@canonmsg/backend-contracts 7.0.0 → 8.0.1

package/dist/cjs/verbContract.js

@@ -44,7 +44,7 @@
  * canon-verbs.limits.json) after schema validation.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CANON_VERB_LIMITS_ARTIFACT = exports.NO_REPLY_ACK_NOTE = exports.CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = exports.VERB_NATIVE_METADATA_KEYS = exports.CANON_VERB_NAMES = exports.SELF_CONTEXT_TYPE = exports.VERB_RATE_LIMITS = exports.VERB_LIMITS = exports.VERB_ID_PATTERNS = exports.CANON_CARD_SCHEMA_ID = exports.CANON_VERB_NAMESPACE = exports.CANON_VERBS_SCHEMA_ID = exports.CANON_VERBS_SCHEMA_VERSION = void 0;
+exports.CANON_VERB_LIMITS_ARTIFACT = exports.NO_REPLY_ACK_NOTE = exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = exports.VERB_NATIVE_METADATA_KEYS = exports.CANON_VERB_NAMES = exports.SELF_CONTEXT_TYPE = exports.VERB_RATE_LIMITS = exports.VERB_LIMITS = exports.VERB_ID_PATTERNS = exports.CANON_CARD_SCHEMA_ID = exports.CANON_VERB_NAMESPACE = exports.CANON_VERBS_SCHEMA_ID = exports.CANON_VERBS_SCHEMA_VERSION = void 0;
 exports.normalizeVerbNativeMetadata = normalizeVerbNativeMetadata;
 exports.canonVerbToolName = canonVerbToolName;
 exports.findVerbByteLimitViolations = findVerbByteLimitViolations;
@@ -78,10 +78,7 @@ exports.VERB_ID_PATTERNS = {
     sessionRuleToolPattern: '^[\\w.*:-]{1,128}$',
     runtimeCorrelationValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
     runtimeMethod: '^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$',
-    runtimeOptionValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$',
-    workspaceOptionId: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
     runtimeHandleKey: '^[A-Za-z0-9_.:-]{1,80}$',
-    runtimeControlId: '^[A-Za-z0-9_-]{1,80}$',
     /** UUID issued by Canon's resumable-media session endpoint. */
     resumableUploadId: '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$',
 };
@@ -151,9 +148,6 @@ exports.VERB_LIMITS = {
     nativeKeys: 24,
     nativeValueChars: 256,
     nativeHandles: 16,
-    /** Initial agent-session setup carried by send_to. */
-    sessionConfigValues: 24,
-    sessionConfigValueChars: 256,
     /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
     minTimeoutMs: 1000,
     /** input/card/plan ceiling (30 minutes). */
@@ -204,7 +198,6 @@ exports.CANON_VERB_NAMES = [
     'remove_member',
     'leave_conversation',
     'list_contacts',
-    'list_contact_requests',
     'list_conversations',
     'no_reply',
 ];
@@ -273,14 +266,6 @@ function normalizeVerbNativeMetadata(value) {
  * invite is allowed; the error detail carries the attempted partition.
  */
 exports.CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = 'CREATE_GROUP_NO_ADDABLE_MEMBERS';
-/**
- * Error code on the 403 a create_group receives when the CREATOR itself is
- * a coding agent requiring explicit session setup: the group helper prepares
- * session configs for every coding-agent member including the creator, and
- * only the agent's human owner may provide them (v1 scoping — the owner
- * creates the group from the app instead).
- */
-exports.CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = 'CREATE_GROUP_CREATOR_SETUP_REQUIRED';
 /**
  * The `note` the server returns on a `no_reply` ack — the model's closure
  * sentence. It lives here, not in a host, because every binding surfaces the

package/dist/cjs/verbSchemas.js

@@ -29,23 +29,11 @@
  *   endpoints validate against these schemas directly).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CANON_VERB_SCHEMA_REFS = exports.CANON_VERBS_JSON_SCHEMA = exports.VERB_SESSION_CONFIG_JSON_SCHEMA = exports.VERB_NATIVE_METADATA_JSON_SCHEMA = void 0;
+exports.CANON_VERB_SCHEMA_REFS = exports.CANON_VERBS_JSON_SCHEMA = exports.VERB_NATIVE_METADATA_JSON_SCHEMA = void 0;
 exports.getVerbInputSchema = getVerbInputSchema;
 exports.getVerbResultSchema = getVerbResultSchema;
 const verbContract_js_1 = require("./verbContract.js");
 const REF = (def) => ({ $ref: `#/$defs/${def}` });
-const groupInviteRequirementsDef = {
-    type: 'object',
-    description: 'Independent gates on a pending group invite. policyApproval is social '
-        + 'consent; ownerSessionSetup means the agent owner must choose the '
-        + 'runtime session configuration before membership is activated.',
-    required: ['policyApproval', 'ownerSessionSetup'],
-    additionalProperties: false,
-    properties: {
-        policyApproval: { type: 'boolean' },
-        ownerSessionSetup: { type: 'boolean' },
-    },
-};
 const selfContextDef = {
     type: 'object',
     description: 'Private note-to-self attached to a cross-conversation send. Visible only to the '
@@ -315,50 +303,6 @@ exports.VERB_NATIVE_METADATA_JSON_SCHEMA = {
         },
     },
 };
-const sessionConfigValueDef = {
-    type: 'string',
-    pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeOptionValue,
-    maxLength: verbContract_js_1.VERB_LIMITS.sessionConfigValueChars,
-};
-exports.VERB_SESSION_CONFIG_JSON_SCHEMA = {
-    type: 'object',
-    description: 'Typed setup policy for an agent target. Values are stable runtime-advertised '
-        + 'option ids and are validated against the target descriptor before session creation; '
-        + 'labels, prompts, workspace paths, and arbitrary fields are not permitted.',
-    additionalProperties: false,
-    properties: {
-        model: sessionConfigValueDef,
-        permissionMode: sessionConfigValueDef,
-        effort: sessionConfigValueDef,
-        workspaceId: {
-            type: 'string',
-            pattern: verbContract_js_1.VERB_ID_PATTERNS.workspaceOptionId,
-            maxLength: verbContract_js_1.VERB_LIMITS.sessionConfigValueChars,
-        },
-        executionMode: { enum: ['worktree', 'locked'] },
-        runtimeControlValues: {
-            type: 'object',
-            maxProperties: verbContract_js_1.VERB_LIMITS.sessionConfigValues,
-            propertyNames: {
-                pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeControlId,
-                not: {
-                    enum: [
-                        'model',
-                        'workspace',
-                        'executionMode',
-                        'permissionMode',
-                        'effort',
-                        'interrupt',
-                        'runtimeControlValues',
-                        'updatedAt',
-                        'updatedBy',
-                    ],
-                },
-            },
-            additionalProperties: sessionConfigValueDef,
-        },
-    },
-};
 const timeoutFields = (maxMs, ceilingNote) => ({
     timeoutMs: {
         type: 'integer',
@@ -388,7 +332,7 @@ const send_to_input = {
         + 'sends -> admission resolve + create + send (the core reachOut composite). User '
         + 'targets resolve admission first: open targets get the message, approval-required '
         + 'targets get a contact request (send deferred and auto-fulfilled on approval), '
-        + "owner-only targets surface as status 'unavailable' with reason owner-only.",
+        + "closed targets surface as status 'unavailable' with reason closed.",
     additionalProperties: false,
     properties: {
         targetConversationId: { type: 'string', pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeId },
@@ -412,11 +356,6 @@ const send_to_input = {
                 + `truncate to ${verbContract_js_1.VERB_LIMITS.contactRequestNoteChars} chars.`,
         },
         sessionSelection: REF('sessionSelection'),
-        sessionConfig: {
-            oneOf: [REF('sessionConfig'), { type: 'null' }],
-            description: 'Coding-agent session setup (model/permissionMode/effort/workspaceId/executionMode); '
-                + 'only applied to agent targets, stripped for humans.',
-        },
         messageOptions: REF('messageOptions'),
     },
     oneOf: [
@@ -843,11 +782,9 @@ const create_group_input = {
     description: "Create a group conversation. Each target's groupJoinPolicy is enforced "
         + 'server-side with staged admission: directly-addable members join at '
         + 'creation, approval-required members become pending group_invite '
-        + 'requests; agents needing explicit group-session setup become pending '
-        + 'owner requests; hard-denied members are skipped (see the result). A '
+        + 'requests; hard-denied members are skipped (see the result). A '
         + 'creator-only group is valid when at least one requested member has a '
-        + 'pending invite. A creator that itself requires setup cannot create '
-        + 'groups (403 CREATE_GROUP_CREATOR_SETUP_REQUIRED). Under MLS, membership '
+        + 'pending invite. Under MLS, membership '
         + 'changes are Add/Remove proposals + Commit — a group operation is a '
         + 'cryptographic state change, not a codec swap.',
     required: ['name', 'memberIds'],
@@ -866,8 +803,8 @@ const create_group_input = {
 const create_group_result = {
     type: 'object',
     description: 'Staged admission: the group exists with the directly-added members; '
-        + '`pending` lists group_invite requests awaiting policy approval, owner '
-        + 'session setup, or both; `skipped` lists hard-denied targets.',
+        + '`pending` lists group_invite requests awaiting policy approval; '
+        + '`skipped` lists hard-denied targets.',
     required: ['status', 'conversationId', 'added', 'pending', 'skipped'],
     additionalProperties: true,
     properties: {
@@ -881,12 +818,11 @@ const create_group_result = {
             type: 'array',
             items: {
                 type: 'object',
-                required: ['userId', 'requestId', 'requirements'],
+                required: ['userId', 'requestId'],
                 additionalProperties: true,
                 properties: {
                     userId: { type: 'string' },
                     requestId: { type: 'string' },
-                    requirements: REF('groupInviteRequirements'),
                 },
             },
         },
@@ -906,8 +842,8 @@ const create_group_result = {
 };
 const add_member_input = {
     type: 'object',
-    description: 'A target needing policy approval and/or explicit owner session setup '
-        + 'yields one pending group_invite. Under MLS an add is an Add proposal '
+    description: 'A target needing policy approval yields one pending group_invite. '
+        + 'Under MLS an add is an Add proposal '
         + '+ Commit (new epoch), not a server-side membership write — the verb '
         + 'semantics are stable, the mechanism is not.',
     required: ['conversationId', 'userId'],
@@ -918,8 +854,7 @@ const add_member_input = {
     },
 };
 const add_member_result = {
-    description: 'Targets needing policy approval and/or owner session setup yield one '
-        + 'pending group_invite routed to the target or agent owner.',
+    description: 'Targets needing policy approval yield an exact pending group invite.',
     oneOf: [
         {
             type: 'object',
@@ -929,12 +864,11 @@ const add_member_result = {
         },
         {
             type: 'object',
-            required: ['status', 'requestId', 'requirements'],
+            required: ['status', 'requestId'],
             additionalProperties: true,
             properties: {
                 status: { const: 'pending' },
                 requestId: { type: 'string' },
-                requirements: REF('groupInviteRequirements'),
             },
         },
     ],
@@ -1001,40 +935,6 @@ const list_contacts_result = {
         },
     },
 };
-const list_contact_requests_input = {
-    type: 'object',
-    additionalProperties: false,
-    properties: {},
-};
-const list_contact_requests_result = {
-    type: 'object',
-    description: 'Pending inbound requests, newest first, capped at 100. Items are '
-        + 'SerializedContactRequest (backend-contracts contactRequest.ts). Read-only awareness: '
-        + "approval routes to the owner; agents cannot approve/reject.",
-    required: ['requests'],
-    additionalProperties: true,
-    properties: {
-        requests: {
-            type: 'array',
-            items: {
-                type: 'object',
-                required: ['id', 'requesterId', 'targetId', 'status', 'kind'],
-                additionalProperties: true,
-                properties: {
-                    id: { type: 'string' },
-                    requesterId: { type: 'string' },
-                    requesterName: { type: 'string' },
-                    targetId: { type: 'string' },
-                    status: { enum: ['pending', 'approved', 'rejected', 'expired'] },
-                    kind: { enum: ['dm', 'group_invite'] },
-                    message: { type: ['string', 'null'] },
-                    createdAt: { type: ['string', 'null'] },
-                    expiresAt: { type: ['string', 'null'] },
-                },
-            },
-        },
-    },
-};
 const list_conversations_input = {
     type: 'object',
     additionalProperties: false,
@@ -1128,7 +1028,6 @@ exports.CANON_VERBS_JSON_SCHEMA = {
         + 'deliberately NOT verbs — they stay host-mediated.',
     $defs: {
         messageId: messageIdDef,
-        groupInviteRequirements: groupInviteRequirementsDef,
         selfContext: selfContextDef,
         sessionSelection: sessionSelectionDef,
         mediaAttachment: mediaAttachmentDef,
@@ -1141,7 +1040,6 @@ exports.CANON_VERBS_JSON_SCHEMA = {
         sessionRule: sessionRuleDef,
         runtimeCard: runtimeCardDef,
         native: exports.VERB_NATIVE_METADATA_JSON_SCHEMA,
-        sessionConfig: exports.VERB_SESSION_CONFIG_JSON_SCHEMA,
         send_to_input,
         send_to_result,
         request_input_input,
@@ -1170,8 +1068,6 @@ exports.CANON_VERBS_JSON_SCHEMA = {
         leave_conversation_result,
         list_contacts_input,
         list_contacts_result,
-        list_contact_requests_input,
-        list_contact_requests_result,
         list_conversations_input,
         list_conversations_result,
         no_reply_input,

