@segmentstream/agent 0.13.0 → 0.15.0

package/README.md

@@ -549,7 +549,7 @@ Eve resolution, so member/topic routing survives a cold start. No second provide
 
 ## Release and migration
 
-The coordinated release uses Agent SDK 0.13.0, Eve 0.76.3, Ontology SDK 0.49.0 and App SDK 0.24.1.
+The coordinated release uses Agent SDK 0.15.0, Eve 0.76.3, Ontology SDK 0.50.1 and App SDK 0.24.1.
 The compatible Cloud archive/API must be deployed first; migrations run only through its CI/CD gate.
 Publish the ontology SDK before the agent SDK. Upgrade the workspace ontology before its agent,
 with the declared Telegram provider mapping and explicit `agent_chat:post_message` grant.
@@ -651,3 +651,9 @@ reports the effective confirmation mode and attachment-lifecycle presence behind
 runtime authentication; source pins and public health alone are not settings-adoption proof.
 
 Telegram 0.13.0 requires workspace-authored pairing and confirmation text. See [workspace Telegram text](../../docs/agent.md#workspace-telegram-text) for keys, limits, neutral fallbacks and unsupported Eve buttons.
+
+Workspace [callback actions](../../docs/agent.md#workspace-callback-actions) and
+[structured Telegram input](../../docs/agent.md#structured-telegram-input) are separate opt-in
+mappings. They require the ontology runtime-source capability and dispatch only a currently
+permitted routine action as the verified member. The workspace owns callback tokens, presentation
+and business idempotency.

package/dist/_chunks/{build-metadata-BLeBanNg.mjs → build-metadata-CJlaXNhc.mjs}

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-var version = "0.13.0";
+var version = "0.15.0";
 function agentBuild(environment = process.env) {
 	return {
 		agent: version,

package/dist/_chunks/{inbound-request-BXhiIph-.mjs → inbound-request-RIRNBxUC.mjs}

@@ -256,6 +256,9 @@ var InboundRequest = class {
 	claimTurn;
 	beginDispatch;
 	finishClaim;
+	structuredContext;
+	recordStructuredContext;
+	beginStructuredContinuation;
 	locale;
 	threadId;
 	text;

