@segmentstream/agent 0.8.4 → 0.8.6

package/dist/extension/lib/attachment-tables.mjs

@@ -115,8 +115,9 @@ function present(value) {
 }
 function detectedHeader(rows) {
 	const candidates = rows.slice(0, 50);
-	const width = candidates.reduce((maximum, row) => Math.max(maximum, row.length), 0);
-	const labels = candidates.findIndex((row) => row.length >= Math.max(1, width - 1) && row.some(present) && row.filter(present).every((value) => typeof value === "string" && numeric(value) === null && dateValue(value, "day_first") === null && dateValue(value, "month_first") === null));
+	const width = candidates.reduce((maximum, row) => Math.max(maximum, row.findLastIndex(present) + 1), 0);
+	const minimumLabels = Math.min(width, 2);
+	const labels = candidates.findIndex((row) => row.filter(present).length >= minimumLabels && row.some(present) && row.filter(present).every((value) => typeof value === "string" && numeric(value) === null && dateValue(value, "day_first") === null && dateValue(value, "month_first") === null));
 	if (labels >= 0) return labels;
 	return -1;
 }

package/dist/extension/lib/build-metadata.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../_chunks/build-metadata-ByEgTqDs.mjs";
+import { t as agentBuild } from "../../_chunks/build-metadata-BIjXU_y3.mjs";
 export { agentBuild };

package/dist/extension/lib/conversations.mjs

@@ -6,6 +6,7 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { proxyEnvironment } from "./environment.mjs";
 import { runtimeToken } from "./runtime-token.mjs";
+import { r as workflowValue } from "../../_chunks/workflow-serializable-BwttWNmY.mjs";
 function collapseConversationEvents(events) {
 	const latest = new Map();
 	for (const event of events) {
@@ -20,7 +21,7 @@ function collapseConversationEvents(events) {
 	return [...latest.values()];
 }
 function conversationEvent(input) {
-	return {
+	return workflowValue({
 		threadId: null,
 		participantIds: [],
 		senderId: null,
@@ -40,7 +41,12 @@ function conversationEvent(input) {
 		attachments: [],
 		at: new Date().toISOString(),
 		...input
-	};
+	}, {
+		boundary: "SDK conversation event",
+		eventType: input.kind,
+		toolName: input.toolName ?? void 0,
+		toolCallId: input.toolCallId ?? void 0
+	});
 }
 function conversations(input = {}) {
 	const environment = input.environment ?? process.env;
@@ -58,7 +64,7 @@ function conversations(input = {}) {
 				"x-segmentstream-organization-id": env.organizationId,
 				"x-segmentstream-runtime-identity": identity
 			},
-			body: JSON.stringify(body),
+			body: JSON.stringify(workflowValue(body, { boundary: "conversation archive" })),
 			signal: AbortSignal.timeout(15e3)
 		});
 		if (!response.ok) throw new Error(`Conversation archive ${path} failed (${response.status}); request ${response.headers.get("x-request-id") ?? "unknown"}.`);
@@ -88,7 +94,7 @@ function summarizeArguments(value) {
 		if (item !== null && typeof item === "object") return Object.fromEntries(Object.entries(item).slice(0, 30).map(([key, entry]) => [key, sensitive.test(key) ? "[redacted]" : visit(entry, depth + 1)]));
 		return typeof item === "string" ? item.replace(/(https?:\/\/)[^/@\s]+:[^/@\s]+@/gu, "$1[redacted]@").replace(/([?&](?:token|access_token|api_key|signature|secret|password)=)[^&#\s]*/giu, "$1[redacted]").replace(/\bBearer [A-Za-z0-9_.~+/-]+=*/giu, "Bearer [redacted]").slice(0, 500) : item;
 	};
-	return (JSON.stringify(visit(value, 0)) ?? "{}").slice(0, 4e3);
+	return JSON.stringify(workflowValue(visit(value, 0), { boundary: "conversation arguments" })).slice(0, 4e3);
 }
 function retainedInboundEvidence(event) {
 	if (event.kind !== "inbound") return;

