@canonmsg/agent-sdk 11.2.0 → 11.2.1

package/dist/canon-agent.d.ts

@@ -212,11 +212,9 @@ export declare class CanonAgent {
     private markQueuedMessagesAccepted;
     private notifyMessageInterrupt;
     /**
-     * Builds a runtime-state publisher bound to this agent's scoped RTDB
-     * handle (captured in start()). Threading the handle keeps every
-     * publish on this agent's own credentials — without it the publisher
-     * would fall back to core's deprecated module-global RTDB client,
-     * where the last-started agent's token wins in multi-agent processes.
+     * Builds a runtime-state publisher bound to this agent's scoped,
+     * endpoint-backed handle (captured in start()). The publisher requires
+     * that handle, so each agent uses its own CanonClient credentials.
      */
     private createRuntimeStatePublisher;
     private requireRuntimeStatePublisher;

package/dist/canon-agent.js

@@ -608,16 +608,15 @@ export class CanonAgent {
         if (this.options.sessions?.enabled && !this.sessionManager) {
             this.sessionManager = new SessionManager(this.options.sessions);
         }
-        // The single scoped RTDB client for this agent. Every RTDB consumer in
-        // the SDK (control poller, runtime-state publishers) threads this handle;
-        // the SDK never reads through core's deprecated module-global default,
-        // so multiple CanonAgents in one process cannot clobber each other.
+        // One scoped endpoint-backed runtime-state handle per agent. Control
+        // pollers and publishers thread it through this agent's CanonClient;
+        // there is no direct RTDB connection or module-global fallback.
         this.rtdbHandle = initRTDBAuth(this.apiClient, {
             rtdbUrl: this.runtimeConnection.rtdbUrl,
             firebaseApiKey: this.runtimeConnection.firebaseWebApiKey,
         });
-        // Identity lookup only. The scoped RTDB client owns Firebase token
-        // exchange and refresh; the SSE stream authenticates with the API key.
+        // Identity lookup only. Runtime state uses the endpoint-backed handle;
+        // the SSE stream authenticates with the API key.
         const { agentId } = await this.apiClient.getAuthToken();
         if (generation !== this.lifecycleGeneration)
             return;
@@ -1245,11 +1244,9 @@ export class CanonAgent {
         });
     }
     /**
-     * Builds a runtime-state publisher bound to this agent's scoped RTDB
-     * handle (captured in start()). Threading the handle keeps every
-     * publish on this agent's own credentials — without it the publisher
-     * would fall back to core's deprecated module-global RTDB client,
-     * where the last-started agent's token wins in multi-agent processes.
+     * Builds a runtime-state publisher bound to this agent's scoped,
+     * endpoint-backed handle (captured in start()). The publisher requires
+     * that handle, so each agent uses its own CanonClient credentials.
      */
     createRuntimeStatePublisher() {
         if (!this.agentId)

package/dist/types.d.ts

@@ -332,7 +332,7 @@ export interface CanonAgentConnectionOptions {
     baseUrl?: string;
     streamUrl?: string;
     rtdbUrl?: string;
-    /** Public Firebase client configuration used for RTDB custom-token exchange. */
+    /** Legacy Firebase connection option; endpoint-backed runtime state does not use it. */
     firebaseApiKey?: string;
 }
 export interface CanonAgentOptions extends CanonAgentConnectionOptions {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/agent-sdk",
-  "version": "11.2.0",
+  "version": "11.2.1",
   "description": "Canon Agent SDK — build AI agents that participate in Canon conversations",
   "type": "module",
   "main": "dist/index.js",
@@ -28,7 +28,7 @@
     "node": ">=22.22.3"
   },
   "dependencies": {
-    "@canonmsg/core": "^13.3.0"
+    "@canonmsg/core": "^13.4.0"
   },
   "repository": {
     "type": "git",