B6 scroll-to-latest: ScrollController on the timeline; a small
arrow-down FAB fades in once scrolled >400px up and animates back
to the newest message on tap (overlaid on the list, not the FAB slot)
B5 panic hold-ring: 700ms AnimationController drives a red progress
ring around the panic icon; haptic + fire on completion, silent
reset on early release; tap-hint and configured guard preserved
Panic ring verified in-browser (ring fills, alert fires to the room).
Scroll-to-latest verified with a deterministic widget test because the
CanvasKit surface rejects synthetic scroll input in headless Chromium.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
B1 grouping: same-sender runs within 5 min collapse to one name + one
avatar (last-of-run), tight padding, tail corner only on last bubble
B2 day separators: Today/Yesterday/d MMM chip above each local day's
first message, Column wraps the gesture widget (long-press preserved)
B4 quick reactions: six preset emoji + full-picker button atop the
long-press menu, wired to the existing sendReaction provider
Verified end-to-end in headless Chromium on the production build;
tapping a preset sends a real m.reaction (confirmed server-side).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
P1 key_restore_prompt: offer recovery-key restore right after login
P2 incoming calls: mount overlay in app.dart + detect MSC3401 call.member
(Element X signalling) — calls were previously invisible
P3 message edit: editMessage/EditMessage + Edit dialog (reactions/delete
were already wired)
P5 panic button: new feature/panic module — hold-to-send alert text +
m.location to a configured room; alert sent before geolocation so a
denied permission never blocks it
All verified end-to-end in headless Chromium against production build.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Bind JitsiMeetExternalAPI as extension type external constructor;
the old external function binding invoked the ES6 class without 'new'
and threw at runtime (silently, in release builds)
- joinMeeting: wait up to 5s for platform-view container div (post-frame
race), build options via setProperty (jsify cannot carry DOM nodes),
return success bool, log failures to browser console
- jitsi_screen: show 'Could not start the meeting' UI instead of blank
- v1.6.2+10, deployed to app2.m8chat.au
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Production app2.m8chat.au/.htaccess gained Flutter HTML5 routing rules
edited live on brisbane01; local repo never received them. Full-tree
md5 comparison (45 files) shows this was the only drift.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Chat: tap any image to open fullscreen InteractiveViewer (pinch/zoom)
- Rooms: public room browser (Find rooms FAB + empty state button)
searches Matrix room directory via queryPublicRooms, join from results
- Rooms: empty state now shows 'Find rooms' button to onboard new users
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Rooms screen: inline search filter with toggle — replaces the no-op button
- Chat screen: room options sheet — member list, invite, leave room
- rooms_repository: remove debug prints
- web/.htaccess: COOP+COEP headers for SharedArrayBuffer / LiveKit E2EE worker
(was on production but missing from source; adds it to build output automatically)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- LiveKit call E2EE: CallE2EEManager exchanges encryption keys via Matrix
to-device events (m.rtc.encryption_keys) for interop with Element X
- Olm bootstrapped in index.html before Flutter init; main.dart logs result
- Encrypted messages shown with lock icon and informative fallback text
- Profile screen: key restore dialog + security setup (cross-signing/backup)
- Jitsi feature: welcome screen (public, no login), conference tab, full-screen
embed via JitsiMeetExternalAPI, JitsiLink parser for all common link formats
- Help tab: expandable cards for encryption, video calls, account management
- Web security model: no session persistence — device ID only across visits
- Media auth: MSC3916 authenticated endpoint for avatars (Synapse 1.120+)
- Router: welcome route as public landing page; jitsi route as public
- Manifest/index.html: M8Chat branding, dark theme colours
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Removed logo.png (wrong logo). Added m8logo.svg from BrandingKit as
the correct M8Chat logo. Login screen now renders SVG via flutter_svg.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Added FocusNode to TextField, requestFocus() after send completes.
