From 0443cf8aaab58a54c73d28cafca5d5d8a52605e6 Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Tue, 1 Sep 2026 11:07:05 +0200 Subject: fix(node): CLI member invite now registers hub membership and enforces code Two bugs fixed: 1. `meshbay-node member invite ` created a local roster invite but never told the hub to add the user to group_members, so the group was invisible in the SPA. The node now calls POST /v1/groups/{id}/members/{username} after creating the invite, and the hub endpoint accepts node-scoped tokens (the admin_id check is the real authorization guard). 2. The WebRTC handshake let a previously-pinned user reconnect without a code even when a new invite was pending (e.g. after leave + re-invite). Now any pending invite forces code entry, regardless of existing member/pin status. Co-Authored-By: Claude Opus 4.6 --- packages/meshbay-node/src/meshbay_node/ops.py | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'packages/meshbay-node/src/meshbay_node/ops.py') diff --git a/packages/meshbay-node/src/meshbay_node/ops.py b/packages/meshbay-node/src/meshbay_node/ops.py index 34a569f..6d53edb 100644 --- a/packages/meshbay-node/src/meshbay_node/ops.py +++ b/packages/meshbay-node/src/meshbay_node/ops.py @@ -190,6 +190,14 @@ async def create_invite(state: dict, group_id: str, username: str, *, ttl=ttl, username=username, ) + + hub = _hub(state) + try: + await hub.add_group_member(group_id, username) + except Exception: + log.warning("Could not register %s as hub member of %s", + username, group_id[:8]) + invites = await roster.list_invites() expires = next((i["expires_at"] for i in invites if i["user_id"] == user_id -- cgit v1.2.3