package/dist/cjs/verbWire.js

@@ -47,7 +47,6 @@ exports.VERB_WIRE_ENVELOPE_FIELDS = {
             'canonContactId',
             'sourceConversationId',
             'sessionSelection',
-            'sessionConfig',
             'idempotencyKey',
             'replyTo',
             'replyToPosition',
@@ -116,7 +115,6 @@ exports.VERB_WIRE_ENVELOPE_FIELDS = {
         optional: [],
     },
     list_contacts: { required: [], optional: [] },
-    list_contact_requests: { required: [], optional: [] },
     list_conversations: { required: [], optional: ['limit'] },
     no_reply: { required: [], optional: ['conversationId', 'messageId'] },
 };
@@ -206,9 +204,6 @@ const wireEnvelopeDef = {
                 },
             ],
         },
-        sessionConfig: {
-            oneOf: [verbSchemas_js_1.VERB_SESSION_CONFIG_JSON_SCHEMA, { type: 'null' }],
-        },
         idempotencyKey: {
             type: 'string',
             pattern: verbContract_js_1.VERB_ID_PATTERNS.runtimeId,
@@ -342,7 +337,6 @@ function projectVerbIntentToWire(verb, intent, options) {
                 canonContactId: input.canonContactId,
                 sourceConversationId: input.sourceConversationId,
                 sessionSelection: input.sessionSelection,
-                sessionConfig: input.sessionConfig,
                 idempotencyKey: messageOptions.messageId,
                 replyTo: messageOptions.replyTo,
                 replyToPosition: messageOptions.replyToPosition,
@@ -469,8 +463,7 @@ function projectVerbIntentToWire(verb, intent, options) {
             envelope = compact({ conversationId: input.conversationId });
             break;
         }
-        case 'list_contacts':
-        case 'list_contact_requests': {
+        case 'list_contacts': {
             break;
         }
         case 'list_conversations': {
@@ -522,7 +515,6 @@ function mergeVerbWireToIntent(request) {
                 canonContactId: envelope.canonContactId,
                 sourceConversationId: envelope.sourceConversationId,
                 sessionSelection: envelope.sessionSelection,
-                sessionConfig: envelope.sessionConfig,
                 text: value.text,
                 selfContext: value.selfContext,
                 requestMessage: value.requestMessage,
@@ -615,7 +607,6 @@ function mergeVerbWireToIntent(request) {
         case 'leave_conversation':
             return compact({ conversationId: envelope.conversationId });
         case 'list_contacts':
-        case 'list_contact_requests':
             return {};
         case 'list_conversations':
             return compact({ limit: envelope.limit });

