chore: release 0.2.00.2

All three packages together, as the conventions require, plus the RPM and DEB
metadata and their changelogs.

The tag said 0.2 while every package announced 0.1.0, which would have shipped an
RPM claiming to be the reviewed build while containing a different protocol: the
hub schema lost the user identity keys, tokens lost pk_user, and
gek_bundle_store left the wire. Pre-1.0, a breaking change bumps MINOR.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

7 files changed, 27 insertions, 11 deletions

diff --git a/packaging/README.md b/packaging/README.md
index 2e31b7f..1b92947 100644
--- a/packaging/README.md
+++ b/packaging/README.md
@@ -32,9 +32,9 @@ dpkg-deb --build packaging/deb/meshbay-hub
 dpkg-deb --build packaging/deb/meshbay-node
 
 # Install
-sudo dpkg -i python3-meshbay-common_0.1.0_all.deb
-sudo dpkg -i meshbay-hub_0.1.0_all.deb
-sudo dpkg -i meshbay-node_0.1.0_all.deb
+sudo dpkg -i python3-meshbay-common_0.2.0_all.deb
+sudo dpkg -i meshbay-hub_0.2.0_all.deb
+sudo dpkg -i meshbay-node_0.2.0_all.deb
 ```
 
 ## Install order
diff --git a/packaging/deb/meshbay-hub/DEBIAN/control b/packaging/deb/meshbay-hub/DEBIAN/control
index cd4a2de..2f3541c 100644
--- a/packaging/deb/meshbay-hub/DEBIAN/control
+++ b/packaging/deb/meshbay-hub/DEBIAN/control
@@ -1,12 +1,12 @@
 Package: meshbay-hub
-Version: 0.1.0
+Version: 0.2.0
 Section: net
 Priority: optional
 Architecture: all
 Maintainer: MeshBay Team <team@meshbay.org>
 Homepage: https://meshbay.org
 Depends: python3 (>= 3.12),
-         python3-meshbay-common (= 0.1.0),
+         python3-meshbay-common (= 0.2.0),
          postgresql,
          python3-fastapi,
          python3-uvicorn,
diff --git a/packaging/deb/meshbay-node/DEBIAN/control b/packaging/deb/meshbay-node/DEBIAN/control
index 7a8e0fa..8d74ee4 100644
--- a/packaging/deb/meshbay-node/DEBIAN/control
+++ b/packaging/deb/meshbay-node/DEBIAN/control
@@ -1,12 +1,12 @@
 Package: meshbay-node
-Version: 0.1.0
+Version: 0.2.0
 Section: net
 Priority: optional
 Architecture: all
 Maintainer: MeshBay Team <team@meshbay.org>
 Homepage: https://meshbay.org
 Depends: python3 (>= 3.12),
-         python3-meshbay-common (= 0.1.0),
+         python3-meshbay-common (= 0.2.0),
          adduser
 Recommends: ffmpeg
 Description: MeshBay Node — local file host and streaming server
diff --git a/packaging/deb/python3-meshbay-common/DEBIAN/control b/packaging/deb/python3-meshbay-common/DEBIAN/control
index ea35603..7f504bd 100644
--- a/packaging/deb/python3-meshbay-common/DEBIAN/control
+++ b/packaging/deb/python3-meshbay-common/DEBIAN/control
@@ -1,5 +1,5 @@
 Package: python3-meshbay-common
-Version: 0.1.0
+Version: 0.2.0
 Section: python
 Priority: optional
 Architecture: all
diff --git a/packaging/rpm/meshbay-hub.spec b/packaging/rpm/meshbay-hub.spec
index f68c3bf..a342321 100644
--- a/packaging/rpm/meshbay-hub.spec
+++ b/packaging/rpm/meshbay-hub.spec
@@ -1,5 +1,5 @@
 Name:           meshbay-hub
-Version:        0.1.0
+Version:        0.2.0
 Release:        1%{?dist}
 Summary:        MeshBay Hub — identity authority and group registry server
 License:        AGPLv3+
@@ -74,5 +74,10 @@ getent passwd meshbay >/dev/null || \
 %dir %attr(750, meshbay, meshbay) %{_sharedstatedir}/meshbay/hub
 
 %changelog
+* Fri Aug 14 2026 MeshBay Team <team@meshbay.org> - 0.2.0-1
+- Hub no longer stores or publishes user identity keys (H3); schema migration
+- Access tokens carry no pk_user claim
+- SPA: Argon2id for the keypair bundle, per-node identity, invitation codes
+
 * Sat Aug 09 2026 MeshBay Team <team@meshbay.org> - 0.1.0-1
 - Initial package
diff --git a/packaging/rpm/meshbay-node.spec b/packaging/rpm/meshbay-node.spec
index 5604f4a..e073789 100644
--- a/packaging/rpm/meshbay-node.spec
+++ b/packaging/rpm/meshbay-node.spec
@@ -1,5 +1,5 @@
 Name:           meshbay-node
-Version:        0.1.0
+Version:        0.2.0
 Release:        1%{?dist}
 Summary:        MeshBay Node — local file host, streaming server, and group daemon
 License:        AGPLv3+
@@ -53,5 +53,11 @@ install -Dm644 packaging/systemd/meshbay-node.service \
 %{_userunitdir}/meshbay-node.service
 
 %changelog
+* Fri Aug 14 2026 MeshBay Team <team@meshbay.org> - 0.2.0-1
+- Node wraps the group key itself; members are admitted from a local roster
+- Identity keys are per node, created at first contact and pinned there
+- Operator surface over SSH: operator pair, member list|invite|revoke|unpin
+- Unauthenticated HTTP file API and TCP transport removed (C1, C6)
+
 * Sat Aug 09 2026 MeshBay Team <team@meshbay.org> - 0.1.0-1
 - Initial package
diff --git a/packaging/rpm/python3-meshbay-common.spec b/packaging/rpm/python3-meshbay-common.spec
index 7687e90..b716e70 100644
--- a/packaging/rpm/python3-meshbay-common.spec
+++ b/packaging/rpm/python3-meshbay-common.spec
@@ -1,5 +1,5 @@
 Name:           python3-meshbay-common
-Version:        0.1.0
+Version:        0.2.0
 Release:        1%{?dist}
 Summary:        MeshBay shared cryptographic primitives and protocol types
 License:        AGPLv3+
@@ -38,5 +38,10 @@ encryption/signing, keystore AES-256-GCM, and MNP protocol types.
 %{python3_sitelib}/meshbay_common-*.dist-info/
 
 %changelog
+* Fri Aug 14 2026 MeshBay Team <team@meshbay.org> - 0.2.0-1
+- Join and pairing transcripts (meshbay:join:v1)
+- Handshake refusals carry a machine-readable code
+- gek_bundle_store removed from the protocol; no member supplies key material
+
 * Sat Aug 09 2026 MeshBay Team <team@meshbay.org> - 0.1.0-1
 - Initial package