@canonmsg/backend-contracts 6.4.0 → 8.0.0

package/dist/verbSchemas.js

@@ -29,18 +29,6 @@
  */
 import { CANON_VERBS_SCHEMA_ID, CANON_VERB_NAMES, SELF_CONTEXT_TYPE, VERB_ID_PATTERNS, VERB_LIMITS, } from './verbContract.js';
 const REF = (def) => ({ $ref: `#/$defs/${def}` });
-const groupInviteRequirementsDef = {
-    type: 'object',
-    description: 'Independent gates on a pending group invite. policyApproval is social '
-        + 'consent; ownerSessionSetup means the agent owner must choose the '
-        + 'runtime session configuration before membership is activated.',
-    required: ['policyApproval', 'ownerSessionSetup'],
-    additionalProperties: false,
-    properties: {
-        policyApproval: { type: 'boolean' },
-        ownerSessionSetup: { type: 'boolean' },
-    },
-};
 const selfContextDef = {
     type: 'object',
     description: 'Private note-to-self attached to a cross-conversation send. Visible only to the '
@@ -310,50 +298,6 @@ export const VERB_NATIVE_METADATA_JSON_SCHEMA = {
         },
     },
 };
-const sessionConfigValueDef = {
-    type: 'string',
-    pattern: VERB_ID_PATTERNS.runtimeOptionValue,
-    maxLength: VERB_LIMITS.sessionConfigValueChars,
-};
-export const VERB_SESSION_CONFIG_JSON_SCHEMA = {
-    type: 'object',
-    description: 'Typed setup policy for an agent target. Values are stable runtime-advertised '
-        + 'option ids and are validated against the target descriptor before session creation; '
-        + 'labels, prompts, workspace paths, and arbitrary fields are not permitted.',
-    additionalProperties: false,
-    properties: {
-        model: sessionConfigValueDef,
-        permissionMode: sessionConfigValueDef,
-        effort: sessionConfigValueDef,
-        workspaceId: {
-            type: 'string',
-            pattern: VERB_ID_PATTERNS.workspaceOptionId,
-            maxLength: VERB_LIMITS.sessionConfigValueChars,
-        },
-        executionMode: { enum: ['worktree', 'locked'] },
-        runtimeControlValues: {
-            type: 'object',
-            maxProperties: VERB_LIMITS.sessionConfigValues,
-            propertyNames: {
-                pattern: VERB_ID_PATTERNS.runtimeControlId,
-                not: {
-                    enum: [
-                        'model',
-                        'workspace',
-                        'executionMode',
-                        'permissionMode',
-                        'effort',
-                        'interrupt',
-                        'runtimeControlValues',
-                        'updatedAt',
-                        'updatedBy',
-                    ],
-                },
-            },
-            additionalProperties: sessionConfigValueDef,
-        },
-    },
-};
 const timeoutFields = (maxMs, ceilingNote) => ({
     timeoutMs: {
         type: 'integer',
@@ -383,7 +327,7 @@ const send_to_input = {
         + 'sends -> admission resolve + create + send (the core reachOut composite). User '
         + 'targets resolve admission first: open targets get the message, approval-required '
         + 'targets get a contact request (send deferred and auto-fulfilled on approval), '
-        + "owner-only targets surface as status 'unavailable' with reason owner-only.",
+        + "closed targets surface as status 'unavailable' with reason closed.",
     additionalProperties: false,
     properties: {
         targetConversationId: { type: 'string', pattern: VERB_ID_PATTERNS.runtimeId },
@@ -407,11 +351,6 @@ const send_to_input = {
                 + `truncate to ${VERB_LIMITS.contactRequestNoteChars} chars.`,
         },
         sessionSelection: REF('sessionSelection'),
-        sessionConfig: {
-            oneOf: [REF('sessionConfig'), { type: 'null' }],
-            description: 'Coding-agent session setup (model/permissionMode/effort/workspaceId/executionMode); '
