@segmentstream/agent 0.13.0 → 0.14.0

package/dist/extension/lib/stored-files.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { redactDiagnostic } from "./diagnostics.mjs";
 import { object } from "./confirmation-description.mjs";
 import { ontologyTools } from "./ontology-tools.mjs";

package/dist/extension/lib/telegram/adapter.mjs

@@ -7,19 +7,20 @@ __eveCreateRequire(import.meta.url);
 import { telegramText, withTelegramTexts } from "./texts.mjs";
 import { manifestOf } from "../../config.mjs";
 import { appOrigin, channelsEnabled, proxyEnvironment, runtimeIdentityEnvironment, webhookSecret } from "../environment.mjs";
-import { conversationLanguage, telegramPrincipal } from "./principal.mjs";
+import { n as conversationLanguage, o as telegramPrincipal } from "../../../_chunks/principal-VFQWqe5S.mjs";
+import { confirmationLocale } from "./confirmation-text.mjs";
+import { telegramSendScope } from "./send-queue.mjs";
+import { d as failureText, h as withDeliveryLocale, i as withReplacedText, m as safeTelegramFetch, n as currentInboundRequest, o as currentLocale, p as reportTelegramError, r as runInboundRequest, t as InboundRequest } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
 import { chooseModel } from "../../model.mjs";
 import { groupRoutingHealth } from "../group-routing/health.mjs";
 import { decisionRouter } from "../group-routing/router.mjs";
 import { runtimeToken } from "../runtime-token.mjs";
 import { conversations } from "../conversations.mjs";
 import { archivedRoutingMessages } from "../group-routing/routing-context.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-BLeBanNg.mjs";
-import { confirmationLocale } from "./confirmation-text.mjs";
-import { telegramSendScope } from "./send-queue.mjs";
-import { d as failureText, h as withDeliveryLocale, i as withReplacedText, m as safeTelegramFetch, n as currentInboundRequest, o as currentLocale, p as reportTelegramError, r as runInboundRequest, t as InboundRequest } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
-import { attachmentLifecycle } from "./lifecycle.mjs";
 import { scopedAddress, sessionPolicy } from "./sessions.mjs";
+import { handleWorkspaceCallback, isWorkspaceCallback } from "./callbacks.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-BB2uSGsI.mjs";
+import { attachmentLifecycle } from "./lifecycle.mjs";
 import { observedMessages } from "./observed.mjs";
 import { expireDeferredCards, handleDeferredCallback, isDeferredCallback } from "./deferred-confirmations.mjs";
 import { gatewayImageDescriber } from "./images.mjs";
@@ -307,6 +308,20 @@ function segmentstreamTelegram(options) {
 			const inbound = currentInboundRequest();
 			if (inbound !== void 0) inbound.locale = query.from.languageCode;
 			try {
+				if (isWorkspaceCallback(query.data)) {
+					await handleWorkspaceCallback({
+						context,
+						query,
+						configuration: settings().callbacks,
+						admission: options.admission?.() ?? manifestOf({}),
+						scope: options.sessions().scope,
+						identities: pairing(),
+						environment,
+						token,
+						...options.fetch ? { fetch: options.fetch } : {}
+					});
+					return;
+				}
 				if (isDeferredCallback(query.data)) {
 					await handleDeferredCallback({
 						context,

package/dist/extension/lib/telegram/attachments-send.mjs

@@ -5,12 +5,12 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin, channelsEnabled, proxyEnvironment } from "../environment.mjs";
-import "./principal.mjs";
-import { runtimeToken } from "../runtime-token.mjs";
+import "../../../_chunks/principal-VFQWqe5S.mjs";
 import { redactDiagnostic } from "../diagnostics.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
 import { inTelegramSendQueue, telegramSendScope } from "./send-queue.mjs";
 import { d as failureText, f as formattingRefused, l as customerMessage, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
+import { runtimeToken } from "../runtime-token.mjs";
 import { MAXIMUM_PROXY_BODY_BYTES, connectionProxy } from "../connection-proxy.mjs";
 import { ACT_AS_HEADER } from "../ontology-connection.mjs";
 import { AttachmentError, CONVERSATION_HEADER, SESSION_HEADER } from "../attachments.mjs";

