@segmentstream/agent 0.16.0 → 0.17.0

package/dist/extension/lib/telegram/turn-errors.mjs

@@ -7,82 +7,95 @@ __eveCreateRequire(import.meta.url);
 import { telegramText } from "./texts.mjs";
 import { i as memberIdOf } from "../../../_chunks/principal-MEMlG3EG.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
-import { c as customerCopy, d as failureText, o as currentLocale, p as reportTelegramError } from "../../../_chunks/inbound-request-RIRNBxUC.mjs";
-const telegramFailureEvents = {
-	async "authorization.required"(event, channel, context) {
-		if (event.candidateId !== void 0) return;
-		const locale = confirmationLocale(context.session.auth.current, currentLocale());
-		const prompt = telegramText("authorization", "prompt", locale);
-		const url = telegramText("authorization", "url", locale);
-		const button = telegramText("authorization", "button", locale);
-		if (prompt !== void 0) {
-			const sent = await channel.telegram.post({
-				text: prompt,
-				...url === void 0 || button === void 0 ? {} : { reply_markup: { inline_keyboard: [[{
-					text: button,
-					url
-				}]] } }
+import { c as customerCopy, d as failureText, o as currentLocale, p as reportTelegramError, s as currentThreadId } from "../../../_chunks/inbound-request-RIRNBxUC.mjs";
+import { recordSessionFailure } from "./conversations.mjs";
+function telegramFailureEvents(input) {
+	return {
+		async "authorization.required"(event, channel, context) {
+			if (event.candidateId !== void 0) return;
+			const locale = confirmationLocale(context.session.auth.current, currentLocale());
+			const prompt = telegramText("authorization", "prompt", locale);
+			const url = telegramText("authorization", "url", locale);
+			const button = telegramText("authorization", "button", locale);
+			if (prompt !== void 0) {
+				const sent = await channel.telegram.post({
+					text: prompt,
+					...url === void 0 || button === void 0 ? {} : { reply_markup: { inline_keyboard: [[{
+						text: button,
+						url
+					}]] } }
+				});
+				if (sent.id) channel.state.pendingAuthMessageIds = {
+					...channel.state.pendingAuthMessageIds,
+					[event.name]: sent.id
+				};
+				return;
+			}
+			const state = channel.state;
+			state.authorizationCancellationTurnId = event.turnId;
+			const errorId = reportTelegramError("authorization_prompt_unconfigured", new Error("texts.authorization.prompt is not configured."), { sessionId: context.session.id });
+			await channel.telegram.post(failureText(errorId, "authorization", locale));
+		},
+		async "turn.cancelled"(event, channel, context) {
+			const state = channel.state;
+			const authorizationTurn = state.authorizationCancellationTurnId;
+			delete state.authorizationCancellationTurnId;
+			if (typeof event.turnId === "string" && authorizationTurn === event.turnId) return;
+			const errorId = reportTelegramError("turn_cancelled", event, {
+				chatId: channel.state.chatId,
+				sessionId: context.session.id,
+				turnId: event.turnId
 			});
-			if (sent.id) channel.state.pendingAuthMessageIds = {
-				...channel.state.pendingAuthMessageIds,
-				[event.name]: sent.id
-			};
-			return;
-		}
-		const state = channel.state;
-		state.authorizationCancellationTurnId = event.turnId;
-		const errorId = reportTelegramError("authorization_prompt_unconfigured", new Error("texts.authorization.prompt is not configured."), { sessionId: context.session.id });
-		await channel.telegram.post(failureText(errorId, "authorization", locale));
-	},
-	async "turn.cancelled"(event, channel, context) {
-		const state = channel.state;
-		const authorizationTurn = state.authorizationCancellationTurnId;
-		delete state.authorizationCancellationTurnId;
-		if (typeof event.turnId === "string" && authorizationTurn === event.turnId) return;
-		const errorId = reportTelegramError("turn_cancelled", event, {
-			chatId: channel.state.chatId,
-			sessionId: context.session.id,
-			turnId: event.turnId
-		});
