@vellumai/assistant 0.10.1-dev.202606240206.7c2bca6 → 0.10.1-staging.1

package/eslint-rules/cli-no-daemon-internals.js

@@ -51,17 +51,11 @@ const ALLOWED_PREFIXES = {
     "../../config/schema",
     "../../config/env",
     "../../util/platform",
-    "../../../util/platform",
     // Memory retrospective — the retrospective CLI runs the fork-based
     // retrospective in-process (no daemon, no IPC), so it imports the
     // job handler directly. Depth-2 for commands/memory/ nesting.
     "../../memory/memory-retrospective-job",
     "../../../memory/memory-retrospective-job",
-    // Memory worker control — the `memory worker` CLI spawns/probes/stops
-    // the worker OS process directly (no daemon, no IPC), so it imports the
-    // shared PID-file control helpers. Depth-2 for commands/memory/ nesting.
-    "../../memory/worker-control",
-    "../../../memory/worker-control",
     "../logger",
     "../output",
     "../../logger",

package/node_modules/@vellumai/gateway-client/src/__tests__/trust-verdict-contract.test.ts

@@ -7,7 +7,6 @@ import { describe, expect, test } from "bun:test";
 
 import { SourceMetadataSchema } from "../inbound-contract.js";
 import {
-  makeResolutionFailedVerdict,
   TrustVerdictSchema,
   type TrustVerdict,
 } from "../trust-verdict-contract.js";
@@ -44,36 +43,6 @@ describe("TrustVerdictSchema", () => {
     expect(TrustVerdictSchema.parse(minimal)).toEqual(minimal);
   });
 
-  test("parses a verdict carrying resolutionFailed", () => {
-    const verdict = {
-      trustClass: "unknown",
-      canonicalSenderId: null,
-      resolutionFailed: true,
-    } satisfies TrustVerdict;
-    expect(TrustVerdictSchema.parse(verdict)).toEqual(verdict);
-  });
-
-  test("leaves resolutionFailed undefined when absent", () => {
-    const parsed = TrustVerdictSchema.parse({
-      trustClass: "unknown",
-      canonicalSenderId: null,
-    });
-    expect(parsed.resolutionFailed).toBeUndefined();
-  });
-
-  test("makeResolutionFailedVerdict builds an unknown sentinel", () => {
-    expect(makeResolutionFailedVerdict("+15555550100")).toEqual({
-      trustClass: "unknown",
-      canonicalSenderId: "+15555550100",
-      resolutionFailed: true,
-    });
-    expect(makeResolutionFailedVerdict(null)).toEqual({
-      trustClass: "unknown",
-      canonicalSenderId: null,
-      resolutionFailed: true,
-    });
-  });
-
   test("rejects an invalid trustClass", () => {
     expect(() =>
       TrustVerdictSchema.parse({

package/node_modules/@vellumai/gateway-client/src/index.ts

@@ -73,7 +73,6 @@ export type { AdmissionPolicy } from "./admission-policy-contract.js";
 
 // Trust verdict contract (gateway → daemon) — Zod schemas + derived types
 export {
-  makeResolutionFailedVerdict,
   ResolveInboundTrustRequestSchema,
   TRUST_CLASS_VALUES,
   TrustClassSchema,
@@ -85,16 +84,3 @@ export type {
   TrustClass,
   TrustVerdict,
 } from "./trust-verdict-contract.js";
-
-// Guardian delivery contract (daemon → gateway pull) — Zod schemas + derived types
-export {
-  GuardianDeliverySchema,
-  ResolveGuardianDeliveryRequestSchema,
-  ResolveGuardianDeliveryResponseSchema,
-} from "./guardian-delivery-contract.js";
-
-export type {
-  GuardianDelivery,
-  ResolveGuardianDeliveryRequest,
-  ResolveGuardianDeliveryResponse,
-} from "./guardian-delivery-contract.js";

package/node_modules/@vellumai/gateway-client/src/trust-verdict-contract.ts

@@ -42,11 +42,6 @@ export const TrustVerdictSchema = z.object({
   trustClass: TrustClassSchema,
   canonicalSenderId: z.string().nullable(),
 
