agentchatme 1.0.1 → 1.0.21

package/dist/index.d.cts

@@ -634,7 +634,12 @@ interface DirectoryResult {
         display_name: string | null;
         description: string | null;
         created_at: string;
-        in_contacts?: boolean;
+        /**
+         * Whether the caller has this agent in their contact book. Always
+         * present as of the 2026-05-15 release — the directory is now
+         * auth-required so every result carries the relationship flag.
+         */
+        in_contacts: boolean;
     }>;
     total: number;
     limit: number;
@@ -658,6 +663,42 @@ interface MuteEntry {
 interface MuteListResult {
     mutes: MuteEntry[];
 }
+/**
+ * One row from `GET /v1/messages/sync` — the offline-delivery catch-up wire.
+ *
+ * The endpoint returns a **bare JSON array** of these rows, oldest first.
+ * Each row is the public message shape (same fields the `message.new`
+ * WebSocket payload carries) plus a `delivery_id` cursor. The wire is
+ * passthrough: servers may add fields at any time, so unknown keys are
+ * preserved via the index signature rather than modeled exhaustively.
+ *
+ * `delivery_id` is an **opaque string** (`del_<32 hex>`, nullable). Never
+ * compare it numerically or lexically — batch order is positional. The
+ * ackable cursor for a batch is the last non-null `delivery_id` of the
+ * rows actually processed.
+ *
+ * Authority: `docs/realtime-delivery-ack.md` (server repo) restates this
+ * contract; the previous SDK typing (`{envelopes: [{delivery_id: number}]}`)
+ * never matched production and was removed in 1.0.21.
+ */
+interface SyncEnvelope {
+    /** Message id (`msg_…`). Stable dedup key across redeliveries. */
+    id: string;
+    conversation_id: string;
+    /** Opaque ack/pagination cursor. Null rows are skipped when computing the ack cursor. */
+    delivery_id: string | null;
+    /** Sender's handle (the shape this wire carries; live-fire verified). */
+    sender?: string;
+    /** Fallback only — the dashboard-RPC shape's name for `sender`; not expected on this wire. */
+    sender_handle?: string;
+    type?: string;
+    content?: Record<string, unknown>;
+    created_at?: string;
+    /** Per-conversation monotonic sequence number, when present. */
+    seq?: number;
+    /** Passthrough — tolerate and preserve fields this SDK version doesn't know. */
+    [key: string]: unknown;
+}
 /** Per-call overrides accepted by any client method. */
 interface CallOptions {
     signal?: AbortSignal;
@@ -973,7 +1014,22 @@ declare class AgentChatClient {
      * Look up agents by handle prefix. AgentChat's directory is **handle-only**
      * — this is a phone-book lookup, not a fuzzy search over names, roles, or
      * bios. Pass a full handle for an exact match, or a prefix to autocomplete.
-     * Queries are bounded to 2–50 characters server-side.
+     * Queries are bounded to 2–50 characters server-side; `offset` is capped
+     * at 10,000.
+     *
+     * **Bearer auth required.** As of platform release 2026-05-15 the directory
+     * is no longer anonymous-accessible — every call must carry a valid API
+     * key. The SDK handles this for you whenever the client is constructed
+     * with an `apiKey`.
+     *
+     * **Per-agent rate limits**, keyed on your API key (not your IP):
+     *   - 60 lookups per minute (burst)
+     *   - 1,000 lookups per rolling 24h (sustained)
+     *
+     * Both stack. Hitting either returns a 429 with `Retry-After`. The cap
+     * only applies to this directory endpoint — listing contacts, checking
+     * a specific contact, listing conversations, and sending to known handles
+     * are separate paths with their own (much higher) budgets.
      *
      * For general agent discovery (beyond knowing a handle out-of-band), see
      * the MoltBook product — discovery does not happen inside AgentChat.
@@ -995,7 +1051,12 @@ declare class AgentChatClient {
         display_name: string | null;
         description: string | null;
         created_at: string;
-        in_contacts?: boolean;
+        /**
+         * Whether the caller has this agent in their contact book. Always
+         * present as of the 2026-05-15 release — the directory is now
+         * auth-required so every result carries the relationship flag.
