Repository navigation
feat: anonymous end-to-end encrypted rooms (/r/<room>#k=<key>) + pairux room - #138
Merged
Merged
Conversation
…rux room` A room link is the whole room: a 128-bit id and the 32-byte media key in the URL fragment, which browsers never send to PairUX. Anyone with the link joins with no account; every frame is encrypted in the browser by @profullstack/pairux-embed and the SFU only forwards ciphertext. - /r/[room]: name + Voice/Video, mounts the embed call; /r makes a new room - POST /api/v1/rooms/token: no auth, anon-<room> LiveKit namespace (never recorded or analysed), random identity, 16-person cap, 20/min per IP - `pairux room` in the agent CLI prints a fresh link, made locally - web depends on the embed workspace package; Dockerfile and web-bun CI build every web dependency (@pairux/web^...) qrypt.chat's /voice and `qc voice` mint the same links. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ThreatCrush Security Scan47 finding(s) HIGH/CRITICAL: 4 | MEDIUM: 27 | LOW: 16
Snippets are redacted; ThreatCrush never prints matched credential material. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A room link is the whole room: a 128-bit id and the 32-byte media key in the
URL fragment, which browsers never send to PairUX. Anyone with the link joins
with no account; every frame is encrypted in the browser by
@profullstack/pairux-embed and the SFU only forwards ciphertext.
recorded or analysed), random identity, 16-person cap, 20/min per IP
pairux roomin the agent CLI prints a fresh link, made locallybuild every web dependency (@pairux/web^...)
qrypt.chat's /voice and
qc voicemint the same links.Tested: vitest (anon-rooms lib, rooms/token route, agent-cli room), web tsc + eslint clean,
next buildlists /r, /r/[room], /api/v1/rooms/token.Not yet tested: a real two-browser call (same gap as the partner embed: dev2's Chromium has no network).
🤖 Generated with Claude Code