package/dist/extension/lib/telegram/adapter.mjs

@@ -8,7 +8,7 @@ import { manifestOf } from "../../config.mjs";
 import { appOrigin, channelsEnabled, proxyEnvironment, runtimeIdentityEnvironment, webhookSecret } from "../environment.mjs";
 import { conversationLanguage, telegramPrincipal } from "./principal.mjs";
 import { chooseModel } from "../../model.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-ByEgTqDs.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-BIjXU_y3.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
 import { telegramSendScope } from "./send-queue.mjs";
 import { d as failureText, h as withDeliveryLocale, i as withReplacedText, m as safeTelegramFetch, n as currentInboundRequest, p as reportTelegramError, r as runInboundRequest, t as InboundRequest } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
@@ -166,6 +166,7 @@ function segmentstreamTelegram(options) {
 					request: currentInboundRequest(),
 					dependencies: {
 						policy: settings().policy,
+						recoverHeldApprovals: options.confirmationMode?.() === "deferred",
 						...settings().attachmentLifecycle === void 0 ? {} : { lifecycle: (principal, memberId, message) => attachmentLifecycle({
 							configuration: settings().attachmentLifecycle,
 							principal,
@@ -252,7 +253,7 @@ function segmentstreamTelegram(options) {
 			} catch (error) {
 				recordGateDecision("inbound_message_failed");
 				const errorId = reportTelegramError("inbound_message_failed", error, { chatId: message.chat.id });
-				if (inbound?.lifecycleKey !== void 0) inbound.retryReference = errorId;
+				if (inbound?.retryReference !== void 0 || inbound?.lifecycleKey !== void 0) inbound.retryReference = errorId;
 				else await context.telegram.post(failureText(errorId));
 				return null;
 			} finally {
@@ -394,7 +395,11 @@ function segmentstreamTelegram(options) {
 			chats,
 			enabled: () => channelsEnabled(environment),
 			configured: () => options.settings() !== null,
-			verify: () => verify ??= runtimeTokenVerifier(runtimeIdentityEnvironment(environment))
+			verify: () => verify ??= runtimeTokenVerifier(runtimeIdentityEnvironment(environment)),
+			configuration: () => ({
+				confirmationMode: options.confirmationMode?.() ?? null,
+				attachmentLifecycle: options.settings()?.attachmentLifecycle !== void 0
+			})
 		})]
 	};
 }
@@ -466,7 +471,7 @@ function gatedRoute(input) {
 					await Promise.all(pending);
 				}
 				if (inbound.retryReference !== void 0) return Response.json({
-					error: "attachment_intake_retry",
+					error: "telegram_turn_retry",
 					reference: inbound.retryReference
 				}, {
 					status: 503,

package/dist/extension/lib/telegram/confirmation-text.d.ts

@@ -11,6 +11,7 @@ export interface ConfirmationCopy {
     readonly cancelled: string;
     readonly failed: string;
     readonly expired?: string;
+    readonly interrupted?: string;
     readonly edit?: string;
 }
 export interface ConfirmationText {
@@ -23,6 +24,7 @@ export interface ConfirmationText {
     readonly completed: string;
     readonly failed: string;
     readonly expired: string;
+    readonly interrupted: string;
     readonly edit: string;
 }
 export declare function confirmationLocale(principal: SessionAuthContext | null, fallback?: string): string;

package/dist/extension/lib/telegram/confirmation-text.mjs

@@ -38,7 +38,11 @@ function confirmationCopy(value) {
 		"cancelled",
 		"failed"
 	];
-	const optional = ["expired", "edit"];
+	const optional = [
+		"expired",
+		"interrupted",
+		"edit"
+	];
 	const valid = (key) => {
 		const text = copy[key];
 		return typeof text === "string" && text === text.trim() && (key === "question" || !/[✅❌⌛⚠❓✏]/u.test(text)) && humanText(text, key === "question" ? 300 : 24) === text;
@@ -72,6 +76,7 @@ function renderConfirmation(description, copy) {
 		completed: copy === void 0 ? "✅" : `✅ ${copy.done}`,
 		failed: copy === void 0 ? "⚠️" : `⚠️ ${copy.failed}`,
 		expired: copy?.expired === void 0 ? "⌛" : `⌛ ${copy.expired}`,
+		interrupted: copy?.interrupted === void 0 ? "⏸" : `⏸ ${copy.interrupted}`,
 		edit: copy?.edit === void 0 ? "✏️" : `✏️ ${copy.edit}`
 	};
 }

