@canonmsg/core 0.19.1 → 0.19.2

package/dist/agent-session.js

@@ -1,3 +1,4 @@
+import { redactAgentSessionSnapshotForConversation } from './runtime-presentation.js';
 function listDescriptorControls(runtime) {
     const descriptor = runtime?.runtimeDescriptor;
     return [
@@ -104,7 +105,7 @@ export function buildAgentSessionSnapshot(input) {
     const executionMode = input.sessionState?.executionMode
         ?? input.sessionConfig?.executionMode;
     const controlState = buildControlState(input);
-    return {
+    const snapshot = {
         conversationId: input.conversationId,
         agentId: input.agentId,
         clientType: input.sessionConfig?.clientType
@@ -146,4 +147,5 @@ export function buildAgentSessionSnapshot(input) {
             ?? input.sessionConfig?.updatedAt
             ?? input.runtime?.updatedAt,
     };
+    return redactAgentSessionSnapshotForConversation(input.runtime?.runtimeDescriptor, snapshot);
 }

package/dist/browser.d.ts

@@ -1,7 +1,8 @@
 export { AGENT_CAPABILITIES, CLAUDE_PERMISSION_MODE_OPTIONS, } from './types.js';
 export { resolveCanonBaseUrl } from './base-url.js';
 export { DEFAULT_BASE_URL, DEFAULT_STREAM_URL, DEFAULT_RTDB_URL, FIREBASE_WEB_API_KEY } from './constants.js';
-export type { AddMemberResult, AgentCapabilities, AgentClientType, AgentSessionSnapshot, AgentRuntime, CanonControlAvailability, CanonControlDescriptor, CanonControlLiveBehavior, CanonControlSelectionPolicy, CanonControlValue, CanonContact, CanonContactRequest, CanonContactRequestStatus, CanonResolveAdmissionResult, ContactAddedPayload, ContactApprovedPayload, ContactRemovedPayload, ContactRequestPayload, ContactSource, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, CanonStreamEvent, CreateContactRequestResult, MediaAttachment, MediaAttachmentKind, ModelOption, PermissionModeOption, CanonRuntimeDescriptor, CanonRuntimeActionAvailability, CanonRuntimeActionCategory, CanonRuntimeActionDescriptor, CanonRuntimeActionDispatch, CanonRuntimeActionPlacement, CanonRuntimeCommandArgumentChoice, CanonRuntimeCommandArgumentDescriptor, CanonRuntimeCommandArgumentKind, CanonRuntimeCommandDescriptor, CanonRuntimeDetailTier, CanonRuntimeExecutionMetadata, CanonRuntimeProvenance, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeFact, CanonRuntimeFactGroup, CanonRuntimeInventory, CanonRuntimeInventoryEntry, CanonRuntimePrimitiveId, CanonRuntimeStreamingMode, CanonRuntimeStatusItem, CanonRuntimeSurfaceMode, CanonWorkspaceRootMetadata, RuntimeUpdatedPayload, RuntimeInfoPayload, RuntimeControlError, RuntimeControlState, RuntimeControlValueSource, ResolvedAdmission, SessionConfig, TurnUpdatedPayload, WorkspaceOption, WorkspaceOptionSource, } from './types.js';
+export type { AddMemberResult, AgentCapabilities, AgentClientType, AgentSessionSnapshot, AgentRuntime, CanonControlAvailability, CanonControlDescriptor, CanonControlLiveBehavior, CanonControlSelectionPolicy, CanonControlValue, CanonContact, CanonContactRequest, CanonContactRequestStatus, CanonResolveAdmissionResult, ContactAddedPayload, ContactApprovedPayload, ContactRemovedPayload, ContactRequestPayload, ContactSource, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, CanonStreamEvent, CreateContactRequestResult, MediaAttachment, MediaAttachmentKind, ModelOption, PermissionModeOption, CanonRuntimeDescriptor, CanonRuntimeActionAvailability, CanonRuntimeActionCategory, CanonRuntimeActionDescriptor, CanonRuntimeActionDispatch, CanonRuntimeActionPlacement, CanonRuntimeCommandArgumentChoice, CanonRuntimeCommandArgumentDescriptor, CanonRuntimeCommandArgumentKind, CanonRuntimeCommandDescriptor, CanonRuntimeDetailTier, CanonRuntimeExecutionMetadata, CanonRuntimePresentationField, CanonRuntimePresentationHint, CanonRuntimePresentationPolicy, CanonRuntimePresentationPreset, CanonRuntimeVisibility, CanonRuntimeProvenance, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeFact, CanonRuntimeFactGroup, CanonRuntimeInventory, CanonRuntimeInventoryEntry, CanonRuntimePrimitiveId, CanonRuntimeStreamingMode, CanonRuntimeStatusItem, CanonRuntimeSurfaceMode, CanonWorkspaceRootMetadata, RuntimeUpdatedPayload, RuntimeInfoPayload, RuntimeControlError, RuntimeControlState, RuntimeControlValueSource, ResolvedAdmission, SessionConfig, TurnUpdatedPayload, WorkspaceOption, WorkspaceOptionSource, } from './types.js';
+export { DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, RUNTIME_PRESENTATION_FIELDS, buildRuntimePresentationPolicy, getRuntimePresentationHint, isRuntimePresentationField, isRuntimePresentationFieldHidden, redactAgentSessionSnapshotForConversation, redactExecutionMetadataForConversation, redactRuntimeDescriptorForConversation, redactRuntimeInfoForConversation, } from './runtime-presentation.js';
 export { buildRuntimeProvenance, resolveRuntimeProvenance, } from './provenance.js';
 export { EXECUTION_ENVIRONMENT_MODES, isExecutionEnvironmentMode, } from './execution-environment-mode.js';
 export type { ExecutionEnvironmentMode } from './execution-environment-mode.js';
@@ -16,5 +17,5 @@ export type { DeliveryIntent, InboundDisposition, RuntimeCapabilities, TriggerDe
 export { buildApprovalReply, buildApprovalRequest, buildApprovalOutcome, generateApprovalId, parseTextApprovalReply, redactSecrets, } from './approval-format.js';
 export type { ApprovalRequestCategory, ApprovalRequestDetail, ApprovalRequestMetadata, ApprovalNativeRequestMetadata, ApprovalRisk, ApprovalReplyMetadata, ApprovalOutcomeMetadata, SessionRule, ApprovalResult, ApprovalConfig, } from './approval-types.js';
 export { DEFAULT_APPROVAL_CONFIG, parseApprovalRequestMetadata, parseApprovalReplyMetadata, parseSessionRule, } from './approval-types.js';
-export { buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, } from './runtime-cards.js';
-export type { ClaudeQuestionMetadata, ClaudeQuestionReplyMetadata, PlanApprovalMetadata, PlanApprovalReplyMetadata, RuntimeQuestionDefinition, RuntimeQuestionOption, } from './runtime-cards.js';
+export { buildRuntimeInputOutcome, buildRuntimeInputReply, buildRuntimeInputRequest, buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, parseRuntimeInputOutcomeMetadata, parseRuntimeInputReplyMetadata, parseRuntimeInputRequestMetadata, } from './runtime-cards.js';
+export type { ClaudeQuestionMetadata, ClaudeQuestionReplyMetadata, PlanApprovalMetadata, PlanApprovalReplyMetadata, RuntimeInputChoice, RuntimeInputKind, RuntimeInputNativeMetadata, RuntimeInputOutcomeMetadata, RuntimeInputReplyMetadata, RuntimeInputReplyStatus, RuntimeInputRequestMetadata, RuntimeInputResolutionStatus, RuntimeQuestionDefinition, RuntimeQuestionOption, } from './runtime-cards.js';

package/dist/browser.js

@@ -1,6 +1,7 @@
 export { AGENT_CAPABILITIES, CLAUDE_PERMISSION_MODE_OPTIONS, } from './types.js';
 export { resolveCanonBaseUrl } from './base-url.js';
 export { DEFAULT_BASE_URL, DEFAULT_STREAM_URL, DEFAULT_RTDB_URL, FIREBASE_WEB_API_KEY } from './constants.js';
+export { DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, RUNTIME_PRESENTATION_FIELDS, buildRuntimePresentationPolicy, getRuntimePresentationHint, isRuntimePresentationField, isRuntimePresentationFieldHidden, redactAgentSessionSnapshotForConversation, redactExecutionMetadataForConversation, redactRuntimeDescriptorForConversation, redactRuntimeInfoForConversation, } from './runtime-presentation.js';
 export { buildRuntimeProvenance, resolveRuntimeProvenance, } from './provenance.js';
 export { EXECUTION_ENVIRONMENT_MODES, isExecutionEnvironmentMode, } from './execution-environment-mode.js';
 export { buildSelfContextPromptLines, normalizeSelfContexts, } from './self-context.js';
@@ -10,4 +11,4 @@ export { buildParticipationHistorySnapshot, buildParticipationHistorySnapshots,
 export { DEFAULT_RUNTIME_CAPABILITIES, FINAL_MESSAGE_HANDOFF_MS, isTurnOpen, normalizeTurnMetadata, normalizeTurnState, resolveTurnMessageSemantics, shouldPromoteConversationMessage, shouldTriggerAgentTurn, } from './turn-protocol.js';
 export { buildApprovalReply, buildApprovalRequest, buildApprovalOutcome, generateApprovalId, parseTextApprovalReply, redactSecrets, } from './approval-format.js';
 export { DEFAULT_APPROVAL_CONFIG, parseApprovalRequestMetadata, parseApprovalReplyMetadata, parseSessionRule, } from './approval-types.js';
-export { buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, } from './runtime-cards.js';
+export { buildRuntimeInputOutcome, buildRuntimeInputReply, buildRuntimeInputRequest, buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, parseRuntimeInputOutcomeMetadata, parseRuntimeInputReplyMetadata, parseRuntimeInputRequestMetadata, } from './runtime-cards.js';

