fix(node): how a hosted group admits people is the operator's, not the hub's

attach_group no longer copies join_policy and visibility from the hub's
answer: they come with the operator's request (the desktop creation form,
`group add --open`) and default to invite/private; the CLI says when the hub
lists the group otherwise. Every string written into node.toml is escaped
(toml_string) and read back through tomllib, so a group or folder name cannot
write lines of its own (F-17).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 9 insertions, 4 deletions

diff --git a/packages/meshbay-node/src/meshbay_node/ops/roots.py b/packages/meshbay-node/src/meshbay_node/ops/roots.py
index e3e2781..480fe63 100644
--- a/packages/meshbay-node/src/meshbay_node/ops/roots.py
+++ b/packages/meshbay-node/src/meshbay_node/ops/roots.py
@@ -8,7 +8,12 @@ from pathlib import Path
 
 from meshbay_node.config import DEFAULT_CONFIG_PATH
 from meshbay_node.ops.core import OpError, _config, _group_ctx, _roster
-from meshbay_node.ops.node_toml import _insert_roots_block, _remove_roots_block, _update_root_field
+from meshbay_node.ops.node_toml import (
+    _insert_roots_block,
+    _remove_roots_block,
+    _update_root_field,
+    toml_string,
+)
 from meshbay_node.roots import RootError, RootSet, off_disk
 
 log = logging.getLogger("meshbay_node.ops")
@@ -46,11 +51,11 @@ async def add_root(state: dict, group_id: str, path: str, *,
         raise OpError(f"Cannot create {added.path}: {e}") from e
 
     conf_path = Path(state.get("config_path") or DEFAULT_CONFIG_PATH)
-    root_block = f'  [[groups.roots]]\n  path   = "{added.path.as_posix()}"'
+    root_block = f'  [[groups.roots]]\n  path   = {toml_string(added.path.as_posix())}'
     if name:
-        root_block += f'\n  name   = "{added.name}"'
+        root_block += f'\n  name   = {toml_string(added.name)}'
     if kind != "generic":
-        root_block += f'\n  kind   = "{added.kind}"'
+        root_block += f'\n  kind   = {toml_string(added.kind)}'
     if writable:
         root_block += '\n  writable = true'
     if removable: