feat: nodes apply the content blocklist in their public groups

A node hosting a public group syncs the hub's blocklist on every
connection (paged, node token only) and applies pushed changes. A
blocked file leaves the index and is refused (content_blocked); private
groups are untouched. The unused per-hash check route is gone.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 11 insertions, 5 deletions

diff --git a/packages/meshbay-node/src/meshbay_node/transport/wire.py b/packages/meshbay-node/src/meshbay_node/transport/wire.py
index 1f9c925..258edb5 100644
--- a/packages/meshbay-node/src/meshbay_node/transport/wire.py
+++ b/packages/meshbay-node/src/meshbay_node/transport/wire.py
@@ -65,7 +65,7 @@ def list_dirs(roots: RootSet | None) -> list[str]:
     return sorted(out)[:MAX_DIRS]
 
 
-def index_sync_message(index, roots: RootSet | None) -> dict:
+def index_sync_message(index, roots: RootSet | None, hidden=()) -> dict:
     """
     The full `index_sync` message for one group.
 
@@ -73,10 +73,13 @@ def index_sync_message(index, roots: RootSet | None) -> dict:
     without them a folder someone just created, or one they emptied, does not exist as
     far as a client is concerned, and a member cannot tell "the drive is unplugged"
     from "it is all still there".
+
+    `hidden` is the content blocklist in a public group (`meshbay_node.blocklist`):
+    those entries are not sent at all.
     """
     payload = {
         "version": index.version,
-        "entries": [index_entry_wire(e) for e in index.entries],
+        "entries": [index_entry_wire(e) for e in index.entries if e.id not in hidden],
         "dirs": list_dirs(roots),
         "roots": roots.describe() if roots else [],
     }
@@ -88,7 +91,7 @@ def index_sync_message(index, roots: RootSet | None) -> dict:
     }
 
 
-def index_delta_message(index, delta, roots=None) -> dict:
+def index_delta_message(index, delta, roots=None, hidden=()) -> dict:
     """
     One `index_delta` — what changed since the last thing this node broadcast.
 
@@ -103,13 +106,16 @@ def index_delta_message(index, delta, roots=None) -> dict:
     page: the delta that told them something had changed was the one message
     that could not say what. It is a handful of dicts, bounded by the number of
     directories a group has, and it is sealed with the rest.
+
+    `hidden`, as for `index_sync_message`: a blocked entry is never added or
+    updated; its deletion still goes out.
     """
     payload = {
         "base_version": delta.base_version,
         "version": delta.version,
-        "additions": [index_entry_wire(e) for e in delta.additions],
+        "additions": [index_entry_wire(e) for e in delta.additions if e.id not in hidden],
         "deletions": list(delta.deletions),
-        "updates": [index_entry_wire(e) for e in delta.updates],
+        "updates": [index_entry_wire(e) for e in delta.updates if e.id not in hidden],
     }
     if roots is not None:
         payload["roots"] = roots.describe()