fix(cmc): persist negotiated features into accept trigger + default-true on listAcceptedRelationships — features-negotiation contract drift

Lockstep patch release: pryv@3.4.1 + @pryv/cmc@1.1.1 + @pryv/monitor@3.4.1 + @pryv/socket.io@3.4.1.

@pryv/cmc@1.1.1 — two fixes (one cause):
- acceptInvite resolves the offer's features (default-true on omission per
  README contract; explicit false binding both ways) and persists them
  into the accept trigger's content.features. Previously offerFeatures
  was computed but never written, so the server-side plugin saw nothing
  and stamped clientData.cmc.features: null on the accepter's data-grant.
- listAcceptedRelationships mapper defaults absent content.features to
  { chat: true, systemMessaging: true } (was { chat: false, system: false }
  — both wrong-default AND wrong-key; `systemMessaging` is the documented
  contract everywhere else). Legacy content.extra fallback removed.

Coordinated with the server-side plugin fix on open-pryv.io master:
handleAccept now reads triggerEvent.content.features (was .extra). Both
sides need the bump to fully restore the negotiation; mismatched versions
keep producing null features.

Tests: 4 new [CMCL1OF] J6 contract tests pin each fix at unit-test time.
pryv-cmc 60/60.

Reported by HDS implementer 2026-05-21 against open-pryv.io@04bb2c1 +
@pryv/cmc@1.1.0.

Author: perki

CHANGELOG.md

@@ -2,6 +2,50 @@
 
 <!-- Format based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) -->
 
+## [3.4.1]
+
+Lockstep patch of `pryv@3.4.1` + `@pryv/monitor@3.4.1` +
+`@pryv/socket.io@3.4.1` + `@pryv/cmc@1.1.1`. Bugfix release; carries
+the SDK side of a coordinated fix with the server-side `cmc` plugin
+on `open-pryv.io` master.
+
+### `@pryv/cmc@1.1.1`
+
+#### Fixed
+- **Features-negotiation contract drift on `acceptInvite` /
+  `listAcceptedRelationships`.** Reported by a deploy-side implementer
+  against `@pryv/cmc@1.1.0` + `open-pryv.io@04bb2c1`.
+  - `acceptInvite` now persists the resolved offer features into
+    `content.features` of the `consent/accept-cmc` trigger (both keys
+    default to `true` when omitted by the offer, per the README contract;
+    explicit `false` is binding both ways). The server-side plugin
+    forwards them onto the data-grant access's `clientData.cmc.features`.
+    Previously the SDK computed `offerFeatures` but never persisted it,
+    so the data-grant access ended up with `clientData.cmc.features:
+    null` on the accepter side even when the offer specified default-true.
+  - `listAcceptedRelationships` mapper now defaults absent
+    `content.features` to `{ chat: true, systemMessaging: true }` (was
+    `{ chat: false, system: false }` — both wrong-default AND wrong-key
+    name; `systemMessaging` is the documented contract everywhere else).
+    The legacy `content.extra` fallback was removed (it was a
+    workaround for the SDK-side write bug and is unreachable for
+    events produced by `@pryv/cmc >= 1.1.1`).
+  - **4 new contract tests** under `[CMCL1OF] J6 features-negotiation`
+    pin each fix at unit-test time so a regression surfaces without
+    needing a real backend round-trip.
+
+#### Migration
+- **No SDK API changes.** Callers of `acceptInvite(conn, capabilityUrl,
+  opts)` and `listAcceptedRelationships(conn)` see the same return
+  shapes; the fix is in what gets persisted server-side + what the
+  mapper exposes when `content.features` is absent.
+- **Server compatibility:** the fix is coordinated with the server-side
+  `cmc` plugin shipped in `open-pryv.io` master (Plan 68 4th reopen,
+  2026-05-21). Older `@pryv/cmc` clients writing to a fixed server will
+  still produce `clientData.cmc.features: null` because the SDK isn't
+  writing `content.features` — bump to `@pryv/cmc@1.1.1` to get the
+  full negotiation persisted.
+
 ## [3.4.0]
 
