@canonmsg/backend-contracts 5.2.0 → 5.4.0

package/dist/canon-verbs.schema.json

@@ -13,6 +13,23 @@
       },
       "description": "Client idempotency key (<= 160 chars / 256 UTF-8 bytes; no slashes, control chars, '.', '..', __x__). Same id + identical payload replays idempotently; different payload -> 409 MESSAGE_ID_EXISTS."
     },
+    "groupInviteRequirements": {
+      "type": "object",
+      "description": "Independent gates on a pending group invite. policyApproval is social consent; ownerSessionSetup means the agent owner must choose the runtime session configuration before membership is activated.",
+      "required": [
+        "policyApproval",
+        "ownerSessionSetup"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "policyApproval": {
+          "type": "boolean"
+        },
+        "ownerSessionSetup": {
+          "type": "boolean"
+        }
+      }
+    },
     "selfContext": {
       "type": "object",
       "description": "Private note-to-self attached to a cross-conversation send. Visible only to the sending agent (surfaced back as provenance.activeSelfContext); never shown to recipients. Enforced by functions/src/utils/selfContexts.ts.",
@@ -1471,7 +1488,7 @@
     },
     "create_group_input": {
       "type": "object",
-      "description": "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests, policy-denied members are skipped (see the result). At least one member must be directly addable — a creator-only group is rejected with error code CREATE_GROUP_NO_ADDABLE_MEMBERS. v1 scoping: coding-agent members that require explicit session setup are skipped (reason setup-required), and a creator that itself requires setup cannot create groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED); only the owner can set such agents up, from the app. Under MLS, membership changes are Add/Remove proposals + Commit — a group operation is a cryptographic state change, not a codec swap.",
+      "description": "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests; agents needing explicit group-session setup become pending owner requests; hard-denied members are skipped (see the result). A creator-only group is valid when at least one requested member has a pending invite. A creator that itself requires setup cannot create groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED). Under MLS, membership changes are Add/Remove proposals + Commit — a group operation is a cryptographic state change, not a codec swap.",
       "required": [
         "name",
         "memberIds"
@@ -1497,10 +1514,13 @@
     },
     "create_group_result": {
       "type": "object",
-      "description": "Staged admission: the group exists with the directly-addable members; `pending` lists approval-required members whose group_invite awaits their approver; `skipped` lists members whose policy denied the add (reasons include owner-only, blocked, not-found, setup-required).",
+      "description": "Staged admission: the group exists with the directly-added members; `pending` lists group_invite requests awaiting policy approval, owner session setup, or both; `skipped` lists hard-denied targets.",
       "required": [
         "status",
-        "conversationId"
+        "conversationId",
+        "added",
+        "pending",
+        "skipped"
       ],
       "additionalProperties": true,
       "properties": {
@@ -1510,13 +1530,20 @@
         "conversationId": {
           "type": "string"
         },
+        "added": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "pending": {
           "type": "array",
           "items": {
             "type": "object",
             "required": [
               "userId",
-              "requestId"
+              "requestId",
+              "requirements"
             ],
             "additionalProperties": true,
             "properties": {
@@ -1525,6 +1552,9 @@
               },
               "requestId": {
                 "type": "string"
+              },
+              "requirements": {
+                "$ref": "#/$defs/groupInviteRequirements"
               }
             }
           }
@@ -1552,7 +1582,7 @@
     },
     "add_member_input": {
       "type": "object",
-      "description": "v1 scoping: a coding-agent target that requires explicit session setup is rejected (only its owner can set it up, from the app). Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write — the verb semantics are stable, the mechanism is not.",
+      "description": "A target needing policy approval and/or explicit owner session setup yields one pending group_invite. Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write — the verb semantics are stable, the mechanism is not.",
       "required": [
         "conversationId",
         "userId"
@@ -1570,7 +1600,7 @@
       }
     },
     "add_member_result": {
-      "description": "approval-required targets yield a pending group_invite contact request routed to their approver.",
+      "description": "Targets needing policy approval and/or owner session setup yield one pending group_invite routed to the target or agent owner.",
       "oneOf": [
         {
           "type": "object",
@@ -1588,7 +1618,8 @@
           "type": "object",
           "required": [
             "status",
-            "requestId"
+            "requestId",
+            "requirements"
           ],
           "additionalProperties": true,
           "properties": {
@@ -1597,6 +1628,9 @@
             },
             "requestId": {
               "type": "string"
+            },
+            "requirements": {
+              "$ref": "#/$defs/groupInviteRequirements"
             }
           }
         }
@@ -1901,6 +1935,11 @@
           "type": "string",
           "pattern": "^[A-Za-z0-9_.:-]{1,160}$"
         },
+        "messageId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_.:-]{1,160}$",
+          "description": "The triggering message this silence answers, so the record cannot be misread against a later message."
+        },
         "reason": {
           "type": "string",
           "maxLength": 500,

