@canonmsg/claude-code-plugin 0.19.1 → 0.19.3

package/dist/host.js

@@ -24,15 +24,13 @@ import { parseArgs } from 'node:util';
 import { randomUUID } from 'node:crypto';
 import { execFileSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
-import { readFile, stat } from 'node:fs/promises';
-import { basename, isAbsolute, join } from 'node:path';
-import { createSdkMcpServer, query, tool, } from '@anthropic-ai/claude-agent-sdk';
-import { z } from 'zod';
+import { readFile } from 'node:fs/promises';
+import { query, } from '@anthropic-ai/claude-agent-sdk';
 import { isAnthropicImageAttachment, materializeMessageMedia, materializeReplyContextMedia, sendMediaFileMessage, toAnthropicImageBlock, } from '@canonmsg/agent-sdk';
-import { CLAUDE_EFFORT_OPTIONS, CLAUDE_PERMISSION_MODE_OPTIONS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildCanonTurnContextV2, buildConfiguredWorkspaceOptionsWithRoots, buildConversationEnvironmentKey, buildFirstPartyCodingRuntimeDescriptor, buildHydratedInboundContext, diffCanonMemberIds, buildPlanApprovalRequest, resolveQuestionAllowOther, buildPublicWorkspaceRoots, buildPublicWorkspaceOptions, buildRuntimePresentationPolicy, DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, createConversationMetadataLoader, createTurnOutputController, createRuntimeStatePublisher, createTypingStatusPublisher, EXECUTION_ENVIRONMENT_MODES, CanonClient, CanonStream, ControlChannelPoller, DEFAULT_PARTICIPATION_HISTORY_FETCH_LIMIT, DEFAULT_RUNTIME_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, ApprovalManager, ExecutionEnvironmentError, FINAL_MESSAGE_HANDOFF_MS, buildLocalRuntimeId, getActiveProfileLock, heartbeatLocalRuntimeEntry, normalizeTurnMetadata, prepareConversationEnvironment, resolveCanonAgent, initRTDBAuth, sendMessageWithRetry, loadHostSessionConfig, loadRuntimeSessionState, markLocalRuntimeStopped, releaseConversationEnvironment, saveRuntimeSessionState, clearRuntimeSessionState, publishHostAgentRuntime, publishHostSessionSnapshots, renderCanonHostInboundContent, renderCanonTurnBriefPrompt, resolveHostWorkspaceCwd, upsertLocalRuntimeEntry, } from '@canonmsg/core';
+import { captureTurnArtifactSnapshot, collectTurnArtifacts, } from '@canonmsg/coding-agent-host';
+import { CLAUDE_EFFORT_OPTIONS, CLAUDE_PERMISSION_MODE_OPTIONS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildCanonInboundFrameV1, buildCanonTurnContextV2, buildConfiguredWorkspaceOptionsWithRoots, buildConversationEnvironmentKey, buildFirstPartyCodingRuntimeDescriptor, buildHydratedInboundContext, diffCanonMemberIds, buildPlanApprovalRequest, resolveQuestionAllowOther, buildPublicWorkspaceRoots, buildPublicWorkspaceOptions, buildRuntimePresentationPolicy, DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, createConversationMetadataLoader, createTurnOutputController, createRuntimeStatePublisher, createTypingStatusPublisher, EXECUTION_ENVIRONMENT_MODES, CanonClient, CanonStream, ControlChannelPoller, DEFAULT_PARTICIPATION_HISTORY_FETCH_LIMIT, DEFAULT_RUNTIME_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, ApprovalManager, ExecutionEnvironmentError, FINAL_MESSAGE_HANDOFF_MS, buildLocalRuntimeId, getActiveProfileLock, heartbeatLocalRuntimeEntry, normalizeTurnMetadata, prepareConversationEnvironment, resolveCanonAgent, initRTDBAuth, sendMessageWithRetry, loadHostSessionConfig, loadRuntimeSessionState, markLocalRuntimeStopped, releaseConversationEnvironment, saveRuntimeSessionState, clearRuntimeSessionState, publishHostAgentRuntime, publishHostSessionSnapshots, renderCanonHostInboundContent, renderCodingHostInboundPrompt, resolveHostWorkspaceCwd, upsertLocalRuntimeEntry, } from '@canonmsg/core';
 import { decideAutoReply, } from './inbound-policy.js';
 import { runCli } from './cli-entry.js';
-import { OUTBOX_MAX_FILE_BYTES, buildOutboxContextLine, ensureOutboxDir, flushOutbox, resolveOutboxDir, } from './outbox.js';
 import { collectMissedInboundMessages, STARTUP_RECOVERY_MAX_MESSAGES, STARTUP_RECOVERY_PAGE_SIZE, } from './startup-recovery.js';
 import { synthesizeClaudeApprovalDiff } from './approval-diff.js';
 import { decideClaudeToolPermissionForMode, parseAllowedNonOwnerClaudeTools, } from './tool-policy.js';
@@ -582,7 +580,7 @@ function buildClaudeRuntimeInfo(input) {
         {
             id: 'mediaOut',
             label: 'Media out',
-            value: 'Turn-end outbox + canon_send_file',
