@segmentstream/agent 0.12.2 → 0.14.0

package/dist/extension/config.mjs

@@ -5,6 +5,9 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { effectiveGroupPolicy, groupPolicy } from "./lib/group-routing/policy.mjs";
+import { localizedText as localizedText$1 } from "./lib/admission.mjs";
+import { TELEGRAM_TEXT_KEYS } from "./lib/telegram/texts.mjs";
+import { isTechnicalText } from "./lib/customer-text-safety.mjs";
 import { readFileSync, realpathSync } from "node:fs";
 import { isAbsolute, relative, resolve } from "node:path";
 import { expandGroupFiles, groupPolicyIssues } from "@segmentstream-cloud/ontology/groups";
@@ -24,6 +27,9 @@ const DEFAULT_ADMISSION_LIMITS = {
 	workspaceTurnsPerDay: 3e3
 };
 const ADMISSION_REPLY_KEYS = [
+	"pairingRequired",
+	"pairingButton",
+	"groupPairingButton",
 	"limited",
 	"perSenderLimited",
 	"workspaceLimited",
@@ -72,7 +78,9 @@ function telegramSettings(value, issues) {
 			"groups",
 			"linkPreviews",
 			"additionalOwnOrigins",
-			"attachmentLifecycle"
+			"attachmentLifecycle",
+			"menuButton",
+			"callbacks"
 		],
 		issues
 	});
@@ -115,6 +123,18 @@ function telegramSettings(value, issues) {
 		message: "must be an array of HTTP(S) origins without paths, credentials, queries or fragments",
 		path: [...path, "additionalOwnOrigins"]
 	});
+	const callbacks = workspaceHook(telegram.callbacks, [...path, "callbacks"], issues);
+	const menuButton = section({
+		value: telegram.menuButton,
+		path: [...path, "menuButton"],
+		allowed: ["text"],
+		issues
+	});
+	const menuText = menuButton === void 0 ? void 0 : localizedText(menuButton.text, [
+		...path,
+		"menuButton",
+		"text"
+	], issues, 64);
 	const lifecycle = section({
 		value: telegram.attachmentLifecycle,
 		path: [...path, "attachmentLifecycle"],
@@ -141,8 +161,10 @@ function telegramSettings(value, issues) {
 		connection,
 		policy,
 		...signalSettings === void 0 ? {} : { groups: signalSettings },
+		...callbacks === void 0 ? {} : { callbacks },
 		linkPreviews,
 		additionalOwnOrigins,
+		...menuText === void 0 ? {} : { menuButton: { text: menuText } },
 		...lifecycle === void 0 ? {} : { attachmentLifecycle: {
 			entity: String(lifecycle.entity),
 			action: String(lifecycle.action),
@@ -150,6 +172,32 @@ function telegramSettings(value, issues) {
 		} }
 	} : null;
 }
+function workspaceHook(value, path, issues) {
+	const configured = section({
+		value,
+		path,
+		allowed: [
+			"entity",
+			"action",
+			"contextVersion"
+		],
+		issues
+	});
+	if (configured === void 0) return;
+	for (const key of ["entity", "action"]) if (typeof configured[key] !== "string" || !/^(?:[a-z][a-zA-Z0-9]*|[a-z][a-z0-9]*(?:_[a-z0-9]+)*)$/.test(String(configured[key]))) issues.push({
+		message: "must name an ontology entity or action",
+		path: [...path, key]
+	});
+	if (configured.contextVersion !== 2) issues.push({
+		message: "must be 2",
+		path: [...path, "contextVersion"]
+	});
+	return {
+		entity: String(configured.entity),
+		action: String(configured.action),
+		contextVersion: 2
+	};
+}
 function modelId(input) {
 	if (input.value === void 0) return input.fallback;
 	if (typeof input.value !== "string" || input.value === "" || input.value !== input.value.trim()) {
@@ -265,7 +313,7 @@ function sessionSettings(value, issues) {
 		idleResetHours: typeof idleResetHours === "number" && Number.isFinite(idleResetHours) && idleResetHours > 0 ? idleResetHours : false
 	};
 }
-function localizedText(value, path, issues) {
+function localizedText(value, path, issues, maximum = 4e3, safe = true) {
 	if (!isRecord(value) || Object.keys(value).length === 0) {
 		issues.push({
 			message: "must be a non-empty locale-to-text object",
@@ -282,14 +330,14 @@ function localizedText(value, path, issues) {
 				path: [...path, locale]
 			});
 		}
-		if (typeof text !== "string" || text.trim() === "" || text.length > 4e3) issues.push({
-			message: "must be non-empty text of at most 4000 characters",
