@canonmsg/backend-contracts 1.9.0 → 2.1.0

package/dist/cjs/turnProtocol.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WAITING_INPUT_STALE_THRESHOLD_MS = exports.ACTIVE_TURN_STALE_THRESHOLD_MS = exports.TurnStateLikeSchema = exports.TriggerDecisionSchema = exports.TurnMetadataSchema = exports.InboundDispositionSchema = exports.DeliveryIntentSchema = exports.TurnMessageSemanticsSchema = exports.TurnLifecycleStateSchema = exports.SenderTypeSchema = void 0;
+exports.WAITING_INPUT_STALE_THRESHOLD_MS = exports.ACTIVE_TURN_STALE_THRESHOLD_MS = void 0;
 exports.normalizeTurnMetadata = normalizeTurnMetadata;
 exports.isTurnOpen = isTurnOpen;
 exports.getTurnStateStaleThresholdMs = getTurnStateStaleThresholdMs;
@@ -9,46 +9,6 @@ exports.resolveTurnMessageSemantics = resolveTurnMessageSemantics;
 exports.shouldPromoteConversationMessage = shouldPromoteConversationMessage;
 exports.shouldTriggerAgentTurn = shouldTriggerAgentTurn;
 exports.normalizeRuntimeTurnState = normalizeRuntimeTurnState;
-const zod_1 = require("zod");
-exports.SenderTypeSchema = zod_1.z.enum(['human', 'ai_agent']);
-exports.TurnLifecycleStateSchema = zod_1.z.enum([
-    'idle',
-    'thinking',
-    'streaming',
-    'tool',
-    'waiting_input',
-    'completed',
-    'interrupted',
-]);
-exports.TurnMessageSemanticsSchema = zod_1.z.enum(['progress', 'turn_complete', 'control']);
-exports.DeliveryIntentSchema = zod_1.z.enum(['queue', 'interrupt', 'interleave', 'stop']);
-exports.InboundDispositionSchema = zod_1.z.enum([
-    'queued',
-    'accepted_now',
-    'interleaved',
-    'trigger_suppressed',
-    'rejected',
-    'cancelled',
-]);
-exports.TurnMetadataSchema = zod_1.z.object({
-    turnId: zod_1.z.string().nullable().optional(),
-    turnSemantics: exports.TurnMessageSemanticsSchema.optional(),
-    deliveryIntent: exports.DeliveryIntentSchema.optional(),
-    replyBehavior: zod_1.z.enum(['allow_auto_reply', 'suppress_auto_reply']).optional(),
-    inboundDisposition: exports.InboundDispositionSchema.optional(),
-    requestedTurnMode: zod_1.z.string().optional(),
-});
-exports.TriggerDecisionSchema = zod_1.z.object({
-    allow: zod_1.z.boolean(),
-    semantics: exports.TurnMessageSemanticsSchema,
-    reason: zod_1.z.string(),
-});
-exports.TurnStateLikeSchema = zod_1.z.object({
-    state: exports.TurnLifecycleStateSchema,
-    openedAt: zod_1.z.number().optional(),
-    updatedAt: zod_1.z.number().optional(),
-    turnUpdatedAt: zod_1.z.number().nullable().optional(),
-});
 exports.ACTIVE_TURN_STALE_THRESHOLD_MS = 30 * 60 * 1000;
 exports.WAITING_INPUT_STALE_THRESHOLD_MS = 12 * 60 * 60 * 1000;
 const TURN_SEMANTICS = [