+            value: 'Generated media artifacts',
             tier: 'detail',
         },
     ].filter((item) => Boolean(item));
@@ -672,8 +670,7 @@ const CLAUDE_RUNTIME_CAPABILITIES = {
     supportsNonFinalPermanentMessages: false,
 };
 function buildCanonPrompt(input) {
-    const sessionContextLines = input.session ? buildClaudeSessionContextLines(input.session) : undefined;
-    return renderCanonTurnBriefPrompt(buildCanonTurnContextV2({
+    return renderCodingHostInboundPrompt(buildCanonInboundFrameV1(buildCanonTurnContextV2({
         content: input.content,
         conversationId: input.conversationId,
         participantContext: input.participantContext,
@@ -682,32 +679,13 @@ function buildCanonPrompt(input) {
         activeSelfContextId: input.activeSelfContextId,
         provenance: input.provenance,
         replyContext: input.replyContext,
-        sessionContextLines,
         message: input.message,
-    }));
+    })));
 }
-function optionLabel(value, options) {
-    if (!value)
-        return null;
-    const label = options.find((option) => option.value === value)?.label ?? value;
-    return label === value ? value : `${label} (${value})`;
-}
-function buildClaudeSessionContextLines(session) {
-    const workspace = workspaceOptions.find((option) => option.cwd === session.environment.baseCwd);
-    const permissionMode = optionLabel(session.state.permissionMode, CLAUDE_PERMISSION_MODE_OPTIONS);
-    const effort = optionLabel(session.state.effort, CLAUDE_EFFORT_OPTIONS);
-    const model = optionLabel(session.state.model, session.availableModels);
-    return [
-        model ? `Selected model: ${model}` : null,
-        permissionMode ? `Permission mode: ${permissionMode}` : null,
-        effort ? `Thinking level: ${effort}` : null,
-        workspace ? `Project: ${workspace.label} (${workspace.id})` : null,
-        `Execution mode: ${session.environment.mode}`,
-        `Working directory: ${session.cwd}`,
-        session.environment.branch ? `Git branch: ${session.environment.branch}` : null,
-        session.environment.worktreePath ? `Worktree: ${session.environment.worktreePath}` : null,
-        `${buildOutboxContextLine(session.cwd)} To send one file immediately mid-turn, use the canon_send_file tool instead.`,
-    ].filter((line) => Boolean(line));
+function resolveArtifactRoutingMode(participantContext) {
+    return participantContext.conversationType === 'direct' && participantContext.isOwner
+        ? 'workspace-generated'
+        : 'disabled';
 }
 function renderInboundContent(message, materialized) {
     return renderCanonHostInboundContent(message, materialized);
@@ -767,7 +745,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             messageQueue.push(input);
         }
     };
-    let enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false) => {
+    let enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false, artifactRoutingMode = 'disabled') => {
         sendInput(createClaudeInputEnvelope({
             kind: 'canon',
             msg,
@@ -775,6 +753,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             sourceMessageId,
             markAccepted,
             isOwnerTurn,
+            artifactRoutingMode,
         }));
     };
     const inputStream = {
@@ -849,7 +828,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         }
         return { status: 'timeout' };
     }
-    function buildOutboxMediaMetadata() {
+    function buildArtifactMediaMetadata() {
         return {
             ...(session.currentTurnId ? { turnId: session.currentTurnId } : {}),
             // Media is permanent conversation content (promoted like a final reply)
@@ -859,57 +838,10 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             replyBehavior: 'suppress_auto_reply',
         };
     }
-    function sendOutboxMediaFile(filePath, caption = '') {
-        return sendMediaFileMessage(client, conversationId, filePath, caption, {
-            ...(session.activeSelfContextId ? { selfContextId: session.activeSelfContextId } : {}),
-            metadata: buildOutboxMediaMetadata(),
-        });
-    }
-    // Immediate explicit media-out channel: the agent calls this tool with a
-    // path, the host uploads + sends right away. Permission flows through
-    // canUseTool like every other MCP tool (owner approval in default mode).
