Rolls the session/journey/friction tracking module out to M8Chat app2, per
plan ancient-petting-hejlsberg.md §5 step 4. Same pattern as GardenBuddy's
same-day port: SessionJourney.init() wired after WidgetsFlutterBinding.
ensureInitialized() and after the existing FlutterError.onError /
PlatformDispatcher.instance.onError handlers, which it chains rather than
replaces. SessionJourneyNavigatorObserver registered on the GoRouter
instance; SessionJourneyGestureLayer wraps MaterialApp.router for rage-tap
detection.
This repo has no shared offline-cache module like GardenBuddy's
core/offline/, so persistence is a small scoped sj_local_store.dart using
the package:web dependency already present in the repo (localStorage on
web, in-memory fallback for the test VM), rather than adding a new package.
app_key m8chat.au-app was reserved today in track.php v2.0.1's
allowed_sites/allowed_origins for https://app2.m8chat.au, confirmed by grep
before use.
Verified live: build deployed to app2.m8chat.au (md5-matched), Playwright
navigation produced real session/visitor/screen_view rows in
admin_flutterstats with app_key=m8chat.au-app, nginx logs show no 5xx and
no real visitor served a broken build during the test window.
P1 key_restore_prompt: offer recovery-key restore right after login
P2 incoming calls: mount overlay in app.dart + detect MSC3401 call.member
(Element X signalling) — calls were previously invisible
P3 message edit: editMessage/EditMessage + Edit dialog (reactions/delete
were already wired)
P5 panic button: new feature/panic module — hold-to-send alert text +
m.location to a configured room; alert sent before geolocation so a
denied permission never blocks it
All verified end-to-end in headless Chromium against production build.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- LiveKit call E2EE: CallE2EEManager exchanges encryption keys via Matrix
to-device events (m.rtc.encryption_keys) for interop with Element X
- Olm bootstrapped in index.html before Flutter init; main.dart logs result
- Encrypted messages shown with lock icon and informative fallback text
- Profile screen: key restore dialog + security setup (cross-signing/backup)
- Jitsi feature: welcome screen (public, no login), conference tab, full-screen
embed via JitsiMeetExternalAPI, JitsiLink parser for all common link formats
- Help tab: expandable cards for encryption, video calls, account management
- Web security model: no session persistence — device ID only across visits
- Media auth: MSC3916 authenticated endpoint for avatars (Synapse 1.120+)
- Router: welcome route as public landing page; jitsi route as public
- Manifest/index.html: M8Chat branding, dark theme colours
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Calls:
- JWT fetch now uses correct MSC4143 flow: get OpenID token from
Synapse, then POST to /_matrix/livekit/jwt/sfu/get (was using
GET with Bearer token to wrong path — returned 301→404)
- Error messages now visible for 3 seconds before popping screen
(was flashing away instantly — user couldn't see failure reason)
- Voice vs video calls differentiated via ?video=0/1 query param
- Debug logging added to JWT flow for troubleshooting
Messages:
- Chat timeline now shows newest at bottom (standard behaviour).
Was reversed twice: SDK returns newest-first, code reversed to
oldest-first, then ListView(reverse:true) put oldest at bottom.
Removed the extra .reversed — newest-first + reverse:true = correct.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
help4bis
