1 files changed, 64 insertions, 6 deletions

diff --git a/src/features/messages.js b/src/features/messages.js
index 592c5dc..f72d71d 100644
--- a/src/features/messages.js
+++ b/src/features/messages.js
@@ -22,7 +22,7 @@ import {
 import { reconcileOn, syncOn, negentropyOff } from '../nostr.js'; // NIP-77: fetch only what we lack
 import {
   channelKey, channelStream, channelEpoch, channelIsPrivate, controlKey, guestbookKey, openWrap, wrapRumor, rumorWithId,
-  foldControl, foldGuestbook, observeAuthor, eventMs, msTags, makeEdition,
+  foldControl, foldGuestbook, observeAuthor, eventMs, msTags, makeEdition, banlistHead, makeBanlist,
   communityId, parseInviteLink, makeInviteLink, makeInviteBundleEvent, openInviteBundle,
 } from '../concord.js';
 import { makeDMRumor, makeDMReaction, unwrapDM, wrapDM } from '../dm.js';
@@ -488,8 +488,9 @@ export function messagesFeature(ctx) {
   function roomUnread(room) {
     const s = st();
     const my = myPubkeys();
+    const banned = room.folded && room.folded.banned;
     for (const [id, msgs] of room.byChannel)
-      if (newestFrom(msgs.values(), (m) => !my.includes(m.author)) > (s.read[chRead(id)] || 0)) return true;
+      if (newestFrom(msgs.values(), (m) => !my.includes(m.author) && !(banned && banned.has(m.author))) > (s.read[chRead(id)] || 0)) return true;
     return false;
   }
 
@@ -2017,9 +2018,12 @@ export function messagesFeature(ctx) {
     const mine = my.includes(m.author);
     const reacts = room.reactions.get(m.rumor.id);
     const myReact = reacts && my.map((pk) => reacts.get(pk)).find(Boolean);
-    const close = () => { ui.msgSheet = null; ui.emojiPick = null; render(); };
-    const item = (icon, label, onClick) => h('button', { class: 'msg-sheet-item', onClick },
+    const close = () => { ui.msgSheet = null; ui.emojiPick = null; ui.msgBanArm = null; render(); };
+    const item = (icon, label, onClick, cls = '') => h('button', { class: 'msg-sheet-item' + cls, onClick },
       h('span', { class: 'msg-sheet-ico' }, icon), label);
+    // the community's admin can take a person out, with everything they said
+    const canBan = !mine && canModerate(room) && m.author !== room.jm.owner;
+    const armed = ui.msgBanArm === m.rumor.id;
     return h('div', {
       class: 'confirm-pop-backdrop',
       onClick: (e) => { if (e.target === e.currentTarget) close(); },
@@ -2036,7 +2040,54 @@ export function messagesFeature(ctx) {
           try { await navigator.clipboard.writeText(msgSnippet(room, m, 100000)); toast(t('copied')); } catch {}
           close();
         }),
-        !ui.emojiPick && mine ? item('✕', t('msgDelete'), () => { close(); deleteMessage(room, chId, m); }) : null));
+        !ui.emojiPick && mine ? item('✕', t('msgDelete'), () => { close(); deleteMessage(room, chId, m); }) : null,
+        // two taps: the first asks, the second does it
+        !ui.emojiPick && canBan ? item('🚫', t(armed ? 'msgBanConfirm' : 'msgBan', { name: displayName(m.author) }), () => {
+          if (!armed) { ui.msgBanArm = m.rumor.id; render(); return; }
+          close(); setBanned(room, m.author, true);
+        }, ' danger' + (armed ? ' armed' : '')) : null));
+  }
+
+  // Removing someone from a community is the owner's ban list (CORD-04 vsk 4):
+  // one owner-signed edition naming every removed key. Every client that
+  // folds the control plane drops those authors' messages, old and new, and
+  // takes them off the member list. Only where we hold the control stream's
+  // signing key (a community founded here, or the built-in one).
+  const canModerate = (room) => !!room.control.sk && myPubkeys().includes(room.jm.owner);
+  let banBusy = false;
+  async function setBanned(room, pk, banned) {
+    if (banBusy) return false;
+    const id = await identity();
+    if (!id || id.pubkey !== room.jm.owner || !room.control.sk) { toast(t('msgOwnerOnly')); return false; }
+    banBusy = true;
+    try {
+      // The new edition replaces the list whole, so it must be built on the
+      // newest one: ask the relays now rather than trust what has streamed
+      // in. A relay that hands back nothing at all (the founding editions
+      // are always there) is not an answer, and we stop.
+      const wraps = await queryOn(room.relays, { kinds: [1059], authors: [room.control.pk], limit: 500 }, 5000).catch(() => []);
+      if (!wraps.length) { toast(t('msgSendFailed')); return false; }
+      const have = new Set(room.controlEntries.map((e) => e.rumor.id));
+      for (const w of wraps) {
+        const o = openWrap(w, room.control);
+        if (o && o.rumor.kind === 3308 && !have.has(o.rumor.id)) { have.add(o.rumor.id); room.controlEntries.push(o); }
+      }
+      const head = banlistHead(room.controlEntries, { ownerHex: room.jm.owner, cid: room.jm.community_id });
+      const list = head.list.filter((x) => x !== pk);
+      if (banned) list.push(pk);
+      if (list.length === head.list.length) { room.scheduleFold(); return true; } // already so
+      const edition = { ...makeBanlist(head, list, Date.now()), pubkey: id.pubkey };
+      const wrap = await wrapRumor(edition, id.signer, room.control, { plaintext: true });
+      if (!(await publishOn(room.relays, wrap))) { toast(t('msgSendFailed')); return false; }
+      room.controlEntries.push({ rumor: rumorWithId(edition), author: id.pubkey });
+      room.scheduleFold();
+      bumpMsgRev();
+      toast(t(banned ? 'msgBanned' : 'msgUnbanned', { name: displayName(pk) }));
+      return true;
+    } catch (e) {
+      toast(t('msgSendFailed'));
+      return false;
+    } finally { banBusy = false; }
   }
 
   // The composer's "replying to" context bar, with its way out.
@@ -17889,7 +17940,14 @@ export function messagesFeature(ctx) {
           h('div', { class: 'row gap6', style: 'align-items:center;min-width:0' },
             h('span', { class: 'chat-name' }, displayName(r.pk)),
             r.pk === room.jm.owner ? h('span', { class: 'chat-badge' }, t('msgAdmin')) : null),
-          h('div', { class: 'muted small' + (r.online ? ' is-online' : '') }, seenLabel(room, r.pk))))));
+          h('div', { class: 'muted small' + (r.online ? ' is-online' : '') }, seenLabel(room, r.pk))))),
+      ...(canModerate(room) && room.folded && room.folded.banned.size ? [
+        h('div', { class: 'small muted chat-removed-head' }, t('msgBannedHead')),
+        ...[...room.folded.banned].map((pk) => h('div', { class: 'item chat-thread-row', onClick: () => openProfile(pk) },
+          h('span', { class: 'ava-wrap' }, avatar(pk)),
+          h('span', { class: 'chat-name grow', style: 'min-width:0' }, displayName(pk)),
+          h('button', { class: 'btn-sm', onClick: (e) => { e.stopPropagation(); setBanned(room, pk, false); } }, t('msgUnban')))),
+      ] : []));
   }
 
   function invitePanel(room) {