v1.7.0

This release adds approval-based space membership, is a major security hardening update, and changes how sharing works: your files are now served directly from the originals on your computer, with no second copy. Existing installs upgrade and migrate automatically — your identity and spaces are preserved.

Highlights

• Share straight from your files — no more private second copy; sharing no longer doubles disk usage, and in-place edits are picked up automatically.
• Approve who joins your spaces — joining is now a request an existing member approves (or flip on auto-approve for the old open behaviour).
• Full transfer control — pause, resume, and stop downloads; they resume on their own when the owner is back; each finished file gets a "verified" badge.
• Richer transfer insight — live speed, a steady time-remaining estimate, who's downloading from you, and the owner's live preparation progress.
• See who's mirroring a folder you shared, with live per-person state (synced / syncing / paused), accurate even while they're offline.
• Browse shared folders as a collapsible tree — per-folder file counts, sizes, and download progress, with Expand/Collapse all.
• Native Mac builds per processor — separate Intel and Apple Silicon downloads. Plus Quit Mirall (Ctrl+Q) in the File menu on Windows/Linux.

Security

• Local app data encrypted at rest, tied to your identity — copying Mirall's data folder no longer exposes your spaces, folders, or downloads.
• Identity key wrapped in your OS keychain, plaintext removed from storage.
• Space contents gated by a per-space key handed out only on approval — reaching a space is no longer the same as reading it.
• Hardened against abusive peers — connection rate limits, size caps, a peer firewall, and rejection of oversized avatars/names.

Also fixed

Path-traversal in shared paths, mirrors never overwriting your files, membership lists staying in sync, leaves surviving a mid-quit, catch-up on flaky connections without a restart, and more.▎

Full changelog: see CHANGELOG.md.