+		if (typeof text !== "string" || text.trim() === "" || text.length > maximum || safe && typeof text === "string" && isTechnicalText(text)) issues.push({
+			message: `must be ${safe ? "safe " : ""}non-empty text of at most ${maximum} characters`,
 			path: [...path, locale]
 		});
 	}
 	return value;
 }
-function firstContactSettings(value, issues) {
+function firstContactSettings(value, issues, safe = true) {
 	const path = ["firstContact"];
 	const settings = section({
 		value,
@@ -303,7 +351,7 @@ function firstContactSettings(value, issues) {
 		message: "must be non-empty text of at most 200 characters without surrounding whitespace",
 		path: [...path, "version"]
 	});
-	const notice = localizedText(settings.notice, [...path, "notice"], issues);
+	const notice = localizedText(settings.notice, [...path, "notice"], issues, 4e3, safe);
 	return {
 		version: typeof version === "string" ? version : "",
 		notice
@@ -351,7 +399,7 @@ function admissionLimits(value, issues) {
 		workspaceTurnsPerDay: limit(limits?.workspaceTurnsPerDay, DEFAULT_ADMISSION_LIMITS.workspaceTurnsPerDay, [...path, "workspaceTurnsPerDay"])
 	};
 }
-function admissionReplies(value, issues) {
+function admissionReplies(value, issues, safe = true) {
 	const replies = section({
 		value,
 		path: ["replies"],
@@ -359,10 +407,90 @@ function admissionReplies(value, issues) {
 		issues
 	});
 	const configured = {};
-	for (const key of ADMISSION_REPLY_KEYS) if (replies?.[key] !== void 0) configured[key] = localizedText(replies[key], ["replies", key], issues);
+	for (const key of ADMISSION_REPLY_KEYS) if (replies?.[key] !== void 0) configured[key] = localizedText(replies[key], ["replies", key], issues, safe && key.endsWith("Button") ? 24 : 4e3, safe);
 	return configured;
 }
-function validateConfig(input) {
+function telegramTexts(value, issues) {
+	const root = section({
+		value,
+		path: ["texts"],
+		allowed: Object.keys(TELEGRAM_TEXT_KEYS),
+		issues
+	});
+	const output = {};
+	for (const [group, keys] of Object.entries(TELEGRAM_TEXT_KEYS)) {
+		const sectionValue = section({
+			value: root?.[group],
+			path: ["texts", group],
+			allowed: keys,
+			issues
+		});
+		if (sectionValue === void 0) continue;
+		output[group] = {};
+		for (const key of keys) if (sectionValue[key] !== void 0) {
+			const maximum = group === "confirmation" ? key === "question" ? 300 : 24 : group === "callback" ? 200 : group === "authorization" && key === "button" ? 24 : 4e3;
+			output[group][key] = localizedText(sectionValue[key], [
+				"texts",
+				group,
+				key
+			], issues, maximum);
+		}
+	}
+	const confirmation = output.confirmation;
+	if (confirmation?.confirm !== void 0 && confirmation.cancel !== void 0) {
+		const locales = new Set([
+			"en",
+			...Object.keys(confirmation.confirm),
+			...Object.keys(confirmation.cancel)
+		]);
+		for (const locale of locales) {
+			const confirm = localizedText$1(confirmation.confirm, locale);
+			const cancel = localizedText$1(confirmation.cancel, locale);
+			if (typeof confirm === "string" && typeof cancel === "string" && confirm.trim() === cancel.trim()) issues.push({
+				message: "confirm and cancel must have distinct effective localized labels",
+				path: [
+					"texts",
+					"confirmation",
+					"cancel",
+					locale
+				]
+			});
+		}
+	}
+	const authorization = output.authorization;
+	if (authorization?.url !== void 0) for (const [locale, value] of Object.entries(authorization.url)) try {
+		const url = new URL(value);
+		if (!["https:", "http:"].includes(url.protocol) || url.username || url.password) throw new Error("Invalid authorization URL");
+	} catch {
+		issues.push({
+			message: "must be an HTTP(S) URL without credentials",
+			path: [
+				"texts",
+				"authorization",
+				"url",
+				locale
+			]
+		});
+	}
+	if ((authorization?.url !== void 0 || authorization?.button !== void 0) && authorization?.prompt === void 0) issues.push({
+		message: "is required when an authorization button is configured",
