@canonmsg/backend-contracts 7.0.0 → 8.0.1

package/README.md

@@ -32,9 +32,9 @@ The JSON Schemas are also emitted as files for non-JavaScript consumers: `@canon
 
 **Message and media serialization.** The canonical `SerializedContentType` union (`text | image | audio | video | file | contact_card | interaction`), attachment normalization, and the single runtime-card decoder that `@canonmsg/core` re-exports rather than reimplements.
 
-**Behavior policy and contact requests.** The participation evaluator the stream service runs before dispatching a turn, and the contact-request serializer both sides validate against.
+**Behavior policy.** The participation evaluator the stream service runs before dispatching a turn.
 
-**Server-side normalizers.** `readCanonicalPolicy` resolves a stored `inboundPolicy` / `groupJoinPolicy` field to the access triplet's three values, defaulting to `approval-required` rather than widening to `open`. `serializeSelfContext` is the agent-facing projection of a stored self-context. `readModerationStatus` is the single definition of an ejected account. All take plain document-shaped data — the package still performs no I/O.
+**Server-side normalizers.** `readCommunicationRule` resolves a stored communication-policy field to `open | approval-required | closed`, defaulting to `approval-required` rather than widening to `open`. `serializeSelfContext` is the agent-facing projection of a stored self-context. `readModerationStatus` is the single definition of an ejected account. All take plain document-shaped data — the package still performs no I/O.
 
 **Environments.** `CANON_ENVIRONMENT_CONTRACTS` binds `canon-dev-v1` and `canon-prod-v1` to their project and region; `getCanonEnvironmentContract` rejects anything else rather than defaulting.
 

package/dist/agentBehaviorPolicy.d.ts

@@ -81,32 +81,24 @@ export interface ParticipationHistorySnapshot {
 }
 export declare const PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
 /**
- * Safety backstop for groups with no explicit turn cap: at most this many
- * consecutive agent turns before a human has to speak again.
+ * Safety backstop for conversations with no explicit turn cap: at most this
+ * many consecutive agent turns before a human speaks or a new conversation
+ * starts.
  *
  * This is a backstop, not the steering wheel — agents are expected to stop on
- * their own. Direct conversations deliberately stay unlimited: only a non-agent
- * message resets the streak, so a default cap in a pure agent-to-agent DM would
- * halt the room permanently instead of merely bounding a loop.
- *
- * The same caveat applies to the one group shape this default does cover: a
- * group whose members are all agents (reachable — agent-created groups need no
- * human member) has nothing that resets the streak, so it stops auto-replying
- * for good once the cap is reached. That is deliberate: an unattended room is
- * where a runaway loop is most expensive. Recovery needs a human member — the
- * per-conversation `null` opt-out is writable only by a group owner or admin,
- * who must be a member. Teaching the resolver "does this room contain a
- * human?" would mean loading member types at every resolution site, including
- * the stream gate, which does not read them today.
+ * their own. Every triggerable agent message counts in both direct and group
+ * conversations. An explicit `null` remains the deployer opt-out for trusted,
+ * intentionally long-running collaboration.
  */
 export declare const DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = 4;
+export declare const DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS = 4;
 export declare function parseAgentBehaviorSettings(raw: unknown): AgentBehaviorSettingsRecord;
 export declare function normalizeStoredAgentBehaviorPolicy(raw: Record<string, unknown> | undefined): AgentBehaviorSettingsRecord | null;
 export declare function normalizeAgentBehaviorInstructions(value: string | null | undefined): string | null;
 /**
  * The scope-independent participation defaults. `maxConsecutiveAgentTurns` is
- * `null` here because the turn cap is scope-dependent — a group with no stored
- * setting resolves to {@link DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS}. Use
+ * `null` here because the turn cap is scope-dependent — a conversation with no
+ * stored setting resolves to its direct or group safety default. Use
  * {@link resolveAgentBehaviorPolicy} with a `conversationType` to learn what a
  * given conversation actually enforces.
  */
@@ -114,9 +106,9 @@ export declare function getDefaultParticipationPolicy(): ParticipationPolicy;
 /**
  * Coalesce agent defaults and a conversation override into the resolved record
  * every runtime reads. `conversationType` selects the Canon-wide fallbacks that
- * differ per scope — today only the turn cap, which defaults to
- * {@link DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS} in groups and to unlimited
- * everywhere else. Omit it when resolving for the agent scope (no conversation);
+ * differ per scope — today only the turn cap, which defaults to 4 in direct and
+ * group conversations and to unlimited elsewhere. Omit it when resolving for
+ * the agent scope (no conversation);
  * an absent or unknown type always resolves to the unlimited default, so a call
  * site that forgets to thread it can never invent a cap.
  */

