npm - @canonmsg/backend-contracts - Versions diffs - 2.3.0 → 3.0.0 - Mend

@canonmsg/backend-contracts 2.3.0 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (13) hide show

package/dist/canon-verb-wire.schema.json +155 -4
package/dist/canon-verbs.limits.json +9 -1
package/dist/canon-verbs.schema.json +157 -5
package/dist/cjs/verbContract.js +70 -1
package/dist/cjs/verbSchemas.js +86 -8
package/dist/cjs/verbWire.js +5 -2
package/dist/verbContract.d.ts +66 -4
package/dist/verbContract.js +68 -0
package/dist/verbSchemas.d.ts +281 -2
package/dist/verbSchemas.js +85 -7
package/dist/verbWire.d.ts +145 -6
package/dist/verbWire.js +5 -2
package/package.json +2 -2

package/dist/canon-verb-wire.schema.json CHANGED Viewed

@@ -212,9 +212,68 @@
           ]
         },
         "sessionConfig": {
-          "type": [
-            "object",
-            "null"
+          "oneOf": [
+            {
+              "type": "object",
+              "description": "Typed setup policy for an agent target. Values are stable runtime-advertised option ids and are validated against the target descriptor before session creation; labels, prompts, workspace paths, and arbitrary fields are not permitted.",
+              "additionalProperties": false,
+              "properties": {
+                "model": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+                  "maxLength": 256
+                },
+                "permissionMode": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+                  "maxLength": 256
+                },
+                "effort": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+                  "maxLength": 256
+                },
+                "workspaceId": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+                  "maxLength": 256
+                },
+                "executionMode": {
+                  "enum": [
+                    "worktree",
+                    "locked"
+                  ]
+                },
+                "runtimeControlValues": {
+                  "type": "object",
+                  "maxProperties": 24,
+                  "propertyNames": {
+                    "pattern": "^[A-Za-z0-9_-]{1,80}$",
+                    "not": {
+                      "enum": [
+                        "model",
+                        "workspace",
+                        "executionMode",
+                        "permissionMode",
+                        "effort",
+                        "interrupt",
+                        "runtimeControlValues",
+                        "updatedAt",
+                        "updatedBy"
+                      ]
+                    }
+                  },
+                  "additionalProperties": {
+                    "type": "string",
+                    "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+                    "maxLength": 256
+                  }
+                }
+              }
+            },
+            {
+              "type": "null"
+            }
           ]
         },
         "idempotencyKey": {
@@ -253,7 +312,99 @@
           "$ref": "#/$defs/turn"
         },
         "native": {
-          "type": "object"
+          "type": "object",
+          "description": "Content-free runtime correlation ids. Commands, paths, prompts, summaries, and model labels are not permitted in this public envelope.",
+          "maxProperties": 24,
+          "additionalProperties": false,
+          "properties": {
+            "runtime": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "method": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "requestId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "provider": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "origin": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "surface": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "threadId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "turnId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "runId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "itemId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "toolCallId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "approvalId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "pluginId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "sessionKey": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "nodeId": {
+              "type": "string",
+              "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+              "maxLength": 256
+            },
+            "handles": {
+              "type": "object",
+              "maxProperties": 16,
+              "propertyNames": {
+                "pattern": "^[A-Za-z0-9_.:-]{1,80}$"
+              },
+              "additionalProperties": {
+                "type": "string",
+                "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+                "maxLength": 256
+              }
+            }
+          }
         },
         "runtimeId": {
           "type": "string",

