@segmentstream/agent 0.17.21 → 0.18.0

package/dist/extension/lib/ontology-file-call.mjs

@@ -0,0 +1,171 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { i as memberIdOf, u as runtimeEnvelope } from "../../_chunks/principal-Dmm-cXNF.mjs";
+import { isChatPost } from "./chat-post-confirmation.mjs";
+import { actionApproval, confirmations, inputHash } from "./confirmations.mjs";
+import { ontologyTools } from "./ontology-tools.mjs";
+import { sandboxFile } from "./sandbox-session.mjs";
+import { defineState } from "eve/context";
+import { defineTool } from "eve/tools";
+const snapshots = defineState("segmentstream.ontologyFiles", () => ({}));
+function receipt(saved, dispatched = saved.dispatched) {
+	return {
+		memberId: saved.memberId,
+		requestHash: saved.requestHash,
+		name: saved.name,
+		digest: saved.digest,
+		...dispatched ? { dispatched } : {}
+	};
+}
+function releaseOntologyFilePayloads() {
+	snapshots.update((all) => Object.fromEntries(Object.entries(all).map(([id, saved]) => [id, receipt(saved)])));
+}
+function releasePayload(callId) {
+	snapshots.update((all) => {
+		const saved = all[callId];
+		return saved === void 0 ? all : {
+			...all,
+			[callId]: receipt(saved)
+		};
+	});
+}
+function ontologyFileCall(texts) {
+	const policy = (principal) => actionApproval({
+		labels: async (memberId, _action, input) => {
+			const saved = bound(input, memberId);
+			return ontologyTools({ principal }).labels(memberId, saved.name, saved.arguments);
+		},
+		describe: async (memberId, _action, input) => {
+			const saved = bound(input, memberId);
+			return ontologyTools({ principal }).describe(memberId, saved.name, saved.arguments);
+		},
+		texts
+	});
+	function bound(input, memberId) {
+		const saved = snapshots.get()[String(input.snapshot)];
+		if (saved === void 0 || saved.memberId !== memberId || saved.dispatched || saved.arguments === void 0) throw new Error("The file call is unavailable or already dispatched.");
+		return {
+			...saved,
+			arguments: saved.arguments
+		};
+	}
+	function request(callId, input, memberId) {
+		const saved = snapshots.get()[callId];
+		if (saved === void 0 || saved.memberId !== memberId || saved.requestHash !== inputHash(input)) throw new Error("The file call belongs to another member or input.");
+		return {
+			snapshot: callId,
+			digest: saved.digest
+		};
+	}
+	return defineTool({
+		deferred: true,
+		description: "Call an ontology tool with the complete JSON object computed in a sandbox file. Use only for script-generated arguments that must not be retyped. Find the real tool and its schema through Eve search first; ordinary inline calls use Eve directly. Chat posting is excluded.",
+		inputSchema: {
+			type: "object",
+			properties: {
+				name: {
+					type: "string",
+					pattern: "^[a-z][a-z0-9_]*$",
+					description: "Bare ontology tool name."
+				},
+				arguments_file: {
+					type: "string",
+					description: "Absolute path of a JSON object inside /workspace; maximum 1 MiB."
+				}
+			},
+			required: ["name", "arguments_file"],
+			additionalProperties: false
+		},
+		approval: {
+			async request(ctx) {
+				try {
+					const memberId = memberIdOf(ctx.session.auth.current);
+					const input = ctx.toolInput;