+		path: [
+			"texts",
+			"authorization",
+			"prompt"
+		]
+	});
+	if (authorization?.url === void 0 !== (authorization?.button === void 0)) issues.push({
+		message: "url and button must be supplied together",
+		path: ["texts", "authorization"]
+	});
+	return output;
+}
+function isLegacyAgentArchive(version) {
+	return /^0\.(?:[0-9]|1[0-2])\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version ?? "");
+}
+function validateConfig(input, options = {}) {
+	const legacyArchive = isLegacyAgentArchive(options.archiveSdkVersion);
 	const issues = [];
 	const root = section({
 		value: input ?? {},
@@ -376,7 +504,8 @@ function validateConfig(input) {
 			"confirmations",
 			"firstContact",
 			"limits",
-			"replies"
+			"replies",
+			"texts"
 		],
 		issues
 	});
@@ -410,8 +539,8 @@ function validateConfig(input) {
 		allowed: ["mode"],
 		issues
 	})?.mode ?? "deferred";
-	if (mode !== "deferred" && mode !== "held") issues.push({
-		message: "must be \"deferred\" or \"held\"",
+	if (mode !== "deferred" && !(legacyArchive && mode === "held")) issues.push({
+		message: "must be \"deferred\"; Telegram Eve approval buttons are unsupported",
 		path: ["confirmations", "mode"]
 	});
 	const telegram = telegramSettings(channels?.telegram, issues);
@@ -502,9 +631,28 @@ function validateConfig(input) {
 	});
 	const connection = ontology?.connection ?? true;
 	const sessions = sessionSettings(root?.sessions, issues);
-	const firstContact = firstContactSettings(root?.firstContact, issues);
+	const firstContact = firstContactSettings(root?.firstContact, issues, !legacyArchive);
 	const limits = admissionLimits(root?.limits, issues);
-	const replies = admissionReplies(root?.replies, issues);
+	const replies = admissionReplies(root?.replies, issues, !legacyArchive);
+	const texts = telegramTexts(root?.texts, issues);
+	if (!legacyArchive && replies.groupPairingButton !== void 0 && replies.groupPairingRequired === void 0) issues.push({
+		message: "is required when groupPairingButton is configured",
+		path: ["replies", "groupPairingRequired"]
+	});
+	if (telegram !== null && !legacyArchive) {
+		for (const key of ["pairingRequired", "pairingButton"]) if (replies[key] === void 0) issues.push({
+			message: "is required for Telegram",
+			path: ["replies", key]
+		});
+		for (const key of TELEGRAM_TEXT_KEYS.confirmation) if (texts.confirmation?.[key] === void 0) issues.push({
+			message: "is required for Telegram confirmations",
+			path: [
+				"texts",
+				"confirmation",
+				key
+			]
+		});
+	}
 	if (typeof connection !== "boolean") issues.push({
 		message: "must be true or false",
 		path: ["ontology", "connection"]
@@ -524,17 +672,18 @@ function validateConfig(input) {
 			attachments
 		},
 		ontology: { connection: connection === true },
-		confirmations: { mode: mode === "held" ? "held" : "deferred" },
+		confirmations: { mode: "deferred" },
 		sessions,
 		firstContact,
 		limits,
-		replies
+		replies,
+		texts
 	} };
 }
 const configSchema = { "~standard": {
 	version: 1,
 	vendor: "segmentstream",
-	validate: validateConfig,
+	validate: (input) => validateConfig(input),
 	types: void 0
 } };
 function manifestOf(config) {
@@ -542,4 +691,4 @@ function manifestOf(config) {
 	if (validation.issues !== void 0) throw new SegmentStreamAgentConfigError(validation.issues);
 	return validation.value;
 }
-export { ADMISSION_REPLY_KEYS, DEFAULT_ADMISSION_LIMITS, DEFAULT_ATTACHMENTS_MODEL, DEFAULT_DECISION_MODEL, DEFAULT_IMAGE_DESCRIPTION_MODEL, DEFAULT_STT_MODEL, SESSION_SCOPES, SegmentStreamAgentConfigError, TELEGRAM_POLICIES, configSchema, manifestOf, validateConfig };
+export { ADMISSION_REPLY_KEYS, DEFAULT_ADMISSION_LIMITS, DEFAULT_ATTACHMENTS_MODEL, DEFAULT_DECISION_MODEL, DEFAULT_IMAGE_DESCRIPTION_MODEL, DEFAULT_STT_MODEL, SESSION_SCOPES, SegmentStreamAgentConfigError, TELEGRAM_POLICIES, configSchema, isLegacyAgentArchive, manifestOf, validateConfig };

