@vellumai/assistant 0.10.2-dev.202606250318.5e7cfb0 → 0.10.2

package/src/cli/commands/mcp.ts

@@ -109,9 +109,10 @@ export function registerMcpCommand(program: Command): void {
     transport: "ipc",
     description: "Manage MCP (Model Context Protocol) servers",
     build: (mcp) => {
-      mcp.addHelpText(
-        "after",
-        `
+
+  mcp.addHelpText(
+    "after",
+    `
 MCP servers extend the assistant's capabilities with external tools. Servers
 are configured in the assistant's config.json under the mcp.servers key. Each
 server uses one of three transport types:
@@ -128,15 +129,15 @@ Examples:
   $ assistant mcp add my-server -t stdio -c npx -a my-mcp-server
   $ assistant mcp auth my-server
   $ assistant mcp remove my-server`,
-      );
-
-      mcp
-        .command("list")
-        .description("List configured MCP servers and their status")
-        .option("--json", "Output as JSON")
-        .addHelpText(
-          "after",
-          `
+  );
+
+  mcp
+    .command("list")
+    .description("List configured MCP servers and their status")
+    .option("--json", "Output as JSON")
+    .addHelpText(
+      "after",
+      `
 Shows each configured MCP server with its current status and configuration:
 
   Name         The server identifier used in config.json
@@ -156,49 +157,49 @@ list including health status.
 Examples:
   $ assistant mcp list
   $ assistant mcp list --json`,
-        )
-        .action(async (opts: { json?: boolean }) => {
-          const result = await cliIpcCall<{ servers: McpServerEntry[] }>(
-            "internal_mcp_list",
-          );
+    )
+    .action(async (opts: { json?: boolean }) => {
+      const result = await cliIpcCall<{ servers: McpServerEntry[] }>(
+        "internal_mcp_list",
+      );
 
-          if (!result.ok) {
-            return exitFromIpcResult({
-              ok: false,
-              error: result.error,
-              statusCode: result.statusCode,
-            });
-          }
-
-          const servers = result.result?.servers ?? [];
-
-          if (servers.length === 0) {
-            if (opts.json) {
-              process.stdout.write(JSON.stringify([], null, 2) + "\n");
-            } else {
-              log.info("No MCP servers configured.");
-            }
-            return;
-          }
-
-          if (opts.json) {
-            process.stdout.write(JSON.stringify(servers, null, 2) + "\n");
-            return;
-          }
-
-          log.info(`${servers.length} MCP server(s) configured:\n`);
-
-          for (const entry of servers) {
-            printServerEntry(entry);
-          }
+      if (!result.ok) {
+        return exitFromIpcResult({
+          ok: false,
+          error: result.error,
+          statusCode: result.statusCode,
         });
-
-      mcp
-        .command("reload")
-        .description("Reload MCP server connections in the running assistant")
-        .addHelpText(
-          "after",
-          `
+      }
+
+      const servers = result.result?.servers ?? [];
+
+      if (servers.length === 0) {
+        if (opts.json) {
+          process.stdout.write(JSON.stringify([], null, 2) + "\n");
+        } else {
+          log.info("No MCP servers configured.");
+        }
+        return;
+      }
+
+      if (opts.json) {
+        process.stdout.write(JSON.stringify(servers, null, 2) + "\n");
+        return;
+      }
+
+      log.info(`${servers.length} MCP server(s) configured:\n`);
+
+      for (const entry of servers) {
+        printServerEntry(entry);
+      }
+    });
+
+  mcp
+    .command("reload")
+    .description("Reload MCP server connections in the running assistant")
+    .addHelpText(
+      "after",
+      `
 Signals the running assistant to disconnect and reconnect all MCP servers
 using the current configuration from disk. Active sessions pick up new tools
 on their next turn automatically. The assistant must be running.
@@ -207,49 +208,40 @@ Examples:
   $ vellum mcp reload
   $ vellum mcp reload   # after editing config.json to add a new server
   $ vellum mcp reload   # after running "vellum mcp auth <server>"`,
-        )
-        .action(async () => {
-          const result = await cliIpcCall("internal_mcp_reload", { body: {} });
-          if (!result.ok) {
-            log.warn(
-              `Could not signal reload: ${result.error}. ` +
-                `Run 'assistant mcp reload' once the assistant is up.`,
-            );
-          } else {
-            log.info(
-              "MCP reload signal sent. The running assistant will reconnect servers shortly.",
-            );
-          }
-        });
-
-      mcp
-        .command("add <name>")
-        .description("Add an MCP server configuration")
-        .requiredOption(
-          "-t, --transport-type <type>",
-          "Transport type: stdio, sse, or streamable-http",
-        )
-        .option("-u, --url <url>", "Server URL (for sse/streamable-http)")
-        .option("-c, --command <cmd>", "Command to run (for stdio)")
-        .option("-a, --args <args...>", "Command arguments (for stdio)")
-        .option(
-          "-r, --risk <level>",
-          "Default risk level: low, medium, or high",
-          "high",
-        )
-        .option(
-          "-H, --header <key:value>",
-          "Custom HTTP header (repeatable, for sse/streamable-http). E.g. -H 'Authorization: Bearer tok123'",
-          (val: string, acc: string[]) => {
-            acc.push(val);
-            return acc;
-          },
-          [] as string[],
-        )
-        .option("--disabled", "Add as disabled")
-        .addHelpText(
-          "after",
-          `
+    )
+    .action(async () => {
+      const result = await cliIpcCall("internal_mcp_reload", { body: {} });
+      if (!result.ok) {
+        log.warn(
+          `Could not signal reload: ${result.error}. ` +
+            `Run 'assistant mcp reload' once the assistant is up.`,
+        );
+      } else {
+        log.info(
+          "MCP reload signal sent. The running assistant will reconnect servers shortly.",
+        );
+      }
+    });
+
+  mcp
+    .command("add <name>")
+    .description("Add an MCP server configuration")
+    .requiredOption(
+      "-t, --transport-type <type>",
+      "Transport type: stdio, sse, or streamable-http",
+    )
+    .option("-u, --url <url>", "Server URL (for sse/streamable-http)")
+    .option("-c, --command <cmd>", "Command to run (for stdio)")
+    .option("-a, --args <args...>", "Command arguments (for stdio)")
+    .option(
+      "-r, --risk <level>",
+      "Default risk level: low, medium, or high",
+      "high",
+    )
+    .option("--disabled", "Add as disabled")
+    .addHelpText(
+      "after",
+      `
 Arguments:
   name   Unique identifier for the server (used as the key in config.json)
 
