@melaya/runner 1.1.64 → 1.1.66

package/dist/assistantHost.py

@@ -20,7 +20,10 @@ stdout (one JSON per line, prefixed): MELASSIST {"turnId","kind",...}
 Tenant safety: the toolkit is the read-only `melaya_agent_*` tools, which POST to
 the server's assistant-tool bridge authed by MELAYA_API_KEY — every query is
 tenant-gated SERVER-side, so this host gains no data authority beyond the user's
-own mk_ key. Identity is never taken from tool args.
+own mk_ key. Identity is never taken from tool args. Workspace actions
+(melaya_tools / melaya_tool_call) go through the server's workspace-tool bridge,
+which checks, asks for approval in Safe mode and executes; the host only carries
+the call.
 """
 from __future__ import annotations
 
@@ -1183,10 +1186,16 @@ def _build_agent():
         "agent-orchestration platform.\n\n"
         + melaya_product
         + "\n"
-        "IN THIS CHAT you additionally hold READ-ONLY tools over the data "
-        "this user is allowed to see: pipelines, runs, LLM costs, plan usage, "
-        "validated workflow templates and eval results. That is your CURRENT "
-        "TOOLBOX, not a description of Melaya"
+        "IN THIS CHAT you additionally hold tools over the data this user is "
+        "allowed to see (pipelines, runs, LLM costs, plan usage, validated "
+        "workflow templates, eval results) and melaya_tools / melaya_tool_call "
+        "to ACT on their workspace: create a pipeline (from a template or a "
+        "config), preview, save, run, schedule, add triggers, inspect runs, "
+        "delete, manage projects and the team. Search with melaya_tools, load "
+        "the tools you need to see their arguments, then call them with "
+        "melaya_tool_call; changes follow the chat's autonomy mode (in Safe "
+        "mode the user approves each one). That is your CURRENT TOOLBOX, not a "
+        "description of Melaya"
         + (" — plus phone-control tools to drive the user's paired phone." if phone_enabled else ".")
         + "\nRules:\n"
         "- Use tools to answer questions about the user's pipelines, spend, usage, "

package/dist/vaults.d.ts

@@ -295,6 +295,9 @@ export declare class VaultService {
         args?: unknown;
         idempotency_key?: unknown;
     }, via: VaultVia): Promise<VaultEnvelope>;
+    /** The vault's history policy travels with each answer (as the builder does):
+     *  obsidian_* tools keep excerpts out of saved logs unless it is "retain". */
+    private withHistory;
     /** One engine op on the Python host (re-registers once after a host restart). */
     private hostOp;
     /** Merge the Obsidian app's availability into a vault's capability report

package/dist/vaults.js

@@ -792,7 +792,7 @@ export class VaultService {
         if (this.o.app) {
             const served = await this.o.app.serve({ reg, grant: appGrant, op, args, idempotencyKey: idem }).catch(() => null);
             if (served?.kind === "env")
-                return served.env;
+                return this.withHistory(served.env, g);
             if (served?.kind === "files")
                 args = served.args;
         }
@@ -803,7 +803,7 @@ export class VaultService {
         if (this.o.app && op === "base_query") {
             const viaApp = await this.o.app.afterFiles({ reg, grant: appGrant, op, args }, env).catch(() => null);
             if (viaApp)
-                return viaApp;
+                return this.withHistory(viaApp, g);
         }
         if (this.o.app && op === "capabilities" && env.ok) {
             const st = await this.o.app.status(reg).catch(() => null);
@@ -814,6 +814,13 @@ export class VaultService {
                 e.app = { cli: st.cli, rest: st.rest, version: st.version, features: st.features };
             }
         }
+        return this.withHistory(env, g);
+    }
+    /** The vault's history policy travels with each answer (as the builder does):
+     *  obsidian_* tools keep excerpts out of saved logs unless it is "retain". */
+    withHistory(env, g) {
+        if (env && typeof env === "object" && env.ok)
+            env.history = g.history === "retain" ? "retain" : "reference";
         return env;
     }
     /** One engine op on the Python host (re-registers once after a host restart). */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melaya/runner",
-  "version": "1.1.64",
+  "version": "1.1.66",
   "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
   "license": "Apache-2.0",
   "author": "Melaya Labs LLC",