="300"
            variant="Surface"
            radii="300"
@@ -12,7 +12,7 @@ export function CapabilitiesLoader({ children }: CapabilitiesLoaderProps) {
  const [state, load] = useAsyncCallback(useCallback(() => mx.getCapabilities(), [mx]));
  useEffect(() => {
-    load().catch(() => {});
+    load();
  }, [load]);
  return children(state.status === AsyncStatus.Success ? state.data : undefined);
@@ -21,7 +21,7 @@ export function ClientConfigLoader({ fallback, error, children }: ClientConfigLo
  const ignoreCallback = useCallback(() => setIgnoreError(true), []);
  useEffect(() => {
-    load().catch(() => undefined);
+    load();
  }, [load]);
  if (state.status === AsyncStatus.Idle || state.status === AsyncStatus.Loading) {
@@ -1,4 +1,4 @@
-import React, { ReactNode, RefObject, useCallback, useRef, useState } from 'react';
+import { ReactNode, RefObject, useCallback, useRef, useState } from 'react';
 import { useDebounce } from '../hooks/useDebounce';
 type ConfirmPasswordMatchProps = {
@@ -7,13 +7,13 @@ type ConfirmPasswordMatchProps = {
    match: boolean,
    doMatch: () => void,
    passRef: RefObject<HTMLInputElement>,
-    confPassRef: RefObject<HTMLInputElement>,
+    confPassRef: RefObject<HTMLInputElement>
  ) => ReactNode;
 };
 export function ConfirmPasswordMatch({ initialValue, children }: ConfirmPasswordMatchProps) {
  const [match, setMatch] = useState(initialValue);
-  const passRef = useRef<HTMLInputElement>(null) as React.RefObject<HTMLInputElement>;
+  const passRef = useRef<HTMLInputElement>(null);
-  const confPassRef = useRef<HTMLInputElement>(null) as React.RefObject<HTMLInputElement>;
+  const confPassRef = useRef<HTMLInputElement>(null);
  const doMatch = useDebounce(
    useCallback(() => {
@@ -28,7 +28,7 @@ export function ConfirmPasswordMatch({ initialValue, children }: ConfirmPassword
    {
      wait: 500,
      immediate: false,
-    },
+    }
  );
  return children(match, doMatch, passRef, confPassRef);
@@ -1,14 +1,11 @@
 import {
  ShowQrCodeCallbacks,
  ShowSasCallbacks,
  VerificationPhase,
  VerificationRequest,
  Verifier,
 } from 'matrix-js-sdk/lib/crypto-api';
-import React, { CSSProperties, useCallback, useEffect, useRef, useState } from 'react';
+import React, { CSSProperties, useCallback, useEffect, useState } from 'react';
 import { useTranslation } from 'react-i18next';
 import { VerificationMethod } from 'matrix-js-sdk/lib/types';
 import QRCode from 'qrcode';
 import {
  Box,
  Button,
@@ -29,13 +26,10 @@ import {
  useVerificationRequestPhase,
  useVerificationRequestReceived,
  useVerifierCancel,
  useVerifierShowReciprocateQr,
  useVerifierShowSas,
 } from '../hooks/useVerificationRequest';
 import { AsyncStatus, useAsyncCallback } from '../hooks/useAsyncCallback';
 import { ContainerColor } from '../styles/ContainerColor.css';
 import { useModalStyle } from '../hooks/useModalStyle';
 import { QrScanner } from './QrScanner';
 const DialogHeaderStyles: CSSProperties = {
  padding: `0 ${config.space.S200} 0 ${config.space.S400}`,
@@ -56,23 +50,21 @@ function WaitingMessage({ message }: WaitingMessageProps) {
 type VerificationUnexpectedProps = { message: string; onClose: () => void };
 function VerificationUnexpected({ message, onClose }: VerificationUnexpectedProps) {
  const { t } = useTranslation();
  return (
    <Box direction="Column" gap="400">
      <Text>{message}</Text>
      <Button variant="Secondary" fill="Soft" onClick={onClose}>
-        <Text size="B400">{t('Organisms.DeviceVerification.close')}</Text>
+        <Text size="B400">Close</Text>
      </Button>
    </Box>
  );
 }
 function VerificationWaitAccept() {
  const { t } = useTranslation();
  return (
    <Box direction="Column" gap="400">
-      <Text>{t('Organisms.DeviceVerification.please_accept')}</Text>
+      <Text>Please accept the request from other device.</Text>
-      <WaitingMessage message={t('Organisms.DeviceVerification.waiting_accept')} />
+      <WaitingMessage message="Waiting for request to be accepted..." />
