chore: release 0.2.00.2

All three packages together, as the conventions require, plus the RPM and DEB
metadata and their changelogs.

The tag said 0.2 while every package announced 0.1.0, which would have shipped an
RPM claiming to be the reviewed build while containing a different protocol: the
hub schema lost the user identity keys, tokens lost pk_user, and
gek_bundle_store left the wire. Pre-1.0, a breaking change bumps MINOR.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

13 files changed, 35 insertions, 19 deletions

diff --git a/packages/meshbay-common/pyproject.toml b/packages/meshbay-common/pyproject.toml
index ac7ba08c..5b06ec0c 100644
--- a/packages/meshbay-common/pyproject.toml
+++ b/packages/meshbay-common/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "meshbay-common"
-version = "0.1.0"
+version = "0.2.0"
 description = "MeshBay shared cryptographic primitives and protocol types"
 requires-python = ">=3.12"
 dependencies = [
diff --git a/packages/meshbay-common/src/meshbay_common/__init__.py b/packages/meshbay-common/src/meshbay_common/__init__.py
index 94b3d273..c7cf14f6 100644
--- a/packages/meshbay-common/src/meshbay_common/__init__.py
+++ b/packages/meshbay-common/src/meshbay_common/__init__.py
@@ -1,5 +1,5 @@
 """MeshBay common — shared crypto primitives and protocol types."""
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"
 MNP_VERSION = "0.1"
 MHP_VERSION = "0.1"
diff --git a/packages/meshbay-hub/pyproject.toml b/packages/meshbay-hub/pyproject.toml
index 5487a6a5..8b0102c6 100644
--- a/packages/meshbay-hub/pyproject.toml
+++ b/packages/meshbay-hub/pyproject.toml
@@ -4,11 +4,11 @@ build-backend = "hatchling.build"
 
 [project]
 name = "meshbay-hub"
-version = "0.1.0"
+version = "0.2.0"
 description = "MeshBay Hub — identity authority and group registry server"
 requires-python = ">=3.12"
 dependencies = [
-    "meshbay-common>=0.1.0",
+    "meshbay-common>=0.2.0",
     "fastapi>=0.115",
     "uvicorn[standard]>=0.30",
     "sqlalchemy>=2.0",
diff --git a/packages/meshbay-hub/src/meshbay_hub/__init__.py b/packages/meshbay-hub/src/meshbay_hub/__init__.py
index 63725570..169ab120 100644
--- a/packages/meshbay-hub/src/meshbay_hub/__init__.py
+++ b/packages/meshbay-hub/src/meshbay_hub/__init__.py
@@ -1,3 +1,3 @@
 """MeshBay Hub — identity authority and group registry."""
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"
diff --git a/packages/meshbay-node/pyproject.toml b/packages/meshbay-node/pyproject.toml
index 864fd041..b7c2a31e 100644
--- a/packages/meshbay-node/pyproject.toml
+++ b/packages/meshbay-node/pyproject.toml
@@ -4,11 +4,11 @@ build-backend = "hatchling.build"
 
 [project]
 name = "meshbay-node"
-version = "0.1.0"
+version = "0.2.0"
 description = "MeshBay Node — local file host, streaming server, and group daemon"
 requires-python = ">=3.12"
 dependencies = [
-    "meshbay-common>=0.1.0",
+    "meshbay-common>=0.2.0",
     "fastapi>=0.115",           # local web UI on localhost:18000
     "uvicorn[standard]>=0.30",
     "httpx>=0.28",              # hub client
diff --git a/packages/meshbay-node/src/meshbay_node/__init__.py b/packages/meshbay-node/src/meshbay_node/__init__.py
index 91f65930..b5fdea1d 100644
--- a/packages/meshbay-node/src/meshbay_node/__init__.py
+++ b/packages/meshbay-node/src/meshbay_node/__init__.py
@@ -1,3 +1,3 @@
 """MeshBay Node — local file host, streaming server, and group daemon."""
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"
diff --git a/packaging/README.md b/packaging/README.md
index 2e31b7f9..1b92947b 100644
--- a/packaging/README.md
+++ b/packaging/README.md
@@ -32,9 +32,9 @@ dpkg-deb --build packaging/deb/meshbay-hub
 dpkg-deb --build packaging/deb/meshbay-node
 