package/dist/extension/lib/telegram/callbacks.d.ts

@@ -0,0 +1,18 @@
+import type { TelegramCallbackQuery, TelegramContext } from "eve/channels/telegram";
+import type { AdmissionSettings, SessionSettings, TelegramSettings } from "../../config.js";
+import type { AgentIdentities } from "../identities.js";
+import type { Environment } from "../environment.js";
+import type { RuntimeToken } from "../runtime-token.js";
+export declare const isWorkspaceCallback: (data?: string) => boolean;
+/** A single dispatch and acknowledgement. Token policy and business idempotency belong to the workspace. */
+export declare function handleWorkspaceCallback(input: {
+    readonly context: TelegramContext;
+    readonly query: TelegramCallbackQuery;
+    readonly configuration?: TelegramSettings["callbacks"];
+    readonly scope: SessionSettings["scope"];
+    readonly admission: AdmissionSettings;
+    readonly identities: AgentIdentities;
+    readonly environment?: Environment;
+    readonly token?: RuntimeToken;
+    readonly fetch?: typeof fetch;
+}): Promise<void>;

package/dist/extension/lib/telegram/callbacks.mjs

@@ -0,0 +1,155 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { admitMessage } from "../admission.mjs";
+import { telegramText } from "./texts.mjs";
+import { d as telegramRuntimeSource, i as memberIdOf, o as telegramPrincipal, u as runtimeEnvelope } from "../../../_chunks/principal-VFQWqe5S.mjs";
+import { object } from "../confirmation-description.mjs";
+import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
+import { formatAddress, parseAddress, scopedAddress } from "./sessions.mjs";
+import { workspaceAction } from "./workspace-action.mjs";
+const isWorkspaceCallback = (data) => data?.startsWith("ws:") === true;
+async function handleWorkspaceCallback(input) {
+	const { query, context } = input;
+	const locale = query.from.languageCode;
+	let acknowledgement;
+	let showAlert = false;
+	let result;
+	let principal;
+	const controller = new AbortController();
+	let timer;
+	try {
+		const token = query.data?.slice(3) ?? "";
+		if (!query.message || query.from.isBot || !token || new TextEncoder().encode(token).byteLength > 60) acknowledgement = telegramText("callback", "unknown", locale);
+		else if (input.configuration === void 0) acknowledgement = telegramText("callback", "unsupported", locale);
+		else {
+			const message = {
+				...query.message,
+				from: query.from,
+				attachments: [],
+				text: "",
+				caption: "",
+				raw: {}
+			};
+			const dispatch = async () => {
+				const lookup = await input.identities.lookup({
+					provider: "telegram",
+					externalId: query.from.id
+				});
+				if (lookup.status !== "paired") {
+					acknowledgement = telegramText("callback", "forbidden", locale);
+					return;
+				}
+				controller.signal.throwIfAborted();
+				principal = telegramPrincipal({
+					message,
+					member: lookup.member,
+					callbackQueryId: query.id
+				});
+				return workspaceAction({
+					...input,
+					configuration: input.configuration,
+					principal,
+					memberId: lookup.member.id,
+					input: { token },
+					signal: controller.signal,
+					envelope: runtimeEnvelope({
+						source: telegramRuntimeSource(message, void 0, query.id),
+						sessionId: `telegram:callback:${query.id}`,
+						callId: query.id
+					})
+				});
+			};
+			const deadline = new Promise((resolve) => {
+				timer = setTimeout(() => {
+					controller.abort();
+					reportTelegramError("workspace_callback_timeout", new Error("Telegram callback dispatch exceeded 10 seconds."), { callbackQueryId: query.id });
+					resolve(void 0);
+				}, 1e4);
+			});
+			result = await Promise.race([dispatch(), deadline]);