    </Box>
  );
 }
@@ -81,13 +73,12 @@ type VerificationAcceptProps = {
  onAccept: () => Promise<void>;
 };
 function VerificationAccept({ onAccept }: VerificationAcceptProps) {
  const { t } = useTranslation();
  const [acceptState, accept] = useAsyncCallback(onAccept);
  const accepting = acceptState.status === AsyncStatus.Loading;
  return (
    <Box direction="Column" gap="400">
-      <Text>{t('Organisms.DeviceVerification.click_accept')}</Text>
+      <Text>Click accept to start the verification process.</Text>
      <Button
        variant="Primary"
        fill="Solid"
@@ -95,14 +86,37 @@ function VerificationAccept({ onAccept }: VerificationAcceptProps) {
        before={accepting && <Spinner size="100" variant="Primary" fill="Solid" />}
        disabled={accepting}
      >
-        <Text size="B400">{t('Organisms.DeviceVerification.accept')}</Text>
+        <Text size="B400">Accept</Text>
      </Button>
    </Box>
  );
 }
 function VerificationWaitStart() {
  return (
    <Box direction="Column" gap="400">
      <Text>Verification request has been accepted.</Text>
      <WaitingMessage message="Waiting for the response from other device..." />
    </Box>
  );
 }
 type VerificationStartProps = {
  onStart: () => Promise<void>;
 };
 function AutoVerificationStart({ onStart }: VerificationStartProps) {
  useEffect(() => {
    onStart();
  }, [onStart]);
  return (
    <Box direction="Column" gap="400">
      <WaitingMessage message="Starting verification using emoji comparison..." />
    </Box>
  );
 }
 function CompareEmoji({ sasData }: { sasData: ShowSasCallbacks }) {
  const { t } = useTranslation();
  const [confirmState, confirm] = useAsyncCallback(useCallback(() => sasData.confirm(), [sasData]));
  const confirming =
@@ -110,7 +124,7 @@ function CompareEmoji({ sasData }: { sasData: ShowSasCallbacks }) {
  return (
    <Box direction="Column" gap="400">
-      <Text>{t('Organisms.DeviceVerification.confirm_emoji')}</Text>
+      <Text>Confirm the emoji below are displayed on both devices, in the same order:</Text>
      <Box
        className={ContainerColor({ variant: 'SurfaceVariant' })}
        style={{
@@ -123,6 +137,7 @@ function CompareEmoji({ sasData }: { sasData: ShowSasCallbacks }) {
      >
        {sasData.sas.emoji?.map(([emoji, name], index) => (
          <Box
            // eslint-disable-next-line react/no-array-index-key
            key={`${emoji}${name}${index}`}
            direction="Column"
            gap="100"
@@ -142,7 +157,7 @@ function CompareEmoji({ sasData }: { sasData: ShowSasCallbacks }) {
          disabled={confirming}
          before={confirming && <Spinner size="100" variant="Primary" />}
        >
-          <Text size="B400">{t('Organisms.DeviceVerification.they_match')}</Text>
+          <Text size="B400">They Match</Text>
        </Button>
        <Button
          variant="Primary"
@@ -150,7 +165,7 @@ function CompareEmoji({ sasData }: { sasData: ShowSasCallbacks }) {
          onClick={() => sasData.mismatch()}
          disabled={confirming}
        >
-          <Text size="B400">{t('Organisms.DeviceVerification.do_not_match')}</Text>
+          <Text size="B400">Do not Match</Text>
        </Button>
      </Box>
    </Box>
@@ -162,7 +177,6 @@ type SasVerificationProps = {
  onCancel: () => void;
 };
 function SasVerification({ verifier, onCancel }: SasVerificationProps) {
  const { t } = useTranslation();
  const [sasData, setSasData] = useState<ShowSasCallbacks>();
  useVerifierShowSas(verifier, setSasData);
@@ -178,7 +192,7 @@ function SasVerification({ verifier, onCancel }: SasVerificationProps) {
  return (
    <Box direction="Column" gap="400">
-      <WaitingMessage message={t('Organisms.DeviceVerification.starting_emoji')} />
+      <WaitingMessage message="Starting verification using emoji comparison..." />
    </Box>
  );
 }
@@ -187,14 +201,13 @@ type VerificationDoneProps = {
  onExit: () => void;
 };
 function VerificationDone({ onExit }: VerificationDoneProps) {
