@canonmsg/backend-contracts 1.9.0 → 2.1.0

package/dist/agentBehaviorPolicy.d.ts

@@ -1,89 +1,48 @@
-import { z } from 'zod';
-export declare const ParticipationStyleSchema: z.ZodEnum<{
-    natural: "natural";
-    collaborative: "collaborative";
-    "mention-first": "mention-first";
-    "approval-gated": "approval-gated";
-    "handoff-only": "handoff-only";
-    observer: "observer";
-}>;
-export type ParticipationStyle = z.infer<typeof ParticipationStyleSchema>;
-export declare const AgentBehaviorSettingsRecordSchema: z.ZodObject<{
-    participationStyle: z.ZodOptional<z.ZodEnum<{
-        natural: "natural";
-        collaborative: "collaborative";
-        "mention-first": "mention-first";
-        "approval-gated": "approval-gated";
-        "handoff-only": "handoff-only";
-        observer: "observer";
-    }>>;
-    allowAgentToAgent: z.ZodOptional<z.ZodBoolean>;
-    allowLongRunningCollaboration: z.ZodOptional<z.ZodBoolean>;
-    requireMentionForGroupReplies: z.ZodOptional<z.ZodBoolean>;
-    maxConsecutiveAgentTurns: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-    instructions: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-}, z.core.$strip>;
-export type AgentBehaviorSettingsRecord = z.infer<typeof AgentBehaviorSettingsRecordSchema>;
-export declare const ResolvedAgentBehaviorPolicyRecordSchema: z.ZodObject<{
-    participation: z.ZodObject<{
-        style: z.ZodEnum<{
-            natural: "natural";
-            collaborative: "collaborative";
-            "mention-first": "mention-first";
-            "approval-gated": "approval-gated";
-            "handoff-only": "handoff-only";
-            observer: "observer";
-        }>;
-        allowAgentToAgent: z.ZodBoolean;
-        allowHumanToAgent: z.ZodBoolean;
-        allowLongRunningCollaboration: z.ZodBoolean;
-        requireMentionForGroupReplies: z.ZodBoolean;
-        maxConsecutiveAgentTurns: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-    }, z.core.$strip>;
-    instructions: z.ZodArray<z.ZodString>;
-    source: z.ZodObject<{
-        hasAgentDefault: z.ZodBoolean;
-        hasConversationOverride: z.ZodBoolean;
-    }, z.core.$strip>;
-}, z.core.$strip>;
-export type ResolvedAgentBehaviorPolicyRecord = z.infer<typeof ResolvedAgentBehaviorPolicyRecordSchema>;
-export declare const ParticipationDecisionInputSchema: z.ZodObject<{
-    conversationType: z.ZodEnum<{
-        unknown: "unknown";
-        direct: "direct";
-        group: "group";
-    }>;
-    senderType: z.ZodEnum<{
-        human: "human";
-        ai_agent: "ai_agent";
-    }>;
-    isOwner: z.ZodBoolean;
-    mentionedAgent: z.ZodBoolean;
-    recentHumanCount: z.ZodOptional<z.ZodNumber>;
-    consecutiveAgentTurns: z.ZodOptional<z.ZodNumber>;
-    currentAgentStreakStartedByHuman: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-export type ParticipationDecisionInput = z.infer<typeof ParticipationDecisionInputSchema>;
-export declare const ParticipationHistoryMessageSchema: z.ZodObject<{
-    senderId: z.ZodString;
-    senderType: z.ZodEnum<{
-        human: "human";
-        ai_agent: "ai_agent";
-    }>;
-    metadata: z.ZodOptional<z.ZodUnknown>;
-}, z.core.$strip>;
-export type ParticipationHistoryMessage = z.infer<typeof ParticipationHistoryMessageSchema>;
-export declare const ParticipationHistorySnapshotSchema: z.ZodObject<{
-    recentSenderTypes: z.ZodArray<z.ZodEnum<{
-        human: "human";
-        ai_agent: "ai_agent";
-    }>>;
-    recentHumanCount: z.ZodNumber;
-    recentAgentCount: z.ZodNumber;
-    consecutiveAgentTurns: z.ZodNumber;
-    currentAgentStreakStartedByHuman: z.ZodBoolean;
-}, z.core.$strip>;
-export type ParticipationHistorySnapshot = z.infer<typeof ParticipationHistorySnapshotSchema>;
+export type ParticipationStyle = 'natural' | 'collaborative' | 'mention-first' | 'approval-gated' | 'handoff-only' | 'observer';
+export interface AgentBehaviorSettingsRecord {
+    participationStyle?: ParticipationStyle;
+    allowAgentToAgent?: boolean;
+    allowLongRunningCollaboration?: boolean;
+    requireMentionForGroupReplies?: boolean;
+    maxConsecutiveAgentTurns?: number | null;
+    instructions?: string | null;
+}
+export interface ResolvedAgentBehaviorPolicyRecord {
+    participation: {
+        style: ParticipationStyle;
+        allowAgentToAgent: boolean;
+        allowHumanToAgent: boolean;
+        allowLongRunningCollaboration: boolean;
+        requireMentionForGroupReplies: boolean;
+        maxConsecutiveAgentTurns?: number | null;
+    };
+    instructions: string[];
+    source: {
+        hasAgentDefault: boolean;
+        hasConversationOverride: boolean;
+    };
+}
+export interface ParticipationDecisionInput {
+    conversationType: 'direct' | 'group' | 'unknown';
+    senderType: 'human' | 'ai_agent';
+    isOwner: boolean;
+    mentionedAgent: boolean;
+    recentHumanCount?: number;
+    consecutiveAgentTurns?: number;
+    currentAgentStreakStartedByHuman?: boolean;
+}
+export interface ParticipationHistoryMessage {
+    senderId: string;
+    senderType: 'human' | 'ai_agent';
+    metadata?: unknown;
+}
+export interface ParticipationHistorySnapshot {
+    recentSenderTypes: Array<'human' | 'ai_agent'>;
+    recentHumanCount: number;
+    recentAgentCount: number;
+    consecutiveAgentTurns: number;
+    currentAgentStreakStartedByHuman: boolean;
+}
 export declare const PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
 export declare function parseAgentBehaviorSettings(raw: unknown): AgentBehaviorSettingsRecord;
 export declare function normalizeStoredAgentBehaviorPolicy(raw: Record<string, unknown> | undefined): AgentBehaviorSettingsRecord | null;