-    const canonMediaServer = createSdkMcpServer({
-        name: 'canon',
-        tools: [
-            tool('canon_send_file', 'Send a local file (screenshot, plot, artifact) to the current Canon conversation immediately as a media attachment.', {
-                path: z.string().describe('Path of the file to send; relative paths resolve against the session working directory.'),
-                caption: z.string().optional().describe('Optional caption shown with the attachment.'),
-            }, async (args) => {
-                try {
-                    const filePath = isAbsolute(args.path) ? args.path : join(cwd, args.path);
-                    const info = await stat(filePath);
-                    if (!info.isFile()) {
-                        throw new Error(`${filePath} is not a regular file`);
-                    }
-                    if (info.size > OUTBOX_MAX_FILE_BYTES) {
-                        throw new Error(`File is ${info.size} bytes; the Canon media limit is ${OUTBOX_MAX_FILE_BYTES} bytes`);
-                    }
-                    const { messageId } = await sendOutboxMediaFile(filePath, args.caption ?? '');
-                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] canon_send_file sent ${basename(filePath)} (${messageId})`);
-                    return {
-                        content: [{
-                                type: 'text',
-                                text: `Sent ${basename(filePath)} to the Canon conversation (message ${messageId}).`,
-                            }],
-                    };
-                }
-                catch (error) {
-                    return {
-                        content: [{
-                                type: 'text',
-                                text: `canon_send_file failed: ${error instanceof Error ? error.message : String(error)}`,
-                            }],
-                        isError: true,
-                    };
-                }
-            }),
-        ],
-    });
     const claudeCliPath = resolveClaudeCliPath();
     const queryOptions = {
         systemPrompt: { type: 'preset', preset: 'claude_code' },
         tools: { type: 'preset', preset: 'claude_code' },
-        mcpServers: { canon: canonMediaServer },
         permissionMode: parseClaudePermissionMode(config.permissionMode) ?? 'default',
         allowDangerouslySkipPermissions: true,
         cwd,
@@ -1119,7 +1051,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         environment,
         query: q,
         sendInput,
-        enqueueInbound: (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false) => enqueueInboundMessage(msg, intent, sourceMessageId, markAccepted, isOwnerTurn),
+        enqueueInbound: (msg, intent = 'queue', sourceMessageId, markAccepted = false, isOwnerTurn = false, artifactRoutingMode = 'disabled') => enqueueInboundMessage(msg, intent, sourceMessageId, markAccepted, isOwnerTurn, artifactRoutingMode),
         state: {
             model: undefined,
             permissionMode: config.permissionMode,
@@ -1300,32 +1232,42 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             return false;
         }
     }
-    /**
-     * Turn-end media outbox flush (see ./outbox.ts for the convention). Never
-     * throws: upload failures are logged and the files stay in place for a
-     * later turn.
