@joe-broadhead/opencode-messaging 0.4.0 → 0.5.0

package/dist/messagingd.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module";
-import { dirname, isAbsolute, join, resolve } from "node:path";
+import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import net, { BlockList, isIP } from "node:net";
 import { KeyObject, createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, sign, verify } from "node:crypto";
 import { homedir, tmpdir } from "node:os";
@@ -274,7 +274,7 @@ function partial(Class, schema, mask, name = "partial") {
 		checks: []
 	}));
 }
-function required(Class, schema, mask) {
+function required$1(Class, schema, mask) {
 	const selected = mask ? new Set(maskedKeys(schema, mask)) : void 0;
 	const newShape = {};
 	mirrorShape(newShape, schema, Reflect.ownKeys(sourceShape(schema)), (value, key) => selected && !selected.has(key) ? value : new Class({
@@ -5450,7 +5450,7 @@ var init_schemas = __esmMin((() => {
 			return partial(ZodExactOptional, this, args[0], "exactPartial");
 		},
 		required(...args) {
-			return required(ZodNonOptional, this, args[0]);
+			return required$1(ZodNonOptional, this, args[0]);
 		}
 	});
 	ZodUnion = $constructor("ZodUnion", (inst, def) => {
@@ -5943,7 +5943,8 @@ var init_jelly$3 = __esmMin((() => {
 		jti: string$1().regex(/^[\x21-\x7e]{1,128}$/, "printable jti"),
 		iss: string$1().max(2048).optional(),
 		dev: string$1().max(200).optional(),
-		cls: string$1().max(32).optional()
+		cls: string$1().max(32).optional(),
+		mbr: string$1().max(200).optional()
 	});
 	JellySessionClaims = looseObject({
 		aud: string$1().min(1).max(2048),
@@ -6553,7 +6554,8 @@ var init_envelope$1 = __esmMin((() => {
 		label: MachineLabel,
 		sessions: array(SessionInfo).max(LIMITS.presenceSessions),
 		features: array(string$1().max(64)).max(32).optional(),
-		direct: array(DirectEndpoint).min(1).max(4).optional()
+		direct: array(DirectEndpoint).min(1).max(4).optional(),
+		away: literal(true).optional()
 	});
 	PAYLOAD_BY_TYPE = {
 		message: MessagePayload,
@@ -6832,7 +6834,7 @@ function hostedRelayAuthPayload(args) {
 		ts: args.ts
 	};
 }
-var Req, Size, Handle, Email, OrgId, DirBindFrame, HostedHelloFrame, DirAppendFrame, DirKeysFrame, DirSthFrame, DirLookupFrame, DirDeviceFrame, DirResolveFrame, DirSearchFrame, DirWatchFrame, PresenceWatchFrame, DirEraseFrame, HostedWelcomeFrame, DirOkFrame, DirSthIsFrame, DirPersonsFrame, ResolvedPerson, DirResolvedFrame, DirChangedFrame, DirUnboundFrame, DirectoryRelayFrame;
+var Req, Size, Handle, Email, OrgId, DirBindFrame, HostedHelloFrame, DirAppendFrame, DirKeysFrame, DirSthFrame, DirLookupFrame, DirDeviceFrame, DirResolveFrame, DirSearchFrame, DirWatchFrame, PresenceWatchFrame, DirEraseFrame, WAKE_TICKET_BYTES, WakeUrl, WakeArmFrame, WakeDisarmFrame, HostedWelcomeFrame, DirOkFrame, DirSthIsFrame, DirPersonsFrame, ResolvedPerson, DirResolvedFrame, DirChangedFrame, DirUnboundFrame, DirectoryRelayFrame;
 var init_directory_frames = __esmMin((() => {
 	init_zod();
 	init_common();
@@ -6916,6 +6918,20 @@ var init_directory_frames = __esmMin((() => {
 		entries: array(LogEntry).min(1).max(LIMITS.devicesPerPerson),
 		token: Jws
 	});
+	WAKE_TICKET_BYTES = 4096;
+	WakeUrl = string$1().max(2048).regex(/^https?:\/\/[^/?#@\s]+\/hosts\/hst_[A-Za-z0-9._:-]{1,123}\/wake$/, "a Jelly ID wake URL");
+	WakeArmFrame = object$1({
+		t: literal("wake.arm"),
+		req: Req,
+		url: WakeUrl,
+		ticket: Jws.refine((ticket) => ticket.length <= WAKE_TICKET_BYTES, { message: `at most ${WAKE_TICKET_BYTES} bytes` }),
+		agents: array(SessionName).max(64),
+		awaiting: array(Ulid).max(500)
+	});
+	WakeDisarmFrame = object$1({
+		t: literal("wake.disarm"),
+		req: Req
+	});
 	discriminatedUnion("t", [
 		DirBindFrame,
 		HostedHelloFrame,
@@ -6928,7 +6944,9 @@ var init_directory_frames = __esmMin((() => {
 		DirSearchFrame,
 		DirWatchFrame,
 		PresenceWatchFrame,
-		DirEraseFrame
+		DirEraseFrame,
+		WakeArmFrame,
+		WakeDisarmFrame
 	]);
 	HostedWelcomeFrame = object$1({
 		t: literal("welcome"),
@@ -7046,7 +7064,7 @@ var init_direct$1 = __esmMin((() => {
 	]);
 }));
 // packages/core/dist/schema/ipc/device.js
-var BindingState, RealmAlarmSummary, DeviceStatus, DeviceListEntry, LinkText, Sas, LinkPreview, KeyFingerprint, LoginUserCode, LoginPurpose, LoginKind, LoginShown, LoginState, DEVICE_METHODS;
+var BindingState, RealmAlarmSummary, DeviceStatus, DeviceListEntry, LinkText, Sas, LinkPreview, KeyFingerprint, LoginUserCode, LoginPurpose, LoginKind, LoginShown, LoginState, DeviceRemoveParams, DeviceApproveParams, DEVICE_METHODS;
 var init_device = __esmMin((() => {
 	init_zod();
 	init_common();
@@ -7143,6 +7161,19 @@ var init_device = __esmMin((() => {
 			purpose: LoginPurpose
 		})
 	]);
+	DeviceRemoveParams = strictObject({
+		device: MachineId,
+		reason: _enum([
+			"self",
+			"removed",
+			"lost"
+		]).optional(),
+		token: Jws.optional()
+	});
+	DeviceApproveParams = strictObject({
+		link: LinkText,
+		sas: Sas
+	});
 	DEVICE_METHODS = {
 		"device.status": {
 			params: strictObject({}),
@@ -7165,15 +7196,7 @@ var init_device = __esmMin((() => {
 			result: object$1({ devices: array(DeviceListEntry) })
 		},
 		"device.remove": {
-			params: strictObject({
-				device: MachineId,
-				reason: _enum([
-					"self",
-					"removed",
-					"lost"
-				]).optional(),
-				token: Jws.optional()
-			}),
+			params: DeviceRemoveParams,
 			result: object$1({ seq: number$1().int().nonnegative() })
 		},
 		"device.link": {
@@ -7210,14 +7233,11 @@ var init_device = __esmMin((() => {
 			result: object$1({ ok: literal(true) })
 		},
 		"device.approve.preview": {
-			params: strictObject({ link: LinkText }),
+			params: DeviceApproveParams.partial({ sas: true }),
 			result: LinkPreview
 		},
 		"device.approve": {
-			params: strictObject({
-				link: LinkText,
-				sas: Sas
-			}),
+			params: DeviceApproveParams,
 			result: object$1({
 				device: MachineId,
 				seq: number$1().int().nonnegative()
@@ -7361,7 +7381,7 @@ var init_shapes = __esmMin((() => {
 	});
 }));
 // packages/core/dist/schema/ipc/consent.js
-var GrantTarget, Levels, GrantView, GrantReview, GrantSetParams, AskRequest, ContactRequestView, ContactSuggestion, HeldRequest, RequestAnswer, RequestText, PersonReach, CONSENT_METHODS;
+var GrantTarget, Levels, GrantView, GrantReview, GrantSetParams, AskRequest, ContactRequestView, ContactSuggestion, HeldRequest, RequestAnswer, RequestText, PersonReach, RequestAnswerParams, ContactRequestParams, CONSENT_METHODS;
 var init_consent$1 = __esmMin((() => {
 	init_zod();
 	init_common();
@@ -7460,6 +7480,16 @@ var init_consent$1 = __esmMin((() => {
 		source: _enum(["card", "default"]),
 		at: Millis.optional()
 	});
+	RequestAnswerParams = strictObject({
+		id: Ulid,
+		answer: RequestAnswer,
+		all: boolean().optional()
+	});
+	ContactRequestParams = strictObject({
+		email: Email,
+		text: RequestText,
+		suggestion: Ulid.optional()
+	});
 	CONSENT_METHODS = {
 		"grant.list": {
 			params: strictObject({ subject: GrantTarget.optional() }),
@@ -7481,19 +7511,35 @@ var init_consent$1 = __esmMin((() => {
 			result: object$1({ requests: array(HeldRequest).max(LIMITS.heldTotal * 3) })
 		},
 		"request.answer": {
-			params: strictObject({
-				id: Ulid,
-				answer: RequestAnswer,
-				all: boolean().optional()
-			}),
+			params: RequestAnswerParams,
 			result: object$1({ answered: array(Ulid).max(LIMITS.heldTotal) })
 		},
+		"request.answer.preview": {
+			params: RequestAnswerParams,
+			result: object$1({
+				kind: _enum([
+					"message",
+					"task",
