@vellumai/assistant 0.10.12 → 0.11.0-staging.2

package/src/__tests__/conversation-surfaces-task-progress.test.ts

@@ -1,5 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
+import type { AssistantEvent } from "../api/index.js";
 import {
   createSurfaceMutex,
   type SurfaceConversationContext,
@@ -8,14 +9,13 @@ import {
 import type {
   CardSurfaceData,
   DynamicPageSurfaceData,
-  ServerMessage,
   SurfaceType,
   UiSurfaceShow,
   UISurfaceUpdateEvent,
 } from "../daemon/message-protocol.js";
 
 function makeContext(
-  sent: ServerMessage[] = [],
+  sent: AssistantEvent[] = [],
   channelCapabilities?: SurfaceConversationContext["channelCapabilities"],
 ): SurfaceConversationContext {
   return {
@@ -42,7 +42,7 @@ function makeContext(
 
 describe("task_progress surface compatibility", () => {
   test("blocks ui_show when channel lacks dynamic UI support", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "phone",
       supportsDynamicUi: false,
@@ -61,7 +61,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks ui_update when channel lacks dynamic UI support", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "telegram",
       supportsDynamicUi: false,
@@ -80,7 +80,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("allows Slack ui_show for task_progress card when dynamic UI is otherwise disabled", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -110,7 +110,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks Slack ui_show for non-task_progress card when dynamic UI is disabled", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -130,7 +130,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks Slack ui_show when normalized card data is not task_progress", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -151,7 +151,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks Slack ui_show for non-card task_progress input when dynamic UI is disabled", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -171,7 +171,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show maps legacy top-level task_progress fields into card data", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -208,7 +208,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show fills well-formed templateData for a stepless task_progress card", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -237,7 +237,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show coerces invalid status and malformed steps on a task_progress card", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -279,7 +279,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show normalizes top-level dynamic_page fields into data", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -308,7 +308,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show supports file_upload surfaces directly", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -344,7 +344,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show file_upload normalizes a comma-joined acceptedTypes string", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     // The model may emit acceptedTypes as a comma-joined string; the renderer
@@ -375,7 +375,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show dynamic_page uses data.html when properly nested", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -399,7 +399,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_update normalizes top-level task_progress fields into templateData", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
     const existingCard: CardSurfaceData = {
       title: "Ordering from DoorDash",
@@ -448,7 +448,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("allows Slack ui_update for stored task_progress card when dynamic UI is disabled", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -482,7 +482,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks Slack ui_update when stored surface is not a task_progress card", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -505,7 +505,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks Slack ui_update that would convert a plain card to task_progress", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -531,7 +531,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks Slack ui_update that would change task_progress card template", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -562,7 +562,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("blocks Slack ui_update when the surface is not already stored", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent, {
       channel: "slack",
       supportsDynamicUi: false,
@@ -581,7 +581,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show rejects new interactive surface when a non-dynamic_page pending surface exists", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     // Pre-populate a pending table surface (simulates a previously shown interactive surface)
@@ -603,7 +603,7 @@ describe("task_progress surface compatibility", () => {
   });
 
   test("ui_show allows new interactive surface when only dynamic_page surfaces are pending", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     // dynamic_page pending entries should not block new interactive surfaces
@@ -622,7 +622,7 @@ describe("task_progress surface compatibility", () => {
 });
 
 describe("ui_show card content recovery", () => {
-  function shownCard(sent: ServerMessage[]): CardSurfaceData | undefined {
+  function shownCard(sent: AssistantEvent[]): CardSurfaceData | undefined {
     const show = sent.find(
       (m): m is UiSurfaceShow => m.type === "ui_surface_show",
     );
@@ -633,7 +633,7 @@ describe("ui_show card content recovery", () => {
   }
 
   test("recovers body from a copy_block-style `text` field", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -650,7 +650,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers body from a confirmation-style `message` field", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -662,7 +662,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers top-level subtitle and metadata into the card", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -678,7 +678,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("title-only card with actions renders with actions intact", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -699,7 +699,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("title-only card without actions renders without error", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -713,7 +713,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("card with body and actions is interactive", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -734,7 +734,7 @@ describe("ui_show card content recovery", () => {
   // ── Body alias recovery from cross-surface keys ────────────────────
 