package/dist/extension/lib/telegram/confirmations.mjs

@@ -70,7 +70,7 @@ function routingConfirmationState(events, prompt, at) {
 			}
 		}
 		if (event.type === "input.resolved" && Array.isArray(data.resolutions)) {
-			for (const resolution of data.resolutions) if (object(resolution).requestId === prompt.requestId) state = object(resolution).outcome === "approved" ? "approved" : "cancelled";
+			for (const resolution of data.resolutions) if (object(resolution).requestId === prompt.requestId) state = object(resolution).outcome === "approved" ? "approved" : object(resolution).outcome === "ignored" ? "interrupted" : "cancelled";
 		}
 		if (event.type === "action.result" && callId !== void 0 && object(data.result).callId === callId) state = data.status === "completed" ? "completed" : "failed";
 	}
@@ -361,7 +361,7 @@ function telegramConfirmationEvents(archive, observed, deferredOptions) {
 				const [callId, message] = entry;
 				const copy = message.copy ?? renderConfirmation();
 				const reason = confirmations.get()[callId]?.cancellationReason;
-				const status = resolution.outcome === "approved" ? copy.executing : reason === "expired" ? copy.expired : copy.cancelled;
+				const status = resolution.outcome === "approved" ? copy.executing : reason === "expired" ? copy.expired : resolution.outcome === "ignored" ? copy.interrupted : copy.cancelled;
 				const text = message.exactPost ? chatPostCardStatus(message.text, status) : `${message.text}\n\n${status}`;
 				const edit = () => channel.telegram.editMessageText({
 					messageId: message.messageId,
@@ -370,7 +370,7 @@ function telegramConfirmationEvents(archive, observed, deferredOptions) {
 				});
 				const prompt = {
 					...messagePrompt(message),
-					state: resolution.outcome === "approved" ? "approved" : reason === "expired" ? "expired" : "cancelled"
+					state: resolution.outcome === "approved" ? "approved" : reason === "expired" ? "expired" : resolution.outcome === "ignored" ? "interrupted" : "cancelled"
 				};
 				message.prompt = prompt;
 				await withConfirmationPrompt(prompt, () => message.exactPost ? withChatPostCard(text, edit, [...message.previewLinks ?? [], ...telegramTextLinks(status)]) : withConfirmationText(text, edit));

package/dist/extension/lib/telegram/health.d.ts

@@ -9,4 +9,8 @@ export declare function healthRoute(input: {
     readonly enabled: () => boolean;
     readonly configured: () => boolean;
     readonly verify: () => RuntimeTokenVerifier;
+    readonly configuration?: () => {
+        readonly confirmationMode: "deferred" | "held" | null;
+        readonly attachmentLifecycle: boolean;
+    };
 }): RouteDefinition<TelegramChannelState>;

package/dist/extension/lib/telegram/health.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-ByEgTqDs.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-BIjXU_y3.mjs";
 import { runtimeRequestFailure } from "./runtime-request.mjs";
 import { GET } from "eve/channels";
 const HEALTH_ROUTE = "/eve/v1/telegram/health";
@@ -16,7 +16,8 @@ function healthRoute(input) {
 		return Response.json({
 			status: registry.degraded ? "degraded" : "ok",
 			registry,
-			runtime: agentBuild()
+			runtime: agentBuild(),
+			...input.configuration === void 0 ? {} : { configuration: input.configuration() }
 		}, {
 			status: registry.degraded ? 503 : 200,
 			headers: { "cache-control": "no-store" }

package/dist/extension/lib/telegram/held-approvals.d.ts

@@ -0,0 +1,27 @@
+import type { CancelTurnResult } from "eve/channels";
+import type { RecordedEvent } from "./sessions.js";
+/** An approval is an input barrier, never permission to execute it while recovering a chat. */
+export declare function heldApprovals(events: readonly RecordedEvent[]): {
+    requestId: string;
+    callId: string;
+    action: string;
+    turnId: string;
+    at: string;
+}[];
+/** Cancel the exact parked turn; never steer a new member into its permissions or old task. */
+export declare function releaseHeldApproval(input: {
+    readonly events: readonly RecordedEvent[];
+    readonly addressed: boolean;
+    readonly now: number;
+    readonly cancel: (options: {
+        readonly turnId: string;
+    }) => Promise<CancelTurnResult>;
+}): Promise<{
+    status: string;
+    reason: string;
+    turnId: string;
+    startedAt: string;
+    actions: string[];
+    cancellation: "accepted";
+    executionRequested: boolean;
+} | undefined>;