package/dist/contactRequest.d.ts

@@ -1,43 +1,24 @@
-import { z } from 'zod';
-export declare const SerializedContactRequestStatusSchema: z.ZodEnum<{
-    rejected: "rejected";
-    pending: "pending";
-    approved: "approved";
-    expired: "expired";
-}>;
-export type SerializedContactRequestStatus = z.infer<typeof SerializedContactRequestStatusSchema>;
-export declare const SerializedContactRequestSchema: z.ZodObject<{
-    id: z.ZodString;
-    requesterId: z.ZodString;
-    requesterName: z.ZodString;
-    requesterAvatarUrl: z.ZodNullable<z.ZodString>;
-    targetId: z.ZodString;
-    targetName: z.ZodString;
-    targetAvatarUrl: z.ZodNullable<z.ZodString>;
-    targetUserType: z.ZodEnum<{
-        human: "human";
-        ai_agent: "ai_agent";
-    }>;
-    targetOwnerId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    approverId: z.ZodString;
-    message: z.ZodNullable<z.ZodString>;
-    status: z.ZodEnum<{
-        rejected: "rejected";
-        pending: "pending";
-        approved: "approved";
-        expired: "expired";
-    }>;
-    kind: z.ZodEnum<{
-        dm: "dm";
-        group_invite: "group_invite";
-    }>;
-    groupContext: z.ZodOptional<z.ZodObject<{
-        conversationId: z.ZodString;
-        groupName: z.ZodNullable<z.ZodString>;
-    }, z.core.$strip>>;
-    createdAt: z.ZodNullable<z.ZodString>;
-    resolvedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-}, z.core.$strip>;
-export type SerializedContactRequest = z.infer<typeof SerializedContactRequestSchema>;
+export type SerializedContactRequestStatus = 'pending' | 'approved' | 'rejected' | 'expired';
+export interface SerializedContactRequest {
+    id: string;
+    requesterId: string;
+    requesterName: string;
+    requesterAvatarUrl: string | null;
+    targetId: string;
+    targetName: string;
+    targetAvatarUrl: string | null;
+    targetUserType: 'human' | 'ai_agent';
+    targetOwnerId?: string | null;
+    approverId: string;
+    message: string | null;
+    status: SerializedContactRequestStatus;
+    kind: 'dm' | 'group_invite';
+    groupContext?: {
+        conversationId: string;
+        groupName: string | null;
+    };
+    createdAt: string | null;
+    resolvedAt?: string | null;
+    expiresAt?: string | null;
+}
 export declare function serializeContactRequest(requestId: string, data: Record<string, unknown>): SerializedContactRequest | null;

package/dist/contactRequest.js

@@ -1,32 +1,3 @@
-import { z } from 'zod';
-export const SerializedContactRequestStatusSchema = z.enum([
-    'pending',
-    'approved',
-    'rejected',
-    'expired',
-]);
-export const SerializedContactRequestSchema = z.object({
-    id: z.string(),
-    requesterId: z.string(),
-    requesterName: z.string(),
-    requesterAvatarUrl: z.string().nullable(),
-    targetId: z.string(),
-    targetName: z.string(),
-    targetAvatarUrl: z.string().nullable(),
-    targetUserType: z.enum(['human', 'ai_agent']),
-    targetOwnerId: z.string().nullable().optional(),
-    approverId: z.string(),
-    message: z.string().nullable(),
-    status: SerializedContactRequestStatusSchema,
-    kind: z.enum(['dm', 'group_invite']),
-    groupContext: z.object({
-        conversationId: z.string(),
-        groupName: z.string().nullable(),
-    }).optional(),
-    createdAt: z.string().nullable(),
-    resolvedAt: z.string().nullable().optional(),
-    expiresAt: z.string().nullable().optional(),
-});
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }

package/dist/diffRedaction.d.ts

@@ -0,0 +1,6 @@
+/** Matches the header line of a PEM private-key block. */
+export declare const PRIVATE_KEY_BLOCK: RegExp;
+/** True when a diff file path (or rename source) matches the sensitive list. */
+export declare function isSensitiveDiffPath(path: string): boolean;
+/** Replace high-confidence credential shapes inside hunk text with `[redacted]`. */
+export declare function redactSecretTokens(text: string): string;

