@canonmsg/agent-sdk 12.0.0 → 12.1.0

package/dist/internal/backend-contracts/media-url.d.ts

@@ -2,5 +2,19 @@ export declare function buildFirebaseMediaUrl(bucket: string, storagePath: strin
 export declare function buildMediaDownloadUrl(bucket: string, storagePath: string, token: string): string;
 /** Accept historical Firebase URLs and Canon links, only for the expected bucket. */
 export declare function parseMediaStoragePath(value: unknown, bucket: string): string | null;
+/** Whether `url` is on one of Canon's media origins (its `/files` download links). */
+export declare function isCanonMediaOrigin(url: string): boolean;
+/**
+ * Whether `url` is Canon's own download link for one upload of this room in this environment: its media origin, the
+ * room's object path, the upload's canonical file (or, with `poster`, its video poster) and a bearer token, nothing
+ * else. An encrypted item names its upload by such a link (mls-payload-v3.md §4); any other URL would have every
+ * member's phone and agent fetch it.
+ */
+export declare function isCanonUploadUrl(url: string, input: {
+    environmentId: string;
+    conversationId: string;
+    uploadId: string;
+    poster?: boolean;
+}): boolean;
 /** Presentation upgrade for existing messages without rewriting their stored URLs. */
 export declare function canonMediaDownloadUrl(value: string, downloadFileName?: string): string;

package/dist/internal/backend-contracts/message.d.ts

@@ -2,7 +2,7 @@ import { MediaAttachment } from './media.js';
 import { type MlsDevMessageReference } from './mlsDevApplication.js';
 export type SerializedSenderType = 'human' | 'ai_agent';
 /** Canonical agent client identifiers shared by Canon services and clients. */
-export declare const AGENT_CLIENT_TYPES: readonly ["claude-code", "openclaw", "codex", "hermes", "deepseek-harness", "generic"];
+export declare const AGENT_CLIENT_TYPES: readonly ["claude-code", "codex", "hermes", "generic"];
 export type SerializedAgentClientType = typeof AGENT_CLIENT_TYPES[number];
 export type SerializedContentType = 'text' | 'image' | 'audio' | 'video' | 'file' | 'contact_card' | 'interaction';
 export interface ForwardedFrom {