package/dist/extension/lib/telegram/held-approvals.mjs

@@ -0,0 +1,51 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { object } from "../confirmation-description.mjs";
+import { CONFIRMATION_TTL_MS } from "../confirmations.mjs";
+function heldApprovals(events) {
+	const pending = new Map();
+	for (const event of events) {
+		const data = object(event.data);
+		if (event.type === "context.cleared" || event.type === "session.started") pending.clear();
+		if (event.type === "input.requested" && Array.isArray(data.requests)) for (const item of data.requests) {
+			const request = object(item);
+			const action = object(request.action);
+			if (request.kind === "tool-approval" && typeof request.requestId === "string" && typeof action.callId === "string" && typeof data.turnId === "string") pending.set(request.requestId, {
+				requestId: request.requestId,
+				callId: action.callId,
+				action: String(action.toolName ?? ""),
+				turnId: data.turnId,
+				at: event.meta.at
+			});
+		}
+		for (const [id, approval] of pending) if (event.type === "input.resolved" && Array.isArray(data.resolutions) && data.resolutions.some((item) => object(item).requestId === id) || event.type === "action.result" && object(data.result).callId === approval.callId || [
+			"turn.completed",
+			"turn.failed",
+			"turn.cancelled"
+		].includes(event.type) && data.turnId === approval.turnId) pending.delete(id);
+	}
+	return [...pending.values()];
+}
+async function releaseHeldApproval(input) {
+	const pending = heldApprovals(input.events);
+	if (new Set(pending.map((approval) => approval.turnId)).size !== 1) return;
+	const expired = pending.some((approval) => input.now - Date.parse(approval.at) >= CONFIRMATION_TTL_MS);
+	if (!input.addressed && !expired) return;
+	const turnId = pending[0].turnId;
+	const result = await input.cancel({ turnId });
+	if (result.status === "no_active_turn") return;
+	return {
+		status: "cancellation_requested",
+		reason: expired ? "expired" : "addressed",
+		turnId,
+		startedAt: pending[0].at,
+		actions: pending.map((approval) => approval.action),
+		cancellation: result.status,
+		executionRequested: false
+	};
+}
+export { heldApprovals, releaseHeldApproval };

package/dist/extension/lib/telegram/inbound-request.d.ts

@@ -37,7 +37,7 @@ export declare class InboundRequest {
     stopTyping: (() => void) | undefined;
     lifecycle: ReturnType<typeof import("./lifecycle.js").attachmentLifecycle> | undefined;
     lifecycleKey: string | undefined;
-    /** An admitted task must be redelivered if processing did not reach durable queue admission. */
+    /** A routed task must be redelivered if recovery or intake did not reach durable admission. */
     retryReference: string | undefined;
     lifecycleContext: string | undefined;
     monitor: ((session: Awaited<ReturnType<ChannelSource<unknown>["send"]>>, marker: string) => void) | undefined;

package/dist/extension/lib/telegram/inbound.d.ts

@@ -39,6 +39,8 @@ import type { PdfTextExtractor } from "./pdf-text.js";
  */
 export interface InboundDependencies {
     readonly policy: TelegramPolicy;
+    /** Recover old held sessions only when the workspace has chosen non-blocking confirmations. */
+    readonly recoverHeldApprovals?: boolean;
     readonly lifecycle?: (principal: import("eve/context").SessionAuthContext, memberId: string, message: TelegramMessage) => ReturnType<typeof attachmentLifecycle>;
     readonly admission: () => AdmissionSettings;
     readonly sessions: () => SessionSettings;

