| Commit message (Expand) | Author | Age | Files | Lines |
| * | docs: cite MESHBAY_DESIGN.md and a section instead of the merged notes | Christophe Besson | 7 days | 1 | -3/+3 |
| * | fix(hub): the password verifier is Argon2id 64 MiB, and a hash's version name... | Christophe Besson | 8 days | 1 | -2/+2 |
| * | feat(hub): Videos and Music list their cards a page at a time | Christophe Besson | 10 days | 1 | -0/+1 |
| * | feat(hub): session lifetime is an admin setting, and a browser signs out when... | Christophe Besson | 11 days | 1 | -6/+91 |
| * | feat(hub): usernames are at least 8 characters at registration | Christophe Besson | 11 days | 1 | -2/+8 |
| * | fix(hub): Argon2 runs off the event loop, on exactly one worker | Christophe Besson | 12 days | 1 | -12/+12 |
| * | fix(hub): a per-account sign-in lockout, and a reviewed unauthenticated surface | Christophe Besson | 12 days | 1 | -14/+59 |
| * | fix(hub): the mail allowance is written down, and recovery keeps a share | Christophe Besson | 13 days | 1 | -53/+45 |
| * | fix(hub): the mail server is not a relay | Christophe Besson | 13 days | 1 | -3/+48 |
| * | fix(hub): no mail from the event loop, and a ceiling on every path that sends it | Christophe Besson | 13 days | 1 | -8/+86 |
| * | fix(hub): an administrator can erase an account that owns groups | Christophe Besson | 2026-09-11 | 1 | -4/+16 |
| * | fix(hub): account deletion left device keys and swarm sources behind | Christophe Besson | 2026-09-11 | 1 | -2/+11 |
| * | fix(hub): a desktop solve reports no hostname at all, not "meshbay" | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | fix(hub): check the captcha's origin here, so the desktop client can pass one | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | fix(hub): enforce registration captcha for every client | Christophe Besson | 2026-09-01 | 1 | -2/+7 |
| * | feat(hub): reCAPTCHA v2 on Register and Password Reset pages | Christophe Besson | 2026-09-01 | 1 | -3/+26 |
| * | feat: passphrase change and account recovery (auth-confirm) | Christophe Besson | 2026-09-01 | 1 | -3/+223 |
| * | feat: email verification for registration, email change, and invitations | Christophe Besson | 2026-08-31 | 1 | -24/+211 |
| * | feat: node workflow redesign — wizard auto-config, reset, MusicBrainz contact | Christophe Besson | 2026-08-29 | 1 | -0/+11 |
| * | feat(music): network-adaptive prefetch depth, opt-in keep-screen-on toggle | Christophe Besson | 2026-08-26 | 1 | -0/+1 |
| * | feat(ui): 11-point UI overhaul — tabs, transfers, settings, uploads | Christophe Besson | 2026-08-19 | 1 | -1/+121 |
| * | feat: device linking, and signing in to the hub with a device key | Christophe Besson | 2026-08-18 | 1 | -1/+183 |
| * | feat(logs): keep the username on records the account no longer answers for | Christophe Besson | 2026-08-15 | 1 | -1/+6 |
| * | feat(account): a user can delete their own account, an admin can delete one | Christophe Besson | 2026-08-14 | 1 | -2/+78 |
| * | feat!: identity keys per node — C4's blast radius drops to one operator | Christophe Besson | 2026-08-14 | 1 | -45/+12 |
| * | fix: swarm privacy, revocation persistence, keystore KDF, audit integrity | Christophe Besson | 2026-08-13 | 1 | -15/+32 |
| * | feat: Phase 12 — P2P crypto material, password split, node Ed25519 auth | Christophe Besson | 2026-08-13 | 1 | -24/+116 |
| * | feat(hub): Phase 10.1–10.4 — Site overlay + admin/moderation UI | Christophe Besson | 2026-08-11 | 1 | -0/+12 |
| * | feat(hub): Phase 8 — Hub v2 security hardening + production readiness | Christophe Besson | 2026-08-10 | 1 | -11/+60 |
| * | feat: Phase 7 — Node v2 (multi-group, Sender Keys, 0-RTT, chat, denylist) | Christophe Besson | 2026-08-10 | 1 | -3/+11 |
| * | feat: password-based key derivation + operational QUICKSTART | Christophe Besson | 2026-08-09 | 1 | -3/+8 |
| * | feat(hub): add production hub — config, auth, API routers, tests | Christophe Besson | 2026-08-09 | 1 | -0/+199 |