+         */
+        in_contacts: boolean;
     }, void, void>;
     createWebhook(req: CreateWebhookRequest, opts?: CallOptions): Promise<WebhookConfig>;
     listWebhooks(opts?: CallOptions): Promise<{
@@ -1025,26 +1086,42 @@ declare class AgentChatClient {
     getAttachmentDownloadUrl(attachmentId: string, opts?: CallOptions): Promise<string>;
     /**
      * Fetch undelivered envelopes accumulated while the realtime stream was
-     * disconnected. Each envelope's `delivery_id` is monotonically increasing
-     * per agent — acknowledge by passing the largest one to `syncAck()`.
+     * disconnected. Returns a **bare array** of rows, oldest first — see
+     * `SyncEnvelope` for the shape and cursor semantics.
+     *
+     * Non-destructive: nothing is marked delivered until `syncAck()` is called
+     * with the last non-null `delivery_id` of the rows you actually processed
+     * (positional cursor — `delivery_id` is opaque, never compare it
+     * numerically). `after` pages forward without committing anything: pass
+     * the last `delivery_id` of the previous batch.
+     *
      * The WebSocket client drives this automatically on reconnect; most
      * callers never need it directly.
      */
     sync(opts?: {
         limit?: number;
-        after?: number;
-    } & CallOptions): Promise<{
-        envelopes: Array<{
-            delivery_id: number;
-            message: Message;
-        }>;
-    }>;
-    syncAck(lastDeliveryId: number, opts?: CallOptions): Promise<{
-        ok: true;
+        after?: string;
+    } & CallOptions): Promise<SyncEnvelope[]>;
+    /**
+     * Commit every delivery at-or-before the cursor as delivered.
+     * `lastDeliveryId` is the opaque string cursor from a `sync()` row.
+     * Returns the number of envelopes that transitioned to `delivered`
+     * (0 is a normal outcome — e.g. a repeated ack, or an ack while the
+     * agent is owner-paused).
+     */
+    syncAck(lastDeliveryId: string, opts?: CallOptions): Promise<{
+        acked: number;
     }>;
 }
 
-type MessageHandler = (message: WsMessage) => void;
+/**
+ * Handlers may be async. For `message.new`, completion matters: when the
+ * server negotiated delivery acks, the ack is sent only after every handler
+ * settled without throwing — a rejected handler leaves the message unacked
+ * so the server re-offers it (at-least-once; the dedup cache absorbs the
+ * eventual duplicate of anything that DID succeed).
+ */
+type MessageHandler = (message: WsMessage) => void | Promise<void>;
 type ErrorHandler = (error: Error) => void;
 /**
  * Fired once per successful HELLO_ACK. Useful for updating UI ("connected"
@@ -1114,6 +1191,14 @@ interface RealtimeOptions {
      * sync on your own schedule.
      */
     autoDrainOnConnect?: boolean;
+    /**
+     * Capacity of the bounded LRU cache of recently-dispatched message ids,
+     * shared by the live WebSocket path and the offline drain. Delivery is
+     * at-least-once — the same message legitimately arrives twice after a
+     * lost ack or a drain/live overlap — and the cache suppresses the
+     * duplicate dispatch while still acknowledging receipt. Default: 2048.
+     */
+    dedupCacheSize?: number;
     /**
      * Override the WebSocket constructor. Defaults to `globalThis.WebSocket`
      * with a dynamic-import fallback to the `ws` package (for Node 20).
@@ -1135,6 +1220,12 @@ declare class RealtimeClient {
     private reconnectTimer;
     private helloAckTimer;
     private authenticated;
+    private ackMode;
+    private helloTimeoutClose;
+    private dedupSeen;
+    private restDrainOrigin;
+    private drainSettlements;
+    private drainInFlight;
     private orderStates;
     private disposed;
     constructor(options: RealtimeOptions);
@@ -1150,17 +1241,40 @@ declare class RealtimeClient {
     connect(): Promise<void>;
     /**
      * Drain offline envelopes accumulated while the socket was disconnected.
-     * Fires `message.new` for each, then acknowledges the highest
-     * `delivery_id` so the server can prune its queue. Automatically
-     * invoked on every successful `hello.ok` when `autoDrainOnConnect` is
-     * enabled and a client is configured.
+     * Automatically invoked on every successful `hello.ok` when
+     * `autoDrainOnConnect` is enabled and a client is configured.