package/dist/diffRedaction.js

@@ -0,0 +1,68 @@
+// Sensitive-content protection for approval diffs.
+//
+// Approval diffs include PRE-IMAGE context lines and ride on a message readable
+// by every conversation member, so a secret-bearing file would leak existing
+// secrets. The emitting host applies this before sending (it owns the file
+// context); the server (@canonmsg/functions) mirrors the same suppression
+// defensively. Single-sourced here in the zero-dependency backend-contracts
+// leaf so @canonmsg/core (client-side sanitizer) and Functions (server mirror)
+// share one implementation — Functions deliberately does not depend on core.
+//
+// Two deliberately narrow mechanisms so ordinary code diffs stay readable:
+//   1. Path suppression — files whose path screams "secret store" lose their
+//      hunk text entirely; entry/status/counts survive.
+//   2. High-confidence token redaction — prefix-anchored credential shapes
+//      (AWS/GitHub/Slack/Google/OpenAI-style keys, JWTs) are replaced with
+//      `[redacted]` inside remaining hunks. Private-key blocks suppress the
+//      whole file (redacting a PEM body line-by-line is fragile).
+const SENSITIVE_DIFF_BASENAME_PATTERNS = [
+    /^\.env(\..+)?$/i,
+    /^\.npmrc$/i,
+    /^\.netrc$/i,
+    /^\.pgpass$/i,
+    /^\.git-credentials$/i,
+    /^\.htpasswd$/i,
+    /\.(pem|key|p12|pfx|keystore|jks|tfvars)$/i,
+    /^id_(rsa|dsa|ecdsa|ed25519)(\..+)?$/i,
+    // Word-bounded so "secrets.json" and "client_secret.yaml" match but
+    // "secretary.ts" does not.
+    /(^|[-_.])(credentials?|secrets?)([-_.]|$)/i,
+    /^serviceaccount.*\.json$/i,
+    /^kubeconfig(\..+)?$/i,
+];
+// Directory components that mark everything beneath them sensitive
+// (~/.ssh/config, .aws/credentials, infra/secrets/db.yaml, …).
+const SENSITIVE_DIFF_SEGMENT_PATTERNS = [
+    /^\.ssh$/i,
+    /^\.aws$/i,
+    /^\.gnupg$/i,
+    /^\.kube$/i,
+    /^secrets?$/i,
+    /^credentials?$/i,
+];
+const SECRET_TOKEN_PATTERNS = [
+    /AKIA[0-9A-Z]{16}/g,
+    /gh[pousr]_[A-Za-z0-9]{36,255}/g,
+    /github_pat_[A-Za-z0-9_]{22,255}/g,
+    /xox[baprs]-[A-Za-z0-9-]{10,250}/g,
+    /AIza[0-9A-Za-z_-]{35}/g,
+    /sk-[A-Za-z0-9_-]{20,250}/g,
+    /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,
+];
+/** Matches the header line of a PEM private-key block. */
+export const PRIVATE_KEY_BLOCK = /-----BEGIN [A-Z0-9 ]*PRIVATE KEY( BLOCK)?-----/;
+/** True when a diff file path (or rename source) matches the sensitive list. */
+export function isSensitiveDiffPath(path) {
+    const segments = path.split('/').filter(Boolean);
+    const basename = segments.pop() ?? path;
+    return SENSITIVE_DIFF_BASENAME_PATTERNS.some((pattern) => pattern.test(basename))
+        || segments.some((segment) => SENSITIVE_DIFF_SEGMENT_PATTERNS.some((pattern) => pattern.test(segment)));
+}
+/** Replace high-confidence credential shapes inside hunk text with `[redacted]`. */
+export function redactSecretTokens(text) {
+    let redacted = text;
+    for (const pattern of SECRET_TOKEN_PATTERNS) {
+        redacted = redacted.replace(pattern, '[redacted]');
+    }
+    return redacted;
+}

