feat(desktop): add relay membership admin UI in settings (#454)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: wesbillman

desktop/scripts/check-file-sizes.mjs

@@ -56,8 +56,8 @@ const overrides = new Map([
   ["src/features/agents/ui/useTeamActions.ts", 510], // team CRUD + export + import + import-update orchestration with query invalidation
   ["src/features/agents/ui/CreateAgentDialog.tsx", 685], // provider selector + config form + schema-typed config coercion + required field validation + locked scopes
   ["src/features/channels/ui/AddChannelBotDialog.tsx", 640], // provider mode: Run on selector, trust warning, probe effect, single-agent enforcement, provider warnings display
-  ["src/shared/api/types.ts", 560], // persona provider/model fields + forum types + workflow type re-exports + ephemeral channel TTL fields + mcpToolsets + sourcePack + UpdateManagedAgentInput edit fields + UserStatus/UserStatusLookup (NIP-38)
-  ["src-tauri/src/events.rs", 555], // event builders + build_huddle_guidelines (kind:48106) + post_event_raw transport helper + participant p-tag on join/leave
+  ["src/shared/api/types.ts", 570], // persona provider/model fields + forum types + workflow type re-exports + ephemeral channel TTL fields + mcpToolsets + sourcePack + UpdateManagedAgentInput edit fields + UserStatus/UserStatusLookup (NIP-38) + RelayMember/RelayMemberRole types
+  ["src-tauri/src/events.rs", 565], // event builders + build_huddle_guidelines (kind:48106) + post_event_raw transport helper + participant p-tag on join/leave + NIP-43 relay admin builders (add/remove/change-role) + check_relay_role
   ["src-tauri/src/huddle/kokoro.rs", 980], // Kokoro ONNX TTS engine + three-tier G2P + ARPAbet→IPA + CoreML + synth_chunk() public API + style validation + hyphenated compound splitting + 23 unit tests
   ["src-tauri/src/huddle/mod.rs", 1020], // huddle state machine + Tauri commands + sync protocol doc; state/relay/pipeline extracted + emit_huddle_state_changed wiring
   ["src-tauri/src/huddle/models.rs", 850], // model download manager for Moonshine STT + Kokoro TTS with streaming downloads + SHA-256 verification + Rust-native tar extraction + version manifest + atomic swap + hot-start signaling
@@ -68,7 +68,7 @@ const overrides = new Map([
   ["src-tauri/src/relay.rs", 510], // +4 lines for NIP-OA auth tag injection in profile sync (build_profile_event) + verification test
   ["src-tauri/src/commands/pairing.rs", 550], // NIP-AB pairing actor: 3 Tauri commands + background WS task + NIP-42 auth + event parsing helpers
   ["src-tauri/src/lib.rs", 715], // +4 lines for PairingHandle managed state + 3 pairing command registrations
-  ["src/shared/api/tauri.ts", 1140], // pairing command wrappers + applyWorkspace + NIP-44 encrypt/decrypt wrappers + observer_url field
+  ["src/shared/api/tauri.ts", 1210], // pairing command wrappers + applyWorkspace + NIP-44 encrypt/decrypt wrappers + observer_url field + relay member API functions (list/get/add/remove/change-role)
 ]);
 
 async function walkFiles(directory) {

desktop/src-tauri/src/commands/mod.rs

@@ -12,6 +12,7 @@ mod messages;
 pub mod pairing;
 mod personas;
 mod profile;
+mod relay_members;
 mod social;
 mod teams;
 pub mod tokens;
@@ -31,6 +32,7 @@ pub use messages::*;
 pub use pairing::*;
 pub use personas::*;
 pub use profile::*;
+pub use relay_members::*;
 pub use social::*;
 pub use teams::*;
 pub use tokens::*;

