@vellumai/assistant 0.10.4 → 0.10.5-dev.202607022329.d89bf2f

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (866) hide show
  1. package/ARCHITECTURE.md +94 -91
  2. package/Dockerfile +5 -16
  3. package/README.md +7 -10
  4. package/bun.lock +0 -4
  5. package/docs/architecture/security.md +20 -20
  6. package/docs/stt-provider-onboarding.md +4 -5
  7. package/docs/trusted-contact-access.md +7 -7
  8. package/eslint-rules/cli-no-daemon-internals.js +4 -0
  9. package/eslint.config.mjs +7 -1
  10. package/knip.json +0 -1
  11. package/node_modules/@vellumai/gateway-client/src/__tests__/contact-read-contracts.test.ts +36 -0
  12. package/node_modules/@vellumai/gateway-client/src/__tests__/invite-contract.test.ts +233 -0
  13. package/node_modules/@vellumai/gateway-client/src/__tests__/trust-verdict-contract.test.ts +40 -0
  14. package/node_modules/@vellumai/gateway-client/src/gateway-ipc-contracts.ts +20 -8
  15. package/node_modules/@vellumai/gateway-client/src/inbound-contract.ts +10 -0
  16. package/node_modules/@vellumai/gateway-client/src/index.ts +33 -0
  17. package/node_modules/@vellumai/gateway-client/src/invite-contract.ts +216 -0
  18. package/node_modules/@vellumai/gateway-client/src/outbound-contract.ts +91 -0
  19. package/node_modules/@vellumai/gateway-client/src/trust-verdict-contract.ts +39 -3
  20. package/node_modules/@vellumai/service-contracts/src/__tests__/ingress.test.ts +0 -8
  21. package/node_modules/@vellumai/service-contracts/src/__tests__/package-boundary.test.ts +1 -5
  22. package/node_modules/@vellumai/service-contracts/src/twilio-ingress.ts +3 -14
  23. package/openapi.yaml +1073 -225
  24. package/package.json +1 -4
  25. package/scripts/test.sh +35 -13
  26. package/src/__tests__/access-request-seed-content-blocks.test.ts +60 -4
  27. package/src/__tests__/acp-session.test.ts +4 -1
  28. package/src/__tests__/actor-trust-resolver-address-fallback.test.ts +0 -6
  29. package/src/__tests__/add-message-preassigned-id.test.ts +56 -0
  30. package/src/__tests__/agent-loop-set-system-prompt.test.ts +139 -0
  31. package/src/__tests__/app-conversation-ids-backfill.test.ts +3 -0
  32. package/src/__tests__/app-source-watcher.test.ts +11 -0
  33. package/src/__tests__/approval-interception-trust-gates.test.ts +148 -3
  34. package/src/__tests__/assistant-attachments.test.ts +62 -4
  35. package/src/__tests__/assistant-id-boundary-guard.test.ts +0 -1
  36. package/src/__tests__/attachments-store-heic-normalize.test.ts +230 -0
  37. package/src/__tests__/attachments-store.test.ts +3 -0
  38. package/src/__tests__/background-shell-bash.test.ts +34 -0
  39. package/src/__tests__/background-shell-host-bash.test.ts +12 -0
  40. package/src/__tests__/background-tool-registry.test.ts +97 -0
  41. package/src/__tests__/background-tool-routes.test.ts +72 -1
  42. package/src/__tests__/background-workers-disk-pressure.test.ts +2 -1
  43. package/src/__tests__/btw-routes.test.ts +57 -3
  44. package/src/__tests__/call-controller.test.ts +474 -84
  45. package/src/__tests__/call-domain.test.ts +48 -1
  46. package/src/__tests__/call-pointer-messages.test.ts +57 -19
  47. package/src/__tests__/call-pointer-no-hardcoded-copy.guard.test.ts +2 -6
  48. package/src/__tests__/call-routes-http.test.ts +15 -14
  49. package/src/__tests__/call-setup-flow-invite.test.ts +568 -0
  50. package/src/__tests__/call-setup-flow-midcall-trust.test.ts +231 -0
  51. package/src/__tests__/call-setup-flow-name-capture.test.ts +754 -0
  52. package/src/__tests__/call-setup-flow-verification.test.ts +925 -0
  53. package/src/__tests__/call-setup-flow.test.ts +311 -0
  54. package/src/__tests__/cancel-resolves-conversation-key.test.ts +0 -1
  55. package/src/__tests__/channel-guardian.test.ts +4 -7
  56. package/src/__tests__/channel-readiness-service.test.ts +0 -6
  57. package/src/__tests__/channel-readiness-slack-remote.test.ts +0 -4
  58. package/src/__tests__/channel-retry-sweep.test.ts +76 -64
  59. package/src/__tests__/channel-setup-panel-ack.test.ts +184 -0
  60. package/src/__tests__/clear-all-lexical.test.ts +90 -0
  61. package/src/__tests__/compactor-media-strip.test.ts +177 -0
  62. package/src/__tests__/config-loader-backfill.test.ts +5 -5
  63. package/src/__tests__/config-schema.test.ts +17 -0
  64. package/src/__tests__/contact-store-interaction-info.test.ts +27 -70
  65. package/src/__tests__/contacts-relay-reads.test.ts +188 -23
  66. package/src/__tests__/contacts-tools.test.ts +42 -1
  67. package/src/__tests__/contacts-write.test.ts +181 -0
  68. package/src/__tests__/context-search-conversations-source.test.ts +220 -81
  69. package/src/__tests__/conversation-agent-loop-disk-pressure.test.ts +1 -0
  70. package/src/__tests__/conversation-agent-loop-inference-profile.test.ts +1 -0
  71. package/src/__tests__/conversation-agent-loop-overflow.test.ts +1 -0
  72. package/src/__tests__/conversation-agent-loop.test.ts +39 -0
  73. package/src/__tests__/conversation-analysis-routes.test.ts +1 -1
  74. package/src/__tests__/conversation-app-control-instantiation.test.ts +2 -0
  75. package/src/__tests__/conversation-clear-safety.test.ts +0 -1
  76. package/src/__tests__/conversation-crud-enabled-plugins.test.ts +60 -0
  77. package/src/__tests__/conversation-delete-schedule-cleanup.test.ts +0 -1
  78. package/src/__tests__/conversation-disk-view.test.ts +1 -0
