@segmentstream/agent 0.8.9 → 0.8.11

package/dist/_chunks/{build-metadata-Cq-Li9W7.mjs → build-metadata-zRhAH0hT.mjs}

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-var version = "0.8.9";
+var version = "0.8.11";
 function agentBuild(environment = process.env) {
 	return {
 		agent: version,

package/dist/_chunks/{inbound-request-B98tr4Pd.mjs → inbound-request-B8Eyjz1O.mjs}

@@ -240,6 +240,8 @@ var InboundRequest = class {
 	stopTyping;
 	lifecycle;
 	lifecycleKey;
+	lifecycleDispatchToken;
+	releaseLifecycleDispatch;
 	retryReference;
 	lifecycleContext;
 	monitor;
@@ -330,6 +332,14 @@ function withReplacedText(source, request) {
 					turnPolicy: "queue"
 				});
 			} catch (error) {
+				try {
+					await request.releaseLifecycleDispatch?.();
+				} catch (cleanupError) {
+					console.error("[segmentstream] inventory dispatch cleanup failed", {
+						cleanupError,
+						cause: error
+					});
+				}
 				try {
 					await request.finishClaim?.(false);
 					await request.deliveryFailed?.(error);

package/dist/extension/instructions.md

@@ -97,7 +97,9 @@ If context is missing, do not guess which target changed. Never print, quote, li
 technical correlation identifiers in chat. Report the outcome in your own words in the
 conversation's language. Only `done` means completion.
 `approved` means a decision was recorded, with completion still unknown; `failed` may include an
-uncertain external outcome, so never retry automatically. `execution: "not_started"` means the
+uncertain external outcome, so never retry automatically, including with a fresh call or key.
+`execution: "uncertain"` requires checking the actual operation state before any new write.
+`execution: "not_started"` means the
 action was prevented before execution; report that it did not run. For `cancelled` or `expired`, say the
 action did not run. If `editRequested` is true, ask what to change with questions_ask and make a
 new call and confirmation. Never repeat raw parameters or technical identifiers from tools.

package/dist/extension/lib/build-metadata.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../_chunks/build-metadata-Cq-Li9W7.mjs";
+import { t as agentBuild } from "../../_chunks/build-metadata-zRhAH0hT.mjs";
 export { agentBuild };

package/dist/extension/lib/confirmation-outcome.d.ts

@@ -1,11 +1,19 @@
 import type { DeferredConfirmation } from "./deferred-confirmations.js";
 /** Model-only correlation plus bounded display context; never forward business input or results. */
 export declare function confirmationOutcome(record: DeferredConfirmation, status: Exclude<DeferredConfirmation["status"], "pending">, detail?: {
-    readonly execution?: "not_started";
+    readonly execution?: "not_started" | "uncertain";
     readonly editRequested?: boolean;
+    readonly error?: {
+        readonly code: string;
+        readonly message: string;
+    };
 }): {
-    execution?: "not_started";
+    execution?: "not_started" | "uncertain";
     editRequested?: boolean;
+    error?: {
+        readonly code: string;
+        readonly message: string;
+    };
     context?: {
         targets?: {
             label: string;

package/dist/extension/lib/ontology-gateway.d.ts

@@ -12,9 +12,9 @@ export declare function ontologyInspect(memberId: string, input: {
     limit?: number;
 }, context: ToolContext, options?: Options): Promise<{
     next_after?: string | undefined;
-    tools: {
+    tools: (Record<string, unknown> & {
         name: string;
         description: string;
-    }[];
+    })[];
 }>;
 export {};

package/dist/extension/lib/ontology-gateway.mjs

@@ -6,26 +6,27 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { memberIdOf } from "./telegram/principal.mjs";
 import { object } from "./confirmation-description.mjs";
-import { ontologyTools } from "./ontology-tools.mjs";
+import { readOntologyMetadata } from "./ontology-metadata-read.mjs";
 async function ontologyMetadata(memberId, operation, input, context, options = {}) {
 	const principal = context.session.auth.current;
 	if (memberIdOf(principal) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	const result = await ontologyTools({
-		...options,
-		principal
-	}).rpc(memberId, "tools/call", {
-		name: operation,
-		arguments: input
-	});
+	const result = await readOntologyMetadata(memberId, {
+		method: "tools/call",
+		params: {
+			name: operation,
+			arguments: input
+		}
+	}, context, options);
 	return result.structuredContent === void 0 ? result : object(result.structuredContent);
 }
 async function ontologyInspect(memberId, input, context, options = {}) {
 	const principal = context.session.auth.current;
 	if (memberIdOf(principal) !== memberId) throw new Error("The ontology tool belongs to another member.");
-	const tools = (await ontologyTools({
-		...options,
-		principal
-	}).list(memberId)).flatMap((tool) => typeof tool.name === "string" ? [{
+	const listing = await readOntologyMetadata(memberId, {
+		method: "tools/list",
+		params: {}
+	}, context, options);
+	const tools = (Array.isArray(listing.tools) ? listing.tools.map(object) : []).flatMap((tool) => typeof tool.name === "string" ? [{
 		...tool,
 		name: tool.name,
 		description: String(tool.description ?? "")