package/dist/_chunks/principal-MEMlG3EG.mjs

@@ -0,0 +1,126 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { n as currentInboundRequest } from "./inbound-request-RIRNBxUC.mjs";
+import { randomUUID } from "node:crypto";
+function telegramRuntimeSource(message, files, callbackQueryId) {
+	const attachments = [];
+	for (const file of message.attachments) {
+		const staged = files?.get(file.fileId);
+		if (staged?.status !== "stored" || attachments.length >= 10) continue;
+		let kind = file.kind;
+		for (const candidate of [
+			"voice",
+			"audio",
+			"video",
+			"video_note",
+			"sticker",
+			"animation"
+		]) {
+			const raw = message.raw[candidate];
+			if (raw !== null && typeof raw === "object" && !Array.isArray(raw) && raw.file_id === file.fileId) kind = candidate;
+		}
+		attachments.push({
+			file_id: file.fileId,
+			kind,
+			staged_id: staged.attachment.id,
+			...file.fileUniqueId === void 0 ? {} : { file_unique_id: file.fileUniqueId },
+			media_type: staged.attachment.contentType
+		});
+	}
+	return {
+		provider: "telegram",
+		chat_id: message.chat.id,
+		thread_id: String(message.messageThreadId ?? ""),
+		message_id: message.messageId,
+		...message.replyToMessage === void 0 ? {} : { reply_to_message_id: message.replyToMessage.messageId },
+		...message.from === void 0 ? {} : { sender: message.from.id },
+		...callbackQueryId === void 0 ? {} : { callback_query_id: callbackQueryId },
+		...attachments.length === 0 ? {} : { attachments }
+	};
+}
+function principalRuntimeSource(principal) {
+	if (principal?.authenticator !== "segmentstream-telegram") return;
+	const value = principal.attributes.segmentstreamRuntimeSource;
+	if (typeof value !== "string") return;
+	try {
+		return JSON.parse(value);
+	} catch {
+		return;
+	}
+}
+function runtimeEnvelope(input = {}) {
+	const source = input.source ?? principalRuntimeSource(input.principal);
+	return {
+		version: 1,
+		session_id: input.sessionId ?? randomUUID(),
+		call_id: input.callId ?? randomUUID(),
+		...source === void 0 ? {} : { source }
+	};
+}
+function compatibleRuntimeEnvelope(envelope, extended) {
+	const source = envelope.source;
+	return extended || source === void 0 ? envelope : {
+		...envelope,
+		source: {
+			provider: source.provider,
+			chat_id: source.chat_id,
+			thread_id: source.thread_id
+		}
+	};
+}
+const RUNTIME_SOURCE_PROTOCOL = "segmentstream/runtime-source";
+const TELEGRAM_AUTHENTICATOR = "segmentstream-telegram";
+function isGroup(message) {
+	return message.chat.type === "group" || message.chat.type === "supergroup";
+}
+function telegramPrincipal(input) {
+	const { message, member } = input;
+	const sender = message.from.id;
+	const attributes = {
+		memberId: member.id,
+		segmentstreamRuntimeSource: JSON.stringify(telegramRuntimeSource(message, currentInboundRequest()?.files, input.callbackQueryId)),
+		identityProvider: "telegram",
+		roles: member.roles,
+		chatId: message.chat.id,
+		chatType: message.chat.type
+	};
+	if (member.name !== null) attributes.memberName = member.name;
+	if (message.messageThreadId !== void 0) attributes.messageThreadId = String(message.messageThreadId);
+	if (message.from.username !== void 0) attributes.username = message.from.username;
+	const locale = member.locale ?? message.from.languageCode;
+	if (locale !== void 0) attributes.locale = locale;
+	const language = input.conversationLanguage ?? conversationLanguage([message.text || message.caption]);
+	if (language !== void 0) attributes.conversationLanguage = language;
+	return {
+		authenticator: TELEGRAM_AUTHENTICATOR,
+		issuer: "telegram",
+		principalId: isGroup(message) ? `telegram:${message.chat.id}:${sender}` : `telegram:${sender}`,
+		principalType: "user",
+		subject: sender,
+		attributes
+	};
+}
+function conversationLanguage(texts) {
+	for (const text of texts) {
+		if (/[\u0430-\u044f\u0451]/iu.test(text)) return "ru";
+		if ((text.match(/\b[a-z]+\b/gi)?.length ?? 0) >= 3) return "en";
+	}
+}
+function memberIdOf(principal) {
+	const memberId = principal?.attributes.memberId;
+	return typeof memberId === "string" && memberId !== "" ? memberId : void 0;
+}
+function rolesOf(principal) {
+	const roles = principal?.attributes.roles;
+	if (typeof roles === "string") return [roles];
+	return roles ?? [];
+}
+function identityProviderOf(principal) {
+	const provider = principal?.attributes.identityProvider;
+	return typeof provider === "string" && provider !== "" ? provider : void 0;
+}
+export { rolesOf as a, compatibleRuntimeEnvelope as c, telegramRuntimeSource as d, memberIdOf as i, principalRuntimeSource as l, conversationLanguage as n, telegramPrincipal as o, identityProviderOf as r, RUNTIME_SOURCE_PROTOCOL as s, TELEGRAM_AUTHENTICATOR as t, runtimeEnvelope as u };