package/dist/extension/lib/telegram/inbound.mjs

@@ -22,6 +22,7 @@ import { recordGateDecision, recordInboundContent, recordRouteDecision } from ".
 import { chatContext } from "./chats.mjs";
 import { admitMessage, localizedText } from "../admission.mjs";
 import { attachmentsContext, inboundAttachments, stageFiles } from "./files.mjs";
+import { heldApprovals, releaseHeldApproval } from "./held-approvals.mjs";
 import { voiceOf, voiceText } from "./voice.mjs";
 const UNKNOWN_PRIVATE = "🔗";
 const UNKNOWN_IN_GROUP = "🔒";
@@ -721,6 +722,38 @@ async function handleInboundMessage(input) {
 		recordGateDecision("message_already_handled");
 		return null;
 	}
+	if (dependencies.recoverHeldApprovals === true && operations !== void 0 && dependencies.history !== void 0) {
+		let recoverySessionId;
+		try {
+			const session = await operations.resolveSession(address);
+			if (session !== void 0) {
+				recoverySessionId = session.id;
+				const previous = session.id === owner?.id ? questionHistory : await dependencies.history(session.id);
+				const recovery = heldApprovals(previous).length === 0 ? void 0 : await releaseHeldApproval({
+					events: await dependencies.history(session.id),
+					addressed: addressed !== void 0,
+					now: Date.now(),
+					cancel: (options) => {
+						if (session.cancel === void 0) throw new Error("The parked session does not support turn cancellation.");
+						return session.cancel(options);
+					}
+				});
+				if (recovery !== void 0) {
+					recordGateDecision("held_approval_cancellation_requested", "reply");
+					notes.push(`<approval_recovery>${JSON.stringify(recovery)}</approval_recovery>`);
+				}
+			}
+		} catch (error) {
+			if (input.request !== void 0) {
+				input.request.retryReference = reportTelegramError("held_approval_release_failed", error, {
+					sessionId: recoverySessionId,
+					messageId: sent.messageId
+				});
+				await input.request.finishClaim?.(false);
+			}
+			throw error;
+		}
+	}
 	if (voice !== void 0 && input.request !== void 0) input.request.text = text;
 	else if (voice !== void 0) notes.push(text);
 	if (answering && pending !== void 0 && input.request !== void 0) {

package/dist/extension/lib/telegram/lifecycle.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-ByEgTqDs.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-BIjXU_y3.mjs";
 import { object } from "../confirmation-description.mjs";
 import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
 import { needsConfirmation } from "../confirmations.mjs";

package/dist/extension/lib/telegram/observed.d.ts

@@ -62,7 +62,7 @@ export interface AgentMessage extends ObservedMessage {
 }
 /** Presentation only; no tool inputs, credential values or member identifiers. */
 export interface PendingConfirmation {
-    readonly state?: "pending" | "approved" | "cancelled" | "expired" | "completed" | "failed";
+    readonly state?: "pending" | "approved" | "cancelled" | "interrupted" | "expired" | "completed" | "failed";
     readonly action: string;
     readonly requestedBy: string | null;
     readonly at: string;

package/dist/extension/lib/telegram/sessions.d.ts

@@ -1,4 +1,5 @@
 import type { TelegramMessage } from "eve/channels/telegram";
+import type { CancelTurnResult } from "eve/channels";
 import type { SessionSettings } from "../../config.js";
 /**
  * Session policy for the Telegram channel (`agent-design.md`, section 4, and docs/agent.md,
@@ -56,6 +57,9 @@ export declare function historyOf(events: ReadonlyArray<RecordedEvent>): Session
 export interface SessionOperations {
     readonly resolveSession: (address: string) => Promise<{
         readonly id: string;
+        readonly cancel?: (options: {
+            readonly turnId: string;
+        }) => Promise<CancelTurnResult>;
     } | undefined>;
     readonly from: (address: string) => {
         compact(): Promise<unknown>;

package/dist/extension/lib/workflow-serializable.d.ts

@@ -0,0 +1,29 @@
+/** JSON data produced by SDK tools and conversation archive events. */
+export type WorkflowSerializable = null | boolean | number | string | WorkflowSerializable[] | {
+    [key: string]: WorkflowSerializable;
+};
+export interface SerializationIssue {
+    readonly path: string;
+    readonly reason: string;
+    readonly cause?: unknown;
+}
+export interface SerializationContext {
+    readonly boundary: string;
+    readonly toolName?: string;
+    readonly toolCallId?: string;
+    readonly eventType?: string;
+}
+/**
+ * Never mutate a provider result; read own data fields without invoking their getters.
+ * Undefined/functions/symbols disappear from
+ * objects and become null in arrays. An active-ancestor set breaks cycles without losing shared
+ * references. Limits also protect the durable writer from hostile proxies or excessively deep data.
+ */
+export declare function toWorkflowSerializable(value: unknown, report?: (issue: SerializationIssue) => void): WorkflowSerializable;
+/** Log paths and types, never payloads, provider bodies or credential values. */
+export declare function workflowValue(value: unknown, context: SerializationContext): WorkflowSerializable;
+/** Normalize only results authored by this SDK; leave Eve's execution and approval policy intact. */
+export declare function workflowToolResult(value: unknown, context: {
+    readonly toolName: string;
+    readonly callId: string;
+}): WorkflowSerializable;