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { AGENT_CAPABILITIES, CLAUDE_PERMISSION_MODE_OPTIONS, } from './types.js';
-export type { AddMemberResult, AgentCapabilities, AgentClientType, CanonControlAvailability, CanonControlDescriptor, CanonControlLiveBehavior, CanonControlSelectionPolicy, CanonControlValue, CanonContact, CanonContactRequest, CanonContactRequestStatus, CanonGroupContext, CanonGroupContextMode, CanonKnownRecentParticipant, CanonMembershipChange, CanonResolveAdmissionResult, ConversationUpdatedPayload, ContactAddedPayload, ContactApprovedPayload, ContactCardPayload, ContactRemovedPayload, ContactRequestPayload, ContactSource, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, CanonMessage, CanonRuntimeProvenance, CanonConversation, CanonMessagesPage, CreateContactRequestResult, AgentContext, CanonStreamEvent, AgentSessionSnapshot, ResolvedAdmission, MediaAttachment, MediaAttachmentKind, MessageCreatedPayload, TypingPayload, PresencePayload, RuntimeUpdatedPayload, TurnUpdatedPayload, SendMessageOptions, CreateConversationOptions, RegistrationInput, RegistrationResult, RegistrationStatus, StreamingStatus, SetStreamingOptions, SessionControl, SessionState, SessionConfig, AgentRuntime, CanonRuntimeDescriptor, CanonRuntimeActionAvailability, CanonRuntimeActionCategory, CanonRuntimeActionDescriptor, CanonRuntimeActionDispatch, CanonRuntimeActionPlacement, CanonRuntimeCommandArgumentChoice, CanonRuntimeCommandArgumentDescriptor, CanonRuntimeCommandArgumentKind, CanonRuntimeCommandDescriptor, CanonRuntimeDetailTier, CanonRuntimeExecutionMetadata, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeFact, CanonRuntimeFactGroup, CanonRuntimeInventory, CanonRuntimeInventoryEntry, CanonRuntimePrimitiveId, CanonRuntimeStreamingMode, CanonRuntimeStatusItem, CanonRuntimeSurfaceMode, CanonWorkspaceRootMetadata, ModelOption, PermissionModeOption, RuntimeInfoPayload, RuntimeControlError, RuntimeControlState, RuntimeControlValueSource, WorkspaceOption, WorkspaceOptionSource, } from './types.js';
+export type { AddMemberResult, AgentCapabilities, AgentClientType, CanonControlAvailability, CanonControlDescriptor, CanonControlLiveBehavior, CanonControlSelectionPolicy, CanonControlValue, CanonContact, CanonContactRequest, CanonContactRequestStatus, CanonGroupContext, CanonGroupContextMode, CanonKnownRecentParticipant, CanonMembershipChange, CanonResolveAdmissionResult, ConversationUpdatedPayload, ContactAddedPayload, ContactApprovedPayload, ContactCardPayload, ContactRemovedPayload, ContactRequestPayload, ContactSource, ResolvedAdmissionState, ResolvedAdmissionTargetSummary, ResolvedTargetAdmissionPayload, CanonMessage, CanonRuntimeProvenance, CanonConversation, CanonMessagesPage, CreateContactRequestResult, AgentContext, CanonStreamEvent, AgentSessionSnapshot, ResolvedAdmission, MediaAttachment, MediaAttachmentKind, MessageCreatedPayload, TypingPayload, PresencePayload, RuntimeUpdatedPayload, TurnUpdatedPayload, SendMessageOptions, CreateConversationOptions, RegistrationInput, RegistrationResult, RegistrationStatus, StreamingStatus, SetStreamingOptions, SessionControl, SessionState, SessionConfig, AgentRuntime, CanonRuntimeDescriptor, CanonRuntimeActionAvailability, CanonRuntimeActionCategory, CanonRuntimeActionDescriptor, CanonRuntimeActionDispatch, CanonRuntimeActionPlacement, CanonRuntimeCommandArgumentChoice, CanonRuntimeCommandArgumentDescriptor, CanonRuntimeCommandArgumentKind, CanonRuntimeCommandDescriptor, CanonRuntimeDetailTier, CanonRuntimeExecutionMetadata, CanonRuntimePresentationField, CanonRuntimePresentationHint, CanonRuntimePresentationPolicy, CanonRuntimePresentationPreset, CanonRuntimeVisibility, CanonRuntimeActivityItem, CanonRuntimeActivityKind, CanonRuntimeActivityStatus, CanonRuntimeFact, CanonRuntimeFactGroup, CanonRuntimeInventory, CanonRuntimeInventoryEntry, CanonRuntimePrimitiveId, CanonRuntimeStreamingMode, CanonRuntimeStatusItem, CanonRuntimeSurfaceMode, CanonWorkspaceRootMetadata, ModelOption, PermissionModeOption, RuntimeInfoPayload, RuntimeControlError, RuntimeControlState, RuntimeControlValueSource, WorkspaceOption, WorkspaceOptionSource, } from './types.js';
+export { DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, RUNTIME_PRESENTATION_FIELDS, buildRuntimePresentationPolicy, getRuntimePresentationHint, isRuntimePresentationField, isRuntimePresentationFieldHidden, redactAgentRuntimeForConversation, redactAgentSessionSnapshotForConversation, redactExecutionMetadataForConversation, redactRuntimeActivityItemForConversation, redactRuntimeDescriptorForConversation, redactRuntimeInfoForConversation, redactSessionStateForConversation, } from './runtime-presentation.js';
 export { buildRuntimeProvenance, resolveRuntimeProvenance, } from './provenance.js';
 export type { CanonSelfContext, CanonSelfContextType, SelfContextPromptRenderOptions, SendContextualMessageOptions, SendContextualMessageResult, SendContextualSelfContextInput, } from './self-context.js';
 export { buildSelfContextPromptLines, normalizeSelfContexts, resolveMessageActiveSelfContextId, selectActiveSelfContexts, } from './self-context.js';
@@ -19,8 +20,8 @@ export { ApprovalManager } from './approval-manager.js';
 export { generateApprovalId, buildApprovalRequest, buildApprovalReply, buildApprovalOutcome, parseTextApprovalReply, redactSecrets, } from './approval-format.js';
 export { DEFAULT_APPROVAL_CONFIG, parseApprovalRequestMetadata, parseApprovalReplyMetadata, parseSessionRule, } from './approval-types.js';
 export type { ApprovalRequestCategory, ApprovalRequestDetail, ApprovalRequestMetadata, ApprovalNativeRequestMetadata, ApprovalRisk, ApprovalReplyMetadata, ApprovalOutcomeMetadata, SessionRule, ApprovalResult, ApprovalConfig, } from './approval-types.js';
-export { buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, } from './runtime-cards.js';
-export type { ClaudeQuestionMetadata, ClaudeQuestionReplyMetadata, PlanApprovalMetadata, PlanApprovalReplyMetadata, RuntimeQuestionDefinition, RuntimeQuestionOption, } from './runtime-cards.js';
+export { buildRuntimeInputOutcome, buildRuntimeInputReply, buildRuntimeInputRequest, buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, parseRuntimeInputOutcomeMetadata, parseRuntimeInputReplyMetadata, parseRuntimeInputRequestMetadata, } from './runtime-cards.js';
+export type { ClaudeQuestionMetadata, ClaudeQuestionReplyMetadata, PlanApprovalMetadata, PlanApprovalReplyMetadata, RuntimeInputChoice, RuntimeInputKind, RuntimeInputNativeMetadata, RuntimeInputOutcomeMetadata, RuntimeInputReplyMetadata, RuntimeInputReplyStatus, RuntimeInputRequestMetadata, RuntimeInputResolutionStatus, RuntimeQuestionDefinition, RuntimeQuestionOption, } from './runtime-cards.js';
 export { createStreamingHelper } from './streaming.js';
 export type { RTDBHandle, RTDBRef, ServerTimestamp, StreamingHelperOptions, StreamingNode } from './streaming.js';
 export { clearPendingRegistration, getOrCreatePendingRegistration, loadPendingRegistrations, loadProfiles, savePendingRegistrations, saveProfiles, updatePendingRegistration, upsertAgentProfile, isProfileLocked, acquireLock, releaseLock, isProcessAlive, CANON_DIR, AGENTS_PATH, LOCKS_DIR, } from './agent-profiles.js';

