@canonmsg/agent-sdk 1.4.1 → 1.5.0

package/README.md

@@ -130,6 +130,7 @@ Current rules of thumb:
 - `selectionPolicy: 'required_explicit'` means Canon should require the user to make a choice instead of silently inheriting a default
 - `workspaceRoots` and `writableRoots` document allowed roots and let Canon group project choices. Canon still stores the selected concrete `workspaceId`; it does not send arbitrary root-relative paths to generic SDK agents.
 - Publishing a descriptor does not automatically make your SDK agent enforce those controls. If you advertise model, workspace, execution mode, or runtime-native controls, your runtime must actually read and apply the stored config.
+- Message handlers receive `ctx.provenance`, a Canon-computed sender/conversation context for the latest inbound message in the batch. Use it when your runtime wants owner-only tools, group mention policy, or self-context-aware behavior; Canon does not impose a sandbox on SDK agents.
 
 ## Delivery Modes
 

package/dist/canon-agent.d.ts

@@ -42,6 +42,9 @@ export declare class CanonAgent {
     private readonly reachOutInFlight;
     private agentId;
     private agentContext;
+    private approvalManager;
+    private approvalManagerAgentId;
+    private approvalManagerOwnerId;
     private cachedConversationIds;
     private running;
     private runtimeHeartbeatTimer;
@@ -53,6 +56,8 @@ export declare class CanonAgent {
     private readonly conversationMemberIds;
     private readonly pendingMembershipChanges;
     constructor(options: CanonAgentOptions);
+    private ensureApprovalManager;
+    private filterApprovalReplyMessages;
     on(event: 'message', handler: MessageHandler): void;
     on(event: 'contactRequest', handler: ContactRequestHandler): void;
     on(event: 'contactApproved', handler: ContactRequestHandler): void;

