## Satis Hub 1.0.6 (2026-02-22)

This release focused on safer defaults, improved rebuild reliability, and cleaner internal architecture.

### Added
- Added a new action block in `SettingsForms` with a **Use packages page as homepage** button.
- Added a dedicated submit handler to set `system.site:page.front` to `/packages` on demand.

### Changed
- Reworked the homepage setup flow: the front page is no longer forced automatically during module install.
- Hardened file path resolution for package/json download endpoints by constraining resolved paths to the configured output directory.
- Fixed rebuild configuration handling in `satisRebuild()` so caller-provided config overrides are preserved.
- Reworked JSON parsing to `JSON_THROW_ON_ERROR` with exception-based handling in controller, helper, and auth-method code paths.
- Removed unused constructor dependencies from `SatisHelper` while keeping WeakMap-based settings cache.
- Updated `satis_hub.helper` service wiring and unit tests to match the simplified `SatisHelper` constructor signature.
- Unified repeated authentication checks in `SatisController` by extracting shared `applies/authenticate` handling into a single private helper.

### Removed
- Removed `satis_hub_install()` logic that automatically changed the front page to `/packages`.

### Security
- Added path traversal protection for file access via download endpoints.