package/dist/extension/lib/workflow-serializable.mjs

@@ -0,0 +1,8 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { n as workflowToolResult, r as workflowValue, t as toWorkflowSerializable } from "../../_chunks/workflow-serializable-BwttWNmY.mjs";
+export { toWorkflowSerializable, workflowToolResult, workflowValue };

package/dist/extension/tools/attachments_discard.d.ts

@@ -2,29 +2,7 @@
  * `segmentstream__attachments_discard`: drops an attachment at once. It can no longer be read or
  * promoted, and its file is deleted by the platform's maintenance.
  */
-declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, {
-    attachment: {
-        promotion?: {} | undefined;
-        expires_at?: string | undefined;
-        state?: string | undefined;
-        id: string;
-        filename: string;
-        content_type: string;
-        size: number;
-        sha256: string;
-    };
-}> & {
-    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<{
-        attachment: {
-            promotion?: {} | undefined;
-            expires_at?: string | undefined;
-            state?: string | undefined;
-            id: string;
-            filename: string;
-            content_type: string;
-            size: number;
-            sha256: string;
-        };
-    }>;
+declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, import("../lib/workflow-serializable.js").WorkflowSerializable> & {
+    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<import("../lib/workflow-serializable.js").WorkflowSerializable>;
 };
 export default _default;

package/dist/extension/tools/attachments_discard.mjs

@@ -4,6 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
+import { n as workflowToolResult } from "../../_chunks/workflow-serializable-BwttWNmY.mjs";
 import { ID_INPUT, attachmentForModel, attachmentOwner, stringArgument, toolAttachments } from "../lib/attachment-tools.mjs";
 import { defineTool } from "eve/tools";
 var attachments_discard_default = defineTool({
@@ -16,7 +17,7 @@ var attachments_discard_default = defineTool({
 			sessionId: ctx.session.id
 		});
 		const attachment = await toolAttachments().discard(owner, stringArgument(input, "id"));
-		return { attachment: attachmentForModel(attachment) };
+		return workflowToolResult({ attachment: attachmentForModel(attachment) }, ctx);
 	}
 });
 export { attachments_discard_default as default };

package/dist/extension/tools/attachments_list.d.ts

@@ -2,29 +2,7 @@
  * `segmentstream__attachments_list`: the files the member sent in this chat and session that are
  * still available. Mounted with the extension, so it is there even with `defaultTools: false`.
  */
-declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, {
-    attachments: {
-        promotion?: {} | undefined;
-        expires_at?: string | undefined;
-        state?: string | undefined;
-        id: string;
-        filename: string;
-        content_type: string;
-        size: number;
-        sha256: string;
-    }[];
-}> & {
-    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<{
-        attachments: {
-            promotion?: {} | undefined;
-            expires_at?: string | undefined;
-            state?: string | undefined;
-            id: string;
-            filename: string;
-            content_type: string;
-            size: number;
-            sha256: string;
-        }[];
-    }>;
+declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, import("../lib/workflow-serializable.js").WorkflowSerializable> & {
+    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<import("../lib/workflow-serializable.js").WorkflowSerializable>;
 };
 export default _default;

package/dist/extension/tools/attachments_list.mjs

@@ -4,6 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
+import { n as workflowToolResult } from "../../_chunks/workflow-serializable-BwttWNmY.mjs";
 import { attachmentForModel, attachmentOwner, toolAttachments } from "../lib/attachment-tools.mjs";
 import { defineTool } from "eve/tools";
 var attachments_list_default = defineTool({
@@ -19,7 +20,8 @@ var attachments_list_default = defineTool({
 			principal: ctx.session.auth.current,
 			sessionId: ctx.session.id
 		});
-		return { attachments: (await toolAttachments().list(owner)).map(attachmentForModel) };
+		const attachments = await toolAttachments().list(owner);
+		return workflowToolResult({ attachments: attachments.map(attachmentForModel) }, ctx);
 	}
 });
 export { attachments_list_default as default };

