comisai 1.0.26 → 1.0.28

package/node_modules/@comis/agent/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/agent",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "AI agent executor, budget control, and session management for Comis",

package/node_modules/@comis/channels/dist/shared/inbound-gate.js

@@ -65,6 +65,18 @@ export async function evaluateInboundGate(deps, adapter, processedMsg, sessionKe
                 injectedAsHistory: true,
                 timestamp: Date.now(),
             });
+            deps.logger.info({
+                channelType: adapter.channelType,
+                chatId: msg.channelId,
+                senderId: msg.senderId,
+                reason: decision.reason,
+                activationMode: arConfig.groupActivation,
+                isBotMentioned: msg.metadata?.isBotMentioned === true,
+                replyToBot: msg.metadata?.replyToBot === true,
+                action: "inject-history",
+                hint: "Group activation policy did not match — message saved as history context only. Set autoReplyEngine.groupActivation=always to respond to all group messages, or @-mention/reply to the bot to activate it.",
+                errorKind: "config",
+            }, "Group message did not activate agent");
             // Push to group history ring buffer for context injection
             if (deps.groupHistoryBuffer) {
                 deps.groupHistoryBuffer.push(formatSessionKey(sessionKey), msg);
@@ -100,12 +112,18 @@ export async function evaluateInboundGate(deps, adapter, processedMsg, sessionKe
                 injectedAsHistory: false,
                 timestamp: Date.now(),
             });
-            deps.logger.debug({
-                step: "auto-reply-suppressed",
+            deps.logger.info({
                 channelType: adapter.channelType,
                 chatId: msg.channelId,
+                senderId: msg.senderId,
                 reason: decision.reason,
-            }, "Auto-reply suppressed");
+                activationMode: arConfig.groupActivation,
+                isBotMentioned: msg.metadata?.isBotMentioned === true,
+                replyToBot: msg.metadata?.replyToBot === true,
+                action: "ignore",
+                hint: "Group activation policy did not match and history injection is disabled. Set autoReplyEngine.groupActivation=always or autoReplyEngine.historyInjection=true to change.",
+                errorKind: "config",
+            }, "Group message ignored");
             return { action: "skip" };
         }
     }

package/node_modules/@comis/channels/dist/telegram/message-mapper.d.ts

@@ -1,5 +1,15 @@
 import type { NormalizedMessage } from "@comis/core";
 import type { Message } from "grammy/types";
+/**
+ * Identifying details of the bot account, used to detect addressing in
+ * inbound Telegram messages (mentions, replies, bot_command targets).
+ *
+ * Sourced from `bot.api.getMe()` after token validation in the adapter.
+ */
+export interface TelegramBotIdentity {
+    id: number;
+    username: string;
+}
 /**
  * Map a Grammy Message object to a NormalizedMessage.
  *
@@ -14,8 +24,15 @@ import type { Message } from "grammy/types";
  * - Media -> attachments via `buildAttachments()`
  * - Platform metadata preserved in `metadata` field
  *
+ * When `bot` is provided, message entities and `reply_to_message` are
+ * inspected to populate `metadata.isBotMentioned`, `metadata.replyToBot`,
+ * and `metadata.isBotCommand` so that the inbound gate's mention-gated
+ * activation policy can correctly route addressed group messages to the
+ * agent. Omitting `bot` preserves prior behavior (no addressing flags).
+ *
  * @param msg - A plain Telegram Message object
  * @param chatId - The chat ID (used as channelId)
+ * @param bot - Optional bot identity for addressing detection
  * @returns A fully populated NormalizedMessage
  */
-export declare function mapGrammyToNormalized(msg: Message, chatId: number): NormalizedMessage;
+export declare function mapGrammyToNormalized(msg: Message, chatId: number, bot?: TelegramBotIdentity): NormalizedMessage;

