@canonmsg/claude-code-plugin 0.33.0 → 0.34.1

package/dist/session-state.d.ts

@@ -1,5 +1,6 @@
-import type { PermissionMode, SDKMessageOrigin, SDKUserMessage } from '@anthropic-ai/claude-agent-sdk';
+import type { SDKMessageOrigin, SDKUserMessage } from '@anthropic-ai/claude-agent-sdk';
 import type { DeliveryIntent, ModelOption, RuntimeStreamingPayload, TurnLifecycleState, TurnOutputBlock, TurnOutputSnapshot, TurnVerbosity } from '@canonmsg/core';
+import type { AgentReplyAuthorityV1 } from '@canonmsg/backend-contracts';
 import type { TurnArtifactRoutingDecision, TurnArtifactSnapshot } from '@canonmsg/coding-agent-host';
 export type ClaudeInputKind = 'seed' | 'canon';
 export type ClaudeArtifactRoutingMode = 'workspace-generated' | 'disabled';
@@ -23,6 +24,8 @@ export interface ClaudeInputEnvelope {
     turnKey: string;
     isOwnerTurn: boolean;
     requestingUserId: string | null;
+    /** Opaque server capability; never rendered into the Claude prompt. */
+    replyAuthority: AgentReplyAuthorityV1 | null;
 }
 /**
  * The per-turn modes an inbound message resolves from its participant context,
@@ -31,6 +34,7 @@ export interface ClaudeInputEnvelope {
 export interface ClaudeTurnModes {
     artifactRoutingMode?: ClaudeArtifactRoutingMode;
     turnVerbosity?: TurnVerbosity;
+    replyAuthority?: AgentReplyAuthorityV1 | null;
 }
 export interface ClaudeRuntimeControlError {
     value: string;
@@ -102,6 +106,7 @@ export declare function createClaudeInputEnvelope(input: {
     artifactBaseline?: TurnArtifactSnapshot | null;
     isOwnerTurn?: boolean;
     requestingUserId?: string | null;
+    replyAuthority?: AgentReplyAuthorityV1 | null;
 }): ClaudeInputEnvelope;
 export declare function resolveClaudeTurnResponseRouting(turn: Pick<ClaudeInputEnvelope, 'kind' | 'isOwnerTurn' | 'requestingUserId'> | null | undefined, ownerId: string | null | undefined, ownerOnly?: boolean): {
     isOwnerTurn: boolean;
@@ -815,44 +820,3 @@ export declare function confirmClaudeInterrupt(input: {
     active: boolean;
     interrupt: () => Promise<unknown>;
 }): Promise<'confirmed' | 'defer'>;
-/** Requested session-control values from the control plane (raw, pre-validation). */
-export interface ClaudeSessionControlInput {
-    model?: string;
-    permissionMode?: string;
-    effort?: string;
-    ultracode?: string;
-}
-/** Mutable mirror of the live session's control state — mutated in place on success. */
-export interface ClaudeSessionControlState {
-    model?: string;
-    permissionMode?: string;
-    effort?: string;
-    ultracode?: string;
-}
-/**
- * Injected validators + side effects so the apply logic stays host-agnostic and
- * unit-testable. The host wires these to the live SDK query and its runtime
- * control-error bookkeeping; tests inject fakes.
- */
-export interface ClaudeSessionControlDeps {
-    state: ClaudeSessionControlState;
-    parsePermissionMode: (value: unknown) => PermissionMode | null;
-    normalizeEffort: (value: unknown) => string | undefined;
-    parseUltracode: (value: unknown) => string | undefined;
-    setModel: (model: string) => Promise<void>;
-    setPermissionMode: (mode: PermissionMode) => Promise<void>;
-    applyEffort: (level: string) => Promise<void>;
-    applyUltracode: (enabled: boolean) => Promise<void>;
-    setRuntimeControlError: (controlId: string, value: string, error: unknown) => void;
-    clearRuntimeControlError: (controlId: string) => void;
-    publishSnapshot: () => void;
-}
-/**
- * Apply a session-control request to the live Claude session. Mirrors the host's
- * control semantics (validation, only-if-different checks, error recording,
- * clear-on-success). Whenever a live op is invoked — on success OR caught
- * failure — publishSnapshot() is called exactly once so the app-subscribed
- * /agent-session snapshot converges immediately instead of waiting for the next
- * heartbeat. If nothing changed, publishSnapshot() is not called.
- */
-export declare function applyClaudeSessionControl(control: ClaudeSessionControlInput, deps: ClaudeSessionControlDeps): Promise<void>;

