meshbay.git/packages/meshbay-hub/tests/test_desktop_shell.py, branch 0.17MeshBay — read-only public mirrorhttps://git.meshbay.org/meshbay.git/atom?h=0.172026-10-02T08:32:18Zfix(client): no confirmation dialog for adding a folder or its flags2026-10-02T08:32:18ZChristophe Bessoncbesson@gmail.com2026-10-02T08:32:18Zurn:sha1:c928547ca6e402bfe5e06bb59d55ac91e6822cd0
Removes confirmFolder (addRoot, attachGroup) and the writable confirmation
added in e4f6177, with their two catalogue keys.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
feat(mnp): sharing a folder is decided on the node's machine only (MNP 6.0)2026-10-02T08:20:09ZChristophe Bessoncbesson@gmail.com2026-10-02T08:20:09Zurn:sha1:e4f61771131be635b9e81a19203a00707b4b19df
root_add, root_update and group_attach leave MNP: adding a directory and
switching writable/removable go through the loopback API (native dialog in
the desktop app) or the CLI. The operator's Settings tab still lists the
roots from any browser, read-only. The desktop app refuses to sign those
ops; a loopback flag change now reaches open pages (publish_roots).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
test(hub): wrap a docstring ruff flagged2026-10-01T13:52:16ZChristophe Bessoncbesson@gmail.com2026-10-01T13:52:16Zurn:sha1:d0feb2619bf95ba729cf44513ab7370add10f5f8
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
fix(client): rotating a group key asks nothing2026-10-01T13:52:08ZChristophe Bessoncbesson@gmail.com2026-10-01T13:52:08Zurn:sha1:fcac9dcb6ba0ad346a754c7b9e7c59d38b64a4e8
Rotation narrows rather than widens: members still connected receive the
new key, and nothing already shared changes.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
fix: downloads are marked and keep their extension; Explorer files are refused2026-10-01T09:47:39ZChristophe Bessoncbesson@gmail.com2026-10-01T09:47:39Zurn:sha1:760ac421b1944cd69a80e3a92127a1a966f15938
The desktop app writes the Mark-of-the-Web on each file it saves on Windows, as
a browser does. Bidirectional controls are reserved characters in a saved name
(portable-name.js and paths.sanitize_for_download, and again in the main
process), so a name cannot display one extension and carry another. The node
refuses uploads of files Windows Explorer acts on by itself: desktop.ini,
.lnk, .url, .scf, .library-ms, .searchConnector-ms (F-19).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
feat: browser access, decided in the desktop application2026-09-30T15:13:40ZChristophe Bessoncbesson@gmail.com2026-09-30T15:13:40Zurn:sha1:b1ebcdeb9082457972c41a47e77494902335d262
Off for an account made there: its identities stay on the device and nothing is
left on nodes. Turned on from the Profile page behind a native confirmation;
each node is settled when its group next opens. The hub keeps a mirror a
browser reads to say why a group will not open; it grants nothing.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
fix: the page connects to its own origin and reCAPTCHA, nowhere else2026-09-30T11:09:54ZChristophe Bessoncbesson@gmail.com2026-09-30T11:09:47Zurn:sha1:87725dc7a2da27c2ca3b9e58af751f0e6f8c9de7
connect-src drops https: and wss: in both policies. Checked against Google's
reCAPTCHA test keys: in Chrome widget, token and registration unchanged; in
Firefox the widget loads; no violation reported in either.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
fix(client): the page names node operations, and the app confirms what widens the node2026-09-30T10:57:58ZChristophe Bessoncbesson@gmail.com2026-09-30T10:57:58Zurn:sha1:2c6921aa2c35ffd41b6c453e6700574ef631ba2c
node:call is replaced by named operations with checked arguments; hosting a
group, sharing an unpicked folder, key rotation, denylist clearing and a change
of node account are confirmed by a native dialog. Every channel checks its
sender, secrets:get/set/clear are gone, node:start writes the app's own hub.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
test(hub): read the transport wherever it is split2026-09-25T10:07:49ZChristophe Bessoncbesson@gmail.com2026-09-25T09:09:12Zurn:sha1:6348698322e5bfcb80d0ef0dcd833ba4e6179640
spa_source.transport_files() takes the classic transport*.js scripts
from the hub's shell, in load order. Every test that read transport.js
reads them all, the Node harnesses run them joined as one scope, the
chat probe loads each, and the desktop shell must load them in order.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
fix(client): let Copy buttons write the clipboard in the desktop app2026-09-23T17:01:37ZChristophe Bessoncbesson@gmail.com2026-09-23T17:01:37Zurn:sha1:d87f05f9f131aa7cc92f53355c5fe63be01aa516
Only fullscreen was granted, so navigator.clipboard.writeText was
refused and every Copy button did nothing. Grant clipboard-sanitized-write;
reading stays refused.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>