  79. package/src/__tests__/conversation-enabledplugins-route.test.ts +184 -0
  80. package/src/__tests__/conversation-error.test.ts +0 -18
  81. package/src/__tests__/conversation-fork-crud.test.ts +67 -0
  82. package/src/__tests__/conversation-history-web-search.test.ts +7 -137
  83. package/src/__tests__/conversation-initial-prompt.test.ts +110 -0
  84. package/src/__tests__/conversation-loop-db-lock-resilience.test.ts +191 -0
  85. package/src/__tests__/conversation-process-callsite.test.ts +37 -0
  86. package/src/__tests__/conversation-queue.test.ts +149 -0
  87. package/src/__tests__/conversation-routes-enabled-plugins.test.ts +392 -0
  88. package/src/__tests__/conversation-routes-guardian-reply.test.ts +84 -0
  89. package/src/__tests__/conversation-routes-hidden-queue.test.ts +407 -0
  90. package/src/__tests__/conversation-runtime-assembly.test.ts +36 -16
  91. package/src/__tests__/conversation-skill-tools.test.ts +73 -0
  92. package/src/__tests__/conversation-wipe.test.ts +20 -5
  93. package/src/__tests__/credential-prompt-route.test.ts +69 -0
  94. package/src/__tests__/credential-security-invariants.test.ts +1 -3
  95. package/src/__tests__/db-drop-messages-fts.test.ts +115 -0
  96. package/src/__tests__/deterministic-verification-control-plane.test.ts +1 -62
  97. package/src/__tests__/edit-propagation.test.ts +56 -2
  98. package/src/__tests__/empty-state-greeting-cache.test.ts +9 -0
  99. package/src/__tests__/gateway-only-enforcement.test.ts +15 -110
  100. package/src/__tests__/guardian-expiry-notifier.test.ts +1 -0
  101. package/src/__tests__/guardian-question-mode.test.ts +57 -0
  102. package/src/__tests__/guardian-verification-voice-binding.test.ts +1 -1
  103. package/src/__tests__/guardian-wait-controller.test.ts +619 -0
  104. package/src/__tests__/handlers-skills-memory-v2-reseed.test.ts +33 -2
  105. package/src/__tests__/heic-fixture.ts +55 -0
  106. package/src/__tests__/helpers/seed-contact-channel.ts +0 -2
  107. package/src/__tests__/http-conversation-lineage.test.ts +6 -1
  108. package/src/__tests__/image-conversion.test.ts +170 -0
  109. package/src/__tests__/inbound-invite-redemption.test.ts +72 -341
  110. package/src/__tests__/introduction-card-resolver.test.ts +354 -0
  111. package/src/__tests__/invite-redeemed-ipc.test.ts +97 -0
  112. package/src/__tests__/invite-routes-http.test.ts +246 -420
  113. package/src/__tests__/job-handler-registration-guard.test.ts +104 -0
  114. package/src/__tests__/lexical-index-dual-write.test.ts +426 -0
  115. package/src/__tests__/lifecycle-memory-v2-seed.test.ts +2 -2
  116. package/src/__tests__/list-messages-attachments.test.ts +159 -0
  117. package/src/__tests__/list-messages-background-tool-completion.test.ts +141 -0
  118. package/src/__tests__/list-messages-queued.test.ts +25 -0
  119. package/src/__tests__/managed-store.test.ts +129 -1
  120. package/src/__tests__/media-stream-audio-transcode.test.ts +113 -0
  121. package/src/__tests__/media-stream-output.test.ts +350 -19
  122. package/src/__tests__/media-stream-server-integration.test.ts +943 -169
  123. package/src/__tests__/media-stream-stt-session.test.ts +498 -1
  124. package/src/__tests__/memory-jobs-worker-lanes.test.ts +2 -2
  125. package/src/__tests__/model-intents.test.ts +1 -1
  126. package/src/__tests__/mtime-cache.test.ts +19 -0
  127. package/src/__tests__/non-member-access-request.test.ts +349 -3
  128. package/src/__tests__/notification-decision-fallback.test.ts +104 -8
  129. package/src/__tests__/notification-decision-strategy.test.ts +57 -8
  130. package/src/__tests__/onboarding-template-contract.test.ts +27 -43
  131. package/src/__tests__/openai-provider.test.ts +33 -0
  132. package/src/__tests__/openai-responses-provider.test.ts +40 -0
  133. package/src/__tests__/persistence-layering-guard.test.ts +29 -20
  134. package/src/__tests__/persona-resolver.test.ts +56 -2
  135. package/src/__tests__/personal-memory-auth-bypass.test.ts +62 -0
  136. package/src/__tests__/phone.test.ts +1 -15
  137. package/src/__tests__/plugin-bootstrap.test.ts +25 -196
  138. package/src/__tests__/plugin-disabled-state.test.ts +33 -0
  139. package/src/__tests__/plugin-effective-enabled-set.test.ts +227 -0
  140. package/src/__tests__/plugin-event-hub-facade.test.ts +323 -0
  141. package/src/__tests__/plugin-import-boundary-guard.test.ts +156 -42
  142. package/src/__tests__/plugin-injector-contribution.test.ts +4 -20
  143. package/src/__tests__/plugin-pipeline.test.ts +63 -1
  144. package/src/__tests__/plugin-route-contribution.test.ts +62 -115
  145. package/src/__tests__/plugin-tool-contribution.test.ts +0 -22
  146. package/src/__tests__/plugin-types.test.ts +0 -1
  147. package/src/__tests__/pointer-conversation-trust.test.ts +38 -6
  148. package/src/__tests__/pre-model-call-sanitize.test.ts +1 -1
  149. package/src/__tests__/prune-old-tool-invocations-job.test.ts +97 -0
  150. package/src/__tests__/public-ingress-urls.test.ts +0 -48
  151. package/src/__tests__/qdrant-collection-migration.test.ts +145 -2
  152. package/src/__tests__/reaction-intercept-member-verdict-warm.test.ts +0 -1
  153. package/src/__tests__/resolve-trust-class.test.ts +28 -10
  154. package/src/__tests__/scaffold-managed-skill-tool.test.ts +137 -0
  155. package/src/__tests__/schedule-retry.test.ts +38 -14
  156. package/src/__tests__/schedule-routes-workflow-validation.test.ts +3 -3
