@canonmsg/backend-contracts 2.2.0 → 2.3.0

package/dist/canon-verbs.schema.json

@@ -667,7 +667,7 @@
         "expiresAt": {
           "type": "integer",
           "minimum": 0,
-          "description": "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (and /runtime-input/request also requires kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
+          "description": "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (input interactions also require input subtype kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
         }
       }
     },
@@ -836,7 +836,7 @@
         "expiresAt": {
           "type": "integer",
           "minimum": 0,
-          "description": "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (and /runtime-input/request also requires kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
+          "description": "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (input interactions also require input subtype kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
         }
       }
     },
@@ -951,7 +951,7 @@
       }
     },
     "check_approval_result": {
-      "description": "'unknown' is NOT a denial — only 'resolved' carries a decision. Canonical statuses map from the /runtime-approval/consume wire as: allow/deny -> resolved.decision, timeout -> expired, pending -> pending, HTTP 404 RUNTIME_APPROVAL_NOT_FOUND -> unknown.",
+      "description": "'unknown' is NOT a denial — only 'resolved' carries a decision. Canonical statuses map from the approval interaction consume result as: allow/deny -> resolved.decision, timeout -> expired, pending -> pending, HTTP 404 RUNTIME_APPROVAL_NOT_FOUND -> unknown.",
       "oneOf": [
         {
           "type": "object",
@@ -1108,7 +1108,7 @@
         "expiresAt": {
           "type": "integer",
           "minimum": 0,
-          "description": "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (and /runtime-input/request also requires kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
+          "description": "Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline (input interactions also require input subtype kind): bindings must fill defaults and convert timeoutMs into expiresAt before calling the endpoint."
         }
       }
     },

package/dist/cjs/contactRequest.js

@@ -74,7 +74,10 @@ function serializeContactRequest(requestId, data) {
         targetAvatarUrl: typeof data.targetAvatarUrl === 'string' ? data.targetAvatarUrl : null,
         targetUserType: data.targetUserType,
         approverId: data.approverId,
-        message: typeof data.message === 'string' ? data.message : null,
+        // Free-form request content is owner-review material. This shared DTO is
+        // delivered to the target agent over REST/SSE, so it must never cross the
+        // admission boundary before the human approver accepts the reach-out.
+        message: null,
         status: normalizeStatus(data.status),
         kind: kindValue,
         createdAt: normalizeTimestamp(data.createdAt),

package/dist/cjs/environment.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CANON_ENVIRONMENT_CONTRACTS = void 0;
+exports.getCanonEnvironmentContract = getCanonEnvironmentContract;
+exports.CANON_ENVIRONMENT_CONTRACTS = Object.freeze({
+    'canon-dev-v1': Object.freeze({
+        name: 'dev',
+        projectId: 'canonmail-dev',
+        region: 'europe-west1',
+    }),
+    'canon-prod-v1': Object.freeze({
+        name: 'prod',
+        projectId: 'canonmail-prod',
+        region: 'europe-west1',
+    }),
+    'canon-legacy-v1': Object.freeze({
+        name: 'legacy',
+        projectId: 'project-007a8e71-ba01-49e6-8aa',
+        region: 'us-central1',
+    }),
+});
+function getCanonEnvironmentContract(value) {
+    const environmentId = value.trim();
+    const contract = exports.CANON_ENVIRONMENT_CONTRACTS[environmentId];
+    if (!contract) {
+        throw new Error(`Unsupported Canon environment ID: ${value}`);
+    }
+    return Object.freeze({ environmentId, ...contract });
+}

package/dist/cjs/index.js

@@ -15,6 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./diffRedaction.js"), exports);
+__exportStar(require("./environment.js"), exports);
 __exportStar(require("./media.js"), exports);
 __exportStar(require("./message.js"), exports);
 __exportStar(require("./runtimeCardFields.js"), exports);

package/dist/cjs/verbSchemas.js

@@ -270,7 +270,7 @@ const timeoutFields = (maxMs, ceilingNote) => ({
         type: 'integer',
         minimum: 0,
         description: 'Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline '
-            + '(and /runtime-input/request also requires kind): bindings must fill defaults '
+            + '(input interactions also require input subtype kind): bindings must fill defaults '
             + 'and convert timeoutMs into expiresAt before calling the endpoint.',
     },
 });
@@ -544,7 +544,7 @@ const check_approval_input = {
 };
 const check_approval_result = {
     description: "'unknown' is NOT a denial — only 'resolved' carries a decision. Canonical statuses map "
-        + 'from the /runtime-approval/consume wire as: allow/deny -> resolved.decision, timeout -> '
+        + 'from the approval interaction consume result as: allow/deny -> resolved.decision, timeout -> '
         + 'expired, pending -> pending, HTTP 404 RUNTIME_APPROVAL_NOT_FOUND -> unknown.',
     oneOf: [
         {

package/dist/contactRequest.d.ts

@@ -10,6 +10,7 @@ export interface SerializedContactRequest {
     targetUserType: 'human' | 'ai_agent';
     targetOwnerId?: string | null;
     approverId: string;
+    /** Always null on agent-facing DTOs; free-form content stays in authorized review storage. */
     message: string | null;
     status: SerializedContactRequestStatus;
     kind: 'dm' | 'group_invite';

