@canonmsg/claude-code-plugin 0.19.0 → 0.19.2

package/dist/approval-diff.js

@@ -1,5 +1,5 @@
 import { isAbsolute, join, relative } from 'node:path';
-import { truncateUnifiedDiff, } from '@canonmsg/core';
+import { sanitizeUnifiedDiffForSharing, truncateUnifiedDiff, } from '@canonmsg/core';
 /** Unified-hunk context lines on either side of a change (git default). */
 const HUNK_CONTEXT_LINES = 3;
 /**
@@ -68,7 +68,9 @@ export async function synthesizeClaudeApprovalDiff(toolName, toolInput, options)
     const hunks = buildUnifiedHunks(oldText, postImage);
     if (!hunks)
         return undefined;
-    return truncateUnifiedDiff({
+    // Sanitize before truncating so byte budgets are spent on hunks that ship —
+    // secret-bearing paths and private-key blocks lose their hunk text here.
+    return truncateUnifiedDiff(sanitizeUnifiedDiffForSharing({
         files: [{
                 path: toDisplayPath(resolvedPath, options.cwd),
                 status,
@@ -76,7 +78,7 @@ export async function synthesizeClaudeApprovalDiff(toolName, toolInput, options)
                 additions: hunks.additions,
                 deletions: hunks.deletions,
             }],
-    });
+    }));
 }
 // ── Edit splicing ────────────────────────────────────────────────────
 function parseSingleEdit(toolInput) {

package/dist/host.js

@@ -24,15 +24,13 @@ import { parseArgs } from 'node:util';
 import { randomUUID } from 'node:crypto';
 import { execFileSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
-import { readFile, stat } from 'node:fs/promises';
-import { basename, isAbsolute, join } from 'node:path';
-import { createSdkMcpServer, query, tool, } from '@anthropic-ai/claude-agent-sdk';
-import { z } from 'zod';
+import { readFile } from 'node:fs/promises';
+import { query, } from '@anthropic-ai/claude-agent-sdk';
 import { isAnthropicImageAttachment, materializeMessageMedia, materializeReplyContextMedia, sendMediaFileMessage, toAnthropicImageBlock, } from '@canonmsg/agent-sdk';
+import { buildTurnArtifactContextLine, ensureTurnArtifactDir, flushTurnArtifacts, } from '@canonmsg/coding-agent-host';
 import { CLAUDE_EFFORT_OPTIONS, CLAUDE_PERMISSION_MODE_OPTIONS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildCanonTurnContextV2, buildConfiguredWorkspaceOptionsWithRoots, buildConversationEnvironmentKey, buildFirstPartyCodingRuntimeDescriptor, buildHydratedInboundContext, diffCanonMemberIds, buildPlanApprovalRequest, resolveQuestionAllowOther, buildPublicWorkspaceRoots, buildPublicWorkspaceOptions, buildRuntimePresentationPolicy, DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, createConversationMetadataLoader, createTurnOutputController, createRuntimeStatePublisher, createTypingStatusPublisher, EXECUTION_ENVIRONMENT_MODES, CanonClient, CanonStream, ControlChannelPoller, DEFAULT_PARTICIPATION_HISTORY_FETCH_LIMIT, DEFAULT_RUNTIME_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, ApprovalManager, ExecutionEnvironmentError, FINAL_MESSAGE_HANDOFF_MS, buildLocalRuntimeId, getActiveProfileLock, heartbeatLocalRuntimeEntry, normalizeTurnMetadata, prepareConversationEnvironment, resolveCanonAgent, initRTDBAuth, sendMessageWithRetry, loadHostSessionConfig, loadRuntimeSessionState, markLocalRuntimeStopped, releaseConversationEnvironment, saveRuntimeSessionState, clearRuntimeSessionState, publishHostAgentRuntime, publishHostSessionSnapshots, renderCanonHostInboundContent, renderCanonTurnBriefPrompt, resolveHostWorkspaceCwd, upsertLocalRuntimeEntry, } from '@canonmsg/core';
 import { decideAutoReply, } from './inbound-policy.js';
 import { runCli } from './cli-entry.js';
-import { OUTBOX_MAX_FILE_BYTES, buildOutboxContextLine, ensureOutboxDir, flushOutbox, resolveOutboxDir, } from './outbox.js';
