@pairlobby/server-core 0.23.0 → 0.25.0

package/dist/service.d.ts

@@ -1,5 +1,5 @@
 import { DEFAULT_ROOM_POLICY } from '@pairlobby/protocol';
-import type { AdapterCapabilities, Attachment, AutoClosePolicy, FileRecord, MessageRequest, RequestPage, ExportResponse, ListFilesResponse, ParticipantKind, PermissionChange, RenameSelfRequest, NameSource, ParticipantRole, ReadEventsResponse, RelayLimits, RoomEvent, RoomInvitationChange, RoomPolicy, RoomSnapshot, ResolveRequestRequest, SendEventRequest } from '@pairlobby/protocol';
+import type { AdapterCapabilities, Attachment, AutoClosePolicy, FileRecord, MessageRequest, RequestPage, ExportResponse, ListFilesResponse, ParticipantKind, PermissionChange, RenameSelfRequest, NameSource, ParticipantRole, ReadEventsResponse, ReceiptMode, ReceiptResponse, ReceiptUpdate, RelayLimits, RoomRecord, RoomEvent, RoomInvitationChange, RoomPolicy, RoomSnapshot, ResolveRequestRequest, SendEventRequest } from '@pairlobby/protocol';
 import { TurnCoordinator } from './turns.js';
 import type { RoomStore } from './store.js';
 type InviteDirectory = {
@@ -39,6 +39,8 @@ export interface Identity {
     kind: ParticipantKind;
     sessionId?: string | undefined;
     capabilities?: AdapterCapabilities | undefined;
+    /** The relay member joining, verified by the relay from a personal token. Never taken from a client request. */
+    member?: string | undefined;
 }
 export interface CreateRoomInput extends Identity {
     name: string;
@@ -51,6 +53,8 @@ export interface CreateRoomInput extends Identity {
      * relay with one Durable Object per room. Never taken from a client request.
      */
     roomId?: string;
+    /** The relay member creating the room, verified by the relay from a personal token. Never taken from a client request. */
+    owner?: string | undefined;
 }
 export interface CreatedRoom {
     roomId: string;
@@ -87,6 +91,18 @@ export type Clock = () => number;
 export type RelayProfile = {
     files: boolean;
     limits: RelayLimits;
+    receiptMode: ReceiptMode;
+};
+export type RoomServiceOptions = {
+    /** How plain receipts are kept (`RECEIPT_MODES`); `both` until every client in use reads watermarks. */
+    receiptMode?: ReceiptMode;
+};
+/** The room with this participant's watermark moved up to `throughSeq`, never past the last event; the same room when it would not move. */
+export declare function withReceipt(room: RoomRecord, participantId: string, throughSeq: number, at: number): RoomRecord;
+/** The watermarks that moved after `after`, for a read that asked for them. */
+export declare function receiptsSince(room: RoomRecord, after: number): {
+    receipts: ReceiptUpdate[];
+    receiptRevision: number;
 };
 /** The limits a new room gets under `policy`, as a relay reports them; file limits only where files are kept. */
 export declare function relayLimits(policy: RoomPolicy, files: boolean): RelayLimits;
@@ -96,11 +112,12 @@ export declare class RoomService {
     private readonly store;
     private readonly now;
     readonly turns: TurnCoordinator;
+    readonly receiptMode: ReceiptMode;
     /**
      * `roomPolicy` is what a new room gets when the caller names no policy, such as a
      * self-hosted relay's configured limits. Existing rooms keep the policy they were made with.
      */
-    constructor(store: RoomStore, now?: Clock, directory?: InviteDirectory | undefined, roomPolicy?: RoomPolicy);
+    constructor(store: RoomStore, now?: Clock, directory?: InviteDirectory | undefined, roomPolicy?: RoomPolicy, options?: RoomServiceOptions);
     private ctx;
     private view;
     /** What the room looks like, plus what this relay can do that depends on its store rather than on the room. */
@@ -126,9 +143,24 @@ export declare class RoomService {
      * crash between the two steps leaves a resumable reservation rather than an
      * invite a different stranger can claim.
      */
+    /** The room an invite's digest belongs to, for routing before the room checks the code; null when no invite has it. */
+    inviteRoom(digest: string): Promise<string | null>;
     redeemInvite(input: RedeemInput): Promise<RedeemResult>;
     send(roomId: string, credential: string, request: SendEventRequest): Promise<SentEventResult>;
     acknowledgeMessage(roomId: string, credential: string, eventId: string): Promise<MessageRequest | null>;
+    /**
+     * `POST /v1/rooms/:id/receipts`: this participant has received every event up to `throughSeq`.