package/dist/agentBehaviorPolicy.js

@@ -1,57 +1,4 @@
-import { z } from 'zod';
 import { resolveTurnMessageSemantics } from './turnProtocol.js';
-export const ParticipationStyleSchema = z.enum([
-    'natural',
-    'collaborative',
-    'mention-first',
-    'approval-gated',
-    'handoff-only',
-    'observer',
-]);
-export const AgentBehaviorSettingsRecordSchema = z.object({
-    participationStyle: ParticipationStyleSchema.optional(),
-    allowAgentToAgent: z.boolean().optional(),
-    allowLongRunningCollaboration: z.boolean().optional(),
-    requireMentionForGroupReplies: z.boolean().optional(),
-    maxConsecutiveAgentTurns: z.number().nullable().optional(),
-    instructions: z.string().nullable().optional(),
-});
-export const ResolvedAgentBehaviorPolicyRecordSchema = z.object({
-    participation: z.object({
-        style: ParticipationStyleSchema,
-        allowAgentToAgent: z.boolean(),
-        allowHumanToAgent: z.boolean(),
-        allowLongRunningCollaboration: z.boolean(),
-        requireMentionForGroupReplies: z.boolean(),
-        maxConsecutiveAgentTurns: z.number().nullable().optional(),
-    }),
-    instructions: z.array(z.string()),
-    source: z.object({
-        hasAgentDefault: z.boolean(),
-        hasConversationOverride: z.boolean(),
-    }),
-});
-export const ParticipationDecisionInputSchema = z.object({
-    conversationType: z.enum(['direct', 'group', 'unknown']),
-    senderType: z.enum(['human', 'ai_agent']),
-    isOwner: z.boolean(),
-    mentionedAgent: z.boolean(),
-    recentHumanCount: z.number().optional(),
-    consecutiveAgentTurns: z.number().optional(),
-    currentAgentStreakStartedByHuman: z.boolean().optional(),
-});
-export const ParticipationHistoryMessageSchema = z.object({
-    senderId: z.string(),
-    senderType: z.enum(['human', 'ai_agent']),
-    metadata: z.unknown().optional(),
-});
-export const ParticipationHistorySnapshotSchema = z.object({
-    recentSenderTypes: z.array(z.enum(['human', 'ai_agent'])),
-    recentHumanCount: z.number(),
-    recentAgentCount: z.number(),
-    consecutiveAgentTurns: z.number(),
-    currentAgentStreakStartedByHuman: z.boolean(),
-});
 export const PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
 const VALID_PARTICIPATION_STYLES = new Set([
     'natural',

