@segmentstream/agent 0.25.6 → 0.25.7

package/dist/_chunks/{build-metadata-C_OoLu9T.mjs → build-metadata-Wt6SOKfE.mjs}

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-var version = "0.25.6";
+var version = "0.25.7";
 function agentBuild(environment = process.env) {
 	return {
 		agent: version,

package/dist/extension/instructions.md

@@ -48,7 +48,8 @@ when it matters, tell the requester the action did not run and that they can ask
   the tool boundary's workspace-authored confirmation buttons. Call the action to start that flow; never ask for
   approval in prose or treat a text acknowledgement as approval. Wait for the button outcome.
   When the tool schema offers `_confirmation`, supply {question, confirm, cancel, done,
-  cancelled, failed, expired?, edit?} in the chat's language. Describe the action and key
+  cancelled, failed, expired?, edit?} in the chat's language; a call needing a card without
+  valid copy is refused before any card. Describe the action and key
   parameters in a plain single-line question (at most 300 characters); labels are at most
   24 characters. No IDs, tool names, snake_case, URLs, credentials, or markup. The platform
   adds trusted facts. Omit this argument on older tools without schema support.

package/dist/extension/lib/build-metadata.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../_chunks/build-metadata-C_OoLu9T.mjs";
+import { t as agentBuild } from "../../_chunks/build-metadata-Wt6SOKfE.mjs";
 export { agentBuild };

package/dist/extension/lib/confirmations.d.ts

@@ -39,6 +39,11 @@ export declare const confirmations: StateHandle<Record<string, Confirmation>>;
 export declare function actionApproval(options: {
     readonly labels: (actor: OntologyActor, action: string, input: Readonly<Record<string, unknown>>) => Promise<ActionAnnotations>;
     readonly describe?: (actor: OntologyActor, action: string, input: Readonly<Record<string, unknown>>) => Promise<ConfirmationDescription>;
+    /**
+     * The call's `_confirmation` when the tool input does not carry it itself, such as a file-backed
+     * call whose arguments are snapshotted elsewhere. Defaults to the tool input's own field.
+     */
+    readonly copy?: (actor: OntologyActor, input: Readonly<Record<string, unknown>>) => unknown;
     readonly texts?: () => TelegramTexts;
     readonly state?: StateHandle<Record<string, Confirmation>>;
     readonly now?: () => number;

package/dist/extension/lib/confirmations.mjs

@@ -65,10 +65,13 @@ function actionApproval(options) {
 				console.warn("The ontology action permission check failed.", error);
 				return denied("The action is unavailable or the member no longer has permission.");
 			}
-			const copy = labels.confirmation === false ? void 0 : confirmationCopy(ctx.toolInput?._confirmation);
+			const offered = options.copy === void 0 ? ctx.toolInput?._confirmation : options.copy(member(memberId), ctx.toolInput ?? {});
+			const copy = labels.confirmation === false ? void 0 : confirmationCopy(offered);
 			const businessInput = Object.fromEntries(Object.entries(ctx.toolInput ?? {}).filter(([key]) => key !== "_confirmation"));
 			const posting = isChatPost(ctx.toolName);
 			let description;
+			const missingCopy = () => denied((offered === void 0 ? "This action needs a confirmation card and the call has no _confirmation. " : "The call's _confirmation is invalid. ") + "Make the call again with _confirmation (for a file call, in its arguments file) in the chat's language: a plain single-line question naming the action and its key records and amounts (at most 300 characters), and short confirm, cancel, done, cancelled and failed labels without emoji.");
+			if (posting && saved === void 0 && labels.confirmation === true && copy === void 0) return missingCopy();
 			if (posting) try {
 				description = await options.describe?.(member(memberId), ctx.toolName, businessInput);
 				const preview = description?.chatPost;
@@ -96,6 +99,7 @@ function actionApproval(options) {
 			}
 			if (saved !== void 0) return denied("The original call is waiting for its Confirm / Cancel buttons.");
 			if (!posting && !needsConfirmation(labels)) return "approved";
+			if (labels.confirmation === true && copy === void 0) return missingCopy();
 			try {
 				if (!posting) description = await options.describe?.(member(memberId), ctx.toolName, businessInput);
 				if (description === void 0) throw new Error("A trusted confirmation description is required.");

