Files
netris-nestri/apps
Wanjohi 38403526fb release: bound sign-in code sends; Xwayland GL driver and default browser (#462)
Ships dev to prod.

## Auth
- **fix(auth): bound sign-in code sends per mailbox and per caller**
(7c200ff)
- The send budget was keyed by every submitted form field, so a new
field value made a new budget and one mailbox could be sent codes
without limit. Claims are now only the claim fields (email, phone);
anything else is dropped.
- New budget per requesting address: 10 codes per 24 hours. A budget per
mailbox does nothing against a caller working through a list of
addresses.
  - Tests cover both cases and fail on the previous code.

## Box
- fix(nescope): give Xwayland the box's GL driver selection (a967796)
- feat(image): a default browser in the box (714759b)
- #460 (871a3e7)
2026-11-05 09:19:36 +00:00
..
2026-10-19 21:48:14 +00:00