package/dist/cjs/agentBehaviorPolicy.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PARTICIPATION_HISTORY_FETCH_LIMIT = exports.ParticipationHistorySnapshotSchema = exports.ParticipationHistoryMessageSchema = exports.ParticipationDecisionInputSchema = exports.ResolvedAgentBehaviorPolicyRecordSchema = exports.AgentBehaviorSettingsRecordSchema = exports.ParticipationStyleSchema = void 0;
+exports.PARTICIPATION_HISTORY_FETCH_LIMIT = void 0;
 exports.parseAgentBehaviorSettings = parseAgentBehaviorSettings;
 exports.normalizeStoredAgentBehaviorPolicy = normalizeStoredAgentBehaviorPolicy;
 exports.normalizeAgentBehaviorInstructions = normalizeAgentBehaviorInstructions;
@@ -8,60 +8,7 @@ exports.resolveAgentBehaviorPolicy = resolveAgentBehaviorPolicy;
 exports.buildParticipationHistorySnapshot = buildParticipationHistorySnapshot;
 exports.appendParticipationHistoryMessage = appendParticipationHistoryMessage;
 exports.evaluateParticipationPolicy = evaluateParticipationPolicy;
-const zod_1 = require("zod");
 const turnProtocol_js_1 = require("./turnProtocol.js");
-exports.ParticipationStyleSchema = zod_1.z.enum([
-    'natural',
-    'collaborative',
-    'mention-first',
-    'approval-gated',
-    'handoff-only',
-    'observer',
-]);
-exports.AgentBehaviorSettingsRecordSchema = zod_1.z.object({
-    participationStyle: exports.ParticipationStyleSchema.optional(),
-    allowAgentToAgent: zod_1.z.boolean().optional(),
-    allowLongRunningCollaboration: zod_1.z.boolean().optional(),
-    requireMentionForGroupReplies: zod_1.z.boolean().optional(),
-    maxConsecutiveAgentTurns: zod_1.z.number().nullable().optional(),
-    instructions: zod_1.z.string().nullable().optional(),
-});
-exports.ResolvedAgentBehaviorPolicyRecordSchema = zod_1.z.object({
-    participation: zod_1.z.object({
-        style: exports.ParticipationStyleSchema,
-        allowAgentToAgent: zod_1.z.boolean(),
-        allowHumanToAgent: zod_1.z.boolean(),
-        allowLongRunningCollaboration: zod_1.z.boolean(),
-        requireMentionForGroupReplies: zod_1.z.boolean(),
-        maxConsecutiveAgentTurns: zod_1.z.number().nullable().optional(),
-    }),
-    instructions: zod_1.z.array(zod_1.z.string()),
-    source: zod_1.z.object({
-        hasAgentDefault: zod_1.z.boolean(),
-        hasConversationOverride: zod_1.z.boolean(),
-    }),
-});
-exports.ParticipationDecisionInputSchema = zod_1.z.object({
-    conversationType: zod_1.z.enum(['direct', 'group', 'unknown']),
-    senderType: zod_1.z.enum(['human', 'ai_agent']),
-    isOwner: zod_1.z.boolean(),
-    mentionedAgent: zod_1.z.boolean(),
-    recentHumanCount: zod_1.z.number().optional(),
-    consecutiveAgentTurns: zod_1.z.number().optional(),
-    currentAgentStreakStartedByHuman: zod_1.z.boolean().optional(),
-});
-exports.ParticipationHistoryMessageSchema = zod_1.z.object({
-    senderId: zod_1.z.string(),
-    senderType: zod_1.z.enum(['human', 'ai_agent']),
-    metadata: zod_1.z.unknown().optional(),
-});
-exports.ParticipationHistorySnapshotSchema = zod_1.z.object({
-    recentSenderTypes: zod_1.z.array(zod_1.z.enum(['human', 'ai_agent'])),
-    recentHumanCount: zod_1.z.number(),
-    recentAgentCount: zod_1.z.number(),
-    consecutiveAgentTurns: zod_1.z.number(),
-    currentAgentStreakStartedByHuman: zod_1.z.boolean(),
-});
 exports.PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
 const VALID_PARTICIPATION_STYLES = new Set([
     'natural',

