@segmentstream/agent 0.13.0 → 0.14.0

package/README.md

@@ -549,7 +549,7 @@ Eve resolution, so member/topic routing survives a cold start. No second provide
 
 ## Release and migration
 
-The coordinated release uses Agent SDK 0.13.0, Eve 0.76.3, Ontology SDK 0.49.0 and App SDK 0.24.1.
+The coordinated release uses Agent SDK 0.14.0, Eve 0.76.3, Ontology SDK 0.50.0 and App SDK 0.24.1.
 The compatible Cloud archive/API must be deployed first; migrations run only through its CI/CD gate.
 Publish the ontology SDK before the agent SDK. Upgrade the workspace ontology before its agent,
 with the declared Telegram provider mapping and explicit `agent_chat:post_message` grant.

package/dist/_chunks/{build-metadata-BLeBanNg.mjs → build-metadata-BB2uSGsI.mjs}

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-var version = "0.13.0";
+var version = "0.14.0";
 function agentBuild(environment = process.env) {
 	return {
 		agent: version,

package/dist/_chunks/principal-VFQWqe5S.mjs

@@ -0,0 +1,126 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { n as currentInboundRequest } from "./inbound-request-BXhiIph-.mjs";
+import { randomUUID } from "node:crypto";
+function telegramRuntimeSource(message, files, callbackQueryId) {
+	const attachments = [];
+	for (const file of message.attachments) {
+		const staged = files?.get(file.fileId);
+		if (staged?.status !== "stored" || attachments.length >= 10) continue;
+		let kind = file.kind;
+		for (const candidate of [
+			"voice",
+			"audio",
+			"video",
+			"video_note",
+			"sticker",
+			"animation"
+		]) {
+			const raw = message.raw[candidate];
+			if (raw !== null && typeof raw === "object" && !Array.isArray(raw) && raw.file_id === file.fileId) kind = candidate;
+		}
+		attachments.push({
+			file_id: file.fileId,
+			kind,
+			staged_id: staged.attachment.id,
+			...file.fileUniqueId === void 0 ? {} : { file_unique_id: file.fileUniqueId },
+			media_type: staged.attachment.contentType
+		});
+	}
+	return {
+		provider: "telegram",
+		chat_id: message.chat.id,
+		thread_id: String(message.messageThreadId ?? ""),
+		message_id: message.messageId,
+		...message.replyToMessage === void 0 ? {} : { reply_to_message_id: message.replyToMessage.messageId },
+		...message.from === void 0 ? {} : { sender: message.from.id },
+		...callbackQueryId === void 0 ? {} : { callback_query_id: callbackQueryId },
+		...attachments.length === 0 ? {} : { attachments }
+	};
+}
+function principalRuntimeSource(principal) {
+	if (principal?.authenticator !== "segmentstream-telegram") return;
+	const value = principal.attributes.segmentstreamRuntimeSource;
+	if (typeof value !== "string") return;
+	try {
+		return JSON.parse(value);
+	} catch {
+		return;
+	}
+}
+function runtimeEnvelope(input = {}) {
+	const source = input.source ?? principalRuntimeSource(input.principal);
+	return {
+		version: 1,
+		session_id: input.sessionId ?? randomUUID(),
+		call_id: input.callId ?? randomUUID(),
+		...source === void 0 ? {} : { source }
+	};
+}
+function compatibleRuntimeEnvelope(envelope, extended) {
+	const source = envelope.source;
+	return extended || source === void 0 ? envelope : {
+		...envelope,
+		source: {
+			provider: source.provider,
+			chat_id: source.chat_id,
+			thread_id: source.thread_id
+		}
+	};
+}
+const RUNTIME_SOURCE_PROTOCOL = "segmentstream/runtime-source";
+const TELEGRAM_AUTHENTICATOR = "segmentstream-telegram";
+function isGroup(message) {
+	return message.chat.type === "group" || message.chat.type === "supergroup";
+}
+function telegramPrincipal(input) {
+	const { message, member } = input;
+	const sender = message.from.id;
+	const attributes = {
+		memberId: member.id,
+		segmentstreamRuntimeSource: JSON.stringify(telegramRuntimeSource(message, currentInboundRequest()?.files, input.callbackQueryId)),
+		identityProvider: "telegram",
+		roles: member.roles,
+		chatId: message.chat.id,
+		chatType: message.chat.type
+	};
+	if (member.name !== null) attributes.memberName = member.name;
+	if (message.messageThreadId !== void 0) attributes.messageThreadId = String(message.messageThreadId);
+	if (message.from.username !== void 0) attributes.username = message.from.username;
+	const locale = member.locale ?? message.from.languageCode;
+	if (locale !== void 0) attributes.locale = locale;
+	const language = input.conversationLanguage ?? conversationLanguage([message.text || message.caption]);
+	if (language !== void 0) attributes.conversationLanguage = language;
+	return {
+		authenticator: TELEGRAM_AUTHENTICATOR,
+		issuer: "telegram",
+		principalId: isGroup(message) ? `telegram:${message.chat.id}:${sender}` : `telegram:${sender}`,
+		principalType: "user",
+		subject: sender,
+		attributes
+	};
+}
+function conversationLanguage(texts) {
+	for (const text of texts) {
+		if (/[\u0430-\u044f\u0451]/iu.test(text)) return "ru";
+		if ((text.match(/\b[a-z]+\b/gi)?.length ?? 0) >= 3) return "en";
+	}
+}
+function memberIdOf(principal) {
+	const memberId = principal?.attributes.memberId;
+	return typeof memberId === "string" && memberId !== "" ? memberId : void 0;
+}
+function rolesOf(principal) {
+	const roles = principal?.attributes.roles;
+	if (typeof roles === "string") return [roles];
+	return roles ?? [];
+}
+function identityProviderOf(principal) {
+	const provider = principal?.attributes.identityProvider;
+	return typeof provider === "string" && provider !== "" ? provider : void 0;
+}
+export { rolesOf as a, compatibleRuntimeEnvelope as c, telegramRuntimeSource as d, memberIdOf as i, principalRuntimeSource as l, conversationLanguage as n, telegramPrincipal as o, identityProviderOf as r, RUNTIME_SOURCE_PROTOCOL as s, TELEGRAM_AUTHENTICATOR as t, runtimeEnvelope as u };

