@canonmsg/agent-sdk 10.3.0 → 10.4.0

package/dist/attached-session.js

@@ -1,5 +1,5 @@
 import { createHash } from 'node:crypto';
-import { buildChunkedMessagePartMetadata, CanonClient, CanonStream, createAttachedNativeSession, createRuntimeHeartbeat, createRuntimeStatePublisher, initRTDBAuth, resolveCanonRuntimeConnection, splitTextByUtf8Bytes, verifyCanonRuntimeConnection, } from '@canonmsg/core';
+import { buildChunkedMessagePartMetadata, buildCanonGroupContext, buildCompactGroupContextLines, CanonClient, CanonStream, createAttachedNativeSession, createRuntimeHeartbeat, createRuntimeStatePublisher, initRTDBAuth, resolveCanonRuntimeConnection, splitTextByUtf8Bytes, verifyCanonRuntimeConnection, } from '@canonmsg/core';
 /**
  * Connect one existing native session to one existing Canon conversation.
  * This is account-level participation, not a second group member. The caller
@@ -47,6 +47,8 @@ export function createCanonAttachedSession(options) {
     const reportedHistory = new Set();
     let publicationFailed = false;
     let historyIncomplete = false;
+    let currentConversation = null;
+    let currentOwnerId;
     let inputError = null;
     let observedTurnId;
     let turnUpdatedAt = null;
@@ -183,6 +185,7 @@ export function createCanonAttachedSession(options) {
         if (stopped)
             return false;
         const conversation = conversations.find((entry) => entry.id === binding.conversationId);
+        currentConversation = conversation ?? null;
         if (!conversation?.memberIds.includes(binding.agentId)) {
             detach('conversation-membership-lost');
             return false;
@@ -226,9 +229,11 @@ export function createCanonAttachedSession(options) {
                 await notice(payload, inputError);
                 return;
             }
+            const roster = buildCanonGroupContext({ conversation: currentConversation, messages: [message], agentId: binding.agentId, ownerId: currentOwnerId });
+            const rosterLines = roster ? buildCompactGroupContextLines(roster, 'initial') : [];
             const result = await core.submit({
                 messageId: message.id,
-                text: `Canon message from ${message.senderName ?? message.senderId} (${message.senderType}):\n\n${message.text}`,
+                text: [...rosterLines, `Canon message from ${message.senderName ?? message.senderId} (${message.senderType}):\n\n${message.text}`].join('\n\n'),
                 ...(payload.replyAuthority ? { replyAuthority: payload.replyAuthority } : {}),
             });
             if (stopped)
@@ -375,6 +380,7 @@ export function createCanonAttachedSession(options) {
             if (!conversation || !conversation.memberIds.includes(binding.agentId)) {
                 throw new Error('The agent is not a member of the specified Canon conversation');
             }
+            currentConversation = conversation;
             const initial = await client.getMessagesPage(binding.conversationId, 100);
             if (stopped)
                 return;
@@ -414,6 +420,7 @@ export function createCanonAttachedSession(options) {
             const handler = {
                 onMessage: (payload) => track(receive(payload), 'receive'),
                 onAgentContext: (context) => {
+                    currentOwnerId = context.ownerId;
                     if (context.agentId !== binding.agentId) {
                         report(new Error('Canon stream context belongs to a different agent'), 'stream-identity');
                         detach('stream-identity-mismatch');
@@ -422,6 +429,8 @@ export function createCanonAttachedSession(options) {
                 onConversationUpdated: (payload) => {
                     if (stopped || payload.conversationId !== binding.conversationId)
                         return;
+                    if (currentConversation)
+                        currentConversation = { ...currentConversation, ...payload.changes };
                     const members = payload.changes.memberIds;
                     if ((Array.isArray(members) && !members.includes(binding.agentId))
                         || payload.membershipChange?.removedMemberIds.includes(binding.agentId)

package/dist/canon-agent.d.ts

@@ -90,6 +90,7 @@ export declare class CanonAgent {
     private readonly activeAbortControllers;
     private readonly activeTurns;
     private readonly conversationMemberIds;
+    private readonly conversationMembershipRevisions;
     private readonly pendingMembershipChanges;
     private readonly typingSignals;
     private sseConnectedLogged;