  const { t } = useTranslation();
  return (
    <Box direction="Column" gap="400">
      <div>
-        <Text>{t('Organisms.DeviceVerification.device_verified')}</Text>
+        <Text>Your device is verified.</Text>
      </div>
      <Button variant="Primary" fill="Solid" onClick={onExit}>
-        <Text size="B400">{t('Organisms.DeviceVerification.okay')}</Text>
+        <Text size="B400">Okay</Text>
      </Button>
    </Box>
  );
@@ -204,138 +217,22 @@ type VerificationCanceledProps = {
  onClose: () => void;
 };
 function VerificationCanceled({ onClose }: VerificationCanceledProps) {
  const { t } = useTranslation();
  return (
    <Box direction="Column" gap="400">
-      <Text>{t('Organisms.DeviceVerification.verification_canceled')}</Text>
+      <Text>Verification has been canceled.</Text>
      <Button variant="Secondary" fill="Soft" onClick={onClose}>
-        <Text size="B400">{t('Organisms.DeviceVerification.close')}</Text>
+        <Text size="B400">Close</Text>
      </Button>
    </Box>
  );
 }
 function QrCodeImage({ data }: { data: Uint8ClampedArray }) {
  const canvasRef = useRef<HTMLCanvasElement>(null);
  useEffect(() => {
    const canvas = canvasRef.current;
    if (!canvas) return;
    // Byte-mode so the raw verification bytes round-trip (a string value would
    // mangle high bytes via UTF-8).
    QRCode.toCanvas(canvas, [{ data: new Uint8Array(data), mode: 'byte' }], {
      width: 220,
      margin: 2,
      color: { dark: '#000000', light: '#ffffff' },
    }).catch(() => undefined);
  }, [data]);
  return (
    <Box justifyContent="Center">
      <canvas ref={canvasRef} style={{ borderRadius: config.radii.R300 }} />
    </Box>
  );
 }
 type VerificationReadyProps = {
  request: VerificationRequest;
  onStartSas: () => void;
  onScanned: (bytes: Uint8ClampedArray) => void;
 };
 function VerificationReady({ request, onStartSas, onScanned }: VerificationReadyProps) {
  const [myQr, setMyQr] = useState<Uint8ClampedArray>();
  const [scanning, setScanning] = useState(false);
  const canShowMine = request.otherPartySupportsMethod(VerificationMethod.ScanQrCode);
  const canScanTheirs = request.otherPartySupportsMethod(VerificationMethod.ShowQrCode);
  useEffect(() => {
    if (!canShowMine) return;
    request
      .generateQRCode()
      .then((bytes) => {
        if (bytes) setMyQr(bytes);
      })
      .catch(() => undefined);
  }, [request, canShowMine]);
  if (scanning) {
    return <QrScanner onScan={onScanned} onCancel={() => setScanning(false)} />;
  }
  return (
    <Box direction="Column" gap="400">
      {myQr && (
        <Box direction="Column" gap="200">
          <Text size="T300">Scan this code with your other device to verify.</Text>
          <QrCodeImage data={myQr} />
        </Box>
      )}
      <Box direction="Column" gap="200">
        {canScanTheirs && (
          <Button variant="Primary" fill="Solid" onClick={() => setScanning(true)}>
            <Text size="B400">Scan their QR code</Text>
          </Button>
        )}
        <Button variant="Secondary" fill="Soft" onClick={onStartSas}>
          <Text size="B400">Verify with emoji instead</Text>
        </Button>
      </Box>
    </Box>
  );
 }
 type ReciprocateVerificationProps = {
  verifier: Verifier;
  onCancel: () => void;
 };
 function ReciprocateVerification({ verifier, onCancel }: ReciprocateVerificationProps) {
  const [qrCallbacks, setQrCallbacks] = useState<ShowQrCodeCallbacks>();
  const [confirmState, confirm] = useAsyncCallback(
    useCallback(async () => qrCallbacks?.confirm(), [qrCallbacks]),
  );
  useVerifierShowReciprocateQr(verifier, setQrCallbacks);
  useVerifierCancel(verifier, onCancel);
  const confirming =
    confirmState.status === AsyncStatus.Loading || confirmState.status === AsyncStatus.Success;
  // The showing side gets ShowReciprocateQr callbacks after the other device
  // scans; the scanning side never does (it already called verify()) and just
  // waits for completion.