-     */
-    async function flushSessionOutbox() {
+    function sendTurnArtifactFile(file) {
+        return sendMediaFileMessage(client, conversationId, file.path, '', {
+            ...(session.activeSelfContextId ? { selfContextId: session.activeSelfContextId } : {}),
+            metadata: buildArtifactMediaMetadata(),
+        });
+    }
+    async function routeWorkspaceGeneratedArtifacts(input) {
+        if (!input.artifactBaseline)
+            return;
         try {
-            const result = await flushOutbox({
-                outboxDir: resolveOutboxDir(cwd),
-                send: (file) => sendOutboxMediaFile(file.path),
+            const result = await collectTurnArtifacts({
+                cwd: session.cwd,
+                baseline: input.artifactBaseline,
             });
-            for (const entry of result.sent) {
-                console.error(`[canon-host] [${conversationId.slice(0, 8)}] Sent outbox file ${entry.file.fileName} (${entry.messageId})`
-                    + (entry.removeFailed ? ' — removal failed; it may resend next turn' : ''));
-            }
-            for (const failure of result.failed) {
-                console.error(`[canon-host] [${conversationId.slice(0, 8)}] Outbox upload failed for ${failure.file.fileName}; left in place: ${failure.error}`);
+            for (const file of result.files) {
+                try {
+                    const { messageId } = await sendTurnArtifactFile(file);
+                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] Routed generated artifact ${file.relativePath ?? file.fileName} (${messageId})`);
+                }
+                catch (error) {
+                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] Artifact upload failed for ${file.relativePath ?? file.fileName}: ${error instanceof Error ? error.message : String(error)}`);
+                }
             }
             for (const skipped of result.skipped) {
-                if (skipped.reason === 'too-large' || skipped.reason === 'file-cap') {
-                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] Outbox skipped ${skipped.fileName} (${skipped.reason}); left in place`);
+                if (skipped.reason === 'too-large' || skipped.reason === 'file-cap' || skipped.reason === 'scan-limit') {
+                    console.error(`[canon-host] [${conversationId.slice(0, 8)}] Artifact skipped ${skipped.fileName} (${skipped.reason})`);
                 }
             }
         }
         catch (error) {
-            console.error(`[canon-host] [${conversationId.slice(0, 8)}] Outbox flush failed:`, error instanceof Error ? error.message : error);
+            console.error(`[canon-host] [${conversationId.slice(0, 8)}] Artifact routing failed:`, error instanceof Error ? error.message : error);
+        }
+    }
+    async function routeArtifactsForInput(input) {
+        if (input.artifactRoutingMode === 'workspace-generated') {
+            await routeWorkspaceGeneratedArtifacts(input);
         }
     }
     function scheduleFinalDeliveryRetry(pending = session.pendingFinalDelivery) {
@@ -1460,6 +1402,27 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             return;
         await client.updateMessageDisposition(conversationId, sourceMessageId, 'accepted_now').catch(() => { });
     }
+    async function prepareArtifactsForInput(input) {
+        if (input.kind !== 'canon')
+            return;
+        if (!session.currentTurnId) {
+            session.currentTurnId = randomUUID();
+            session.currentTurnOpenedAt = Date.now();
+        }
+        if (input.artifactRoutingMode === 'workspace-generated') {
+            input.artifactBaseline = await captureTurnArtifactSnapshot({ cwd: session.cwd }).catch((error) => {
+                console.error(`[canon-host] [${conversationId.slice(0, 8)}] Artifact snapshot failed:`, error instanceof Error ? error.message : error);
+                return null;
+            });
+            return;
+        }
+    }
+    async function startCanonInput(input) {
+        await markQueuedMessageAccepted(input.sourceMessageId, input.markAccepted);
+        await prepareArtifactsForInput(input);
+        session.state.state = 'running';
+        sendInput(input);
+    }
     function drainPendingInput() {
         if (session.closed || session.state.state === 'running' || session.pendingInputs.length === 0)
             return;
@@ -1468,10 +1431,9 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             return;
         session.lastAcceptedIntent = next.intent;
         writeTurn();
-        void markQueuedMessageAccepted(next.sourceMessageId, next.markAccepted)
-            .finally(() => sendInput(next));
+        void startCanonInput(next);
     }
-    enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId = null, markAccepted = false, isOwnerTurn = false) => {
+    enqueueInboundMessage = (msg, intent = 'queue', sourceMessageId = null, markAccepted = false, isOwnerTurn = false, artifactRoutingMode = 'disabled') => {
         session.lastActivity = Date.now();
         const input = createClaudeInputEnvelope({
             kind: 'canon',
@@ -1480,6 +1442,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
             sourceMessageId,
             markAccepted,
             isOwnerTurn,
+            artifactRoutingMode,
         });
         if (session.pendingFinalDelivery) {
             session.pendingInputs.push(input);
@@ -1505,8 +1468,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         }
         session.lastAcceptedIntent = intent;
         writeTurn();
-        void markQueuedMessageAccepted(sourceMessageId, markAccepted)
-            .finally(() => sendInput(input));
+        void startCanonInput(input);
     };
     writeTurn();
     // ── Process SDK output messages ──
@@ -1614,11 +1576,10 @@ function createSession(conversationId, environment, agentId, client, typingSigna
                             session.sdkSessionId = resultSessionId;
                         const completedInput = session.activeInput;
                         console.error(`[canon-host] [${conversationId.slice(0, 8)}] Turn complete (${msg.subtype})`);
-                        // Turn-end outbox flush — media lands before the final text reply.