@@ -262,84 +254,58 @@ The --risk flag sets the default risk level for all tools from this server
 (defaults to "high" if not specified). The server starts enabled unless
 --disabled is passed.
 
-The --header (-H) flag adds custom HTTP headers to sse/streamable-http
-transports. Use it for Bearer Token or API Key authentication. The flag
-is repeatable — pass multiple -H flags for multiple headers.
-
 If a server with the same name already exists, the command fails. Remove the
 existing server first with "assistant mcp remove <name>".
 
 Examples:
   $ assistant mcp add my-server -t stdio -c npx -a my-mcp-server
   $ assistant mcp add remote-api -t streamable-http -u https://api.example.com/mcp -r medium
-  $ assistant mcp add legacy-sse -t sse -u https://old.example.com/events --disabled
-  $ assistant mcp add authed-api -t sse -u https://api.example.com/mcp -H 'Authorization: Bearer tok123'
-  $ assistant mcp add apikey-srv -t streamable-http -u https://srv.example.com/mcp -H 'X-API-Key: sk_live_abc'`,
-        )
-        .action(
-          async (
-            name: string,
-            opts: {
-              transportType: string;
-              url?: string;
-              command?: string;
-              args?: string[];
-              risk: string;
-              header: string[];
-              disabled?: boolean;
+  $ assistant mcp add legacy-sse -t sse -u https://old.example.com/events --disabled`,
+    )
+    .action(
+      async (
+        name: string,
+        opts: {
+          transportType: string;
+          url?: string;
+          command?: string;
+          args?: string[];
+          risk: string;
+          disabled?: boolean;
+        },
+      ) => {
+        const result = await cliIpcCall<{ added: true }>(
+          "internal_mcp_add",
+          {
+            body: {
+              name,
+              transportType: opts.transportType,
+              url: opts.url,
+              command: opts.command,
+              args: opts.args,
+              risk: opts.risk,
+              disabled: opts.disabled,
             },
-          ) => {
-            let headers: Record<string, string> | undefined;
-            if (opts.header.length > 0) {
-              headers = {};
-              for (const h of opts.header) {
-                const colonIdx = h.indexOf(":");
-                if (colonIdx === -1) {
-                  log.error(
-                    `Invalid header format: "${h}". Expected "Key: Value".`,
-                  );
-                  process.exitCode = 1;
-                  return;
-                }
-                headers[h.slice(0, colonIdx).trim()] = h
-                  .slice(colonIdx + 1)
-                  .trim();
-              }
-            }
-
-            const result = await cliIpcCall<{ added: true }>(
-              "internal_mcp_add",
-              {
-                body: {
-                  name,
-                  transportType: opts.transportType,
-                  url: opts.url,
-                  command: opts.command,
-                  args: opts.args,
-                  risk: opts.risk,
-                  disabled: opts.disabled,
-                  headers,
-                },
-              },
-            );
-
-            if (!result.ok) {
-              log.error(result.error ?? "Failed to add MCP server");
-              process.exitCode = 1;
-              return;
-            }
-
-            log.info(`Added MCP server "${name}" (${opts.transportType})`);
-            log.info("The running assistant is reloading MCP servers now.");
           },
         );
 
