@pryv/cmc@1.0.0: new sibling package — Level-0 + Level-1 CMC client surface

New npm package shipping the full CMC client-side surface, sibling to
@pryv/monitor and @pryv/socket.io. The previously-shipped pryv@3.2.0
pryv.cmc.* namespace (Level-0 only) has been removed from pryv in
the matching pryv@3.3.0 release; this package replaces and extends it.

Level-0 (moved from pryv.cmc.*)
- Namespace constants: NS, NS_INBOX, NS_APPS, NS_INTERNAL,
  NS_INTERNAL_RETRIES.
- Event-type constants: ET_REQUEST, ET_ACCEPT, ET_REFUSE, ET_REVOKE,
  ET_CHAT, ET_SYSTEM_ALERT, ET_SYSTEM_ACK, ET_SCOPE_REQUEST,
  ET_SCOPE_UPDATE (canonical + legacy ET_SYSTEM_SCOPE_* aliases).
  NEW: ET_INVALIDATE_LINK ('consent/invalidate-link-cmc') for
  Phase-2 open-link invalidation (lands in open-pryv.io PR series).
- Grouped collections EVENT_TYPES_LIFECYCLE / EVENT_TYPES_CHAT /
  EVENT_TYPES_SYSTEM.
- Slug helpers: slugifyHost, counterpartySlug, parseCounterpartySlug,
  SEPARATOR.
- Stream-id builders: appScope, chatsParentUnder, chatStreamUnder,
  collectorsParentUnder, collectorStreamUnder.
- Classification + parsing: isCmcStreamId, isAppNestedPluginStream,
  getAppCode, parseChatStreamId, parseCollectorStreamId.
- errorIds catalogue mirroring open-pryv.io's CmcErrorIds. Removed
  CHAT_RATE_LIMITED (rate-limiter removed server-side). Added
  CAPABILITY_ALREADY_ACCEPTED_BY_YOU for Phase-2 open-link
  same-patient re-click detection.

Level-1 (NEW — protocol functions consumers no longer reimplement)
Provider side:
- createInvite(conn, params) -> { inviteEventId, capabilityUrl, mode, expiresAt }
- listInvites(conn, params) -> { items: InviteRecord[], truncated }
  Capped single call, default limit 1000; document
  Connection.getEventsStreamed as fallback when truncated.
- getInviteStatus(conn, inviteEventId) -> InviteRecord
- revokeRelationship(conn, params) -> void (consent/revoke-cmc)
- invalidateCapability(conn, params) -> void
  (consent/invalidate-link-cmc, open-link only)
- requestScopeUpdate(conn, params) -> { scopeRequestEventId }
Consumer side:
- readOffer(capabilityUrl) -> { requester, consent, requestedPermissions,
  mode, features }. No auto-retry per lib-js convention; caller picks
  retry policy.
- acceptInvite(conn, capabilityUrl, opts) -> Phase-2-completed record by
  default. waitForCompletion:false opt-out returns Phase-1 record
  immediately. Polls trigger event status for completion (default 200ms
  interval, 10s timeout) to avoid socket dep.
- refuseInvite(conn, capabilityUrl, opts) -> { refuseEventId }
- revokeAcceptance(conn, params) -> void
- listAcceptedRelationships(conn, params) -> RelationshipRecord[]
Cross-direction:
- sendChat(conn, params) -> { chatEventId } (content: string, schema 1:1)
- sendSystemAlert(conn, params) -> { alertEventId }
- sendSystemAck(conn, params) -> { ackEventId }
- acceptScopeUpdate(conn, scopeRequestEventId) -> { updateAcceptEventId,
  newDataGrantAccessId }
- refuseScopeUpdate(conn, scopeRequestEventId, opts) -> { updateRefuseEventId }
Observation:
- scopes.inbox / scopes.chats / scopes.collectors return Monitor scope
  objects for use with 'new pryv.Monitor(conn, scope)'.

Types
- DecomposedAPIEndpoint shape consumer can reach via pryv.utils.
- InviteRecord, RelationshipRecord, InviteStatus, CapabilityMode.
- CmcError thrown on Phase-2 completion failure carrying tagged
  failure.reason as error.id.

Tests: 43/43 ([CMCX] Level-0 18 + [CMCL1] Level-1 25). Stub Connection
records { method, params, expectedKey } calls; tests assert wire shape.
Deep integration left to _plans/68-.../tests/02-03 against deployed
open-pryv.io (per release sequencing).