-  // Present+true ⇒ gateway attempted resolution but failed (DB error);
-  // consumer treats it as "could not vouch", distinct from a real `unknown`
-  // stranger.
-  resolutionFailed: z.boolean().optional(),
-
   // Guardian binding — present only when a guardian binding matches.
   guardianExternalUserId: z.string().optional(),
   guardianDeliveryChatId: z.string().nullable().optional(),
@@ -68,18 +63,6 @@ export const TrustVerdictSchema = z.object({
 
 export type TrustVerdict = z.infer<typeof TrustVerdictSchema>;
 
-/**
- * Sentinel for a gateway resolver failure; consumers treat it as
- * could-not-vouch (distinct from a real `unknown` stranger). Takes the
- * already-canonicalized sender id so this module stays free of the gateway's
- * canonicalization util.
- */
-export function makeResolutionFailedVerdict(
-  canonicalSenderId: string | null,
-): TrustVerdict {
-  return { trustClass: "unknown", canonicalSenderId, resolutionFailed: true };
-}
-
 /**
  * IPC request for `resolve_inbound_trust`. Per-actor identity keys the
  * gateway resolver needs to classify the inbound sender. The response reuses

package/openapi.yaml

@@ -3973,8 +3973,6 @@ paths:
                           anyOf:
                             - type: string
                             - type: "null"
-                        resolutionFailed:
-                          type: boolean
                         guardianExternalUserId:
                           type: string
                         guardianDeliveryChatId:
@@ -8380,36 +8378,6 @@ paths:
                           anyOf:
                             - type: string
                             - type: "null"
-                        error:
-                          anyOf:
-                            - type: object
-                              properties:
-                                name:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                message:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                code:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                provider:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                statusCode:
-                                  anyOf:
-                                    - type: number
-                                    - type: "null"
-                                retryAfterMs:
-                                  anyOf:
-                                    - type: number
-                                    - type: "null"
-                              additionalProperties: false
-                            - type: "null"
                       required:
                         - id
                         - createdAt
@@ -14711,12 +14679,6 @@ paths:
                   type: string
                 disabled:
                   type: boolean
-                headers:
-                  type: object
-                  propertyNames:
-                    type: string
-                  additionalProperties:
-                    type: string
               required:
                 - name
                 - transportType
@@ -14944,14 +14906,6 @@ paths:
                       items:
                         type: string
                     - type: "null"
-                headers:
-                  anyOf:
-                    - type: object
-                      propertyNames:
-                        type: string
-                      additionalProperties:
-                        type: string
-                    - type: "null"
               required:
                 - name
       responses:
@@ -15324,36 +15278,6 @@ paths:
                     anyOf:
                       - type: string
                       - type: "null"
-                  error:
-                    anyOf:
-                      - type: object
-                        properties:
-                          name:
-                            anyOf:
-                              - type: string
-                              - type: "null"
-                          message:
-                            anyOf:
-                              - type: string
-                              - type: "null"
-                          code:
-                            anyOf:
-                              - type: string
-                              - type: "null"
-                          provider:
-                            anyOf:
-                              - type: string
-                              - type: "null"
-                          statusCode:
-                            anyOf:
-                              - type: number
-                              - type: "null"
-                          retryAfterMs:
-                            anyOf:
-                              - type: number
-                              - type: "null"
-                        additionalProperties: false
-                      - type: "null"
                 required:
                   - id
                   - createdAt
@@ -17781,36 +17705,6 @@ paths:
                           anyOf:
                             - type: string
                             - type: "null"
-                        error:
-                          anyOf:
-                            - type: object
-                              properties:
-                                name:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                message:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                code:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                provider:
-                                  anyOf:
-                                    - type: string
-                                    - type: "null"
-                                statusCode:
-                                  anyOf:
-                                    - type: number
-                                    - type: "null"
-                                retryAfterMs:
-                                  anyOf:
-                                    - type: number
-                                    - type: "null"
-                              additionalProperties: false
-                            - type: "null"
                       required:
                         - id
                         - createdAt
@@ -25994,13 +25888,6 @@ paths:
                           type: boolean
                         messageId:
                           type: string
-                        toolUseId:
-                          type: string
-                        input:
-                          type: object
-                          propertyNames:
-                            type: string
-                          additionalProperties: {}
                       required:
                         - type
                         - content