+			if (result !== void 0) {
+				acknowledgement = typeof result.acknowledgement === "string" && result.acknowledgement.length <= 200 ? result.acknowledgement : void 0;
+				showAlert = result.show_alert === true;
+			}
+		}
+	} catch (error) {
+		reportTelegramError("workspace_callback_failed", error, { callbackQueryId: query.id });
+		acknowledgement = controller.signal.aborted ? void 0 : telegramText("callback", "error", locale);
+	} finally {
+		if (timer !== void 0) clearTimeout(timer);
+		try {
+			await context.telegram.answerCallbackQuery({
+				callbackQueryId: query.id,
+				...acknowledgement === void 0 ? {} : { text: acknowledgement },
+				showAlert
+			});
+		} catch (error) {
+			reportTelegramError("workspace_callback_ack_failed", error, { callbackQueryId: query.id });
+		}
+	}
+	if (result === void 0 || query.message === void 0 || principal === void 0) return;
+	const edit = object(result.edit);
+	try {
+		if (typeof edit.text === "string" || edit.reply_markup !== void 0) {
+			const payload = {
+				chat_id: query.message.chat.id,
+				message_id: Number(query.message.messageId),
+				...typeof edit.text === "string" && edit.text.length <= 4096 ? { text: edit.text } : {},
+				...[
+					"MarkdownV2",
+					"Markdown",
+					"HTML"
+				].includes(String(edit.parse_mode)) ? { parse_mode: edit.parse_mode } : {},
+				...Array.isArray(edit.entities) && edit.entities.length <= 100 ? { entities: edit.entities } : {},
+				...edit.reply_markup === void 0 ? {} : { reply_markup: edit.reply_markup }
+			};
+			const encoded = JSON.stringify(payload);
+			if (encoded.length > 32768) throw new Error("The callback edit exceeds the Telegram hook limit.");
+			await context.telegram.request(typeof edit.text === "string" ? "editMessageText" : "editMessageReplyMarkup", JSON.parse(encoded));
+		}
+	} catch (error) {
+		reportTelegramError("workspace_callback_edit_failed", error, { callbackQueryId: query.id });
+	}
+	if (typeof result.context === "string" && result.context.trim() && result.context.length <= 16384) try {
+		const admitted = await admitMessage({
+			identity: {
+				provider: "telegram",
+				externalId: query.from.id,
+				chat: query.message.chat.type === "private" ? "private" : "group",
+				turn: true
+			},
+			identities: input.identities,
+			settings: input.admission,
+			languageCode: locale,
+			sendNotice: (text) => context.telegram.post(text),
+			noticeFailed: (error) => reportTelegramError("workspace_callback_notice_failed", error)
+		});
+		if (admitted.status !== "existing" && admitted.status !== "created" || admitted.member.id !== memberIdOf(principal)) return;
+		const sessions = currentInboundRequest()?.sessions;
+		if (sessions === void 0) throw new Error("The callback has no session transport.");
+		const address = scopedAddress(formatAddress({
+			chatId: query.message.chat.type === "private" ? query.from.id : query.message.chat.id,
+			messageThreadId: String(query.message.messageThreadId ?? ""),
+			conversationId: query.message.chat.type === "private" ? "" : query.message.messageId
+		}), input.scope);
+		const session = sessions.from(address);
+		if (session.send === void 0) throw new Error("The callback session cannot enqueue turns.");
+		await session.send(result.context, {
+			auth: principal,
+			turnPolicy: "queue",
+			state: {
+				chatId: query.message.chat.id,
+				chatType: query.message.chat.type,
+				messageThreadId: query.message.messageThreadId ?? null,
+				conversationId: parseAddress(address).conversationId || null
+			}
+		});
+	} catch (error) {
+		reportTelegramError("workspace_callback_turn_failed", error, { callbackQueryId: query.id });
+	}
+}
+export { handleWorkspaceCallback, isWorkspaceCallback };