package/dist/canon-agent.js

@@ -1,4 +1,4 @@
-import { CanonClient, buildCanonGroupContext, createRuntimeStatePublisher, diffCanonMemberIds, FINAL_MESSAGE_HANDOFF_MS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, initRTDBAuth, rtdbRead, rtdbWrite, normalizeTurnMetadata, reachOutToCanonContact, resolveCanonReplyContext, resolveMessageActiveSelfContextId, selectActiveSelfContexts, } from '@canonmsg/core';
+import { ApprovalManager, CanonClient, buildCanonGroupContext, createRuntimeStatePublisher, diffCanonMemberIds, FINAL_MESSAGE_HANDOFF_MS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, initRTDBAuth, rtdbRead, rtdbWrite, normalizeTurnMetadata, reachOutToCanonContact, resolveCanonReplyContext, resolveMessageActiveSelfContextId, resolveRuntimeProvenance, selectActiveSelfContexts, } from '@canonmsg/core';
 import { randomUUID } from 'node:crypto';
 import { AuthManager } from './auth.js';
 import { Debouncer } from './debouncer.js';
@@ -205,6 +205,9 @@ export class CanonAgent {
     reachOutInFlight = new Map();
     agentId = null;
     agentContext = null;
+    approvalManager = null;
+    approvalManagerAgentId = null;
+    approvalManagerOwnerId = null;
     cachedConversationIds = [];
     running = false;
     runtimeHeartbeatTimer = null;
@@ -257,6 +260,47 @@ export class CanonAgent {
             }
         }
     }
+    ensureApprovalManager(agentContext = this.agentContext) {
+        const agentId = agentContext?.agentId || this.agentId;
+        const ownerId = agentContext?.ownerId;
+        if (!agentId || !ownerId)
+            return null;
+        if (this.approvalManager
+            && this.approvalManagerAgentId === agentId
+            && this.approvalManagerOwnerId === ownerId) {
+            return this.approvalManager;
+        }
+        if (this.approvalManager?.pendingCount) {
+            return this.approvalManager;
+        }
+        this.approvalManager?.dispose();
+        this.approvalManager = new ApprovalManager(this.apiClient, agentId, ownerId);
+        this.approvalManagerAgentId = agentId;
+        this.approvalManagerOwnerId = ownerId;
+        return this.approvalManager;
+    }
+    filterApprovalReplyMessages(conversationId, messages) {
+        const manager = this.ensureApprovalManager();
+        if (!manager) {
+            return messages.filter((message) => {
+                const metadata = message.metadata;
+                return !(metadata && typeof metadata === 'object' && !Array.isArray(metadata)
+                    && metadata.type === 'approval_reply');
+            });
+        }
+        return messages.filter((message) => {
+            const metadata = message.metadata;
+            const metadataRecord = metadata && typeof metadata === 'object' && !Array.isArray(metadata)
+                ? metadata
+                : null;
+            const consumed = manager.handleMessage(conversationId, {
+                senderId: message.senderId,
+                ...(typeof message.text === 'string' ? { text: message.text } : {}),
+                ...(metadataRecord ? { metadata: metadataRecord } : {}),
+            });
+            return !consumed && metadataRecord?.type !== 'approval_reply';
+        });
+    }
     on(event, handler) {
         if (event === 'message') {
             this.handler = handler;
@@ -411,9 +455,9 @@ export class CanonAgent {
         this.agentId = agentId;
         console.log(`[canon-sdk] Authenticated as ${agentId}`);
         // 2. Wire debouncer to handler
-        this.debouncer.setCallback(async (conversationId, messages) => {
+        this.debouncer.setCallback(async (conversationId, messages, provenanceByMessageId) => {
             this.rememberConversationId(conversationId);
-            await this.handleMessages(conversationId, messages);
+            await this.handleMessages(conversationId, messages, provenanceByMessageId);
         });
         // 3. Fetch conversations (used for delivery mode + session state)
         let conversations = [];
@@ -437,6 +481,7 @@ export class CanonAgent {
         // 3b. Fetch agent context (identity, owner, access level)
         try {
             this.agentContext = await this.apiClient.getAgentMe();
+            this.ensureApprovalManager(this.agentContext);
         }
         catch {
             console.warn('[canon-sdk] Failed to fetch agent context — owner/access info unavailable');
@@ -462,6 +507,7 @@ export class CanonAgent {
         const rtm = new RealtimeManager(this.options.apiKey, this.debouncer, agentId, this.options.streamUrl, this.apiClient);
         rtm.setOnAgentContext((ctx) => {
             this.agentContext = ctx;
+            this.ensureApprovalManager(ctx);
         });
         rtm.setContactRequestHandlers({
             onContactRequest: (request) => {
@@ -950,7 +996,12 @@ export class CanonAgent {
         }
         return publisher;
     }
-    async handleMessages(conversationId, messages) {
+    async handleMessages(conversationId, messages, provenanceByMessageId) {
+        const actionableMessages = this.filterApprovalReplyMessages(conversationId, messages);
+        if (actionableMessages.length === 0) {
+            return;
+        }
+        messages = actionableMessages;
         if (!this.handler) {
             console.warn(`[canon-sdk] No message handler registered — messages for ${conversationId} dropped. Call agent.on('message', handler) before starting.`);
             return;