package/dist/canon-verbs.limits.json CHANGED Viewed

@@ -38,6 +38,8 @@
     "nativeKeys": 24,
     "nativeValueChars": 256,
     "nativeHandles": 16,
+    "sessionConfigValues": 24,
+    "sessionConfigValueChars": 256,
     "minTimeoutMs": 1000,
     "maxTimeoutMs": 1800000,
     "maxApprovalTimeoutMs": 259200000,
@@ -55,7 +57,13 @@
     "cardId": "^[A-Za-z0-9_.:-]{1,80}$",
     "actionId": "^[A-Za-z0-9_.:-]{1,80}$",
     "questionId": "^[A-Za-z0-9_.:-]{1,120}$",
-    "sessionRuleToolPattern": "^[\\w.*:-]{1,128}$"
+    "sessionRuleToolPattern": "^[\\w.*:-]{1,128}$",
+    "runtimeCorrelationValue": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+    "runtimeMethod": "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$",
+    "runtimeOptionValue": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+    "workspaceOptionId": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+    "runtimeHandleKey": "^[A-Za-z0-9_.:-]{1,80}$",
+    "runtimeControlId": "^[A-Za-z0-9_-]{1,80}$"
   },
   "byteSemantics": {
     "send_to.text": "utf8_bytes<=messageTextBytes",

package/dist/canon-verbs.schema.json CHANGED Viewed

@@ -424,8 +424,156 @@
     },
     "native": {
       "type": "object",
-      "description": "Runtime correlation handles (<= 24 keys, string values <= 256 chars or a nested handles map <= 16; functions/src/api/interactionKinds.ts normalizeNative).",
-      "additionalProperties": true
+      "description": "Content-free runtime correlation ids. Commands, paths, prompts, summaries, and model labels are not permitted in this public envelope.",
+      "maxProperties": 24,
+      "additionalProperties": false,
+      "properties": {
+        "runtime": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "method": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "requestId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "provider": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "origin": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "surface": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "threadId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "turnId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "runId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "itemId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "toolCallId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "approvalId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "pluginId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "sessionKey": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "nodeId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "handles": {
+          "type": "object",
+          "maxProperties": 16,
+          "propertyNames": {
+            "pattern": "^[A-Za-z0-9_.:-]{1,80}$"
+          },
+          "additionalProperties": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+            "maxLength": 256
+          }
+        }
+      }
+    },
+    "sessionConfig": {
+      "type": "object",
+      "description": "Typed setup policy for an agent target. Values are stable runtime-advertised option ids and are validated against the target descriptor before session creation; labels, prompts, workspace paths, and arbitrary fields are not permitted.",
+      "additionalProperties": false,
+      "properties": {
+        "model": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "permissionMode": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "effort": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "workspaceId": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
+          "maxLength": 256
+        },
+        "executionMode": {
+          "enum": [
+            "worktree",
+            "locked"
+          ]
+        },
+        "runtimeControlValues": {
+          "type": "object",
+          "maxProperties": 24,
+          "propertyNames": {
+            "pattern": "^[A-Za-z0-9_-]{1,80}$",
+            "not": {
+              "enum": [
+                "model",
+                "workspace",
+                "executionMode",
+                "permissionMode",
+                "effort",
+                "interrupt",
+                "runtimeControlValues",
+                "updatedAt",
+                "updatedBy"
+              ]
+            }
+          },
+          "additionalProperties": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
+            "maxLength": 256
+          }
+        }
+      }
     },
     "send_to_input": {
       "type": "object",
@@ -466,9 +614,13 @@
           "$ref": "#/$defs/sessionSelection"
         },
         "sessionConfig": {
-          "type": [
-            "object",
-            "null"
+          "oneOf": [
+            {
+              "$ref": "#/$defs/sessionConfig"
+            },
+            {
+              "type": "null"
+            }
           ],
           "description": "Coding-agent session setup (model/permissionMode/effort/workspaceId/executionMode); only applied to agent targets, stripped for humans."
         },

