Jared Vititoe

jared opened issue LotusGuild/cinny#9

2026-09-12 01:50:48 -04:00

Push-to-talk, the deafen hotkey and AFK auto-mute stop working outside the call room

jared opened issue LotusGuild/cinny#7

2026-09-12 01:50:47 -04:00

Scheduled messages bypass encryption — plaintext m.room.message in E2EE rooms

jared opened issue LotusGuild/cinny#8

2026-09-12 01:50:47 -04:00

Answering an incoming video call turns the camera on, ignoring the user setting

jared opened issue LotusGuild/cinny#6

2026-09-12 01:50:46 -04:00

Image compression in an E2EE room uploads plaintext and breaks the event

jared pushed to main at LotusGuild/cinny-desktop

2026-09-12 01:31:48 -04:00

0fa5c5ddf0 chore: bump cinny submodule to 4bea4895

jared pushed to lotus at LotusGuild/cinny

2026-09-12 01:29:59 -04:00

4bea48959e fix(seasonal): keep Arcade + Deep Space overlays out of the chat text

jared commented on issue LotusGuild/tinker_tickets#78

2026-09-12 01:21:15 -04:00

Failed Matrix webhook posts are logged but never retried — confirm this best-effort design is intentional

Decision: add retry. Fixed in commit 35192aa (merged to main in d0a7630).

Failed Matrix webhook payloads are now queued to a new notification_retry_queue table (migration 007) instead of just…

jared closed issue LotusGuild/tinker_tickets#78

2026-09-12 01:21:15 -04:00

Failed Matrix webhook posts are logged but never retried — confirm this best-effort design is intentional

jared commented on issue LotusGuild/tinker_tickets#93

2026-09-12 01:21:14 -04:00

Watch/unwatch actions are never logged to audit_log

Decision: log it. Fixed in commit e91f454 (merged to main in d0a7630).

Added AuditLogModel::log() calls to both the watch and unwatch paths in api/watch_ticket.php, gated on affected_rows so a…

jared closed issue LotusGuild/tinker_tickets#93

2026-09-12 01:21:14 -04:00

Watch/unwatch actions are never logged to audit_log

jared commented on issue LotusGuild/tinker_tickets#70

2026-09-12 01:21:14 -04:00

Bearer read-scope API keys bypass ticket visibility entirely — confirm this is an intentional, documented decision

Decision: restrict by default. Fixed in commit 6609320 (merged to main in d0a7630).

Added see_all_visibility to api_keys (migration 006), defaulting to false for both new and existing keys.…

jared closed issue LotusGuild/tinker_tickets#70

2026-09-12 01:21:14 -04:00

Bearer read-scope API keys bypass ticket visibility entirely — confirm this is an intentional, documented decision

jared pushed to main at LotusGuild/tinker_tickets

2026-09-12 01:21:00 -04:00

d0a763079e Merge development into main: API key visibility, notification retry, watch audit logging (#70, #78, #93)

35192aaadc Retry failed Matrix webhook notifications with backoff (#78)

6609320c83 Restrict API keys to public-visibility tickets by default (#70)

e91f4547b6 Log watch/unwatch actions to the audit trail (#93)

Compare 4 commits »

jared pushed to development at LotusGuild/tinker_tickets

2026-09-12 01:18:19 -04:00

35192aaadc Retry failed Matrix webhook notifications with backoff (#78)

6609320c83 Restrict API keys to public-visibility tickets by default (#70)

e91f4547b6 Log watch/unwatch actions to the audit trail (#93)

74544ac5b4 Merge development into main: LDAP avatar lookups now use LDAPS (#95)

Compare 4 commits »

jared commented on issue LotusGuild/tinker_tickets#95

2026-09-12 01:02:18 -04:00

LDAP bind credentials transmitted in plaintext (no TLS)

Fixed in commit 863f84f (merged to main in 74544ac), plus infra changes deployed alongside it.

api/user_avatar.php connected via ldap://$ldapHost:$ldapPort -- never ldaps://, so LDAP_BIND_PW went…

jared closed issue LotusGuild/tinker_tickets#95

2026-09-12 01:02:18 -04:00

LDAP bind credentials transmitted in plaintext (no TLS)

jared pushed to main at LotusGuild/tinker_tickets

2026-09-12 00:59:23 -04:00

74544ac5b4 Merge development into main: LDAP avatar lookups now use LDAPS (#95)

863f84f37e Switch LDAP avatar lookups to LDAPS (#95)

Compare 2 commits »

jared pushed to development at LotusGuild/tinker_tickets

2026-09-12 00:56:04 -04:00

863f84f37e Switch LDAP avatar lookups to LDAPS (#95)

b73a4c792c Merge development into main: dashboard status chart excludes Closed (#110)

Compare 2 commits »

jared commented on issue LotusGuild/tinker_tickets#110

2026-09-11 22:26:48 -04:00

chartStatus should be reworked to be just currently open, pending, in progress tickets as a breakdown as over time closed will take up 99% of it.

Fixed in commit 78ee5fd (merged to main in b73a4c7).

StatsModel::getAllStats()'''s by_status breakdown grouped every status including Closed, unlike by_priority and by_category which already…

jared closed issue LotusGuild/tinker_tickets#110

2026-09-11 22:26:48 -04:00

chartStatus should be reworked to be just currently open, pending, in progress tickets as a breakdown as over time closed will take up 99% of it.