feat(cli): invitations, join, decline, leave, devices, browser access

join accepts an invitation or redeems a link pasted as sent, then has the
node admit a key pair made here, with the invitation's code (a link's code
goes only to the node it names; one for a node that is away is kept for the
next connection). decline, leave and devices revoke ask first, and refuse
without --yes where there is no terminal. devices approve countersigns the
one waiting request a code matches, none when several do. browser-access is
the application's setting, kept per machine and never enabled from the hub's
mirror: on leaves a copy sealed under M on each node, off withdraws it,
unset touches nothing. A key pair made for a first contact is now kept.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 2 insertions, 2 deletions

diff --git a/packages/meshbay-cli/tests/test_store_and_session.py b/packages/meshbay-cli/tests/test_store_and_session.py
index 42458e2..07ba77e 100644
--- a/packages/meshbay-cli/tests/test_store_and_session.py
+++ b/packages/meshbay-cli/tests/test_store_and_session.py
@@ -244,7 +244,7 @@ async def test_a_machine_waiting_for_approval_retries_until_it_is_approved(monke
     monkeypatch.setattr(groups, "LINK_POLL", 0)
     tries, shown = [], []
 
-    async def connect(account, group_id, node):
+    async def connect(account, group_id, node, join_code=None):
         tries.append(node["node_id"])
         if len(tries) < 3:
             raise DeviceLinkPending("ABCD-EFGH", time.time() + 600)
@@ -264,7 +264,7 @@ async def test_without_a_terminal_the_code_is_shown_and_the_run_ends(monkeypatch
     from meshbay_cli.client import groups
     from meshbay_cli.client.session import DeviceLinkPending
 
-    async def connect(account, group_id, node):
+    async def connect(account, group_id, node, join_code=None):
         raise DeviceLinkPending("ABCD-EFGH", time.time() + 600)
     monkeypatch.setattr(groups, "connect", connect)