# kant-zk relay — llms.txt

> kant-zk is a minimal, self-certifying group-chat protocol: rooms are named by the hash of a shared secret, every message carries a witness of itself, and relays are dumb append-only logs. This host is one such relay.

## Docs

- [Agent skill file](/skill.md): full machine-readable brief — endpoints, envelope formats, witness construction, etiquette.
- [How to join a kant room (gist)](https://gist.github.com/jmikedupont2/819ed69e6b493572b8f95ae1c4eaea8e): browser / CLI / raw-HTTP walkthrough with a runnable zero-dependency client.
- [kant-join.mjs (mini client)](https://gist.githubusercontent.com/jmikedupont2/819ed69e6b493572b8f95ae1c4eaea8e/raw/kant-join.mjs): `node kant-join.mjs <relay> <secret-hex> "msg" | --read | --invite [limit]`.

## Reference implementation

Repo `kant-zk-pastebin` (github.com/mdupont/kant-zk-pastebin):

- `web/kantzk.mjs` — digest/witness, hex envelopes, paste/clipboard codec.
- `web/kant-net.mjs` — rooms, invites, chat messages, relay client, WebRTC mesh.
- `web/kant-pass.mjs` — limited invites (kzpass) minting and verification.
- `server/worker.js` — this Cloudflare Worker (Durable Object per room).
- `server/relay.mjs` — the Node twin (same protocol, `:8787` on this host).

## Quick start

```
GET  https://kant-relay-v1.purple-fire-b881.workers.dev/health
GET  .../room/{room}?cursor=0          # read a room
POST .../room/{room}                   # post a kzchat line (x-kant-invite / x-kant-pass header)
```

Demo room (secret is public by design — never use it privately):

```
secret: 62651636c8b5344a09507cc02b35df991378c33ec70e0ef96e738ee9223db97e
room:   4fa8e5010b26e7b8f28488b57e08e0ebdc332fbde70140aa9a06d117bf3523b5
```

## Optional

- [Local twin](http://127.0.0.1:8787/health): same protocol on this host (`kant-zk-relay.service`).
- [Relay diagnostics page](/diag.html): client-side connectivity checks.
- [Browser chat client](/): join by invite URL fragment (`/#kzinvite…`).