@@ -961,14 +1012,14 @@ export class CanonAgent {
         await this.notifyMessageInterrupt(conversationId, abortSignal);
         if (this.sessionManager) {
             await this.sessionManager.enqueue(conversationId, messages, async (session, newMessages) => {
-                await this.executeHandler(conversationId, newMessages, session);
+                await this.executeHandler(conversationId, newMessages, session, provenanceByMessageId);
             }, { toFront: shouldInterrupt });
         }
         else {
-            await this.executeHandler(conversationId, messages);
+            await this.executeHandler(conversationId, messages, undefined, provenanceByMessageId);
         }
     }
-    async executeHandler(conversationId, messages, session) {
+    async executeHandler(conversationId, messages, session, provenanceByMessageId) {
         if (!this.handler)
             return;
         const turnId = randomUUID();
@@ -1147,6 +1198,32 @@ export class CanonAgent {
                 inboundPolicy: 'approval-required',
                 groupJoinPolicy: 'approval-required',
             };
+            const provenance = latestMessage
+                ? resolveRuntimeProvenance({
+                    provenance: provenanceByMessageId?.get(latestMessage.id) ?? null,
+                    conversationId,
+                    conversationType: conversation.type,
+                    memberCount: conversation.memberIds.length,
+                    senderId: latestMessage.senderId,
+                    senderName: latestMessage.senderName ?? latestMessage.senderId,
+                    senderType: latestMessage.senderType,
+                    isOwner: latestMessage.isOwner,
+                    agentId: agent.agentId,
+                    mentions: latestMessage.mentions,
+                    activeSelfContextId,
+                    selfContexts,
+                })
+                : resolveRuntimeProvenance({
+                    conversationId,
+                    conversationType: conversation.type,
+                    memberCount: conversation.memberIds.length,
+                    senderId: '',
+                    senderType: 'human',
+                    isOwner: false,
+                    agentId: agent.agentId,
+                    activeSelfContextId,
+                    selfContexts,
+                });
             if (replyContext?.found && replyContext.attachments?.length) {
                 try {
                     const materializedReply = await materializeReplyContextMedia(replyContext, {
@@ -1194,6 +1271,52 @@ export class CanonAgent {
                 ...(options ?? {}),
                 sourceConversationId: conversationId,
             });
+            const requestApproval = async (request) => {
+                throwIfAborted();
+                const manager = this.ensureApprovalManager(agent);
+                if (!manager) {
+                    return { decision: 'deny' };
+                }
+                shouldPersistTurnState = true;
+                try {
+                    try {
+                        await this.apiClient.clearStreaming(conversationId);
+                    }
+                    catch { }
+                    await writeTurn('waiting_input');
+                    try {
+                        await this.apiClient.setTyping(conversationId, false);
+                    }
+                    catch { }
+                    const result = await manager.requestApproval(conversationId, request.toolName, request.toolInput ?? {}, {
+                        riskLevel: request.riskLevel,
+                        risk: request.risk,
+                        category: request.category,
+                        runtimeId: request.runtimeId,
+                        turnId: request.turnId ?? turnId,
+                        native: request.native,
+                        toolSummary: request.toolSummary,
+                        details: request.details,
+                        ignoreSessionRules: request.ignoreSessionRules,
+                        allowSessionRule: request.allowSessionRule,
+                    });
+                    throwIfAborted();
+                    shouldPersistTurnState = false;
+                    try {
+                        await this.apiClient.setTyping(conversationId, true, 'thinking');
+                    }
+                    catch { }
+                    await setLiveState('thinking', 'Thinking...', 'thinking');
+                    return result;
+                }
+                catch (error) {
+                    if (abortController.signal.aborted || isAbortLikeError(error)) {
+                        throw error;
+                    }
+                    shouldPersistTurnState = false;
+                    return { decision: 'deny' };
+                }
+            };
             const uploadFile = (filePath, options) => uploadMediaFile(this.apiClient, conversationId, filePath, options);
             const replyWithFile = async (filePath, text = '', options) => {
                 throwIfAborted();
@@ -1254,6 +1377,8 @@ export class CanonAgent {
                 agent,
                 activeSelfContextId,
                 selfContexts,
+                provenance,
+                requestApproval,
                 abortSignal: abortController.signal,
                 media: {
                     materialize: (message = hydratedMessages[hydratedMessages.length - 1], options) => {

