| Commit message (Expand) | Author | Age | Files | Lines |
| * | fix(node): one member holds a share of the node, sized past real use | Christophe Besson | 14 hours | 11 | -35/+295 |
| * | fix(hub): a group name fits its column and carries no control characters | Christophe Besson | 14 hours | 3 | -4/+58 |
| * | fix(node): an upload never replaces a file, nor shares a part with another | Christophe Besson | 14 hours | 5 | -13/+159 |
| * | fix(node): ffprobe over a member's file is bounded, and stopped when it is | Christophe Besson | 14 hours | 3 | -1/+84 |
| * | fix(node): link previews connect to the address they checked, without blocking | Christophe Besson | 14 hours | 4 | -60/+207 |
| * | fix(node): how a hosted group admits people is the operator's, not the hub's | Christophe Besson | 14 hours | 13 | -34/+209 |
| * | docs: state the pepper's proof, signing by kind and device retirement as they... | Christophe Besson | 27 hours | 2 | -8/+40 |
| * | fix: an identity signs a named kind, and a device approval answers a request | Christophe Besson | 27 hours | 17 | -66/+636 |
| * | fix(hub): the pepper and a device key take the passphrase, not a token | Christophe Besson | 27 hours | 9 | -39/+134 |
| * | docs: state the pepper, MBK3, the desktop keyring and browser access as they are | Christophe Besson | 31 hours | 5 | -109/+291 |
| * | feat: browser access, decided in the desktop application | Christophe Besson | 31 hours | 19 | -5/+231 |
| * | feat(client): the desktop application keeps M and every node identity in its ... | Christophe Besson | 31 hours | 25 | -59/+873 |
| * | refactor(hub): the transport holds an identity, never a private key | Christophe Besson | 32 hours | 13 | -99/+140 |
| * | chore: bump version to 0.17.0, and the client minimum with it | Christophe Besson | 33 hours | 9 | -10/+14 |
| * | feat: bundles sealed per node under the passphrase and the hub's pepper | Christophe Besson | 33 hours | 30 | -479/+682 |
| * | feat(hub): a bundle pepper per account, handed only to a proven session | Christophe Besson | 34 hours | 5 | -0/+283 |
| * | fix(hub): a downloaded file opens in a tab only under a type that runs nothing | Christophe Besson | 35 hours | 7 | -24/+124 |
| * | fix: the page connects to its own origin and reCAPTCHA, nowhere else | Christophe Besson | 35 hours | 4 | -10/+21 |
| * | fix(client): the page names node operations, and the app confirms what widens... | Christophe Besson | 35 hours | 25 | -193/+574 |
| * | fix(hub): the admin allow-list grants an account, not a username | Christophe Besson | 35 hours | 7 | -19/+284 |
| * | docs: state hosting, invitations, the roster check and link previews as they are | Christophe Besson | 36 hours | 2 | -22/+31 |
| * | fix(node): the roster, not the key alone, decides who gets a session | Christophe Besson | 36 hours | 6 | -21/+200 |
| * | fix: only the owner decides who hosts a group, and nobody is made a member un... | Christophe Besson | 36 hours | 44 | -95/+1573 |
| * | fix: a member can no longer lock a node, crash it with a link, or stop hub cl... | Christophe Besson | 37 hours | 8 | -88/+490 |
| * | feat(hub): search title, description, canonical and noscript in the shell | Christophe Besson | 37 hours | 3 | -4/+67 |
| * | feat(hub): sitemap.xml, named by robots.txt | Christophe Besson | 38 hours | 3 | -1/+37 |
| * | refactor(hub): remove the closed relay registry | Christophe Besson | 3 days | 6 | -262/+2 |
| * | refactor(node): remove five loopback routes nothing called | Christophe Besson | 3 days | 3 | -46/+6 |
| * | docs: keypair_bundle_delete is reserved for device_policy (O3) | Christophe Besson | 3 days | 3 | -1/+10 |
| * | refactor: drop the unread transfer_limits field from the handshake ack | Christophe Besson | 3 days | 4 | -41/+22 |
| * | feat(client): save files under a name every platform can write | Christophe Besson | 3 days | 19 | -7/+245 |
| * | feat(hub): reports from public-group members, decided by an administrator | Christophe Besson | 3 days | 22 | -128/+943 |
| * | feat: nodes apply the content blocklist in their public groups | Christophe Besson | 3 days | 17 | -57/+661 |
| * | refactor: remove the public-content swarm | Christophe Besson | 3 days | 12 | -336/+64 |
| * | fix: bound pending admin challenges and sign every value an op acts on | Christophe Besson | 3 days | 18 | -132/+594 |
| * | refactor: remove dead code across packages | Christophe Besson | 3 days | 26 | -797/+14 |
| * | refactor: remove the unused GroupIndex.serialize chain | Christophe Besson | 3 days | 15 | -420/+63 |
| * | fix: refuse an unsigned handshake challenge | Christophe Besson | 3 days | 6 | -52/+44 |
| * | docs: bring the design and protocol documents in line with the code | Christophe Besson | 3 days | 3 | -72/+146 |
| * | feat(hub): new login tagline, dimmer gradient top | Christophe Besson | 3 days | 11 | -11/+11 |
| * | fix(hub): say so when a lazily loaded view cannot be fetched0.16 | Christophe Besson | 3 days | 17 | -6/+284 |
| * | feat(hub): keep a show's detail modal open under the player | Christophe Besson | 4 days | 9 | -4/+385 |
| * | fix(node): tell whether a pid is alive on Linux too | Christophe Besson | 4 days | 1 | -0/+8 |
| * | docs: the Windows node's three modes and one lifecycle, and what it cost | Christophe Besson | 4 days | 4 | -18/+151 |
| * | test: make both suites pass on Windows | Christophe Besson | 4 days | 85 | -266/+293 |
| * | fix(hub): the sidebar's Node section follows the node link | Christophe Besson | 4 days | 3 | -8/+90 |
| * | fix(hub): say "No operator paired" only when the node says so | Christophe Besson | 4 days | 2 | -4/+60 |
| * | fix: Windows installer and desktop app start and stop the node one way | Christophe Besson | 4 days | 18 | -250/+927 |
| * | fix(node): a Windows daemon that stops properly, starts honestly and runs once | Christophe Besson | 4 days | 10 | -215/+948 |
| * | fix(hub): depend on sqlalchemy[asyncio] | Christophe Besson | 4 days | 1 | -1/+1 |