@sympoies/dsh-telegram 0.0.0-bootstrap.0 → 0.6.0

package/lib/session/models.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Choosing which model a Telegram conversation talks to.
+ *
+ * The web UI has a model picker; a phone had nothing, so every conversation
+ * ran on whatever the deployment happened to default to. That is the wrong
+ * place to be stuck: the reason to reach for a bot from a phone is often that
+ * the question is small and a cheaper model would do, or that it is hard and a
+ * better one is worth the wait.
+ *
+ * The choice is per conversation and durable, so it survives `/new` and a
+ * restart. It is applied per turn rather than at session creation, because the
+ * harness reads a mutable selection while assembling each step — which is what
+ * lets a model change take effect on the very next message.
+ */
+import type { ModelRoute } from '../harness/model-selection.js';
+/** One reasoning effort a model offers. */
+export interface EffortOption {
+    readonly id: string;
+    readonly name?: string;
+}
+/** What a model says about its own reasoning. */
+export interface ReasoningInfo {
+    readonly efforts: readonly EffortOption[];
+    readonly defaultEffort?: string;
+}
+/** One model a provider advertises. */
+export interface CatalogModel {
+    readonly id: string;
+    readonly name?: string;
+}
+/** One configured provider and what it offers. */
+export interface CatalogProvider {
+    readonly id: string;
+    readonly name?: string;
+    readonly models: readonly CatalogModel[];
+}
+/** The `ctx.llm` surface this needs. */
+export interface ProviderCatalog {
+    listProviders(): readonly {
+        id: string;
+        name?: string;
+    }[];
+    listModels(provider: string): Promise<readonly CatalogModel[]>;
+    resolveModelInfo(provider: string, model: string): Promise<{
+        reasoning?: ReasoningInfo;
+    }>;
+}
+/**
+ * The efforts a route offers, and which one it uses by default.
+ *
+ * Read from the model rather than fixed here: `low`/`medium`/`high` is one
+ * provider's vocabulary, not everyone's, and offering an effort a model does
+ * not have would fail the turn rather than the command.
+ *
+ * @param catalog - the harness llm service.
+ * @param route - the model to ask about.
+ * @returns its reasoning options, or undefined when it has none or cannot say.
+ */
+export declare function effortsFor(catalog: ProviderCatalog, route: ModelRoute | undefined): Promise<ReasoningInfo | undefined>;
+/**
+ * Find the effort a user's words name.
+ *
+ * @param input - what followed `/effort`.
+ * @param efforts - what the current model offers.
+ * @returns the exact effort id, or undefined when nothing matches.
+ */
+export declare function matchEffort(input: string, efforts: readonly EffortOption[]): string | undefined;
+/**
+ * Every configured provider with its models, for a message that lists them.
+ *
+ * A provider whose catalog cannot be read is skipped rather than failing the
+ * listing: one misconfigured key should not hide every other model.
+ *
+ * @param catalog - the harness llm service.
+ */
+export declare function listCatalog(catalog: ProviderCatalog): Promise<CatalogProvider[]>;
+/**
+ * Find the route a user's words name.
+ *
+ * Accepts the full `provider/model`, and a bare model id when exactly one
+ * provider offers it — which is what anyone types first, and is unambiguous
+ * often enough to be worth supporting. A bare id offered by several providers
+ * is reported as ambiguous rather than guessed at.
+ *
+ * @param input - what followed `/model`.
+ * @param providers - the configured catalog.
+ */
+export declare function matchRoute(input: string, providers: readonly CatalogProvider[]): {
+    readonly kind: 'route';
+    readonly route: ModelRoute;
+} | {
+    readonly kind: 'ambiguous';
+    readonly candidates: readonly string[];
+} | {
+    readonly kind: 'unknown';
+};
+/** Render a route the way it is typed back in. */
+export declare function formatRoute(route: ModelRoute | undefined): string;
+//# sourceMappingURL=models.d.ts.map

package/lib/session/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/session/models.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAG/D,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,iDAAiD;AACjD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAA;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;CACzC;AAED,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,aAAa,IAAI,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACzD,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAA;IAC9D,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,aAAa,CAAA;KAAE,CAAC,CAAA;CAC1F;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,eAAe,EACxB,KAAK,EAAE,UAAU,GAAG,SAAS,GAC5B,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAWpC;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,MAAM,GAAG,SAAS,CAWpB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAetF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,SAAS,eAAe,EAAE,GAEnC;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CA4B/B;AAED,kDAAkD;AAClD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAEjE"}

