@canonmsg/backend-contracts 1.9.0 → 2.0.0

package/dist/cjs/bridgeLocal.js

@@ -1,747 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BridgeRpcResponseSchema = exports.BridgeRpcErrorSchema = exports.BridgeRpcNotificationSchema = exports.BridgeRpcRequestSchema = exports.BridgeRpcIdSchema = exports.BRIDGE_LOCAL_NOTIFICATION_FAMILIES = exports.BRIDGE_LOCAL_NOTIFICATION_NAMES = exports.BRIDGE_LOCAL_NOTIFICATIONS = exports.BRIDGE_LOCAL_METHOD_NAMES = exports.BRIDGE_LOCAL_METHODS = exports.BridgePublishStreamingEventParamsSchema = exports.BridgeStreamEventSchema = exports.BridgeStreamClearEventSchema = exports.BridgeStreamFinalEventSchema = exports.BridgeStreamThinkingEventSchema = exports.BridgeStreamTextEventSchema = exports.BridgeStreamToolEventSchema = exports.BridgeGetAttachmentResultSchema = exports.BridgeGetAttachmentParamsSchema = exports.BridgeUploadMediaParamsSchema = exports.BridgeHitlStateSchema = exports.BridgeStatusResultSchema = exports.BridgeConnectionStateNotificationSchema = exports.BridgeReadyNotificationSchema = exports.BridgeUpstreamStateSchema = exports.BridgeHelloResultSchema = exports.BRIDGE_EVENT_CURSOR_SHAPE = exports.BridgeResyncSchema = exports.BridgeResyncReasonSchema = exports.BridgeHelloParamsSchema = exports.BridgeOkResultSchema = exports.BRIDGE_LOCAL_PROTOCOL_VERSION = void 0;
-// Bridge ⇄ runtime-adapter LOCAL JSON-RPC contract v1 (types + schemas ONLY —
-// no runtime, no transport; Phase 4 builds the bridge against these).
-//
-// Source spec: docs/design/bridge-local-api.md §A–§C. Where that draft
-// conflicts with code-grounded wire shapes (event names, REST payloads), the
-// code-grounded schemas in this package win — payload slots below COMPOSE
-// restEndpoints.ts / hitl.ts / sseEvents.ts / controlSignals.ts so every
-// shape is defined once.
-//
-// Protocol: JSON-RPC 2.0 over one duplex channel (stdio pipe or unix
-// socket / named pipe), NDJSON framing. Requests adapter→bridge (replied),
-// notifications bridge→adapter (never awaited). `hello` carries
-// protocolVersion — the local contract is version-guarded from v1.
-const zod_1 = require("zod");
-const contactRequest_js_1 = require("./contactRequest.js");
-const turnProtocol_js_1 = require("./turnProtocol.js");
-const controlSignals_js_1 = require("./controlSignals.js");
-const hitl_js_1 = require("./hitl.js");
-const restEndpoints_js_1 = require("./restEndpoints.js");
-const sendContextual_js_1 = require("./sendContextual.js");
-const sseEvents_js_1 = require("./sseEvents.js");
-exports.BRIDGE_LOCAL_PROTOCOL_VERSION = 1;
-const OkResultSchema = zod_1.z.object({ ok: zod_1.z.literal(true) });
-exports.BridgeOkResultSchema = OkResultSchema;
-// ── §A Session lifecycle ───────────────────────────────────────────────
-exports.BridgeHelloParamsSchema = zod_1.z.object({
-    protocolVersion: zod_1.z.number(),
-    /** Adapter self-identification (claude-code | codex | openclaw | hermes | …). */
-    clientType: zod_1.z.string(),
-    /** Event families to deliver; [] = pure-request adapter, no C-notifications. */
-    wantFamilies: zod_1.z.array(sseEvents_js_1.SseEventFamilySchema),
-    /** Replay C-notifications missed while disconnected. */
-    resumeCursor: zod_1.z.string().optional(),
-    /** Publish the runtime descriptor in the same round trip. */
-    runtimeDescriptor: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-});
-// ── §G resume cursor / resync ───────────────────────────────────────────
-//
-// The bridge keeps a bounded, locally-sequenced event log. Every replayable
-// §C event notification carries the OPAQUE `cursor` token that produced it;
-// adapters persist the last cursor they fully processed and present it as
-// `hello.resumeCursor` on reconnect to replay exactly the gap. When the
-// cursor cannot be honored the hello result answers `sinceCursor: null`
-// PLUS a `resync` field — the adapter must treat the gap as lost locally and
-// recover out-of-band (REST backfill / state refresh). Never silent loss.
-exports.BridgeResyncReasonSchema = zod_1.z.enum([
-    /** Cursor was valid but its events were evicted from the bounded log. */
-    'cursor-expired',
-    /** Cursor was never issued by this bridge run (restart or corruption). */
-    'unknown-cursor',
-]);
-exports.BridgeResyncSchema = zod_1.z.object({
-    reason: exports.BridgeResyncReasonSchema,
-});
-/**
- * Shape mixin for replayable §C notification params (`.extend(...)` onto the
- * payload schema). `cursor` is optional in the schema for compatibility, but
- * the bridge always sends it on log-delivered notifications. `ready` and
- * `connectionState` are connection-scoped (never replayed) and carry none.