package/dist/extension/config.d.ts

@@ -1,5 +1,6 @@
 import { type GroupPolicyInput } from "@segmentstream-cloud/ontology/groups";
 import { type GroupPolicy } from "./lib/group-routing/policy.js";
+import type { WorkspaceActionHook } from "./lib/telegram/workspace-action.js";
 import { type TelegramTexts } from "./lib/telegram/texts.js";
 import type { AttachmentLifecycle } from "./lib/telegram/lifecycle.js";
 import { type TelegramLinkPreviews } from "@segmentstream-cloud/ontology/telegram";
@@ -75,6 +76,9 @@ export interface SegmentStreamAgentConfigInput {
             readonly linkPreviews?: string;
             /** Additional exact HTTP(S) origins belonging to this workspace. */
             readonly additionalOwnOrigins?: readonly string[];
+            readonly callbacks?: Omit<WorkspaceActionHook, "contextVersion"> & {
+                readonly contextVersion: number;
+            };
             readonly menuButton?: {
                 readonly text: LocalizedText;
             };
@@ -134,6 +138,7 @@ export interface TelegramSettings {
         readonly topicScope?: boolean;
         readonly commandsAddress?: boolean;
     };
+    readonly callbacks?: WorkspaceActionHook;
     readonly connection: string;
     readonly policy: TelegramPolicy;
     readonly linkPreviews?: TelegramLinkPreviews;

