@segmentstream/agent 0.17.0 → 0.17.2

package/README.md

@@ -209,7 +209,7 @@ continue using GET lookup. Starter templates and pins remain unchanged in this s
 | `segmentstream__attachments_send`                                    | `tools`        | Sends readable stored ontology files into the current Telegram chat and topic.                                                                                                  |
 | `segmentstream__bash`, `_read_file`, `_write_file`                   | `tools`        | With `"sandbox": true`: eve's file tools, only in the sandbox `@segmentstream/agent/sandbox` opened.                                                                            |
 | platform rules                                                       | `instructions` | Changes go through actions; `describe` indexes or inspects refs; `discover` searches metadata; tools are already narrowed; when to answer `[SILENT]`; how to handle attachments |
-| sandbox rules                                                        | `instructions` | With `"sandbox": true`: working copies, file contents as data, numbers from script output or `arguments_file`, no network                                                       |
+| sandbox rules                                                        | `instructions` | With `"sandbox": true`: working copies, file contents as data, script values unchanged through `arguments_file`, no network                                                     |
 | sandbox cleanup                                                      | `hooks`        | Deletes the session's sandbox when its history is cleared, such as by `sessions.idleResetHours`.                                                                                |
 
 ### Sandbox
@@ -228,10 +228,13 @@ The selector opens each session's sandbox with `networkPolicy: "deny-all"` and 2
 opening in session state. The file tools pass a gate first: the marker must name the current
 session, or the call fails before eve's executor runs, so an agent without `sandbox.ts` never gets
 a shell in eve's default sandbox, whose network is open. The first call of a turn replaces a sandbox
-older than 24 hours through its handle, carrying over the attachments eve staged in the last 24
-hours. The cleanup hook deletes a sandbox only when the session recorded opening one, so it never
-opens a sandbox to delete it; `compaction.completed` is ignored, because eve also compacts mid-turn.
-eve's session-end cleanup deletes whatever remains.
+older than 24 hours, or one without a marker, through its handle, carrying over the attachments eve
+staged in the last 24 hours. eve keeps a session's sandbox across deployments, so a session that
+opened one before the agent adopted `@segmentstream/agent/sandbox` gets the SDK's on its first
+file-tool call; a reopened sandbox without the marker fails the call, and another session's marker
+fails it without deleting anything. The cleanup hook deletes a sandbox only when the session
+recorded opening one, so it never opens a sandbox to delete it; `compaction.completed` is ignored,
+because eve also compacts mid-turn. eve's session-end cleanup deletes whatever remains.
 
 `segmentstream__attachments_promote` takes `path`, a file inside `/workspace`, instead of `id`
 while the sandbox is on. The runtime reads it through the gate, refusing a real path outside
@@ -612,7 +615,7 @@ Eve resolution, so member/topic routing survives a cold start. No second provide
 
 ## Release and migration
 
-The coordinated release uses Agent SDK 0.17.0, Eve 0.76.3, Ontology SDK 0.53.0 and App SDK 0.25.0.
+The coordinated release uses Agent SDK 0.17.2, Eve 0.76.3, Ontology SDK 0.53.0 and App SDK 0.25.0.
 The compatible Cloud archive/API must be deployed first; migrations run only through its CI/CD gate.
 Publish the ontology SDK before the agent SDK. Upgrade the workspace ontology before its agent,
 with the declared Telegram provider mapping and explicit `agent_chat:post_message` grant.

package/dist/_chunks/{build-metadata-DR4gACLZ.mjs → build-metadata-DeXkvn8O.mjs}

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-var version = "0.17.0";
+var version = "0.17.2";
 function agentBuild(environment = process.env) {
 	return {
 		agent: version,

package/dist/extension/lib/build-metadata.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../_chunks/build-metadata-DR4gACLZ.mjs";
+import { t as agentBuild } from "../../_chunks/build-metadata-DeXkvn8O.mjs";
 export { agentBuild };

