@canonmsg/agent-sdk 5.1.0 → 5.1.2

package/dist/canon-agent.js

@@ -167,6 +167,9 @@ function safeRuntimeCardId(value) {
         ? normalized
         : `card_${randomUUID()}`;
 }
+function normalizeResponseUserId(value) {
+    return value?.trim() || undefined;
+}
 function buildSdkMessageId(parts) {
     const raw = parts
         .map((part) => part == null ? '' : String(part))
@@ -1310,6 +1313,9 @@ export class CanonAgent {
                 }
             }
             const latestMessage = hydratedMessages[hydratedMessages.length - 1] ?? null;
+            const triggeringHumanId = latestMessage?.senderType === 'human'
+                ? normalizeResponseUserId(latestMessage.senderId)
+                : undefined;
             let replyContext = latestMessage
                 ? resolveCanonReplyContext({ message: latestMessage, messages: history })
                 : null;
@@ -1473,6 +1479,11 @@ export class CanonAgent {
                         await this.typingSignals.clear(conversationId);
                     }
                     catch { }
+                    const responseUserId = normalizeResponseUserId(request.responseUserId)
+                        ?? triggeringHumanId;
+                    // Session-wide rules are owner-scoped. The effective responder, not
+                    // merely the member who triggered the turn, determines that scope.
+                    const mustIsolateSessionRules = Boolean(responseUserId && responseUserId !== agent.ownerId);
                     const result = await manager.requestApproval(conversationId, request.toolName, request.toolInput ?? {}, {
                         riskLevel: request.riskLevel,
                         risk: request.risk,
@@ -1482,8 +1493,9 @@ export class CanonAgent {
                         native: request.native,
                         toolSummary: request.toolSummary,
                         details: request.details,
-                        ignoreSessionRules: request.ignoreSessionRules,
-                        allowSessionRule: request.allowSessionRule,
+                        ...(responseUserId ? { responseUserId } : {}),
+                        ignoreSessionRules: mustIsolateSessionRules ? true : request.ignoreSessionRules,
+                        allowSessionRule: mustIsolateSessionRules ? false : request.allowSessionRule,
                     });
                     throwIfAborted();
                     shouldPersistTurnState = false;
@@ -1516,6 +1528,15 @@ export class CanonAgent {
                 const expiresAt = new Date(expiresAtMs).toISOString();
                 let result = { status: 'timeout', inputId };
                 let requestCreated = false;
+                const ownerOnly = request.kind === 'secret'
+                    || request.kind === 'sudo'
+                    || request.sensitive === true
+                    || Boolean(request.questions?.some((question) => question.isSecret));
+                const responseUserId = ownerOnly
+                    ? normalizeResponseUserId(agent.ownerId)
+                    : normalizeResponseUserId(request.responseUserId)
+                        ?? triggeringHumanId
+                        ?? normalizeResponseUserId(agent.ownerId);
                 shouldPersistTurnState = true;
                 try {
                     await this.apiClient.createRuntimeInputRequest({
@@ -1523,7 +1544,7 @@ export class CanonAgent {
                         inputId,
                         kind: request.kind,
                         expiresAt: expiresAtMs,
-                        responseUserId: agent.ownerId,
+                        ...(responseUserId ? { responseUserId } : {}),
                         title: request.title,
                         prompt: request.prompt,
                         ...(request.choices ? { choices: request.choices } : {}),
@@ -1621,9 +1642,20 @@ export class CanonAgent {
                 const expiresAtMs = explicitExpiresAt && Number.isFinite(explicitExpiresAt)
                     ? explicitExpiresAt
                     : Date.now() + timeoutMs;
+                const responseUserId = normalizeResponseUserId(request.responseUserId)
+                    ?? triggeringHumanId;
+                const routedRequest = responseUserId
+                    ? { ...request, responseUserId }
+                    : request;
                 // Fire-and-forget: post the durable card and return. The backend treats an
                 // action-less card as display (no pending state, no response expected).
-                await this.apiClient.createRuntimeCardRequest(buildRuntimeCardCreateArgs({ request, conversationId, cardId, fallbackTurnId: turnId, expiresAtMs }));
+                await this.apiClient.createRuntimeCardRequest(buildRuntimeCardCreateArgs({
+                    request: routedRequest,
+                    conversationId,
+                    cardId,
+                    fallbackTurnId: turnId,
+                    expiresAtMs,
+                }));
                 try {
                     await turnOutput.addBlock({
                         id: `card:${cardId}`,
@@ -1655,12 +1687,23 @@ export class CanonAgent {
                 const expiresAtMs = explicitExpiresAt && Number.isFinite(explicitExpiresAt)
                     ? explicitExpiresAt
                     : Date.now() + timeoutMs;
+                const responseUserId = normalizeResponseUserId(request.responseUserId)
+                    ?? triggeringHumanId;
+                const routedRequest = responseUserId
+                    ? { ...request, responseUserId }
+                    : request;
                 let result = { status: 'timeout', cardId };
                 let requestCreated = false;
                 let requestResolved = false;
                 shouldPersistTurnState = true;
                 try {
-                    await this.apiClient.createRuntimeCardRequest(buildRuntimeCardCreateArgs({ request, conversationId, cardId, fallbackTurnId: turnId, expiresAtMs }));
+                    await this.apiClient.createRuntimeCardRequest(buildRuntimeCardCreateArgs({
+                        request: routedRequest,
+                        conversationId,
+                        cardId,
+                        fallbackTurnId: turnId,
+                        expiresAtMs,
+                    }));
                     requestCreated = true;
                     try {
                         await turnOutput.addBlock({