 import { collectMissedInboundMessages, STARTUP_RECOVERY_MAX_MESSAGES, STARTUP_RECOVERY_PAGE_SIZE, } from './startup-recovery.js';
 import { synthesizeClaudeApprovalDiff } from './approval-diff.js';
 import { decideClaudeToolPermissionForMode, parseAllowedNonOwnerClaudeTools, } from './tool-policy.js';
@@ -582,7 +580,7 @@ function buildClaudeRuntimeInfo(input) {
         {
             id: 'mediaOut',
             label: 'Media out',
-            value: 'Turn-end outbox + canon_send_file',
+            value: 'Explicit turn artifact directory',
             tier: 'detail',
         },
     ].filter((item) => Boolean(item));
@@ -672,7 +670,10 @@ const CLAUDE_RUNTIME_CAPABILITIES = {
     supportsNonFinalPermanentMessages: false,
 };
 function buildCanonPrompt(input) {
-    const sessionContextLines = input.session ? buildClaudeSessionContextLines(input.session) : undefined;
+    const sessionContextLines = [
+        ...(input.session ? buildClaudeSessionContextLines(input.session) : []),
+        ...(input.artifactDir ? [buildTurnArtifactContextLine(input.artifactDir)] : []),
+    ];
     return renderCanonTurnBriefPrompt(buildCanonTurnContextV2({
         content: input.content,
         conversationId: input.conversationId,
@@ -682,7 +683,7 @@ function buildCanonPrompt(input) {
         activeSelfContextId: input.activeSelfContextId,
         provenance: input.provenance,
         replyContext: input.replyContext,
-        sessionContextLines,
+        sessionContextLines: sessionContextLines.length ? sessionContextLines : undefined,
         message: input.message,
     }));
 }
@@ -706,7 +707,6 @@ function buildClaudeSessionContextLines(session) {
         `Working directory: ${session.cwd}`,
         session.environment.branch ? `Git branch: ${session.environment.branch}` : null,
         session.environment.worktreePath ? `Worktree: ${session.environment.worktreePath}` : null,
-        `${buildOutboxContextLine(session.cwd)} To send one file immediately mid-turn, use the canon_send_file tool instead.`,
     ].filter((line) => Boolean(line));
 }
 function renderInboundContent(message, materialized) {
@@ -767,13 +767,14 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             messageQueue.push(input);
         }
     };
-    let enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false) => {
+    let enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false, artifactDir = null) => {
         sendInput(createClaudeInputEnvelope({
             kind: 'canon',
             msg,
             intent,
             sourceMessageId,
             markAccepted,
+            artifactDir,
             isOwnerTurn,
         }));
     };
@@ -849,7 +850,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         }
         return { status: 'timeout' };
     }
-    function buildOutboxMediaMetadata() {
+    function buildArtifactMediaMetadata() {
         return {
             ...(session.currentTurnId ? { turnId: session.currentTurnId } : {}),
             // Media is permanent conversation content (promoted like a final reply)
@@ -859,57 +860,10 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             replyBehavior: 'suppress_auto_reply',
         };
     }
-    function sendOutboxMediaFile(filePath, caption = '') {
-        return sendMediaFileMessage(client, conversationId, filePath, caption, {
-            ...(session.activeSelfContextId ? { selfContextId: session.activeSelfContextId } : {}),
-            metadata: buildOutboxMediaMetadata(),
-        });
-    }
-    // Immediate explicit media-out channel: the agent calls this tool with a
-    // path, the host uploads + sends right away. Permission flows through
-    // canUseTool like every other MCP tool (owner approval in default mode).
