| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | fix(hub): a username is unique whatever its case | Christophe Besson | 12 hours | 1 | -4/+10 |
| * | fix(hub): what an offer or a node message costs the hub is bounded | Christophe Besson | 12 hours | 2 | -25/+62 |
| * | fix(hub): a stranger who knows your name locks only browsers you never used | Christophe Besson | 14 hours | 1 | -16/+82 |
| * | fix(hub): a group name fits its column and carries no control characters | Christophe Besson | 15 hours | 1 | -2/+23 |
| * | fix(hub): the pepper and a device key take the passphrase, not a token | Christophe Besson | 28 hours | 1 | -11/+35 |
| * | feat: browser access, decided in the desktop application | Christophe Besson | 32 hours | 1 | -0/+5 |
| * | chore: bump version to 0.17.0, and the client minimum with it | Christophe Besson | 34 hours | 1 | -2/+6 |
| * | feat: bundles sealed per node under the passphrase and the hub's pepper | Christophe Besson | 34 hours | 1 | -6/+3 |
| * | feat(hub): a bundle pepper per account, handed only to a proven session | Christophe Besson | 35 hours | 1 | -0/+44 |
| * | fix: the page connects to its own origin and reCAPTCHA, nowhere else | Christophe Besson | 36 hours | 1 | -1/+7 |
| * | fix(hub): the admin allow-list grants an account, not a username | Christophe Besson | 37 hours | 1 | -7/+58 |
| * | fix: only the owner decides who hosts a group, and nobody is made a member un... | Christophe Besson | 37 hours | 5 | -30/+298 |
| * | feat(hub): search title, description, canonical and noscript in the shell | Christophe Besson | 39 hours | 1 | -3/+30 |
| * | refactor(hub): remove the closed relay registry | Christophe Besson | 3 days | 1 | -166/+0 |
| * | feat(hub): reports from public-group members, decided by an administrator | Christophe Besson | 3 days | 2 | -66/+221 |
| * | feat: nodes apply the content blocklist in their public groups | Christophe Besson | 3 days | 3 | -36/+72 |
| * | refactor: remove the public-content swarm | Christophe Besson | 3 days | 2 | -113/+2 |
| * | refactor: remove dead code across packages | Christophe Besson | 3 days | 2 | -5/+1 |
| * | fix(hub): rate-limit per client, not per proxy | Christophe Besson | 4 days | 1 | -3/+7 |
| * | fix(hub): the NAT-punch signal needs a shared active group, like the offer relay | Christophe Besson | 6 days | 2 | -52/+60 |
| * | feat(protocol): bind the MNP token to the node it is for (E10) | Christophe Besson | 6 days | 1 | -5/+19 |
| * | feat(protocol): MNP 4.0 flag day for the node-audience token (B2) | Christophe Besson | 6 days | 1 | -2/+7 |
| * | fix(hub): present a node-audience token in the handshake, not the hub session... | Christophe Besson | 6 days | 1 | -2/+27 |
| * | fix(hub): require the passphrase to change the e-mail on file | Christophe Besson | 6 days | 1 | -0/+24 |
| * | fix(hub): make group revoke admin-only and route it through the broadcasting ... | Christophe Besson | 6 days | 1 | -0/+42 |
| * | fix(hub): refuse node-scoped tokens on the admin and moderator API | Christophe Besson | 6 days | 1 | -5/+33 |
| * | feat: invitation links no longer bound to an e-mail address | Christophe Besson | 6 days | 1 | -26/+23 |
| * | feat(hub): friendlier welcome page, link previews, robots.txt and favicon | Christophe Besson | 6 days | 1 | -3/+40 |
| * | refactor(client): split transport.js into classic scripts | Christophe Besson | 7 days | 1 | -0/+9 |
| * | fix(hub): offer ceilings that bound a member without failing an ordinary one | Christophe Besson | 8 days | 1 | -3/+61 |
| * | fix(hub): a redeemed invitation link leaves the owner's list | Christophe Besson | 8 days | 1 | -10/+17 |
| * | feat(hub): invitation-link tickets bound to a verified address | Christophe Besson | 8 days | 2 | -0/+341 |
| * | feat(hub): make mailing an invitation a remembered choice | Christophe Besson | 8 days | 1 | -0/+3 |
| * | style: the 98 ruff could not fix, so the linter is a signal again | Christophe Besson | 12 days | 4 | -6/+15 |
| * | style: ruff's own fixes, mechanically applied | Christophe Besson | 12 days | 11 | -61/+71 |
| * | fix: the two ceilings §13.5b was still missing, as AV27 and AV28 | Christophe Besson | 13 days | 1 | -1/+32 |
| * | docs: cite MESHBAY_DESIGN.md and a section instead of the merged notes | Christophe Besson | 13 days | 1 | -3/+3 |
| * | fix(hub): the password verifier is Argon2id 64 MiB, and a hash's version name... | Christophe Besson | 2026-09-17 | 1 | -2/+2 |
| * | spa: a blank page can never be silent again | Christophe Besson | 2026-09-17 | 1 | -0/+4 |
| * | feat(hub): Videos and Music list their cards a page at a time | Christophe Besson | 2026-09-15 | 1 | -0/+1 |
| * | feat(hub): session lifetime is an admin setting, and a browser signs out when... | Christophe Besson | 2026-09-15 | 3 | -6/+120 |
| * | feat(hub): usernames are at least 8 characters at registration | Christophe Besson | 2026-09-15 | 1 | -2/+8 |
| * | fix(hub): Argon2 runs off the event loop, on exactly one worker | Christophe Besson | 2026-09-14 | 1 | -12/+12 |
| * | fix(hub): a per-account sign-in lockout, and a reviewed unauthenticated surface | Christophe Besson | 2026-09-14 | 4 | -25/+123 |
| * | fix(hub): federation is closed until two hubs have run it | Christophe Besson | 2026-09-13 | 2 | -1/+55 |
| * | fix(hub): a node that hosts nothing is not a free target, and a private group... | Christophe Besson | 2026-09-13 | 2 | -27/+56 |
| * | fix: hold every background task, in both codebases | Christophe Besson | 2026-09-13 | 1 | -1/+2 |
| * | feat(hub): the mail bounds are settings, with a panel to change them | Christophe Besson | 2026-09-12 | 1 | -4/+55 |
| * | fix(hub): the mail allowance is written down, and recovery keeps a share | Christophe Besson | 2026-09-12 | 2 | -55/+48 |
| * | fix(hub): bound the blocklist reads a stranger can make | Christophe Besson | 2026-09-12 | 1 | -3/+16 |