chore: release 0.6.00.6

The group UI's applications split, and the two missing-import bugs it
surfaced and fixed along the way.

MNP goes to 0.4: apps_enabled/apps_enabled_ack, and enabled_apps on the
handshake ack, for the group-applications registry. Additive — a node that
predates it is never sent the op, and a client that predates it never looks
for the field.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016SF6RKNBKg9qejmoMJ9ybA

9 files changed, 35 insertions, 12 deletions

diff --git a/packages/meshbay-common/pyproject.toml b/packages/meshbay-common/pyproject.toml
index 62a9d8b..81aac61 100644
--- a/packages/meshbay-common/pyproject.toml
+++ b/packages/meshbay-common/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "meshbay-common"
-version = "0.5.0"
+version = "0.6.0"
 description = "MeshBay shared cryptographic primitives and protocol types"
 requires-python = ">=3.12"
 dependencies = [
diff --git a/packages/meshbay-common/src/meshbay_common/__init__.py b/packages/meshbay-common/src/meshbay_common/__init__.py
index 814c606..a622623 100644
--- a/packages/meshbay-common/src/meshbay_common/__init__.py
+++ b/packages/meshbay-common/src/meshbay_common/__init__.py
@@ -1,8 +1,12 @@
 """MeshBay common — shared crypto primitives and protocol types."""
 
-__version__ = "0.5.0"
+__version__ = "0.6.0"
 # 0.2: added PING/PONG, and `before`/`has_more` on chat history. Both are
 # additive — an 0.1 peer sends no `before` and gets the newest page, which is
 # what it wanted — so this is a MINOR bump, not a MAJOR one.
-MNP_VERSION = "0.3"
+# 0.4: added `apps_enabled`/`apps_enabled_ack`, and `enabled_apps` on the
+# handshake ack, for the group-applications registry. Additive — a node that
+# predates it is never sent the op, and a client that predates it never looks
+# for the field — so this is a MINOR bump too.
+MNP_VERSION = "0.4"
 MHP_VERSION = "0.1"
diff --git a/packages/meshbay-hub/pyproject.toml b/packages/meshbay-hub/pyproject.toml
index a87271e..9113287 100644
--- a/packages/meshbay-hub/pyproject.toml
+++ b/packages/meshbay-hub/pyproject.toml
@@ -4,11 +4,11 @@ build-backend = "hatchling.build"
 
 [project]
 name = "meshbay-hub"
-version = "0.5.0"
+version = "0.6.0"
 description = "MeshBay Hub — identity authority and group registry server"
 requires-python = ">=3.12"
 dependencies = [
-    "meshbay-common>=0.5.0",
+    "meshbay-common>=0.6.0",
     "fastapi>=0.115",
     "uvicorn[standard]>=0.30",
     "sqlalchemy>=2.0",
diff --git a/packages/meshbay-hub/src/meshbay_hub/__init__.py b/packages/meshbay-hub/src/meshbay_hub/__init__.py
index 90e3066..c2bd539 100644
--- a/packages/meshbay-hub/src/meshbay_hub/__init__.py
+++ b/packages/meshbay-hub/src/meshbay_hub/__init__.py
@@ -1,3 +1,3 @@
 """MeshBay Hub — identity authority and group registry."""
 
-__version__ = "0.5.0"
+__version__ = "0.6.0"
diff --git a/packages/meshbay-node/pyproject.toml b/packages/meshbay-node/pyproject.toml
index f81a740..4999e3d 100644
--- a/packages/meshbay-node/pyproject.toml
+++ b/packages/meshbay-node/pyproject.toml
@@ -4,11 +4,11 @@ build-backend = "hatchling.build"
 
 [project]
 name = "meshbay-node"
-version = "0.5.0"
+version = "0.6.0"
 description = "MeshBay Node — local file host, streaming server, and group daemon"
 requires-python = ">=3.12"
 dependencies = [
-    "meshbay-common>=0.5.0",
+    "meshbay-common>=0.6.0",
     "fastapi>=0.115",           # local web UI on localhost:18000
     "uvicorn[standard]>=0.30",
     "httpx>=0.28",              # hub client
diff --git a/packages/meshbay-node/src/meshbay_node/__init__.py b/packages/meshbay-node/src/meshbay_node/__init__.py
index 407c2a4..6aaa191 100644
--- a/packages/meshbay-node/src/meshbay_node/__init__.py
+++ b/packages/meshbay-node/src/meshbay_node/__init__.py
@@ -1,3 +1,3 @@
 """MeshBay Node — local file host, streaming server, and group daemon."""
 
