@joe-broadhead/messaging 0.8.0 → 0.9.0

package/dist/bin/messaging-relay.js

@@ -6029,6 +6029,7 @@ var init_errors = __esmMin((() => {
 		"jelly_unavailable",
 		"log_conflict",
 		"conv_conflict",
+		"conflict",
 		"stale_epoch",
 		"device_limit",
 		"admission_required",
@@ -7005,6 +7006,12 @@ var init_conversation = __esmMin((() => {
 function grantProblem(grant) {
 	const own = "person" in grant.subject && grant.subject.person === grant.person;
 	if ("conv" in grant.subject && (grant.chat !== void 0 || grant.trustedUntil !== void 0 || grant.discoverable !== void 0)) return "a conversation grant sets only ask and agentMail";
+	if ("relation" in grant.subject) {
+		if (grant.agentMail !== void 0 || grant.trustedUntil !== void 0 || grant.discoverable !== void 0) return "a relation grant sets only chat or ask";
+		if (grant.subject.relation === "outside" && grant.ask !== void 0) return "the outside relation grant sets only chat";
+		if (grant.subject.relation === "outside" && grant.chat === "muted") return "the outside relation grant sets chat open or blocked";
+		if (grant.subject.relation === "org" && grant.chat !== void 0) return "the org relation grant sets only ask";
+	}
 	if (own && (grant.chat !== void 0 || grant.agentMail !== void 0 || grant.ask !== void 0 || grant.trustedUntil !== void 0)) return "a grant about its own person sets only discoverable";
 	if (!own && grant.discoverable !== void 0) return "discoverable is set only on a grant about its own person";
 	if (grant.trustedUntil !== void 0) {
@@ -7017,7 +7024,7 @@ function cardProblem(card) {
 	if (card.from === card.to) return "a card is about another person";
 	if (card.can.trustedUntil !== void 0 && card.can.ask !== "open") return "trustedUntil needs ask open";
 }
-var ChatLevel, AgentMailLevel, AskLevel, GrantSubject, GrantSync, CardCan, CardData, CardGetData;
+var ChatLevel, AgentMailLevel, AskLevel, GrantRelation, GrantSubject, GrantSync, CardCan, CardData, CardGetData;
 var init_consent$2 = __esmMin((() => {
 	init_zod();
 	init_common();
@@ -7034,7 +7041,12 @@ var init_consent$2 = __esmMin((() => {
 		"request",
 		"no"
 	]);
-	GrantSubject = union$1([strictObject({ person: PersonId }), strictObject({ conv: ConvId })]);
+	GrantRelation = _enum(["outside", "org"]);
+	GrantSubject = union$1([
+		strictObject({ person: PersonId }),
+		strictObject({ conv: ConvId }),
+		strictObject({ relation: GrantRelation })
+	]);
 	object({
 		v: literal(PROTOCOL),
 		realm: RealmId,
@@ -7483,6 +7495,7 @@ var init_directory_frames = __esmMin((() => {
 	init_common();
 	init_directory$1();
 	init_realm$1();
+	init_conversation();
 	init_jelly$2();
 	Req$1 = string$1().min(1).max(64);
 	Size = number$1().int().positive();
@@ -7580,7 +7593,8 @@ var init_directory_frames = __esmMin((() => {
 		url: WakeUrl,
 		ticket: Jws.refine((ticket) => ticket.length <= WAKE_TICKET_BYTES, { message: `at most ${WAKE_TICKET_BYTES} bytes` }),
 		agents: array(SessionName).max(64),
-		awaiting: array(Ulid).max(500)
+		awaiting: array(Ulid).max(500),
+		dms: array(ConvId).max(256).optional()
 	});
 	WakeDisarmFrame = object({
 		t: literal("wake.disarm"),
@@ -7671,7 +7685,7 @@ var init_directory_frames = __esmMin((() => {
 	]);
 }));
 // packages/core/dist/schema/ipc/device.js
-var BindingState, RealmAlarmSummary, DeviceStatus, DeviceChangeView, DeviceListEntry, LinkText, Sas, LinkPreview, KeyFingerprint, LoginUserCode, LoginPurpose, LoginKind, LoginShown, LoginState, DeviceRemoveParams, DeviceApproveParams, IdentityReplaceParams, SignInStep, DirectoryEraseParams, DEVICE_METHODS;
+var BindingState, RealmAlarmSummary, DeviceStatus, DeviceChangeView, PresenceFeature, DeviceListEntry, LinkText, Sas, LinkPreview, KeyFingerprint, LoginUserCode, LoginPurpose, LoginKind, LoginShown, LoginState, DeviceRemoveParams, DeviceApproveParams, IdentityReplaceParams, SignInStep, DirectoryEraseParams, DEVICE_METHODS;
 var init_device = __esmMin((() => {
 	init_zod();
 	init_common();
