@vellumai/assistant 0.10.0 → 0.10.1-dev.202606240317.ea25efe

package/src/__tests__/subagent-tool-gate-mode.test.ts

@@ -12,10 +12,7 @@
  *   non-allowlisted tool returns an error tool_result WITHOUT invoking the
  *   tool's executor (safety invariant), while allowlisted calls execute
  *   normally. The gate also covers the `skill_execute` indirection by
- *   gating the resolved inner tool name, and runs BEFORE every in-executor
- *   interception — including `switch_inference_profile`, which must not be
- *   able to switch `ctx.toolRoutedProfile` mid-wake (allowlist bypass +
- *   per-model prompt-cache parity break).
+ *   gating the resolved inner tool name.
  */
 
 import { describe, expect, mock, test } from "bun:test";
@@ -46,6 +43,7 @@ const baseConfig = {
 
 mock.module("../config/loader.js", () => ({
   getConfig: () => baseConfig,
+  getConfigReadOnly: () => baseConfig,
   loadConfig: () => baseConfig,
   invalidateConfigCache: () => {},
   loadRawConfig: () => ({}),
@@ -442,75 +440,6 @@ describe("createToolExecutor — execution-layer allowlist gate", () => {
     expect(calls).toHaveLength(0);
   });
 
-  test("execution mode: switch_inference_profile is rejected BEFORE its interception runs", async () => {
-    const { executor, calls } = makeCapturingExecutor();
-    const ctx = makeSetupCtx({
-      subagentAllowedTools: new Set(["remember"]),
-      subagentToolGateMode: "execution",
-    });
-    const toolFn = makeToolFn(executor, ctx);
-
-    const result = await toolFn("switch_inference_profile", {
-      profile: "speedy",
-    });
-
-    // The gate must fire before the interception: the rejection tool_result
-    // comes back (NOT the interception's "Switched to ..." / "not found"
-    // responses) and the routed profile is untouched — switching it mid-wake
-    // would bypass the allowlist and break per-model prompt-cache parity.
-    expect(result).toEqual({
-      content: "This background pass may only use: remember.",
-      isError: true,
-    });
-    expect(ctx.toolRoutedProfile).toBeUndefined();
-    expect(calls).toHaveLength(0);
-  });
-
-  test("switch_inference_profile interception still works when the gate is inert (regression)", async () => {
-    // No execution-mode allowlist (wire mode) — the interception must keep
-    // its historical behavior: switch the routed profile without ever
-    // touching the tool executor pipeline.
-    const { executor, calls } = makeCapturingExecutor();
-    const ctx = makeSetupCtx({
-      subagentAllowedTools: new Set(["remember"]),
-      subagentToolGateMode: "wire",
-    });
-    const toolFn = makeToolFn(executor, ctx);
-
-    const result = await toolFn("switch_inference_profile", {
-      profile: "speedy",
-    });
-
-    expect(result).toEqual({
-      content: "Switched to Speedy profile. Continue with your response.",
-      isError: false,
-    });
-    expect(ctx.toolRoutedProfile).toBe("speedy");
-    expect(calls).toHaveLength(0);
-  });
-
-  test("execution mode: allowlisted switch_inference_profile still reaches the interception", async () => {
-    // When the orchestrator explicitly allowlists the routing tool, the gate
-    // passes and the interception behaves normally.
-    const { executor, calls } = makeCapturingExecutor();
-    const ctx = makeSetupCtx({
-      subagentAllowedTools: new Set(["remember", "switch_inference_profile"]),
-      subagentToolGateMode: "execution",
-    });
-    const toolFn = makeToolFn(executor, ctx);
-
-    const result = await toolFn("switch_inference_profile", {
-      profile: "speedy",
-    });
-
-    expect(result).toEqual({
-      content: "Switched to Speedy profile. Continue with your response.",
-      isError: false,
-    });
-    expect(ctx.toolRoutedProfile).toBe("speedy");
-    expect(calls).toHaveLength(0);
-  });
-
   test("wire mode (and absent mode) leaves the executor path unchanged (regression)", async () => {
     // In wire mode the allowlist is enforced by filtering the wire defs (and
     // by the executor pipeline's own allowedToolNames gate) — the new