+					"contact",
+					"suggestion"
+				]),
+				from: object$1({
+					name: string$1().max(200),
+					email: string$1().max(320).optional(),
+					org: _enum([
+						"same",
+						"other",
+						"none"
+					])
+				}),
+				agent: SessionName.optional(),
+				to: SessionName.optional(),
+				count: number$1().int().positive(),
+				sentence: string$1().max(500)
+			})
+		},
 		"contact.request": {
-			params: strictObject({
-				email: Email,
-				text: RequestText,
-				suggestion: Ulid.optional()
-			}),
+			params: ContactRequestParams,
 			result: object$1({
 				id: Ulid,
 				conversation: RoomRef,
@@ -7501,7 +7547,7 @@ var init_consent$1 = __esmMin((() => {
 			})
 		},
 		"contact.request.preview": {
-			params: strictObject({ email: Email }),
+			params: ContactRequestParams.partial({ text: true }),
 			result: object$1({ found: boolean() })
 		},
 		"card.get": {
@@ -7680,7 +7726,8 @@ var init_surfaces = __esmMin((() => {
 			result: PersonSummary.extend({ devices: array(object$1({
 				device: MachineId,
 				label: MachineLabel,
-				self: boolean()
+				self: boolean(),
+				away: literal(true).optional()
 			})) })
 		}
 	};
@@ -7688,7 +7735,10 @@ var init_surfaces = __esmMin((() => {
 var init_jelly$2 = __esmMin((() => {
 	init_zod();
 	init_common();
+	init_directory_frames();
+	init_jelly$3();
 	init_directory$2();
+	init_device();
 	init_shapes();
 	init_surfaces();
 	NoticeId = string$1().regex(/^[mra]_[0-9A-Za-z]{1,64}$/, "notice id");
@@ -7804,8 +7854,45 @@ var init_jelly$2 = __esmMin((() => {
 			params: strictObject({ ids: array(NoticeId).min(1).max(200) }),
 			result: object$1({ ok: literal(true) })
 		},
+		"daemon.woke": {
+			params: strictObject({}),
+			result: object$1({ ok: literal(true) })
+		},
+		"person.attached": {
+			params: strictObject({ attached: boolean() }),
+			result: object$1({ ok: literal(true) })
+		},
+		"wake.arm": {
+			params: strictObject({
+				url: WakeUrl,
+				ticket: Jws.refine((ticket) => ticket.length <= WAKE_TICKET_BYTES, { message: `at most ${WAKE_TICKET_BYTES} bytes` }),
+				agents: array(SessionName).max(64)
+			}),
+			result: object$1({
+				relay: _enum(["armed", "pending"]),
+				awaiting: number$1().int().nonnegative()
+			})
+		},
+		"wake.disarm": {
+			params: strictObject({}),
+			result: object$1({ relay: _enum(["disarmed", "pending"]) })
+		},
+		"daemon.snapshot": {
+			params: strictObject({ done: literal(true).optional() }),
+			result: union$1([object$1({
+				folder: string$1().max(4096),
+				files: array(object$1({
+					name: string$1().max(64),
+					bytes: number$1().int().nonnegative(),
+					sha256: string$1().regex(/^[0-9a-f]{64}$/)
+				})).max(8),
+				storeSchema: number$1().int().positive(),
+				at: Millis,
+				until: Millis
+			}), object$1({ released: boolean() })])
+		},
 		"device.remove.preview": {
-			params: strictObject({ device: MachineId }),
+			params: DeviceRemoveParams,
 			result: object$1({
 				label: MachineLabel,
 				kind: DeviceKind.optional(),
@@ -7820,7 +7907,7 @@ var init_jelly$2 = __esmMin((() => {
 			})
 		}
 	};
-})), MESSAGING_ERROR_RPC_CODE, SessionHost, Ok, Empty, DaemonStatus, InviteSummary, IPC_METHODS, AGENT_METHODS, HOST_SCOPE_METHODS, IpcEvent;
+})), MESSAGING_ERROR_RPC_CODE, SessionHost, Ok, Empty, DaemonStatus, InviteSummary, IPC_METHODS, AGENT_METHODS, HUMAN_METHODS, ADMIN_METHODS, HOST_SCOPE_METHODS, IpcEvent;
 var init_ipc = __esmMin((() => {
 	init_zod();
 	init_device();
@@ -8195,11 +8282,73 @@ var init_ipc = __esmMin((() => {
 		"task.update",
 		"task.cancel"
 	];
+	HUMAN_METHODS = [
+		"conv.list",
+		"conv.read",
+		"conv.markRead",
+		"conv.subscribe",
+		"person.send",
+		"people.search",
+		"people.get",
+		"grant.list",
+		"grant.set",
+		"grant.set.preview",
+		"request.list",
+		"request.answer",
+		"request.answer.preview",
+		"contact.request",
+		"contact.request.preview",
+		"card.get",
+		"agents.list",
+		"agents.read",
+		"notice.subscribe",
+		"notice.list",
+		"notice.ack",
+		"device.approve.preview",
+		"device.remove.preview",
+		"channel.create",
+		"channel.invite",
+		"channel.leave",
+		"channel.remove"
+	];
+	ADMIN_METHODS = [
+		"daemon.stop",
+		"daemon.woke",
+		"person.attached",
+		"daemon.snapshot",
+		"wake.arm",
+		"wake.disarm",
+		"device.list",
+		"device.remove",
+		"device.link",
+		"device.login",
+		"device.login.status",
+		"device.login.cancel",
+		"device.approve",
+		"identity.rotateEnc",
+		"team.create",
+		"team.invite",
+		"team.join",
+		"team.members",
+		"team.remove",
+		"team.role",
+		"team.revokeInvite",
+		"team.add",
+		"team.pair",
+		"team.claim",
+		"team.pairCancel",
+		"team.prepare"
+	];
 	HOST_SCOPE_METHODS = [
 		"notice.subscribe",
 		"notice.list",
 		"conv.list",
-		"daemon.stop"
+		"daemon.stop",
+		"daemon.woke",
+		"person.attached",
+		"daemon.snapshot",
+		"wake.arm",
+		"wake.disarm"
 	];
 	IpcEvent = discriminatedUnion("type", [
 		object$1({
@@ -8297,7 +8446,7 @@ var init_b64u = __esmMin((() => {
 // packages/core/dist/version.js
 var VERSION;
 var init_version$1 = __esmMin((() => {
-	VERSION = "0.4.0";
+	VERSION = "0.5.0";
 }));
 // packages/core/dist/jcs.js
 function hasLoneSurrogate(text) {
@@ -8808,7 +8957,7 @@ function seal(args, randomness) {
 	const payload = parseWith(PAYLOAD_BY_TYPE[type], args.payload, `${type} payload`);
 	const plaintext = utf8(canonicalize(payload));
 	if (plaintext.length > LIMITS.plaintextBytes) throw new MessagingError("too_large", `payload exceeds ${LIMITS.plaintextBytes} bytes`);
-	const klass = type === "message" && payload.conv?.kind === "request" ? "request" : classOf(args.from, args.to);
+	const klass = type === "message" && payload.conv?.kind === "request" ? "request" : classOf$1(args.from, args.to);
 	assertMeaning(type, args.from, args.to, klass, payload);
 	if (type !== "presence") return sealBytes(args, type, klass, plaintext, randomness);
 	if (args.recipientEnc !== void 0) throw new MessagingError("invalid_request", "presence is not sealed");
@@ -8849,7 +8998,7 @@ function base(args, type, klass) {
 		...args.replyTo === void 0 ? {} : { replyTo: args.replyTo }
 	};
 }
-function classOf(from, to) {
+function classOf$1(from, to) {
 	return to !== void 0 && "person" in to && to.person === from?.person ? "self" : "contact";
 }
 function sealBytes(args, type, klass, plaintext, randomness) {
@@ -9024,12 +9173,12 @@ function shapeProblem(env) {
 	if (env.class === void 0) return "a sealed envelope needs class";
 	if (env.class === "request") {
 		if (env.type !== "message") return "only a message is of class request";
-		if (classOf(env.from, env.to) !== "contact") return "a message request goes to another person";
+		if (classOf$1(env.from, env.to) !== "contact") return "a message request goes to another person";
 		if (env.from.agent !== void 0 || "agent" in env.to && env.to.agent !== void 0) return "a message request goes from a person to a person";
 		if (env.replyTo !== void 0) return "a message request answers nothing";
 		return;
 	}
-	if (env.class !== classOf(env.from, env.to)) return `class ${env.class} does not match the ends`;
+	if (env.class !== classOf$1(env.from, env.to)) return `class ${env.class} does not match the ends`;
 }
 function isPlainObject(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -9506,6 +9655,9 @@ var init_roster = __esmMin((() => {
 	};
 }));
 // packages/core/dist/jelly-host.js
+function actionClass(method) {
+	return Object.hasOwn(ACTION_CLASSES, method) ? ACTION_CLASSES[method] : "local";
+}
 function grantInput(params) {