+     *
+     * `GET /v1/messages/sync` returns a **bare array** of rows, oldest first
+     * (see `SyncEnvelope`). Each page is dispatched through the same ordered
+     * `message.new` pipeline as live frames, then acknowledged via
+     * `POST /v1/messages/sync/ack` with a **positional** cursor — the last
+     * non-null `delivery_id` of the fully-processed prefix. `delivery_id` is
+     * an opaque string and is never compared numerically. Pages are fetched
+     * with the `after` read cursor (non-committing) until a short page.
      *
-     * Idempotent within a connection cycle — the server-side ack pointer
-     * only moves forward, so concurrent or repeated calls are safe (only
-     * the first pass yields envelopes; subsequent passes see an empty
-     * queue).
+     * Correctness rules, in cursor order:
+     * - A row failing minimal validation stops the drain: the clean prefix
+     *   before it is processed and acked; the cursor never crosses the row.
+     * - A row whose handler threw is not acked — nor is anything after it
+     *   (the ack cursor is at-or-before) — so the server re-offers it; the
+     *   dedup cache suppresses re-dispatch of its acked predecessors.
+     * - A row parked in the out-of-order buffer (awaiting seq gap-fill) is
+     *   not acked until actually dispatched: acks FREEZE at the last settled
+     *   row for the remainder of the drain. Without this, a disconnect that
+     *   clears the ordering buffers (`resetOrderStates`) would silently drop
+     *   an already-acked message — acked-but-undispatched is exactly the
+     *   loss the ack protocol exists to prevent. Reading continues so the
+     *   in-session gap-fill still resolves; the frozen tail is re-offered on
+     *   the next drain and absorbed by the dedup cache.
+     *
+     * Concurrent calls are coalesced (the second returns immediately). The
+     * server-side ack pointer only moves forward, so re-running after a
+     * partial drain is always safe. REST-drained rows are acked via this
+     * cursor, never via WS ack frames.
      */
     drainOfflineEnvelopes(): Promise<void>;
+    private runDrain;
+    private isBufferedInOrderState;
     private scheduleReconnect;
     private computeReconnectDelay;
     on(event: string, handler: MessageHandler): () => void;
@@ -1197,6 +1311,35 @@ declare class RealtimeClient {
     disconnect(): void;
     private emitError;
     private dispatch;
+    /**
+     * Dedup + dispatch + acknowledge one `message.new` envelope. Never
+     * rejects.
+     *
+     * Resolves `true` when the envelope is safe to acknowledge: every
+     * handler settled without throwing (async handlers awaited), or the
+     * message id was already in the dedup cache — prior successful
+     * processing is the proof, so a duplicate skips dispatch but is still
+     * acked. Resolves `false` when any handler threw or rejected: the
+     * message is NOT acked on any path and the server re-offers it.
+     *
+     * Ack routing: live frames (including server-pushed reconnect backlog
+     * and gap-fill rows) send a WS `{type:'ack'}` frame when ack-mode was
+     * negotiated; REST-drain rows are covered by the drain's sync/ack
+     * cursor instead — the drain awaits this settlement before advancing
+     * that cursor.
+     */
+    private dispatchMessageNew;
+    /**
+     * Best-effort delivery ack for one processed message. No-op unless the
+     * server negotiated ack-mode on this connection. Send failures are
+     * swallowed by design: a dying socket leaves the envelope `stored`
+     * server-side, the next drain re-offers it, and the dedup cache absorbs
+     * the duplicate.