package/dist/index.js

@@ -1,5 +1,6 @@
 // Types
 export { AGENT_CAPABILITIES, CLAUDE_PERMISSION_MODE_OPTIONS, } from './types.js';
+export { DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION, RUNTIME_PRESENTATION_FIELDS, buildRuntimePresentationPolicy, getRuntimePresentationHint, isRuntimePresentationField, isRuntimePresentationFieldHidden, redactAgentRuntimeForConversation, redactAgentSessionSnapshotForConversation, redactExecutionMetadataForConversation, redactRuntimeActivityItemForConversation, redactRuntimeDescriptorForConversation, redactRuntimeInfoForConversation, redactSessionStateForConversation, } from './runtime-presentation.js';
 export { buildRuntimeProvenance, resolveRuntimeProvenance, } from './provenance.js';
 export { buildSelfContextPromptLines, normalizeSelfContexts, resolveMessageActiveSelfContextId, selectActiveSelfContexts, } from './self-context.js';
 export { buildConfiguredWorkspaceOptionsWithRoots, buildPublicWorkspaceRoots, buildWorkspaceRootId, discoverWorkspaceProjects, } from './workspace-discovery.js';
@@ -18,7 +19,7 @@ export { ackRegistrationApproval, registerAndWaitForApproval, submitRegistration
 export { ApprovalManager } from './approval-manager.js';
 export { generateApprovalId, buildApprovalRequest, buildApprovalReply, buildApprovalOutcome, parseTextApprovalReply, redactSecrets, } from './approval-format.js';
 export { DEFAULT_APPROVAL_CONFIG, parseApprovalRequestMetadata, parseApprovalReplyMetadata, parseSessionRule, } from './approval-types.js';
-export { buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, } from './runtime-cards.js';
+export { buildRuntimeInputOutcome, buildRuntimeInputReply, buildRuntimeInputRequest, buildPlanApprovalReply, buildPlanApprovalRequest, buildQuestionReply, buildQuestionRequest, parseRuntimeInputOutcomeMetadata, parseRuntimeInputReplyMetadata, parseRuntimeInputRequestMetadata, } from './runtime-cards.js';
 // Streaming (RTDB helpers)
 export { createStreamingHelper } from './streaming.js';
 // Agent profiles (loading, locking, resolution)

package/dist/local-runtime-catalog.d.ts

@@ -10,6 +10,7 @@ export interface LocalRuntimeSessionState {
     codexPolicyFingerprint?: string;
     threadId?: string;
     claudeSessionId?: string;
+    hermesSessionId?: string;
     lastInboundMessageId?: string;
     updatedAt: string;
 }

package/dist/runtime-cards.d.ts

@@ -35,6 +35,49 @@ export interface PlanApprovalReplyMetadata {
     decision: 'approve' | 'revise';
     feedback?: string;
 }
+export type RuntimeInputKind = 'clarify' | 'sudo' | 'secret';
+export type RuntimeInputReplyStatus = 'submitted' | 'cancelled';
+export type RuntimeInputResolutionStatus = RuntimeInputReplyStatus | 'timeout';
+export interface RuntimeInputChoice {
+    label: string;
+    value?: string;
+    description?: string;
+}
+export interface RuntimeInputNativeMetadata {
+    runtime?: string;
+    method?: string;
+    requestId?: string;
+    sessionKey?: string;
+    turnId?: string;
+    handles?: Record<string, string>;
+}
+export interface RuntimeInputRequestMetadata {
+    type: 'runtime_input_request';
+    inputId: string;
+    kind: RuntimeInputKind;
+    prompt: string;
+    title?: string;
+    choices?: RuntimeInputChoice[];
+    secretName?: string;
+    native?: RuntimeInputNativeMetadata;
+    expiresAt: string;
+    sensitive?: boolean;
+}
+export interface RuntimeInputReplyMetadata {
+    type: 'runtime_input_reply';
+    inputId: string;
+    kind?: RuntimeInputKind;
+    status: RuntimeInputReplyStatus;
+    answerSummary?: string;
+    sensitive?: boolean;
+}
+export interface RuntimeInputOutcomeMetadata {
+    type: 'runtime_input_outcome';
+    inputId: string;
+    kind?: RuntimeInputKind;
+    status: RuntimeInputResolutionStatus;
+    reason?: 'submitted' | 'cancelled' | 'timeout' | 'expired' | 'interrupted';
+}
 export declare function buildQuestionRequest(questionId: string, questions: RuntimeQuestionDefinition[]): {
     text: string;
     metadata: ClaudeQuestionMetadata;
@@ -51,3 +94,25 @@ export declare function buildPlanApprovalReply(planId: string, decision: 'approv
     text: string;
     metadata: PlanApprovalReplyMetadata;
 };
+export declare function buildRuntimeInputRequest(inputId: string, input: Omit<RuntimeInputRequestMetadata, 'type' | 'inputId'>): {
+    text: string;
+    metadata: RuntimeInputRequestMetadata;
+};
+export declare function buildRuntimeInputReply(inputId: string, status: RuntimeInputReplyStatus, details?: {
+    kind?: RuntimeInputKind;
+    answerSummary?: string;
+    sensitive?: boolean;
+}): {
+    text: string;
+    metadata: RuntimeInputReplyMetadata;
+};
+export declare function buildRuntimeInputOutcome(inputId: string, status: RuntimeInputResolutionStatus, details?: {
+    kind?: RuntimeInputKind;
+    reason?: RuntimeInputOutcomeMetadata['reason'];
+}): {
+    text: string;
+    metadata: RuntimeInputOutcomeMetadata;
+};
+export declare function parseRuntimeInputRequestMetadata(value: unknown): RuntimeInputRequestMetadata | null;
+export declare function parseRuntimeInputReplyMetadata(value: unknown): RuntimeInputReplyMetadata | null;
+export declare function parseRuntimeInputOutcomeMetadata(value: unknown): RuntimeInputOutcomeMetadata | null;

