@canonmsg/backend-contracts 7.0.0 → 8.0.0

package/README.md

@@ -32,9 +32,9 @@ The JSON Schemas are also emitted as files for non-JavaScript consumers: `@canon
 
 **Message and media serialization.** The canonical `SerializedContentType` union (`text | image | audio | video | file | contact_card | interaction`), attachment normalization, and the single runtime-card decoder that `@canonmsg/core` re-exports rather than reimplements.
 
-**Behavior policy and contact requests.** The participation evaluator the stream service runs before dispatching a turn, and the contact-request serializer both sides validate against.
+**Behavior policy.** The participation evaluator the stream service runs before dispatching a turn.
 
-**Server-side normalizers.** `readCanonicalPolicy` resolves a stored `inboundPolicy` / `groupJoinPolicy` field to the access triplet's three values, defaulting to `approval-required` rather than widening to `open`. `serializeSelfContext` is the agent-facing projection of a stored self-context. `readModerationStatus` is the single definition of an ejected account. All take plain document-shaped data — the package still performs no I/O.
+**Server-side normalizers.** `readCommunicationRule` resolves a stored communication-policy field to `open | approval-required | closed`, defaulting to `approval-required` rather than widening to `open`. `serializeSelfContext` is the agent-facing projection of a stored self-context. `readModerationStatus` is the single definition of an ejected account. All take plain document-shaped data — the package still performs no I/O.
 
 **Environments.** `CANON_ENVIRONMENT_CONTRACTS` binds `canon-dev-v1` and `canon-prod-v1` to their project and region; `getCanonEnvironmentContract` rejects anything else rather than defaulting.
 

package/dist/canon-verb-wire.schema.json

@@ -31,7 +31,6 @@
         "remove_member",
         "leave_conversation",
         "list_contacts",
-        "list_contact_requests",
         "list_conversations",
         "no_reply"
       ]
@@ -212,71 +211,6 @@
             }
           ]
         },
-        "sessionConfig": {
-          "oneOf": [
-            {
-              "type": "object",
-              "description": "Typed setup policy for an agent target. Values are stable runtime-advertised option ids and are validated against the target descriptor before session creation; labels, prompts, workspace paths, and arbitrary fields are not permitted.",
-              "additionalProperties": false,
-              "properties": {
-                "model": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "permissionMode": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "effort": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "workspaceId": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "executionMode": {
-                  "enum": [
-                    "worktree",
-                    "locked"
-                  ]
-                },
-                "runtimeControlValues": {
-                  "type": "object",
-                  "maxProperties": 24,
-                  "propertyNames": {
-                    "pattern": "^[A-Za-z0-9_-]{1,80}$",
-                    "not": {
-                      "enum": [
-                        "model",
-                        "workspace",
-                        "executionMode",
-                        "permissionMode",
-                        "effort",
-                        "interrupt",
-                        "runtimeControlValues",
-                        "updatedAt",
-                        "updatedBy"
-                      ]
-                    }
-                  },
-                  "additionalProperties": {
-                    "type": "string",
-                    "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                    "maxLength": 256
-                  }
-                }
-              }
-            },
-            {
-              "type": "null"
-            }
-          ]
-        },
         "idempotencyKey": {
           "type": "string",
           "pattern": "^[A-Za-z0-9_.:-]{1,160}$",
@@ -506,7 +440,6 @@
             "remove_member",
             "leave_conversation",
             "list_contacts",
-            "list_contact_requests",
             "list_conversations",
             "no_reply"
           ]

package/dist/canon-verbs.limits.json

@@ -38,8 +38,6 @@
     "nativeKeys": 24,
     "nativeValueChars": 256,
     "nativeHandles": 16,
-    "sessionConfigValues": 24,
-    "sessionConfigValueChars": 256,
     "minTimeoutMs": 1000,
     "maxTimeoutMs": 1800000,
     "maxApprovalTimeoutMs": 259200000,
@@ -61,10 +59,7 @@
     "sessionRuleToolPattern": "^[\\w.*:-]{1,128}$",
     "runtimeCorrelationValue": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
     "runtimeMethod": "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$",
-    "runtimeOptionValue": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-    "workspaceOptionId": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
     "runtimeHandleKey": "^[A-Za-z0-9_.:-]{1,80}$",
-    "runtimeControlId": "^[A-Za-z0-9_-]{1,80}$",
     "resumableUploadId": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
   },
   "byteSemantics": {

