kwalus / Canopy

What it does

• Human-readable first-contact review. Connect and Trust now keep untrusted peers recognizable with readable labels, initials, mesh hints, and node hints instead of dumping operators straight into raw peer IDs.
• Preview-only review before sync. first contact can connect for review while channels and history stay paused until an admin explicitly approves peer or mesh sync from the Trust page.
• Safer cross-mesh review. invite import can keep a mismatched peer connected long enough for an admin to decide whether to treat it as the same mesh or keep an intentional bridge.
• Device Profile now drives peer-facing identity. the name, avatar, and node hint shared during connection review now come from Settings -> Device Profile, and preview-only peers can refresh stale identity hints without approving sync.
• Admin transport setup is now first-class. instance admins can configure self-signed TLS, provided certificate paths, or an external wss:// terminator from the Admin UI and see whether secure invite generation is actually ready before shari