package/lib/session/models.js

@@ -0,0 +1,123 @@
+/**
+ * Choosing which model a Telegram conversation talks to.
+ *
+ * The web UI has a model picker; a phone had nothing, so every conversation
+ * ran on whatever the deployment happened to default to. That is the wrong
+ * place to be stuck: the reason to reach for a bot from a phone is often that
+ * the question is small and a cheaper model would do, or that it is hard and a
+ * better one is worth the wait.
+ *
+ * The choice is per conversation and durable, so it survives `/new` and a
+ * restart. It is applied per turn rather than at session creation, because the
+ * harness reads a mutable selection while assembling each step — which is what
+ * lets a model change take effect on the very next message.
+ */
+import { parseRoute } from '../harness/model-selection.js';
+/**
+ * The efforts a route offers, and which one it uses by default.
+ *
+ * Read from the model rather than fixed here: `low`/`medium`/`high` is one
+ * provider's vocabulary, not everyone's, and offering an effort a model does
+ * not have would fail the turn rather than the command.
+ *
+ * @param catalog - the harness llm service.
+ * @param route - the model to ask about.
+ * @returns its reasoning options, or undefined when it has none or cannot say.
+ */
+export async function effortsFor(catalog, route) {
+    if (!route)
+        return undefined;
+    try {
+        const info = await catalog.resolveModelInfo(route.provider, route.model);
+        return info.reasoning !== undefined && info.reasoning.efforts.length > 0
+            ? info.reasoning
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Find the effort a user's words name.
+ *
+ * @param input - what followed `/effort`.
+ * @param efforts - what the current model offers.
+ * @returns the exact effort id, or undefined when nothing matches.
+ */
+export function matchEffort(input, efforts) {
+    const wanted = input.trim().toLowerCase();
+    if (wanted === '')
+        return undefined;
+    const exact = efforts.find((effort) => effort.id.toLowerCase() === wanted);
+    if (exact)
+        return exact.id;
+    // A display name is what a person reads off the list, so it is what they
+    // type back. Accepted only while it names one effort.
+    const named = efforts.filter((effort) => (effort.name ?? '').toLowerCase() === wanted);
+    return named.length === 1 ? named[0].id : undefined;
+}
+/**
+ * Every configured provider with its models, for a message that lists them.
+ *
+ * A provider whose catalog cannot be read is skipped rather than failing the
+ * listing: one misconfigured key should not hide every other model.
+ *
+ * @param catalog - the harness llm service.
+ */
+export async function listCatalog(catalog) {
+    const providers = catalog.listProviders();
+    const groups = await Promise.all(providers.map(async (provider) => {
+        try {
+            const models = await catalog.listModels(provider.id);
+            return { id: provider.id, ...(provider.name ? { name: provider.name } : {}), models };
+        }
+        catch {
+            return undefined;
+        }
+    }));
+    return groups.filter((group) => group !== undefined && group.models.length > 0);
+}
+/**
+ * Find the route a user's words name.
+ *
+ * Accepts the full `provider/model`, and a bare model id when exactly one
+ * provider offers it — which is what anyone types first, and is unambiguous
+ * often enough to be worth supporting. A bare id offered by several providers
+ * is reported as ambiguous rather than guessed at.
+ *
+ * @param input - what followed `/model`.
+ * @param providers - the configured catalog.
+ */
+export function matchRoute(input, providers) {
+    const wanted = input.trim();
+    if (wanted === '')
+        return { kind: 'unknown' };
+    const qualified = parseRoute(wanted);
+    if (qualified) {
+        const provider = providers.find((entry) => entry.id === qualified.provider);
+        const known = provider?.models.some((model) => model.id === qualified.model);
+        // An unlisted route is still taken when its provider is configured: a
+        // catalog can lag behind a model the provider actually serves, and
+        // refusing would make this stricter than the web UI's own picker.
+        if (provider)
+            return { kind: 'route', route: qualified };
+        if (known)
+            return { kind: 'route', route: qualified };
+    }
+    const matches = providers.flatMap((provider) => provider.models
+        .filter((model) => model.id.toLowerCase() === wanted.toLowerCase())
+        .map((model) => `${provider.id}/${model.id}`));
+    if (matches.length === 1) {
+        const route = parseRoute(matches[0]);
+        if (route)
+            return { kind: 'route', route };
+    }
+    if (matches.length > 1)
+        return { kind: 'ambiguous', candidates: matches };
+    return { kind: 'unknown' };
+}
+/** Render a route the way it is typed back in. */
+export function formatRoute(route) {
+    return route === undefined ? 'the deployment default' : `${route.provider}/${route.model}`;
+}
+//# sourceMappingURL=models.js.map

