negotium 0.5.6 → 0.5.8

package/dist/runtime/src/prompts/builders.ts

@@ -85,6 +85,31 @@ function sharedToolsPartial(): string {
   return _sharedToolsPartial;
 }
 
+/** The "Tool notes" bullets that name a capability-gated tool. They used to sit
+ *  in `_shared-tools.md` unconditionally, so a default-deny room — Telegram,
+ *  headless, any node turn the caller did not mint the capability for — was told
+ *  to "use the visual tool below" when no such tool was registered and no such
+ *  section followed. Rendering them from the same flags that gate the tools
+ *  keeps the prompt and the tool list from disagreeing.
+ *
+ *  Appended to the end of the preceding line rather than occupying one of its
+ *  own, so the empty case leaves no blank line in the bullet list. */
+function capabilityToolNotes(opts: { visualTools?: boolean; fileDeliveryTools?: boolean }): string {
+  const notes = [
+    ...(opts.fileDeliveryTools
+      ? [
+          "- Sending files: use the file-delivery tool; never emit deprecated `[FILE:/absolute/path]` tags. Prefer ASCII names and richer formats (PDF over plain `.txt`).",
+        ]
+      : []),
+    ...(opts.visualTools
+      ? [
+          "- Visual output (HTML/CSS, dashboards, charts, tables): use the visual tool below instead of pasting large HTML into chat.",
+        ]
+      : []),
+  ];
+  return notes.length ? `\n${notes.join("\n")}` : "";
+}
+
 function topicSystemPromptTemplate(): string {
   if (_topicSystemPromptTemplate === null) {
     _topicSystemPromptTemplate = loadSessionPrompt(
@@ -499,6 +524,7 @@ export function createPromptBuilders(host: PromptBuilderHost = {}): PromptBuilde
     // {{UPLOADS_DIR}}, which the later keys in this same pass then resolve.
     const templateVars: Record<string, string> = {
       SHARED_TOOLS: sharedToolsPartial(),
+      CAPABILITY_TOOL_NOTES: capabilityToolNotes(opts),
       AI_LABEL: opts.aiLabel,
       TOPIC_TITLE: opts.topicTitle,
       WORKSPACE_CWD: opts.workspaceCwd,

package/dist/runtime/src/prompts/sessions/_shared-tools.md

@@ -5,9 +5,7 @@ Working directory "{{WORKSPACE_CWD}}" (put temp files in `tmp/`). Create files h
 Attachments live under "{{UPLOADS_DIR}}" and persist across turns. You MUST open any file named in an `[Attached file: <name> at path: <absolute path>]` line before answering — images via the View tool (absolute image_path), other files via Read. Never claim a file is missing when such a line is present.
 
 ## Tool notes
-Use a tool only when it is actually available; otherwise say so instead of pretending.
-- Sending files: use the file-delivery tool; never emit deprecated `[FILE:/absolute/path]` tags. Prefer ASCII names and richer formats (PDF over plain `.txt`).
-- Visual output (HTML/CSS, dashboards, charts, tables): use the visual tool below instead of pasting large HTML into chat.
+Use a tool only when it is actually available; otherwise say so instead of pretending.{{CAPABILITY_TOOL_NOTES}}
 - Voice: user voice arrives transcribed; fix misheard proper nouns from context.
 - Skills: when a task looks unfamiliar, slow, or error-prone, `skill_query` first; save or update a reusable solution with `skill_save`.
 - Memory: when a Memory section is injected, use it for past context; `wiki_query` for deeper recall.

package/dist/runtime/src/runtime/turn-runner.ts

@@ -658,6 +658,35 @@ export interface AiTurnExecutionOptions {
   from?: string;
 }
 