package/dist/extension/config.mjs

@@ -79,7 +79,8 @@ function telegramSettings(value, issues) {
 			"linkPreviews",
 			"additionalOwnOrigins",
 			"attachmentLifecycle",
-			"menuButton"
+			"menuButton",
+			"callbacks"
 		],
 		issues
 	});
@@ -122,6 +123,7 @@ function telegramSettings(value, issues) {
 		message: "must be an array of HTTP(S) origins without paths, credentials, queries or fragments",
 		path: [...path, "additionalOwnOrigins"]
 	});
+	const callbacks = workspaceHook(telegram.callbacks, [...path, "callbacks"], issues);
 	const menuButton = section({
 		value: telegram.menuButton,
 		path: [...path, "menuButton"],
@@ -159,6 +161,7 @@ function telegramSettings(value, issues) {
 		connection,
 		policy,
 		...signalSettings === void 0 ? {} : { groups: signalSettings },
+		...callbacks === void 0 ? {} : { callbacks },
 		linkPreviews,
 		additionalOwnOrigins,
 		...menuText === void 0 ? {} : { menuButton: { text: menuText } },
@@ -169,6 +172,32 @@ function telegramSettings(value, issues) {
 		} }
 	} : null;
 }
+function workspaceHook(value, path, issues) {
+	const configured = section({
+		value,
+		path,
+		allowed: [
+			"entity",
+			"action",
+			"contextVersion"
+		],
+		issues
+	});
+	if (configured === void 0) return;
+	for (const key of ["entity", "action"]) if (typeof configured[key] !== "string" || !/^(?:[a-z][a-zA-Z0-9]*|[a-z][a-z0-9]*(?:_[a-z0-9]+)*)$/.test(String(configured[key]))) issues.push({
+		message: "must name an ontology entity or action",
+		path: [...path, key]
+	});
+	if (configured.contextVersion !== 2) issues.push({
+		message: "must be 2",
+		path: [...path, "contextVersion"]
+	});
+	return {
+		entity: String(configured.entity),
+		action: String(configured.action),
+		contextVersion: 2
+	};
+}
 function modelId(input) {
 	if (input.value === void 0) return input.fallback;
 	if (typeof input.value !== "string" || input.value === "" || input.value !== input.value.trim()) {

package/dist/extension/hooks/authorization.mjs

@@ -5,9 +5,9 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { localizedText } from "../lib/admission.mjs";
-import "../lib/telegram/principal.mjs";
-import segmentstream from "../extension.mjs";
+import "../../_chunks/principal-VFQWqe5S.mjs";
 import { confirmationLocale } from "../lib/telegram/confirmation-text.mjs";
+import segmentstream from "../extension.mjs";
 import { defineHook } from "eve/hooks";
 var authorization_default = defineHook({ events: { "authorization.required": (event, context) => {
 	const principal = context.session.auth.current;

package/dist/extension/lib/attachment-tools.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { runtimeToken } from "./runtime-token.mjs";
 import { agentAttachments } from "./attachments.mjs";
 import { telegramConversation } from "./telegram/files.mjs";

package/dist/extension/lib/attachments.d.ts

@@ -1,3 +1,4 @@
+import type { RuntimeEnvelope } from "./runtime-envelope.js";
 import type { RuntimeToken } from "./runtime-token.js";
 /**
  * The ontology service's attachment routes (`docs/agent.md`, "Attachments"). A file a member sends
@@ -35,6 +36,7 @@ export interface Attachment {
     readonly promotion: unknown;
 }
 export interface PromotionRequest {
+    readonly runtime?: RuntimeEnvelope;
     readonly entity: string;
     readonly action: string;
     readonly input?: Readonly<Record<string, unknown>>;

package/dist/extension/lib/attachments.mjs

@@ -192,6 +192,7 @@ function agentAttachments(input) {
 			const answer = await call(owner, `/${encodeURIComponent(id)}/promote`, "promotion", {
 				entity: request.entity,
 				action: request.action,
+				...request.runtime === void 0 ? {} : { _meta: { _segmentstream: request.runtime } },
 				input: request.input ?? {},
 				...request.field === void 0 ? {} : { field: request.field },
 				...request.recordId === void 0 ? {} : { record_id: request.recordId }

package/dist/extension/lib/build-metadata.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../_chunks/build-metadata-BLeBanNg.mjs";
+import { t as agentBuild } from "../../_chunks/build-metadata-BB2uSGsI.mjs";
 export { agentBuild };

package/dist/extension/lib/confirmations.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { withTelegramTexts } from "./telegram/texts.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { confirmationCopy, confirmationLocale, renderConfirmation } from "./telegram/confirmation-text.mjs";
 import { chatPostCard } from "./telegram/chat-post-card.mjs";
 import { chatPostDigest, isChatPost } from "./chat-post-confirmation.mjs";

package/dist/extension/lib/conversation-runtime.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { ENDS_CONVERSATION_INSTRUCTIONS } from "./group-routing/conversation-prompt.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { n as contentText, t as CONTENT_CAPS } from "../../_chunks/content-CvFsrmSD.mjs";
 import { conversationEvent, conversations, summarizeArguments } from "./conversations.mjs";
 import { parseAddress } from "./telegram/sessions.mjs";

