@segmentstream/agent 0.12.1 → 0.13.0

package/README.md

@@ -189,13 +189,13 @@ continue using GET lookup. Starter templates and pins remain unchanged in this s
 
 ## What the extension contributes
 
-| Name                                                               | Slot           | What it does                                                                                                                                                                    |
-| ------------------------------------------------------------------ | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `segmentstream__ontology`                                          | `connections`  | The app's `/mcp`, resolved per turn for the turn's member. No member, no connection.                                                                                            |
-| `segmentstream__telegram`                                          | `channels`     | `POST /eve/v1/telegram`: Telegram through the connection, with pairing, routing and voice.                                                                                      |
-| `segmentstream__attachments_list`, `_read`, `_promote`, `_discard` | `tools`        | The member's temporary attachments in this chat: list, read, keep through an action, drop.                                                                                      |
-| `segmentstream__attachments_send`                                  | `tools`        | Sends readable stored ontology files into the current Telegram chat and topic.                                                                                                  |
-| platform rules                                                     | `instructions` | Changes go through actions; `describe` indexes or inspects refs; `discover` searches metadata; tools are already narrowed; when to answer `[SILENT]`; how to handle attachments |
+| Name                                                                 | Slot           | What it does                                                                                                                                                                    |
+| -------------------------------------------------------------------- | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `segmentstream__ontology_describe`, `_discover`, `_inspect`, `_call` | `tools`        | Permission-filtered metadata, schema inspection and action calls as the current member.                                                                                         |
+| `segmentstream__telegram`                                            | `channels`     | `POST /eve/v1/telegram`: Telegram through the connection, with pairing, routing and voice.                                                                                      |
+| `segmentstream__attachments_list`, `_read`, `_promote`, `_discard`   | `tools`        | The member's temporary attachments in this chat: list, read, keep through an action, drop.                                                                                      |
+| `segmentstream__attachments_send`                                    | `tools`        | Sends readable stored ontology files into the current Telegram chat and topic.                                                                                                  |
+| platform rules                                                       | `instructions` | Changes go through actions; `describe` indexes or inspects refs; `discover` searches metadata; tools are already narrowed; when to answer `[SILENT]`; how to handle attachments |
 
 ### The ontology
 
@@ -222,15 +222,17 @@ share a group chat's session never share a client.
   proxy. The token stays in SegmentStream.
 - **Webhook.** A webhook is accepted only with `X-Telegram-Bot-Api-Secret-Token` equal to
   `SEGMENTSTREAM_AGENT_WEBHOOK_SECRET`, compared in constant time. The platform generates the
-  secret and registers the webhook after each production deployment, and sets the bot's menu
-  button, shown in private chats, to open the workspace app.
+  secret and registers the webhook after each production deployment. A workspace-supplied
+  `menuButton.text` enables the app menu button; omitting it resets the provider menu to its default
+  for Agent SDK 0.13 or later. Pre-0.13 archives without menu copy retain their existing provider menu.
 - **Production only.** Outside `VERCEL_ENV=production` the route answers 200 and does nothing, so a
   preview never answers a real chat. Without `channels.telegram` it answers 404.
 - **Pairing.** Bots and channel posts are archived without starting turns. The sender's Telegram
   account is checked on every message, so revocation takes effect immediately. Unlinked group
   speech and attachment metadata remain raw context, including edits; no unlinked voice is decoded or gets
-  a reply. An unknown private sender gets a neutral connection button to `/agent/connect?code=…`,
-  valid for ten minutes; revoked or inactive private senders get a neutral refusal marker.
+  a reply. An unknown private sender gets the workspace pairing prompt and button to `/agent/connect?code=…`,
+  valid for ten minutes; revoked or inactive private senders receive configured refusal copy,
+  or no message when it is absent.
 - **Who the agent is.** A paired sender's turn runs with the principal id `telegram:<user>`
   (`telegram:<chat>:<user>` in groups) and the attributes `memberId`, `memberName`, `roles`,
   `chatId`, `chatType` and `username`.
@@ -516,7 +518,7 @@ ontology SDK along with this extension. See the repository's
 [conversation storage guide](../../docs/agent-conversation-storage.md) for APIs, retention,
 eve's existing storage, and Telegram's delivery limits.
 
-### Exact chat posting protocol (prepared in agent SDK 0.6.0)
+### Exact chat posting protocol
 
 An authenticated `tools/list` advertises `_meta: { "segmentstream/chat-post": 1 }` on
 `chat_post_message`. Without this marker,
@@ -525,12 +527,12 @@ missing/incomplete preview metadata is denied. The versioned connection has its
 
 The runtime reads `me` for the server-derived `attribution`, and `chat_list({ chat })` for exactly
 one eligible destination: `{ items: [{ id, title, provider, external_id }], next_cursor: null }`.
-Provider is currently `telegram`. The final plain text is exactly `attribution + ": " + text`;
+Provider is currently `telegram`. The final plain text is `text + separator + attribution`, with a blank line as the neutral separator;
 `reply_to` is optional. A preview digest is SHA-256 of the JSON array of chat ID, provider,
 external ID, title, attribution, text, final text and nullable reply target, in that order.
 The target/attribution are resolved again immediately before executing the frozen call.
 
-Eve supplies the model-hidden `_segmentstream` argument on **all** calls of a negotiated connection.
+The SDK constructs model-hidden `_segmentstream` metadata for approved runtime posts.
 It contains `version: 1`, `session_id` and `call_id`. A consumed, unexpired chat approval additionally
 supplies `operation_id`, source provider/chat/topic coordinates and `expected: { chat_id, digest }`.
 The operation ID is `hq:` plus SHA-256 of the JSON array `[session_id, call_id]`; it stays stable
@@ -538,7 +540,8 @@ on replay and changes for a revision. The model cannot provide an idempotency ke
 The ontology must authenticate runtime provenance, consume/remove the envelope before strict input
 validation for ordinary tools, derive the posting key from the operation, and recompute attribution.
 External OAuth/service callers still supply their own `idempotency_key` and cannot use this envelope.
-These server changes belong to the later ontology stage; do not advertise the marker prematurely.
+The coordinated ontology SDK implements this protocol; deploy the compatible ontology before
+using agent exact posting.
 
 Source previews, accepted decisions and receipts use existing archive events with operation-linked
 `toolCallId`/event IDs. A cancelled Edit carries its pending revision question in the authoritative
@@ -546,10 +549,12 @@ Eve resolution, so member/topic routing survives a cold start. No second provide
 
 ## Release and migration
 
-The tested release uses agent SDK 0.6.4, Eve 0.76.3 and ontology SDK 0.28.3.
-Deploy the agent first, then backend archive migration 0033/API, then the ontology
-with its declared Telegram provider mapping and explicit `agent_chat:post_message`
-grant. Older ontologies keep ordinary tools working without the extra envelope.
+The coordinated release uses Agent SDK 0.13.0, Eve 0.76.3, Ontology SDK 0.49.0 and App SDK 0.24.1.
+The compatible Cloud archive/API must be deployed first; migrations run only through its CI/CD gate.
+Publish the ontology SDK before the agent SDK. Upgrade the workspace ontology before its agent,
+with the declared Telegram provider mapping and explicit `agent_chat:post_message` grant.
+Supply the required workspace presentation before upgrading the agent to 0.13.x.
+Older ontologies keep ordinary tools working without the extra envelope.
 An older archive returning only `{stored:true}` cannot authorize a send.
 
 Rollback
@@ -615,7 +620,7 @@ can redeliver the same source; the hook and attachment reservation must preserve
 idempotent source membership, storage results and the single acknowledgement.
 Such a failure must not become an HTTP success with no queued work.
 
-### Legacy held approvals
+### Deferred approvals and legacy recovery
 
 Deferred mode supplies four eager tools: `segmentstream__ontology_discover`,
 `segmentstream__ontology_describe`, `segmentstream__ontology_inspect` and `segmentstream__ontology_call`. Registration
@@ -636,11 +641,13 @@ actionable explanation. Reply delivery carries the owning turn's reply anchor
 explicitly after restore. Omitting the version preserves existing closed lifecycle
 data schemas; workspaces opt in only after their hook accepts the additional fields.
 
