meshbay.git/devel-phases.md, branch 0.6

feat: Phase 9 — Web client SPA with WebRTC P2P transport

2026-08-11T02:13:53Z

Complete browser-based client: Preact SPA with login, group file browser, encrypted download, video playback, group chat, i18n, and dark/light theme. Browser connects P2P to nodes behind residential NAT via WebRTC DataChannel (aiortc). Hub handles signaling only — all data flows E2E. Performance: pipelined downloads (8-chunk sliding window), binary msgpack wire format (no base64), redundant I/O elimination. Large file downloads stream to disk via File System Access API (showSaveFilePicker). Validated on SFR + Orange residential NATs, Chrome + Firefox, IPv4/IPv6. 132 tests passing. Deployed to meshbay.org + Orange node. Co-Authored-By: Claude Opus 4.6

docs: update devel-phases — demo-v2 NAT traversal QUIC validated

2026-08-09T22:30:35Z

SFR Port-Restricted Cone NAT diagnosed. punch_nat() implemented. QUIC direct Fedora→SFR→meshbay.org: 12.7s handshake, file transfer OK. Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: update all pointers after keyderive + QE restructure

2026-08-09T12:57:01Z

CLAUDE.md: add QE/ to structure, key modules table, server state reference, security rule updated (QE/ not keypair files), meshbay.org inventory pointer. devel-phases.md: add milestones 6.6-6.9 (keyderive, bundle, demo scripts, QUICKSTART rewrite). 81/81 tests. docs/meshbay-draft-v3.md §6.1.1: new section documenting 3 key generation strategies (Argon2id CLI, WebCrypto browser+bundle, keystore file) and the algorithm mismatch caveat between CLI and web registration paths. docs/USERGUIDE.md §2 Register+Login: replace "generate and persist before registering" warning with the two clean strategies (derive_keys_from_password for CLI, keyderive.js + keypair_bundle for browser). Login response updated with keypair_bundle field. hub/models.py + users.py + Alembic migration: keypair_bundle column on User, stored at registration, returned at login (web clients only). Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: mark Phase 6 complete — 74/74 tests

2026-08-09T03:31:35Z

Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: add Phase 6 plan — chat, multi-group, federation, replication

2026-08-09T03:25:43Z

Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: mark Phase 5 complete — QUIC, federation, moderation, packaging

2026-08-09T03:22:28Z

59/59 tests. Hub deployed on meshbay.org with all Phase 5 features. Android/iOS deferred. MHP federation memory-only (DB persistence next). Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: mark Phase 4 complete — web client live on meshbay.org

2026-08-09T02:58:36Z

Node HTTP API (7/7 tests), hub web app deployed, HLS streaming (ffmpeg), public group listing. 47/47 total tests. Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: add Phase 4 plan — web client + node HTTP API

2026-08-09T02:54:03Z

Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: add HTTPS.md + configure www.meshbay.org redirect

2026-08-09T02:53:20Z

Caddyfile updated: www → 301 → meshbay.org (canonical). Caddy auto-issued Let's Encrypt cert for www.meshbay.org in 4s. HTTPS.md explains the setup, cert lifecycle (90-day, auto-renewed), why 1-year certs are not recommended, DNS requirements. Co-Authored-By: Claude Sonnet 4.6 (1M context)

docs: mark Phase 3 complete — hub deployed on https://meshbay.org

2026-08-09T02:45:21Z

PostgreSQL 16 + Caddy HTTPS + systemd. 40 local tests (SQLite) + 11/11 smoke tests on production HTTPS. IP logging, rate limiting, JWT with jti, Argon2id passwords, GEK bundle API all operational. Co-Authored-By: Claude Sonnet 4.6 (1M context)