package/dist/extension/lib/telegram/confirmation-expiry.mjs

@@ -6,10 +6,10 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { withTelegramTexts } from "./texts.mjs";
 import { proxyEnvironment } from "../environment.mjs";
-import { runtimeToken } from "../runtime-token.mjs";
-import { conversations } from "../conversations.mjs";
 import { telegramSendScope } from "./send-queue.mjs";
 import { m as safeTelegramFetch, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
+import { runtimeToken } from "../runtime-token.mjs";
+import { conversations } from "../conversations.mjs";
 import { deferredConfirmations } from "../deferred-confirmations.mjs";
 import { expireDeferredRecord } from "./deferred-confirmations.mjs";
 import { connectionProxy } from "../connection-proxy.mjs";

package/dist/extension/lib/telegram/confirmations.mjs

@@ -5,16 +5,16 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { telegramText } from "./texts.mjs";
-import { memberIdOf, telegramPrincipal } from "./principal.mjs";
-import { agentMessage, observedChatKey, withConfirmationPrompt } from "../group-routing/observed.mjs";
-import { conversationEvent } from "../conversations.mjs";
+import { i as memberIdOf, o as telegramPrincipal } from "../../../_chunks/principal-VFQWqe5S.mjs";
 import { humanText } from "../confirmation-description.mjs";
 import { renderConfirmation, withConfirmationText } from "./confirmation-text.mjs";
 import { chatPostCard, chatPostCardStatus, chatPostReceipt, withChatPostCard } from "./chat-post-card.mjs";
 import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
+import { agentMessage, observedChatKey, withConfirmationPrompt } from "../group-routing/observed.mjs";
+import { conversationEvent } from "../conversations.mjs";
+import { formatAddress, scopedAddress } from "./sessions.mjs";
 import { chatPostOperationId, isChatPost } from "../chat-post-confirmation.mjs";
 import { confirmations } from "../confirmations.mjs";
-import { formatAddress, scopedAddress } from "./sessions.mjs";
 import { postDeferredCard } from "./deferred-confirmations.mjs";
 import { answerMarker, isPendingQuestion, pendingQuestions, questionKey } from "../questions.mjs";
 import { createHash } from "node:crypto";

package/dist/extension/lib/telegram/conversations.mjs

@@ -4,10 +4,10 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
+import { n as currentInboundRequest, p as reportTelegramError, s as currentThreadId } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
 import { currentConfirmationPrompt, observedChatKey } from "../group-routing/observed.mjs";
 import { conversationEvent } from "../conversations.mjs";
 import { archivedRoutingMessages } from "../group-routing/routing-context.mjs";
-import { n as currentInboundRequest, p as reportTelegramError, s as currentThreadId } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
 import { contentShape, messageContent } from "./content.mjs";
 import { messageMetadata } from "./observed.mjs";
 import { reportMembership } from "./membership.mjs";

package/dist/extension/lib/telegram/deferred-confirmations.mjs

@@ -5,18 +5,18 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { telegramText, withTelegramLocale } from "./texts.mjs";
-import { telegramPrincipal } from "./principal.mjs";
-import { agentMessage, observedChatKey, withConfirmationPrompt } from "../group-routing/observed.mjs";
-import { conversationEvent } from "../conversations.mjs";
+import { o as telegramPrincipal } from "../../../_chunks/principal-VFQWqe5S.mjs";
 import { humanText } from "../confirmation-description.mjs";
 import { renderConfirmation, withConfirmationText } from "./confirmation-text.mjs";
 import { chatPostCard, chatPostCardStatus, chatPostReceipt, withChatPostCard } from "./chat-post-card.mjs";
 import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
+import { agentMessage, observedChatKey, withConfirmationPrompt } from "../group-routing/observed.mjs";
+import { conversationEvent } from "../conversations.mjs";
+import { formatAddress } from "./sessions.mjs";
 import { CONFIRMATION_TTL_MS, inputHash } from "../confirmations.mjs";
 import { OntologyToolRejected } from "../ontology-tools.mjs";
 import { confirmationOutcome } from "../confirmation-outcome.mjs";
 import { deferredConfirmations, deferredKey, runDeferredAction } from "../deferred-confirmations.mjs";
-import { formatAddress } from "./sessions.mjs";
 import { telegramTextLinks } from "@segmentstream-cloud/ontology/telegram";
 const PREFIX = "ss-confirm:d:";
 const isDeferredCallback = (data) => data?.startsWith(PREFIX) === true;

package/dist/extension/lib/telegram/files.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { conversationLanguage } from "./principal.mjs";
+import { n as conversationLanguage } from "../../../_chunks/principal-VFQWqe5S.mjs";
 import { d as failureText, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
 import { describableImage, describeReceivedImage } from "./images.mjs";
 import { MAXIMUM_ATTACHMENT_BYTES, attachmentUrl } from "../attachments.mjs";

package/dist/extension/lib/telegram/health.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-BLeBanNg.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-BB2uSGsI.mjs";
 import { runtimeRequestFailure } from "./runtime-request.mjs";
 import { GET } from "eve/channels";
 const HEALTH_ROUTE = "/eve/v1/telegram/health";

