@vellumai/assistant 0.10.3-dev.202606290949.0cf8e08 → 0.10.3-dev.202606291342.c7a83ea

package/openapi.yaml

@@ -16667,6 +16667,8 @@ paths:
                                   type: string
                               startedAt:
                                 type: number
+                              previewStartedAt:
+                                type: number
                               completedAt:
                                 type: number
                               confirmationDecision:
@@ -17097,6 +17099,8 @@ paths:
                                           type: string
                                       startedAt:
                                         type: number
+                                      previewStartedAt:
+                                        type: number
                                       completedAt:
                                         type: number
                                       confirmationDecision:
@@ -18665,6 +18669,56 @@ paths:
                 type: object
         "404":
           description: No job matches the given id.
+  /v1/migrations/preflight-from-gcs:
+    post:
+      operationId: migrations_preflightfromgcs_post
+      summary: Dry-run import analysis from a signed GCS URL
+      description:
+        Fetch a .vbundle archive from a signed GCS download URL and return a preflight report — what would change
+        if the bundle were imported — without writing anything to disk. Enables `vellum teleport --dry-run` against
+        local and docker targets.
+      tags:
+        - migrations
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                bundle_url:
+                  type: string
+                  format: uri
+                  description: Signed GCS GET URL for the bundle.
+              required:
+                - bundle_url
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  can_import:
+                    type: boolean
+                  summary:
+                    type: object
+                    properties: {}
+                    additionalProperties: {}
+                  files:
+                    type: array
+                    items: {}
+                  conflicts:
+                    type: array
+                    items: {}
+                  validation:
+                    type: object
+                    properties: {}
+                    additionalProperties: {}
+                required:
+                  - can_import
+                additionalProperties: false
   /v1/migrations/validate:
     post:
       operationId: migrations_validate_post

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.10.3-dev.202606290949.0cf8e08",
+  "version": "0.10.3-dev.202606291342.c7a83ea",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/__tests__/actor-token-service.test.ts

@@ -37,7 +37,6 @@ mock.module("../contacts/guardian-delivery-reader.js", () => ({
     fakeGuardianDelivery ? [fakeGuardianDelivery] : null,
   guardianForChannel: (list: { principalId?: string | null }[]) => list[0],
   invalidateGuardianDeliveryCache: () => {},
-  onContactChange: () => {},
 }));
 
 import { getDb } from "../persistence/db-connection.js";

package/src/__tests__/background-workers-disk-pressure.test.ts

@@ -116,6 +116,10 @@ mock.module("../persistence/conversation-crud.js", () => ({
   deleteMessageById: mock(() => {}),
   clearAll: mock(async () => ({ conversations: 0, messages: 0 })),
   deleteConversation: mock(() => ({ memoryIds: [] })),
+  deleteConversationGently: mock(async () => ({
+    segmentIds: [],
+    deletedSummaryIds: [],
+  })),
   deleteLastExchange: mock(() => 0),
   findAnalysisConversationFor: mock(() => null),
   findMostRecentRetrospectiveFor: mock(() => null),

package/src/__tests__/btw-routes.test.ts

@@ -103,7 +103,6 @@ mock.module("../daemon/conversation-store.js", () => ({
   conversationEntries: () => [][Symbol.iterator](),
   conversationIds: () => [][Symbol.iterator](),
   getConversationMap: () => new Map(),
-  initConversationLifecycle: () => {},
   registerConversationFactory: () => {},
   getOrCreateActiveConversation: mockGetOrCreateConversation,
   getConversationOptions: () => undefined,

package/src/__tests__/config-watcher-skill-reseed.test.ts

@@ -34,6 +34,11 @@ interface CapturedWatcher {
 const capturedWatchers: CapturedWatcher[] = [];
 let recursiveWatchAvailable = false;
 
+// The skills watcher reacts by calling these directly; count the calls so tests
+// can assert dispatch without driving real eviction or skill-memory reseeding.
+let evictCalls = 0;
+let skillsChangedCalls = 0;
+
 mock.module("node:fs", () => {
   // eslint-disable-next-line @typescript-eslint/no-require-imports
   const actual = require("node:fs");
@@ -114,6 +119,29 @@ mock.module("../signals/user-message.js", () => ({
   handleUserMessageSignal: () => {},
 }));
 