package/dist/extension/lib/ontology-metadata-read.d.ts

@@ -0,0 +1,15 @@
+import type { ToolContext } from "eve/tools";
+import { ontologyTools } from "./ontology-tools.js";
+type Options = Omit<NonNullable<Parameters<typeof ontologyTools>[0]>, "principal">;
+/** Only metadata reads enter this boundary. Never cache permission/prepare checks or retry actions. */
+export declare function readOntologyMetadata(memberId: string, request: {
+    method: "tools/list";
+    params: Record<string, never>;
+} | {
+    method: "tools/call";
+    params: {
+        name: "discover" | "describe";
+        arguments: Record<string, unknown>;
+    };
+}, context: ToolContext, options?: Options): Promise<Record<string, unknown>>;
+export {};

package/dist/extension/lib/ontology-metadata-read.mjs

@@ -0,0 +1,126 @@
+import { fileURLToPath as __eveFileURLToPath } from "node:url";
+import { dirname as __eveDirname } from "node:path";
+import { createRequire as __eveCreateRequire } from "node:module";
+const __filename = __eveFileURLToPath(import.meta.url);
+__eveDirname(__filename);
+__eveCreateRequire(import.meta.url);
+import { appOrigin } from "./environment.mjs";
+import { memberIdOf } from "./telegram/principal.mjs";
+import { redactDiagnostic } from "./diagnostics.mjs";
+import { object } from "./confirmation-description.mjs";
+import { OntologyToolRejected, ontologyTools } from "./ontology-tools.mjs";
+import { randomUUID } from "node:crypto";
+import { isDeepStrictEqual } from "node:util";
+const scopes = new Map();
+const cache = new Map();
+let cachedBytes = 0;
+const CACHE_BYTES = 8388608;
+const CACHE_TTL = 3e4;
+function remove(key) {
+	cachedBytes -= cache.get(key)?.bytes ?? 0;
+	cache.delete(key);
+}
+function retryable(error, depth = 0) {
+	if (depth > 8) return false;
+	const value = object(error);
+	if (object(value.structuredContent).error === "internal_error") return true;
+	if (typeof value.status === "number") return value.status === 429 || value.status >= 500;
+	if ([
+		"TypeError",
+		"TimeoutError",
+		"AbortError"
+	].includes(String(value.name))) return true;
+	return value.cause !== void 0 && retryable(value.cause, depth + 1);
+}
+function invalidatesSnapshot(error, depth = 0) {
+	if (depth > 8) return false;
+	const value = object(error);
+	return value.status === 401 || value.status === 403 || [
+		"ontology_version_mismatch",
+		"forbidden",
+		"unauthorized",
+		"not_invited"
+	].includes(String(object(value.structuredContent).error)) || value.cause !== void 0 && invalidatesSnapshot(value.cause, depth + 1);
+}
+async function readOntologyMetadata(memberId, request, context, options = {}) {
+	const principal = context.session.auth.current;
+	if (memberIdOf(principal) !== memberId) throw new Error("The ontology tool belongs to another member.");
+	const session = context.session.id;
+	const args = request.method === "tools/call" ? request.params.arguments : {};
+	const scope = principal && typeof session === "string" && session !== "" ? JSON.stringify([
+		appOrigin(options.environment ?? process.env),
+		session,
+		memberId
+	]) : void 0;
+	let state = scope === void 0 ? void 0 : scopes.get(scope);
+	if (scope !== void 0 && principal) {
+		if (!state || !isDeepStrictEqual(state.principal, principal)) state = {
+			principal: structuredClone(principal),
+			generation: 0
+		};
+		scopes.delete(scope);
+		scopes.set(scope, state);
+		while (scopes.size > 128) scopes.delete(scopes.keys().next().value);
+	}
+	const generation = state?.generation;
+	const key = state && args.expected_hash === void 0 ? JSON.stringify([scope, request]) : void 0;
+	const existing = key === void 0 ? void 0 : cache.get(key);
+	if (existing && existing.state === state && existing.generation === generation && existing.until > Date.now()) {
+		cache.delete(key);
+		cache.set(key, existing);
+		return structuredClone(existing.value);
+	}
+	if (key !== void 0) remove(key);
+	const client = ontologyTools({
+		...options,
+		principal
+	});
+	let attempts = 0;
+	for (;;) {
+		attempts++;
+		try {
+			const result = await client.rpc(memberId, request.method, request.params, AbortSignal.timeout(4e3));
+			if (key !== void 0 && scope !== void 0 && state && scopes.get(scope) === state && state.generation === generation) {
+				const bytes = Buffer.byteLength(JSON.stringify(result));
+				if (bytes <= 2097152) {
+					while (cache.size && (cache.size >= 128 || cachedBytes + bytes > CACHE_BYTES)) remove(cache.keys().next().value);
+					remove(key);
+					cache.set(key, {
+						state,
+						generation: state.generation,
+						value: structuredClone(result),
+						until: Date.now() + CACHE_TTL,
+						bytes
+					});
+					cachedBytes += bytes;
+				}
+			}
+			return result;
+		} catch (cause) {
+			if (state && invalidatesSnapshot(cause)) {
+				state.generation++;
+				for (const [cachedKey, entry] of cache) if (entry.state === state) remove(cachedKey);
+			}
+			const mayRetry = retryable(cause);
+			if (mayRetry && args.expected_hash === void 0 && attempts < 3) {
+				await new Promise((resolve) => setTimeout(resolve, attempts * 100));
+				continue;
+			}
+			const reference = randomUUID();
+			const publicReason = cause instanceof OntologyToolRejected ? `;${cause.message.slice(0, 4096)}` : "";
+			const error = Object.assign(new Error(`ontology_metadata_unavailable:${reference};retryable=${mayRetry}${publicReason}`, { cause }), {
+				code: "ontology_metadata_unavailable",
+				retryable: mayRetry,
+				reference,
+				attempts
+			});
+			console.error("[segmentstream] ontology_metadata_unavailable", {
+				reference,
+				attempts,
+				error: redactDiagnostic(error, new Set())
+			});
+			throw error;
+		}
+	}
+}
+export { readOntologyMetadata };

