@canonmsg/claude-code-plugin 0.36.2 → 0.36.3

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "Canon",
   "description": "Connect Claude Code to Canon — messaging where AI agents are first-class citizens",
-  "version": "0.36.2",
+  "version": "0.36.3",
   "channels": [
     {
       "server": "canon-channel",

package/dist/host.js

@@ -30,7 +30,7 @@ import { materializeMessageMedia, materializeReplyContextMedia, sendMediaFileMes
 import { captureTurnArtifactSnapshot, createTurnArtifactRouter, IDLE_TIMEOUT_MS, createRecoveryCheckpointTracker, createReconnectRecoveryCoordinator, } from '@canonmsg/coding-agent-host';
 import { buildCanonUserContent, renderClaudeInboundContent, withClaudeReplyContextMediaReferences, } from './canon-user-content.js';
 import { buildClaudeNativeCommandInput, createClaudeCommandContextHook, getClaudeNativeCommandOutput, } from './native-command-input.js';
-import { EFFORT_OPTIONS, CLAUDE_PERMISSION_MODE_OPTIONS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildCanonInboundFrameV1, buildCanonGroupContext, buildCompactGroupContextLines, buildCanonTurnContextV2, buildConfiguredWorkspaceOptionsWithRoots, buildConversationEnvironmentKey, buildFirstPartyCodingRuntimeDescriptor, buildHydratedInboundContext, hydrateCanonReplyContext, diffCanonMemberIds, buildPublicWorkspaceRoots, buildPublicWorkspaceOptions, buildRuntimePresentationPolicy, normalizeRuntimeCommandDescriptors, DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, createConversationMetadataLoader, createTurnOutputController, createRuntimeStatePublisher, createRuntimeHeartbeat, createTypingStatusPublisher, EXECUTION_ENVIRONMENT_MODES, ExecutionEnvironmentError, CanonClient, CanonStream, ControlChannelPoller, DEFAULT_PARTICIPATION_HISTORY_FETCH_LIMIT, DEFAULT_RUNTIME_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, ApprovalManager, RuntimeRequestManager, FINAL_MESSAGE_HANDOFF_MS, buildLocalRuntimeId, getActiveProfileLock, heartbeatLocalRuntimeEntry, normalizeTurnMetadata, parseTurnVerbosityConfig, prepareConversationEnvironment, resolveCanonAgent, verifyResolvedAgentEnvironment, decideAutoReply, initRTDBAuth, isChunkedSendMessageError, isPendingCanonOperation, sendMessageWithRetry, sendMessageWithRetryChunked, loadRuntimeSessionState, markLocalRuntimeStopped, releaseConversationEnvironment, resolveLocalRuntimeSessionState, saveRuntimeSessionState, clearRuntimeSessionState, publishHostSessionSnapshots, renderCodingHostInboundPrompt, resolveConfiguredWorkspaceCwd, resolveTurnVerbosity, upsertLocalRuntimeEntry, } from '@canonmsg/core';
+import { EFFORT_OPTIONS, CLAUDE_PERMISSION_MODE_OPTIONS, RUNTIME_NEW_SESSION_ACTION, RUNTIME_STOP_ACTION, RUNTIME_STOP_AND_DROP_ACTION, buildCanonInboundFrameV1, buildCanonGroupContext, buildCompactGroupContextLines, buildCanonTurnContextV2, buildConfiguredWorkspaceOptionsWithRoots, buildConversationEnvironmentKey, buildFirstPartyCodingRuntimeDescriptor, buildHydratedInboundContext, hydrateCanonReplyContext, diffCanonMemberIds, buildPublicWorkspaceRoots, buildPublicWorkspaceOptions, buildRuntimePresentationPolicy, normalizeRuntimeCommandDescriptors, DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, createConversationMetadataLoader, createTurnOutputController, createRuntimeStatePublisher, createRuntimeHeartbeat, createTypingStatusPublisher, EXECUTION_ENVIRONMENT_MODES, ExecutionEnvironmentError, CanonClient, CanonStream, ControlChannelPoller, DEFAULT_PARTICIPATION_HISTORY_FETCH_LIMIT, DEFAULT_RUNTIME_CAPABILITIES, HOST_ADMISSION_ACTIONS_DISABLED, ApprovalManager, RuntimeRequestManager, FINAL_MESSAGE_HANDOFF_MS, buildLocalRuntimeId, getActiveProfileLock, heartbeatLocalRuntimeEntry, normalizeTurnMetadata, parseTurnVerbosityConfig, prepareConversationEnvironment, resolveCanonAgent, verifyResolvedAgentEnvironment, decideAutoReply, initRTDBAuth, isChunkedSendMessageError, isPendingCanonOperation, sendMessageWithRetry, sendMessageWithRetryChunked, markLocalRuntimeStopped, releaseConversationEnvironment, resolveLocalRuntimeSessionState, saveRuntimeSessionState, clearRuntimeSessionState, publishHostSessionSnapshots, renderCodingHostInboundPrompt, resolveConfiguredWorkspaceCwd, resolveTurnVerbosity, upsertLocalRuntimeEntry, } from '@canonmsg/core';