-		await channel.telegram.post(failureText(errorId, "cancelled", confirmationLocale(context.session.auth.current, currentLocale())));
-	},
-	async "turn.failed"(event, channel, context) {
-		const errorId = reportTelegramError("turn_failed", event, {
-			chatId: channel.state.chatId,
-			memberId: memberIdOf(context.session.auth.current) ?? null,
-			sessionId: context.session.id,
-			turnId: event.turnId
-		});
-		await channel.telegram.post(failureText(errorId, "failed", confirmationLocale(context.session.auth.current, currentLocale())));
-	},
-	async "session.failed"(event, channel) {
-		const errorId = reportTelegramError("session_recovery_failed", event, {
-			chatId: channel.state.chatId,
-			sessionId: event.sessionId
-		});
-		const locale = channel.state.customerLocale ?? "en";
-		await channel.telegram.post(failureText(errorId, "recovery", locale));
-	},
-	async "authorization.completed"(event, channel, context) {
-		const messageId = channel.state.pendingAuthMessageIds?.[event.name];
-		if (event.candidateId !== void 0 || messageId === void 0) return;
-		const locale = confirmationLocale(context.session.auth.current);
-		const copy = customerCopy(locale);
-		let text = event.outcome === "authorized" ? copy.connected : copy.disconnected;
-		if (event.reason !== void 0) {
-			const errorId = reportTelegramError("authorization_not_completed", event, { chatId: channel.state.chatId });
-			text = failureText(errorId, "authorization", locale);
+			await channel.telegram.post(failureText(errorId, "cancelled", confirmationLocale(context.session.auth.current, currentLocale())));
+		},
+		async "turn.failed"(event, channel, context) {
+			const errorId = reportTelegramError("turn_failed", event, {
+				chatId: channel.state.chatId,
+				memberId: memberIdOf(context.session.auth.current) ?? null,
+				sessionId: context.session.id,
+				turnId: event.turnId
+			});
+			await channel.telegram.post(failureText(errorId, "failed", confirmationLocale(context.session.auth.current, currentLocale())));
+		},
+		async "session.failed"(event, channel) {
+			const errorId = reportTelegramError("session_recovery_failed", event, {
+				chatId: channel.state.chatId,
+				sessionId: event.sessionId
+			});
+			const locale = channel.state.customerLocale ?? "en";
+			const recorded = recordSessionFailure({
+				...input,
+				chatId: channel.state.chatId,
+				threadId: typeof channel.state.messageThreadId === "number" ? String(channel.state.messageThreadId) : currentThreadId() ?? null,
+				failure: event
+			});
+			try {
+				await channel.telegram.post(failureText(errorId, "recovery", locale));
+			} finally {
+				await recorded;
+			}
+		},
+		async "authorization.completed"(event, channel, context) {
+			const messageId = channel.state.pendingAuthMessageIds?.[event.name];
+			if (event.candidateId !== void 0 || messageId === void 0) return;
+			const locale = confirmationLocale(context.session.auth.current);
+			const copy = customerCopy(locale);
+			let text = event.outcome === "authorized" ? copy.connected : copy.disconnected;
+			if (event.reason !== void 0) {
+				const errorId = reportTelegramError("authorization_not_completed", event, { chatId: channel.state.chatId });
+				text = failureText(errorId, "authorization", locale);
+			}
+			if (text !== void 0) await channel.telegram.editMessageText({
+				messageId,
+				text,
+				replyMarkup: { inline_keyboard: [] }
+			});
+			else await channel.telegram.editMessageReplyMarkup({
+				messageId,
+				replyMarkup: { inline_keyboard: [] }
+			});
+			delete channel.state.pendingAuthMessageIds?.[event.name];
 		}
-		if (text !== void 0) await channel.telegram.editMessageText({
-			messageId,
-			text,
-			replyMarkup: { inline_keyboard: [] }
-		});
-		else await channel.telegram.editMessageReplyMarkup({
-			messageId,
-			replyMarkup: { inline_keyboard: [] }
-		});
-		delete channel.state.pendingAuthMessageIds?.[event.name];
-	}
-};
+	};
+}
 export { telegramFailureEvents };