+					if (memberId === void 0 || input === void 0 || isChatPost(input.name) || input.name.startsWith("ontology_") || input.name.includes("__") || !/^[a-z][a-z0-9_]*$/.test(input.name)) return {
+						type: "denied",
+						reason: "A paired member and a direct ontology tool are required."
+					};
+					if (snapshots.get()[ctx.callId] === void 0) {
+						const { content } = await sandboxFile(ctx, input.arguments_file, { maximumBytes: 1048576 });
+						const args = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(content));
+						if (args === null || typeof args !== "object" || Array.isArray(args)) throw new Error("The file must contain a JSON object.");
+						if ("_segmentstream" in args) throw new Error("Runtime identity cannot be supplied in a file.");
+						snapshots.update((all) => ({
+							...all,
+							[ctx.callId]: {
+								memberId,
+								requestHash: inputHash(input),
+								name: input.name,
+								digest: inputHash(args),
+								arguments: args
+							}
+						}));
+					}
+					const decision = await policy(ctx.session.auth.current).request({
+						...ctx,
+						toolInput: request(ctx.callId, input, memberId)
+					});
+					if (decision === "denied" || decision === false || typeof decision === "object" && decision?.type === "denied") {
+						const current = confirmations.get()[ctx.callId];
+						if (current?.status !== "pending" || current.expiresAt <= Date.now()) releasePayload(ctx.callId);
+					}
+					return decision;
+				} catch (cause) {
+					console.warn("The ontology file call could not be prepared.", cause);
+					return {
+						type: "denied",
+						reason: "The original JSON file call is unavailable. Prepare a new call."
+					};
+				}
+			},
+			async response(ctx) {
+				try {
+					const decision = await policy(ctx.request.principal).response({
+						...ctx,
+						request: {
+							...ctx.request,
+							toolInput: request(ctx.request.callId, ctx.request.toolInput, memberIdOf(ctx.request.principal))
+						}
+					});
+					if (decision.status === "allowed" && ctx.response.decision === "cancel") releasePayload(ctx.request.callId);
+					return decision;
+				} catch {
+					return {
+						status: "rejected",
+						reason: "The file call changed. Prepare a new call."
+					};
+				}
+			}
+		},
+		async execute(input, ctx) {
+			const memberId = memberIdOf(ctx.session.auth.current);
+			const saved = bound(request(ctx.callId, input, memberId), memberId);
+			const confirmation = confirmations.get()[ctx.callId];
+			if (confirmation !== void 0 && confirmation.status !== "consumed") throw new Error("The file call has not been confirmed.");
+			const result = await ontologyTools({
+				principal: ctx.session.auth.current,
+				envelope: runtimeEnvelope({
+					principal: ctx.session.auth.current,
+					sessionId: ctx.session.id,
+					callId: ctx.callId
+				}),
+				beforeCall: async () => {
+					bound({ snapshot: ctx.callId }, memberId);
+					snapshots.update((all) => ({
+						...all,
+						[ctx.callId]: receipt(saved, true)
+					}));
+				}
+			}).rpc(memberId, "tools/call", {
+				name: saved.name,
+				arguments: saved.arguments
+			});
+			return result.structuredContent ?? result;
+		}
+	});
+}
+export { ontologyFileCall, releaseOntologyFilePayloads };

