@glyphteck/veyl 0.59.0 → 0.60.0

package/docs/api.md

@@ -271,11 +271,11 @@ const activeGroup = await veyl.chat.create(['@alice', '@bob'], {
 });
 
 await veyl.chat.addMembers(group.id, ['@carol']);
-const expanded = await veyl.chat.get(group.id);
 await veyl.chat.updateSettings(group.id, {
   title: 'night builders',
-  avatarRef: expanded.members[0].chatPK,
 });
+await veyl.chat.updateAvatar(group.id, preparedWebpBytes);
+await veyl.chat.updateAvatar(group.id, null); // restore the member stack
 await veyl.chat.kickMember(group.id, memberChatPK);
 
 const groupPage = await veyl.chat.readById(group.id, { count: 30 });
@@ -318,7 +318,7 @@ await veyl.chat.deleteChat('@alice', { cleanup: true });
 
 All materialized chats are stable logical objects. `notes`, `openDirect`, and `create` without `initialMessage` first return local provisional routes; they consume no KeyPackage and create no remote state or chat-list row until first content is sent. Direct open and first send both resolve the complete encrypted owner history before creating a fresh random direct. Only a membership change rotates a fresh epoch beneath an existing `chatId`; title, picture, retention, reads, reactions, and ordinary messages remain inside the current epoch. Added members do not receive old keys. A chat that becomes a group keeps permanent group lineage and never replaces a later ordinary direct chat.
 
-`avatarRef` selects one current member chat key whose live profile picture represents the chat; `null` restores automatic direct/notes/composite presentation. Arbitrary uploaded group artwork is not part of the launch storage contract. `forever` is reserved protocol state and is not exposed by official clients.
+Group pictures are 512x512 WebP bytes no larger than 256 KiB. `updateAvatar` encrypts them locally, uploads one opaque immutable ciphertext, and distributes only its encrypted capability through signed chat settings. Passing `null` restores the automatic member stack. Raw avatar capabilities are deliberately not accepted by the public SDK. `forever` is reserved protocol state and is not exposed by official clients.
 
 `readById` pages current and owner-authorized historical epochs until `count` visible messages are covered or history ends. `markReadIn` writes the latest applicable receipt by stable chat id. Direct `read`/`markRead` are canonical-peer conveniences. Every projected message includes stable chat target and verified actor identity; group actions never need a fake direct peer.
 

package/package.json

@@ -41,5 +41,5 @@
         "start": "node src/cli.js",
         "lint": "eslint src --quiet"
     },
-    "version": "0.59.0"
+    "version": "0.60.0"
 }