@canonmsg/agent-sdk 13.3.0 → 13.3.2

package/dist/chunks/{chunk-NIORQKUI.js → chunk-4JUTT225.js}

@@ -9,7 +9,7 @@ import {
   parseMlsDevEnrollmentPrincipal,
   parseMlsDevIssuerKeyVersion,
   parseMlsDevReceiptKeyVersion
-} from "./chunk-CUPSYLBV.js";
+} from "./chunk-ONICI23G.js";
 
 // ../endpoint/src/mls-crypto.ts
 import { ed25519 } from "@noble/curves/ed25519.js";

package/dist/chunks/{chunk-ZT3TJZAV.js → chunk-LYQEHXPD.js}

@@ -8,7 +8,7 @@ import {
   wasmMlsCustody,
   windowsAclProblems,
   writeDurable
-} from "./chunk-BQGXOAIW.js";
+} from "./chunk-ZP7MZKXI.js";
 import {
   BoundedFileReadError,
   CanonApiError,
@@ -32,15 +32,16 @@ import {
   splitTextWithinBytes,
   utf8ByteLength,
   verifyCanonRuntimeConnection
-} from "./chunk-AVR7QCHK.js";
+} from "./chunk-ZM2DAXA7.js";
 import {
+  EndpointError,
   NodeMlsDevCustodyError,
   createNodeMlsDevCustody,
   createPortableNodeMlsDevCustody
-} from "./chunk-HFT75BNB.js";
+} from "./chunk-S65ADM24.js";
 import {
   parseMlsDevClientConfiguration
-} from "./chunk-NIORQKUI.js";
+} from "./chunk-4JUTT225.js";
 import {
   AGENT_HOME_ELSEWHERE,
   CONNECTOR_RELAY_ANSWER_WITHIN_MS,
@@ -75,7 +76,7 @@ import {
   parseMlsDevGroupRoster,
   resolveAllowedUploadMimeType,
   resolveConversationPolicyScope
-} from "./chunk-CUPSYLBV.js";
+} from "./chunk-ONICI23G.js";
 
 // src/runner/types.ts
 var DriverSessionError = class extends Error {
@@ -2686,7 +2687,7 @@ function relayRunnerHome(home, installationId) {
 __name(relayRunnerHome, "relayRunnerHome");
 
 // src/version.ts
-var AGENT_SDK_VERSION = true ? "13.3.0" : void 0;
+var AGENT_SDK_VERSION = true ? "13.3.2" : void 0;
 var RUNNER_CLIENT = isCanonClientVersion(AGENT_SDK_VERSION) ? Object.freeze({ kind: "runner", version: AGENT_SDK_VERSION }) : void 0;
 
