feat: Phase 9 — Web client SPA with WebRTC P2P transport

Complete browser-based client: Preact SPA with login, group file browser,
encrypted download, video playback, group chat, i18n, and dark/light theme.
Browser connects P2P to nodes behind residential NAT via WebRTC DataChannel
(aiortc). Hub handles signaling only — all data flows E2E.

Performance: pipelined downloads (8-chunk sliding window), binary msgpack
wire format (no base64), redundant I/O elimination. Large file downloads
stream to disk via File System Access API (showSaveFilePicker).

Validated on SFR + Orange residential NATs, Chrome + Firefox, IPv4/IPv6.
132 tests passing. Deployed to meshbay.org + Orange node.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 6 insertions, 2 deletions

diff --git a/packages/meshbay-node/src/meshbay_node/hub_client.py b/packages/meshbay-node/src/meshbay_node/hub_client.py
index 3e77ed0..a9a1d6c 100644
--- a/packages/meshbay-node/src/meshbay_node/hub_client.py
+++ b/packages/meshbay-node/src/meshbay_node/hub_client.py
@@ -251,6 +251,7 @@ class HubClient:
         on_incoming: Any = None,
         on_revocation: Any = None,
         on_webrtc_offer: Any = None,
+        group_ids: list[str] | None = None,
     ) -> None:
         """
         Maintain a persistent WebSocket connection to the hub.
@@ -268,11 +269,14 @@ class HubClient:
         while True:
             try:
                 async with websockets.connect(ws_url) as ws:
-                    await ws.send(json.dumps({
+                    auth_msg = {
                         "type": "auth",
                         "token": self._session.access_token,
                         "node_id": self._session.node_id,
-                    }))
+                    }
+                    if group_ids:
+                        auth_msg["group_ids"] = group_ids
+                    await ws.send(json.dumps(auth_msg))
                     auth_resp = json.loads(await ws.recv())
                     if auth_resp.get("type") != "auth_ok":
                         log.error("WS auth failed: %s", auth_resp)