-                        // Interrupted turns keep their files for the next completed turn.
+                        // Turn artifacts land before the final text reply.
                         if (completedInput?.kind === 'canon'
                             && !session.interruptedTurnKeys.has(completedInput.turnKey)) {
-                            await flushSessionOutbox();
+                            await routeArtifactsForInput(completedInput);
                         }
                         const resultText = typeof msg.result === 'string'
                             ? msg.result.trim()
@@ -1681,7 +1642,6 @@ function createSession(conversationId, environment, agentId, client, typingSigna
     // Start processing loop and initialize session
     const init = async () => {
         processMessages().catch((err) => console.error(`[canon-host] [${conversationId.slice(0, 8)}] processMessages crashed:`, err));
-        ensureOutboxDir(cwd).catch((err) => console.error(`[canon-host] [${conversationId.slice(0, 8)}] Failed to create media outbox:`, err));
         await q.initializationResult();
         if (config.model) {
             try {
@@ -1709,7 +1669,7 @@ function createSession(conversationId, environment, agentId, client, typingSigna
                     type: 'user',
                     message: {
                         role: 'user',
-                        content: 'You are connected to Canon messaging. Follow-up messages in this session come from Canon participants, and your text responses will be sent back to the conversation. You have full Claude Code capabilities (file read/write, bash, etc).',
+                        content: 'You are assisting in an ongoing chat. Reply naturally to the latest participant.',
                     },
                     parent_tool_use_id: null,
                 },
@@ -2429,12 +2389,12 @@ export async function main() {
             provenance: hydrated.provenance,
             replyContext,
             message: m,
-            session,
         });
         const messageContent = await buildCanonUserContent({
             promptText,
             materialized: [...replyMedia.materialized, ...materialized],
         });
+        const artifactRoutingMode = resolveArtifactRoutingMode(participantContext);
         session.enqueueInbound({
             type: 'user',
             message: {
@@ -2442,7 +2402,7 @@ export async function main() {
                 content: messageContent,
             },
             parent_tool_use_id: null,
-        }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner);
+        }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner, artifactRoutingMode);
         if (m.id) {
             saveRuntimeSessionState(runtimeId, {
                 conversationId: input.conversationId,
@@ -2620,12 +2580,12 @@ export async function main() {
                         provenance: hydrated.provenance,
                         replyContext,
                         message: m,
-                        session,
                     });
                     const messageContent = await buildCanonUserContent({
                         promptText,
                         materialized: [...replyMedia.materialized, ...materialized],
                     });
+                    const artifactRoutingMode = resolveArtifactRoutingMode(participantContext);
                     session.enqueueInbound({
                         type: 'user',
                         message: {
@@ -2633,7 +2593,7 @@ export async function main() {
                             content: messageContent,
                         },
                         parent_tool_use_id: null,
-                    }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner);
+                    }, deliveryIntent, m.id ?? null, shouldMarkAccepted, isOwner, artifactRoutingMode);
                     if (m.id) {
                         saveRuntimeSessionState(runtimeId, {
                             conversationId: convoId,

package/dist/session-state.d.ts

@@ -1,12 +1,16 @@
 import type { SDKUserMessage } from '@anthropic-ai/claude-agent-sdk';
