| Commit message (Expand) | Author | Age | Files | Lines |
| * | fix(client): rotating a group key asks nothing | Christophe Besson | 8 hours | 1 | -5/+5 |
| * | fix(client): hosting a group asks nothing when its folder came from the picker | Christophe Besson | 8 hours | 1 | -3/+3 |
| * | fix(hub): a username is unique whatever its case | Christophe Besson | 10 hours | 1 | -1/+4 |
| * | fix(hub): what an offer or a node message costs the hub is bounded | Christophe Besson | 10 hours | 1 | -1/+1 |
| * | fix(node): the reaper deletes only the .part files the node wrote | Christophe Besson | 11 hours | 1 | -1/+3 |
| * | fix(node): a revoked account is disconnected, not only refused next time | Christophe Besson | 11 hours | 1 | -2/+3 |
| * | fix: an MBK2 bundle is opened once and stored again as MBK3 | Christophe Besson | 11 hours | 1 | -18/+29 |
| * | docs: chat at rest is protected from a copy without the unlock key, not from ... | Christophe Besson | 12 hours | 1 | -4/+10 |
| * | fix: downloads are marked and keep their extension; Explorer files are refused | Christophe Besson | 12 hours | 1 | -11/+36 |
| * | fix(node): one member holds a share of the node, sized past real use | Christophe Besson | 13 hours | 1 | -3/+8 |
| * | fix(node): an upload never replaces a file, nor shares a part with another | Christophe Besson | 14 hours | 1 | -1/+8 |
| * | fix(node): link previews connect to the address they checked, without blocking | Christophe Besson | 14 hours | 1 | -5/+9 |
| * | fix(node): how a hosted group admits people is the operator's, not the hub's | Christophe Besson | 14 hours | 1 | -0/+6 |
| * | docs: state the pepper's proof, signing by kind and device retirement as they... | Christophe Besson | 27 hours | 1 | -7/+27 |
| * | docs: state the pepper, MBK3, the desktop keyring and browser access as they are | Christophe Besson | 31 hours | 1 | -80/+193 |
| * | chore: bump version to 0.17.0, and the client minimum with it | Christophe Besson | 33 hours | 1 | -1/+1 |
| * | fix(hub): a downloaded file opens in a tab only under a type that runs nothing | Christophe Besson | 35 hours | 1 | -0/+8 |
| * | fix: the page connects to its own origin and reCAPTCHA, nowhere else | Christophe Besson | 35 hours | 1 | -1/+1 |
| * | fix(client): the page names node operations, and the app confirms what widens... | Christophe Besson | 35 hours | 1 | -2/+19 |
| * | fix(hub): the admin allow-list grants an account, not a username | Christophe Besson | 35 hours | 1 | -0/+11 |
| * | docs: state hosting, invitations, the roster check and link previews as they are | Christophe Besson | 36 hours | 1 | -18/+25 |
| * | fix(node): the roster, not the key alone, decides who gets a session | Christophe Besson | 36 hours | 1 | -0/+8 |
| * | fix: only the owner decides who hosts a group, and nobody is made a member un... | Christophe Besson | 36 hours | 1 | -4/+30 |
| * | fix: a member can no longer lock a node, crash it with a link, or stop hub cl... | Christophe Besson | 37 hours | 1 | -1/+3 |
| * | refactor(hub): remove the closed relay registry | Christophe Besson | 3 days | 1 | -2/+1 |
| * | refactor(node): remove five loopback routes nothing called | Christophe Besson | 3 days | 1 | -1/+1 |
| * | docs: keypair_bundle_delete is reserved for device_policy (O3) | Christophe Besson | 3 days | 1 | -1/+2 |
| * | feat(client): save files under a name every platform can write | Christophe Besson | 3 days | 1 | -0/+9 |
| * | feat(hub): reports from public-group members, decided by an administrator | Christophe Besson | 3 days | 1 | -15/+35 |
| * | feat: nodes apply the content blocklist in their public groups | Christophe Besson | 3 days | 1 | -2/+28 |
| * | refactor: remove the public-content swarm | Christophe Besson | 3 days | 1 | -7/+7 |
| * | fix: bound pending admin challenges and sign every value an op acts on | Christophe Besson | 3 days | 1 | -7/+17 |
| * | refactor: remove dead code across packages | Christophe Besson | 3 days | 1 | -8/+2 |
| * | refactor: remove the unused GroupIndex.serialize chain | Christophe Besson | 3 days | 1 | -9/+8 |
| * | fix: refuse an unsigned handshake challenge | Christophe Besson | 3 days | 1 | -3/+3 |
| * | docs: bring the design and protocol documents in line with the code | Christophe Besson | 3 days | 1 | -26/+48 |
| * | fix(hub): say so when a lazily loaded view cannot be fetched0.16 | Christophe Besson | 3 days | 1 | -1/+6 |
| * | feat(hub): keep a show's detail modal open under the player | Christophe Besson | 4 days | 1 | -0/+7 |
| * | docs: the Windows node's three modes and one lifecycle, and what it cost | Christophe Besson | 4 days | 1 | -4/+14 |
| * | fix(node,client): query TMDB only once a language is chosen, in that language | Christophe Besson | 5 days | 1 | -0/+22 |
| * | fix(hub): the NAT-punch signal needs a shared active group, like the offer relay | Christophe Besson | 6 days | 1 | -1/+4 |
| * | docs(design): state the node-bound MNP token as a rule, not an incident | Christophe Besson | 6 days | 1 | -13/+12 |
| * | feat(protocol): bind the MNP token to the node it is for (E10) | Christophe Besson | 6 days | 1 | -1/+13 |
| * | feat(protocol): MNP 4.0 flag day for the node-audience token (B2) | Christophe Besson | 6 days | 1 | -1/+30 |
| * | feat: invitation links no longer bound to an e-mail address | Christophe Besson | 6 days | 1 | -25/+36 |
| * | chore: bump version to 0.16.0 | Christophe Besson | 6 days | 1 | -1/+1 |
| * | feat(client): fetch the media apps, the player, settings and search on first use | Christophe Besson | 7 days | 1 | -1/+6 |
| * | refactor(node): split ops.py into the ops package | Christophe Besson | 7 days | 1 | -3/+3 |
| * | docs: the transcoded-seek test passes without transcoding | Christophe Besson | 7 days | 1 | -0/+1 |
| * | docs: listing a group's folders walks every root on the event loop | Christophe Besson | 7 days | 1 | -0/+1 |