Author: perki

components/pryv-cmc/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@pryv/cmc",
+  "version": "1.0.0",
+  "description": "Cross-account Messaging & Consent client helpers for Pryv.io",
+  "keywords": [
+    "Pryv",
+    "Pryv.io",
+    "CMC",
+    "Consent",
+    "Messaging"
+  ],
+  "homepage": "https://github.com/pryv/lib-js/tree/master/components/pryv-cmc#readme",
+  "bugs": {
+    "url": "https://github.com/pryv/lib-js/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git://github.com/pryv/lib-js.git"
+  },
+  "license": "BSD-3-Clause",
+  "author": "Pryv S.A. <info@pryv.com> (https://pryv.com)",
+  "main": "src/index.js",
+  "types": "src/index.d.ts",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "peerDependencies": {
+    "pryv": "^3.3.0"
+  }
+}

components/pryv-cmc/src/index.d.ts

@@ -0,0 +1,286 @@
+declare module '@pryv/cmc' {
+  // --- Namespace constants ---
+  export const NS: ':_cmc:';
+  export const NS_INBOX: ':_cmc:inbox';
+  export const NS_APPS: ':_cmc:apps';
+  export const NS_INTERNAL: ':_cmc:_internal';
+  export const NS_INTERNAL_RETRIES: ':_cmc:_internal:retries';
+
+  // --- Event types ---
+  export const ET_REQUEST: 'consent/request-cmc';
+  export const ET_ACCEPT: 'consent/accept-cmc';
+  export const ET_REFUSE: 'consent/refuse-cmc';
+  export const ET_REVOKE: 'consent/revoke-cmc';
+  export const ET_INVALIDATE_LINK: 'consent/invalidate-link-cmc';
+  export const ET_SCOPE_REQUEST: 'consent/scope-request-cmc';
+  export const ET_SCOPE_UPDATE: 'consent/scope-update-cmc';
+  export const ET_CHAT: 'message/chat-cmc';
+  export const ET_SYSTEM_ALERT: 'notification/alert-cmc';
+  export const ET_SYSTEM_ACK: 'notification/ack-cmc';
+  export const ET_SYSTEM_SCOPE_REQUEST: 'consent/scope-request-cmc';
+  export const ET_SYSTEM_SCOPE_UPDATE: 'consent/scope-update-cmc';
+  export const EVENT_TYPES_LIFECYCLE: readonly string[];
+  export const EVENT_TYPES_CHAT: readonly string[];
+  export const EVENT_TYPES_SYSTEM: readonly string[];
+
+  // --- Slug helpers ---
+  export const SEPARATOR: '--';
+
+  export type CmcActor = {
+    username: string;
+    host: string;
+  };
+
+  export type CmcCounterpartySlugInput = {
+    username: string;
+    host: string;
+  };
+
+  export type CmcParsedCounterpartySlug = {
+    username: string;
+    /** Host with `.` replaced by `-`. Lossy — store the canonical host alongside if needed. */
+    hostSlug: string;
+  };
+
+  export type CmcParsedStreamId = {
+    appCode: string | null;
+    /** The :_cmc:apps:<app-code>[:...] prefix above the chats/collectors segment. */
+    scopeStreamId: string;
+    counterpartySlug: string;
+    counterparty: CmcParsedCounterpartySlug;
+  };
+
+  export function slugifyHost(host: string): string;
+  export function counterpartySlug(params: CmcCounterpartySlugInput): string;
+  export function parseCounterpartySlug(slug: string): CmcParsedCounterpartySlug;
+
+  // --- Stream-id builders ---
+  export function appScope(appCode: string): string;
+  export function chatsParentUnder(scopeStreamId: string): string;
+  export function chatStreamUnder(scopeStreamId: string, slug: string): string;
+  export function collectorsParentUnder(scopeStreamId: string): string;
+  export function collectorStreamUnder(scopeStreamId: string, slug: string): string;
+
+  // --- Classification + parsing ---
+  export function isCmcStreamId(streamId: string): boolean;
+  export function isAppNestedPluginStream(streamId: string): boolean;
+  export function getAppCode(streamId: string): string | null;
+  export function parseChatStreamId(streamId: string): CmcParsedStreamId | null;
+  export function parseCollectorStreamId(streamId: string): CmcParsedStreamId | null;
+
+  // --- Error catalogue ---
+  export type CmcErrorId =
+    | 'cmc-capability-invalid'
+    | 'cmc-capability-consumed'
+    | 'cmc-capability-invalidated'
+    | 'cmc-capability-already-accepted-by-you'
+    | 'cmc-capability-timeout'
+    | 'cmc-capability-empty'
+    | 'cmc-capability-multiple-offers'
+    | 'cmc-handler-missing-capability-url'
+    | 'cmc-handler-offer-missing-capability-id'
+    | 'cmc-offer-empty-permissions'