package/dist/extension/config.d.ts

@@ -1,5 +1,7 @@
 import { type GroupPolicyInput } from "@segmentstream-cloud/ontology/groups";
 import { type GroupPolicy } from "./lib/group-routing/policy.js";
+import { type StructuredInbound } from "./lib/telegram/structured-settings.js";
+import type { WorkspaceActionHook } from "./lib/telegram/workspace-action.js";
 import { type TelegramTexts } from "./lib/telegram/texts.js";
 import type { AttachmentLifecycle } from "./lib/telegram/lifecycle.js";
 import { type TelegramLinkPreviews } from "@segmentstream-cloud/ontology/telegram";
@@ -75,6 +77,13 @@ export interface SegmentStreamAgentConfigInput {
             readonly linkPreviews?: string;
             /** Additional exact HTTP(S) origins belonging to this workspace. */
             readonly additionalOwnOrigins?: readonly string[];
+            readonly inbound?: Omit<StructuredInbound, "contextVersion" | "kinds"> & {
+                readonly kinds: ReadonlyArray<string>;
+                readonly contextVersion: number;
+            };
+            readonly callbacks?: Omit<WorkspaceActionHook, "contextVersion"> & {
+                readonly contextVersion: number;
+            };
             readonly menuButton?: {
                 readonly text: LocalizedText;
             };
@@ -134,6 +143,8 @@ export interface TelegramSettings {
         readonly topicScope?: boolean;
         readonly commandsAddress?: boolean;
     };
+    readonly inbound?: StructuredInbound;
+    readonly callbacks?: WorkspaceActionHook;
     readonly connection: string;
     readonly policy: TelegramPolicy;
     readonly linkPreviews?: TelegramLinkPreviews;

package/dist/extension/config.mjs

@@ -6,6 +6,7 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { effectiveGroupPolicy, groupPolicy } from "./lib/group-routing/policy.mjs";
 import { localizedText as localizedText$1 } from "./lib/admission.mjs";
+import { STRUCTURED_KINDS } from "./lib/telegram/structured-settings.mjs";
 import { TELEGRAM_TEXT_KEYS } from "./lib/telegram/texts.mjs";
 import { isTechnicalText } from "./lib/customer-text-safety.mjs";
 import { readFileSync, realpathSync } from "node:fs";
@@ -79,7 +80,9 @@ function telegramSettings(value, issues) {
 			"linkPreviews",
 			"additionalOwnOrigins",
 			"attachmentLifecycle",
-			"menuButton"
+			"menuButton",
+			"callbacks",
+			"inbound"
 		],
 		issues
 	});
@@ -122,6 +125,31 @@ function telegramSettings(value, issues) {
 		message: "must be an array of HTTP(S) origins without paths, credentials, queries or fragments",
 		path: [...path, "additionalOwnOrigins"]
 	});
+	const inboundConfig = section({
+		value: telegram.inbound,
+		path: [...path, "inbound"],
+		allowed: [
+			"entity",
+			"action",
+			"kinds",
+			"contextVersion"
+		],
+		issues
+	});
+	const inbound = inboundConfig === void 0 ? void 0 : workspaceHook({
+		entity: inboundConfig.entity,
+		action: inboundConfig.action,
+		contextVersion: inboundConfig.contextVersion
+	}, [...path, "inbound"], issues);
+	if (inboundConfig !== void 0 && (!Array.isArray(inboundConfig.kinds) || inboundConfig.kinds.length === 0 || inboundConfig.kinds.length > 3 || new Set(inboundConfig.kinds).size !== inboundConfig.kinds.length || !inboundConfig.kinds.every((kind) => STRUCTURED_KINDS.includes(kind)))) issues.push({
+		message: "must be distinct location, venue or contact kinds",
+		path: [
+			...path,
+			"inbound",
+			"kinds"
+		]
+	});
+	const callbacks = workspaceHook(telegram.callbacks, [...path, "callbacks"], issues);
 	const menuButton = section({
 		value: telegram.menuButton,
 		path: [...path, "menuButton"],
@@ -159,6 +187,11 @@ function telegramSettings(value, issues) {
 		connection,
 		policy,
 		...signalSettings === void 0 ? {} : { groups: signalSettings },
+		...callbacks === void 0 ? {} : { callbacks },
+		...inbound === void 0 ? {} : { inbound: {
+			...inbound,
+			kinds: inboundConfig.kinds
+		} },
 		linkPreviews,
 		additionalOwnOrigins,
 		...menuText === void 0 ? {} : { menuButton: { text: menuText } },
@@ -169,6 +202,32 @@ function telegramSettings(value, issues) {
 		} }
 	} : null;
 }
+function workspaceHook(value, path, issues) {
+	const configured = section({
+		value,
+		path,
+		allowed: [
+			"entity",
+			"action",
+			"contextVersion"
+		],
+		issues
+	});
+	if (configured === void 0) return;
+	for (const key of ["entity", "action"]) if (typeof configured[key] !== "string" || !/^(?:[a-z][a-zA-Z0-9]*|[a-z][a-z0-9]*(?:_[a-z0-9]+)*)$/.test(String(configured[key]))) issues.push({
+		message: "must name an ontology entity or action",
+		path: [...path, key]
+	});
+	if (configured.contextVersion !== 2) issues.push({
+		message: "must be 2",
+		path: [...path, "contextVersion"]
+	});
+	return {
+		entity: String(configured.entity),
+		action: String(configured.action),
+		contextVersion: 2
+	};
+}
 function modelId(input) {
 	if (input.value === void 0) return input.fallback;
 	if (typeof input.value !== "string" || input.value === "" || input.value !== input.value.trim()) {