 import type { DeliveryIntent, ModelOption, TurnLifecycleState } from '@canonmsg/core';
+import type { TurnArtifactSnapshot } from '@canonmsg/coding-agent-host';
 export type ClaudeInputKind = 'seed' | 'canon';
+export type ClaudeArtifactRoutingMode = 'workspace-generated' | 'disabled';
 export interface ClaudeInputEnvelope {
     kind: ClaudeInputKind;
     msg: SDKUserMessage;
     intent: DeliveryIntent;
     sourceMessageId: string | null;
     markAccepted: boolean;
+    artifactRoutingMode: ClaudeArtifactRoutingMode;
+    artifactBaseline: TurnArtifactSnapshot | null;
     turnKey: string;
     isOwnerTurn: boolean;
 }
@@ -41,6 +45,8 @@ export declare function createClaudeInputEnvelope(input: {
     intent?: DeliveryIntent;
     sourceMessageId?: string | null;
     markAccepted?: boolean;
+    artifactRoutingMode?: ClaudeArtifactRoutingMode;
+    artifactBaseline?: TurnArtifactSnapshot | null;
     isOwnerTurn?: boolean;
 }): ClaudeInputEnvelope;
 export declare function buildClaudeFinalMessageId(input: {

package/dist/session-state.js

@@ -8,6 +8,8 @@ export function createClaudeInputEnvelope(input) {
         intent: input.intent ?? 'queue',
         sourceMessageId,
         markAccepted: Boolean(input.markAccepted),
+        artifactRoutingMode: input.artifactRoutingMode ?? 'disabled',
+        artifactBaseline: input.artifactBaseline ?? null,
         isOwnerTurn: input.kind === 'canon'
             ? input.isOwnerTurn === true
             : input.isOwnerTurn !== false,

package/dist/tool-policy.js

@@ -1,6 +1,6 @@
-const NON_OWNER_DENY_MESSAGE = 'Only the agent owner can authorize Claude Code to use runtime tools from Canon chat.';
+const NON_OWNER_DENY_MESSAGE = 'Only the agent owner can authorize runtime tool use in this chat.';
 const NATIVE_APPROVAL_UNAVAILABLE_MESSAGE = 'Runtime action approval is not available for this conversation.';
-const NATIVE_APPROVAL_DENIED_MESSAGE = 'The agent owner denied this action in Canon.';
+const NATIVE_APPROVAL_DENIED_MESSAGE = 'The agent owner denied this action.';
 export const CLAUDE_NATIVE_APPROVAL_PERMISSION_MODE = 'default';
 const SENSITIVE_CLAUDE_TOOLS = new Set([
     'agent',

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@canonmsg/claude-code-plugin",
-  "version": "0.19.1",
-  "description": "Canon channel plugin for Claude Code \u2014 messaging where AI agents are first-class citizens",
+  "version": "0.19.3",
+  "description": "Canon channel plugin for Claude Code — messaging where AI agents are first-class citizens",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -23,7 +23,7 @@
     ".claude-plugin"
   ],
   "scripts": {
-    "prepare:workspace-deps": "node ../../scripts/run-workspace-prep.mjs ../core ../agent-sdk",
+    "prepare:workspace-deps": "node ../../scripts/run-workspace-prep.mjs ../core ../agent-sdk ../coding-agent-host",
     "build": "npm run prepare:workspace-deps && node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc",
     "dev": "npm run prepare:workspace-deps && tsc --watch",
     "prepack": "npm run build",
@@ -32,9 +32,9 @@
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.141",
     "@canonmsg/agent-sdk": "^3.2.3",
-    "@canonmsg/core": "^2.6.0",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "zod": "^4.0.0"
+    "@canonmsg/coding-agent-host": "^0.2.2",
+    "@canonmsg/core": "^2.8.0",
+    "@modelcontextprotocol/sdk": "^1.29.0"
   },
   "engines": {
     "node": ">=18.0.0"

package/dist/outbox.d.ts

@@ -1,83 +0,0 @@
-/**
- * Turn-end media outbox for Canon coding hosts.
- *
- * The host advertises a per-conversation outbox directory inside the session
- * working directory (`<cwd>/.canon/outbox/`). When the runtime wants a file
- * (screenshot, plot, artifact) delivered to the Canon conversation it writes
- * the file there — an explicit channel, never inferred from reply prose. At
- * turn end the host scans the outbox, uploads each regular file as a Canon
- * media attachment, and removes files that were delivered. Failed uploads
- * stay in place for a later turn; subdirectories, symlinks, and dotfiles are
- * ignored.
