| Commit message (Expand) | Author | Age | Files | Lines |
| * | fix(hub): Argon2 runs off the event loop, on exactly one worker | Christophe Besson | 12 days | 1 | -12/+12 |
| * | fix(hub): a per-account sign-in lockout, and a reviewed unauthenticated surface | Christophe Besson | 12 days | 4 | -25/+123 |
| * | fix(hub): federation is closed until two hubs have run it | Christophe Besson | 12 days | 2 | -1/+55 |
| * | fix(hub): a node that hosts nothing is not a free target, and a private group... | Christophe Besson | 12 days | 2 | -27/+56 |
| * | fix: hold every background task, in both codebases | Christophe Besson | 12 days | 1 | -1/+2 |
| * | feat(hub): the mail bounds are settings, with a panel to change them | Christophe Besson | 13 days | 1 | -4/+55 |
| * | fix(hub): the mail allowance is written down, and recovery keeps a share | Christophe Besson | 13 days | 2 | -55/+48 |
| * | fix(hub): bound the blocklist reads a stranger can make | Christophe Besson | 13 days | 1 | -3/+16 |
| * | fix(hub): MHP binds its audience, and the hub knows its own name | Christophe Besson | 13 days | 1 | -14/+34 |
| * | fix(hub): the mail server is not a relay | Christophe Besson | 13 days | 1 | -3/+48 |
| * | fix(hub): no mail from the event loop, and a ceiling on every path that sends it | Christophe Besson | 13 days | 3 | -16/+101 |
| * | fix: bound what one member can cost the others | Christophe Besson | 13 days | 4 | -20/+199 |
| * | fix: an empty group claim is a claim on nothing | Christophe Besson | 13 days | 1 | -3/+42 |
| * | fix(hub): an administrator can erase an account that owns groups | Christophe Besson | 2026-09-11 | 3 | -18/+53 |
| * | fix(hub): the asset fingerprint covers every file under static/ | Christophe Besson | 2026-09-11 | 1 | -38/+14 |
| * | fix(hub): account deletion left device keys and swarm sources behind | Christophe Besson | 2026-09-11 | 1 | -2/+11 |
| * | feat(hub): pin the app controls while a library scrolls | Christophe Besson | 2026-09-10 | 1 | -2/+10 |
| * | fix: the PDF preview needs object-src and frame-src, in both policies | Christophe Besson | 2026-09-09 | 1 | -4/+28 |
| * | feat: MNP 3.0 — a transfer needs a lease | Christophe Besson | 2026-09-09 | 1 | -2/+15 |
| * | fix(hub): let this origin frame its own download URL | Christophe Besson | 2026-09-08 | 1 | -2/+24 |
| * | feat(client): HelloWorld, the reference application | Christophe Besson | 2026-09-07 | 1 | -0/+4 |
| * | feat(client): Phase 2 — per-app settings panes, folder tree, multi-directory | Christophe Besson | 2026-09-06 | 1 | -0/+8 |
| * | fix(hub): stop the maintenance loop racing the tests, and pin _ASSETS | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | fix(hub): dismissing a notification deletes it | Christophe Besson | 2026-09-02 | 1 | -12/+49 |
| * | fix(hub): a desktop solve reports no hostname at all, not "meshbay" | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | fix(hub): check the captcha's origin here, so the desktop client can pass one | Christophe Besson | 2026-09-02 | 1 | -0/+1 |
| * | revert(hub): M6 — add_group_member must keep accepting node tokens | Christophe Besson | 2026-09-01 | 1 | -6/+8 |
| * | fix(hub): send a CSP and protective headers on every response | Christophe Besson | 2026-09-01 | 1 | -2/+29 |
| * | fix(hub): constrain what a federated peer hub can do (MHP) | Christophe Besson | 2026-09-01 | 1 | -26/+98 |
| * | fix(hub): require user scope to add group members | Christophe Besson | 2026-09-01 | 1 | -1/+6 |
| * | fix(hub): enforce registration captcha for every client | Christophe Besson | 2026-09-01 | 1 | -2/+7 |
| * | fix(hub): require auth and distinct reporters for content reports | Christophe Besson | 2026-09-01 | 1 | -26/+60 |
| * | fix(hub): moderator can no longer grant admin or hard-revoke accounts | Christophe Besson | 2026-09-01 | 2 | -5/+33 |
| * | fix(node): CLI member invite now registers hub membership and enforces code | Christophe Besson | 2026-09-01 | 1 | -1/+1 |
| * | feat(hub): reCAPTCHA v2 on Register and Password Reset pages | Christophe Besson | 2026-09-01 | 2 | -3/+35 |
| * | feat: passphrase change and account recovery (auth-confirm) | Christophe Besson | 2026-09-01 | 1 | -3/+223 |
| * | feat: email verification for registration, email change, and invitations | Christophe Besson | 2026-08-31 | 2 | -25/+263 |
| * | refactor(ui): extract Explore, Login, Register and CreateGroup from app.js | Christophe Besson | 2026-08-31 | 1 | -1/+6 |
| * | feat: node workflow redesign — wizard auto-config, reset, MusicBrainz contact | Christophe Besson | 2026-08-29 | 1 | -0/+11 |
| * | feat(hub): group names unique per owner, shown as name@owner | Christophe Besson | 2026-08-28 | 2 | -13/+55 |
| * | feat(hub): let a hub admin disable public groups instance-wide | Christophe Besson | 2026-08-28 | 5 | -21/+125 |
| * | feat(music): network-adaptive prefetch depth, opt-in keep-screen-on toggle | Christophe Besson | 2026-08-26 | 1 | -0/+1 |
| * | fix(hub): no-store on the SPA HTML shell — pull-to-refresh wasn't enough | Christophe Besson | 2026-08-26 | 1 | -3/+15 |
| * | feat: add Photos group app | Christophe Besson | 2026-08-25 | 1 | -1/+1 |
| * | feat(hub): Music app client — album grid, flat list, persistent player | Christophe Besson | 2026-08-24 | 1 | -0/+1 |
| * | feat(node,hub): add Videos group app (poster grid, flat list, TMDB metadata) | Christophe Besson | 2026-08-24 | 1 | -1/+1 |
| * | feat(hub): split the group UI into a pluggable "applications" architecture | Christophe Besson | 2026-08-23 | 1 | -1/+7 |
| * | fix: delete notifications and detach content_reports before deleting a group | Christophe Besson | 2026-08-21 | 1 | -2/+7 |
| * | feat: unified group management, public groups, and activity-based sidebar | Christophe Besson | 2026-08-20 | 3 | -9/+47 |
| * | feat(ui): 11-point UI overhaul — tabs, transfers, settings, uploads | Christophe Besson | 2026-08-19 | 1 | -1/+121 |