-      mcp
-        .command("auth <name>")
-        .description("Authenticate with an MCP server via OAuth")
-        .addHelpText(
-          "after",
-          `
+        if (!result.ok) {
+          log.error(result.error ?? "Failed to add MCP server");
+          process.exitCode = 1;
+          return;
+        }
+
+        log.info(`Added MCP server "${name}" (${opts.transportType})`);
+        log.info("The running assistant is reloading MCP servers now.");
+      },
+    );
+
+  mcp
+    .command("auth <name>")
+    .description("Authenticate with an MCP server via OAuth")
+    .addHelpText(
+      "after",
+      `
 Arguments:
   name   Name of a configured MCP server to authenticate with
 
@@ -358,79 +324,79 @@ automatically. You can also run 'vellum mcp reload' to apply immediately.
 Examples:
   $ assistant mcp auth my-server
   $ assistant mcp auth remote-api`,
-        )
-        .action(async (name: string) => {
-          // IPC-first path — attempt daemon-orchestrated flow (works on hosted assistants)
-          const startResult = await cliIpcCall<{
-            auth_url: string;
-            state: string;
-            already_authenticated?: boolean;
-          }>("internal_mcp_auth_start", { body: { serverId: name } });
-
-          if (startResult.ok && startResult.result?.already_authenticated) {
-            log.info(`Server "${name}" is already authenticated.`);
-            process.exit(0);
-            return;
-          }
-
-          if (startResult.ok && startResult.result?.auth_url) {
-            const authUrl = startResult.result.auth_url;
-            log.info(`Opening browser for "${name}" OAuth authorization...`);
-            openInHostBrowser(authUrl);
-            log.info(`If the browser did not open, visit:\n${authUrl}`);
-            log.info(
-              "Waiting for authorization in browser... (press Ctrl+C to cancel)",
-            );
-
-            const finalStatus = await pollMcpAuthStatus(name, {
-              intervalMs: 2_000,
-              timeoutMs: 150_000, // matches existing OAUTH_TIMEOUT_MS
-            });
-
-            if (finalStatus.status === "complete") {
-              log.info(`Authentication successful for "${name}".`);
-              log.info(
-                "The running assistant has picked up this change automatically.",
-              );
-              process.exit(0);
-              return;
-            }
-
-            const errMsg = finalStatus.error ?? "Unknown error";
-            if (errMsg.includes("denied") || errMsg.includes("cancelled")) {
-              log.error(`Authorization cancelled for "${name}".`);
-            } else if (errMsg.includes("timed out")) {
-              log.error(
-                `Authorization timed out for "${name}". Try again with: assistant mcp auth ${name}`,
-              );
-            } else {
-              log.error(`OAuth failed for "${name}": ${errMsg}`);
-            }
-            process.exitCode = 1;
-            return;
-          }
-
-          // Any !startResult.ok case: surface error and exit 1
-          const ipcErrMsg = startResult.error ?? "Unknown error";
-          if (
-            ipcErrMsg.startsWith("Could not connect to assistant daemon") ||
-            ipcErrMsg.startsWith("Unknown method:")
-          ) {
-            log.error(
-              `MCP OAuth requires the assistant to be running. Is it running?`,
-            );
-          } else {
-            log.error(`MCP OAuth failed via assistant: ${ipcErrMsg}`);
-          }
-          process.exitCode = 1;
+    )
+    .action(async (name: string) => {
+      // IPC-first path — attempt daemon-orchestrated flow (works on hosted assistants)
+      const startResult = await cliIpcCall<{
+        auth_url: string;
+        state: string;
+        already_authenticated?: boolean;
+      }>("internal_mcp_auth_start", { body: { serverId: name } });
+
+      if (startResult.ok && startResult.result?.already_authenticated) {
+        log.info(`Server "${name}" is already authenticated.`);
+        process.exit(0);
+        return;
+      }
+
+      if (startResult.ok && startResult.result?.auth_url) {
+        const authUrl = startResult.result.auth_url;
+        log.info(`Opening browser for "${name}" OAuth authorization...`);
+        openInHostBrowser(authUrl);
+        log.info(`If the browser did not open, visit:\n${authUrl}`);
+        log.info(
+          "Waiting for authorization in browser... (press Ctrl+C to cancel)",
+        );
+
+        const finalStatus = await pollMcpAuthStatus(name, {
+          intervalMs: 2_000,
+          timeoutMs: 150_000, // matches existing OAUTH_TIMEOUT_MS
         });
 