 import { runCli } from '@canonmsg/core';
 import { CANON_VERB_MCP_SERVER_NAME, createCanonVerbMcpServer } from '@canonmsg/agent-tools';
 import { synthesizeClaudeApprovalDiff } from './approval-diff.js';
@@ -1643,16 +1643,9 @@ function createSession(conversationId, environment, agentId, client, typingSigna
                 .updateMessageDisposition(conversationId, input.sourceMessageId, 'rejected')
                 .catch(() => { });
         }
-        if (input.kind === 'canon' && input.sourceMessageId) {
-            const id = `message:${conversationId}:${input.sourceMessageId}`;
-            void client.getEndpoint().then(async (engine) => {
-                const entry = await engine.getInbound(id);
-                if (entry && ['observed', 'offered', 'deferred'].includes(entry.state)) {
-                    await engine.setInboundState(id, 'deferred', 'native-preflight');
-                    config.onInputDeferred?.(input.sourceMessageId);
-                }
-            }).catch((error) => console.error('[canon-host] Failed to defer native input:', error));
-        }
+        void input.inboundHandoff?.release('native-preflight').catch((error) => {
+            console.error('[canon-host] Failed to release native input:', error);
+        });
         // resetTurnToIdle releases the slot, tears the published turn down (typing
         // signal, seeded /streaming, turn state) and drains the queue. On a closed
         // session it is a no-op, which is correct: the teardown owns that path.
@@ -1662,17 +1655,26 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         return dispatchClaudeInput(session, input, {
             openTurn,
             markAccepted: (dispatched) => markQueuedMessageAccepted(dispatched.sourceMessageId, dispatched.markAccepted),
-            prepareArtifacts: async (input) => {
-                await prepareArtifactsForInput(input);
-                if (input.kind === 'canon' && input.sourceMessageId) {
-                    const engine = await client.getEndpoint();
-                    const id = `message:${conversationId}:${input.sourceMessageId}`;
-                    if (!await engine.claimInbound(id)) {
-                        throw new Error('Canon input already has an execution owner.');
-                    }
+            prepareArtifacts: prepareArtifactsForInput,
+            send: async (input) => {
+                if (input.kind !== 'canon' || !input.sourceMessageId) {
+                    sendInput(input);
+                    return;
                 }
+                const engine = await client.getEndpoint();
+                input.inboundHandoff ??= await engine.acquireInbound(`message:${conversationId}:${input.sourceMessageId}`) ?? undefined;
+                if (!input.inboundHandoff)
+                    throw new Error('Canon input already has an execution owner.');
+                if (session.closed)
+                    await input.inboundHandoff.release('session-closed');
+                const started = await engine.startInbound(input.inboundHandoff, () => {
+                    if (session.dispatchingInput === input)
+                        session.dispatchingInput = null;
+                    sendInput(input);
+                });
+                if (started.status !== 'submitted')
+                    throw new Error(`Canon input ${started.status} before native dispatch.`);
             },
-            send: sendInput,
             abandon: abandonDispatchedInput,
         });
     }
@@ -1802,12 +1804,12 @@ function createSession(conversationId, environment, agentId, client, typingSigna
         catch { }
         // A native failure cannot prove whether dispatched work ran. Release local
         // in-flight claims without completing endpoint receipts or replaying work.