+mock.module("../daemon/conversation-store.js", () => ({
+  evictConversationsForReload: () => {
+    evictCalls++;
+  },
+}));
+
+mock.module("../daemon/skill-memory-refresh.js", () => ({
+  refreshSkillCapabilityMemories: () => {
+    skillsChangedCalls++;
+  },
+}));
+
+mock.module("../runtime/sync/resource-sync-events.js", () => ({
+  publishIdentityChanged: () => {},
+  publishConfigChanged: () => {},
+  publishSoundsConfigUpdated: () => {},
+  publishAvatarChanged: () => {},
+}));
+
+mock.module("../platform/sync-identity.js", () => ({
+  syncIdentityNameToPlatform: () => {},
+}));
+
 const { ConfigWatcher } = await import("../daemon/config-watcher.js");
 
 function findWatcher(dir: string): CapturedWatcher | undefined {
@@ -130,8 +158,6 @@ function capturedWatcherCount(dir: string): number {
 
 describe("ConfigWatcher skills watcher reseeding", () => {
   let watcher: InstanceType<typeof ConfigWatcher>;
-  let evictCalls: number;
-  let skillsChangedCalls: number;
 
   beforeEach(() => {
     capturedWatchers.length = 0;
@@ -152,18 +178,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
   });
 
   test("watched skill file changes evict conversations and refresh skill memories", async () => {
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     const skillsWatcher = findWatcher(SKILLS_DIR);
     expect(skillsWatcher).toBeDefined();
@@ -178,18 +193,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
   test("recursive watcher ignores skipped dependency and staging paths", async () => {
     recursiveWatchAvailable = true;
 
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     const skillsWatcher = findWatcher(SKILLS_DIR);
     expect(skillsWatcher).toBeDefined();
@@ -218,18 +222,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
   test("recursive watcher reloads skill memories for build output changes", async () => {
     recursiveWatchAvailable = true;
 
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     const skillsWatcher = findWatcher(SKILLS_DIR);
     expect(skillsWatcher).toBeDefined();
@@ -242,18 +235,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
   });
 
   test("coalesces multiple skill file changes into one catalog refresh", async () => {
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     const skillsWatcher = findWatcher(SKILLS_DIR);
     expect(skillsWatcher).toBeDefined();
@@ -271,18 +253,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
     const referencesDir = join(SKILLS_DIR, "example-skill", "references");
     mkdirSync(referencesDir, { recursive: true });
 
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     const referencesWatcher = findWatcher(referencesDir);
     expect(referencesWatcher).toBeDefined();
@@ -305,18 +276,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
     mkdirSync(stagedSkillDir, { recursive: true });
     mkdirSync(referencesDir, { recursive: true });
 
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     expect(findWatcher(nodeModulesDir)).toBeUndefined();
     expect(findWatcher(dependencyDir)).toBeUndefined();
@@ -353,18 +313,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
     mkdirSync(distDir, { recursive: true });
     mkdirSync(buildDir, { recursive: true });
 
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     const distWatcher = findWatcher(distDir);
     const buildWatcher = findWatcher(buildDir);
@@ -392,18 +341,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
     const generatedDir = join(toolsDir, "generated");
     mkdirSync(skillDir, { recursive: true });
 
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     const skillWatcher = findWatcher(skillDir);
     expect(skillWatcher).toBeDefined();
@@ -424,18 +362,7 @@ describe("ConfigWatcher skills watcher reseeding", () => {
     const deepDir = join(referencesDir, "deep");
     mkdirSync(deepDir, { recursive: true });
 
-    watcher.start(
-      () => {
-        evictCalls++;
-      },
-      undefined,
-      undefined,
-      undefined,
-      undefined,
-      () => {
-        skillsChangedCalls++;
-      },
-    );
+    watcher.start();
 
     expect(findWatcher(referencesDir)).toBeDefined();
     expect(findWatcher(deepDir)).toBeDefined();

package/src/__tests__/config-watcher.test.ts

@@ -142,6 +142,35 @@ mock.module("../signals/cancel.js", () => ({
   handleCancelSignal: () => {},
 }));
 