-                + 'only applied to agent targets, stripped for humans.',
-        },
         messageOptions: REF('messageOptions'),
     },
     oneOf: [
@@ -838,11 +777,9 @@ const create_group_input = {
     description: "Create a group conversation. Each target's groupJoinPolicy is enforced "
         + 'server-side with staged admission: directly-addable members join at '
         + 'creation, approval-required members become pending group_invite '
-        + 'requests; agents needing explicit group-session setup become pending '
-        + 'owner requests; hard-denied members are skipped (see the result). A '
+        + 'requests; hard-denied members are skipped (see the result). A '
         + 'creator-only group is valid when at least one requested member has a '
-        + 'pending invite. A creator that itself requires setup cannot create '
-        + 'groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED). Under MLS, membership '
+        + 'pending invite. Under MLS, membership '
         + 'changes are Add/Remove proposals + Commit — a group operation is a '
         + 'cryptographic state change, not a codec swap.',
     required: ['name', 'memberIds'],
@@ -861,8 +798,8 @@ const create_group_input = {
 const create_group_result = {
     type: 'object',
     description: 'Staged admission: the group exists with the directly-added members; '
-        + '`pending` lists group_invite requests awaiting policy approval, owner '
-        + 'session setup, or both; `skipped` lists hard-denied targets.',
+        + '`pending` lists group_invite requests awaiting policy approval; '
+        + '`skipped` lists hard-denied targets.',
     required: ['status', 'conversationId', 'added', 'pending', 'skipped'],
     additionalProperties: true,
     properties: {
@@ -876,12 +813,11 @@ const create_group_result = {
             type: 'array',
             items: {
                 type: 'object',
-                required: ['userId', 'requestId', 'requirements'],
+                required: ['userId', 'requestId'],
                 additionalProperties: true,
                 properties: {
                     userId: { type: 'string' },
                     requestId: { type: 'string' },
-                    requirements: REF('groupInviteRequirements'),
                 },
             },
         },
@@ -901,8 +837,8 @@ const create_group_result = {
 };
 const add_member_input = {
     type: 'object',
-    description: 'A target needing policy approval and/or explicit owner session setup '
-        + 'yields one pending group_invite. Under MLS an add is an Add proposal '
+    description: 'A target needing policy approval yields one pending group_invite. '
+        + 'Under MLS an add is an Add proposal '
         + '+ Commit (new epoch), not a server-side membership write — the verb '
         + 'semantics are stable, the mechanism is not.',
     required: ['conversationId', 'userId'],
@@ -913,8 +849,7 @@ const add_member_input = {
     },
 };
 const add_member_result = {
-    description: 'Targets needing policy approval and/or owner session setup yield one '
-        + 'pending group_invite routed to the target or agent owner.',
+    description: 'Targets needing policy approval yield an exact pending group invite.',
     oneOf: [
         {
             type: 'object',
@@ -924,12 +859,11 @@ const add_member_result = {
         },
         {
             type: 'object',
-            required: ['status', 'requestId', 'requirements'],
+            required: ['status', 'requestId'],
             additionalProperties: true,
             properties: {
                 status: { const: 'pending' },
                 requestId: { type: 'string' },
-                requirements: REF('groupInviteRequirements'),
             },