package/dist/extension/extension.d.ts

@@ -4,7 +4,12 @@ export declare const segmentstream: import("eve/extension").ExtensionHandle<{
     readonly "~standard": {
         readonly version: 1;
         readonly vendor: "segmentstream";
-        readonly validate: typeof import("./config.js").validateConfig;
+        readonly validate: (input: unknown) => {
+            readonly value: import("./config.js").SegmentStreamAgentConfig;
+            readonly issues?: undefined;
+        } | {
+            readonly issues: ReadonlyArray<import("./config.js").ConfigIssue>;
+        };
         readonly types: {
             readonly input: import("./config.js").SegmentStreamAgentConfigInput;
             readonly output: import("./config.js").SegmentStreamAgentConfig;
@@ -25,3 +30,4 @@ export { archivedRoutingMessages } from "./lib/group-routing/routing-context.js"
 export { replayRouterPayload } from "./lib/group-routing/replay.js";
 export { conversationState as groupConversationState, conversationAddressing as groupConversationAddressing, type ConversationAnalysis, type ConversationPath, } from "./lib/group-routing/conversation.js";
 export { routingBurst, debounceBurst } from "./lib/group-routing/burst.js";
+export type { TelegramTexts } from "./lib/telegram/texts.js";

package/dist/extension/hooks/authorization.d.ts

@@ -0,0 +1,3 @@
+/** Channel delivery reports the reference; the public hook owns cancellation of the running turn. */
+declare const _default: import("eve/hooks").HookDefinition<"authorization.required">;
+export default _default;