package/dist/extension/lib/ontology-metadata-read.mjs

@@ -16,6 +16,8 @@ const cache = new Map();
 let cachedBytes = 0;
 const CACHE_BYTES = 8388608;
 const CACHE_TTL = 3e4;
+const RUNTIME_SOURCE_TTL = 3e5;
+const METADATA_TIMEOUT = 1e4;
 function remove(key) {
 	cachedBytes -= cache.get(key)?.bytes ?? 0;
 	cache.delete(key);
@@ -56,8 +58,14 @@ async function readOntologyMetadata(memberId, request, context, options = {}) {
 	if (scope !== void 0 && principal) {
 		if (!state || !isDeepStrictEqual(state.principal, principal)) state = {
 			principal: structuredClone(principal),
-			generation: 0
+			generation: 0,
+			runtimeSources: new Map(),
+			runtimeSourcesUntil: 0
 		};
+		if (state.runtimeSourcesUntil <= Date.now()) {
+			state.runtimeSources.clear();
+			state.runtimeSourcesUntil = Date.now() + RUNTIME_SOURCE_TTL;
+		}
 		scopes.delete(scope);
 		scopes.set(scope, state);
 		while (scopes.size > 128) scopes.delete(scopes.keys().next().value);
@@ -73,13 +81,14 @@ async function readOntologyMetadata(memberId, request, context, options = {}) {
 	if (key !== void 0) remove(key);
 	const client = ontologyTools({
 		...options,
-		principal
+		principal,
+		...state ? { runtimeSources: state.runtimeSources } : {}
 	});
 	let attempts = 0;
 	for (;;) {
 		attempts++;
 		try {
-			const result = await client.rpc(memberId, request.method, request.params, AbortSignal.timeout(4e3));
+			const result = await client.rpc(memberId, request.method, request.params, AbortSignal.timeout(METADATA_TIMEOUT));
 			if (key !== void 0 && scope !== void 0 && state && scopes.get(scope) === state && state.generation === generation) {
 				const bytes = Buffer.byteLength(JSON.stringify(result));
 				if (bytes <= 2097152) {
@@ -99,6 +108,7 @@ async function readOntologyMetadata(memberId, request, context, options = {}) {
 		} catch (cause) {
 			if (state && invalidatesSnapshot(cause)) {
 				state.generation++;
+				state.runtimeSources.clear();
 				for (const [cachedKey, entry] of cache) if (entry.state === state) remove(cachedKey);
 			}
 			const mayRetry = retryable(cause);

package/dist/extension/lib/ontology-tools.d.ts

@@ -20,6 +20,12 @@ export declare function ontologyTools(options?: {
     readonly fetch?: typeof fetch;
     /** Install a durable dispatch fence after safe metadata/auth work, immediately before the action request. */
     readonly beforeCall?: (name: string) => Promise<void>;
+    /**
+     * What a tools/list said about runtime-source support, per member, shared by the clients of
+     * one caller. A large catalog's listing takes megabytes and seconds; without it, every client
+     * lists the whole catalog again before its first call.
+     */
+    readonly runtimeSources?: Map<string, boolean>;
 }): {
     rpc: (memberId: string, method: string, params: Record<string, unknown>, signal?: AbortSignal) => Promise<Record<string, unknown>>;
     list(memberId: string): Promise<Record<string, unknown>[]>;

package/dist/extension/lib/ontology-tools.mjs

@@ -18,7 +18,7 @@ var OntologyActionNotPermitted = class extends Error {
 	code = "ontology_action_not_permitted";
 };
 function ontologyTools(options = {}) {
-	const runtimeSources = new Map();
+	const runtimeSources = options.runtimeSources ?? new Map();
 	async function rpc(memberId, method, params, signal) {
 		if (method === "tools/call") {
 			const envelope = options.envelope ?? runtimeEnvelope({ principal: memberIdOf(options.principal) === memberId ? options.principal : null });

package/dist/extension/lib/sandbox-session.d.ts

@@ -5,9 +5,10 @@ import type { RuntimeSandboxSession, SandboxSession } from "eve/sandbox";
  * writes, the session state recording when it opened, the gate every file tool passes and the
  * cleanup. eve cannot say which environment a session's sandbox came from without opening it, and
  * the configured environment object need not survive bundling, so the SDK's selector writes a
- * marker into the sandbox it opens and the tools refuse a sandbox without one. The marker guards
- * against a missing or replaced `agent/agent/sandbox.ts`; it is not a boundary against the model,
- * which can only reach the sandbox after the gate has passed.
+ * marker into the sandbox it opens, and the tools replace a sandbox without one and refuse to run
+ * unless the replacement carries it. The marker guards against a missing or replaced
+ * `agent/agent/sandbox.ts`; it is not a boundary against the model, which can only reach the
+ * sandbox after the gate has passed.
  */
 /** Where the SDK's selector records that it opened the sandbox. */
 export declare const SANDBOX_MARKER_PATH = "/workspace/.segmentstream/sandbox.json";
@@ -66,9 +67,13 @@ export declare function initializeSandbox(sandbox: SandboxSession, input: {
 /**
  * The session's sandbox, once it has passed the gate: it must carry the SDK's marker for this
  * session, so the file tools never run in eve's default sandbox, whose network is open. The first
- * call in each turn checks the marker; a sandbox older than a day is deleted through its handle
- * and reopened, carrying over the attachments staged within the last day so that the files of the
- * current turn stay where eve's references point.
+ * call in each turn checks the marker. A sandbox older than a day, or one without a marker, is
+ * deleted through its handle and reopened, carrying over the attachments staged within the last
+ * day so that the files of the current turn stay where eve's references point. eve keeps a
+ * session's sandbox across deployments, so a session that opened one before the agent adopted
+ * `@segmentstream/agent/sandbox`, through eve's default or the workspace's own selector, gets the
+ * SDK's on its first file-tool call; the reopened sandbox must carry the marker, or the call
+ * fails. Another session's marker fails at once: that sandbox is not this session's to delete.
  */
 export declare function sessionSandbox(context: SandboxContext, options?: {
     readonly now?: number;