package/dist/extension/lib/telegram/inbound.mjs

@@ -6,16 +6,16 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { effectiveGroupPolicy, groupPolicy } from "../group-routing/policy.mjs";
 import { admitMessage, localizedText } from "../admission.mjs";
-import { conversationLanguage, telegramPrincipal } from "./principal.mjs";
+import { d as telegramRuntimeSource, n as conversationLanguage, o as telegramPrincipal, u as runtimeEnvelope } from "../../../_chunks/principal-VFQWqe5S.mjs";
+import { p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
 import { addressingReason, conversationKey, otherRecipient } from "../group-routing/signals.mjs";
 import { conversationAddressing, conversationState } from "../group-routing/conversation.mjs";
 import { questionInvitation } from "../group-routing/engagement.mjs";
 import { conversationContext, routeMessage } from "../group-routing/router.mjs";
 import { observedContext } from "../group-routing/observed.mjs";
 import { debounceBurst, routingBurst } from "../group-routing/burst.mjs";
-import { p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
-import { AttachmentLifecycleNotPermitted, startTypingHeartbeat, typingUntilComplete } from "./lifecycle.mjs";
 import { formatAddress, messageAddress, scopedAddress } from "./sessions.mjs";
+import { AttachmentLifecycleNotPermitted, startTypingHeartbeat, typingUntilComplete } from "./lifecycle.mjs";
 import { contentShape, messageContent } from "./content.mjs";
 import { messageAudience } from "./audience.mjs";
 import { attachmentKind, messageMetadata } from "./observed.mjs";
@@ -757,6 +757,7 @@ async function handleInboundMessage(input) {
 		} : mediaPlan },
 		...dependencies.describeImage === void 0 ? {} : { describeImage: dependencies.describeImage }
 	});
+	if (input.request !== void 0) input.request.files = files;
 	if (input.request?.lifecycle !== void 0) {
 		const lifecycle = input.request.lifecycle;
 		const key = input.request.lifecycleKey;
@@ -787,7 +788,10 @@ async function handleInboundMessage(input) {
 					outcome = { result: (await dependencies.attachments.promote({
 						memberId: member.id,
 						conversation: `telegram:${sent.chat.id}`
-					}, file.attachment.id, stored.retain)).result };
+					}, file.attachment.id, {
+						...stored.retain,
+						runtime: runtimeEnvelope({ source: telegramRuntimeSource(sent, files) })
+					})).result };
 				} catch (error) {
 					outcome = { error: reportTelegramError("attachment_retention_failed", error, { attachmentId: file.attachment.id }) };
 				}

package/dist/extension/lib/telegram/lifecycle.mjs

@@ -4,16 +4,21 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-BLeBanNg.mjs";
+import { d as telegramRuntimeSource, l as principalRuntimeSource, u as runtimeEnvelope } from "../../../_chunks/principal-VFQWqe5S.mjs";
 import { object } from "../confirmation-description.mjs";
 import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
 import { needsConfirmation } from "../confirmations.mjs";
 import { OntologyActionNotPermitted, actionToolName, ontologyTools } from "../ontology-tools.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-BB2uSGsI.mjs";
 var AttachmentLifecycleNotPermitted = class extends Error {
 	code = "attachment_lifecycle_not_permitted";
 };
 function attachmentLifecycle(options) {
-	const tools = ontologyTools(options);
+	const source = () => options.message.raw === void 0 ? principalRuntimeSource(options.principal) : telegramRuntimeSource({
+		...options.message,
+		attachments: options.message.attachments ?? [],
+		raw: options.message.raw
+	}, currentInboundRequest()?.files);
 	const action = actionToolName(options.configuration.entity, options.configuration.action);
 	return async (phase, data = {}) => {
 		console.info("[segmentstream] telegram.phase", {
@@ -40,6 +45,13 @@ function attachmentLifecycle(options) {
 				...options.configuration.contextVersion === 2 && typeof options.message.raw?.date === "number" && Number.isSafeInteger(options.message.raw.date) && options.message.raw.date > 0 ? { source_at: options.message.raw.date * 1e3 } : {}
 			}
 		};
+		const tools = ontologyTools({
+			...options,
+			envelope: runtimeEnvelope({
+				principal: options.principal,
+				source: source()
+			})
+		});
 		const labels = await tools.labels(options.memberId, action, input).catch((error) => {
 			throw error instanceof OntologyActionNotPermitted ? new AttachmentLifecycleNotPermitted("The sender may not run the lifecycle action.", { cause: error }) : error;
 		});

package/dist/extension/lib/telegram/principal.d.ts

@@ -14,6 +14,7 @@ export declare function telegramPrincipal(input: {
     };
     readonly member: PairedMember;
     readonly conversationLanguage?: string;
+    readonly callbackQueryId?: string;
 }): SessionAuthContext;
 /** Short answers and attachment-only turns retain the recent chat language when known. */
 export declare function conversationLanguage(texts: readonly string[]): "ru" | "en" | undefined;