 // src/runner/runner.ts
@@ -3383,6 +3384,7 @@ function answerText(answer) {
   return answer.text?.trim() ? answer.text : "They answered with an empty message.";
 }
 __name(answerText, "answerText");
+var AGENT_KEY_REFUSED = "AGENT_KEY_REFUSED";
 var sha2564 = /* @__PURE__ */ __name((value) => createHash9("sha256").update(value).digest("hex"), "sha256");
 var toolText = /* @__PURE__ */ __name((text3, isError = false) => ({ content: [{ type: "text", text: text3 }], ...isError ? { isError } : {} }), "toolText");
 var turnEnded2 = /* @__PURE__ */ __name(() => new DOMException("This turn has ended", "AbortError"), "turnEnded");
@@ -3570,7 +3572,10 @@ async function createRunner(options) {
   await assertPrivateHome(home);
   const mls = options.mls === false ? void 0 : options.mls ?? (options.endpoint ? void 0 : defaultMlsDevice(home, options.environmentId));
   const log = options.log ?? ((line) => console.error(`[canon-runner] ${line}`));
-  const warn = /* @__PURE__ */ __name((what) => (error) => log(`${what}: ${error instanceof Error ? error.message : String(error)}`), "warn");
+  const warn = /* @__PURE__ */ __name((what) => (error) => {
+    if (mayEnd(error)) void recheck();
+    log(`${what}: ${error instanceof Error ? error.message : String(error)}`);
+  }, "warn");
   const abortGraceMs = options.abortGraceMs ?? 1e4;
   const noProgressMs = options.noProgressMs ?? 30 * 6e4;
   const askExpiryMs = options.askExpiryMs ?? 60 * 6e4;
@@ -3751,16 +3756,50 @@ async function createRunner(options) {
   }
   __name(refuse, "refuse");
   let homeSince = 0;
+  let refusedBy;
+  async function readAgent() {
+    const refuse2 = /* @__PURE__ */ __name((error) => {
+      refusedBy = error;
+      options.onFatal?.(error);
+      return error;
+    }, "refuse");
+    let me;
+    try {
+      me = await client.getAgentMe();
+    } catch (error) {
+      if (options.relay || !(error instanceof CanonApiError && error.status === 401)) throw error;
+      throw refuse2(Object.assign(
+        new Error(`Canon no longer accepts ${displayName ?? "this agent"}'s key: a new key replaced it, or the agent was deleted.`),
+        { code: AGENT_KEY_REFUSED, cause: error }
+      ));
+    }
+    if (!options.relay && me.home && (me.home.kind === "connector" || me.home.installationId !== void 0 && me.home.installationId !== installationId)) {
+      throw refuse2(Object.assign(new Error(agentHomeElsewhereMessage(me.displayName, me.home)), { code: AGENT_HOME_ELSEWHERE }));
+    }
+    refusedBy = void 0;
+    return me;
+  }
+  __name(readAgent, "readAgent");
+  function mayEnd(error) {
+    return (error instanceof EndpointError || error instanceof CanonApiError) && (error.code === AGENT_HOME_ELSEWHERE || error.status === 401 && error.code !== "CONNECTOR_ACCESS_TOKEN_EXPIRED");
+  }
+  __name(mayEnd, "mayEnd");
+  let rechecking;
+  function recheck() {
+    if (options.relay || !client) return Promise.resolve();
+    rechecking ??= readAgent().then(() => void 0, (error) => {
+      if (error !== refusedBy) log(`home check: ${error instanceof Error ? error.message : String(error)}`);
+    }).finally(() => {
+      rechecking = void 0;
+    });
+    return within(rechecking, 1e4).then(() => void 0);
+  }
+  __name(recheck, "recheck");
   async function authorize() {
     await endpoint.mlsDevDevice.ensureReady();
-    const me = await client.getAgentMe();
+    const me = await readAgent();
     requireMlsSupport({ environmentId: options.environmentId });
     if (me.agentId !== agentId || me.ownershipVersion !== ownershipVersion) throw new Error("MLS_AUTHORITY_REQUIRED");
-    if (!options.relay && me.home && (me.home.kind === "connector" || me.home.installationId !== void 0 && me.home.installationId !== installationId)) {
-      const error = Object.assign(new Error(agentHomeElsewhereMessage(me.displayName, me.home)), { code: AGENT_HOME_ELSEWHERE });
-      options.onFatal?.(error);
-      throw error;
-    }
     homeSince = !options.relay && me.home?.kind === "runner" ? me.home.since ?? 0 : 0;
     outboundClosed = me.outboundPolicy === "closed";
     if (outboundClosed && options.relay) throw new Error("MLS_AUTHORITY_REQUIRED");
@@ -5529,6 +5568,7 @@ ${JSON.stringify(result, null, 2)}`);
         ...options.fetch ? { fetch: options.fetch } : {}
       });
       const me = await client.getAgentMe();
+      displayName = me.displayName;
       lock = acquireLock(runnerLockName(connection.environmentId, me.agentId), home);
       endpoint = await client.getEndpoint();
       const identity = await endpoint.ready();
@@ -5607,15 +5647,30 @@ ${JSON.stringify(result, null, 2)}`);
       roots = outbound ? (await Promise.all(outbound.roots.map((root) => realpath4(root).catch(() => "")))).filter(Boolean) : [];
       if (driver.capabilities.tools) tools = await startToolServer();
       await recover();
-      const publisher = createRuntimeStatePublisher({ agentId, clientType: CLIENT_TYPES[driver.name], hostMode: true, rtdb: initRTDBAuth(client) });
+      const runtimeState = createRuntimeStatePublisher({ agentId, clientType: CLIENT_TYPES[driver.name], hostMode: true, rtdb: initRTDBAuth(client) });
+      const publisher = {
+        publishAgentRuntime: /* @__PURE__ */ __name((runtime) => refusedBy ? Promise.resolve() : runtimeState.publishAgentRuntime(runtime), "publishAgentRuntime"),
+        clearAgentRuntime: /* @__PURE__ */ __name(() => refusedBy ? Promise.resolve() : runtimeState.clearAgentRuntime(), "clearAgentRuntime")
+      };
       heartbeat = createRuntimeHeartbeat({ publisher, getRuntime: /* @__PURE__ */ __name(() => ({ runtimeDescriptor: descriptor }), "getRuntime"), onError: warn("runtime heartbeat") });
       inbound = endpoint.acceptInbound({ kind: "message.created", offer, onError: warn("inbox"), ...mlsOn ? { intervalMs: 1e3 } : {} });
       inbound.start();
       let reconnect = false;
+      let streamUp = false;
+      let following = Promise.resolve();
+      const follow = /* @__PURE__ */ __name(() => {
+        const check = reconnect;
+        following = following.then(async () => {
+          if (check) await recheck();
+          if (streamUp) heartbeat?.connect();
+          else void heartbeat?.disconnect();
+        }).catch(warn("runtime heartbeat"));
+      }, "follow");
       detach.push(endpoint.observeEvents(onEvent, {
         families: ["messages", "contacts", "runtime_turn"],
         onConnected: /* @__PURE__ */ __name(() => {
-          heartbeat?.connect();
+          streamUp = true;
+          follow();
           if (mlsOn) void noteAdmissions().catch(warn("room admission"));
           if (reconnect) {
             for (const target of rooms.values()) if (target.turn) scheduleControl(target);
@@ -5628,7 +5683,10 @@ ${JSON.stringify(result, null, 2)}`);
           }
           reconnect = true;
         }, "onConnected"),
-        onDisconnected: /* @__PURE__ */ __name(() => void heartbeat?.disconnect(), "onDisconnected"),
+        onDisconnected: /* @__PURE__ */ __name(() => {
+          streamUp = false;
+          follow();
+        }, "onDisconnected"),
         onError: warn("event stream")
       }));
       if (errands) {