package/dist/extension/lib/ontology-tools.d.ts

@@ -2,6 +2,10 @@ import type { SessionAuthContext } from "eve/context";
 import type { ActionAnnotations } from "./confirmations.js";
 import { type Environment } from "./environment.js";
 import { type RuntimeToken } from "./runtime-token.js";
+/** Only the ontology's public MCP rejection may be carried back to a deferred caller. */
+export declare class OntologyToolRejected extends Error {
+    readonly code = "ontology_tool_rejected";
+}
 /** A fresh, permission-filtered catalog. Listing tools cannot run an action's prepare step. */
 export declare function ontologyTools(options?: {
     readonly principal?: SessionAuthContext | null;

package/dist/extension/lib/ontology-tools.mjs

@@ -10,6 +10,10 @@ import { redactDiagnostic } from "./diagnostics.mjs";
 import { describeConfirmation, object } from "./confirmation-description.mjs";
 import { describeChatPost, isChatPost, supportsChatPost } from "./chat-post-confirmation.mjs";
 import { runtimeToken } from "./runtime-token.mjs";
+import { randomUUID } from "node:crypto";
+var OntologyToolRejected = class extends Error {
+	code = "ontology_tool_rejected";
+};
 function ontologyTools(options = {}) {
 	async function rpc(memberId, method, params, signal) {
 		const provider = memberIdOf(options.principal) === memberId ? identityProviderOf(options.principal) : void 0;
@@ -35,14 +39,39 @@ function ontologyTools(options = {}) {
 				signal: signal ?? AbortSignal.timeout(15e3),
 				redirect: "error"
 			});
-			if (!response.ok) throw new Error(`Cannot check action permission (HTTP ${response.status}).`, { cause: await response.text() });
+			if (!response.ok) throw Object.assign(new Error(`Cannot check action permission (HTTP ${response.status}).`, { cause: await response.text() }), { status: response.status });
 			const body = object(await response.json());
 			if (body.error !== void 0) throw new Error("Ontology metadata unavailable.", { cause: body.error });
 			const result = object(body.result);
-			if (result.isError === true) throw new Error("The ontology preview read failed.", { cause: result });
+			if (result.isError === true) {
+				const message = (Array.isArray(result.content) ? result.content : []).map(object).filter((part) => part.type === "text" && typeof part.text === "string").map((part) => part.text).join("\n");
+				if ([
+					"action_rejected",
+					"invalid_input",
+					"invalid_request",
+					"invalid_json",
+					"unsupported_media_type",
+					"forbidden",
+					"unauthorized",
+					"not_invited",
+					"not_found",
+					"conflict",
+					"invalid_cursor",
+					"ontology_version_mismatch",
+					"discovery_too_large"
+				].includes(String(object(result.structuredContent).error))) throw new OntologyToolRejected(message || "ontology_operation_rejected", { cause: result });
+				throw new Error("ontology_action_outcome_uncertain", { cause: result });
+			}
 			return result;
 		} catch (error) {
-			throw new Error("The ontology metadata request failed.", { cause: redactDiagnostic(error, secrets) });
+			const diagnostic = redactDiagnostic(error, secrets);
+			const reference = randomUUID();
+			console.error("[segmentstream] ontology_request_failed", {
+				reference,
+				error: diagnostic
+			});
+			if (error instanceof OntologyToolRejected) throw new OntologyToolRejected(String(object(diagnostic).message), { cause: diagnostic });
+			throw new Error(`The ontology request failed (${reference}).`, { cause: diagnostic });
 		}
 	}
 	async function toolFor(memberId, action, signal) {
@@ -189,4 +218,4 @@ function promotionTarget(input) {
 		}
 	};
 }
-export { actionToolName, ontologyToolLabels, ontologyTools, promotionTarget };
+export { OntologyToolRejected, actionToolName, ontologyToolLabels, ontologyTools, promotionTarget };