   test("recovers body from choice/form-style `description` field", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -749,7 +749,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers body from work_result-style `summary` field", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -761,7 +761,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers body from confirmation-style `detail` field", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -773,7 +773,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers body from top-level `description`", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -787,7 +787,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("concatenates multiple body aliases when they co-occur", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -809,7 +809,7 @@ describe("ui_show card content recovery", () => {
   // ── Title alias recovery ────────────────────────────────────────────
 
   test("recovers title from `heading` alias", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -821,7 +821,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers title from `header` alias", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -835,7 +835,7 @@ describe("ui_show card content recovery", () => {
   // ── Subtitle alias recovery ─────────────────────────────────────────
 
   test("recovers subtitle from `subheading` alias", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -847,7 +847,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers subtitle from table-style `caption` alias", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -861,7 +861,7 @@ describe("ui_show card content recovery", () => {
   // ── Alias precedence ───────────────────────────────────────────────
 
   test("canonical `body` takes precedence over aliased `description`", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -873,7 +873,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("card with recovered `description` and actions keeps actions (has content)", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -892,7 +892,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("recovers actions nested inside data when top-level actions is absent", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -914,7 +914,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("top-level actions take precedence over data.actions", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -935,7 +935,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("genuinely empty card (no title, body, subtitle, metadata, template, or actions) is rejected", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {
@@ -949,7 +949,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("a card with a real body broadcasts unchanged", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     await surfaceProxyResolver(ctx, "ui_show", {
@@ -961,7 +961,7 @@ describe("ui_show card content recovery", () => {
   });
 
   test("a task_progress card with empty data broadcasts (template renders a shell)", async () => {
-    const sent: ServerMessage[] = [];
+    const sent: AssistantEvent[] = [];
     const ctx = makeContext(sent);
 
     const result = await surfaceProxyResolver(ctx, "ui_show", {

package/src/__tests__/conversation-sync-tags.test.ts

@@ -1,5 +1,6 @@
 import { afterAll, beforeEach, describe, expect, test } from "bun:test";
 
+import type { AssistantEventEnvelope } from "../api/index.js";
 import {
   conversationMetadataSyncTag,
   SYNC_TAGS,
@@ -14,7 +15,6 @@ import {
 } from "../persistence/conversation-crud.js";
 import { getDb } from "../persistence/db-connection.js";
 import { initializeDb } from "../persistence/db-init.js";
-import type { AssistantEvent } from "../runtime/assistant-event.js";
 import { assistantEventHub } from "../runtime/assistant-event-hub.js";
 import { ROUTES as CONVERSATION_LIST_ROUTES } from "../runtime/routes/conversation-list-routes.js";
 import { ROUTES as CONVERSATION_MANAGEMENT_ROUTES } from "../runtime/routes/conversation-management-routes.js";
@@ -50,8 +50,8 @@ function findRoute(
 async function captureEvents(
   action: () => void | Promise<unknown>,
   expectedCount: number,
-): Promise<AssistantEvent[]> {
-  const received: AssistantEvent[] = [];
+): Promise<AssistantEventEnvelope[]> {
+  const received: AssistantEventEnvelope[] = [];
   const subscription = assistantEventHub.subscribe({
     type: "process",
     callback: (event) => {
@@ -371,7 +371,7 @@ describe("conversation sync tags", () => {
       JSON.stringify([{ type: "text", text: "first" }]),
     );
 
-    const received: AssistantEvent[] = [];
+    const received: AssistantEventEnvelope[] = [];
     const subscription = assistantEventHub.subscribe({
       type: "process",
       callback: (event) => {
@@ -404,7 +404,7 @@ describe("conversation sync tags", () => {
     // messages advance the attention cursor via projectAssistantMessage.
     const conversation = createConversation("User message");
 
-    const received: AssistantEvent[] = [];
+    const received: AssistantEventEnvelope[] = [];
     const subscription = assistantEventHub.subscribe({
       type: "process",
       callback: (event) => {

package/src/__tests__/conversation-wait-for-idle.test.ts

@@ -12,7 +12,7 @@ import { describe, expect, mock, test } from "bun:test";
 
 import { CompactionCircuit } from "../agent/compaction-circuit.js";
 import type { AgentEvent } from "../agent/loop.js";
-import type { ServerMessage } from "../daemon/message-protocol.js";
+import type { AssistantEvent } from "../api/index.js";
 import type { Message, ProviderResponse } from "../providers/types.js";
 
