refactor: remove the public-content swarm

Nodes registered the hashes of their public groups on the hub and nothing
ever read them back. Routes, model and node registration removed; a
migration drops swarm_sources. No node sends the hub a content hash now.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2 files changed, 3 insertions, 67 deletions

diff --git a/packages/meshbay-hub/tests/test_account_deletion.py b/packages/meshbay-hub/tests/test_account_deletion.py
index 2653f0d..64c2be8 100644
--- a/packages/meshbay-hub/tests/test_account_deletion.py
+++ b/packages/meshbay-hub/tests/test_account_deletion.py
@@ -130,16 +130,9 @@ def _device_pk() -> str:
 
 
 @pytest.mark.asyncio
-async def test_deletion_clears_device_keys_and_swarm_sources(client, db_session):
-    """
-    The privacy statement says every account row goes but the IP log. Swarm
-    sources are keyed by the *user* id despite the column's name, and carry the
-    node's transport and port — `webrtc:<port>`, which is what `daemon.py`
-    actually sends. This asked with `192.0.2.7:4433`, from the days when the
-    field was free text documented as "ip:port": a shape no node has ever
-    produced, and one that let a caller name a third party's address.
-    """
-    from meshbay_hub.db.models import SwarmSource, UserDevice
+async def test_deletion_clears_device_keys(client, db_session):
+    """The privacy statement says every account row goes but the IP log."""
+    from meshbay_hub.db.models import UserDevice
 
     token, password = await _register(client, "devicer_test")
     headers = {"Authorization": f"Bearer {token}"}
@@ -149,15 +142,10 @@ async def test_deletion_clears_device_keys_and_swarm_sources(client, db_session)
     r = await client.post("/v1/users/devices", headers=headers,
                           json={"pk_auth_ed25519": _device_pk(), "label": "desktop"})
     assert r.status_code == 201, r.text
-    r = await client.post("/v1/swarm/register", headers=headers,
-                          json={"content_hash": "ab" * 32, "endpoint": "webrtc:4433"})
-    assert r.status_code == 201, r.text
 
     # Present before, or the emptiness asserted below proves nothing.
     assert (await db_session.execute(
         select(UserDevice).where(UserDevice.user_id == uid))).scalars().all()
-    assert (await db_session.execute(
-        select(SwarmSource).where(SwarmSource.node_id == uid))).scalars().all()
 
     r = await client.request("DELETE", "/v1/users/me", headers=headers,
                              json={"auth_key": _auth_key(password, "devicer_test")})
@@ -166,8 +154,6 @@ async def test_deletion_clears_device_keys_and_swarm_sources(client, db_session)
     db_session.expire_all()
     assert (await db_session.execute(
         select(UserDevice).where(UserDevice.user_id == uid))).scalars().all() == []
-    assert (await db_session.execute(
-        select(SwarmSource).where(SwarmSource.node_id == uid))).scalars().all() == []
 
 
 @pytest.mark.asyncio
diff --git a/packages/meshbay-hub/tests/test_availability_between_members.py b/packages/meshbay-hub/tests/test_availability_between_members.py
index 24d85a0..2773d87 100644
--- a/packages/meshbay-hub/tests/test_availability_between_members.py
+++ b/packages/meshbay-hub/tests/test_availability_between_members.py
@@ -202,56 +202,6 @@ async def test_the_notify_budget_is_not_refilled_by_reconnecting(client):
         rev._notify_window.pop(node_id, None)
 
 
-# ── A member must not aim other people's traffic ─────────────────────────────
-
-@pytest.mark.asyncio
-async def test_a_swarm_source_cannot_name_someone_elses_address(client):
-    """
-    `endpoint` was free text documented as "ip:port", so an account could
-    publish a third party's address as a source for any content. Nothing dials
-    a swarm source today, which is the only reason this was not already the
-    reflection primitive that `notify_incoming` was fixed for (H6). A port is
-    all a reader needs: where the node is comes from the node record, which is
-    stamped with the address its announce arrived from.
-    """
-    user = await _make_user(client, "av_swarm1")
-    headers = {"Authorization": f"Bearer {user['token']}"}
-
-    for bad in ("192.0.2.7:4433", "evil.example:53", "webrtc:0", "webrtc:70000",
-                "webrtc:4433 ", "http://example.test"):
-        r = await client.post("/v1/swarm/register", headers=headers,
-                              json={"content_hash": "ab" * 32, "endpoint": bad})
-        assert r.status_code == 422, f"{bad!r} was accepted: {r.text}"
-
-    r = await client.post("/v1/swarm/register", headers=headers,
-                          json={"content_hash": "ab" * 32, "endpoint": "webrtc:19010"})
-    assert r.status_code == 201, r.text
-
-
-@pytest.mark.asyncio
-async def test_one_account_cannot_fill_the_swarm_table(client, monkeypatch):
-    """Rows are keyed (hash, account) with no cap — an invented hash each time."""
-    import meshbay_hub.api.groups as groups_api
-    monkeypatch.setattr(groups_api, "MAX_SWARM_HASHES_PER_ACCOUNT", 3)
-
-    user = await _make_user(client, "av_swarm2")
-    headers = {"Authorization": f"Bearer {user['token']}"}
-    for i in range(3):
-        r = await client.post("/v1/swarm/register", headers=headers,
-                              json={"content_hash": f"{i:064x}",
-                                    "endpoint": "webrtc:19010"})
-        assert r.status_code == 201, r.text
-
-    r = await client.post("/v1/swarm/register", headers=headers,
-                          json={"content_hash": f"{99:064x}", "endpoint": "webrtc:19010"})
-    assert r.status_code == 429, r.text
-
-    # Refreshing one already held is not a new claim and must still work.
-    r = await client.post("/v1/swarm/register", headers=headers,
-                          json={"content_hash": f"{0:064x}", "endpoint": "webrtc:19011"})
-    assert r.status_code == 201, r.text
-
-
 # ── A member's node must not answer for another's ────────────────────────────
 
 def test_a_node_cannot_answer_an_offer_it_was_never_sent():