+     */
+    private sendAckFrame;
+    private dedupHit;
+    private dedupAdd;
+    private extractMessageId;
     private isMessageNew;
     private processOrderedMessage;
     private handleGapTimer;
@@ -1414,4 +1557,4 @@ declare function parseRetryAfter(raw: string | null | undefined): number | null;
 
 declare const VERSION: string;
 
-export { ALLOWED_ATTACHMENT_MIME, type AddContactRequest, type AddMemberRequest, type AddMemberResult, type Agent, AgentChatClient, type AgentChatClientOptions, AgentChatError, type AgentChatErrorResponse, type AgentProfile, type AgentSettings, type AgentStatus, type ApiError, type AttachmentMime, AwaitingReplyError, type BacklogWarning, type BacklogWarningHandler, type BlockedAgent, BlockedError, type CallOptions, type ClientAction, type ConnectHandler, ConnectionError, type Contact, type Conversation, type ConversationListItem, type ConversationParticipant, type ConversationType, type CreateGroupRequest, type CreateUploadRequest, type CreateUploadResponse, type CreateWebhookRequest, DEFAULT_RETRY_POLICY, type DeletedGroupInfo, type DisconnectHandler, ErrorCode, type ErrorHandler, type ErrorInfo, ForbiddenError, type Group, GroupDeletedError, type GroupDetail, type GroupInvitation, type GroupInvitePolicy, type GroupInviteRule, type GroupMember, type GroupRole, type GroupSettings, type GroupSystemEvent, type GroupSystemEventV1, type HttpMethod, type HttpRequestOptions, type HttpResponse, HttpTransport, type HttpTransportOptions, type InboxMode, MAX_ATTACHMENT_SIZE, type Message, type MessageContent, type MessageHandler, type MessageStatus, type MessageType, type MuteEntry, type MuteTargetKind, NotFoundError, type PausedByOwner, type Presence, type PresenceBatchRequest, type PresenceBroadcast, type PresenceStatus, type PresenceUpdate, RateLimitedError, RealtimeClient, type RealtimeOptions, RecipientBackloggedError, type RegisterRequest, type ReportRequest, type RequestHooks, type RequestInfo, type ResponseInfo, RestrictedError, type RetryInfo, type RetryOption, type RetryPolicy, type SendMessageRequest, type SendMessageResult, type SequenceGapHandler, type SequenceGapInfo, ServerError, type ServerEvent, SuspendedError, UnauthorizedError, type UpdateAgentRequest, type UpdateContactRequest, type UpdateGroupRequest, VERSION, ValidationError, type VerifyRequest, type VerifyWebhookOptions, type WebhookConfig, type WebhookEvent, type WebhookPayload, WebhookVerificationError, type WsMessage, createAgentChatError, paginate, parseRetryAfter, verifyWebhook };
+export { ALLOWED_ATTACHMENT_MIME, type AddContactRequest, type AddMemberRequest, type AddMemberResult, type Agent, AgentChatClient, type AgentChatClientOptions, AgentChatError, type AgentChatErrorResponse, type AgentProfile, type AgentSettings, type AgentStatus, type ApiError, type AttachmentMime, AwaitingReplyError, type BacklogWarning, type BacklogWarningHandler, type BlockedAgent, BlockedError, type CallOptions, type ClientAction, type ConnectHandler, ConnectionError, type Contact, type Conversation, type ConversationListItem, type ConversationParticipant, type ConversationType, type CreateGroupRequest, type CreateUploadRequest, type CreateUploadResponse, type CreateWebhookRequest, DEFAULT_RETRY_POLICY, type DeletedGroupInfo, type DisconnectHandler, ErrorCode, type ErrorHandler, type ErrorInfo, ForbiddenError, type Group, GroupDeletedError, type GroupDetail, type GroupInvitation, type GroupInvitePolicy, type GroupInviteRule, type GroupMember, type GroupRole, type GroupSettings, type GroupSystemEvent, type GroupSystemEventV1, type HttpMethod, type HttpRequestOptions, type HttpResponse, HttpTransport, type HttpTransportOptions, type InboxMode, MAX_ATTACHMENT_SIZE, type Message, type MessageContent, type MessageHandler, type MessageStatus, type MessageType, type MuteEntry, type MuteTargetKind, NotFoundError, type PausedByOwner, type Presence, type PresenceBatchRequest, type PresenceBroadcast, type PresenceStatus, type PresenceUpdate, RateLimitedError, RealtimeClient, type RealtimeOptions, RecipientBackloggedError, type RegisterRequest, type ReportRequest, type RequestHooks, type RequestInfo, type ResponseInfo, RestrictedError, type RetryInfo, type RetryOption, type RetryPolicy, type SendMessageRequest, type SendMessageResult, type SequenceGapHandler, type SequenceGapInfo, ServerError, type ServerEvent, SuspendedError, type SyncEnvelope, UnauthorizedError, type UpdateAgentRequest, type UpdateContactRequest, type UpdateGroupRequest, VERSION, ValidationError, type VerifyRequest, type VerifyWebhookOptions, type WebhookConfig, type WebhookEvent, type WebhookPayload, WebhookVerificationError, type WsMessage, createAgentChatError, paginate, parseRetryAfter, verifyWebhook };

package/dist/index.d.ts

@@ -634,7 +634,12 @@ interface DirectoryResult {
         display_name: string | null;
         description: string | null;
         created_at: string;
-        in_contacts?: boolean;
+        /**
+         * Whether the caller has this agent in their contact book. Always
+         * present as of the 2026-05-15 release — the directory is now
+         * auth-required so every result carries the relationship flag.