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export * from './diffRedaction.js';
 export * from './media.js';
 export * from './message.js';
 export * from './runtimeCardFields.js';
@@ -5,11 +6,3 @@ export * from './runtimeCardStorage.js';
 export * from './turnProtocol.js';
 export * from './agentBehaviorPolicy.js';
 export * from './contactRequest.js';
-export * from './sseEvents.js';
-export * from './controlSignals.js';
-export * from './hitl.js';
-export * from './inboundFrame.js';
-export * from './restEndpoints.js';
-export * from './sendContextual.js';
-export * from './bridgeLocal.js';
-export * from './endpointRegistry.js';

package/dist/index.js

@@ -1,3 +1,4 @@
+export * from './diffRedaction.js';
 export * from './media.js';
 export * from './message.js';
 export * from './runtimeCardFields.js';
@@ -5,11 +6,3 @@ export * from './runtimeCardStorage.js';
 export * from './turnProtocol.js';
 export * from './agentBehaviorPolicy.js';
 export * from './contactRequest.js';
-export * from './sseEvents.js';
-export * from './controlSignals.js';
-export * from './hitl.js';
-export * from './inboundFrame.js';
-export * from './restEndpoints.js';
-export * from './sendContextual.js';
-export * from './bridgeLocal.js';
-export * from './endpointRegistry.js';

package/dist/media.d.ts

@@ -1,27 +1,14 @@
-import { z } from 'zod';
-export declare const MediaAttachmentKindSchema: z.ZodEnum<{
-    file: "file";
-    image: "image";
-    audio: "audio";
-    video: "video";
-}>;
-export type MediaAttachmentKind = z.infer<typeof MediaAttachmentKindSchema>;
-export declare const MediaAttachmentSchema: z.ZodObject<{
-    kind: z.ZodEnum<{
-        file: "file";
-        image: "image";
-        audio: "audio";
-        video: "video";
-    }>;
-    url: z.ZodString;
-    mimeType: z.ZodOptional<z.ZodString>;
-    fileName: z.ZodOptional<z.ZodString>;
-    sizeBytes: z.ZodOptional<z.ZodNumber>;
-    width: z.ZodOptional<z.ZodNumber>;
-    height: z.ZodOptional<z.ZodNumber>;
-    durationMs: z.ZodOptional<z.ZodNumber>;
-}, z.core.$strip>;
-export type MediaAttachment = z.infer<typeof MediaAttachmentSchema>;
+export type MediaAttachmentKind = 'image' | 'audio' | 'video' | 'file';
+export interface MediaAttachment {
+    kind: MediaAttachmentKind;
+    url: string;
+    mimeType?: string;
+    fileName?: string;
+    sizeBytes?: number;
+    width?: number;
+    height?: number;
+    durationMs?: number;
+}
 export declare function inferMediaAttachmentKind(mimeType: string): MediaAttachmentKind;
 export declare function getStoredFileExtension(input: {
     mimeType?: string | null;

package/dist/media.js

@@ -1,15 +1,3 @@
-import { z } from 'zod';
-export const MediaAttachmentKindSchema = z.enum(['image', 'audio', 'video', 'file']);
-export const MediaAttachmentSchema = z.object({
-    kind: MediaAttachmentKindSchema,
-    url: z.string(),
-    mimeType: z.string().optional(),
-    fileName: z.string().optional(),
-    sizeBytes: z.number().optional(),
-    width: z.number().optional(),
-    height: z.number().optional(),
-    durationMs: z.number().optional(),
-});
 export function inferMediaAttachmentKind(mimeType) {
     if (mimeType.startsWith('image/'))
         return 'image';