package/dist/cjs/contactRequest.js

@@ -1,36 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SerializedContactRequestSchema = exports.SerializedContactRequestStatusSchema = void 0;
 exports.serializeContactRequest = serializeContactRequest;
-const zod_1 = require("zod");
-exports.SerializedContactRequestStatusSchema = zod_1.z.enum([
-    'pending',
-    'approved',
-    'rejected',
-    'expired',
-]);
-exports.SerializedContactRequestSchema = zod_1.z.object({
-    id: zod_1.z.string(),
-    requesterId: zod_1.z.string(),
-    requesterName: zod_1.z.string(),
-    requesterAvatarUrl: zod_1.z.string().nullable(),
-    targetId: zod_1.z.string(),
-    targetName: zod_1.z.string(),
-    targetAvatarUrl: zod_1.z.string().nullable(),
-    targetUserType: zod_1.z.enum(['human', 'ai_agent']),
-    targetOwnerId: zod_1.z.string().nullable().optional(),
-    approverId: zod_1.z.string(),
-    message: zod_1.z.string().nullable(),
-    status: exports.SerializedContactRequestStatusSchema,
-    kind: zod_1.z.enum(['dm', 'group_invite']),
-    groupContext: zod_1.z.object({
-        conversationId: zod_1.z.string(),
-        groupName: zod_1.z.string().nullable(),
-    }).optional(),
-    createdAt: zod_1.z.string().nullable(),
-    resolvedAt: zod_1.z.string().nullable().optional(),
-    expiresAt: zod_1.z.string().nullable().optional(),
-});
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }

package/dist/cjs/diffRedaction.js

@@ -0,0 +1,73 @@
+"use strict";
+// Sensitive-content protection for approval diffs.
+//
+// Approval diffs include PRE-IMAGE context lines and ride on a message readable
+// by every conversation member, so a secret-bearing file would leak existing
+// secrets. The emitting host applies this before sending (it owns the file
+// context); the server (@canonmsg/functions) mirrors the same suppression
+// defensively. Single-sourced here in the zero-dependency backend-contracts
+// leaf so @canonmsg/core (client-side sanitizer) and Functions (server mirror)
+// share one implementation — Functions deliberately does not depend on core.
+//
+// Two deliberately narrow mechanisms so ordinary code diffs stay readable:
+//   1. Path suppression — files whose path screams "secret store" lose their
+//      hunk text entirely; entry/status/counts survive.
+//   2. High-confidence token redaction — prefix-anchored credential shapes
+//      (AWS/GitHub/Slack/Google/OpenAI-style keys, JWTs) are replaced with
+//      `[redacted]` inside remaining hunks. Private-key blocks suppress the
+//      whole file (redacting a PEM body line-by-line is fragile).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PRIVATE_KEY_BLOCK = void 0;
+exports.isSensitiveDiffPath = isSensitiveDiffPath;
+exports.redactSecretTokens = redactSecretTokens;
+const SENSITIVE_DIFF_BASENAME_PATTERNS = [
+    /^\.env(\..+)?$/i,
+    /^\.npmrc$/i,
+    /^\.netrc$/i,
+    /^\.pgpass$/i,
+    /^\.git-credentials$/i,
+    /^\.htpasswd$/i,
+    /\.(pem|key|p12|pfx|keystore|jks|tfvars)$/i,
+    /^id_(rsa|dsa|ecdsa|ed25519)(\..+)?$/i,
+    // Word-bounded so "secrets.json" and "client_secret.yaml" match but
+    // "secretary.ts" does not.
+    /(^|[-_.])(credentials?|secrets?)([-_.]|$)/i,
+    /^serviceaccount.*\.json$/i,
+    /^kubeconfig(\..+)?$/i,
+];
+// Directory components that mark everything beneath them sensitive
+// (~/.ssh/config, .aws/credentials, infra/secrets/db.yaml, …).
+const SENSITIVE_DIFF_SEGMENT_PATTERNS = [
+    /^\.ssh$/i,
+    /^\.aws$/i,
+    /^\.gnupg$/i,
+    /^\.kube$/i,
+    /^secrets?$/i,
+    /^credentials?$/i,
+];
+const SECRET_TOKEN_PATTERNS = [
+    /AKIA[0-9A-Z]{16}/g,
+    /gh[pousr]_[A-Za-z0-9]{36,255}/g,
+    /github_pat_[A-Za-z0-9_]{22,255}/g,
+    /xox[baprs]-[A-Za-z0-9-]{10,250}/g,
+    /AIza[0-9A-Za-z_-]{35}/g,
+    /sk-[A-Za-z0-9_-]{20,250}/g,
+    /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,
+];
+/** Matches the header line of a PEM private-key block. */
+exports.PRIVATE_KEY_BLOCK = /-----BEGIN [A-Z0-9 ]*PRIVATE KEY( BLOCK)?-----/;
+/** True when a diff file path (or rename source) matches the sensitive list. */
+function isSensitiveDiffPath(path) {
+    const segments = path.split('/').filter(Boolean);
+    const basename = segments.pop() ?? path;
+    return SENSITIVE_DIFF_BASENAME_PATTERNS.some((pattern) => pattern.test(basename))
+        || segments.some((segment) => SENSITIVE_DIFF_SEGMENT_PATTERNS.some((pattern) => pattern.test(segment)));
+}
+/** Replace high-confidence credential shapes inside hunk text with `[redacted]`. */
+function redactSecretTokens(text) {
+    let redacted = text;
+    for (const pattern of SECRET_TOKEN_PATTERNS) {
+        redacted = redacted.replace(pattern, '[redacted]');
+    }
+    return redacted;
+}