 	return sha256(canonicalize(params ?? {}));
 }
@@ -9567,12 +9719,18 @@ function verifyActGrant(token, check) {
 		if (claims.in === void 0 || claims.in !== grantInput(check.params)) throw fail("is for other params");
 		checkTimes(claims.iat, claims.exp, 60, check.now, fail);
 	}
-	if (claims.cls !== void 0 && claims.act !== "host" && claims.cls !== (CHAT_CLASS.has(check.method) ? "chat" : "local")) throw fail("names another action class");
+	if (claims.act === "host") {
+		if (claims.cls !== void 0) throw fail("is host scope, which names no action class");
+	} else {
+		if (claims.cls === void 0) throw fail("names no action class");
+		if (claims.cls !== actionClass(check.method)) throw fail(`names action class ${claims.cls}, not ${actionClass(check.method)}`);
+	}
 	return {
 		scope: claims.act === "host" ? "host" : "action",
 		jti: claims.jti,
 		exp: claims.exp,
-		dev: claims.dev
+		dev: claims.dev,
+		mbr: claims.mbr
 	};
 }
 function verifySessionTicket(token, key, now) {
@@ -9608,7 +9766,7 @@ function parseActKey(text) {
 	}
 	return parsed.data;
 }
-var SESSION_TICKET_MAX_S, CHAT_CLASS;
+var SESSION_TICKET_MAX_S, CHAT_METHODS, VIEW_METHODS, classOf, ACTION_CLASSES;
 var init_jelly_host = __esmMin((() => {
 	init_b64u();
 	init_hash();
@@ -9617,8 +9775,29 @@ var init_jelly_host = __esmMin((() => {
 	init_wire();
 	init_errors();
 	init_jelly$3();
+	init_ipc();
 	SESSION_TICKET_MAX_S = 604800;
-	CHAT_CLASS = new Set(["person.send", "conv.markRead"]);
+	CHAT_METHODS = [
+		"person.send",
+		"conv.markRead",
+		"notice.ack"
+	];
+	VIEW_METHODS = [
+		"conv.list",
+		"conv.read",
+		"conv.subscribe",
+		"people.search",
+		"people.get",
+		"grant.list",
+		"request.list",
+		"agents.list",
+		"agents.read",
+		"notice.subscribe",
+		"notice.list",
+		"device.list"
+	];
+	classOf = (method) => CHAT_METHODS.includes(method) ? "chat" : VIEW_METHODS.includes(method) ? "view" : "local";
+	ACTION_CLASSES = Object.freeze(Object.fromEntries([...HUMAN_METHODS, ...ADMIN_METHODS].map((method) => [method, classOf(method)])));
 }));
 // packages/core/dist/directory/person.js
 function base32Lower(bytes) {
@@ -10672,7 +10851,7 @@ function verifyPersonView(view, context) {
 		const { sth, known } = context;
 		if (known && known.person !== parsed.person) throw new MessagingError("invalid_request", "the known state is another person's");
 		const head = verifyEpochProof(sth, context.head);
-		if (head.index !== sth.size - 1) throw fail("the head epoch is not the tree head's last");
+		if (head.index !== sth.size - 1) throw fail$1("the head epoch is not the tree head's last");
 		const mapRoot = head.leaf.mapRoot;
 		const logContext = {
 			...context,
@@ -10697,7 +10876,7 @@ function verifyPersonView(view, context) {
 		let start = held;
 		if (parsed.log.length > 0) {
 			const first = parsed.log[0].seq;
-			if (first > held) throw fail("the log skips entries after those held");
+			if (first > held) throw fail$1("the log skips entries after those held");
 			for (const entry of parsed.log.slice(0, Math.max(0, held - first))) {
 				const ours = log.entries()[entry.seq];
 				if (logEntryHash(ours) !== logEntryHash(entry)) throw new DirectoryInconsistency("the log differs from the one held", {
@@ -10743,7 +10922,7 @@ function verifyPersonView(view, context) {
 				ours: ours.seq,
 				theirs: statement.seq
 			});
-			if (ours && statement.seq === ours.seq && keysStatementHash(statement) !== keysStatementHash(ours)) throw fail("two keys statements share a device and seq");
+			if (ours && statement.seq === ours.seq && keysStatementHash(statement) !== keysStatementHash(ours)) throw fail$1("two keys statements share a device and seq");
 			keys.set(statement.device, statement);
 		}
 		for (const [device, ours] of known?.keys ?? []) if (log.device(device)?.current && !keys.has(device)) throw new DirectoryInconsistency("a held keys statement is withheld", {
@@ -10783,11 +10962,11 @@ function verifyPersonView(view, context) {
 function checkWitness(witness, seq, deadline, log, person, sth) {
 	const epoch = verifyEpochProof(sth, witness.epoch);
 	const committed = witness.value.log;
-	if (committed.seq < seq || log.hashAt(committed.seq) !== committed.hash) throw fail("an epoch witness commits to another log");
-	if (!verifyMapProof(epoch.leaf.mapRoot, person, mapValue(witness.value), witness.mapProof)) throw fail("an epoch witness's map proof does not verify");
+	if (committed.seq < seq || log.hashAt(committed.seq) !== committed.hash) throw fail$1("an epoch witness commits to another log");
+	if (!verifyMapProof(epoch.leaf.mapRoot, person, mapValue(witness.value), witness.mapProof)) throw fail$1("an epoch witness's map proof does not verify");
 	if (epoch.leaf.ts > deadline) throw new MessagingError("binding_invalid", "a Jelly binding first appeared after its token's life");
 }
-var DirectoryInconsistency, fail;
+var DirectoryInconsistency, fail$1;
 var init_person_view = __esmMin((() => {
 	init_check();
 	init_directory$2();
@@ -10804,7 +10983,7 @@ var init_person_view = __esmMin((() => {
 			this.evidence = evidence;
 		}
 	};
-	fail = (what) => new MessagingError("directory_inconsistent", what);
+	fail$1 = (what) => new MessagingError("directory_inconsistent", what);
 }));
 // packages/core/dist/address.js
 function parseAddress(text) {
@@ -12825,6 +13004,7 @@ var init_dist$3 = __esmMin((() => {
 	init_contact_card();
 	init_delegation$1();
 	init_task();
+	init_a2a();
 	init_direct();
 	init_peer_text();
 	init_agent_tools();
@@ -13271,7 +13451,7 @@ async function createIpcServer(options) {
 		method: "hello",
 		params: {
 			daemon: "messagingd",
-			version: options.version ?? "0.4.0",
+			version: options.version ?? "0.5.0",
 			protocol: 1,
 			pid: process.pid,
 			...options.deployment ? { deployment: options.deployment } : {}
@@ -14288,7 +14468,7 @@ var init_keychain = __esmMin((() => {
 }));
 // packages/daemon/dist/identity/store.js
 var FileStore;
-var init_store$2 = __esmMin((() => {
+var init_store$3 = __esmMin((() => {
 	init_dist$3();
 	init_record();
 	FileStore = class {
@@ -14365,7 +14545,7 @@ var init_identity = __esmMin((() => {
 	init_home();
 	init_keychain();
 	init_record();
-	init_store$2();
+	init_store$3();
 }));
 // packages/daemon/dist/pairing.js
 function pairingPath(home) {
@@ -15509,7 +15689,8 @@ function presencePayload(rows, label, seq, extra, policy) {
 		label,
 		sessions: [],
 		features: [...FEATURES, ...extra?.features ?? []],
-		...extra?.direct ? { direct: extra.direct } : {}
+		...extra?.direct ? { direct: extra.direct } : {},
+		...policy.away === true ? { away: true } : {}
 	};
 	return {
 		...payload,
@@ -17142,6 +17323,11 @@ var init_directory_home = __esmMin((() => {
 			this.#options.log("info", "directory.approved", { seq: done.seq });
 			return done;
 		}
+		async wake(state) {
+			const link = this.#link;
+			if (!link?.wake) return "pending";
+			return link.wake(state);
+		}
 		presenceWatch(persons) {
 			this.#link?.presenceWatch(persons).catch((error) => this.#failed("directory.presence.watch", error));
 		}
@@ -17156,6 +17342,7 @@ var init_directory_home = __esmMin((() => {
 				},
 				send: (env) => home.#link ? home.#link.send(env) : Promise.reject(noLink()),
 				presence: (env) => home.#link?.presence(env),
+				retryNow: () => home.#link?.retryNow?.(),
 				appendRoster: () => Promise.reject(new MessagingError("invalid_state", "a directory realm has no roster")),
 				syncRoster: () => Promise.reject(new MessagingError("invalid_state", "a directory realm has no roster"))
 			};