package/dist/message.d.ts

@@ -1,134 +1,81 @@
-import { z } from 'zod';
-export declare const SerializedSenderTypeSchema: z.ZodEnum<{
-    human: "human";
-    ai_agent: "ai_agent";
-}>;
-export type SerializedSenderType = z.infer<typeof SerializedSenderTypeSchema>;
-export declare const SerializedAgentClientTypeSchema: z.ZodEnum<{
-    "claude-code": "claude-code";
-    openclaw: "openclaw";
-    codex: "codex";
-    hermes: "hermes";
-    generic: "generic";
-}>;
-export type SerializedAgentClientType = z.infer<typeof SerializedAgentClientTypeSchema>;
-export declare const SerializedContentTypeSchema: z.ZodEnum<{
-    file: "file";
-    image: "image";
-    audio: "audio";
-    video: "video";
-    text: "text";
-    contact_card: "contact_card";
-}>;
-export type SerializedContentType = z.infer<typeof SerializedContentTypeSchema>;
-export declare const ForwardedFromSchema: z.ZodObject<{
-    sourceConversationId: z.ZodString;
-    messageId: z.ZodString;
-}, z.core.$strip>;
-export type ForwardedFrom = z.infer<typeof ForwardedFromSchema>;
-export declare const SerializedReactionsSchema: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>;
-export type SerializedReactions = z.infer<typeof SerializedReactionsSchema>;
-export declare const SerializedContactCardSchema: z.ZodObject<{
-    userId: z.ZodString;
-    canonContactId: z.ZodOptional<z.ZodString>;
-    displayName: z.ZodString;
-    avatarUrl: z.ZodNullable<z.ZodString>;
-    userType: z.ZodEnum<{
-        human: "human";
-        ai_agent: "ai_agent";
-    }>;
-    clientType: z.ZodOptional<z.ZodEnum<{
-        "claude-code": "claude-code";
-        openclaw: "openclaw";
-        codex: "codex";
-        hermes: "hermes";
-        generic: "generic";
-    }>>;
-    about: z.ZodOptional<z.ZodString>;
-    isActive: z.ZodOptional<z.ZodBoolean>;
-    ownerId: z.ZodOptional<z.ZodString>;
-    ownerName: z.ZodOptional<z.ZodString>;
-    lifecycleState: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export type SerializedContactCard = z.infer<typeof SerializedContactCardSchema>;
-export declare const SerializedMessageSchema: z.ZodObject<{
-    id: z.ZodString;
-    senderId: z.ZodString;
-    senderName: z.ZodOptional<z.ZodString>;
-    senderType: z.ZodEnum<{
-        human: "human";
-        ai_agent: "ai_agent";
-    }>;
-    isOwner: z.ZodBoolean;
-    contentType: z.ZodEnum<{
-        file: "file";
-        image: "image";
-        audio: "audio";
-        video: "video";
-        text: "text";
-        contact_card: "contact_card";
-    }>;
-    text: z.ZodNullable<z.ZodString>;
-    attachments: z.ZodArray<z.ZodObject<{
-        kind: z.ZodEnum<{
-            file: "file";
-            image: "image";
-            audio: "audio";
-            video: "video";
+import { MediaAttachment } from './media.js';
+export type SerializedSenderType = 'human' | 'ai_agent';
+export type SerializedAgentClientType = 'claude-code' | 'openclaw' | 'codex' | 'hermes' | 'generic';
+export type SerializedContentType = 'text' | 'image' | 'audio' | 'video' | 'file' | 'contact_card' | 'interaction';
+export interface ForwardedFrom {
+    sourceConversationId: string;
+    messageId: string;
+}
+export type SerializedReactions = Record<string, string[]>;
+export interface SerializedContactCard {
+    userId: string;
+    canonContactId?: string;
+    displayName: string;
+    avatarUrl: string | null;
+    userType: SerializedSenderType;
+    clientType?: SerializedAgentClientType;
+    about?: string;
+    isActive?: boolean;
+    ownerId?: string;
+    ownerName?: string;
+    lifecycleState?: string;
+}
+export interface SerializedMessage {
+    id: string;
+    senderId: string;
+    senderName?: string;
+    senderType: SerializedSenderType;
+    isOwner: boolean;
+    contentType: SerializedContentType;
+    text: string | null;
+    attachments: MediaAttachment[];
+    mentions: string[];
