@segmentstream/agent 0.8.4 → 0.8.6

package/README.md

@@ -447,6 +447,14 @@ Building the package needs Node.js 24, as eve does: `npm run build` runs `eve ex
 which writes the agent-shaped `dist/extension` tree, its declarations and eve's compatibility
 manifest.
 
+SDK-authored tool results and conversation archive events normalize runtime values to JSON
+before returning or encoding them. Exact decimal/bigint strings and binary byte views are
+preserved; conversion diagnostics identify the boundary and value path without logging payloads.
+Maps use entry arrays so distinct key types and object keys retain every entry. Native brand and
+binary getters avoid provider accessors; projection failures retain their redacted cause graph
+through the shared operator diagnostics reporter.
+This guard does not intercept Eve's own workflow streams or third-party tools.
+
 ## Environment
 
 The platform sets every variable on the workspace's Vercel project. None of them is a model key or
@@ -598,3 +606,14 @@ HTTP 503 with a correlation reference before durable queue admission. Telegram
 can redeliver the same source; the hook and attachment reservation must preserve
 idempotent source membership, storage results and the single acknowledgement.
 Such a failure must not become an HTTP success with no queued work.
+
+### Legacy held approvals
+
+Explicit `confirmations.mode: "held"` overrides the deferred default. Switching a package version
+does not migrate already-running held turns. In deferred mode the Telegram adapter reads the owning session's
+recorded approval inputs and requests cancellation of that exact turn before admitting a new
+addressed message. It never approves the old call or reuses the old member's authorization.
+Cancellation failure requests webhook replay; terminal/resolved approvals are left alone.
+Deferred mode retains its ten-minute database deadline and minute expiry sweep. Runtime health
+reports the effective confirmation mode and attachment-lifecycle presence behind its existing
+runtime authentication; source pins and public health alone are not settings-adoption proof.

package/dist/_chunks/{build-metadata-ByEgTqDs.mjs → build-metadata-BIjXU_y3.mjs}

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-var version = "0.8.4";
+var version = "0.8.6";
 function agentBuild(environment = process.env) {
 	return {
 		agent: version,