package/dist/extension/hooks/authorization.mjs

@@ -0,0 +1,16 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { localizedText } from "../lib/admission.mjs";
+import "../../_chunks/principal-VFQWqe5S.mjs";
+import { confirmationLocale } from "../lib/telegram/confirmation-text.mjs";
+import segmentstream from "../extension.mjs";
+import { defineHook } from "eve/hooks";
+var authorization_default = defineHook({ events: { "authorization.required": (event, context) => {
+	const principal = context.session.auth.current;
+	if (principal?.authenticator === "segmentstream-telegram" && event.data.candidateId === void 0 && localizedText(segmentstream.config.texts?.authorization?.prompt, confirmationLocale(principal)) === void 0) context.cancel();
+} } });
+export { authorization_default as default };

package/dist/extension/instructions.md

@@ -11,7 +11,6 @@ talking to you, and you act with exactly their permissions.
   exact MCP names and input schemas. Pass returned ontology hashes as `expected_hash`
   on subsequent describe/discover requests so a redeployment cannot mix definitions.
   These tools are directly available; do not search a connection namespace to find them.
-  With held confirmations the same operations are reached through `segmentstream__ontology`.
   Call `me` when you need to check whom you act for. For an unfamiliar task, call `describe`
   without a ref for a compact entity index, or `discover` to search names and descriptions.
   Inspect relevant `entity:`, `action:`, or `measure:` refs with `describe` for their complete
@@ -42,14 +41,14 @@ talking to you, and you act with exactly their permissions.
   the member explicitly cancels or replaces the earlier task. If work is interrupted or blocked,
   say what remains unfinished; never silently replace it with the latest question.
 - Destructive or irreversible actions, and legacy custom actions without safety labels, require
-  the tool boundary's Confirm / Cancel buttons. Call the action to start that flow; never ask for
+  the tool boundary's workspace-authored confirmation buttons. Call the action to start that flow; never ask for
   approval in prose or treat a text acknowledgement as approval. Wait for the button outcome.
   When the tool schema offers `_confirmation`, supply {question, confirm, cancel, done,
   cancelled, failed, expired?, edit?} in the chat's language. Describe the action and key
   parameters in a plain single-line question (at most 300 characters); labels are at most
   24 characters. No IDs, tool names, snake_case, URLs, credentials, or markup. The platform
-  adds trusted facts and symbols. Omit this argument on older tools without schema support.
-  Leave decision symbols to the platform and use distinct confirm/cancel labels. If trusted
+  adds trusted facts. Omit this argument on older tools without schema support.
+  Use distinct confirm/cancel labels; all visible wording comes from the workspace. If trusted
   target titles are unavailable or the facts are too long, resolve the targets or narrow the call.
   Cancel ends that call; retry it only after a new instruction from the member.
 - Every change goes through an action. Report results after success; never claim a record changed

package/dist/extension/lib/attachment-tools.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { runtimeToken } from "./runtime-token.mjs";
 import { agentAttachments } from "./attachments.mjs";
 import { telegramConversation } from "./telegram/files.mjs";

package/dist/extension/lib/attachments.d.ts

@@ -1,3 +1,4 @@
+import type { RuntimeEnvelope } from "./runtime-envelope.js";
 import type { RuntimeToken } from "./runtime-token.js";
 /**
  * The ontology service's attachment routes (`docs/agent.md`, "Attachments"). A file a member sends
@@ -35,6 +36,7 @@ export interface Attachment {
     readonly promotion: unknown;
 }
 export interface PromotionRequest {
+    readonly runtime?: RuntimeEnvelope;
     readonly entity: string;
     readonly action: string;
     readonly input?: Readonly<Record<string, unknown>>;

package/dist/extension/lib/attachments.mjs

@@ -192,6 +192,7 @@ function agentAttachments(input) {
 			const answer = await call(owner, `/${encodeURIComponent(id)}/promote`, "promotion", {
 				entity: request.entity,
 				action: request.action,
+				...request.runtime === void 0 ? {} : { _meta: { _segmentstream: request.runtime } },
 				input: request.input ?? {},
 				...request.field === void 0 ? {} : { field: request.field },
 				...request.recordId === void 0 ? {} : { record_id: request.recordId }