-      mcp
-        .command("remove <name>")
-        .description("Remove an MCP server configuration")
-        .addHelpText(
-          "after",
-          `
+        if (finalStatus.status === "complete") {
+          log.info(`Authentication successful for "${name}".`);
+          log.info(
+            "The running assistant has picked up this change automatically.",
+          );
+          process.exit(0);
+          return;
+        }
+
+        const errMsg = finalStatus.error ?? "Unknown error";
+        if (errMsg.includes("denied") || errMsg.includes("cancelled")) {
+          log.error(`Authorization cancelled for "${name}".`);
+        } else if (errMsg.includes("timed out")) {
+          log.error(
+            `Authorization timed out for "${name}". Try again with: assistant mcp auth ${name}`,
+          );
+        } else {
+          log.error(`OAuth failed for "${name}": ${errMsg}`);
+        }
+        process.exitCode = 1;
+        return;
+      }
+
+      // Any !startResult.ok case: surface error and exit 1
+      const ipcErrMsg = startResult.error ?? "Unknown error";
+      if (
+        ipcErrMsg.startsWith("Could not connect to assistant daemon") ||
+        ipcErrMsg.startsWith("Unknown method:")
+      ) {
+        log.error(
+          `MCP OAuth requires the assistant to be running. Is it running?`,
+        );
+      } else {
+        log.error(`MCP OAuth failed via assistant: ${ipcErrMsg}`);
+      }
+      process.exitCode = 1;
+    });
+
+  mcp
+    .command("remove <name>")
+    .description("Remove an MCP server configuration")
+    .addHelpText(
+      "after",
+      `
 Arguments:
   name   Name of the MCP server to remove
 
@@ -445,25 +411,25 @@ can also run 'vellum mcp reload' to apply immediately.
 Examples:
   $ assistant mcp remove my-server
   $ assistant mcp remove legacy-sse`,
-        )
-        .action(async (name: string) => {
-          const result = await cliIpcCall<{ removed: true }>(
-            "internal_mcp_remove",
-            { body: { name } },
-          );
+    )
+    .action(async (name: string) => {
+      const result = await cliIpcCall<{ removed: true }>(
+        "internal_mcp_remove",
+        { body: { name } },
+      );
 
-          if (!result.ok) {
-            log.error(result.error ?? `Failed to remove MCP server "${name}".`);
-            process.exitCode = 1;
-            return;
-          }
+      if (!result.ok) {
+        log.error(result.error ?? `Failed to remove MCP server "${name}".`);
+        process.exitCode = 1;
+        return;
+      }
 
-          log.info(`Removed MCP server "${name}".`);
-          log.info(
-            "The running assistant will pick up this change automatically. " +
-              "Or run 'vellum mcp reload' to apply now.",
-          );
-        });
+      log.info(`Removed MCP server "${name}".`);
+      log.info(
+        "The running assistant will pick up this change automatically. " +
+          "Or run 'vellum mcp reload' to apply now.",
+      );
+    });
     },
   });
 }

package/src/cli/commands/memory/index.ts

@@ -4,7 +4,6 @@ import { registerCommand } from "../../lib/register-command.js";
 import { registerMemoryRetrospectiveCommand } from "./memory-retrospective.js";
 import { registerMemoryV2Command } from "./memory-v2.js";
 import { registerMemoryV3Command } from "./memory-v3.js";
-import { registerMemoryWorkerCommand } from "./worker.js";
 