         },
     ],
@@ -996,72 +930,6 @@ const list_contacts_result = {
         },
     },
 };
-const list_contact_requests_input = {
-    type: 'object',
-    additionalProperties: false,
-    properties: {
-        direction: { enum: ['inbound', 'outbound'] },
-        includeResolved: { type: 'boolean' },
-        limit: { type: 'integer', minimum: 1, maximum: 100 },
-    },
-};
-const list_contact_requests_result = {
-    type: 'object',
-    description: 'Contact requests, newest first, capped at 100. Defaults to pending inbound; '
-        + 'requesters use direction=outbound with includeResolved=true to recover lifecycle state. '
-        + 'Items are SerializedContactRequest (backend-contracts contactRequest.ts).',
-    required: ['requests'],
-    additionalProperties: true,
-    properties: {
-        requests: {
-            type: 'array',
-            items: {
-                type: 'object',
-                required: ['id', 'requesterId', 'targetId', 'status', 'kind', 'phase'],
-                additionalProperties: true,
-                properties: {
-                    id: { type: 'string' },
-                    requesterId: { type: 'string' },
-                    requesterName: { type: 'string' },
-                    targetId: { type: 'string' },
-                    status: { enum: ['pending', 'approved', 'rejected', 'expired', 'cancelled'] },
-                    kind: { enum: ['dm', 'group_invite'] },
-                    phase: {
-                        enum: [
-                            'awaiting_owner',
-                            'starting',
-                            'connected',
-                            'rejected',
-                            'expired',
-                            'cancelled',
-                            'failed',
-                        ],
-                    },
-                    message: { type: ['string', 'null'] },
-                    createdAt: { type: ['string', 'null'] },
-                    expiresAt: { type: ['string', 'null'] },
-                },
-            },
-        },
-    },
-};
-const cancel_contact_request_input = {
-    type: 'object',
-    required: ['requestId'],
-    additionalProperties: false,
-    properties: {
-        requestId: { type: 'string', pattern: VERB_ID_PATTERNS.runtimeId },
-    },
-};
-const cancel_contact_request_result = {
-    type: 'object',
-    required: ['status', 'requestId'],
-    additionalProperties: true,
-    properties: {
-        status: { const: 'cancelled' },
-        requestId: { type: 'string' },
-    },
-};
 const list_conversations_input = {
     type: 'object',
     additionalProperties: false,
@@ -1155,7 +1023,6 @@ export const CANON_VERBS_JSON_SCHEMA = {
         + 'deliberately NOT verbs — they stay host-mediated.',
     $defs: {
         messageId: messageIdDef,
-        groupInviteRequirements: groupInviteRequirementsDef,
         selfContext: selfContextDef,
         sessionSelection: sessionSelectionDef,
         mediaAttachment: mediaAttachmentDef,
@@ -1168,7 +1035,6 @@ export const CANON_VERBS_JSON_SCHEMA = {
         sessionRule: sessionRuleDef,
         runtimeCard: runtimeCardDef,
         native: VERB_NATIVE_METADATA_JSON_SCHEMA,
-        sessionConfig: VERB_SESSION_CONFIG_JSON_SCHEMA,
         send_to_input,
         send_to_result,
         request_input_input,
@@ -1197,12 +1063,8 @@ export const CANON_VERBS_JSON_SCHEMA = {
         leave_conversation_result,
         list_contacts_input,
         list_contacts_result,
-        list_contact_requests_input,
-        list_contact_requests_result,
         list_conversations_input,
         list_conversations_result,
-        cancel_contact_request_input,
-        cancel_contact_request_result,
         no_reply_input,
         no_reply_result,
     },