package/dist/extension/lib/build-metadata.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../_chunks/build-metadata-CLprTpsn.mjs";
+import { t as agentBuild } from "../../_chunks/build-metadata-BB2uSGsI.mjs";
 export { agentBuild };

package/dist/extension/lib/chat-post-confirmation.d.ts

@@ -8,6 +8,7 @@ export interface ChatPostPreview {
     readonly externalId: string;
     readonly title: string;
     readonly attribution: string;
+    readonly attributionSeparator?: string;
     readonly text: string;
     readonly finalText: string;
     readonly replyTo: string | null;

package/dist/extension/lib/chat-post-confirmation.mjs

@@ -47,8 +47,9 @@ function describeChatPost(input) {
 		caller.attribution
 	].every((value) => typeof value === "string" && value.length > 0) || target.provider !== "telegram" || target.id !== values.chat && target.title !== values.chat) throw new Error("An unambiguous destination and a complete exact chat preview are required.");
 	const footer = escapeMarkdownV2(caller.attribution);
+	const separator = typeof caller.attribution_separator === "string" ? caller.attribution_separator : "\n\n";
 	return {
-		action: "❓",
+		action: "",
 		fields: [],
 		chatPost: {
 			chatId: target.id,
@@ -56,8 +57,9 @@ function describeChatPost(input) {
 			externalId: target.external_id,
 			title: target.title,
 			attribution: caller.attribution,
+			...separator === "\n\n" ? {} : { attributionSeparator: separator },
 			text: values.text,
-			finalText: `${converter.fromMarkdown(values.text)}\n\n──────────\n_${footer}_`,
+			finalText: `${converter.fromMarkdown(values.text)}${escapeMarkdownV2(separator)}_${footer}_`,
 			replyTo: typeof values.reply_to === "string" ? values.reply_to : null
 		}
 	};

package/dist/extension/lib/confirmation-outcome.d.ts

@@ -22,6 +22,6 @@ export declare function confirmationOutcome(record: DeferredConfirmation, status
         request?: string | undefined;
     } | undefined;
     confirmation: string;
-    status: "done" | "cancelled" | "failed" | "expired" | "approved";
+    status: "expired" | "done" | "cancelled" | "failed" | "approved";
     summary: string;
 };

package/dist/extension/lib/confirmations.d.ts

@@ -2,6 +2,7 @@ import { type StateHandle } from "eve/context";
 import type { ApprovalConfiguration } from "eve/tools/approval";
 import type { ConfirmationDescription } from "./confirmation-description.js";
 import { type ConfirmationCopy } from "./telegram/confirmation-text.js";
+import { type TelegramTexts } from "./telegram/texts.js";
 export declare const CONFIRMATION_TTL_MS: number;
 export interface ActionAnnotations {
     readonly readOnlyHint?: boolean;
@@ -33,6 +34,7 @@ export declare const confirmations: StateHandle<Record<string, Confirmation>>;
 export declare function actionApproval(options: {
     readonly labels: (memberId: string, action: string, input: Readonly<Record<string, unknown>>) => Promise<ActionAnnotations>;
     readonly describe?: (memberId: string, action: string, input: Readonly<Record<string, unknown>>) => Promise<ConfirmationDescription>;
+    readonly texts?: () => TelegramTexts;
     readonly state?: StateHandle<Record<string, Confirmation>>;
     readonly now?: () => number;
 }): ApprovalConfiguration;