package/dist/cjs/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./diffRedaction.js"), exports);
 __exportStar(require("./media.js"), exports);
 __exportStar(require("./message.js"), exports);
 __exportStar(require("./runtimeCardFields.js"), exports);
@@ -21,11 +22,3 @@ __exportStar(require("./runtimeCardStorage.js"), exports);
 __exportStar(require("./turnProtocol.js"), exports);
 __exportStar(require("./agentBehaviorPolicy.js"), exports);
 __exportStar(require("./contactRequest.js"), exports);
-__exportStar(require("./sseEvents.js"), exports);
-__exportStar(require("./controlSignals.js"), exports);
-__exportStar(require("./hitl.js"), exports);
-__exportStar(require("./inboundFrame.js"), exports);
-__exportStar(require("./restEndpoints.js"), exports);
-__exportStar(require("./sendContextual.js"), exports);
-__exportStar(require("./bridgeLocal.js"), exports);
-__exportStar(require("./endpointRegistry.js"), exports);

package/dist/cjs/media.js

@@ -1,24 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MediaAttachmentSchema = exports.MediaAttachmentKindSchema = void 0;
 exports.inferMediaAttachmentKind = inferMediaAttachmentKind;
 exports.getStoredFileExtension = getStoredFileExtension;
 exports.normalizeStoredAttachments = normalizeStoredAttachments;
 exports.getMessageAttachments = getMessageAttachments;
 exports.getPrimaryAttachment = getPrimaryAttachment;
 exports.describeAttachment = describeAttachment;
-const zod_1 = require("zod");
-exports.MediaAttachmentKindSchema = zod_1.z.enum(['image', 'audio', 'video', 'file']);
-exports.MediaAttachmentSchema = zod_1.z.object({
-    kind: exports.MediaAttachmentKindSchema,
-    url: zod_1.z.string(),
-    mimeType: zod_1.z.string().optional(),
-    fileName: zod_1.z.string().optional(),
-    sizeBytes: zod_1.z.number().optional(),
-    width: zod_1.z.number().optional(),
-    height: zod_1.z.number().optional(),
-    durationMs: zod_1.z.number().optional(),
-});
 function inferMediaAttachmentKind(mimeType) {
     if (mimeType.startsWith('image/'))
         return 'image';