package/src/__tests__/subagent-tools.test.ts

@@ -556,7 +556,7 @@ describe("Subagent spawn success and failure", () => {
       );
 
       expect(result.isError).toBe(false);
-      // The live per-turn override (per-conversation or tool-routed) wins over
+      // The live per-turn override wins over
       // the call-site default, and is forwarded non-forced.
       expect(capturedConfig!.overrideProfile).toBe("quality-optimized");
       expect(capturedConfig!.forceOverrideProfile).toBeUndefined();
@@ -565,36 +565,6 @@ describe("Subagent spawn success and failure", () => {
     }
   });
 
-  test("spawn skips the auto profile so the child keeps its own default", async () => {
-    const manager = getSubagentManager();
-    const originalSpawn = manager.spawn.bind(manager);
-    let capturedConfig: Record<string, unknown> | undefined;
-
-    manager.spawn = async (config: Record<string, unknown>) => {
-      capturedConfig = config;
-      return "inherit-auto-id";
-    };
-
-    try {
-      const result = await executeSubagentSpawn(
-        { label: "Auto child", objective: "Do it" },
-        makeContext("sess-inherit-auto", {
-          sendToClient: () => {},
-          invokingCallSite: "mainAgent",
-          // "auto" is metadata-only; forwarding it would collapse the child to
-          // llm.default, so the inherited path drops it and the child keeps its
-          // own subagentSpawn default.
-          overrideProfile: "auto",
-        }),
-      );
-
-      expect(result.isError).toBe(false);
-      expect(capturedConfig!.overrideProfile).toBeUndefined();
-    } finally {
-      manager.spawn = originalSpawn;
-    }
-  });
-
   test("spawn still forces an explicit inference_profile over the invoker default", async () => {
     const manager = getSubagentManager();
     const originalSpawn = manager.spawn.bind(manager);

package/src/__tests__/system-prompt.test.ts

@@ -1296,7 +1296,7 @@ describe("buildSystemPrompt", () => {
         mkdirSync(SYSTEM_PROMPTS_DIR, { recursive: true });
         const result = buildSystemPrompt();
         expect(result).toContain("## Sending Files to the User");
-        expect(result).toContain("<vellum-attachment");
+        expect(result).toContain("vellum://");
       });
     });
 

package/src/__tests__/system-storage-cleanup-skill.test.ts

@@ -0,0 +1,56 @@
+import { describe, expect, test } from "bun:test";
+
+import { loadSkillBySelector, loadSkillCatalog } from "../config/skills.js";
+
+describe("system-storage-cleanup bundled skill", () => {
+  test("is bundled without tools or inline command expansions", () => {
+    const catalog = loadSkillCatalog();
+    const skill = catalog.find(
+      (candidate) => candidate.id === "system-storage-cleanup",
+    );
+
+    expect(skill).toBeDefined();
+    expect(skill!.source).toBe("bundled");
+    expect(skill!.bundled).toBe(true);
+    expect(skill!.toolManifest).toBeUndefined();
+    expect(skill!.inlineCommandExpansions).toBeUndefined();
+  });
+
+  test("loads by id with the cleanup safety contract", () => {
+    const result = loadSkillBySelector("system-storage-cleanup");
+
+    expect(result.error).toBeUndefined();
+    expect(result.skill).toBeDefined();
+    expect(result.skill!.id).toBe("system-storage-cleanup");
+    expect(result.skill!.source).toBe("bundled");
+
+    const body = result.skill!.body.toLowerCase();
+
+    expect(body).toContain("normal work is suspended");
+    expect(body).toContain("stay scoped to freeing storage");
+    expect(body).toContain("prefer foreground inspection");
+    expect(body).toContain("before any mutation");
+    expect(body).toContain("ask for explicit approval before deleting");
+    expect(body).toContain("target volume");
+    expect(body).toContain("workspace path");
+    expect(body).toContain("read-only `sqlite3` access");
+    expect(body).toContain("never run ad hoc `delete`");
+    expect(body).toContain("`vacuum`");
+    expect(body).toContain("mutating sqlite command");
+
+    for (const protectedText of [
+      "credentials",
+      "security material",
+      "workspace database files",
+      "config files",
+      "backups",
+      "backup keys",
+      "memory graph nodes or segments",
+      "`journal/`",
+      "`data/reflections/`",
+      "pkb files",
+    ]) {
+      expect(body).toContain(protectedText);
+    }
+  });
+});

