@antzsoft/chat-core 1.3.3 → 1.3.5

package/docs/integration-guide.html

@@ -155,7 +155,7 @@ section.sec>h2:hover{color:#fff}
 
   <div class="section-label">What's New</div>
   <ul>
-    <li><a href="#whats-new">v1.3.3 Release Notes</a></li>
+    <li><a href="#whats-new">v1.3.4 Release Notes</a></li>
   </ul>
 
   <div class="section-label">Getting Started</div>
@@ -250,12 +250,72 @@ section.sec>h2:hover{color:#fff}
   <h2>What's New</h2>
   <p style="color:var(--muted);font-size:13px;margin-bottom:20px">Version history and release notes. Click a version to expand.</p>
 
-  <!-- ── v1.3.3 (current) ── -->
+  <!-- ── v1.3.4 (current) ── -->
+  <div class="wn-version open" id="wn-134">
+    <div class="wn-header" onclick="toggleVersion('wn-134')">
+      <div class="wn-title">
+        <span class="wn-ver">v1.3.4</span>
+        <span class="wn-badge current">Current</span>
+        <span class="wn-date">July 2026</span>
+      </div>
+      <span class="wn-chevron">▲</span>
+    </div>
+    <div class="wn-body">
+
+      <div class="wn-item" id="wn-134-deleted-conv-ids">
+        <div class="wn-item-header" onclick="toggleItem('wn-134-deleted-conv-ids')">
+          <span class="wn-tag new">New</span>
+          <span class="wn-item-title"><code>deletedConversationIds</code> in <code>CrossConversationSyncResponse</code></span>
+          <span class="wn-chevron-sm">▾</span>
+        </div>
+        <div class="wn-item-body">
+          <p><code>syncApi.pull(since)</code> now returns <code>deletedConversationIds: string[]</code> — IDs of conversations this user explicitly deleted from their list (via the delete-conversation action) since the <code>since</code> cursor. The client should remove these from local storage and the UI conversation list.</p>
+          <table>
+            <thead><tr><th>Property</th><th>Type</th><th>Description</th></tr></thead>
+            <tbody>
+              <tr><td><code>deletedConversationIds</code></td><td><code>string[]</code></td><td>Conversation IDs to remove from local list. Empty array when none were deleted in the sync window.</td></tr>
+            </tbody>
+          </table>
+          <pre><code><span class="kw">const</span> result = <span class="kw">await</span> syncApi.<span class="fn">pull</span>(lastSyncedAt);
+
+<span class="cm">// Remove conversations the user deleted from their list</span>
+<span class="kw">for</span> (<span class="kw">const</span> convId <span class="kw">of</span> result.deletedConversationIds) {
+  <span class="kw">await</span> db.conversations.<span class="fn">delete</span>(convId);
+}</code></pre>
+          <p><strong>Scoped to the requesting user only</strong> — if another user deletes their copy of a shared DM, it does not appear in your <code>deletedConversationIds</code>. <strong>Cursor-safe</strong> — once the client saves the returned <code>syncedAt</code> as the new cursor, the same IDs will not reappear on the next <code>pull()</code>. No acknowledged-receipt tracking needed.</p>
+          <p><strong>No integration changes required</strong> beyond consuming the new field. The field is always present (empty array when nothing was deleted).</p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-134-sync-guards">
+        <div class="wn-item-header" onclick="toggleItem('wn-134-sync-guards')">
+          <span class="wn-tag fix">Fix</span>
+          <span class="wn-item-title">Sync access guard parity with message listing API</span>
+          <span class="wn-chevron-sm">▾</span>
+        </div>
+        <div class="wn-item-body">
+          <p>All three sync paths now enforce the same access rules as <code>GET /messages</code>. Previously sync could return messages that message listing would not show.</p>
+          <table>
+            <thead><tr><th>Guard</th><th>Before</th><th>After</th></tr></thead>
+            <tbody>
+              <tr><td><code>membershipPeriods</code> windows</td><td>Not enforced — all messages returned regardless of when user was a member</td><td>Messages outside the user's active membership windows are excluded. Re-added users only see messages from their active periods.</td></tr>
+              <tr><td><code>status</code> filter</td><td>Only <code>deletedFor</code> checked — <code>failed</code>-status messages leaked through</td><td>Only <code>active</code> and <code>deleted</code> (tombstone) messages returned, matching message listing</td></tr>
+              <tr><td><code>isHidden</code> group check</td><td>Not checked — hidden group members could still sync</td><td>Hidden group participants (exit+delete) receive <code>403</code>. Hidden DM participants still allowed (consistent with message listing).</td></tr>
+              <tr><td>Removed-member read access</td><td><code>isActive: true</code> required — removed members blocked from syncing history</td><td>Removed members can sync read-only history, matching message listing <code>validateConversationAccess</code></td></tr>
+            </tbody>
+          </table>
+          <p><strong>No integration changes required.</strong> Response shape is unchanged — only the correctness of the returned message set improves.</p>
+        </div>
+      </div>
+
+    </div>
+  </div><!-- /.wn-version -->
+
+  <!-- ── v1.3.3 ── -->
   <div class="wn-version open" id="wn-133">
     <div class="wn-header" onclick="toggleVersion('wn-133')">
       <div class="wn-title">
         <span class="wn-ver">v1.3.3</span>
-        <span class="wn-badge current">Current</span>
         <span class="wn-date">June 2026</span>
       </div>
       <span class="wn-chevron">▲</span>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antzsoft/chat-core",
-  "version": "1.3.3",
+  "version": "1.3.5",
   "description": "Platform-agnostic core for Antz Chat — API, socket, stores, types. Works in browser, React Native (Expo or bare), and Node.js.",
   "author": "Antz",
   "license": "MIT",