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.10.1-dev.202606240206.7c2bca6",
+  "version": "0.10.1-staging.1",
   "license": "MIT",
   "type": "module",
   "exports": {

package/scripts/test.sh

@@ -169,7 +169,6 @@ printf '%s\n' "${test_files[@]}" | xargs -P "${WORKERS}" -I {} bash -c '
 
   safe_name="$(echo "${test_file}" | tr "/" "_")"
   out_file="${results_dir}/${safe_name}.out"
-  base="$(basename "${test_file}")"
 
   coverage_args=""
   if [[ "${coverage_enabled}" == "true" ]]; then
@@ -186,48 +185,28 @@ printf '%s\n' "${test_files[@]}" | xargs -P "${WORKERS}" -I {} bash -c '
     timeout_cmd="gtimeout"
   fi
 
-  # Run the test file in its own bun process. Wrapped in a function so a
-  # transient infrastructure crash can be retried without duplicating the
-  # four-way (timeout × experimental-filter) invocation.
-  run_bun_test() {
-    if [[ -n "${timeout_cmd}" ]]; then
-      if [[ "${exclude_exp}" == "true" ]]; then
-        "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
-      else
-        "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
-      fi
-    else
-      if [[ "${exclude_exp}" == "true" ]]; then
-        bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
-      else
-        bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
-      fi
-    fi
-  }
-
   start_ms=$(perl -MTime::HiRes=time -e "printf \"%d\", time*1000")
 
-  run_bun_test
-  exit_code=$?
-
-  # Retry once on a transient bun loader/runtime crash. Bun occasionally aborts
-  # a worker before its tests run — e.g. "# Unhandled error between tests" with
-  # "error: ENOENT reading <corrupted path>" — failing the whole job even though
-  # the file is green on a clean process. Such a crash truncates the run before
-  # any assertion executes, so it prints no "(fail)" line; genuine assertion
-  # failures do, and are reported immediately without a retry (fast feedback, no
-  # masking of intermittent real failures). Timeouts (124/137) are handled by the
-  # hang branch below, not here.
-  if [[ ${exit_code} -ne 0 && ${exit_code} -ne 124 && ${exit_code} -ne 137 ]] \
-     && ! grep -q "^(fail)" "${out_file}" 2>/dev/null; then
-    echo "  ↻ ${base} (transient crash, exit ${exit_code} — retrying once)"
-    run_bun_test
-    exit_code=$?
+  if [[ -n "${timeout_cmd}" ]]; then
+    if [[ "${exclude_exp}" == "true" ]]; then
+      "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
+    else
+      "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
+    fi
+  else
+    if [[ "${exclude_exp}" == "true" ]]; then
+      bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
+    else
+      bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
+    fi
   fi
+  exit_code=$?
 
   end_ms=$(perl -MTime::HiRes=time -e "printf \"%d\", time*1000")
   elapsed=$(( end_ms - start_ms ))
 
+  base="$(basename "${test_file}")"
+
   # Record duration for longest-first scheduling in future runs.
   # Write the repo-relative path (not the basename) so the lookup in future
   # runs disambiguates files that share a basename across directories.

package/src/__tests__/actor-token-service.test.ts

@@ -29,17 +29,6 @@ mock.module("../config/env.js", () => ({
   checkUnrecognizedEnvVars: () => {},
 }));
 
