@vellumai/assistant 0.10.2 → 0.10.3-dev.202606252046.9075fd5

package/openapi.yaml

@@ -3,7 +3,7 @@
 openapi: 3.1.0
 info:
   title: Vellum Assistant API
-  version: 0.10.2
+  version: 0.10.3
   description: Auto-generated OpenAPI specification for the Vellum Assistant runtime HTTP server.
 servers:
   - url: http://127.0.0.1:7821
@@ -3973,6 +3973,8 @@ paths:
                           anyOf:
                             - type: string
                             - type: "null"
+                        resolutionFailed:
+                          type: boolean
                         guardianExternalUserId:
                           type: string
                         guardianDeliveryChatId:
@@ -4839,14 +4841,18 @@ paths:
                         type: string
                       role:
                         type: string
+                        enum:
+                          - guardian
+                          - contact
                       notes:
                         anyOf:
                           - type: string
                           - type: "null"
                       contactType:
-                        anyOf:
-                          - type: string
-                          - type: "null"
+                        type: string
+                        enum:
+                          - human
+                          - assistant
                       lastInteraction:
                         anyOf:
                           - type: number
@@ -4913,20 +4919,15 @@ paths:
                             - address
                             - isPrimary
                             - externalUserId
-                            - status
-                            - policy
-                            - verifiedAt
-                            - verifiedVia
                             - lastSeenAt
                             - interactionCount
                             - lastInteraction
-                            - revokedReason
-                            - blockedReason
                           additionalProperties: false
                     required:
                       - id
                       - displayName
                       - role
+                      - contactType
                       - interactionCount
                       - createdAt
                       - updatedAt
@@ -5000,14 +5001,18 @@ paths:
                           type: string
                         role:
                           type: string
+                          enum:
+                            - guardian
+                            - contact
                         notes:
                           anyOf:
                             - type: string
                             - type: "null"
                         contactType:
-                          anyOf:
-                            - type: string
-                            - type: "null"
+                          type: string
+                          enum:
+                            - human
+                            - assistant
                         lastInteraction:
                           anyOf:
                             - type: number
@@ -5074,20 +5079,15 @@ paths:
                               - address
                               - isPrimary
                               - externalUserId
-                              - status
-                              - policy
-                              - verifiedAt
-                              - verifiedVia
                               - lastSeenAt
                               - interactionCount
                               - lastInteraction
-                              - revokedReason
-                              - blockedReason
                             additionalProperties: false
                       required:
                         - id
                         - displayName
                         - role
+                        - contactType
                         - interactionCount
                         - createdAt
                         - updatedAt
@@ -5130,14 +5130,18 @@ paths:
                         type: string
                       role:
                         type: string
+                        enum:
+                          - guardian
+                          - contact
                       notes:
                         anyOf:
                           - type: string
                           - type: "null"
                       contactType:
-                        anyOf:
-                          - type: string
-                          - type: "null"
+                        type: string
+                        enum:
+                          - human
+                          - assistant
                       lastInteraction:
                         anyOf:
                           - type: number
@@ -5204,20 +5208,15 @@ paths:
                             - address
                             - isPrimary
                             - externalUserId
-                            - status
-                            - policy
-                            - verifiedAt
-                            - verifiedVia
                             - lastSeenAt
                             - interactionCount
                             - lastInteraction
-                            - revokedReason
-                            - blockedReason
                           additionalProperties: false
                     required:
                       - id
                       - displayName
                       - role
+                      - contactType
                       - interactionCount
                       - createdAt
                       - updatedAt
@@ -5505,14 +5504,18 @@ paths:
                         type: string
                       role:
                         type: string
+                        enum:
+                          - guardian
+                          - contact
                       notes:
                         anyOf:
                           - type: string
                           - type: "null"
                       contactType:
-                        anyOf:
-                          - type: string
-                          - type: "null"
+                        type: string
+                        enum:
+                          - human
+                          - assistant
                       lastInteraction:
                         anyOf:
                           - type: number
@@ -5579,20 +5582,15 @@ paths:
                             - address
                             - isPrimary
                             - externalUserId
-                            - status
-                            - policy
-                            - verifiedAt
-                            - verifiedVia
                             - lastSeenAt
                             - interactionCount
                             - lastInteraction
-                            - revokedReason
-                            - blockedReason
                           additionalProperties: false
                     required:
                       - id
                       - displayName
                       - role
+                      - contactType
                       - interactionCount
                       - createdAt
                       - updatedAt
@@ -5700,14 +5698,18 @@ paths:
                       type: string
                     role:
                       type: string
+                      enum:
+                        - guardian
+                        - contact
                     notes:
                       anyOf:
                         - type: string
                         - type: "null"
                     contactType:
-                      anyOf:
-                        - type: string
-                        - type: "null"
+                      type: string
+                      enum:
+                        - human
+                        - assistant
                     lastInteraction:
                       anyOf:
                         - type: number
@@ -5774,20 +5776,15 @@ paths:
                           - address
                           - isPrimary
                           - externalUserId
-                          - status
-                          - policy
-                          - verifiedAt
-                          - verifiedVia
                           - lastSeenAt
                           - interactionCount
                           - lastInteraction
-                          - revokedReason
-                          - blockedReason
                         additionalProperties: false
                   required:
                     - id
                     - displayName
                     - role
+                    - contactType
                     - interactionCount
                     - createdAt
                     - updatedAt
@@ -8406,6 +8403,22 @@ paths:
                                   anyOf:
                                     - type: number
                                     - type: "null"
+                                apiErrorCode:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
+                                apiErrorType:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
+                                apiErrorParam:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
+                                requestId:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
                               additionalProperties: false
                             - type: "null"
                       required:
@@ -14709,12 +14722,49 @@ paths:
                   type: string
                 disabled:
                   type: boolean
+                headers:
+                  type: object
+                  propertyNames:
+                    type: string
+                  additionalProperties:
+                    type: string
               required:
                 - name
                 - transportType
       responses:
         "200":
           description: Successful response
+  /v1/internal/mcp/auth/revoke:
+    post:
+      operationId: internal_mcp_auth_revoke_post
+      summary: Revoke MCP OAuth credentials
+      description: Deletes stored OAuth tokens for an MCP server and triggers a reload.
+      tags:
+        - internal
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                serverId:
+                  type: string
+              required:
+                - serverId
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  revoked:
+                    type: boolean
+                required:
+                  - revoked
+                additionalProperties: false
   /v1/internal/mcp/auth/start:
     post:
       operationId: internal_mcp_auth_start_post
@@ -14794,6 +14844,8 @@ paths:
                           type: boolean
                         defaultRiskLevel:
                           type: string
+                        hasOAuth:
+                          type: boolean
                         allowedTools:
                           type: array
                           items:
@@ -14808,6 +14860,7 @@ paths:
                         - transport
                         - enabled
                         - defaultRiskLevel
+                        - hasOAuth
                       additionalProperties: false
                 required:
                   - servers
@@ -14936,6 +14989,14 @@ paths:
                       items:
                         type: string
                     - type: "null"
+                headers:
+                  anyOf:
+                    - type: object
+                      propertyNames:
+                        type: string
+                      additionalProperties:
+                        type: string
+                    - type: "null"
               required:
                 - name
       responses:
@@ -15336,6 +15397,22 @@ paths:
                             anyOf:
                               - type: number
                               - type: "null"
+                          apiErrorCode:
+                            anyOf:
+                              - type: string
+                              - type: "null"
+                          apiErrorType:
+                            anyOf:
+                              - type: string
+                              - type: "null"
+                          apiErrorParam:
+                            anyOf:
+                              - type: string
+                              - type: "null"
+                          requestId:
+                            anyOf:
+                              - type: string
+                              - type: "null"
                         additionalProperties: false
                       - type: "null"
                 required:
@@ -17793,6 +17870,22 @@ paths:
                                   anyOf:
                                     - type: number
                                     - type: "null"
+                                apiErrorCode:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
+                                apiErrorType:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
+                                apiErrorParam:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
+                                requestId:
+                                  anyOf:
+                                    - type: string
+                                    - type: "null"
                               additionalProperties: false
                             - type: "null"
                       required:
@@ -19605,6 +19698,56 @@ paths:
       responses:
         "200":
           description: Successful response
+  /v1/onboarding/checkin:
+    post:
+      operationId: onboarding_checkin_post
+      summary: Schedule the onboarding Day 2 check-in
+      description:
+        "Find the first open 15-minute slot between 12pm and 5pm tomorrow (widening to 8am–8pm if booked) on the
+        user's Google Calendar and create the Day 2 Check-in event. Best-effort: returns scheduled=false when no
+        calendar is connected or the calendar scope wasn't granted."
+      tags:
+        - onboarding
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                userName:
+                  type: string
+                assistantName:
+                  type: string
+                timezone:
+                  type: string
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  scheduled:
+                    type: boolean
+                  reason:
+                    type: string
+                  eventId:
+                    type: string
+                  htmlLink:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                  start:
+                    type: string
+                  end:
+                    type: string
+                  timeZone:
+                    type: string
+                required:
+                  - scheduled
+                additionalProperties: false
   /v1/pages/{appId}:
     get:
       operationId: pages_by_appId_get
@@ -25978,6 +26121,13 @@ paths:
                           type: boolean
                         messageId:
                           type: string
+                        toolUseId:
+                          type: string
+                        input:
+                          type: object
+                          propertyNames:
+                            type: string
+                          additionalProperties: {}
                       required:
                         - type
                         - content
@@ -29533,12 +29683,6 @@ components:
                 - $ref: "#/components/schemas/ProfileStatus"
                 - type: "null"
             - type: "null"
-        advisorEnabled:
-          anyOf:
-            - anyOf:
-                - type: boolean
-                - type: "null"
-            - type: "null"
         mix:
           anyOf:
             - minItems: 2
@@ -30266,10 +30410,6 @@ components:
           anyOf:
             - $ref: "#/components/schemas/ProfileStatus"
             - type: "null"
-        advisorEnabled:
-          anyOf:
-            - type: boolean
-            - type: "null"
         mix:
           minItems: 2
           type: array