 # Install
-sudo dpkg -i python3-meshbay-common_0.1.0_all.deb
-sudo dpkg -i meshbay-hub_0.1.0_all.deb
-sudo dpkg -i meshbay-node_0.1.0_all.deb
+sudo dpkg -i python3-meshbay-common_0.2.0_all.deb
+sudo dpkg -i meshbay-hub_0.2.0_all.deb
+sudo dpkg -i meshbay-node_0.2.0_all.deb
 ```
 
 ## Install order
diff --git a/packaging/deb/meshbay-hub/DEBIAN/control b/packaging/deb/meshbay-hub/DEBIAN/control
index cd4a2de0..2f3541c8 100644
--- a/packaging/deb/meshbay-hub/DEBIAN/control
+++ b/packaging/deb/meshbay-hub/DEBIAN/control
@@ -1,12 +1,12 @@
 Package: meshbay-hub
-Version: 0.1.0
+Version: 0.2.0
 Section: net
 Priority: optional
 Architecture: all
 Maintainer: MeshBay Team <team@meshbay.org>
 Homepage: https://meshbay.org
 Depends: python3 (>= 3.12),
-         python3-meshbay-common (= 0.1.0),
+         python3-meshbay-common (= 0.2.0),
          postgresql,
          python3-fastapi,
          python3-uvicorn,
diff --git a/packaging/deb/meshbay-node/DEBIAN/control b/packaging/deb/meshbay-node/DEBIAN/control
index 7a8e0faf..8d74ee4f 100644
--- a/packaging/deb/meshbay-node/DEBIAN/control
+++ b/packaging/deb/meshbay-node/DEBIAN/control
@@ -1,12 +1,12 @@
 Package: meshbay-node
-Version: 0.1.0
+Version: 0.2.0
 Section: net
 Priority: optional
 Architecture: all
 Maintainer: MeshBay Team <team@meshbay.org>
 Homepage: https://meshbay.org
 Depends: python3 (>= 3.12),
-         python3-meshbay-common (= 0.1.0),
+         python3-meshbay-common (= 0.2.0),
          adduser
 Recommends: ffmpeg
 Description: MeshBay Node — local file host and streaming server
diff --git a/packaging/deb/python3-meshbay-common/DEBIAN/control b/packaging/deb/python3-meshbay-common/DEBIAN/control
index ea356037..7f504bd6 100644
--- a/packaging/deb/python3-meshbay-common/DEBIAN/control
+++ b/packaging/deb/python3-meshbay-common/DEBIAN/control
@@ -1,5 +1,5 @@
 Package: python3-meshbay-common
-Version: 0.1.0
+Version: 0.2.0
 Section: python
 Priority: optional
 Architecture: all
diff --git a/packaging/rpm/meshbay-hub.spec b/packaging/rpm/meshbay-hub.spec
index f68c3bf0..a342321d 100644
--- a/packaging/rpm/meshbay-hub.spec
+++ b/packaging/rpm/meshbay-hub.spec
@@ -1,5 +1,5 @@
 Name:           meshbay-hub
-Version:        0.1.0
+Version:        0.2.0
 Release:        1%{?dist}
 Summary:        MeshBay Hub — identity authority and group registry server
 License:        AGPLv3+
@@ -74,5 +74,10 @@ getent passwd meshbay >/dev/null || \
 %dir %attr(750, meshbay, meshbay) %{_sharedstatedir}/meshbay/hub
 
 %changelog
+* Fri Aug 14 2026 MeshBay Team <team@meshbay.org> - 0.2.0-1
+- Hub no longer stores or publishes user identity keys (H3); schema migration
+- Access tokens carry no pk_user claim
+- SPA: Argon2id for the keypair bundle, per-node identity, invitation codes
+
 * Sat Aug 09 2026 MeshBay Team <team@meshbay.org> - 0.1.0-1
 - Initial package
diff --git a/packaging/rpm/meshbay-node.spec b/packaging/rpm/meshbay-node.spec
index 5604f4ae..e0737899 100644
--- a/packaging/rpm/meshbay-node.spec
+++ b/packaging/rpm/meshbay-node.spec
@@ -1,5 +1,5 @@
 Name:           meshbay-node
-Version:        0.1.0
+Version:        0.2.0
 Release:        1%{?dist}
 Summary:        MeshBay Node — local file host, streaming server, and group daemon
 License:        AGPLv3+
@@ -53,5 +53,11 @@ install -Dm644 packaging/systemd/meshbay-node.service \
 %{_userunitdir}/meshbay-node.service
 
 %changelog
+* Fri Aug 14 2026 MeshBay Team <team@meshbay.org> - 0.2.0-1
+- Node wraps the group key itself; members are admitted from a local roster
+- Identity keys are per node, created at first contact and pinned there
+- Operator surface over SSH: operator pair, member list|invite|revoke|unpin
+- Unauthenticated HTTP file API and TCP transport removed (C1, C6)
+
 * Sat Aug 09 2026 MeshBay Team <team@meshbay.org> - 0.1.0-1
 - Initial package
diff --git a/packaging/rpm/python3-meshbay-common.spec b/packaging/rpm/python3-meshbay-common.spec
index 7687e90a..b716e700 100644
--- a/packaging/rpm/python3-meshbay-common.spec
+++ b/packaging/rpm/python3-meshbay-common.spec
@@ -1,5 +1,5 @@
 Name:           python3-meshbay-common
-Version:        0.1.0
+Version:        0.2.0
 Release:        1%{?dist}
 Summary:        MeshBay shared cryptographic primitives and protocol types
 License:        AGPLv3+
@@ -38,5 +38,10 @@ encryption/signing, keystore AES-256-GCM, and MNP protocol types.
 %{python3_sitelib}/meshbay_common-*.dist-info/
 
 %changelog
+* Fri Aug 14 2026 MeshBay Team <team@meshbay.org> - 0.2.0-1
+- Join and pairing transcripts (meshbay:join:v1)
+- Handshake refusals carry a machine-readable code
+- gek_bundle_store removed from the protocol; no member supplies key material
+
 * Sat Aug 09 2026 MeshBay Team <team@meshbay.org> - 0.1.0-1
 - Initial package