package/dist/internal/backend-contracts/mlsDevApplication.d.ts

@@ -1,5 +1,21 @@
 import { type MlsDevGroupHead } from './mlsDevGroup.js';
+import { type MlsEnvironmentId } from './mlsEnvironment.js';
 export declare const MLS_DEV_TEXT_PROTOCOL: "canon.mls.dev-text.v1";
+/** Text plus encrypted interactions (docs/design/encrypted-interactions.md §2.1). Fresh rooms only, immutable from birth. */
+export declare const MLS_DEV_TEXT_PROTOCOL_V2: "canon.mls.dev-text.v2";
+/** v2 plus a text's reply and mentions inside the ciphertext (docs/design/mls-payload-v3.md §2). What Canon births. */
+export declare const MLS_DEV_TEXT_PROTOCOL_V3: "canon.mls.dev-text.v3";
+export declare const MLS_DEV_TEXT_PROTOCOLS: readonly ["canon.mls.dev-text.v1", "canon.mls.dev-text.v2", "canon.mls.dev-text.v3"];
+export type MlsDevTextProtocol = typeof MLS_DEV_TEXT_PROTOCOLS[number];
+export declare function isMlsDevTextProtocol(value: unknown): value is MlsDevTextProtocol;
+/** Whether a room carries encrypted cards: v2, and v3, which is v2 with richer text. */
+export declare function mlsDevProtocolCarriesCards(value: unknown): boolean;
+export declare const MLS_DEV_REPLY_QUOTE_MAX_CHARACTERS = 1024;
+export declare const MLS_DEV_MENTIONS_MAX = 32;
+/** Shared with Functions' runtime request ids (`RUNTIME_ID_PATTERN`): the runner's `ask-<sha256>` fits. */
+export declare const MLS_DEV_INTERACTION_ID_PATTERN: RegExp;
+export declare const MLS_DEV_INTERACTION_KINDS: readonly ["approval", "question", "secret"];
+export type MlsDevInteractionKind = typeof MLS_DEV_INTERACTION_KINDS[number];
 export declare const MLS_DEV_APPLICATION_TLS_MAX_BYTES: number;
 export declare const MLS_DEV_APPLICATION_MAX_BYTES: number;
 export declare const MLS_DEV_TEXT_MAX_BYTES: number;
@@ -7,15 +23,33 @@ export interface MlsDevApplicationPreconditions {
     readonly membershipRevision: number;
     readonly admissionId: string;
 }
+/** Public, device-signed and MLS-authenticated interaction routing (§2.2). Only a v2 room accepts it. The requester is
+ * the authenticated sender principal; titles, options, answers, decisions and scope stay in the encrypted payload. */
+export type MlsDevInteractionBinding = {
+    readonly role: 'request';
+    readonly requestId: string;
+    readonly kind: MlsDevInteractionKind;
+    readonly responderIds: readonly [string];
+    readonly expiresAtMs: number;
+} | {
+    readonly role: 'response';
+    readonly requestId: string;
+    readonly agentId: string;
+} | {
+    readonly role: 'withdraw';
+    readonly requestId: string;
+};
 export interface MlsDevApplicationBinding {
     readonly version: 1;
-    readonly environmentId: 'canon-dev-v1';
+    readonly environmentId: MlsEnvironmentId;
     readonly conversationId: string;
     readonly groupId: string;
     readonly messageId: string;
     readonly senderCredential: string;
     readonly expectedHead: MlsDevGroupHead;
     readonly preconditions: MlsDevApplicationPreconditions;
+    /** Absent for text. Framed after `preconditions` into the proof, envelope hash and MLS AAD. */
+    readonly interaction?: MlsDevInteractionBinding;
 }
 export interface MlsDevApplicationUnsignedEnvelope extends MlsDevApplicationBinding {
     readonly ciphertext: string;
@@ -44,22 +78,71 @@ export interface MlsDevTextPayload {
     readonly operationId: string;
     readonly senderDeviceId: string;
     readonly text: string;
+    /** v3 only: the message replied to, with an excerpt a device admitted after it can still show. */
+    readonly replyTo?: {
+        readonly messageId: string;
+        readonly quote: string;
+    };
+    /** v3 only: the accounts the text mentions, 1 to 32, each once. */
+    readonly mentions?: readonly string[];
+}
+/** The media kinds an encrypted item carries (payload v3 §2). Contact cards and artifacts are not items yet. */
+export declare const MLS_DEV_ITEM_TYPES: readonly ["image", "video", "audio", "file"];
+/**
+ * An item's reference inside the ciphertext. Its bytes stay in Canon's media pipeline and are not end-to-end
+ * encrypted; `url` is the upload's bearer download URL, which only the room's members receive this way. The file
+ * name and caption reach Canon only here, encrypted.
+ */
+export interface MlsDevItem {
+    readonly type: typeof MLS_DEV_ITEM_TYPES[number];
+    readonly uploadId: string;
+    readonly url: string;
+    readonly mimeType: string;
+    readonly sizeBytes: number;
+    readonly fileName?: string;
+    readonly width?: number;
+    readonly height?: number;
+    readonly durationMs?: number;
+    readonly thumbnailUrl?: string;
+    readonly caption?: string;
+    /** As a v3 text's: the message replied to, with its excerpt, and the accounts mentioned. They ride inside the item,
+     * which native carries opaquely. */
+    readonly replyTo?: MlsDevTextPayload['replyTo'];
+    readonly mentions?: readonly string[];
+}
+export interface MlsDevItemPayload {
+    readonly version: 1;
+    readonly kind: 'item';
+    readonly conversationId: string;
+    readonly groupId: string;
+    readonly messageId: string;
+    readonly operationId: string;
+    readonly senderDeviceId: string;
+    readonly item: MlsDevItem;
 }
 /** Public projection only. Plaintext is produced locally after authenticated MLS receive. */
 export interface MlsDevMessageReference {
     readonly version: 1;
-    readonly protocol: typeof MLS_DEV_TEXT_PROTOCOL;
+    readonly protocol: MlsDevTextProtocol;
     readonly groupId: string;
     readonly messageId: string;
     readonly operationId: string;
     readonly feedOrdinal: number;
     readonly head: MlsDevGroupHead;
     readonly envelopeHash: string;
+    /** The public binding's role only, so triggers can withhold previews, pushes and unread counts from answers. */
+    readonly interaction?: {
+        readonly role: MlsDevInteractionBinding['role'];
+    };
 }
 export declare class MlsDevApplicationValidationError extends Error {
     readonly code = "INVALID_MLS_DEV_APPLICATION";
     constructor();
 }
+/** An encrypted message's ID: an endpoint ID that is not a membership notice's (`membership-<revision>`). */
+export declare function isMlsDevMessageId(value: unknown): value is string;
+/** Parses the closed public interaction binding (§2.2); the field order here is the framed order. */
+export declare function parseMlsDevInteractionBinding(value: unknown): MlsDevInteractionBinding;
 export declare function parseMlsDevApplicationWire(value: unknown): string;
 export declare function parseMlsDevApplicationPreconditions(value: unknown): MlsDevApplicationPreconditions;
 export declare function parseMlsDevApplicationBinding(value: unknown): MlsDevApplicationBinding;
@@ -67,7 +150,12 @@ export declare function parseMlsDevApplicationUnsignedEnvelope(value: unknown):
 export declare function parseMlsDevApplicationEnvelope(value: unknown): MlsDevApplicationEnvelope;
 export declare function parseMlsDevApplicationReceipt(value: unknown): MlsDevApplicationReceipt;
 export declare function parseMlsDevTextPayload(value: unknown): MlsDevTextPayload;
+/** An encrypted item (payload v3 §2): its reference and caption, as the ciphertext carries them. */
+export declare function parseMlsDevItemPayload(value: unknown): MlsDevItemPayload;
 export declare function parseMlsDevMessageReference(value: unknown): MlsDevMessageReference;
+/** `domain`, then the operation ID and the JSON value, each behind its 4-byte big-endian length: the bytes Canon's MLS
+ * proofs sign. */
+export declare function frameMlsDevStatement(domain: string, value: unknown, operationId: string): Uint8Array;
 export declare function encodeMlsDevApplicationProof(value: unknown, operationId: string): Uint8Array;
 export declare function encodeMlsDevApplicationEnvelopeHash(value: unknown, operationId: string): Uint8Array;
 export declare function encodeMlsDevApplicationAad(value: unknown, operationId: string): Uint8Array;