  157. package/src/__tests__/schedule-routes.test.ts +14 -6
  158. package/src/__tests__/schedule-store.test.ts +3 -1
  159. package/src/__tests__/scheduler-disk-pressure.test.ts +17 -6
  160. package/src/__tests__/scheduler-recurrence.test.ts +57 -107
  161. package/src/__tests__/scheduler-reuse-conversation.test.ts +51 -46
  162. package/src/__tests__/scheduler-wake.test.ts +13 -23
  163. package/src/__tests__/scheduler-worker-standdown.test.ts +220 -0
  164. package/src/__tests__/secret-routes-platform-proxy.test.ts +1 -1
  165. package/src/__tests__/shell-observability.test.ts +1 -0
  166. package/src/__tests__/skill-boundary-guard.test.ts +3 -4
  167. package/src/__tests__/skill-load-plugin-scope.test.ts +238 -0
  168. package/src/__tests__/skill-projection-feature-flag.test.ts +2 -0
  169. package/src/__tests__/skill-script-runner-host.test.ts +53 -0
  170. package/src/__tests__/skill-script-runner-sandbox.test.ts +5 -2
  171. package/src/__tests__/skill-tool-factory.test.ts +73 -1
  172. package/src/__tests__/slack-app-setup-skill-regression.test.ts +37 -14
  173. package/src/__tests__/slack-inbound-verification.test.ts +36 -0
  174. package/src/__tests__/slack-notification-approval-card.test.ts +89 -2
  175. package/src/__tests__/slack-reaction-canonical-approval.test.ts +51 -1
  176. package/src/__tests__/stt-hints.test.ts +2 -256
  177. package/src/__tests__/subagent-allowlist-validation.test.ts +47 -0
  178. package/src/__tests__/subagent-call-site-routing.test.ts +72 -0
  179. package/src/__tests__/subagent-fork-notifications.test.ts +14 -2
  180. package/src/__tests__/subagent-persistence.test.ts +122 -0
  181. package/src/__tests__/subagent-spawn-and-await.test.ts +1 -0
  182. package/src/__tests__/subagent-terminal-message.test.ts +99 -0
  183. package/src/__tests__/subagent-tool-gate-mode.test.ts +78 -1
  184. package/src/__tests__/system-prompt.test.ts +17 -118
  185. package/src/__tests__/task-scheduler.test.ts +68 -89
  186. package/src/__tests__/telephony-credential-preflight.test.ts +312 -0
  187. package/src/__tests__/telephony-tts-guard.test.ts +538 -0
  188. package/src/__tests__/title-generate-hook.test.ts +16 -0
  189. package/src/__tests__/tool-approval-handler.test.ts +87 -1
  190. package/src/__tests__/tool-approval-seed-content-blocks.test.ts +45 -20
  191. package/src/__tests__/tool-grant-request-escalation.test.ts +39 -0
  192. package/src/__tests__/trust-context-guards.test.ts +21 -10
  193. package/src/__tests__/trusted-contact-multichannel.test.ts +4 -0
  194. package/src/__tests__/twilio-provider.test.ts +17 -17
  195. package/src/__tests__/twilio-routes-twiml.test.ts +6 -543
  196. package/src/__tests__/twilio-routes.test.ts +257 -387
  197. package/src/__tests__/twilio-validation.test.ts +1 -1
  198. package/src/__tests__/unified-turn-context-client-os.test.ts +45 -0
  199. package/src/__tests__/usage-cache-backfill-migration.test.ts +5 -0
  200. package/src/__tests__/voice-approval-resolver-relay.test.ts +150 -0
  201. package/src/__tests__/voice-ingress-preflight.test.ts +61 -0
  202. package/src/__tests__/voice-quality.test.ts +2 -2
  203. package/src/__tests__/voice-scoped-grant-consumer.test.ts +1 -7
  204. package/src/__tests__/voice-session-bridge-processing-wait.test.ts +27 -0
  205. package/src/__tests__/voice-session-bridge.test.ts +1 -10
  206. package/src/__tests__/workspace-git-service.test.ts +1 -1
  207. package/src/__tests__/workspace-migration-013-repair-conversation-disk-view.test.ts +1 -0
  208. package/src/__tests__/workspace-migration-118-seed-now-md.test.ts +120 -0
  209. package/src/__tests__/workspace-migration-120-revise-onboarding-threads.test.ts +175 -0
  210. package/src/__tests__/workspace-migration-121-seed-default-user-guardrails.test.ts +118 -0
  211. package/src/__tests__/workspace-migration-122-relocate-default-user-boundary.test.ts +119 -0
  212. package/src/__tests__/workspace-migration-123-swap-quality-profile-to-fable.test.ts +191 -0
  213. package/src/__tests__/workspace-migration-backfill-installation-id.test.ts +235 -241
  214. package/src/acp/__tests__/prepare-agent-env.test.ts +0 -97
  215. package/src/acp/__tests__/session-manager-persistence.test.ts +2 -0
  216. package/src/acp/__tests__/session-manager-resume.test.ts +8 -0
  217. package/src/acp/__tests__/session-manager-usage.test.ts +6 -0
  218. package/src/acp/__tests__/session-manager.test.ts +6 -0
  219. package/src/acp/agent-process.test.ts +116 -0
  220. package/src/acp/agent-process.ts +71 -0
  221. package/src/acp/auto-install.ts +12 -8
  222. package/src/acp/failure-error.test.ts +109 -0
  223. package/src/acp/failure-error.ts +111 -0
  224. package/src/acp/prepare-agent-env.ts +0 -12
  225. package/src/acp/resolve-agent.test.ts +6 -45
  226. package/src/acp/resolve-agent.ts +2 -4
  227. package/src/acp/session-manager.test.ts +312 -0
  228. package/src/acp/session-manager.ts +102 -46
  229. package/src/agent/ax-tree-compaction.test.ts +4 -1
  230. package/src/agent/image-optimize.ts +17 -127
  231. package/src/agent/loop.ts +45 -192
  232. package/src/api/events/background-tool-completed.test.ts +51 -0
  233. package/src/api/events/background-tool-completed.ts +29 -0
  234. package/src/api/events/background-tool-started.test.ts +36 -0
  235. package/src/api/events/background-tool-started.ts +28 -0
  236. package/src/api/events/conversation-error.ts +0 -1
  237. package/src/api/events/open-panel.ts +33 -0
