Block a user
CI: add a Playwright smoke test that boots the built client and exercises the composer in an E2EE room
Client audit 2026-09 — tracking index
Dead code: unused useForceUpdate.js
syncDecorations.mjs fragile regex parsing
CollapsibleBody's reduced-motion check is a one-time snapshot, not a live listener
Terminal boot sequence has no touch/click dismiss and isn't hidden from assistive tech
Room Insights ("stats") panel freezes at open-time data and never reflects new activity
SendingSpinClass and CallAvatarAnimation ignore prefers-reduced-motion
Room Activity Log can misclassify membership transitions for back-paginated (older) events
LotusToastContainer toast auto-dismiss timer is not reset in a fixed slot, so a fast burst can hide a toast before it's read
Room-history export gives no indication that a message was media/an attachment
notificationclick always focuses the first matching window client, not the one most relevant to the notification
Quick Reply's failure is swallowed with no user-visible feedback
useTauriCallPower never releases the native keep-awake state on unmount
getNotificationType/main-timeline gate re-derives push rules on every event without memoization
Page Zoom input silently discards a typed-but-unconfirmed value on blur
Halloween fog-band layers keep
willChange set even when motion is fully disabled
seasonalThemeOverride is the only enum setting with no persisted-value validation
Documented secondary glow/blink keyframes for animated backgrounds don't exist
Earth Day globe decoration risks sitting over the composer