meshbay.git, branch 0.17

test(hub): wrap a docstring ruff flagged

2026-10-01T13:52:16Z

Co-Authored-By: Claude Opus 5.5

fix(client): rotating a group key asks nothing

2026-10-01T13:52:08Z

Rotation narrows rather than widens: members still connected receive the new key, and nothing already shared changes. Co-Authored-By: Claude Opus 5.5

fix(client): hosting a group asks nothing when its folder came from the picker

2026-10-01T13:49:42Z

The folder chosen in the native picker is the consent; the dialog that followed on every group creation asked the same thing twice. Co-Authored-By: Claude Opus 5.5

fix(hub): a username is unique whatever its case

2026-10-01T11:37:38Z

Registration refuses a name that differs from an existing one only by case; accounts that already do keep their names, and a pending retry needs the exact name (F-26). Co-Authored-By: Claude Opus 5.5

fix(hub): what an offer or a node message costs the hub is bounded

2026-10-01T11:37:38Z

An offer's IP-log row (kept a year) was written before any check, for any string named as a node; it is written once the offer goes to a node. The ICE list is capped (64 candidates, 32 KiB). A node's update_groups, a database read each, is budgeted like chat_notify and claims at most 1000 groups (F-22). Co-Authored-By: Claude Opus 5.5

fix(client): the audit export never hands a spreadsheet a formula

2026-10-01T11:26:34Z

A cell starting with = + - @ (or a tab or carriage return) gets a leading apostrophe; the export carries text members chose (F-29). Co-Authored-By: Claude Opus 5.5

chore: remove a spike page served in production and an unused derivation

2026-10-01T11:25:58Z

static/webrtc-test.html posted a raw password to /login from the hub's own origin; meshbay_common/keyderive.py derived keys from a password and nothing called it (F-32). Co-Authored-By: Claude Opus 5.5

fix(node): the clear fields beside a chat message are bounded

2026-10-01T11:25:35Z

sender_name and thread_id travel in clear beside the sealed envelope and were stored and relayed whatever their type and size. A name longer than a username or a thread id that is not a short id is now dropped (F-27). Co-Authored-By: Claude Opus 5.5

fix(node): a member is told a media tool failed, not what ffmpeg said

2026-10-01T11:24:11Z

Stream, transcode and subtitle failures sent the exception's text — operator paths, versions — to the member. Fixed messages now, the cause in the log (F-24). Co-Authored-By: Claude Opus 5.5

fix(node): the reaper deletes only the .part files the node wrote

2026-10-01T11:24:11Z

Any *.part older than a day in a writable root was deleted — a browser's download in progress in a shared folder included. Only names carrying the node's tag (name.<8 hex>.part) are reaped now (F-28). Co-Authored-By: Claude Opus 5.5