package/dist/cjs/verbContract.js CHANGED Viewed

@@ -41,7 +41,8 @@
  * canon-verbs.limits.json) after schema validation.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CANON_VERB_LIMITS_ARTIFACT = exports.CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = exports.CANON_VERB_NAMES = exports.SELF_CONTEXT_TYPE = exports.VERB_RATE_LIMITS = exports.VERB_LIMITS = exports.VERB_ID_PATTERNS = exports.CANON_CARD_SCHEMA_ID = exports.CANON_VERB_NAMESPACE = exports.CANON_VERBS_SCHEMA_ID = exports.CANON_VERBS_SCHEMA_VERSION = void 0;
+exports.CANON_VERB_LIMITS_ARTIFACT = exports.CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = exports.VERB_NATIVE_METADATA_KEYS = exports.CANON_VERB_NAMES = exports.SELF_CONTEXT_TYPE = exports.VERB_RATE_LIMITS = exports.VERB_LIMITS = exports.VERB_ID_PATTERNS = exports.CANON_CARD_SCHEMA_ID = exports.CANON_VERB_NAMESPACE = exports.CANON_VERBS_SCHEMA_ID = exports.CANON_VERBS_SCHEMA_VERSION = void 0;
+exports.normalizeVerbNativeMetadata = normalizeVerbNativeMetadata;
 exports.canonVerbToolName = canonVerbToolName;
 exports.findVerbByteLimitViolations = findVerbByteLimitViolations;
 /** Identifier for this contract document. */
@@ -72,6 +73,12 @@ exports.VERB_ID_PATTERNS = {
     actionId: '^[A-Za-z0-9_.:-]{1,80}$',
     questionId: '^[A-Za-z0-9_.:-]{1,120}$',
     sessionRuleToolPattern: '^[\\w.*:-]{1,128}$',
+    runtimeCorrelationValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
+    runtimeMethod: '^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$',
+    runtimeOptionValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$',
+    workspaceOptionId: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
+    runtimeHandleKey: '^[A-Za-z0-9_.:-]{1,80}$',
+    runtimeControlId: '^[A-Za-z0-9_-]{1,80}$',
 };
 /**
  * Server-enforced limits, single-sourced. Each value cites its enforcement
@@ -139,6 +146,9 @@ exports.VERB_LIMITS = {
     nativeKeys: 24,
     nativeValueChars: 256,
     nativeHandles: 16,
+    /** Initial agent-session setup carried by send_to. */
+    sessionConfigValues: 24,
+    sessionConfigValueChars: 256,
     /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
     minTimeoutMs: 1000,
     /** input/card/plan ceiling (30 minutes). */
@@ -186,6 +196,65 @@ exports.CANON_VERB_NAMES = [
     'list_contact_requests',
     'list_conversations',
 ];
+exports.VERB_NATIVE_METADATA_KEYS = [
+    'runtime',
+    'method',
+    'requestId',
+    'provider',
+    'origin',
+    'surface',
+    'threadId',
+    'turnId',
+    'runId',
+    'itemId',
+    'toolCallId',
+    'approvalId',
+    'pluginId',
+    'sessionKey',
+    'nodeId',
+    'handles',
+];
+const VERB_NATIVE_STRING_KEYS = exports.VERB_NATIVE_METADATA_KEYS.filter((key) => key !== 'handles');
+const RUNTIME_CORRELATION_VALUE_PATTERN = new RegExp(exports.VERB_ID_PATTERNS.runtimeCorrelationValue);
+const RUNTIME_METHOD_PATTERN = new RegExp(exports.VERB_ID_PATTERNS.runtimeMethod);
+const RUNTIME_HANDLE_KEY_PATTERN = new RegExp(exports.VERB_ID_PATTERNS.runtimeHandleKey);
+function isPlainRecord(value) {
+    return Boolean(value && typeof value === 'object' && !Array.isArray(value));
+}
+/**
+ * Keep only the typed, content-free runtime correlation contract. Invalid or
+ * unknown fields are omitted on compatibility REST paths; canon.verb-wire.v1
+ * rejects the same fields through its strict JSON Schema.
+ */
+function normalizeVerbNativeMetadata(value) {
+    if (!isPlainRecord(value))
+        return undefined;
+    const native = {};
+    for (const key of VERB_NATIVE_STRING_KEYS) {
+        const raw = value[key];
+        if (typeof raw !== 'string')
+            continue;
+        const normalized = raw.trim();
+        const pattern = key === 'method'
+            ? RUNTIME_METHOD_PATTERN
+            : RUNTIME_CORRELATION_VALUE_PATTERN;
+        if (pattern.test(normalized))
+            native[key] = normalized;
+    }
+    if (isPlainRecord(value.handles)) {
+        const handles = {};
+        for (const [key, raw] of Object.entries(value.handles).slice(0, exports.VERB_LIMITS.nativeHandles)) {
+            if (!RUNTIME_HANDLE_KEY_PATTERN.test(key) || typeof raw !== 'string')
+                continue;
+            const normalized = raw.trim();
+            if (RUNTIME_CORRELATION_VALUE_PATTERN.test(normalized))
+                handles[key] = normalized;
+        }
+        if (Object.keys(handles).length > 0)
+            native.handles = handles;
+    }
+    return Object.keys(native).length > 0 ? native : undefined;
+}
 /**
  * Error code on the 400 a create_group receives when NO member is directly
  * addable (approval-required members can only be invited to an existing