-Explicit `confirmations.mode: "held"` overrides the deferred default. Switching a package version
-does not migrate already-running held turns. In deferred mode the Telegram adapter reads the owning session's
+`confirmations.mode: "held"` is rejected. Already-running held turns still need recovery.
+The Telegram adapter reads the owning session's
 recorded approval inputs and requests cancellation of that exact turn before admitting a new
 addressed message. It never approves the old call or reuses the old member's authorization.
 Cancellation failure requests webhook replay; terminal/resolved approvals are left alone.
 Deferred mode retains its ten-minute database deadline and minute expiry sweep. Runtime health
 reports the effective confirmation mode and attachment-lifecycle presence behind its existing
 runtime authentication; source pins and public health alone are not settings-adoption proof.
+
+Telegram 0.13.0 requires workspace-authored pairing and confirmation text. See [workspace Telegram text](../../docs/agent.md#workspace-telegram-text) for keys, limits, neutral fallbacks and unsupported Eve buttons.

package/dist/_chunks/{build-metadata-Dl-ZJp5p.mjs → build-metadata-BLeBanNg.mjs}

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-var version = "0.12.1";
+var version = "0.13.0";
 function agentBuild(environment = process.env) {
 	return {
 		agent: version,

package/dist/_chunks/{inbound-request-BrWspFw5.mjs → inbound-request-BXhiIph-.mjs}

@@ -4,15 +4,16 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
+import { telegramText } from "../extension/lib/telegram/texts.mjs";
 import { isTechnicalText } from "../extension/lib/customer-text-safety.mjs";
 import { redactDiagnostic } from "../extension/lib/diagnostics.mjs";
 import { isConfirmationText } from "../extension/lib/telegram/confirmation-text.mjs";
 import { chatPostCardLinks, isExactChatPostCard } from "../extension/lib/telegram/chat-post-card.mjs";
 import { plainTelegramText, splitTelegramText, telegramMarkdown } from "../extension/lib/telegram/format.mjs";
 import { inTelegramSendQueue } from "../extension/lib/telegram/send-queue.mjs";
-import { telegramPreviewOptions, telegramTextLinks } from "@segmentstream-cloud/ontology/telegram";
 import { randomBytes, randomUUID } from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
+import { telegramPreviewOptions, telegramTextLinks } from "@segmentstream-cloud/ontology/telegram";
 const deliveryLocale = new AsyncLocalStorage();
 function withDeliveryLocale(locale, run, threadId, replyTo, chatId) {
 	return deliveryLocale.run({
@@ -28,15 +29,16 @@ function currentLocale() {
 function currentThreadId() {
 	return deliveryLocale.getStore()?.threadId ?? currentInboundRequest()?.threadId;
 }
-function customerCopy() {
+function customerCopy(locale = currentLocale()) {
 	return {
-		failed: "⚠️",
-		recovery: "⚠️",
-		attachment: "⚠️",
-		authorization: "⚠️",
-		response: "⚠️",
-		connected: "✅",
-		disconnected: "❌"
+		failed: telegramText("notice", "failed", locale),