package/dist/session-state.js

@@ -28,6 +28,7 @@ export function createClaudeInputEnvelope(input) {
         requestingUserId: input.kind === 'canon' && input.requestingUserId
             ? input.requestingUserId
             : null,
+        replyAuthority: input.kind === 'canon' ? input.replyAuthority ?? null : null,
         turnKey: input.kind === 'canon' && sourceMessageId
             ? `canon:${sourceMessageId}`
             : `${input.kind}:${fallbackId}`,
@@ -1313,74 +1314,3 @@ export async function confirmClaudeInterrupt(input) {
         return 'defer';
     }
 }
-/**
- * Apply a session-control request to the live Claude session. Mirrors the host's
- * control semantics (validation, only-if-different checks, error recording,
- * clear-on-success). Whenever a live op is invoked — on success OR caught
- * failure — publishSnapshot() is called exactly once so the app-subscribed
- * /agent-session snapshot converges immediately instead of waiting for the next
- * heartbeat. If nothing changed, publishSnapshot() is not called.
- */
-export async function applyClaudeSessionControl(control, deps) {
-    const { state } = deps;
-    let liveOpInvoked = false;
-    if (control.model && control.model !== state.model) {
-        liveOpInvoked = true;
-        try {
-            await deps.setModel(control.model);
-            state.model = control.model;
-            deps.clearRuntimeControlError('model');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('model', control.model, err);
-        }
-    }
-    const nextPermissionMode = deps.parsePermissionMode(control.permissionMode);
-    if (control.permissionMode && !nextPermissionMode) {
-        deps.setRuntimeControlError('permissionMode', control.permissionMode, new Error(`Unsupported Claude permission mode: ${control.permissionMode}`));
-    }
-    else if (nextPermissionMode && nextPermissionMode !== state.permissionMode) {
-        liveOpInvoked = true;
-        try {
-            await deps.setPermissionMode(nextPermissionMode);
-            state.permissionMode = nextPermissionMode;
-            deps.clearRuntimeControlError('permissionMode');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('permissionMode', nextPermissionMode, err);
-        }
-    }
-    const nextEffort = deps.normalizeEffort(control.effort);
-    if (nextEffort && nextEffort !== state.effort) {
-        liveOpInvoked = true;
-        try {
-            await deps.applyEffort(nextEffort);
-            state.effort = nextEffort;
-            deps.clearRuntimeControlError('effort');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('effort', nextEffort, err);
-        }
-    }
-    else if (control.effort && !nextEffort) {
-        deps.setRuntimeControlError('effort', String(control.effort), new Error('Unsupported Claude thinking level.'));
-    }
-    const nextUltracode = deps.parseUltracode(control.ultracode);
-    if (control.ultracode && !nextUltracode) {
-        deps.setRuntimeControlError('ultracode', String(control.ultracode), new Error('Unsupported Claude ultracode mode.'));
-    }
-    else if (nextUltracode && nextUltracode !== state.ultracode) {
-        liveOpInvoked = true;
-        try {
-            await deps.applyUltracode(nextUltracode === 'on');
-            state.ultracode = nextUltracode;
-            deps.clearRuntimeControlError('ultracode');
-        }
-        catch (err) {
-            deps.setRuntimeControlError('ultracode', nextUltracode, err);
-        }
-    }
-    if (liveOpInvoked) {
-        deps.publishSnapshot();
-    }
-}

package/dist/tool-policy.js

@@ -57,7 +57,6 @@ const CANON_HITL_OR_READ_VERBS = new Set([
     'send_card',
     'request_card',
     'list_contacts',
-    'list_contact_requests',
     'list_conversations',
     // Staying quiet posts nothing; an approval card asking permission for
     // silence would gate a no-op behind a human decision.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/claude-code-plugin",
-  "version": "0.33.0",
+  "version": "0.34.1",
   "description": "Canon channel plugin for Claude Code — messaging where AI agents are first-class citizens",
   "type": "module",
   "main": "dist/index.js",
@@ -31,11 +31,11 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.228",
-    "@canonmsg/agent-sdk": "^9.0.0",
-    "@canonmsg/agent-tools": "^0.7.0",
+    "@canonmsg/agent-sdk": "^10.1.0",
+    "@canonmsg/agent-tools": "^0.9.0",
     "@canonmsg/coding-agent-host": "^0.7.0",
-    "@canonmsg/core": "^11.0.0",
-    "@canonmsg/rich-cards": "^0.10.3",
+    "@canonmsg/core": "^12.1.0",
+    "@canonmsg/rich-cards": "^0.10.4",
     "@modelcontextprotocol/sdk": "^1.30.0"
   },
   "engines": {