 // ---------------------------------------------------------------------------
@@ -195,7 +195,7 @@ function makeConversation(): Conversation {
     `conv-wait-for-idle-${conversationSeq}`,
     makeProvider(),
     "system prompt",
-    (_msg: ServerMessage) => {},
+    (_msg: AssistantEvent) => {},
     "/tmp",
     { maxTokens: 4096 },
   );

package/src/__tests__/conversation-workspace-cache-state.test.ts

@@ -90,10 +90,6 @@ mock.module("../memory/query-builder.js", () => ({
   buildMemoryQuery: () => "",
 }));
 
-mock.module("../plugins/defaults/memory/retrieval-budget.js", () => ({
-  computeRecallBudget: () => 0,
-}));
-
 mock.module("../plugins/defaults/compaction/window-manager.js", () => ({
   ContextWindowManager: class {
     estimateInputTokens() {

package/src/__tests__/conversation-workspace-injection.test.ts

@@ -106,9 +106,6 @@ mock.module("../memory/retriever.js", () => ({
 mock.module("../memory/query-builder.js", () => ({
   buildMemoryQuery: () => "",
 }));
-mock.module("../plugins/defaults/memory/retrieval-budget.js", () => ({
-  computeRecallBudget: () => 0,
-}));
 mock.module("../plugins/defaults/compaction/window-manager.js", () => ({
   ContextWindowManager: class {
     estimateInputTokens() {

package/src/__tests__/conversation-workspace-tool-tracking.test.ts

@@ -103,9 +103,6 @@ mock.module("../memory/retriever.js", () => ({
 mock.module("../memory/query-builder.js", () => ({
   buildMemoryQuery: () => "",
 }));
-mock.module("../plugins/defaults/memory/retrieval-budget.js", () => ({
-  computeRecallBudget: () => 0,
-}));
 mock.module("../plugins/defaults/compaction/window-manager.js", () => ({
   ContextWindowManager: class {
     estimateInputTokens() {

package/src/__tests__/copy-composer-tc-templates.test.ts

@@ -1,10 +1,9 @@
 /**
  * Tests for the trusted contact lifecycle fallback copy templates.
  *
- * Verifies that `ingress.trusted_contact.guardian_decision` and
- * `ingress.trusted_contact.denied` templates in copy-composer.ts render
- * display names when available and fall back to Slack <@ID> mention format
- * for raw user IDs on the Slack source channel.
+ * Verifies that the `ingress.trusted_contact.guardian_decision` template in
+ * copy-composer.ts renders display names when available and falls back to
+ * Slack <@ID> mention format for raw user IDs on the Slack source channel.
  */
 import { describe, expect, test } from "bun:test";
 
@@ -42,35 +41,6 @@ function buildGuardianDecisionSignal(
   };
 }
 
-function buildDeniedSignal(
-  payloadOverrides: Record<string, unknown> = {},
-  sourceChannel: "slack" | "telegram" | "vellum" = "slack",
-): NotificationSignal {
-  return {
-    signalId: "test-signal-denied",
-    createdAt: Date.now(),
-    sourceChannel,
-    sourceContextId: "test-ctx-2",
-    sourceEventName: "ingress.trusted_contact.denied",
-    contextPayload: {
-      sourceChannel,
-      requesterExternalUserId: "U07CLDQ4TB3",
-      requesterChatId: "D0AQ9C5PPPF",
-      decidedByExternalUserId: "U099H19C0KA",
-      requesterDisplayName: null,
-      decidedByDisplayName: null,
-      decision: "denied",
-      ...payloadOverrides,
-    },
-    attentionHints: {
-      requiresAction: false,
-      urgency: "low",
-      isAsyncBackground: false,
-      visibleInSourceNow: false,
-    },
-  };
-}
-
 // ── guardian_decision template ────────────────────────────────────────────────
 