-__version__ = "0.5.0"
+__version__ = "0.6.0"
diff --git a/packaging/rpm/meshbay-hub.spec b/packaging/rpm/meshbay-hub.spec
index 6872520..dd4803f 100644
--- a/packaging/rpm/meshbay-hub.spec
+++ b/packaging/rpm/meshbay-hub.spec
@@ -1,5 +1,5 @@
 Name:           meshbay-hub
-Version:        0.5.0
+Version:        0.6.0
 Release:        1%{?dist}
 Summary:        MeshBay Hub — identity authority and group registry server
 License:        AGPLv3+
@@ -74,6 +74,18 @@ getent passwd meshbay >/dev/null || \
 %dir %attr(750, meshbay, meshbay) %{_sharedstatedir}/meshbay/hub
 
 %changelog
+* Sun Aug 23 2026 MeshBay Team <team@meshbay.org> - 0.6.0-1
+- Group UI split into a pluggable "applications" architecture (Chat, Files
+  today; Videos/Music/Photos can register without touching GroupPage)
+- Operators can enable/disable applications per group from Settings
+- Group Settings sections reordered: Invite, Pairing, Applications, Shared
+  directories, Uploads, danger zone, Your devices, Members
+- Fixed: a fresh access token was never picked up when a "not a member"
+  handshake retry fired, wrongly locking a member (including a group's own
+  creator) out of a group they had just joined
+- Fixed: opening Chat on a group with existing messages threw and wedged the
+  page's rendering, leaving every button unresponsive until reload
+
 * Sun Aug 16 2026 MeshBay Team <team@meshbay.org> - 0.5.0-1
 - Leave a group; public groups capped at 10 per owner, staff exempt
 - Groups are listed only once a node has announced them; prune-groups collects the rest
diff --git a/packaging/rpm/meshbay-node.spec b/packaging/rpm/meshbay-node.spec
index 5f28c52..e4f386e 100644
--- a/packaging/rpm/meshbay-node.spec
+++ b/packaging/rpm/meshbay-node.spec
@@ -1,5 +1,5 @@
 Name:           meshbay-node
-Version:        0.5.0
+Version:        0.6.0
 Release:        1%{?dist}
 Summary:        MeshBay Node — local file host, streaming server, and group daemon
 License:        AGPLv3+
@@ -62,6 +62,10 @@ install -Dm644 packaging/systemd/meshbay-node-user.service \
 %{_userunitdir}/meshbay-node.service
 
 %changelog
+* Sun Aug 23 2026 MeshBay Team <team@meshbay.org> - 0.6.0-1
+- Per-group application enablement: roster setting, signed apps_enabled op,
+  enforced by the same admin-authority check as member_upload
+
 * Sun Aug 16 2026 MeshBay Team <team@meshbay.org> - 0.5.0-1
 - Abandoned video streams release their transcode slot at once
 - Background tasks are held, so none is collected mid-flight losing a slot
diff --git a/packaging/rpm/python3-meshbay-common.spec b/packaging/rpm/python3-meshbay-common.spec
index 931dcfd..6af8ed9 100644
--- a/packaging/rpm/python3-meshbay-common.spec
+++ b/packaging/rpm/python3-meshbay-common.spec
@@ -1,5 +1,5 @@
 Name:           python3-meshbay-common
-Version:        0.5.0
+Version:        0.6.0
 Release:        1%{?dist}
 Summary:        MeshBay shared cryptographic primitives and protocol types
 License:        AGPLv3+
@@ -38,6 +38,9 @@ encryption/signing, keystore AES-256-GCM, and MNP protocol types.
 %{python3_sitelib}/meshbay_common-*.dist-info/
 
 %changelog
+* Sun Aug 23 2026 MeshBay Team <team@meshbay.org> - 0.6.0-1
+- MNP 0.4: apps_enabled/apps_enabled_ack, enabled_apps on the handshake ack
+
 * Sun Aug 16 2026 MeshBay Team <team@meshbay.org> - 0.5.0-1
 - MNP 0.2: PING/PONG, and backward chat paging (before / has_more)