feat(hub): open, create and join invitation links in the interface

#/invite takes the link out of the address on load and keeps it in the
tab through registration and sign-in; joining is one click, only the
ticket goes to the hub, and the code goes only to the node the link
names once it has signed its challenge. Members tab gains "Invite by
link" (shared e-mail box, pending list, cancel both halves); home page
takes a pasted link. Browser probe drives the real app, signed out and in.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 5 insertions, 1 deletions

diff --git a/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js b/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js
index f0af187..70c48f2 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js
@@ -7,6 +7,7 @@ import {
 } from './hub-client.js';
 import * as platform from './platform.js';
 import { Icon } from './icon.js';
+import { loadPending } from './invite-link.js';
 
 const PASSWORD_MIN_BITS = 60;
 const PASSWORD_MIN_LEN = 12;
@@ -185,7 +186,8 @@ export function LoginPage({ onLogin }) {
       // Trimmed to match the hub's stored username and every client-side key
       // derivation (auth_key, bundle_key, recovery_key all fold the username in).
       await onLogin(name, password);
-      navigate('/');
+      // Back to the invitation that sent them here, if one is waiting.
+      navigate(loadPending() ? '/invite' : '/');
     } catch (err) {
       if (err.message === 'email_verification_required') {
         setPendingVerif(true);
@@ -415,6 +417,8 @@ export function RegisterPage() {
           <p style="text-align:center; margin-bottom:16px; color:var(--text-secondary)">
             ${t('register.verified_msg')}
           </p>
+          ${loadPending() && html`
+            <p style="text-align:center; margin-bottom:16px">${t('invite.after_register')}</p>`}
           <a href="#/login" style="display:block; text-align:center">${t('register.go_login')}</a>
         </div>
       </div>