  if (!qrCallbacks) {
    return (
      <Box direction="Column" gap="400">
        <WaitingMessage message="Verifying…" />
      </Box>
    );
  }
  return (
    <Box direction="Column" gap="400">
      <Text>The other device scanned this code. Confirm it now shows as verified.</Text>
      <Box direction="Column" gap="200">
        <Button variant="Primary" fill="Soft" onClick={confirm} disabled={confirming}>
          <Text size="B400">Confirm</Text>
        </Button>
        <Button
          variant="Primary"
          fill="Soft"
          onClick={() => qrCallbacks.cancel()}
          disabled={confirming}
        >
          <Text size="B400">Cancel</Text>
        </Button>
      </Box>
    </Box>
  );
 }
 type DeviceVerificationProps = {
  request: VerificationRequest;
  onExit: () => void;
 };
 export function DeviceVerification({ request, onExit }: DeviceVerificationProps) {
  const phase = useVerificationRequestPhase(request);
  const modalStyle = useModalStyle(480);
  const handleCancel = useCallback(() => {
    if (request.phase !== VerificationPhase.Done && request.phase !== VerificationPhase.Cancelled) {
@@ -348,17 +245,6 @@ export function DeviceVerification({ request, onExit }: DeviceVerificationProps)
  const handleStart = useCallback(async () => {
    await request.startVerification(VerificationMethod.Sas);
  }, [request]);
  const handleScanned = useCallback(
    async (bytes: Uint8ClampedArray) => {
      try {
        const verifier = await request.scanQRCode(bytes);
        await verifier.verify();
      } catch {
        // A bad/mismatched scan cancels the request; the Cancelled phase renders.
      }
    },
    [request],
  );
  return (
    <Overlay open backdrop={<OverlayBackdrop />}>
@@ -370,19 +256,12 @@ export function DeviceVerification({ request, onExit }: DeviceVerificationProps)
            escapeDeactivates: false,
          }}
        >
-          <Dialog variant="Surface" style={modalStyle}>
+          <Dialog variant="Surface">
            <Header style={DialogHeaderStyles} variant="Surface" size="500">
              <Box grow="Yes">
-                <Text as="h2" size="H4">
+                <Text size="H4">Device Verification</Text>
                  Device Verification
                </Text>
              </Box>
-              <IconButton
+              <IconButton size="300" radii="300" onClick={handleCancel}>
                size="300"
                radii="300"
                onClick={handleCancel}
                aria-label="Cancel verification"
              >
                <Icon src={Icons.Cross} />
              </IconButton>
            </Header>
@@ -393,20 +272,15 @@ export function DeviceVerification({ request, onExit }: DeviceVerificationProps)
                ) : (
                  <VerificationAccept onAccept={handleAccept} />
                ))}
-              {phase === VerificationPhase.Ready && (
+              {phase === VerificationPhase.Ready &&
-                <VerificationReady
+                (request.initiatedByMe ? (
-                  request={request}
+                  <AutoVerificationStart onStart={handleStart} />
-                  onStartSas={handleStart}
+                ) : (
-                  onScanned={handleScanned}
+                  <VerificationWaitStart />
-                />
+                ))}
              )}
              {phase === VerificationPhase.Started &&
                (request.verifier ? (
                  request.chosenMethod === VerificationMethod.Reciprocate ? (
                    <ReciprocateVerification verifier={request.verifier} onCancel={handleCancel} />
                  ) : (
                  <SasVerification verifier={request.verifier} onCancel={handleCancel} />
                  )
                ) : (
                  <VerificationUnexpected
                    message="Unexpected Error! Verification is started but verifier is missing."
