fix: refuse an unsigned handshake challenge

Every node the 4.0 floor admits signs its challenge, and one without a
channel binding could not complete the proof anyway, so a missing
signature is refused like a wrong one (browser and QUIC client).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 5 insertions, 6 deletions

diff --git a/packages/meshbay-hub/tests/test_invite_link_client.py b/packages/meshbay-hub/tests/test_invite_link_client.py
index aa8c194..3fb8922 100644
--- a/packages/meshbay-hub/tests/test_invite_link_client.py
+++ b/packages/meshbay-hub/tests/test_invite_link_client.py
@@ -151,14 +151,13 @@ def test_a_link_code_goes_to_the_node_the_link_names_and_no_other(tmp_path):
     got = _run(tmp_path, fn.group(0) + """
       const r = (...a) => { const e = _linkJoinRefusal(...a); return e ? e.reason : null; };
       process.stdout.write(JSON.stringify([
-        r('KEY', 'K7P2-9WQX', 'KEY', true),
-        r('KEY', 'K7P2-9WQX', 'OTHER', true),
-        r('KEY', 'K7P2-9WQX', 'KEY', false),
-        r(undefined, 'K7P2-9WQX', 'OTHER', false),
-        r('KEY', null, 'OTHER', false),
+        r('KEY', 'K7P2-9WQX', 'KEY'),
+        r('KEY', 'K7P2-9WQX', 'OTHER'),
+        r(undefined, 'K7P2-9WQX', 'OTHER'),
+        r('KEY', null, 'OTHER'),
       ]));
     """)
-    assert got == [None, "link_other_node", "link_node_unproved", None, None]
+    assert got == [None, "link_other_node", None, None]
 
 
 # ── Read from the source ─────────────────────────────────────────────────────