package/src/__tests__/task-compiler.test.ts

@@ -30,7 +30,7 @@ import {
 import { renderTemplate } from "../tasks/task-runner.js";
 import { getTask } from "../tasks/task-store.js";
 
-initializeDb();
+await initializeDb();
 
 // ── Helpers ──────────────────────────────────────────────────────────
 

package/src/__tests__/task-management-tools.test.ts

@@ -57,7 +57,7 @@ import {
   updateWorkItem,
 } from "../work-items/work-item-store.js";
 
-initializeDb();
+await initializeDb();
 
 const ctx: ToolContext = {
   workingDir: "/tmp",

package/src/__tests__/task-memory-cleanup.test.ts

@@ -40,7 +40,7 @@ mock.module("../config/loader.js", () => ({
   invalidateConfigCache: () => {},
 }));
 
-import { getDb } from "../memory/db-connection.js";
+import { getDb, getMemoryDb } from "../memory/db-connection.js";
 import { initializeDb } from "../memory/db-init.js";
 import { enqueueMemoryJob } from "../memory/jobs-store.js";
 import {
@@ -66,14 +66,15 @@ describe("invalidateAssistantInferredItemsForConversation", () => {
   const convId = "conv-task-cleanup";
   const otherConvId = "conv-other";
 
-  beforeAll(() => {
-    initializeDb();
+  beforeAll(async () => {
+    await initializeDb();
   });
 
   beforeEach(() => {
     const db = getDb();
     db.run("DELETE FROM memory_graph_nodes");
-    db.run("DELETE FROM memory_jobs");
+    // memory_jobs lives in the dedicated memory connection.
+    getMemoryDb()!.run("DELETE FROM memory_jobs");
     db.run("DELETE FROM messages");
     db.run("DELETE FROM cron_runs");
     db.run("DELETE FROM cron_jobs");
@@ -525,7 +526,8 @@ describe("invalidateAssistantInferredItemsForConversation", () => {
     db.insert(memoryGraphNodes)
       .values({
         id: "item-cross-sched",
-        content: "cross-sourced schedule claim\nClaim from two failed schedules.",
+        content:
+          "cross-sourced schedule claim\nClaim from two failed schedules.",
         type: "semantic",
         created: now + 10,
         lastAccessed: now + 20,
@@ -742,7 +744,8 @@ describe("invalidateAssistantInferredItemsForConversation", () => {
     seedConversations();
     seedMessages();
 
-    const db = getDb();
+    // memory_jobs lives in the dedicated memory connection.
+    const db = getMemoryDb()!;
 
     // Enqueue graph_extract jobs for the target conversation
     enqueueMemoryJob("graph_extract", {

package/src/__tests__/task-scheduler.test.ts

@@ -102,7 +102,7 @@ import {
 import { scheduleTask } from "../tasks/task-scheduler.js";
 import { createTask } from "../tasks/task-store.js";
 
-initializeDb();
+await initializeDb();
 
 /** Access the underlying bun:sqlite Database for raw parameterized queries. */
 function getRawDb(): import("bun:sqlite").Database {

package/src/__tests__/thread-backfill.test.ts

@@ -124,7 +124,7 @@ import {
   setAdapterProcessMessage,
 } from "./helpers/channel-test-adapter.js";
 
-initializeDb();
+await initializeDb();
 