package/dist/extension/lib/ontology-tools.d.ts

@@ -37,10 +37,6 @@ export declare function ontologyTools(options?: {
     rpc: (memberId: string, method: string, params: Record<string, unknown>, signal?: AbortSignal) => Promise<Record<string, unknown>>;
     list(memberId: string): Promise<Record<string, unknown>[]>;
     supportsRuntimeSource(memberId: string, signal?: AbortSignal): Promise<boolean>;
-    capabilities(memberId: string): Promise<{
-        chatPosting: boolean;
-        runtimeSource: boolean;
-    }>;
     supportsChatPosting(memberId: string): Promise<boolean>;
     labels(memberId: string, action: string, input?: Readonly<Record<string, unknown>>, signal?: AbortSignal): Promise<ActionAnnotations>;
     describe(memberId: string, action: string, input: Readonly<Record<string, unknown>>): Promise<import("./confirmation-description.js").ConfirmationDescription>;

package/dist/extension/lib/ontology-tools.mjs

@@ -150,13 +150,6 @@ function ontologyTools(options = {}) {
 			if (!runtimeSources.has(memberId)) await rpc(memberId, "tools/list", {}, signal);
 			return runtimeSources.get(memberId) === true;
 		},
-		async capabilities(memberId) {
-			const result = await rpc(memberId, "tools/list", {});
-			return {
-				chatPosting: Array.isArray(result.tools) && result.tools.map(object).some(supportsChatPost),
-				runtimeSource: runtimeSources.get(memberId) === true
-			};
-		},
 		async supportsChatPosting(memberId) {
 			const result = await rpc(memberId, "tools/list", {});
 			return Array.isArray(result.tools) && result.tools.map(object).some(supportsChatPost);

package/dist/extension/lib/telegram/adapter.d.ts

@@ -33,7 +33,7 @@ export interface TelegramAdapterOptions {
     /** The mounted `sessions`. */
     readonly sessions: () => SessionSettings;
     readonly admission?: () => AdmissionSettings;
-    readonly confirmationMode?: () => "deferred" | "held";
+    readonly confirmationMode?: () => "deferred" | "held" | "native";
     readonly decide: DecideFunction;
     readonly environment?: Environment;
     readonly token?: RuntimeToken;

package/dist/extension/lib/telegram/adapter.mjs

@@ -22,7 +22,7 @@ import { MAXIMUM_DOWNLOAD_BYTES, connectionProxy } from "../connection-proxy.mjs
 import { dispatchStructuredMessage, structuredMessage } from "./structured.mjs";
 import { scopedAddress, sessionPolicy } from "./sessions.mjs";
 import { handleWorkspaceCallback, isWorkspaceCallback } from "./callbacks.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-CEQMVxxj.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-PY8Xja6K.mjs";
 import { attachmentLifecycle } from "./lifecycle.mjs";
 import { observedMessages } from "./observed.mjs";
 import { expireDeferredCards, handleDeferredCallback, isDeferredCallback } from "./deferred-confirmations.mjs";
@@ -181,7 +181,7 @@ function segmentstreamTelegram(options) {
 		},
 		uploadPolicy: { maxBytes: MAXIMUM_DOWNLOAD_BYTES },
 		onMessage: async (context, message) => {
-			if (options.confirmationMode?.() === "deferred") try {
+			try {
 				await expireDeferredCards(context, {
 					environment,
 					token,

package/dist/extension/lib/telegram/health.d.ts

@@ -11,7 +11,7 @@ export declare function healthRoute(input: {
     readonly configured: () => boolean;
     readonly verify: () => RuntimeTokenVerifier;
     readonly configuration?: () => {
-        readonly confirmationMode: "deferred" | "held" | null;
+        readonly confirmationMode: "deferred" | "held" | "native" | null;
         readonly attachmentLifecycle: boolean;
     };
 }): RouteDefinition<TelegramChannelState>;

package/dist/extension/lib/telegram/health.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-CEQMVxxj.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-PY8Xja6K.mjs";
 import { runtimeRequestFailure } from "./runtime-request.mjs";
 import { GET } from "eve/channels";
 const HEALTH_ROUTE = "/eve/v1/telegram/health";

package/dist/extension/lib/telegram/lifecycle.mjs

@@ -9,7 +9,7 @@ import { object } from "../confirmation-description.mjs";
 import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-Buuv7b1I.mjs";
 import { needsConfirmation } from "../confirmations.mjs";
 import { OntologyActionNotPermitted, actionToolName, ontologyTools } from "../ontology-tools.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-CEQMVxxj.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-PY8Xja6K.mjs";
 var AttachmentLifecycleNotPermitted = class extends Error {
 	code = "attachment_lifecycle_not_permitted";
 };