package/dist/canon-agent.js

@@ -1,4 +1,4 @@
-import { ApprovalManager, RuntimeRequestManager, runtimeInputDescriptor, runtimeCardDescriptor, CanonClient, ControlChannelPoller, buildCanonTurnContextV2, buildCanonGroupContext, buildParticipationHistorySnapshot, createTurnOutputController, createRuntimeStatePublisher, createRuntimeHeartbeat, createTypingStatusPublisher, diffCanonMemberIds, FINAL_MESSAGE_HANDOFF_MS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildRuntimeCardOutcome, buildRuntimeInputOutcome, initRTDBAuth, isChunkedSendMessageError, normalizeRuntimeCommandDescriptors, normalizeTurnMetadata, normalizeTurnVerbosityConversationType, reportNoReplyOutcome, resolveCanonReplyContext, resolveMessageActiveSelfContextId, resolveRuntimeProvenance, resolveTurnVerbosity, selectActiveSelfContexts, renderCanonHostInboundContent, resolveCanonRuntimeConnection, sendMessageWithRetryChunked, shouldPublishTurnTrail, splitTextByUtf8Bytes, verifyCanonRuntimeConnection, } from '@canonmsg/core';
+import { ApprovalManager, RuntimeRequestManager, runtimeInputDescriptor, runtimeCardDescriptor, CanonClient, ControlChannelPoller, buildCanonTurnContextV2, buildCanonGroupContext, buildParticipationHistorySnapshot, createTurnOutputController, createRuntimeStatePublisher, createRuntimeHeartbeat, createTypingStatusPublisher, diffCanonMemberIds, FINAL_MESSAGE_HANDOFF_MS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildRuntimeCardOutcome, buildRuntimeInputOutcome, initRTDBAuth, isChunkedSendMessageError, normalizeRuntimeCommandDescriptors, normalizeTurnMetadata, normalizeTurnVerbosityConversationType, reportNoReplyOutcome, resolveCanonReplyContext, resolveMessageActiveSelfContextId, resolveRuntimeProvenance, resolveTurnVerbosity, resolveConversationPolicyScope, selectActiveSelfContexts, renderCanonHostInboundContent, resolveCanonRuntimeConnection, sendMessageWithRetryChunked, shouldPublishTurnTrail, splitTextByUtf8Bytes, verifyCanonRuntimeConnection, } from '@canonmsg/core';
 import { createHash, randomUUID } from 'node:crypto';
 import { Debouncer } from './debouncer.js';
 import { DEFAULT_RUNTIME_INPUT_TIMEOUT_MS, RUNTIME_INPUT_ID_PATTERN, buildRuntimeCardCreateArgs, normalizeResponseUserId, resolveRuntimeCardRouting, } from './runtime-card.js';
@@ -143,6 +143,9 @@ const STANDARD_PRIMITIVE_COMMANDS = {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function knownMembershipRevision(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 ? value : undefined;
+}
 function sleepWithAbort(ms, signal) {
     if (signal.aborted)
         return Promise.reject(createTurnAbortError());
@@ -325,6 +328,7 @@ export class CanonAgent {
     activeAbortControllers = new Map();
     activeTurns = new Map();
     conversationMemberIds = new Map();
+    conversationMembershipRevisions = new Map();
     pendingMembershipChanges = new Map();
     typingSignals;
     sseConnectedLogged = false;
@@ -964,24 +968,43 @@ export class CanonAgent {
     }
     rememberConversationMembers(conversations) {
         for (const conversation of conversations) {
+            const revision = knownMembershipRevision(conversation.membershipRevision);
+            const currentRevision = this.conversationMembershipRevisions.get(conversation.id);
+            if (revision !== undefined && currentRevision !== undefined && revision < currentRevision)
+                continue;
             this.conversationMemberIds.set(conversation.id, [...(conversation.memberIds ?? [])]);
+            if (revision !== undefined)
+                this.conversationMembershipRevisions.set(conversation.id, revision);
+            else
+                this.conversationMembershipRevisions.delete(conversation.id);
         }
     }
     handleConversationUpdated(payload) {
         const rawMemberIds = payload.changes.memberIds;
         if (!Array.isArray(rawMemberIds))
             return;
+        const revision = knownMembershipRevision(payload.changes.membershipRevision);
+        const currentRevision = this.conversationMembershipRevisions.get(payload.conversationId);
+        if (revision !== undefined && currentRevision !== undefined && revision < currentRevision)
+            return;
         const memberIds = rawMemberIds.filter((id) => typeof id === 'string');
         const hadPreviousMemberIds = this.conversationMemberIds.has(payload.conversationId);
         const previousMemberIds = this.conversationMemberIds.get(payload.conversationId) ?? [];
         const membershipChange = payload.membershipChange
             ?? (hadPreviousMemberIds ? diffCanonMemberIds(previousMemberIds, memberIds) : null);
         this.conversationMemberIds.set(payload.conversationId, memberIds);
+        if (revision !== undefined)
+            this.conversationMembershipRevisions.set(payload.conversationId, revision);
+        else
+            this.conversationMembershipRevisions.delete(payload.conversationId);
         if (membershipChange) {
             this.pendingMembershipChanges.set(payload.conversationId, membershipChange);
         }
         if (this.agentId && !memberIds.includes(this.agentId)) {
             this.cachedConversationIds = this.cachedConversationIds.filter((id) => id !== payload.conversationId);
+            this.abortActiveTurns(payload.conversationId);
+            this.sessionManager?.dropQueued(payload.conversationId);
+            this.pendingMembershipChanges.delete(payload.conversationId);
         }
         else {
             this.rememberConversationId(payload.conversationId);
@@ -1254,7 +1277,53 @@ export class CanonAgent {
     async executeHandler(conversationId, messages, session, provenanceByMessageId) {
         if (!this.handler)
             return;
+        // Message rediscovery can precede the SSE roster snapshot after admission.
+        // Refresh before trusting cached exclusion, accepting queued input, or
+        // freezing output policy. Reuse this same snapshot for handler context.
+        let membersBeforeRefresh = this.conversationMemberIds.get(conversationId);
+        let conversations;
+        try {
+            conversations = await this.apiClient.getConversations();
+        }
+        catch {
+            // Realtime delivery has already deduplicated these IDs. Retry this read
+            // here once; throwing does not arrange replay or requeue the input.