package/dist/communication.d.ts

@@ -32,6 +32,17 @@ export type CommunicateInput = {
     targetConversationId: string;
     messageId: string;
     text?: string;
+} | {
+    action: 'share_contact';
+    conversationId: string;
+    contactUserId: string;
+    text?: string;
+    messageId?: string;
+} | {
+    action: 'manage_group_members';
+    conversationId: string;
+    userId: string;
+    operation: 'add' | 'remove';
 };
 export type CommunicateResult = {
     status: 'messaged';
@@ -49,10 +60,6 @@ export type CommunicateResult = {
     pending: Array<{
         userId: string;
         requestId: string;
-        requirements: {
-            policyApproval: boolean;
-            ownerSessionSetup: boolean;
-        };
     }>;
     skipped: Array<{
         userId: string;
@@ -62,6 +69,17 @@ export type CommunicateResult = {
     status: 'forwarded';
     messageId: string;
     targetConversationId: string;
+} | {
+    status: 'shared';
+    conversationId: string;
+    messageId: string;
+} | {
+    status: 'added' | 'removed';
+    conversationId: string;
+    userId: string;
+} | {
+    status: 'approval_required';
+    reason: string;
 } | {
     status: 'blocked' | 'unavailable';
     reason: string;

package/dist/communication.js

@@ -3,10 +3,6 @@ export function readCommunicationRule(value) {
     if (value === 'open' || value === 'approval-required' || value === 'closed') {
         return value;
     }
-    // Existing owner-only records have the same outsider-facing meaning as
-    // closed; the agent owner bypass remains a separate server-side rule.
-    if (value === 'owner-only')
-        return 'closed';
     return 'approval-required';
 }
 export function parseDirectConversationSelection(value) {

package/dist/firestoreValues.d.ts

@@ -3,7 +3,7 @@ export declare function normalizeStoredString(value: unknown): string | null;
 /**
  * Firestore Timestamp-like -> ISO 8601, or null. Accepts only objects exposing
  * `toDate()`. A raw `Date` is deliberately NOT accepted: that matches both call
- * sites this replaced. `message.ts` and `contactRequest.ts` keep their own
+ * sites this replaced. `message.ts` keeps its own
  * Date-tolerant normalizers — a different contract, not this one.
  */
 export declare function firestoreTimestampToISOString(value: unknown): string | null;

package/dist/firestoreValues.js

@@ -10,7 +10,7 @@ export function normalizeStoredString(value) {
 /**
  * Firestore Timestamp-like -> ISO 8601, or null. Accepts only objects exposing
  * `toDate()`. A raw `Date` is deliberately NOT accepted: that matches both call
- * sites this replaced. `message.ts` and `contactRequest.ts` keep their own
+ * sites this replaced. `message.ts` keeps its own
  * Date-tolerant normalizers — a different contract, not this one.
  */
 export function firestoreTimestampToISOString(value) {