+		recovery: telegramText("notice", "recovery", locale),
+		attachment: telegramText("notice", "attachment", locale),
+		authorization: telegramText("notice", "authorization", locale),
+		response: telegramText("notice", "response", locale),
+		connected: telegramText("notice", "connected", locale),
+		disconnected: telegramText("notice", "disconnected", locale),
+		cancelled: telegramText("notice", "cancelled", locale)
 	};
 }
 function redactCredentials(value) {
@@ -46,7 +48,7 @@ function redactCredentials(value) {
 	return value;
 }
 function reportTelegramError(operation, error, metadata = {}, secrets = new Set()) {
-	const errorId = randomBytes(4).toString("hex").toUpperCase();
+	const errorId = randomBytes(4).toString("hex");
 	const credentials = new Set([...secrets, ...[process.env.AI_GATEWAY_API_KEY, process.env.VERCEL_OIDC_TOKEN].filter((value) => value !== void 0)]);
 	console.error("[segmentstream] Telegram delivery diagnostic", {
 		...metadata,
@@ -57,8 +59,8 @@ function reportTelegramError(operation, error, metadata = {}, secrets = new Set(
 	return errorId;
 }
 function failureText(errorId, kind = "failed", _locale = currentLocale()) {
-	if (kind === "cancelled") return `⏹ ${errorId}`;
-	return `${customerCopy()[kind]} ${errorId}`;
+	const text = customerCopy(_locale)[kind];
+	return text === void 0 ? errorId : `${text} ${errorId}`;
 }
 function customerText(text, locale = currentLocale()) {
 	if (!isTechnicalText(text)) return text;
@@ -118,6 +120,7 @@ function safeTelegramFetch(fetchImpl, scope = "telegram", previews = {}) {
 		"sendMessage",
 		"editMessageText",
 		"editMessageCaption",
+		"editMessageReplyMarkup",
 		"answerCallbackQuery",
 		"sendPhoto",
 		"sendDocument",
@@ -160,14 +163,13 @@ function safeTelegramFetch(fetchImpl, scope = "telegram", previews = {}) {
 		const markup = body.reply_markup;
 		if (Array.isArray(markup?.inline_keyboard)) {
 			if ((textBlocked || typeof body.text === "string" && body.text.length > 4096) && markup.inline_keyboard.some((row) => row.some((button) => typeof button.callback_data === "string" && button.callback_data.startsWith("ss-confirm:")))) throw new Error("Approval buttons require the complete, safe confirmation text.");
-			markup.inline_keyboard = markup.inline_keyboard.map((row) => row.map((button) => {
-				if (typeof button.text !== "string" || !isTechnicalText(button.text)) return button;
+			const rows = markup.inline_keyboard.map((row) => row.filter((button) => {
+				if (typeof button.text !== "string" || !isTechnicalText(button.text)) return true;
 				reportTelegramError("technical_button_label_blocked", { text: button.text });
-				return {
-					...button,
-					text: "➡️"
-				};
-			}));
+				return false;
+			})).filter((row) => row.length > 0);
+			if (rows.length === 0 && markup.inline_keyboard.length > 0) delete body.reply_markup;
+			else markup.inline_keyboard = rows;
 		}
 		const send = async () => {
 			const parts = url.endsWith("/sendMessage") && typeof body.text === "string" && !isExactChatPostCard(body.text) ? splitTelegramText({