package/lib/session/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/session/models.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAkC1D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAwB,EACxB,KAA6B;IAE7B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAE5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QACxE,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACtE,CAAC,CAAC,IAAI,CAAC,SAAS;YAChB,CAAC,CAAC,SAAS,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAEnC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;IAC1E,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,EAAE,CAAA;IAE1B,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;IACtF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,CAAA;IAEzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YACpD,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAA4B,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC3G,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CACxB,KAAa,EACb,SAAqC;IAKrC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAE7C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,CAAA;QAC5E,sEAAsE;QACtE,mEAAmE;QACnE,kEAAkE;QAClE,IAAI,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;QACxD,IAAI,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7C,QAAQ,CAAC,MAAM;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;SAClE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAChD,CAAA;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAW,CAAC,CAAA;QAC9C,IAAI,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;IAEzE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAC5B,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,WAAW,CAAC,KAA6B;IACvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAA;AAC5F,CAAC"}

package/lib/session/permission.d.ts

@@ -0,0 +1,83 @@
+/**
+ * The permission preset a Telegram conversation runs under.
+ *
+ * A deployment picks one default for everything it runs, and that choice is
+ * usually made for the surface the operator sits in front of: the web UI is
+ * loopback-only, with a person watching what the agent does. A Telegram bot is
+ * not that. It is reachable from anywhere, gated by a list of user ids, and
+ * read on a phone — so the same `danger-full-access` that is merely convenient
+ * at a desk is a different proposition over a chat app.
+ *
+ * This lets the two differ. It is deliberately not a second place to author
+ * presets: the names come from the deployment's own table, and all this does
+ * is choose among them for conversations that arrive over Telegram.
+ *
+ * It also decides whether the approval buttons work at all. Under a preset
+ * whose approval policy is `never` nothing ever asks, so the buttons this
+ * plugin registers can never appear — choosing one that asks is what turns
+ * them on.
+ */
+import type { ChatTarget } from '../interact/surface.js';
+import type { Logger } from '../harness/types.js';
+/** The deployment's preset table, narrowed to what this needs. */
+export interface PermissionPresetsLike {
+    /** Every preset name the deployment defines. */
+    readonly names: readonly string[];
+    /** Switch one session onto a preset; an unknown name throws. */
+    set(session: unknown, name: string): void;
+}
+/** Looking up a live session by id. */
+export interface SessionLookup {
+    get(sessionId: string): unknown;
+}
+/** Construction options. */
+export interface PermissionControlOptions {
+    readonly presets?: PermissionPresetsLike;
+    readonly sessions?: SessionLookup;
+    /**
+     * The preset this conversation should run under; empty or undefined leaves
+     * the deployment default. Read per session so a change lands on the next
+     * conversation rather than the next restart.
+     */
+    readonly preset: (target: ChatTarget) => string | undefined;
+    readonly logger?: Logger;
+}
+/**
+ * Find the preset a user's words name.
+ *
+ * Matched loosely against the deployment's own table rather than against a
+ * fixed list: the names are the deployment's to choose, and `full access`,
+ * `full-access` and `danger-full-access` are all the same request from
+ * somebody typing on a phone.
+ *
+ * @param input - what the user typed.
+ * @param names - every preset the deployment defines.
+ * @returns the exact table key, or undefined when nothing matches.
+ */
+export declare function matchPreset(input: string, names: readonly string[]): string | undefined;
+export declare class PermissionControl {
+    private readonly options;
+    private readonly logger;
+    /** Names already reported as unknown, so one typo is not logged per turn. */
+    private readonly complained;
+    constructor(options: PermissionControlOptions);
+    /** Whether this deployment can be told to use a different preset. */
+    get available(): boolean;
+    /** Every preset name available, for a message that has to name them. */
+    get names(): readonly string[];
+    /**
+     * Put one session on the configured preset.
+     *
+     * Applied after the session exists rather than at creation: the harness pins
+     * an initial permission before publishing, and switching afterwards is the
+     * supported path — it is what the web UI's own picker does mid-session.
+     *
+     * Failure is never fatal. A session that keeps the deployment default is
+     * exactly what an unconfigured deployment gets, so a bad name costs a log
+     * line rather than the user's message.
+     *
+     * @param sessionId - the session to switch.
+     */
+    apply(target: ChatTarget, sessionId: string): void;
+}
+//# sourceMappingURL=permission.d.ts.map