package/dist/extension/schedules/confirmations.mjs

@@ -13,7 +13,7 @@ var confirmations_default = defineSchedule({
 	cron: "* * * * *",
 	async run({ to }) {
 		const settings = segmentstream.config.channels.telegram;
-		if (!channelsEnabled(process.env) || !settings || segmentstream.config.confirmations.mode !== "deferred") return;
+		if (!channelsEnabled(process.env) || !settings) return;
 		await expireScheduledConfirmations(settings.connection, async (record, result) => {
 			await to(telegram_default, {
 				chatId: record.data.chatId,

package/dist/extension/tools/ontology_call_file.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("eve").DynamicSentinel<import("eve/tools").ToolDefinition<import("../lib/ontology-file-call.js").FileCall, unknown> | null>;
+export default _default;

package/dist/extension/tools/ontology_call_file.mjs

@@ -0,0 +1,11 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import segmentstream from "../extension.mjs";
+import { ontologyFileCall } from "../lib/ontology-file-call.mjs";
+import { defineDynamic } from "eve/tools";
+var ontology_call_file_default = defineDynamic({ events: { "turn.started": () => segmentstream.config.ontology.connection && segmentstream.config.sandbox ? ontologyFileCall(() => segmentstream.config.texts ?? {}) : null } });
+export { ontology_call_file_default as default };

package/dist/tools/index.d.ts

@@ -6,6 +6,6 @@ export { default as attachments_promote } from "../extension/tools/attachments_p
 export { default as attachments_read } from "../extension/tools/attachments_read.js";
 export { default as attachments_send } from "../extension/tools/attachments_send.js";
 export { default as attachments_table } from "../extension/tools/attachments_table.js";
-export { default as ontology } from "../extension/tools/ontology.js";
+export { default as ontology_call_file } from "../extension/tools/ontology_call_file.js";
 export { default as questions_ask } from "../extension/tools/questions_ask.js";
 export { default as sandbox } from "../extension/tools/sandbox.js";

package/dist/tools/index.mjs

@@ -10,7 +10,7 @@ import attachments_promote_default from "../extension/tools/attachments_promote.
 import attachments_read_default from "../extension/tools/attachments_read.mjs";
 import attachments_send_default from "../extension/tools/attachments_send.mjs";
 import attachments_table_default from "../extension/tools/attachments_table.mjs";
-import ontology_default from "../extension/tools/ontology.mjs";
+import ontology_call_file_default from "../extension/tools/ontology_call_file.mjs";
 import questions_ask_default from "../extension/tools/questions_ask.mjs";
 import sandbox_default from "../extension/tools/sandbox.mjs";
-export { attachments_discard_default as attachments_discard, attachments_list_default as attachments_list, attachments_promote_default as attachments_promote, attachments_read_default as attachments_read, attachments_send_default as attachments_send, attachments_table_default as attachments_table, ontology_default as ontology, questions_ask_default as questions_ask, sandbox_default as sandbox };
+export { attachments_discard_default as attachments_discard, attachments_list_default as attachments_list, attachments_promote_default as attachments_promote, attachments_read_default as attachments_read, attachments_send_default as attachments_send, attachments_table_default as attachments_table, ontology_call_file_default as ontology_call_file, questions_ask_default as questions_ask, sandbox_default as sandbox };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@segmentstream/agent",
-  "version": "0.17.21",
+  "version": "0.18.0",
   "description": "Mount a SegmentStream workspace's agent on eve: the ontology as tools, acting as the member who writes, and Telegram through the workspace's connection.",
   "license": "Apache-2.0",
   "author": "SegmentStream",
@@ -66,7 +66,7 @@
   },
   "dependencies": {
     "@chat-adapter/telegram": "4.41.0",
-    "@segmentstream-cloud/ontology": "0.58.0",
+    "@segmentstream-cloud/ontology": "0.58.1",
     "@vercel/oidc": "^3.8.4",
     "ai": "^7.0.128",
     "csv-parse": "^7.0.3",