package/dist/_chunks/{workflow-serializable-BxrXgxjc.mjs → workflow-serializable-DVQBWK8p.mjs}

@@ -12,9 +12,26 @@ function makeRedactor(values = []) {
 	return (input) => {
 		let text = input;
 		for (const value of secrets) text = text.replaceAll(value, "[REDACTED]");
-		return redactPrivateKeys(text).replace(/\bsscli_(?:access_|key_)?v1\.[a-f0-9-]{36}\.[A-Za-z0-9_-]{43}\b/gi, "[REDACTED CLI CREDENTIAL]").replace(/\b(?:Bearer|Basic)\s+[A-Za-z0-9+/_=.:~-]+/gi, "[REDACTED AUTHORIZATION]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[REDACTED JWT]").replace(/\b(?:sk|rk|vercel_blob_rw|vercel_blob_r|access_token|refresh_token)_[A-Za-z0-9._~-]{8,}/g, "[REDACTED]").replace(/\b([a-z][a-z0-9+.-]*:\/\/)[^\s/@]+@/gi, "$1[REDACTED]@").replace(/([?&](?:access_token|api_key|apikey|key|password|refresh_token|secret|token|signature|sig)=)[^&#\s]*/gi, "$1[REDACTED]").replace(/((?:["']?)(?:password|passwd|credential|secret|client_secret|api_key|access_token|refresh_token|authorization|cookie|set-cookie|token)(?:["']?)\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;})]+)/gi, "$1[REDACTED]").replace(/(Key\s*\([^)]*\)\s*=\s*)\([^)]*\)/gi, "$1([REDACTED])").replace(/(invalid input syntax for [^:]+:\s*)"[^"]*"/gi, "$1[REDACTED]");
+		return redactCopyContext(redactPrivateKeys(text)).replace(/\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?):\/\/\S+/gi, "[REDACTED CONNECTION URI]").replace(/\bsscli_(?:access_|key_)?v1\.[a-f0-9-]{36}\.[A-Za-z0-9_-]{43}\b/gi, "[REDACTED CLI CREDENTIAL]").replace(/\b(?:Bearer|Basic)\s+[A-Za-z0-9+/_=.:~-]+/gi, "[REDACTED AUTHORIZATION]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g, "[REDACTED JWT]").replace(/\b(?:sk|rk|vercel_blob_rw|vercel_blob_r|access_token|refresh_token)_[A-Za-z0-9._~-]{8,}/g, "[REDACTED]").replace(/\b([a-z][a-z0-9+.-]*:\/\/)[^\s/@]+@/gi, "$1[REDACTED]@").replace(/([?&](?:access_token|api_key|apikey|key|password|refresh_token|secret|token|signature|sig)=)[^&#\s]*/gi, "$1[REDACTED]").replace(/((?:["']?)(?:password|passwd|credential|secret|client_secret|api_key|access_token|refresh_token|authorization|cookie|set-cookie|token)(?:["']?)\s*[:=]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;})]+)/gi, "$1[REDACTED]").replace(/(Key\s*\([^)]*\)\s*=\s*)\([\s\S]*/gi, (match, prefix) => {
+			const end = Math.max(...[") already exists", ") is not present"].map((ending) => match.lastIndexOf(ending)));
+			return `${prefix}([REDACTED])${end < 0 ? "" : match.slice(end + 1)}`;
+		}).replace(/(Failing row contains\s+)[\s\S]*/gi, "$1[REDACTED]").replace(/(SQL statement\s+)[\s\S]*/gi, "$1[REDACTED]").replace(/(JSON data, line \d+:\s*)[\s\S]*/gi, "$1[REDACTED]").replace(/((?:Token|Escape sequence|but found)\s+")[\s\S]*/gi, (match, prefix) => {
+			const end = Math.max(match.lastIndexOf("\" is invalid"), match.lastIndexOf("\"."));
+			return `${prefix}[REDACTED]${end < 0 ? "\"" : match.slice(end)}`;
+		}).replace(/(invalid input syntax for [^:]+:\s*)"[^"]*"/gi, "$1[REDACTED]");
 	};
 }
+function redactCopyContext(text) {
+	const lines = /\bCOPY [^\n]*/gi;
+	let line;
+	while ((line = lines.exec(text)) !== null) {
+		const position = line[0].indexOf(", line ");
+		if (position < 0) continue;
+		const header = /^, line \d+(?:, column [^:\n]+)?:\s*/i.exec(line[0].slice(position));
+		return text.slice(0, line.index + (header ? position + header[0].length : 5)) + "[REDACTED]";
+	}
+	return text;
+}
 function environmentSecrets(env) {
 	return Object.entries(env).filter(([key]) => /(?:TOKEN|SECRET|PASSWORD|PRIVATE_KEY|API_KEY|COOKIE|SIGNING_KEY|DATABASE_URL|POSTGRES_URL|GRANT)/i.test(key)).map(([, value]) => value);
 }
@@ -53,6 +70,12 @@ const FIELDS = [
 	"path",
 	"retryable",
 	"constraint",