package/dist/internal/backend-contracts/mlsDevCredential.d.ts

@@ -1,11 +1,13 @@
 import { type MlsDevEnrollmentDevice } from './mlsDevEnrollment.js';
+import { type MlsEnvironmentId, type MlsIssuerId } from './mlsEnvironment.js';
 export declare const MLS_DEV_CREDENTIAL_TTL_MS = 86400000;
 export declare const MLS_DEV_CREDENTIAL_CHALLENGE_TTL_MS = 300000;
 export declare const MLS_DEV_CREDENTIAL_MAX_BYTES = 8192;
 export interface MlsDevCredentialClaims {
     readonly version: 1;
     readonly credentialId: string;
-    readonly issuer: 'canon-mls-dev-v1';
+    /** The device's environment's issuer (`MLS_ENVIRONMENT_PROFILES`). */
+    readonly issuer: MlsIssuerId;
     readonly device: MlsDevEnrollmentDevice;
     readonly generation: number;
     readonly issuedAtMs: number;
@@ -52,7 +54,8 @@ export declare class MlsDevCredentialValidationError extends Error {
     readonly code = "INVALID_MLS_DEV_CREDENTIAL";
     constructor();
 }
-export declare function parseMlsDevIssuerKeyVersion(value: unknown): string;
+/** A version of an environment's issuer key: of `environmentId`'s when given, else of any declared environment's. */
+export declare function parseMlsDevIssuerKeyVersion(value: unknown, environmentId?: MlsEnvironmentId): string;
 export declare function parseMlsDevCredentialClaims(value: unknown): MlsDevCredentialClaims;
 export declare function parseMlsDevCredentialUnsigned(value: unknown): MlsDevCredentialUnsigned;
 export declare function parseMlsDevCredentialChallenge(value: unknown): MlsDevCredentialChallenge;