package/dist/extension/lib/telegram/adapter.mjs

@@ -8,10 +8,10 @@ import { manifestOf } from "../../config.mjs";
 import { appOrigin, channelsEnabled, proxyEnvironment, runtimeIdentityEnvironment, webhookSecret } from "../environment.mjs";
 import { conversationLanguage, telegramPrincipal } from "./principal.mjs";
 import { chooseModel } from "../../model.mjs";
-import { t as agentBuild } from "../../../_chunks/build-metadata-Cq-Li9W7.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-zRhAH0hT.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
 import { telegramSendScope } from "./send-queue.mjs";
-import { d as failureText, h as withDeliveryLocale, i as withReplacedText, m as safeTelegramFetch, n as currentInboundRequest, p as reportTelegramError, r as runInboundRequest, t as InboundRequest } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { d as failureText, h as withDeliveryLocale, i as withReplacedText, m as safeTelegramFetch, n as currentInboundRequest, p as reportTelegramError, r as runInboundRequest, t as InboundRequest } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { runtimeToken } from "../runtime-token.mjs";
 import { attachmentLifecycle } from "./lifecycle.mjs";
 import { conversations } from "../conversations.mjs";
@@ -234,6 +234,7 @@ function segmentstreamTelegram(options) {
 						connectUrl: (code) => `${appOrigin(environment)}/agent/connect?code=${encodeURIComponent(code)}`
 					}
 				});
+				if (result === null) await inbound?.releaseLifecycleDispatch?.();
 				if (inbound !== void 0 && result !== null) {
 					inbound.locale = confirmationLocale(result.auth);
 					inbound.deliveryFailed = async (error) => {
@@ -252,6 +253,11 @@ function segmentstreamTelegram(options) {
 				return result;
 			} catch (error) {
 				recordGateDecision("inbound_message_failed");
+				try {
+					await inbound?.releaseLifecycleDispatch?.();
+				} catch (cleanupError) {
+					reportTelegramError("intake_dispatch_release_failed", cleanupError);
+				}
 				const errorId = reportTelegramError("inbound_message_failed", error, { chatId: message.chat.id });
 				if (inbound?.retryReference !== void 0 || inbound?.lifecycleKey !== void 0) inbound.retryReference = errorId;
 				else await context.telegram.post(failureText(errorId));
@@ -321,7 +327,8 @@ function segmentstreamTelegram(options) {
 						}
 					})("completed", {
 						key: taskId,
-						...configuration.contextVersion === 2 ? { reply: event.message } : {}
+						...configuration.contextVersion === 2 ? { reply: event.message } : {},
+						...typeof principal.attributes.attachmentDispatchToken === "string" ? { dispatch_token: principal.attributes.attachmentDispatchToken } : {}
 					});
 					if (result.message !== void 0 || result.complete === false) event = {
 						...event,

package/dist/extension/lib/telegram/attachment-description.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { describableImage } from "./images.mjs";
 import { MAXIMUM_ROUTING_PDF_CHARACTERS, extractRoutingPdf } from "./pdf-text.mjs";
 import { gateway, generateText } from "ai";

package/dist/extension/lib/telegram/attachments-send.mjs

@@ -9,7 +9,7 @@ import "./principal.mjs";
 import { redactDiagnostic } from "../diagnostics.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
 import { inTelegramSendQueue, telegramSendScope } from "./send-queue.mjs";
-import { c as customerCopy, f as formattingRefused, l as customerMessage, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { c as customerCopy, f as formattingRefused, l as customerMessage, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { runtimeToken } from "../runtime-token.mjs";
 import { MAXIMUM_PROXY_BODY_BYTES, connectionProxy } from "../connection-proxy.mjs";
 import { ACT_AS_HEADER } from "../ontology-connection.mjs";

package/dist/extension/lib/telegram/confirmation-expiry.mjs

@@ -6,7 +6,7 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { proxyEnvironment } from "../environment.mjs";
 import { telegramSendScope } from "./send-queue.mjs";
-import { m as safeTelegramFetch, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { m as safeTelegramFetch, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { runtimeToken } from "../runtime-token.mjs";
 import { deferredConfirmations } from "../deferred-confirmations.mjs";
 import { conversations } from "../conversations.mjs";

package/dist/extension/lib/telegram/confirmations.mjs

@@ -8,7 +8,7 @@ import { memberIdOf, telegramPrincipal } from "./principal.mjs";
 import { humanText } from "../confirmation-description.mjs";
 import { renderConfirmation, withConfirmationText } from "./confirmation-text.mjs";
 import { chatPostCard, chatPostCardStatus, chatPostReceipt, withChatPostCard } from "./chat-post-card.mjs";
-import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { chatPostOperationId, isChatPost } from "../chat-post-confirmation.mjs";
 import { confirmations } from "../confirmations.mjs";
 import { conversationEvent } from "../conversations.mjs";

