refactor: remove the public-content swarm

Nodes registered the hashes of their public groups on the hub and nothing
ever read them back. Routes, model and node registration removed; a
migration drops swarm_sources. No node sends the hub a content hash now.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 0 insertions, 50 deletions

diff --git a/packages/meshbay-hub/tests/test_availability_between_members.py b/packages/meshbay-hub/tests/test_availability_between_members.py
index 24d85a0..2773d87 100644
--- a/packages/meshbay-hub/tests/test_availability_between_members.py
+++ b/packages/meshbay-hub/tests/test_availability_between_members.py
@@ -202,56 +202,6 @@ async def test_the_notify_budget_is_not_refilled_by_reconnecting(client):
         rev._notify_window.pop(node_id, None)
 
 
-# ── A member must not aim other people's traffic ─────────────────────────────
-
-@pytest.mark.asyncio
-async def test_a_swarm_source_cannot_name_someone_elses_address(client):
-    """
-    `endpoint` was free text documented as "ip:port", so an account could
-    publish a third party's address as a source for any content. Nothing dials
-    a swarm source today, which is the only reason this was not already the
-    reflection primitive that `notify_incoming` was fixed for (H6). A port is
-    all a reader needs: where the node is comes from the node record, which is
-    stamped with the address its announce arrived from.
-    """
-    user = await _make_user(client, "av_swarm1")
-    headers = {"Authorization": f"Bearer {user['token']}"}
-
-    for bad in ("192.0.2.7:4433", "evil.example:53", "webrtc:0", "webrtc:70000",
-                "webrtc:4433 ", "http://example.test"):
-        r = await client.post("/v1/swarm/register", headers=headers,
-                              json={"content_hash": "ab" * 32, "endpoint": bad})
-        assert r.status_code == 422, f"{bad!r} was accepted: {r.text}"
-
-    r = await client.post("/v1/swarm/register", headers=headers,
-                          json={"content_hash": "ab" * 32, "endpoint": "webrtc:19010"})
-    assert r.status_code == 201, r.text
-
-
-@pytest.mark.asyncio
-async def test_one_account_cannot_fill_the_swarm_table(client, monkeypatch):
-    """Rows are keyed (hash, account) with no cap — an invented hash each time."""
-    import meshbay_hub.api.groups as groups_api
-    monkeypatch.setattr(groups_api, "MAX_SWARM_HASHES_PER_ACCOUNT", 3)
-
-    user = await _make_user(client, "av_swarm2")
-    headers = {"Authorization": f"Bearer {user['token']}"}
-    for i in range(3):
-        r = await client.post("/v1/swarm/register", headers=headers,
-                              json={"content_hash": f"{i:064x}",
-                                    "endpoint": "webrtc:19010"})
-        assert r.status_code == 201, r.text
-
-    r = await client.post("/v1/swarm/register", headers=headers,
-                          json={"content_hash": f"{99:064x}", "endpoint": "webrtc:19010"})
-    assert r.status_code == 429, r.text
-
-    # Refreshing one already held is not a new claim and must still work.
-    r = await client.post("/v1/swarm/register", headers=headers,
-                          json={"content_hash": f"{0:064x}", "endpoint": "webrtc:19011"})
-    assert r.status_code == 201, r.text
-
-
 # ── A member's node must not answer for another's ────────────────────────────
 
 def test_a_node_cannot_answer_an_offer_it_was_never_sent():