+/**
+ * A turn that came from an adapter states its own capabilities. One that did not
+ * — `triggerTopicAiTurn` for tell/ask, cron, subagent reports, and config-change
+ * auto-continue — inherits what the room's adapter last granted. Without this a
+ * scheduled job or a resumed turn runs in an Otium room with no `show_html`,
+ * even though the panel that would render it is right there.
+ *
+ * Absence, not `false`, is what defers: an adapter that says `false` keeps
+ * saying no, so a host that stopped rendering a surface is not overridden by the
+ * grant it left behind. A room no adapter has ever granted stays default-deny.
+ *
+ * Exported so the inheritance can be asserted directly. It is the half of this
+ * feature that a storage test cannot reach, and the half that decides whether a
+ * cron job in a mapped room can draw anything.
+ */
+export function resolveTurnToolCapabilities(
+  topicId: string,
+  params: { visualTools?: boolean; fileDeliveryTools?: boolean },
+): { visualTools: boolean; fileDeliveryTools: boolean } {
+  const granted =
+    params.visualTools === undefined || params.fileDeliveryTools === undefined
+      ? getTopicToolCapabilities(topicId)
+      : null;
+  return {
+    visualTools: params.visualTools ?? granted?.visualTools ?? false,
+    fileDeliveryTools: params.fileDeliveryTools ?? granted?.fileDeliveryTools ?? false,
+  };
+}
+
 export interface StartAiTurnParams extends AiTurnExecutionOptions {
   topic: AiTurnTopic;
   userId: string;
@@ -959,19 +988,7 @@ export function startAiTurn(params: StartAiTurnParams): string | null {
   const cwd = params.cwd;
   const sessionName = params.sessionName ?? topic.title;
   const sessionType = params.sessionType;
-  // A turn that came from an adapter states its own capabilities. One that did
-  // not — `triggerTopicAiTurn` for tell/ask, cron, subagent reports, and
-  // config-change auto-continue — inherits what the room's adapter last
-  // granted. Without this a scheduled job or a resumed turn runs in an Otium
-  // room with no `show_html`, even though the panel that would render it is
-  // right there. Absence, not `false`, is what defers: an adapter that says
-  // `false` keeps saying no.
-  const grantedForTopic =
-    params.visualTools === undefined || params.fileDeliveryTools === undefined
-      ? getTopicToolCapabilities(topicId)
-      : null;
-  const visualTools = params.visualTools ?? grantedForTopic?.visualTools ?? false;
-  const fileDeliveryTools = params.fileDeliveryTools ?? grantedForTopic?.fileDeliveryTools ?? false;
+  const { visualTools, fileDeliveryTools } = resolveTurnToolCapabilities(topicId, params);
   const onSessionId = params.onSessionId;
   const onSessionReset = params.onSessionReset;
   const bridgeSessionFromHistory = params.bridgeSessionFromHistory === true;

package/dist/runtime/src/version.ts

@@ -1 +1 @@
-export const NEGOTIUM_VERSION = "0.5.6";
+export const NEGOTIUM_VERSION = "0.5.8";

package/dist/types/packages/core/src/runtime/turn-runner.d.ts

@@ -149,6 +149,28 @@ export interface AiTurnExecutionOptions {
     /** Internal source marker, e.g. FROM_AUTO_CONTINUE for config-change resumes. */
     from?: string;
 }
+/**
+ * A turn that came from an adapter states its own capabilities. One that did not
+ * — `triggerTopicAiTurn` for tell/ask, cron, subagent reports, and config-change
+ * auto-continue — inherits what the room's adapter last granted. Without this a
+ * scheduled job or a resumed turn runs in an Otium room with no `show_html`,
+ * even though the panel that would render it is right there.
+ *
+ * Absence, not `false`, is what defers: an adapter that says `false` keeps
+ * saying no, so a host that stopped rendering a surface is not overridden by the
+ * grant it left behind. A room no adapter has ever granted stays default-deny.
+ *
+ * Exported so the inheritance can be asserted directly. It is the half of this
+ * feature that a storage test cannot reach, and the half that decides whether a
+ * cron job in a mapped room can draw anything.
+ */
+export declare function resolveTurnToolCapabilities(topicId: string, params: {
+    visualTools?: boolean;
+    fileDeliveryTools?: boolean;
+}): {
+    visualTools: boolean;
+    fileDeliveryTools: boolean;
+};
 export interface StartAiTurnParams extends AiTurnExecutionOptions {
     topic: AiTurnTopic;
     userId: string;

package/dist/types/packages/core/src/version.d.ts

@@ -1 +1 @@
-export declare const NEGOTIUM_VERSION = "0.5.6";
+export declare const NEGOTIUM_VERSION = "0.5.8";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "negotium",
-  "version": "0.5.6",
+  "version": "0.5.8",
   "type": "module",
   "description": "Install the Negotium multi-agent runtime and CLI with one package",
   "license": "Apache-2.0",