package/dist/extension/lib/telegram/principal.mjs

@@ -4,53 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-const TELEGRAM_AUTHENTICATOR = "segmentstream-telegram";
-function isGroup(message) {
-	return message.chat.type === "group" || message.chat.type === "supergroup";
-}
-function telegramPrincipal(input) {
-	const { message, member } = input;
-	const sender = message.from.id;
-	const attributes = {
-		memberId: member.id,
-		identityProvider: "telegram",
-		roles: member.roles,
-		chatId: message.chat.id,
-		chatType: message.chat.type
-	};
-	if (member.name !== null) attributes.memberName = member.name;
-	if (message.messageThreadId !== void 0) attributes.messageThreadId = String(message.messageThreadId);
-	if (message.from.username !== void 0) attributes.username = message.from.username;
-	const locale = member.locale ?? message.from.languageCode;
-	if (locale !== void 0) attributes.locale = locale;
-	const language = input.conversationLanguage ?? conversationLanguage([message.text || message.caption]);
-	if (language !== void 0) attributes.conversationLanguage = language;
-	return {
-		authenticator: TELEGRAM_AUTHENTICATOR,
-		issuer: "telegram",
-		principalId: isGroup(message) ? `telegram:${message.chat.id}:${sender}` : `telegram:${sender}`,
-		principalType: "user",
-		subject: sender,
-		attributes
-	};
-}
-function conversationLanguage(texts) {
-	for (const text of texts) {
-		if (/[\u0430-\u044f\u0451]/iu.test(text)) return "ru";
-		if ((text.match(/\b[a-z]+\b/gi)?.length ?? 0) >= 3) return "en";
-	}
-}
-function memberIdOf(principal) {
-	const memberId = principal?.attributes.memberId;
-	return typeof memberId === "string" && memberId !== "" ? memberId : void 0;
-}
-function rolesOf(principal) {
-	const roles = principal?.attributes.roles;
-	if (typeof roles === "string") return [roles];
-	return roles ?? [];
-}
-function identityProviderOf(principal) {
-	const provider = principal?.attributes.identityProvider;
-	return typeof provider === "string" && provider !== "" ? provider : void 0;
-}
+import { a as rolesOf, i as memberIdOf, n as conversationLanguage, o as telegramPrincipal, r as identityProviderOf, t as TELEGRAM_AUTHENTICATOR } from "../../../_chunks/principal-VFQWqe5S.mjs";
 export { TELEGRAM_AUTHENTICATOR, conversationLanguage, identityProviderOf, memberIdOf, rolesOf, telegramPrincipal };

package/dist/extension/lib/telegram/sessions.d.ts

@@ -1,5 +1,6 @@
 import type { TelegramMessage } from "eve/channels/telegram";
-import type { CancelTurnResult } from "eve/channels";
+import type { CancelTurnResult, ChannelSource } from "eve/channels";
+import type { TelegramChannelState } from "eve/channels/telegram";
 import type { SessionSettings } from "../../config.js";
 /**
  * Session policy for the Telegram channel (`agent-design.md`, section 4, and docs/agent.md,
@@ -62,6 +63,7 @@ export interface SessionOperations {
         }) => Promise<CancelTurnResult>;
     } | undefined>;
     readonly from: (address: string) => {
+        readonly send?: ChannelSource<TelegramChannelState>["send"];
         compact(): Promise<unknown>;
         clear(): Promise<unknown>;
     };

package/dist/extension/lib/telegram/silent.mjs

@@ -4,12 +4,12 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import "./principal.mjs";
-import { agentMessage, observedChatKey } from "../group-routing/observed.mjs";
+import "../../../_chunks/principal-VFQWqe5S.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
 import { splitTelegramText } from "./format.mjs";
 import { inTelegramSendQueue } from "./send-queue.mjs";
 import { a as TelegramDeliveryError, l as customerMessage, o as currentLocale, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
+import { agentMessage, observedChatKey } from "../group-routing/observed.mjs";
 const SILENT_MARKERS = new Set(["[silent]", "no_reply"]);
 function isSilentReply(text) {
 	return SILENT_MARKERS.has(text.trim().toLowerCase());