package/dist/extension/lib/deferred-confirmations.d.ts

@@ -1,3 +1,4 @@
+import { type RuntimeEnvelope } from "./runtime-envelope.js";
 import type { ToolContext } from "eve/tools";
 import { type Confirmation } from "./confirmations.js";
 import { type Environment } from "./environment.js";
@@ -11,6 +12,7 @@ export interface DeferredConfirmation {
     readonly expiresAt: number;
     readonly status: "pending" | "approved" | "cancelled" | "expired" | "done" | "failed";
     readonly data: {
+        readonly runtimeSource?: RuntimeEnvelope["source"];
         readonly action: string;
         readonly input: Readonly<Record<string, unknown>>;
         readonly confirmation: Confirmation;

package/dist/extension/lib/deferred-confirmations.mjs

@@ -5,10 +5,10 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
-import { runtimeToken } from "./runtime-token.mjs";
+import { i as memberIdOf, l as principalRuntimeSource, u as runtimeEnvelope } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { redactDiagnostic } from "./diagnostics.mjs";
 import { humanText, object } from "./confirmation-description.mjs";
+import { runtimeToken } from "./runtime-token.mjs";
 import { chatPostDigest, chatPostOperationId, isChatPost } from "./chat-post-confirmation.mjs";
 import { actionApproval, inputHash } from "./confirmations.mjs";
 import { ontologyTools } from "./ontology-tools.mjs";
@@ -37,7 +37,7 @@ function deferredConfirmations(options = {}) {
 }
 async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 	if (memberIdOf(ctx.session.auth.current) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	if (Object.hasOwn(input, "_segmentstream")) throw new Error("Runtime call metadata is application-owned.");
+	input = Object.fromEntries(Object.entries(input).filter(([key]) => key !== "_segmentstream"));
 	const principal = ctx.session.auth.current;
 	const attributes = principal?.attributes;
 	const id = chatPostOperationId(ctx.session.id, ctx.callId);
@@ -56,7 +56,15 @@ async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 		};
 	};
 	if (existing !== null) return boundResult(existing);
-	const tools = ontologyTools(options);
+	const tools = ontologyTools({
+		...options,
+		principal: ctx.session.auth.current,
+		envelope: runtimeEnvelope({
+			principal: ctx.session.auth.current,
+			sessionId: ctx.session.id,
+			callId: ctx.callId
+		})
+	});
 	let saved = {};
 	const result = await actionApproval({
 		...tools,
@@ -96,6 +104,7 @@ async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 			data: {
 				action,
 				input,
+				...principalRuntimeSource(principal) === void 0 ? {} : { runtimeSource: principalRuntimeSource(principal) },
 				confirmation,
 				sessionId: ctx.session.id,
 				callId: ctx.callId,
@@ -125,11 +134,13 @@ async function runDeferredAction(record, options) {
 		session_id: record.data.sessionId,
 		call_id: record.data.callId,
 		operation_id: record.id,
+		...record.data.runtimeSource === void 0 ? {} : { source: record.data.runtimeSource },
 		...preview ? {
 			source: {
 				provider: "telegram",
 				chat_id: record.data.chatId,
-				thread_id: record.data.threadId
+				thread_id: record.data.threadId,
+				...record.data.runtimeSource
 			},
 			expected: {
 				chat_id: preview.chatId,
@@ -137,12 +148,12 @@ async function runDeferredAction(record, options) {
 			}
 		} : {}
 	};
-	const result = await tools.rpc(record.memberId, "tools/call", {
+	const result = await ontologyTools({
+		...options,
+		envelope
+	}).rpc(record.memberId, "tools/call", {
 		name: record.data.action.split("__").at(-1),
-		arguments: {
-			...record.data.input,
-			_segmentstream: envelope
-		}
+		arguments: record.data.input
 	});
 	const output = result.structuredContent;
 	if (result.isError === true || (output?.validation)?.ok === false || preview !== void 0 && output?.status !== "sent") throw new Error("The confirmed action did not complete; its outcome may be uncertain.", { cause: result });

package/dist/extension/lib/ontology-connection.d.ts

@@ -36,6 +36,7 @@ export declare function ontologyConnection(input: {
     readonly fetch?: typeof fetch;
     /** Set only by the authenticated catalog handshake, never by model input. */
     readonly chatPosting?: boolean;
+    readonly runtimeSource?: boolean;
 }): McpClientConnectionDefinition | null;
 /** Negotiate before opening Eve's client: old strict schemas never receive the new envelope. */
 export declare function ontologyConnectionForTurn(input: Parameters<typeof ontologyConnection>[0]): Promise<McpClientConnectionDefinition | null>;