@@ -17261,7 +17448,8 @@ var init_jelly$1 = __esmMin((() => {
 			this.#deps.log("info", "jelly.grant", {
 				method: call.method,
 				scope: grant.scope,
-				...grant.dev !== void 0 ? { dev: grant.dev.slice(0, 200) } : {}
+				...grant.dev !== void 0 ? { dev: grant.dev.slice(0, 200) } : {},
+				...grant.mbr !== void 0 ? { mbr: grant.mbr.slice(0, 200) } : {}
 			});
 			return {
 				scope: grant.scope,
@@ -17294,6 +17482,313 @@ var init_jelly$1 = __esmMin((() => {
 		}
 	};
 }));
+// packages/daemon/dist/jelly-env.js
+function jellyEnvNamed(env) {
+	return JELLY_ENV.filter((name) => (env[name] ?? "") !== "");
+}
+function fail(message) {
+	throw new MessagingError("invalid_request", message);
+}
+function required(env, name) {
+	const value = env[name] ?? "";
+	if (value === "") fail(`${name} is not set: a Jelly host sets it with JELLY_ACTION_KEY`);
+	return value;
+}
+function folder(name, value, separator = delimiter) {
+	if (!isAbsolute(value)) fail(`${name} is not an absolute path`);
+	if (value.includes(separator)) fail(`${name} names more than one folder (joined with "${separator}"); the daemon takes one`);
+	return value;
+}
+function relayUrlOf(url) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		return fail(`JELLY_RESOURCES' ${JELLY_RESOURCE_NAME} url is not a URL`);
+	}
+	const loopback = /^(?:localhost|127\.\d{1,3}\.\d{1,3}\.\d{1,3}|\[::1\])$/.test(parsed.hostname);
+	const scheme = parsed.protocol === "https:" ? "wss:" : parsed.protocol === "http:" && loopback ? "ws:" : void 0;
+	if (scheme === void 0) fail(`JELLY_RESOURCES' ${JELLY_RESOURCE_NAME} url is not https:// (or http:// to a loopback host)`);
+	if (parsed.username !== "" || parsed.password !== "" || parsed.search !== "" || parsed.hash !== "" || parsed.pathname !== "/" && parsed.pathname !== "") fail(`JELLY_RESOURCES' ${JELLY_RESOURCE_NAME} url is not an origin: the relay is derived from its origin alone`);
+	return `${scheme}//${parsed.host}/v1/connect`;
+}
+function jellyEnvRealm(env) {
+	let raw;
+	try {
+		raw = parseWire(required(env, "JELLY_RESOURCES"), { maxBytes: 65536 });
+	} catch (error) {
+		if (error instanceof MessagingError && /JELLY_RESOURCES is not set/.test(error.message)) throw error;
+		return fail("JELLY_RESOURCES is not JSON");
+	}
+	const list = Resources.safeParse(raw);
+	if (!list.success) fail("JELLY_RESOURCES is not a list of discovery entries");
+	const entries = list.data.map((item) => ResourceEntry.safeParse(item)).filter((parsed) => parsed.success && parsed.data.name === "messaging");
+	if (entries.length === 0) fail(`JELLY_RESOURCES has no ${JELLY_RESOURCE_NAME} entry`);
+	if (entries.length > 1) fail(`JELLY_RESOURCES has more than one ${JELLY_RESOURCE_NAME} entry`);
+	const entry = entries[0].data;
+	const realm = DirectoryRealmConfig.strict().safeParse({
+		kind: "directory",
+		url: relayUrlOf(entry.url),
+		issuer: required(env, "JELLY_ID_ISSUER"),
+		resource: entry.resource,
+		key: required(env, "JELLY_SERVICE_ANCHOR")
+	});
+	if (!realm.success) {
+		const at = realm.error.issues[0]?.path[0];
+		fail(at === "issuer" ? "JELLY_ID_ISSUER is not an https:// issuer" : at === "key" ? "JELLY_SERVICE_ANCHOR is not an Ed25519 key in base64url" : `JELLY_RESOURCES' ${JELLY_RESOURCE_NAME} entry is invalid at ${String(at)}`);
+	}
+	try {
+		directoryRealmId(realm.data);
+	} catch {
+		fail("JELLY_SERVICE_ANCHOR is not a usable Ed25519 key");
+	}
+	return realm.data;
+}
+function readJellyEnv(env) {
+	const actKeyPath = required(env, "JELLY_ACTION_KEY");
+	if (!isAbsolute(actKeyPath)) fail("JELLY_ACTION_KEY is not an absolute path");
+	const home = folder("STATE_DIRECTORY", required(env, "STATE_DIRECTORY"));
+	const runText = env.RUNTIME_DIRECTORY ?? "";
+	const groupText = env.JELLY_SOCKET_GROUP ?? "";
+	if (groupText !== "" && process.platform === "win32") fail("JELLY_SOCKET_GROUP is not supported on Windows: a named pipe is not shared with a group");
+	if (groupText !== "" && (!/^\d{1,10}$/.test(groupText) || Number(groupText) > 4294967294)) fail("JELLY_SOCKET_GROUP is not a numeric gid");
+	let label;
+	try {
+		label = jellyLabel(required(env, "JELLY_DEVICE_LABEL"));
+	} catch (error) {
+		if (error instanceof MessagingError && /is not set/.test(error.message)) throw error;
+		return fail("JELLY_DEVICE_LABEL has no letter or digit to make a device label from");
+	}
+	return {
+		home,
+		...runText !== "" ? { run: folder("RUNTIME_DIRECTORY", runText) } : {},
+		actKeyPath,
+		label,
+		...groupText !== "" ? { socketGroup: Number(groupText) } : {},
+		realm: jellyEnvRealm(env)
+	};
+}
+function realmMismatch(pinned, named) {
+	return [
+		"url",
+		"issuer",
+		"resource",
+		"key"
+	].filter((member) => pinned[member] !== named[member]);
+}
+async function pinRealm(realm, get = wellKnownGet) {
+	const origin = new URL(realm.url);
+	const url = `${origin.protocol === "wss:" ? "https:" : "http:"}//${origin.host}/.well-known/messaging.json`;
+	let text;
+	try {
+		text = await get(url);
+	} catch (error) {
+		throw new MessagingError("relay_unavailable", `cannot read the relay's realm document ${url} for the first start (${error instanceof Error ? error.message.slice(0, 200) : "failed"}); the next start tries again`);
+	}
+	let raw;
+	try {
+		raw = parseWire(text, { maxBytes: 16384 });
+	} catch {
+		return fail(`the relay's realm document ${url} is not JSON`);
+	}
+	const { realm: _id, ...published } = typeof raw === "object" && raw !== null ? raw : {};
+	const parsed = DirectoryRealmConfig.safeParse(published);
+	if (!parsed.success) fail(`the relay's realm document ${url} is not a directory realm`);
+	const differs = realmMismatch(parsed.data, realm);
+	if (differs.length > 0) fail(`the relay's realm document ${url} names another ${differs.join(", ")} than the environment: the home is not pinned`);
+	return parsed.data.orgDomains !== void 0 ? {
+		...realm,
+		orgDomains: parsed.data.orgDomains
+	} : realm;
+}
+var JELLY_ENV, JELLY_RESOURCE_NAME, ResourceEntry, Resources, wellKnownGet;
+var init_jelly_env = __esmMin((() => {
+	init_dist$3();
+	init_zod();
+	init_jelly$1();
+	JELLY_ENV = [
+		"JELLY_ACTION_KEY",
+		"JELLY_ID_ISSUER",
+		"JELLY_RESOURCES",
+		"JELLY_SERVICE_ANCHOR",
+		"JELLY_DEVICE_LABEL",
+		"JELLY_SOCKET_GROUP"
+	];
+	JELLY_RESOURCE_NAME = "messaging";
+	ResourceEntry = looseObject({
+		name: string$1().max(200),
+		resource: string$1().min(1).max(2048),
+		url: string$1().min(1).max(2048)
+	});
+	Resources = array(unknown()).max(64);
+	wellKnownGet = async (url) => {
+		const response = await fetch(url, {
+			redirect: "error",
+			signal: AbortSignal.timeout(5e3)
+		});
+		if (!response.ok) throw new MessagingError("relay_unavailable", `the relay answered ${response.status}`);
+		const text = await response.text();
+		if (Buffer.byteLength(text) > 16384) throw new MessagingError("too_large", "the relay's realm document is larger than 16 KiB");
+		return text;
+	};
+}));
+// packages/daemon/dist/consent/answer-preview.js
+function who(from) {
+	const name = cleanPeerText(from.name, {
+		singleLine: true,
+		maxChars: 80
+	}) || "someone";
+	const email = from.email === void 0 ? void 0 : cleanPeerText(from.email, {
+		singleLine: true,
+		maxChars: 100
+	});
+	return `${name} (${email !== void 0 && email !== "" ? `${email}, ` : ""}${ORG[from.org]})`;
+}
+function answersFor(kind) {
+	return kind === "suggestion" ? ["decline"] : kind === "contact" ? [
+		"accept",
+		"decline",
+		"block"
+	] : [
+		"once",
+		"always",
+		"decline",
+		"block"
+	];
+}
+function answerSentence(input) {
+	const { kind, answer } = input;