package/dist/extension/lib/ontology-arguments.d.ts

@@ -1,28 +0,0 @@
-import { type SandboxContext } from "./sandbox-session.js";
-/**
- * The arguments of `segmentstream__ontology_call`: inline as `arguments`, or, with the sandbox on,
- * as `arguments_file`, the path of a JSON object a script wrote in the session's sandbox. A large
- * payload computed in the sandbox then reaches the ontology byte for byte instead of being retyped
- * by the model. The file is read through the same gate as every sandbox file the platform takes.
- */
-/** The largest JSON file `arguments_file` may name. */
-export declare const MAXIMUM_ARGUMENTS_FILE_BYTES: number;
-export declare const ONTOLOGY_ARGUMENTS_ERROR_CODES: readonly ["ontology_arguments_ambiguous", "ontology_arguments_file_unavailable", "ontology_arguments_file_unreadable", "ontology_arguments_file_too_large", "ontology_arguments_file_invalid_json", "ontology_arguments_file_not_object"];
-export type OntologyArgumentsErrorCode = (typeof ONTOLOGY_ARGUMENTS_ERROR_CODES)[number];
-/** The model's arguments cannot be used; the message starts with the code the model reads. */
-export declare class OntologyArgumentsError extends Error {
-    readonly name = "OntologyArgumentsError";
-    readonly code: OntologyArgumentsErrorCode;
-    constructor(code: OntologyArgumentsErrorCode, detail: string, options?: ErrorOptions);
-}
-export interface OntologyCallInput {
-    readonly arguments?: Record<string, unknown>;
-    readonly arguments_file?: string;
-}
-/**
- * The arguments an `ontology_call` runs with: `arguments`, the object in `arguments_file`, or an
- * empty object when neither is given, as before `arguments_file` existed.
- */
-export declare function ontologyCallArguments(input: OntologyCallInput, context: SandboxContext, options: {
-    readonly sandbox: boolean;
-}): Promise<Record<string, unknown>>;

package/dist/extension/lib/ontology-arguments.mjs

@@ -1,54 +0,0 @@
-import { fileURLToPath as __eveFileURLToPath } from "node:url";
-import { dirname as __eveDirname } from "node:path";
-import { createRequire as __eveCreateRequire } from "node:module";
-const __filename = __eveFileURLToPath(import.meta.url);
-__eveDirname(__filename);
-__eveCreateRequire(import.meta.url);
-import { SandboxFileRefused, SandboxFileTooLarge, SandboxUnavailableError, sandboxFile } from "./sandbox-session.mjs";
-const MAXIMUM_ARGUMENTS_FILE_BYTES = 1048576;
-const ONTOLOGY_ARGUMENTS_ERROR_CODES = [
-	"ontology_arguments_ambiguous",
-	"ontology_arguments_file_unavailable",
-	"ontology_arguments_file_unreadable",
-	"ontology_arguments_file_too_large",
-	"ontology_arguments_file_invalid_json",
-	"ontology_arguments_file_not_object"
-];
-var OntologyArgumentsError = class extends Error {
-	name = "OntologyArgumentsError";
-	code;
-	constructor(code, detail, options) {
-		super(`${code}: ${detail}`, options);
-		this.code = code;
-	}
-};
-function isObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-async function readArgumentsFile(context, path) {
-	let content;
-	try {
-		({content} = await sandboxFile(context, path, { maximumBytes: MAXIMUM_ARGUMENTS_FILE_BYTES }));
-	} catch (cause) {
-		if (cause instanceof SandboxUnavailableError) throw new OntologyArgumentsError("ontology_arguments_file_unavailable", cause.message, { cause });
-		if (cause instanceof SandboxFileTooLarge) throw new OntologyArgumentsError("ontology_arguments_file_too_large", `${path} is larger than ${MAXIMUM_ARGUMENTS_FILE_BYTES} bytes.`, { cause });
-		if (cause instanceof SandboxFileRefused) throw new OntologyArgumentsError("ontology_arguments_file_unreadable", cause.message, { cause });
-		throw cause;
-	}
-	let value;
-	try {
-		value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(content));
-	} catch (cause) {
-		throw new OntologyArgumentsError("ontology_arguments_file_invalid_json", `${path} is not a UTF-8 JSON document.`, { cause });
-	}
-	if (!isObject(value)) throw new OntologyArgumentsError("ontology_arguments_file_not_object", `${path} holds JSON ${value === null ? "null" : Array.isArray(value) ? "array" : typeof value}, not an object.`);
-	return value;
-}
-async function ontologyCallArguments(input, context, options) {
-	if (input.arguments_file === void 0) return input.arguments ?? {};
-	if (input.arguments !== void 0) throw new OntologyArgumentsError("ontology_arguments_ambiguous", "give arguments or arguments_file, not both.");
-	if (!options.sandbox) throw new OntologyArgumentsError("ontology_arguments_file_unavailable", "arguments_file needs the sandbox, which agent/segmentstream.json turns on with \"sandbox\": true.");
-	if (typeof input.arguments_file !== "string") throw new OntologyArgumentsError("ontology_arguments_file_unreadable", "arguments_file must be the absolute path of a file inside /workspace.");
-	return readArgumentsFile(context, input.arguments_file);
-}
-export { MAXIMUM_ARGUMENTS_FILE_BYTES, ONTOLOGY_ARGUMENTS_ERROR_CODES, OntologyArgumentsError, ontologyCallArguments };