+    replyTo: string | null;
+    replyToPosition: number | null;
+    forwarded?: boolean;
+    forwardedFrom?: ForwardedFrom;
+    status: 'sent' | 'read';
+    createdAt: string;
+    metadata?: Record<string, unknown>;
+    contactCard?: SerializedContactCard;
+    /** Durable canon.card.v1 runtime card content, passed through opaquely. */
+    runtimeCard?: Record<string, unknown>;
+    /**
+     * Plaintext, server-authorized interaction envelope for `contentType:
+     * 'interaction'` messages (card / input / approval / plan / contact). The
+     * authorization contract (`response`) and preview live here; the opaque
+     * request payload rides in `body`.
+     */
+    interaction?: SerializedInteraction;
+    /** Opaque interaction payload (JSON string or ciphertext); never parsed here. */
+    body?: string;
+    reactions?: SerializedReactions;
+}
+export type SerializedInteractionKind = 'contact' | 'approval' | 'input' | 'plan' | 'card';
+export interface SerializedInteraction {
+    kind: SerializedInteractionKind;
+    requestId: string;
+    interactive: boolean;
+    responseUserId?: string;
+    expiresAt?: string;
+    schemaVersion?: string;
+    preview?: {
+        title?: string;
+        blockKinds?: string[];
+    };
+    response?: {
+        actionIds?: string[];
+        actionFields?: Record<string, unknown>;
+        questions?: Array<{
+            id: string;
+            sensitive?: boolean;
         }>;
-        url: z.ZodString;
-        mimeType: z.ZodOptional<z.ZodString>;
-        fileName: z.ZodOptional<z.ZodString>;
-        sizeBytes: z.ZodOptional<z.ZodNumber>;
-        width: z.ZodOptional<z.ZodNumber>;
-        height: z.ZodOptional<z.ZodNumber>;
-        durationMs: z.ZodOptional<z.ZodNumber>;
-    }, z.core.$strip>>;
-    mentions: z.ZodArray<z.ZodString>;
-    replyTo: z.ZodNullable<z.ZodString>;
-    replyToPosition: z.ZodNullable<z.ZodNumber>;
-    forwarded: z.ZodOptional<z.ZodBoolean>;
-    forwardedFrom: z.ZodOptional<z.ZodObject<{
-        sourceConversationId: z.ZodString;
-        messageId: z.ZodString;
-    }, z.core.$strip>>;
-    status: z.ZodEnum<{
-        sent: "sent";
-        read: "read";
-    }>;
-    createdAt: z.ZodString;
-    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    contactCard: z.ZodOptional<z.ZodObject<{
-        userId: z.ZodString;
-        canonContactId: z.ZodOptional<z.ZodString>;
-        displayName: z.ZodString;
-        avatarUrl: z.ZodNullable<z.ZodString>;
-        userType: z.ZodEnum<{
-            human: "human";
-            ai_agent: "ai_agent";
-        }>;
-        clientType: z.ZodOptional<z.ZodEnum<{
-            "claude-code": "claude-code";
-            openclaw: "openclaw";
-            codex: "codex";
-            hermes: "hermes";
-            generic: "generic";
-        }>>;
-        about: z.ZodOptional<z.ZodString>;
-        isActive: z.ZodOptional<z.ZodBoolean>;
-        ownerId: z.ZodOptional<z.ZodString>;
-        ownerName: z.ZodOptional<z.ZodString>;
-        lifecycleState: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-    runtimeCard: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    reactions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
-}, z.core.$strip>;
-export type SerializedMessage = z.infer<typeof SerializedMessageSchema>;
-export declare const SerializeMessageInputSchema: z.ZodObject<{
-    id: z.ZodString;
-    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-    senderName: z.ZodOptional<z.ZodString>;
-    isOwner: z.ZodBoolean;
-}, z.core.$strip>;
-export type SerializeMessageInput = z.infer<typeof SerializeMessageInputSchema>;
+    };
+}
+export interface SerializeMessageInput {
+    id: string;
+    data: Record<string, unknown>;
+    senderName?: string;
+    isOwner: boolean;
+}
 export declare function serializeStoredMessage(input: SerializeMessageInput): SerializedMessage;