fix(node): name members admitted without an invitation name

A member who joined by link, by a new device or into an open group was
pinned in the roster with no name, so the audit log showed only the
first characters of their id. The hub's MNP token now carries the
account's username, and after the handshake the node writes it into the
roster for an account whose name is empty. An invitation's name is never
overwritten; the name is a label, authority stays on `sub`.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 14 insertions, 0 deletions

diff --git a/packages/meshbay-hub/tests/test_mnp_token.py b/packages/meshbay-hub/tests/test_mnp_token.py
index ef6423d..71d7ff6 100644
--- a/packages/meshbay-hub/tests/test_mnp_token.py
+++ b/packages/meshbay-hub/tests/test_mnp_token.py
@@ -136,3 +136,17 @@ async def test_a_token_must_name_its_group(client):
     r = await client.post("/v1/nodes/mnp-token", json={},
                           headers={"Authorization": f"Bearer {tok}"})
     assert r.status_code == 422
+
+
+@pytest.mark.asyncio
+async def test_mnp_token_names_the_account(client):
+    """A member admitted by link has no name in the node's roster but this one;
+    without it the node's audit log shows a bare id."""
+    from meshbay_hub.auth import hub_public_key_pem
+
+    tok = await _session_token(client, "mnp_named")
+    gid = await _own_group(client, tok)
+    mnp = (await client.post("/v1/nodes/mnp-token", json={"group_id": gid},
+                             headers={"Authorization": f"Bearer {tok}"})).json()["mnp_token"]
+    peer = authorize_token(mnp, hub_public_key_pem(), group_id=gid)
+    assert peer.username == "mnp_named"