package/dist/extension/lib/telegram/conversations.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { n as currentInboundRequest, s as currentThreadId } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { n as currentInboundRequest, p as reportTelegramError, s as currentThreadId } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { conversationEvent } from "../conversations.mjs";
 import { contentShape, messageContent } from "./content.mjs";
 import { currentConfirmationPrompt, messageMetadata, observedChatKey } from "./observed.mjs";
@@ -266,6 +266,7 @@ async function captureTelegramWebhook(input) {
 		capture.decision = "silent";
 		capture.reason = "message_already_handled";
 	}
+	let accepted = false;
 	if (inbound !== void 0) {
 		inbound.edited = edited !== void 0;
 		if (revisionId !== void 0) inbound.claimRevision = async () => {
@@ -292,7 +293,6 @@ async function captureTelegramWebhook(input) {
 		const nextClaim = previousClaim === void 0 ? void 0 : createHash("sha256").update(previousClaim.eventId).digest("hex");
 		const claimId = previousClaim === void 0 ? `telegram:${message.chat.id}:${message.messageId}:turn` : `telegram:${message.chat.id}:${message.messageId}:turn:${nextClaim}`;
 		let claimed = false;
-		let accepted = false;
 		let dispatchStarted = false;
 		const claimEvent = (reason, status, suffix = "") => ({
 			...capture.event,
@@ -336,6 +336,14 @@ async function captureTelegramWebhook(input) {
 			message: messagePayload
 		}) }) : alreadyHandled ? new Request(input.request, { body: JSON.stringify({ update_id: update.update_id }) }) : void 0);
 	} catch (error) {
+		if (!accepted) try {
+			await inbound?.releaseLifecycleDispatch?.();
+		} catch (cleanupError) {
+			console.error("[segmentstream] inventory dispatch cleanup failed", {
+				cleanupError,
+				cause: error
+			});
+		}
 		try {
 			await capture.persist();
 			await inbound?.finishClaim?.(false);
@@ -357,6 +365,15 @@ async function captureTelegramWebhook(input) {
 		}
 		throw error;
 	}
+	let dispatchCleanupError;
+	let cleanupFailed = false;
+	if (!accepted) try {
+		await inbound?.releaseLifecycleDispatch?.();
+	} catch (error) {
+		dispatchCleanupError = error;
+		cleanupFailed = true;
+		reportTelegramError("inventory_dispatch_cleanup_failed", error);
+	}
 	await capture.persist();
 	await inbound?.finishClaim?.(false);
 	await input.archive.append({
@@ -373,6 +390,7 @@ async function captureTelegramWebhook(input) {
 		attachments: []
 	});
 	await finishRevision(capture.reason === "inbound_message_failed" || capture.reason === "decision_model_failed" || capture.reason === "decision_model_timeout" ? "failed" : "completed");
+	if (cleanupFailed) throw dispatchCleanupError;
 	return response;
 }
 function recordGateDecision(reason, decision = "silent") {
@@ -468,15 +486,22 @@ function captureTelegramFetch(fetchImpl, archive, identities) {
 			senderIsBot: true,
 			senderId: "agent",
 			senderName: "agent",
-			argsSummary: JSON.stringify({ routing: {
-				...currentConfirmationPrompt() === void 0 ? {} : { confirmation: currentConfirmationPrompt() },
-				...capture?.event.chatId === chatId && capture.event.senderId !== null ? { inReplyTo: {
-					id: capture.event.senderId,
-					author: capture.event.senderName ?? capture.event.senderId,
-					...capture.message.from?.username === void 0 ? {} : { username: capture.message.from.username }
-				} } : {},
-				...currentConfirmationPrompt()?.requester === void 0 ? {} : { inReplyTo: currentConfirmationPrompt()?.requester }
-			} }),
+			argsSummary: JSON.stringify({
+				telegram: {
+					...Array.isArray(body.entities) ? { entities: body.entities } : {},
+					...Array.isArray(body.caption_entities) ? { caption_entities: body.caption_entities } : {},
+					...typeof body.parse_mode === "string" ? { parse_mode: body.parse_mode } : {}
+				},
+				routing: {
+					...currentConfirmationPrompt() === void 0 ? {} : { confirmation: currentConfirmationPrompt() },
+					...capture?.event.chatId === chatId && capture.event.senderId !== null ? { inReplyTo: {
+						id: capture.event.senderId,
+						author: capture.event.senderName ?? capture.event.senderId,
+						...capture.message.from?.username === void 0 ? {} : { username: capture.message.from.username }
+					} } : {},
+					...currentConfirmationPrompt()?.requester === void 0 ? {} : { inReplyTo: currentConfirmationPrompt()?.requester }
+				}
+			}),
 			participantIds,
 			threadId: id(body.message_thread_id) ?? currentThreadId() ?? null,
 			replyToMessageId: id(body.reply_to_message_id) ?? id(record(body.reply_parameters).message_id),