package/dist/agentBehaviorPolicy.js

@@ -1,29 +1,25 @@
 import { shouldTriggerAgentTurn } from './turnProtocol.js';
 export const PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
 /**
- * Safety backstop for groups with no explicit turn cap: at most this many
- * consecutive agent turns before a human has to speak again.
+ * Safety backstop for conversations with no explicit turn cap: at most this
+ * many consecutive agent turns before a human speaks or a new conversation
+ * starts.
  *
  * This is a backstop, not the steering wheel — agents are expected to stop on
- * their own. Direct conversations deliberately stay unlimited: only a non-agent
- * message resets the streak, so a default cap in a pure agent-to-agent DM would
- * halt the room permanently instead of merely bounding a loop.
- *
- * The same caveat applies to the one group shape this default does cover: a
- * group whose members are all agents (reachable — agent-created groups need no
- * human member) has nothing that resets the streak, so it stops auto-replying
- * for good once the cap is reached. That is deliberate: an unattended room is
- * where a runaway loop is most expensive. Recovery needs a human member — the
- * per-conversation `null` opt-out is writable only by a group owner or admin,
- * who must be a member. Teaching the resolver "does this room contain a
- * human?" would mean loading member types at every resolution site, including
- * the stream gate, which does not read them today.
+ * their own. Every triggerable agent message counts in both direct and group
+ * conversations. An explicit `null` remains the deployer opt-out for trusted,
+ * intentionally long-running collaboration.
  */
 export const DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = 4;
+export const DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS = 4;
 function defaultMaxConsecutiveAgentTurns(conversationType) {
-    return conversationType === 'group'
-        ? DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS
-        : null;
+    if (conversationType === 'group') {
+        return DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS;
+    }
+    if (conversationType === 'direct') {
+        return DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS;
+    }
+    return null;
 }
 const VALID_PARTICIPATION_STYLES = new Set([
     'natural',
@@ -146,8 +142,8 @@ export function normalizeAgentBehaviorInstructions(value) {
 }
 /**
  * The scope-independent participation defaults. `maxConsecutiveAgentTurns` is
- * `null` here because the turn cap is scope-dependent — a group with no stored
- * setting resolves to {@link DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS}. Use
+ * `null` here because the turn cap is scope-dependent — a conversation with no
+ * stored setting resolves to its direct or group safety default. Use
  * {@link resolveAgentBehaviorPolicy} with a `conversationType` to learn what a
  * given conversation actually enforces.
  */
@@ -157,9 +153,9 @@ export function getDefaultParticipationPolicy() {
 /**
  * Coalesce agent defaults and a conversation override into the resolved record
  * every runtime reads. `conversationType` selects the Canon-wide fallbacks that
- * differ per scope — today only the turn cap, which defaults to
- * {@link DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS} in groups and to unlimited
- * everywhere else. Omit it when resolving for the agent scope (no conversation);
+ * differ per scope — today only the turn cap, which defaults to 4 in direct and
+ * group conversations and to unlimited elsewhere. Omit it when resolving for
+ * the agent scope (no conversation);
  * an absent or unknown type always resolves to the unlimited default, so a call
  * site that forgets to thread it can never invent a cap.
  */