-        const unfinishedIds = new Set([
+        const unfinished = new Set([
             session.activeInput, session.dispatchingInput,
             ...session.pendingInputs, ...dispatchedInputs.values(),
-        ].flatMap(claudeCompletedSourceMessageIds));
-        for (const sourceMessageId of unfinishedIds)
-            config.onInputDeferred?.(sourceMessageId);
+        ]);
+        for (const input of unfinished)
+            void input?.inboundHandoff?.release('session-ended').catch(console.error);
         console.error(`[canon-host] [${conversationId.slice(0, 8)}] Session ended`);
         onSessionEnd(conversationId, session.sdkSessionId);
     }
@@ -2688,6 +2690,9 @@ export async function main() {
             return;
         const saveResume = options.saveResume !== false;
         session.closed = true;
+        for (const input of [session.dispatchingInput, ...session.pendingInputs]) {
+            void input?.inboundHandoff?.release('session-closed').catch(console.error);
+        }
         if (session.typingKeepaliveTimer) {
             clearInterval(session.typingKeepaliveTimer);
             session.typingKeepaliveTimer = null;
@@ -2733,6 +2738,11 @@ export async function main() {
         console.error(`[canon-host] [${conversationId.slice(0, 8)}] Session ${options.reason ?? (saveResume ? 'suspended (sessionId saved for resume)' : 'cleared')}`);
     }
     async function resetRuntimeSession(session) {
+        const dispatching = session.dispatchingInput;
+        void dispatching?.inboundHandoff?.cancel('canceled-before-execution').then((canceled) => {
+            if (canceled)
+                session.markInputCompleted(dispatching);
+        }).catch(console.error);
         const conversationId = session.conversationId;
         // `dispatchingInput` excludes the dispatch window: the slot is reserved but
         // the SDK has nothing in flight, so there is nothing to interrupt. The
@@ -2757,8 +2767,10 @@ export async function main() {
         const droppedInputs = session.pendingInputs.splice(0);
         await markSessionPendingInputsRejected(conversationId, droppedInputs);
         session.markInputCompleted(session.activeInput);
-        for (const input of droppedInputs)
-            session.markInputCompleted(input);
+        for (const input of droppedInputs) {
+            if (!input.inboundHandoff || input.inboundHandoff.phase === 'settled')
+                session.markInputCompleted(input);
+        }
         if (session.activeInput) {
             session.interruptedTurnKeys.add(session.activeInput.turnKey);
         }
@@ -2770,13 +2782,14 @@ export async function main() {
         closeSession(conversationId, { saveResume: false, reason: 'reset for new Canon session' });
     }
     async function markSessionPendingInputsRejected(conversationId, inputs) {
-        await Promise.all(inputs.map((input) => {
+        await Promise.all(inputs.map(async (input) => {
+            await input.inboundHandoff?.cancel('canceled-before-execution');
             if (!input.markAccepted || !input.sourceMessageId)
                 return Promise.resolve();
             return client.updateMessageDisposition(conversationId, input.sourceMessageId, 'rejected').catch(() => { });
         }));
     }
-    function removeQueuedInput(conversationId, sourceMessageId) {
+    async function removeQueuedInput(conversationId, sourceMessageId) {
         const session = sessions.get(conversationId);
         if (!session || session.pendingInputs.length === 0)
             return;
@@ -2784,8 +2797,10 @@ export async function main() {
         if (removed.length === 0)
             return;
         session.pendingInputs = session.pendingInputs.filter((input) => input.sourceMessageId !== sourceMessageId);
-        for (const input of removed)
-            session.markInputCompleted(input);
+        await Promise.all(removed.map(async (input) => {
+            if (!input.inboundHandoff || await input.inboundHandoff.cancel('message-deleted'))
+                session.markInputCompleted(input);
+        }));
         session.writeTurn();
     }
     function evictOldestIdle() {
@@ -2886,12 +2901,6 @@ export async function main() {
                         }
                     }
                     existing?.clearStreaming().catch(() => { });
-                    if (existing) {
-                        settleInboundMessageId(existing.activeInput?.sourceMessageId, false);
-                        for (const input of existing.pendingInputs) {
-                            settleInboundMessageId(input.sourceMessageId, false);
-                        }
-                    }
                     typingSignals.clear(convoId).catch(() => { });
                     typingSignals.dispose(convoId);
                     sessions.delete(convoId);
@@ -2922,14 +2931,13 @@ export async function main() {
                         return roster ? buildCompactGroupContextLines(roster, 'initial').join('\n') : '';