  238. package/src/api/events/subagent-status-changed.ts +4 -1
  239. package/src/api/index.ts +19 -0
  240. package/src/api/responses/conversation-message.ts +34 -0
  241. package/src/approvals/guardian-decision-primitive.ts +74 -24
  242. package/src/approvals/guardian-request-resolvers.ts +450 -122
  243. package/src/apps/app-store.ts +1 -0
  244. package/src/apps/shared-app-links-store.ts +1 -0
  245. package/src/avatar/identity-avatar.ts +3 -7
  246. package/src/background-wake/wake-intent-hooks.test.ts +1 -1
  247. package/src/calls/__tests__/fish-audio-client.test.ts +73 -0
  248. package/src/calls/__tests__/gateway-invite-reader.test.ts +170 -0
  249. package/src/calls/__tests__/relay-setup-router.test.ts +126 -102
  250. package/src/calls/call-controller.ts +134 -48
  251. package/src/calls/call-domain.ts +18 -42
  252. package/src/calls/call-pointer-messages.ts +51 -67
  253. package/src/calls/call-setup-flow-types.ts +76 -0
  254. package/src/calls/call-setup-flow.ts +1743 -0
  255. package/src/calls/call-speech-output.ts +87 -23
  256. package/src/calls/call-store.ts +4 -0
  257. package/src/calls/call-transport.ts +22 -36
  258. package/src/calls/fish-audio-client.ts +3 -0
  259. package/src/calls/gateway-invite-reader.ts +98 -0
  260. package/src/calls/guardian-wait-controller.ts +451 -0
  261. package/src/calls/media-stream-audio-transcode.ts +82 -2
  262. package/src/calls/media-stream-output.ts +142 -36
  263. package/src/calls/media-stream-server.ts +297 -178
  264. package/src/calls/media-stream-stt-session.ts +393 -50
  265. package/src/calls/media-turn-detector.ts +4 -6
  266. package/src/calls/relay-access-wait.ts +3 -4
  267. package/src/calls/relay-setup-router.ts +22 -43
  268. package/src/calls/relay-verification.ts +17 -24
  269. package/src/calls/resolve-call-tts-provider.ts +96 -29
  270. package/src/calls/stt-hints.ts +24 -87
  271. package/src/calls/telephony-credential-preflight.ts +159 -0
  272. package/src/calls/telephony-tts-capability.ts +183 -0
  273. package/src/calls/tts-call-strategy.ts +18 -20
  274. package/src/calls/twilio-provider.ts +3 -2
  275. package/src/calls/twilio-routes.ts +47 -351
  276. package/src/calls/types.ts +5 -3
  277. package/src/calls/voice-ingress-preflight.ts +9 -0
  278. package/src/calls/voice-quality.ts +13 -18
  279. package/src/calls/voice-session-bridge.ts +25 -35
  280. package/src/channels/__tests__/types.test.ts +28 -0
  281. package/src/channels/channel-verification-sessions.ts +7 -2
  282. package/src/channels/config.ts +0 -42
  283. package/src/channels/slack-thread-store.ts +12 -0
  284. package/src/channels/types.ts +23 -0
  285. package/src/cli/commands/__tests__/conversations-slack.test.ts +1 -1
  286. package/src/cli/commands/__tests__/schedules.test.ts +83 -34
  287. package/src/cli/commands/__tests__/status.test.ts +42 -2
  288. package/src/cli/commands/contacts.ts +2 -2
  289. package/src/cli/commands/credentials.ts +17 -0
  290. package/src/cli/commands/monitoring.ts +191 -0
  291. package/src/cli/commands/schedules-worker.ts +175 -0
  292. package/src/cli/commands/schedules.ts +169 -43
  293. package/src/cli/commands/status.ts +12 -1
  294. package/src/cli/commands/tools.ts +5 -1
  295. package/src/cli/lib/__tests__/plugin-catalog-cache.test.ts +1 -0
  296. package/src/cli/lib/__tests__/search-plugins.test.ts +29 -1
  297. package/src/cli/lib/__tests__/toggle-plugin.test.ts +7 -0
  298. package/src/cli/lib/search-plugins.ts +6 -0
  299. package/src/cli/lib/toggle-plugin.ts +21 -2
  300. package/src/cli/program.ts +3 -1
  301. package/src/config/__tests__/deployment-context-defaults.test.ts +23 -0
  302. package/src/config/acp-defaults.test.ts +0 -10
  303. package/src/config/acp-defaults.ts +0 -6
  304. package/src/config/bundled-skills/acp/SKILL.md +13 -45
  305. package/src/config/bundled-skills/acp/TOOLS.json +3 -3
  306. package/src/config/bundled-skills/app-builder/SKILL.md +3 -3
  307. package/src/config/bundled-skills/app-builder/references/RESPONSIVE.md +9 -9
  308. package/src/config/bundled-skills/contacts/tools/contact-merge.ts +1 -1
  309. package/src/config/bundled-skills/contacts/tools/contact-search.ts +1 -1
  310. package/src/config/bundled-skills/phone-calls/SKILL.md +1 -1
  311. package/src/config/bundled-skills/phone-calls/references/CONFIG.md +9 -9
  312. package/src/config/bundled-skills/phone-calls/references/TROUBLESHOOTING.md +10 -7
  313. package/src/config/bundled-skills/skill-management/TOOLS.json +10 -0
  314. package/src/config/call-site-defaults.ts +0 -2
  315. package/src/config/feature-flag-registry.json +16 -8
  316. package/src/config/loader.ts +11 -0
  317. package/src/config/schema.ts +9 -1
  318. package/src/config/schemas/__tests__/memory-v2.test.ts +2 -2
  319. package/src/config/schemas/__tests__/memory-v3.test.ts +64 -0
  320. package/src/config/schemas/call-site-catalog.ts +0 -12
  321. package/src/config/schemas/calls.ts +8 -0
  322. package/src/config/schemas/elevenlabs.ts +1 -1
  323. package/src/config/schemas/llm.ts +0 -2
  324. package/src/config/schemas/memory-v2.ts +1 -1
  325. package/src/config/schemas/memory-v3.ts +82 -0
  326. package/src/config/schemas/monitoring.ts +61 -0
  327. package/src/config/schemas/schedules.ts +35 -0
  328. package/src/config/seed-inference-profiles.ts +2 -2
  329. package/src/config/skills-plugin-filter.test.ts +96 -0