package/dist/extension/lib/ontology-connection.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { identityProviderOf, memberIdOf } from "./telegram/principal.mjs";
+import { c as compatibleRuntimeEnvelope, i as memberIdOf, r as identityProviderOf, u as runtimeEnvelope } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { runtimeToken, tokenExpiry } from "./runtime-token.mjs";
 import { CHAT_POST_ENVELOPE, chatPostDigest, chatPostOperationId, isChatPost } from "./chat-post-confirmation.mjs";
 import { actionApproval, confirmations } from "./confirmations.mjs";
@@ -31,21 +31,23 @@ function ontologyConnection(input) {
 	if (memberId === void 0) return null;
 	const origin = appOrigin(input.environment ?? process.env);
 	const token = input.token ?? runtimeToken;
+	const chatProtocol = input.chatPosting ? ":chat-post-v1" : "";
+	const sourceProtocol = input.runtimeSource ? ":runtime-source-v1" : "";
 	return defineMcpClientConnection({
 		url: `${origin}/mcp`,
 		description: DESCRIPTION,
-		instanceKey: `${origin}/mcp#member:${memberId}${input.chatPosting ? ":chat-post-v1" : ""}`,
+		instanceKey: `${origin}/mcp#member:${memberId}${chatProtocol}${sourceProtocol}`,
 		approval: actionApproval(ontologyTools(input)),
-		...input.chatPosting ? { toolCall: { providedArguments: { [CHAT_POST_ENVELOPE]: (ctx) => {
+		...input.chatPosting || input.runtimeSource ? { toolCall: { providedArguments: { [CHAT_POST_ENVELOPE]: (ctx) => {
 			actAsHeaders({
 				principal: ctx.session.auth.current,
 				expectedMemberId: memberId
 			});
-			const base = {
-				version: 1,
-				session_id: ctx.session.id,
-				call_id: ctx.callId
-			};
+			const base = compatibleRuntimeEnvelope(runtimeEnvelope({
+				principal: ctx.session.auth.current,
+				sessionId: ctx.session.id,
+				callId: ctx.callId
+			}), input.runtimeSource === true);
 			if (!isChatPost(ctx.toolName)) return base;
 			const saved = confirmations.get()[ctx.callId];
 			const preview = saved?.description?.chatPost;
@@ -56,7 +58,8 @@ function ontologyConnection(input) {
 				source: {
 					provider: "telegram",
 					chat_id: saved.source.chatId,
-					thread_id: saved.source.threadId
+					thread_id: saved.source.threadId,
+					...base.source
 				},
 				expected: {
 					chat_id: preview.chatId,
@@ -84,15 +87,18 @@ function ontologyConnection(input) {
 async function ontologyConnectionForTurn(input) {
 	const memberId = memberIdOf(input.principal);
 	if (memberId === void 0) return null;
-	let chatPosting = false;
+	let capabilities = {
+		chatPosting: false,
+		runtimeSource: false
+	};
 	try {
-		chatPosting = await ontologyTools(input).supportsChatPosting(memberId);
+		capabilities = await ontologyTools(input).capabilities(memberId);
 	} catch (error) {
 		console.warn("Chat posting capability unavailable; keeping the compatible ontology connection.", error);
 	}
 	return ontologyConnection({
 		...input,
-		chatPosting
+		...capabilities
 	});
 }
 export { ACT_AS_HEADER, MemberRequiredError, actAsHeaders, ontologyConnection, ontologyConnectionForTurn };

package/dist/extension/lib/ontology-gateway.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf, u as runtimeEnvelope } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { object } from "./confirmation-description.mjs";
 import { readOntologyMetadata } from "./ontology-metadata-read.mjs";
 async function ontologyMetadata(memberId, operation, input, context, options = {}) {
@@ -16,7 +16,14 @@ async function ontologyMetadata(memberId, operation, input, context, options = {
 			name: operation,
 			arguments: input
 		}
-	}, context, options);
+	}, context, {
+		...options,
+		envelope: runtimeEnvelope({
+			principal,
+			sessionId: context.session.id,
+			callId: context.callId
+		})
+	});
 	return result.structuredContent === void 0 ? result : object(result.structuredContent);
 }
 async function ontologyInspect(memberId, input, context, options = {}) {