package/dist/internal/backend-contracts/mlsDevDeviceCustody.d.ts

@@ -1,13 +1,14 @@
 import { type MlsDevEnrollmentChallenge, type MlsDevEnrollmentPrincipal, type MlsDevEnrollmentResult } from './mlsDevEnrollment.js';
 import { type MlsDevCredentialChallenge } from './mlsDevCredential.js';
 import { type MlsDevCredentialReconciliationChallenge } from './mlsDevCredentialReconciliation.js';
+import { type MlsEnvironmentId } from './mlsEnvironment.js';
 /** Synthetic Dev native bridge contracts; never an issuer or membership grant. */
 export declare const MLS_DEV_DEVICE_CONTEXT_MAX_BYTES = 2048;
 export declare const MLS_DEV_DEVICE_COMMAND_MAX_BYTES = 16384;
 export declare const MLS_DEV_DEVICE_WRAPPED_STATE_MAX_BYTES = 6144;
 export interface MlsDevDeviceBinding {
     readonly version: 1;
-    readonly environmentId: 'canon-dev-v1';
+    readonly environmentId: MlsEnvironmentId;
     readonly principal: MlsDevEnrollmentPrincipal;
     readonly installationId: string;
 }

package/dist/internal/backend-contracts/mlsDevEnrollment.d.ts

@@ -1,3 +1,4 @@
+import { type MlsEnvironmentId } from './mlsEnvironment.js';
 /** Dev device-key registration only. These records are not MLS issuer credentials. */
 export declare const MLS_DEV_ENROLLMENT_CHALLENGE_TTL_MS = 300000;
 export declare const MLS_DEV_ENROLLMENT_MAX_BYTES = 4096;
@@ -23,7 +24,7 @@ export interface MlsDevEnrollmentChallenge {
     readonly version: 1;
     readonly challengeId: string;
     readonly deviceId: string;
-    readonly environmentId: 'canon-dev-v1';
+    readonly environmentId: MlsEnvironmentId;
     readonly principal: MlsDevEnrollmentPrincipal;
     readonly installationId: string;
     readonly ciphersuite: 1;
@@ -36,7 +37,7 @@ export interface MlsDevEnrollmentChallenge {
 export interface MlsDevEnrollmentDevice {
     readonly version: 1;
     readonly deviceId: string;
-    readonly environmentId: 'canon-dev-v1';
+    readonly environmentId: MlsEnvironmentId;
     readonly principal: MlsDevEnrollmentPrincipal;
     readonly installationId: string;
     readonly ciphersuite: 1;