  330. package/src/config/skills.ts +26 -0
  331. package/src/contacts/__tests__/member-write-relay.test.ts +156 -4
  332. package/src/contacts/canonical-guardian-store.ts +5 -0
  333. package/src/contacts/contact-store.ts +81 -35
  334. package/src/contacts/contacts-write.ts +50 -25
  335. package/src/contacts/member-write-relay.ts +115 -31
  336. package/src/contacts/types.ts +0 -8
  337. package/src/context/compactor.ts +29 -15
  338. package/src/context/outbound-sanitize.ts +202 -0
  339. package/src/daemon/__tests__/abort-null-controller.test.ts +167 -0
  340. package/src/daemon/__tests__/conversation-tool-setup-plugin-scope.test.ts +122 -0
  341. package/src/daemon/__tests__/embedding-reconcile.test.ts +99 -16
  342. package/src/daemon/__tests__/wake-conversation-ops-completion.test.ts +107 -0
  343. package/src/daemon/abort-watchdog.ts +7 -0
  344. package/src/daemon/app-source-watcher.ts +9 -0
  345. package/src/daemon/assistant-attachments.ts +42 -0
  346. package/src/daemon/conversation-agent-loop-handlers.ts +256 -147
  347. package/src/daemon/conversation-agent-loop.ts +61 -68
  348. package/src/daemon/conversation-error.ts +1 -15
  349. package/src/daemon/conversation-history.ts +32 -236
  350. package/src/daemon/conversation-initial-prompt.ts +77 -0
  351. package/src/daemon/conversation-lifecycle.ts +25 -1
  352. package/src/daemon/conversation-messaging.ts +2 -2
  353. package/src/daemon/conversation-plugin-scope.ts +38 -0
  354. package/src/daemon/conversation-process.ts +50 -14
  355. package/src/daemon/conversation-runtime-assembly.ts +36 -6
  356. package/src/daemon/conversation-skill-tools.ts +19 -3
  357. package/src/daemon/conversation-store.ts +3 -3
  358. package/src/daemon/conversation-surfaces.ts +171 -0
  359. package/src/daemon/conversation-tool-setup.test.ts +95 -0
  360. package/src/daemon/conversation-tool-setup.ts +116 -1
  361. package/src/daemon/conversation-turn-finalize.ts +211 -0
  362. package/src/daemon/conversation.ts +92 -1
  363. package/src/daemon/disk-pressure-policy.ts +2 -1
  364. package/src/daemon/event-loop-watchdog.ts +22 -6
  365. package/src/daemon/external-plugins-bootstrap.ts +47 -134
  366. package/src/daemon/handlers/__tests__/config-a2a-accept.test.ts +1 -1
  367. package/src/daemon/handlers/__tests__/config-a2a-complete.test.ts +26 -14
  368. package/src/daemon/handlers/__tests__/config-a2a-invite.test.ts +27 -14
  369. package/src/daemon/handlers/__tests__/config-channels.test.ts +0 -5
  370. package/src/daemon/handlers/config-a2a.ts +7 -14
  371. package/src/daemon/handlers/config-channels.ts +2 -10
  372. package/src/daemon/handlers/conversation-history.ts +3 -1
  373. package/src/daemon/handlers/conversations.ts +0 -52
  374. package/src/daemon/handlers/shared.ts +4 -24
  375. package/src/daemon/handlers/skills.ts +4 -1
  376. package/src/daemon/host-cu-proxy.ts +1 -1
  377. package/src/daemon/lifecycle.ts +59 -472
  378. package/src/daemon/message-protocol.ts +3 -3
  379. package/src/daemon/message-provenance.ts +12 -14
  380. package/src/daemon/message-types/background-tools.ts +28 -0
  381. package/src/daemon/message-types/contacts.ts +2 -10
  382. package/src/daemon/message-types/conversations.ts +10 -0
  383. package/src/daemon/message-types/integrations.ts +2 -0
  384. package/src/daemon/message-types/surfaces.ts +1 -0
  385. package/src/daemon/message-types/sync.ts +1 -0
  386. package/src/daemon/pointer-conversation-trust.ts +23 -9
  387. package/src/daemon/pointer-turn-runner.ts +174 -0
  388. package/src/daemon/providers-setup.ts +16 -0
  389. package/src/daemon/shutdown-handlers.ts +139 -47
  390. package/src/daemon/skill-memory-refresh.ts +2 -2
  391. package/src/daemon/sqlite-corruption-watchdog.test.ts +217 -0
  392. package/src/daemon/sqlite-corruption-watchdog.ts +155 -0
  393. package/src/daemon/tool-setup-types.ts +8 -0
  394. package/src/daemon/trust-context.ts +21 -6
  395. package/src/daemon/turn-latency-tracker.test.ts +93 -0
  396. package/src/daemon/turn-latency-tracker.ts +38 -0
  397. package/src/daemon/wake-conversation-ops.ts +10 -8
  398. package/src/documents/document-comments-store.test.ts +7 -1
  399. package/src/documents/document-comments-store.ts +8 -0
  400. package/src/documents/document-store.ts +15 -0
  401. package/src/export/__tests__/transcript-formatter.test.ts +11 -0
  402. package/src/export/transcript-formatter.ts +49 -67
  403. package/src/home/__tests__/feed-writer.test.ts +247 -1
  404. package/src/home/conversation-starter-checkpoints.ts +1 -0
  405. package/src/home/feed-writer.ts +61 -0
  406. package/src/home/job-handlers/conversation-starters.ts +1 -0
  407. package/src/hooks/hook-loader.ts +12 -0
  408. package/src/hooks/registry.ts +32 -4
  409. package/src/inbound/public-ingress-urls.ts +0 -17
  410. package/src/ipc/__tests__/contacts-info-ipc.test.ts +285 -0
  411. package/src/ipc/assistant-server.ts +28 -7
  412. package/src/ipc/routes/__tests__/contacts-mirror-apply-atomicity.test.ts +62 -0
  413. package/src/ipc/routes/__tests__/contacts-mirror-apply.test.ts +272 -0
  414. package/src/ipc/routes/__tests__/contacts-mirror-ipc-routes.test.ts +322 -0
  415. package/src/ipc/routes/__tests__/invite-ipc-routes.test.ts +60 -4
  416. package/src/ipc/routes/contacts-info-ipc-routes.ts +239 -0
  417. package/src/ipc/routes/contacts-mirror-ipc-routes.ts +202 -0
  418. package/src/ipc/routes/db-proxy.ts +5 -2