package/dist/canon-verbs.schema.json

@@ -13,23 +13,6 @@
       },
       "description": "Client idempotency key (<= 160 chars / 256 UTF-8 bytes; no slashes, control chars, '.', '..', __x__). Same id + identical payload replays idempotently; different payload -> 409 MESSAGE_ID_EXISTS."
     },
-    "groupInviteRequirements": {
-      "type": "object",
-      "description": "Independent gates on a pending group invite. policyApproval is social consent; ownerSessionSetup means the agent owner must choose the runtime session configuration before membership is activated.",
-      "required": [
-        "policyApproval",
-        "ownerSessionSetup"
-      ],
-      "additionalProperties": false,
-      "properties": {
-        "policyApproval": {
-          "type": "boolean"
-        },
-        "ownerSessionSetup": {
-          "type": "boolean"
-        }
-      }
-    },
     "selfContext": {
       "type": "object",
       "description": "Private note-to-self attached to a cross-conversation send. Visible only to the sending agent (surfaced back as provenance.activeSelfContext); never shown to recipients. Enforced by functions/src/utils/selfContexts.ts.",
@@ -557,67 +540,9 @@
         }
       }
     },
-    "sessionConfig": {
-      "type": "object",
-      "description": "Typed setup policy for an agent target. Values are stable runtime-advertised option ids and are validated against the target descriptor before session creation; labels, prompts, workspace paths, and arbitrary fields are not permitted.",
-      "additionalProperties": false,
-      "properties": {
-        "model": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "permissionMode": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "effort": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "workspaceId": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "executionMode": {
-          "enum": [
-            "worktree",
-            "locked"
-          ]
-        },
-        "runtimeControlValues": {
-          "type": "object",
-          "maxProperties": 24,
-          "propertyNames": {
-            "pattern": "^[A-Za-z0-9_-]{1,80}$",
-            "not": {
-              "enum": [
-                "model",
-                "workspace",
-                "executionMode",
-                "permissionMode",
-                "effort",
-                "interrupt",
-                "runtimeControlValues",
-                "updatedAt",
-                "updatedBy"
-              ]
-            }
-          },
-          "additionalProperties": {
-            "type": "string",
-            "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-            "maxLength": 256
-          }
-        }
-      }
-    },
     "send_to_input": {
       "type": "object",
-      "description": "Message another conversation or user (admission-aware), optionally carrying a private self-context. Exactly one of targetConversationId / targetUserId / canonContactId. canonContactId is NOT a wire field: bindings resolve it via POST /admission/resolve to a targetUserId first. Projections: selfContext sends -> POST /messages/send-contextual (which requires sourceConversationId + selfContext); known-conversation sends without selfContext -> POST /messages/send; plain user sends -> admission resolve + create + send (the core reachOut composite). User targets resolve admission first: open targets get the message, approval-required targets get a contact request (send deferred and auto-fulfilled on approval), owner-only targets surface as status 'unavailable' with reason owner-only.",
+      "description": "Message another conversation or user (admission-aware), optionally carrying a private self-context. Exactly one of targetConversationId / targetUserId / canonContactId. canonContactId is NOT a wire field: bindings resolve it via POST /admission/resolve to a targetUserId first. Projections: selfContext sends -> POST /messages/send-contextual (which requires sourceConversationId + selfContext); known-conversation sends without selfContext -> POST /messages/send; plain user sends -> admission resolve + create + send (the core reachOut composite). User targets resolve admission first: open targets get the message, approval-required targets get a contact request (send deferred and auto-fulfilled on approval), closed targets surface as status 'unavailable' with reason closed.",
       "additionalProperties": false,
       "properties": {
         "targetConversationId": {
@@ -653,17 +578,6 @@
         "sessionSelection": {
           "$ref": "#/$defs/sessionSelection"
         },
-        "sessionConfig": {
-          "oneOf": [
-            {
-              "$ref": "#/$defs/sessionConfig"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "description": "Coding-agent session setup (model/permissionMode/effort/workspaceId/executionMode); only applied to agent targets, stripped for humans."
-        },
         "messageOptions": {
           "$ref": "#/$defs/messageOptions"
         }
@@ -1511,7 +1425,7 @@
     },
     "create_group_input": {
       "type": "object",
-      "description": "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests; agents needing explicit group-session setup become pending owner requests; hard-denied members are skipped (see the result). A creator-only group is valid when at least one requested member has a pending invite. A creator that itself requires setup cannot create groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED). Under MLS, membership changes are Add/Remove proposals + Commit — a group operation is a cryptographic state change, not a codec swap.",