package/dist/internal/backend-contracts/mlsDevFeedReceipt.d.ts

@@ -0,0 +1,43 @@
+import type { MlsDevGroupFeedEntry } from './mlsDevGroupFeed.js';
+import { type MlsEnvironmentId } from './mlsEnvironment.js';
+/**
+ * Signed acceptance times (docs/design/mls-signed-acceptance.md): when Canon accepts an MLS feed entry it signs the
+ * time, with the environment's feed-receipt key, so a device judges the entry's sender at that time instead of by its
+ * own clock. The proof travels beside the entry; the receipt and the accepted control themselves are unchanged.
+ */
+export declare const MLS_DEV_FEED_RECEIPT_DOMAIN = "canon.mls.feed-receipt.v1\0";
+/** What Canon signs for one accepted entry, in this field order. `entryHash` binds the exact accepted bytes: an
+ * application's `envelopeHash`, or an accepted control's `head.hash`. */
+export interface MlsDevFeedReceiptStatement {
+    readonly environmentId: MlsEnvironmentId;
+    readonly conversationId: string;
+    readonly groupId: string;
+    readonly feedOrdinal: number;
+    readonly kind: 'application' | 'control';
+    readonly entryHash: string;
+    readonly acceptedAtMs: number;
+}
+export interface MlsDevFeedReceiptProof {
+    /** A version of the environment's feed-receipt key. */
+    readonly keyVersion: string;
+    /** Ed25519 over `encodeMlsDevFeedReceipt`, canonical base64url. */
+    readonly signature: string;
+}
+export declare class MlsDevFeedReceiptValidationError extends Error {
+    readonly code = "INVALID_MLS_DEV_FEED_RECEIPT";
+    constructor();
+}
+export declare function parseMlsDevReceiptKeyVersion(value: unknown, environmentId?: MlsEnvironmentId): string;
+export declare function parseMlsDevFeedReceiptProof(value: unknown): MlsDevFeedReceiptProof;
+/** The statement for an accepted feed entry, in the environment that accepted it. */
+export declare function mlsDevFeedReceiptStatement(entry: MlsDevGroupFeedEntry, environmentId: MlsEnvironmentId): {
+    statement: MlsDevFeedReceiptStatement;
+    operationId: string;
+};
+/** The exact bytes the feed-receipt key signs: the statement framed under its domain and the entry's operation. */
+export declare function encodeMlsDevFeedReceipt(statement: MlsDevFeedReceiptStatement, operationId: string): Uint8Array;
+/** Native refuses, for now, an entry Canon accepted more than 10 minutes ahead of this device's clock: a retryable
+ * pause, never a room failure (mls-signed-acceptance.md §2.9). */
+export declare const MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW = "MLS_DEV_GROUP_RECEIPT_CLOCK_SKEW";
+/** Whether a native or custody response is exactly that pause (the portable helper adds `version: 1`). */
+export declare function isMlsDevReceiptClockSkew(value: unknown): boolean;