package/dist/contactRequest.js

@@ -71,7 +71,10 @@ export function serializeContactRequest(requestId, data) {
         targetAvatarUrl: typeof data.targetAvatarUrl === 'string' ? data.targetAvatarUrl : null,
         targetUserType: data.targetUserType,
         approverId: data.approverId,
-        message: typeof data.message === 'string' ? data.message : null,
+        // Free-form request content is owner-review material. This shared DTO is
+        // delivered to the target agent over REST/SSE, so it must never cross the
+        // admission boundary before the human approver accepts the reach-out.
+        message: null,
         status: normalizeStatus(data.status),
         kind: kindValue,
         createdAt: normalizeTimestamp(data.createdAt),

package/dist/environment.d.ts

@@ -0,0 +1,25 @@
+export declare const CANON_ENVIRONMENT_CONTRACTS: Readonly<{
+    readonly 'canon-dev-v1': Readonly<{
+        name: "dev";
+        projectId: "canonmail-dev";
+        region: "europe-west1";
+    }>;
+    readonly 'canon-prod-v1': Readonly<{
+        name: "prod";
+        projectId: "canonmail-prod";
+        region: "europe-west1";
+    }>;
+    readonly 'canon-legacy-v1': Readonly<{
+        name: "legacy";
+        projectId: "project-007a8e71-ba01-49e6-8aa";
+        region: "us-central1";
+    }>;
+}>;
+export type CanonEnvironmentId = keyof typeof CANON_ENVIRONMENT_CONTRACTS;
+export type CanonEnvironmentName = (typeof CANON_ENVIRONMENT_CONTRACTS)[CanonEnvironmentId]['name'];
+export type CanonEnvironmentContract = {
+    [EnvironmentId in CanonEnvironmentId]: {
+        environmentId: EnvironmentId;
+    } & (typeof CANON_ENVIRONMENT_CONTRACTS)[EnvironmentId];
+}[CanonEnvironmentId];
+export declare function getCanonEnvironmentContract(value: string): CanonEnvironmentContract;

package/dist/environment.js

@@ -0,0 +1,25 @@
+export const CANON_ENVIRONMENT_CONTRACTS = Object.freeze({
+    'canon-dev-v1': Object.freeze({
+        name: 'dev',
+        projectId: 'canonmail-dev',
+        region: 'europe-west1',
+    }),
+    'canon-prod-v1': Object.freeze({
+        name: 'prod',
+        projectId: 'canonmail-prod',
+        region: 'europe-west1',
+    }),
+    'canon-legacy-v1': Object.freeze({
+        name: 'legacy',
+        projectId: 'project-007a8e71-ba01-49e6-8aa',
+        region: 'us-central1',
+    }),
+});
+export function getCanonEnvironmentContract(value) {
+    const environmentId = value.trim();
+    const contract = CANON_ENVIRONMENT_CONTRACTS[environmentId];
+    if (!contract) {
+        throw new Error(`Unsupported Canon environment ID: ${value}`);
+    }
+    return Object.freeze({ environmentId, ...contract });
+}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from './diffRedaction.js';
+export * from './environment.js';
 export * from './media.js';
 export * from './message.js';
 export * from './runtimeCardFields.js';

package/dist/index.js

@@ -1,4 +1,5 @@
 export * from './diffRedaction.js';
+export * from './environment.js';
 export * from './media.js';
 export * from './message.js';
 export * from './runtimeCardFields.js';

package/dist/verbSchemas.js

@@ -265,7 +265,7 @@ const timeoutFields = (maxMs, ceilingNote) => ({
         type: 'integer',
         minimum: 0,
         description: 'Absolute epoch-ms deadline. The REST interaction creators REQUIRE a deadline '
-            + '(and /runtime-input/request also requires kind): bindings must fill defaults '
+            + '(input interactions also require input subtype kind): bindings must fill defaults '
             + 'and convert timeoutMs into expiresAt before calling the endpoint.',
     },
 });
@@ -539,7 +539,7 @@ const check_approval_input = {
 };
 const check_approval_result = {
     description: "'unknown' is NOT a denial — only 'resolved' carries a decision. Canonical statuses map "
-        + 'from the /runtime-approval/consume wire as: allow/deny -> resolved.decision, timeout -> '
+        + 'from the approval interaction consume result as: allow/deny -> resolved.decision, timeout -> '
         + 'expired, pending -> pending, HTTP 404 RUNTIME_APPROVAL_NOT_FOUND -> unknown.',
     oneOf: [
         {

package/dist/verbWire.d.ts

@@ -54,7 +54,7 @@ export interface VerbWireTurn {
  * plaintext for routing + mention-piercing pushes (D3); `contactUserId` on
  * share_contact reveals who was shared (explicitly accepted for v1);
  * `sessionConfig` may carry workspace ids — borderline, revisit with the
- * session-state encryption decision.
+ * session-configuration encryption decision.
  */
 export interface CanonVerbWireEnvelope {
     conversationId?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/backend-contracts",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "Canon backend contract helpers shared by Functions and stream-service",
   "type": "module",
   "main": "dist/cjs/index.js",
@@ -43,7 +43,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@canonmsg/rich-cards": "^0.8.1",
+    "@canonmsg/rich-cards": "^0.8.2",
     "@types/node": "^22.0.0",
     "ajv": "^8.20.0",
     "typescript": "~5.7.0",