@@ -7722,6 +7736,7 @@ var init_device = __esmMin((() => {
 		approver: MachineLabel.optional(),
 		at: Millis
 	});
+	PresenceFeature = string$1().regex(/^[a-z][a-z0-9-]{0,31}$/, "a feature name");
 	DeviceListEntry = object({
 		device: MachineId,
 		label: MachineLabel,
@@ -7740,7 +7755,8 @@ var init_device = __esmMin((() => {
 			at: Millis,
 			reason: UnbindReason,
 			by: MachineId
-		}).optional()
+		}).optional(),
+		features: array(PresenceFeature).max(32).optional()
 	});
 	LinkText = string$1().min(1).max(2048);
 	Sas = string$1().regex(/^[0-9]{6}$/, "six digits");
@@ -7947,7 +7963,10 @@ var init_device = __esmMin((() => {
 	};
 }));
 // packages/core/dist/schema/ipc/shapes.js
-var SessionKey, SendExpect, DirectoryEntry, PeerRef, InboxItem, TaskFollowUp, TaskRecord, SendTarget, SendResult;
+function taskViewRules(schema) {
+	return schema.refine((r) => r.signIn === void 0 || r.task.status.state === "TASK_STATE_AUTH_REQUIRED", "signIn is for an AUTH_REQUIRED task").refine((r) => r.refusal === void 0 || r.task.status.state === "TASK_STATE_REJECTED", "refusal is for a REJECTED task").refine((r) => r.question === void 0 || r.role === "executor" && (r.task.status.state === "TASK_STATE_AUTH_REQUIRED" || r.task.status.state === "TASK_STATE_INPUT_REQUIRED"), "question is for the executor's side of an AUTH_REQUIRED or INPUT_REQUIRED task");
+}
+var SessionKey, ActionToken, SendExpect, DirectoryEntry, PeerRef, InboxItem, TaskFollowUp, TASK_SIGN_IN_TOOL_CHARS, TASK_REFUSAL_CHARS, HostLocalId, TaskQuestion, TaskRecordFields, TaskRecord, PersonTask, SendTarget, SendResult;
 var init_shapes = __esmMin((() => {
 	init_zod();
 	init_a2a();
@@ -7956,6 +7975,7 @@ var init_shapes = __esmMin((() => {
 	init_delegation$1();
 	init_errors();
 	SessionKey = string$1().min(1).max(200);
+	ActionToken = string$1().regex(/^[A-Za-z0-9_-]{43}$/, "action token");
 	SendExpect = _enum([
 		"next_turn",
 		"wake",
@@ -8026,7 +8046,14 @@ var init_shapes = __esmMin((() => {
 		stage: DeliveryStage,
 		at: Millis
 	});
-	TaskRecord = object({
+	TASK_SIGN_IN_TOOL_CHARS = LIMITS.previewChars;
+	TASK_REFUSAL_CHARS = LIMITS.requestChars;
+	HostLocalId = string$1().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/, "a plain identifier of at most 200 characters");
+	TaskQuestion = strictObject({
+		sessionId: HostLocalId,
+		approvalId: HostLocalId
+	});
+	TaskRecordFields = object({
 		task: Task$1.extend({ id: Ulid }),
 		role: _enum(["requester", "executor"]),
 		key: SessionKey.describe("local session that owns this side of the task"),
@@ -8034,8 +8061,33 @@ var init_shapes = __esmMin((() => {
 		createdAt: Millis,
 		updatedAt: Millis,
 		chain: DelegationSummary.optional(),
-		followUps: array(TaskFollowUp).min(1).max(LIMITS.taskFollowUps).optional()
-	});
+		followUps: array(TaskFollowUp).min(1).max(LIMITS.taskFollowUps).optional(),
+		agent: SessionName.optional(),
+		person: object({
+			id: PersonId,
+			name: string$1().max(200)
+		}).optional(),
+		org: _enum([
+			"same",
+			"other",
+			"none"
+		]).optional(),
+		signIn: object({
+			tool: string$1().min(1).max(TASK_SIGN_IN_TOOL_CHARS).optional(),
+			by: _enum(["you", "them"])
+		}).optional(),
+		refusal: object({ reason: string$1().min(1).max(TASK_REFUSAL_CHARS) }).optional(),
+		question: TaskQuestion.optional()
+	});
+	TaskRecord = taskViewRules(TaskRecordFields);
+	PersonTask = taskViewRules(TaskRecordFields.omit({ key: true }).extend({
+		key: never().optional(),
+		session: SessionName.describe("this person's agent on this device that holds this side of the task"),
+		cancel: strictObject({
+			name: literal("cancel"),
+			token: ActionToken
+		}).optional()
+	})).refine((r) => r.cancel === void 0 || r.role === "requester", "cancel is for the requester side");
 	SendTarget = SessionAddress;
 	SendResult = object({
 		to: SendTarget,
@@ -8049,13 +8101,14 @@ var init_shapes = __esmMin((() => {
 	});
 }));
 // packages/core/dist/schema/ipc/consent.js