-// No gateway in tests: force the reader to miss so resolution exercises the
-// local-store bootstrap fallback deterministically.
-let fakeGuardianDelivery: { principalId?: string | null } | null = null;
-mock.module("../contacts/guardian-delivery-reader.js", () => ({
-  getGuardianDelivery: async () =>
-    fakeGuardianDelivery ? [fakeGuardianDelivery] : null,
-  guardianForChannel: (list: { principalId?: string | null }[]) => list[0],
-  invalidateGuardianDeliveryCache: () => {},
-  onContactChange: () => {},
-}));
-
 import { getDb } from "../memory/db-connection.js";
 import { initializeDb } from "../memory/db-init.js";
 import { resetExternalAssistantIdCache } from "../runtime/auth/external-assistant-id.js";
@@ -62,7 +51,6 @@ await initializeDb();
 beforeEach(async () => {
   initAuthSigningKey(TEST_KEY);
   resetExternalAssistantIdCache();
-  fakeGuardianDelivery = null;
   resetDbForTesting();
   await initializeDb();
 });
@@ -72,8 +60,8 @@ beforeEach(async () => {
 // ---------------------------------------------------------------------------
 
 describe("resolveLocalTrustContext", () => {
-  test("falls back to minimal trust context when no vellum binding exists", async () => {
-    const ctx = await resolveLocalTrustContext();
+  test("falls back to minimal trust context when no vellum binding exists", () => {
+    const ctx = resolveLocalTrustContext();
     expect(ctx.sourceChannel).toBe("vellum");
   });
 });
@@ -83,48 +71,38 @@ describe("resolveLocalTrustContext", () => {
 // ---------------------------------------------------------------------------
 
 describe("resolveLocalAuthContext", () => {
-  test("returns AuthContext with local principal type", async () => {
-    const ctx = await resolveLocalAuthContext("session-123");
+  test("returns AuthContext with local principal type", () => {
+    const ctx = resolveLocalAuthContext("session-123");
     expect(ctx.principalType).toBe("local");
   });
 
-  test("subject follows local:self:<conversationId> pattern", async () => {
-    const ctx = await resolveLocalAuthContext("session-abc");
+  test("subject follows local:self:<conversationId> pattern", () => {
+    const ctx = resolveLocalAuthContext("session-abc");
     expect(ctx.subject).toBe("local:self:session-abc");
   });
 
-  test("assistantId is always self", async () => {
-    const ctx = await resolveLocalAuthContext("session-123");
+  test("assistantId is always self", () => {
+    const ctx = resolveLocalAuthContext("session-123");
     expect(ctx.assistantId).toBe("self");
   });
 
-  test("uses local_v1 scope profile with local.all scope", async () => {
-    const ctx = await resolveLocalAuthContext("session-123");
+  test("uses local_v1 scope profile with local.all scope", () => {
+    const ctx = resolveLocalAuthContext("session-123");
     expect(ctx.scopeProfile).toBe("local_v1");
     expect(ctx.scopes.has("local.all")).toBe(true);
   });
 
-  test("actorPrincipalId is undefined when no vellum binding exists", async () => {
+  test("actorPrincipalId is undefined when no vellum binding exists", () => {
     const db = getDb();
     db.run("DELETE FROM contact_channels");
     db.run("DELETE FROM contacts");
 
-    const ctx = await resolveLocalAuthContext("session-123");
+    const ctx = resolveLocalAuthContext("session-123");
     expect(ctx.actorPrincipalId).toBeUndefined();
   });
 