+	"detail",
+	"hint",
+	"table",
+	"column",
+	"where",
+	"position",
 	"sqlState",
 	"field",
 	"expected",
@@ -91,6 +114,61 @@ function property(value, key) {
 function scalar(value) {
 	return typeof value === "string" || typeof value === "boolean" || typeof value === "number" && Number.isFinite(value);
 }
+function effectCause(value) {
+	if (property(value, "~effect/Cause") === "~effect/Cause") {
+		const reasons = property(value, "reasons");
+		if (Array.isArray(reasons)) return {
+			type: "EffectCause",
+			message: "Effect execution failed",
+			children: reasons.slice(0, MAX_NODES).map((error) => ({
+				error,
+				relation: "concurrent"
+			})),
+			limited: reasons.length > MAX_NODES
+		};
+	}
+	const legacy = property(value, Symbol.for("effect/Cause")) !== void 0;
+	if (!legacy && property(value, "~effect/Cause/Reason") !== "~effect/Cause/Reason") return void 0;
+	const type = property(value, "_tag");
+	switch (type) {
+		case "Fail": return {
+			type,
+			message: "Typed failure",
+			children: [{
+				error: property(value, "error"),
+				relation: "cause"
+			}]
+		};
+		case "Die": return {
+			type,
+			message: "Unexpected defect",
+			children: [{
+				error: property(value, "defect"),
+				relation: "cause"
+			}]
+		};
+		case "Interrupt": return {
+			type,
+			message: "Fiber interrupted",
+			children: []
+		};
+		case "Empty": return legacy ? {
+			type,
+			message: "Empty Effect cause",
+			children: []
+		} : void 0;
+		case "Sequential":
+		case "Parallel": return legacy ? {
+			type,
+			message: `${type} Effect causes`,
+			children: ["left", "right"].map((key) => ({
+				error: property(value, key),
+				relation: type === "Parallel" ? "concurrent" : "cause"
+			}))
+		} : void 0;
+		default: return;
+	}
+}
 function ownValues(value) {
 	if (!value || typeof value !== "object") return [];
 	try {
@@ -118,6 +196,9 @@ function schemaInputRedactions(root) {
 			for (const secret of failureRedactions.get(value) ?? []) if (secret) values.add(secret);
 		}
 		if (property(value, "_tag") === "SchemaError" || property(value, "name") === "SchemaError") issues.push(property(value, "issue"));
+		const effect = effectCause(value);
+		if (effect?.limited) limited = true;
+		if (effect) errors.push(...effect.children.map((child) => child.error));
 		const explicit = property(value, links);
 		if (Array.isArray(explicit)) {
 			if (explicit.length > MAX_NODES) limited = true;
@@ -249,8 +330,9 @@ function createFailureReport(error, options) {
 		if (Array.isArray(inheritedOmissions)) {
 			for (const reason of inheritedOmissions.slice(0, 128)) if (typeof reason === "string") omissions.add(clean(reason));
 		}
-		const name = property(value, "_tag") ?? property(value, "name");
-		const message = property(value, "message");
+		const effect = effectCause(value);
+		const name = property(value, "_tag") ?? property(value, "name") ?? effect?.type;
+		const message = property(value, "message") ?? effect?.message;
 		const node = {
 			id,
 			type: typeof name === "string" ? clean(name) : "NonErrorThrow",
@@ -271,7 +353,8 @@ function createFailureReport(error, options) {
 			if (scalar(field)) details[key] = (key === "expected" || key === "actual") && isSensitiveField(String(property(value, "field") ?? "")) ? "[REDACTED]" : typeof field === "string" ? clean(field) : field;
 		}
 		if (Object.keys(details).length) node.details = details;
-		const children = [];
+		const children = effect?.children ?? [];
+		if (effect?.limited) omissions.add("Effect cause exceeded 1024 reasons");
 		const explicit = property(value, links);
 		if (Array.isArray(explicit)) {
 			for (const item of explicit.slice(0, MAX_NODES)) {