                     },
                     currentArtifactAudience: () => ({ memberIds: conversationCache.get(conversationId)?.memberIds, agentId, ownerId }),
-                    onInputDeferred: (sourceMessageId) => settleInboundMessageId(sourceMessageId, false),
                     onInputCompleted: (sourceMessageId) => {
-                        recoveryCheckpointsFor(conversationId).settle(sourceMessageId);
-                        settleInboundMessageId(sourceMessageId, true);
                         const id = `message:${conversationId}:${sourceMessageId}`;
-                        void endpoint.getInbound(id).then((entry) => entry
-                            ? endpoint.setInboundState(id, 'settled', 'native-completed') : undefined)
-                            .catch((error) => console.error('[canon-host] Failed to settle native input:', error));
+                        void endpoint.getInbound(id).then(async (entry) => {
+                            if (entry)
+                                await endpoint.setInboundState(id, 'settled', 'native-completed');
+                            recoveryCheckpointsFor(conversationId).settle(sourceMessageId);
+                        }).catch((error) => console.error('[canon-host] Failed to settle native input:', error));
                     },
                     publishSessionSnapshots: (ids) => { void publishSessionSnapshots(ids); },
                 }, resumeId);
@@ -2954,30 +2962,6 @@ export async function main() {
             pendingSessionCreations.delete(conversationId);
         }
     }
-    const acceptedInboundMessageIds = new Set();
-    const inFlightInboundMessageIds = new Set();
-    function claimInboundMessageId(messageId) {
-        if (!messageId)
-            return true;
-        if (acceptedInboundMessageIds.has(messageId) || inFlightInboundMessageIds.has(messageId))
-            return false;
-        inFlightInboundMessageIds.add(messageId);
-        return true;
-    }
-    function settleInboundMessageId(messageId, accepted) {
-        if (!messageId)
-            return;
-        inFlightInboundMessageIds.delete(messageId);
-        if (!accepted)
-            return;
-        acceptedInboundMessageIds.add(messageId);
-        while (acceptedInboundMessageIds.size > 2_048) {
-            const oldest = acceptedInboundMessageIds.values().next().value;
-            if (!oldest)
-                break;
-            acceptedInboundMessageIds.delete(oldest);
-        }
-    }
     function handleRuntimeReplyMessage(conversationId, message) {
         if (message.metadata?.type === 'approval_reply' || (approvalManager?.pendingCount ?? 0) > 0) {
             const consumed = approvalManager?.handleMessage(conversationId, {
@@ -3002,13 +2986,6 @@ export async function main() {
         }
         return consumed;
     }
-    function persistedConversationCursor(conversationId) {
-        return loadRuntimeSessionState(runtimeId, {
-            conversationId,
-            baseCwd: workingDir,
-            workspaceId: CLAUDE_RECOVERY_CURSOR_WORKSPACE_ID,
-        })?.lastInboundMessageId ?? null;
-    }
     function persistConversationRecoveryCursor(conversationId, messageId) {
         try {
             saveRuntimeSessionState(runtimeId, {
@@ -3039,23 +3016,24 @@ export async function main() {
                 return;
             }
             const convoId = payload.conversationId;
-            if (!claimInboundMessageId(m.id))
+            const handoff = await endpoint.acquireInbound(event.id);
+            if (!handoff)
                 return;
             recoveryCheckpointsFor(convoId).track(m.id);
             knownConversationIds.add(convoId);
             if (handleRuntimeReplyMessage(convoId, m)) {
-                recoveryCheckpointsFor(convoId).settle(m.id);
-                settleInboundMessageId(m.id, true);
-                await endpoint.setInboundState(`message:${convoId}:${m.id}`, 'settled', 'not-dispatched');
+                if (await handoff.settle('not-dispatched')) {
+                    recoveryCheckpointsFor(convoId).settle(m.id);
+                }
                 return;
             }
             const sender = m.senderName || m.senderId;
             const isOwner = m.isOwner ?? (ownerId != null && m.senderId === ownerId);
             if (payload.turnDispatch && payload.turnDispatch.kind !== 'run_turn') {
                 console.error(`[canon-host] [${convoId.slice(0, 8)}] Ignoring server-dispatched observe-only message: ${payload.turnDispatch.reason}`);
-                recoveryCheckpointsFor(convoId).settle(m.id);
-                settleInboundMessageId(m.id, true);
-                await endpoint.setInboundState(`message:${convoId}:${m.id}`, 'settled', 'not-dispatched');
+                if (await handoff.settle('not-dispatched')) {
+                    recoveryCheckpointsFor(convoId).settle(m.id);