package/dist/canon-verb-wire.schema.json

@@ -31,7 +31,6 @@
         "remove_member",
         "leave_conversation",
         "list_contacts",
-        "list_contact_requests",
         "list_conversations",
         "no_reply"
       ]
@@ -212,71 +211,6 @@
             }
           ]
         },
-        "sessionConfig": {
-          "oneOf": [
-            {
-              "type": "object",
-              "description": "Typed setup policy for an agent target. Values are stable runtime-advertised option ids and are validated against the target descriptor before session creation; labels, prompts, workspace paths, and arbitrary fields are not permitted.",
-              "additionalProperties": false,
-              "properties": {
-                "model": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "permissionMode": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "effort": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "workspaceId": {
-                  "type": "string",
-                  "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
-                  "maxLength": 256
-                },
-                "executionMode": {
-                  "enum": [
-                    "worktree",
-                    "locked"
-                  ]
-                },
-                "runtimeControlValues": {
-                  "type": "object",
-                  "maxProperties": 24,
-                  "propertyNames": {
-                    "pattern": "^[A-Za-z0-9_-]{1,80}$",
-                    "not": {
-                      "enum": [
-                        "model",
-                        "workspace",
-                        "executionMode",
-                        "permissionMode",
-                        "effort",
-                        "interrupt",
-                        "runtimeControlValues",
-                        "updatedAt",
-                        "updatedBy"
-                      ]
-                    }
-                  },
-                  "additionalProperties": {
-                    "type": "string",
-                    "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-                    "maxLength": 256
-                  }
-                }
-              }
-            },
-            {
-              "type": "null"
-            }
-          ]
-        },
         "idempotencyKey": {
           "type": "string",
           "pattern": "^[A-Za-z0-9_.:-]{1,160}$",
@@ -506,7 +440,6 @@
             "remove_member",
             "leave_conversation",
             "list_contacts",
-            "list_contact_requests",
             "list_conversations",
             "no_reply"
           ]

package/dist/canon-verbs.limits.json

@@ -38,8 +38,6 @@
     "nativeKeys": 24,
     "nativeValueChars": 256,
     "nativeHandles": 16,
-    "sessionConfigValues": 24,
-    "sessionConfigValueChars": 256,
     "minTimeoutMs": 1000,
     "maxTimeoutMs": 1800000,
     "maxApprovalTimeoutMs": 259200000,
@@ -61,10 +59,7 @@
     "sessionRuleToolPattern": "^[\\w.*:-]{1,128}$",
     "runtimeCorrelationValue": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
     "runtimeMethod": "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$",
-    "runtimeOptionValue": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-    "workspaceOptionId": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
     "runtimeHandleKey": "^[A-Za-z0-9_.:-]{1,80}$",
-    "runtimeControlId": "^[A-Za-z0-9_-]{1,80}$",
     "resumableUploadId": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
   },
   "byteSemantics": {