package/dist/extension/lib/telegram/customer-text.mjs

@@ -5,5 +5,5 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { isTechnicalText } from "../customer-text-safety.mjs";
-import { a as TelegramDeliveryError, c as customerCopy, d as failureText, f as formattingRefused, h as withDeliveryLocale, l as customerMessage, m as safeTelegramFetch, o as currentLocale, p as reportTelegramError, s as currentThreadId, u as customerText } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { a as TelegramDeliveryError, c as customerCopy, d as failureText, f as formattingRefused, h as withDeliveryLocale, l as customerMessage, m as safeTelegramFetch, o as currentLocale, p as reportTelegramError, s as currentThreadId, u as customerText } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 export { TelegramDeliveryError, currentLocale, currentThreadId, customerCopy, customerMessage, customerText, failureText, formattingRefused, isTechnicalText, reportTelegramError, safeTelegramFetch, withDeliveryLocale };

package/dist/extension/lib/telegram/deferred-confirmations.d.ts

@@ -6,7 +6,7 @@ import type { AgentIdentities } from "../identities.js";
 import { type ObservedMessages } from "./observed.js";
 export declare const isDeferredCallback: (data?: string) => boolean;
 export declare const deferredCallback: (record: DeferredConfirmation, choice: "y" | "n" | "e") => string;
-export declare function archiveDeferred(record: DeferredConfirmation, phase: string, archive: Conversations): Promise<void>;
+export declare function archiveDeferred(record: DeferredConfirmation, phase: string, archive: Conversations, errorText?: string): Promise<void>;
 /** Called at the durable tool-result boundary. Pending cards never become eve input requests. */
 export declare function postDeferredCard(id: string, channel: TelegramEventContext, ctx: SessionContext, options: DeferredOptions, archive: Conversations, observed?: ObservedMessages): Promise<void>;
 /** Every callback re-resolves the live identity. The database arbitrates concurrent presses. */

package/dist/extension/lib/telegram/deferred-confirmations.mjs

@@ -8,8 +8,9 @@ import { telegramPrincipal } from "./principal.mjs";
 import { humanText } from "../confirmation-description.mjs";
 import { renderConfirmation, withConfirmationText } from "./confirmation-text.mjs";
 import { chatPostCard, chatPostCardStatus, chatPostReceipt, withChatPostCard } from "./chat-post-card.mjs";
-import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { CONFIRMATION_TTL_MS, inputHash } from "../confirmations.mjs";
+import { OntologyToolRejected } from "../ontology-tools.mjs";
 import { confirmationOutcome } from "../confirmation-outcome.mjs";
 import { deferredConfirmations, deferredKey, runDeferredAction } from "../deferred-confirmations.mjs";
 import { conversationEvent } from "../conversations.mjs";
@@ -52,7 +53,7 @@ function remember(record, text, prompt, observed) {
 		confirmation: prompt
 	});
 }
-async function archiveDeferred(record, phase, archive) {
+async function archiveDeferred(record, phase, archive, errorText) {
 	await archive.append(conversationEvent({
 		eventId: `confirmation:${record.id}:${phase}`,
 		provider: "telegram",
@@ -66,6 +67,7 @@ async function archiveDeferred(record, phase, archive) {
 		operationId: record.id,
 		toolName: record.data.action,
 		reason: phase,
+		...errorText === void 0 ? {} : { errorText },
 		status: phase === "done" ? "completed" : phase === "failed" ? "failed" : phase === "cancelled" || phase === "expired" ? "cancelled" : "requested"
 	}));
 }
@@ -186,6 +188,7 @@ async function handleDeferredCallback(input) {
 	let status = claimed.status;
 	let cardStatus = status === "expired" ? copy.expired : copy.cancelled;
 	let execution;
+	let failure;
 	try {
 		await archiveDeferred(claimed, claimed.status, archive);
 	} catch (error) {
@@ -214,6 +217,14 @@ async function handleDeferredCallback(input) {
 		} catch (error) {
 			status = "failed";
 			const reference = reportTelegramError("deferred_action_failed", error);
+			failure = error instanceof OntologyToolRejected ? {
+				code: error.code,
+				message: error.message.slice(0, 4096)
+			} : {
+				code: "deferred_action_failed",
+				message: reference
+			};
+			if (!(error instanceof OntologyToolRejected)) execution = "uncertain";
 			cardStatus = `${copy.failed} ${reference}`;
 		}
 		await store.command({
@@ -223,7 +234,7 @@ async function handleDeferredCallback(input) {
 		});
 	}
 	if (status === "done" || status === "failed") try {
-		await archiveDeferred(claimed, status, archive);
+		await archiveDeferred(claimed, status, archive, failure?.message);
 	} catch (error) {
 		reportTelegramError("deferred_outcome_archive_failed", error);
 	}
@@ -245,6 +256,7 @@ async function handleDeferredCallback(input) {
 	});
 	await currentInboundRequest()?.confirmationEvent?.(claimed, confirmationOutcome(claimed, status, {
 		...execution === void 0 ? {} : { execution },
+		...failure === void 0 ? {} : { error: failure },
 		...parts[2] === "e" && status === "cancelled" ? { editRequested: true } : {}
 	}), principal);
 }