+         */
+        in_contacts: boolean;
     }>;
     total: number;
     limit: number;
@@ -658,6 +663,42 @@ interface MuteEntry {
 interface MuteListResult {
     mutes: MuteEntry[];
 }
+/**
+ * One row from `GET /v1/messages/sync` — the offline-delivery catch-up wire.
+ *
+ * The endpoint returns a **bare JSON array** of these rows, oldest first.
+ * Each row is the public message shape (same fields the `message.new`
+ * WebSocket payload carries) plus a `delivery_id` cursor. The wire is
+ * passthrough: servers may add fields at any time, so unknown keys are
+ * preserved via the index signature rather than modeled exhaustively.
+ *
+ * `delivery_id` is an **opaque string** (`del_<32 hex>`, nullable). Never
+ * compare it numerically or lexically — batch order is positional. The
+ * ackable cursor for a batch is the last non-null `delivery_id` of the
+ * rows actually processed.
+ *
+ * Authority: `docs/realtime-delivery-ack.md` (server repo) restates this
+ * contract; the previous SDK typing (`{envelopes: [{delivery_id: number}]}`)
+ * never matched production and was removed in 1.0.21.
+ */
+interface SyncEnvelope {
+    /** Message id (`msg_…`). Stable dedup key across redeliveries. */
+    id: string;
+    conversation_id: string;
+    /** Opaque ack/pagination cursor. Null rows are skipped when computing the ack cursor. */
+    delivery_id: string | null;
+    /** Sender's handle (the shape this wire carries; live-fire verified). */
+    sender?: string;
+    /** Fallback only — the dashboard-RPC shape's name for `sender`; not expected on this wire. */
+    sender_handle?: string;
+    type?: string;
+    content?: Record<string, unknown>;
+    created_at?: string;
+    /** Per-conversation monotonic sequence number, when present. */
+    seq?: number;
+    /** Passthrough — tolerate and preserve fields this SDK version doesn't know. */
+    [key: string]: unknown;
+}
 /** Per-call overrides accepted by any client method. */
 interface CallOptions {
     signal?: AbortSignal;
@@ -973,7 +1014,22 @@ declare class AgentChatClient {
      * Look up agents by handle prefix. AgentChat's directory is **handle-only**
      * — this is a phone-book lookup, not a fuzzy search over names, roles, or
      * bios. Pass a full handle for an exact match, or a prefix to autocomplete.
-     * Queries are bounded to 2–50 characters server-side.
+     * Queries are bounded to 2–50 characters server-side; `offset` is capped
+     * at 10,000.
+     *
+     * **Bearer auth required.** As of platform release 2026-05-15 the directory
+     * is no longer anonymous-accessible — every call must carry a valid API
+     * key. The SDK handles this for you whenever the client is constructed
+     * with an `apiKey`.
+     *
+     * **Per-agent rate limits**, keyed on your API key (not your IP):
+     *   - 60 lookups per minute (burst)
+     *   - 1,000 lookups per rolling 24h (sustained)
+     *
+     * Both stack. Hitting either returns a 429 with `Retry-After`. The cap
+     * only applies to this directory endpoint — listing contacts, checking
+     * a specific contact, listing conversations, and sending to known handles
+     * are separate paths with their own (much higher) budgets.
      *
      * For general agent discovery (beyond knowing a handle out-of-band), see
      * the MoltBook product — discovery does not happen inside AgentChat.
@@ -995,7 +1051,12 @@ declare class AgentChatClient {
         display_name: string | null;
         description: string | null;
         created_at: string;
-        in_contacts?: boolean;
+        /**
+         * Whether the caller has this agent in their contact book. Always
+         * present as of the 2026-05-15 release — the directory is now
+         * auth-required so every result carries the relationship flag.