-    const canonMediaServer = createSdkMcpServer({
-        name: 'canon',
-        tools: [
-            tool('canon_send_file', 'Send a local file (screenshot, plot, artifact) to the current Canon conversation immediately as a media attachment.', {
-                path: z.string().describe('Path of the file to send; relative paths resolve against the session working directory.'),
-                caption: z.string().optional().describe('Optional caption shown with the attachment.'),
-            }, async (args) => {
-                try {
-                    const filePath = isAbsolute(args.path) ? args.path : join(cwd, args.path);
-                    const info = await stat(filePath);
-                    if (!info.isFile()) {
-                        throw new Error(`${filePath} is not a regular file`);
-                    }
-                    if (info.size > OUTBOX_MAX_FILE_BYTES) {
-                        throw new Error(`File is ${info.size} bytes; the Canon media limit is ${OUTBOX_MAX_FILE_BYTES} bytes`);
-                    }
-                    const { messageId } = await sendOutboxMediaFile(filePath, args.caption ?? '');
-                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] canon_send_file sent ${basename(filePath)} (${messageId})`);
-                    return {
-                        content: [{
-                                type: 'text',
-                                text: `Sent ${basename(filePath)} to the Canon conversation (message ${messageId}).`,
-                            }],
-                    };
-                }
-                catch (error) {
-                    return {
-                        content: [{
-                                type: 'text',
-                                text: `canon_send_file failed: ${error instanceof Error ? error.message : String(error)}`,
-                            }],
-                        isError: true,
-                    };
-                }
-            }),
-        ],
-    });
     const claudeCliPath = resolveClaudeCliPath();
     const queryOptions = {
         systemPrompt: { type: 'preset', preset: 'claude_code' },
         tools: { type: 'preset', preset: 'claude_code' },
-        mcpServers: { canon: canonMediaServer },
         permissionMode: parseClaudePermissionMode(config.permissionMode) ?? 'default',
         allowDangerouslySkipPermissions: true,
         cwd,
@@ -1119,7 +1073,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         environment,
         query: q,
         sendInput,
-        enqueueInbound: (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false) => enqueueInboundMessage(msg, intent, sourceMessageId, markAccepted, isOwnerTurn),
+        enqueueInbound: (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false, artifactDir = null) => enqueueInboundMessage(msg, intent, sourceMessageId, markAccepted, isOwnerTurn, artifactDir),
         state: {
             model: undefined,
             permissionMode: config.permissionMode,
@@ -1300,32 +1254,32 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             return false;
         }
     }
-    /**
-     * Turn-end media outbox flush (see ./outbox.ts for the convention). Never
-     * throws: upload failures are logged and the files stay in place for a
-     * later turn.
-     */
-    async function flushSessionOutbox() {
+    async function routeSessionArtifacts(artifactDir) {
+        if (!artifactDir)
+            return;
         try {
-            const result = await flushOutbox({
-                outboxDir: resolveOutboxDir(cwd),
-                send: (file) => sendOutboxMediaFile(file.path),
+            const result = await flushTurnArtifacts({
+                artifactDir,
+                send: (file) => sendMediaFileMessage(client, conversationId, file.path, '', {
+                    ...(session.activeSelfContextId ? { selfContextId: session.activeSelfContextId } : {}),
+                    metadata: buildArtifactMediaMetadata(),
+                }),
             });
             for (const entry of result.sent) {
-                console.error(`[canon-host] [${conversationId.slice(0, 8)}] Sent outbox file ${entry.file.fileName} (${entry.messageId})`
-                    + (entry.removeFailed ? ' — removal failed; it may resend next turn' : ''));
+                console.error(`[canon-host] [${conversationId.slice(0, 8)}] Routed artifact ${entry.file.fileName} (${entry.messageId})`
+                    + (entry.removeFailed ? '; removal failed, so it may resend later' : ''));
             }
             for (const failure of result.failed) {
-                console.error(`[canon-host] [${conversationId.slice(0, 8)}] Outbox upload failed for ${failure.file.fileName}; left in place: ${failure.error}`);
+                console.error(`[canon-host] [${conversationId.slice(0, 8)}] Artifact upload failed for ${failure.file.fileName}; left in place:`, failure.error);