package/dist/extension/lib/telegram/files.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { conversationLanguage } from "./principal.mjs";
-import { d as failureText, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { d as failureText, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { describableImage, describeReceivedImage } from "./images.mjs";
 import { MAXIMUM_ATTACHMENT_BYTES, attachmentUrl } from "../attachments.mjs";
 function telegramConversation(chatId) {

package/dist/extension/lib/telegram/health.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-Cq-Li9W7.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-zRhAH0hT.mjs";
 import { runtimeRequestFailure } from "./runtime-request.mjs";
 import { GET } from "eve/channels";
 const HEALTH_ROUTE = "/eve/v1/telegram/health";

package/dist/extension/lib/telegram/images.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { gateway, generateText } from "ai";
 const MAXIMUM_IMAGE_DESCRIPTION_BYTES = 5242880;
 const MAXIMUM_NATIVE_IMAGE_BYTES = 3145728;

package/dist/extension/lib/telegram/inbound-request.d.ts

@@ -37,6 +37,8 @@ export declare class InboundRequest {
     stopTyping: (() => void) | undefined;
     lifecycle: ReturnType<typeof import("./lifecycle.js").attachmentLifecycle> | undefined;
     lifecycleKey: string | undefined;
+    lifecycleDispatchToken: string | undefined;
+    releaseLifecycleDispatch: (() => Promise<unknown>) | undefined;
     /** A routed task must be redelivered if recovery or intake did not reach durable admission. */
     retryReference: string | undefined;
     lifecycleContext: string | undefined;

package/dist/extension/lib/telegram/inbound-request.mjs

@@ -4,5 +4,5 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { i as withReplacedText, n as currentInboundRequest, r as runInboundRequest, t as InboundRequest } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { i as withReplacedText, n as currentInboundRequest, r as runInboundRequest, t as InboundRequest } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 export { InboundRequest, currentInboundRequest, runInboundRequest, withReplacedText };

package/dist/extension/lib/telegram/inbound.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { conversationLanguage, telegramPrincipal } from "./principal.mjs";
-import { p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { startTypingHeartbeat, typingUntilComplete } from "./lifecycle.mjs";
 import { formatAddress, messageAddress, scopedAddress } from "./sessions.mjs";
 import { contentShape, messageContent } from "./content.mjs";
@@ -690,6 +690,27 @@ async function handleInboundMessage(input) {
 		}
 		input.request.lifecycleContext = current.context;
 		input.request.replyTo = current.replyTo ?? input.request.replyTo;
+		if (current.dispatch === false) {
+			console.info("[segmentstream] telegram.phase", {
+				phase: "workspace_dispatch_coalesced",
+				intakeId: key,
+				chatId: sent.chat.id,
+				messageId: sent.messageId
+			});
+			return null;
+		}
+		if (current.dispatchToken !== void 0) {
+			const token = current.dispatchToken;
+			input.request.lifecycleDispatchToken = token;
+			const request = input.request;
+			request.releaseLifecycleDispatch = async () => {
+				request.releaseLifecycleDispatch = void 0;
+				await lifecycle("ready", {
+					key,
+					release_dispatch: token
+				});
+			};
+		}
 	}
 	if (routingFile !== void 0 && processedMedia !== void 0) {
 		const stored = files.get(routingFile.fileId);
@@ -828,6 +849,7 @@ async function handleInboundMessage(input) {
 			...principal,
 			attributes: {
 				...principal.attributes,
+				...input.request?.lifecycleDispatchToken === void 0 ? {} : { attachmentDispatchToken: input.request.lifecycleDispatchToken },
 				replyToMessageId: input.request?.replyTo ?? sent.messageId,
 				...input.request?.lifecycleKey === void 0 ? {} : {
 					taskId: input.request.lifecycleKey,
@@ -839,6 +861,7 @@ async function handleInboundMessage(input) {
 			...principal,
 			attributes: {
 				...principal.attributes,
+				...input.request?.lifecycleDispatchToken === void 0 ? {} : { attachmentDispatchToken: input.request.lifecycleDispatchToken },
 				replyToMessageId: input.request?.replyTo ?? sent.messageId,
 				...input.request?.lifecycleKey === void 0 ? {} : {
 					taskId: input.request.lifecycleKey,

package/dist/extension/lib/telegram/lifecycle.d.ts

@@ -10,6 +10,9 @@ export interface AttachmentLifecycle {
     readonly contextVersion?: 2;
 }
 export interface LifecycleResult {
+    /** The workspace has already assigned this retained inventory to another turn. */
+    readonly dispatch?: boolean;
+    readonly dispatchToken?: string;
     readonly key?: string;
     readonly replyTo?: string;
     readonly acknowledgement?: string;