package/dist/internal/backend-contracts/mlsDevGroup.d.ts

@@ -1,7 +1,9 @@
-import { MLS_DEV_TEXT_PROTOCOL, type MlsDevApplicationEnvelope, type MlsDevApplicationPreconditions } from './mlsDevApplication.js';
+import { type MlsDevTextProtocol, type MlsDevInteractionBinding, type MlsDevItem, type MlsDevTextPayload, type MlsDevApplicationEnvelope, type MlsDevApplicationPreconditions } from './mlsDevApplication.js';
 import { type MlsDevGroupFeedApplicationEntry } from './mlsDevGroupFeed.js';
+import { type MlsDevFeedReceiptProof } from './mlsDevFeedReceipt.js';
 import { type MlsDevEnrollmentDevice } from './mlsDevEnrollment.js';
 import { type MlsDevKeyPackageClaimReceipt } from './mlsDevKeyPackages.js';
+import { type MlsEnvironmentId } from './mlsEnvironment.js';
 export declare const MLS_DEV_GROUP_ROSTER_MAX = 32;
 export declare const MLS_DEV_GROUP_TLS_MAX_BYTES: number;
 export declare const MLS_DEV_GROUP_CONTROL_MAX_BYTES: number;
@@ -16,7 +18,7 @@ export interface MlsDevGroupCreateConversation {
         readonly version: 1;
         readonly conversationId: string;
         readonly credential: string;
-        readonly protocol?: typeof MLS_DEV_TEXT_PROTOCOL;
+        readonly protocol?: MlsDevTextProtocol;
     };
 }
 export interface MlsDevGroupHead {
@@ -40,7 +42,7 @@ export interface MlsDevGroupPreconditions {
 }
 export interface MlsDevGroupUnsignedControl {
     readonly version: 1;
-    readonly environmentId: 'canon-dev-v1';
+    readonly environmentId: MlsEnvironmentId;
     readonly kind: 'create' | 'add' | 'remove';
     readonly conversationId: string;
     readonly groupId: string;
@@ -69,6 +71,31 @@ export interface MlsDevGroupAcceptedControl {
     readonly acceptedAtMs: number;
     readonly membershipRevision: number;
 }
+/** Which current members' devices a room still needs to admit (mls-rooms-by-default.md §2.4), asked by an admitted device. */
+export interface MlsDevGroupAdmissionsQuery {
+    readonly version: 1;
+    readonly conversationId: string;
+    readonly credential: string;
+}
+export interface MlsDevGroupAdmissionCandidate {
+    readonly principal: {
+        readonly type: 'human' | 'ai_agent';
+        readonly id: string;
+    };
+    readonly deviceId: string;
+    /** The member's admission, the `targetAdmissionId` a claim for this device names. */
+    readonly targetAdmissionId: string;
+}
+export interface MlsDevGroupAdmissionsResult {
+    readonly version: 1;
+    readonly conversationId: string;
+    readonly membershipRevision: number;
+    /** Registered, eligible devices of current members that are not in the group and have a KeyPackage available. */
+    readonly candidates: readonly MlsDevGroupAdmissionCandidate[];
+    /** Current members with no device in the group (whether or not one is a candidate): the room's send hold (D2). */
+    readonly waitingPrincipalIds: readonly string[];
+}
+export declare const MLS_DEV_GROUP_ADMISSION_MAX_CANDIDATES = 64;
 export interface MlsDevGroupQuery {
     readonly version: 1;
     readonly conversationId: string;
@@ -91,14 +118,14 @@ export interface MlsDevGroupQueryResult {
 }
 export interface MlsDevGroupContext {
     readonly version: 1;
-    readonly environmentId: 'canon-dev-v1';
+    readonly environmentId: MlsEnvironmentId;
     readonly conversationId: string;
     readonly groupId: string;
     readonly deviceId: string;
     readonly installationId: string;
     /** Local protected-state revision, distinct from server sequence and MLS epoch. */
     readonly revision: number;
-    readonly protocol?: typeof MLS_DEV_TEXT_PROTOCOL;
+    readonly protocol?: MlsDevTextProtocol;
 }
 export type MlsDevGroupCommand = {
     readonly op: 'encrypt_text';
@@ -108,9 +135,47 @@ export type MlsDevGroupCommand = {
     readonly expectedHead: MlsDevGroupHead;
     readonly preconditions: MlsDevApplicationPreconditions;
     readonly text: string;
+    /** v3 rooms only (mls-payload-v3.md §2); native refuses either in a v1 or v2 room. */
+    readonly replyTo?: MlsDevTextPayload['replyTo'];
+    readonly mentions?: MlsDevTextPayload['mentions'];
+} | {
+    /** v3 rooms only (mls-payload-v3.md §2): native carries the item as an opaque object this contract validates. */
+    readonly op: 'encrypt_item';
+    readonly operationId: string;
+    readonly messageId: string;
+    readonly credential: string;
+    readonly expectedHead: MlsDevGroupHead;
+    readonly preconditions: MlsDevApplicationPreconditions;
+    readonly item: MlsDevItem;
 } | {
     readonly op: 'process_application';
     readonly entry: MlsDevGroupFeedApplicationEntry;
+} | {
+    /** v2 only (encrypted-interactions.md §2.3). `body` is the payload's `interaction` object; native adds a secret
+     * request's one-time `secretKey`, and with `seal` seals the answer text into `answer.sealed` for the requester. */
+    readonly op: 'encrypt_interaction';
+    readonly operationId: string;
+    readonly messageId: string;
+    readonly credential: string;
+    readonly expectedHead: MlsDevGroupHead;
+    readonly preconditions: MlsDevApplicationPreconditions;
+    readonly interaction: MlsDevInteractionBinding;
+    readonly body: Readonly<Record<string, unknown>>;
+    readonly seal: {