+     * Moves their watermark and marks their requests up to there received, with no event.
+     */
+    receipt(roomId: string, credential: string, throughSeq: number): Promise<ReceiptResponse>;
+    /** A plain receipt with no event: the request it answers when it is addressed to this participant, else their watermark. */
+    private plainReceipt;
+    /** Writes the moved watermark and the requests it marks received, in one write without an event. */
+    private moveWatermark;
+    /** This participant's requests whose message is at or before `throughSeq` and not yet received, marked received at `now`. */
+    private receivedThrough;
+    /** The transcript seq of a request's message; 0 when that message is no longer retained, which puts it behind any watermark. */
+    private messageSeqOf;
     private publicRequest;
     requests(roomId: string, credential: string, after?: number, limit?: number, recipientId?: string, supportsTurns?: boolean): Promise<RequestPage>;
     request(roomId: string, credential: string, eventId: string): Promise<MessageRequest>;
@@ -174,7 +206,7 @@ export declare class RoomService {
      */
     closeDueRooms(limit?: number): Promise<AutoCloseSweep>;
     close(roomId: string, credential: string): Promise<RoomEvent>;
-    read(roomId: string, credential: string, after: number, limit: number): Promise<ReadEventsResponse>;
+    read(roomId: string, credential: string, after: number, limit: number, receiptsAfter?: number): Promise<ReadEventsResponse>;
     /** Older group events kept the all flag only in their canonical idempotency request. */
     private restoreAudience;
     snapshot(roomId: string, credential: string): Promise<RoomSnapshot>;

package/dist/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmF,mBAAmB,EAAsI,MAAM,qBAAqB,CAAC;AAC/Q,OAAO,KAAK,EACR,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAEhB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,qBAAqB,EAErB,gBAAgB,EACnB,MAAM,qBAAqB,CAAC;AAwC7B,OAAO,EAAC,eAAe,EAAa,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAY,SAAS,EAAC,MAAM,YAAY,CAAC;AAGrD,KAAK,eAAe,GAAG;IACnB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrF,CAAC;AAEF,KAAK,YAAY,GAAG;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,CAAC;AAEhF,KAAK,eAAe,GAAG;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAC,CAAC;AACjE,MAAM,MAAM,uBAAuB,GAAG;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAC,CAAC;AAEzG,KAAK,cAAc,GAAG,QAAQ,GAAG;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAC,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,SAAS,CAAC;IACjB,sFAAsF;IACtF,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACpC,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,YAAY,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,eAAgB,SAAQ,QAAQ;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAC,CAAC;IACjD,QAAQ,EAAE,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,WAAY,SAAQ,QAAQ;IACzC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,YAAY,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU,GAAG;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAC,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAC,CAAC;AAEjE,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC;AAEjC,MAAM,MAAM,YAAY,GAAG;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAC,CAAC;AAEjE,iHAAiH;AACjH,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAQ3E;AAED,qBAAa,WAAW;IAYhB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAZ/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAEhC;;;OAGG;gBAEC,KAAK,EAAE,SAAS,EAChB,GAAG,GAAE,KAAwB,EACZ,SAAS,CAAC,EAAE,eAAe,YAAA,EAC3B,UAAU,GAAE,UAAgC;IAOjE,OAAO,CAAC,GAAG;YAIG,IAAI;IAQlB,+GAA+G;IAC/G,OAAO,CAAC,UAAU;IAIlB,oGAAoG;IACpG,YAAY,IAAI,YAAY;IAK5B,OAAO,CAAC,SAAS;IAOjB;;;OAGG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IA+B7F,8IAA8I;IACxI,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;YASjE,SAAS;IAIjB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAa7F,uFAAuF;YACzE,WAAW;IAqBnB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAuBxD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,UAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA+CpK;;;;OAIG;IACG,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IA2FvD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAsP7F,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAqB7G,OAAO,CAAC,aAAa;IAOf,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,SAAI,EAAE,KAAK,SAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,aAAa,UAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAyBtI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAS3F,yFAAyF;IACnF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAuFnI,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlF,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAIvG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAQxH,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQvG,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQrI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAInH;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAMpG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3F,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI7D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAcjE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ/F,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5E,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;IAInH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAIrG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAI9F,2IAA2I;IACrI,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5G,uFAAuF;IACjF,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAI/E;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAItF,kGAAkG;YACpF,iBAAiB;IA0BzB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3F,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC;IAOtG;;;OAGG;IACG,aAAa,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,cAAc,CAAC;IAWlD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI7D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAWzG,wFAAwF;YAC1E,eAAe;IAiBvB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAMzE,4GAA4G;IACtG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAiBzE,yEAAyE;IACnE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAUjD,QAAQ;CAIzB;AAWD,OAAO,EAAC,mBAAmB,EAAC,CAAC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAmF,mBAAmB,EAAwJ,MAAM,qBAAqB,CAAC;AACjS,OAAO,KAAK,EACR,mBAAmB,EACnB,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAEhB,iBAAiB,EACjB,UAAU,EACV,eAAe,EAEf,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,oBAAoB,EACpB,UAAU,EACV,YAAY,EACZ,qBAAqB,EAErB,gBAAgB,EACnB,MAAM,qBAAqB,CAAC;AAwC7B,OAAO,EAAC,eAAe,EAAa,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAY,SAAS,EAAC,MAAM,YAAY,CAAC;AAGrD,KAAK,eAAe,GAAG;IACnB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrF,CAAC;AAEF,KAAK,YAAY,GAAG;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,CAAC;AAEhF,KAAK,eAAe,GAAG;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAC,CAAC;AACjE,MAAM,MAAM,uBAAuB,GAAG;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,cAAc,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAC,CAAC;AAEzG,KAAK,cAAc,GAAG,QAAQ,GAAG;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAC,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC5B,KAAK,EAAE,SAAS,CAAC;IACjB,sFAAsF;IACtF,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACpC,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,YAAY,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC/C,gHAAgH;IAChH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,eAAgB,SAAQ,QAAQ;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACtC,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0HAA0H;IAC1H,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAC,CAAC;IACjD,QAAQ,EAAE,YAAY,CAAC;CAC1B;AAED,MAAM,WAAW,WAAY,SAAQ,QAAQ;IACzC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,YAAY,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU,GAAG;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAC,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAC,CAAC;AAEjE,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC;AAEjC,MAAM,MAAM,YAAY,GAAG;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAC,CAAC;AAE3F,MAAM,MAAM,kBAAkB,GAAG;IAC7B,wGAAwG;IACxG,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B,CAAC;AAUF,4IAA4I;AAC5I,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU,CAO/G;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAC,CAGnH;AAED,iHAAiH;AACjH,wBAAgB,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAQ3E;AAED,qBAAa,WAAW;IAahB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAb/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC;;;OAGG;gBAEC,KAAK,EAAE,SAAS,EAChB,GAAG,GAAE,KAAwB,EACZ,SAAS,CAAC,EAAE,eAAe,YAAA,EAC3B,UAAU,GAAE,UAAgC,EAC7D,OAAO,GAAE,kBAAuB;IAQpC,OAAO,CAAC,GAAG;YAIG,IAAI;IAQlB,+GAA+G;IAC/G,OAAO,CAAC,UAAU;IAIlB,oGAAoG;IACpG,YAAY,IAAI,YAAY;IAK5B,OAAO,CAAC,SAAS;IAOjB;;;OAGG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IA+B7F,8IAA8I;IACxI,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;YASjE,SAAS;IAIjB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAa7F,uFAAuF;YACzE,WAAW;IAqBnB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAyBxD,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,UAAO,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA+CpK;;;;OAIG;IACH,uHAAuH;IACjH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIlD,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IA4FvD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqQ7F,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IA6B7G;;;OAGG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAY/F,4HAA4H;YAC9G,YAAY;IAqB1B,oGAAoG;YACtF,aAAa;IAU3B,6HAA6H;YAC/G,eAAe;IAyB7B,gIAAgI;YAClH,YAAY;IAI1B,OAAO,CAAC,aAAa;IAOf,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,SAAI,EAAE,KAAK,SAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,aAAa,UAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IAyBtI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAS3F,yFAAyF;IACnF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAuFnI,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlF,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAIvG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAQxH,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQvG,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQrI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAInH;;;;OAIG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAMpG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3F,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI7D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAcjE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ/F,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5E,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;IAInH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAIrG,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAI9F,2IAA2I;IACrI,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC;IAI5G,uFAAuF;IACjF,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAI/E;;;;OAIG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAItF,kGAAkG;YACpF,iBAAiB;IA0BzB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IAI3F,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC;IAOtG;;;OAGG;IACG,aAAa,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,cAAc,CAAC;IAWlD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI7D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAWjI,wFAAwF;YAC1E,eAAe;IAiBvB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAMzE,4GAA4G;IACtG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAiBzE,yEAAyE;IACnE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAUjD,QAAQ;CAIzB;AAWD,OAAO,EAAC,mBAAmB,EAAC,CAAC"}

package/dist/service.js

@@ -1,10 +1,30 @@
 //! Room operations shared by every transport. The Cloudflare Durable Object and
 //! the Node server both run this; only the store and the socket layer differ.