package/dist/canon-verbs.schema.json

@@ -13,23 +13,6 @@
       },
       "description": "Client idempotency key (<= 160 chars / 256 UTF-8 bytes; no slashes, control chars, '.', '..', __x__). Same id + identical payload replays idempotently; different payload -> 409 MESSAGE_ID_EXISTS."
     },
-    "groupInviteRequirements": {
-      "type": "object",
-      "description": "Independent gates on a pending group invite. policyApproval is social consent; ownerSessionSetup means the agent owner must choose the runtime session configuration before membership is activated.",
-      "required": [
-        "policyApproval",
-        "ownerSessionSetup"
-      ],
-      "additionalProperties": false,
-      "properties": {
-        "policyApproval": {
-          "type": "boolean"
-        },
-        "ownerSessionSetup": {
-          "type": "boolean"
-        }
-      }
-    },
     "selfContext": {
       "type": "object",
       "description": "Private note-to-self attached to a cross-conversation send. Visible only to the sending agent (surfaced back as provenance.activeSelfContext); never shown to recipients. Enforced by functions/src/utils/selfContexts.ts.",
@@ -557,67 +540,9 @@
         }
       }
     },
-    "sessionConfig": {
-      "type": "object",
-      "description": "Typed setup policy for an agent target. Values are stable runtime-advertised option ids and are validated against the target descriptor before session creation; labels, prompts, workspace paths, and arbitrary fields are not permitted.",
-      "additionalProperties": false,
-      "properties": {
-        "model": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "permissionMode": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "effort": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "workspaceId": {
-          "type": "string",
-          "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$",
-          "maxLength": 256
-        },
-        "executionMode": {
-          "enum": [
-            "worktree",
-            "locked"
-          ]
-        },
-        "runtimeControlValues": {
-          "type": "object",
-          "maxProperties": 24,
-          "propertyNames": {
-            "pattern": "^[A-Za-z0-9_-]{1,80}$",
-            "not": {
-              "enum": [
-                "model",
-                "workspace",
-                "executionMode",
-                "permissionMode",
-                "effort",
-                "interrupt",
-                "runtimeControlValues",
-                "updatedAt",
-                "updatedBy"
-              ]
-            }
-          },
-          "additionalProperties": {
-            "type": "string",
-            "pattern": "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$",
-            "maxLength": 256
-          }
-        }
-      }
-    },
     "send_to_input": {
       "type": "object",
-      "description": "Message another conversation or user (admission-aware), optionally carrying a private self-context. Exactly one of targetConversationId / targetUserId / canonContactId. canonContactId is NOT a wire field: bindings resolve it via POST /admission/resolve to a targetUserId first. Projections: selfContext sends -> POST /messages/send-contextual (which requires sourceConversationId + selfContext); known-conversation sends without selfContext -> POST /messages/send; plain user sends -> admission resolve + create + send (the core reachOut composite). User targets resolve admission first: open targets get the message, approval-required targets get a contact request (send deferred and auto-fulfilled on approval), owner-only targets surface as status 'unavailable' with reason owner-only.",
+      "description": "Message another conversation or user (admission-aware), optionally carrying a private self-context. Exactly one of targetConversationId / targetUserId / canonContactId. canonContactId is NOT a wire field: bindings resolve it via POST /admission/resolve to a targetUserId first. Projections: selfContext sends -> POST /messages/send-contextual (which requires sourceConversationId + selfContext); known-conversation sends without selfContext -> POST /messages/send; plain user sends -> admission resolve + create + send (the core reachOut composite). User targets resolve admission first: open targets get the message, approval-required targets get a contact request (send deferred and auto-fulfilled on approval), closed targets surface as status 'unavailable' with reason closed.",
       "additionalProperties": false,
       "properties": {
         "targetConversationId": {
@@ -653,17 +578,6 @@
         "sessionSelection": {
           "$ref": "#/$defs/sessionSelection"
         },
-        "sessionConfig": {
-          "oneOf": [
-            {
-              "$ref": "#/$defs/sessionConfig"
-            },
-            {
-              "type": "null"
-            }
-          ],
-          "description": "Coding-agent session setup (model/permissionMode/effort/workspaceId/executionMode); only applied to agent targets, stripped for humans."
-        },
         "messageOptions": {
           "$ref": "#/$defs/messageOptions"
         }
@@ -1511,7 +1425,7 @@
     },
     "create_group_input": {
       "type": "object",
-      "description": "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests; agents needing explicit group-session setup become pending owner requests; hard-denied members are skipped (see the result). A creator-only group is valid when at least one requested member has a pending invite. A creator that itself requires setup cannot create groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED). Under MLS, membership changes are Add/Remove proposals + Commit — a group operation is a cryptographic state change, not a codec swap.",
+      "description": "Create a group conversation. Each target's groupJoinPolicy is enforced server-side with staged admission: directly-addable members join at creation, approval-required members become pending group_invite requests; hard-denied members are skipped (see the result). A creator-only group is valid when at least one requested member has a pending invite. Under MLS, membership changes are Add/Remove proposals + Commit — a group operation is a cryptographic state change, not a codec swap.",
       "required": [
         "name",
         "memberIds"
@@ -1537,7 +1451,7 @@
     },
     "create_group_result": {
       "type": "object",
-      "description": "Staged admission: the group exists with the directly-added members; `pending` lists group_invite requests awaiting policy approval, owner session setup, or both; `skipped` lists hard-denied targets.",
+      "description": "Staged admission: the group exists with the directly-added members; `pending` lists group_invite requests awaiting policy approval; `skipped` lists hard-denied targets.",
       "required": [
         "status",
         "conversationId",
@@ -1565,8 +1479,7 @@
             "type": "object",
             "required": [
               "userId",
-              "requestId",
-              "requirements"
+              "requestId"
             ],
             "additionalProperties": true,
             "properties": {
@@ -1575,9 +1488,6 @@
               },
               "requestId": {
                 "type": "string"
-              },
-              "requirements": {
-                "$ref": "#/$defs/groupInviteRequirements"
               }
             }
           }
@@ -1605,7 +1515,7 @@
     },
     "add_member_input": {
       "type": "object",
-      "description": "A target needing policy approval and/or explicit owner session setup yields one pending group_invite. Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write — the verb semantics are stable, the mechanism is not.",
+      "description": "A target needing policy approval yields one pending group_invite. Under MLS an add is an Add proposal + Commit (new epoch), not a server-side membership write — the verb semantics are stable, the mechanism is not.",
       "required": [
         "conversationId",
         "userId"
@@ -1623,7 +1533,7 @@
       }
     },
     "add_member_result": {
-      "description": "Targets needing policy approval and/or owner session setup yield one pending group_invite routed to the target or agent owner.",
+      "description": "Targets needing policy approval yield an exact pending group invite.",
       "oneOf": [
         {
           "type": "object",
@@ -1641,8 +1551,7 @@
           "type": "object",
           "required": [
             "status",
-            "requestId",
-            "requirements"
+            "requestId"
           ],
           "additionalProperties": true,
           "properties": {
@@ -1651,9 +1560,6 @@
             },
             "requestId": {
               "type": "string"
-            },
-            "requirements": {
-              "$ref": "#/$defs/groupInviteRequirements"
             }
           }
         }
@@ -1764,81 +1670,6 @@
         }
       }
     },
-    "list_contact_requests_input": {
-      "type": "object",
-      "additionalProperties": false,
-      "properties": {}
-    },
-    "list_contact_requests_result": {
-      "type": "object",
-      "description": "Pending inbound requests, newest first, capped at 100. Items are SerializedContactRequest (backend-contracts contactRequest.ts). Read-only awareness: approval routes to the owner; agents cannot approve/reject.",
-      "required": [
-        "requests"
-      ],
-      "additionalProperties": true,
-      "properties": {
-        "requests": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "required": [
-              "id",
-              "requesterId",
-              "targetId",
-              "status",
-              "kind"
-            ],
-            "additionalProperties": true,
-            "properties": {
-              "id": {
-                "type": "string"
-              },
-              "requesterId": {
-                "type": "string"
-              },
-              "requesterName": {
-                "type": "string"
-              },
-              "targetId": {
-                "type": "string"
-              },
-              "status": {
-                "enum": [
-                  "pending",
-                  "approved",
-                  "rejected",
-                  "expired"
-                ]
-              },
-              "kind": {
-                "enum": [
-                  "dm",
-                  "group_invite"
-                ]
-              },
-              "message": {
-                "type": [
-                  "string",
-                  "null"
-                ]
-              },
-              "createdAt": {
-                "type": [
-                  "string",
-                  "null"
-                ]
-              },
-              "expiresAt": {
-                "type": [
-                  "string",
-                  "null"
-                ]
-              }
-            }
-          }
-        }
-      }
-    },
     "list_conversations_input": {
       "type": "object",
       "additionalProperties": false,