+                }
                 return;
             }
             await (async () => {
@@ -3155,6 +3133,7 @@ export async function main() {
                     materialized: [...replyMedia.materialized, ...materialized],
                 });
                 const turnModes = {
+                    inboundHandoff: handoff,
                     ...resolveClaudeTurnModes(participantContext),
                     commandContext: commandInput.commandContext,
                     replyAuthority: payload.replyAuthority ?? null,
@@ -3175,12 +3154,12 @@ export async function main() {
                 return true;
             })().then(async (queued) => {
                 if (!queued) {
-                    recoveryCheckpointsFor(convoId).settle(m.id);
-                    settleInboundMessageId(m.id, true);
-                    await endpoint.setInboundState(`message:${convoId}:${m.id}`, 'settled', 'not-dispatched');
+                    if (await handoff.settle('not-dispatched')) {
+                        recoveryCheckpointsFor(convoId).settle(m.id);
+                    }
                 }
-            }).catch((error) => {
-                settleInboundMessageId(m.id, false);
+            }).catch(async (error) => {
+                await handoff.release('queue-failed');
                 console.error(`[canon-host] [${convoId.slice(0, 8)}] Failed to process inbound message:`, error instanceof Error ? error.message : error);
                 throw error;
             });
@@ -3197,7 +3176,7 @@ export async function main() {
                     data: payload });
             },
             onMessageDeleted: (payload) => {
-                removeQueuedInput(payload.conversationId, payload.messageId);
+                void removeQueuedInput(payload.conversationId, payload.messageId).catch(console.error);
             },
             onConversationUpdated: (payload) => {
                 handleConversationUpdated(payload);
@@ -3255,6 +3234,22 @@ export async function main() {
             queueDepth: session.pendingInputs.length,
         });
         if (action === 'defer') {
+            const dispatching = session.dispatchingInput;
+            if (dispatching?.inboundHandoff) {
+                // Stop owns the pre-submit window too. Register cancellation before
+                // any queued-disposition write; the shared claim fence prevents send.
+                const canceled = dispatching.inboundHandoff.cancel('canceled-before-execution');
+                const dropped = event.type === 'stop_and_drop' ? session.pendingInputs.splice(0) : [];
+                await markSessionPendingInputsRejected(convoId, dropped);
+                for (const input of dropped) {
+                    if (!input.inboundHandoff || input.inboundHandoff.phase === 'settled')
+                        session.markInputCompleted(input);
+                }
+                if (await canceled) {
+                    session.markInputCompleted(dispatching);
+                    return;
+                }
+            }
             // Reserved but not yet dispatched: there is nothing in the SDK to stop
             // YET. Consuming the signal here would make a Stop pressed in the
             // accept/artifact window do nothing while the turn it was aimed at ran to
@@ -3286,8 +3281,10 @@ export async function main() {
             await markSessionPendingInputsRejected(convoId, droppedInputs);
         }
         session.markInputCompleted(session.activeInput);
-        for (const input of droppedInputs)
-            session.markInputCompleted(input);
+        for (const input of droppedInputs) {
+            if (!input.inboundHandoff || input.inboundHandoff.phase === 'settled')
+                session.markInputCompleted(input);
+        }
         if (session.activeInput) {
             session.interruptedTurnKeys.add(session.activeInput.turnKey);
         }

package/dist/session-state.d.ts

@@ -1,10 +1,12 @@
 import type { SDKMessageOrigin, SDKResultMessage, SDKUserMessage } from '@anthropic-ai/claude-agent-sdk';
 import type { DeliveryIntent, ModelOption, RuntimeStreamingPayload, TurnLifecycleState, TurnOutputBlock, TurnOutputSnapshot, TurnVerbosity } from '@canonmsg/core';
+import type { EndpointInboundHandoff } from '@canonmsg/core';
 import type { AgentReplyAuthorityV1 } from '@canonmsg/backend-contracts';
 import type { TurnArtifactRoutingDecision, TurnArtifactSnapshot } from '@canonmsg/coding-agent-host';
 export type ClaudeInputKind = 'seed' | 'canon';
 export type ClaudeArtifactRoutingMode = 'workspace-generated' | 'disabled';
 export interface ClaudeInputEnvelope {
+    inboundHandoff?: EndpointInboundHandoff;
     commandContext?: string;
     kind: ClaudeInputKind;
     /** Correlates this envelope with its turn result's user-message UUIDs. */
@@ -35,6 +37,7 @@ export interface ClaudeInputEnvelope {
  * grouped so they travel together from the enqueue site onto the envelope.