             }
             for (const skipped of result.skipped) {
-                if (skipped.reason === 'too-large' || skipped.reason === 'file-cap') {
-                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] Outbox skipped ${skipped.fileName} (${skipped.reason}); left in place`);
+                if (skipped.reason === 'too-large' || skipped.reason === 'file-cap' || skipped.reason === 'unsupported') {
+                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] Artifact skipped ${skipped.fileName} (${skipped.reason})`);
                 }
             }
         }
         catch (error) {
-            console.error(`[canon-host] [${conversationId.slice(0, 8)}] Outbox flush failed:`, error instanceof Error ? error.message : error);
+            console.error(`[canon-host] [${conversationId.slice(0, 8)}] Artifact routing failed:`, error instanceof Error ? error.message : error);
         }
     }
     function scheduleFinalDeliveryRetry(pending = session.pendingFinalDelivery) {
@@ -1460,6 +1414,11 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             return;
         await client.updateMessageDisposition(conversationId, sourceMessageId, 'accepted_now').catch(() => { });
     }
+    async function startCanonInput(input) {
+        await markQueuedMessageAccepted(input.sourceMessageId, input.markAccepted);
+        session.state.state = 'running';
+        sendInput(input);
+    }
     function drainPendingInput() {
         if (session.closed || session.state.state === 'running' || session.pendingInputs.length === 0)
             return;
@@ -1468,10 +1427,9 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             return;
         session.lastAcceptedIntent = next.intent;
         writeTurn();
-        void markQueuedMessageAccepted(next.sourceMessageId, next.markAccepted)
-            .finally(() => sendInput(next));
+        void startCanonInput(next);
     }
-    enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId = null, markAccepted = false, isOwnerTurn = false) => {
+    enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId = null, markAccepted = false, isOwnerTurn = false, artifactDir = null) => {
         session.lastActivity = Date.now();
         const input = createClaudeInputEnvelope({
             kind: 'canon',
@@ -1479,6 +1437,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             intent,
             sourceMessageId,
             markAccepted,
+            artifactDir,
             isOwnerTurn,
         });
         if (session.pendingFinalDelivery) {
@@ -1505,8 +1464,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         }
         session.lastAcceptedIntent = intent;
         writeTurn();
-        void markQueuedMessageAccepted(sourceMessageId, markAccepted)
-            .finally(() => sendInput(input));
+        void startCanonInput(input);
     };
     writeTurn();
     // ── Process SDK output messages ──
@@ -1614,11 +1572,10 @@ function createSession(conversationId, environment, agentId, client, typingSigna
                             session.sdkSessionId = resultSessionId;
                         const completedInput = session.activeInput;
                         console.error(`[canon-host] [${conversationId.slice(0, 8)}] Turn complete (${msg.subtype})`);
-                        // Turn-end outbox flush — media lands before the final text reply.
-                        // Interrupted turns keep their files for the next completed turn.
+                        // Turn artifacts land before the final text reply.
                         if (completedInput?.kind === 'canon'
                             && !session.interruptedTurnKeys.has(completedInput.turnKey)) {
-                            await flushSessionOutbox();
+                            await routeSessionArtifacts(completedInput.artifactDir);
                         }
                         const resultText = typeof msg.result === 'string'
                             ? msg.result.trim()
@@ -1681,7 +1638,6 @@ function createSession(conversationId, environment, agentId, client, typingSigna
     // Start processing loop and initialize session
     const init = async () => {
         processMessages().catch((err) => console.error(`[canon-host] [${conversationId.slice(0, 8)}] processMessages crashed:`, err));
-        ensureOutboxDir(cwd).catch((err) => console.error(`[canon-host] [${conversationId.slice(0, 8)}] Failed to create media outbox:`, err));
         await q.initializationResult();
         if (config.model) {
             try {
@@ -2419,6 +2375,7 @@ export async function main() {
             return;
         }
         session.activeSelfContextId = activeSelfContextId;
+        const artifactDir = await ensureTurnArtifactDir(session.cwd, `claude-${m.id ?? randomUUID()}`);
         const promptText = buildCanonPrompt({
             content,
             conversationId: input.conversationId,