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.10.2",
+  "version": "0.10.3-dev.202606252046.9075fd5",
   "license": "MIT",
   "type": "module",
   "exports": {
@@ -24,6 +24,7 @@
     "lint:circular": "bun run scripts/check-circular-deps.ts",
     "lint:unused:production": "knip --production --include exports",
     "typecheck": "bunx tsc --noEmit",
+    "typecheck:fast": "bunx tsgo --noEmit",
     "test": "bash scripts/test.sh",
     "test:coverage": "COVERAGE=true bash scripts/test.sh",
     "test:stable": "EXCLUDE_EXPERIMENTAL=true bash scripts/test.sh",
@@ -66,6 +67,7 @@
     "playwright": "1.58.2",
     "postgres": "3.4.8",
     "quickjs-emscripten": "0.32.0",
+    "re2js": "2.8.3",
     "rrule": "2.8.1",
     "semver": "7.8.0",
     "stemmer": "2.0.1",
@@ -105,6 +107,7 @@
     "@types/node": "25.5.0",
     "@types/semver": "7.5.8",
     "@types/uuid": "10.0.0",
+    "@typescript/native-preview": "7.0.0-dev.20260624.1",
     "ajv": "8.18.0",
     "drizzle-kit": "0.31.10",
     "eslint": "10.0.3",

package/scripts/test.sh

@@ -169,6 +169,7 @@ printf '%s\n' "${test_files[@]}" | xargs -P "${WORKERS}" -I {} bash -c '
 
   safe_name="$(echo "${test_file}" | tr "/" "_")"
   out_file="${results_dir}/${safe_name}.out"
+  base="$(basename "${test_file}")"
 
   coverage_args=""
   if [[ "${coverage_enabled}" == "true" ]]; then
@@ -185,28 +186,48 @@ printf '%s\n' "${test_files[@]}" | xargs -P "${WORKERS}" -I {} bash -c '
     timeout_cmd="gtimeout"
   fi
 
-  start_ms=$(perl -MTime::HiRes=time -e "printf \"%d\", time*1000")
-
-  if [[ -n "${timeout_cmd}" ]]; then
-    if [[ "${exclude_exp}" == "true" ]]; then
-      "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
-    else
-      "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
-    fi
-  else
-    if [[ "${exclude_exp}" == "true" ]]; then
-      bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
+  # Run the test file in its own bun process. Wrapped in a function so a
+  # transient infrastructure crash can be retried without duplicating the
+  # four-way (timeout × experimental-filter) invocation.
+  run_bun_test() {
+    if [[ -n "${timeout_cmd}" ]]; then
+      if [[ "${exclude_exp}" == "true" ]]; then
+        "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
+      else
+        "${timeout_cmd}" -k 10 "${per_test_timeout}" bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
+      fi
     else
-      bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
+      if [[ "${exclude_exp}" == "true" ]]; then
+        bun test ${coverage_args} --test-name-pattern "^(?!.*\\[experimental\\])" "${test_file}" > "${out_file}" 2>&1
+      else
+        bun test ${coverage_args} "${test_file}" > "${out_file}" 2>&1
+      fi
     fi
-  fi
+  }
+
+  start_ms=$(perl -MTime::HiRes=time -e "printf \"%d\", time*1000")
+
+  run_bun_test
   exit_code=$?
 
+  # Retry once on a transient bun loader/runtime crash. Bun occasionally aborts
+  # a worker before its tests run — e.g. "# Unhandled error between tests" with
+  # "error: ENOENT reading <corrupted path>" — failing the whole job even though
+  # the file is green on a clean process. Such a crash truncates the run before
+  # any assertion executes, so it prints no "(fail)" line; genuine assertion
+  # failures do, and are reported immediately without a retry (fast feedback, no
+  # masking of intermittent real failures). Timeouts (124/137) are handled by the
+  # hang branch below, not here.
+  if [[ ${exit_code} -ne 0 && ${exit_code} -ne 124 && ${exit_code} -ne 137 ]] \
+     && ! grep -q "^(fail)" "${out_file}" 2>/dev/null; then
+    echo "  ↻ ${base} (transient crash, exit ${exit_code} — retrying once)"
+    run_bun_test
+    exit_code=$?
+  fi
+
   end_ms=$(perl -MTime::HiRes=time -e "printf \"%d\", time*1000")
   elapsed=$(( end_ms - start_ms ))
 