package/node_modules/@comis/channels/dist/telegram/message-mapper.js

@@ -2,6 +2,81 @@ import { randomUUID } from "node:crypto";
 import { buildAttachments } from "./media-handler.js";
 import { normalizeLocation } from "../shared/location-normalizer.js";
 import { resolveTelegramThreadContext } from "./thread-context.js";
+/**
+ * Inspect a Telegram message for any signal that the bot is being addressed:
+ *
+ * - `mention` entity (`@username`) matching the bot's username
+ * - `text_mention` entity referencing the bot's user id (no public username
+ *   required; this is what private bots receive)
+ * - `bot_command` entity — bare `/cmd` (privacy-off DM) or `/cmd@<botUsername>`
+ *   (group with privacy-on)
+ * - `reply_to_message` whose author is the bot itself
+ *
+ * Mentions of *other* users / `text_mention` of *other* users / commands
+ * targeted at *other* bots do not flip any flag.
+ */
+function detectBotAddressing(msg, bot) {
+    const result = {
+        isBotMentioned: false,
+        replyToBot: false,
+        isBotCommand: false,
+    };
+    // Reply-to detection: a reply to a message authored by the bot is treated
+    // as addressing, mirroring the convention used by other channels.
+    if (msg.reply_to_message?.from?.id === bot.id) {
+        result.replyToBot = true;
+    }
+    // Entities live on text or caption depending on whether the message is
+    // a plain message or a media-with-caption.
+    const entities = msg.entities ?? msg.caption_entities ?? [];
+    if (entities.length === 0) {
+        return result;
+    }
+    const source = msg.text ?? msg.caption ?? "";
+    const expectedMention = `@${bot.username.toLowerCase()}`;
+    for (const ent of entities) {
+        if (ent.type === "mention") {
+            // `mention` entity covers `@username` text — slice and case-insensitive compare.
+            const slice = source.slice(ent.offset, ent.offset + ent.length).toLowerCase();
+            if (slice === expectedMention) {
+                result.isBotMentioned = true;
+            }
+        }
+        else if (ent.type === "text_mention") {
+            // `text_mention` entity carries a `user` payload — used for bots without
+            // a public username, or when Telegram resolves the mention server-side.
+            const tm = ent;
+            if (tm.user?.id === bot.id) {
+                result.isBotMentioned = true;
+            }
+        }
+        else if (ent.type === "bot_command") {
+            // Slash command targeting: `/cmd` (no target — DM/privacy-off) or
+            // `/cmd@<botUsername>` (group with privacy-on). Either form addressed
+            // to this bot activates it; commands targeted at *other* bots do not.
+            const slice = source.slice(ent.offset, ent.offset + ent.length);
+            const atIdx = slice.indexOf("@");
+            if (atIdx === -1) {
+                // Bare /cmd — only meaningful in DMs or privacy-off groups, where
+                // Telegram delivers it to us in the first place.
+                result.isBotCommand = true;
+            }
+            else {
+                const target = slice.slice(atIdx + 1).toLowerCase();
+                if (target === bot.username.toLowerCase()) {
+                    result.isBotCommand = true;
+                }
+            }
+        }
+    }
+    // A bot_command entity for this bot implies activation — surface it as a
+    // mention so downstream gates (which key off `isBotMentioned`) treat it
+    // identically to an explicit @mention.
+    if (result.isBotCommand) {
+        result.isBotMentioned = true;
+    }
+    return result;
+}
 /**
  * Map a Grammy Message object to a NormalizedMessage.
  *
@@ -16,11 +91,18 @@ import { resolveTelegramThreadContext } from "./thread-context.js";
  * - Media -> attachments via `buildAttachments()`
  * - Platform metadata preserved in `metadata` field
  *
+ * When `bot` is provided, message entities and `reply_to_message` are
+ * inspected to populate `metadata.isBotMentioned`, `metadata.replyToBot`,
+ * and `metadata.isBotCommand` so that the inbound gate's mention-gated
+ * activation policy can correctly route addressed group messages to the
+ * agent. Omitting `bot` preserves prior behavior (no addressing flags).
+ *
  * @param msg - A plain Telegram Message object
  * @param chatId - The chat ID (used as channelId)
+ * @param bot - Optional bot identity for addressing detection
  * @returns A fully populated NormalizedMessage
  */
-export function mapGrammyToNormalized(msg, chatId) {
+export function mapGrammyToNormalized(msg, chatId, bot) {
     const metadata = {
         telegramMessageId: msg.message_id,
         telegramChatType: msg.chat.type,
@@ -42,6 +124,18 @@ export function mapGrammyToNormalized(msg, chatId) {
         metadata.telegramIsForum = isForum;
         metadata.telegramThreadScope = threadCtx.scope;
     }
+    // Bot addressing detection — only when bot identity is supplied. The
+    // adapter populates `bot` after token validation; tests that exercise
+    // the pure mapper without a bot identity continue to omit these flags.
+    if (bot) {
+        const addressing = detectBotAddressing(msg, bot);
+        if (addressing.isBotMentioned)
+            metadata.isBotMentioned = true;
+        if (addressing.replyToBot)
+            metadata.replyToBot = true;
+        if (addressing.isBotCommand)
+            metadata.isBotCommand = true;
+    }
     // Extract text from message body or caption
     let text = msg.text ?? msg.caption ?? "";
     // GPS location extraction from venue and location messages