+            await sleep(100);
+            membersBeforeRefresh = this.conversationMemberIds.get(conversationId);
+            try {
+                conversations = await this.apiClient.getConversations();
+            }
+            catch (error) {
+                console.error(`[canon-sdk] Pre-turn conversation refresh failed for ${conversationId}:`, error);
+                return;
+            }
+        }
+        let conversation = conversations.find((c) => c.id === conversationId);
+        if (!conversation)
+            return;
+        const membersDuringRefresh = this.conversationMemberIds.get(conversationId);
+        const currentRevision = this.conversationMembershipRevisions.get(conversationId);
+        const refreshedRevision = knownMembershipRevision(conversation.membershipRevision);
+        const comparableRevisions = currentRevision !== undefined && refreshedRevision !== undefined;
+        const keepCachedRoster = comparableRevisions
+            ? currentRevision > refreshedRevision
+            : membersDuringRefresh !== membersBeforeRefresh;
+        if (membersDuringRefresh && keepCachedRoster) {
+            // Prefer the higher known revision. For legacy unversioned snapshots,
+            // retain an event received while the request was pending.
+            conversation = { ...conversation, memberIds: membersDuringRefresh, membershipRevision: currentRevision };
+        }
+        else {
+            this.rememberConversationMembers([conversation]);
+        }
+        const currentMembers = this.conversationMemberIds.get(conversationId);
+        if (currentMembers && this.agentId && !currentMembers.includes(this.agentId))
+            return;
+        this.rememberConversationId(conversationId);
         await this.markQueuedMessagesAccepted(conversationId, messages);
+        const acceptedMembers = this.conversationMemberIds.get(conversationId);
+        if (acceptedMembers && this.agentId && !acceptedMembers.includes(this.agentId))
+            return;
         const turnId = randomUUID();
         const turnOpenedAt = Date.now();
         let turnState = 'thinking';
@@ -1316,19 +1385,14 @@ export class CanonAgent {
                     : {}),
             })).catch(() => { });
         };
-        // Quiet mode is resolved HERE, once, and carried for the whole turn.
-        //
-        // It has to be here because everything downstream is already too late: the
-        // controller's mode is fixed at construction two lines below, the
-        // `'Thinking...'` seed lands before that, and the conversation fetch that
-        // would otherwise name the conversation type is ~30 lines further down,
-        // inside the try. Provenance already carries the type — the stream service
-        // stamps it on every `message.created` frame — so the answer is available
-        // before the first publish of any kind.
-        //
-        // Re-deriving it mid-turn is what must never happen: a turn that started
-        // quiet and finished verbose would emit a trail nothing narrated.
-        const inboundConversationType = normalizeTurnVerbosityConversationType(provenanceByMessageId?.get(triggeringMessageId ?? '')?.conversation?.type);
+        // Resolve once from the refreshed roster before constructing the output
+        // controller or publishing the first thinking seed. Keep it fixed for the
+        // turn so the final trail agrees with what was actually narrated.
+        const inboundProvenance = provenanceByMessageId?.get(triggeringMessageId ?? '')?.conversation;
+        const inboundRoster = this.conversationMemberIds.get(conversationId) ?? inboundProvenance?.memberCount;
+        const inboundConversationType = inboundRoster != null
+            ? resolveConversationPolicyScope(inboundRoster)
+            : normalizeTurnVerbosityConversationType(inboundProvenance?.type);
         const turnVerbosity = resolveTurnVerbosity({
             configured: selectConfiguredTurnVerbosity(this.options.turnVerbosity, inboundConversationType),
             conversationType: inboundConversationType,
@@ -1412,12 +1476,6 @@ export class CanonAgent {
             if (this.sessionManager && session) {
                 this.sessionManager.seedHistory(conversationId, history);
             }
-            // Get conversation info
-            const conversations = await this.apiClient.getConversations();
-            this.rememberConversationMembers(conversations);
-            const conversation = conversations.find((c) => c.id === conversationId);
-            if (!conversation)
-                return;
             // Build reply functions
             const replyFinal = async (text, options) => {
                 throwIfAborted();
@@ -1615,7 +1673,7 @@ export class CanonAgent {
                 ? resolveRuntimeProvenance({
                     provenance: provenanceByMessageId?.get(latestMessage.id) ?? null,
                     conversationId,
-                    conversationType: conversation.type,
+                    conversationType: resolveConversationPolicyScope(conversation.memberIds),
                     memberCount: conversation.memberIds.length,
                     senderId: latestMessage.senderId,
                     senderName: latestMessage.senderName ?? latestMessage.senderId,
@@ -1628,7 +1686,7 @@ export class CanonAgent {
                 })
                 : resolveRuntimeProvenance({
                     conversationId,
-                    conversationType: conversation.type,
+                    conversationType: resolveConversationPolicyScope(conversation.memberIds),
                     memberCount: conversation.memberIds.length,
                     senderId: '',
                     senderType: 'human',
@@ -1663,7 +1721,7 @@ export class CanonAgent {
                 content: latestMessage ? renderCanonHostInboundContent(latestMessage) : '[Empty message]',
                 conversationId,
                 participantContext: {
-                    conversationType: conversation.type,
+                    conversationType: resolveConversationPolicyScope(conversation.memberIds),
                     memberCount: conversation.memberIds.length,
                     senderType: latestMessage?.senderType ?? provenance.sender.type,
                     senderName: latestMessage?.senderName

