Struct Channel 

pub struct Channel {
    pub id: ChannelId,
    pub key: ChannelKey,
    pub epoch: Epoch,
    pub name: String,
    pub banned: Vec<PublicKey>,
    pub protected: Vec<PublicKey>,
    pub roster: CommunityRoles,
    pub epoch_keys: Vec<(Epoch, ChannelKey)>,
    pub dissolved: bool,
}

A Channel inside a Community: its own independent key, current epoch, and name.

MULTI-EPOCH READ: key/epoch are the channel’s CURRENT (head) epoch (what SENDS use), while epoch_keys carries EVERY epoch key the member retains across rekeys. The read paths (fetch_channel_*, open_message_multi) query "#z":[<pseudonym per held epoch>] and select the decryption key by the wire event’s z pseudonym tag — so messages a removed-from-the-future member posted under an older epoch aren’t stranded after a catch-up across one or more rekeys. Non-ratcheted per-epoch keys make this random-access: any retained epoch’s plane decrypts directly, no replay.

Fields

id: ChannelId

key: ChannelKey

epoch: Epoch

name: String

banned: Vec<PublicKey>

The owning Community’s banlist (the “anti-memberlist”), denormalized onto each channel so the inbound path (which holds a &Channel) can drop events from banned authors without a separate lookup. Populated only by db::load_community; empty everywhere a channel is built for sending or in tests. See crate::community::inbound.

protected: Vec<PublicKey>

The protected set — the proven owner only (implicit roster position 0), denormalized so the inbound path enforces the invariant that the owner is NEVER effectively banned or hidden. Admins are NOT in this set: the owner outranks them and may ban/hide them; everyone else is ranked through the roster, not here. db::load_community filters the owner out of banned and populates this; empty for send-built channels and tests.

roster: CommunityRoles

The Community’s AUTHORIZED roster (roles + grants, post delegation check), denormalized so the inbound delete path can verify a moderation-hide the keyless way — the hider’s real npub must hold MANAGE_MESSAGES and outrank the target’s author, resolved against this roster. db::load_community populates it from the cached authorized roster; empty for send-built channels and tests (an empty roster authorizes only the owner, via protected).

epoch_keys: Vec<(Epoch, ChannelKey)>

EVERY epoch key the member retains for this channel ((epoch, key), from the multi-held archive), so the read path can fetch + decrypt across rekeys. Populated only by db::load_community; empty for send-built channels and tests, where reads fall back to the single head epoch (see Self::read_epoch_keys).

dissolved: bool

The owning Community’s dissolution seal, denormalized onto each channel so the inbound path (which holds a &Channel) drops EVERY subsequent event without a separate lookup — any kind, any author, any time. Populated only by db::load_community; false for send-built channels + tests.

Implementations

impl Channel

pub fn read_epoch_keys(&self) -> Vec<(Epoch, ChannelKey)>

The (epoch, key) set the read path queries + decrypts against: every retained epoch when loaded from the DB, else just the head (send-built channels / tests). Newest epoch first, so a backward page walk and the per-event key lookup both see the current epoch before older ones.

Trait Implementations

impl Clone for Channel

fn clone(&self) -> Channel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Channel

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.