package/dist/extension/lib/telegram/lifecycle.mjs

@@ -4,9 +4,9 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { t as agentBuild } from "../../../_chunks/build-metadata-Cq-Li9W7.mjs";
+import { t as agentBuild } from "../../../_chunks/build-metadata-zRhAH0hT.mjs";
 import { object } from "../confirmation-description.mjs";
-import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { n as currentInboundRequest, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { needsConfirmation } from "../confirmations.mjs";
 import { actionToolName, ontologyTools } from "../ontology-tools.mjs";
 function attachmentLifecycle(options) {
@@ -48,6 +48,8 @@ function attachmentLifecycle(options) {
 		const retention = object(result.retain);
 		if (typeof retention.entity === "string" && typeof retention.action === "string" && needsConfirmation(await tools.labels(options.memberId, actionToolName(retention.entity, retention.action), object(retention.input)))) throw new Error("Automatic retention requires a permitted routine storage action.");
 		return {
+			...typeof result.dispatch === "boolean" ? { dispatch: result.dispatch } : {},
+			...typeof result.dispatch_token === "string" ? { dispatchToken: result.dispatch_token } : {},
 			...typeof result.key === "string" ? { key: result.key } : {},
 			...typeof result.reply_to === "string" && /^[1-9]\d*$/.test(result.reply_to) ? { replyTo: result.reply_to } : {},
 			...typeof result.acknowledgement === "string" ? { acknowledgement: result.acknowledgement } : {},

package/dist/extension/lib/telegram/media-policy.mjs

@@ -5,7 +5,7 @@ const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { DEFAULT_IMAGE_DESCRIPTION_MODEL } from "../../config.mjs";
-import { p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 function planMedia(capabilities, descriptionModel = null) {
 	if (typeof descriptionModel === "string") return {
 		images: "describe",

package/dist/extension/lib/telegram/silent.mjs

@@ -8,7 +8,7 @@ import "./principal.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
 import { splitTelegramText } from "./format.mjs";
 import { inTelegramSendQueue } from "./send-queue.mjs";
-import { a as TelegramDeliveryError, l as customerMessage, o as currentLocale, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { a as TelegramDeliveryError, l as customerMessage, o as currentLocale, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import { agentMessage, observedChatKey } from "./observed.mjs";
 const SILENT_MARKERS = new Set(["[silent]", "no_reply"]);
 function isSilentReply(text) {

package/dist/extension/lib/telegram/turn-errors.mjs

@@ -6,7 +6,7 @@ __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
 import { memberIdOf } from "./principal.mjs";
 import { confirmationLocale } from "./confirmation-text.mjs";
-import { c as customerCopy, d as failureText, o as currentLocale, p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { c as customerCopy, d as failureText, o as currentLocale, p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 const telegramFailureEvents = {
 	async "turn.cancelled"(event, channel, context) {
 		const errorId = reportTelegramError("turn_cancelled", event, {

package/dist/extension/lib/telegram/voice.mjs

@@ -4,7 +4,7 @@ import { createRequire as __eveCreateRequire } from "node:module";
 const __filename = __eveFileURLToPath(import.meta.url);
 __eveDirname(__filename);
 __eveCreateRequire(import.meta.url);
-import { p as reportTelegramError } from "../../../_chunks/inbound-request-B98tr4Pd.mjs";
+import { p as reportTelegramError } from "../../../_chunks/inbound-request-B8Eyjz1O.mjs";
 import "../connection-proxy.mjs";
 import { gateway, transcribe } from "ai";
 const LABELS = {

package/dist/extension/tools/ontology.d.ts

@@ -7,17 +7,17 @@ declare const _default: import("eve").DynamicSentinel<{
     };
     ontology_inspect: import("eve/tools").ToolDefinition<Record<string, unknown>, {
         next_after?: string | undefined;
-        tools: {
+        tools: (Record<string, unknown> & {
             name: string;
             description: string;
-        }[];
+        })[];
     }> & {
         execute(input: Record<string, unknown>, ctx: import("eve/tools").ToolContext): Promise<{
             next_after?: string | undefined;
-            tools: {
+            tools: (Record<string, unknown> & {
                 name: string;
                 description: string;
-            }[];
+            })[];
         }>;
     };
     ontology_call: import("eve/tools").ToolDefinition<Record<string, unknown>, Record<string, unknown>> & {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@segmentstream/agent",
-  "version": "0.8.9",
+  "version": "0.8.11",
   "description": "Mount a SegmentStream workspace's agent on eve: the ontology as tools, acting as the member who writes, and Telegram through the workspace's connection.",
   "license": "Apache-2.0",
   "author": "SegmentStream",
@@ -62,7 +62,7 @@
   },
   "dependencies": {
     "@chat-adapter/telegram": "4.41.0",
-    "@segmentstream-cloud/ontology": "0.35.0",
+    "@segmentstream-cloud/ontology": "0.36.0",
     "@vercel/oidc": "^3.8.4",
     "ai": "^7.0.128",
     "csv-parse": "^7.0.3",