package/dist/cjs/contactRequest.js

@@ -1,6 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.readGroupInviteRequirements = readGroupInviteRequirements;
 exports.serializeContactRequest = serializeContactRequest;
+function readGroupInviteRequirements(value) {
+    const record = isRecord(value) ? value : null;
+    if (typeof record?.policyApproval !== 'boolean'
+        || typeof record.ownerSessionSetup !== 'boolean') {
+        throw new TypeError('Invalid group invite requirements');
+    }
+    return {
+        policyApproval: record.policyApproval,
+        ownerSessionSetup: record.ownerSessionSetup,
+    };
+}
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -85,7 +97,15 @@ function serializeContactRequest(requestId, data) {
         expiresAt: normalizeTimestamp(data.expiresAt),
     };
     if (groupContext) {
+        let requirements;
+        try {
+            requirements = readGroupInviteRequirements(data.requirements);
+        }
+        catch {
+            return null;
+        }
         payload.groupContext = groupContext;
+        payload.requirements = requirements;
     }
     if (data.targetUserType === 'ai_agent') {
         payload.targetOwnerId = data.targetOwnerId;

package/dist/cjs/verbContract.js

@@ -266,10 +266,9 @@ function normalizeVerbNativeMetadata(value) {
     return Object.keys(native).length > 0 ? native : undefined;
 }
 /**
- * Error code on the 400 a create_group receives when NO member is directly
- * addable (approval-required members can only be invited to an existing
- * group; a creator-only group is not created). The error detail carries the
- * partition: pendingRequired[] and skipped[].
+ * Error code on the 400 a create_group receives when no requested member can
+ * be added or invited. A creator-only group with at least one valid pending
+ * invite is allowed; the error detail carries the attempted partition.
  */
 exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = 'CREATE_GROUP_NO_ADDABLE_MEMBERS';
 /**