package/dist/extension/lib/confirmations.mjs

@@ -4,8 +4,9 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { memberIdOf } from "./telegram/principal.mjs";
-import { confirmationCopy, renderConfirmation } from "./telegram/confirmation-text.mjs";
+import { withTelegramTexts } from "./telegram/texts.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
+import { confirmationCopy, confirmationLocale, renderConfirmation } from "./telegram/confirmation-text.mjs";
 import { chatPostCard } from "./telegram/chat-post-card.mjs";
 import { chatPostDigest, isChatPost } from "./chat-post-confirmation.mjs";
 import { createHash } from "node:crypto";
@@ -36,6 +37,7 @@ function actionApproval(options) {
 		async request(ctx) {
 			const memberId = memberIdOf(ctx.session.auth.current);
 			if (memberId === void 0) return denied("A paired member is required.");
+			const present = (run) => options.texts === void 0 ? run() : withTelegramTexts(options.texts(), run, () => confirmationLocale(ctx.session.auth.current));
 			const hash = inputHash(ctx.toolInput ?? {});
 			const saved = state.get()[ctx.callId];
 			if (saved !== void 0) {
@@ -59,10 +61,11 @@ function actionApproval(options) {
 				const preview = description?.chatPost;
 				const source = ctx.session.auth.current?.attributes;
 				if (description === void 0 || preview === void 0 || typeof source?.chatId !== "string" || source.chatId === preview.externalId) return denied("A complete preview for a different chat is required. Reply normally in this chat.");
-				chatPostCard({
+				const previewDescription = {
 					...description,
 					warning: labels.destructiveHint === true || labels.irreversibleHint === true
-				}, copy);
+				};
+				present(() => chatPostCard(previewDescription, copy));
 				if (saved !== void 0 && (saved.description?.chatPost === void 0 || chatPostDigest(saved.description.chatPost) !== chatPostDigest(preview) || saved.source?.chatId !== source.chatId || saved.source.threadId !== String(source.messageThreadId ?? ""))) return denied("The destination or attribution changed. Make a new call and confirmation.");
 			} catch (error) {
 				console.warn("The exact chat confirmation could not be prepared.", error);
@@ -92,7 +95,7 @@ function actionApproval(options) {
 				warning: labels.destructiveHint === true || labels.irreversibleHint === true
 			};
 			try {
-				if (!posting) renderConfirmation(description, copy);
+				if (!posting) present(() => renderConfirmation(description, copy));
 			} catch {
 				return denied("The complete confirmation facts are unsafe or too long. Narrow the action input.");
 			}

package/dist/extension/lib/conversation-runtime.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { ENDS_CONVERSATION_INSTRUCTIONS } from "./group-routing/conversation-prompt.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { n as contentText, t as CONTENT_CAPS } from "../../_chunks/content-CvFsrmSD.mjs";
 import { conversationEvent, conversations, summarizeArguments } from "./conversations.mjs";
 import { parseAddress } from "./telegram/sessions.mjs";

package/dist/extension/lib/deferred-confirmations.d.ts

@@ -1,7 +1,9 @@
+import { type RuntimeEnvelope } from "./runtime-envelope.js";
 import type { ToolContext } from "eve/tools";
 import { type Confirmation } from "./confirmations.js";
 import { type Environment } from "./environment.js";
 import { type RuntimeToken } from "./runtime-token.js";
+import type { TelegramTexts } from "./telegram/texts.js";
 export interface DeferredConfirmation {
     readonly id: string;
     readonly key: string;
@@ -10,6 +12,7 @@ export interface DeferredConfirmation {
     readonly expiresAt: number;
     readonly status: "pending" | "approved" | "cancelled" | "expired" | "done" | "failed";
     readonly data: {
+        readonly runtimeSource?: RuntimeEnvelope["source"];
         readonly action: string;
         readonly input: Readonly<Record<string, unknown>>;
         readonly confirmation: Confirmation;
@@ -18,12 +21,14 @@ export interface DeferredConfirmation {
         readonly chatId: string;
         readonly threadId: string;
         readonly requester: string;
+        readonly locale?: string;
         readonly requesterName?: string;
         readonly messageId?: string;
         readonly address?: string;
     };
 }
 export type DeferredOptions = {
+    readonly texts?: () => TelegramTexts;
     readonly environment?: Environment;
     readonly token?: RuntimeToken;
     readonly fetch?: typeof fetch;