desktop/src-tauri/src/commands/relay_members.rs

@@ -0,0 +1,64 @@
+use reqwest::Method;
+use tauri::State;
+
+use crate::{
+    app_state::AppState,
+    events,
+    relay::{api_path, build_authed_request, send_json_request, submit_event},
+};
+
+#[tauri::command]
+pub async fn list_relay_members(state: State<'_, AppState>) -> Result<serde_json::Value, String> {
+    let request = build_authed_request(
+        &state.http_client,
+        Method::GET,
+        &api_path(&["relay", "members"]),
+        &state,
+    )?;
+    send_json_request(request).await
+}
+
+#[tauri::command]
+pub async fn get_my_relay_membership(
+    state: State<'_, AppState>,
+) -> Result<serde_json::Value, String> {
+    let request = build_authed_request(
+        &state.http_client,
+        Method::GET,
+        &api_path(&["relay", "members", "me"]),
+        &state,
+    )?;
+    send_json_request(request).await
+}
+
+#[tauri::command]
+pub async fn add_relay_member(
+    target_pubkey: String,
+    role: String,
+    state: State<'_, AppState>,
+) -> Result<serde_json::Value, String> {
+    let builder = events::build_relay_admin_add(&target_pubkey, &role)?;
+    let result = submit_event(builder, &state).await?;
+    Ok(serde_json::to_value(result).map_err(|e| e.to_string())?)
+}
+
+#[tauri::command]
+pub async fn remove_relay_member(
+    target_pubkey: String,
+    state: State<'_, AppState>,
+) -> Result<serde_json::Value, String> {
+    let builder = events::build_relay_admin_remove(&target_pubkey)?;
+    let result = submit_event(builder, &state).await?;
+    Ok(serde_json::to_value(result).map_err(|e| e.to_string())?)
+}
+
+#[tauri::command]
+pub async fn change_relay_member_role(
+    target_pubkey: String,
+    new_role: String,
+    state: State<'_, AppState>,
+) -> Result<serde_json::Value, String> {
+    let builder = events::build_relay_admin_change_role(&target_pubkey, &new_role)?;
+    let result = submit_event(builder, &state).await?;
+    Ok(serde_json::to_value(result).map_err(|e| e.to_string())?)
+}

desktop/src-tauri/src/events.rs

@@ -442,6 +442,53 @@ pub fn build_note(
     Ok(EventBuilder::new(Kind::TextNote, content).tags(tags))
 }
 
+// ── Relay admin (NIP-43) ────────────────────────────────────────────────────
+
+/// Allowed relay member roles for NIP-43 admin commands.
+const VALID_RELAY_ROLES: &[&str] = &["owner", "admin", "member"];
+
+fn check_relay_role(role: &str) -> Result<(), String> {
+    if !VALID_RELAY_ROLES.contains(&role) {
+        return Err(format!(
+            "invalid relay role \"{role}\" (expected one of: {})",
+            VALID_RELAY_ROLES.join(", ")
+        ));
+    }
+    Ok(())
+}
+
+/// Kind 9030 — add a pubkey to the relay member list.
+pub fn build_relay_admin_add(target_pubkey: &str, role: &str) -> Result<EventBuilder, String> {
+    check_pubkey(target_pubkey)?;
+    check_relay_role(role)?;
+    let tags = vec![
+        tag(vec!["p", &target_pubkey.to_ascii_lowercase()])?,
+        tag(vec!["role", role])?,
+    ];
+    Ok(EventBuilder::new(Kind::Custom(9030), "").tags(tags))
+}
+
+/// Kind 9031 — remove a pubkey from the relay member list.
+pub fn build_relay_admin_remove(target_pubkey: &str) -> Result<EventBuilder, String> {
+    check_pubkey(target_pubkey)?;
+    let tags = vec![tag(vec!["p", &target_pubkey.to_ascii_lowercase()])?];
+    Ok(EventBuilder::new(Kind::Custom(9031), "").tags(tags))
+}
+
+/// Kind 9032 — change the role of an existing relay member.
+pub fn build_relay_admin_change_role(
+    target_pubkey: &str,
+    new_role: &str,
+) -> Result<EventBuilder, String> {
+    check_pubkey(target_pubkey)?;
+    check_relay_role(new_role)?;
+    let tags = vec![
+        tag(vec!["p", &target_pubkey.to_ascii_lowercase()])?,
+        tag(vec!["role", new_role])?,
+    ];
+    Ok(EventBuilder::new(Kind::Custom(9032), "").tags(tags))
+}
+
 /// Maximum contacts per contact list event.
 const MAX_CONTACTS: usize = 10_000;
 

desktop/src-tauri/src/lib.rs

@@ -413,6 +413,11 @@ pub fn run() {
             mint_token,
             revoke_token,
             revoke_all_tokens,
+            list_relay_members,
+            get_my_relay_membership,
+            add_relay_member,
+            remove_relay_member,
+            change_relay_member_role,
             list_relay_agents,
             list_managed_agents,
             create_managed_agent,

