| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | feat(protocol): bind the MNP token to the node it is for (E10) | Christophe Besson | 43 hours | 1 | -5/+19 |
| * | feat(protocol): MNP 4.0 flag day for the node-audience token (B2) | Christophe Besson | 2 days | 1 | -2/+7 |
| * | fix(hub): present a node-audience token in the handshake, not the hub session... | Christophe Besson | 2 days | 1 | -2/+27 |
| * | fix(hub): require the passphrase to change the e-mail on file | Christophe Besson | 2 days | 1 | -0/+24 |
| * | fix(hub): make group revoke admin-only and route it through the broadcasting ... | Christophe Besson | 2 days | 1 | -0/+42 |
| * | fix(hub): refuse node-scoped tokens on the admin and moderator API | Christophe Besson | 2 days | 1 | -5/+33 |
| * | feat: invitation links no longer bound to an e-mail address | Christophe Besson | 2 days | 1 | -26/+23 |
| * | feat(hub): friendlier welcome page, link previews, robots.txt and favicon | Christophe Besson | 2 days | 1 | -3/+40 |
| * | refactor(client): split transport.js into classic scripts | Christophe Besson | 2 days | 1 | -0/+9 |
| * | fix(hub): offer ceilings that bound a member without failing an ordinary one | Christophe Besson | 4 days | 1 | -3/+61 |
| * | fix(hub): a redeemed invitation link leaves the owner's list | Christophe Besson | 4 days | 1 | -10/+17 |
| * | feat(hub): invitation-link tickets bound to a verified address | Christophe Besson | 4 days | 2 | -0/+341 |
| * | feat(hub): make mailing an invitation a remembered choice | Christophe Besson | 4 days | 1 | -0/+3 |
| * | style: the 98 ruff could not fix, so the linter is a signal again | Christophe Besson | 8 days | 4 | -6/+15 |
| * | style: ruff's own fixes, mechanically applied | Christophe Besson | 8 days | 11 | -61/+71 |
| * | fix: the two ceilings §13.5b was still missing, as AV27 and AV28 | Christophe Besson | 8 days | 1 | -1/+32 |
| * | docs: cite MESHBAY_DESIGN.md and a section instead of the merged notes | Christophe Besson | 9 days | 1 | -3/+3 |
| * | fix(hub): the password verifier is Argon2id 64 MiB, and a hash's version name... | Christophe Besson | 10 days | 1 | -2/+2 |
| * | spa: a blank page can never be silent again | Christophe Besson | 11 days | 1 | -0/+4 |
| * | feat(hub): Videos and Music list their cards a page at a time | Christophe Besson | 12 days | 1 | -0/+1 |
| * | feat(hub): session lifetime is an admin setting, and a browser signs out when... | Christophe Besson | 13 days | 3 | -6/+120 |
| * | feat(hub): usernames are at least 8 characters at registration | Christophe Besson | 13 days | 1 | -2/+8 |
| * | fix(hub): Argon2 runs off the event loop, on exactly one worker | Christophe Besson | 14 days | 1 | -12/+12 |
| * | fix(hub): a per-account sign-in lockout, and a reviewed unauthenticated surface | Christophe Besson | 14 days | 4 | -25/+123 |
| * | fix(hub): federation is closed until two hubs have run it | Christophe Besson | 14 days | 2 | -1/+55 |
| * | fix(hub): a node that hosts nothing is not a free target, and a private group... | Christophe Besson | 14 days | 2 | -27/+56 |
| * | fix: hold every background task, in both codebases | Christophe Besson | 2026-09-13 | 1 | -1/+2 |
| * | feat(hub): the mail bounds are settings, with a panel to change them | Christophe Besson | 2026-09-12 | 1 | -4/+55 |
| * | fix(hub): the mail allowance is written down, and recovery keeps a share | Christophe Besson | 2026-09-12 | 2 | -55/+48 |
| * | fix(hub): bound the blocklist reads a stranger can make | Christophe Besson | 2026-09-12 | 1 | -3/+16 |
| * | fix(hub): MHP binds its audience, and the hub knows its own name | Christophe Besson | 2026-09-12 | 1 | -14/+34 |
| * | fix(hub): the mail server is not a relay | Christophe Besson | 2026-09-12 | 1 | -3/+48 |
| * | fix(hub): no mail from the event loop, and a ceiling on every path that sends it | Christophe Besson | 2026-09-12 | 3 | -16/+101 |
| * | fix: bound what one member can cost the others | Christophe Besson | 2026-09-12 | 4 | -20/+199 |
| * | fix: an empty group claim is a claim on nothing | Christophe Besson | 2026-09-12 | 1 | -3/+42 |
| * | fix(hub): an administrator can erase an account that owns groups | Christophe Besson | 2026-09-11 | 3 | -18/+53 |
| * | fix(hub): the asset fingerprint covers every file under static/ | Christophe Besson | 2026-09-11 | 1 | -38/+14 |
| * | fix(hub): account deletion left device keys and swarm sources behind | Christophe Besson | 2026-09-11 | 1 | -2/+11 |
| * | feat(hub): pin the app controls while a library scrolls | Christophe Besson | 2026-09-10 | 1 | -2/+10 |
| * | fix: the PDF preview needs object-src and frame-src, in both policies | Christophe Besson | 2026-09-09 | 1 | -4/+28 |
| * | feat: MNP 3.0 — a transfer needs a lease | Christophe Besson | 2026-09-09 | 1 | -2/+15 |
| * | fix(hub): let this origin frame its own download URL | Christophe Besson | 2026-09-08 | 1 | -2/+24 |
| * | feat(client): HelloWorld, the reference application | Christophe Besson | 2026-09-07 | 1 | -0/+4 |
| * | feat(client): Phase 2 — per-app settings panes, folder tree, multi-directory | Christophe Besson | 2026-09-06 | 1 | -0/+8 |
| * | fix(hub): stop the maintenance loop racing the tests, and pin _ASSETS | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | fix(hub): dismissing a notification deletes it | Christophe Besson | 2026-09-02 | 1 | -12/+49 |
| * | fix(hub): a desktop solve reports no hostname at all, not "meshbay" | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | fix(hub): check the captcha's origin here, so the desktop client can pass one | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | revert(hub): M6 — add_group_member must keep accepting node tokens | Christophe Besson | 2026-09-01 | 1 | -6/+8 |
| * | fix(hub): send a CSP and protective headers on every response | Christophe Besson | 2026-09-01 | 1 | -2/+29 |