package/dist/extension/tools/attachments_promote.d.ts

@@ -4,33 +4,7 @@
  * hands the action the file already stored, so nothing is uploaded again, and a file whose SHA-256
  * was already promoted through the same action is not stored twice.
  */
-declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, {
-    attachment: {
-        promotion?: {} | undefined;
-        expires_at?: string | undefined;
-        state?: string | undefined;
-        id: string;
-        filename: string;
-        content_type: string;
-        size: number;
-        sha256: string;
-    };
-    deduplicated: boolean;
-    result: unknown;
-}> & {
-    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<{
-        attachment: {
-            promotion?: {} | undefined;
-            expires_at?: string | undefined;
-            state?: string | undefined;
-            id: string;
-            filename: string;
-            content_type: string;
-            size: number;
-            sha256: string;
-        };
-        deduplicated: boolean;
-        result: unknown;
-    }>;
+declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, import("../lib/workflow-serializable.js").WorkflowSerializable> & {
+    execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<import("../lib/workflow-serializable.js").WorkflowSerializable>;
 };
 export default _default;

package/dist/extension/tools/attachments_promote.mjs

@@ -6,6 +6,7 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { actionApproval } from "../lib/confirmations.mjs";
 import { ontologyTools, promotionTarget } from "../lib/ontology-tools.mjs";
+import { n as workflowToolResult } from "../../_chunks/workflow-serializable-BwttWNmY.mjs";
 import { attachmentForModel, attachmentOwner, optionalObject, optionalString, stringArgument, toolAttachments } from "../lib/attachment-tools.mjs";
 import { defineTool } from "eve/tools";
 var attachments_promote_default = defineTool({
@@ -76,11 +77,11 @@ var attachments_promote_default = defineTool({
 			...field === void 0 ? {} : { field },
 			...recordId === void 0 ? {} : { recordId }
 		});
-		return {
+		return workflowToolResult({
 			attachment: attachmentForModel(promoted.attachment),
 			deduplicated: promoted.deduplicated,
 			result: promoted.result
-		};
+		}, ctx);
 	}
 });
 export { attachments_promote_default as default };

package/dist/extension/tools/attachments_read.mjs

@@ -4,6 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
+import { n as workflowToolResult } from "../../_chunks/workflow-serializable-BwttWNmY.mjs";
 import { ID_INPUT, attachmentOwner, headerArgument, optionalString, pageInteger, readOutput, stringArgument, toolAttachments } from "../lib/attachment-tools.mjs";
 import { readStoredFile } from "../lib/stored-files.mjs";
 import { defineTool } from "eve/tools";
@@ -64,14 +65,14 @@ var attachments_read_default = defineTool({
 			id: stringArgument(input, "id"),
 			...optionalString(input, "property") === void 0 ? {} : { property: optionalString(input, "property") }
 		}, ctx.session.auth.current);
-		return readOutput(attachment, bytes, {
+		return workflowToolResult(await readOutput(attachment, bytes, {
 			sheet: optionalString(input, "sheet"),
 			offset: pageInteger(input.offset, 0),
 			...input.limit === void 0 ? {} : { limit: pageInteger(input.limit, 100, 5e4) },
 			character_offset: pageInteger(input.character_offset, 0),
 			...input.header_row === void 0 ? {} : { header_row: headerArgument(input.header_row) },
 			...input.date_order === "day_first" || input.date_order === "month_first" ? { date_order: input.date_order } : {}
-		});
+		}), ctx);
 	},
 	toModelOutput(output) {
 		if (output.kind !== "file") return {

package/dist/extension/tools/attachments_send.d.ts

@@ -1,8 +1,2 @@
-declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, {
-    readonly files: ReadonlyArray<import("../lib/telegram/attachments-send.js").SentFile>;
-} | {
-    readonly error: string;
-    readonly detail: string;
-    readonly reference: string;
-}>;
+declare const _default: import("eve/tools").ToolDefinition<Record<string, unknown>, import("../lib/workflow-serializable.js").WorkflowSerializable>;
 export default _default;