package/dist/index.d.ts

@@ -8,13 +8,12 @@ export * from './runtimeCardStorage.js';
 export * from './turnProtocol.js';
 export * from './agentBehaviorPolicy.js';
 export * from './agentSearch.js';
-export * from './contactRequest.js';
 export * from './verbContract.js';
 export * from './verbSchemas.js';
 export * from './verbWire.js';
-export * from './accessPolicy.js';
 export * from './communication.js';
 export * from './apiErrors.js';
 export * from './firestoreValues.js';
 export * from './moderation.js';
 export * from './selfContext.js';
+export * from './replyAuthority.js';

package/dist/index.js

@@ -8,13 +8,12 @@ export * from './runtimeCardStorage.js';
 export * from './turnProtocol.js';
 export * from './agentBehaviorPolicy.js';
 export * from './agentSearch.js';
-export * from './contactRequest.js';
 export * from './verbContract.js';
 export * from './verbSchemas.js';
 export * from './verbWire.js';
-export * from './accessPolicy.js';
 export * from './communication.js';
 export * from './apiErrors.js';
 export * from './firestoreValues.js';
 export * from './moderation.js';
 export * from './selfContext.js';
+export * from './replyAuthority.js';

package/dist/replyAuthority.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Opaque, server-issued authority for one agent reply to one inbound message.
+ *
+ * The stream delivers this beside the triggering message. Runtimes keep it out
+ * of model-visible schemas and return it only on the ordinary reply path.
+ */
+export interface AgentReplyAuthorityV1 {
+    schema: 'canon.agent-reply-authority.v1';
+    sourceMessageId: string;
+    token: string;
+    expiresAt: string;
+}

package/dist/replyAuthority.js

@@ -0,0 +1 @@
+export {};