@@ -2430,6 +2387,7 @@ export async function main() {
             replyContext,
             message: m,
             session,
+            artifactDir,
         });
         const messageContent = await buildCanonUserContent({
             promptText,
@@ -2442,7 +2400,7 @@ export async function main() {
                 content: messageContent,
             },
             parent_tool_use_id: null,
-        }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner);
+        }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner, artifactDir);
         if (m.id) {
             saveRuntimeSessionState(runtimeId, {
                 conversationId: input.conversationId,
@@ -2610,6 +2568,7 @@ export async function main() {
                         return;
                     }
                     session.activeSelfContextId = activeSelfContextId;
+                    const artifactDir = await ensureTurnArtifactDir(session.cwd, `claude-${m.id ?? randomUUID()}`);
                     const promptText = buildCanonPrompt({
                         content,
                         conversationId: convoId,
@@ -2621,6 +2580,7 @@ export async function main() {
                         replyContext,
                         message: m,
                         session,
+                        artifactDir,
                     });
                     const messageContent = await buildCanonUserContent({
                         promptText,
@@ -2633,7 +2593,7 @@ export async function main() {
                             content: messageContent,
                         },
                         parent_tool_use_id: null,
-                    }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner);
+                    }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner, artifactDir);
                     if (m.id) {
                         saveRuntimeSessionState(runtimeId, {
                             conversationId: convoId,

package/dist/session-state.d.ts

@@ -7,6 +7,7 @@ export interface ClaudeInputEnvelope {
     intent: DeliveryIntent;
     sourceMessageId: string | null;
     markAccepted: boolean;
+    artifactDir: string | null;
     turnKey: string;
     isOwnerTurn: boolean;
 }
@@ -41,6 +42,7 @@ export declare function createClaudeInputEnvelope(input: {
     intent?: DeliveryIntent;
     sourceMessageId?: string | null;
     markAccepted?: boolean;
+    artifactDir?: string | null;
     isOwnerTurn?: boolean;
 }): ClaudeInputEnvelope;
 export declare function buildClaudeFinalMessageId(input: {

package/dist/session-state.js

@@ -8,6 +8,7 @@ export function createClaudeInputEnvelope(input) {
         intent: input.intent ?? 'queue',
         sourceMessageId,
         markAccepted: Boolean(input.markAccepted),
+        artifactDir: input.artifactDir ?? null,
         isOwnerTurn: input.kind === 'canon'
             ? input.isOwnerTurn === true
             : input.isOwnerTurn !== false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/claude-code-plugin",
-  "version": "0.19.0",
+  "version": "0.19.2",
   "description": "Canon channel plugin for Claude Code — messaging where AI agents are first-class citizens",
   "type": "module",
   "main": "dist/index.js",
@@ -23,7 +23,7 @@
     ".claude-plugin"
   ],
   "scripts": {
-    "prepare:workspace-deps": "npm --prefix ../core run build && npm --prefix ../agent-sdk run build",
+    "prepare:workspace-deps": "node ../../scripts/run-workspace-prep.mjs ../core ../agent-sdk ../coding-agent-host",
     "build": "npm run prepare:workspace-deps && node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc",
     "dev": "npm run prepare:workspace-deps && tsc --watch",
     "prepack": "npm run build",
@@ -31,10 +31,10 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.141",
-    "@canonmsg/agent-sdk": "^3.2.1",
-    "@canonmsg/core": "^2.5.0",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "zod": "^4.0.0"
+    "@canonmsg/agent-sdk": "^3.2.3",
+    "@canonmsg/coding-agent-host": "^0.2.0",
+    "@canonmsg/core": "^2.6.0",
+    "@modelcontextprotocol/sdk": "^1.29.0"
   },
   "engines": {
     "node": ">=18.0.0"

package/dist/outbox.d.ts

@@ -1,83 +0,0 @@
-/**
- * Turn-end media outbox for Canon coding hosts.
- *
- * The host advertises a per-conversation outbox directory inside the session
- * working directory (`<cwd>/.canon/outbox/`). When the runtime wants a file
- * (screenshot, plot, artifact) delivered to the Canon conversation it writes
- * the file there — an explicit channel, never inferred from reply prose. At
- * turn end the host scans the outbox, uploads each regular file as a Canon
- * media attachment, and removes files that were delivered. Failed uploads
- * stay in place for a later turn; subdirectories, symlinks, and dotfiles are
- * ignored.
- *
- * This module is intentionally identical in packages/claude-code-plugin and
- * packages/codex-plugin — keep both copies in sync (future consolidation
- * candidate).