-var GrantTarget, Levels, GrantView, GrantReview, GrantSetParams, AskRequest, ContactRequestView, AgentInvitationRequest, ContactSuggestion, HeldRequest, RequestAnswer, RequestText, PersonReach, RequestAnswerParams, ContactRequestParams, CONSENT_METHODS;
+var GrantTarget, Levels, GrantView, GrantReview, GrantSetParams, RequestAnswer, RequestAction, Actions, AskRequest, ContactRequestView, AgentInvitationRequest, ContactSuggestion, HeldRequest, RequestText, PersonReach, RequestAnswerParams, ContactRequestParams, ReachGroupId, ReachValue, ReachOption, ReachGroup, ReachSnapshot, ReachSetParams, CONSENT_METHODS;
 var init_consent$1 = __esmMin((() => {
 	init_zod();
 	init_common();
 	init_conversation();
 	init_consent$2();
 	init_directory_frames();
+	init_shapes();
 	GrantTarget = union$1([strictObject({ person: PersonId }), strictObject({ conv: ConvId })]);
 	Levels = {
 		chat: ChatLevel.optional(),
@@ -8086,6 +8139,18 @@ var init_consent$1 = __esmMin((() => {
 		...Levels,
 		trust: literal(true).optional()
 	});
+	RequestAnswer = _enum([
+		"once",
+		"always",
+		"accept",
+		"decline",
+		"block"
+	]);
+	RequestAction = strictObject({
+		name: RequestAnswer,
+		token: ActionToken
+	});
+	Actions = { actions: array(RequestAction).max(4).optional() };
 	AskRequest = object({
 		id: Ulid,
 		kind: _enum(["message", "task"]),
@@ -8099,7 +8164,8 @@ var init_consent$1 = __esmMin((() => {
 		to: SessionName,
 		preview: string$1().max(LIMITS.previewChars),
 		at: Millis,
-		exp: Millis
+		exp: Millis,
+		...Actions
 	});
 	ContactRequestView = object({
 		id: Ulid,
@@ -8125,7 +8191,8 @@ var init_consent$1 = __esmMin((() => {
 		}),
 		text: string$1().max(LIMITS.requestChars),
 		at: Millis,
-		exp: Millis
+		exp: Millis,
+		...Actions
 	});
 	AgentInvitationRequest = strictObject({
 		kind: literal("agent-invitation"),
@@ -8133,14 +8200,16 @@ var init_consent$1 = __esmMin((() => {
 		cid: ConvId,
 		from: ParticipantId,
 		to: ParticipantId,
-		at: Millis
+		at: Millis,
+		...Actions
 	});
 	ContactSuggestion = object({
 		id: Ulid,
 		kind: literal("suggestion"),
 		agent: SessionName,
 		email: Email,
-		at: Millis
+		at: Millis,
+		...Actions
 	});
 	HeldRequest = union$1([
 		AskRequest,
@@ -8148,13 +8217,6 @@ var init_consent$1 = __esmMin((() => {
 		ContactSuggestion,
 		AgentInvitationRequest
 	]);
-	RequestAnswer = _enum([
-		"once",
-		"always",
-		"accept",
-		"decline",
-		"block"
-	]);
 	RequestText = string$1().min(1).refine((text) => text.length <= LIMITS.requestChars, { message: `at most ${LIMITS.requestChars} UTF-16 code units` });
 	PersonReach = object({
 		person: PersonId,
@@ -8166,14 +8228,57 @@ var init_consent$1 = __esmMin((() => {
 	RequestAnswerParams = strictObject({
 		id: Ulid,
 		answer: RequestAnswer,
-		all: boolean().optional()
-	});
+		all: boolean().optional(),
+		token: ActionToken.optional()
+	}).refine((p) => p.token === void 0 || p.all !== true, "an action token answers one request: drop all");
 	ContactRequestParams = strictObject({
 		email: Email,
 		text: RequestText,
 		suggestion: Ulid.optional()
 	});
+	ReachGroupId = _enum(["message", "ask"]);
+	ReachValue = _enum([
+		"open",
+		"ask",
+		"never"
+	]);
+	ReachOption = object({
+		value: ReachValue,
+		label: string$1().max(40),
+		description: string$1().max(300)
+	});
+	ReachGroup = object({
+		id: ReachGroupId,
+		label: string$1().max(80),
+		options: array(ReachOption).length(3),
+		value: ReachValue.nullable(),
+		lapsed: ReachValue.optional()
+	});
+	ReachSnapshot = object({
+		revision: string$1().min(1).max(64),
+		available: boolean(),
+		groups: array(ReachGroup).length(2)
+	});
+	ReachSetParams = strictObject({
+		revision: string$1().min(1).max(64),
+		changes: strictObject({
+			message: ReachValue.optional(),
+			ask: ReachValue.optional()
+		})
+	});
 	CONSENT_METHODS = {
+		"reach.get": {
+			params: strictObject({}),
+			result: ReachSnapshot
+		},
+		"reach.set": {
+			params: ReachSetParams,
+			result: ReachSnapshot
+		},
+		"reach.set.preview": {