package/dist/verbContract.d.ts

@@ -42,7 +42,6 @@
  * `findVerbByteLimitViolations()` (or equivalent checks from the emitted
  * canon-verbs.limits.json) after schema validation.
  */
-import type { GroupInviteRequirements } from './contactRequest.js';
 /** Identifier for this contract document. */
 export declare const CANON_VERBS_SCHEMA_VERSION = "canon.verbs.v1";
 /** $id of the emitted JSON Schema bundle. */
@@ -73,10 +72,7 @@ export declare const VERB_ID_PATTERNS: {
     readonly sessionRuleToolPattern: "^[\\w.*:-]{1,128}$";
     readonly runtimeCorrelationValue: "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$";
     readonly runtimeMethod: "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$";
-    readonly runtimeOptionValue: "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$";
-    readonly workspaceOptionId: "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$";
     readonly runtimeHandleKey: "^[A-Za-z0-9_.:-]{1,80}$";
-    readonly runtimeControlId: "^[A-Za-z0-9_-]{1,80}$";
     /** UUID issued by Canon's resumable-media session endpoint. */
     readonly resumableUploadId: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$";
 };
@@ -146,9 +142,6 @@ export declare const VERB_LIMITS: {
     readonly nativeKeys: 24;
     readonly nativeValueChars: 256;
     readonly nativeHandles: 16;
-    /** Initial agent-session setup carried by send_to. */
-    readonly sessionConfigValues: 24;
-    readonly sessionConfigValueChars: 256;
     /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
     readonly minTimeoutMs: 1000;
     /** input/card/plan ceiling (30 minutes). */
@@ -184,7 +177,7 @@ export declare const VERB_RATE_LIMITS: {
 /** The one self-context type the platform accepts today. */
 export declare const SELF_CONTEXT_TYPE = "cross_session";
 /** Canonical verb names. */
-export declare const CANON_VERB_NAMES: readonly ["send_to", "request_input", "request_approval", "check_approval", "send_card", "request_card", "share_contact", "react", "forward", "create_group", "add_member", "remove_member", "leave_conversation", "list_contacts", "list_contact_requests", "list_conversations", "no_reply"];
+export declare const CANON_VERB_NAMES: readonly ["send_to", "request_input", "request_approval", "check_approval", "send_card", "request_card", "share_contact", "react", "forward", "create_group", "add_member", "remove_member", "leave_conversation", "list_contacts", "list_conversations", "no_reply"];
 export type CanonVerbName = (typeof CANON_VERB_NAMES)[number];
 /** Private note-to-self attached to a cross-conversation send. */
 export interface VerbSelfContext {
@@ -202,20 +195,6 @@ export type VerbSessionSelection = {
     mode: 'specific';
     conversationId: string;
 };
-/**
- * Public setup policy for the target agent session. Every value is a stable
- * runtime-advertised option id, never a label, prompt, path, or other free
- * text. The server also validates each selection against the target's live
- * descriptor before creating a session.
- */
-export interface VerbSessionConfig {
-    model?: string;
-    permissionMode?: string;
-    effort?: string;
-    runtimeControlValues?: Record<string, string>;
-    workspaceId?: string;
-    executionMode?: 'worktree' | 'locked';
-}
 /**
  * Bounded runtime correlation carried in the public wire envelope. These are
  * opaque identifiers only; workspace paths, commands, prompts, summaries,
@@ -311,8 +290,6 @@ export interface SendToInput {
     requestMessage?: string;
     /** Only meaningful for user targets that are agents. Default: continue_or_create. */
     sessionSelection?: VerbSessionSelection;
-    /** Coding-agent session setup; only applied when the target is an agent. */
-    sessionConfig?: VerbSessionConfig | null;
     messageOptions?: VerbMessageOptions;
 }
 export type SendToResult = {
@@ -613,17 +590,16 @@ export interface CreateGroupInput {
 export interface PendingGroupInviteResult {
     userId: string;
     requestId: string;
-    requirements: GroupInviteRequirements;
 }
 export interface CreateGroupResult {
     status: 'created';
     conversationId: string;
     /** Members admitted synchronously during creation. */
     added: string[];
-    /** group_invite requests awaiting policy approval, owner setup, or both. */
+    /** group_invite requests awaiting exact policy approval. */
     pending: PendingGroupInviteResult[];
     /** Members the staged create could not admit: hard policy denials
-     * (owner-only, blocked, inactive, not-found, …). */
+     * (closed, blocked, inactive, not-found, …). */
     skipped: Array<{
         userId: string;
         reason: string;
@@ -635,25 +611,16 @@ export interface CreateGroupResult {
  * invite is allowed; the error detail carries the attempted partition.
  */
 export declare const CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = "CREATE_GROUP_NO_ADDABLE_MEMBERS";
-/**
- * Error code on the 403 a create_group receives when the CREATOR itself is
- * a coding agent requiring explicit session setup: the group helper prepares
- * session configs for every coding-agent member including the creator, and
- * only the agent's human owner may provide them (v1 scoping — the owner
- * creates the group from the app instead).
- */
-export declare const CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = "CREATE_GROUP_CREATOR_SETUP_REQUIRED";
 export interface AddMemberInput {
     conversationId: string;
     userId: string;
 }
-/** Policy approval and/or required owner setup yield one pending group invite. */
+/** Policy approval yields one exact pending group invite. */
 export type AddMemberResult = {
     status: 'added';
 } | {
     status: 'pending';
     requestId: string;
-    requirements: GroupInviteRequirements;
 };
 export interface RemoveMemberInput {
     conversationId: string;
@@ -680,11 +647,6 @@ export interface VerbContact {
 export interface ListContactsResult {
     contacts: VerbContact[];
 }
-export type ListContactRequestsInput = Record<string, never>;
-/** Items are SerializedContactRequest (contactRequest.ts) — pending inbound only, newest first, capped at 100. */
-export interface ListContactRequestsResult {
-    requests: unknown[];
-}
 export interface ListConversationsInput {
     /** Optional client-side cap; the REST endpoint returns all memberships. */
     limit?: number;
@@ -811,9 +773,6 @@ export declare const CANON_VERB_LIMITS_ARTIFACT: {
         readonly nativeKeys: 24;
         readonly nativeValueChars: 256;
         readonly nativeHandles: 16;
-        /** Initial agent-session setup carried by send_to. */
-        readonly sessionConfigValues: 24;
-        readonly sessionConfigValueChars: 256;
         /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
         readonly minTimeoutMs: 1000;
         /** input/card/plan ceiling (30 minutes). */
@@ -849,10 +808,7 @@ export declare const CANON_VERB_LIMITS_ARTIFACT: {
         readonly sessionRuleToolPattern: "^[\\w.*:-]{1,128}$";
         readonly runtimeCorrelationValue: "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$";
         readonly runtimeMethod: "^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$";
-        readonly runtimeOptionValue: "^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$";
-        readonly workspaceOptionId: "^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$";
         readonly runtimeHandleKey: "^[A-Za-z0-9_.:-]{1,80}$";
-        readonly runtimeControlId: "^[A-Za-z0-9_-]{1,80}$";
         /** UUID issued by Canon's resumable-media session endpoint. */
         readonly resumableUploadId: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$";
     };