 Lockstep release of `pryv@3.4.0` + `@pryv/monitor@3.4.0` +

components/pryv-cmc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pryv/cmc",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Cross-account Messaging & Consent client helpers for Pryv.io",
   "keywords": [
     "Pryv",

components/pryv-cmc/src/index.js

@@ -675,7 +675,16 @@ async function acceptInvite (conn, capabilityUrl, opts) {
   } catch (_e) {
     // Best-effort; if offer read fails the accept can still proceed.
   }
-  const content = { capabilityUrl };
+  // Persist the negotiated features into the accept trigger so the
+  // plugin's handleAccept can stamp them onto the data-grant access's
+  // clientData.cmc.features. Both keys default to true when omitted on
+  // the offer side (per README "Features negotiation"); explicit false
+  // is binding both ways.
+  const resolvedFeatures = {
+    chat: offerFeatures?.chat !== false,
+    systemMessaging: offerFeatures?.systemMessaging !== false
+  };
+  const content = { capabilityUrl, features: resolvedFeatures };
   if (opts.extra) content.extra = opts.extra;
   if (opts.accessName) content.accessName = opts.accessName;
   const event = await conn.apiOne('events.create', {
@@ -877,7 +886,12 @@ async function listAcceptedRelationships (conn, params) {
       appCode: c.appCode || null,
       scopeStreamId: (event.streamIds && event.streamIds[0]) || event.streamId,
       acceptedAt: c.acceptedAt || event.time || null,
-      features: c.features || (c.extra ? { chat: !!c.extra.chat, system: !!c.extra.systemMessaging } : { chat: false, system: false })
+      // Features default to true on both keys when absent (per README
+      // "Features negotiation"). The legacy c.extra fallback predates
+      // the contract fix and is no longer reachable for events written
+      // by pryv-cmc >= 1.1.1; we leave the field-omission default at
+      // true to honour the documented contract.
+      features: c.features || { chat: true, systemMessaging: true }
     };
   });
 }

components/pryv-cmc/test/cmc.test.js

@@ -933,6 +933,138 @@ describe('[CMCL1] @pryv/cmc Level-1 protocol functions', function () {
     });
   });
 