-import { ABSOLUTE_MAX_FILE_BYTES, DEFAULT_MAX_FILE_BYTES, DEFAULT_MAX_RETAINED_FILE_BYTES, DEFAULT_ROOM_POLICY, ProtocolError, UNATTACHED_FILE_LIFETIME_MS, formatFileSize, hashCredential, newId, newInviteCode, normalizeInviteCode, safeFileName } from '@pairlobby/protocol';
+import { ABSOLUTE_MAX_FILE_BYTES, DEFAULT_MAX_FILE_BYTES, DEFAULT_MAX_RETAINED_FILE_BYTES, DEFAULT_ROOM_POLICY, PROTOCOL_VERSION, ProtocolError, UNATTACHED_FILE_LIFETIME_MS, formatFileSize, hashCredential, newId, newInviteCode, normalizeInviteCode, safeFileName } from '@pairlobby/protocol';
 import { assertRoomWritable, appendEvent, assertRoomJoinable, assertCanWrite, assertCanAcknowledge, assertActiveMember, assertController, assertPermitted, authenticate, closeRoom, createRoom, joinAsGuest, joinOnLocalNetwork, recordInvitation, joinRoom, leaveRoom, rejoinRoom, renameRoom, renameSelf, requestControl, revokeParticipant, sendEvent, setExpiry, setAutoClose, setInviteRole, setJoinPolicy, setLocalJoin, setLocked, setMuted, setParticipantPermissions, setParticipantRole, setRoomPermissions, emptyMutation, toSnapshot } from '@pairlobby/room-core';
 import { stableStringify } from './stable-json.js';
 import { TurnCoordinator, assertTurn } from './turns.js';
 import { AutoCloseStore } from './auto-close-store.js';
+/** Requests a watermark marks received in one write; the rest wait for the next one. */
+const WATERMARK_REQUEST_LIMIT = 2000;
+/** A receipt that only says the message arrived: no Read stage, no action. */
+function isPlainReceipt(request) {
+    return request.type === 'message.received' && !request.payload.stage && !request.payload.action;
+}
+/** The room with this participant's watermark moved up to `throughSeq`, never past the last event; the same room when it would not move. */
+export function withReceipt(room, participantId, throughSeq, at) {
+    const through = Math.min(throughSeq, room.nextSeq - 1);
+    if (through <= (room.receipts?.[participantId]?.throughSeq ?? 0)) {
+        return room;
+    }
+    const revision = (room.receiptRevision ?? 0) + 1;
+    return { ...room, receipts: { ...room.receipts, [participantId]: { throughSeq: through, revision, at } }, receiptRevision: revision };
+}
+/** The watermarks that moved after `after`, for a read that asked for them. */
+export function receiptsSince(room, after) {
+    const receipts = Object.entries(room.receipts ?? {}).filter(([, mark]) => mark.revision > after).map(([participantId, mark]) => ({ participantId, ...mark }));
+    return { receipts: receipts.sort((a, b) => a.revision - b.revision), receiptRevision: room.receiptRevision ?? 0 };
+}
 /** The limits a new room gets under `policy`, as a relay reports them; file limits only where files are kept. */
 export function relayLimits(policy, files) {
     return {
@@ -21,14 +41,16 @@ export class RoomService {
     store;
     now;
     turns;
+    receiptMode;
     /**
      * `roomPolicy` is what a new room gets when the caller names no policy, such as a
      * self-hosted relay's configured limits. Existing rooms keep the policy they were made with.