package/dist/verbWire.d.ts

@@ -25,7 +25,7 @@
  * cards, prompts, questions, tool names/summaries, details, diffs, and
  * self-contexts are body.
  */
-import { type CanonVerbName, type VerbNativeMetadata, type VerbSessionConfig, type VerbSessionSelection } from './verbContract.js';
+import { type CanonVerbName, type VerbNativeMetadata, type VerbSessionSelection } from './verbContract.js';
 export declare const CANON_VERB_WIRE_SCHEMA_VERSION = "canon.verb-wire.v1";
 export declare const CANON_VERB_WIRE_SCHEMA_ID = "https://canonmsg.com/schemas/canon.verb-wire.v1.json";
 export type VerbWireBody = {
@@ -40,8 +40,6 @@ export type VerbWireBody = {
 /** Turn-protocol keys the server enforces on (subset of TurnMetadata). */
 export interface VerbWireTurn {
     turnId?: string | null;
-    /** Trusted message that initiated a host-bound owner turn. */
-    sourceMessageId?: string;
     turnSemantics?: 'progress' | 'turn_complete' | 'control';
     deliveryIntent?: 'queue' | 'interrupt' | 'interleave' | 'stop';
     replyBehavior?: 'allow_auto_reply' | 'suppress_auto_reply';
@@ -55,8 +53,7 @@ export interface VerbWireTurn {
  * Documented leak decisions (see e2ee-mls.md §10): `mentions` stays
  * plaintext for routing + mention-piercing pushes (D3); `contactUserId` on
  * share_contact reveals who was shared (explicitly accepted for v1);
- * `sessionConfig` carries only typed runtime option ids; `native` carries only
- * typed correlation ids. Paths, labels, prompts, summaries, and other free
+ * `native` carries only typed correlation ids. Paths, labels, prompts, summaries, and other free
  * text belong in the body or owner-local runtime state.
  */
 export interface CanonVerbWireEnvelope {
@@ -77,7 +74,6 @@ export interface CanonVerbWireEnvelope {
     risk?: 'low' | 'normal' | 'high' | 'destructive';
     category?: 'command' | 'file' | 'network' | 'browser' | 'mcp' | 'plugin' | 'canon' | 'tool';
     sessionSelection?: VerbSessionSelection;
-    sessionConfig?: VerbSessionConfig | null;
     idempotencyKey?: string;
     /** Target-message reference for react/forward — routing, not content. */
     messageId?: string;
@@ -139,7 +135,7 @@ export declare const CANON_VERB_WIRE_JSON_SCHEMA: {
             readonly const: "canon.verb-wire.v1";
         };
         readonly verb: {
-            readonly enum: readonly ["send_to", "request_input", "request_approval", "check_approval", "send_card", "request_card", "share_contact", "react", "forward", "create_group", "add_member", "remove_member", "leave_conversation", "list_contacts", "list_contact_requests", "list_conversations", "cancel_contact_request", "no_reply"];
+            readonly enum: readonly ["send_to", "request_input", "request_approval", "check_approval", "send_card", "request_card", "share_contact", "react", "forward", "create_group", "add_member", "remove_member", "leave_conversation", "list_contacts", "list_conversations", "no_reply"];
         };
         readonly envelope: {
             readonly $ref: "#/$defs/envelope";
@@ -270,55 +266,6 @@ export declare const CANON_VERB_WIRE_JSON_SCHEMA: {
                         };
                     }];
                 };
-                readonly sessionConfig: {
-                    readonly oneOf: readonly [{
-                        readonly type: "object";
-                        readonly description: string;
-                        readonly additionalProperties: false;
-                        readonly properties: {
-                            readonly model: {
-                                readonly type: "string";
-                                readonly pattern: "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$";
-                                readonly maxLength: 256;
-                            };
-                            readonly permissionMode: {
-                                readonly type: "string";
-                                readonly pattern: "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$";
-                                readonly maxLength: 256;
-                            };
-                            readonly effort: {
-                                readonly type: "string";
-                                readonly pattern: "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$";
-                                readonly maxLength: 256;
-                            };
-                            readonly workspaceId: {
-                                readonly type: "string";
-                                readonly pattern: "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$";
-                                readonly maxLength: 256;
-                            };
-                            readonly executionMode: {
-                                readonly enum: readonly ["worktree", "locked"];
-                            };
-                            readonly runtimeControlValues: {
-                                readonly type: "object";
-                                readonly maxProperties: 24;
-                                readonly propertyNames: {
-                                    readonly pattern: "^[A-Za-z0-9_-]{1,80}$";
-                                    readonly not: {
-                                        readonly enum: readonly ["model", "workspace", "executionMode", "permissionMode", "effort", "interrupt", "runtimeControlValues", "updatedAt", "updatedBy"];
-                                    };
-                                };
-                                readonly additionalProperties: {
-                                    readonly type: "string";
-                                    readonly pattern: "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$";
-                                    readonly maxLength: 256;
-                                };
-                            };
-                        };
-                    }, {
-                        readonly type: "null";
-                    }];
-                };
                 readonly idempotencyKey: {
                     readonly type: "string";
                     readonly pattern: "^[A-Za-z0-9_.:-]{1,160}$";
@@ -466,10 +413,6 @@ export declare const CANON_VERB_WIRE_JSON_SCHEMA: {
                 readonly turnId: {
                     readonly type: readonly ["string", "null"];
                 };
-                readonly sourceMessageId: {
-                    readonly type: "string";
-                    readonly minLength: 1;
-                };
                 readonly turnSemantics: {
                     readonly enum: readonly ["progress", "turn_complete", "control"];
                 };
@@ -515,7 +458,7 @@ export declare const CANON_VERB_WIRE_JSON_SCHEMA: {
                     readonly const: "canon.verb-wire.v1";
                 };
                 readonly verb: {
-                    readonly enum: readonly ["send_to", "request_input", "request_approval", "check_approval", "send_card", "request_card", "share_contact", "react", "forward", "create_group", "add_member", "remove_member", "leave_conversation", "list_contacts", "list_contact_requests", "list_conversations", "cancel_contact_request", "no_reply"];
+                    readonly enum: readonly ["send_to", "request_input", "request_approval", "check_approval", "send_card", "request_card", "share_contact", "react", "forward", "create_group", "add_member", "remove_member", "leave_conversation", "list_contacts", "list_conversations", "no_reply"];
                 };
                 readonly result: {
                     readonly $ref: "#/$defs/body";