-  base="$(basename "${test_file}")"
-
   # Record duration for longest-first scheduling in future runs.
   # Write the repo-relative path (not the basename) so the lookup in future
   # runs disambiguates files that share a basename across directories.

package/src/__tests__/actor-token-service.test.ts

@@ -29,6 +29,17 @@ mock.module("../config/env.js", () => ({
   checkUnrecognizedEnvVars: () => {},
 }));
 
+// No gateway in tests: force the reader to miss so resolution exercises the
+// local-store bootstrap fallback deterministically.
+let fakeGuardianDelivery: { principalId?: string | null } | null = null;
+mock.module("../contacts/guardian-delivery-reader.js", () => ({
+  getGuardianDelivery: async () =>
+    fakeGuardianDelivery ? [fakeGuardianDelivery] : null,
+  guardianForChannel: (list: { principalId?: string | null }[]) => list[0],
+  invalidateGuardianDeliveryCache: () => {},
+  onContactChange: () => {},
+}));
+
 import { getDb } from "../memory/db-connection.js";
 import { initializeDb } from "../memory/db-init.js";
 import { resetExternalAssistantIdCache } from "../runtime/auth/external-assistant-id.js";
@@ -51,6 +62,7 @@ await initializeDb();
 beforeEach(async () => {
   initAuthSigningKey(TEST_KEY);
   resetExternalAssistantIdCache();
+  fakeGuardianDelivery = null;
   resetDbForTesting();
   await initializeDb();
 });
@@ -60,8 +72,8 @@ beforeEach(async () => {
 // ---------------------------------------------------------------------------
 
 describe("resolveLocalTrustContext", () => {
-  test("falls back to minimal trust context when no vellum binding exists", () => {
-    const ctx = resolveLocalTrustContext();
+  test("falls back to minimal trust context when no vellum binding exists", async () => {
+    const ctx = await resolveLocalTrustContext();
     expect(ctx.sourceChannel).toBe("vellum");
   });
 });
@@ -71,38 +83,48 @@ describe("resolveLocalTrustContext", () => {
 // ---------------------------------------------------------------------------
 
 describe("resolveLocalAuthContext", () => {
-  test("returns AuthContext with local principal type", () => {
-    const ctx = resolveLocalAuthContext("session-123");
+  test("returns AuthContext with local principal type", async () => {
+    const ctx = await resolveLocalAuthContext("session-123");
     expect(ctx.principalType).toBe("local");
   });
 
-  test("subject follows local:self:<conversationId> pattern", () => {
-    const ctx = resolveLocalAuthContext("session-abc");
+  test("subject follows local:self:<conversationId> pattern", async () => {
+    const ctx = await resolveLocalAuthContext("session-abc");
     expect(ctx.subject).toBe("local:self:session-abc");
   });
 
-  test("assistantId is always self", () => {
-    const ctx = resolveLocalAuthContext("session-123");
+  test("assistantId is always self", async () => {
+    const ctx = await resolveLocalAuthContext("session-123");
     expect(ctx.assistantId).toBe("self");
   });
 
-  test("uses local_v1 scope profile with local.all scope", () => {
-    const ctx = resolveLocalAuthContext("session-123");
+  test("uses local_v1 scope profile with local.all scope", async () => {
+    const ctx = await resolveLocalAuthContext("session-123");
     expect(ctx.scopeProfile).toBe("local_v1");
     expect(ctx.scopes.has("local.all")).toBe(true);
   });
 
-  test("actorPrincipalId is undefined when no vellum binding exists", () => {
+  test("actorPrincipalId is undefined when no vellum binding exists", async () => {
     const db = getDb();
     db.run("DELETE FROM contact_channels");
     db.run("DELETE FROM contacts");
 
-    const ctx = resolveLocalAuthContext("session-123");
+    const ctx = await resolveLocalAuthContext("session-123");
     expect(ctx.actorPrincipalId).toBeUndefined();
   });
 
-  test("conversationId matches the provided argument", () => {
-    const ctx = resolveLocalAuthContext("my-session");
+  test("resolves the guardian principal from the gateway when available", async () => {
+    const db = getDb();
+    db.run("DELETE FROM contact_channels");
+    db.run("DELETE FROM contacts");
+    fakeGuardianDelivery = { principalId: "gateway-guardian-id" };
+
+    const ctx = await resolveLocalAuthContext("session-123");
+    expect(ctx.actorPrincipalId).toBe("gateway-guardian-id");
+  });
+
+  test("conversationId matches the provided argument", async () => {
+    const ctx = await resolveLocalAuthContext("my-session");
     expect(ctx.conversationId).toBe("my-session");
   });
 });