package/dist/chunks/{chunk-CUPSYLBV.js → chunk-ONICI23G.js}

@@ -2082,6 +2082,9 @@ function isMlsDevReceiptClockSkew(value) {
 }
 __name(isMlsDevReceiptClockSkew, "isMlsDevReceiptClockSkew");
 
+// ../backend-contracts/src/apiErrors.ts
+var AGENT_DELETED = "AGENT_DELETED";
+
 // ../backend-contracts/src/verbContract.ts
 var CANON_VERBS_SCHEMA_ID = "https://canonmsg.com/schemas/canon.verbs.v1.json";
 var VERB_ID_PATTERNS = {
@@ -5580,6 +5583,7 @@ export {
   CANON_VERB_WIRE_SCHEMA_VERSION,
   projectVerbIntentToWire,
   parseDirectConversationSelection,
+  AGENT_DELETED,
   normalizeRuntimeCommandAlias,
   normalizeRuntimeCommandAliases,
   MAX_PUBLIC_RUNTIME_COMMANDS,

package/dist/chunks/{chunk-HFT75BNB.js → chunk-S65ADM24.js}

@@ -43,7 +43,7 @@ import {
   parseMlsDevKeyPackagePreparation,
   parseMlsDevKeyPackagePublicationReceipt,
   parseMlsDevKeyPackagePublish
-} from "./chunk-CUPSYLBV.js";
+} from "./chunk-ONICI23G.js";
 
 // ../endpoint/src/events.ts
 function createEndpointEventHub(input) {

package/dist/chunks/{chunk-AVR7QCHK.js → chunk-ZM2DAXA7.js}

@@ -5,7 +5,7 @@ import {
   createHttpEndpointTransport,
   createNodeEndpointStore,
   validateEndpointContentBoundary
-} from "./chunk-HFT75BNB.js";
+} from "./chunk-S65ADM24.js";
 import {
   AGENT_HOME_ELSEWHERE,
   CANON_ENDPOINT_PROTOCOL,
@@ -108,7 +108,7 @@ import {
   readMembershipChangeMetadata,
   resolveAllowedUploadMimeType,
   sanitizeDownloadFileName
-} from "./chunk-CUPSYLBV.js";
+} from "./chunk-ONICI23G.js";
 