package/dist/runtime-cards.js

@@ -1,3 +1,73 @@
+function isRecord(value) {
+    return Boolean(value && typeof value === 'object' && !Array.isArray(value));
+}
+function normalizeString(value, maxLength) {
+    if (typeof value !== 'string')
+        return null;
+    const trimmed = value.trim();
+    if (!trimmed || trimmed.length > maxLength)
+        return null;
+    return trimmed;
+}
+function normalizeRuntimeInputKind(value) {
+    return value === 'clarify' || value === 'sudo' || value === 'secret' ? value : null;
+}
+function normalizeRuntimeInputReplyStatus(value) {
+    return value === 'submitted' || value === 'cancelled' ? value : null;
+}
+function normalizeRuntimeInputResolutionStatus(value) {
+    return value === 'submitted' || value === 'cancelled' || value === 'timeout' ? value : null;
+}
+function normalizeRuntimeInputChoices(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const choices = value.slice(0, 12).flatMap((entry) => {
+        if (!isRecord(entry))
+            return [];
+        const label = normalizeString(entry.label, 120);
+        if (!label)
+            return [];
+        const choice = { label };
+        const choiceValue = normalizeString(entry.value, 200);
+        const description = normalizeString(entry.description, 300);
+        if (choiceValue)
+            choice.value = choiceValue;
+        if (description)
+            choice.description = description;
+        return [choice];
+    });
+    return choices.length > 0 ? choices : undefined;
+}
+function normalizeRuntimeInputNative(value) {
+    if (!isRecord(value))
+        return undefined;
+    const native = {};
+    for (const key of ['runtime', 'method', 'requestId', 'sessionKey', 'turnId']) {
+        const normalized = normalizeString(value[key], 256);
+        if (normalized)
+            native[key] = normalized;
+    }
+    if (isRecord(value.handles)) {
+        const handles = {};
+        for (const [key, raw] of Object.entries(value.handles).slice(0, 16)) {
+            if (!/^[a-zA-Z0-9_.:-]{1,80}$/.test(key))
+                continue;
+            const normalized = normalizeString(raw, 256);
+            if (normalized)
+                handles[key] = normalized;
+        }
+        if (Object.keys(handles).length > 0)
+            native.handles = handles;
+    }
+    return Object.keys(native).length > 0 ? native : undefined;
+}
+function assertNoSensitiveRuntimeInputPayload(value) {
+    return !('value' in value)
+        && !('answer' in value)
+        && !('password' in value)
+        && !('secret' in value)
+        && !('rawValue' in value);
+}
 export function buildQuestionRequest(questionId, questions) {
     const text = questions.length === 1
         ? questions[0]?.question || 'Question'
@@ -43,3 +113,131 @@ export function buildPlanApprovalReply(planId, decision, feedback) {
         },
     };
 }
+export function buildRuntimeInputRequest(inputId, input) {
+    const title = input.title?.trim() || (input.kind === 'sudo'
+        ? 'Sudo password required'
+        : input.kind === 'secret'
+            ? 'Secret required'
+            : 'Input required');
+    return {
+        text: title,
+        metadata: {
+            type: 'runtime_input_request',
+            inputId,
+            kind: input.kind,
+            prompt: input.prompt.slice(0, 1000),
+            title: title.slice(0, 120),
+            ...(input.choices?.length ? { choices: input.choices.slice(0, 12) } : {}),
+            ...(input.secretName ? { secretName: input.secretName.slice(0, 120) } : {}),
+            ...(input.native ? { native: input.native } : {}),
+            expiresAt: input.expiresAt,
+            ...(input.sensitive ? { sensitive: true } : {}),
+        },
+    };
+}
+export function buildRuntimeInputReply(inputId, status, details) {
+    const answerSummary = details?.sensitive ? undefined : details?.answerSummary?.trim().slice(0, 500);
+    return {
+        text: status === 'submitted' ? 'Submitted' : 'Cancelled',
+        metadata: {
+            type: 'runtime_input_reply',
+            inputId,
+            ...(details?.kind ? { kind: details.kind } : {}),
+            status,
+            ...(answerSummary ? { answerSummary } : {}),
+            ...(details?.sensitive ? { sensitive: true } : {}),
+        },
+    };
+}
+export function buildRuntimeInputOutcome(inputId, status, details) {
+    return {
+        text: status === 'timeout'
+            ? 'Input request expired'
+            : status === 'cancelled'
+                ? 'Input request cancelled'
+                : 'Input request resolved',
+        metadata: {
+            type: 'runtime_input_outcome',
+            inputId,
+            ...(details?.kind ? { kind: details.kind } : {}),
+            status,
+            ...(details?.reason ? { reason: details.reason } : {}),
+        },
+    };
+}
+export function parseRuntimeInputRequestMetadata(value) {
+    if (!isRecord(value) || value.type !== 'runtime_input_request')
+        return null;
+    if (!assertNoSensitiveRuntimeInputPayload(value))
+        return null;
+    const inputId = normalizeString(value.inputId, 128);
+    const kind = normalizeRuntimeInputKind(value.kind);
+    const prompt = normalizeString(value.prompt, 1000);
+    const expiresAt = normalizeString(value.expiresAt, 128);
+    if (!inputId || !kind || !prompt || !expiresAt)
+        return null;
+    const expiresMs = Date.parse(expiresAt);
+    if (!Number.isFinite(expiresMs))
+        return null;
+    const title = normalizeString(value.title, 120) ?? undefined;
+    const choices = normalizeRuntimeInputChoices(value.choices);
+    const secretName = normalizeString(value.secretName, 120) ?? undefined;
+    const native = normalizeRuntimeInputNative(value.native);
+    return {
+        type: 'runtime_input_request',
+        inputId,
+        kind,
+        prompt,
+        ...(title ? { title } : {}),
+        ...(choices ? { choices } : {}),
+        ...(secretName ? { secretName } : {}),
+        ...(native ? { native } : {}),
+        expiresAt: new Date(expiresMs).toISOString(),
+        ...(value.sensitive === true ? { sensitive: true } : {}),
+    };
+}
+export function parseRuntimeInputReplyMetadata(value) {
+    if (!isRecord(value) || value.type !== 'runtime_input_reply')
+        return null;
+    if (!assertNoSensitiveRuntimeInputPayload(value))
+        return null;
+    const inputId = normalizeString(value.inputId, 128);
+    const status = normalizeRuntimeInputReplyStatus(value.status);
+    if (!inputId || !status)
+        return null;
+    const kind = normalizeRuntimeInputKind(value.kind) ?? undefined;
+    const answerSummary = value.sensitive === true ? undefined : normalizeString(value.answerSummary, 500) ?? undefined;
+    return {
+        type: 'runtime_input_reply',
+        inputId,
+        ...(kind ? { kind } : {}),
+        status,
+        ...(answerSummary ? { answerSummary } : {}),
+        ...(value.sensitive === true ? { sensitive: true } : {}),
+    };
+}
+export function parseRuntimeInputOutcomeMetadata(value) {
+    if (!isRecord(value) || value.type !== 'runtime_input_outcome')
+        return null;
+    if (!assertNoSensitiveRuntimeInputPayload(value))
+        return null;
+    const inputId = normalizeString(value.inputId, 128);
+    const status = normalizeRuntimeInputResolutionStatus(value.status);
+    if (!inputId || !status)
+        return null;
+    const kind = normalizeRuntimeInputKind(value.kind) ?? undefined;
+    const reason = value.reason === 'submitted'
+        || value.reason === 'cancelled'
+        || value.reason === 'timeout'
+        || value.reason === 'expired'
+        || value.reason === 'interrupted'
+        ? value.reason
+        : undefined;
+    return {
+        type: 'runtime_input_outcome',
+        inputId,
+        ...(kind ? { kind } : {}),
+        status,
+        ...(reason ? { reason } : {}),
+    };
+}

package/dist/runtime-descriptor.d.ts

@@ -1,5 +1,6 @@
 import type { ExecutionEnvironmentMode } from './execution-environment-mode.js';
 import { type AgentClientType, type CanonControlDescriptor, type CanonRuntimeActionDescriptor, type CanonRuntimeCommandDescriptor, type CanonRuntimeDescriptor, type CanonRuntimeStreamingMode, type CanonWorkspaceRootMetadata, type ModelOption, type PermissionModeOption, type WorkspaceOption } from './types.js';
+import type { CanonRuntimePresentationPolicy } from './types.js';
 import type { HostAdmissionActionCapabilities } from './turn-protocol.js';
 export declare const CLAUDE_EFFORT_OPTIONS: readonly [{
     readonly value: "low";
@@ -51,4 +52,5 @@ export declare function buildFirstPartyCodingRuntimeDescriptor(input: {
     commands?: ReadonlyArray<CanonRuntimeCommandDescriptor>;
     streamingTextMode: CanonRuntimeStreamingMode;
     admissionActions?: HostAdmissionActionCapabilities;
+    presentation?: CanonRuntimePresentationPolicy;
 }): CanonRuntimeDescriptor;

package/dist/runtime-descriptor.js

@@ -1,4 +1,5 @@
 import { CLAUDE_PERMISSION_MODE_OPTIONS, } from './types.js';
+import { DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION } from './runtime-presentation.js';
 export const CLAUDE_EFFORT_OPTIONS = [
     { value: 'low', label: 'Low' },
     { value: 'medium', label: 'Medium' },
@@ -155,6 +156,7 @@ export function buildFirstPartyCodingRuntimeDescriptor(input) {
         supportsInterrupt: true,
         supportsInputInterrupt: true,
         streamingTextMode: input.streamingTextMode,
+        presentation: input.presentation ?? DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION,
         admissionActions: input.admissionActions,
     };
 }