  419. package/src/ipc/routes/invite-ipc-routes.ts +53 -39
  420. package/src/jobs/worker.ts +9 -2
  421. package/src/live-voice/__tests__/live-voice-archive.test.ts +10 -1
  422. package/src/live-voice/live-voice-archive.ts +5 -0
  423. package/src/messaging/providers/__tests__/transport-dispatch.test.ts +22 -6
  424. package/src/messaging/providers/channel-transport.ts +6 -0
  425. package/src/messaging/providers/index.ts +3 -0
  426. package/src/messaging/providers/slack/api.test.ts +49 -1
  427. package/src/messaging/providers/slack/api.ts +110 -0
  428. package/src/messaging/providers/slack/send.test.ts +85 -0
  429. package/src/messaging/providers/slack/send.ts +100 -28
  430. package/src/messaging/providers/slack/transport.ts +7 -13
  431. package/src/messaging/providers/whatsapp/send.ts +29 -9
  432. package/src/monitoring/__tests__/control.test.ts +235 -0
  433. package/src/monitoring/__tests__/sample-ring-buffer.test.ts +96 -0
  434. package/src/monitoring/control.ts +105 -0
  435. package/src/monitoring/resource-sampler.ts +258 -0
  436. package/src/monitoring/sample-ring-buffer.ts +108 -0
  437. package/src/monitoring/worker.ts +94 -0
  438. package/src/notifications/README.md +1 -1
  439. package/src/notifications/access-request-copy.ts +94 -23
  440. package/src/notifications/adapters/slack.ts +89 -21
  441. package/src/notifications/approval-card-builder.ts +33 -18
  442. package/src/notifications/approval-card-data.ts +48 -15
  443. package/src/notifications/broadcaster.ts +25 -16
  444. package/src/notifications/decision-engine.ts +131 -32
  445. package/src/notifications/guardian-question-mode.ts +58 -10
  446. package/src/permissions/approval-policy.ts +8 -1
  447. package/src/permissions/checker.ts +2 -0
  448. package/src/permissions/gateway-threshold-reader.ts +7 -6
  449. package/src/permissions/ipc-risk-types.ts +1 -0
  450. package/src/permissions/secret-prompter.ts +11 -3
  451. package/src/permissions/types.ts +2 -2
  452. package/src/persistence/__tests__/conversation-queries-search.test.ts +397 -0
  453. package/src/persistence/__tests__/conversation-search-lexical.test.ts +103 -0
  454. package/src/persistence/__tests__/jobs-worker-memory-disabled.test.ts +95 -0
  455. package/src/persistence/__tests__/slow-query-log.test.ts +266 -0
  456. package/src/persistence/__tests__/slow-sync-log.test.ts +155 -0
  457. package/src/persistence/a2a-invite-store.ts +205 -0
  458. package/src/persistence/attachments-store.ts +94 -10
  459. package/src/persistence/checkpoints.ts +45 -0
  460. package/src/persistence/conversation-crud.ts +453 -260
  461. package/src/persistence/conversation-display-order-migration.ts +8 -2
  462. package/src/persistence/conversation-group-migration.test.ts +8 -0
  463. package/src/persistence/conversation-group-migration.ts +9 -0
  464. package/src/persistence/conversation-queries.ts +244 -125
  465. package/src/persistence/conversation-row-batch-delete.ts +9 -5
  466. package/src/persistence/conversation-search-lexical.ts +49 -0
  467. package/src/persistence/db-async-query.ts +42 -0
  468. package/src/persistence/db-connection.ts +13 -0
  469. package/src/persistence/delivery-channels.ts +0 -82
  470. package/src/persistence/delivery-crud.ts +27 -6
  471. package/src/persistence/embeddings/__tests__/embedding-identity.test.ts +18 -5
  472. package/src/persistence/embeddings/__tests__/messages-lexical-index.test.ts +334 -0
  473. package/src/persistence/embeddings/embedding-identity.ts +17 -5
  474. package/src/persistence/embeddings/embedding-runtime-manager.ts +31 -0
  475. package/src/persistence/embeddings/messages-lexical-index.ts +396 -0
  476. package/src/persistence/embeddings/qdrant-client.ts +81 -5
  477. package/src/persistence/group-crud.ts +13 -1
  478. package/src/persistence/job-handlers/__tests__/message-lexical-backfill.test.ts +506 -0
  479. package/src/persistence/job-handlers/__tests__/message-lexical-enqueue.test.ts +164 -0
  480. package/src/persistence/job-handlers/__tests__/message-lexical.test.ts +259 -0
  481. package/src/persistence/job-handlers/cleanup.ts +57 -9
  482. package/src/persistence/job-handlers/message-lexical-backfill.ts +187 -0
  483. package/src/persistence/job-handlers/message-lexical.ts +251 -0
  484. package/src/persistence/jobs-store.ts +102 -8
  485. package/src/persistence/jobs-worker.ts +68 -28
  486. package/src/persistence/llm-request-log-store.ts +35 -19
  487. package/src/persistence/llm-usage-store.ts +11 -0
  488. package/src/persistence/memory-lifecycle-hooks.test.ts +65 -0
  489. package/src/persistence/memory-lifecycle-hooks.ts +55 -1
  490. package/src/persistence/migrations/028-call-session-mode.ts +1 -1
  491. package/src/persistence/migrations/116-messages-fts.ts +8 -1
  492. package/src/persistence/migrations/311-create-subagents-table.ts +50 -0
  493. package/src/persistence/migrations/312-drop-inbox-conversation-state-table.ts +15 -0
  494. package/src/persistence/migrations/313-drop-messages-fts.ts +17 -0
  495. package/src/persistence/migrations/314-add-conversation-enabled-plugins.ts +25 -0
  496. package/src/persistence/migrations/315-create-a2a-invites.ts +58 -0
  497. package/src/persistence/migrations/316-drop-contact-channels-invite-id.ts +28 -0
  498. package/src/persistence/migrations/317-canonical-guardian-requester-signals.ts +24 -0