+// The watcher reacts to file changes by calling these directly; capture the
+// reaction counts so tests can assert dispatch without driving real eviction
+// or client broadcasts.
+let evictCallCount = 0;
+let identityCallCount = 0;
+
+mock.module("../daemon/conversation-store.js", () => ({
+  evictConversationsForReload: () => {
+    evictCallCount++;
+  },
+}));
+
+mock.module("../runtime/sync/resource-sync-events.js", () => ({
+  publishIdentityChanged: () => {
+    identityCallCount++;
+  },
+  publishConfigChanged: () => {},
+  publishSoundsConfigUpdated: () => {},
+  publishAvatarChanged: () => {},
+}));
+
+mock.module("../daemon/skill-memory-refresh.js", () => ({
+  refreshSkillCapabilityMemories: () => {},
+}));
+
+mock.module("../platform/sync-identity.js", () => ({
+  syncIdentityNameToPlatform: () => {},
+}));
+
 // Import after mocks are set up
 const { ConfigWatcher } = await import("../daemon/config-watcher.js");
 
@@ -206,16 +235,13 @@ beforeAll(() => {
 });
 
 let watcher: InstanceType<typeof ConfigWatcher>;
-let evictCallCount: number;
-const onConversationEvict = () => {
-  evictCallCount++;
-};
 
 beforeEach(() => {
   capturedWatchers.length = 0;
   capturedFileWatches.length = 0;
   inoMap.clear();
   evictCallCount = 0;
+  identityCallCount = 0;
   watcher = new ConfigWatcher(undefined, TEST_DEBOUNCE_MS);
 });
 
@@ -224,32 +250,29 @@ afterEach(() => {
 });
 
 describe("ConfigWatcher workspace file handlers", () => {
-  test("SOUL.md change triggers onConversationEvict", async () => {
-    watcher.start(onConversationEvict);
+  test("SOUL.md change evicts conversations", async () => {
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "SOUL.md");
     await new Promise((r) => setTimeout(r, WAIT_MS));
     expect(evictCallCount).toBe(1);
   });
 
-  test("IDENTITY.md change triggers onConversationEvict", async () => {
-    watcher.start(onConversationEvict);
+  test("IDENTITY.md change evicts conversations", async () => {
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "IDENTITY.md");
     await new Promise((r) => setTimeout(r, WAIT_MS));
     expect(evictCallCount).toBe(1);
   });
 
-  test("IDENTITY.md change triggers onIdentityChanged", async () => {
-    let identityCallCount = 0;
-    watcher.start(onConversationEvict, () => {
-      identityCallCount += 1;
-    });
+  test("IDENTITY.md change broadcasts the identity update", async () => {
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "IDENTITY.md");
     await new Promise((r) => setTimeout(r, WAIT_MS));
     expect(identityCallCount).toBe(1);
   });
 
   test("unregistered workspace files are not subscribed (only the registered handler set is)", () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     // Per-file watching only registers config.json, SOUL.md, IDENTITY.md.
     // The whole workspace dir must not be watched either — that was the
     // ENXIO-on-Unix-sockets bug.
@@ -263,16 +286,16 @@ describe("ConfigWatcher workspace file handlers", () => {
       refreshCalled = true;
       return false;
     };
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "config.json");
     await new Promise((r) => setTimeout(r, WAIT_MS));
     expect(refreshCalled).toBe(true);
     expect(evictCallCount).toBe(0);
   });
 
-  test("config.json change triggers onConversationEvict when config actually changed", async () => {
+  test("config.json change evicts conversations when config actually changed", async () => {
     watcher.refreshConfigFromSources = async () => true;
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "config.json");
     await new Promise((r) => setTimeout(r, WAIT_MS));
     expect(evictCallCount).toBe(1);
@@ -285,7 +308,7 @@ describe("ConfigWatcher workspace file handlers", () => {
       return true;
     };
     watcher.suppressConfigReload = true;
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "config.json");
     await new Promise((r) => setTimeout(r, WAIT_MS));
     expect(refreshCalled).toBe(false);
@@ -295,7 +318,7 @@ describe("ConfigWatcher workspace file handlers", () => {
 
 describe("ConfigWatcher watcher lifecycle", () => {
   test("start does NOT subscribe to /workspace as a directory (regression: ENXIO on Unix sockets)", () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     expect(findWatcher(WORKSPACE_DIR)).toBeUndefined();
     // The per-file watchFile subscriptions are tracked separately from
     // capturedWatchers; assert the expected ones are present.
@@ -305,7 +328,7 @@ describe("ConfigWatcher watcher lifecycle", () => {
   });
 