- */
-exports.BRIDGE_EVENT_CURSOR_SHAPE = {
-    cursor: zod_1.z.string().optional(),
-};
-exports.BridgeHelloResultSchema = zod_1.z.object({
-    protocolVersion: zod_1.z.number(),
-    agentId: zod_1.z.string(),
-    agentName: zod_1.z.string(),
-    agentContext: sseEvents_js_1.SseAgentContextPayloadSchema,
-    /** Cursor the delivered replay starts from; null = no replay. */
-    sinceCursor: zod_1.z.string().nullable(),
-    /**
-     * Present when resumeCursor could not be honored (§G): delivery starts at
-     * the live head and the adapter must recover the gap out-of-band.
-     */
-    resync: exports.BridgeResyncSchema.optional(),
-});
-exports.BridgeUpstreamStateSchema = zod_1.z.enum(['connected', 'reconnecting', 'down']);
-exports.BridgeReadyNotificationSchema = zod_1.z.object({
-    agentId: zod_1.z.string(),
-    agentContext: sseEvents_js_1.SseAgentContextPayloadSchema,
-    upstreamState: exports.BridgeUpstreamStateSchema,
-});
-exports.BridgeConnectionStateNotificationSchema = zod_1.z.object({
-    upstream: exports.BridgeUpstreamStateSchema,
-});
-/**
- * `status` result (B4.6 observability): a live snapshot of the daemon
- * process, its upstream health, and the B4.2 hub counters. Additive to
- * contract v1 — served by the daemon and rendered by `canon-bridge status`.
- */
-exports.BridgeStatusResultSchema = zod_1.z.object({
-    /** Daemon process id. */
-    pid: zod_1.z.number(),
-    /** canon-bridge binary (package) version. */
-    version: zod_1.z.string(),
-    /** bridgeLocal contract version the daemon speaks. */
-    protocolVersion: zod_1.z.number(),
-    /** ISO timestamp of daemon start. */
-    startedAt: zod_1.z.string(),
-    uptimeMs: zod_1.z.number(),
-    /** Lifecycle profile served (one identity per daemon). */
-    profile: zod_1.z.string(),
-    /** Socket / named-pipe path; null in stdio (spawned-child) mode. */
-    socketPath: zod_1.z.string().nullable(),
-    agentId: zod_1.z.string(),
-    agentName: zod_1.z.string(),
-    upstream: exports.BridgeUpstreamStateSchema,
-    /** Adapter connections currently subscribed to the fan-out. */
-    connectedClients: zod_1.z.number(),
-    /** Non-zero B4.2 hub counters (upstream.* / fanout.*). */
-    counters: zod_1.z.record(zod_1.z.string(), zod_1.z.number()),
-});
-// ── §B7 HITL state (durable; resolution arrives via onHitlResolved) ────
-exports.BridgeHitlStateSchema = zod_1.z.object({
-    status: zod_1.z.union([zod_1.z.literal('pending'), hitl_js_1.HitlResolutionStatusSchema]),
-    answer: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-    expiresAt: zod_1.z.string(),
-});
-// ── §B8 media (named schemas so the bridge + Framework share the types) ──
-//
-// Byte transfer is bridge-owned (adapter-interface §1): adapters hand the
-// bridge a {path} (streamed from disk — preferred for anything big) or
-// inline {bytes} (base64, size-capped so a frame never breaches the NDJSON
-// line limit). getAttachment returns the bridge-cached materialization.
-exports.BridgeUploadMediaParamsSchema = zod_1.z.object({
-    /** Absolute file path — the bridge streams it (exactly one of path | bytes). */
-    path: zod_1.z.string().optional(),
-    /** Base64 bytes — size-capped by the bridge; prefer `path` for large files. */
-    bytes: zod_1.z.string().optional(),
-    mime: zod_1.z.string(),
-    fileName: zod_1.z.string(),
-    conversationId: zod_1.z.string(),
-});
-exports.BridgeGetAttachmentParamsSchema = zod_1.z.object({
-    /** Storage download URL from a MediaAttachment (exactly one of url | attachmentId). */
-    url: zod_1.z.string().optional(),
-    attachmentId: zod_1.z.string().optional(),
-    as: zod_1.z.enum(['path', 'bytes']),
-});
-exports.BridgeGetAttachmentResultSchema = zod_1.z.object({
-    /** Stable bridge-cache path — present when as:'path'. */
-    path: zod_1.z.string().optional(),
-    /** Base64 — present when as:'bytes'; capped by the bridge's bytes ceiling. */
-    bytes: zod_1.z.string().optional(),
-    mime: zod_1.z.string(),
-});
-const conversationScoped = zod_1.z.object({ conversationId: zod_1.z.string() });
-const messageScoped = zod_1.z.object({ conversationId: zod_1.z.string(), messageId: zod_1.z.string() });
-/**
- * RTDB server-timestamp sentinel — code-grounded pass-through (hosts write
- * `{'.sv':'timestamp'}` for openedAt/completedAt today; the bridge forwards
- * it to the RTDB REST API untouched).