+      "description": "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests; hard-denied members are skipped (see the result). A creator-only group is valid when at least one requested member has a pending invite. Under MLS, membership changes are Add/Remove proposals + Commit — a group operation is a cryptographic state change, not a codec swap.",
       "required": [
         "name",
         "memberIds"
@@ -1537,7 +1451,7 @@
     },
     "create_group_result": {
       "type": "object",
-      "description": "Staged admission: the group exists with the directly-added members; `pending` lists group_invite requests awaiting policy approval, owner session setup, or both; `skipped` lists hard-denied targets.",
+      "description": "Staged admission: the group exists with the directly-added members; `pending` lists group_invite requests awaiting policy approval; `skipped` lists hard-denied targets.",
       "required": [
         "status",
         "conversationId",
@@ -1565,8 +1479,7 @@
             "type": "object",
             "required": [
               "userId",
-              "requestId",
-              "requirements"
+              "requestId"
             ],
             "additionalProperties": true,
             "properties": {
@@ -1575,9 +1488,6 @@
               },
               "requestId": {
                 "type": "string"
-              },
-              "requirements": {
-                "$ref": "#/$defs/groupInviteRequirements"
               }
             }
           }
@@ -1605,7 +1515,7 @@
     },
     "add_member_input": {
       "type": "object",
-      "description": "A target needing policy approval and/or explicit owner session setup yields one pending group_invite. Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write — the verb semantics are stable, the mechanism is not.",
+      "description": "A target needing policy approval yields one pending group_invite. Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write — the verb semantics are stable, the mechanism is not.",
       "required": [
         "conversationId",
         "userId"
@@ -1623,7 +1533,7 @@
       }
     },
     "add_member_result": {
-      "description": "Targets needing policy approval and/or owner session setup yield one pending group_invite routed to the target or agent owner.",
+      "description": "Targets needing policy approval yield an exact pending group invite.",
       "oneOf": [
         {
           "type": "object",
@@ -1641,8 +1551,7 @@
           "type": "object",
           "required": [
             "status",
-            "requestId",
-            "requirements"
+            "requestId"
           ],
           "additionalProperties": true,
           "properties": {
@@ -1651,9 +1560,6 @@
             },
             "requestId": {
               "type": "string"
-            },
-            "requirements": {
-              "$ref": "#/$defs/groupInviteRequirements"
             }
           }
         }
@@ -1764,81 +1670,6 @@
         }
       }
     },
-    "list_contact_requests_input": {
-      "type": "object",
-      "additionalProperties": false,
-      "properties": {}
-    },
-    "list_contact_requests_result": {
-      "type": "object",
-      "description": "Pending inbound requests, newest first, capped at 100. Items are SerializedContactRequest (backend-contracts contactRequest.ts). Read-only awareness: approval routes to the owner; agents cannot approve/reject.",
-      "required": [
-        "requests"
-      ],
-      "additionalProperties": true,
-      "properties": {
-        "requests": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "required": [
-              "id",
-              "requesterId",
-              "targetId",
-              "status",
-              "kind"
-            ],
-            "additionalProperties": true,
-            "properties": {
-              "id": {
-                "type": "string"
-              },
-              "requesterId": {
-                "type": "string"
-              },
-              "requesterName": {
-                "type": "string"
-              },
-              "targetId": {
-                "type": "string"
-              },
-              "status": {
-                "enum": [
-                  "pending",
-                  "approved",
-                  "rejected",
-                  "expired"
-                ]
-              },
-              "kind": {
-                "enum": [
-                  "dm",
-                  "group_invite"
-                ]
-              },
-              "message": {
-                "type": [
-                  "string",
-                  "null"
-                ]
-              },
-              "createdAt": {
-                "type": [
-                  "string",
-                  "null"
-                ]
-              },
-              "expiresAt": {
-                "type": [
-                  "string",
-                  "null"
-                ]
-              }
-            }
-          }
-        }
-      }
-    },
     "list_conversations_input": {
       "type": "object",
       "additionalProperties": false,