package/dist/debouncer.d.ts

@@ -1,13 +1,14 @@
-import type { CanonMessage } from '@canonmsg/core';
+import type { CanonMessage, CanonRuntimeProvenance } from '@canonmsg/core';
 export declare class Debouncer {
     private debounceMs;
     private pending;
+    private provenanceByMessageId;
     private timers;
     private orderedFlags;
     private callback;
     constructor(debounceMs: number);
-    setCallback(cb: (conversationId: string, messages: CanonMessage[]) => void): void;
-    add(conversationId: string, message: CanonMessage): void;
+    setCallback(cb: (conversationId: string, messages: CanonMessage[], provenanceByMessageId: ReadonlyMap<string, CanonRuntimeProvenance>) => void): void;
+    add(conversationId: string, message: CanonMessage, provenance?: CanonRuntimeProvenance | null): void;
     private flush;
     destroy(): void;
 }

package/dist/debouncer.js

@@ -1,6 +1,7 @@
 export class Debouncer {
     debounceMs;
     pending = new Map();
+    provenanceByMessageId = new Map();
     timers = new Map();
     // Track whether each conversation's pending messages are already in sorted
     // order so we can skip the sort on flush when possible (#10)
@@ -12,8 +13,11 @@ export class Debouncer {
     setCallback(cb) {
         this.callback = cb;
     }
-    add(conversationId, message) {
+    add(conversationId, message, provenance) {
         const existing = this.pending.get(conversationId) || [];
+        if (provenance) {
+            this.provenanceByMessageId.set(message.id, provenance);
+        }
         // Deduplicate by message ID
         if (!existing.some((m) => m.id === message.id)) {
             if (existing.length === 0) {
@@ -50,7 +54,15 @@ export class Debouncer {
             if (!isOrdered) {
                 messages.sort((a, b) => new Date(a.createdAt).getTime() - new Date(b.createdAt).getTime());
             }
-            this.callback(conversationId, messages);
+            const provenanceByMessageId = new Map();
+            for (const message of messages) {
+                const provenance = this.provenanceByMessageId.get(message.id);
+                if (provenance) {
+                    provenanceByMessageId.set(message.id, provenance);
+                    this.provenanceByMessageId.delete(message.id);
+                }
+            }
+            this.callback(conversationId, messages, provenanceByMessageId);
         }
     }
     destroy() {
@@ -59,6 +71,7 @@ export class Debouncer {
         }
         this.timers.clear();
         this.pending.clear();
+        this.provenanceByMessageId.clear();
         this.orderedFlags.clear();
     }
 }

package/dist/index.d.ts

@@ -1,10 +1,10 @@
 export { CanonAgent } from './canon-agent.js';
 export type { AgentContactsAPI, AgentUsersAPI } from './canon-agent.js';
-export { CanonApiError, HOST_ADMISSION_ACTION_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, } from '@canonmsg/core';
-export type { CanonContact, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeFact, CanonRuntimeFactGroup, CanonResolveAdmissionResult, ContactAddedPayload, ContactCardPayload, ContactRemovedPayload, ContactSource, HostAdmissionActionCapabilities, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, } from '@canonmsg/core';
+export { ApprovalManager, buildApprovalOutcome, buildApprovalReply, buildApprovalRequest, CanonApiError, DEFAULT_APPROVAL_CONFIG, generateApprovalId, HOST_ADMISSION_ACTION_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, parseApprovalReplyMetadata, parseApprovalRequestMetadata, parseSessionRule, parseTextApprovalReply, redactSecrets, } from '@canonmsg/core';
+export type { ApprovalConfig, ApprovalNativeRequestMetadata, ApprovalOutcomeMetadata, ApprovalReplyMetadata, ApprovalRequestCategory, ApprovalRequestDetail, ApprovalRequestMetadata, ApprovalResult, ApprovalRisk, CanonContact, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeFact, CanonRuntimeFactGroup, CanonResolveAdmissionResult, ContactAddedPayload, ContactCardPayload, ContactRemovedPayload, ContactSource, HostAdmissionActionCapabilities, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, SessionRule, } from '@canonmsg/core';
 export { SessionManager } from './session-manager.js';
 export { DEFAULT_MEDIA_CACHE_DIR, getCodexImagePath, getMessageAttachments, inferUploadMimeType, isAnthropicImageAttachment, materializeAttachment, materializeMessageMedia, materializeReplyContextMedia, resolveAttachmentMimeType, sendMediaFileMessage, toAnthropicImageBlock, uploadMediaFile, } from './media.js';
 export type { AnthropicImageBlock, AnthropicImageMimeType, MaterializeMediaOptions, MaterializedCanonAttachment, MaterializedCanonReplyContext, ReplyWithFileOptions, UploadMediaFileOptions, } from './media.js';
 export type { SessionConfig, Session } from './session-manager.js';
 export type { AgentContext, CanonGroupContext, CanonKnownRecentParticipant, CanonMembershipChange, CanonContactRequest, CanonMessage, CanonConversation, CanonReplyContext, CanonSelfContext, SendContextualMessageOptions, SendContextualMessageResult, SendContextualSelfContextInput, SendMessageOptions, CreateConversationOptions, } from '@canonmsg/core';
-export type { CanonAgentOptions, ContactAddedHandler, ContactRemovedHandler, ContactRequestHandler, MessageHandler, MessageHandlerContext, ProgressMessageOptions, ProgressMessageResult, ReachOutOptions, ReachOutResult, RuntimePrimitiveContext, RuntimePrimitiveHandler, RuntimePrimitiveHandlers, SessionInfo, SessionOptions, DeliveryMode, } from './types.js';
+export type { CanonAgentOptions, ContactAddedHandler, ContactRemovedHandler, ContactRequestHandler, MessageHandler, MessageHandlerContext, ProgressMessageOptions, ProgressMessageResult, ReachOutOptions, ReachOutResult, RuntimeApprovalRequest, RuntimePrimitiveContext, RuntimePrimitiveHandler, RuntimePrimitiveHandlers, SessionInfo, SessionOptions, DeliveryMode, } from './types.js';