Also autofocus=true so cursor is in the input when entering a room.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Filter out org.matrix.msc3401.call.member, org.matrix.msc4075.rtc.notification,
m.call.*, m.room.member, and other state events from the chat timeline.
Users only see actual messages, not protocol noise.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Without a databaseBuilder, the Matrix SDK has no event storage. The
initial sync populates room metadata but timeline events are not
retained in any queryable form. room.getTimeline() returns empty.
Added MatrixSdkDatabase('m8chat_matrix') which uses IndexedDB on web
and SQLite on mobile via Hive. Events are now persisted and timeline
loads room history correctly.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
The web session generates new Olm keys for an existing device ID.
Synapse rejects the upload (400 — keys mismatch) which crashes the
entire client init. Result: no sync, no room history, no calls.
Proper E2EE requires persistent Olm account storage (IndexedDB) so
the same device ID always sends the same keys. Deferred to Phase 3.
Without Olm loaded, the Matrix SDK gracefully skips encryption init.
Unencrypted rooms work fully. E2EE rooms show 'Encrypted message'.
Also unregisters stale service workers that served cached old JS
(caused calls to use the old GET URL instead of POST /sfu/get).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
_RemoteVideoView watched liveKitServiceProvider which returns the same
keepAlive instance. When activeRoom was set after connecting, Riverpod
didn't detect the field change so the widget stayed on the null path.
Fix: also watch callControllerProvider — when state transitions from
Connecting to Active, the widget rebuilds and finds activeRoom non-null,
then ListenableBuilder takes over for participant/track changes.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Listens for ParticipantDisconnectedEvent on the LiveKit Room. When no
remote participants remain (1:1 call ended by other side), waits 5
seconds then auto-hangs up. The delay allows for brief reconnections.
Also ensures our app properly cleans up when Element X user hangs up
on their end — our side won't sit connected to an empty LiveKit room.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Element X stays connected because it sees the state event clear while
we're still in the LiveKit room. Reversed the order: disconnect from
LiveKit first (remote party sees us leave), then clear the state event.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
_RemoteVideoView and _LocalVideoPip watched the Riverpod provider but
not the LiveKit Room's ChangeNotifier. When a remote participant joined
or published a track, notifyListeners() fired but no widget rebuilt.
Fix: wrap both views in ListenableBuilder(listenable: room) so they
rebuild on every Room event (participant connect, track subscribe, etc).
Added _AudioOnlyPlaceholder for when remote has audio but no video.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
When starting a call, the app now sends org.matrix.msc3401.call.member
state event to the Matrix room with LiveKit foci info. This is what
Element X listens for to show incoming call notifications.
On disconnect, the state event is cleared (empty memberships) so
Element X knows the call has ended.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- lk-jwt-service returns {jwt: '...', url: '...'} not {token: '...'}
Now reads both 'jwt' and 'token' fields for compatibility
- Server nginx: added proxy_hide_header to strip upstream CORS headers
preventing duplicate Access-Control-Allow-Origin (browser rejects)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Calls:
- JWT fetch now uses correct MSC4143 flow: get OpenID token from
Synapse, then POST to /_matrix/livekit/jwt/sfu/get (was using
GET with Bearer token to wrong path — returned 301→404)
- Error messages now visible for 3 seconds before popping screen
(was flashing away instantly — user couldn't see failure reason)
- Voice vs video calls differentiated via ?video=0/1 query param
- Debug logging added to JWT flow for troubleshooting
Messages:
- Chat timeline now shows newest at bottom (standard behaviour).
Was reversed twice: SDK returns newest-first, code reversed to
oldest-first, then ListView(reverse:true) put oldest at bottom.
Removed the extra .reversed — newest-first + reverse:true = correct.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Add 12s timeout to restoreSession() — client.init() could hang
indefinitely if token expired or server unreachable, leaving user
on spinner forever. Now clears stale credentials and shows login.
- Sync persistence startup wrapped in try-catch — non-fatal
- .htaccess blocks .git directory (was returning 200 to scanners)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