package/dist/runtime-presentation.d.ts

@@ -0,0 +1,38 @@
+import type { AgentRuntime, AgentSessionSnapshot, CanonRuntimeActivityItem, CanonRuntimeDescriptor, CanonRuntimeExecutionMetadata, CanonRuntimePresentationField, CanonRuntimePresentationPolicy, RuntimeInfoPayload } from './types.js';
+export declare const RUNTIME_PRESENTATION_FIELDS: readonly ["model", "permissionMode", "effort", "workspace", "executionMode", "contextUsage", "cwd", "branch", "worktreePath", "workspaceRoot", "workspaceRelativePath", "fallbackReason"];
+export declare const DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION: CanonRuntimePresentationPolicy;
+export declare function isRuntimePresentationField(value: string): value is CanonRuntimePresentationField;
+export declare function buildRuntimePresentationPolicy(input?: {
+    preset?: CanonRuntimePresentationPolicy['preset'];
+    show?: ReadonlyArray<string>;
+    hide?: ReadonlyArray<string>;
+    base?: CanonRuntimePresentationPolicy;
+}): CanonRuntimePresentationPolicy;
+export declare function getRuntimePresentationHint(descriptor: CanonRuntimeDescriptor | null | undefined, field: CanonRuntimePresentationField): import("./types.js").CanonRuntimePresentationHint | null;
+export declare function isRuntimePresentationFieldHidden(descriptor: CanonRuntimeDescriptor | null | undefined, field: CanonRuntimePresentationField): boolean;
+export declare function redactRuntimeDescriptorForConversation(descriptor: CanonRuntimeDescriptor): CanonRuntimeDescriptor;
+export declare function redactRuntimeActivityItemForConversation(item: CanonRuntimeActivityItem): CanonRuntimeActivityItem | null;
+export declare function redactExecutionMetadataForConversation(descriptor: CanonRuntimeDescriptor | null | undefined, execution: CanonRuntimeExecutionMetadata | null | undefined): CanonRuntimeExecutionMetadata | null;
+export declare function redactRuntimeInfoForConversation<T extends Partial<Omit<RuntimeInfoPayload, 'updatedAt'>> | RuntimeInfoPayload>(payload: T, options?: {
+    descriptor?: CanonRuntimeDescriptor | null;
+}): T;
+export declare function redactAgentRuntimeForConversation(runtime: AgentRuntime): AgentRuntime;
+type SessionStatePresentationLike = {
+    model?: unknown;
+    permissionMode?: unknown;
+    effort?: unknown;
+    cwd?: unknown;
+    executionMode?: unknown;
+    executionBranch?: unknown;
+    worktreePath?: unknown;
+    executionFallbackReason?: unknown;
+    contextUsage?: unknown;
+    availableModels?: unknown;
+    runtimeControlValues?: Record<string, unknown>;
+    controlState?: Record<string, unknown>;
+};
+export declare function redactSessionStateForConversation<T extends SessionStatePresentationLike>(descriptor: CanonRuntimeDescriptor | null | undefined, state: T): T;
+export declare function redactAgentSessionSnapshotForConversation(descriptor: CanonRuntimeDescriptor | null | undefined, snapshot: Partial<AgentSessionSnapshot> & Record<string, unknown>, options?: {
+    patch?: boolean;
+}): Partial<AgentSessionSnapshot> & Record<string, unknown>;
+export {};