   test("stop cancels pending debounce work, no eviction fires after", async () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "SOUL.md");
     watcher.stop();
     await new Promise((r) => setTimeout(r, WAIT_MS));
@@ -313,7 +336,7 @@ describe("ConfigWatcher watcher lifecycle", () => {
   });
 
   test("multiple rapid changes to the same workspace file are coalesced to one eviction", async () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "SOUL.md");
     simulateFileChange(WORKSPACE_DIR, "SOUL.md");
     simulateFileChange(WORKSPACE_DIR, "SOUL.md");
@@ -322,7 +345,7 @@ describe("ConfigWatcher watcher lifecycle", () => {
   });
 
   test("changes to different files each trigger their own handler", async () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(WORKSPACE_DIR, "SOUL.md");
     simulateFileChange(WORKSPACE_DIR, "IDENTITY.md");
     await new Promise((r) => setTimeout(r, WAIT_MS));
@@ -335,7 +358,7 @@ describe("ConfigWatcher per-file polling listener", () => {
     // Simulates `writeFile(tmp) + rename(tmp, target)`: the inode at the
     // path is replaced. The listener should fire once per debounced window.
     watcher.refreshConfigFromSources = async () => true;
-    watcher.start(onConversationEvict);
+    watcher.start();
     const fw = findFileWatch(join(WORKSPACE_DIR, "config.json"));
     expect(fw).toBeDefined();
     fw!.listener({ ino: 2, mtimeMs: 1_001 }, { ino: 1, mtimeMs: 1_000 });
@@ -345,7 +368,7 @@ describe("ConfigWatcher per-file polling listener", () => {
 
   test("mtime change is treated as a file change (in-place edit)", async () => {
     watcher.refreshConfigFromSources = async () => true;
-    watcher.start(onConversationEvict);
+    watcher.start();
     const fw = findFileWatch(join(WORKSPACE_DIR, "config.json"));
     expect(fw).toBeDefined();
     // Same inode, different mtime — what an `echo >> file` produces.
@@ -358,7 +381,7 @@ describe("ConfigWatcher per-file polling listener", () => {
     // fs.watchFile sometimes invokes the listener with curr === prev
     // (e.g. on initial subscription); the watcher must not re-fire in that case.
     watcher.refreshConfigFromSources = async () => true;
-    watcher.start(onConversationEvict);
+    watcher.start();
     const fw = findFileWatch(join(WORKSPACE_DIR, "config.json"));
     expect(fw).toBeDefined();
     fw!.listener({ ino: 1, mtimeMs: 1_000 }, { ino: 1, mtimeMs: 1_000 });
@@ -370,8 +393,8 @@ describe("ConfigWatcher per-file polling listener", () => {
 describe("ConfigWatcher users directory watcher", () => {
   const USERS_DIR = join(WORKSPACE_DIR, "users");
 
-  test("editing users/<slug>.md triggers onConversationEvict", async () => {
-    watcher.start(onConversationEvict);
+  test("editing users/<slug>.md evicts conversations", async () => {
+    watcher.start();
     simulateFileChange(USERS_DIR, "alice.md");
 
     await new Promise((r) => setTimeout(r, WAIT_MS));
@@ -379,7 +402,7 @@ describe("ConfigWatcher users directory watcher", () => {
   });
 
   test("non-.md files in users/ do NOT trigger eviction", async () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(USERS_DIR, "alice.json");
     simulateFileChange(USERS_DIR, "notes.txt");
     simulateFileChange(USERS_DIR, "README");
@@ -389,7 +412,7 @@ describe("ConfigWatcher users directory watcher", () => {
   });
 
   test("null filename in users/ does not trigger eviction", async () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     const usersWatcher = findWatcher(USERS_DIR);
     expect(usersWatcher).toBeDefined();
     usersWatcher!.callback("change", null);
@@ -399,7 +422,7 @@ describe("ConfigWatcher users directory watcher", () => {
   });
 
   test("multiple rapid changes to the same persona file are debounced", async () => {
-    watcher.start(onConversationEvict);
+    watcher.start();
     simulateFileChange(USERS_DIR, "bob.md");
     simulateFileChange(USERS_DIR, "bob.md");
     simulateFileChange(USERS_DIR, "bob.md");

package/src/__tests__/secret-routes-platform-proxy.test.ts

@@ -129,13 +129,20 @@ mock.module("../daemon/memory-v2-startup.js", () => ({
   maybeReseedCapabilitiesAfterManagedCredential: async () => {},
 }));
 