package/dist/extension/lib/ontology-metadata-read.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { redactDiagnostic } from "./diagnostics.mjs";
 import { object } from "./confirmation-description.mjs";
 import { OntologyToolRejected, ontologyTools } from "./ontology-tools.mjs";

package/dist/extension/lib/ontology-tools.d.ts

@@ -1,3 +1,4 @@
+import { type RuntimeEnvelope } from "./runtime-envelope.js";
 import type { SessionAuthContext } from "eve/context";
 import type { ActionAnnotations } from "./confirmations.js";
 import { type Environment } from "./environment.js";
@@ -13,17 +14,23 @@ export declare class OntologyActionNotPermitted extends Error {
 /** A fresh, permission-filtered catalog. Listing tools cannot run an action's prepare step. */
 export declare function ontologyTools(options?: {
     readonly principal?: SessionAuthContext | null;
+    readonly envelope?: RuntimeEnvelope;
     readonly environment?: Environment;
     readonly token?: RuntimeToken;
     readonly fetch?: typeof fetch;
 }): {
     rpc: (memberId: string, method: string, params: Record<string, unknown>, signal?: AbortSignal) => Promise<Record<string, unknown>>;
     list(memberId: string): Promise<Record<string, unknown>[]>;
+    supportsRuntimeSource(memberId: string, signal?: AbortSignal): Promise<boolean>;
+    capabilities(memberId: string): Promise<{
+        chatPosting: boolean;
+        runtimeSource: boolean;
+    }>;
     supportsChatPosting(memberId: string): Promise<boolean>;
-    labels(memberId: string, action: string, input?: Readonly<Record<string, unknown>>): Promise<ActionAnnotations>;
+    labels(memberId: string, action: string, input?: Readonly<Record<string, unknown>>, signal?: AbortSignal): Promise<ActionAnnotations>;
     describe(memberId: string, action: string, input: Readonly<Record<string, unknown>>): Promise<import("./confirmation-description.js").ConfirmationDescription>;
 };
-export declare function ontologyToolLabels(options?: Parameters<typeof ontologyTools>[0]): (memberId: string, action: string, input?: Readonly<Record<string, unknown>>) => Promise<ActionAnnotations>;
+export declare function ontologyToolLabels(options?: Parameters<typeof ontologyTools>[0]): (memberId: string, action: string, input?: Readonly<Record<string, unknown>>, signal?: AbortSignal) => Promise<ActionAnnotations>;
 /** MCP normalizes an authored camelCase action to snake_case. */
 export declare function actionToolName(entity: string, action: string): string;
 /** One target contract for native and MCP attachment promotion; never trust supplied safety hints. */