package/dist/media.d.ts

@@ -22,6 +22,12 @@ export interface UploadMediaFileOptions {
     signal?: AbortSignal;
 }
 export interface ReplyWithFileOptions extends Omit<SendMessageOptions, 'attachments' | 'contentType'>, UploadMediaFileOptions {
+    /**
+     * Optional local policy check after upload/finalization, immediately before
+     * publishing the attachment. Returning false withholds the message. Automatic
+     * artifact routing uses this to recheck its current audience.
+     */
+    canPublish?: () => boolean;
 }
 export interface MaterializedCanonAttachment extends MediaAttachment {
     index: number;

package/dist/media.js

@@ -396,7 +396,7 @@ export async function uploadMediaFile(client, conversationId, filePath, options)
     return uploaded;
 }
 export async function sendMediaFileMessage(client, conversationId, filePath, text = '', options) {
-    const { fileName, mimeType, durationMs, fetchImpl, signal, ...sendOptions } = options ?? {};
+    const { fileName, mimeType, durationMs, fetchImpl, signal, canPublish, ...sendOptions } = options ?? {};
     const uploaded = await uploadMediaFile(client, conversationId, filePath, {
         ...(fileName ? { fileName } : {}),
         ...(mimeType ? { mimeType } : {}),
@@ -405,6 +405,9 @@ export async function sendMediaFileMessage(client, conversationId, filePath, tex
         ...(signal ? { signal } : {}),
     });
     signal?.throwIfAborted();
+    if (canPublish && !canPublish()) {
+        throw new Error('Canon media publication withheld by current routing policy');
+    }
     return client.sendMessage(conversationId, text, {
         ...sendOptions,
         contentType: uploaded.attachment.kind,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/agent-sdk",
-  "version": "10.3.0",
+  "version": "10.4.0",
   "description": "Canon Agent SDK — build AI agents that participate in Canon conversations",
   "type": "module",
   "main": "dist/index.js",
@@ -28,7 +28,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@canonmsg/core": "^12.4.0"
+    "@canonmsg/core": "^12.5.0"
   },
   "publishConfig": {
     "access": "public"