package/dist/extension/hooks/authorization.mjs

@@ -5,9 +5,9 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { localizedText } from "../lib/admission.mjs";
-import "../lib/telegram/principal.mjs";
-import segmentstream from "../extension.mjs";
+import "../../_chunks/principal-MEMlG3EG.mjs";
 import { confirmationLocale } from "../lib/telegram/confirmation-text.mjs";
+import segmentstream from "../extension.mjs";
 import { defineHook } from "eve/hooks";
 var authorization_default = defineHook({ events: { "authorization.required": (event, context) => {
 	const principal = context.session.auth.current;

package/dist/extension/lib/attachment-tools.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-MEMlG3EG.mjs";
 import { runtimeToken } from "./runtime-token.mjs";
 import { agentAttachments } from "./attachments.mjs";
 import { telegramConversation } from "./telegram/files.mjs";

package/dist/extension/lib/attachments.d.ts

@@ -1,3 +1,4 @@
+import type { RuntimeEnvelope } from "./runtime-envelope.js";
 import type { RuntimeToken } from "./runtime-token.js";
 /**
  * The ontology service's attachment routes (`docs/agent.md`, "Attachments"). A file a member sends
@@ -35,6 +36,7 @@ export interface Attachment {
     readonly promotion: unknown;
 }
 export interface PromotionRequest {
+    readonly runtime?: RuntimeEnvelope;
     readonly entity: string;
     readonly action: string;
     readonly input?: Readonly<Record<string, unknown>>;

package/dist/extension/lib/attachments.mjs

@@ -192,6 +192,7 @@ function agentAttachments(input) {
 			const answer = await call(owner, `/${encodeURIComponent(id)}/promote`, "promotion", {
 				entity: request.entity,
 				action: request.action,
+				...request.runtime === void 0 ? {} : { _meta: { _segmentstream: request.runtime } },
 				input: request.input ?? {},
 				...request.field === void 0 ? {} : { field: request.field },
 				...request.recordId === void 0 ? {} : { record_id: request.recordId }

package/dist/extension/lib/build-metadata.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../_chunks/build-metadata-BLeBanNg.mjs";
+import { t as agentBuild } from "../../_chunks/build-metadata-CJlaXNhc.mjs";
 export { agentBuild };

package/dist/extension/lib/confirmations.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { withTelegramTexts } from "./telegram/texts.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-MEMlG3EG.mjs";
 import { confirmationCopy, confirmationLocale, renderConfirmation } from "./telegram/confirmation-text.mjs";
 import { chatPostCard } from "./telegram/chat-post-card.mjs";
 import { chatPostDigest, isChatPost } from "./chat-post-confirmation.mjs";

package/dist/extension/lib/conversation-runtime.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { ENDS_CONVERSATION_INSTRUCTIONS } from "./group-routing/conversation-prompt.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-MEMlG3EG.mjs";
 import { n as contentText, t as CONTENT_CAPS } from "../../_chunks/content-CvFsrmSD.mjs";
 import { conversationEvent, conversations, summarizeArguments } from "./conversations.mjs";
 import { parseAddress } from "./telegram/sessions.mjs";