package/dist/extension/lib/deferred-confirmations.mjs

@@ -5,10 +5,10 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
-import { runtimeToken } from "./runtime-token.mjs";
+import { i as memberIdOf, l as principalRuntimeSource, u as runtimeEnvelope } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { redactDiagnostic } from "./diagnostics.mjs";
 import { humanText, object } from "./confirmation-description.mjs";
+import { runtimeToken } from "./runtime-token.mjs";
 import { chatPostDigest, chatPostOperationId, isChatPost } from "./chat-post-confirmation.mjs";
 import { actionApproval, inputHash } from "./confirmations.mjs";
 import { ontologyTools } from "./ontology-tools.mjs";
@@ -37,7 +37,7 @@ function deferredConfirmations(options = {}) {
 }
 async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 	if (memberIdOf(ctx.session.auth.current) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	if (Object.hasOwn(input, "_segmentstream")) throw new Error("Runtime call metadata is application-owned.");
+	input = Object.fromEntries(Object.entries(input).filter(([key]) => key !== "_segmentstream"));
 	const principal = ctx.session.auth.current;
 	const attributes = principal?.attributes;
 	const id = chatPostOperationId(ctx.session.id, ctx.callId);
@@ -56,10 +56,19 @@ async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 		};
 	};
 	if (existing !== null) return boundResult(existing);
-	const tools = ontologyTools(options);
+	const tools = ontologyTools({
+		...options,
+		principal: ctx.session.auth.current,
+		envelope: runtimeEnvelope({
+			principal: ctx.session.auth.current,
+			sessionId: ctx.session.id,
+			callId: ctx.callId
+		})
+	});
 	let saved = {};
 	const result = await actionApproval({
 		...tools,
+		...options.texts === void 0 ? {} : { texts: options.texts },
 		state: {
 			get: () => saved,
 			update: (update) => {
@@ -95,12 +104,14 @@ async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 			data: {
 				action,
 				input,
+				...principalRuntimeSource(principal) === void 0 ? {} : { runtimeSource: principalRuntimeSource(principal) },
 				confirmation,
 				sessionId: ctx.session.id,
 				callId: ctx.callId,
 				chatId: attributes.chatId,
 				threadId: String(attributes.messageThreadId ?? ""),
 				requester: principal.subject,
+				locale: String(attributes.conversationLanguage ?? attributes.locale ?? "en"),
 				...humanText(attributes.memberName) === void 0 ? {} : { requesterName: humanText(attributes.memberName) }
 			}
 		}
@@ -123,11 +134,13 @@ async function runDeferredAction(record, options) {
 		session_id: record.data.sessionId,
 		call_id: record.data.callId,
 		operation_id: record.id,
+		...record.data.runtimeSource === void 0 ? {} : { source: record.data.runtimeSource },
 		...preview ? {
 			source: {
 				provider: "telegram",
 				chat_id: record.data.chatId,
-				thread_id: record.data.threadId
+				thread_id: record.data.threadId,
+				...record.data.runtimeSource
 			},
 			expected: {
 				chat_id: preview.chatId,
@@ -135,12 +148,12 @@ async function runDeferredAction(record, options) {
 			}
 		} : {}
 	};
-	const result = await tools.rpc(record.memberId, "tools/call", {
+	const result = await ontologyTools({
+		...options,
+		envelope
+	}).rpc(record.memberId, "tools/call", {
 		name: record.data.action.split("__").at(-1),
-		arguments: {
-			...record.data.input,
-			_segmentstream: envelope
-		}
+		arguments: record.data.input
 	});
 	const output = result.structuredContent;
 	if (result.isError === true || (output?.validation)?.ok === false || preview !== void 0 && output?.status !== "sent") throw new Error("The confirmed action did not complete; its outcome may be uncertain.", { cause: result });