package/dist/runtime-presentation.js

@@ -0,0 +1,441 @@
+const MINIMAL_HIDDEN_FIELDS = new Set([
+    'model',
+    'permissionMode',
+    'effort',
+    'workspace',
+    'contextUsage',
+    'cwd',
+    'branch',
+    'worktreePath',
+    'workspaceRoot',
+    'workspaceRelativePath',
+    'fallbackReason',
+]);
+export const RUNTIME_PRESENTATION_FIELDS = [
+    'model',
+    'permissionMode',
+    'effort',
+    'workspace',
+    'executionMode',
+    'contextUsage',
+    'cwd',
+    'branch',
+    'worktreePath',
+    'workspaceRoot',
+    'workspaceRelativePath',
+    'fallbackReason',
+];
+export const DEFAULT_FIRST_PARTY_RUNTIME_PRESENTATION = {
+    preset: 'normal',
+    fields: {
+        cwd: { visibility: 'hidden' },
+        worktreePath: { visibility: 'hidden' },
+        workspaceRoot: { visibility: 'hidden' },
+    },
+};
+export function isRuntimePresentationField(value) {
+    return RUNTIME_PRESENTATION_FIELDS.includes(value);
+}
+export function buildRuntimePresentationPolicy(input = {}) {
+    const preset = input.preset ?? input.base?.preset ?? 'normal';
+    const fields = {
+        ...(preset === 'full' ? {} : input.base?.fields ?? {}),
+    };
+    for (const field of input.show ?? []) {
+        if (!isRuntimePresentationField(field))
+            continue;
+        fields[field] = {
+            ...(fields[field] ?? {}),
+            visibility: 'conversation',
+        };
+    }
+    for (const field of input.hide ?? []) {
+        if (!isRuntimePresentationField(field))
+            continue;
+        fields[field] = {
+            ...(fields[field] ?? {}),
+            visibility: 'hidden',
+        };
+    }
+    return {
+        preset,
+        fields,
+    };
+}
+function hasOwn(value, key) {
+    return Object.prototype.hasOwnProperty.call(value, key);
+}
+function cloneDefined(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, entryValue]) => entryValue !== undefined));
+}
+export function getRuntimePresentationHint(descriptor, field) {
+    return descriptor?.presentation?.fields?.[field] ?? null;
+}
+export function isRuntimePresentationFieldHidden(descriptor, field) {
+    const policy = descriptor?.presentation;
+    const hint = policy?.fields?.[field];
+    if (hint?.visibility === 'conversation')
+        return false;
+    if (hint?.visibility === 'hidden')
+        return true;
+    return policy?.preset === 'minimal' && MINIMAL_HIDDEN_FIELDS.has(field);
+}
+function isRuntimeItemHidden(item) {
+    return item?.visibility === 'hidden';
+}
+function isRequiredSetupControl(control) {
+    return control.selectionPolicy === 'required_explicit'
+        && (control.availability === 'setup' || control.availability === 'setup_and_live');
+}
+function shouldHideControlValue(descriptor, control) {
+    if (isRuntimeItemHidden(control) || control.sensitive)
+        return true;
+    const field = control.id;
+    const hidden = isRuntimePresentationFieldHidden(descriptor, field);
+    return hidden && !isRequiredSetupControl(control);
+}
+function hiddenControlValueIds(descriptor) {
+    const controls = [
+        ...(descriptor?.coreControls ?? []),
+        ...(descriptor?.runtimeControls ?? []),
+    ];
+    return new Set(controls
+        .filter((control) => shouldHideControlValue(descriptor, control))
+        .map((control) => control.id));
+}
+function redactControlValueMap(descriptor, values, options = {}) {
+    if (!values)
+        return values;
+    const hiddenIds = hiddenControlValueIds(descriptor);
+    if (hiddenIds.size === 0)
+        return values;
+    const redacted = { ...values };
+    for (const id of hiddenIds) {
+        if (!hasOwn(redacted, id))
+            continue;
+        if (options.patch) {
+            redacted[id] = null;
+        }
+        else {
+            delete redacted[id];
+        }
+    }
+    return redacted;
+}
+function redactSensitiveValue(value) {
+    void value;
+    return 'Hidden';
+}
+function redactControl(descriptor, control) {
+    if (isRuntimeItemHidden(control))
+        return null;
+    const field = control.id;
+    const hidden = isRuntimePresentationFieldHidden(descriptor, field);
+    if (hidden && !isRequiredSetupControl(control))
+        return null;
+    if (!control.sensitive)
+        return control;
+    return cloneDefined({
+        ...control,
+        defaultValue: null,
+        options: control.options?.map((option) => ({
+            value: option.value,
+            label: redactSensitiveValue(option.label),
+        })),
+    });
+}
+function redactAction(action) {
+    if (isRuntimeItemHidden(action))
+        return null;
+    if (!action.sensitive)
+        return action;
+    return cloneDefined({
+        ...action,
+        description: action.description ? redactSensitiveValue(action.description) : undefined,
+    });
+}
+function redactWorkspaceOption(descriptor, option) {
+    const hideRoot = isRuntimePresentationFieldHidden(descriptor, 'workspaceRoot');
+    const hideRelative = isRuntimePresentationFieldHidden(descriptor, 'workspaceRelativePath');
+    return cloneDefined({
+        ...option,
+        ...(hideRoot ? { workspaceRootId: undefined } : {}),
+        ...(hideRelative ? { workspaceRelativePath: undefined } : {}),
+    });
+}
+export function redactRuntimeDescriptorForConversation(descriptor) {
+    const coreControls = (descriptor.coreControls ?? [])
+        .map((control) => redactControl(descriptor, control))
+        .filter((control) => Boolean(control))
+        .map((control) => control.id === 'workspace'
+        ? {
+            ...control,
+            options: control.options?.map((option) => redactWorkspaceOption(descriptor, option)),
+        }
+        : control);
+    const runtimeControls = descriptor.runtimeControls?.map((control) => redactControl(descriptor, control))
+        .filter((control) => Boolean(control));
+    const commands = descriptor.commands?.map((command) => redactAction(command))
+        .filter((command) => Boolean(command));
+    const actions = descriptor.actions?.map((action) => redactAction(action))
+        .filter((action) => Boolean(action));
+    return cloneDefined({
+        ...descriptor,
+        coreControls,
+        runtimeControls,
+        commands,
+        actions,
+        workspaceRoots: isRuntimePresentationFieldHidden(descriptor, 'workspaceRoot')
+            ? []
+            : descriptor.workspaceRoots,
+        writableRoots: isRuntimePresentationFieldHidden(descriptor, 'workspaceRoot')
+            ? []
+            : descriptor.writableRoots,
+    });
+}
+function redactStatusItem(item) {
+    if (isRuntimeItemHidden(item))
+        return null;
+    if (!item.sensitive)
+        return item;
+    return {
+        ...item,
+        value: redactSensitiveValue(item.value),
+        tone: item.tone ?? 'warning',
+    };
+}
+function redactFact(item) {
+    if (isRuntimeItemHidden(item))
+        return null;
+    if (!item.sensitive)
+        return item;
+    return {
+        ...item,
+        value: redactSensitiveValue(item.value),
+        tone: item.tone ?? 'warning',
+        copyable: false,
+    };
+}
+function redactInventoryEntry(entry) {
+    if (isRuntimeItemHidden(entry))
+        return null;
+    if (!entry.sensitive)
+        return entry;
+    return cloneDefined({
+        ...entry,
+        label: redactSensitiveValue(entry.label),
+        description: entry.description ? redactSensitiveValue(entry.description) : undefined,
+    });
+}
+function redactInventory(inventory) {
+    if (isRuntimeItemHidden(inventory))
+        return null;
+    const entries = (inventory.entries ?? [])
+        .map(redactInventoryEntry)
+        .filter((entry) => Boolean(entry));
+    if (!inventory.sensitive) {
+        return {
+            ...inventory,
+            entries,
+        };
+    }
+    return {
+        ...inventory,
+        entries: [],
+        label: redactSensitiveValue(inventory.label),
+    };
+}
+export function redactRuntimeActivityItemForConversation(item) {
+    if (isRuntimeItemHidden(item))
+        return null;
+    const actions = item.actions
+        ?.map((action) => redactAction(action))
+        .filter((action) => Boolean(action));
+    if (!item.sensitive) {
+        return cloneDefined({
+            ...item,
+            actions,
+        });
+    }
+    return cloneDefined({
+        ...item,
+        title: redactSensitiveValue(item.title),
+        summary: item.summary ? redactSensitiveValue(item.summary) : undefined,
+        detail: item.detail ? redactSensitiveValue(item.detail) : undefined,
+        progressText: item.progressText ? redactSensitiveValue(item.progressText) : undefined,
+        actions,
+    });
+}
+export function redactExecutionMetadataForConversation(descriptor, execution) {
+    if (!execution)
+        return null;
+    const redacted = cloneDefined({
+        ...execution,
+        resolvedWorkspaceLabel: isRuntimePresentationFieldHidden(descriptor, 'workspace')
+            ? undefined
+            : execution.resolvedWorkspaceLabel,
+        resolvedCwd: isRuntimePresentationFieldHidden(descriptor, 'cwd')
+            ? undefined
+            : execution.resolvedCwd,
+        workspaceRootId: isRuntimePresentationFieldHidden(descriptor, 'workspaceRoot')
+            ? undefined
+            : execution.workspaceRootId,
+        workspaceRelativePath: isRuntimePresentationFieldHidden(descriptor, 'workspaceRelativePath')
+            ? undefined
+            : execution.workspaceRelativePath,
+        executionMode: isRuntimePresentationFieldHidden(descriptor, 'executionMode')
+            ? undefined
+            : execution.executionMode,
+        executionBranch: isRuntimePresentationFieldHidden(descriptor, 'branch')
+            ? undefined
+            : execution.executionBranch,
+        worktreePath: isRuntimePresentationFieldHidden(descriptor, 'worktreePath')
+            ? undefined
+            : execution.worktreePath,
+        fallbackReason: isRuntimePresentationFieldHidden(descriptor, 'fallbackReason')
+            ? undefined
+            : execution.fallbackReason,
+    });
+    return Object.keys(redacted).length > 0 ? redacted : null;
+}
+export function redactRuntimeInfoForConversation(payload, options = {}) {
+    const descriptor = payload.descriptor
+        ? redactRuntimeDescriptorForConversation(payload.descriptor)
+        : payload.descriptor;
+    const policyDescriptor = options.descriptor ?? payload.descriptor ?? descriptor;
+    return cloneDefined({
+        ...payload,
+        descriptor,
+        facts: payload.facts
+            ?.map(redactFact)
+            .filter((fact) => Boolean(fact)),
+        statusItems: payload.statusItems
+            ?.map(redactStatusItem)
+            .filter((item) => Boolean(item)),
+        inventories: payload.inventories
+            ?.map(redactInventory)
+            .filter((inventory) => Boolean(inventory)),
+        ...(hasOwn(payload, 'execution')
+            ? { execution: redactExecutionMetadataForConversation(policyDescriptor, payload.execution) }
+            : {}),
+    });
+}
+export function redactAgentRuntimeForConversation(runtime) {
+    const descriptor = runtime.runtimeDescriptor;
+    const redactedDescriptor = descriptor
+        ? redactRuntimeDescriptorForConversation(descriptor)
+        : descriptor;
+    return cloneDefined({
+        ...runtime,
+        runtimeDescriptor: redactedDescriptor,
+        defaultModel: isRuntimePresentationFieldHidden(descriptor, 'model')
+            ? undefined
+            : runtime.defaultModel,
+        availableModels: isRuntimePresentationFieldHidden(descriptor, 'model')
+            ? undefined
+            : runtime.availableModels,
+        defaultPermissionMode: isRuntimePresentationFieldHidden(descriptor, 'permissionMode')
+            ? undefined
+            : runtime.defaultPermissionMode,
+        availablePermissionModes: isRuntimePresentationFieldHidden(descriptor, 'permissionMode')
+            ? undefined
+            : runtime.availablePermissionModes,
+        defaultWorkspaceId: isRuntimePresentationFieldHidden(descriptor, 'workspace')
+            ? undefined
+            : runtime.defaultWorkspaceId,
+        availableWorkspaces: isRuntimePresentationFieldHidden(descriptor, 'workspace')
+            ? undefined
+            : runtime.availableWorkspaces,
+        defaultExecutionMode: isRuntimePresentationFieldHidden(descriptor, 'executionMode')
+            ? undefined
+            : runtime.defaultExecutionMode,
+        availableExecutionModes: isRuntimePresentationFieldHidden(descriptor, 'executionMode')
+            ? undefined
+            : runtime.availableExecutionModes,
+    });
+}
+export function redactSessionStateForConversation(descriptor, state) {
+    return cloneDefined({
+        ...state,
+        model: isRuntimePresentationFieldHidden(descriptor, 'model') ? undefined : state.model,
+        permissionMode: isRuntimePresentationFieldHidden(descriptor, 'permissionMode')
+            ? undefined
+            : state.permissionMode,
+        effort: isRuntimePresentationFieldHidden(descriptor, 'effort') ? undefined : state.effort,
+        cwd: isRuntimePresentationFieldHidden(descriptor, 'cwd') ? undefined : state.cwd,
+        executionMode: isRuntimePresentationFieldHidden(descriptor, 'executionMode')
+            ? undefined
+            : state.executionMode,
+        executionBranch: isRuntimePresentationFieldHidden(descriptor, 'branch')
+            ? undefined
+            : state.executionBranch,
+        worktreePath: isRuntimePresentationFieldHidden(descriptor, 'worktreePath')
+            ? undefined
+            : state.worktreePath,
+        executionFallbackReason: isRuntimePresentationFieldHidden(descriptor, 'fallbackReason')
+            ? undefined
+            : state.executionFallbackReason,
+        contextUsage: isRuntimePresentationFieldHidden(descriptor, 'contextUsage')
+            ? undefined
+            : state.contextUsage,
+        availableModels: isRuntimePresentationFieldHidden(descriptor, 'model')
+            ? undefined
+            : state.availableModels,
+        runtimeControlValues: redactControlValueMap(descriptor, state.runtimeControlValues),
+        controlState: redactControlValueMap(descriptor, state.controlState),
+    });
+}
+export function redactAgentSessionSnapshotForConversation(descriptor, snapshot, options = {}) {
+    const hiddenValue = options.patch ? null : undefined;
+    const redacted = {
+        ...snapshot,
+        model: isRuntimePresentationFieldHidden(descriptor, 'model') ? hiddenValue : snapshot.model,
+        modelOptions: isRuntimePresentationFieldHidden(descriptor, 'model') ? hiddenValue : snapshot.modelOptions,
+        permissionMode: isRuntimePresentationFieldHidden(descriptor, 'permissionMode') ? hiddenValue : snapshot.permissionMode,
+        permissionModeOptions: isRuntimePresentationFieldHidden(descriptor, 'permissionMode') ? hiddenValue : snapshot.permissionModeOptions,
+        effort: isRuntimePresentationFieldHidden(descriptor, 'effort') ? hiddenValue : snapshot.effort,
+        workspaceId: isRuntimePresentationFieldHidden(descriptor, 'workspace') ? hiddenValue : snapshot.workspaceId,
+        workspaceOptions: isRuntimePresentationFieldHidden(descriptor, 'workspace') ? hiddenValue : snapshot.workspaceOptions,
+        executionMode: isRuntimePresentationFieldHidden(descriptor, 'executionMode') ? hiddenValue : snapshot.executionMode,
+        availableExecutionModes: isRuntimePresentationFieldHidden(descriptor, 'executionMode') ? hiddenValue : snapshot.availableExecutionModes,
+        executionBranch: isRuntimePresentationFieldHidden(descriptor, 'branch') ? hiddenValue : snapshot.executionBranch,
+        resolvedWorkspaceLabel: isRuntimePresentationFieldHidden(descriptor, 'workspace') ? hiddenValue : snapshot.resolvedWorkspaceLabel,
+        resolvedCwd: isRuntimePresentationFieldHidden(descriptor, 'cwd') ? hiddenValue : snapshot.resolvedCwd,
+        worktreePath: isRuntimePresentationFieldHidden(descriptor, 'worktreePath') ? hiddenValue : snapshot.worktreePath,
+        executionFallbackReason: isRuntimePresentationFieldHidden(descriptor, 'fallbackReason') ? hiddenValue : snapshot.executionFallbackReason,
+        contextUsage: isRuntimePresentationFieldHidden(descriptor, 'contextUsage') ? hiddenValue : snapshot.contextUsage,
+        runtimeControlValues: redactControlValueMap(descriptor, snapshot.runtimeControlValues, options),
+    };
+    if (redacted.runtimeDescriptor) {
+        redacted.runtimeDescriptor = redactRuntimeDescriptorForConversation(redacted.runtimeDescriptor);
+    }
+    if (redacted.runtimeInfo) {
+        redacted.runtimeInfo = redactRuntimeInfoForConversation(redacted.runtimeInfo);
+    }
+    if (!redacted.controlState)
+        return cloneDefined(redacted);
+    const controlState = { ...redacted.controlState };
+    const hiddenIds = hiddenControlValueIds(descriptor);
+    for (const field of ['model', 'permissionMode', 'effort', 'workspace', 'executionMode']) {
+        if (isRuntimePresentationFieldHidden(descriptor, field) && hasOwn(controlState, field)) {
+            if (options.patch) {
+                controlState[field] = null;
+            }
+            else {
+                delete controlState[field];
+            }
+        }
+    }
+    for (const id of hiddenIds) {
+        if (!hasOwn(controlState, id))
+            continue;
+        if (options.patch) {
+            controlState[id] = null;
+        }
+        else {
+            delete controlState[id];
+        }
+    }
+    redacted.controlState = controlState;
+    return cloneDefined(redacted);
+}