 // src/media.ts
 import { createWriteStream as createWriteStream2 } from "node:fs";
@@ -7410,7 +7410,7 @@ function createEndpoint(options) {
   }
   __name(joinInvitedRoom, "joinInvitedRoom");
   async function discoverInviteeRooms() {
-    if (!mlsDevGroups || closed) return;
+    if (!mlsDevGroups || closed || options.mlsDevDevice?.principal.type !== "human") return;
     const { requests } = await endpoint.query(
       "list_contact_requests",
       { direction: "inbound" }
@@ -9089,7 +9089,7 @@ async function acquireAgentEndpoint(input) {
   }
   const requestedMls = input.options.mlsDev;
   const mls = requestedMls ? await (async () => {
-    const crypto2 = await import("./mls-crypto-AW7TY744.js");
+    const crypto2 = await import("./mls-crypto-G2TVX25P.js");
     const configuration = crypto2.parseMlsDevClientConfiguration(requestedMls.configuration);
     if (configuration.environmentId !== environmentId || baseUrl !== CANON_RUNTIME_ENDPOINT_DEFAULTS[configuration.environmentId]?.apiBaseUrl || configuration.principalIds && !configuration.principalIds.includes(input.principalId) || !Number.isSafeInteger(input.ownershipVersion) || input.ownershipVersion < 0) throw new Error("MLS_DEV_AGENT_CONFIGURATION_BINDING_MISMATCH");
     const custody = requestedMls.custody;

package/dist/chunks/{chunk-BQGXOAIW.js → chunk-ZP7MZKXI.js}

@@ -6,11 +6,11 @@ import {
   frame,
   requireValue,
   typedNodeMlsDevCustody
-} from "./chunk-HFT75BNB.js";
+} from "./chunk-S65ADM24.js";
 import {
   __name,
   parseMlsDevDeviceContext
-} from "./chunk-CUPSYLBV.js";
+} from "./chunk-ONICI23G.js";
 
 // src/runner/home.ts
 import { randomBytes } from "node:crypto";

package/dist/chunks/{mls-crypto-AW7TY744.js → mls-crypto-G2TVX25P.js}

@@ -2,8 +2,8 @@ import {
   createMlsDevCredentialVerifier,
   mlsDevDeviceHttpConfiguration,
   parseMlsDevClientConfiguration
-} from "./chunk-NIORQKUI.js";
-import "./chunk-CUPSYLBV.js";
+} from "./chunk-4JUTT225.js";
+import "./chunk-ONICI23G.js";
 export {
   createMlsDevCredentialVerifier,
   mlsDevDeviceHttpConfiguration,

package/dist/cli.js

@@ -26,11 +26,11 @@ import {
   runMlsDevSetup,
   startRelayChannel,
   writeRelayCredential
-} from "./chunks/chunk-ZT3TJZAV.js";
+} from "./chunks/chunk-LYQEHXPD.js";
 import {
   assertPrivateHome,
   runnerLockName
-} from "./chunks/chunk-BQGXOAIW.js";
+} from "./chunks/chunk-ZP7MZKXI.js";
 import {
   CanonApiError,
   CanonClient,
@@ -43,13 +43,14 @@ import {
   resolveCanonRuntimeConnection,
   runCli,
   verifyCanonRuntimeConnection
-} from "./chunks/chunk-AVR7QCHK.js";
-import "./chunks/chunk-HFT75BNB.js";
-import "./chunks/chunk-NIORQKUI.js";
+} from "./chunks/chunk-ZM2DAXA7.js";
+import "./chunks/chunk-S65ADM24.js";
+import "./chunks/chunk-4JUTT225.js";
 import {
+  AGENT_DELETED,
   AGENT_HOME_ELSEWHERE,
   __name
-} from "./chunks/chunk-CUPSYLBV.js";
+} from "./chunks/chunk-ONICI23G.js";
 
 // src/cli.ts
 import { realpathSync } from "node:fs";
@@ -57,8 +58,10 @@ import { homedir, tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { parseArgs } from "node:util";
+var OWNER_DECLINED = "OWNER_DECLINED";
 function exitCodeFor(error) {
-  return error?.code === AGENT_HOME_ELSEWHERE ? 0 : 1;
+  const code = error?.code;
+  return code === AGENT_HOME_ELSEWHERE || code === OWNER_DECLINED || code === AGENT_DELETED ? 0 : 1;
 }
 __name(exitCodeFor, "exitCodeFor");
 function stopThenExit(stop, code, exit = process.exit, boundMs = 15e3) {
@@ -606,6 +609,10 @@ async function ensureRegistered(values, driver) {
         clientType: REGISTRATION_CLIENT_TYPES[driver] ?? "generic",
         developerInfo: `canon-agent run --driver ${driver}`
       }
+    }).catch((error) => {
+      if (!(error instanceof CanonApiError && error.code === AGENT_DELETED)) throw error;
+      clearPendingRegistration(profile);
+      throw Object.assign(new Error(`${agentName} was deleted by its owner, so Canon gives it no new key. To start over as a new agent, run this command again with a new --profile, or with another --name.`), { code: AGENT_DELETED });
     });
     switch (progress.status) {
       case "approved":
@@ -615,7 +622,7 @@ async function ensureRegistered(values, driver) {
         throw new Error(`Nobody has answered the request for ${ask} yet. It stays open: run this command again to keep waiting.`);
       case "rejected":
         clearPendingRegistration(profile);
-        throw new Error(`The owner declined ${ask}. Nothing was saved; run this command again to ask again.`);
+        throw Object.assign(new Error(`The owner declined ${ask}. Nothing was saved; run this command again to ask again.`), { code: OWNER_DECLINED });
       case "credential-expired":
         clearPendingRegistration(profile);
         throw new Error(`The owner approved ${ask}, but its key was not collected within 48 hours and Canon removed it. Run this command again to ask again.`);