 // Spy on backfillThreadWindowPage so the stub is scoped to this test file
 // only. Existing tests drive the message array through `backfillThreadMock`;

package/src/__tests__/tool-approval-handler.test.ts

@@ -47,7 +47,7 @@ import { computeToolApprovalDigest } from "../security/tool-approval-digest.js";
 import { ToolApprovalHandler } from "../tools/tool-approval-handler.js";
 import type { ToolContext, ToolLifecycleEvent } from "../tools/types.js";
 
-initializeDb();
+await initializeDb();
 
 function clearTables(): void {
   const db = getDb();

package/src/__tests__/tool-approval-seed-content-blocks.test.ts

@@ -70,6 +70,8 @@ describe("buildToolApprovalSeedContentBlocks", () => {
     expect(blocks).toHaveLength(2);
     expect((blocks[0] as Record<string, unknown>).type).toBe("ui_surface");
     expect((blocks[1] as Record<string, unknown>).type).toBe("text");
+    // The fallback block is flagged so surface-capable clients skip it.
+    expect((blocks[1] as Record<string, unknown>)._surfaceFallback).toBe(true);
   });
 
   test("produces a ui_surface block and a text fallback block for tool_grant_request", () => {

package/src/__tests__/tool-executor.test.ts

@@ -17,6 +17,7 @@ const mockConfig = {
     shellDefaultTimeoutSec: 120,
     shellMaxTimeoutSec: 600,
     permissionTimeoutSec: 300,
+    questionResponseTimeoutSec: 1800,
   },
   sandbox: {
     enabled: false,
@@ -166,7 +167,11 @@ mock.module("../tools/shared/filesystem/path-policy.js", () => ({
 }));
 
 import { PermissionPrompter } from "../permissions/prompter.js";
-import { isSideEffectTool, ToolExecutor } from "../tools/executor.js";
+import {
+  computePerToolTimeoutMs,
+  isSideEffectTool,
+  ToolExecutor,
+} from "../tools/executor.js";
 import type { ToolContext } from "../tools/types.js";
 
 function makeContext(overrides?: Partial<ToolContext>): ToolContext {
@@ -1293,3 +1298,34 @@ describe("ToolExecutionResult includes risk metadata from classifier assessment"
     ]);
   });
 });
+
+describe("computePerToolTimeoutMs ask_question budget", () => {
+  // Regression guard: ask_question blocks on user input inside execute() via
+  // QuestionPrompter, which waits up to questionResponseTimeoutSec. The
+  // executor's generic toolExecutionTimeoutSec wrapper must give ask_question a
+  // budget strictly larger than that prompt timeout — otherwise the wrapper
+  // fires first and orphans the still-pending prompt behind the confusing "may
+  // still be running in the background" error. These assertions fail if the
+  // special case is removed and ask_question falls back to the generic budget,
+  // or if the executor budget and the prompter timeout drift onto different
+  // config knobs.
+  test("execution-timeout budget exceeds the prompt's own questionResponseTimeoutSec", () => {
+    const { questionResponseTimeoutSec } = mockConfig.timeouts;
+    const askQuestionBudgetMs = computePerToolTimeoutMs("ask_question", {});
+
+    expect(askQuestionBudgetMs).toBeGreaterThan(
+      questionResponseTimeoutSec * 1000,
+    );
+    expect(askQuestionBudgetMs).toBe((questionResponseTimeoutSec + 5) * 1000);
+  });
+
+  test("the generic budget that would otherwise apply is shorter than the prompt timeout", () => {
+    const { questionResponseTimeoutSec } = mockConfig.timeouts;
+    const genericBudgetMs = computePerToolTimeoutMs("some_other_tool", {});
+
+    // This is the collision the ask_question special case fixes: the generic
+    // execution-timeout budget is shorter than the prompter's own wait, so
+    // without the special case the wrapper trips first.
+    expect(genericBudgetMs).toBeLessThan(questionResponseTimeoutSec * 1000);
+  });
+});

package/src/__tests__/tool-grant-request-escalation.test.ts

@@ -112,7 +112,7 @@ import type { ToolContext, ToolLifecycleEvent } from "../tools/types.js";
 /** Short wait config for tests — avoids blocking test suite on the 60s default. */
 const TEST_INLINE_WAIT_CONFIG = { maxWaitMs: 100, intervalMs: 20 };
 