-  test("resolves the guardian principal from the gateway when available", async () => {
-    const db = getDb();
-    db.run("DELETE FROM contact_channels");
-    db.run("DELETE FROM contacts");
-    fakeGuardianDelivery = { principalId: "gateway-guardian-id" };
-
-    const ctx = await resolveLocalAuthContext("session-123");
-    expect(ctx.actorPrincipalId).toBe("gateway-guardian-id");
-  });
-
-  test("conversationId matches the provided argument", async () => {
-    const ctx = await resolveLocalAuthContext("my-session");
+  test("conversationId matches the provided argument", () => {
+    const ctx = resolveLocalAuthContext("my-session");
     expect(ctx.conversationId).toBe("my-session");
   });
 });

package/src/__tests__/anthropic-provider.test.ts

@@ -3191,70 +3191,3 @@ describe("AnthropicProvider — thinking block send-time filtering", () => {
     expect(signatures).toContain("sig-step2");
   });
 });
-
-describe("AnthropicProvider — deprecated sampling params (temperature / top_p / top_k)", () => {
-  beforeEach(() => {
-    lastStreamParams = null;
-  });
-
-  // opus-4-7 / opus-4-8 (and, conservatively, fable) reject `temperature`,
-  // `top_p`, and `top_k` with a 400; the provider must strip all three.
-  for (const model of [
-    "claude-opus-4-8",
-    "claude-opus-4-7",
-    "claude-fable-5",
-  ]) {
-    test(`strips temperature, top_p, and top_k for ${model}`, async () => {
-      const provider = new AnthropicProvider("sk-ant-test", model);
-      await provider.sendMessage([userMsg("Hi")], {
-        systemPrompt: "You are helpful.",
-        config: { temperature: 0, top_p: 0.95, top_k: 40 },
-      });
-      expect(lastStreamParams!).not.toHaveProperty("temperature");
-      expect(lastStreamParams!).not.toHaveProperty("top_p");
-      expect(lastStreamParams!).not.toHaveProperty("top_k");
-    });
-  }
-
-  // opus-4-6 / sonnet-4-6 still accept the params — they must pass through,
-  // including `temperature: 0` (a value check, not truthiness).
-  test("forwards temperature (including 0), top_p, and top_k for opus-4-6", async () => {
-    const provider = new AnthropicProvider("sk-ant-test", "claude-opus-4-6");
-    await provider.sendMessage([userMsg("Hi")], {
-      systemPrompt: "You are helpful.",
-      config: { temperature: 0, top_p: 0.95, top_k: 40 },
-    });
-    expect(lastStreamParams!.temperature).toBe(0);
-    expect(lastStreamParams!.top_p).toBe(0.95);
-    expect(lastStreamParams!.top_k).toBe(40);
-  });
-
-  test("forwards temperature, top_p, and top_k for sonnet-4-6", async () => {
-    const provider = new AnthropicProvider("sk-ant-test", "claude-sonnet-4-6");
-    await provider.sendMessage([userMsg("Hi")], {
-      systemPrompt: "You are helpful.",
-      config: { temperature: 0.7, top_p: 0.9, top_k: 20 },
-    });
-    expect(lastStreamParams!.temperature).toBe(0.7);
-    expect(lastStreamParams!.top_p).toBe(0.9);
-    expect(lastStreamParams!.top_k).toBe(20);
-  });
-
-  // A per-call model override targeting a deprecating model must win over the
-  // provider's default (accepting) model.
-  test("strips params when a per-call model override deprecates them", async () => {
-    const provider = new AnthropicProvider("sk-ant-test", "claude-sonnet-4-6");
-    await provider.sendMessage([userMsg("Hi")], {
-      systemPrompt: "You are helpful.",
-      config: {
-        temperature: 0,
-        top_p: 0.95,
-        top_k: 40,
-        model: "claude-opus-4-8",
-      },
-    });
-    expect(lastStreamParams!).not.toHaveProperty("temperature");
-    expect(lastStreamParams!).not.toHaveProperty("top_p");
-    expect(lastStreamParams!).not.toHaveProperty("top_k");
-  });
-});

package/src/__tests__/call-controller.test.ts

@@ -168,25 +168,6 @@ mock.module("../notifications/emit-signal.js", () => ({
   }),
 }));
 