      */
-    constructor(store, now = () => Date.now(), directory, roomPolicy = DEFAULT_ROOM_POLICY) {
+    constructor(store, now = () => Date.now(), directory, roomPolicy = DEFAULT_ROOM_POLICY, options = {}) {
         this.directory = directory;
         this.roomPolicy = roomPolicy;
         this.now = now;
+        this.receiptMode = options.receiptMode ?? 'both';
         this.store = new AutoCloseStore(store, () => this.now());
         this.turns = new TurnCoordinator(this.store, now);
     }
@@ -44,12 +66,12 @@ export class RoomService {
     }
     /** What the room looks like, plus what this relay can do that depends on its store rather than on the room. */
     snapshotOf(view) {
-        return { ...toSnapshot(view), filesSupported: this.store.files !== undefined };
+        return { ...toSnapshot(view), filesSupported: this.store.files !== undefined, receiptMode: this.receiptMode };
     }
     /** Whether rooms here keep files, and the limits a new room gets: what `GET /v1/server` reports. */
     relayProfile() {
         const files = this.store.files !== undefined;
-        return { files, limits: relayLimits(this.roomPolicy, files) };
+        return { files, limits: relayLimits(this.roomPolicy, files), receiptMode: this.receiptMode };
     }
     fileStore() {
         if (!this.store.files) {
@@ -147,6 +169,8 @@ export class RoomService {
             nameSource: input.nameSource,
             sessionId: input.sessionId ?? null,
             capabilities: input.capabilities ?? null,
+            ...(input.member ? { member: input.member } : {}),
+            ...(input.owner ? { owner: input.owner } : {}),
             ...(input.expiresAt !== undefined ? { expiresAt: input.expiresAt } : {}),
             policy: input.policy ?? this.roomPolicy
         }, this.ctx());
@@ -205,6 +229,10 @@ export class RoomService {
      * crash between the two steps leaves a resumable reservation rather than an
      * invite a different stranger can claim.
      */
+    /** The room an invite's digest belongs to, for routing before the room checks the code; null when no invite has it. */
+    async inviteRoom(digest) {
+        return (await this.store.inviteByDigest(digest))?.roomId ?? null;
+    }
     async redeemInvite(input) {
         const normalized = normalizeInviteCode(input.code);
         if (!normalized) {
@@ -274,7 +302,8 @@ export class RoomService {
             kind: input.kind,
             nameSource: input.nameSource,
             sessionId: input.sessionId ?? null,
-            capabilities: input.capabilities ?? null
+            capabilities: input.capabilities ?? null,
+            ...(input.member ? { member: input.member } : {})
         }, this.ctx());
         if (previousOccupant?.muted) {
             joined.participant.muted = true;
@@ -304,6 +333,13 @@ export class RoomService {
             const target = await this.turns.resolve(roomId, request.payload.eventId, participant.participantId);
             const eventId = target?.conversationId ?? request.payload.eventId;
             request = { ...request, payload: { ...request.payload, eventId }, ...(!request.payload.action ? { idempotencyKey: `${request.payload.stage === 'read' ? 'read' : 'receipt'}-${eventId}-${participant.participantId}` } : {}) };
+            if (this.receiptMode === 'watermark' && isPlainReceipt(request)) {
+                // An older client's plain receipt: kept as the watermark, answered as an event that already existed.
+                assertRoomWritable(view, now);
+                await this.plainReceipt(view, participant, eventId, now);
+                const event = { protocolVersion: PROTOCOL_VERSION, roomId, seq: Math.max(1, view.room.nextSeq - 1), eventId: newId('event'), senderId: participant.participantId, idempotencyKey: request.idempotencyKey, recipientId: null, replyTo: null, at: now, type: 'message.received', payload: request.payload };
+                return { event, deduplicated: true };
+            }
         }
         const requestDigest = stableStringify({ type: request.type, payload: request.payload, recipientId: request.recipientId ?? null, replyTo: request.replyTo ?? null,
             ...(request.recipientIds ? { recipientIds: request.recipientIds } : {}), ...(request.allRecipients ? { allRecipients: true } : {}), ...(request.quoteOf ? { quoteOf: request.quoteOf } : {}) });
@@ -369,6 +405,8 @@ export class RoomService {
         }
         const updates = [];
         let replyTarget = null;
+        // A plain receipt for a message not addressed to this participant also moves their watermark, in `both`.