package/node_modules/@comis/channels/dist/telegram/telegram-adapter.js

@@ -125,6 +125,9 @@ export function createTelegramAdapter(deps) {
     const handlers = [];
     let _channelId = "telegram-pending";
     let runnerHandle = null;
+    // Bot identity is populated after token validation in start(). Used by the
+    // message mapper to detect mentions/replies/bot_commands aimed at this bot.
+    let botIdentity;
     // Health tracking
     let _connected = false;
     let _startedAt;
@@ -140,7 +143,7 @@ export function createTelegramAdapter(deps) {
             return;
         }
         _lastMessageAt = Date.now();
-        const normalized = mapGrammyToNormalized(msg, chatId);
+        const normalized = mapGrammyToNormalized(msg, chatId, botIdentity);
         deps.logger.info({ channelType: "telegram", messageId: normalized.id, chatId: String(chatId), previewLen: (normalized.text ?? "").length }, "Inbound message");
         for (const handler of handlers) {
             // Fire-and-forget: don't block Grammy middleware
@@ -175,6 +178,9 @@ export function createTelegramAdapter(deps) {
             }
             const botInfo = tokenResult.value;
             _channelId = `telegram-${botInfo.id}`;
+            // Populate identity now that getMe() has succeeded — message mapper
+            // uses this to detect mentions/replies/bot_commands aimed at us.
+            botIdentity = { id: botInfo.id, username: botInfo.username };
             // Validate webhook secret if provided
             if (deps.webhookSecret) {
                 const secretResult = validateWebhookSecret(deps.webhookSecret);

package/node_modules/@comis/channels/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/channels",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Chat platform adapters — Discord, Telegram, Slack, WhatsApp, Signal, iMessage, IRC, LINE",

package/node_modules/@comis/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/cli",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Command-line interface for the Comis AI agent platform",

package/node_modules/@comis/core/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/core",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Core domain types, ports, event bus, security, and config for Comis",

package/node_modules/@comis/daemon/dist/daemon.js

@@ -656,11 +656,18 @@ export async function main(overrides = {}) {
         onTaskExtraction: extractFromConversation,
         // Restart continuation: track recently-active sessions for SIGUSR2 replay
         onMessageProcessed: (msg, channelType) => {
+            // Preserve channel-native chat type so post-restart synthetic messages
+            // can frame group sessions correctly. Without this, group inbounds are
+            // mis-framed as DMs on first turn after restart.
+            const chatType = typeof msg.metadata?.telegramChatType === "string"
+                ? msg.metadata.telegramChatType
+                : undefined;
             continuationTracker.track({
                 agentId: defaultAgentId,
                 channelType,
                 channelId: msg.channelId,
                 userId: msg.senderId,
+                chatType,
                 tenantId: container.config.tenantId,
                 timestamp: Date.now(),
             });
@@ -1168,6 +1175,21 @@ export async function main(overrides = {}) {
                 daemonLogger.debug({ channelType: record.channelType, channelId: record.channelId }, "Skipping continuation replay: session already active this cycle");
                 continue;
             }
+            // Rehydrate chat-type metadata so downstream resolveChatType /
+            // isGroupMessage classify the resumed session correctly. Without this,
+            // a synthetic restart message for a group is mis-framed as a DM on the
+            // first post-restart turn.
+            const syntheticMetadata = {
+                isRestartContinuation: true,
+                mcpStatusLine: mcpStatusLine ?? null,
+            };
+            if (record.channelType === "telegram" && record.chatType) {
+                syntheticMetadata.telegramChatType = record.chatType;
+            }
+            if (record.chatType === "group" || record.chatType === "supergroup") {
+                // Channel-agnostic flag mirrored by other adapters (e.g. WhatsApp).
+                syntheticMetadata.isGroup = true;
+            }
             const syntheticMsg = {
                 id: randomUUID(),
                 channelId: record.channelId,
@@ -1176,7 +1198,7 @@ export async function main(overrides = {}) {
                 text: mcpStatusLine ? `${baseText}\n${mcpStatusLine}` : baseText,
                 timestamp: Date.now(),
                 attachments: [],
-                metadata: { isRestartContinuation: true, mcpStatusLine: mcpStatusLine ?? null },
+                metadata: syntheticMetadata,
             };
             channelManager.injectMessage(record.channelType, syntheticMsg).catch((injectErr) => {
                 daemonLogger.warn({ err: injectErr, channelType: record.channelType, channelId: record.channelId, hint: "Continuation replay failed; user can re-send to resume", errorKind: "internal" }, "Failed to replay continuation");