  */
 export interface ClaudeTurnModes {
+    inboundHandoff?: EndpointInboundHandoff;
     commandContext?: string;
     artifactRoutingMode?: ClaudeArtifactRoutingMode;
     turnVerbosity?: TurnVerbosity;
@@ -100,6 +103,7 @@ export interface ClaudeCompletedTurnState {
     turnActivity?: ClaudeTurnActivityState;
 }
 export declare function createClaudeInputEnvelope(input: {
+    inboundHandoff?: EndpointInboundHandoff;
     commandContext?: string;
     kind: ClaudeInputKind;
     msg: SDKUserMessage;
@@ -315,7 +319,7 @@ export interface ClaudeDispatchDeps {
     /** Capture the artifact baseline — a workspace walk. */
     prepareArtifacts: (input: ClaudeInputEnvelope) => Promise<void>;
     /** Hand the input to the SDK. */
-    send: (input: ClaudeInputEnvelope) => void;
+    send: (input: ClaudeInputEnvelope) => void | Promise<void>;
     /** Settle an input that will never be answered, and retire its turn. */
     abandon: (input: ClaudeInputEnvelope, reason: ClaudeDispatchAbandonReason, error?: unknown) => void;
 }

package/dist/session-state.js

@@ -12,6 +12,7 @@ export function createClaudeInputEnvelope(input) {
     return {
         ...(input.commandContext ? { commandContext: input.commandContext } : {}),
         kind: input.kind,
+        ...(input.inboundHandoff ? { inboundHandoff: input.inboundHandoff } : {}),
         messageUuid,
         msg: { ...input.msg, uuid: messageUuid },
         intent: input.intent ?? 'queue',
@@ -331,17 +332,30 @@ export async function dispatchClaudeInput(session, input, deps) {
     catch (error) {
         failure = { error };
     }
-    if (session.dispatchingInput === input)
-        session.dispatchingInput = null;
     if (failure) {
+        if (session.dispatchingInput === input)
+            session.dispatchingInput = null;
         deps.abandon(input, 'error', failure.error);
         return;
     }
     if (session.closed) {
+        if (session.dispatchingInput === input)
+            session.dispatchingInput = null;
         deps.abandon(input, 'closed');
         return;
     }
-    deps.send(input);
+    try {
+        await deps.send(input);
+    }
+    catch (error) {
+        if (session.dispatchingInput === input)
+            session.dispatchingInput = null;
+        deps.abandon(input, 'error', error);
+    }
+    finally {
+        if (session.dispatchingInput === input)
+            session.dispatchingInput = null;
+    }
 }
 // ── Turn lifecycle: opening a turn before the SDK says anything ──────
 //

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/claude-code-plugin",
-  "version": "0.36.2",
+  "version": "0.36.3",
   "description": "Canon channel plugin for Claude Code — messaging where AI agents are first-class citizens",
   "type": "module",
   "main": "dist/index.js",
@@ -31,10 +31,10 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.278",
-    "@canonmsg/agent-sdk": "^11.0.1",
+    "@canonmsg/agent-sdk": "^11.0.2",
     "@canonmsg/agent-tools": "^0.11.0",
-    "@canonmsg/coding-agent-host": "^0.9.0",
-    "@canonmsg/core": "^13.0.4",
+    "@canonmsg/coding-agent-host": "^0.10.0",
+    "@canonmsg/core": "^13.0.5",
     "@canonmsg/rich-cards": "^0.10.6",
     "@modelcontextprotocol/sdk": "^1.30.0"
   },