package/dist/types.d.ts

@@ -59,6 +59,8 @@ export interface RuntimeApprovalRequest {
     turnId?: string;
     native?: ApprovalNativeRequestMetadata;
     details?: ApprovalRequestDetail[];
+    /** Human conversation member who should answer. Defaults to the triggering human. */
+    responseUserId?: string;
     /**
      * Ignore in-memory session rules for this approval request. Useful when the
      * action was triggered by someone other than the agent owner.
@@ -80,6 +82,8 @@ export interface RuntimeInputRequest {
     native?: RuntimeInputNativeMetadata;
     inputId?: string;
     timeoutMs?: number;
+    /** Human conversation member who should answer. Secret and sudo prompts remain owner-only. */
+    responseUserId?: string;
 }
 export interface RuntimeInputResult {
     status: 'submitted' | 'cancelled' | 'timeout';
@@ -91,6 +95,7 @@ export interface RuntimeCardRequest {
     card: RuntimeCardV1;
     cardId?: string;
     expiresAt?: string | number | Date;
+    /** Human conversation member who should answer. Defaults to the triggering human. */
     responseUserId?: string;
     timeoutMs?: number;
     runtimeId?: string;
@@ -102,6 +107,8 @@ export interface RuntimeCardResult {
     cardId: string;
     actionId?: string;
     values?: Record<string, unknown>;
+    /** Canon-authenticated human who submitted this card response. */
+    respondedBy?: string;
 }
 export interface MessageHandlerContext {
     messages: CanonMessage[];
@@ -155,21 +162,21 @@ export interface MessageHandlerContext {
     /** Runtime turn mode requested by the sender for this inbound turn, if any. */
     requestedTurnMode: string | null;
     /**
-     * Ask the conversation owner to approve a native runtime action. This only
+     * Ask the triggering human to approve a native runtime action. This only
      * renders Canon's inline approval card; runtimes must explicitly wait for
      * and enforce the returned decision in their own approval hook.
      */
     requestApproval: (request: RuntimeApprovalRequest) => Promise<ApprovalResult>;
     /**
-     * Ask the agent owner for runtime input such as clarification, sudo, or a
-     * secret. Sensitive values are returned only to the calling runtime and are
-     * never persisted in Canon message metadata.
+     * Ask the triggering human for runtime input. Secret and sudo prompts remain
+     * owner-only. Sensitive values are returned only to the calling runtime and
+     * are never persisted in Canon message metadata.
      */
     requestRuntimeInput: (request: RuntimeInputRequest) => Promise<RuntimeInputResult>;
     /**
-     * Ask the agent owner to review/respond to a generic rich card. The visible
-     * card document is redacted for presentation; raw response values return
-     * only to the calling runtime through Canon's control path.
+     * Ask the triggering human to review/respond to a generic rich card. The
+     * visible card document is redacted for presentation; raw response values
+     * return only to the calling runtime through Canon's control path.
      */
     requestCard: (request: RuntimeCardRequest) => Promise<RuntimeCardResult>;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/agent-sdk",
-  "version": "5.1.0",
+  "version": "5.1.2",
   "description": "Canon Agent SDK — build AI agents that participate in Canon conversations",
   "type": "module",
   "main": "dist/index.js",
@@ -28,7 +28,7 @@
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@canonmsg/core": "^4.2.0"
+    "@canonmsg/core": "^4.3.0"
   },
   "publishConfig": {
     "access": "public"