+			params: ReachSetParams,
+			result: object({ sentence: string$1().max(500) })
+		},
 		"grant.list": {
 			params: strictObject({ subject: GrantTarget.optional() }),
 			result: object({
@@ -8354,6 +8459,7 @@ var init_jelly$1 = __esmMin((() => {
 		}).optional(),
 		line: string$1().max(120).optional(),
 		device: NoticeDevice.optional(),
+		key: string$1().regex(/^task:[0-9A-HJKMNP-TV-Z]{26}$/, "task:<task id>").optional(),
 		at: Millis
 	});
 	NoticeCounts = object({ requests: number$1().int().nonnegative() });
@@ -8424,7 +8530,8 @@ var init_jelly$1 = __esmMin((() => {
 			}),
 			result: object({
 				relay: _enum(["armed", "pending"]),
-				awaiting: number$1().int().nonnegative()
+				awaiting: number$1().int().nonnegative(),
+				dms: number$1().int().nonnegative()
 			})
 		},
 		"wake.disarm": {
@@ -8469,6 +8576,7 @@ var init_conversation_views = __esmMin((() => {
 	init_common();
 	init_conversation();
 	init_a2a();
+	init_shapes();
 	Count$2 = number$1().int().nonnegative().safe();
 	Seq$1 = number$1().int().nonnegative().safe();
 	Name = string$1().max(200);
@@ -8544,7 +8652,11 @@ var init_conversation_views = __esmMin((() => {
 	});
 	TaskView = object({
 		id: Ulid,
-		state: TaskState
+		state: TaskState,
+		cancel: strictObject({
+			name: literal("cancel"),
+			token: ActionToken
+		}).optional()
 	});
 	EventView = object({
 		cid: ConvId,
@@ -8703,6 +8815,11 @@ var init_conversation_views = __esmMin((() => {
 		object({
 			type: literal("gap"),
 			pos: Seq$1
+		}),
+		object({
+			type: literal("task"),
+			pos: Seq$1,
+			task: PersonTask
 		})
 	]).refine((entry) => entry.type !== "event.update" || entry.cid === entry.event.cid && entry.id === entry.event.id, { message: "event.update names the same conversation and event as its projection" });
 }));
@@ -8818,7 +8935,12 @@ var init_conversations = __esmMin((() => {
 		at: Millis,
 		cid: ConvId.optional(),
 		agent: SessionName.optional(),
-		state: _enum(["held", "pending-delivery"])
+		state: _enum([
+			"held",
+			"pending-delivery",
+			"resend",
+			"outdated"
+		])
 	});
 	ConvListParams = strictObject({
 		key: Key,
@@ -9417,12 +9539,31 @@ var init_ipc = __esmMin((() => {
 		message: strictObject({ parts: array(Part$1).min(1).max(LIMITS.partsPerMessage) }).optional(),
 		artifact: Artifact.optional(),
 		append: boolean().optional(),
-		lastChunk: boolean().optional()
-	}), strictObject({
+		lastChunk: boolean().optional(),
+		signIn: strictObject({ tool: string$1().min(1).max(TASK_SIGN_IN_TOOL_CHARS) }).optional()
+	}).refine((p) => p.signIn === void 0 || p.state === "TASK_STATE_AUTH_REQUIRED", "signIn goes with TASK_STATE_AUTH_REQUIRED"), strictObject({
 		key: SessionKey,
 		taskId: Ulid,
-		reason: string$1().max(1e3).optional()
-	}), strictObject({ keys: array(SessionKey).min(1).max(256) }), strictObject({
+		question: TaskQuestion.nullable()
+	}), object({ ok: literal(true) }), strictObject({
+		role: _enum(["requester", "executor"]).optional(),
+		state: TaskState.optional(),
+		session: SessionName.optional().describe("only this agent's tasks"),
+		cursor: string$1().min(1).max(200).optional().describe("opaque; from a previous nextCursor"),
+		limit: number$1().int().min(1).max(100).optional()
+	}), object({
+		tasks: array(PersonTask),
+		nextCursor: string$1().max(200).optional().describe("absent when there are no more pages"),
+		total: number$1().int().nonnegative()
+	}), strictObject({
+		taskId: Ulid,
+		role: _enum(["requester", "executor"]).optional()
+	}), strictObject({
+		key: SessionKey.optional(),
+		taskId: Ulid,
+		reason: string$1().max(1e3).optional(),
+		token: ActionToken.optional()
+	}).refine((p) => p.key === void 0 !== (p.token === void 0), "give exactly one of key or token"), strictObject({ keys: array(SessionKey).min(1).max(256) }), strictObject({
 		name: TeamName,
 		person: PersonName,
 		label: MachineLabel,
@@ -9505,6 +9646,9 @@ var init_ipc = __esmMin((() => {
 		"grant.list",
 		"grant.set",
 		"grant.set.preview",