+// secret-routes evicts conversations after a credential change so the next turn
+// rebuilds against the new providers; count the calls to assert that happens.
+mock.module("../daemon/conversation-store.js", () => ({
+  evictConversationsForReload: () => {
+    providerRefreshCalls++;
+  },
+}));
+
 import {
   getProviderRoutingSource,
   initializeProviders,
   listProviders,
 } from "../providers/registry.js";
 import { ROUTES } from "../runtime/routes/secret-routes.js";
-import { registerSecretsDeps } from "../runtime/routes/secrets-deps.js";
 
 const addRoute = ROUTES.find(
   (r) => r.method === "POST" && r.endpoint === "secrets",
@@ -177,11 +184,6 @@ describe("secret routes managed proxy registry sync", () => {
     lastGeminiConstructorOpts = null;
     platformBaseUrlOverride = undefined;
     providerRefreshCalls = 0;
-    registerSecretsDeps({
-      onProviderCredentialsChanged: () => {
-        providerRefreshCalls++;
-      },
-    });
     await initializeProviders(mockConfig);
   });
 

package/src/__tests__/tool-preview-lifecycle.test.ts

@@ -256,6 +256,72 @@ describe("tool preview lifecycle", () => {
       expect((emitted as any).conversationId).toBe("test-session-id");
     });
 
+    test("stamps previewStartedAt on the event and stores it in state", () => {
+      const collector = createEventCollector();
+      const deps = createMockDeps({
+        onEvent: collector.onEvent,
+        ctx: {
+          ...createMockDeps().ctx,
+          emitActivityState: collector.emitActivityState,
+        } as unknown as EventHandlerDeps["ctx"],
+      });
+
+      const before = Date.now();
+      handleToolUsePreviewStart(state, deps, {
+        type: "tool_use_preview_start",
+        toolUseId: "toolu_preview_ts",
+        toolName: "bash",
+      });
+      const after = Date.now();
+
+      const emitted = collector.events[0] as { previewStartedAt?: number };
+      expect(typeof emitted.previewStartedAt).toBe("number");
+      expect(emitted.previewStartedAt!).toBeGreaterThanOrEqual(before);
+      expect(emitted.previewStartedAt!).toBeLessThanOrEqual(after);
+      // The same first-byte timestamp is retained in state so tool_use_start
+      // can carry it through.
+      expect(state.toolPreviewStartedAt.get("toolu_preview_ts")).toBe(
+        emitted.previewStartedAt,
+      );
+    });
+
+    test("handleToolUse carries the stored previewStartedAt onto tool_use_start", () => {
+      const collector = createEventCollector();
+      const deps = createMockDeps({
+        onEvent: collector.onEvent,
+        ctx: {
+          ...createMockDeps().ctx,
+          emitActivityState: collector.emitActivityState,
+        } as unknown as EventHandlerDeps["ctx"],
+      });
+
+      // GIVEN a preview was recognized first
+      handleToolUsePreviewStart(state, deps, {
+        type: "tool_use_preview_start",
+        toolUseId: "toolu_carry",
+        toolName: "bash",
+      });
+      const previewStartedAt = state.toolPreviewStartedAt.get("toolu_carry");
+
+      // WHEN the tool actually begins executing
+      handleToolUse(state, deps, {
+        type: "tool_use",
+        id: "toolu_carry",
+        name: "bash",
+        input: { command: "ls" },
+      });
+
+      // THEN the tool_use_start event carries the first-byte anchor alongside
+      // its own (later) execution startedAt
+      const toolUseStart = collector.events.find(
+        (e) => e.type === "tool_use_start",
+      ) as { previewStartedAt?: number; startedAt?: number };
+      expect(toolUseStart).toBeDefined();
+      expect(toolUseStart.previewStartedAt).toBe(previewStartedAt);
+      expect(typeof toolUseStart.startedAt).toBe("number");
+      expect(toolUseStart.startedAt!).toBeGreaterThanOrEqual(previewStartedAt!);
+    });
+
     test("emits activity state with tool_running phase and preview_start reason", () => {
       const collector = createEventCollector();
       const deps = createMockDeps({