@@ -436,5 +310,9 @@ export function ReceiveSelfDeviceVerification() {
  if (!request) return null;
  if (!request.isSelfVerification) {
    return null;
  }
  return <DeviceVerification request={request} onExit={handleExit} />;
 }
@@ -16,7 +16,6 @@ import {
 import FileSaver from 'file-saver';
 import to from 'await-to-js';
 import { AuthDict, IAuthData, MatrixError, UIAuthCallback } from 'matrix-js-sdk';
 import { useModalStyle } from '../hooks/useModalStyle';
 import { PasswordInput } from './password-input';
 import { ContainerColor } from '../styles/ContainerColor.css';
 import { copyToClipboard } from '../utils/dom';
@@ -28,7 +27,7 @@ import { useAlive } from '../hooks/useAlive';
 import { UseStateProvider } from './UseStateProvider';
 type UIACallback<T> = (
-  authDict: AuthDict | null,
+  authDict: AuthDict | null
 ) => Promise<[IAuthData, undefined] | [undefined, T]>;
 type PerformAction<T> = (authDict: AuthDict | null) => Promise<T>;
@@ -43,7 +42,7 @@ function makeUIAAction<T>(
  authData: IAuthData,
  performAction: PerformAction<T>,
  resolve: (data: T) => void,
-  reject: (error?: any) => void,
+  reject: (error?: any) => void
 ): UIAAction<T> {
  const action: UIAAction<T> = {
    authData,
@@ -92,7 +91,7 @@ function SetupVerification({ onComplete }: SetupVerificationProps) {
        setNextAuthData(authData);
      }
    },
-    [uiaAction, alive],
+    [uiaAction, alive]
  );
  const resetUIA = useCallback(() => {
@@ -119,7 +118,7 @@ function SetupVerification({ onComplete }: SetupVerificationProps) {
                (err) => {
                  resetUIA();
                  reject(err);
-                },
+                }
              );
              if (alive()) {
                setUIAAction(action);
@@ -131,7 +130,7 @@ function SetupVerification({ onComplete }: SetupVerificationProps) {
            reject(error);
          });
      }),
-    [alive, resetUIA],
+    [alive, resetUIA]
  );
  const [setupState, setup] = useAsyncCallback<void, Error, [string | undefined]>(
@@ -160,8 +159,8 @@ function SetupVerification({ onComplete }: SetupVerificationProps) {
        onComplete(recoveryKeyData.encodedPrivateKey);
      },
-      [mx, onComplete, authUploadDeviceSigningKeys],
+      [mx, onComplete, authUploadDeviceSigningKeys]
-    ),
+    )
  );
  const loading = setupState.status === AsyncStatus.Loading;
@@ -288,10 +287,9 @@ type DeviceVerificationSetupProps = {
 export const DeviceVerificationSetup = forwardRef<HTMLDivElement, DeviceVerificationSetupProps>(
  ({ onCancel }, ref) => {
    const [recoveryKey, setRecoveryKey] = useState<string>();
    const modalStyle = useModalStyle(480);
    return (
-      <Dialog ref={ref} style={modalStyle}>
+      <Dialog ref={ref}>
        <Header
          style={{
            padding: `0 ${config.space.S200} 0 ${config.space.S400}`,
@@ -301,11 +299,9 @@ export const DeviceVerificationSetup = forwardRef<HTMLDivElement, DeviceVerifica
          size="500"
        >
          <Box grow="Yes">
-            <Text as="h2" size="H4">
+            <Text size="H4">Setup Device Verification</Text>
              Setup Device Verification
            </Text>
          </Box>
-          <IconButton size="300" radii="300" onClick={onCancel} aria-label="Cancel">
+          <IconButton size="300" radii="300" onClick={onCancel}>
            <Icon src={Icons.Cross} />
          </IconButton>
        </Header>
@@ -318,7 +314,7 @@ export const DeviceVerificationSetup = forwardRef<HTMLDivElement, DeviceVerifica
        </Box>
      </Dialog>
    );
-  },
+  }
 );
 type DeviceVerificationResetProps = {
  onCancel: () => void;
@@ -326,10 +322,9 @@ type DeviceVerificationResetProps = {
 export const DeviceVerificationReset = forwardRef<HTMLDivElement, DeviceVerificationResetProps>(
  ({ onCancel }, ref) => {
    const [reset, setReset] = useState(false);
    const modalStyle = useModalStyle(480);
    return (
-      <Dialog ref={ref} style={modalStyle}>
+      <Dialog ref={ref}>
        <Header
          style={{
            padding: `0 ${config.space.S200} 0 ${config.space.S400}`,
@@ -339,11 +334,9 @@ export const DeviceVerificationReset = forwardRef<HTMLDivElement, DeviceVerifica
          size="500"
        >
          <Box grow="Yes">
-            <Text as="h2" size="H4">
+            <Text size="H4">Reset Device Verification</Text>
              Reset Device Verification
            </Text>