package/dist/cjs/verbSchemas.js

@@ -34,6 +34,18 @@ exports.getVerbInputSchema = getVerbInputSchema;
 exports.getVerbResultSchema = getVerbResultSchema;
 const verbContract_js_1 = require("./verbContract.js");
 const REF = (def) => ({ $ref: `#/$defs/${def}` });
+const groupInviteRequirementsDef = {
+    type: 'object',
+    description: 'Independent gates on a pending group invite. policyApproval is social '
+        + 'consent; ownerSessionSetup means the agent owner must choose the '
+        + 'runtime session configuration before membership is activated.',
+    required: ['policyApproval', 'ownerSessionSetup'],
+    additionalProperties: false,
+    properties: {
+        policyApproval: { type: 'boolean' },
+        ownerSessionSetup: { type: 'boolean' },
+    },
+};
 const selfContextDef = {
     type: 'object',
     description: 'Private note-to-self attached to a cross-conversation send. Visible only to the '
@@ -820,13 +832,11 @@ const create_group_input = {
     description: "Create a group conversation. Each target's groupJoinPolicy is enforced "
         + 'server-side with staged admission: directly-addable members join at '
         + 'creation, approval-required members become pending group_invite '
-        + 'requests, policy-denied members are skipped (see the result). At '
-        + 'least one member must be directly addable — a creator-only group is '
-        + 'rejected with error code CREATE_GROUP_NO_ADDABLE_MEMBERS. v1 scoping: '
-        + 'coding-agent members that require explicit session setup are skipped '
-        + '(reason setup-required), and a creator that itself requires setup '
-        + 'cannot create groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED); only '
-        + 'the owner can set such agents up, from the app. Under MLS, membership '
+        + 'requests; agents needing explicit group-session setup become pending '
+        + 'owner requests; hard-denied members are skipped (see the result). A '
+        + 'creator-only group is valid when at least one requested member has a '
+        + 'pending invite. A creator that itself requires setup cannot create '
+        + 'groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED). Under MLS, membership '
         + 'changes are Add/Remove proposals + Commit — a group operation is a '
         + 'cryptographic state change, not a codec swap.',
     required: ['name', 'memberIds'],
@@ -844,24 +854,28 @@ const create_group_input = {
 };
 const create_group_result = {
     type: 'object',
-    description: 'Staged admission: the group exists with the directly-addable members; '
-        + '`pending` lists approval-required members whose group_invite awaits '
-        + 'their approver; `skipped` lists members whose policy denied the add '
-        + '(reasons include owner-only, blocked, not-found, setup-required).',
-    required: ['status', 'conversationId'],
+    description: 'Staged admission: the group exists with the directly-added members; '
+        + '`pending` lists group_invite requests awaiting policy approval, owner '
+        + 'session setup, or both; `skipped` lists hard-denied targets.',
+    required: ['status', 'conversationId', 'added', 'pending', 'skipped'],
     additionalProperties: true,
     properties: {
         status: { const: 'created' },
         conversationId: { type: 'string' },
+        added: {
+            type: 'array',
+            items: { type: 'string' },
+        },
         pending: {
             type: 'array',
             items: {
                 type: 'object',
-                required: ['userId', 'requestId'],
+                required: ['userId', 'requestId', 'requirements'],
                 additionalProperties: true,
                 properties: {
                     userId: { type: 'string' },
                     requestId: { type: 'string' },
+                    requirements: REF('groupInviteRequirements'),
                 },
             },
         },
@@ -881,11 +895,10 @@ const create_group_result = {
 };
 const add_member_input = {
     type: 'object',
-    description: 'v1 scoping: a coding-agent target that requires explicit session setup '
-        + 'is rejected (only its owner can set it up, from the app). Under MLS '
-        + 'an add is an Add proposal + Commit (new epoch), not a server-side '
-        + 'membership write — the verb semantics are stable, the mechanism is '
-        + 'not.',
+    description: 'A target needing policy approval and/or explicit owner session setup '
+        + 'yields one pending group_invite. Under MLS an add is an Add proposal '
+        + '+ Commit (new epoch), not a server-side membership write — the verb '
+        + 'semantics are stable, the mechanism is not.',
     required: ['conversationId', 'userId'],
     additionalProperties: false,
     properties: {
@@ -894,8 +907,8 @@ const add_member_input = {
     },
 };
 const add_member_result = {
-    description: 'approval-required targets yield a pending group_invite contact request '
-        + 'routed to their approver.',
+    description: 'Targets needing policy approval and/or owner session setup yield one '
+        + 'pending group_invite routed to the target or agent owner.',
     oneOf: [
         {
             type: 'object',
@@ -905,9 +918,13 @@ const add_member_result = {
         },
         {
             type: 'object',
-            required: ['status', 'requestId'],
+            required: ['status', 'requestId', 'requirements'],
             additionalProperties: true,
-            properties: { status: { const: 'pending' }, requestId: { type: 'string' } },
+            properties: {
+                status: { const: 'pending' },
+                requestId: { type: 'string' },
+                requirements: REF('groupInviteRequirements'),
+            },
         },
     ],
 };
@@ -1065,6 +1082,11 @@ const no_reply_input = {
     additionalProperties: false,
     properties: {
         conversationId: { type: 'string', pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeId },
+        messageId: {
+            type: 'string',
+            pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeId,
+            description: 'The triggering message this silence answers, so the record cannot be misread against a later message.',
+        },
         reason: {
             type: 'string',
             maxLength: verbContract_js_1.VERB_LIMITS.noReplyReasonChars,
@@ -1095,6 +1117,7 @@ exports.CANON_VERBS_JSON_SCHEMA = {
         + 'deliberately NOT verbs — they stay host-mediated.',
     $defs: {
         messageId: messageIdDef,
+        groupInviteRequirements: groupInviteRequirementsDef,
         selfContext: selfContextDef,
         sessionSelection: sessionSelectionDef,
         mediaAttachment: mediaAttachmentDef,

