1 files changed, 15 insertions, 10 deletions
diff --git a/packages/meshbay-node/src/meshbay_node/transport/wire.py b/packages/meshbay-node/src/meshbay_node/transport/wire.py
index 6986b01..258edb5 100644
--- a/packages/meshbay-node/src/meshbay_node/transport/wire.py
+++ b/packages/meshbay-node/src/meshbay_node/transport/wire.py
@@ -12,11 +12,10 @@ envelope produced by `GroupIndex.serialize()`. Same message type, two encodings,
 consumer each and nothing asserting they matched. Same failure mode as the two
 `file_chunk` encoders, and the same fix: one builder, used by both.
 
-`GroupIndex.serialize()`/`deserialize()` are unchanged and still tested — they remain
-a correct signed index envelope — but they no longer describe any MNP message. Read
-them as an at-rest/interchange format, not as a wire contract. It is also not a
-candidate for reuse below: it compresses with zstd, which no browser can decompress
-(`DecompressionStream` offers gzip and deflate only).
+That envelope, and `GroupIndex.serialize()`/`deserialize()` which produced it, are
+gone: once both transports built `index_sync` here, nothing stored or exchanged it.
+It was never a candidate for reuse below either — it compressed with zstd, which no
+browser can decompress (`DecompressionStream` offers gzip and deflate only).
 
 Since MNP 1.0 both messages carry their payload **sealed under a GEK-derived subkey**
 (`meshbay_common.groupbox`). Only the routing fields — `type`, `v`, `group_id` — stay
@@ -66,7 +65,7 @@ def list_dirs(roots: RootSet | None) -> list[str]:
     return sorted(out)[:MAX_DIRS]
 
 
-def index_sync_message(index, roots: RootSet | None) -> dict:
+def index_sync_message(index, roots: RootSet | None, hidden=()) -> dict:
     """
     The full `index_sync` message for one group.
 
@@ -74,10 +73,13 @@ def index_sync_message(index, roots: RootSet | None) -> dict:
     without them a folder someone just created, or one they emptied, does not exist as
     far as a client is concerned, and a member cannot tell "the drive is unplugged"
     from "it is all still there".
+
+    `hidden` is the content blocklist in a public group (`meshbay_node.blocklist`):
+    those entries are not sent at all.
     """
     payload = {
         "version": index.version,
-        "entries": [index_entry_wire(e) for e in index.entries],
+        "entries": [index_entry_wire(e) for e in index.entries if e.id not in hidden],
         "dirs": list_dirs(roots),
         "roots": roots.describe() if roots else [],
     }
@@ -89,7 +91,7 @@ def index_sync_message(index, roots: RootSet | None) -> dict:
     }
 
 
-def index_delta_message(index, delta, roots=None) -> dict:
+def index_delta_message(index, delta, roots=None, hidden=()) -> dict:
     """
     One `index_delta` — what changed since the last thing this node broadcast.
 
@@ -104,13 +106,16 @@ def index_delta_message(index, delta, roots=None) -> dict:
     page: the delta that told them something had changed was the one message
     that could not say what. It is a handful of dicts, bounded by the number of
     directories a group has, and it is sealed with the rest.
+
+    `hidden`, as for `index_sync_message`: a blocked entry is never added or
+    updated; its deletion still goes out.
     """
     payload = {
         "base_version": delta.base_version,
         "version": delta.version,
-        "additions": [index_entry_wire(e) for e in delta.additions],
+        "additions": [index_entry_wire(e) for e in delta.additions if e.id not in hidden],
         "deletions": list(delta.deletions),
-        "updates": [index_entry_wire(e) for e in delta.updates],
+        "updates": [index_entry_wire(e) for e in delta.updates if e.id not in hidden],
     }
     if roots is not None:
         payload["roots"] = roots.describe()