5 Commits

Include renames

Author	SHA1	Message	Date
Thore CimbalandClaude Fable 5	e21e101004	ci: GitLab pipeline (web build, rohana image push, desktop linux) ... First CI for the lab GitLab (git.lab): web job builds the webapp with the lessons from the Gitea attempts baked in (frozen-lockfile instead of layered.sh, 6GB node heap), docker_web pushes the canonical apps/web/Dockerfile image to the rohana registry that Flux pulls from, and two manual jobs cover the desktop path - a dockerbuild build-image and the Electron Linux build replicating the manually verified flow. Also tracks the production client config (apps/desktop/axion1337/) that previously only existed inside the one-off manual desktop build. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-31 12:00:00 +00:00
Thore Cimbal	42285021cb	feat: client-side ClamAV scanning for encrypted rooms (Issue #19) ... Synapse's own check_media_file_for_spam module can never see E2EE attachment content - only the client ever holds the decryption key. Adds two hooks that call a self-hosted scan service (https://axion1337.chat/_scan, deployed separately in the gitops repo): - DecryptFile.ts: scans every decrypted attachment (image/audio/video/ file all funnel through this one function via MediaEventHelper) before returning it as a Blob. - ContentMessages.ts: scans plaintext before encryption/upload in uploadFile(), the shared function behind all attachment uploads (main file, thumbnails, voice messages), regardless of room encryption state. New ContentScanRejectedError surfaces through the existing error- rendering paths (MediaProcessingError, upload failure dialog) using the same pattern as DecryptError/DownloadError/UploadFailedError. Live-tested: EICAR blocked pre-upload in encrypted rooms and DMs; receive-side hook also blocks EICAR sent by an unpatched client (app.element.io), confirming it isn't just self-protection for our own uploads. Fails open on scanner errors so an outage can't block all uploads/downloads.	2026-07-29 12:00:00 +00:00
Thore Cimbal	44305556c3	fix: restore executable bit on remaining desktop/CI scripts ... The earlier script-permission fix (5e3254d) only covered scripts invoked by apps/web's own Dockerfile/CI at the time. Found 9 more non-executable scripts (644 instead of 755) while building the Electron desktop app via apps/desktop/dockerbuild - same root cause, different invocation paths.	2026-07-29 12:00:00 +00:00
Thore Cimbal	306cca041c	fix: pin matrix-js-sdk to a working commit, use our own Element Call fork ... The floating github:matrix-org/matrix-js-sdk#develop reference was resolved to a stale commit missing src/oidc/authorize.ts (breaking the webpack build). Investigated moving to the current develop HEAD instead (191908da) - turned out to be worse, not better: that commit renamed the entire src/oidc/ module to src/oauth/ with a materially different API (generateOidcAuthorizationUrl/completeAuthorizationCodeGrant/OidcError don't exist under those names anymore). Rather than porting our OIDC login code to the new API sight-unseen, pinned to d19cb751 - the last develop commit before that rename, verified to have both the file at the expected path and the exact exports apps/web imports. Also switched the Element Call embedded widget dependency from upstream's @element-hq/element-call-embedded to our own published fork (@sorb/threadnet-call-embedded@0.19.2-threadnet.5) - a full rebuild was otherwise silently bundling the unmodified upstream widget, discarding every Element Call customization (Video-tab quality settings, German translations, codec list fix).	2026-07-28 12:00:00 +00:00
sorB	3da363517f	feat: show call participants in room list (Discord-style)	2026-05-10 14:25:35 +02:00