package/dist/index.js

@@ -26,8 +26,8 @@ import {
   runMlsDevSetup,
   runtimeDescriptor,
   startRelayChannel
-} from "./chunks/chunk-ZT3TJZAV.js";
-import "./chunks/chunk-BQGXOAIW.js";
+} from "./chunks/chunk-LYQEHXPD.js";
+import "./chunks/chunk-ZP7MZKXI.js";
 import {
   CanonApiError,
   DEFAULT_ANTHROPIC_REQUEST_HEADROOM_BYTES,
@@ -52,10 +52,10 @@ import {
   toAnthropicImageBlock,
   toAnthropicImageBlocksWithinBudget,
   uploadMediaFile
-} from "./chunks/chunk-AVR7QCHK.js";
-import "./chunks/chunk-HFT75BNB.js";
-import "./chunks/chunk-NIORQKUI.js";
-import "./chunks/chunk-CUPSYLBV.js";
+} from "./chunks/chunk-ZM2DAXA7.js";
+import "./chunks/chunk-S65ADM24.js";
+import "./chunks/chunk-4JUTT225.js";
+import "./chunks/chunk-ONICI23G.js";
 export {
   CanonApiError,
   ConnectorRelayError,

package/dist/internal/backend-contracts/apiErrors.d.ts

@@ -1 +1,5 @@
 export declare const MESSAGE_ADMISSION_REQUIRED_CODE: "MESSAGE_ADMISSION_REQUIRED";
+/** A request for a new key named an agent its owner deleted (`POST /agents/register`, 410): a deleted agent never comes
+ * back, so Canon refuses it before the owner hears of it. */
+export declare const AGENT_DELETED: "AGENT_DELETED";
+export declare const AGENT_DELETED_MESSAGE = "This agent was deleted by its owner, so it cannot get a new key; register a new agent instead.";

package/dist/media.js

@@ -18,10 +18,10 @@ import {
   toAnthropicImageBlock,
   toAnthropicImageBlocksWithinBudget,
   uploadMediaFile
-} from "./chunks/chunk-AVR7QCHK.js";
-import "./chunks/chunk-HFT75BNB.js";
-import "./chunks/chunk-NIORQKUI.js";
-import "./chunks/chunk-CUPSYLBV.js";
+} from "./chunks/chunk-ZM2DAXA7.js";
+import "./chunks/chunk-S65ADM24.js";
+import "./chunks/chunk-4JUTT225.js";
+import "./chunks/chunk-ONICI23G.js";
 export {
   DEFAULT_ANTHROPIC_REQUEST_HEADROOM_BYTES,
   DEFAULT_MEDIA_CACHE_DIR,

package/dist/mls-wasm-host.js

@@ -2,20 +2,20 @@ import {
   WASM_HOST_CONFIGURE,
   WASM_HOST_PROVISION,
   keyFile
-} from "./chunks/chunk-BQGXOAIW.js";
+} from "./chunks/chunk-ZP7MZKXI.js";
 import {
   MAX_INPUT,
   NodeMlsDevCustodyError,
   parseFrame,
   rejected,
   requireValue
-} from "./chunks/chunk-HFT75BNB.js";
+} from "./chunks/chunk-S65ADM24.js";
 import {
   __name,
   canonicalEndpointJson,
   isMlsDevReceiptClockSkew,
   parseMlsDevDeviceContext
-} from "./chunks/chunk-CUPSYLBV.js";
+} from "./chunks/chunk-ONICI23G.js";
 
 // src/mls-wasm-host.ts
 import { createHash } from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/agent-sdk",
-  "version": "13.3.0",
+  "version": "13.3.2",
   "description": "Canon Agent SDK — build AI agents that participate in Canon conversations",
   "type": "module",
   "main": "dist/index.js",