 export function registerMemoryCommand(program: Command): void {
   registerCommand(program, {
@@ -28,7 +27,6 @@ Examples:
       registerMemoryV2Command(memory);
       registerMemoryV3Command(memory);
       registerMemoryRetrospectiveCommand(memory);
-      registerMemoryWorkerCommand(memory);
     },
   });
 }

package/src/cli/commands/plugins.ts

@@ -29,11 +29,7 @@ import {
   PluginAlreadyInstalledError,
   PluginNotFoundError,
 } from "../lib/install-from-github.js";
-import {
-  type AllPluginInfo,
-  listAllPlugins,
-  listInstalledPlugins,
-} from "../lib/list-installed-plugins.js";
+import { listInstalledPlugins } from "../lib/list-installed-plugins.js";
 import type { FingerprintComparison } from "../lib/plugin-fingerprint.js";
 import {
   DEFAULT_PIN_HISTORY_LIMIT,
@@ -89,8 +85,6 @@ Examples:
   $ assistant plugins install example --pin <sha> --force
   $ assistant plugins list
   $ assistant plugins list --json
-  $ assistant plugins list --all
-  $ assistant plugins list --all --json
   $ assistant plugins inspect example
   $ assistant plugins inspect example --json
   $ assistant plugins diff example
@@ -245,63 +239,9 @@ Examples:
 
       plugins
         .command("list")
-        .description(
-          "List plugins installed in your workspace.",
-        )
+        .description("List plugins installed under <workspaceDir>/plugins/")
         .option("--json", "Emit machine-readable JSON instead of a table")
-        .option(
-          "--all",
-          "Include first-party default plugins and disabled plugins in the listing",
-        )
-        .action((opts: { json?: boolean; all?: boolean }) => {
-          if (opts.all) {
-            const all = listAllPlugins();
-
-            if (opts.json) {
-              process.stdout.write(JSON.stringify(all, null, 2) + "\n");
-              return;
-            }
-
-            if (all.length === 0) {
-              console.log("No plugins found.");
-              return;
-            }
-
-            const rows = all.map((p) => ({
-              name: p.name,
-              version: p.packageJson?.version ?? "—",
-              source: p.source,
-              status: formatAllPluginStatus(p),
-            }));
-            const nameW = Math.max(4, ...rows.map((r) => r.name.length));
-            const versionW = Math.max(7, ...rows.map((r) => r.version.length));
-            const sourceW = Math.max(6, ...rows.map((r) => r.source.length));
-            const pad = (s: string, w: number) =>
-              s + " ".repeat(w - s.length);
-            console.log(
-              `${pad("NAME", nameW)}  ${pad("VERSION", versionW)}  ${pad("SOURCE", sourceW)}  STATUS`,
-            );
-            for (const r of rows) {
-              console.log(
-                `${pad(r.name, nameW)}  ${pad(r.version, versionW)}  ${pad(r.source, sourceW)}  ${r.status}`,
-              );
-            }
-
-            const userCount = all.filter((p) => p.source === "user").length;
-            const defaultCount = all.length - userCount;
-            const disabledCount = all.filter((p) => p.disabled).length;
-            console.log("");
-            console.log(
-              `${all.length} plugin${all.length === 1 ? "" : "s"} ` +
-                `(${userCount} user, ${defaultCount} default` +
-                (disabledCount > 0
-                  ? `, ${disabledCount} disabled`
-                  : "") +
-                `).`,
-            );
-            return;
-          }
-
+        .action((opts: { json?: boolean }) => {
           const installed = listInstalledPlugins();
 
           if (opts.json) {
@@ -817,18 +757,6 @@ function formatTimestamp(iso: string | null): string {
   return new Date(ms).toISOString().slice(0, 19);
 }
 
-/**
- * Build a human-readable status string for a plugin in the `--all` listing.
- * Combines disabled state with any structural issues.
- */
-function formatAllPluginStatus(p: AllPluginInfo): string {
-  const parts: string[] = [];
-  if (p.disabled) parts.push("disabled");
-  if (p.issues.length > 0) parts.push(p.issues.join("; "));
-  if (parts.length === 0) parts.push("enabled");
-  return parts.join(", ");
-}
-
 /** Human-readable status line for an inspection result. The from/to revisions
  * now live in the installed/remote blocks, so the status itself is just words. */
 function statusLine(status: PluginInspection["status"]): string {