package/dist/verbWire.js

@@ -26,7 +26,7 @@
  * self-contexts are body.
  */
 import { CANON_VERB_NAMES, VERB_ID_PATTERNS, VERB_LIMITS, } from './verbContract.js';
-import { VERB_NATIVE_METADATA_JSON_SCHEMA, VERB_SESSION_CONFIG_JSON_SCHEMA, } from './verbSchemas.js';
+import { VERB_NATIVE_METADATA_JSON_SCHEMA } from './verbSchemas.js';
 export const CANON_VERB_WIRE_SCHEMA_VERSION = 'canon.verb-wire.v1';
 export const CANON_VERB_WIRE_SCHEMA_ID = 'https://canonmsg.com/schemas/canon.verb-wire.v1.json';
 // ---------------------------------------------------------------------------
@@ -41,7 +41,6 @@ export const VERB_WIRE_ENVELOPE_FIELDS = {
             'canonContactId',
             'sourceConversationId',
             'sessionSelection',
-            'sessionConfig',
             'idempotencyKey',
             'replyTo',
             'replyToPosition',
@@ -110,9 +109,7 @@ export const VERB_WIRE_ENVELOPE_FIELDS = {
         optional: [],
     },
     list_contacts: { required: [], optional: [] },
-    list_contact_requests: { required: [], optional: [] },
     list_conversations: { required: [], optional: ['limit'] },
-    cancel_contact_request: { required: ['requestId'], optional: [] },
     no_reply: { required: [], optional: ['conversationId', 'messageId'] },
 };
 // ---------------------------------------------------------------------------
@@ -154,7 +151,6 @@ const wireTurnDef = {
     additionalProperties: false,
     properties: {
         turnId: { type: ['string', 'null'] },
-        sourceMessageId: { type: 'string', minLength: 1 },
         turnSemantics: { enum: ['progress', 'turn_complete', 'control'] },
         deliveryIntent: { enum: ['queue', 'interrupt', 'interleave', 'stop'] },
         replyBehavior: { enum: ['allow_auto_reply', 'suppress_auto_reply'] },
@@ -202,9 +198,6 @@ const wireEnvelopeDef = {
                 },
             ],
         },
-        sessionConfig: {
-            oneOf: [VERB_SESSION_CONFIG_JSON_SCHEMA, { type: 'null' }],
-        },
         idempotencyKey: {
             type: 'string',
             pattern: VERB_ID_PATTERNS.runtimeId,
@@ -280,13 +273,7 @@ export const CANON_VERB_WIRE_JSON_SCHEMA = {
 // ---------------------------------------------------------------------------
 // Intent <-> wire projection (json codec)
 // ---------------------------------------------------------------------------
-const TURN_KEYS = [
-    'turnId',
-    'sourceMessageId',
-    'turnSemantics',
-    'deliveryIntent',
-    'replyBehavior',
-];
+const TURN_KEYS = ['turnId', 'turnSemantics', 'deliveryIntent', 'replyBehavior'];
 function splitTurnMetadata(metadata) {
     if (!metadata || typeof metadata !== 'object')
         return { turn: undefined, rest: undefined };
@@ -344,7 +331,6 @@ export function projectVerbIntentToWire(verb, intent, options) {
                 canonContactId: input.canonContactId,
                 sourceConversationId: input.sourceConversationId,
                 sessionSelection: input.sessionSelection,
-                sessionConfig: input.sessionConfig,
                 idempotencyKey: messageOptions.messageId,
                 replyTo: messageOptions.replyTo,
                 replyToPosition: messageOptions.replyToPosition,
@@ -474,22 +460,10 @@ export function projectVerbIntentToWire(verb, intent, options) {
         case 'list_contacts': {
             break;
         }
-        case 'list_contact_requests': {
-            value = compact({
-                direction: input.direction,
-                includeResolved: input.includeResolved,
-                limit: input.limit,
-            });
-            break;
-        }
         case 'list_conversations': {
             envelope = compact({ limit: input.limit });
             break;
         }
-        case 'cancel_contact_request': {
-            envelope = compact({ requestId: input.requestId });
-            break;
-        }
         case 'no_reply': {
             envelope = compact({ conversationId: input.conversationId, messageId: input.messageId });
             value = compact({ reason: input.reason });
@@ -535,7 +509,6 @@ export function mergeVerbWireToIntent(request) {
                 canonContactId: envelope.canonContactId,
                 sourceConversationId: envelope.sourceConversationId,
                 sessionSelection: envelope.sessionSelection,
-                sessionConfig: envelope.sessionConfig,
                 text: value.text,
                 selfContext: value.selfContext,
                 requestMessage: value.requestMessage,
@@ -629,16 +602,8 @@ export function mergeVerbWireToIntent(request) {
             return compact({ conversationId: envelope.conversationId });
         case 'list_contacts':
             return {};
-        case 'list_contact_requests':
-            return compact({
-                direction: value.direction,
-                includeResolved: value.includeResolved,
-                limit: value.limit,
-            });
         case 'list_conversations':
             return compact({ limit: envelope.limit });
-        case 'cancel_contact_request':
-            return compact({ requestId: envelope.requestId });
         case 'no_reply':
             return compact({ conversationId: envelope.conversationId, messageId: envelope.messageId, reason: value.reason });
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/backend-contracts",
-  "version": "6.4.0",
+  "version": "8.0.0",
   "description": "Canon backend contract helpers shared by Functions and stream-service",
   "type": "module",
   "main": "dist/cjs/index.js",
@@ -43,7 +43,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@canonmsg/rich-cards": "^0.10.2",
+    "@canonmsg/rich-cards": "^0.10.3",
     "@types/node": "^22.0.0",
     "ajv": "^8.20.0",
     "typescript": "~5.7.0",