  499. package/src/persistence/migrations/318-drop-contact-channel-telemetry.ts +32 -0
  500. package/src/persistence/migrations/__tests__/315-create-a2a-invites.test.ts +161 -0
  501. package/src/persistence/migrations/__tests__/316-drop-contact-channels-invite-id.test.ts +156 -0
  502. package/src/persistence/migrations/__tests__/318-drop-contact-channel-telemetry.test.ts +134 -0
  503. package/src/persistence/migrations/__tests__/migration-prefix-guard.test.ts +99 -0
  504. package/src/persistence/raw-query.ts +50 -11
  505. package/src/persistence/schema/a2a.ts +14 -0
  506. package/src/persistence/schema/contacts.ts +0 -62
  507. package/src/persistence/schema/conversation-groups.ts +12 -0
  508. package/src/persistence/schema/conversations.ts +2 -0
  509. package/src/persistence/schema/documents.ts +65 -0
  510. package/src/persistence/schema/guardian.ts +4 -0
  511. package/src/persistence/schema/index.ts +4 -0
  512. package/src/persistence/schema/memory-injection.ts +62 -0
  513. package/src/persistence/schema/workflows.ts +55 -0
  514. package/src/persistence/slow-query-log.ts +437 -0
  515. package/src/persistence/slow-sync-log.ts +204 -0
  516. package/src/persistence/steps.ts +16 -0
  517. package/src/persistence/subagent-store.ts +125 -0
  518. package/src/persistence/worker-control.ts +45 -238
  519. package/src/plugin-api/event-hub-facade.ts +172 -0
  520. package/src/plugin-api/index.ts +9 -1
  521. package/src/plugin-api/types.ts +40 -9
  522. package/src/plugins/defaults/default-plugin-names.ts +60 -0
  523. package/src/plugins/defaults/index.ts +19 -29
  524. package/src/plugins/defaults/memory/__tests__/conversation-queries.test.ts +46 -67
  525. package/src/plugins/defaults/memory/__tests__/db-async-query.test.ts +36 -1
  526. package/src/plugins/defaults/memory/__tests__/find-most-recent-retrospective-for.test.ts +2 -4
  527. package/src/plugins/defaults/memory/__tests__/jobs-worker-v2-graph-trigger-embed.test.ts +2 -2
  528. package/src/plugins/defaults/memory/__tests__/jobs-worker-v2-schedule.test.ts +9 -0
  529. package/src/plugins/defaults/memory/__tests__/memory-retrospective-job.test.ts +7 -4
  530. package/src/plugins/defaults/memory/config.ts +11 -0
  531. package/src/plugins/defaults/memory/context-search/agent-runner.ts +1 -1
  532. package/src/plugins/defaults/memory/context-search/sources/conversations.ts +124 -113
  533. package/src/plugins/defaults/memory/embeddings.ts +77 -0
  534. package/src/plugins/defaults/memory/find-most-recent-retrospective-for.ts +66 -0
  535. package/src/plugins/defaults/memory/frontmatter.ts +50 -0
  536. package/src/plugins/defaults/memory/graph/bootstrap.test.ts +36 -10
  537. package/src/plugins/defaults/memory/graph/bootstrap.ts +6 -5
  538. package/src/plugins/defaults/memory/graph/consolidation.ts +3 -5
  539. package/src/plugins/defaults/memory/graph/extraction.ts +3 -6
  540. package/src/plugins/defaults/memory/graph/graph-search.ts +12 -23
  541. package/src/plugins/defaults/memory/graph/narrative.ts +3 -5
  542. package/src/plugins/defaults/memory/graph/pattern-scan.ts +3 -5
  543. package/src/plugins/defaults/memory/graph/retriever.test.ts +1 -6
  544. package/src/plugins/defaults/memory/graph/retriever.ts +5 -10
  545. package/src/plugins/defaults/memory/graph/tools.ts +1 -1
  546. package/src/plugins/defaults/memory/hooks/init.ts +31 -5
  547. package/src/plugins/defaults/memory/indexer.ts +2 -3
  548. package/src/plugins/defaults/memory/injectors.ts +2 -2
  549. package/src/plugins/defaults/memory/job-handler-registration.ts +96 -0
  550. package/src/plugins/defaults/memory/job-handlers/backfill.ts +4 -26
  551. package/src/plugins/defaults/memory/job-handlers/embedding.test.ts +6 -19
  552. package/src/plugins/defaults/memory/job-handlers/embedding.ts +9 -22
  553. package/src/plugins/defaults/memory/job-handlers/index-maintenance.ts +2 -3
  554. package/src/plugins/defaults/memory/job-handlers.ts +13 -12
  555. package/src/plugins/defaults/memory/jobs/embed-concept-page.ts +1 -1
  556. package/src/plugins/defaults/memory/llm-helpers.ts +76 -0
  557. package/src/plugins/defaults/memory/memory-retrospective-job.ts +8 -5
  558. package/src/plugins/defaults/memory/memory-retrospective-startup-cleanup.ts +2 -2
  559. package/src/plugins/defaults/memory/memory-v2-concept-frequency.ts +2 -0
  560. package/src/plugins/defaults/memory/persistence-hooks.ts +46 -1
  561. package/src/plugins/defaults/memory/pkb/pkb-index.ts +1 -5
  562. package/src/plugins/defaults/memory/pkb/pkb-search.ts +2 -2
  563. package/src/plugins/defaults/memory/routes/__tests__/memory-v2-simulate-route.test.ts +4 -6
  564. package/src/plugins/defaults/memory/routes/memory-item-routes.ts +1 -1
  565. package/src/plugins/defaults/memory/search/semantic.ts +2 -2
  566. package/src/plugins/defaults/memory/startup.ts +244 -0
  567. package/src/plugins/defaults/memory/task-memory-cleanup.ts +8 -0
  568. package/src/{daemon → plugins/defaults/memory/v2}/__tests__/memory-v2-startup.test.ts +6 -6
  569. package/src/plugins/defaults/memory/v2/__tests__/migration.test.ts +2 -13
  570. package/src/plugins/defaults/memory/v2/__tests__/router.test.ts +4 -5
  571. package/src/plugins/defaults/memory/v2/__tests__/sweep-job.test.ts +1 -8
  572. package/src/plugins/defaults/memory/v2/activation.ts +2 -4
  573. package/src/plugins/defaults/memory/v2/cli-command-store.ts +2 -4