package/dist/cjs/verbWire.js

@@ -118,7 +118,7 @@ exports.VERB_WIRE_ENVELOPE_FIELDS = {
     list_contacts: { required: [], optional: [] },
     list_contact_requests: { required: [], optional: [] },
     list_conversations: { required: [], optional: ['limit'] },
-    no_reply: { required: [], optional: ['conversationId'] },
+    no_reply: { required: [], optional: ['conversationId', 'messageId'] },
 };
 // ---------------------------------------------------------------------------
 // JSON Schema
@@ -478,7 +478,7 @@ function projectVerbIntentToWire(verb, intent, options) {
             break;
         }
         case 'no_reply': {
-            envelope = compact({ conversationId: input.conversationId });
+            envelope = compact({ conversationId: input.conversationId, messageId: input.messageId });
             value = compact({ reason: input.reason });
             break;
         }
@@ -620,7 +620,7 @@ function mergeVerbWireToIntent(request) {
         case 'list_conversations':
             return compact({ limit: envelope.limit });
         case 'no_reply':
-            return compact({ conversationId: envelope.conversationId, reason: value.reason });
+            return compact({ conversationId: envelope.conversationId, messageId: envelope.messageId, reason: value.reason });
     }
 }
 /**

package/dist/contactRequest.d.ts

@@ -1,4 +1,13 @@
 export type SerializedContactRequestStatus = 'pending' | 'approved' | 'rejected' | 'expired';
+/**
+ * Independent gates that must be satisfied before a pending group invite can
+ * add its target.
+ */
+export interface GroupInviteRequirements {
+    policyApproval: boolean;
+    ownerSessionSetup: boolean;
+}
+export declare function readGroupInviteRequirements(value: unknown): GroupInviteRequirements;
 export interface SerializedContactRequest {
     id: string;
     requesterId: string;
@@ -18,6 +27,8 @@ export interface SerializedContactRequest {
         conversationId: string;
         groupName: string | null;
     };
+    /** Present for group_invite payloads; omitted for DM requests. */
+    requirements?: GroupInviteRequirements;
     createdAt: string | null;
     resolvedAt?: string | null;
     expiresAt?: string | null;

package/dist/contactRequest.js

@@ -1,3 +1,14 @@
+export function readGroupInviteRequirements(value) {
+    const record = isRecord(value) ? value : null;
+    if (typeof record?.policyApproval !== 'boolean'
+        || typeof record.ownerSessionSetup !== 'boolean') {
+        throw new TypeError('Invalid group invite requirements');
+    }
+    return {
+        policyApproval: record.policyApproval,
+        ownerSessionSetup: record.ownerSessionSetup,
+    };
+}
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -82,7 +93,15 @@ export function serializeContactRequest(requestId, data) {
         expiresAt: normalizeTimestamp(data.expiresAt),
     };
     if (groupContext) {
+        let requirements;
+        try {
+            requirements = readGroupInviteRequirements(data.requirements);
+        }
+        catch {
+            return null;
+        }
         payload.groupContext = groupContext;
+        payload.requirements = requirements;
     }
     if (data.targetUserType === 'ai_agent') {
         payload.targetOwnerId = data.targetOwnerId;