package/lib/session/permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../../src/session/permission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAGjD,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,gEAAgE;IAChE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAA;CAChC;AAED,4BAA4B;AAC5B,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAA;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAA;IACjC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,GAAG,SAAS,CAAA;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAWvF;AAOD,qBAAa,iBAAiB;IAKhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAElB,OAAO,EAAE,wBAAwB;IAI9D,qEAAqE;IACrE,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,wEAAwE;IACxE,IAAI,KAAK,IAAI,SAAS,MAAM,EAAE,CAE7B;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;CA8BnD"}

package/lib/session/permission.js

@@ -0,0 +1,107 @@
+/**
+ * The permission preset a Telegram conversation runs under.
+ *
+ * A deployment picks one default for everything it runs, and that choice is
+ * usually made for the surface the operator sits in front of: the web UI is
+ * loopback-only, with a person watching what the agent does. A Telegram bot is
+ * not that. It is reachable from anywhere, gated by a list of user ids, and
+ * read on a phone — so the same `danger-full-access` that is merely convenient
+ * at a desk is a different proposition over a chat app.
+ *
+ * This lets the two differ. It is deliberately not a second place to author
+ * presets: the names come from the deployment's own table, and all this does
+ * is choose among them for conversations that arrive over Telegram.
+ *
+ * It also decides whether the approval buttons work at all. Under a preset
+ * whose approval policy is `never` nothing ever asks, so the buttons this
+ * plugin registers can never appear — choosing one that asks is what turns
+ * them on.
+ */
+import { SILENT_LOGGER } from '../harness/types.js';
+/**
+ * Find the preset a user's words name.
+ *
+ * Matched loosely against the deployment's own table rather than against a
+ * fixed list: the names are the deployment's to choose, and `full access`,
+ * `full-access` and `danger-full-access` are all the same request from
+ * somebody typing on a phone.
+ *
+ * @param input - what the user typed.
+ * @param names - every preset the deployment defines.
+ * @returns the exact table key, or undefined when nothing matches.
+ */
+export function matchPreset(input, names) {
+    const wanted = normalize(input);
+    if (wanted === '')
+        return undefined;
+    const exact = names.find((name) => normalize(name) === wanted);
+    if (exact !== undefined)
+        return exact;
+    // A shorthand is accepted only while it names ONE preset. `read` picking
+    // `read-only` is helpful; a prefix shared by two would be a coin toss.
+    const partial = names.filter((name) => normalize(name).includes(wanted));
+    return partial.length === 1 ? partial[0] : undefined;
+}
+/** Compare names the way somebody types them, not the way they are stored. */
+function normalize(text) {
+    return text.trim().toLowerCase().replace(/[\s_-]+/g, '');
+}
+export class PermissionControl {
+    options;
+    logger;
+    /** Names already reported as unknown, so one typo is not logged per turn. */
+    complained = new Set();
+    constructor(options) {
+        this.options = options;
+        this.logger = options.logger ?? SILENT_LOGGER;
+    }
+    /** Whether this deployment can be told to use a different preset. */
+    get available() {
+        return this.options.presets !== undefined && this.options.sessions !== undefined;
+    }
+    /** Every preset name available, for a message that has to name them. */
+    get names() {
+        return this.options.presets?.names ?? [];
+    }
+    /**
+     * Put one session on the configured preset.
+     *
+     * Applied after the session exists rather than at creation: the harness pins
+     * an initial permission before publishing, and switching afterwards is the
+     * supported path — it is what the web UI's own picker does mid-session.
+     *
+     * Failure is never fatal. A session that keeps the deployment default is
+     * exactly what an unconfigured deployment gets, so a bad name costs a log
+     * line rather than the user's message.
+     *
+     * @param sessionId - the session to switch.
+     */
+    apply(target, sessionId) {
+        const wanted = this.options.preset(target)?.trim();
+        if (!wanted)
+            return;
+        const { presets, sessions } = this.options;
+        if (!presets || !sessions)
+            return;
+        if (!presets.names.includes(wanted)) {
+            if (!this.complained.has(wanted)) {
+                this.complained.add(wanted);
+                this.logger.warn(`[dsh-telegram] unknown permission preset "${wanted}" ` +
+                    `(known: ${presets.names.join(', ') || 'none'}); keeping the deployment default`);
+            }
+            return;
+        }
+        const session = sessions.get(sessionId);
+        if (session === undefined) {
+            this.logger.debug(`[dsh-telegram] session '${sessionId}' is not live; permission unchanged`);
+            return;
+        }
+        try {
+            presets.set(session, wanted);
+        }
+        catch (error) {
+            this.logger.warn(`[dsh-telegram] could not apply permission preset "${wanted}"`, error);
+        }
+    }
+}
+//# sourceMappingURL=permission.js.map