-initializeDb();
+await initializeDb();
 
 function resetTables(): void {
   const db = getDb();
@@ -226,7 +226,6 @@ describe("ToolApprovalHandler / grant-miss escalation", () => {
     });
     expect(requests.length).toBe(0);
   });
-
 });
 
 // ---------------------------------------------------------------------------

package/src/__tests__/trusted-contact-inline-approval-integration.test.ts

@@ -177,7 +177,7 @@ import {
 } from "../tools/tool-approval-handler.js";
 import type { ToolContext, ToolLifecycleEvent } from "../tools/types.js";
 
-initializeDb();
+await initializeDb();
 
 function resetTables(): void {
   const db = getDb();
@@ -1206,6 +1206,78 @@ describe("(g) access_request resolver: requester code delivery", () => {
     expect(requesterCodeReply!.payload.text).toContain(
       "your access request was approved",
     );
+
+    // The off-channel approve path records the verification_sent lifecycle
+    // signal too — parity with the on-channel path.
+    const verificationSent = emittedSignals.filter(
+      (s) => s.sourceEventName === "ingress.trusted_contact.verification_sent",
+    );
+    expect(verificationSent.length).toBe(1);
+  });
+
+  test("off-channel approval still records verification_sent when the requester DM fails", async () => {
+    const req = createAccessRequest();
+    // Fail the direct DM and the courier fallback (both target the requester).
+    failDeliveryWhen = (payload) => payload.chatId === REQUESTER_UID;
+
+    const result = await applyCanonicalGuardianDecision({
+      requestId: req.id,
+      action: "approve_once",
+      actorContext: guardianActor({
+        channel: "vellum",
+        actorExternalUserId: undefined,
+      }),
+    });
+
+    expect(result.applied).toBe(true);
+
+    // The guardian still receives the code via the inline reply, and the
+    // lifecycle signal is recorded even though the requester DM failed — the
+    // session was minted and the request was approved.
+    const replyText = result.applied ? result.resolverReplyText : undefined;
+    expect(replyText).toContain("123456");
+    const verificationSent = emittedSignals.filter(
+      (s) => s.sourceEventName === "ingress.trusted_contact.verification_sent",
+    );
+    expect(verificationSent.length).toBe(1);
+  });
+
+  test("off-channel approval on a channel with no deliverable callback (e.g. email) still records verification_sent", async () => {
+    // `email` has no deliver URL (resolveDeliverCallbackUrlForChannel returns
+    // null), so the requester cannot be auto-notified here. The guardian still
+    // receives the code inline, so the lifecycle transition must be recorded —
+    // the emit must not be gated on requester deliverability.
+    const req = createAccessRequest({
+      sourceChannel: "email",
+      requesterChatId: "requester@example.com",
+      conversationId: "conv-access-email",
+    });
+
+    const result = await applyCanonicalGuardianDecision({
+      requestId: req.id,
+      action: "approve_once",
+      actorContext: guardianActor({
+        channel: "vellum",
+        actorExternalUserId: undefined,
+      }),
+    });
+
+    expect(result.applied).toBe(true);
+
+    // Guardian gets the code inline; no requester delivery is attempted because
+    // there is no deliver callback for the channel.
+    const replyText = result.applied ? result.resolverReplyText : undefined;
+    expect(replyText).toContain("123456");
+    const requesterDelivery = deliveredReplies.find(
+      (r) => r.payload.chatId === "requester@example.com",
+    );
+    expect(requesterDelivery).toBeUndefined();
+
+    // The audit/lifecycle signal is still recorded for this off-channel approve.
+    const verificationSent = emittedSignals.filter(
+      (s) => s.sourceEventName === "ingress.trusted_contact.verification_sent",
+    );
+    expect(verificationSent.length).toBe(1);
   });
 
   test("non-Slack channel keeps the courier message and never delivers the code to the requester chat", async () => {

