@forgesworn/fold-kit 0.5.0 → 0.5.1

package/dist/epoch.d.ts

@@ -257,6 +257,10 @@ export type EpochGrant = {
         epoch: 0;
     };
     removed: string[];
+    /** Present on a member's answer through `requestRoomEpoch({ members })`:
+     *  the epochs it carried between the requester's and `epoch`. See
+     *  `MemberEpochGrant.passed`. The authority's own answer has none. */
+    passed?: RoomEpoch[];
     refused?: undefined;
 } | {
     refused: EpochRefusal;

package/dist/member-epoch.d.ts

@@ -156,6 +156,11 @@ export interface MemberEpochGrant {
     epoch: RoomEpoch;
     /** Cumulative: `opts.removed` plus every removal in the chain. */
     removed: string[];
+    /** The epochs between the requester's and `epoch`, oldest first, each
+     *  proven by the next rekey in the chain decrypting under it. Empty for a
+     *  grant one epoch ahead. Kept, they let the requester read what was said
+     *  in the epochs it skipped, and hand them on from its own member desk. */
+    passed: RoomEpoch[];
 }
 /**
  * Verify a member's answer to one of this device's member requests. Null

package/dist/member-epoch.js

@@ -278,6 +278,7 @@ export function decodeMemberEpochGrant(event, opts) {
         const removed = new Set([...(opts.removed ?? [])].map(normaliseHex));
         let previous = opts.current;
         let secret;
+        const passed = [];
         for (let i = 0; i < length; i += 1) {
             const evidence = readRekeyEvidence(body.rekeys[i], { roomId, authority: opts.authority, previous });
             if (!evidence)
@@ -304,8 +305,10 @@ export function decodeMemberEpochGrant(event, opts) {
                     return null;
             }
             previous = deriveEpoch({ epoch: evidence.epoch, secret });
+            if (i < length - 1)
+                passed.push({ epoch: evidence.epoch, secret });
         }
-        return { epoch: { epoch: top, secret: secret }, removed: [...removed].sort() };
+        return { epoch: { epoch: top, secret: secret }, removed: [...removed].sort(), passed };
     }
     catch {
         return null;

package/llms.txt

@@ -79,7 +79,7 @@ Not yet published to npm under this API. Until it is, pin an immutable Git commi
 - `encodeEpochGrant(opts)` / `decodeEpochGrant(event, opts)` - the authority's answer (secret, epoch-0, or a refusal `'removed' | 'closed'`)
 - `epochRequestAdmission(opts)`, `deriveEpochRequestKey(roomKey)`
 - `hostRoomEpoch(opts)` / `requestRoomEpoch(opts)` / `EpochRefusedError` - the live request/grant desk, both sides
-- Member epoch catch-up (see `docs/member-epoch-catch-up.md`): `encodeRekeyEvent({ ..., commit: true })` writes `epochCommitment(roomId, epoch, secret)` into the rekey body; `hostMemberEpochDesk(opts)` lets any current member answer; `requestRoomEpoch({ ..., members: memberEpochSource(opts) })` asks the authority and members, first verifiable answer wins; `requestMemberEpoch(opts)` asks members alone. Kinds `MEMBER_EPOCH_KINDS` = `{ REQUEST: 20471, GRANT: 20472 }`. A member grant carries the authority-signed rekeys from the asker's epoch to the current one; the asker verifies the chain itself (`decodeMemberEpochGrant`) and refuses a last epoch with no commitment (legacy: authority only), a chain that removes it or closes the room, and one that stops short of `expected`. Codecs: `encodeMemberEpochRequest`, `decodeMemberEpochRequest`, `encodeMemberEpochGrant`, `readRekeyEvidence`, `deriveMemberEpochRequestKey`, `MAX_MEMBER_EPOCH_CHAIN` (32)
+- Member epoch catch-up (see `docs/member-epoch-catch-up.md`): `encodeRekeyEvent({ ..., commit: true })` writes `epochCommitment(roomId, epoch, secret)` into the rekey body; `hostMemberEpochDesk(opts)` lets any current member answer; `requestRoomEpoch({ ..., members: memberEpochSource(opts) })` asks the authority and members, first verifiable answer wins; `requestMemberEpoch(opts)` asks members alone. Kinds `MEMBER_EPOCH_KINDS` = `{ REQUEST: 20471, GRANT: 20472 }`. A member grant carries the authority-signed rekeys from the asker's epoch to the current one; the asker verifies the chain itself (`decodeMemberEpochGrant`) and refuses a last epoch with no commitment (legacy: authority only), a chain that removes it or closes the room, and one that stops short of `expected`. A verified grant is `{ epoch, removed, passed }`: `passed` holds the epochs between the asker's and `epoch`, oldest first, and `requestRoomEpoch` carries it as an optional `passed` when a member answered. Codecs: `encodeMemberEpochRequest`, `decodeMemberEpochRequest`, `encodeMemberEpochGrant`, `readRekeyEvidence`, `deriveMemberEpochRequestKey`, `MAX_MEMBER_EPOCH_CHAIN` (32)
 - `canonicalAdmins(admins)` / `signAdmins(opts)` / `verifyAdmins(opts)` - the authority's signed admin list
 - `canonicalChannels(channels)` / `signChannels(opts)` / `verifyChannels(opts)` - the authority's signed channel list; `CHANNEL_NAME`, `RESERVED_CHANNELS`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgesworn/fold-kit",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Circle primitives for private Nostr groups nobody operates: epoch keys, link invites, removal by rekey, device credentials.",
   "type": "module",
   "main": "./dist/index.js",