+		"reach.get",
+		"reach.set",
+		"reach.set.preview",
 		"request.list",
 		"request.answer",
 		"request.answer.preview",
@@ -9514,6 +9658,8 @@ var init_ipc = __esmMin((() => {
 		"notice.subscribe",
 		"notice.list",
 		"notice.ack",
+		"tasks.list",
+		"tasks.get",
 		"device.approve.preview",
 		"device.remove.preview",
 		"identity.replace.preview",
@@ -9668,7 +9814,8 @@ var init_conv_frames = __esmMin((() => {
 	strictObject({
 		t: literal("conv.capabilities"),
 		req: Req,
-		outdated: array(PersonId).max(LIMITS.convOpParticipants)
+		outdated: array(PersonId).max(LIMITS.convOpParticipants),
+		unknown: array(PersonId).min(1).max(LIMITS.convOpParticipants).optional()
 	});
 	union$1([strictObject({
 		t: literal("conv.push"),
@@ -9881,6 +10028,11 @@ var init_agent_tools = __esmMin((() => {
 		titleAuthor: Author$1.optional().describe("With title: who wrote the request; ours when you asked (mine)"),
 		status: authored("The latest status message").optional(),
 		statusAuthor: Author$1.optional().describe("With status: who wrote it; ours when you run the task (asked)"),
+		signIn: object({
+			tool: authored("The tool the executor named").optional(),
+			by: _enum(["you", "them"]).describe("Whose sign-in it is: you (your person, for an agent of theirs) or them (the other person); your Messaging daemon decides, never the peer")
+		}).optional().describe("auth_required only: the task waits on a sign-in; the tool was written by the executor, as statusAuthor says"),
+		refusal: object({ reason: authored("The executor's reason") }).optional().describe("rejected only: why the executor declined, in its words, as statusAuthor says"),
 		createdAt: iso,
 		updatedAt: iso,
 		consent: ToolConsentSchema.optional(),
@@ -10161,7 +10313,7 @@ var init_b64u = __esmMin((() => {
 // packages/core/dist/version.js
 var VERSION;
 var init_version = __esmMin((() => {
-	VERSION = "0.8.0";
+	VERSION = "0.9.0";
 }));
 // packages/core/dist/jcs.js
 function hasLoneSurrogate(text) {
@@ -11457,8 +11609,11 @@ var init_jelly_host = __esmMin((() => {
 		"people.search",
 		"people.get",
 		"grant.list",
+		"reach.get",
 		"request.list",
 		"sessions.list",
+		"tasks.list",
+		"tasks.get",
 		"notice.subscribe",
 		"notice.list",
 		"device.list"
@@ -13481,6 +13636,7 @@ var init_present = __esmMin((() => {
 	init_errors();
 	init_peer_text();
 	init_common();
+	init_ipc();
 	init_text();
 	LIMITS.toolTextChars;
 	createFence({ tag: PEER_FENCE_TAG });
@@ -14831,7 +14987,8 @@ CREATE TABLE IF NOT EXISTS dir_wakes (
 );
 CREATE INDEX IF NOT EXISTS dir_wakes_exp ON dir_wakes (exp);
 `;
-	MIGRATIONS = [`
+	MIGRATIONS = [
+		`
 CREATE TABLE IF NOT EXISTS conv_logs (
   realm TEXT NOT NULL,
   cid TEXT NOT NULL,
@@ -14882,7 +15039,8 @@ CREATE TABLE IF NOT EXISTS conv_shares (
 CREATE INDEX IF NOT EXISTS conv_shares_to ON conv_shares (realm, cid, to_device, n);
 CREATE INDEX IF NOT EXISTS conv_shares_pair ON conv_shares (realm, cid, from_device, to_device);
 CREATE INDEX IF NOT EXISTS conv_shares_at ON conv_shares (at);
-`, `
+`,
+		`
 CREATE TABLE IF NOT EXISTS conv_request_decisions (
   realm TEXT NOT NULL,
   id TEXT NOT NULL,
@@ -14890,7 +15048,17 @@ CREATE TABLE IF NOT EXISTS conv_request_decisions (
   decision TEXT NOT NULL,
   PRIMARY KEY (realm, id)
 );
-`];
+`,
+		`
+CREATE TABLE IF NOT EXISTS dir_wake_dms (
+  device TEXT NOT NULL,
+  cid TEXT NOT NULL,
+  exp INTEGER NOT NULL,
+  PRIMARY KEY (device, cid)
+);
+CREATE INDEX IF NOT EXISTS dir_wake_dms_exp ON dir_wake_dms (exp);
+`
+	];
 	RELAY_SCHEMA = 1 + MIGRATIONS.length;
 	RELAY_BASELINE = SCHEMA;
 	RelayStoreRefusedError = class extends Error {
@@ -19414,7 +19582,7 @@ var init_pacing = __esmMin((() => {
 			const back = this.#store.pair(to, from)?.last_at ?? null;
 			return back === null || now - back > 2592e6;
 		}
-		audience(person, watcher, orgOf, now) {
+		audience(person, watcher, orgOf, now, together) {
 			if (person === watcher) return true;
 			const org = orgOf(person);