 describe("guardian_decision fallback copy", () => {
@@ -252,101 +222,3 @@ describe("guardian_decision fallback copy", () => {
     );
   });
 });
-
-// ── denied template ──────────────────────────────────────────────────────────
-
-describe("trusted_contact.denied fallback copy", () => {
-  test("uses display name when present", () => {
-    const signal = buildDeniedSignal({
-      requesterDisplayName: "Alice",
-    });
-    const result = composeFallbackCopy(signal, ["vellum"]);
-    const copy = result.vellum!;
-
-    expect(copy.title).toBe("Trusted Contact Denied");
-    expect(copy.body).toBe(
-      "A trusted contact request from Alice has been denied.",
-    );
-  });
-
-  test("falls back to Slack <@ID> mention format on Slack when display name absent", () => {
-    const signal = buildDeniedSignal({
-      requesterDisplayName: null,
-      requesterExternalUserId: "U07CLDQ4TB3",
-      sourceChannel: "slack",
-    });
-    const result = composeFallbackCopy(signal, ["vellum"]);
-    const copy = result.vellum!;
-
-    expect(copy.body).toBe(
-      "A trusted contact request from <@U07CLDQ4TB3> has been denied.",
-    );
-  });
-
-  test("uses raw user ID without Slack formatting on non-Slack channels", () => {
-    const signal = buildDeniedSignal(
-      {
-        requesterDisplayName: null,
-        requesterExternalUserId: "U07CLDQ4TB3",
-        sourceChannel: "telegram",
-      },
-      "telegram",
-    );
-    const result = composeFallbackCopy(signal, ["vellum"]);
-    const copy = result.vellum!;
-
-    expect(copy.body).toBe(
-      "A trusted contact request from U07CLDQ4TB3 has been denied.",
-    );
-    expect(copy.body).not.toContain("<@");
-  });
-
-  test("falls back to 'Someone' when requester identity is absent", () => {
-    const signal = buildDeniedSignal({
-      requesterDisplayName: null,
-      requesterExternalUserId: null,
-    });
-    const result = composeFallbackCopy(signal, ["vellum"]);
-    const copy = result.vellum!;
-
-    expect(copy.body).toBe(
-      "A trusted contact request from Someone has been denied.",
-    );
-  });
-
-  test("does not expose raw conversation IDs (requesterChatId) in output", () => {
-    const signal = buildDeniedSignal({
-      requesterDisplayName: null,
-      requesterExternalUserId: "U07CLDQ4TB3",
-      requesterChatId: "D0AQ9C5PPPF",
-    });
-    const result = composeFallbackCopy(signal, ["vellum"]);
-    const copy = result.vellum!;
-
-    expect(copy.body).not.toContain("D0AQ9C5PPPF");
-  });
-
-  test("sanitizes control characters from display names", () => {
-    const signal = buildDeniedSignal({
-      requesterDisplayName: "Alice\x00\x07\nEvil",
-    });
-    const result = composeFallbackCopy(signal, ["vellum"]);
-    const copy = result.vellum!;
-
-    expect(copy.body).not.toMatch(/[\x00-\x1f\x7f-\x9f]/);
-    expect(copy.body).toContain("Alice");
-  });
-
-  test("clamps excessively long display names", () => {
-    const longName = "A".repeat(200);
-    const signal = buildDeniedSignal({
-      requesterDisplayName: longName,
-    });
-    const result = composeFallbackCopy(signal, ["vellum"]);
-    const copy = result.vellum!;
-
-    // sanitizeIdentityField clamps to 120 chars + ellipsis
-    expect(copy.body.length).toBeLessThan(longName.length);
-    expect(copy.body).toContain("…");
-  });
-});

package/src/__tests__/credential-security-invariants.test.ts

@@ -170,6 +170,7 @@ describe("Invariant 2: no generic plaintext secret read API", () => {
       "messaging/providers/slack/api.ts", // Slack Web API client (bot token for direct sends)
       "messaging/providers/telegram-bot/api.ts", // Telegram Bot API client (bot token for direct sends)
       "runtime/channel-readiness-service.ts", // channel readiness probes for Telegram connectivity
+      "telegram/webhook-health.ts", // Telegram webhook health sweep — reads bot_token to call getWebhookInfo (Bot API authenticates via the token in the URL path) and checks webhook_secret for existence only; neither value is logged, persisted, or returned
       "messaging/providers/whatsapp/adapter.ts", // WhatsApp credential lookup for connectivity check
       "messaging/providers/whatsapp/api.ts", // WhatsApp Cloud API client (bot token for direct sends)
       "messaging/providers/slack/adapter.ts", // Slack bot token lookup for Socket Mode connectivity check