package/dist/cjs/communication.js

@@ -7,10 +7,6 @@ function readCommunicationRule(value) {
     if (value === 'open' || value === 'approval-required' || value === 'closed') {
         return value;
     }
-    // Existing owner-only records have the same outsider-facing meaning as
-    // closed; the agent owner bypass remains a separate server-side rule.
-    if (value === 'owner-only')
-        return 'closed';
     return 'approval-required';
 }
 function parseDirectConversationSelection(value) {

package/dist/cjs/firestoreValues.js

@@ -14,7 +14,7 @@ function normalizeStoredString(value) {
 /**
  * Firestore Timestamp-like -> ISO 8601, or null. Accepts only objects exposing
  * `toDate()`. A raw `Date` is deliberately NOT accepted: that matches both call
- * sites this replaced. `message.ts` and `contactRequest.ts` keep their own
+ * sites this replaced. `message.ts` keeps its own
  * Date-tolerant normalizers — a different contract, not this one.
  */
 function firestoreTimestampToISOString(value) {

package/dist/cjs/index.js

@@ -24,13 +24,12 @@ __exportStar(require("./runtimeCardStorage.js"), exports);
 __exportStar(require("./turnProtocol.js"), exports);
 __exportStar(require("./agentBehaviorPolicy.js"), exports);
 __exportStar(require("./agentSearch.js"), exports);
-__exportStar(require("./contactRequest.js"), exports);
 __exportStar(require("./verbContract.js"), exports);
 __exportStar(require("./verbSchemas.js"), exports);
 __exportStar(require("./verbWire.js"), exports);
-__exportStar(require("./accessPolicy.js"), exports);
 __exportStar(require("./communication.js"), exports);
 __exportStar(require("./apiErrors.js"), exports);
 __exportStar(require("./firestoreValues.js"), exports);
 __exportStar(require("./moderation.js"), exports);
 __exportStar(require("./selfContext.js"), exports);
+__exportStar(require("./replyAuthority.js"), exports);

package/dist/cjs/replyAuthority.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cjs/verbContract.js

@@ -44,7 +44,7 @@
  * canon-verbs.limits.json) after schema validation.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CANON_VERB_LIMITS_ARTIFACT = exports.NO_REPLY_ACK_NOTE = exports.CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = exports.VERB_NATIVE_METADATA_KEYS = exports.CANON_VERB_NAMES = exports.SELF_CONTEXT_TYPE = exports.VERB_RATE_LIMITS = exports.VERB_LIMITS = exports.VERB_ID_PATTERNS = exports.CANON_CARD_SCHEMA_ID = exports.CANON_VERB_NAMESPACE = exports.CANON_VERBS_SCHEMA_ID = exports.CANON_VERBS_SCHEMA_VERSION = void 0;
+exports.CANON_VERB_LIMITS_ARTIFACT = exports.NO_REPLY_ACK_NOTE = exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = exports.VERB_NATIVE_METADATA_KEYS = exports.CANON_VERB_NAMES = exports.SELF_CONTEXT_TYPE = exports.VERB_RATE_LIMITS = exports.VERB_LIMITS = exports.VERB_ID_PATTERNS = exports.CANON_CARD_SCHEMA_ID = exports.CANON_VERB_NAMESPACE = exports.CANON_VERBS_SCHEMA_ID = exports.CANON_VERBS_SCHEMA_VERSION = void 0;
 exports.normalizeVerbNativeMetadata = normalizeVerbNativeMetadata;
 exports.canonVerbToolName = canonVerbToolName;
 exports.findVerbByteLimitViolations = findVerbByteLimitViolations;
@@ -78,10 +78,7 @@ exports.VERB_ID_PATTERNS = {
     sessionRuleToolPattern: '^[\\w.*:-]{1,128}$',
     runtimeCorrelationValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
     runtimeMethod: '^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$',
-    runtimeOptionValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$',
-    workspaceOptionId: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
     runtimeHandleKey: '^[A-Za-z0-9_.:-]{1,80}$',
-    runtimeControlId: '^[A-Za-z0-9_-]{1,80}$',
     /** UUID issued by Canon's resumable-media session endpoint. */
     resumableUploadId: '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$',
 };
@@ -151,9 +148,6 @@ exports.VERB_LIMITS = {
     nativeKeys: 24,
     nativeValueChars: 256,
     nativeHandles: 16,
-    /** Initial agent-session setup carried by send_to. */
-    sessionConfigValues: 24,
-    sessionConfigValueChars: 256,
     /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
     minTimeoutMs: 1000,
     /** input/card/plan ceiling (30 minutes). */
@@ -204,7 +198,6 @@ exports.CANON_VERB_NAMES = [
     'remove_member',
     'leave_conversation',
     'list_contacts',
-    'list_contact_requests',
     'list_conversations',
     'no_reply',
 ];
@@ -273,14 +266,6 @@ function normalizeVerbNativeMetadata(value) {
  * invite is allowed; the error detail carries the attempted partition.
  */
 exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = 'CREATE_GROUP_NO_ADDABLE_MEMBERS';
-/**
- * Error code on the 403 a create_group receives when the CREATOR itself is
- * a coding agent requiring explicit session setup: the group helper prepares
- * session configs for every coding-agent member including the creator, and
- * only the agent's human owner may provide them (v1 scoping — the owner
- * creates the group from the app instead).
- */
-exports.CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = 'CREATE_GROUP_CREATOR_SETUP_REQUIRED';
 /**
  * The `note` the server returns on a `no_reply` ack — the model's closure
  * sentence. It lives here, not in a host, because every binding surfaces the