+        readonly text: string;
+        readonly publicKey: string;
+        readonly requesterDeviceId: string;
+    } | null;
+} | {
+    /** The requester opens a sealed answer once; native removes the request's key from the state it returns (§2.5). */
+    readonly op: 'open_secret_answer';
+    readonly requestId: string;
+    readonly responderId: string;
+    readonly responderDeviceId: string;
+    readonly sealed: {
+        readonly enc: string;
+        readonly ciphertext: string;
+    };
 } | {
     readonly op: 'create';
     readonly operationId: string;
@@ -141,22 +206,62 @@ export type MlsDevGroupCommand = {
     readonly op: 'join';
     readonly credential: string;
     readonly accepted: MlsDevGroupAcceptedControl;
+    /** Canon's signed acceptance time for the control at `feedOrdinal` (mls-signed-acceptance.md). */
+    readonly receiptProof: MlsDevFeedReceiptProof;
+    readonly feedOrdinal: number;
     readonly keyPackageId: string;
 } | {
     readonly op: 'process';
     readonly credential: string;
     readonly accepted: MlsDevGroupAcceptedControl;
+    readonly receiptProof: MlsDevFeedReceiptProof;
+    readonly feedOrdinal: number;
 };
 export type MlsDevGroupPayload = {
     readonly kind: 'application';
     readonly envelope: MlsDevApplicationEnvelope;
+    /** `encrypt_item` only: the exact authored item plaintext, the endpoint's own copy. */
+    readonly payload?: string;
+} | {
+    /** A received item: its exact plaintext JSON, which the endpoint parses (`parseMlsDevItemPayload`). */
+    readonly kind: 'item';
+    readonly messageId: string;
+    readonly operationId: string;
+    readonly senderDeviceId: string;
+    readonly payload: string;
+    readonly feedOrdinal: number;
 } | {
     readonly kind: 'text';
     readonly messageId: string;
     readonly operationId: string;
     readonly senderDeviceId: string;
     readonly text: string;
+    readonly replyTo?: MlsDevTextPayload['replyTo'];
+    readonly mentions?: MlsDevTextPayload['mentions'];
+    readonly feedOrdinal: number;
+} | {
+    /** `payload` is the exact authored plaintext JSON: a secret request's public key, or only a sealed answer. */
+    readonly kind: 'interaction_application';
+    readonly envelope: MlsDevApplicationEnvelope;
+    readonly payload: string;
+} | {
+    readonly kind: 'interaction';
+    readonly messageId: string;
+    readonly operationId: string;
+    readonly senderDeviceId: string;
+    readonly payload: string;
+    readonly feedOrdinal: number;
+} | {
+    /** v2 only: content that failed native checks after an authenticated receive. Consumed, logged, never applied. */
+    readonly kind: 'invalid';
+    readonly messageId: string;
+    readonly operationId: string;
+    readonly senderDeviceId: string;
     readonly feedOrdinal: number;
+} | {
+    readonly kind: 'secret';
+    readonly requestId: string;
+    readonly text: string;
 } | {
     readonly kind: 'discarded';
     readonly operationId: string;
@@ -183,10 +288,29 @@ export declare function parseMlsDevGroupCreateConversation(value: unknown): MlsD
 export declare function parseMlsDevGroupHead(value: unknown): MlsDevGroupHead;
 export declare function parseMlsDevGroupMarker(value: unknown): MlsDevGroupMarker;
 export declare function parseMlsDevGroupRoster(value: unknown): readonly MlsDevGroupRosterEntry[];
+/** Hold, then close (owner ruling 2026-10-16; mls-dev-groups.md): how long an erased member's devices wait for a commit. */
+export declare const MLS_DEV_ROOM_REMOVAL_DEADLINE_MS: number;
+export interface MlsDevRoomRemovalEntry {
+    readonly principalId: string;
+    /** The erased principal's devices still in the MLS roster; any other admitted device may commit their removal. */
+    readonly deviceIds: readonly string[];
+    readonly deadlineAtMs: number;
+}
+/** `conversations/{id}.mlsRemoval`: `pending` holds every send; `closing` and `closed` refuse every later send and roster
+ * change. `closing` still lists the erased principals whose Canon membership the scheduler has yet to remove. */
+export interface MlsDevRoomRemoval {
+    readonly version: 1;
+    readonly status: 'pending' | 'closing' | 'closed';
+    readonly pending: readonly MlsDevRoomRemovalEntry[];
+    readonly closedAtMs: number | null;
+}
+export declare function parseMlsDevRoomRemoval(value: unknown): MlsDevRoomRemoval;
 export declare function parseMlsDevGroupPreconditions(value: unknown): MlsDevGroupPreconditions;
 export declare function parseMlsDevGroupUnsignedControl(value: unknown): MlsDevGroupUnsignedControl;
 export declare function parseMlsDevGroupControl(value: unknown): MlsDevGroupControl;
 export declare function parseMlsDevGroupAcceptedControl(value: unknown): MlsDevGroupAcceptedControl;
+export declare function parseMlsDevGroupAdmissionsQuery(value: unknown): MlsDevGroupAdmissionsQuery;
+export declare function parseMlsDevGroupAdmissionsResult(value: unknown): MlsDevGroupAdmissionsResult;
 export declare function parseMlsDevGroupQuery(value: unknown): MlsDevGroupQuery;
 export declare function parseMlsDevGroupQueryResult(value: unknown): MlsDevGroupQueryResult;
 export declare function parseMlsDevGroupContext(value: unknown): MlsDevGroupContext;