package/dist/verbContract.d.ts

@@ -42,6 +42,7 @@
  * `findVerbByteLimitViolations()` (or equivalent checks from the emitted
  * canon-verbs.limits.json) after schema validation.
  */
+import type { GroupInviteRequirements } from './contactRequest.js';
 /** Identifier for this contract document. */
 export declare const CANON_VERBS_SCHEMA_VERSION = "canon.verbs.v1";
 /** $id of the emitted JSON Schema bundle. */
@@ -602,27 +603,29 @@ export interface CreateGroupInput {
      * groupJoinPolicy is enforced server-side. */
     memberIds: string[];
 }
+export interface PendingGroupInviteResult {
+    userId: string;
+    requestId: string;
+    requirements: GroupInviteRequirements;
+}
 export interface CreateGroupResult {
     status: 'created';
     conversationId: string;
-    /** approval-required members — group_invite requests awaiting their approver. */
-    pending?: Array<{
-        userId: string;
-        requestId: string;
-    }>;
-    /** members the staged create could not admit: policy denials (owner-only,
-     * blocked, not-found, …) and setup-required coding agents (v1 scoping —
-     * only their owner can provide session setup, from the app). */
-    skipped?: Array<{
+    /** Members admitted synchronously during creation. */
+    added: string[];
+    /** group_invite requests awaiting policy approval, owner setup, or both. */
+    pending: PendingGroupInviteResult[];
+    /** Members the staged create could not admit: hard policy denials
+     * (owner-only, blocked, inactive, not-found, …). */
+    skipped: Array<{
         userId: string;
         reason: string;
     }>;
 }
 /**
- * Error code on the 400 a create_group receives when NO member is directly
- * addable (approval-required members can only be invited to an existing
- * group; a creator-only group is not created). The error detail carries the
- * partition: pendingRequired[] and skipped[].
+ * Error code on the 400 a create_group receives when no requested member can
+ * be added or invited. A creator-only group with at least one valid pending
+ * invite is allowed; the error detail carries the attempted partition.
  */
 export declare const CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = "CREATE_GROUP_NO_ADDABLE_MEMBERS";
 /**
@@ -637,12 +640,13 @@ export interface AddMemberInput {
     conversationId: string;
     userId: string;
 }
-/** approval-required targets yield a pending group_invite contact request. */
+/** Policy approval and/or required owner setup yield one pending group invite. */
 export type AddMemberResult = {
     status: 'added';
 } | {
     status: 'pending';
     requestId: string;
+    requirements: GroupInviteRequirements;
 };
 export interface RemoveMemberInput {
     conversationId: string;

package/dist/verbContract.js

@@ -260,10 +260,9 @@ export function normalizeVerbNativeMetadata(value) {
     return Object.keys(native).length > 0 ? native : undefined;
 }
 /**
- * Error code on the 400 a create_group receives when NO member is directly
- * addable (approval-required members can only be invited to an existing
- * group; a creator-only group is not created). The error detail carries the
- * partition: pendingRequired[] and skipped[].
+ * Error code on the 400 a create_group receives when no requested member can
+ * be added or invited. A creator-only group with at least one valid pending
+ * invite is allowed; the error detail carries the attempted partition.
  */
 export const CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = 'CREATE_GROUP_NO_ADDABLE_MEMBERS';
 /**

package/dist/verbSchemas.d.ts

@@ -183,6 +183,20 @@ export declare const CANON_VERBS_JSON_SCHEMA: {
             };
             readonly description: string;
         };
+        readonly groupInviteRequirements: {
+            readonly type: "object";
+            readonly description: string;
+            readonly required: readonly ["policyApproval", "ownerSessionSetup"];
+            readonly additionalProperties: false;
+            readonly properties: {
+                readonly policyApproval: {
+                    readonly type: "boolean";
+                };
+                readonly ownerSessionSetup: {
+                    readonly type: "boolean";
+                };
+            };
+        };
         readonly selfContext: {
             readonly type: "object";
             readonly description: string;
@@ -1404,7 +1418,7 @@ export declare const CANON_VERBS_JSON_SCHEMA: {
         readonly create_group_result: {
             readonly type: "object";
             readonly description: string;
-            readonly required: readonly ["status", "conversationId"];
+            readonly required: readonly ["status", "conversationId", "added", "pending", "skipped"];
             readonly additionalProperties: true;
             readonly properties: {
                 readonly status: {
@@ -1413,11 +1427,17 @@ export declare const CANON_VERBS_JSON_SCHEMA: {
                 readonly conversationId: {
                     readonly type: "string";
                 };
+                readonly added: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                    };
+                };
                 readonly pending: {
                     readonly type: "array";
                     readonly items: {
                         readonly type: "object";
-                        readonly required: readonly ["userId", "requestId"];
+                        readonly required: readonly ["userId", "requestId", "requirements"];
                         readonly additionalProperties: true;
                         readonly properties: {
                             readonly userId: {
@@ -1426,6 +1446,9 @@ export declare const CANON_VERBS_JSON_SCHEMA: {
                             readonly requestId: {
                                 readonly type: "string";
                             };
+                            readonly requirements: {
+                                $ref: string;
+                            };
                         };
                     };
                 };
@@ -1476,7 +1499,7 @@ export declare const CANON_VERBS_JSON_SCHEMA: {
                 };
             }, {
                 readonly type: "object";
-                readonly required: readonly ["status", "requestId"];
+                readonly required: readonly ["status", "requestId", "requirements"];
                 readonly additionalProperties: true;
                 readonly properties: {
                     readonly status: {
@@ -1485,6 +1508,9 @@ export declare const CANON_VERBS_JSON_SCHEMA: {
                     readonly requestId: {
                         readonly type: "string";
                     };
+                    readonly requirements: {
+                        $ref: string;
+                    };
                 };
             }];
         };
@@ -1709,6 +1735,11 @@ export declare const CANON_VERBS_JSON_SCHEMA: {
                     readonly type: "string";
                     readonly pattern: "^[A-Za-z0-9_.:-]{1,160}$";
                 };
+                readonly messageId: {
+                    readonly type: "string";
+                    readonly pattern: "^[A-Za-z0-9_.:-]{1,160}$";
+                    readonly description: "The triggering message this silence answers, so the record cannot be misread against a later message.";
+                };
                 readonly reason: {
                     readonly type: "string";
                     readonly maxLength: 500;