- */
-export declare const OUTBOX_MAX_FILES_PER_TURN = 8;
-export declare const OUTBOX_MAX_FILE_BYTES: number;
-export interface OutboxFile {
-    path: string;
-    fileName: string;
-    sizeBytes: number;
-}
-export type OutboxSkipReason = 'not-regular-file' | 'hidden' | 'too-large' | 'file-cap';
-export interface OutboxScanResult {
-    /** Regular files eligible for upload this turn, ordered by file name. */
-    files: OutboxFile[];
-    skipped: Array<{
-        fileName: string;
-        reason: OutboxSkipReason;
-    }>;
-}
-export interface OutboxFlushResult {
-    sent: Array<{
-        file: OutboxFile;
-        messageId: string;
-        removeFailed?: true;
-    }>;
-    failed: Array<{
-        file: OutboxFile;
-        error: string;
-    }>;
-    skipped: OutboxScanResult['skipped'];
-}
-export declare function resolveOutboxDir(sessionCwd: string): string;
-/**
- * Create the outbox directory for a session and drop a `.gitignore` into the
- * host-managed `.canon/` dir (only when absent) so outbox state never shows
- * up as untracked dirt inside project checkouts or conversation worktrees.
- */
-export declare function ensureOutboxDir(sessionCwd: string): Promise<string>;
-/**
- * The one terse paragraph injected into the runtime's Canon context so the
- * agent knows the outbox exists. Hosts may append their own extra sentence
- * (e.g. an immediate-send tool) but must not paraphrase the convention.
- */
-export declare function buildOutboxContextLine(sessionCwd: string): string;
-/**
- * Discover the outbox files eligible for upload this turn. A missing outbox
- * directory is an empty result. Entries are ordered by file name so multi-file
- * turns deliver deterministically; everything past the per-turn cap (or over
- * the size cap) is left in place and reported as skipped.
- */
-export declare function scanOutbox(outboxDir: string, options?: {
-    maxFiles?: number;
-    maxFileBytes?: number;
-}): Promise<OutboxScanResult>;
-/**
- * Upload-and-consume pass over the outbox. Each eligible file is handed to
- * `send`; on success the file is removed (consumed), on failure it is left in
- * place for a later turn. A failed removal after a successful send is still
- * reported as sent (flagged `removeFailed`) so callers can warn about a
- * potential duplicate next turn instead of re-reporting a delivery failure.
- */
-export declare function flushOutbox(input: {
-    outboxDir: string;
-    send: (file: OutboxFile) => Promise<{
-        messageId: string;
-    }>;
-    maxFiles?: number;
-    maxFileBytes?: number;
-    remove?: (path: string) => Promise<void>;
-}): Promise<OutboxFlushResult>;

package/dist/outbox.js

@@ -1,132 +0,0 @@
-/**
- * Turn-end media outbox for Canon coding hosts.
- *
- * The host advertises a per-conversation outbox directory inside the session
- * working directory (`<cwd>/.canon/outbox/`). When the runtime wants a file
- * (screenshot, plot, artifact) delivered to the Canon conversation it writes
- * the file there — an explicit channel, never inferred from reply prose. At
- * turn end the host scans the outbox, uploads each regular file as a Canon
- * media attachment, and removes files that were delivered. Failed uploads
- * stay in place for a later turn; subdirectories, symlinks, and dotfiles are
- * ignored.
- *
- * This module is intentionally identical in packages/claude-code-plugin and
- * packages/codex-plugin — keep both copies in sync (future consolidation
- * candidate).
- */
-import { mkdir, readdir, stat, unlink, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
-export const OUTBOX_MAX_FILES_PER_TURN = 8;
-export const OUTBOX_MAX_FILE_BYTES = 25 * 1024 * 1024;
-export function resolveOutboxDir(sessionCwd) {
-    return join(sessionCwd, '.canon', 'outbox');
-}
-/**
- * Create the outbox directory for a session and drop a `.gitignore` into the
- * host-managed `.canon/` dir (only when absent) so outbox state never shows
- * up as untracked dirt inside project checkouts or conversation worktrees.