package/dist/extension/lib/ontology-file-call.mjs

@@ -48,7 +48,15 @@ function ontologyFileCall(texts) {
 		},
 		describe: async (actor, _action, input) => {
 			const saved = bound(input, ownerOf(actor));
-			return ontologyTools({ principal }).describe(actor, saved.name, saved.arguments);
+			const business = Object.fromEntries(Object.entries(saved.arguments).filter(([key]) => key !== "_confirmation"));
+			return ontologyTools({ principal }).describe(actor, saved.name, business);
+		},
+		copy: (actor, input) => {
+			try {
+				return bound(input, ownerOf(actor)).arguments._confirmation;
+			} catch {
+				return;
+			}
 		},
 		texts
 	});
@@ -70,7 +78,7 @@ function ontologyFileCall(texts) {
 	}
 	return defineTool({
 		deferred: true,
-		description: "Call an ontology tool with the complete JSON object computed in a sandbox file. Use for script-generated arguments, or set save_result to save a permitted read's exact JSON result in the isolated sandbox for scripts, without copying rows through the model. Find the real tool and its schema through Eve search first; ordinary inline calls use Eve. Chat posting is excluded. Saving a result never permits a write tool or expands query limits.",
+		description: "Call an ontology tool with the complete JSON object computed in a sandbox file. Use for script-generated arguments, or set save_result to save a permitted read's exact JSON result in the isolated sandbox for scripts, without copying rows through the model. Find the real tool and its schema through Eve search first; ordinary inline calls use Eve. Chat posting is excluded. Saving a result never permits a write tool or expands query limits. When the tool's schema offers _confirmation and the call needs a card, put it in the file.",
 		inputSchema: {
 			type: "object",
 			properties: {

package/dist/extension/lib/telegram/adapter.mjs

@@ -24,7 +24,7 @@ import { MAXIMUM_DOWNLOAD_BYTES, connectionProxy } from "../connection-proxy.mjs
 import { dispatchStructuredMessage, structuredMessage } from "./structured.mjs";
 import { scopedAddress, sessionPolicy } from "./sessions.mjs";
 import { handleWorkspaceCallback, isWorkspaceCallback } from "./callbacks.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-C_OoLu9T.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-Wt6SOKfE.mjs";
 import { attachmentLifecycle } from "./lifecycle.mjs";
 import { gatewayImageDescriber } from "./images.mjs";
 import { gatewayAttachmentDescriber } from "./attachment-description.mjs";

package/dist/extension/lib/telegram/health.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { runtimeRequestFailure } from "./runtime-request.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-C_OoLu9T.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-Wt6SOKfE.mjs";
 import { GET } from "eve/channels";
 const HEALTH_ROUTE = "/eve/v1/telegram/health";
 function healthRoute(input) {

package/dist/extension/lib/telegram/lifecycle.mjs

@@ -10,7 +10,7 @@ import { n as currentInboundRequest, p as reportTelegramError } from "../../../_
 import { member } from "../actor.mjs";
 import { needsConfirmation } from "../confirmations.mjs";
 import { OntologyActionNotPermitted, actionToolName, ontologyTools } from "../ontology-tools.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-C_OoLu9T.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-Wt6SOKfE.mjs";
 var AttachmentLifecycleNotPermitted = class extends Error {
 	code = "attachment_lifecycle_not_permitted";
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@segmentstream/agent",
-  "version": "0.25.6",
+  "version": "0.25.7",
   "description": "Mount a SegmentStream workspace's agent on eve: the ontology as tools, acting as the member who writes, and Telegram through the workspace's connection.",
   "license": "Apache-2.0",
   "author": "SegmentStream",