package/dist/verbSchemas.js

@@ -29,6 +29,18 @@
  */
 import { CANON_VERBS_SCHEMA_ID, CANON_VERB_NAMES, SELF_CONTEXT_TYPE, VERB_ID_PATTERNS, VERB_LIMITS, } from './verbContract.js';
 const REF = (def) => ({ $ref: `#/$defs/${def}` });
+const groupInviteRequirementsDef = {
+    type: 'object',
+    description: 'Independent gates on a pending group invite. policyApproval is social '
+        + 'consent; ownerSessionSetup means the agent owner must choose the '
+        + 'runtime session configuration before membership is activated.',
+    required: ['policyApproval', 'ownerSessionSetup'],
+    additionalProperties: false,
+    properties: {
+        policyApproval: { type: 'boolean' },
+        ownerSessionSetup: { type: 'boolean' },
+    },
+};
 const selfContextDef = {
     type: 'object',
     description: 'Private note-to-self attached to a cross-conversation send. Visible only to the '
@@ -815,13 +827,11 @@ const create_group_input = {
     description: "Create a group conversation. Each target's groupJoinPolicy is enforced "
         + 'server-side with staged admission: directly-addable members join at '
         + 'creation, approval-required members become pending group_invite '
-        + 'requests, policy-denied members are skipped (see the result). At '
-        + 'least one member must be directly addable — a creator-only group is '
-        + 'rejected with error code CREATE_GROUP_NO_ADDABLE_MEMBERS. v1 scoping: '
-        + 'coding-agent members that require explicit session setup are skipped '
-        + '(reason setup-required), and a creator that itself requires setup '
-        + 'cannot create groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED); only '
-        + 'the owner can set such agents up, from the app. Under MLS, membership '
+        + 'requests; agents needing explicit group-session setup become pending '
+        + 'owner requests; hard-denied members are skipped (see the result). A '
+        + 'creator-only group is valid when at least one requested member has a '
+        + 'pending invite. A creator that itself requires setup cannot create '
+        + 'groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED). Under MLS, membership '
         + 'changes are Add/Remove proposals + Commit — a group operation is a '
         + 'cryptographic state change, not a codec swap.',
     required: ['name', 'memberIds'],
@@ -839,24 +849,28 @@ const create_group_input = {
 };
 const create_group_result = {
     type: 'object',
-    description: 'Staged admission: the group exists with the directly-addable members; '
-        + '`pending` lists approval-required members whose group_invite awaits '
-        + 'their approver; `skipped` lists members whose policy denied the add '
-        + '(reasons include owner-only, blocked, not-found, setup-required).',
-    required: ['status', 'conversationId'],
+    description: 'Staged admission: the group exists with the directly-added members; '
+        + '`pending` lists group_invite requests awaiting policy approval, owner '
+        + 'session setup, or both; `skipped` lists hard-denied targets.',
+    required: ['status', 'conversationId', 'added', 'pending', 'skipped'],
     additionalProperties: true,
     properties: {
         status: { const: 'created' },
         conversationId: { type: 'string' },
+        added: {
+            type: 'array',
+            items: { type: 'string' },
+        },
         pending: {
             type: 'array',
             items: {
                 type: 'object',
-                required: ['userId', 'requestId'],
+                required: ['userId', 'requestId', 'requirements'],
                 additionalProperties: true,
                 properties: {
                     userId: { type: 'string' },
                     requestId: { type: 'string' },
+                    requirements: REF('groupInviteRequirements'),
                 },
             },
         },
@@ -876,11 +890,10 @@ const create_group_result = {
 };
 const add_member_input = {
     type: 'object',
-    description: 'v1 scoping: a coding-agent target that requires explicit session setup '
-        + 'is rejected (only its owner can set it up, from the app). Under MLS '
-        + 'an add is an Add proposal + Commit (new epoch), not a server-side '
-        + 'membership write — the verb semantics are stable, the mechanism is '
-        + 'not.',
+    description: 'A target needing policy approval and/or explicit owner session setup '
+        + 'yields one pending group_invite. Under MLS an add is an Add proposal '
+        + '+ Commit (new epoch), not a server-side membership write — the verb '
+        + 'semantics are stable, the mechanism is not.',
     required: ['conversationId', 'userId'],
     additionalProperties: false,
     properties: {
@@ -889,8 +902,8 @@ const add_member_input = {
     },
 };
 const add_member_result = {
-    description: 'approval-required targets yield a pending group_invite contact request '
-        + 'routed to their approver.',
+    description: 'Targets needing policy approval and/or owner session setup yield one '
+        + 'pending group_invite routed to the target or agent owner.',
     oneOf: [
         {
             type: 'object',
@@ -900,9 +913,13 @@ const add_member_result = {
         },
         {
             type: 'object',
-            required: ['status', 'requestId'],
+            required: ['status', 'requestId', 'requirements'],
             additionalProperties: true,
-            properties: { status: { const: 'pending' }, requestId: { type: 'string' } },
+            properties: {
+                status: { const: 'pending' },
+                requestId: { type: 'string' },
+                requirements: REF('groupInviteRequirements'),
+            },
         },
     ],
 };
@@ -1060,6 +1077,11 @@ const no_reply_input = {
     additionalProperties: false,
     properties: {
         conversationId: { type: 'string', pattern: VERB_ID_PATTERNS.runtimeId },
+        messageId: {
+            type: 'string',
+            pattern: VERB_ID_PATTERNS.runtimeId,
+            description: 'The triggering message this silence answers, so the record cannot be misread against a later message.',
+        },
         reason: {
             type: 'string',
             maxLength: VERB_LIMITS.noReplyReasonChars,
@@ -1090,6 +1112,7 @@ export const CANON_VERBS_JSON_SCHEMA = {
         + 'deliberately NOT verbs — they stay host-mediated.',
     $defs: {
         messageId: messageIdDef,
+        groupInviteRequirements: groupInviteRequirementsDef,
         selfContext: selfContextDef,
         sessionSelection: sessionSelectionDef,
         mediaAttachment: mediaAttachmentDef,