+    | 'cmc-handler-wrong-type'
+    | 'cmc-handler-threw'
+    | 'cmc-handler-offer-read-failed'
+    | 'cmc-handler-counterparty-unknown'
+    | 'cmc-handler-data-grant-create-failed'
+    | 'cmc-handler-data-grant-no-apiendpoint'
+    | 'cmc-handler-build-data-grant-failed'
+    | 'cmc-back-channel-create-failed'
+    | 'cmc-handler-delivery-threw'
+    | 'cmc-handler-delivery-rejected'
+    | 'cmc-handler-delivery-failed'
+    | 'cmc-chat-stream-not-chat'
+    | 'cmc-chat-counterparty-access-not-found'
+    | 'cmc-chat-no-remote-apiendpoint'
+    | 'cmc-chat-no-remote-chat-stream';
+
+  export const errorIds: {
+    readonly CAPABILITY_INVALID: 'cmc-capability-invalid';
+    readonly CAPABILITY_CONSUMED: 'cmc-capability-consumed';
+    readonly CAPABILITY_INVALIDATED: 'cmc-capability-invalidated';
+    readonly CAPABILITY_ALREADY_ACCEPTED_BY_YOU: 'cmc-capability-already-accepted-by-you';
+    readonly CAPABILITY_TIMEOUT: 'cmc-capability-timeout';
+    readonly CAPABILITY_EMPTY: 'cmc-capability-empty';
+    readonly CAPABILITY_MULTIPLE_OFFERS: 'cmc-capability-multiple-offers';
+    readonly HANDLER_MISSING_CAPABILITY_URL: 'cmc-handler-missing-capability-url';
+    readonly HANDLER_OFFER_MISSING_CAPABILITY_ID: 'cmc-handler-offer-missing-capability-id';
+    readonly OFFER_EMPTY_PERMISSIONS: 'cmc-offer-empty-permissions';
+    readonly HANDLER_WRONG_TYPE: 'cmc-handler-wrong-type';
+    readonly HANDLER_THREW: 'cmc-handler-threw';
+    readonly HANDLER_OFFER_READ_FAILED: 'cmc-handler-offer-read-failed';
+    readonly HANDLER_COUNTERPARTY_UNKNOWN: 'cmc-handler-counterparty-unknown';
+    readonly HANDLER_DATA_GRANT_CREATE_FAILED: 'cmc-handler-data-grant-create-failed';
+    readonly HANDLER_DATA_GRANT_NO_APIENDPOINT: 'cmc-handler-data-grant-no-apiendpoint';
+    readonly HANDLER_BUILD_DATA_GRANT_FAILED: 'cmc-handler-build-data-grant-failed';
+    readonly BACK_CHANNEL_CREATE_FAILED: 'cmc-back-channel-create-failed';
+    readonly HANDLER_DELIVERY_THREW: 'cmc-handler-delivery-threw';
+    readonly HANDLER_DELIVERY_REJECTED: 'cmc-handler-delivery-rejected';
+    readonly HANDLER_DELIVERY_FAILED: 'cmc-handler-delivery-failed';
+    readonly CHAT_STREAM_NOT_CHAT: 'cmc-chat-stream-not-chat';
+    readonly CHAT_COUNTERPARTY_ACCESS_NOT_FOUND: 'cmc-chat-counterparty-access-not-found';
+    readonly CHAT_NO_REMOTE_APIENDPOINT: 'cmc-chat-no-remote-apiendpoint';
+    readonly CHAT_NO_REMOTE_CHAT_STREAM: 'cmc-chat-no-remote-chat-stream';
+  };
+
+  /** Typed CMC failure surfaced by Level-1 functions. */
+  export class CmcError extends Error {
+    constructor(message: string, id: CmcErrorId | string, cause?: any);
+    readonly name: 'CmcError';
+    readonly id: CmcErrorId | string;
+    readonly cause?: any;
+  }
+
+  // --- Level-1: protocol records ---
+
+  export type InviteStatus = 'pending' | 'delivered' | 'accepted' | 'completed' | 'refused' | 'revoked' | 'invalidated' | 'expired' | 'failed';
+  export type CapabilityMode = 'single-use' | 'open-link';
+  export type PermissionLevel = 'read' | 'contribute' | 'manage' | 'create-only';
+  export type Permission = { streamId: string; level: PermissionLevel };
+
+  export type InviteRecord = {
+    inviteEventId: string;
+    capabilityUrl: string | null;
+    mode: CapabilityMode;
+    status: InviteStatus;
+    expiresAt: number | null;
+    counterparty?: { username: string; host: string; displayName?: string } | null;
+    acceptedAt?: number | null;
+    scopeStreamId: string;
+  };
+
+  export type RelationshipRecord = {
+    acceptEventId: string;
+    counterparty: { username: string; host: string; displayName?: string } | null;
+    dataGrantAccessId: string | null;
+    backChannelAccessId?: string | null;
+    appCode: string | null;
+    scopeStreamId: string;
+    acceptedAt: number | null;
+    features: { chat: boolean; system: boolean };
+  };
+
+  // --- Level-1: provider side ---
+
+  export function createInvite(conn: any, params: {
+    appCode: string;
+    scopeStreamId: string;
+    displayName: string;
+    requestedPermissions: Permission[];
+    mode?: CapabilityMode;
+    title?: Record<string, string>;
+    description?: Record<string, string>;