package/dist/accessPolicy.d.ts

@@ -1,9 +0,0 @@
-/** The canonical access triplet's policy values (`inboundPolicy`, `groupJoinPolicy`). */
-export type CanonicalPolicy = 'open' | 'approval-required' | 'owner-only';
-/**
- * Read a stored policy field, defaulting to the value Canon assigns on account
- * creation. Anything unrecognized — missing, misspelled, or the retired
- * `'private'` enum — reads as 'approval-required'. This must never widen to
- * 'open'.
- */
-export declare function readCanonicalPolicy(value: unknown): CanonicalPolicy;

package/dist/accessPolicy.js

@@ -1,12 +0,0 @@
-/**
- * Read a stored policy field, defaulting to the value Canon assigns on account
- * creation. Anything unrecognized — missing, misspelled, or the retired
- * `'private'` enum — reads as 'approval-required'. This must never widen to
- * 'open'.
- */
-export function readCanonicalPolicy(value) {
-    if (value === 'open' || value === 'approval-required' || value === 'owner-only') {
-        return value;
-    }
-    return 'approval-required';
-}

package/dist/cjs/accessPolicy.js

@@ -1,15 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.readCanonicalPolicy = readCanonicalPolicy;
-/**
- * Read a stored policy field, defaulting to the value Canon assigns on account
- * creation. Anything unrecognized — missing, misspelled, or the retired
- * `'private'` enum — reads as 'approval-required'. This must never widen to
- * 'open'.
- */
-function readCanonicalPolicy(value) {
-    if (value === 'open' || value === 'approval-required' || value === 'owner-only') {
-        return value;
-    }
-    return 'approval-required';
-}