 			if (org !== void 0 && org === orgOf(watcher)) return true;
@@ -19422,7 +19590,8 @@ var init_pacing = __esmMin((() => {
 				const at = this.#store.pair(from, to)?.line_at ?? null;
 				return at !== null && now - at <= 2592e6;
 			};
-			return wrote(person, watcher) && wrote(watcher, person);
+			if (wrote(person, watcher) && wrote(watcher, person)) return true;
+			return together?.(person, watcher) ?? false;
 		}
 		#roll(now) {
 			const day = Math.floor(now / DAY_MS$1);
@@ -19513,18 +19682,21 @@ var init_wakes = __esmMin((() => {
 			if (claims.aud !== void 0 && claims.aud !== frame.url) throw new MessagingError("invalid_request", "the wake ticket is for another URL");
 			if (claims.sub !== void 0 && claims.sub !== bound) throw new MessagingError("invalid_request", "the wake ticket is for another host");
 			this.#clearRetry(device);
+			const dms = [...new Set(frame.dms ?? [])];
 			this.#store.putWake({
 				device,
 				url: frame.url,
 				ticket: frame.ticket,
 				agents: [...frame.agents],
 				awaiting: [...frame.awaiting],
+				dms,
 				exp: claims.exp * 1e3
 			});
 			this.#host.log("wake.armed", {
 				machine: device,
 				agents: frame.agents.length,
-				awaiting: frame.awaiting.length
+				awaiting: frame.awaiting.length,
+				dms: dms.length
 			});
 		}
 		forget(device, why) {
@@ -19565,6 +19737,19 @@ var init_wakes = __esmMin((() => {
 				this.#present(device, "own");
 			}
 		}
+		dm(devices, cid) {
+			for (const device of devices) {
+				if (this.#host.online(device)) continue;
+				const row = this.#store.wake(device);
+				if (!row) continue;
+				if (row.exp <= this.#host.now()) {
+					this.forget(device, "removed");
+					continue;
+				}
+				if (!this.#store.wakeDm(device, cid, row.exp)) continue;
+				this.#present(device, "dm");
+			}
+		}
 		purge(now) {
 			const gone = this.#store.purgeWakes(now);
 			if (gone > 0) this.#host.log("wake.expired", { count: gone });
@@ -20030,7 +20215,7 @@ var init_module$1 = __esmMin((() => {
 		seesPresence(conn, person) {
 			if (conn.device === void 0 || !this.#watches.get(conn)?.presence.has(person)) return false;
 			const watcher = this.directory.currentPerson(conn.device);
-			return watcher !== void 0 && this.pacer.audience(person, watcher, (p) => this.directory.orgOf(p), this.#host.now());
+			return watcher !== void 0 && this.pacer.audience(person, watcher, (p) => this.directory.orgOf(p), this.#host.now(), this.#host.together);
 		}
 		presenceWatched(conn) {
 			return this.#watches.get(conn)?.presence ?? new Set();
@@ -20092,6 +20277,9 @@ var init_store$1 = __esmMin((() => {
 				this.#q(`INSERT INTO dir_wakes (device, url, ticket, agents, awaiting, exp, not_before) VALUES (?, ?, ?, ?, ?, ?, 0)
          ON CONFLICT (device) DO UPDATE SET url = excluded.url, ticket = excluded.ticket, agents = excluded.agents,
            awaiting = excluded.awaiting, exp = excluded.exp, not_before = 0`).run(row.device, row.url, row.ticket, JSON.stringify(row.agents), JSON.stringify(row.awaiting), row.exp);
+				this.#q("DELETE FROM dir_wake_dms WHERE device = ?").run(row.device);
+				const put = this.#q("INSERT OR IGNORE INTO dir_wake_dms (device, cid, exp) VALUES (?, ?, ?)");
+				for (const cid of row.dms) put.run(row.device, cid, row.exp);
 			});
 		}
 		wake(device) {
@@ -20115,6 +20303,13 @@ var init_store$1 = __esmMin((() => {
 				notBefore: Number(row.not_before)
 			};
 		}
+		wakeDm(device, cid, exp) {
+			return this.#q("SELECT 1 FROM dir_wake_dms WHERE device = ? AND cid = ? AND exp = ?").get(device, cid, exp) !== void 0;
+		}
+		wakeDmCount(device) {
+			const row = this.#q("SELECT COUNT(*) AS n FROM dir_wake_dms WHERE device = ?").get(device);
+			return Number(row.n);
+		}
 		setWakeNotBefore(device, at) {
 			this.transaction(() => {
 				this.#q("UPDATE dir_wakes SET not_before = ? WHERE device = ?").run(at, device);
@@ -20122,11 +20317,13 @@ var init_store$1 = __esmMin((() => {
 		}
 		deleteWake(device) {
 			return this.transaction(() => {