+        let watermarkSeq = null;
         if (request.type === 'message.received') {
             const participant = assertCanAcknowledge(actor);
             const target = await this.turns.resolve(roomId, request.payload.eventId, participant.participantId);
@@ -379,6 +417,9 @@ export class RoomService {
             if ((target?.from ?? original?.senderId) === participant.participantId) {
                 throw new ProtocolError('unauthorized', 'a sender cannot acknowledge their own message');
             }
+            if (this.receiptMode === 'both' && isPlainReceipt(request) && target?.to !== participant.participantId) {
+                watermarkSeq = original?.seq ?? (await this.messageSeqOf(roomId, target));
+            }
             if (target?.to === participant.participantId) {
                 updates.push({ ...target, receivedAt: target.receivedAt ?? now, ...(request.payload.stage === 'read' ? { readAt: target.readAt ?? now } : {}) });
             }
@@ -488,6 +529,9 @@ export class RoomService {
         }
         const outgoing = replyTarget?.conversationId ? { ...request, replyTo: replyTarget.conversationId } : request;
         const mutation = sendEvent(view, await hashCredential(credential), outgoing, { now, newEventId: () => newId('event') });
+        if (watermarkSeq !== null && participantId) {
+            mutation.room = withReceipt(mutation.room, participantId, watermarkSeq, now);
+        }
         if (attached.length) {
             mutation.attachFiles = attached;
         }
@@ -524,7 +568,7 @@ export class RoomService {
             let seq = Math.max(view.room.nextRequestSeq ?? 0, mutation.appendEvent.seq);
             for (const recipient of recipients) {
                 updates.push({
-                    roomId, eventId: group ? newId('event') : mutation.appendEvent.eventId, seq: seq++,
+                    roomId, eventId: group ? newId('event') : mutation.appendEvent.eventId, seq: seq++, messageSeq: mutation.appendEvent.seq,
                     from: mutation.appendEvent.senderId, to: recipient, text: quoteContext + request.payload.text, at: mutation.appendEvent.at,
                     requiresReply: !request.replyTo, receivedAt: null, responseEventId: null, respondedAt: null, progressAt: null,
                     ...(group ? { conversationId: mutation.appendEvent.eventId, turnRequired: true } : {}),
@@ -542,12 +586,20 @@ export class RoomService {
         return { event: mutation.appendEvent, deduplicated: false };
     }
     async acknowledgeMessage(roomId, credential, eventId) {
-        const actor = authenticate(await this.view(roomId), await hashCredential(credential), this.now());
+        const view = await this.view(roomId);
+        const now = this.now();
+        const actor = authenticate(view, await hashCredential(credential), now);
         const participant = assertCanAcknowledge(actor);
         const target = await this.turns.resolve(roomId, eventId, participant.participantId);
         if (target?.to === participant.participantId && target.receivedAt !== null) {
             return this.publicRequest(target);
         }
+        if (this.receiptMode === 'watermark') {
+            assertRoomWritable(view, now);
+            await this.plainReceipt(view, participant, eventId, now);
+            const received = await this.turns.resolve(roomId, eventId, participant.participantId);
+            return received ? this.publicRequest(received) : null;
+        }
         const root = target?.conversationId ?? eventId;
         const key = `receipt-${root}-${participant.participantId}`;
         const saved = await this.store.idempotencyRecord(roomId, key);
@@ -561,6 +613,81 @@ export class RoomService {
         const updated = await this.turns.resolve(roomId, eventId, participant.participantId);
         return updated ? this.publicRequest(updated) : null;
     }
+    /**
+     * `POST /v1/rooms/:id/receipts`: this participant has received every event up to `throughSeq`.
+     * Moves their watermark and marks their requests up to there received, with no event.