-// Guardian principalId is resolved from the gateway binding reader. Mirror the
-// vellum binding seeded by resetTables so guardian dispatch can resolve it.
-mock.module("../contacts/guardian-delivery-reader.js", () => ({
-  getGuardianDelivery: async () => [
-    {
-      channelType: "vellum",
-      contactId: "guardian-vellum",
-      principalId: "test-principal-id",
-      address: "local",
-      status: "active",
-    },
-  ],
-  guardianForChannel: (
-    list: Array<{ channelType: string; status: string }>,
-    channelType: string,
-  ) => list.find((g) => g.channelType === channelType && g.status === "active"),
-  anyGuardian: (list: unknown[]) => list[0],
-}));
-
 mock.module("../calls/voice-session-bridge.js", () => {
   mockStartVoiceTurn = mock(createMockVoiceTurn(["Hello", " there"]));
   return {

package/src/__tests__/channel-guardian.test.ts

@@ -83,32 +83,6 @@ mock.module("../ipc/gateway-client.js", () => ({
   }),
 }));
 
-// Guardian-delivery reader mock — the inbound challenge guard reads guardian
-// existence from the gateway. Derive the list from the local binding state so
-// the gateway-backed presence guard mirrors the DB the rest of the test sets up.
-const resolveGuardianList = async (input?: { channelTypes?: string[] }) => {
-  const { findGuardianForChannel } = await import(
-    "../contacts/contact-store.js"
-  );
-  const channels = input?.channelTypes ?? [];
-  return channels
-    .map((channelType) => {
-      const found = findGuardianForChannel(channelType);
-      return found ? { channelType, status: "active" } : null;
-    })
-    .filter((g): g is { channelType: string; status: string } => g !== null);
-};
-
-mock.module("../contacts/guardian-delivery-reader.js", () => ({
-  getGuardianDelivery: resolveGuardianList,
-  getGuardianDeliveryFresh: resolveGuardianList,
-  guardianForChannel: (
-    list: Array<{ channelType: string; status: string }>,
-    channelType: string,
-  ) =>
-    list.find((g) => g.channelType === channelType && g.status === "active"),
-}));
-
 import { handleChannelVerificationSession } from "../daemon/handlers/config-channels.js";
 import type {
   ChannelVerificationSessionRequest,

package/src/__tests__/config-loader-backfill.test.ts

@@ -745,11 +745,7 @@ describe("loadConfig startup behavior", () => {
     );
     expect(raw.llm.profiles.frontier.provider).toBe("anthropic");
     expect(raw.llm.profiles.frontier.model).toBe("claude-opus-4-8");
-    // Speed is served by DeepSeek V4 Flash on Fireworks.
-    expect(raw.llm.profiles["cost-optimized"].provider).toBe("fireworks");
-    expect(raw.llm.profiles["cost-optimized"].model).toBe(
-      "accounts/fireworks/models/deepseek-v4-flash",
-    );
+    expect(raw.llm.profiles["cost-optimized"].provider).toBe("anthropic");
   });
 
   test("off-platform managed profiles are overwritten on every boot", () => {

package/src/__tests__/config-schema.test.ts

@@ -120,7 +120,6 @@ describe("AssistantConfigSchema", () => {
       shellDefaultTimeoutSec: 120,
       shellMaxTimeoutSec: 600,
       permissionTimeoutSec: 300,
-      questionResponseTimeoutSec: 1800,
       toolExecutionTimeoutSec: 120,
       providerStreamTimeoutSec: 1800,
       backgroundTurnTimeoutSec: 1800,

package/src/__tests__/conversation-agent-loop.test.ts

@@ -1705,10 +1705,6 @@ describe("session-agent-loop", () => {
       expect(ctx.abortController).toBeNull();
       expect(ctx.currentRequestId).toBeUndefined();
       expect(ctx.commandIntent).toBeUndefined();
-      // Turn-scoped interactivity is stamped during the run and must be cleared
-      // so paths that bypass this loop (e.g. opportunity wakes) don't inherit a
-      // stale value instead of falling back to live client state.
-      expect(ctx.currentTurnIsNonInteractive).toBeUndefined();
     });
 
     test("clears state and surfaces a processing error when the provider call fails", async () => {