+				this.#q("DELETE FROM dir_wake_dms WHERE device = ?").run(device);
 				return Number(this.#q("DELETE FROM dir_wakes WHERE device = ?").run(device).changes) > 0;
 			});
 		}
 		purgeWakes(now) {
 			return this.transaction(() => {
+				this.#q("DELETE FROM dir_wake_dms WHERE exp <= ?").run(now);
 				return Number(this.#q("DELETE FROM dir_wakes WHERE exp <= ?").run(now).changes);
 			});
 		}
@@ -20264,7 +20461,7 @@ var init_store$1 = __esmMin((() => {
 	};
 }));
 // packages/relay/dist/conv/module.js
-var CONV_FRAME_TYPES, persons, readers, digestOf, REPLY_BUDGET, ConvModule;
+var CONV_FRAME_TYPES, persons, readers, TOGETHER_SCAN, digestOf, REPLY_BUDGET, ConvModule;
 var init_module = __esmMin((() => {
 	init_dist();
 	init_module$1();
@@ -20281,6 +20478,7 @@ var init_module = __esmMin((() => {
 	]);
 	persons = (state) => new Set(state?.participants.map((p) => p.person) ?? []);
 	readers = (state) => new Set(state?.participants.filter((p) => p.state === "member").map((p) => p.person) ?? []);
+	TOGETHER_SCAN = 50;
 	digestOf = (raw) => b64u.encode(convEventDigest(raw));
 	REPLY_BUDGET = Math.floor(LIMITS.frameBytes * 3 / 4);
 	ConvModule = class {
@@ -20293,6 +20491,8 @@ var init_module = __esmMin((() => {
 		#rekeys = new RateLimiter(LIMITS.convRekeysPerHour, LIMITS.convRekeysPerHour / 60);
 		#creates = new RateLimiter(LIMITS.convCreatesPerHour, LIMITS.convCreatesPerHour / 60);
 		#shares = new RateLimiter(LIMITS.convSharesPerMinute);
+		#capsAsked = new Map();
+		#capsDay = -1;
 		constructor(store, host, options = {}) {
 			this.#store = store;
 			this.#host = host;
@@ -20423,6 +20623,10 @@ var init_module = __esmMin((() => {
 						if (event.class === "op") this.#push(realm, new Set([...after].filter((p) => !before.has(p) && !readers(state).has(p))), machine, push);
 						const author = this.#host.realm(realm)?.device(machine)?.person;
 						if (event.class === "msg" && event.wake !== void 0 && author !== void 0) this.#host.woken?.(realm, author, event.wake);
+						if (event.class === "msg" && state.kind === "dm" && author !== void 0) {
+							const others = [...readers(state)].filter((p) => p !== author);
+							if (others.length > 0) this.#host.dmEvent?.(realm, author, cid, others);
+						}
 					},
 					failed: (error) => this.#host.nack(conn, req, error)
 				}, () => this.#logs.delete(key));
@@ -20600,16 +20804,46 @@ var init_module = __esmMin((() => {
 			const parsed = ConvCapsFrame.safeParse(raw);
 			if (!parsed.success) throw new MessagingError("invalid_request", "malformed conv.caps");
 			const { req, persons } = parsed.data;
-			const outdated = [...new Set(persons)].filter((person) => {
+			const realm = conn.auth.team;
+			const asker = this.#host.realm(realm)?.device(conn.auth.machine)?.person;
+			if (asker === void 0) throw new MessagingError("forbidden", "conv.caps needs a current device");
+			const day = Math.floor(this.#host.now() / 864e5);
+			if (this.#capsDay !== day) {
+				this.#capsDay = day;
+				this.#capsAsked.clear();
+			}
+			const named = [...new Set(persons)];
+			const asked = this.#capsAsked.get(`${realm} ${asker}`) ?? new Set();
+			const unknown = [];
+			for (const p of named) {
+				if (p === asker || asked.has(p) || (this.#host.related?.(realm, asker, p) ?? true)) continue;
+				if (asked.size < LIMITS.requestsPerDay) asked.add(p);
+				else unknown.push(p);
+			}
+			this.#capsAsked.set(`${realm} ${asker}`, asked);
+			const outdated = named.filter((p) => !unknown.includes(p)).filter((person) => {
 				const devices = this.#host.features?.(conn.auth.team, person) ?? [];
 				return devices.length > 0 && devices.every((features) => !features.includes("conversations"));
 			});
 			this.#host.send(conn, JSON.stringify({
 				t: "conv.capabilities",
 				req,
-				outdated
+				outdated,
+				...unknown.length ? { unknown } : {}
 			}), "conv.capabilities");
 		}
+		together(realm, a, b) {
+			if (a === b) return true;
+			for (const cid of this.#store.sharedCids(realm, a, b, TOGETHER_SCAN)) {