package/dist/extension/tools/attachments_promote.d.ts

@@ -1,10 +1,5 @@
-/**
- * `segmentstream__attachments_promote`: keeps an attachment by running an ontology action that
- * stores it, such as `document.upload`, as the member and with their permissions. The platform
- * hands the action the file already stored, so nothing is uploaded again, and a file whose SHA-256
- * was already promoted through the same action is not stored twice.
- */
+import { type ToolContext } from "eve/tools";
 declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, import("../lib/workflow-serializable.js").WorkflowSerializable> & {
-    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<import("../lib/workflow-serializable.js").WorkflowSerializable>;
+    execute(input: Record<string, unknown>, ctx: ToolContext): Promise<import("../lib/workflow-serializable.js").WorkflowSerializable>;
 };
 export default _default;

package/dist/extension/tools/attachments_promote.mjs

@@ -9,8 +9,26 @@ import { n as workflowToolResult } from "../../_chunks/workflow-serializable-DVQ
 import segmentstream from "../extension.mjs";
 import { actionApproval } from "../lib/confirmations.mjs";
 import { ontologyTools, promotionTarget } from "../lib/ontology-tools.mjs";
+import { MAXIMUM_ATTACHMENT_BYTES } from "../lib/attachments.mjs";
+import { sandboxFile } from "../lib/sandbox-session.mjs";
+import { contentTypeOf } from "../lib/attachment-formats.mjs";
 import { attachmentForModel, attachmentOwner, optionalObject, optionalString, stringArgument, toolAttachments } from "../lib/attachment-tools.mjs";
+import { createHash } from "node:crypto";
 import { defineTool } from "eve/tools";
+const MAXIMUM_SESSION_REFERENCE = 127;
+async function sandboxAttachment(ctx, owner, path) {
+	if (!segmentstream.config.sandbox) throw new TypeError("path needs the sandbox, which agent/segmentstream.json turns on with \"sandbox\": true.");
+	const file = await sandboxFile(ctx, path, { maximumBytes: MAXIMUM_ATTACHMENT_BYTES });
+	const sha256 = createHash("sha256").update(file.content).digest("hex");
+	const session = ctx.session.id.length <= MAXIMUM_SESSION_REFERENCE ? ctx.session.id : createHash("sha256").update(ctx.session.id).digest("hex");
+	return (await toolAttachments().receive(owner, {
+		bytes: file.content,
+		filename: file.filename,
+		contentType: contentTypeOf(file.filename),
+		source: "sandbox",
+		sourceRef: `sandbox:${session}:${sha256}`
+	})).id;
+}
 var attachments_promote_default = defineTool({
 	approval: actionApproval({
 		texts: () => segmentstream.config.texts ?? {},
@@ -23,7 +41,7 @@ var attachments_promote_default = defineTool({
 			return ontologyTools().describe(memberId, target.action, target.input);
 		}
 	}),
-	description: "Keep a file the member sent by storing it in a record through an ontology action that takes a file, such as document.upload. Give the entity, the action and the action's input without the file field: the platform fills it with the attachment, and fills sha256 when the action takes one. Runs with the member's permissions. The same file promoted again through the same action returns the earlier result instead of a duplicate.",
+	description: "Keep a file the member sent by storing it in a record through an ontology action that takes a file, such as document.upload. Give the entity, the action and the action's input without the file field: the platform fills it with the attachment, and fills sha256 when the action takes one. Runs with the member's permissions. The same file promoted again through the same action returns the earlier result instead of a duplicate. With the sandbox on, give path instead of id to keep a file from /workspace, such as a result in /workspace/work.",
 	inputSchema: {
 		type: "object",
 		properties: {
@@ -34,7 +52,11 @@ var attachments_promote_default = defineTool({
 			},
 			id: {
 				type: "string",
-				description: "The attachment's id."
+				description: "The attachment's id. Give id or path."
+			},
+			path: {
+				type: "string",
+				description: "Instead of id: the absolute path of a file inside /workspace in the sandbox, at most 20 MB. It is stored as an attachment of this chat first."
 			},
 			entity: {
 				type: "string",
@@ -57,11 +79,7 @@ var attachments_promote_default = defineTool({
 				description: "The record the action sets the file on, for an action that updates one."
 			}
 		},
-		required: [
-			"id",
-			"entity",
-			"action"
-		],
+		required: ["entity", "action"],
 		additionalProperties: false
 	},
 	label: { start: (input) => `Store attachment with ${String(input.entity)}.${String(input.action)}` },
@@ -70,17 +88,23 @@ var attachments_promote_default = defineTool({
 			principal: ctx.session.auth.current,
 			sessionId: ctx.session.id
 		});
+		const id = optionalString(input, "id");
+		const path = optionalString(input, "path");
 		const field = optionalString(input, "field");
 		const recordId = optionalString(input, "record_id");
 		const actionInput = optionalObject(input, "input");
-		const promoted = await toolAttachments().promote(owner, stringArgument(input, "id"), {
+		const entity = stringArgument(input, "entity");
+		const action = stringArgument(input, "action");
+		if (id === void 0 === (path === void 0)) throw new TypeError("Give either id or path.");
+		const attachmentId = id ?? await sandboxAttachment(ctx, owner, path);
+		const promoted = await toolAttachments().promote(owner, attachmentId, {
 			runtime: runtimeEnvelope({
 				principal: ctx.session.auth.current,
 				sessionId: ctx.session.id,
 				callId: ctx.callId
 			}),
-			entity: stringArgument(input, "entity"),
-			action: stringArgument(input, "action"),
+			entity,
+			action,
 			...actionInput === void 0 ? {} : { input: actionInput },
 			...field === void 0 ? {} : { field },
 			...recordId === void 0 ? {} : { recordId }