package/dist/extension/lib/sandbox-session.mjs

@@ -54,9 +54,15 @@ async function initializeSandbox(sandbox, input) {
 	} catch {}
 	return marker;
 }
+async function sandboxMarker(sandbox) {
+	return parseSandboxMarker(await sandbox.readBinaryFile({ path: SANDBOX_MARKER_PATH }));
+}
+function sandboxUnavailable() {
+	return new SandboxUnavailableError("The sandbox tools are unavailable: this session's sandbox was not opened by @segmentstream/agent/sandbox. agent/agent/sandbox.ts must re-export it.");
+}
 async function verifiedMarker(sandbox, sessionId) {
-	const marker = parseSandboxMarker(await sandbox.readBinaryFile({ path: SANDBOX_MARKER_PATH }));
-	if (marker === void 0 || marker.sessionId !== sessionId) throw new SandboxUnavailableError("The sandbox tools are unavailable: this session's sandbox was not opened by @segmentstream/agent/sandbox. agent/agent/sandbox.ts must re-export it.");
+	const marker = await sandboxMarker(sandbox);
+	if (marker === void 0 || marker.sessionId !== sessionId) throw sandboxUnavailable();
 	return marker;
 }
 async function recentAttachments(sandbox, since) {
@@ -83,8 +89,9 @@ async function sessionSandbox(context, options = {}) {
 	const turn = context.session.turn.id;
 	const sandbox = await context.getSandbox();
 	if (record.get()?.checkedTurn === turn) return sandbox;
-	const marker = await verifiedMarker(sandbox, context.session.id);
-	if (now - Date.parse(marker.openedAt) < 864e5) {
+	const marker = await sandboxMarker(sandbox);
+	if (marker !== void 0 && marker.sessionId !== context.session.id) throw sandboxUnavailable();
+	if (marker !== void 0 && now - Date.parse(marker.openedAt) < 864e5) {
 		record.update(() => ({
 			openedAt: marker.openedAt,
 			checkedTurn: turn

package/dist/extension/lib/telegram/adapter.mjs

@@ -20,7 +20,7 @@ import { archivedRoutingMessages } from "../group-routing/routing-context.mjs";
 import { dispatchStructuredMessage, structuredMessage } from "./structured.mjs";
 import { scopedAddress, sessionPolicy } from "./sessions.mjs";
 import { handleWorkspaceCallback, isWorkspaceCallback } from "./callbacks.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-DR4gACLZ.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-DeXkvn8O.mjs";
 import { attachmentLifecycle } from "./lifecycle.mjs";
 import { observedMessages } from "./observed.mjs";
 import { expireDeferredCards, handleDeferredCallback, isDeferredCallback } from "./deferred-confirmations.mjs";

package/dist/extension/lib/telegram/health.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-DR4gACLZ.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-DeXkvn8O.mjs";
 import { runtimeRequestFailure } from "./runtime-request.mjs";
 import { GET } from "eve/channels";
 const HEALTH_ROUTE = "/eve/v1/telegram/health";

package/dist/extension/lib/telegram/lifecycle.mjs

@@ -9,7 +9,7 @@ import { object } from "../confirmation-description.mjs";
 import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-RIRNBxUC.mjs";
 import { needsConfirmation } from "../confirmations.mjs";
 import { OntologyActionNotPermitted, actionToolName, ontologyTools } from "../ontology-tools.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-DR4gACLZ.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-DeXkvn8O.mjs";
 var AttachmentLifecycleNotPermitted = class extends Error {
 	code = "attachment_lifecycle_not_permitted";
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@segmentstream/agent",
-  "version": "0.17.0",
+  "version": "0.17.2",
   "description": "Mount a SegmentStream workspace's agent on eve: the ontology as tools, acting as the member who writes, and Telegram through the workspace's connection.",
   "license": "Apache-2.0",
   "author": "SegmentStream",