+				const log = this.#load(realm, cid);
+				const members = readers(log?.state());
+				if (!log || !members.has(a) || !members.has(b)) continue;
+				try {
+					if (requestLogState(log, this.#binding(realm)).active) return true;
+				} catch {}
+			}
+			return false;
+		}
 		#head(conn, raw) {
 			const parsed = ConvHeadFrame.safeParse(raw);
 			if (!parsed.success) throw new MessagingError("invalid_request", "invalid conv.head frame");
@@ -20731,6 +20965,7 @@ var init_store = __esmMin((() => {
 				isMember: prepare("SELECT 1 AS x FROM conv_members WHERE realm = ? AND person = ? AND cid = ?"),
 				convsOf: prepare("SELECT COUNT(*) AS n FROM conv_members WHERE realm = ? AND person = ?"),
 				cidsOf: prepare("SELECT cid FROM conv_members WHERE realm = ? AND person = ? AND cid > ? ORDER BY cid LIMIT ?"),
+				sharedCids: prepare("SELECT a.cid AS cid FROM conv_members a JOIN conv_members b ON b.realm = a.realm AND b.cid = a.cid WHERE a.realm = ? AND a.person = ? AND b.person = ? ORDER BY a.cid LIMIT ?"),
 				shareById: prepare("SELECT digest FROM conv_shares WHERE realm = ? AND cid = ? AND id = ?"),
 				pairCount: prepare("SELECT COUNT(*) AS n FROM conv_shares WHERE realm = ? AND cid = ? AND from_device = ? AND to_device = ?"),
 				insertShare: prepare("INSERT INTO conv_shares (realm, cid, id, from_device, to_device, digest, at, event) VALUES (?, ?, ?, ?, ?, ?, ?, ?) RETURNING n"),
@@ -20769,6 +21004,9 @@ var init_store = __esmMin((() => {
 		cidsOf(realm, person, after, limit) {
 			return this.#sql.cidsOf.all(realm, person, after, limit).map((r) => r.cid);
 		}
+		sharedCids(realm, a, b, limit) {
+			return this.#sql.sharedCids.all(realm, a, b, limit).map((r) => r.cid);
+		}
 		shareDigest(realm, cid, id) {
 			return this.#sql.shareById.get(realm, cid, id)?.digest;
 		}
@@ -21076,7 +21314,8 @@ var init_server = __esmMin((() => {
 				connections: () => online()?.values() ?? [],
 				purge: (device) => this.#store.dropMachine(realm, device),
 				remove: (device, frame) => this.#removeDevice(realm, device, frame),
-				replayPresence: (conn, persons) => this.#replayPresence(conn, persons)
+				replayPresence: (conn, persons) => this.#replayPresence(conn, persons),
+				together: (a, b) => this.#conv.together(realm, a, b)
 			});
 			realm = module.directory.realm;
 			this.#log.event("directory.serving", {
@@ -21101,6 +21340,11 @@ var init_server = __esmMin((() => {
 				wasRemovedDevice: (realm, device) => this.#dir ? realm === this.#dir.directory.realm && this.#dir.directory.wasRemoved(device) : this.#rosters.get(realm)?.wasRemoved(device) ?? false,
 				wasDevice: (realm, person, device) => this.#dir ? realm === this.#dir.directory.realm && this.#dir.directory.personOfDevice(device) === person : this.#rosters.get(realm)?.member(device)?.person === person,
 				online: (realm) => this.#online.get(realm) ?? new Map(),
+				related: (realm, asker, person) => {
+					const dir = this.#dir;
+					if (!dir || realm !== dir.directory.realm) return true;
+					return dir.pacer.audience(person, asker, (p) => dir.directory.orgOf(p), this.#now(), (a, b) => this.#conv.together(realm, a, b));
+				},
 				features: (realm, person) => {
 					const devices = this.#dir ? realm === this.#dir.directory.realm ? this.#dir.directory.devicesOf(person) : [] : this.#rosters.get(realm)?.members().filter((m) => m.person === person).map((m) => m.machine) ?? [];
 					const found = [];
@@ -21115,6 +21359,10 @@ var init_server = __esmMin((() => {
 				woken: (realm, person, sessions) => {
 					const dir = this.#dir;
 					if (dir && realm === dir.directory.realm) this.#guard("wake.hinted", () => dir.wakes.hinted(dir.directory.devicesOf(person), sessions));
+				},
+				dmEvent: (realm, _person, cid, others) => {
+					const dir = this.#dir;
+					if (dir && realm === dir.directory.realm) this.#guard("wake.dm", () => dir.wakes.dm(others.flatMap((p) => dir.directory.devicesOf(p)), cid));
 				}
 			});
 		}