4 Commits

Include renames

Author	SHA1	Message	Date
SecureBitChatVolodymyr	0691ce618c	web: Snap Store badge, served from here ... The badge image is vendored rather than hotlinked from snapcraft.io. The CSP is img-src 'self' data: and would block it anyway, but the reason to leave the CSP alone is the page's own claim: fetching a badge from someone else's server hands them the address of every visitor to a page that says no servers are involved. The README badge stays dynamic — it reports the published version, and GitHub proxies images, so no reader is exposed by it.	2026-09-02 19:12:15 -04:00
lockbitchat	3f863299e2	deploy: ship the desktop client's store screenshots ... assets/screenshots was excluded from the image because it held README material and nothing served it. That stopped being true: the desktop client's AppStream metainfo names five of these files by URL, and Flathub fetches them from this domain — a reviewer opens each one, and a 404 is a rejection. Only the desktop-* set is un-ignored. The README's full-size captures stay out, which is what the original rule was for.	2026-09-01 21:12:29 -04:00
lockbitchat	c98a01b1d5	Add end-to-end encrypted voice messages; release v5.4.5 ... - Record voice notes in-browser, sent over the chunked AES-GCM file-transfer channel (per-file session key + signed SHA-256 integrity). - Captured as PCM and encoded to WAV for universal playback (incl. iOS/Safari); auto-accepted and played inline from an in-memory blob, never written to disk. - Composer mic button with live waveform + timer; desktop shows mic + send side by side, mobile swaps mic to send when typing. - CSP media-src now allows blob: so recorded/received audio can play. - Roadmap: Desktop Edition -> 5.0, new 5.5 'Secure Voice & Calls', later milestones shifted; version bumped to 5.4.5. - Update README, docs (security/API/cryptography), and CHANGELOG.	2026-07-22 00:41:58 -04:00
lockbitchat	d58967c671	build: add Fly.io deployment (nginx static serving) ... - Dockerfile: serve the static PWA via nginx:alpine on port 8080 - deploy/nginx.conf: mirror .htaccess (jsx/mjs MIME, no-cache for shell/sw/manifest/meta/dist, long-immutable cache for assets, security headers, SPA fallback) - fly.toml: internal_port 8080, force_https, scale-to-zero - .dockerignore: exclude .git/node_modules/tests from the image	2026-06-15 16:23:14 -04:00