package/lib/session/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../src/session/permission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AA4BnD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAwB;IACjE,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IAC/B,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAA;IAC9D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAErC,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACxE,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,8EAA8E;AAC9E,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,OAAO,iBAAiB;IAKC;IAJZ,MAAM,CAAQ;IAC/B,6EAA6E;IAC5D,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IAE/C,YAA6B,OAAiC;QAAjC,YAAO,GAAP,OAAO,CAA0B;QAC5D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAA;IAC/C,CAAC;IAED,qEAAqE;IACrE,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAA;IAClF,CAAC;IAED,wEAAwE;IACxE,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAA;IAC1C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAkB,EAAE,SAAiB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAA;QAClD,IAAI,CAAC,MAAM;YAAE,OAAM;QAEnB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAA;QAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;YAAE,OAAM;QAEjC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6CAA6C,MAAM,IAAI;oBACrD,WAAW,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,mCAAmC,CACnF,CAAA;YACH,CAAC;YACD,OAAM;QACR,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,SAAS,qCAAqC,CAAC,CAAA;YAC5F,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,MAAM,GAAG,EAAE,KAAK,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;CACF"}

package/lib/session/picker.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Picking up a conversation that `/new` left behind.
+ *
+ * The harness keeps every session's log, but the binding naming the current
+ * one is replaced, so from a phone `/new` is a one-way door: someone who
+ * starts a fresh conversation to ask one quick thing loses the one they were
+ * in the middle of.
+ *
+ * Offered as buttons rather than as `/resume 3`, for the same reason the
+ * recovery offer is: the list is already on screen, and asking someone to read
+ * an index off it and type a number back is asking them to do a computer's
+ * job. It also means there is nothing to mistype.
+ */
+import type { ChatSurface, ChatTarget } from '../interact/surface.js';
+import type { PendingRegistry } from '../interact/pending.js';
+import type { Logger } from '../harness/types.js';
+import type { ChatHistory } from './history.js';
+/** Everything the picker needs from the rest of the plugin. */
+export interface SessionPickerOptions {
+    readonly surface: ChatSurface;
+    readonly pending: PendingRegistry<unknown>;
+    readonly history: ChatHistory;
+    /** The session this conversation is on now, so it is not offered to itself. */
+    readonly currentSession: (target: ChatTarget) => string | undefined;
+    /** Point the conversation at an existing session. */
+    readonly adopt: (target: ChatTarget, sessionId: string) => Promise<void>;
+    readonly logger?: Logger;
+}
+export declare class SessionPicker {
+    private readonly options;
+    private readonly logger;
+    constructor(options: SessionPickerOptions);
+    /**
+     * Offer this chat's earlier conversations.
+     *
+     * @param target - the conversation asking.
+     */
+    offer(target: ChatTarget): Promise<void>;
+    /**
+     * Route one button press.
+     *
+     * @param data - raw `callback_data` from the update.
+     * @returns whether the press belonged to an open picker.
+     */
+    handleCallback(data: string | undefined): boolean;
+    /** Post one message, swallowing delivery failures. */
+    private say;
+}
+//# sourceMappingURL=picker.d.ts.map