package/src/__tests__/trusted-contact-lifecycle-notifications.test.ts

@@ -66,13 +66,13 @@ mock.module("../runtime/approval-message-composer.js", () => ({
 
 import { getResolver } from "../approvals/guardian-request-resolvers.js";
 import { upsertContactChannel } from "../contacts/contacts-write.js";
+import { createCanonicalGuardianRequest } from "../memory/canonical-guardian-store.js";
 import { getDb } from "../memory/db-connection.js";
 import { initializeDb } from "../memory/db-init.js";
-import { createApprovalRequest } from "../memory/guardian-approvals.js";
 import { handleChannelInbound } from "./helpers/channel-test-adapter.js";
 import { createGuardianBinding } from "./helpers/create-guardian-binding.js";
 
-initializeDb();
+await initializeDb();
 
 // ---------------------------------------------------------------------------
 // Helpers
@@ -83,7 +83,8 @@ const GUARDIAN_APPROVAL_TTL_MS = 5 * 60 * 1000;
 
 function resetState(): void {
   const db = getDb();
-  db.run("DELETE FROM channel_guardian_approval_requests");
+  db.run("DELETE FROM canonical_guardian_requests");
+  db.run("DELETE FROM canonical_guardian_deliveries");
   db.run("DELETE FROM channel_verification_sessions");
   db.run("DELETE FROM channel_guardian_rate_limits");
   db.run("DELETE FROM channel_inbound_events");
@@ -160,19 +161,19 @@ describe("trusted contact lifecycle notification signals", () => {
 
     const testRequestId = `req-deny-${Date.now()}`;
 
-    // Create a pending access request approval
-    const _approval = createApprovalRequest({
-      runId: `ingress-access-request-${Date.now()}`,
-      requestId: testRequestId,
+    // Create a pending canonical access request
+    createCanonicalGuardianRequest({
+      id: testRequestId,
+      kind: "access_request",
+      sourceType: "channel",
+      sourceChannel: "telegram",
       conversationId: "access-req-telegram-requester-user-456",
-      channel: "telegram",
       requesterExternalUserId: "requester-user-456",
       requesterChatId: "requester-chat-456",
       guardianExternalUserId: "guardian-user-789",
-      guardianChatId: "guardian-chat-789",
+      guardianPrincipalId: "guardian-user-789",
       toolName: "ingress_access_request",
-      riskLevel: "access_request",
-      reason: "Alice is requesting access",
+      questionText: "Alice is requesting access",
       expiresAt: Date.now() + GUARDIAN_APPROVAL_TTL_MS,
     });
 
@@ -254,19 +255,19 @@ describe("trusted contact lifecycle notification signals", () => {
 
     const testRequestId = `req-approve-${Date.now()}`;
 
-    // Create a pending access request approval
-    const _approval = createApprovalRequest({
-      runId: `ingress-access-request-${Date.now()}`,
-      requestId: testRequestId,
+    // Create a pending canonical access request
+    createCanonicalGuardianRequest({
+      id: testRequestId,
+      kind: "access_request",
+      sourceType: "channel",
+      sourceChannel: "telegram",
       conversationId: "access-req-telegram-requester-user-456",
-      channel: "telegram",
       requesterExternalUserId: "requester-user-456",
       requesterChatId: "requester-chat-456",
       guardianExternalUserId: "guardian-user-789",
-      guardianChatId: "guardian-chat-789",
+      guardianPrincipalId: "guardian-user-789",
       toolName: "ingress_access_request",
-      riskLevel: "access_request",
-      reason: "Alice is requesting access",
+      questionText: "Alice is requesting access",
       expiresAt: Date.now() + GUARDIAN_APPROVAL_TTL_MS,
     });
 
@@ -331,18 +332,18 @@ describe("trusted contact lifecycle notification signals", () => {
 
     const testRequestId = `req-dedup-${Date.now()}`;
 