package/dist/extension/tools/ontology.d.ts

@@ -1,3 +1,4 @@
+import { type OntologyCallInput } from "../lib/ontology-arguments.js";
 declare const _default: import("eve").DynamicSentinel<{
     ontology_discover: import("eve/tools").ToolDefinition<Record<string, unknown>, Record<string, unknown>> & {
         execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<Record<string, unknown>>;
@@ -20,8 +21,8 @@ declare const _default: import("eve").DynamicSentinel<{
             })[];
         }>;
     };
-    ontology_call: import("eve/tools").ToolDefinition<Record<string, unknown>, Record<string, unknown>> & {
-        execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<Record<string, unknown>>;
-    };
+    ontology_call: import("eve/tools").ToolDefinition<{
+        name: string;
+    } & OntologyCallInput, Record<string, unknown>>;
 } | null>;
 export default _default;

package/dist/extension/tools/ontology.mjs

@@ -7,11 +7,13 @@ __eveCreateRequire(import.meta.url);
 import { i as memberIdOf } from "../../_chunks/principal-MEMlG3EG.mjs";
 import segmentstream from "../extension.mjs";
 import { executeDeferredTool } from "../lib/deferred-confirmations.mjs";
+import { MAXIMUM_ARGUMENTS_FILE_BYTES, ontologyCallArguments } from "../lib/ontology-arguments.mjs";
 import { ontologyInspect, ontologyMetadata } from "../lib/ontology-gateway.mjs";
 import { defineDynamic, defineTool } from "eve/tools";
 var ontology_default = defineDynamic({ events: { "turn.started": async (_event, context) => {
 	const memberId = memberIdOf(context.session.auth.current);
 	if (!segmentstream.config.ontology.connection || segmentstream.config.confirmations.mode !== "deferred" || memberId === void 0) return null;
+	const sandbox = segmentstream.config.sandbox === true;
 	return {
 		ontology_discover: defineTool({
 			description: "Search the permitted ontology's entities, actions and measures by words. Inspect returned refs with ontology_describe before calling ontology_call.",
@@ -107,7 +109,7 @@ var ontology_default = defineDynamic({ events: { "turn.started": async (_event,
 			execute: (input, ctx) => ontologyInspect(memberId, input, ctx)
 		}),
 		ontology_call: defineTool({
-			description: "Run a permitted ontology operation by the exact MCP tool name from its inspected definition, with arguments matching that schema. Reads and routine actions run immediately; consequential actions retain native deferred confirmation. An awaiting_confirmation result means the action has not run.",
+			description: "Run a permitted ontology operation by the exact MCP tool name from its inspected definition, with arguments matching that schema. Reads and routine actions run immediately; consequential actions retain native deferred confirmation. An awaiting_confirmation result means the action has not run." + (sandbox ? " Instead of arguments, give arguments_file: the path of a JSON object file inside /workspace that a script wrote, so large or exact values reach the operation unchanged instead of being retyped." : ""),
 			inputSchema: {
 				type: "object",
 				properties: {
@@ -118,12 +120,17 @@ var ontology_default = defineDynamic({ events: { "turn.started": async (_event,
 					arguments: {
 						type: "object",
 						additionalProperties: true
-					}
+					},
+					...sandbox ? { arguments_file: {
+						type: "string",
+						minLength: 1,
+						description: `Instead of arguments: the absolute path of a UTF-8 JSON file inside /workspace in the sandbox, at most ${MAXIMUM_ARGUMENTS_FILE_BYTES / 1024 / 1024} MiB, holding one object used as the arguments. Give arguments or arguments_file, not both.`
+					} } : {}
 				},
 				required: ["name"],
 				additionalProperties: false
 			},
-			execute: (input, ctx) => executeDeferredTool(memberId, input.name, input.arguments ?? {}, ctx, { texts: () => segmentstream.config.texts ?? {} })
+			execute: async (input, ctx) => executeDeferredTool(memberId, input.name, await ontologyCallArguments(input, ctx, { sandbox }), ctx, { texts: () => segmentstream.config.texts ?? {} })
 		})
 	};
 } } });