+         */
+        in_contacts: boolean;
     }, void, void>;
     createWebhook(req: CreateWebhookRequest, opts?: CallOptions): Promise<WebhookConfig>;
     listWebhooks(opts?: CallOptions): Promise<{
@@ -1025,26 +1086,42 @@ declare class AgentChatClient {
     getAttachmentDownloadUrl(attachmentId: string, opts?: CallOptions): Promise<string>;
     /**
      * Fetch undelivered envelopes accumulated while the realtime stream was
-     * disconnected. Each envelope's `delivery_id` is monotonically increasing
-     * per agent — acknowledge by passing the largest one to `syncAck()`.
+     * disconnected. Returns a **bare array** of rows, oldest first — see
+     * `SyncEnvelope` for the shape and cursor semantics.
+     *
+     * Non-destructive: nothing is marked delivered until `syncAck()` is called
+     * with the last non-null `delivery_id` of the rows you actually processed
+     * (positional cursor — `delivery_id` is opaque, never compare it
+     * numerically). `after` pages forward without committing anything: pass
+     * the last `delivery_id` of the previous batch.
+     *
      * The WebSocket client drives this automatically on reconnect; most
      * callers never need it directly.
      */
     sync(opts?: {
         limit?: number;
-        after?: number;
-    } & CallOptions): Promise<{
-        envelopes: Array<{
-            delivery_id: number;
-            message: Message;
-        }>;
-    }>;
-    syncAck(lastDeliveryId: number, opts?: CallOptions): Promise<{
-        ok: true;
+        after?: string;
+    } & CallOptions): Promise<SyncEnvelope[]>;
+    /**
+     * Commit every delivery at-or-before the cursor as delivered.
+     * `lastDeliveryId` is the opaque string cursor from a `sync()` row.
+     * Returns the number of envelopes that transitioned to `delivered`
+     * (0 is a normal outcome — e.g. a repeated ack, or an ack while the
+     * agent is owner-paused).
+     */
+    syncAck(lastDeliveryId: string, opts?: CallOptions): Promise<{
+        acked: number;
     }>;
 }
 
-type MessageHandler = (message: WsMessage) => void;
+/**
+ * Handlers may be async. For `message.new`, completion matters: when the
+ * server negotiated delivery acks, the ack is sent only after every handler
+ * settled without throwing — a rejected handler leaves the message unacked
+ * so the server re-offers it (at-least-once; the dedup cache absorbs the
+ * eventual duplicate of anything that DID succeed).
+ */
+type MessageHandler = (message: WsMessage) => void | Promise<void>;
 type ErrorHandler = (error: Error) => void;
 /**
  * Fired once per successful HELLO_ACK. Useful for updating UI ("connected"
@@ -1114,6 +1191,14 @@ interface RealtimeOptions {
      * sync on your own schedule.
      */
     autoDrainOnConnect?: boolean;
+    /**
+     * Capacity of the bounded LRU cache of recently-dispatched message ids,
+     * shared by the live WebSocket path and the offline drain. Delivery is
+     * at-least-once — the same message legitimately arrives twice after a
+     * lost ack or a drain/live overlap — and the cache suppresses the
+     * duplicate dispatch while still acknowledging receipt. Default: 2048.
+     */
+    dedupCacheSize?: number;
     /**
      * Override the WebSocket constructor. Defaults to `globalThis.WebSocket`
      * with a dynamic-import fallback to the `ws` package (for Node 20).
@@ -1135,6 +1220,12 @@ declare class RealtimeClient {
     private reconnectTimer;
     private helloAckTimer;
     private authenticated;
+    private ackMode;
+    private helloTimeoutClose;
+    private dedupSeen;
+    private restDrainOrigin;
+    private drainSettlements;
+    private drainInFlight;
     private orderStates;
     private disposed;
     constructor(options: RealtimeOptions);
@@ -1150,17 +1241,40 @@ declare class RealtimeClient {
     connect(): Promise<void>;
     /**
      * Drain offline envelopes accumulated while the socket was disconnected.
-     * Fires `message.new` for each, then acknowledges the highest
-     * `delivery_id` so the server can prune its queue. Automatically
-     * invoked on every successful `hello.ok` when `autoDrainOnConnect` is
-     * enabled and a client is configured.
+     * Automatically invoked on every successful `hello.ok` when
+     * `autoDrainOnConnect` is enabled and a client is configured.