package/dist/extension/lib/ontology-gateway.d.ts

@@ -1,20 +0,0 @@
-import type { ToolContext } from "eve/tools";
-import { ontologyTools } from "./ontology-tools.js";
-type Options = Omit<NonNullable<Parameters<typeof ontologyTools>[0]>, "principal">;
-/** Metadata is requested only when the model uses it, never while registering its tools. */
-export declare function ontologyMetadata(memberId: string, operation: "describe" | "discover", input: Record<string, unknown>, context: ToolContext, options?: Options): Promise<Record<string, unknown>>;
-/** Ordinary record operations are not part of entity/action discovery. Inspect their
- * real member-filtered MCP schemas on demand, never during dynamic registration. */
-export declare function ontologyInspect(memberId: string, input: {
-    name?: string;
-    query?: string;
-    after?: string;
-    limit?: number;
-}, context: ToolContext, options?: Options): Promise<{
-    next_after?: string | undefined;
-    tools: (Record<string, unknown> & {
-        name: string;
-        description: string;
-    })[];
-}>;
-export {};

package/dist/extension/lib/ontology-gateway.mjs

@@ -1,52 +0,0 @@
-import { fileURLToPath as __eveFileURLToPath } from "node:url";
-import { dirname as __eveDirname } from "node:path";
-import { createRequire as __eveCreateRequire } from "node:module";
-const __filename = __eveFileURLToPath(import.meta.url);
-__eveDirname(__filename);
-__eveCreateRequire(import.meta.url);
-import { i as memberIdOf, u as runtimeEnvelope } from "../../_chunks/principal-Dmm-cXNF.mjs";
-import { object } from "./confirmation-description.mjs";
-import { readOntologyMetadata } from "./ontology-metadata-read.mjs";
-async function ontologyMetadata(memberId, operation, input, context, options = {}) {
-	const principal = context.session.auth.current;
-	if (memberIdOf(principal) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	const result = await readOntologyMetadata(memberId, {
-		method: "tools/call",
-		params: {
-			name: operation,
-			arguments: input
-		}
-	}, context, {
-		...options,
-		envelope: runtimeEnvelope({
-			principal,
-			sessionId: context.session.id,
-			callId: context.callId
-		})
-	});
-	return result.structuredContent === void 0 ? result : object(result.structuredContent);
-}
-async function ontologyInspect(memberId, input, context, options = {}) {
-	const principal = context.session.auth.current;
-	if (memberIdOf(principal) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	const listing = await readOntologyMetadata(memberId, {
-		method: "tools/list",
-		params: {}
-	}, context, options);
-	const tools = (Array.isArray(listing.tools) ? listing.tools.map(object) : []).flatMap((tool) => typeof tool.name === "string" ? [{
-		...tool,
-		name: tool.name,
-		description: String(tool.description ?? "")
-	}] : []);
-	const words = input.query?.toLowerCase().split(/\s+/u).filter(Boolean) ?? [];
-	const matched = tools.filter((tool) => input.name !== void 0 ? tool.name === input.name : words.every((word) => `${tool.name} ${tool.description}`.toLowerCase().includes(word))).sort((a, b) => a.name.localeCompare(b.name));
-	if (input.name !== void 0 && matched.length === 0) throw new Error("The requested operation is not available to the current member.");
-	const remaining = matched.filter((tool) => input.after === void 0 || tool.name.localeCompare(input.after) > 0);
-	const limit = Math.min(50, Math.max(1, input.limit ?? 20));
-	const page = remaining.slice(0, limit);
-	return {
-		tools: page,
-		...remaining.length > limit ? { next_after: page.at(-1).name } : {}
-	};
-}
-export { ontologyInspect, ontologyMetadata };