package/dist/verbWire.js

@@ -112,7 +112,7 @@ export const VERB_WIRE_ENVELOPE_FIELDS = {
     list_contacts: { required: [], optional: [] },
     list_contact_requests: { required: [], optional: [] },
     list_conversations: { required: [], optional: ['limit'] },
-    no_reply: { required: [], optional: ['conversationId'] },
+    no_reply: { required: [], optional: ['conversationId', 'messageId'] },
 };
 // ---------------------------------------------------------------------------
 // JSON Schema
@@ -472,7 +472,7 @@ export function projectVerbIntentToWire(verb, intent, options) {
             break;
         }
         case 'no_reply': {
-            envelope = compact({ conversationId: input.conversationId });
+            envelope = compact({ conversationId: input.conversationId, messageId: input.messageId });
             value = compact({ reason: input.reason });
             break;
         }
@@ -614,7 +614,7 @@ export function mergeVerbWireToIntent(request) {
         case 'list_conversations':
             return compact({ limit: envelope.limit });
         case 'no_reply':
-            return compact({ conversationId: envelope.conversationId, reason: value.reason });
+            return compact({ conversationId: envelope.conversationId, messageId: envelope.messageId, reason: value.reason });
     }
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/backend-contracts",
-  "version": "5.2.0",
+  "version": "5.4.0",
   "description": "Canon backend contract helpers shared by Functions and stream-service",
   "type": "module",
   "main": "dist/cjs/index.js",