package/dist/index.js

@@ -1,4 +1,4 @@
 export { CanonAgent } from './canon-agent.js';
-export { CanonApiError, HOST_ADMISSION_ACTION_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, } from '@canonmsg/core';
+export { ApprovalManager, buildApprovalOutcome, buildApprovalReply, buildApprovalRequest, CanonApiError, DEFAULT_APPROVAL_CONFIG, generateApprovalId, HOST_ADMISSION_ACTION_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, parseApprovalReplyMetadata, parseApprovalRequestMetadata, parseSessionRule, parseTextApprovalReply, redactSecrets, } from '@canonmsg/core';
 export { SessionManager } from './session-manager.js';
 export { DEFAULT_MEDIA_CACHE_DIR, getCodexImagePath, getMessageAttachments, inferUploadMimeType, isAnthropicImageAttachment, materializeAttachment, materializeMessageMedia, materializeReplyContextMedia, resolveAttachmentMimeType, sendMediaFileMessage, toAnthropicImageBlock, uploadMediaFile, } from './media.js';

package/dist/realtime.js

@@ -52,7 +52,7 @@ export class RealtimeManager {
                         ...(m.contactCard ? { contactCard: m.contactCard } : {}),
                         ...(m.metadata ? { metadata: m.metadata } : {}),
                     };
-                    this.debouncer.add(payload.conversationId, message);
+                    this.debouncer.add(payload.conversationId, message, payload.provenance ?? null);
                 },
                 onAgentContext: (ctx) => {
                     this.onAgentContext?.(ctx);