+  describe('[CMCL1OF] J6 features-negotiation contract', function () {
+    // README contract: both `chat` + `systemMessaging` default to true
+    // when omitted; explicit false on either is binding both sides.
+    //
+    // Bug history (2026-05-21, HDS implementer report on
+    // open-pryv.io@04bb2c1 + @pryv/cmc@1.1.0):
+    //   - SDK acceptInvite never wrote content.features (offerFeatures
+    //     computed at line ~674 was unused).
+    //   - Plugin handleAccept read triggerEvent.content.extra instead of
+    //     content.features (extra is the user-supplied pass-through,
+    //     reserved for HDS-specific opts).
+    //   - listAcceptedRelationships mapper defaulted to
+    //     { chat: false, system: false } (contradicts README) and used
+    //     `system` instead of `systemMessaging` (inconsistent with the
+    //     contract everywhere else).
+    // Together these defaulted the patient-side relationship to all-false
+    // even when the offer specified default-true. These contract tests
+    // pin each fix so regressions surface at unit-test time.
+
+    function fakePryvWithApiOne (apiOneFn) {
+      const stub = {
+        apiOne: apiOneFn,
+        service: { info: async () => { throw new Error('not stubbed'); } },
+        accessInfo: async () => { throw new Error('not stubbed'); }
+      };
+      return {
+        Connection: function () { return stub; },
+        utils: { decomposeAPIEndpoint: () => ({ username: null, host: '' }) }
+      };
+    }
+
+    it('[CMCL1OF1] acceptInvite defaults content.features to {chat:true, systemMessaging:true} when offer omits features', async function () {
+      const fakePryv = fakePryvWithApiOne(async function (method, _params, expectedKey) {
+        if (method === 'events.get') {
+          // Offer event with NO features field — must default to true on both.
+          return { events: [{ id: 'offer-1', content: { request: { permissions: [], consent: { en: 'ok' } } } }] }[expectedKey];
+        }
+        throw new Error('unexpected method: ' + method);
+      });
+      const conn = makeStubConnection({
+        handlers: {
+          'events.create': function (params) {
+            return { event: { id: 'acc-default', streamIds: params.streamIds, content: { status: 'pending' } } };
+          }
+        }
+      });
+      await cmc.acceptInvite(conn, 'https://Tok@example.com/', {
+        scopeStreamId: ':_cmc:apps:test',
+        waitForCompletion: false,
+        pryv: fakePryv
+      });
+      const createCall = conn.calls.find(c => c.method === 'events.create');
+      expect(createCall, 'expected events.create on accepter conn').to.exist;
+      expect(createCall.params.content).to.have.property('features');
+      expect(createCall.params.content.features).to.deep.equal({
+        chat: true,
+        systemMessaging: true
+      });
+    });
+
+    it('[CMCL1OF2] acceptInvite preserves explicit false on each key from offer', async function () {
+      const fakePryv = fakePryvWithApiOne(async function (method, _params, expectedKey) {
+        if (method === 'events.get') {
+          return { events: [{ id: 'offer-2', content: { request: { permissions: [], consent: { en: 'ok' }, features: { chat: false, systemMessaging: true } } } }] }[expectedKey];
+        }
+        throw new Error('unexpected method: ' + method);
+      });
+      const conn = makeStubConnection({
+        handlers: {
+          'events.create': function (params) {
+            return { event: { id: 'acc-explicit-false', streamIds: params.streamIds, content: { status: 'pending' } } };
+          }
+        }
+      });
+      await cmc.acceptInvite(conn, 'https://Tok@example.com/', {
+        scopeStreamId: ':_cmc:apps:test',
+        waitForCompletion: false,
+        pryv: fakePryv
+      });
+      const createCall = conn.calls.find(c => c.method === 'events.create');
+      expect(createCall.params.content.features).to.deep.equal({
+        chat: false,
+        systemMessaging: true
+      });
+    });
+
+    it('[CMCL1OF3] listAcceptedRelationships defaults features to {chat:true, systemMessaging:true} when content.features absent', async function () {
+      const conn = makeStubConnection({
+        handlers: {
+          'events.get': function () {
+            return {
+              events: [{
+                id: 'acc-no-feat',
+                streamIds: [':_cmc:apps:test'],
+                content: {
+                  from: { username: 'alice', host: 'pryv.me' },
+                  dataGrantAccessId: 'dg-no-feat'
+                  // No `features` field — must default to true on both keys.
+                }
+              }]
+            };
+          }
+        }
+      });
+      const r = await cmc.listAcceptedRelationships(conn);
+      expect(r).to.have.length(1);
+      expect(r[0].features).to.deep.equal({ chat: true, systemMessaging: true });
+    });
+
+    it('[CMCL1OF4] listAcceptedRelationships passes through content.features verbatim — including explicit false', async function () {
+      const conn = makeStubConnection({
+        handlers: {
+          'events.get': function () {
+            return {
+              events: [{
+                id: 'acc-explicit',
+                streamIds: [':_cmc:apps:test'],
+                content: {
+                  from: { username: 'alice', host: 'pryv.me' },
+                  dataGrantAccessId: 'dg-explicit',
+                  features: { chat: true, systemMessaging: false }
+                }
+              }]
+            };
+          }
+        }
+      });
+      const r = await cmc.listAcceptedRelationships(conn);
+      expect(r[0].features).to.deep.equal({ chat: true, systemMessaging: false });
+    });
+  });
+
   describe('[CMCL1OH] J8 acceptInvite resolves dataGrantAccessId on waitForCompletion', function () {
     it('[CMCL1OH1] returns dataGrantAccessId from the post-completion getOne', async function () {
       // Two-phase: events.create returns status pending; pollTriggerCompletion

components/pryv-monitor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pryv/monitor",
-  "version": "3.4.0",
+  "version": "3.4.1",
   "description": "Extends `pryv` with event-driven notifications for changes on a Pryv.io account",
   "keywords": [
     "Pryv",

components/pryv-socket.io/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pryv/socket.io",
-  "version": "3.4.0",
+  "version": "3.4.1",
   "description": "Extends `pryv` with Socket.IO transport",
   "keywords": [
     "Pryv",

components/pryv/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pryv",
-  "version": "3.4.0",
+  "version": "3.4.1",
   "description": "Pryv JavaScript library",
   "keywords": [
     "Pryv",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "lib-js",
-  "version": "3.4.0",
+  "version": "3.4.1",
   "private": false,
   "description": "Pryv JavaScript library and add-ons",
   "keywords": [