          </Box>
-          <IconButton size="300" radii="300" onClick={onCancel} aria-label="Cancel">
+          <IconButton size="300" radii="300" onClick={onCancel}>
            <Icon src={Icons.Cross} />
          </IconButton>
        </Header>
@@ -378,5 +371,5 @@ export const DeviceVerificationReset = forwardRef<HTMLDivElement, DeviceVerifica
        )}
      </Dialog>
    );
-  },
+  }
 );
@@ -1,127 +0,0 @@
 import React, { useCallback } from 'react';
 import FocusTrap from 'focus-trap-react';
 import { Grid, SearchBar, SearchContext, SearchContextManager } from '@giphy/react-components';
 import { IGif } from '@giphy/js-types';
 import { Box, color, config } from 'folds';
 import { useSetting } from '../state/hooks/settings';
 import { settingsAtom } from '../state/settings';
 const PICKER_WIDTH = 312;
 type GifPickerInnerProps = {
  onSelect: (url: string, width: number, height: number) => void;
  requestClose: () => void;
  lotusTerminal: boolean;
 };
 function GifPickerInner({ onSelect, requestClose, lotusTerminal }: GifPickerInnerProps) {
  const { fetchGifs, searchKey } = React.useContext(SearchContext);
  const handleClick = useCallback(
    (gif: IGif, e: React.SyntheticEvent) => {
      e.preventDefault();
      const r = gif.images.downsized ?? gif.images.original;
      const { url } = r;
      const width = Number(r.width) || 200;
      const height = Number(r.height) || 200;
      onSelect(url, width, height);
      requestClose();
    },
    [onSelect, requestClose],
  );
  return (
    <Box direction="Column" style={{ width: `${PICKER_WIDTH}px` }}>
      {lotusTerminal && (
        <div
          style={{
            padding: '5px 10px 4px',
            borderBottom: '1px solid color-mix(in srgb, var(--lt-accent-orange) 20%, transparent)',
            fontFamily: "'JetBrains Mono', 'Cascadia Code', monospace",
            fontSize: '10px',
            fontWeight: 700,
            letterSpacing: '0.1em',
            color: 'var(--lt-accent-orange)',
            userSelect: 'none',
          }}
        >
          {'// GIF_SEARCH'}
        </div>
      )}
      <Box style={{ padding: '8px 8px 4px' }}>
        <div style={{ width: '100%', borderRadius: lotusTerminal ? '4px' : '8px' }}>
          <SearchBar />
        </div>
      </Box>
      <div
        style={{ overflowY: 'auto', overflowX: 'hidden', maxHeight: '340px', padding: '0 8px 8px' }}
      >
        <Grid
          key={searchKey}
          fetchGifs={fetchGifs}
          width={PICKER_WIDTH - 16}
          columns={2}
          gutter={4}
          onGifClick={handleClick}
          hideAttribution={false}
          noLink
        />
      </div>
    </Box>
  );
 }
 type GifPickerProps = {
  apiKey: string;
  onSelect: (url: string, width: number, height: number) => void;
  requestClose: () => void;
 };
 export function GifPicker({ apiKey, onSelect, requestClose }: GifPickerProps) {
  const [lotusTerminal] = useSetting(settingsAtom, 'lotusTerminal');
  const containerStyle = lotusTerminal
    ? {
        background: 'var(--lt-bg-secondary)',
        border: '1px solid color-mix(in srgb, var(--lt-accent-orange) 35%, transparent)',
        borderRadius: '4px',
        overflow: 'hidden',
        boxShadow:
          '0 4px 24px color-mix(in srgb, var(--lt-accent-orange) 10%, transparent), 0 0 0 1px color-mix(in srgb, var(--lt-accent-orange) 8%, transparent)',
        width: `${PICKER_WIDTH}px`,
      }
    : {
        background: color.Surface.Container,
        border: `${config.borderWidth.B300} solid ${color.Surface.ContainerLine}`,
        borderRadius: config.radii.R400,
        overflow: 'hidden',
        boxShadow: color.Other.Shadow,
        width: `${PICKER_WIDTH}px`,
      };
  return (
    <FocusTrap
      focusTrapOptions={{
        initialFocus: false,
        returnFocusOnDeactivate: false,
        onDeactivate: requestClose,
        clickOutsideDeactivates: true,
        allowOutsideClick: true,
      }}
    >
      <Box
        direction="Column"
        data-gif-terminal={lotusTerminal ? '' : undefined}
        style={containerStyle}
      >
        <SearchContextManager apiKey={apiKey} initialTerm="">
          <GifPickerInner
            onSelect={onSelect}
            requestClose={requestClose}
            lotusTerminal={!!lotusTerminal}
          />
        </SearchContextManager>
      </Box>
    </FocusTrap>
  );
 }