package/dist/types.d.ts

@@ -1,5 +1,5 @@
-export type { AddMemberResult, AgentClientType, CanonGroupContext, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeDescriptor, CanonRuntimeFact, CanonRuntimeFactGroup, CanonRuntimePrimitiveId, CanonMessage, CanonConversation, CanonReplyContext, CanonContact, CanonContactRequest, CanonResolveAdmissionResult, ContactAddedPayload, ContactRemovedPayload, ContactSource, AgentContext, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, CanonSelfContext, SendContextualMessageOptions, SendContextualMessageResult, SendContextualSelfContextInput, SendMessageOptions, SessionConfig, CreateConversationOptions, TurnLifecycleState, } from '@canonmsg/core';
-import type { AddMemberResult, CanonGroupContext, CanonMessage, CanonConversation, CanonReplyContext, ContactCardPayload, CanonRuntimeActionDispatch, CanonRuntimePrimitiveId, SendMessageOptions, SendContextualSelfContextInput, SessionConfig } from '@canonmsg/core';
+export type { AddMemberResult, AgentClientType, CanonGroupContext, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeDescriptor, CanonRuntimeFact, CanonRuntimeFactGroup, CanonRuntimePrimitiveId, CanonRuntimeProvenance, CanonMessage, CanonConversation, CanonReplyContext, CanonContact, CanonContactRequest, CanonResolveAdmissionResult, ContactAddedPayload, ContactRemovedPayload, ContactSource, AgentContext, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, CanonSelfContext, SendContextualMessageOptions, SendContextualMessageResult, SendContextualSelfContextInput, SendMessageOptions, SessionConfig, CreateConversationOptions, TurnLifecycleState, ApprovalNativeRequestMetadata, ApprovalRequestCategory, ApprovalRequestDetail, ApprovalRequestMetadata, ApprovalRisk, ApprovalReplyMetadata, ApprovalOutcomeMetadata, SessionRule, ApprovalResult, } from '@canonmsg/core';
+import type { AddMemberResult, CanonGroupContext, CanonMessage, CanonConversation, CanonReplyContext, ContactCardPayload, CanonRuntimeActionDispatch, CanonRuntimePrimitiveId, CanonRuntimeProvenance, ApprovalNativeRequestMetadata, ApprovalRequestCategory, ApprovalRequestDetail, ApprovalResult, ApprovalRisk, SendMessageOptions, SendContextualSelfContextInput, SessionConfig } from '@canonmsg/core';
 import type { MaterializeMediaOptions, MaterializedCanonAttachment, ReplyWithFileOptions, UploadMediaFileOptions } from './media.js';
 export interface ProgressMessageOptions extends SendMessageOptions {
     /**
@@ -34,6 +34,28 @@ export interface TurnController {
     setTool: (text: string) => Promise<void>;
     setWaitingInput: (text?: string) => Promise<void>;
 }
+export interface RuntimeApprovalRequest {
+    /** Native runtime/tool/action name that is asking for permission. */
+    toolName: string;
+    /** Structured native input. Raw values are summarized/redacted before storage. */
+    toolInput?: Record<string, unknown>;
+    /** Optional pre-redacted summary when a runtime already has user-facing copy. */
+    toolSummary?: string;
+    category?: ApprovalRequestCategory;
+    risk?: ApprovalRisk;
+    riskLevel?: 'normal' | 'destructive';
+    runtimeId?: string;
+    turnId?: string;
+    native?: ApprovalNativeRequestMetadata;
+    details?: ApprovalRequestDetail[];
+    /**
+     * Ignore in-memory session rules for this approval request. Useful when the
+     * action was triggered by someone other than the agent owner.
+     */
+    ignoreSessionRules?: boolean;
+    /** Whether an approval reply may set an in-memory session rule. */
+    allowSessionRule?: boolean;
+}
 export interface MessageHandlerContext {
     messages: CanonMessage[];
     history: CanonMessage[];
@@ -79,6 +101,14 @@ export interface MessageHandlerContext {
     activeSelfContextId: string | null;
     /** Canon-provided private context explaining this agent's cross-session actions. */
     selfContexts?: import('@canonmsg/core').CanonSelfContext[];
+    /** Trusted Canon provenance for the latest inbound message in this handler batch. */
+    provenance: CanonRuntimeProvenance;
+    /**
+     * Ask the conversation owner to approve a native runtime action. This only
+     * renders Canon's inline approval card; runtimes must explicitly wait for
+     * and enforce the returned decision in their own approval hook.
+     */
+    requestApproval: (request: RuntimeApprovalRequest) => Promise<ApprovalResult>;
     /** Canon-managed local media access for the current conversation. */
     media: {
         materialize: (message?: CanonMessage, options?: Omit<MaterializeMediaOptions, 'agentId' | 'conversationId' | 'messageId'>) => Promise<MaterializedCanonAttachment[]>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/agent-sdk",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "Canon Agent SDK — build AI agents that participate in Canon conversations",
   "type": "module",
   "main": "dist/index.js",
@@ -28,7 +28,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@canonmsg/core": "^0.18.1"
+    "@canonmsg/core": "^0.19.0"
   },
   "publishConfig": {
     "access": "public"