feat(mnp): sharing a folder is decided on the node's machine only (MNP 6.0)

root_add, root_update and group_attach leave MNP: adding a directory and
switching writable/removable go through the loopback API (native dialog in
the desktop app) or the CLI. The operator's Settings tab still lists the
roots from any browser, read-only. The desktop app refuses to sign those
ops; a loopback flag change now reaches open pages (publish_roots).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 3 insertions, 55 deletions

diff --git a/packages/meshbay-node/tests/test_node_status.py b/packages/meshbay-node/tests/test_node_status.py
index bd63f8e..257c60c 100644
--- a/packages/meshbay-node/tests/test_node_status.py
+++ b/packages/meshbay-node/tests/test_node_status.py
@@ -1,9 +1,10 @@
 """
-node_status, root_add, root_remove over MNP.
+node_status and root_remove over MNP.
 
 These test the D5 node management panel's server-side behaviour: the admin
 identity check on node_status, the list_groups operation, and the root
-add/remove flows through the MNP handlers.
+removal flow through the MNP handlers. Adding a root is not an MNP message
+(MNP 6.0); `ops.add_root` is still tested here, as the loopback and CLI use it.
 """
 
 import base64
@@ -478,32 +479,6 @@ async def test_remove_root_succeeds_with_two_roots(tmp_path):
     assert cfg.roots[0].name == "dir1"
 
 
-# ── root_add MNP handler ───────────────────────────────────────────────────
-
-async def test_root_add_issues_challenge(tmp_path, roster):
-    session = await _session(tmp_path, roster, operator=True,
-                             node_user_id="grenet")
-    session._do_root_add({"group_id": GROUP, "path": "/tmp/test"})
-    msg = _last(session)
-    assert msg["type"] == "admin_challenge"
-
-
-async def test_root_add_refuses_without_authority(tmp_path, roster):
-    session = await _session(tmp_path, roster, operator=False)
-    session._do_root_add({"group_id": GROUP, "path": "/tmp/test"})
-    msg = _last(session)
-    assert msg["type"] == "error"
-    assert "authorized" in msg["detail"].lower()
-
-
-async def test_root_add_refuses_missing_fields(tmp_path, roster):
-    session = await _session(tmp_path, roster, operator=True,
-                             node_user_id="grenet")
-    session._do_root_add({"group_id": GROUP})
-    assert _last(session)["type"] == "error"
-    assert "Missing" in _last(session)["detail"]
-
-
 # ── root_remove MNP handler ────────────────────────────────────────────────
 
 async def test_root_remove_issues_challenge(tmp_path, roster):
@@ -677,33 +652,6 @@ async def test_denylist_clear_refused_for_non_admin(tmp_path, roster):
     assert msg["type"] == "error"
 
 
-# ── group_attach MNP handler ────────────────────────────────────────────
-
-async def test_group_attach_issues_challenge(tmp_path, roster):
-    session = await _session(tmp_path, roster, operator=True,
-                             node_user_id="grenet")
-    session._do_group_attach({"name": "test-group", "shared_dir": "/tmp/share"})
-    msg = _last(session)
-    assert msg["type"] == "admin_challenge"
-
-
-async def test_group_attach_refused_without_authority(tmp_path, roster):
-    session = await _session(tmp_path, roster, operator=False)
-    session._do_group_attach({"name": "test-group", "shared_dir": "/tmp/share"})
-    msg = _last(session)
-    assert msg["type"] == "error"
-    assert "authorized" in msg["detail"].lower()
-
-
-async def test_group_attach_refuses_missing_fields(tmp_path, roster):
-    session = await _session(tmp_path, roster, operator=True,
-                             node_user_id="grenet")
-    session._do_group_attach({"name": "test-group"})
-    msg = _last(session)
-    assert msg["type"] == "error"
-    assert "Missing" in msg["detail"]
-
-
 # ── node_reload MNP handler ─────────────────────────────────────────────
 
 async def test_node_reload_runs_for_admin(tmp_path, roster):