package/lib/session/picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker.d.ts","sourceRoot":"","sources":["../../src/session/picker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAGjD,OAAO,KAAK,EAAE,WAAW,EAAe,MAAM,cAAc,CAAA;AAQ5D,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IAC1C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,GAAG,SAAS,CAAA;IACnE,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,qBAAa,aAAa;IAGZ,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;gBAEF,OAAO,EAAE,oBAAoB;IAI1D;;;;OAIG;IACG,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAuD9C;;;;;OAKG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO;IAajD,sDAAsD;YACxC,GAAG;CAWlB"}

package/lib/session/picker.js

@@ -0,0 +1,107 @@
+/**
+ * Picking up a conversation that `/new` left behind.
+ *
+ * The harness keeps every session's log, but the binding naming the current
+ * one is replaced, so from a phone `/new` is a one-way door: someone who
+ * starts a fresh conversation to ask one quick thing loses the one they were
+ * in the middle of.
+ *
+ * Offered as buttons rather than as `/resume 3`, for the same reason the
+ * recovery offer is: the list is already on screen, and asking someone to read
+ * an index off it and type a number back is asking them to do a computer's
+ * job. It also means there is nothing to mistype.
+ */
+import { escapeHtml } from '../render/escape.js';
+import { SILENT_LOGGER } from '../harness/types.js';
+/** Prefix marking callback data as belonging to a session picker. */
+const KIND = 's';
+/** How many to offer; Telegram keyboards get unusable long before this. */
+const OFFER = 8;
+export class SessionPicker {
+    options;
+    logger;
+    constructor(options) {
+        this.options = options;
+        this.logger = options.logger ?? SILENT_LOGGER;
+    }
+    /**
+     * Offer this chat's earlier conversations.
+     *
+     * @param target - the conversation asking.
+     */
+    async offer(target) {
+        const current = this.options.currentSession(target);
+        const past = this.options
+            .history.forChat(target)
+            .filter((entry) => entry.sessionId !== current)
+            .slice(0, OFFER);
+        if (past.length === 0) {
+            await this.say(target, current === undefined
+                ? 'No conversations yet — send a message to start one.'
+                : 'This is the only conversation in this chat so far.');
+            return;
+        }
+        const waiter = this.options.pending.open({});
+        const keyboard = past.map((entry, index) => [
+            {
+                text: labelOf(entry),
+                callbackData: `${KIND}:${waiter.token}:${index}`,
+            },
+        ]);
+        await this.say(target, [
+            '<b>Earlier conversations</b>',
+            '',
+            'Pick one to carry on with. The one you are in now stays where it is.',
+        ].join('\n'), keyboard);
+        const pressed = await waiter.promise;
+        if (typeof pressed !== 'string')
+            return;
+        const index = Number.parseInt(pressed, 10);
+        const chosen = past[index];
+        if (!chosen)
+            return;
+        try {
+            await this.options.adopt(target, chosen.sessionId);
+            await this.say(target, `↩️ Back in <b>${escapeHtml(labelOf(chosen))}</b>.\n\n` +
+                `<code>${escapeHtml(chosen.cwd)}</code>`);
+        }
+        catch (error) {
+            this.logger.error('[dsh-telegram] could not adopt an earlier session', error);
+            await this.say(target, '⚠️ That conversation could not be reopened.');
+        }
+    }
+    /**
+     * Route one button press.
+     *
+     * @param data - raw `callback_data` from the update.
+     * @returns whether the press belonged to an open picker.
+     */
+    handleCallback(data) {
+        if (data === undefined)
+            return false;
+        const parts = data.split(':');
+        if (parts.length !== 3 || parts[0] !== KIND)
+            return false;
+        const token = parts[1];
+        const index = parts[2];
+        if (token === '' || !/^\d+$/.test(index))
+            return false;
+        return this.options.pending.settle(token, index);
+    }
+    /** Post one message, swallowing delivery failures. */
+    async say(target, html, keyboard) {
+        try {
+            await this.options.surface.send(target, html, keyboard);
+        }
+        catch (error) {
+            this.logger.warn('[dsh-telegram] could not offer the session list', error);
+        }
+    }
+}
+/** A button label: what the conversation opened with, or when it started. */
+function labelOf(entry) {
+    if (entry.label !== undefined && entry.label !== '')
+        return entry.label;
+    return new Date(entry.startedAt).toISOString().slice(0, 16).replace('T', ' ');
+}
+//# sourceMappingURL=picker.js.map

