refactor(hub): remove the closed relay registryHEADmain

Every /v1/relays route answered 503 and nothing called them; no TURN
relay is needed. The proof-of-possession rule it carried stays as AV6.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2 files changed, 0 insertions, 91 deletions

diff --git a/packages/meshbay-hub/tests/test_availability_between_members.py b/packages/meshbay-hub/tests/test_availability_between_members.py
index 2773d87..e66be31 100644
--- a/packages/meshbay-hub/tests/test_availability_between_members.py
+++ b/packages/meshbay-hub/tests/test_availability_between_members.py
@@ -271,75 +271,6 @@ async def test_an_invite_email_says_what_the_hub_knows_not_what_it_is_told(
         "the sender chose the subject line of a message the hub signs")
 
 
-# ── A relay is not authenticated by the key it publishes ─────────────────────
-
-@pytest.mark.asyncio
-async def test_a_relay_must_prove_it_holds_the_approved_key(client, monkeypatch):
-    """
-    `relay_register` had no `Depends` and verified nothing: it compared
-    `pk_relay` against the approved value, which is a **public** key. Anyone
-    who could read it could rewrite where the hub tells nodes to send relayed
-    traffic — an unauthenticated write to state other people's machines act
-    on. The module docstring said the relay "signs keepalive JWTs"; `jwt` was
-    imported and never used.
-    """
-    from meshbay_hub.api import relay as relay_mod
-
-    # The registry ships closed (`relay.RELAYS_ENABLED`); the proof it demands
-    # is still what will be wanted the day it opens.
-    monkeypatch.setattr(relay_mod, "RELAYS_ENABLED", True)
-    sk = Ed25519PrivateKey.generate()
-    pk = pk_to_b64(sk.public_key())
-    relay_mod._relays["r1"] = {"pk": pk, "active": False}
-    try:
-        # The public key alone, which used to be enough.
-        r = await client.post("/v1/relays/register", json={
-            "relay_id": "r1", "endpoint": "198.51.100.9:9999",
-            "pk_relay": pk, "capacity": 100})
-        assert r.status_code == 400, r.text
-        assert relay_mod._relays["r1"].get("endpoint") is None
-
-        # A signature over someone else's endpoint does not carry either: the
-        # endpoint is inside the signed message.
-        ts = int(time.time())
-        sig = sk.sign(f"meshbay:relay_register:r1:10.0.0.1:4433:{ts}".encode())
-        r = await client.post("/v1/relays/register", json={
-            "relay_id": "r1", "endpoint": "198.51.100.9:9999", "pk_relay": pk,
-            "timestamp": ts, "signature": base64.b64encode(sig).decode()})
-        assert r.status_code == 401, r.text
-
-        endpoint = "203.0.113.4:4433"
-        sig = sk.sign(f"meshbay:relay_register:r1:{endpoint}:{ts}".encode())
-        r = await client.post("/v1/relays/register", json={
-            "relay_id": "r1", "endpoint": endpoint, "pk_relay": pk,
-            "timestamp": ts, "signature": base64.b64encode(sig).decode()})
-        assert r.status_code == 201, r.text
-        assert relay_mod._relays["r1"]["endpoint"] == endpoint
-    finally:
-        relay_mod._relays.pop("r1", None)
-
-
-@pytest.mark.asyncio
-async def test_every_relay_route_is_closed_as_the_hub_ships(client):
-    """Nothing in the tree uses the registry, and two of its routes take no account.
-
-    A dependency on the router, so a route added later is closed too. The flag
-    is read as shipped, not set here — a test that closes the gate itself
-    would keep passing the day somebody opens it.
-    """
-    admin = await _make_user(client, "relayadmin")
-    from meshbay_hub.api.deps import set_admin_usernames
-    set_admin_usernames(["relayadmin"])
-    auth = {"Authorization": f"Bearer {admin['token']}"}
-
-    for method, path in (("get", "/v1/relays"),
-                         ("post", "/v1/relays/register"),
-                         ("post", "/v1/relays/approve")):
-        kwargs = {"headers": auth} if method == "get" else {"json": {}, "headers": auth}
-        r = await getattr(client, method)(path, **kwargs)
-        assert r.status_code == 503, (path, r.status_code, r.text)
-
-
 @pytest.mark.asyncio
 async def test_a_stranger_who_locks_your_name_does_not_sign_you_out(client, db_session):
     """AV26. The sign-in lockout is keyed by username, and usernames are public.
@@ -392,26 +323,6 @@ async def test_a_stranger_who_locks_your_name_does_not_sign_you_out(client, db_s
     assert r.status_code == 200, r.text
 
 
-@pytest.mark.asyncio
-async def test_a_captured_relay_registration_is_not_replayable(client, monkeypatch):
-    """Same reason /v1/nodes/announce bounds its timestamp."""
-    from meshbay_hub.api import relay as relay_mod
-
-    monkeypatch.setattr(relay_mod, "RELAYS_ENABLED", True)
-    sk = Ed25519PrivateKey.generate()
-    pk = pk_to_b64(sk.public_key())
-    relay_mod._relays["r2"] = {"pk": pk, "active": False}
-    try:
-        ts = int(time.time()) - 3600
-        sig = sk.sign(f"meshbay:relay_register:r2:203.0.113.5:4433:{ts}".encode())
-        r = await client.post("/v1/relays/register", json={
-            "relay_id": "r2", "endpoint": "203.0.113.5:4433", "pk_relay": pk,
-            "timestamp": ts, "signature": base64.b64encode(sig).decode()})
-        assert r.status_code == 401, r.text
-    finally:
-        relay_mod._relays.pop("r2", None)
-
-
 # ── Mail: three paths out of the hub, one of them unmetered ──────────────────
 
 @pytest.mark.asyncio
diff --git a/packages/meshbay-hub/tests/test_unauthenticated_surface.py b/packages/meshbay-hub/tests/test_unauthenticated_surface.py
index 78615ca..563dfa8 100644
--- a/packages/meshbay-hub/tests/test_unauthenticated_surface.py
+++ b/packages/meshbay-hub/tests/test_unauthenticated_surface.py
@@ -42,8 +42,6 @@ PUBLIC = {
     ("POST", "/v1/nodes/auth"): "node sign-in — Ed25519 signature over a fresh timestamp",
     ("WS", "/v1/nodes/ws"): "a node-scoped JWT in the first message, within a timeout",
     ("GET", "/v1/groups"): "the public directory — empty when public groups are off",
-    ("GET", "/v1/relays"): "closed: 503 while relay.RELAYS_ENABLED is False",
-    ("POST", "/v1/relays/register"): "closed; when open, approved key + signature",
     ("GET", "/mhp/info"): "closed: 503 while federation.FEDERATION_ENABLED is False",
     ("GET", "/mhp/directory"): "closed; when open, an MHP token",
     ("POST", "/mhp/directory"): "closed; when open, an MHP token",