+	if (answer !== void 0 && !answersFor(kind).includes(answer)) throw new MessagingError("invalid_request", `a ${kind === "message" || kind === "task" ? "request to your agent" : kind === "contact" ? "message request" : "suggestion"} takes ${answersFor(kind).join(", ")}`);
+	const sender = who(input.from);
+	const single = input.count <= 1;
+	if (kind === "suggestion") {
+		const email = cleanPeerText(input.email ?? "", {
+			singleLine: true,
+			maxChars: 100
+		});
+		if (answer === void 0) return `Your agent ${input.agent} suggests you send a message request to ${email}.`;
+		return `Dismiss your agent ${input.agent}'s suggestion to contact ${email}. Nothing is sent.`;
+	}
+	if (kind === "contact") {
+		const thing = single ? "their message request" : `their ${input.count} message requests`;
+		if (answer === void 0) return `${sender} asks to message you.`;
+		if (answer === "accept") return `${sender} may message you from now on: ${single ? "their request becomes their first message" : "their requests become their first messages"}, and they get your card.`;
+		if (answer === "decline") return `Decline ${thing} from ${sender}. They are told it was declined.`;
+		return `Block ${sender}: nothing from them or their agents reaches you, and ${thing} ${single ? "is" : "are"} declined.`;
+	}
+	const thing = single ? `this ${kind}` : `these ${input.count} requests`;
+	const src = single ? `${sender}'s agent ${input.agent}` : `${sender}'s agents`;
+	const dst = single ? `your agent ${input.to}` : "your agents";
+	if (answer === void 0) return `${src} asks to send ${kind === "task" ? "a task" : "a message"} to ${dst}.`;
+	if (answer === "once") return `Deliver ${thing} from ${src} to ${dst} this once, guarded: ${single ? "your agent" : "your agents"} may answer only them.`;
+	if (answer === "always") return `Deliver ${thing} from ${src} to ${dst}, and let their agents ask yours from now on without asking you.`;
+	if (answer === "decline") return `Decline ${thing} from ${src}. They are told it was declined.`;
+	return `Block ${sender}: nothing from them or their agents reaches you, and ${thing} ${single ? "is" : "are"} declined.`;
+}
+var ORG;
+var init_answer_preview = __esmMin((() => {
+	init_dist$3();
+	ORG = {
+		same: "your org",
+		other: "another org",
+		none: "no org"
+	};
+}));
+// packages/daemon/dist/snapshot.js
+function sha256File(path) {
+	const data = readFileSync(path);
+	return {
+		bytes: data.length,
+		sha256: createHash("sha256").update(data).digest("hex")
+	};
+}
+var SNAPSHOT_HOLD_MS, Snapshots;
+var init_snapshot = __esmMin((() => {
+	init_dist$3();
+	init_dist$2();
+	SNAPSHOT_HOLD_MS = 36e5;
+	Snapshots = class {
+		#deps;
+		#timer;
+		constructor(deps) {
+			this.#deps = deps;
+		}
+		get folder() {
+			return join(this.#deps.run, "snapshot");
+		}
+		take() {
+			const folder = this.folder;
+			if (existsSync(folder)) throw new MessagingError("invalid_state", "a snapshot is held: release it with daemon.snapshot {done: true} first");
+			const group = this.#deps.group;
+			mkdirSync(folder, { mode: group === void 0 ? 448 : 488 });
+			try {
+				if (!IS_WINDOWS && group !== void 0) {
+					chownSync(folder, process.geteuid?.() ?? -1, group);
+					chmodSync(folder, 488);
+				}
+				const fileMode = group === void 0 ? 384 : 416;
+				const files = [];
+				const db = join(folder, "messaging.db");
+				this.#deps.vacuumInto(db);
+				if (existsSync(this.#deps.config)) writeFileSync(join(folder, "config.json"), readFileSync(this.#deps.config), { mode: fileMode });
+				for (const name of ["messaging.db", "config.json"]) {
+					const path = join(folder, name);
+					if (!existsSync(path)) continue;
+					if (!IS_WINDOWS) {
+						if (group !== void 0) chownSync(path, process.geteuid?.() ?? -1, group);
+						chmodSync(path, fileMode);
+					}
+					files.push({
+						name,
+						...sha256File(path)
+					});
+				}
+				const at = this.#deps.now();
+				const until = at + SNAPSHOT_HOLD_MS;
+				const manifest = {
+					storeSchema: this.#deps.storeSchema,
+					at,
+					files
+				};
+				writeFileSync(join(folder, "manifest.json"), `${JSON.stringify(manifest, null, 2)}\n`, { mode: fileMode });
+				if (!IS_WINDOWS && group !== void 0) chownSync(join(folder, "manifest.json"), process.geteuid?.() ?? -1, group);
+				clearTimeout(this.#timer);
+				this.#timer = setTimeout(() => this.release(), SNAPSHOT_HOLD_MS);
+				this.#timer.unref();
+				return {
+					folder,
+					files,
+					storeSchema: this.#deps.storeSchema,
+					at,
+					until
+				};
+			} catch (error) {
+				this.release();
+				if (error instanceof MessagingError) throw error;
+				throw new MessagingError("internal", `the snapshot failed: ${error.code ?? "error"}`);
+			}
+		}
+		release() {
+			clearTimeout(this.#timer);
+			this.#timer = void 0;
+			let present;
+			try {
+				lstatSync(this.folder);
+				present = true;
+			} catch {
+				present = false;
+			}
+			if (present) rmSync(this.folder, {
+				recursive: true,
+				force: true
+			});
+			return { released: present };
+		}
+		close() {
+			this.release();
+		}
+	};
+}));
 // packages/daemon/dist/notices.js
 function firstLine(text) {
 	const first = cleanPeerText(text.split(/\r\n|\n|\r/, 1)[0] ?? "", { singleLine: true });
@@ -18298,7 +18793,7 @@ function taskRow(r) {
 	return row;
 }
 var DatabaseSync$1, CHAT_COUNTER, MIGRATIONS, BASELINE, kvGet, kvSet, schemaNumber, TASKS, text$1, num, json, opt, Store, UNSPACED;
-var init_store$1 = __esmMin((() => {
+var init_store$2 = __esmMin((() => {
 	init_dist$3();
 	({DatabaseSync: DatabaseSync$1} = process.getBuiltinModule("node:sqlite"));
 	CHAT_COUNTER = "chat";
@@ -18601,6 +19096,10 @@ CREATE TABLE IF NOT EXISTS idempotency (
 			this.#statements.clear();
 			this.#db.close();
 		}
+		vacuumInto(path) {
+			if (this.#depth > 0) throw new MessagingError("invalid_state", "a snapshot is not taken inside a transaction");
+			this.#db.exec(`VACUUM INTO '${path.replaceAll("'", "''")}'`);
+		}
 		tx(fn) {
 			if (this.#depth > 0) {
 				const name = `sp${this.#depth}`;
@@ -19296,6 +19795,12 @@ CREATE TABLE IF NOT EXISTS idempotency (
 				lastAt: Number(row.at)
 			}));
 		}
+		awaitedRequests(sessions, terminal, limit) {
+			if (sessions.length === 0) return [];
+			return this.#all(`SELECT request FROM tasks WHERE role = 'requester' AND request IS NOT NULL
+         AND session IN (${sessions.map(() => "?").join(", ")}) AND state NOT IN (${terminal.map(() => "?").join(", ")})
+       ORDER BY updated_at DESC, task_id DESC LIMIT ?`, ...sessions, ...terminal, limit).map((row) => String(row.request));
+		}
 		task(taskId, role) {
 			const row = this.#get(`SELECT * FROM ${TASKS} WHERE task_id = ? AND role = ?`, taskId, role);
 			return row && taskRow(row);
@@ -20687,6 +21192,23 @@ function jellyConfig(path, jelly) {
 		if (config.deployment === "jelly") throw new MessagingError("invalid_request", "config.json says deployment jelly: start messagingd with --deployment jelly and the host's --act-key");
 		return;
 	}
+	if (jelly.realm !== void 0) {
+		if (config.realm === void 0) {
+			if (config.relay !== void 0 || config.person !== void 0) throw new MessagingError("invalid_request", `${path} is a roster home (relay, person): a Jelly host's home is pinned to a directory realm; give the service a new STATE_DIRECTORY`);
+			if (config.ipc?.agentGroup !== void 0) throw new MessagingError("invalid_request", "deployment jelly shares its sockets with --socket-group, not ipc.agentGroup");
+			writeConfig(path, {
+				...config,
+				realm: jelly.realm,