package/dist/extension/tools/sandbox.d.ts

@@ -0,0 +1,7 @@
+import { type ToolDefinition } from "eve/tools";
+declare const _default: import("eve").DynamicSentinel<{
+    bash: ToolDefinition<import("eve/tools/bash").BashToolInput, import("eve/tools/bash").BashToolOutput>;
+    read_file: ToolDefinition<import("eve/tools/read_file").ReadFileToolInput, import("eve/tools/read_file").ReadFileToolOutput>;
+    write_file: ToolDefinition<import("eve/tools/write_file").WriteFileToolInput, import("eve/tools/write_file").WriteFileToolOutput>;
+} | null>;
+export default _default;

package/dist/extension/tools/sandbox.mjs

@@ -0,0 +1,29 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import segmentstream from "../extension.mjs";
+import { sessionSandbox } from "../lib/sandbox-session.mjs";
+import { defineDynamic, defineTool } from "eve/tools";
+import { bash } from "eve/tools/bash";
+import { readFile } from "eve/tools/read_file";
+import { writeFile } from "eve/tools/write_file";
+function gated(tool, description = tool.description) {
+	return defineTool({
+		...tool,
+		description,
+		async execute(input, ctx) {
+			await sessionSandbox(ctx);
+			return await tool.execute(input, ctx);
+		}
+	});
+}
+const tools = {
+	bash: gated(bash, "Run a shell command in this conversation's isolated sandbox, which has no network. A command still running after 30 seconds keeps running and returns status \"running\" with its output so far and the directory of its stdout, stderr and exit files."),
+	read_file: gated(readFile),
+	write_file: gated(writeFile, "Write a complete file in this conversation's isolated sandbox, creating directories as needed. Read an existing file with read_file before overwriting it.")
+};
+var sandbox_default = defineDynamic({ events: { "turn.started": () => segmentstream.config.sandbox ? tools : null } });
+export { sandbox_default as default };

package/dist/tools/index.d.ts

@@ -8,3 +8,4 @@ export { default as attachments_send } from "../extension/tools/attachments_send
 export { default as attachments_table } from "../extension/tools/attachments_table.js";
 export { default as ontology } from "../extension/tools/ontology.js";
 export { default as questions_ask } from "../extension/tools/questions_ask.js";
+export { default as sandbox } from "../extension/tools/sandbox.js";

package/dist/tools/index.mjs

@@ -12,4 +12,5 @@ import attachments_send_default from "../extension/tools/attachments_send.mjs";
 import attachments_table_default from "../extension/tools/attachments_table.mjs";
 import ontology_default from "../extension/tools/ontology.mjs";
 import questions_ask_default from "../extension/tools/questions_ask.mjs";
-export { attachments_discard_default as attachments_discard, attachments_list_default as attachments_list, attachments_promote_default as attachments_promote, attachments_read_default as attachments_read, attachments_send_default as attachments_send, attachments_table_default as attachments_table, ontology_default as ontology, questions_ask_default as questions_ask };
+import sandbox_default from "../extension/tools/sandbox.mjs";
+export { attachments_discard_default as attachments_discard, attachments_list_default as attachments_list, attachments_promote_default as attachments_promote, attachments_read_default as attachments_read, attachments_send_default as attachments_send, attachments_table_default as attachments_table, ontology_default as ontology, questions_ask_default as questions_ask, sandbox_default as sandbox };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@segmentstream/agent",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Mount a SegmentStream workspace's agent on eve: the ontology as tools, acting as the member who writes, and Telegram through the workspace's connection.",
   "license": "Apache-2.0",
   "author": "SegmentStream",
@@ -31,6 +31,10 @@
       "types": "./dist/extension/extension.d.ts",
       "default": "./dist/extension/extension.mjs"
     },
+    "./sandbox": {
+      "types": "./dist/extension/lib/sandbox.d.ts",
+      "default": "./dist/extension/lib/sandbox.mjs"
+    },
     "./tools": {
       "types": "./dist/tools/index.d.ts",
       "default": "./dist/tools/index.mjs"
@@ -62,7 +66,7 @@
   },
   "dependencies": {
     "@chat-adapter/telegram": "4.41.0",
-    "@segmentstream-cloud/ontology": "0.52.0",
+    "@segmentstream-cloud/ontology": "0.53.0",
     "@vercel/oidc": "^3.8.4",
     "ai": "^7.0.128",
     "csv-parse": "^7.0.3",