package/dist/cjs/message.js

@@ -1,72 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SerializeMessageInputSchema = exports.SerializedMessageSchema = exports.SerializedContactCardSchema = exports.SerializedReactionsSchema = exports.ForwardedFromSchema = exports.SerializedContentTypeSchema = exports.SerializedAgentClientTypeSchema = exports.SerializedSenderTypeSchema = void 0;
 exports.serializeStoredMessage = serializeStoredMessage;
-const zod_1 = require("zod");
 const media_js_1 = require("./media.js");
 const runtimeCardStorage_js_1 = require("./runtimeCardStorage.js");
-exports.SerializedSenderTypeSchema = zod_1.z.enum(['human', 'ai_agent']);
-exports.SerializedAgentClientTypeSchema = zod_1.z.enum([
-    'claude-code',
-    'openclaw',
-    'codex',
-    'hermes',
-    'generic',
-]);
-exports.SerializedContentTypeSchema = zod_1.z.enum([
-    'text',
-    'image',
-    'audio',
-    'video',
-    'file',
-    'contact_card',
-]);
-exports.ForwardedFromSchema = zod_1.z.object({
-    sourceConversationId: zod_1.z.string(),
-    messageId: zod_1.z.string(),
-});
-exports.SerializedReactionsSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.array(zod_1.z.string()));
-exports.SerializedContactCardSchema = zod_1.z.object({
-    userId: zod_1.z.string(),
-    canonContactId: zod_1.z.string().optional(),
-    displayName: zod_1.z.string(),
-    avatarUrl: zod_1.z.string().nullable(),
-    userType: exports.SerializedSenderTypeSchema,
-    clientType: exports.SerializedAgentClientTypeSchema.optional(),
-    about: zod_1.z.string().optional(),
-    isActive: zod_1.z.boolean().optional(),
-    ownerId: zod_1.z.string().optional(),
-    ownerName: zod_1.z.string().optional(),
-    lifecycleState: zod_1.z.string().optional(),
-});
-exports.SerializedMessageSchema = zod_1.z.object({
-    id: zod_1.z.string(),
-    senderId: zod_1.z.string(),
-    senderName: zod_1.z.string().optional(),
-    senderType: exports.SerializedSenderTypeSchema,
-    isOwner: zod_1.z.boolean(),
-    contentType: exports.SerializedContentTypeSchema,
-    text: zod_1.z.string().nullable(),
-    attachments: zod_1.z.array(media_js_1.MediaAttachmentSchema),
-    mentions: zod_1.z.array(zod_1.z.string()),
-    replyTo: zod_1.z.string().nullable(),
-    replyToPosition: zod_1.z.number().nullable(),
-    forwarded: zod_1.z.boolean().optional(),
-    forwardedFrom: exports.ForwardedFromSchema.optional(),
-    status: zod_1.z.enum(['sent', 'read']),
-    createdAt: zod_1.z.string(),
-    metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-    contactCard: exports.SerializedContactCardSchema.optional(),
-    /** Durable canon.card.v1 runtime card content, passed through opaquely. */
-    runtimeCard: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
-    reactions: exports.SerializedReactionsSchema.optional(),
-});
-exports.SerializeMessageInputSchema = zod_1.z.object({
-    id: zod_1.z.string(),
-    data: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
-    senderName: zod_1.z.string().optional(),
-    isOwner: zod_1.z.boolean(),
-});
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -125,7 +61,8 @@ function normalizeContentType(value) {
         || value === 'audio'
         || value === 'video'
         || value === 'file'
-        || value === 'contact_card') {
+        || value === 'contact_card'
+        || value === 'interaction') {
         return value;
     }
     throw new Error('Message is missing canonical contentType');
@@ -174,6 +111,41 @@ function normalizeContactCard(value) {
         card.lifecycleState = value.lifecycleState;
     return card;
 }
+const INTERACTION_KINDS = [
+    'contact', 'approval', 'input', 'plan', 'card',
+];
+function normalizeInteraction(value) {
+    if (!isRecord(value))
+        return undefined;
+    if (!INTERACTION_KINDS.includes(value.kind))
+        return undefined;
+    if (typeof value.requestId !== 'string' || value.requestId.length === 0)
+        return undefined;
+    const envelope = {
+        kind: value.kind,
+        requestId: value.requestId,
+        interactive: value.interactive === true,
+    };
+    if (typeof value.responseUserId === 'string')
+        envelope.responseUserId = value.responseUserId;
+    if (typeof value.expiresAt === 'string')
+        envelope.expiresAt = value.expiresAt;
+    if (typeof value.schemaVersion === 'string')
+        envelope.schemaVersion = value.schemaVersion;
+    if (isRecord(value.preview)) {
+        const preview = {};
+        if (typeof value.preview.title === 'string')
+            preview.title = value.preview.title;
+        if (Array.isArray(value.preview.blockKinds)) {
+            preview.blockKinds = value.preview.blockKinds.filter((entry) => typeof entry === 'string');
+        }
+        envelope.preview = preview;
+    }
+    if (isRecord(value.response)) {
+        envelope.response = value.response;
+    }
+    return envelope;
+}
 function serializeStoredMessage(input) {
     const { data } = input;
     const attachments = data.attachments === undefined
@@ -217,6 +189,13 @@ function serializeStoredMessage(input) {
     if (runtimeCard) {
         result.runtimeCard = runtimeCard;
     }
+    const interaction = normalizeInteraction(data.interaction);
+    if (interaction) {
+        result.interaction = interaction;
+    }
+    if (typeof data.body === 'string') {
+        result.body = data.body;
+    }
     const reactions = normalizeReactions(data.reactions);
     if (reactions) {
         result.reactions = reactions;