package/dist/extension/lib/ontology-tools.mjs

@@ -5,10 +5,10 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { identityProviderOf, memberIdOf } from "./telegram/principal.mjs";
-import { runtimeToken } from "./runtime-token.mjs";
+import { c as compatibleRuntimeEnvelope, i as memberIdOf, r as identityProviderOf, s as RUNTIME_SOURCE_PROTOCOL, u as runtimeEnvelope } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { redactDiagnostic } from "./diagnostics.mjs";
 import { describeConfirmation, object } from "./confirmation-description.mjs";
+import { runtimeToken } from "./runtime-token.mjs";
 import { describeChatPost, isChatPost, supportsChatPost } from "./chat-post-confirmation.mjs";
 import { randomUUID } from "node:crypto";
 var OntologyToolRejected = class extends Error {
@@ -18,7 +18,19 @@ var OntologyActionNotPermitted = class extends Error {
 	code = "ontology_action_not_permitted";
 };
 function ontologyTools(options = {}) {
+	const runtimeSources = new Map();
 	async function rpc(memberId, method, params, signal) {
+		if (method === "tools/call") {
+			const envelope = options.envelope ?? runtimeEnvelope({ principal: memberIdOf(options.principal) === memberId ? options.principal : null });
+			if (envelope.source !== void 0 && !runtimeSources.has(memberId)) await rpc(memberId, "tools/list", {}, signal);
+			params = {
+				...params,
+				arguments: {
+					...object(params.arguments),
+					_segmentstream: compatibleRuntimeEnvelope(envelope, runtimeSources.get(memberId) === true)
+				}
+			};
+		}
 		const provider = memberIdOf(options.principal) === memberId ? identityProviderOf(options.principal) : void 0;
 		const credential = await (options.token ?? runtimeToken)();
 		const secrets = new Set([credential]);
@@ -46,6 +58,7 @@ function ontologyTools(options = {}) {
 			const body = object(await response.json());
 			if (body.error !== void 0) throw new Error("Ontology metadata unavailable.", { cause: body.error });
 			const result = object(body.result);
+			if (method === "tools/list" && Array.isArray(result.tools)) runtimeSources.set(memberId, result.tools.map(object).some((tool) => object(tool._meta)[RUNTIME_SOURCE_PROTOCOL] === 1));
 			if (result.isError === true) {
 				const message = (Array.isArray(result.content) ? result.content : []).map(object).filter((part) => part.type === "text" && typeof part.text === "string").map((part) => part.text).join("\n");
 				if ([
@@ -119,12 +132,23 @@ function ontologyTools(options = {}) {
 			const result = await rpc(memberId, "tools/list", {});
 			return Array.isArray(result.tools) ? result.tools.map(object) : [];
 		},
+		async supportsRuntimeSource(memberId, signal) {
+			if (!runtimeSources.has(memberId)) await rpc(memberId, "tools/list", {}, signal);
+			return runtimeSources.get(memberId) === true;
+		},
+		async capabilities(memberId) {
+			const result = await rpc(memberId, "tools/list", {});
+			return {
+				chatPosting: Array.isArray(result.tools) && result.tools.map(object).some(supportsChatPost),
+				runtimeSource: runtimeSources.get(memberId) === true
+			};
+		},
 		async supportsChatPosting(memberId) {
 			const result = await rpc(memberId, "tools/list", {});
 			return Array.isArray(result.tools) && result.tools.map(object).some(supportsChatPost);
 		},
-		async labels(memberId, action, input = {}) {
-			const { tool } = await resolve(memberId, action, input);
+		async labels(memberId, action, input = {}, signal) {
+			const { tool } = await resolve(memberId, action, input, signal);
 			return {
 				...object(tool.annotations),
 				confirmation: object(object(tool.inputSchema).properties)._confirmation !== void 0

package/dist/extension/lib/runtime-envelope.d.ts

@@ -0,0 +1,28 @@
+import type { RuntimeSource } from "@segmentstream-cloud/ontology";
+import type { SessionAuthContext } from "eve/context";
+import type { TelegramMessage } from "eve/channels/telegram";
+import type { StagedFile } from "./telegram/inbound-request.js";
+export type RuntimeEnvelope = {
+    readonly version: 1;
+    readonly session_id: string;
+    readonly call_id: string;
+    readonly operation_id?: string;
+    readonly source?: RuntimeSource;
+    readonly expected?: {
+        readonly chat_id: string;
+        readonly digest: string;
+    };
+};
+/** The source comes from the verified Telegram message and admitted storage results. */
+export declare function telegramRuntimeSource(message: Pick<TelegramMessage, "chat" | "messageId" | "messageThreadId" | "replyToMessage" | "from" | "raw" | "attachments">, files?: ReadonlyMap<string, StagedFile>, callbackQueryId?: string): RuntimeSource;
+/** Session auth is SDK-owned; no tool argument is read while rebuilding provenance. */
+export declare function principalRuntimeSource(principal?: SessionAuthContext | null): RuntimeSource | undefined;
+export declare function runtimeEnvelope(input?: {
+    readonly principal?: SessionAuthContext | null;
+    readonly sessionId?: string;
+    readonly callId?: string;
+    readonly source?: RuntimeSource;
+}): RuntimeEnvelope;
+/** Older strict ontology schemas accept only the original chat identity fields. */
+export declare function compatibleRuntimeEnvelope(envelope: RuntimeEnvelope, extended: boolean): RuntimeEnvelope;
+export declare const RUNTIME_SOURCE_PROTOCOL = "segmentstream/runtime-source";

package/dist/extension/lib/runtime-envelope.mjs

@@ -0,0 +1,8 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { c as compatibleRuntimeEnvelope, d as telegramRuntimeSource, l as principalRuntimeSource, s as RUNTIME_SOURCE_PROTOCOL, u as runtimeEnvelope } from "../../_chunks/principal-VFQWqe5S.mjs";
+export { RUNTIME_SOURCE_PROTOCOL, compatibleRuntimeEnvelope, principalRuntimeSource, runtimeEnvelope, telegramRuntimeSource };