Files

Talon 118ca5129f fix(protocol): deliver self-initiated state changes to the actor too

A connected Windows client would randomly snap from its joined channel
back to Lobby. Root cause was a state-sync inconsistency, not a drop:
the server delivered self-initiated state changes (channel join/leave,
stream announce/stop) only as a private *Result to the actor and
broadcast the authoritative UserEvent::UPDATED to everyone else. The
core never applied the result to its SessionModel, so vc_list_users()
kept self in the old channel; the Windows HandleUserUpdated rebuilds
_currentChannelId from vc_list_users() on any user's UPDATED event, so
the next unrelated event surfaced the stale self-channel.

Fix, per the response-vs-broadcast contract now documented in
docs/protocol.md §6: the *Result is pure ack/correlation/actor-private
payload; the resulting state change is broadcast to every client
INCLUDING the actor, and clients apply it to their local model rather
than re-deriving own state from a *Result.

- server: join/leave/stream announce+stop broadcast with exclude=0
- server: text fan-out includes the sender (channel + private echo)
- core: response handlers no longer mutate session_model_
- windows: drop optimistic text echo; render own message via the relay
- docs/protocol.md §6: document the response-vs-broadcast contract

Registry-level admin broadcasts (move/mute/kick/channel CRUD) already
used exclude=0 and were correct. ctest build/m1-dev 18/18 green;
VoiceCat.App builds 0 warnings.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-17 20:48:50 +02:00

VoiceCat.App

fix(protocol): deliver self-initiated state changes to the actor too

2026-06-17 20:48:50 +02:00

VoiceCat.Interop

M5: Windows client moderation UI; add C ABI getters for account list, user mute/deafen, channel topic

2026-06-17 16:31:29 +02:00

VoiceCat.Interop.Tests

M5: Windows client moderation UI; add C ABI getters for account list, user mute/deafen, channel topic

2026-06-17 16:31:29 +02:00

Directory.Build.props

feat(M4): Windows WinForms client, TOFU identity pinning, VAD threshold + always-on mode

2026-06-17 00:35:16 +02:00

README.md

M5: Windows client moderation UI; add C ABI getters for account list, user mute/deafen, channel topic

2026-06-17 16:31:29 +02:00

VoiceCat.slnx

feat(M4): Windows WinForms client, TOFU identity pinning, VAD threshold + always-on mode

2026-06-17 00:35:16 +02:00

README.md

VoiceCat — Windows client

WinForms (.NET 10 LTS) UI over voicecat.dll (MinGW-built libvoicecat shared library).

Prerequisites

Tool	Version	Notes
.NET SDK	10.0.x	`dotnet --version` should report `10.0.*`
CMake	3.25+	For building the C++ DLL
MinGW-w64 / MSYS2 UCRT64	GCC 13+	`C:\tools\msys64\ucrt64` is the expected location
vcpkg	any	`VCPKG_ROOT` env var must point to a bootstrapped clone

Build order

1. Build the server (for testing)

cmake --preset m1-dev
cmake --build --preset m1-dev --target voicecat-server

2. Build the DLL

cmake --preset windows-client
cmake --build --preset windows-client

Output: build/windows-client/bin/voicecat.dll

Verify no MinGW runtime dependencies remain:

& "C:\tools\msys64\ucrt64\bin\objdump.exe" -p build/windows-client/bin/voicecat.dll |
    Select-String "DLL Name"

Expected: only Windows system DLLs (KERNEL32.dll, WS2_32.dll, BCRYPT.dll, etc.). If libgcc_s_seh-1.dll, libstdc++-6.dll, or libwinpthread-1.dll appear, the -static-libgcc -static-libstdc++ -static -lwinpthread link flags in core/CMakeLists.txt are not taking effect — check the CMake log for the VOICECAT_BUILD_SHARED+WIN32 branch.

3. Build the C# solution

cd clients/windows
dotnet build VoiceCat.slnx

The app's Directory.Build.props copies voicecat.dll from ../../build/windows-client/bin/ into the output directory automatically on every build.

Running manually

# Terminal 1 — start the server
./build/m1-dev/bin/voicecat-server.exe --name "My Server"

# Terminal 2 — launch the client
dotnet run --project clients/windows/VoiceCat.App/VoiceCat.App.csproj

On first connect to a new server:

Enter 127.0.0.1 as the host (not localhost — Windows resolves localhost to ::1 first, and while the server now dual-stacks, 127.0.0.1 is cleaner for local testing).
The server identity dialog will appear. The TLS leaf-cert SHA-256 fingerprint is shown; accept to pin it. Subsequent connects to the same server will be silent (MATCHED).

M5 — Moderation & admin UI

The WinForms client now exposes all M5 operations through the main menu and context menus:

Admin → Server accounts… — create, reset password, and delete server accounts (requires can_admin_accounts).
Channel tree right-click — create, edit, and delete channels. The edit dialog exposes the full per-channel Opus configuration: mono/stereo, sample rate, bitrate, frame size, application mode, FEC, expected packet loss, DTX, and complexity.
User list right-click — move, kick, ban, server mute/deafen, and set permissions (items are gated by your own permissions).
Activity log shows async GenericResult feedback for every moderation request.
User list shows text indicators for self-mute, self-deafen, server-mute, and server-deafen states.

These operations require an admin-provisioned account with the appropriate permissions; the connect dialog already supports username/password auth.

Known limitations

PTT is focus-scoped — the push-to-talk key only works while the VoiceCat window has focus. A system-wide WH_KEYBOARD_LL hook is not used in v1 (permissions + AV risk).
Receive-side noise reduction checkbox in per-user tuning is wired end-to-end but is a passthrough no-op until a real APM/NS backend is built (no working Windows/MSVC port of webrtc-audio-processing upstream — see docs/tech-stack.md §1).
TOFU pins the TLS leaf cert, not the declared Ed25519 identity fingerprint. Both are shown in the identity dialog, but the cert fingerprint is the value that is actually verified on reconnect. See docs/security.md §1.1.