package/dist/extension/lib/telegram/turn-errors.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { telegramText } from "./texts.mjs";
-import { memberIdOf } from "./principal.mjs";
+import { i as memberIdOf } from "../../../_chunks/principal-VFQWqe5S.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
 import { c as customerCopy, d as failureText, o as currentLocale, p as reportTelegramError } from "../../../_chunks/inbound-request-BXhiIph-.mjs";
 const telegramFailureEvents = {

package/dist/extension/lib/telegram/workspace-action.d.ts

@@ -0,0 +1,21 @@
+import type { SessionAuthContext } from "eve/context";
+import type { RuntimeEnvelope } from "../runtime-envelope.js";
+import type { Environment } from "../environment.js";
+import type { RuntimeToken } from "../runtime-token.js";
+export interface WorkspaceActionHook {
+    readonly entity: string;
+    readonly action: string;
+    readonly contextVersion: 2;
+}
+/** A declared routine action, re-authorized as the verified member on every event. */
+export declare function workspaceAction(input: {
+    readonly configuration: WorkspaceActionHook;
+    readonly principal: SessionAuthContext;
+    readonly memberId: string;
+    readonly input: Readonly<Record<string, unknown>>;
+    readonly envelope: RuntimeEnvelope;
+    readonly environment?: Environment;
+    readonly token?: RuntimeToken;
+    readonly fetch?: typeof fetch;
+    readonly signal?: AbortSignal;
+}): Promise<Record<string, unknown>>;

package/dist/extension/lib/telegram/workspace-action.mjs

@@ -0,0 +1,23 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { object } from "../confirmation-description.mjs";
+import { needsConfirmation } from "../confirmations.mjs";
+import { actionToolName, ontologyTools } from "../ontology-tools.mjs";
+async function workspaceAction(input) {
+	const tools = ontologyTools(input);
+	const action = actionToolName(input.configuration.entity, input.configuration.action);
+	if (needsConfirmation(await tools.labels(input.memberId, action, input.input, input.signal))) throw new Error("A Telegram workspace hook must be a permitted routine action.");
+	if (!await tools.supportsRuntimeSource(input.memberId, input.signal)) throw new Error("A Telegram workspace hook requires the runtime-source capability.");
+	const raw = await tools.rpc(input.memberId, "tools/call", {
+		name: action,
+		arguments: input.input
+	}, input.signal);
+	const envelope = object(raw.structuredContent);
+	if (object(envelope.validation).ok === false) throw new Error("The Telegram workspace hook rejected its event.");
+	return object(envelope.result ?? envelope);
+}
+export { workspaceAction };

package/dist/extension/model.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { isPreview } from "./lib/environment.mjs";
-import { rolesOf } from "./lib/telegram/principal.mjs";
+import { a as rolesOf } from "../_chunks/principal-VFQWqe5S.mjs";
 import { defineDynamic } from "eve";
 function chooseModel(input) {
 	const { choice } = input;

package/dist/extension/tools/attachments_promote.mjs

@@ -4,6 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
+import { u as runtimeEnvelope } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { n as workflowToolResult } from "../../_chunks/workflow-serializable-DVQBWK8p.mjs";
 import segmentstream from "../extension.mjs";
 import { actionApproval } from "../lib/confirmations.mjs";
@@ -73,6 +74,11 @@ var attachments_promote_default = defineTool({
 		const recordId = optionalString(input, "record_id");
 		const actionInput = optionalObject(input, "input");
 		const promoted = await toolAttachments().promote(owner, stringArgument(input, "id"), {
+			runtime: runtimeEnvelope({
+				principal: ctx.session.auth.current,
+				sessionId: ctx.session.id,
+				callId: ctx.callId
+			}),
 			entity: stringArgument(input, "entity"),
 			action: stringArgument(input, "action"),
 			...actionInput === void 0 ? {} : { input: actionInput },

package/dist/extension/tools/ontology.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { memberIdOf } from "../lib/telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import segmentstream from "../extension.mjs";
 import { executeDeferredTool } from "../lib/deferred-confirmations.mjs";
 import { ontologyInspect, ontologyMetadata } from "../lib/ontology-gateway.mjs";

package/dist/extension/tools/questions_ask.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { memberIdOf } from "../lib/telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-VFQWqe5S.mjs";
 import { n as workflowToolResult } from "../../_chunks/workflow-serializable-DVQBWK8p.mjs";
 import { pendingQuestions, questionKey } from "../lib/questions.mjs";
 import { stringArgument } from "../lib/attachment-tools.mjs";