assets/screenshots was excluded from the image because it held README
material and nothing served it. That stopped being true: the desktop
client's AppStream metainfo names five of these files by URL, and Flathub
fetches them from this domain — a reviewer opens each one, and a 404 is a
rejection.
Only the desktop-* set is un-ignored. The README's full-size captures stay
out, which is what the original rule was for.
- Record voice notes in-browser, sent over the chunked AES-GCM file-transfer
channel (per-file session key + signed SHA-256 integrity).
- Captured as PCM and encoded to WAV for universal playback (incl. iOS/Safari);
auto-accepted and played inline from an in-memory blob, never written to disk.
- Composer mic button with live waveform + timer; desktop shows mic + send side
by side, mobile swaps mic to send when typing.
- CSP media-src now allows blob: so recorded/received audio can play.
- Roadmap: Desktop Edition -> 5.0, new 5.5 'Secure Voice & Calls', later
milestones shifted; version bumped to 5.4.5.
- Update README, docs (security/API/cryptography), and CHANGELOG.