+     */
+    async receipt(roomId, credential, throughSeq) {
+        if (this.receiptMode === 'events') {
+            throw new ProtocolError('unsupported_capability', 'this relay keeps receipts as events; acknowledge each message instead');
+        }
+        const view = await this.view(roomId);
+        const now = this.now();
+        const participant = assertCanAcknowledge(authenticate(view, await hashCredential(credential), now));
+        assertRoomWritable(view, now);
+        const room = await this.moveWatermark(view, participant.participantId, throughSeq, now);
+        return { throughSeq: room.receipts?.[participant.participantId]?.throughSeq ?? 0, receiptRevision: room.receiptRevision ?? 0 };
+    }
+    /** A plain receipt with no event: the request it answers when it is addressed to this participant, else their watermark. */
+    async plainReceipt(view, participant, eventId, now) {
+        const roomId = view.room.roomId;
+        const target = await this.turns.resolve(roomId, eventId, participant.participantId);
+        const original = target ? null : await this.store.eventById(roomId, eventId);
+        if (!target && original?.type !== 'message') {
+            throw new ProtocolError('invalid_request', 'no such retained message in this room');
+        }
+        if ((target?.from ?? original?.senderId) === participant.participantId) {
+            throw new ProtocolError('unauthorized', 'a sender cannot acknowledge their own message');
+        }
+        if (target?.to === participant.participantId) {
+            // A receiver may confirm one request out of order, so it says nothing about earlier messages.
+            if (target.receivedAt === null) {
+                await this.store.updateTurns(view.room, [{ ...target, receivedAt: now }], view.room.turnRevision ?? 0);
+            }
+            return;
+        }
+        // Everything else is confirmed by a reader going through the room in order.
+        await this.moveWatermark(view, participant.participantId, original?.seq ?? (await this.messageSeqOf(roomId, target)), now);
+    }
+    /** Writes the moved watermark and the requests it marks received, in one write without an event. */
+    async moveWatermark(view, participantId, throughSeq, now) {
+        const room = withReceipt(view.room, participantId, throughSeq, now);
+        if (room === view.room) {
+            return room;
+        }
+        const requests = await this.receivedThrough(room.roomId, participantId, room.receipts[participantId].throughSeq, now);
+        await this.store.updateTurns(room, requests, view.room.turnRevision ?? 0);
+        return room;
+    }
+    /** This participant's requests whose message is at or before `throughSeq` and not yet received, marked received at `now`. */
+    async receivedThrough(roomId, participantId, throughSeq, now) {
+        const page = (after) => this.store.unreceivedRequests ? this.store.unreceivedRequests(roomId, participantId, after, 200) : this.store.messageRequests(roomId, after, 200, participantId);
+        const marked = [];
+        let after = 0;
+        while (marked.length < WATERMARK_REQUEST_LIMIT) {
+            const { requests, hasMore } = await page(after);
+            for (const request of requests) {
+                if (request.receivedAt !== null) {
+                    continue;
+                }
+                // Requests are numbered in message order, so the first one past the watermark ends the search.
+                if ((await this.messageSeqOf(roomId, request)) > throughSeq) {
+                    return marked;
+                }
+                marked.push({ ...request, receivedAt: now });
+            }
+            const last = requests.at(-1)?.seq;
+            if (!hasMore || last === undefined || last <= after) {
+                return marked;
+            }
+            after = last;
+        }
+        return marked;
+    }
+    /** The transcript seq of a request's message; 0 when that message is no longer retained, which puts it behind any watermark. */
+    async messageSeqOf(roomId, request) {
+        return request.messageSeq ?? (await this.store.eventById(roomId, request.conversationId ?? request.eventId))?.seq ?? 0;
+    }
     publicRequest(request) {
         const result = { ...request };
         delete result.turnToken;
@@ -828,7 +955,7 @@ export class RoomService {
     async close(roomId, credential) {
         return this.applyOne(closeRoom(await this.view(roomId), await hashCredential(credential), this.ctx()));
     }
-    async read(roomId, credential, after, limit) {
+    async read(roomId, credential, after, limit, receiptsAfter) {
         const view = await this.view(roomId);
         authenticate(view, await hashCredential(credential), this.now());
         if (after > 0 && after < view.earliestSeq - 1) {
@@ -836,7 +963,7 @@ export class RoomService {
         }
         const page = await this.store.readEvents(roomId, after, limit);
         const events = await Promise.all(page.events.map((event) => this.restoreAudience(event)));
-        return { events, earliestSeq: view.earliestSeq, latestSeq: view.room.nextSeq - 1, hasMore: page.hasMore };
+        return { events, earliestSeq: view.earliestSeq, latestSeq: view.room.nextSeq - 1, hasMore: page.hasMore, ...(receiptsAfter !== undefined && this.receiptMode !== 'events' ? receiptsSince(view.room, receiptsAfter) : {}) };
     }
     /** Older group events kept the all flag only in their canonical idempotency request. */
     async restoreAudience(event) {