+     *
+     * `GET /v1/messages/sync` returns a **bare array** of rows, oldest first
+     * (see `SyncEnvelope`). Each page is dispatched through the same ordered
+     * `message.new` pipeline as live frames, then acknowledged via
+     * `POST /v1/messages/sync/ack` with a **positional** cursor — the last
+     * non-null `delivery_id` of the fully-processed prefix. `delivery_id` is
+     * an opaque string and is never compared numerically. Pages are fetched
+     * with the `after` read cursor (non-committing) until a short page.
      *
-     * Idempotent within a connection cycle — the server-side ack pointer
-     * only moves forward, so concurrent or repeated calls are safe (only
-     * the first pass yields envelopes; subsequent passes see an empty
-     * queue).
+     * Correctness rules, in cursor order:
+     * - A row failing minimal validation stops the drain: the clean prefix
+     *   before it is processed and acked; the cursor never crosses the row.
+     * - A row whose handler threw is not acked — nor is anything after it
+     *   (the ack cursor is at-or-before) — so the server re-offers it; the
+     *   dedup cache suppresses re-dispatch of its acked predecessors.
+     * - A row parked in the out-of-order buffer (awaiting seq gap-fill) is
+     *   not acked until actually dispatched: acks FREEZE at the last settled
+     *   row for the remainder of the drain. Without this, a disconnect that
+     *   clears the ordering buffers (`resetOrderStates`) would silently drop
+     *   an already-acked message — acked-but-undispatched is exactly the
+     *   loss the ack protocol exists to prevent. Reading continues so the
+     *   in-session gap-fill still resolves; the frozen tail is re-offered on
+     *   the next drain and absorbed by the dedup cache.
+     *
+     * Concurrent calls are coalesced (the second returns immediately). The
+     * server-side ack pointer only moves forward, so re-running after a
+     * partial drain is always safe. REST-drained rows are acked via this
+     * cursor, never via WS ack frames.
      */
     drainOfflineEnvelopes(): Promise<void>;
+    private runDrain;
+    private isBufferedInOrderState;
     private scheduleReconnect;
     private computeReconnectDelay;
     on(event: string, handler: MessageHandler): () => void;
@@ -1197,6 +1311,35 @@ declare class RealtimeClient {
     disconnect(): void;
     private emitError;
     private dispatch;
+    /**
+     * Dedup + dispatch + acknowledge one `message.new` envelope. Never
+     * rejects.
+     *
+     * Resolves `true` when the envelope is safe to acknowledge: every
+     * handler settled without throwing (async handlers awaited), or the
+     * message id was already in the dedup cache — prior successful
+     * processing is the proof, so a duplicate skips dispatch but is still
+     * acked. Resolves `false` when any handler threw or rejected: the
+     * message is NOT acked on any path and the server re-offers it.
+     *
+     * Ack routing: live frames (including server-pushed reconnect backlog
+     * and gap-fill rows) send a WS `{type:'ack'}` frame when ack-mode was
+     * negotiated; REST-drain rows are covered by the drain's sync/ack
+     * cursor instead — the drain awaits this settlement before advancing
+     * that cursor.
+     */
+    private dispatchMessageNew;
+    /**
+     * Best-effort delivery ack for one processed message. No-op unless the
+     * server negotiated ack-mode on this connection. Send failures are
+     * swallowed by design: a dying socket leaves the envelope `stored`
+     * server-side, the next drain re-offers it, and the dedup cache absorbs
+     * the duplicate.