@@ -41,5 +41,5 @@ export const ImageOverlay = as<'div', ImageOverlayProps>(
        </FocusTrap>
      </OverlayCenter>
    </Overlay>
-  ),
+  )
 );
@@ -33,7 +33,7 @@ export const useJoinRuleIcons = (roomType?: string): JoinRuleIcons =>
      [JoinRule.Public]: getRoomIconSrc(Icons, roomType, JoinRule.Public),
      [JoinRule.Private]: getRoomIconSrc(Icons, roomType, JoinRule.Private),
    }),
-    [roomType],
+    [roomType]
  );
 type JoinRuleLabels = Record<ExtendedJoinRules, string>;
@@ -47,7 +47,7 @@ export const useRoomJoinRuleLabel = (): JoinRuleLabels =>
      [JoinRule.Public]: 'Public',
      [JoinRule.Private]: 'Invite Only',
    }),
-    [],
+    []
  );
 type JoinRulesSwitcherProps<T extends ExtendedJoinRules[]> = {
@@ -79,7 +79,7 @@ export function JoinRulesSwitcher<T extends ExtendedJoinRules[]>({
      setCords(undefined);
      onChange(selectedRule);
    },
-    [onChange],
+    [onChange]
  );
  return (
@@ -1,118 +0,0 @@
 import React, { useId } from 'react';
 const ROOM_ROWS = [
  { w: '160px', indent: false },
  { w: '120px', indent: true },
  { w: '140px', indent: true },
  { w: '130px', indent: true },
  { w: '150px', indent: false },
  { w: '110px', indent: true },
 ];
 export function LobbySkeleton() {
  const id = useId().replace(/:/g, '');
  const shimmerKeyframes = `
    @keyframes shimmer-${id} {
      0%   { background-position: -400px 0; }
      100% { background-position: 400px 0; }
    }
  `;
  const shimmer = {
    background:
      'linear-gradient(90deg, var(--skeleton-base) 25%, var(--skeleton-shine) 50%, var(--skeleton-base) 75%)',
    backgroundSize: '800px 100%',
    animation: `shimmer-${id} 1.6s ease-in-out infinite`,
    borderRadius: '4px',
  } as React.CSSProperties;
  return (
    <>
      <style>{shimmerKeyframes}</style>
      <div
        style={
          {
            display: 'flex',
            flexDirection: 'column',
            flexGrow: 1,
            height: '100%',
            overflow: 'hidden',
            '--skeleton-base': 'color-mix(in srgb, currentColor 8%, transparent)',
            '--skeleton-shine': 'color-mix(in srgb, currentColor 15%, transparent)',
          } as React.CSSProperties
        }
      >
        {/* Header — matches LobbyHeader (56px) */}
        <div
          style={{
            height: '56px',
            borderBottom: '1px solid color-mix(in srgb, currentColor 10%, transparent)',
            display: 'flex',
            alignItems: 'center',
            gap: '12px',
            padding: '0 16px',
            flexShrink: 0,
          }}
        >
          <div
            style={{
              ...shimmer,
              width: '32px',
              height: '32px',
              borderRadius: '50%',
              flexShrink: 0,
            }}
          />
          <div style={{ ...shimmer, width: '130px', height: '16px' }} />
          <div style={{ flex: 1 }} />
          <div style={{ ...shimmer, width: '24px', height: '24px', borderRadius: '4px' }} />
          <div style={{ ...shimmer, width: '24px', height: '24px', borderRadius: '4px' }} />
        </div>
        <div style={{ flex: 1, overflowY: 'hidden', display: 'flex', flexDirection: 'column' }}>
          {/* Hero — matches PageHero with large avatar + title + subtitle */}
          <div
            style={{
              display: 'flex',
              flexDirection: 'column',
              alignItems: 'center',
              padding: '32px 16px 24px',
              gap: '12px',
              flexShrink: 0,
            }}
          >
            <div style={{ ...shimmer, width: '72px', height: '72px', borderRadius: '50%' }} />
            <div style={{ ...shimmer, width: '180px', height: '20px' }} />
            <div style={{ ...shimmer, width: '240px', height: '13px' }} />
          </div>
          {/* Room list rows */}
          <div style={{ flex: 1, padding: '8px 0' }}>
            {ROOM_ROWS.map((row, i) => (
              <div
                key={i}
                style={{
                  display: 'flex',
                  alignItems: 'center',
                  gap: '10px',
                  padding: `6px 16px 6px ${row.indent ? '36px' : '16px'}`,
                }}
              >
                <div
                  style={{
                    ...shimmer,
                    width: '18px',
                    height: '18px',
                    borderRadius: '4px',
                    flexShrink: 0,