+				deployment: "jelly"
+			});
+			return;
+		}
+		const differs = realmMismatch(config.realm, jelly.realm);
+		if (differs.length > 0) {
+			const which = differs.map((member) => `${member} ${JSON.stringify(config.realm[member])} (the environment: ${JSON.stringify(jelly.realm[member])})`).join(", ");
+			throw new MessagingError("invalid_request", `${path} pins another realm: ${which}. A home never changes realm, and the daemon does not rewrite it; restore the variables the home was made with, or give the service a new STATE_DIRECTORY`);
+		}
+	}
 	if (config.realm === void 0) throw new MessagingError("invalid_request", "deployment jelly needs a directory realm: config.json has no realm (a Jelly host supervises no roster realm)");
 	if (config.ipc?.agentGroup !== void 0) throw new MessagingError("invalid_request", "deployment jelly shares its sockets with --socket-group, not ipc.agentGroup");
 	if (config.deployment !== "jelly") writeConfig(path, {
@@ -20715,13 +21237,16 @@ var init_daemon = __esmMin((() => {
 	init_roster_identity();
 	init_directory_home();
 	init_jelly$1();
+	init_jelly_env();
+	init_answer_preview();
+	init_snapshot();
 	init_notices();
 	init_counterpart();
 	init_resolve();
 	init_secrets();
 	init_roster_sync();
 	init_storage_errors();
-	init_store$1();
+	init_store$2();
 	init_tasks();
 	init_version();
 	init_wake_bridge();
@@ -20776,6 +21301,8 @@ var init_daemon = __esmMin((() => {
 		#closed = false;
 		#online = new Set();
 		#holders = new Map();
+		#ticketEnds = new Map();
+		#lapsed = new Map();
 		#policy = {
 			rate: inboundRateLimiter(),
 			presence: responseRateLimiter(),
@@ -20795,6 +21322,9 @@ var init_daemon = __esmMin((() => {
 		#requests;
 		#notices;
 		#jellyHost;
+		#attached = false;
+		#wakeArmed = false;
+		#snapshots;
 		#jellyAuth;
 		#state = "starting";
 		#sync;
@@ -20908,6 +21438,14 @@ var init_daemon = __esmMin((() => {
 				address: (sender, session) => peerRef(sender, session).address,
 				held: (row) => this.#notices.held(row)
 			});
+			this.#snapshots = new Snapshots({
+				run: paths.run,
+				config: paths.config,
+				vacuumInto: (path) => this.#store.vacuumInto(path),
+				storeSchema: 9,
+				group: options.jellyHost?.socketGroup,
+				now: this.#now
+			});
 			this.#notices = new Notices({
 				store,
 				now: this.#now,
@@ -20947,6 +21485,14 @@ var init_daemon = __esmMin((() => {
 		static async start(options) {
 			const paths = homePaths(options.home, options.jellyHost?.run);
 			ensureHome(paths);
+			const jelly = options.jellyHost;
+			if (jelly?.realm !== void 0 && readConfig(paths.config).realm === void 0) options = {
+				...options,
+				jellyHost: {
+					...jelly,
+					realm: await pinRealm(jelly.realm, options.wellKnown)
+				}
+			};
 			jellyConfig(paths.config, options.jellyHost);
 			const lock = acquireLock(paths.lock);
 			let store;
@@ -20980,6 +21526,7 @@ var init_daemon = __esmMin((() => {
 			} else if (entries.length > 0) this.#store.clearRoster();
 			this.#sync.load();
 			this.#store.keepAllLive(this.#now(), "cli");
+			this.#snapshots.release();
 			const handlers = this.#handlers();
 			const jelly = this.#jellyHost;
 			if (jelly) this.#jellyAuth = new JellyAuth({
@@ -21117,6 +21664,7 @@ var init_daemon = __esmMin((() => {
 				for (const server of this.#ipc) await server.close().catch(() => {});
 				await Promise.race([this.#flushing, new Promise((resolve) => setTimeout(resolve, 2e3).unref())]);
 				this.#store.close();
+				this.#snapshots.close();
 			} finally {
 				this.#lock.release();
 				this.#log("info", "daemon.stopped", { pid: process.pid });
@@ -21289,6 +21837,7 @@ var init_daemon = __esmMin((() => {
 				},
 				"request.list": async () => ({ requests: [...this.#holds.list().requests, ...await this.#requests.list()] }),
 				"request.answer": (p) => this.#requests.holds(p.id) ? this.#requests.answer(p) : this.#holds.answer(p),
+				"request.answer.preview": (p) => this.#answerPreview(p),
 				"contact.request": (p) => this.#requests.request(p),
 				"contact.request.preview": (p) => this.#requests.preview(p),
 				"card.get": async (p) => {
@@ -21297,6 +21846,11 @@ var init_daemon = __esmMin((() => {
 					return { sent: await this.#cards.get(p.person) };
 				},
 				"daemon.health": () => this.#health(),
+				"daemon.woke": () => this.#woke(),
+				"wake.arm": (p) => this.#wakeArm(p),
+				"wake.disarm": () => this.#wakeDisarm(),
+				"daemon.snapshot": (p) => p.done ? this.#snapshots.release() : this.#snapshots.take(),
+				"person.attached": (p) => this.#personAttached(p.attached),
 				"agents.list": () => this.#agentsList(),
 				"agents.read": (p) => this.#agentsRead(p),
 				"notice.subscribe": (p, ctx, authority) => this.#notices.subscribe(ctx, p, authority?.scope === "host" ? authority.expiresAt : void 0),
@@ -21498,6 +22052,11 @@ var init_daemon = __esmMin((() => {
 			let holders = this.#holders.get(p.key);
 			if (!holders) this.#holders.set(p.key, holders = new Set());
 			holders.add(ctx.id);
+			if (ticket) {
+				this.#ticketEnds.set(p.key, Math.max(this.#ticketEnds.get(p.key) ?? 0, ticket.exp * 1e3));
+				for (const id of this.#lapsed.get(p.key) ?? []) holders.add(id);
+				this.#lapsed.delete(p.key);
+			}
 			this.#sessionsChanged();
 			return {
 				session: name,
@@ -21505,9 +22064,23 @@ var init_daemon = __esmMin((() => {
 			};
 		}
 		#bound(p, ctx) {
+			const ends = this.#ticketEnds.get(p.key);
+			const held = this.#holders.get(p.key)?.has(ctx.id) === true || this.#lapsed.get(p.key)?.has(ctx.id) === true;
+			if (ends !== void 0 && ends <= this.#now() && held) throw new MessagingError("ticket_invalid", "the session ticket this session registered with has expired: register again with a fresh ticket from the host");
 			if (!this.#holders.get(p.key)?.has(ctx.id)) throw new MessagingError("not_found", "this session key is not registered on this connection");
 			return p;
 		}
+		#expireTickets(now) {
+			let changed = false;
+			for (const [key, ends] of this.#ticketEnds) {
+				if (ends > now || !this.#holders.has(key)) continue;
+				this.#lapsed.set(key, this.#holders.get(key));
+				this.#holders.delete(key);
+				this.#log("info", "session.ticket.expired", {});
+				if (this.#store.keepSession(key, now)) changed = true;
+			}
+			if (changed) this.#sessionsChanged();
+		}
 		#sessionOf(key) {
 			const session = this.#store.sessionByKey(key);
 			if (!session) throw new MessagingError("not_found", "this session key is not registered");
@@ -21528,6 +22101,8 @@ var init_daemon = __esmMin((() => {
 		}
 		#unregister(p) {
 			this.#holders.delete(p.key);
+			this.#ticketEnds.delete(p.key);
+			this.#lapsed.delete(p.key);
 			if (this.#store.keepSession(p.key, this.#now())) this.#sessionsChanged();
 			return { ok: true };
 		}
@@ -21536,9 +22111,11 @@ var init_daemon = __esmMin((() => {
 			this.#chats.disconnected(ctx);
 			this.#notices.disconnected(ctx.id);
 			let changed = false;
+			for (const [key, lapsed] of [...this.#lapsed]) if (lapsed.delete(ctx.id) && lapsed.size === 0) this.#lapsed.delete(key);
 			for (const [key, holders] of [...this.#holders]) {
 				if (!holders.delete(ctx.id) || holders.size > 0) continue;
 				this.#holders.delete(key);
+				this.#ticketEnds.delete(key);
 				if (this.#store.sessionByKey(key)?.agent === "cli") continue;
 				if (this.#store.keepSession(key, this.#now())) changed = true;
 			}
@@ -21586,7 +22163,8 @@ var init_daemon = __esmMin((() => {
 						unregisteredAt: s.unregisteredAt ?? this.#now()