package/dist/extension/lib/deferred-confirmations.d.ts

@@ -1,3 +1,4 @@
+import { type RuntimeEnvelope } from "./runtime-envelope.js";
 import type { ToolContext } from "eve/tools";
 import { type Confirmation } from "./confirmations.js";
 import { type Environment } from "./environment.js";
@@ -11,6 +12,7 @@ export interface DeferredConfirmation {
     readonly expiresAt: number;
     readonly status: "pending" | "approved" | "cancelled" | "expired" | "done" | "failed";
     readonly data: {
+        readonly runtimeSource?: RuntimeEnvelope["source"];
         readonly action: string;
         readonly input: Readonly<Record<string, unknown>>;
         readonly confirmation: Confirmation;

package/dist/extension/lib/deferred-confirmations.mjs

@@ -5,10 +5,10 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
-import { runtimeToken } from "./runtime-token.mjs";
+import { i as memberIdOf, l as principalRuntimeSource, u as runtimeEnvelope } from "../../_chunks/principal-MEMlG3EG.mjs";
 import { redactDiagnostic } from "./diagnostics.mjs";
 import { humanText, object } from "./confirmation-description.mjs";
+import { runtimeToken } from "./runtime-token.mjs";
 import { chatPostDigest, chatPostOperationId, isChatPost } from "./chat-post-confirmation.mjs";
 import { actionApproval, inputHash } from "./confirmations.mjs";
 import { ontologyTools } from "./ontology-tools.mjs";
@@ -37,7 +37,7 @@ function deferredConfirmations(options = {}) {
 }
 async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 	if (memberIdOf(ctx.session.auth.current) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	if (Object.hasOwn(input, "_segmentstream")) throw new Error("Runtime call metadata is application-owned.");
+	input = Object.fromEntries(Object.entries(input).filter(([key]) => key !== "_segmentstream"));
 	const principal = ctx.session.auth.current;
 	const attributes = principal?.attributes;
 	const id = chatPostOperationId(ctx.session.id, ctx.callId);
@@ -56,7 +56,15 @@ async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 		};
 	};
 	if (existing !== null) return boundResult(existing);
-	const tools = ontologyTools(options);
+	const tools = ontologyTools({
+		...options,
+		principal: ctx.session.auth.current,
+		envelope: runtimeEnvelope({
+			principal: ctx.session.auth.current,
+			sessionId: ctx.session.id,
+			callId: ctx.callId
+		})
+	});
 	let saved = {};
 	const result = await actionApproval({
 		...tools,
@@ -96,6 +104,7 @@ async function executeDeferredTool(memberId, action, input, ctx, options = {}) {
 			data: {
 				action,
 				input,
+				...principalRuntimeSource(principal) === void 0 ? {} : { runtimeSource: principalRuntimeSource(principal) },
 				confirmation,
 				sessionId: ctx.session.id,
 				callId: ctx.callId,
@@ -125,11 +134,13 @@ async function runDeferredAction(record, options) {
 		session_id: record.data.sessionId,
 		call_id: record.data.callId,
 		operation_id: record.id,
+		...record.data.runtimeSource === void 0 ? {} : { source: record.data.runtimeSource },
 		...preview ? {
 			source: {
 				provider: "telegram",
 				chat_id: record.data.chatId,
-				thread_id: record.data.threadId
+				thread_id: record.data.threadId,
+				...record.data.runtimeSource
 			},
 			expected: {
 				chat_id: preview.chatId,
@@ -137,12 +148,12 @@ async function runDeferredAction(record, options) {
 			}
 		} : {}
 	};
-	const result = await tools.rpc(record.memberId, "tools/call", {
+	const result = await ontologyTools({
+		...options,
+		envelope
+	}).rpc(record.memberId, "tools/call", {
 		name: record.data.action.split("__").at(-1),
-		arguments: {
-			...record.data.input,
-			_segmentstream: envelope
-		}
+		arguments: record.data.input
 	});
 	const output = result.structuredContent;
 	if (result.isError === true || (output?.validation)?.ok === false || preview !== void 0 && output?.status !== "sent") throw new Error("The confirmed action did not complete; its outcome may be uncertain.", { cause: result });