package/dist/cjs/verbSchemas.js CHANGED Viewed

@@ -29,7 +29,7 @@
  *   endpoints validate against these schemas directly).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CANON_VERB_SCHEMA_REFS = exports.CANON_VERBS_JSON_SCHEMA = void 0;
+exports.CANON_VERB_SCHEMA_REFS = exports.CANON_VERBS_JSON_SCHEMA = exports.VERB_SESSION_CONFIG_JSON_SCHEMA = exports.VERB_NATIVE_METADATA_JSON_SCHEMA = void 0;
 exports.getVerbInputSchema = getVerbInputSchema;
 exports.getVerbResultSchema = getVerbResultSchema;
 const verbContract_js_1 = require("./verbContract.js");
@@ -252,12 +252,89 @@ const runtimeCardDef = {
         blocks: { type: 'array', minItems: 1, maxItems: verbContract_js_1.VERB_LIMITS.cardServerBlocks },
     },
 };
-const nativeDef = {
+const runtimeCorrelationValueDef = {
+    type: 'string',
+    pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeCorrelationValue,
+    maxLength: verbContract_js_1.VERB_LIMITS.nativeValueChars,
+};
+const runtimeMethodDef = {
+    type: 'string',
+    pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeMethod,
+    maxLength: verbContract_js_1.VERB_LIMITS.nativeValueChars,
+};
+exports.VERB_NATIVE_METADATA_JSON_SCHEMA = {
     type: 'object',
-    description: `Runtime correlation handles (<= ${verbContract_js_1.VERB_LIMITS.nativeKeys} keys, string values <= `
-        + `${verbContract_js_1.VERB_LIMITS.nativeValueChars} chars or a nested handles map <= ${verbContract_js_1.VERB_LIMITS.nativeHandles}; `
-        + 'functions/src/api/interactionKinds.ts normalizeNative).',
-    additionalProperties: true,
+    description: 'Content-free runtime correlation ids. Commands, paths, prompts, summaries, '
+        + 'and model labels are not permitted in this public envelope.',
+    maxProperties: verbContract_js_1.VERB_LIMITS.nativeKeys,
+    additionalProperties: false,
+    properties: {
+        runtime: runtimeCorrelationValueDef,
+        method: runtimeMethodDef,
+        requestId: runtimeCorrelationValueDef,
+        provider: runtimeCorrelationValueDef,
+        origin: runtimeCorrelationValueDef,
+        surface: runtimeCorrelationValueDef,
+        threadId: runtimeCorrelationValueDef,
+        turnId: runtimeCorrelationValueDef,
+        runId: runtimeCorrelationValueDef,
+        itemId: runtimeCorrelationValueDef,
+        toolCallId: runtimeCorrelationValueDef,
+        approvalId: runtimeCorrelationValueDef,
+        pluginId: runtimeCorrelationValueDef,
+        sessionKey: runtimeCorrelationValueDef,
+        nodeId: runtimeCorrelationValueDef,
+        handles: {
+            type: 'object',
+            maxProperties: verbContract_js_1.VERB_LIMITS.nativeHandles,
+            propertyNames: { pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeHandleKey },
+            additionalProperties: runtimeCorrelationValueDef,
+        },
+    },
+};
+const sessionConfigValueDef = {
+    type: 'string',
+    pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeOptionValue,
+    maxLength: verbContract_js_1.VERB_LIMITS.sessionConfigValueChars,
+};
+exports.VERB_SESSION_CONFIG_JSON_SCHEMA = {
+    type: 'object',
+    description: 'Typed setup policy for an agent target. Values are stable runtime-advertised '
+        + 'option ids and are validated against the target descriptor before session creation; '
+        + 'labels, prompts, workspace paths, and arbitrary fields are not permitted.',
+    additionalProperties: false,
+    properties: {
+        model: sessionConfigValueDef,
+        permissionMode: sessionConfigValueDef,
+        effort: sessionConfigValueDef,
+        workspaceId: {
+            type: 'string',
+            pattern: verbContract_js_1.VERB_ID_PATTERNS.workspaceOptionId,
+            maxLength: verbContract_js_1.VERB_LIMITS.sessionConfigValueChars,
+        },
+        executionMode: { enum: ['worktree', 'locked'] },
+        runtimeControlValues: {
+            type: 'object',
+            maxProperties: verbContract_js_1.VERB_LIMITS.sessionConfigValues,
+            propertyNames: {
+                pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeControlId,
+                not: {
+                    enum: [
+                        'model',
+                        'workspace',
+                        'executionMode',
+                        'permissionMode',
+                        'effort',
+                        'interrupt',
+                        'runtimeControlValues',
+                        'updatedAt',
+                        'updatedBy',
+                    ],
+                },
+            },
+            additionalProperties: sessionConfigValueDef,
+        },
+    },
 };
 const timeoutFields = (maxMs, ceilingNote) => ({
     timeoutMs: {
@@ -313,7 +390,7 @@ const send_to_input = {
         },
         sessionSelection: REF('sessionSelection'),
         sessionConfig: {
-            type: ['object', 'null'],
+            oneOf: [REF('sessionConfig'), { type: 'null' }],
             description: 'Coding-agent session setup (model/permissionMode/effort/workspaceId/executionMode); '
                 + 'only applied to agent targets, stripped for humans.',
         },
@@ -1005,7 +1082,8 @@ exports.CANON_VERBS_JSON_SCHEMA = {
         unifiedDiff: unifiedDiffDef,
         sessionRule: sessionRuleDef,
         runtimeCard: runtimeCardDef,
-        native: nativeDef,
+        native: exports.VERB_NATIVE_METADATA_JSON_SCHEMA,
+        sessionConfig: exports.VERB_SESSION_CONFIG_JSON_SCHEMA,
         send_to_input,
         send_to_result,
         request_input_input,