package/dist/cjs/runtimeCardFields.js

@@ -1,20 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RuntimeCardFieldSchema = exports.RuntimeCardLineItemColumnSchema = exports.RuntimeCardLineItemColumnTypeSchema = exports.RuntimeCardFieldChoiceSchema = exports.RUNTIME_CARD_LIMITS = exports.RuntimeCardFieldTypeSchema = void 0;
+exports.RUNTIME_CARD_LIMITS = void 0;
 exports.validateRuntimeCardFieldValues = validateRuntimeCardFieldValues;
-const zod_1 = require("zod");
-exports.RuntimeCardFieldTypeSchema = zod_1.z.enum([
-    'text',
-    'textarea',
-    'select',
-    'multiSelect',
-    'boolean',
-    'date',
-    'number',
-    'currency',
-    'searchSelect',
-    'lineItems',
-]);
 /**
  * Caps shared across runtime-card normalizers, response validation, and
  * authoring tools. Keep these backend-safe so Functions can import them.
@@ -25,50 +12,6 @@ exports.RUNTIME_CARD_LIMITS = {
     lineItemColumns: 8,
     searchSelectChoices: 100,
 };
-exports.RuntimeCardFieldChoiceSchema = zod_1.z.object({
-    label: zod_1.z.string(),
-    value: zod_1.z.string().optional(),
-    description: zod_1.z.string().optional(),
-    preview: zod_1.z.string().optional(),
-});
-exports.RuntimeCardLineItemColumnTypeSchema = zod_1.z.enum([
-    'text',
-    'number',
-    'currency',
-    'date',
-    'select',
-]);
-exports.RuntimeCardLineItemColumnSchema = zod_1.z.object({
-    id: zod_1.z.string(),
-    label: zod_1.z.string(),
-    type: exports.RuntimeCardLineItemColumnTypeSchema,
-    required: zod_1.z.boolean().optional(),
-    choices: zod_1.z.array(exports.RuntimeCardFieldChoiceSchema).optional(),
-    min: zod_1.z.number().optional(),
-    max: zod_1.z.number().optional(),
-    step: zod_1.z.number().optional(),
-    precision: zod_1.z.number().optional(),
-    currencyCode: zod_1.z.string().optional(),
-    allowOther: zod_1.z.boolean().optional(),
-});
-exports.RuntimeCardFieldSchema = zod_1.z.object({
-    id: zod_1.z.string(),
-    label: zod_1.z.string(),
-    type: exports.RuntimeCardFieldTypeSchema,
-    required: zod_1.z.boolean().optional(),
-    placeholder: zod_1.z.string().optional(),
-    choices: zod_1.z.array(exports.RuntimeCardFieldChoiceSchema).optional(),
-    allowOther: zod_1.z.boolean().optional(),
-    sensitive: zod_1.z.boolean().optional(),
-    min: zod_1.z.union([zod_1.z.number(), zod_1.z.string()]).optional(),
-    max: zod_1.z.union([zod_1.z.number(), zod_1.z.string()]).optional(),
-    step: zod_1.z.number().optional(),
-    precision: zod_1.z.number().optional(),
-    currencyCode: zod_1.z.string().optional(),
-    columns: zod_1.z.array(exports.RuntimeCardLineItemColumnSchema).optional(),
-    minRows: zod_1.z.number().optional(),
-    maxRows: zod_1.z.number().optional(),
-});
 const ISO_DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);