package/dist/extension/_manifest.json

@@ -8,7 +8,6 @@
     "dynamicTool": 79,
     "channel": 58,
     "schedule": 31,
-    "connection": 46,
     "hook": 44,
     "instructions": 2,
     "dynamicInstructions": 37,

package/dist/extension/config.d.ts

@@ -1,5 +1,6 @@
 import { type GroupPolicyInput } from "@segmentstream-cloud/ontology/groups";
 import { type GroupPolicy } from "./lib/group-routing/policy.js";
+import { type TelegramTexts } from "./lib/telegram/texts.js";
 import type { AttachmentLifecycle } from "./lib/telegram/lifecycle.js";
 import { type TelegramLinkPreviews } from "@segmentstream-cloud/ontology/telegram";
 export declare const TELEGRAM_POLICIES: readonly ["mention", "smart"];
@@ -40,12 +41,13 @@ export interface FirstContactSettings {
     readonly version: string;
     readonly notice: LocalizedText;
 }
-export declare const ADMISSION_REPLY_KEYS: readonly ["limited", "perSenderLimited", "workspaceLimited", "registrationsLimited", "groupPairingRequired", "refused"];
+export declare const ADMISSION_REPLY_KEYS: readonly ["pairingRequired", "pairingButton", "groupPairingButton", "limited", "perSenderLimited", "workspaceLimited", "registrationsLimited", "groupPairingRequired", "refused"];
 export type AdmissionReplies = Partial<Record<(typeof ADMISSION_REPLY_KEYS)[number], LocalizedText>>;
 export interface AdmissionSettings {
     readonly firstContact: FirstContactSettings | null;
     readonly limits: AdmissionLimits;
     readonly replies: AdmissionReplies;
+    readonly texts?: TelegramTexts;
 }
 /**
  * `agent/segmentstream.json` as authored. A JSON import widens string literals to `string` and
@@ -54,6 +56,7 @@ export interface AdmissionSettings {
  */
 export interface SegmentStreamAgentConfigInput {
     readonly groups?: GroupPolicyInput;
+    readonly texts?: TelegramTexts;
     readonly firstContact?: FirstContactSettings;
     readonly limits?: AdmissionLimitsInput;
     readonly replies?: AdmissionReplies;
@@ -72,6 +75,9 @@ export interface SegmentStreamAgentConfigInput {
             readonly linkPreviews?: string;
             /** Additional exact HTTP(S) origins belonging to this workspace. */
             readonly additionalOwnOrigins?: readonly string[];
+            readonly menuButton?: {
+                readonly text: LocalizedText;
+            };
             readonly attachmentLifecycle?: Omit<AttachmentLifecycle, "contextVersion"> & {
                 readonly contextVersion?: number;
             };
@@ -102,7 +108,7 @@ export interface SegmentStreamAgentConfigInput {
         readonly connection?: boolean;
     };
     readonly confirmations?: {
-        /** `deferred` (default) returns immediately; `held` uses eve approval. */
+        /** `deferred` (default) returns immediately. Eve button approvals are unsupported. */
         readonly mode?: string;
     };
     readonly sessions?: {
@@ -133,6 +139,9 @@ export interface TelegramSettings {
     readonly linkPreviews?: TelegramLinkPreviews;
     readonly additionalOwnOrigins?: readonly string[];
     readonly attachmentLifecycle?: AttachmentLifecycle;
+    readonly menuButton?: {
+        readonly text: LocalizedText;
+    };
 }
 /** The chat models `segmentstream.model()` chooses between, as AI Gateway model ids. */
 export interface ChatModelChoice {
@@ -175,7 +184,7 @@ export interface SegmentStreamAgentConfig extends AdmissionSettings {
         readonly connection: boolean;
     };
     readonly confirmations: {
-        readonly mode: "deferred" | "held";
+        readonly mode: "deferred";
     };
     readonly sessions: SessionSettings;
 }
@@ -196,8 +205,12 @@ export declare class SegmentStreamAgentConfigError extends Error {
     readonly name = "SegmentStreamAgentConfigError";
     constructor(issues: ReadonlyArray<ConfigIssue>);
 }
+/** Exact historical pins retain the pre-0.13 presentation contract at the archive boundary. */
+export declare function isLegacyAgentArchive(version: string | undefined): boolean;
 /** Validates the authored configuration and applies the defaults. */
-export declare function validateConfig(input: unknown): Validation;
+export declare function validateConfig(input: unknown, options?: {
+    readonly archiveSdkVersion?: string;
+}): Validation;
 /**
  * The Standard Schema eve validates the mount with. `types` exists only for type inference, as the
  * Standard Schema specification allows.
@@ -206,7 +219,7 @@ export declare const configSchema: {
     readonly "~standard": {
         readonly version: 1;
         readonly vendor: "segmentstream";
-        readonly validate: typeof validateConfig;
+        readonly validate: (input: unknown) => Validation;
         readonly types: {
             readonly input: SegmentStreamAgentConfigInput;
             readonly output: SegmentStreamAgentConfig;