package/dist/extension/lib/ontology-metadata-read.d.ts

@@ -1,15 +0,0 @@
-import type { ToolContext } from "eve/tools";
-import { ontologyTools } from "./ontology-tools.js";
-type Options = Omit<NonNullable<Parameters<typeof ontologyTools>[0]>, "principal">;
-/** Only metadata reads enter this boundary. Never cache permission/prepare checks or retry actions. */
-export declare function readOntologyMetadata(memberId: string, request: {
-    method: "tools/list";
-    params: Record<string, never>;
-} | {
-    method: "tools/call";
-    params: {
-        name: "discover" | "describe";
-        arguments: Record<string, unknown>;
-    };
-}, context: ToolContext, options?: Options): Promise<Record<string, unknown>>;
-export {};

package/dist/extension/lib/ontology-metadata-read.mjs

@@ -1,136 +0,0 @@
-import { fileURLToPath as __eveFileURLToPath } from "node:url";
-import { dirname as __eveDirname } from "node:path";
-import { createRequire as __eveCreateRequire } from "node:module";
-const __filename = __eveFileURLToPath(import.meta.url);
-__eveDirname(__filename);
-__eveCreateRequire(import.meta.url);
-import { appOrigin } from "./environment.mjs";
-import { i as memberIdOf } from "../../_chunks/principal-Dmm-cXNF.mjs";
-import { redactDiagnostic } from "./diagnostics.mjs";
-import { object } from "./confirmation-description.mjs";
-import { OntologyToolRejected, ontologyTools } from "./ontology-tools.mjs";
-import { randomUUID } from "node:crypto";
-import { isDeepStrictEqual } from "node:util";
-const scopes = new Map();
-const cache = new Map();
-let cachedBytes = 0;
-const CACHE_BYTES = 8388608;
-const CACHE_TTL = 3e4;
-const RUNTIME_SOURCE_TTL = 3e5;
-const METADATA_TIMEOUT = 1e4;
-function remove(key) {
-	cachedBytes -= cache.get(key)?.bytes ?? 0;
-	cache.delete(key);
-}
-function retryable(error, depth = 0) {
-	if (depth > 8) return false;
-	const value = object(error);
-	if (object(value.structuredContent).error === "internal_error") return true;
-	if (typeof value.status === "number") return value.status === 429 || value.status >= 500;
-	if ([
-		"TypeError",
-		"TimeoutError",
-		"AbortError"
-	].includes(String(value.name))) return true;
-	return value.cause !== void 0 && retryable(value.cause, depth + 1);
-}
-function invalidatesSnapshot(error, depth = 0) {
-	if (depth > 8) return false;
-	const value = object(error);
-	return value.status === 401 || value.status === 403 || [
-		"ontology_version_mismatch",
-		"forbidden",
-		"unauthorized",
-		"not_invited"
-	].includes(String(object(value.structuredContent).error)) || value.cause !== void 0 && invalidatesSnapshot(value.cause, depth + 1);
-}
-async function readOntologyMetadata(memberId, request, context, options = {}) {
-	const principal = context.session.auth.current;
-	if (memberIdOf(principal) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	const session = context.session.id;
-	const args = request.method === "tools/call" ? request.params.arguments : {};
-	const scope = principal && typeof session === "string" && session !== "" ? JSON.stringify([