package/node_modules/@comis/daemon/dist/wiring/restart-continuation.d.ts

@@ -16,6 +16,16 @@ export interface ContinuationRecord {
     peerId?: string;
     guildId?: string;
     threadId?: string;
+    /**
+     * Channel-native chat type tag captured at track-time so the synthetic
+     * restart message can frame the resumed conversation correctly.
+     *
+     * For Telegram: `"private"`, `"group"`, `"supergroup"`, or `"channel"`
+     * (sourced from `metadata.telegramChatType`). Without this, group sessions
+     * are mis-framed as DMs on first turn after restart because the synthetic
+     * inbound carries no chat-type metadata.
+     */
+    chatType?: string;
     tenantId: string;
     timestamp: number;
 }

package/node_modules/@comis/daemon/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/daemon",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Background daemon and orchestrator for the Comis platform",

package/node_modules/@comis/gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/gateway",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "HTTP, JSON-RPC, and WebSocket gateway for Comis",

package/node_modules/@comis/infra/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/infra",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Structured logging infrastructure for Comis",

package/node_modules/@comis/memory/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/memory",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "SQLite memory, embeddings, and RAG storage for Comis agents",

package/node_modules/@comis/scheduler/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/scheduler",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Task scheduling and cron management for Comis",

package/node_modules/@comis/shared/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/shared",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Shared types and utilities for the Comis platform",

package/node_modules/@comis/skills/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/skills",
   "private": true,
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Skill system, MCP integration, and tool sandbox for Comis agents",

package/node_modules/@comis/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@comis/web",
-  "version": "1.0.26",
+  "version": "1.0.28",
   "description": "Web dashboard SPA for Comis agent management",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "comisai",
-  "version": "1.0.26",
+  "version": "1.0.28",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Security-first AI agent platform — connects AI agents to Discord, Telegram, Slack, WhatsApp, and more",
@@ -111,18 +111,18 @@
     "@comis/web"
   ],
   "dependencies": {
-    "@comis/shared": "1.0.26",
-    "@comis/core": "1.0.26",
-    "@comis/infra": "1.0.26",
-    "@comis/memory": "1.0.26",
-    "@comis/gateway": "1.0.26",
-    "@comis/skills": "1.0.26",
-    "@comis/scheduler": "1.0.26",
-    "@comis/agent": "1.0.26",
-    "@comis/channels": "1.0.26",
-    "@comis/cli": "1.0.26",
-    "@comis/daemon": "1.0.26",
-    "@comis/web": "1.0.26",
+    "@comis/shared": "1.0.28",
+    "@comis/core": "1.0.28",
+    "@comis/infra": "1.0.28",
+    "@comis/memory": "1.0.28",
+    "@comis/gateway": "1.0.28",
+    "@comis/skills": "1.0.28",
+    "@comis/scheduler": "1.0.28",
+    "@comis/agent": "1.0.28",
+    "@comis/channels": "1.0.28",
+    "@comis/cli": "1.0.28",
+    "@comis/daemon": "1.0.28",
+    "@comis/web": "1.0.28",
     "@agentclientprotocol/sdk": "^0.19.0",
     "@clack/core": "^1.1.0",
     "@clack/prompts": "^1.1.0",
@@ -164,7 +164,7 @@
     "iconv-lite": "^0.7.2",
     "ignore": "^7.0.5",
     "imapflow": "^1.2.18",
-    "impit": "^0.13.0",
+    "impit": "0.13.0",
     "ipaddr.js": "^2.3.0",
     "irc-framework": "^4.14.0",
     "json-rpc-2.0": "^1.7.1",