 					})) : this.#store.sessions(), me.label, this.#store.next("presence"), this.#transport?.advertise?.(), {
 						wake: (s) => this.#wakes(s),
-						share: new Set(this.#currentConfig().presence?.share ?? [])
+						share: new Set(this.#currentConfig().presence?.share ?? []),
+						away: this.#away()
 					}),
 					now: this.#now()
 				});
@@ -21947,10 +22525,17 @@ var init_daemon = __esmMin((() => {
 		async #peopleGet(p) {
 			const { realm, identity } = this.#joined();
 			const profile = await realm.profile(p.person);
+			const fresh = this.#now() - (realm.kind === "directory" ? this.#tuning.presenceOnlineMs : this.#tuning.presenceMaxMs * 2);
+			const away = (machine) => {
+				if (machine === identity.machine) return this.#away();
+				const row = this.#store.directoryRow(machine);
+				return row !== void 0 && row.receivedAt >= fresh && row.presence.away === true;
+			};
 			const devices = realm.known(p.person).devices.map((device) => ({
 				device: device.machine,
 				label: device.label,
-				self: device.machine === identity.machine
+				self: device.machine === identity.machine,
+				...away(device.machine) ? { away: true } : {}
 			}));
 			return {
 				person: p.person,
@@ -22879,6 +23464,7 @@ var init_daemon = __esmMin((() => {
 			if (this.#closed) return;
 			this.#directory?.sweep();
 			const now = this.#now();
+			this.#expireTickets(now);
 			let sessions = 0;
 			try {
 				this.#tx(() => {
@@ -23149,6 +23735,135 @@ var init_daemon = __esmMin((() => {
 				self: d.machine === identity.machine
 			})) };
 		}
+		#away() {
+			return this.#jellyHost !== void 0 && !this.#attached;
+		}
+		#personAttached(attached) {
+			if (attached !== this.#attached) {
+				this.#attached = attached;
+				this.#log("info", "person.attached", { attached });
+				this.#presenceSoon();
+			}
+			return { ok: true };
+		}
+		#woke() {
+			this.#log("info", "daemon.woke", {});
+			this.#transport?.retryNow?.();
+			this.sweep();
+			this.#presenceSoon();
+			this.#wokeHook();
+			return { ok: true };
+		}
+		#wokeHook() {
+			if (!this.#wakeArmed) return;
+			this.#wakeDisarm().catch((error) => this.#log("warn", "wake.disarm.failed", { code: codeOf$2(error) }));
+		}
+		async #wakeArm(p) {
+			const home = this.#directory;
+			if (!home) throw new MessagingError("invalid_state", "wake tickets are for a directory realm");
+			if (home.person() === void 0) throw new MessagingError("invalid_state", "this device is not bound yet");
+			const issuer = this.#config.realm?.issuer;
+			if (issuer === void 0 || new URL(p.url).origin !== new URL(issuer).origin) throw new MessagingError("invalid_request", "the wake URL is not on the realm's Jelly ID");
+			const agents = [...new Set(p.agents)];
+			const awaiting = this.#store.awaitedRequests(agents, TERMINAL_STATES, 500);
+			const sent = await home.wake({
+				url: p.url,
+				ticket: p.ticket,
+				agents,
+				awaiting
+			});
+			this.#wakeArmed = true;
+			this.#log("info", "wake.arm", {
+				relay: sent === "sent" ? "armed" : "pending",
+				agents: agents.length,
+				awaiting: awaiting.length
+			});
+			return {
+				relay: sent === "sent" ? "armed" : "pending",
+				awaiting: awaiting.length
+			};
+		}
+		async #wakeDisarm() {
+			const home = this.#directory;
+			if (!home) throw new MessagingError("invalid_state", "wake tickets are for a directory realm");
+			const sent = await home.wake("disarm");
+			this.#wakeArmed = false;
+			this.#log("info", "wake.disarm", { relay: sent === "sent" ? "disarmed" : "pending" });
+			return { relay: sent === "sent" ? "disarmed" : "pending" };
+		}
+		async #answerPreview(p) {
+			const { realm, me } = this.#joined();
+			const now = this.#now();
+			const profile = async (person) => {
+				const found = await realm.profile(person).catch(() => void 0);
+				return found ? {
+					name: found.name.slice(0, 200),
+					...found.email !== void 0 ? { email: found.email.slice(0, 320) } : {},
+					org: found.org
+				} : {
+					name: String(person).slice(0, 200),
+					org: "none"
+				};
+			};
+			const answer = p.answer;
+			const ask = this.#store.held(p.id);
+			if (ask && ask.exp > now) {
+				const kind = ask.payload.kind;
+				const count = p.all ? this.#store.helds(ask.person).filter((row) => row.exp > now).length : 1;
+				const from = await profile(ask.person);
+				const agent = ask.envelope.from.agent ?? "";
+				return {
+					kind,
+					from,
+					...agent !== "" ? { agent } : {},
+					to: ask.session,
+					count,
+					sentence: answerSentence({
+						kind,
+						from,
+						agent,
+						to: ask.session,
+						answer,
+						count
+					})
+				};
+			}
+			const request = this.#store.contactRequest(p.id);
+			if (request && request.exp > now) {
+				const count = p.all ? this.#store.contactRequests(request.person).filter((row) => row.exp > now).length : 1;
+				const from = await profile(request.person);
+				return {
+					kind: "contact",
+					from,
+					count,
+					sentence: answerSentence({
+						kind: "contact",
+						from,
+						answer,
+						count
+					})
+				};
+			}
+			const suggestion = this.#store.contactSuggestion(p.id);
+			if (suggestion) {
+				const from = await profile(me.person);
+				return {
+					kind: "suggestion",
+					from,
+					agent: suggestion.session,
+					count: 1,
+					sentence: answerSentence({
+						kind: "suggestion",
+						from,
+						agent: suggestion.session,
+						email: suggestion.email,
+						answer,
+						count: 1
+					})
+				};
+			}
+			throw new MessagingError("not_found", "no request with that id is held here");
+		}
 		#me() {
 			return (this.#realm ?? this.#directory?.realm)?.self()?.person;
 		}
@@ -26709,6 +27424,9 @@ var init_direct_transport = __esmMin((() => {
 		presence(env) {
 			this.#relay.presence(env);
 		}
+		retryNow() {
+			this.#relay.retryNow?.();
+		}
 		appendRoster(entry) {
 			return this.#relay.appendRoster(entry);
 		}
@@ -26767,7 +27485,7 @@ var init_pages = __esmMin((() => {
 }));
 // packages/relay/dist/store.js
 var DatabaseSync;
-var init_store = __esmMin((() => {
+var init_store$1 = __esmMin((() => {
 	init_dist$3();
 	({DatabaseSync} = process.getBuiltinModule("node:sqlite"));
 }));
@@ -26789,6 +27507,10 @@ var init_feed = __esmMin((() => {
 var init_pacing = __esmMin((() => {
 	init_dist$3();
 }));
+// packages/relay/dist/directory/wakes.js
+var init_wakes = __esmMin((() => {
+	init_dist$3();
+}));
 // packages/relay/dist/directory/module.js
 var init_module = __esmMin((() => {
 	init_dist$3();
@@ -26796,6 +27518,11 @@ var init_module = __esmMin((() => {
 	init_feed();
 	init_jelly();
 	init_pacing();
+	init_wakes();
+}));
+// packages/relay/dist/directory/store.js
+var init_store = __esmMin((() => {
+	init_dist$3();
 }));
 // packages/relay/dist/server.js
 var init_server = __esmMin((() => {
@@ -26804,8 +27531,9 @@ var init_server = __esmMin((() => {
 	init_frames();
 	init_limits();
 	init_pages();
-	init_store();
+	init_store$1();
 	init_module();
+	init_store();
 }));
 // packages/relay/dist/backoff.js
 function backoffDelay(attempt, minMs, maxMs, random = Math.random) {
@@ -27170,6 +27898,13 @@ var init_client = __esmMin((() => {
 			this.#attempt = 0;
 			if (!this.#ws && !this.#retryTimer) this.#open();
 		}
+		retryNow() {
+			if (!this.#running || this.#ws || !this.#retryTimer) return;
+			clearTimeout(this.#retryTimer);
+			this.#retryTimer = void 0;
+			this.#attempt = 0;
+			this.#open();
+		}
 		async stop() {
 			this.#running = false;
 			clearTimeout(this.#retryTimer);
@@ -27276,6 +28011,18 @@ var init_client = __esmMin((() => {
 				persons
 			});