package/dist/runtime-state-publisher.js

@@ -1,3 +1,4 @@
+import { redactAgentRuntimeForConversation, redactAgentSessionSnapshotForConversation, isRuntimePresentationFieldHidden, redactRuntimeActivityItemForConversation, redactRuntimeInfoForConversation, redactSessionStateForConversation, } from './runtime-presentation.js';
 import { clearRuntimeInfo, clearRuntimeActivity, clearSessionState, clearTurnState, patchAgentSessionSnapshot, patchRuntimeInfo, readRuntimeActivity, removeRuntimeActivityItem, rtdbRead, rtdbWrite, writeRuntimeActivity, writeRuntimeInfo, writeSessionState, writeTurnState, } from './rtdb-rest.js';
 const SERVER_TIMESTAMP = { '.sv': 'timestamp' };
 const MAX_RUNTIME_ACTIVITY_ITEMS = 50;
@@ -35,7 +36,31 @@ export function createRuntimeStatePublisher(options) {
     const { agentId, clientType, hostMode, rtdb } = options;
     const writePath = (path, data) => (rtdb ? rtdb.write(path, data) : rtdbWrite(path, data));
     const readPath = (path) => (rtdb ? rtdb.read(path) : rtdbRead(path));
-    let lastPublishedRuntime = null;
+    let lastRawRuntime = null;
+    let lastPublicRuntime = null;
+    function currentDescriptor() {
+        return lastRawRuntime?.runtimeDescriptor ?? null;
+    }
+    function hasHiddenSessionStateField(descriptor) {
+        if (!descriptor)
+            return false;
+        const controls = [
+            ...(descriptor.coreControls ?? []),
+            ...(descriptor.runtimeControls ?? []),
+        ];
+        return [
+            'model',
+            'permissionMode',
+            'effort',
+            'cwd',
+            'executionMode',
+            'branch',
+            'worktreePath',
+            'fallbackReason',
+            'contextUsage',
+        ].some((field) => isRuntimePresentationFieldHidden(descriptor, field))
+            || controls.some((control) => control.visibility === 'hidden' || control.sensitive === true);
+    }
     const readRuntimeActivityPath = (conversationId) => (rtdb
         ? rtdb.readRuntimeActivity(conversationId, agentId)
         : readRuntimeActivity(conversationId, agentId));
@@ -63,18 +88,22 @@ export function createRuntimeStatePublisher(options) {
     }
     return {
         async publishAgentRuntime(runtime) {
-            const payload = {
+            const rawRuntime = {
                 clientType,
                 hostMode,
                 ...runtime,
+            };
+            const publicPayload = {
+                ...redactAgentRuntimeForConversation(rawRuntime),
                 updatedAt: SERVER_TIMESTAMP,
             };
-            lastPublishedRuntime = payload;
-            await writePath(`/agent-runtime/${agentId}`, payload);
+            lastRawRuntime = rawRuntime;
+            lastPublicRuntime = publicPayload;
+            await writePath(`/agent-runtime/${agentId}`, publicPayload);
         },
         async clearAgentRuntime() {
             const path = `/agent-runtime/${agentId}`;
-            const current = lastPublishedRuntime ?? await readPath(path).catch(() => null);
+            const current = lastPublicRuntime ?? await readPath(path).catch(() => null);
             if (hasPreservableRuntimeState(current)) {
                 await writePath(path, {
                     ...current,
@@ -85,9 +114,30 @@ export function createRuntimeStatePublisher(options) {
             await writePath(path, null);
         },
         async writeSessionState(conversationId, state) {
+            const descriptor = currentDescriptor();
+            const publicState = redactSessionStateForConversation(descriptor, state);
             await (rtdb
-                ? rtdb.writeSessionState(conversationId, agentId, state)
-                : writeSessionState(conversationId, agentId, state));
+                ? rtdb.writeSessionState(conversationId, agentId, publicState)
+                : writeSessionState(conversationId, agentId, publicState));
+            if (hasHiddenSessionStateField(descriptor)) {
+                const clearingPatch = redactAgentSessionSnapshotForConversation(descriptor, {
+                    model: state.model,
+                    modelOptions: state.availableModels,
+                    permissionMode: state.permissionMode,
+                    effort: state.effort,
+                    resolvedCwd: state.cwd,
+                    executionMode: state.executionMode,
+                    executionBranch: state.executionBranch,
+                    worktreePath: state.worktreePath,
+                    executionFallbackReason: state.executionFallbackReason,
+                    contextUsage: state.contextUsage,
+                    runtimeControlValues: state.runtimeControlValues,
+                    controlState: state.controlState,
+                }, { patch: true });
+                await (rtdb
+                    ? rtdb.patchAgentSessionSnapshot(conversationId, agentId, clearingPatch)
+                    : patchAgentSessionSnapshot(conversationId, agentId, clearingPatch));
+            }
         },
         async clearSessionState(conversationId) {
             await (rtdb
@@ -105,19 +155,22 @@ export function createRuntimeStatePublisher(options) {
                 : clearTurnState(conversationId, agentId));
         },
         async patchAgentSessionSnapshot(conversationId, snapshot) {
+            const publicSnapshot = redactAgentSessionSnapshotForConversation(currentDescriptor(), snapshot, { patch: true });
             await (rtdb
-                ? rtdb.patchAgentSessionSnapshot(conversationId, agentId, snapshot)
-                : patchAgentSessionSnapshot(conversationId, agentId, snapshot));
+                ? rtdb.patchAgentSessionSnapshot(conversationId, agentId, publicSnapshot)
+                : patchAgentSessionSnapshot(conversationId, agentId, publicSnapshot));
         },
         async writeRuntimeInfo(conversationId, payload) {
+            const publicPayload = redactRuntimeInfoForConversation(payload, { descriptor: currentDescriptor() });
             await (rtdb
-                ? rtdb.writeRuntimeInfo(conversationId, agentId, payload)
-                : writeRuntimeInfo(conversationId, agentId, payload));
+                ? rtdb.writeRuntimeInfo(conversationId, agentId, publicPayload)
+                : writeRuntimeInfo(conversationId, agentId, publicPayload));
         },
         async patchRuntimeInfo(conversationId, payload) {
+            const publicPayload = redactRuntimeInfoForConversation(payload, { descriptor: currentDescriptor() });
             await (rtdb
-                ? rtdb.patchRuntimeInfo(conversationId, agentId, payload)
-                : patchRuntimeInfo(conversationId, agentId, payload));
+                ? rtdb.patchRuntimeInfo(conversationId, agentId, publicPayload)
+                : patchRuntimeInfo(conversationId, agentId, publicPayload));
         },
         async clearRuntimeInfo(conversationId) {
             await (rtdb
@@ -125,9 +178,12 @@ export function createRuntimeStatePublisher(options) {
                 : clearRuntimeInfo(conversationId, agentId));
         },
         async writeRuntimeActivity(conversationId, item) {
+            const publicItem = redactRuntimeActivityItemForConversation(item);
+            if (!publicItem)
+                return;
             const normalized = {
-                ...item,
-                updatedAt: item.updatedAt || Date.now(),
+                ...publicItem,
+                updatedAt: publicItem.updatedAt || Date.now(),
             };
             await (rtdb
                 ? rtdb.writeRuntimeActivity(conversationId, agentId, normalized)