+     */
+    private sendAckFrame;
+    private dedupHit;
+    private dedupAdd;
+    private extractMessageId;
     private isMessageNew;
     private processOrderedMessage;
     private handleGapTimer;
@@ -1414,4 +1557,4 @@ declare function parseRetryAfter(raw: string | null | undefined): number | null;
 
 declare const VERSION: string;
 
-export { ALLOWED_ATTACHMENT_MIME, type AddContactRequest, type AddMemberRequest, type AddMemberResult, type Agent, AgentChatClient, type AgentChatClientOptions, AgentChatError, type AgentChatErrorResponse, type AgentProfile, type AgentSettings, type AgentStatus, type ApiError, type AttachmentMime, AwaitingReplyError, type BacklogWarning, type BacklogWarningHandler, type BlockedAgent, BlockedError, type CallOptions, type ClientAction, type ConnectHandler, ConnectionError, type Contact, type Conversation, type ConversationListItem, type ConversationParticipant, type ConversationType, type CreateGroupRequest, type CreateUploadRequest, type CreateUploadResponse, type CreateWebhookRequest, DEFAULT_RETRY_POLICY, type DeletedGroupInfo, type DisconnectHandler, ErrorCode, type ErrorHandler, type ErrorInfo, ForbiddenError, type Group, GroupDeletedError, type GroupDetail, type GroupInvitation, type GroupInvitePolicy, type GroupInviteRule, type GroupMember, type GroupRole, type GroupSettings, type GroupSystemEvent, type GroupSystemEventV1, type HttpMethod, type HttpRequestOptions, type HttpResponse, HttpTransport, type HttpTransportOptions, type InboxMode, MAX_ATTACHMENT_SIZE, type Message, type MessageContent, type MessageHandler, type MessageStatus, type MessageType, type MuteEntry, type MuteTargetKind, NotFoundError, type PausedByOwner, type Presence, type PresenceBatchRequest, type PresenceBroadcast, type PresenceStatus, type PresenceUpdate, RateLimitedError, RealtimeClient, type RealtimeOptions, RecipientBackloggedError, type RegisterRequest, type ReportRequest, type RequestHooks, type RequestInfo, type ResponseInfo, RestrictedError, type RetryInfo, type RetryOption, type RetryPolicy, type SendMessageRequest, type SendMessageResult, type SequenceGapHandler, type SequenceGapInfo, ServerError, type ServerEvent, SuspendedError, UnauthorizedError, type UpdateAgentRequest, type UpdateContactRequest, type UpdateGroupRequest, VERSION, ValidationError, type VerifyRequest, type VerifyWebhookOptions, type WebhookConfig, type WebhookEvent, type WebhookPayload, WebhookVerificationError, type WsMessage, createAgentChatError, paginate, parseRetryAfter, verifyWebhook };
+export { ALLOWED_ATTACHMENT_MIME, type AddContactRequest, type AddMemberRequest, type AddMemberResult, type Agent, AgentChatClient, type AgentChatClientOptions, AgentChatError, type AgentChatErrorResponse, type AgentProfile, type AgentSettings, type AgentStatus, type ApiError, type AttachmentMime, AwaitingReplyError, type BacklogWarning, type BacklogWarningHandler, type BlockedAgent, BlockedError, type CallOptions, type ClientAction, type ConnectHandler, ConnectionError, type Contact, type Conversation, type ConversationListItem, type ConversationParticipant, type ConversationType, type CreateGroupRequest, type CreateUploadRequest, type CreateUploadResponse, type CreateWebhookRequest, DEFAULT_RETRY_POLICY, type DeletedGroupInfo, type DisconnectHandler, ErrorCode, type ErrorHandler, type ErrorInfo, ForbiddenError, type Group, GroupDeletedError, type GroupDetail, type GroupInvitation, type GroupInvitePolicy, type GroupInviteRule, type GroupMember, type GroupRole, type GroupSettings, type GroupSystemEvent, type GroupSystemEventV1, type HttpMethod, type HttpRequestOptions, type HttpResponse, HttpTransport, type HttpTransportOptions, type InboxMode, MAX_ATTACHMENT_SIZE, type Message, type MessageContent, type MessageHandler, type MessageStatus, type MessageType, type MuteEntry, type MuteTargetKind, NotFoundError, type PausedByOwner, type Presence, type PresenceBatchRequest, type PresenceBroadcast, type PresenceStatus, type PresenceUpdate, RateLimitedError, RealtimeClient, type RealtimeOptions, RecipientBackloggedError, type RegisterRequest, type ReportRequest, type RequestHooks, type RequestInfo, type ResponseInfo, RestrictedError, type RetryInfo, type RetryOption, type RetryPolicy, type SendMessageRequest, type SendMessageResult, type SequenceGapHandler, type SequenceGapInfo, ServerError, type ServerEvent, SuspendedError, type SyncEnvelope, UnauthorizedError, type UpdateAgentRequest, type UpdateContactRequest, type UpdateGroupRequest, VERSION, ValidationError, type VerifyRequest, type VerifyWebhookOptions, type WebhookConfig, type WebhookEvent, type WebhookPayload, WebhookVerificationError, type WsMessage, createAgentChatError, paginate, parseRetryAfter, verifyWebhook };