+    consent?: Record<string, string>;
+    features?: { chat?: boolean; systemMessaging?: boolean };
+    expiresAt?: number;
+    to?: string | null;
+    requesterMeta?: { displayName?: string; appId?: string; appUrl?: string };
+  }): Promise<{ inviteEventId: string; capabilityUrl: string; mode: CapabilityMode; expiresAt: number }>;
+
+  export function listInvites(conn: any, params?: {
+    scopeStreamId?: string;
+    limit?: number;
+  }): Promise<{ items: InviteRecord[]; truncated: boolean }>;
+
+  export function getInviteStatus(conn: any, inviteEventId: string): Promise<InviteRecord>;
+
+  export function revokeRelationship(conn: any, params: {
+    scopeStreamId: string;
+    accessId: string;
+    reason?: Record<string, string>;
+  }): Promise<void>;
+
+  export function invalidateCapability(conn: any, params: {
+    inviteEventId: string;
+    scopeStreamId?: string;
+    reason?: Record<string, string>;
+  }): Promise<void>;
+
+  export function requestScopeUpdate(conn: any, params: {
+    collectorStreamId: string;
+    newPermissions: Permission[];
+    message?: Record<string, string>;
+    expires?: number;
+  }): Promise<{ scopeRequestEventId: string }>;
+
+  // --- Level-1: consumer side ---
+
+  export function readOffer(capabilityUrl: string, opts?: { pryv?: any }): Promise<{
+    requester: { username: string | null; host: string; displayName?: string };
+    consent?: Record<string, string>;
+    requestedPermissions: Permission[];
+    mode: CapabilityMode;
+    features: { chat?: boolean; systemMessaging?: boolean };
+  }>;
+
+  export function acceptInvite(conn: any, capabilityUrl: string, opts?: {
+    scopeStreamId?: string;
+    extra?: { chat?: boolean; systemMessaging?: boolean };
+    accessName?: string;
+    waitForCompletion?: boolean;
+    completionTimeoutMs?: number;
+    completionPollIntervalMs?: number;
+  }): Promise<
+    | { acceptEventId: string; dataGrantAccessId: string | null; status: 'pending' }
+    | { acceptEventId: string; dataGrantAccessId: string | null; dataGrantApiEndpoint: string | null; counterparty: any; features: any }
+  >;
+
+  export function refuseInvite(conn: any, capabilityUrl: string, opts?: {
+    scopeStreamId?: string;
+    reason?: Record<string, string>;
+  }): Promise<{ refuseEventId: string }>;
+
+  export function revokeAcceptance(conn: any, params: {
+    scopeStreamId: string;
+    accessId: string;
+    reason?: Record<string, string>;
+  }): Promise<void>;
+
+  export function listAcceptedRelationships(conn: any, params?: {
+    scopeStreamId?: string;
+    limit?: number;
+  }): Promise<RelationshipRecord[]>;
+
+  // --- Level-1: cross-direction ---
+
+  export function sendChat(conn: any, params: {
+    scopeStreamId: string;
+    peerSlug: string;
+    content: string;
+  }): Promise<{ chatEventId: string }>;
+
+  export function sendSystemAlert(conn: any, params: {
+    scopeStreamId: string;
+    peerSlug: string;
+    level?: 'info' | 'warning' | 'critical';
+    title: Record<string, string>;
+    body: Record<string, string>;
+    ackRequired?: boolean;
+    ackId?: string;
+  }): Promise<{ alertEventId: string }>;
+
+  export function sendSystemAck(conn: any, params: {
+    scopeStreamId: string;
+    peerSlug: string;
+    alertEventId: string;
+    ackId: string;
+  }): Promise<{ ackEventId: string }>;
+
+  export function acceptScopeUpdate(conn: any, scopeRequestEventId: string, opts?: {
+    scopeStreamId?: string;
+  }): Promise<{ updateAcceptEventId: string; newDataGrantAccessId: string | null }>;
+
+  export function refuseScopeUpdate(conn: any, scopeRequestEventId: string, opts?: {
+    scopeStreamId?: string;
+    reason?: Record<string, string>;
+  }): Promise<{ updateRefuseEventId: string }>;
+
+  // --- Observation scopes (for use with `new pryv.Monitor(conn, scope)`) ---
+
+  export const scopes: {
+    inbox(params?: { appCode?: string }): { streams: string[] };
+    chats(params: { appCode?: string; peerSlug?: string; scopeStreamId?: string }): { streams: string[] };
+    collectors(params: { appCode?: string; peerSlug?: string; scopeStreamId?: string }): { streams: string[] };
+  };
+}