package/dist/verbContract.js

@@ -72,10 +72,7 @@ export const VERB_ID_PATTERNS = {
     sessionRuleToolPattern: '^[\\w.*:-]{1,128}$',
     runtimeCorrelationValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
     runtimeMethod: '^[A-Za-z0-9_][A-Za-z0-9_./:\\-]{0,255}$',
-    runtimeOptionValue: '^[A-Za-z0-9@_][A-Za-z0-9_.:/@+\\-]{0,255}$',
-    workspaceOptionId: '^[A-Za-z0-9@_][A-Za-z0-9_.:@+\\-]{0,255}$',
     runtimeHandleKey: '^[A-Za-z0-9_.:-]{1,80}$',
-    runtimeControlId: '^[A-Za-z0-9_-]{1,80}$',
     /** UUID issued by Canon's resumable-media session endpoint. */
     resumableUploadId: '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$',
 };
@@ -145,9 +142,6 @@ export const VERB_LIMITS = {
     nativeKeys: 24,
     nativeValueChars: 256,
     nativeHandles: 16,
-    /** Initial agent-session setup carried by send_to. */
-    sessionConfigValues: 24,
-    sessionConfigValueChars: 256,
     /** Deadlines (functions/src/utils/runtimeRequestHelpers.ts). */
     minTimeoutMs: 1000,
     /** input/card/plan ceiling (30 minutes). */
@@ -198,7 +192,6 @@ export const CANON_VERB_NAMES = [
     'remove_member',
     'leave_conversation',
     'list_contacts',
-    'list_contact_requests',
     'list_conversations',
     'no_reply',
 ];
@@ -267,14 +260,6 @@ export function normalizeVerbNativeMetadata(value) {
  * invite is allowed; the error detail carries the attempted partition.
  */
 export const CREATE_GROUP_NO_ADDABLE_MEMBERS_CODE = 'CREATE_GROUP_NO_ADDABLE_MEMBERS';
-/**
- * Error code on the 403 a create_group receives when the CREATOR itself is
- * a coding agent requiring explicit session setup: the group helper prepares
- * session configs for every coding-agent member including the creator, and
- * only the agent's human owner may provide them (v1 scoping — the owner
- * creates the group from the app instead).
- */
-export const CREATE_GROUP_CREATOR_SETUP_REQUIRED_CODE = 'CREATE_GROUP_CREATOR_SETUP_REQUIRED';
 /**
  * The `note` the server returns on a `no_reply` ack — the model's closure
  * sentence. It lives here, not in a host, because every binding surfaces the