4 Commits

Include renames

Author	SHA1	Message	Date
Lotus CIandClaude Opus 4.8	0ffe247929	fix(lotus): Wave-1 audit fixes (EC1–EC6) ... - EC1: lotusQuality — track + clearTimeout the 500ms settle re-apply per room (was leaking a timer that fired on torn-down rooms). - EC2/EC3: lotusQuality + lotusAudioInject drive off vm.allConnections$ instead of the remote-gated livekitRoomItems$ (were no-ops when alone), matching lotusDenoise. - EC4: lotusDecorations resets its roster to {} on teardown so a decoration from a previous call can't render on a shared user in the next one. - EC5: hoisted a stable useSyncExternalStore subscribe fn (was re-subscribing every tile render). - EC6: lotusFocus only sets the spotlight when the userId field is present (a partial payload no longer clears the pin). tsc clean. Needs a republish to ship. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-02 20:13:01 -04:00
Lotus CIandClaude Opus 4.8	b8543c3fe1	lotus(security): harden denoise base, audio-inject, decorations ... Holistic security audit findings: - C1 (CRITICAL): force lotusDenoiseBase to same-origin before it reaches audioWorklet.addModule()/fetch — a crafted call-link param could otherwise load attacker JS/WASM as a worklet processing the live mic. Non-same-origin/malformed values fall back to bundled ./denoise/. - H1 (HIGH): gate audio-inject behind explicit lotusAudioInject=1 (still acks the action so no transport hang) — it publishes under the local user's identity, so it must not be silently armed for every call. - M1 (MED): cap the decoration roster at 512 entries. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-30 00:00:40 -04:00
Lotus CIandClaude Opus 4.8	33d0e98eb0	lotus(#6): render decoration in MediaView; fix store lifecycle ... Review found in-call tiles use MediaView->Avatar, not TileAvatar, so the decoration never rendered in-call (CRITICAL). Move the overlay into MediaView, gated on the avatar's own visibility (!(video && videoEnabled)) so it never floats over live video; revert the TileAvatar changes. Also ref-count the io.lotus.decorations registration (one shared handler, no double-reply) and stop clearing the map on teardown so a transient remount doesn't drop decorations (HIGH/MED). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-29 23:45:34 -04:00
Lotus CIandClaude Opus 4.8	70358d442b	lotus(#6): render avatar decorations on in-call tiles ... Adds io.lotus.decorations (toWidget): the host pushes a userId->image-URL map and EC overlays the profile decoration on each tile avatar (TileAvatar), keyed by userId, with a useSyncExternalStore-backed store. Makes A6 first-class in-call instead of absent. URLs are validated https/blob. Additive: no-op unless the host sends decorations. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-29 23:38:45 -04:00