package/dist/cjs/verbWire.js CHANGED Viewed

@@ -32,6 +32,7 @@ exports.projectVerbIntentToWire = projectVerbIntentToWire;
 exports.mergeVerbWireToIntent = mergeVerbWireToIntent;
 exports.findVerbWireEnvelopeViolations = findVerbWireEnvelopeViolations;
 const verbContract_js_1 = require("./verbContract.js");
+const verbSchemas_js_1 = require("./verbSchemas.js");
 exports.CANON_VERB_WIRE_SCHEMA_VERSION = 'canon.verb-wire.v1';
 exports.CANON_VERB_WIRE_SCHEMA_ID = 'https://canonmsg.com/schemas/canon.verb-wire.v1.json';
 // ---------------------------------------------------------------------------
@@ -204,7 +205,9 @@ const wireEnvelopeDef = {
                 },
             ],
         },
-        sessionConfig: { type: ['object', 'null'] },
+        sessionConfig: {
+            oneOf: [verbSchemas_js_1.VERB_SESSION_CONFIG_JSON_SCHEMA, { type: 'null' }],
+        },
         idempotencyKey: {
             type: 'string',
             pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeId,
@@ -227,7 +230,7 @@ const wireEnvelopeDef = {
                 + 'overload the mention slot.',
         },
         turn: { $ref: '#/$defs/turn' },
-        native: { type: 'object' },
+        native: verbSchemas_js_1.VERB_NATIVE_METADATA_JSON_SCHEMA,
         runtimeId: { type: 'string', maxLength: verbContract_js_1.VERB_LIMITS.turnIdChars },
         limit: { type: 'integer', minimum: 1 },
     },