package/lib/session/picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"picker.js","sourceRoot":"","sources":["../../src/session/picker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAIhD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAInD,qEAAqE;AACrE,MAAM,IAAI,GAAG,GAAG,CAAA;AAEhB,2EAA2E;AAC3E,MAAM,KAAK,GAAG,CAAC,CAAA;AAcf,MAAM,OAAO,aAAa;IAGK;IAFZ,MAAM,CAAQ;IAE/B,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;QACxD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAA;IAC/C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,MAAkB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO;aACtB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;aACvB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC;aAC9C,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QAElB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,GAAG,CACZ,MAAM,EACN,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,qDAAqD;gBACvD,CAAC,CAAC,oDAAoD,CACzD,CAAA;YACD,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1C;gBACE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;gBACpB,YAAY,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE;aACjD;SACF,CAAC,CAAA;QAEF,MAAM,IAAI,CAAC,GAAG,CACZ,MAAM,EACN;YACE,8BAA8B;YAC9B,EAAE;YACF,sEAAsE;SACvE,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,QAAQ,CACT,CAAA;QAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAA;QACpC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAM;QAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAM;QAEnB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,IAAI,CAAC,GAAG,CACZ,MAAM,EACN,iBAAiB,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW;gBACrD,SAAS,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAC3C,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAA;YAC7E,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAA;QACvE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,IAAwB;QACrC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QAEpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QAEzD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;QAChC,IAAI,KAAK,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAA;QAEtD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAClD,CAAC;IAED,sDAAsD;IAC9C,KAAK,CAAC,GAAG,CACf,MAAkB,EAClB,IAAY,EACZ,QAAqD;QAErD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,KAAK,CAAC,CAAA;QAC5E,CAAC;IACH,CAAC;CACF;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,KAAkB;IACjC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,KAAK,CAAA;IACvE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;AAC/E,CAAC"}

package/lib/session/preferences.d.ts

@@ -0,0 +1,55 @@
+/**
+ * One durable string a conversation chose for itself.
+ *
+ * Two things need this and they are the same shape: the directory a chat works
+ * in, and the model it talks to. Both are per conversation, both must outlive
+ * `/new` — a preference discarded with the session would silently snap back to
+ * the deployment default on the next message — and both must outlive a
+ * restart.
+ *
+ * Kept apart from the session binding for exactly that reason: a binding is
+ * one conversation with the agent and dies with `/new`, while a preference
+ * belongs to the CHAT.
+ */
+import type { ChatTarget } from '../interact/surface.js';
+/** Construction options. */
+export interface ChatPreferenceOptions {
+    /**
+     * Whether a stored value is still usable.
+     *
+     * Applied on read rather than only on write, because the file outlives the
+     * process that wrote it: a path that was absolute, or a model that was
+     * configured, may be neither by the time it is read back.
+     */
+    readonly accept: (value: string) => boolean;
+}
+export declare class ChatPreferences {
+    private readonly file;
+    private readonly accept;
+    private values;
+    private constructor();
+    /**
+     * Load the store, or start empty when there is nothing readable yet.
+     *
+     * A corrupt file costs the conversation its preference, which one command
+     * restores; refusing to start would cost the whole bot.
+     *
+     * @param file - absolute path to the JSON document.
+     * @param options - how to tell a usable value from one to drop.
+     */
+    static open(file: string, options: ChatPreferenceOptions): Promise<ChatPreferences>;
+    /** What this conversation chose, if it chose anything. */
+    forChat(target: ChatTarget): string | undefined;
+    /**
+     * Remember a conversation's choice.
+     *
+     * @param target - the conversation.
+     * @param value - the value, already checked by the caller.
+     */
+    set(target: ChatTarget, value: string): Promise<void>;
+    /** Forget it, returning the conversation to the deployment default. */
+    clear(target: ChatTarget): Promise<void>;
+    /** Write the document atomically, so a crash cannot leave a half file. */
+    private persist;
+}
+//# sourceMappingURL=preferences.d.ts.map