-    const approval = createApprovalRequest({
-      runId: `ingress-access-request-${Date.now()}`,
-      requestId: testRequestId,
+    const approval = createCanonicalGuardianRequest({
+      id: testRequestId,
+      kind: "access_request",
+      sourceType: "channel",
+      sourceChannel: "telegram",
       conversationId: "access-req-telegram-requester-user-456",
-      channel: "telegram",
       requesterExternalUserId: "requester-user-456",
       requesterChatId: "requester-chat-456",
       guardianExternalUserId: "guardian-user-789",
-      guardianChatId: "guardian-chat-789",
+      guardianPrincipalId: "guardian-user-789",
       toolName: "ingress_access_request",
-      riskLevel: "access_request",
-      reason: "Alice is requesting access",
+      questionText: "Alice is requesting access",
       expiresAt: Date.now() + GUARDIAN_APPROVAL_TTL_MS,
     });
 
@@ -399,18 +400,18 @@ describe("trusted contact lifecycle notification signals", () => {
 
     const testRequestId = `req-noname-${Date.now()}`;
 
-    createApprovalRequest({
-      runId: `ingress-access-request-${Date.now()}`,
-      requestId: testRequestId,
+    createCanonicalGuardianRequest({
+      id: testRequestId,
+      kind: "access_request",
+      sourceType: "channel",
+      sourceChannel: "telegram",
       conversationId: "access-req-telegram-requester-noname-222",
-      channel: "telegram",
       requesterExternalUserId: "requester-noname-222",
       requesterChatId: "requester-chat-222",
       guardianExternalUserId: "guardian-noname-111",
-      guardianChatId: "guardian-chat-111",
+      guardianPrincipalId: "guardian-noname-111",
       toolName: "ingress_access_request",
-      riskLevel: "access_request",
-      reason: "Unknown user requesting access",
+      questionText: "Unknown user requesting access",
       expiresAt: Date.now() + GUARDIAN_APPROVAL_TTL_MS,
     });
 
@@ -493,5 +494,4 @@ describe("trusted contact activated notification signal", () => {
     expect(resolver).toBeDefined();
     expect(resolver!.kind).toBe("access_request");
   });
-
 });

package/src/__tests__/trusted-contact-multichannel.test.ts

@@ -83,7 +83,7 @@ import {
 import { handleChannelInbound } from "./helpers/channel-test-adapter.js";
 import { createGuardianBinding } from "./helpers/create-guardian-binding.js";
 
-initializeDb();
+await initializeDb();
 
 // ---------------------------------------------------------------------------
 // Helpers
@@ -93,7 +93,6 @@ const TEST_BEARER_TOKEN = "test-token";
 
 function resetState(): void {
   const db = getDb();
-  db.run("DELETE FROM channel_guardian_approval_requests");
   db.run("DELETE FROM channel_verification_sessions");
   db.run("DELETE FROM channel_guardian_rate_limits");
   db.run("DELETE FROM channel_inbound_events");

package/src/__tests__/trusted-contact-verification.test.ts

@@ -39,7 +39,7 @@ import {
 } from "../runtime/channel-verification-service.js";
 import { createGuardianBinding } from "./helpers/create-guardian-binding.js";
 
-initializeDb();
+await initializeDb();
 
 // ---------------------------------------------------------------------------
 // Helpers

package/src/__tests__/turn-boundary-resolution.test.ts

@@ -23,15 +23,15 @@ import {
   createConversation,
   getAssistantMessageIdsInTurn,
 } from "../memory/conversation-crud.js";
-import { getDb } from "../memory/db-connection.js";
+import { getDb, getLogsDb } from "../memory/db-connection.js";
 import { initializeDb } from "../memory/db-init.js";
 import { llmRequestLogs, toolInvocations } from "../memory/schema.js";
 
-initializeDb();
+await initializeDb();
 
 function resetTables(): void {
   const db = getDb();
-  db.delete(llmRequestLogs).run();
+  getLogsDb()!.delete(llmRequestLogs).run();
   db.delete(toolInvocations).run();
   db.run("DELETE FROM message_attachments");
   db.run("DELETE FROM attachments");