                  }}
                />
                <div style={{ ...shimmer, width: row.w, height: '14px' }} />
              </div>
            ))}
          </div>
        </div>
      </div>
    </>
  );
 }
@@ -3,7 +3,6 @@ import { Dialog, Header, config, Box, Text, Button, Spinner, color } from 'folds
 import { AsyncStatus, useAsyncCallback } from '../hooks/useAsyncCallback';
 import { logoutClient } from '../../client/initMatrix';
 import { useMatrixClient } from '../hooks/useMatrixClient';
 import { useModalStyle } from '../hooks/useModalStyle';
 import { useCrossSigningActive } from '../hooks/useCrossSigning';
 import { InfoCard } from './info-card';
 import {
@@ -17,25 +16,24 @@ type LogoutDialogProps = {
 export const LogoutDialog = forwardRef<HTMLDivElement, LogoutDialogProps>(
  ({ handleClose }, ref) => {
    const mx = useMatrixClient();
    const modalStyle = useModalStyle(480);
    const hasEncryptedRoom = !!mx.getRooms().find((room) => room.hasEncryptionStateEvent());
    const crossSigningActive = useCrossSigningActive();
    const verificationStatus = useDeviceVerificationStatus(
      mx.getCrypto(),
      mx.getSafeUserId(),
-      mx.getDeviceId() ?? undefined,
+      mx.getDeviceId() ?? undefined
    );
    const [logoutState, logout] = useAsyncCallback<void, Error, []>(
      useCallback(async () => {
        await logoutClient(mx);
-      }, [mx]),
+      }, [mx])
    );
    const ongoingLogout = logoutState.status === AsyncStatus.Loading;
    return (
-      <Dialog variant="Surface" ref={ref} style={modalStyle}>
+      <Dialog variant="Surface" ref={ref}>
        <Header
          style={{
            padding: `0 ${config.space.S200} 0 ${config.space.S400}`,
@@ -45,9 +43,7 @@ export const LogoutDialog = forwardRef<HTMLDivElement, LogoutDialogProps>(
          size="500"
        >
          <Box grow="Yes">
-            <Text as="h2" size="H4">
+            <Text size="H4">Logout</Text>
              Logout
            </Text>
          </Box>
        </Header>
        <Box style={{ padding: config.space.S400 }} direction="Column" gap="400">
@@ -89,5 +85,5 @@ export const LogoutDialog = forwardRef<HTMLDivElement, LogoutDialogProps>(
        </Box>
      </Dialog>
    );
-  },
+  }
 );
@@ -126,7 +126,7 @@ export function ManualVerificationTile({
  const [method, setMethod] = useState(
    hasPassphrase
      ? ManualVerificationMethod.RecoveryPassphrase
-      : ManualVerificationMethod.RecoveryKey,
+      : ManualVerificationMethod.RecoveryKey
  );
  const verifyAndRestoreBackup = useCallback(
@@ -143,11 +143,11 @@ export function ManualVerificationTile({
      await crypto.loadSessionBackupPrivateKeyFromSecretStorage();
    },
-    [mx, secretStorageKeyId],
+    [mx, secretStorageKeyId]
  );
  const [verifyState, handleDecodedRecoveryKey] = useAsyncCallback<void, Error, [Uint8Array]>(
-    verifyAndRestoreBackup,
+    verifyAndRestoreBackup
  );
  const verifying = verifyState.status === AsyncStatus.Loading;
@@ -12,7 +12,7 @@ export function MediaConfigLoader({ children }: MediaConfigLoaderProps) {
  const [state, load] = useAsyncCallback(useCallback(() => mx.getMediaConfig(), [mx]));
  useEffect(() => {
-    load().catch(() => {});
+    load();
  }, [load]);
  return children(state.status === AsyncStatus.Success ? state.data : undefined);
@@ -1,34 +0,0 @@
 import React from 'react';
 import { color, Icon, Icons, Text, Tooltip, TooltipProvider } from 'folds';
 import { useUserVerifiedStatus } from '../hooks/useUserVerifiedStatus';
 type MemberVerificationBadgeProps = {
  userId: string;
 };
 export function MemberVerificationBadge({ userId }: MemberVerificationBadgeProps) {
  const vs = useUserVerifiedStatus(userId);
  if (vs === 'unknown') return null;
  const iconColor = vs === 'verified' ? color.Success.Main : color.Warning.Main;
  const label = vs === 'verified' ? 'Identity verified' : 'Not verified';
  return (
    <TooltipProvider
      position="Top"
      tooltip={
        <Tooltip>
          <Text size="T200">{label}</Text>
        </Tooltip>
      }
    >
      {(ref) => (
        <span
          ref={ref}
          title={label}
          style={{ display: 'inline-flex', alignItems: 'center', flexShrink: 0 }}
        >
          <Icon size="100" src={Icons.ShieldUser} style={{ color: iconColor }} />
        </span>
      )}
    </TooltipProvider>
  );
 }
--- a/Show More
+++ b/Show More