- */
-export async function ensureOutboxDir(sessionCwd) {
-    const dir = resolveOutboxDir(sessionCwd);
-    await mkdir(dir, { recursive: true });
-    try {
-        // The `*` pattern ignores everything under .canon, including this file.
-        await writeFile(join(sessionCwd, '.canon', '.gitignore'), '*\n', { flag: 'wx' });
-    }
-    catch {
-        // Already present (or unwritable) — never block session startup on it.
-    }
-    return dir;
-}
-/**
- * The one terse paragraph injected into the runtime's Canon context so the
- * agent knows the outbox exists. Hosts may append their own extra sentence
- * (e.g. an immediate-send tool) but must not paraphrase the convention.
- */
-export function buildOutboxContextLine(sessionCwd) {
-    const maxMb = Math.floor(OUTBOX_MAX_FILE_BYTES / (1024 * 1024));
-    return `Media outbox: to deliver a file (screenshot, plot, artifact) to this Canon conversation, write it into ${resolveOutboxDir(sessionCwd)} — when your turn ends the host uploads each regular file there as a chat attachment and then deletes it. Limits: ${OUTBOX_MAX_FILES_PER_TURN} files per turn and ${maxMb}MB per file; subdirectories, symlinks, and dotfiles are ignored.`;
-}
-/**
- * Discover the outbox files eligible for upload this turn. A missing outbox
- * directory is an empty result. Entries are ordered by file name so multi-file
- * turns deliver deterministically; everything past the per-turn cap (or over
- * the size cap) is left in place and reported as skipped.
- */
-export async function scanOutbox(outboxDir, options) {
-    const maxFiles = options?.maxFiles ?? OUTBOX_MAX_FILES_PER_TURN;
-    const maxFileBytes = options?.maxFileBytes ?? OUTBOX_MAX_FILE_BYTES;
-    let entries;
-    try {
-        entries = await readdir(outboxDir, { withFileTypes: true });
-    }
-    catch (error) {
-        if (error.code === 'ENOENT') {
-            return { files: [], skipped: [] };
-        }
-        throw error;
-    }
-    const files = [];
-    const skipped = [];
-    for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
-        // `readdir` does not follow symlinks, so a symlinked file reports
-        // isSymbolicLink(), not isFile() — links and directories both land here.
-        if (!entry.isFile()) {
-            skipped.push({ fileName: entry.name, reason: 'not-regular-file' });
-            continue;
-        }
-        if (entry.name.startsWith('.')) {
-            skipped.push({ fileName: entry.name, reason: 'hidden' });
-            continue;
-        }
-        const path = join(outboxDir, entry.name);
-        const info = await stat(path);
-        if (info.size > maxFileBytes) {
-            skipped.push({ fileName: entry.name, reason: 'too-large' });
-            continue;
-        }
-        if (files.length >= maxFiles) {
-            skipped.push({ fileName: entry.name, reason: 'file-cap' });
-            continue;
-        }
-        files.push({ path, fileName: entry.name, sizeBytes: info.size });
-    }
-    return { files, skipped };
-}
-/**
- * Upload-and-consume pass over the outbox. Each eligible file is handed to
- * `send`; on success the file is removed (consumed), on failure it is left in
- * place for a later turn. A failed removal after a successful send is still
- * reported as sent (flagged `removeFailed`) so callers can warn about a
- * potential duplicate next turn instead of re-reporting a delivery failure.
- */
-export async function flushOutbox(input) {
-    const { files, skipped } = await scanOutbox(input.outboxDir, {
-        ...(input.maxFiles != null ? { maxFiles: input.maxFiles } : {}),
-        ...(input.maxFileBytes != null ? { maxFileBytes: input.maxFileBytes } : {}),
-    });
-    const remove = input.remove ?? ((path) => unlink(path));
-    const sent = [];
-    const failed = [];
-    for (const file of files) {
-        let messageId;
-        try {
-            ({ messageId } = await input.send(file));
-        }
-        catch (error) {
-            failed.push({
-                file,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            continue;
-        }
-        try {
-            await remove(file.path);
-            sent.push({ file, messageId });
-        }
-        catch {
-            sent.push({ file, messageId, removeFailed: true });
-        }
-    }
-    return { sent, failed, skipped };
-}