package/dist/extension/lib/ontology-connection.d.ts

@@ -36,6 +36,7 @@ export declare function ontologyConnection(input: {
     readonly fetch?: typeof fetch;
     /** Set only by the authenticated catalog handshake, never by model input. */
     readonly chatPosting?: boolean;
+    readonly runtimeSource?: boolean;
 }): McpClientConnectionDefinition | null;
 /** Negotiate before opening Eve's client: old strict schemas never receive the new envelope. */
 export declare function ontologyConnectionForTurn(input: Parameters<typeof ontologyConnection>[0]): Promise<McpClientConnectionDefinition | null>;

package/dist/extension/lib/ontology-connection.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { identityProviderOf, memberIdOf } from "./telegram/principal.mjs";
+import { c as compatibleRuntimeEnvelope, i as memberIdOf, r as identityProviderOf, u as runtimeEnvelope } from "../../_chunks/principal-MEMlG3EG.mjs";
 import { runtimeToken, tokenExpiry } from "./runtime-token.mjs";
 import { CHAT_POST_ENVELOPE, chatPostDigest, chatPostOperationId, isChatPost } from "./chat-post-confirmation.mjs";
 import { actionApproval, confirmations } from "./confirmations.mjs";
@@ -31,21 +31,23 @@ function ontologyConnection(input) {
 	if (memberId === void 0) return null;
 	const origin = appOrigin(input.environment ?? process.env);
 	const token = input.token ?? runtimeToken;
+	const chatProtocol = input.chatPosting ? ":chat-post-v1" : "";
+	const sourceProtocol = input.runtimeSource ? ":runtime-source-v1" : "";
 	return defineMcpClientConnection({
 		url: `${origin}/mcp`,
 		description: DESCRIPTION,
-		instanceKey: `${origin}/mcp#member:${memberId}${input.chatPosting ? ":chat-post-v1" : ""}`,
+		instanceKey: `${origin}/mcp#member:${memberId}${chatProtocol}${sourceProtocol}`,
 		approval: actionApproval(ontologyTools(input)),
-		...input.chatPosting ? { toolCall: { providedArguments: { [CHAT_POST_ENVELOPE]: (ctx) => {
+		...input.chatPosting || input.runtimeSource ? { toolCall: { providedArguments: { [CHAT_POST_ENVELOPE]: (ctx) => {
 			actAsHeaders({
 				principal: ctx.session.auth.current,
 				expectedMemberId: memberId
 			});
-			const base = {
-				version: 1,
-				session_id: ctx.session.id,
-				call_id: ctx.callId
-			};
+			const base = compatibleRuntimeEnvelope(runtimeEnvelope({
+				principal: ctx.session.auth.current,
+				sessionId: ctx.session.id,
+				callId: ctx.callId
+			}), input.runtimeSource === true);
 			if (!isChatPost(ctx.toolName)) return base;
 			const saved = confirmations.get()[ctx.callId];
 			const preview = saved?.description?.chatPost;
@@ -56,7 +58,8 @@ function ontologyConnection(input) {
 				source: {
 					provider: "telegram",
 					chat_id: saved.source.chatId,
-					thread_id: saved.source.threadId
+					thread_id: saved.source.threadId,
+					...base.source
 				},
 				expected: {
 					chat_id: preview.chatId,
@@ -84,15 +87,18 @@ function ontologyConnection(input) {
 async function ontologyConnectionForTurn(input) {
 	const memberId = memberIdOf(input.principal);
 	if (memberId === void 0) return null;
-	let chatPosting = false;
+	let capabilities = {
+		chatPosting: false,
+		runtimeSource: false
+	};
 	try {
-		chatPosting = await ontologyTools(input).supportsChatPosting(memberId);
+		capabilities = await ontologyTools(input).capabilities(memberId);
 	} catch (error) {
 		console.warn("Chat posting capability unavailable; keeping the compatible ontology connection.", error);
 	}
 	return ontologyConnection({
 		...input,
-		chatPosting
+		...capabilities
 	});
 }
 export { ACT_AS_HEADER, MemberRequiredError, actAsHeaders, ontologyConnection, ontologyConnectionForTurn };

