Files
Mycelium-ui-private/CHANGELOG.md
syoul 8b83fc10d5 fork: initialize Mycellium UI Private from Mycell-UI@5229e2c
This repo is a hard fork of mycellium-ui dedicated to the
mycelium-private experimental track upstream. The two apps coexist
on the same machine via distinct app identifiers, polkit actions,
and binary names.

Renames
- package + crate: mycellium-ui → mycellium-ui-private
- bundle identifier: tech.threefold.mycellium-ui-private
- daemon binary: mycelium-private (separate upstream release tarball)
- bootstrap wrapper: /usr/bin/mycellium-bootstrap-private
- polkit policy file + action id

Functional changes
- SidecarConfig.network_name field (UTF-8, 2..=64 bytes)
- start() refuses to spawn without a network name AND a 32-byte
  key file at app_data_dir/network_key.bin; surfaces a clear
  error rather than letting mycelium-private fail mid-startup
- network_key_status / generate / import / export / delete
  commands; uses OS RNG (rand) and writes 0600
- empty default peers list (no Threefold seed for private overlays)
- new Settings → Private network panel: name input, key generate /
  reveal-hex / import / delete, status indicator

Adapted bootstrap script kills both `mycelium` and
`mycelium-private` orphans (cross-clash on UDP/9650 + TCP/8990).

CI workflow + sidebar branding updated. The README explains the
divergence model and how to cherry-pick upstream fixes.
2026-04-27 01:37:07 +02:00

3.7 KiB

Changelog

All notable changes to this fork are documented here. Format follows Keep a Changelog, version numbers follow Semantic Versioning.

This fork tracks syoul/Mycell-UI (the public-network variant) as upstream. Bugfixes from upstream are cherry-picked; this changelog only records changes specific to the private-network track.

Unreleased

0.1.0 — 2026-04-27

Forked from Mycell-UI@5229e2c ("feat(packaging): pre-spawn cleanup wrapper for clean restarts").

Added

  • Bundling of the mycelium-private daemon (separate upstream release tarball — mycelium-private-{triple}-unknown-linux-musl.tar.gz) instead of the public mycelium.
  • SidecarConfig.networkName field (UTF-8, 2..=64 bytes — public, agreed across all nodes of the same overlay).
  • Network key management: network_key_status, network_key_generate, network_key_import, network_key_export, network_key_delete Tauri commands. Keys are 32 random bytes from the OS RNG, stored at app_data_dir/network_key.bin with mode 0600.
  • "Private network" section in Settings at the top: name input, generate / reveal-hex / import / delete buttons, configured / missing status badge.
  • Pre-flight check in sidecar::start: refuses to spawn the daemon without a non-empty network name AND an existing key file. Surfaces a clear error rather than letting mycelium-private fail mid-startup.
  • mycellium-bootstrap-private cleanup wrapper kills both mycelium and mycelium-private orphans on each spawn, since either would block UDP/9650 (multicast discovery) and TCP/8990 (hardcoded JSON-RPC port).

Changed

  • App identifier: tech.threefold.mycellium-uitech.threefold.mycellium-ui-private.
  • Cargo crate name + lib name: mycellium_ui_libmycellium_ui_private_lib.
  • Display: Mycellium UIMycellium UI Private. Sidebar shows "Mycellium Private" with an amber accent.
  • .deb package name: mycellium-uimycellium-ui-private. Distinct binary at /usr/bin/mycellium-ui-private. The two apps coexist on the same machine.
  • polkit action ID: tech.threefold.mycellium-ui.bootstraptech.threefold.mycellium-ui-private.bootstrap. Path annotation points at /usr/bin/mycellium-bootstrap-private.
  • Default peer list is now empty: a private network has no Threefold-operated seed; the user must explicitly add bootstrap peers they control.
  • The "Static peers" textarea hint in Settings changed from "tcp://188.40.132.242:9651" to "tcp://your-node.example.org:9651".
  • README rewritten to focus on the private-network model, key distribution flow, and the divergence policy from upstream.

Removed

  • The two public Threefold seed peers from SidecarConfig::default() (TCP 188.40.132.242:9651 and QUIC [2a01:4f8:212:fa6::2]:9651).

Inherited from upstream Mycell-UI@5229e2c

  • Sidecar lifecycle via pkexec with elevated cleanup wrapper (auth_admin_keep cached per session).
  • Ephemeral ports for the REST API, peer-listen TCP/QUIC, and Prometheus metrics endpoint.
  • reqwest connection pool disabled (pool_max_idle_per_host(0)) to dodge stale-connection errors on long-running sessions.
  • Short-poll inbox loop (workaround for the upstream HTTP serialization bug — see docs-syoul/upstream-bug-http-serialization.md in the public repo).
  • Status page surfaces the full overlay IPv6 (parsed from the daemon's Node overlay IP: log line) in addition to the /64 subnet.
  • pkexec | policykit-1 Depends alternative for compatibility with both Debian 12 (bookworm) and Debian 13 (trixie).