package/dist/turn-protocol.js

@@ -43,6 +43,16 @@ export const HOST_ADMISSION_ACTIONS_DISABLED = {
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
+function isHiddenRuntimeCardMetadata(metadata) {
+    if (!isRecord(metadata) || typeof metadata.type !== 'string')
+        return false;
+    return metadata.type === 'approval_reply'
+        || metadata.type === 'approval_outcome'
+        || metadata.type === 'question_reply'
+        || metadata.type === 'plan_approval_reply'
+        || metadata.type === 'runtime_input_reply'
+        || metadata.type === 'runtime_input_outcome';
+}
 export function normalizeTurnMetadata(metadata) {
     if (!isRecord(metadata))
         return null;
@@ -132,6 +142,9 @@ export function resolveTurnMessageSemantics(input) {
     return isTurnOpen(input.senderTurnState) ? 'progress' : 'turn_complete';
 }
 export function shouldPromoteConversationMessage(input) {
+    if (isHiddenRuntimeCardMetadata(input.metadata)) {
+        return false;
+    }
     return resolveTurnMessageSemantics(input) !== 'progress';
 }
 export function shouldTriggerAgentTurn(input) {

package/dist/types.d.ts

@@ -190,7 +190,7 @@ export interface CanonResolveAdmissionResult {
     target: ResolvedAdmissionTargetSummary | null;
     admission: ResolvedTargetAdmissionPayload;
 }
-export type AgentClientType = 'claude-code' | 'openclaw' | 'codex' | 'generic';
+export type AgentClientType = 'claude-code' | 'openclaw' | 'codex' | 'hermes' | 'generic';
 export interface ResolvedAdmission {
     discoverable: boolean;
     inboundPolicy: 'open' | 'approval-required' | 'owner-only';
@@ -250,6 +250,18 @@ export type CanonControlSelectionPolicy = 'inherit' | 'required_explicit';
 export type CanonRuntimeStreamingMode = 'none' | 'status' | 'snapshot' | 'block' | 'delta';
 export type CanonRuntimeSurfaceMode = 'host' | 'channel' | 'limited_channel' | 'operator';
 export type CanonRuntimeDetailTier = 'primary' | 'detail' | 'diagnostic';
+export type CanonRuntimeVisibility = 'conversation' | 'hidden';
+export type CanonRuntimePresentationPreset = 'normal' | 'minimal' | 'full';
+export type CanonRuntimePresentationField = 'model' | 'permissionMode' | 'effort' | 'workspace' | 'executionMode' | 'contextUsage' | 'cwd' | 'branch' | 'worktreePath' | 'workspaceRoot' | 'workspaceRelativePath' | 'fallbackReason';
+export interface CanonRuntimePresentationHint {
+    visibility?: CanonRuntimeVisibility;
+    tier?: CanonRuntimeDetailTier;
+    sensitive?: boolean;
+}
+export interface CanonRuntimePresentationPolicy {
+    preset?: CanonRuntimePresentationPreset;
+    fields?: Partial<Record<CanonRuntimePresentationField, CanonRuntimePresentationHint>>;
+}
 export type CanonRuntimeFactGroup = 'connection' | 'route' | 'runtime' | 'model' | 'session' | 'account' | 'limits';
 export type CanonRuntimeInventoryStatus = 'ready' | 'auth_needed' | 'unknown' | 'configured' | 'running' | 'error';
 export type CanonRuntimeStatusTone = 'default' | 'success' | 'warning' | 'danger';
@@ -295,6 +307,9 @@ export interface CanonRuntimeActionDescriptor {
     id: string;
     label: string;
     description?: string;
+    visibility?: CanonRuntimeVisibility;
+    tier?: CanonRuntimeDetailTier;
+    sensitive?: boolean;
     primitive?: CanonRuntimePrimitiveId;
     aliases?: ReadonlyArray<string>;
     category?: CanonRuntimeActionCategory;
@@ -319,6 +334,9 @@ export interface CanonControlDescriptor {
     liveBehavior: CanonControlLiveBehavior;
     selectionPolicy: CanonControlSelectionPolicy;
     description?: string;
+    visibility?: CanonRuntimeVisibility;
+    tier?: CanonRuntimeDetailTier;
+    sensitive?: boolean;
 }
 export interface CanonRuntimeDescriptor {
     coreControls: ReadonlyArray<CanonControlDescriptor>;
@@ -341,6 +359,12 @@ export interface CanonRuntimeDescriptor {
      * means activity/tool state without live assistant text.
      */
     streamingTextMode?: CanonRuntimeStreamingMode;
+    /**
+     * Runtime-owned presentation policy for built-in Canon detail fields.
+     * Hidden fields are redacted before public/member-readable runtime payloads
+     * are published; clients only render what remains.
+     */
+    presentation?: CanonRuntimePresentationPolicy;
     /**
      * Contact-graph and admission actions this runtime exposes through the
      * agent SDK. Plugins set this to advertise which tools they will surface
@@ -366,6 +390,7 @@ export interface CanonRuntimeStatusItem {
     tone?: CanonRuntimeStatusTone;
     tier?: CanonRuntimeDetailTier;
     sensitive?: boolean;
+    visibility?: CanonRuntimeVisibility;
     source?: RuntimeControlValueSource;
 }
 export interface CanonRuntimeFact {
@@ -374,6 +399,8 @@ export interface CanonRuntimeFact {
     value: string;
     group: CanonRuntimeFactGroup;
     tier?: CanonRuntimeDetailTier;
+    sensitive?: boolean;
+    visibility?: CanonRuntimeVisibility;
     tone?: 'neutral' | 'good' | 'warning' | 'danger';
     copyable?: boolean;
     updatedAt?: number;
@@ -392,6 +419,9 @@ export interface CanonRuntimeActivityItem {
     startedAt?: number;
     updatedAt: number;
     endedAt?: number;
+    visibility?: CanonRuntimeVisibility;
+    tier?: CanonRuntimeDetailTier;
+    sensitive?: boolean;
     actions?: ReadonlyArray<CanonRuntimeCommandDescriptor>;
 }
 export interface CanonRuntimeInventoryEntry {
@@ -399,12 +429,17 @@ export interface CanonRuntimeInventoryEntry {
     label: string;
     status?: CanonRuntimeInventoryStatus;
     description?: string;
+    tier?: CanonRuntimeDetailTier;
+    sensitive?: boolean;
+    visibility?: CanonRuntimeVisibility;
 }
 export interface CanonRuntimeInventory {
     id: string;
     label: string;
     entries: ReadonlyArray<CanonRuntimeInventoryEntry>;
     tier?: CanonRuntimeDetailTier;
+    sensitive?: boolean;
+    visibility?: CanonRuntimeVisibility;
 }
 export interface RuntimeInfoPayload {
     descriptor: CanonRuntimeDescriptor;

package/dist/types.js

@@ -29,6 +29,15 @@ export const AGENT_CAPABILITIES = {
         supportsQueue: true,
         supportsInterleave: false,
     },
+    'hermes': {
+        supportsModelSwitch: false,
+        supportsPermissionMode: false,
+        supportsEffort: false,
+        supportsSessionState: true,
+        supportsInterrupt: true,
+        supportsQueue: true,
+        supportsInterleave: false,
+    },
     'openclaw': { ...DEFAULT_CAPABILITIES },
     'generic': { ...DEFAULT_CAPABILITIES },
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canonmsg/core",
-  "version": "0.19.1",
+  "version": "0.19.2",
   "description": "Canon core — shared types, REST client, SSE stream, and registration for Canon messaging",
   "type": "module",
   "main": "dist/index.js",