package/dist/extension/lib/ontology-gateway.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf, u as runtimeEnvelope } from "../../_chunks/principal-MEMlG3EG.mjs";
 import { object } from "./confirmation-description.mjs";
 import { readOntologyMetadata } from "./ontology-metadata-read.mjs";
 async function ontologyMetadata(memberId, operation, input, context, options = {}) {
@@ -16,7 +16,14 @@ async function ontologyMetadata(memberId, operation, input, context, options = {
 			name: operation,
 			arguments: input
 		}
-	}, context, options);
+	}, context, {
+		...options,
+		envelope: runtimeEnvelope({
+			principal,
+			sessionId: context.session.id,
+			callId: context.callId
+		})
+	});
 	return result.structuredContent === void 0 ? result : object(result.structuredContent);
 }
 async function ontologyInspect(memberId, input, context, options = {}) {

package/dist/extension/lib/ontology-metadata-read.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { appOrigin } from "./environment.mjs";
-import { memberIdOf } from "./telegram/principal.mjs";
+import { i as memberIdOf } from "../../_chunks/principal-MEMlG3EG.mjs";
 import { redactDiagnostic } from "./diagnostics.mjs";
 import { object } from "./confirmation-description.mjs";
 import { OntologyToolRejected, ontologyTools } from "./ontology-tools.mjs";

package/dist/extension/lib/ontology-tools.d.ts

@@ -1,3 +1,4 @@
+import { type RuntimeEnvelope } from "./runtime-envelope.js";
 import type { SessionAuthContext } from "eve/context";
 import type { ActionAnnotations } from "./confirmations.js";
 import { type Environment } from "./environment.js";
@@ -13,17 +14,25 @@ export declare class OntologyActionNotPermitted extends Error {
 /** A fresh, permission-filtered catalog. Listing tools cannot run an action's prepare step. */
 export declare function ontologyTools(options?: {
     readonly principal?: SessionAuthContext | null;
+    readonly envelope?: RuntimeEnvelope;
     readonly environment?: Environment;
     readonly token?: RuntimeToken;
     readonly fetch?: typeof fetch;
+    /** Install a durable dispatch fence after safe metadata/auth work, immediately before the action request. */
+    readonly beforeCall?: (name: string) => Promise<void>;
 }): {
     rpc: (memberId: string, method: string, params: Record<string, unknown>, signal?: AbortSignal) => Promise<Record<string, unknown>>;
     list(memberId: string): Promise<Record<string, unknown>[]>;
+    supportsRuntimeSource(memberId: string, signal?: AbortSignal): Promise<boolean>;
+    capabilities(memberId: string): Promise<{
+        chatPosting: boolean;
+        runtimeSource: boolean;
+    }>;
     supportsChatPosting(memberId: string): Promise<boolean>;
-    labels(memberId: string, action: string, input?: Readonly<Record<string, unknown>>): Promise<ActionAnnotations>;
+    labels(memberId: string, action: string, input?: Readonly<Record<string, unknown>>, signal?: AbortSignal): Promise<ActionAnnotations>;
     describe(memberId: string, action: string, input: Readonly<Record<string, unknown>>): Promise<import("./confirmation-description.js").ConfirmationDescription>;
 };
-export declare function ontologyToolLabels(options?: Parameters<typeof ontologyTools>[0]): (memberId: string, action: string, input?: Readonly<Record<string, unknown>>) => Promise<ActionAnnotations>;
+export declare function ontologyToolLabels(options?: Parameters<typeof ontologyTools>[0]): (memberId: string, action: string, input?: Readonly<Record<string, unknown>>, signal?: AbortSignal) => Promise<ActionAnnotations>;
 /** MCP normalizes an authored camelCase action to snake_case. */
 export declare function actionToolName(entity: string, action: string): string;
 /** One target contract for native and MCP attachment promotion; never trust supplied safety hints. */