desktop/src/features/relay-members/hooks.ts

@@ -0,0 +1,122 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+
+import {
+  addRelayMember,
+  changeRelayMemberRole,
+  getMyRelayMembership,
+  listRelayMembers,
+  removeRelayMember,
+} from "@/shared/api/tauri";
+import type { RelayMember } from "@/shared/api/types";
+
+export const relayMembersQueryKey = ["relayMembers"] as const;
+export const myRelayMembershipQueryKey = ["myRelayMembership"] as const;
+
+export function useRelayMembersQuery() {
+  return useQuery({
+    queryKey: relayMembersQueryKey,
+    queryFn: listRelayMembers,
+    staleTime: 30_000,
+  });
+}
+
+export function useMyRelayMembershipQuery() {
+  return useQuery({
+    queryKey: myRelayMembershipQueryKey,
+    queryFn: getMyRelayMembership,
+    staleTime: 60_000,
+  });
+}
+
+export function useAddRelayMemberMutation() {
+  const queryClient = useQueryClient();
+
+  return useMutation({
+    mutationFn: ({ pubkey, role }: { pubkey: string; role: string }) =>
+      addRelayMember(pubkey, role),
+    onMutate: async ({ pubkey, role }) => {
+      await queryClient.cancelQueries({ queryKey: relayMembersQueryKey });
+      const previous =
+        queryClient.getQueryData<RelayMember[]>(relayMembersQueryKey);
+
+      queryClient.setQueryData<RelayMember[]>(relayMembersQueryKey, (old) => [
+        ...(old ?? []),
+        {
+          pubkey,
+          role: role as RelayMember["role"],
+          addedBy: null,
+          createdAt: new Date().toISOString(),
+        },
+      ]);
+
+      return { previous };
+    },
+    onError: (_err, _vars, context) => {
+      if (context?.previous) {
+        queryClient.setQueryData(relayMembersQueryKey, context.previous);
+      }
+    },
+    onSettled: async () => {
+      await queryClient.invalidateQueries({ queryKey: relayMembersQueryKey });
+    },
+  });
+}
+
+export function useRemoveRelayMemberMutation() {
+  const queryClient = useQueryClient();
+
+  return useMutation({
+    mutationFn: (pubkey: string) => removeRelayMember(pubkey),
+    onMutate: async (pubkey) => {
+      await queryClient.cancelQueries({ queryKey: relayMembersQueryKey });
+      const previous =
+        queryClient.getQueryData<RelayMember[]>(relayMembersQueryKey);
+
+      queryClient.setQueryData<RelayMember[]>(relayMembersQueryKey, (old) =>
+        old?.filter((m) => m.pubkey.toLowerCase() !== pubkey.toLowerCase()),
+      );
+
+      return { previous };
+    },
+    onError: (_err, _pubkey, context) => {
+      if (context?.previous) {
+        queryClient.setQueryData(relayMembersQueryKey, context.previous);
+      }
+    },
+    onSettled: async () => {
+      await queryClient.invalidateQueries({ queryKey: relayMembersQueryKey });
+    },
+  });
+}
+
+export function useChangeRelayMemberRoleMutation() {
+  const queryClient = useQueryClient();
+
+  return useMutation({
+    mutationFn: ({ pubkey, newRole }: { pubkey: string; newRole: string }) =>
+      changeRelayMemberRole(pubkey, newRole),
+    onMutate: async ({ pubkey, newRole }) => {
+      await queryClient.cancelQueries({ queryKey: relayMembersQueryKey });
+      const previous =
+        queryClient.getQueryData<RelayMember[]>(relayMembersQueryKey);
+
+      queryClient.setQueryData<RelayMember[]>(relayMembersQueryKey, (old) =>
+        old?.map((m) =>
+          m.pubkey.toLowerCase() === pubkey.toLowerCase()
+            ? { ...m, role: newRole as RelayMember["role"] }
+            : m,
+        ),
+      );
+
+      return { previous };
+    },
+    onError: (_err, _vars, context) => {
+      if (context?.previous) {
+        queryClient.setQueryData(relayMembersQueryKey, context.previous);
+      }
+    },
+    onSettled: async () => {
+      await queryClient.invalidateQueries({ queryKey: relayMembersQueryKey });
+    },
+  });
+}