- *
- * This module is intentionally identical in packages/claude-code-plugin and
- * packages/codex-plugin — keep both copies in sync (future consolidation
- * candidate).
- */
-export declare const OUTBOX_MAX_FILES_PER_TURN = 8;
-export declare const OUTBOX_MAX_FILE_BYTES: number;
-export interface OutboxFile {
-    path: string;
-    fileName: string;
-    sizeBytes: number;
-}
-export type OutboxSkipReason = 'not-regular-file' | 'hidden' | 'too-large' | 'file-cap';
-export interface OutboxScanResult {
-    /** Regular files eligible for upload this turn, ordered by file name. */
-    files: OutboxFile[];
-    skipped: Array<{
-        fileName: string;
-        reason: OutboxSkipReason;
-    }>;
-}
-export interface OutboxFlushResult {
-    sent: Array<{
-        file: OutboxFile;
-        messageId: string;
-        removeFailed?: true;
-    }>;
-    failed: Array<{
-        file: OutboxFile;
-        error: string;
-    }>;
-    skipped: OutboxScanResult['skipped'];
-}
-export declare function resolveOutboxDir(sessionCwd: string): string;
-/**
- * Create the outbox directory for a session and drop a `.gitignore` into the
- * host-managed `.canon/` dir (only when absent) so outbox state never shows
- * up as untracked dirt inside project checkouts or conversation worktrees.
- */
-export declare function ensureOutboxDir(sessionCwd: string): Promise<string>;
-/**
- * The one terse paragraph injected into the runtime's Canon context so the
- * agent knows the outbox exists. Hosts may append their own extra sentence
- * (e.g. an immediate-send tool) but must not paraphrase the convention.
- */
-export declare function buildOutboxContextLine(sessionCwd: string): string;
-/**
- * Discover the outbox files eligible for upload this turn. A missing outbox
- * directory is an empty result. Entries are ordered by file name so multi-file
- * turns deliver deterministically; everything past the per-turn cap (or over
- * the size cap) is left in place and reported as skipped.
- */
-export declare function scanOutbox(outboxDir: string, options?: {
-    maxFiles?: number;
-    maxFileBytes?: number;
-}): Promise<OutboxScanResult>;
-/**
- * Upload-and-consume pass over the outbox. Each eligible file is handed to
- * `send`; on success the file is removed (consumed), on failure it is left in
- * place for a later turn. A failed removal after a successful send is still
- * reported as sent (flagged `removeFailed`) so callers can warn about a
- * potential duplicate next turn instead of re-reporting a delivery failure.
- */
-export declare function flushOutbox(input: {
-    outboxDir: string;
-    send: (file: OutboxFile) => Promise<{
-        messageId: string;
-    }>;
-    maxFiles?: number;
-    maxFileBytes?: number;
-    remove?: (path: string) => Promise<void>;
-}): Promise<OutboxFlushResult>;

package/dist/outbox.js

@@ -1,132 +0,0 @@
-/**
- * Turn-end media outbox for Canon coding hosts.
- *
- * The host advertises a per-conversation outbox directory inside the session
- * working directory (`<cwd>/.canon/outbox/`). When the runtime wants a file
- * (screenshot, plot, artifact) delivered to the Canon conversation it writes
- * the file there — an explicit channel, never inferred from reply prose. At
- * turn end the host scans the outbox, uploads each regular file as a Canon
- * media attachment, and removes files that were delivered. Failed uploads
- * stay in place for a later turn; subdirectories, symlinks, and dotfiles are
- * ignored.
- *
- * This module is intentionally identical in packages/claude-code-plugin and
- * packages/codex-plugin — keep both copies in sync (future consolidation
- * candidate).
- */
-import { mkdir, readdir, stat, unlink, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
-export const OUTBOX_MAX_FILES_PER_TURN = 8;
-export const OUTBOX_MAX_FILE_BYTES = 25 * 1024 * 1024;
-export function resolveOutboxDir(sessionCwd) {
-    return join(sessionCwd, '.canon', 'outbox');
-}
-/**
- * Create the outbox directory for a session and drop a `.gitignore` into the
- * host-managed `.canon/` dir (only when absent) so outbox state never shows
- * up as untracked dirt inside project checkouts or conversation worktrees.
- */
-export async function ensureOutboxDir(sessionCwd) {
-    const dir = resolveOutboxDir(sessionCwd);
-    await mkdir(dir, { recursive: true });
-    try {
-        // The `*` pattern ignores everything under .canon, including this file.
-        await writeFile(join(sessionCwd, '.canon', '.gitignore'), '*\n', { flag: 'wx' });
-    }
-    catch {
-        // Already present (or unwritable) — never block session startup on it.
-    }
-    return dir;
-}
-/**
- * The one terse paragraph injected into the runtime's Canon context so the
- * agent knows the outbox exists. Hosts may append their own extra sentence
- * (e.g. an immediate-send tool) but must not paraphrase the convention.
- */
-export function buildOutboxContextLine(sessionCwd) {
-    const maxMb = Math.floor(OUTBOX_MAX_FILE_BYTES / (1024 * 1024));
-    return `Media outbox: to deliver a file (screenshot, plot, artifact) to this Canon conversation, write it into ${resolveOutboxDir(sessionCwd)} — when your turn ends the host uploads each regular file there as a chat attachment and then deletes it. Limits: ${OUTBOX_MAX_FILES_PER_TURN} files per turn and ${maxMb}MB per file; subdirectories, symlinks, and dotfiles are ignored.`;
-}
-/**
- * Discover the outbox files eligible for upload this turn. A missing outbox
- * directory is an empty result. Entries are ordered by file name so multi-file
- * turns deliver deterministically; everything past the per-turn cap (or over
- * the size cap) is left in place and reported as skipped.
- */
-export async function scanOutbox(outboxDir, options) {
-    const maxFiles = options?.maxFiles ?? OUTBOX_MAX_FILES_PER_TURN;
-    const maxFileBytes = options?.maxFileBytes ?? OUTBOX_MAX_FILE_BYTES;
-    let entries;
-    try {
-        entries = await readdir(outboxDir, { withFileTypes: true });
-    }
-    catch (error) {
-        if (error.code === 'ENOENT') {
-            return { files: [], skipped: [] };
-        }
-        throw error;
-    }
-    const files = [];
-    const skipped = [];
-    for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
-        // `readdir` does not follow symlinks, so a symlinked file reports
-        // isSymbolicLink(), not isFile() — links and directories both land here.
-        if (!entry.isFile()) {
-            skipped.push({ fileName: entry.name, reason: 'not-regular-file' });
-            continue;
-        }
-        if (entry.name.startsWith('.')) {
-            skipped.push({ fileName: entry.name, reason: 'hidden' });
-            continue;
-        }
-        const path = join(outboxDir, entry.name);
-        const info = await stat(path);
-        if (info.size > maxFileBytes) {
-            skipped.push({ fileName: entry.name, reason: 'too-large' });
-            continue;
-        }
-        if (files.length >= maxFiles) {
-            skipped.push({ fileName: entry.name, reason: 'file-cap' });
-            continue;
-        }
-        files.push({ path, fileName: entry.name, sizeBytes: info.size });
-    }
-    return { files, skipped };
-}
-/**
- * Upload-and-consume pass over the outbox. Each eligible file is handed to
- * `send`; on success the file is removed (consumed), on failure it is left in
- * place for a later turn. A failed removal after a successful send is still
- * reported as sent (flagged `removeFailed`) so callers can warn about a
- * potential duplicate next turn instead of re-reporting a delivery failure.
- */
-export async function flushOutbox(input) {
-    const { files, skipped } = await scanOutbox(input.outboxDir, {
-        ...(input.maxFiles != null ? { maxFiles: input.maxFiles } : {}),
-        ...(input.maxFileBytes != null ? { maxFileBytes: input.maxFileBytes } : {}),
-    });
-    const remove = input.remove ?? ((path) => unlink(path));
-    const sent = [];
-    const failed = [];
-    for (const file of files) {
-        let messageId;
-        try {
-            ({ messageId } = await input.send(file));
-        }
-        catch (error) {
-            failed.push({
-                file,
-                error: error instanceof Error ? error.message : String(error),
-            });
-            continue;
-        }
-        try {
-            await remove(file.path);
-            sent.push({ file, messageId });
-        }
-        catch {
-            sent.push({ file, messageId, removeFailed: true });
-        }
-    }
-    return { sent, failed, skipped };
-}