-		appOrigin(options.environment ?? process.env),
-		session,
-		memberId
-	]) : void 0;
-	let state = scope === void 0 ? void 0 : scopes.get(scope);
-	if (scope !== void 0 && principal) {
-		if (!state || !isDeepStrictEqual(state.principal, principal)) state = {
-			principal: structuredClone(principal),
-			generation: 0,
-			runtimeSources: new Map(),
-			runtimeSourcesUntil: 0
-		};
-		if (state.runtimeSourcesUntil <= Date.now()) {
-			state.runtimeSources.clear();
-			state.runtimeSourcesUntil = Date.now() + RUNTIME_SOURCE_TTL;
-		}
-		scopes.delete(scope);
-		scopes.set(scope, state);
-		while (scopes.size > 128) scopes.delete(scopes.keys().next().value);
-	}
-	const generation = state?.generation;
-	const key = state && args.expected_hash === void 0 ? JSON.stringify([scope, request]) : void 0;
-	const existing = key === void 0 ? void 0 : cache.get(key);
-	if (existing && existing.state === state && existing.generation === generation && existing.until > Date.now()) {
-		cache.delete(key);
-		cache.set(key, existing);
-		return structuredClone(existing.value);
-	}
-	if (key !== void 0) remove(key);
-	const client = ontologyTools({
-		...options,
-		principal,
-		...state ? { runtimeSources: state.runtimeSources } : {}
-	});
-	let attempts = 0;
-	for (;;) {
-		attempts++;
-		try {
-			const result = await client.rpc(memberId, request.method, request.params, AbortSignal.timeout(METADATA_TIMEOUT));
-			if (key !== void 0 && scope !== void 0 && state && scopes.get(scope) === state && state.generation === generation) {
-				const bytes = Buffer.byteLength(JSON.stringify(result));
-				if (bytes <= 2097152) {
-					while (cache.size && (cache.size >= 128 || cachedBytes + bytes > CACHE_BYTES)) remove(cache.keys().next().value);
-					remove(key);
-					cache.set(key, {
-						state,
-						generation: state.generation,
-						value: structuredClone(result),
-						until: Date.now() + CACHE_TTL,
-						bytes
-					});
-					cachedBytes += bytes;
-				}
-			}
-			return result;
-		} catch (cause) {
-			if (state && invalidatesSnapshot(cause)) {
-				state.generation++;
-				state.runtimeSources.clear();
-				for (const [cachedKey, entry] of cache) if (entry.state === state) remove(cachedKey);
-			}
-			const mayRetry = retryable(cause);
-			if (mayRetry && args.expected_hash === void 0 && attempts < 3) {
-				await new Promise((resolve) => setTimeout(resolve, attempts * 100));
-				continue;
-			}
-			const reference = randomUUID();
-			const publicReason = cause instanceof OntologyToolRejected ? `;${cause.message.slice(0, 4096)}` : "";
-			const error = Object.assign(new Error(`ontology_metadata_unavailable:${reference};retryable=${mayRetry}${publicReason}`, { cause }), {
-				code: "ontology_metadata_unavailable",
-				retryable: mayRetry,
-				reference,
-				attempts
-			});
-			console.error("[segmentstream] ontology_metadata_unavailable", {
-				reference,
-				attempts,
-				error: redactDiagnostic(error, new Set())
-			});
-			throw error;
-		}
-	}
-}
-export { readOntologyMetadata };