package/dist/internal/backend-contracts/mlsDevGroupFeed.d.ts

@@ -1,5 +1,6 @@
 import { type MlsDevGroupAcceptedControl, type MlsDevGroupMarker, type MlsDevGroupRosterEntry } from './mlsDevGroup.js';
-import { MLS_DEV_TEXT_PROTOCOL, type MlsDevApplicationEnvelope, type MlsDevApplicationReceipt } from './mlsDevApplication.js';
+import { type MlsDevTextProtocol, type MlsDevApplicationEnvelope, type MlsDevApplicationReceipt } from './mlsDevApplication.js';
+import { type MlsDevFeedReceiptProof } from './mlsDevFeedReceipt.js';
 export declare const MLS_DEV_GROUP_FEED_MAX_ENTRIES = 4;
 export declare const MLS_DEV_GROUP_FEED_MAX_BYTES: number;
 export interface MlsDevGroupFeedControlEntry {
@@ -7,6 +8,8 @@ export interface MlsDevGroupFeedControlEntry {
     readonly ordinal: number;
     readonly kind: 'control';
     readonly accepted: MlsDevGroupAcceptedControl;
+    /** Canon's signature over the time it accepted this entry (mls-signed-acceptance.md). */
+    readonly receiptProof?: MlsDevFeedReceiptProof;
 }
 export interface MlsDevGroupFeedApplicationEntry {
     readonly version: 1;
@@ -14,6 +17,7 @@ export interface MlsDevGroupFeedApplicationEntry {
     readonly kind: 'application';
     readonly receipt: MlsDevApplicationReceipt;
     readonly envelope: MlsDevApplicationEnvelope;
+    readonly receiptProof?: MlsDevFeedReceiptProof;
 }
 export type MlsDevGroupFeedEntry = MlsDevGroupFeedControlEntry | MlsDevGroupFeedApplicationEntry;
 export interface MlsDevGroupFeedQuery {
@@ -25,7 +29,7 @@ export interface MlsDevGroupFeedQuery {
 }
 export interface MlsDevGroupFeedResult {
     readonly version: 1;
-    readonly protocol: typeof MLS_DEV_TEXT_PROTOCOL;
+    readonly protocol: MlsDevTextProtocol;
     readonly conversationId: string;
     readonly marker: MlsDevGroupMarker | null;
     readonly membershipRevision: number;