vojo/public
heaven 71a71fa56b feat(calls): verify Answer-intent token + harden native ring lifecycle
Every Answer PendingIntent now carries a per-install secret (CallActionToken, private prefs); the JS consumer and MainActivity over-lock verify it before auto-joining, blocking a forged hot-mic join from another local app. MainActivity marks the Telecom session answered natively on a shade Answer, and its over-lock onResume backstop waits a settle window. Native ring start runs fully under telecomLock (no orphan slot), a Telecom failure degrades to notification-only instead of killing the ring, the full-screen ring timeout tracks the real lifetime, and IncomingRing.data is a ConcurrentHashMap. FGS notification/channel strings localized via PushStrings; dead Call.accept key dropped. From the internal multi-agent review.
2026-07-04 02:14:08 +03:00
..
font chore(bundle): trim web bundle by dropping unused Twemoji TTF, Prism languages, and MediaPipe blur wasm 2026-05-13 04:17:03 +03:00
locales feat(calls): verify Answer-intent token + harden native ring lifecycle 2026-07-04 02:14:08 +03:00
res fix(stream-header): fix the Android WebView pull-to-refresh flicker and rework the dancing-mascot loop and dwell 2026-06-08 22:29:04 +03:00
delete-account.html feat(legal): publish Privacy Policy and account-deletion pages with About-screen link and Play Store feature graphic 2026-05-13 22:53:58 +03:00
manifest.json feat(theme): ship Settings picker with system/light/dark and Vojo light palette reshading sidebar, chat, bubbles, horseshoe void and PWA chrome 2026-05-15 01:06:49 +03:00
privacy.html update privacy 2026-06-03 01:20:32 +03:00