 		}
+		wakeArm(arm) {
+			return this.#dir("dir.ok", {
+				t: "wake.arm",
+				url: arm.url,
+				ticket: arm.ticket,
+				agents: arm.agents,
+				awaiting: arm.awaiting
+			});
+		}
+		wakeDisarm() {
+			return this.#dir("dir.ok", { t: "wake.disarm" });
+		}
 		dirErase(entries, token) {
 			return this.#dir("dir.ok", {
 				t: "dir.erase",
@@ -27613,6 +28360,7 @@ var init_relay_transport = __esmMin((() => {
 		#running = false;
 		#watched = [];
 		#presence = [];
+		#wake;
 		#opening = new Set();
 		constructor(options) {
 			this.#options = options;
@@ -27649,6 +28397,7 @@ var init_relay_transport = __esmMin((() => {
 					for (const done of [...this.#opening]) done();
 					if (this.#watched.length > 0) client.dirWatch(this.#watched).catch(() => {});
 					if (this.#presence.length > 0) client.presenceWatch(this.#presence).catch(() => {});
+					if (this.#wake !== void 0) this.#sendWake(client, this.#wake).catch(() => {});
 					const sth = "sth" in state ? STH.safeParse(state.sth) : void 0;
 					pushes.state(true, sth?.success ? sth.data : void 0);
 				},
@@ -27760,6 +28509,30 @@ var init_relay_transport = __esmMin((() => {
 		presence(env) {
 			this.#client?.presence(env);
 		}
+		retryNow() {
+			this.#client?.retryNow();
+		}
+		async wake(state) {
+			this.#wake = state;
+			const client = this.#connect();
+			if (!client?.connected) return "pending";
+			try {
+				await this.#sendWake(client, state);
+				return "sent";
+			} catch (error) {
+				if (isMessagingError(error) && error.code === "relay_unavailable") return "pending";
+				throw error;
+			}
+		}
+		async #sendWake(client, state) {
+			try {
+				parse(DirOkFrame, await (state === "disarm" ? client.wakeDisarm() : client.wakeArm(state)));
+			} catch (error) {
+				if (!(isMessagingError(error) && error.code === "relay_unavailable") && this.#wake === state) this.#wake = void 0;
+				throw error;
+			}
+			if (this.#wake === state) this.#wake = void 0;
+		}
 		async presenceWatch(persons) {
 			this.#presence = [...persons];
 			const client = this.#connect();
@@ -27777,6 +28550,7 @@ var dist_exports = __exportAll({
 	Config: () => Config,
 	DirectConfig: () => DirectConfig,
 	DirectTransport: () => DirectTransport,
+	JELLY_ENV: () => JELLY_ENV,
 	LockHeldError: () => LockHeldError,
 	PROTOCOL: () => PROTOCOL,
 	RelayDirectoryLink: () => RelayDirectoryLink,
@@ -27785,12 +28559,15 @@ var dist_exports = __exportAll({
 	acquireLock: () => acquireLock,
 	createLogger: () => createLogger,
 	homePaths: () => homePaths,
+	jellyEnvNamed: () => jellyEnvNamed,
 	jellyLabel: () => jellyLabel,
 	readActKey: () => readActKey,
 	readConfig: () => readConfig,
+	readJellyEnv: () => readJellyEnv,
 	relayDirectoryLink: () => relayDirectoryLink,
 	relayOps: () => relayOps,
 	relayTransport: () => relayTransport,
+	relayUrlOf: () => relayUrlOf,
 	startDaemon: () => startDaemon,
 	withDirect: () => withDirect
 });
@@ -27812,7 +28589,8 @@ var init_dist = __esmMin((() => {
 	init_log();
 	init_version();
 	init_jelly$1();
-	init_store$1();
+	init_jelly_env();
+	init_store$2();
 	init_dist$3();
 }));
 // packages/daemon/dist/bin/daemon-main.js
@@ -27827,7 +28605,13 @@ Runs the Messaging daemon in the foreground for one MESSAGING_HOME (default ~/.m
   --version             print the version, the store schema and the protocol (--json: as JSON); needs no home
   --help                print this help
 
-Under a Jelly host (spec §8.11):
+Under a Jelly host (spec §8.11), with no arguments: the environment start contract. JELLY_ACTION_KEY (the path of
+the host's public action key) starts it; STATE_DIRECTORY is the home, RUNTIME_DIRECTORY the socket folder,
+JELLY_DEVICE_LABEL the label, JELLY_SOCKET_GROUP the group, and JELLY_ID_ISSUER, JELLY_RESOURCES (the messaging entry)
+and JELLY_SERVICE_ANCHOR the realm, which the first start writes to config.json. Flags win: a start with
+--deployment jelly reads none of these; any other start with JELLY_* variables set is refused.
+
+Or by flags:
   --deployment jelly    every human and admin call needs the host's action grant
   --act-key <path>      the host's public action key (an Ed25519 JWK); required
   --label <label>       this device's label, from the host; required
@@ -27884,7 +28668,16 @@ function versionText(json, info) {
 	if (json) return `${JSON.stringify(info)}\n`;
 	return `messagingd ${info.version} (store schema ${info.storeSchema}, protocol ${info.protocol})\n`;
 }
-async function daemonMain(argv) {
+function startSource(values, env, named) {
+	if (Object.keys(values).length > 0) {
+		if (values["--deployment"] === "jelly" || named.length === 0) return "flags";
+		return `${named[0]} is set, so the environment starts a Jelly host, but the flags start a self-host daemon; use one or the other`;
+	}
+	if ((env.JELLY_ACTION_KEY ?? "") !== "") return "environment";
+	if (named.length > 0) return `${named[0]} is set without JELLY_ACTION_KEY: a Jelly start needs the host's action key`;
+	return "self";
+}
+async function daemonMain(argv, env = process.env) {
 	const args = parseArgs(argv);
 	if (typeof args === "string") {
 		process.stderr.write(`messagingd: ${args}\n\n${USAGE}`);
@@ -27894,7 +28687,7 @@ async function daemonMain(argv) {
 		process.stdout.write(USAGE);
 		return 0;
 	}
-	const { startDaemon, homePaths, createLogger, readActKey, jellyLabel, VERSION, STORE_SCHEMA, PROTOCOL } = await Promise.resolve().then(() => (init_dist(), dist_exports));
+	const { startDaemon, homePaths, createLogger, readActKey, jellyLabel, readJellyEnv, jellyEnvNamed, VERSION, STORE_SCHEMA, PROTOCOL } = await Promise.resolve().then(() => (init_dist(), dist_exports));
 	if (args.version) {
 		process.stdout.write(versionText(args.json === true, {
 			version: VERSION,
@@ -27904,7 +28697,19 @@ async function daemonMain(argv) {
 		return 0;
 	}
 	const { values } = args;
-	const home = values["--home"] ? resolve(values["--home"]) : messagingHome();
+	const source = startSource(values, env, jellyEnvNamed(env));
+	if (source !== "flags" && source !== "environment" && source !== "self") {
+		process.stderr.write(`messagingd: ${source}\n`);
+		return 2;
+	}
+	let fromEnv;
+	if (source === "environment") try {
+		fromEnv = readJellyEnv(env);
+	} catch (error) {
+		process.stderr.write(`messagingd: ${error instanceof Error ? error.message : "the Jelly environment is invalid"}\n`);
+		return 1;
+	}
+	const home = fromEnv ? resolve(fromEnv.home) : values["--home"] ? resolve(values["--home"]) : messagingHome();
 	const level = process.env.MESSAGING_LOG_LEVEL;
 	const log = createLogger({
 		file: homePaths(home).log,
@@ -27913,7 +28718,14 @@ async function daemonMain(argv) {
 	});
 	let daemon;
 	try {
-		const jellyHost = values["--deployment"] === "jelly" ? {
+		const jellyHost = fromEnv ? {
+			actKey: readActKey(fromEnv.actKeyPath),
+			label: fromEnv.label,
+			kind: "jelly-host",
+			realm: fromEnv.realm,
+			...fromEnv.socketGroup !== void 0 ? { socketGroup: fromEnv.socketGroup } : {},
+			...fromEnv.run !== void 0 ? { run: resolve(fromEnv.run) } : {}
+		} : values["--deployment"] === "jelly" ? {
 			actKey: readActKey(resolve(values["--act-key"])),
 			label: jellyLabel(values["--label"]),
 			kind: "jelly-host",
@@ -27925,6 +28737,10 @@ async function daemonMain(argv) {
 			log,
 			...jellyHost ? { jellyHost } : {}
 		});
+		if (jellyHost) log("info", "daemon.start", {
+			deployment: "jelly",
+			source
+		});
 	} catch (error) {
 		process.stderr.write(`messagingd: ${error instanceof Error ? error.message : "failed to start"}\n`);
 		return 1;