package/dist/cjs/agentBehaviorPolicy.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = exports.PARTICIPATION_HISTORY_FETCH_LIMIT = void 0;
+exports.DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS = exports.DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = exports.PARTICIPATION_HISTORY_FETCH_LIMIT = void 0;
 exports.parseAgentBehaviorSettings = parseAgentBehaviorSettings;
 exports.normalizeStoredAgentBehaviorPolicy = normalizeStoredAgentBehaviorPolicy;
 exports.normalizeAgentBehaviorInstructions = normalizeAgentBehaviorInstructions;
@@ -12,29 +12,25 @@ exports.evaluateParticipationPolicy = evaluateParticipationPolicy;
 const turnProtocol_js_1 = require("./turnProtocol.js");
 exports.PARTICIPATION_HISTORY_FETCH_LIMIT = 50;
 /**
- * Safety backstop for groups with no explicit turn cap: at most this many
- * consecutive agent turns before a human has to speak again.
+ * Safety backstop for conversations with no explicit turn cap: at most this
+ * many consecutive agent turns before a human speaks or a new conversation
+ * starts.
  *
  * This is a backstop, not the steering wheel — agents are expected to stop on
- * their own. Direct conversations deliberately stay unlimited: only a non-agent
- * message resets the streak, so a default cap in a pure agent-to-agent DM would
- * halt the room permanently instead of merely bounding a loop.
- *
- * The same caveat applies to the one group shape this default does cover: a
- * group whose members are all agents (reachable — agent-created groups need no
- * human member) has nothing that resets the streak, so it stops auto-replying
- * for good once the cap is reached. That is deliberate: an unattended room is
- * where a runaway loop is most expensive. Recovery needs a human member — the
- * per-conversation `null` opt-out is writable only by a group owner or admin,
- * who must be a member. Teaching the resolver "does this room contain a
- * human?" would mean loading member types at every resolution site, including
- * the stream gate, which does not read them today.
+ * their own. Every triggerable agent message counts in both direct and group
+ * conversations. An explicit `null` remains the deployer opt-out for trusted,
+ * intentionally long-running collaboration.
  */
 exports.DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS = 4;
+exports.DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS = 4;
 function defaultMaxConsecutiveAgentTurns(conversationType) {
-    return conversationType === 'group'
-        ? exports.DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS
-        : null;
+    if (conversationType === 'group') {
+        return exports.DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS;
+    }
+    if (conversationType === 'direct') {
+        return exports.DEFAULT_DIRECT_MAX_CONSECUTIVE_AGENT_TURNS;
+    }
+    return null;
 }
 const VALID_PARTICIPATION_STYLES = new Set([
     'natural',
@@ -157,8 +153,8 @@ function normalizeAgentBehaviorInstructions(value) {
 }
 /**
  * The scope-independent participation defaults. `maxConsecutiveAgentTurns` is
- * `null` here because the turn cap is scope-dependent — a group with no stored
- * setting resolves to {@link DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS}. Use
+ * `null` here because the turn cap is scope-dependent — a conversation with no
+ * stored setting resolves to its direct or group safety default. Use
  * {@link resolveAgentBehaviorPolicy} with a `conversationType` to learn what a
  * given conversation actually enforces.
  */
@@ -168,9 +164,9 @@ function getDefaultParticipationPolicy() {
 /**
  * Coalesce agent defaults and a conversation override into the resolved record
  * every runtime reads. `conversationType` selects the Canon-wide fallbacks that
- * differ per scope — today only the turn cap, which defaults to
- * {@link DEFAULT_GROUP_MAX_CONSECUTIVE_AGENT_TURNS} in groups and to unlimited
- * everywhere else. Omit it when resolving for the agent scope (no conversation);
+ * differ per scope — today only the turn cap, which defaults to 4 in direct and
+ * group conversations and to unlimited elsewhere. Omit it when resolving for
+ * the agent scope (no conversation);
  * an absent or unknown type always resolves to the unlimited default, so a call
  * site that forgets to thread it can never invent a cap.
  */