- */
-const ServerTimestampSentinelSchema = zod_1.z.object({ '.sv': zod_1.z.literal('timestamp') });
-const EpochOrServerTimestampSchema = zod_1.z.union([zod_1.z.number(), ServerTimestampSentinelSchema]);
-// ─────────────────────────────────────────────────────────────────────────
-// W2-A4 REGION START — bridge-owned streaming assembly (raw event surface).
-// ADDITIVE: `publishStreamingEvent` lets a channel adapter forward RAW turn
-// events (a text segment begin/append/replace, a tool-trail item, a thinking
-// tick, a final compose, or a clear). The BRIDGE owns snapshot assembly, the
-// single write cadence, thinking keepalive, final compose, and node clear —
-// so adapters stop reimplementing turn-output-controller + a keepalive loop
-// (T1: they also stop swallowing the write failure). The pre-existing
-// snapshot `publishStreaming` (below) is UNTOUCHED — coding hosts still call
-// it via agent-host/runtime-writers.
-// ─────────────────────────────────────────────────────────────────────────
-/** A single tool-trail item forwarded raw; the bridge folds it into `blocks`. */
-exports.BridgeStreamToolEventSchema = zod_1.z.object({
-    kind: zod_1.z.literal('tool'),
-    /** Stable block id (adapter-scoped, e.g. `tool:{turnId}`). */
-    id: zod_1.z.string(),
-    status: zod_1.z.enum(['running', 'completed', 'failed']).optional(),
-    title: zod_1.z.string().optional(),
-    summary: zod_1.z.string().optional(),
-    detail: zod_1.z.string().optional(),
-});
-/**
- * A visible-text segment. `mode:'append'` concatenates onto the segment's
- * running text; `mode:'replace'` overwrites it (the adapter already holds the
- * full segment). The bridge rebuilds the bubble text from its text segments in
- * sequence order, exactly as the core turn-output-controller does today.
- */
-exports.BridgeStreamTextEventSchema = zod_1.z.object({
-    kind: zod_1.z.literal('text'),
-    /** Segment id (adapter-scoped, e.g. `text:{turnId}:{n}`). */
-    id: zod_1.z.string(),
-    mode: zod_1.z.enum(['append', 'replace']),
-    text: zod_1.z.string(),
-});
-/** A thinking tick (onset or keepalive) — no content; keeps the bubble warm. */
-exports.BridgeStreamThinkingEventSchema = zod_1.z.object({
-    kind: zod_1.z.literal('thinking'),
-});
-/**
- * Final compose: the assembled reply text is written one last time (status
- * settles to `streaming`) and the node is LEFT in place for the final-message
- * handoff. Clearing is a separate `clear` event / `clearStreaming`.
- */
-exports.BridgeStreamFinalEventSchema = zod_1.z.object({
-    kind: zod_1.z.literal('final'),
-    text: zod_1.z.string(),
-});
-/** Clear the streaming node (turn ended / interrupted). */
-exports.BridgeStreamClearEventSchema = zod_1.z.object({
-    kind: zod_1.z.literal('clear'),
-});
-exports.BridgeStreamEventSchema = zod_1.z.discriminatedUnion('kind', [
-    exports.BridgeStreamTextEventSchema,
-    exports.BridgeStreamToolEventSchema,
-    exports.BridgeStreamThinkingEventSchema,
-    exports.BridgeStreamFinalEventSchema,
-    exports.BridgeStreamClearEventSchema,
-]);
-exports.BridgePublishStreamingEventParamsSchema = conversationScoped.extend({
-    /** New turnId resets the bridge's accumulation for this conversation. */
-    turnId: zod_1.z.string().nullable().optional(),
-    messageId: zod_1.z.string().optional(),
-    event: exports.BridgeStreamEventSchema,
-});
-// W2-A4 REGION END — bridge-owned streaming assembly.
-exports.BRIDGE_LOCAL_METHODS = {
-    // §A lifecycle
-    hello: { params: exports.BridgeHelloParamsSchema, result: exports.BridgeHelloResultSchema },
-    /** Liveness probe — the bridge answers without touching upstream. */
-    ping: { params: zod_1.z.object({}), result: OkResultSchema },
-    shutdown: { params: zod_1.z.object({}), result: OkResultSchema },
-    /** Daemon snapshot (B4.6): process, upstream health, hub counters. */
-    status: { params: zod_1.z.object({}), result: exports.BridgeStatusResultSchema },
-    // §B1 messaging (outbound)
-    sendMessage: {
-        params: restEndpoints_js_1.SendMessageRequestSchema,
-        // B4.3 additive: the bridge chunks oversized text (core retry/chunking);
-        // messageId is the FINAL chunk (carries the caller's metadata/turn
-        // semantics), messageIds lists every part in send order.
-        result: restEndpoints_js_1.SendMessageResponseSchema.extend({
-            messageIds: zod_1.z.array(zod_1.z.string()).optional(),
-        }),
-    },
-    sendContextualMessage: {
-        params: sendContextual_js_1.SendContextualRequestSchema,
-        result: sendContextual_js_1.SendContextualResponseSchema,
-    },
-    reactToMessage: { params: restEndpoints_js_1.ReactRequestSchema, result: restEndpoints_js_1.ReactResponseSchema },
-    forwardMessage: { params: restEndpoints_js_1.ForwardMessageRequestSchema, result: restEndpoints_js_1.ForwardMessageResponseSchema },
-    deleteMessage: { params: messageScoped, result: OkResultSchema },
-    markRead: { params: conversationScoped, result: OkResultSchema },
-    setDisposition: {
-        params: messageScoped.extend(restEndpoints_js_1.UpdateDispositionRequestSchema.shape),
-        result: OkResultSchema,
-    },
-    // §B2 reading / history
-    getMessages: {
-        params: zod_1.z.object({
-            conversationId: zod_1.z.string(),
-            limit: zod_1.z.number().optional(),
-            before: zod_1.z.string().optional(),
-            includeBehavior: zod_1.z.boolean().optional(),
-        }),
-        // B4.3 additive: nextCursor is the bridge-derived `before` token for the
-        // next page (oldest returned message id), present when the page filled
-        // the requested limit. The REST surface itself emits no cursor.
-        result: restEndpoints_js_1.MessagesPageResponseSchema.extend({
-            nextCursor: zod_1.z.string().optional(),
-        }),
-    },
-    getConversations: { params: zod_1.z.object({}), result: restEndpoints_js_1.ConversationsResponseSchema },
-    // §B3 conversation / group management
-    createConversation: {
-        params: restEndpoints_js_1.CreateConversationRequestSchema,
-        result: restEndpoints_js_1.CreateConversationResponseSchema,
-    },
-    updateTopic: {
-        params: conversationScoped.extend({ topic: zod_1.z.string() }),
-        result: OkResultSchema,
-    },
-    updateName: {
-        params: conversationScoped.extend({ name: zod_1.z.string() }),
-        result: OkResultSchema,
-    },
-    updateAvatar: {
-        params: conversationScoped.extend({ avatarUrl: zod_1.z.string().nullable().optional() }),
-        result: OkResultSchema,
-    },
-    addMember: {
-        params: conversationScoped.extend({ userId: zod_1.z.string() }),
-        result: zod_1.z.union([
-            zod_1.z.object({ status: zod_1.z.literal('added') }),
-            zod_1.z.object({ status: zod_1.z.literal('pending'), requestId: zod_1.z.string() }),
-        ]),
-    },
-    removeMember: {
-        params: conversationScoped.extend({ userId: zod_1.z.string() }),
-        result: OkResultSchema,
-    },
-    leaveConversation: { params: conversationScoped, result: OkResultSchema },
-    muteConversation: {
-        params: conversationScoped.extend({ until: zod_1.z.number().optional() }),
-        result: OkResultSchema,
-    },
-    unmuteConversation: { params: conversationScoped, result: OkResultSchema },
-    hideConversation: { params: conversationScoped, result: OkResultSchema },
-    // §B4 contacts / admission / blocking
-    createContactRequest: {
-        params: restEndpoints_js_1.CreateContactRequestRequestSchema,
-        result: restEndpoints_js_1.CreateContactRequestResponseSchema,
-    },
-    listContacts: { params: zod_1.z.object({}), result: restEndpoints_js_1.ContactsResponseSchema },
-    getContact: {
-        params: zod_1.z.object({ contactId: zod_1.z.string() }),
-        result: restEndpoints_js_1.RestContactSchema.nullable(),
-    },
-    removeContact: { params: zod_1.z.object({ contactId: zod_1.z.string() }), result: OkResultSchema },
-    listContactRequests: {
-        params: zod_1.z.object({}),
-        result: zod_1.z.object({ requests: zod_1.z.array(contactRequest_js_1.SerializedContactRequestSchema) }),
-    },
-    resolveAdmission: {
-        params: restEndpoints_js_1.ResolveAdmissionRequestSchema,
-        result: restEndpoints_js_1.ResolveAdmissionResponseSchema,
-    },
-    reachOut: {
-        // B6.1 additive (P6 openclaw): the optional fields mirror core
-        // reachOutToCanonContact options — contact-request message, agent
-        // session config/selection, and SendMessageOptions passthrough — so
-        // channel adapters keep today's reach-out fidelity through the bridge.
-        params: zod_1.z.object({
-            targetId: zod_1.z.string(),
-            /**
-             * Optional (B6.1): core reach-out treats a missing text as
-             * "resolve/open the conversation only" — the openclaw media path
-             * reaches out first and sends the uploaded attachment separately.
-             */
-            text: zod_1.z.string().optional(),
-            selfContext: zod_1.z.string().optional(),
-            /** Contact-request message when admission requires approval. */
-            requestMessage: zod_1.z.string().optional(),
-            /** Initial agent session config — opaque pass-through. */
-            sessionConfig: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).nullable().optional(),
-            /** Same union as the REST send surfaces (incl. mode: 'specific'). */
-            sessionSelection: restEndpoints_js_1.RestSessionSelectionSchema.optional(),
-            /** SendMessageOptions passthrough (replyTo, selfContextId, metadata, …). */
-            sendMessageOptions: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-        }),
-        result: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-    },
-    blockUser: { params: zod_1.z.object({ userId: zod_1.z.string() }), result: OkResultSchema },
-    unblockUser: { params: zod_1.z.object({ userId: zod_1.z.string() }), result: OkResultSchema },
-    // §B5 live presence / streaming (bridge throttles internally)
-    setTyping: {
-        params: conversationScoped.extend({ state: zod_1.z.enum(['typing', 'thinking', 'clear']) }),
-        result: OkResultSchema,
-    },
-    publishStreaming: {
-        params: conversationScoped.extend({
-            turnId: zod_1.z.string().nullable().optional(),
-            messageId: zod_1.z.string().optional(),
-            text: zod_1.z.string().optional(),
-            delta: zod_1.z.string().optional(),
-            /** TurnOutputBlock[] — opaque pass-through. */
-            blocks: zod_1.z.array(zod_1.z.record(zod_1.z.string(), zod_1.z.unknown())).optional(),
-            /**
-             * Explicit bubble/presentation status override (union of B6.1 openclaw
-             * + P6 host surface): 'tool' / 'waiting_input' cannot be derived from
-             * text/blocks. Omitted: the bridge derives thinking/streaming from
-             * content as before.
-             */
-            status: zod_1.z.enum(['thinking', 'streaming', 'tool', 'waiting_input']).optional(),
-            done: zod_1.z.boolean().optional(),
-        }),
-        result: OkResultSchema,
-    },
-    clearStreaming: { params: conversationScoped, result: OkResultSchema },
-    // W2-A4 additive: raw streaming events (bridge owns assembly/cadence/
-    // keepalive/final/clear). Coexists with the snapshot publishStreaming above.
-    publishStreamingEvent: {
-        params: exports.BridgePublishStreamingEventParamsSchema,
-        result: OkResultSchema,
-    },
-    // §B6 runtime presentation (adapter owns content, bridge publishes)
-    publishRuntimeDescriptor: {
-        params: zod_1.z.object({
-            descriptor: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-            /**
-             * B6.1 additive (P6 openclaw): rides into the published /agent-runtime
-             * payload — hosts and host-mode channel plugins publish hostMode: true
-             * today and the field is app-visible. Latched for subsequent publishes;
-             * defaults to false (bridge-adapter split is not a host process).
-             */
-            hostMode: zod_1.z.boolean().optional(),
-        }),
-        result: OkResultSchema,
-    },
-    publishRuntimeStatus: {
-        // Code-grounded correction (B4.3): RTDB runtime-info lives per
-        // conversation (/runtime-info/{convoId}/{agentId}), so the publish is
-        // conversation-scoped. `presentation` carries the remaining
-        // RuntimeInfoPayload fields (surfaceMode, facts, inventories, notes, …)
-        // as an opaque pass-through.
-        params: conversationScoped.extend({
-            statusItems: zod_1.z.array(zod_1.z.record(zod_1.z.string(), zod_1.z.unknown())).optional(),
-            presentation: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-        }),
-        result: OkResultSchema,
-    },
-    publishTurnState: {
-        // B6.1 additive (P6 openclaw): the remaining CanonTurnStatePayload
-        // fields hosts publish today. `completedAt: true` asks the bridge to
-        // stamp the server timestamp (the RTDB sentinel is bridge-owned).
-        params: conversationScoped.extend({
-            turnId: zod_1.z.string().nullable().optional(),
-            state: turnProtocol_js_1.TurnLifecycleStateSchema,
-            queueDepth: zod_1.z.number().optional(),
-            capabilities: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-            // Union of B6.1 (openclaw) + P6 host surface — the remaining
-            // code-grounded TurnStatePayload fields (rtdb-rest.ts).
-            currentSpeakerId: zod_1.z.string().nullable().optional(),
-            lastAcceptedIntent: turnProtocol_js_1.DeliveryIntentSchema.nullable().optional(),
-            activeMessageIds: zod_1.z.array(zod_1.z.string()).optional(),
-            openedAt: EpochOrServerTimestampSchema.optional(),
-            turnUpdatedAt: EpochOrServerTimestampSchema.nullable().optional(),
-            // `true` (B6.1 openclaw) asks the bridge to stamp the server-timestamp
-            // sentinel; hosts (P6) pass an epoch or the sentinel through directly.
-            completedAt: zod_1.z
-                .union([zod_1.z.boolean(), EpochOrServerTimestampSchema])
-                .nullable()
-                .optional(),
-        }),
-        result: OkResultSchema,
-    },
-    clearTurnState: { params: conversationScoped, result: OkResultSchema },
-    publishActivity: {
-        params: conversationScoped.extend({
-            activityItems: zod_1.z.array(zod_1.z.record(zod_1.z.string(), zod_1.z.unknown())),
-        }),
-        result: OkResultSchema,
-    },
-    clearActivity: {
-        // B6.1 additive (P6 openclaw): remove activity blocks. `all` wipes the
-        // conversation's node; `itemIds` removes specific blocks; neither falls
-        // back to the publisher's terminal-only sweep semantics.
-        params: conversationScoped.extend({
-            all: zod_1.z.boolean().optional(),
-            itemIds: zod_1.z.array(zod_1.z.string()).optional(),
-        }),
-        result: OkResultSchema,
-    },
-    /** B6.1 additive: clear the per-conversation runtime-info node. */
-    clearRuntimeStatus: { params: conversationScoped, result: OkResultSchema },
-    /**
-     * B6.1 additive: clear /agent-runtime for this identity (preserves
-     * descriptor-bearing payloads with updatedAt: 0, like hosts do today).
-     */
-    clearRuntimeDescriptor: { params: zod_1.z.object({}), result: OkResultSchema },
-    // §B7 HITL (durable; returns requestId, resolves via onHitlResolved).
-    //
-    // P6 host surface (additive): process-executing hosts publish the SAME
-    // rich records channel runtimes create today (approval cards with
-    // diff/details/native handles, titled input cards, card ids the runtime
-    // correlates on). All new fields are optional — the narrow Phase-4 shape
-    // still parses. `requestId`/`inputId`/`cardId`-style explicit ids become
-    // the bridge record's requestId so adapters keep their own correlation.
-    // `responseUserId: null` means "let the server pick a reachable responder"
-    // (codex cards today); absent keeps the Phase-4 default (agent owner).
-    requestApproval: {
-        // B6.1 additive (P6 openclaw): optional approval-card fidelity fields
-        // (core createRuntimeApprovalRequest passthrough) so native runtime
-        // approvals keep their tool name, detail rows, correlation handles and
-        // allow-always affordance through the bridge.
-        params: conversationScoped.extend({
-            detail: zod_1.z.string(),
-            risk: hitl_js_1.HitlApprovalRiskSchema,
-            category: hitl_js_1.HitlApprovalCategorySchema,
-            expiresAt: zod_1.z.string().optional(),
-            approvalId: zod_1.z.string().optional(),
-            /** Card header tool name; defaults to the category. */
-            toolName: zod_1.z.string().optional(),
-            riskLevel: zod_1.z.enum(['normal', 'destructive']).optional(),
-            details: zod_1.z.array(hitl_js_1.HitlApprovalDetailSchema).optional(),
-            /** File-change preview (CanonUnifiedDiff) — opaque pass-through. */
-            diff: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-            /** Native runtime correlation handles — opaque pass-through. */
-            native: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-            turnId: zod_1.z.string().optional(),
-            runtimeId: zod_1.z.string().optional(),
-            /** Offer the "always allow" session-rule affordance on the card. */
-            allowSessionRule: zod_1.z.boolean().optional(),
-            responseUserId: zod_1.z.string().nullable().optional(),
-        }),
-        result: hitl_js_1.HitlRequestAcceptedSchema,
-    },
-    requestInput: {
-        params: conversationScoped.extend({
-            questions: zod_1.z.array(hitl_js_1.HitlInputQuestionSchema),
-            expiresAt: zod_1.z.string().optional(),
-            inputId: zod_1.z.string().optional(),
-            title: zod_1.z.string().optional(),
-            prompt: zod_1.z.string().optional(),
-            kind: hitl_js_1.HitlInputKindSchema.optional(),
-            sensitive: zod_1.z.boolean().optional(),
-            native: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-            turnId: zod_1.z.string().optional(),
-            responseUserId: zod_1.z.string().nullable().optional(),
-        }),
-        result: hitl_js_1.HitlRequestAcceptedSchema,
-    },
-    requestCard: {
-        params: conversationScoped.extend({
-            /** canon.card.v1 content — opaque pass-through. */
-            card: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-            expiresAt: zod_1.z.string().optional(),
-            cardId: zod_1.z.string().optional(),
-            native: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-            turnId: zod_1.z.string().optional(),
-            responseUserId: zod_1.z.string().nullable().optional(),
-        }),
-        result: hitl_js_1.HitlRequestAcceptedSchema,
-    },
-    getHitlState: {
-        params: zod_1.z.object({ requestId: zod_1.z.string() }),
-        result: exports.BridgeHitlStateSchema,
-    },
-    cancelHitl: { params: zod_1.z.object({ requestId: zod_1.z.string() }), result: OkResultSchema },
-    // §B8 media (named schemas above — the bridge + Framework share them)
-    uploadMedia: {
-        params: exports.BridgeUploadMediaParamsSchema,
-        result: restEndpoints_js_1.UploadMediaResponseSchema,
-    },
-    getAttachment: {
-        params: exports.BridgeGetAttachmentParamsSchema,
-        result: exports.BridgeGetAttachmentResultSchema,
-    },
-    // §B9 voice (media stays client↔LiveKit; bridge brokers the token).
-    // Code-grounded correction (B4.3): every /voice/sessions/:id REST op
-    // requires the conversationId (body or query) — the session doc lives
-    // under the conversation — so the session-scoped methods carry it too.
-    createVoiceSession: {
-        params: conversationScoped.extend({ targetAgentId: zod_1.z.string().optional() }),
-        result: zod_1.z.looseObject({ sessionId: zod_1.z.string() }),
-    },
-    joinVoiceSession: {
-        params: zod_1.z.object({ sessionId: zod_1.z.string(), conversationId: zod_1.z.string() }),
-        result: zod_1.z.looseObject({ url: zod_1.z.string(), token: zod_1.z.string() }),
-    },
-    endVoiceSession: {
-        params: zod_1.z.object({ sessionId: zod_1.z.string(), conversationId: zod_1.z.string() }),
-        result: OkResultSchema,
-    },
-    getVoiceSession: {
-        params: zod_1.z.object({ sessionId: zod_1.z.string(), conversationId: zod_1.z.string() }),
-        result: sseEvents_js_1.SseVoiceSessionEventPayloadSchema,
-    },
-    // §B10 registration / identity
-    getAgent: {
-        params: zod_1.z.object({}),
-        result: zod_1.z.object({
-            agentId: zod_1.z.string(),
-            agentName: zod_1.z.string(),
-            context: sseEvents_js_1.SseAgentContextPayloadSchema,
-        }),
-    },
-    register: {
-        params: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-        // pollToken (when issued) authorizes subsequent status polls.
-        result: zod_1.z.object({ requestId: zod_1.z.string(), pollToken: zod_1.z.string().optional() }),
-    },
-    getRegistrationStatus: {
-        // `baseUrl` (B6.1 additive) supports the pre-identity bootstrap: the
-        // registration statics are unauthenticated, so a stub-identity bridge
-        // can serve them with an explicit endpoint.
-        params: zod_1.z.object({
-            requestId: zod_1.z.string(),
-            pollToken: zod_1.z.string().optional(),
-            baseUrl: zod_1.z.string().optional(),
-        }),
-        result: zod_1.z.looseObject({ status: zod_1.z.string() }),
-    },
-    /**
-     * Acknowledge one-time API-key delivery after an approved registration
-     * (POST /agents/status/:id/ack). Best-effort on the wire; failures surface
-     * as upstream-band errors. Additive union of Phase 5 + P6 openclaw: the
-     * Hermes port consumed it through the GENERIC Python escape hatch first
-     * (a bridge-side method addition with zero framework-py release), and
-     * `baseUrl` (B6.1) supports the wizard's per-call pre-identity bootstrap.
-     */
-    ackRegistrationStatus: {
-        params: zod_1.z.object({
-            requestId: zod_1.z.string(),
-            pollToken: zod_1.z.string().optional(),
-            baseUrl: zod_1.z.string().optional(),
-        }),
-        result: OkResultSchema,
-    },
-    // §5b host-profile surface (bridge-execution-plan Phase 4 step 5b) —
-    // additive methods for process-executing (host-mode) adapters, beyond §B.
-    // Shapes mirror @canonmsg/core host-runtime-wire.ts; runtime payloads are
-    // opaque pass-through (AgentRuntime).
-    publishHostAgentRuntime: {
-        params: zod_1.z.object({
-            /** Defaults to the hello clientType. */
-            clientType: zod_1.z.string().optional(),
-            /** AgentRuntime — opaque pass-through. */
-            runtime: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-        }),
-        result: OkResultSchema,
-    },
-    publishHostSessionSnapshots: {
-        params: zod_1.z.object({
-            conversationIds: zod_1.z.array(zod_1.z.string()),
-            /** Defaults to the hello clientType. */
-            clientType: zod_1.z.string().optional(),
-            /** AgentRuntime — opaque pass-through. */
-            runtime: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-            workspaceOptions: zod_1.z.array(zod_1.z.object({ id: zod_1.z.string(), cwd: zod_1.z.string() })).optional(),
-            defaultCwd: zod_1.z.string().optional(),
-            extraSessionConfigFields: zod_1.z.array(zod_1.z.string()).optional(),
-            /** conversationId → live session-config overrides (JSON'd Map). */
-            liveSessionConfigByConversation: zod_1.z
-                .record(zod_1.z.string(), zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()))
-                .optional(),
-        }),
-        result: OkResultSchema,
-    },
-    // §5b host-profile surface, P6 additions (bridge-execution-plan Phase 6) —
-    // the remaining RTDB planes the process-executing hosts touched directly
-    // until now: the per-conversation session-state node, its config read, and
-    // the terminal clears. Payloads mirror @canonmsg/core rtdb-rest.ts shapes
-    // as opaque pass-through; the bridge executes them through the core
-    // runtime-state publisher (hostMode) over its single RTDB handle.
-    getSessionConfig: {
-        params: conversationScoped,
-        /** Raw `/session-config/{convoId}/{agentId}` node; adapters parse locally. */
-        result: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).nullable(),
-    },
-    publishSessionState: {
-        params: conversationScoped.extend({
-            /** SessionStatePayload minus updatedAt — opaque pass-through. */
-            state: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-        }),
-        result: OkResultSchema,
-    },
-    clearSessionState: { params: conversationScoped, result: OkResultSchema },
-    // clearTurnState is defined once under §B6 above (both legs added it; the
-    // clear is publisher-agnostic so channel adapters and hosts share it).
-    /**
-     * Terminal /agent-runtime clear through the HOST publisher. Same RTDB
-     * effect as §B6.1 clearRuntimeDescriptor (preserve descriptor-bearing
-     * payloads with updatedAt: 0) — kept as a distinct §5b name because host
-     * consumers correlate it with the publishHostAgentRuntime plane.
-     */
-    clearAgentRuntime: { params: zod_1.z.object({}), result: OkResultSchema },
-};
-exports.BRIDGE_LOCAL_METHOD_NAMES = Object.keys(exports.BRIDGE_LOCAL_METHODS);
-// ── §C Notification registry (bridge → adapter, one-way) ───────────────
-exports.BRIDGE_LOCAL_NOTIFICATIONS = {
-    // §A — connection-scoped, never replayed, no cursor
-    ready: exports.BridgeReadyNotificationSchema,
-    connectionState: exports.BridgeConnectionStateNotificationSchema,
-    // §C1 inbound messages (pre-filtered: deduped, self/control stripped)
-    onMessage: sseEvents_js_1.SseMessageCreatedPayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    onMessageUpdated: sseEvents_js_1.SseMessageUpdatedPayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    onMessageDeleted: sseEvents_js_1.SseMessageDeletedPayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    onConversationUpdated: sseEvents_js_1.SseConversationUpdatedPayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    // §C2 control (bridge consumed from RTDB — adapters never poll)
-    onControlSignal: controlSignals_js_1.ControlSignalEventSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    onSessionControl: controlSignals_js_1.ControlSessionEventSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    // §C2 addition (P6, both legs): `/control/.../primitive` runtime command
-    // dispatch (/status, /compact, …) consumed by the bridge poller — adapters
-    // (openclaw handlers, codex compact) never poll RTDB themselves.
-    onControlPrimitive: controlSignals_js_1.ControlPrimitiveEventSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    // §C6 HITL resolution (durable; matches a §B7 requestId)
-    onHitlResolved: hitl_js_1.HitlResolutionSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    onHitlPending: hitl_js_1.HitlPendingSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    /**
-     * §C6 addition (P6 host surface): a stripped HITL control-reply message
-     * (metadata.type approval_reply / plan_approval_reply) that matched NO
-     * bridge-owned HITL record fans out here instead of being dropped —
-     * process-executing hosts run reply flows the bridge did not raise
-     * (claude plan approval is a plain sendMessage + metadata-reply waiter).
-     * `message` is the serialized Canon message, opaque pass-through.
-     */
-    onControlReply: zod_1.z.object({
-        conversationId: zod_1.z.string(),
-        message: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-    }).extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    // §C3 contacts
-    onContactChanged: zod_1.z.object({
-        kind: zod_1.z.enum(['request', 'approved', 'added', 'updated', 'removed']),
-        contact: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-    }).extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    // §C4 typing / presence
-    onTyping: sseEvents_js_1.SseTypingPayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    onPresence: sseEvents_js_1.SsePresencePayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    // §C5 voice
-    onVoiceSessionStarted: sseEvents_js_1.SseVoiceSessionEventPayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-    onVoiceSessionEnded: sseEvents_js_1.SseVoiceSessionEventPayloadSchema.extend(exports.BRIDGE_EVENT_CURSOR_SHAPE),
-};
-exports.BRIDGE_LOCAL_NOTIFICATION_NAMES = Object.keys(exports.BRIDGE_LOCAL_NOTIFICATIONS);
-/**
- * Event family per §C notification, mirroring SSE_EVENT_FAMILY_BY_TYPE.
- * `lifecycle` notifications are connection-scoped and delivered to every
- * client; family notifications are filtered by `hello.wantFamilies`
- * (`wantFamilies: []` = pure-request adapter, no §C events at all).
- */
-exports.BRIDGE_LOCAL_NOTIFICATION_FAMILIES = {
-    ready: 'lifecycle',
-    connectionState: 'lifecycle',
-    onMessage: 'messages',
-    onMessageUpdated: 'messages',
-    onMessageDeleted: 'messages',
-    onConversationUpdated: 'messages',
-    onControlSignal: 'runtime_turn',
-    onSessionControl: 'runtime_turn',
-    onControlPrimitive: 'runtime_turn',
-    onHitlResolved: 'runtime_turn',
-    onHitlPending: 'runtime_turn',
-    onControlReply: 'runtime_turn',
-    onContactChanged: 'contacts',
-    onTyping: 'typing_presence',
-    onPresence: 'typing_presence',
-    onVoiceSessionStarted: 'voice',
-    onVoiceSessionEnded: 'voice',
-};
-// ── JSON-RPC 2.0 framing ───────────────────────────────────────────────
-exports.BridgeRpcIdSchema = zod_1.z.union([zod_1.z.string(), zod_1.z.number()]);
-exports.BridgeRpcRequestSchema = zod_1.z.object({
-    jsonrpc: zod_1.z.literal('2.0'),
-    id: exports.BridgeRpcIdSchema,
-    method: zod_1.z.string(),
-    params: zod_1.z.unknown().optional(),
-});
-exports.BridgeRpcNotificationSchema = zod_1.z.object({
-    jsonrpc: zod_1.z.literal('2.0'),
-    method: zod_1.z.string(),
-    params: zod_1.z.unknown().optional(),
-});
-exports.BridgeRpcErrorSchema = zod_1.z.object({
-    code: zod_1.z.number(),
-    message: zod_1.z.string(),
-    data: zod_1.z.unknown().optional(),
-});
-exports.BridgeRpcResponseSchema = zod_1.z.union([
-    zod_1.z.object({ jsonrpc: zod_1.z.literal('2.0'), id: exports.BridgeRpcIdSchema, result: zod_1.z.unknown() }),
-    zod_1.z.object({ jsonrpc: zod_1.z.literal('2.0'), id: exports.BridgeRpcIdSchema.nullable(), error: exports.BridgeRpcErrorSchema }),
-]);