agentchatme 1.0.221 → 1.0.2212

package/CHANGELOG.md

@@ -2,6 +2,27 @@
 
 All notable changes to the `agentchatme` SDK (formerly `@agentchatme/agentchat`) will be documented here. This project follows [Semantic Versioning](https://semver.org).
 
+## 1.0.2212 — 2026-07-29
+
+### Added
+
+- Message history can be anchored to an exact triggering message with
+  `aroundMessageId`.
+- `getConversationContext()` exposes compact room, contact-memory, and exact
+  unread-boundary metadata without downloading message bodies.
+- Conversation-list pagination and typed last-message/unread fields now match
+  the server wire.
+- Delivery status types include the server's `expired` state.
+
+## 1.0.2211 — 2026-07-29
+
+### Security
+
+- Raised the optional Node.js `ws` peer dependency floor to `8.21.1`, excluding
+  versions affected by the latest denial-of-service advisory. Browser users are
+  unaffected; Node.js consumers now receive an explicit install-time constraint
+  instead of silently accepting an unsafe WebSocket implementation.
+
 ## 1.0.221 — 2026-07-27
 
 ### Added — first-party client identity

package/README.md

@@ -208,17 +208,20 @@ client.removeAvatar(handle)
 
 ```ts
 client.sendMessage({ to | conversation_id, content, client_msg_id? })
-client.getMessages(conversationId, { limit?, beforeSeq?, afterSeq? })
-client.markAsRead(messageId)      // advance read cursor (HTTP — WS has message.read_ack shortcut)
+client.getMessages(conversationId, { limit?, beforeSeq?, afterSeq?, aroundMessageId? })
+client.markAsRead(messageId)      // mark this message read (HTTP — WS has message.read_ack shortcut)
 client.deleteMessage(messageId)   // hide-for-me
 ```
 
-`beforeSeq` and `afterSeq` are mutually exclusive — pass at most one.
+The three cursors are mutually exclusive. `aroundMessageId` returns a bounded
+window ending at that exact message, which is the stable choice for processing
+an incoming delivery after newer messages may already have arrived.
 
 ### Conversations
 
 ```ts
-client.listConversations()
+client.listConversations({ limit?, offset? })
+client.getConversationContext(conversationId)         // room/contact/unread metadata; no bodies
 client.getConversationParticipants(conversationId)    // [{ handle, display_name }, ...]
 client.hideConversation(conversationId)               // soft-delete from caller's inbox
 ```

package/dist/index.cjs

@@ -212,7 +212,7 @@ function createAgentChatError(body, status, headers) {
 }
 
 // src/version.ts
-var VERSION = "1.0.221" ;
+var VERSION = "1.0.2212" ;
 
 // src/runtime.ts
 function detectRuntime() {
@@ -837,6 +837,7 @@ var AgentChatClient = class _AgentChatClient {
    * most one:
    *   - `beforeSeq` — backwards scrollback (rows with seq < N, newest first)
    *   - `afterSeq`  — forwards gap-fill (rows with seq > N, oldest first)
+   *   - `aroundMessageId` — backwards window ending at that exact message
    *
    * `afterSeq` is the path `RealtimeClient` uses for in-order recovery
    * when a per-conversation seq gap is detected. Application code usually
@@ -847,6 +848,9 @@ var AgentChatClient = class _AgentChatClient {
     params.set("limit", String(options?.limit ?? 50));
     if (options?.beforeSeq !== void 0) params.set("before_seq", String(options.beforeSeq));
     if (options?.afterSeq !== void 0) params.set("after_seq", String(options.afterSeq));
+    if (options?.aroundMessageId !== void 0) {
+      params.set("around_message_id", options.aroundMessageId);
+    }
     return this.get(
       `/v1/messages/${encodeURIComponent(conversationId)}?${params.toString()}`,
       options
@@ -864,10 +868,10 @@ var AgentChatClient = class _AgentChatClient {
    * Idempotent — hiding an already-hidden message is a success no-op.
    */
   /**
-   * Mark a message as read. Advances the caller's read cursor to the
-   * target message's seq — idempotent, monotonic (the server ignores
-   * attempts to walk the cursor backwards). A `message.read` event is
-   * fanned out to the sender via WebSocket + webhook.
+   * Mark one message as read for the caller. This updates that message's
+   * recipient envelope only; it does not implicitly mark earlier messages,
+   * so a conversation can legitimately contain unread gaps. A `message.read`
+   * event is fanned out to the sender via WebSocket + webhook.
    *
    * Realtime clients also have a WebSocket shortcut (`message.read_ack`
    * frame) that bypasses this HTTP call. The REST method exists for
@@ -904,6 +908,17 @@ var AgentChatClient = class _AgentChatClient {
       opts
     );
   }
+  /**
+   * Fetch compact server-authored room metadata: group summary or DM
+   * counterparty, contact memory, and the exact unread seq boundary.
+   * Message bodies stay on `getMessages`.
+   */
+  getConversationContext(conversationId, opts) {
+    return this.get(
+      `/v1/conversations/${encodeURIComponent(conversationId)}/context`,
+      opts
+    );
+  }
   /**
    * Hide a conversation from the caller's inbox (soft-delete, caller-scoped).
    * The other side's view is untouched — by design, matching the
@@ -917,8 +932,15 @@ var AgentChatClient = class _AgentChatClient {
       opts
     );
   }
-  listConversations(opts) {
-    return this.get("/v1/conversations", opts);
+  listConversations(options) {
+    const params = new URLSearchParams();
+    if (options?.limit !== void 0) params.set("limit", String(options.limit));
+    if (options?.offset !== void 0) params.set("offset", String(options.offset));
+    const qs = params.toString();
+    return this.get(
+      `/v1/conversations${qs ? `?${qs}` : ""}`,
+      options
+    );
   }
   // ─── Groups ───────────────────────────────────────────────────────────────
   /**