package/dist/cjs/communication.js

@@ -7,10 +7,6 @@ function readCommunicationRule(value) {
     if (value === 'open' || value === 'approval-required' || value === 'closed') {
         return value;
     }
-    // Existing owner-only records have the same outsider-facing meaning as
-    // closed; the agent owner bypass remains a separate server-side rule.
-    if (value === 'owner-only')
-        return 'closed';
     return 'approval-required';
 }
 function parseDirectConversationSelection(value) {

package/dist/cjs/firestoreValues.js

@@ -14,7 +14,7 @@ function normalizeStoredString(value) {
 /**
  * Firestore Timestamp-like -> ISO 8601, or null. Accepts only objects exposing
  * `toDate()`. A raw `Date` is deliberately NOT accepted: that matches both call
- * sites this replaced. `message.ts` and `contactRequest.ts` keep their own
+ * sites this replaced. `message.ts` keeps its own
  * Date-tolerant normalizers — a different contract, not this one.
  */
 function firestoreTimestampToISOString(value) {

package/dist/cjs/index.js

@@ -24,13 +24,12 @@ __exportStar(require("./runtimeCardStorage.js"), exports);
 __exportStar(require("./turnProtocol.js"), exports);
 __exportStar(require("./agentBehaviorPolicy.js"), exports);
 __exportStar(require("./agentSearch.js"), exports);
-__exportStar(require("./contactRequest.js"), exports);
 __exportStar(require("./verbContract.js"), exports);
 __exportStar(require("./verbSchemas.js"), exports);
 __exportStar(require("./verbWire.js"), exports);
-__exportStar(require("./accessPolicy.js"), exports);
 __exportStar(require("./communication.js"), exports);
 __exportStar(require("./apiErrors.js"), exports);
 __exportStar(require("./firestoreValues.js"), exports);
 __exportStar(require("./moderation.js"), exports);
 __exportStar(require("./selfContext.js"), exports);
+__exportStar(require("./replyAuthority.js"), exports);

package/dist/cjs/replyAuthority.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });