@canonmsg/claude-code-plugin 0.32.0 → 0.34.0

package/dist/session-state.js

@@ -28,9 +28,7 @@ export function createClaudeInputEnvelope(input) {
         requestingUserId: input.kind === 'canon' && input.requestingUserId
             ? input.requestingUserId
             : null,
-        ...(input.kind === 'canon' && input.replyContactTarget
-            ? { replyContactTarget: input.replyContactTarget }
-            : {}),
+        replyAuthority: input.kind === 'canon' ? input.replyAuthority ?? null : null,
         turnKey: input.kind === 'canon' && sourceMessageId
             ? `canon:${sourceMessageId}`
             : `${input.kind}:${fallbackId}`,
@@ -1316,74 +1314,3 @@ export async function confirmClaudeInterrupt(input) {
         return 'defer';
     }
 }
-/**
- * Apply a session-control request to the live Claude session. Mirrors the host's
- * control semantics (validation, only-if-different checks, error recording,
- * clear-on-success). Whenever a live op is invoked — on success OR caught
- * failure — publishSnapshot() is called exactly once so the app-subscribed
- * /agent-session snapshot converges immediately instead of waiting for the next
- * heartbeat. If nothing changed, publishSnapshot() is not called.
- */
-export async function applyClaudeSessionControl(control, deps) {
-    const { state } = deps;
-    let liveOpInvoked = false;
-    if (control.model && control.model !== state.model) {
-        liveOpInvoked = true;
-        try {
-            await deps.setModel(control.model);
-            state.model = control.model;
-            deps.clearRuntimeControlError('model');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('model', control.model, err);
-        }
-    }
-    const nextPermissionMode = deps.parsePermissionMode(control.permissionMode);
-    if (control.permissionMode && !nextPermissionMode) {
-        deps.setRuntimeControlError('permissionMode', control.permissionMode, new Error(`Unsupported Claude permission mode: ${control.permissionMode}`));
-    }
-    else if (nextPermissionMode && nextPermissionMode !== state.permissionMode) {
-        liveOpInvoked = true;
-        try {
-            await deps.setPermissionMode(nextPermissionMode);
-            state.permissionMode = nextPermissionMode;
-            deps.clearRuntimeControlError('permissionMode');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('permissionMode', nextPermissionMode, err);
-        }
-    }
-    const nextEffort = deps.normalizeEffort(control.effort);
-    if (nextEffort && nextEffort !== state.effort) {
-        liveOpInvoked = true;
-        try {
-            await deps.applyEffort(nextEffort);
-            state.effort = nextEffort;
-            deps.clearRuntimeControlError('effort');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('effort', nextEffort, err);
-        }
-    }
-    else if (control.effort && !nextEffort) {
-        deps.setRuntimeControlError('effort', String(control.effort), new Error('Unsupported Claude thinking level.'));
-    }
-    const nextUltracode = deps.parseUltracode(control.ultracode);
-    if (control.ultracode && !nextUltracode) {
-        deps.setRuntimeControlError('ultracode', String(control.ultracode), new Error('Unsupported Claude ultracode mode.'));
-    }
-    else if (nextUltracode && nextUltracode !== state.ultracode) {
-        liveOpInvoked = true;
-        try {
-            await deps.applyUltracode(nextUltracode === 'on');
-            state.ultracode = nextUltracode;
-            deps.clearRuntimeControlError('ultracode');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('ultracode', nextUltracode, err);
-        }
-    }
-    if (liveOpInvoked) {
-        deps.publishSnapshot();
-    }
-}

package/dist/tool-policy.js

@@ -37,13 +37,9 @@ function normalizeToolName(toolName) {
 function isCanonOutboundTool(normalizedToolName) {
     return normalizedToolName.endsWith('__reply')
         || normalizedToolName.endsWith('__send_message')
-        || normalizedToolName.endsWith('__send_contextual_message')
-        || normalizedToolName.endsWith('__send_to')
         || normalizedToolName.endsWith('__share_contact')
         || normalizedToolName === 'reply'
         || normalizedToolName === 'send_message'
-        || normalizedToolName === 'send_contextual_message'
-        || normalizedToolName === 'send_to'
         || normalizedToolName === 'share_contact';
 }
 /**
@@ -61,7 +57,6 @@ const CANON_HITL_OR_READ_VERBS = new Set([
     'send_card',
     'request_card',
     'list_contacts',
-    'list_contact_requests',
     'list_conversations',
     // Staying quiet posts nothing; an approval card asking permission for
     // silence would gate a no-op behind a human decision.
@@ -79,7 +74,7 @@ const CANON_INTERACTION_LIFECYCLE_VERBS = new Set([
  * Verbs a NON-owner conversation member may trigger: same-conversation HITL
  * and display surfaces, whose responder routing and owner-only escalation
  * (secret/sudo, session rules) are enforced server-side. Cross-conversation
- * verbs (send_to, share_contact) and the reads (contacts, conversation
+ * cross-conversation verbs (share_contact) and the reads (contacts, conversation
  * lists — they expose the agent's other relationships to this conversation)
  * stay owner-only until the provenance trigger-token primitive lands.
  */
@@ -257,7 +252,7 @@ export async function decideClaudeToolPermissionForMode(input) {
         }
         // HITL + read verbs are allowed without an approval card: the HITL verbs
         // themselves render the human-facing card (recursion otherwise), and the
-        // reads are side-effect free. Outbound verbs (send_to, share_contact)
+        // reads are side-effect free. Outbound verbs (share_contact)
         // fall through to the mode policy — in native-approval mode they gate
         // like any other side effect; in default mode owner turns allow.
         if (CANON_HITL_OR_READ_VERBS.has(canonVerb) && !input.ruleForcedAsk) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/claude-code-plugin",
-  "version": "0.32.0",
+  "version": "0.34.0",
   "description": "Canon channel plugin for Claude Code — messaging where AI agents are first-class citizens",
   "type": "module",
   "main": "dist/index.js",
@@ -31,11 +31,11 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.228",
-    "@canonmsg/agent-sdk": "^8.9.0",
-    "@canonmsg/agent-tools": "^0.6.0",
-    "@canonmsg/coding-agent-host": "^0.6.0",
-    "@canonmsg/core": "^10.7.0",
-    "@canonmsg/rich-cards": "^0.10.2",
+    "@canonmsg/agent-sdk": "^10.0.0",
+    "@canonmsg/agent-tools": "^0.8.0",
+    "@canonmsg/coding-agent-host": "^0.7.0",
+    "@canonmsg/core": "^12.0.0",
+    "@canonmsg/rich-cards": "^0.10.4",
     "@modelcontextprotocol/sdk": "^1.30.0"
   },
   "engines": {