  574. package/src/plugins/defaults/memory/v2/frontmatter-sweep.ts +1 -1
  575. package/src/{daemon → plugins/defaults/memory/v2}/memory-v2-startup.test.ts +8 -8
  576. package/src/{daemon → plugins/defaults/memory/v2}/memory-v2-startup.ts +20 -22
  577. package/src/plugins/defaults/memory/v2/migration.ts +2 -5
  578. package/src/plugins/defaults/memory/v2/page-store.ts +1 -1
  579. package/src/plugins/defaults/memory/v2/qdrant.ts +2 -3
  580. package/src/plugins/defaults/memory/v2/router.ts +5 -5
  581. package/src/plugins/defaults/memory/v2/sim.ts +2 -4
  582. package/src/plugins/defaults/memory/v2/skill-store.ts +2 -4
  583. package/src/plugins/defaults/memory/v2/sweep-job.ts +6 -6
  584. package/src/plugins/defaults/memory/v3/__tests__/carry-integration.test.ts +11 -9
  585. package/src/plugins/defaults/memory/v3/__tests__/dense.test.ts +107 -2
  586. package/src/plugins/defaults/memory/v3/__tests__/gate-flag.test.ts +69 -0
  587. package/src/plugins/defaults/memory/v3/__tests__/gate.test.ts +181 -0
  588. package/src/plugins/defaults/memory/v3/__tests__/live-integration.test.ts +7 -3
  589. package/src/plugins/defaults/memory/v3/__tests__/orchestrate.test.ts +345 -8
  590. package/src/plugins/defaults/memory/v3/__tests__/pool-select.test.ts +1 -4
  591. package/src/plugins/defaults/memory/v3/__tests__/section-needle.test.ts +64 -0
  592. package/src/plugins/defaults/memory/v3/__tests__/shadow-integration.test.ts +18 -13
  593. package/src/plugins/defaults/memory/v3/__tests__/shadow-plugin.test.ts +62 -1
  594. package/src/plugins/defaults/memory/v3/card.ts +1 -4
  595. package/src/plugins/defaults/memory/v3/dense.ts +60 -25
  596. package/src/plugins/defaults/memory/v3/edge.ts +1 -1
  597. package/src/plugins/defaults/memory/v3/gate-flag.ts +20 -0
  598. package/src/plugins/defaults/memory/v3/gate.ts +158 -0
  599. package/src/plugins/defaults/memory/v3/maintain-job.ts +2 -4
  600. package/src/plugins/defaults/memory/v3/orchestrate.ts +186 -25
  601. package/src/plugins/defaults/memory/v3/pool-select.test.ts +7 -9
  602. package/src/plugins/defaults/memory/v3/pool-select.ts +6 -6
  603. package/src/plugins/defaults/memory/v3/prune.ts +2 -2
  604. package/src/plugins/defaults/memory/v3/section-dense-store.ts +8 -11
  605. package/src/plugins/defaults/memory/v3/section-needle.ts +27 -7
  606. package/src/plugins/defaults/memory/v3/shadow-plugin.ts +10 -0
  607. package/src/plugins/defaults/memory/v3-eval/eval-packets.ts +1 -4
  608. package/src/plugins/defaults/title-generate/hooks/user-prompt-submit.ts +5 -0
  609. package/src/plugins/defaults/turn-context/injectors.ts +1 -0
  610. package/src/plugins/defaults/turn-context/unified-turn-context.ts +12 -0
  611. package/src/plugins/injector-registry.ts +13 -2
  612. package/src/plugins/mtime-cache.ts +36 -47
  613. package/src/plugins/pipeline.ts +15 -1
  614. package/src/plugins/types.ts +14 -23
  615. package/src/prompts/__tests__/system-prompt.test.ts +170 -32
  616. package/src/prompts/persona-resolver.ts +13 -9
  617. package/src/prompts/system-prompt.ts +30 -9
  618. package/src/prompts/templates/BOOTSTRAP.md +16 -119
  619. package/src/prompts/templates/SOUL.md +43 -13
  620. package/src/prompts/templates/system-sections.ts +32 -27
  621. package/src/prompts/templates/users/default.md +19 -0
  622. package/src/providers/__tests__/placeholder-sentinels.test.ts +56 -0
  623. package/src/providers/inference/__tests__/base-url-route-validation.test.ts +96 -1
  624. package/src/providers/model-intents.ts +2 -2
  625. package/src/providers/openai/chat-completions-provider.ts +14 -1
  626. package/src/providers/openai/responses-provider.ts +18 -0
  627. package/src/providers/placeholder-sentinels.ts +18 -8
  628. package/src/providers/retry.ts +1 -0
  629. package/src/providers/speech-to-text/__tests__/provider-catalog.test.ts +0 -64
  630. package/src/providers/speech-to-text/__tests__/resolve.test.ts +92 -79
  631. package/src/providers/speech-to-text/deepgram-realtime.test.ts +98 -0
  632. package/src/providers/speech-to-text/deepgram-realtime.ts +62 -3
  633. package/src/providers/speech-to-text/provider-catalog.ts +0 -89
  634. package/src/providers/speech-to-text/resolve.ts +55 -0
  635. package/src/providers/tool-progress-events.test.ts +50 -0
  636. package/src/providers/tool-progress-events.ts +99 -0
  637. package/src/providers/types.ts +1 -1
  638. package/src/providers/vellum-model-routing.test.ts +51 -0
  639. package/src/providers/vellum-model-routing.ts +84 -0
  640. package/src/runtime/AGENTS.md +5 -4
  641. package/src/runtime/__tests__/agent-wake.test.ts +158 -1
  642. package/src/runtime/__tests__/channel-verification-service.test.ts +2 -2
  643. package/src/runtime/__tests__/trust-verdict-consumer.test.ts +37 -8
  644. package/src/runtime/access-request-helper.ts +154 -3
  645. package/src/runtime/actor-trust-resolver.ts +7 -21
  646. package/src/runtime/agent-wake.ts +41 -1
  647. package/src/runtime/assistant-event.ts +86 -12
  648. package/src/runtime/auth/__tests__/route-policy.test.ts +31 -0
  649. package/src/runtime/channel-approval-types.ts +52 -2
  650. package/src/runtime/channel-approvals.ts +23 -8
  651. package/src/runtime/channel-invite-transport.ts +2 -2
  652. package/src/runtime/channel-invite-transports/voice.ts +1 -1
  653. package/src/runtime/channel-readiness-service.ts +3 -5
  654. package/src/runtime/channel-retry-sweep.ts +18 -24
  655. package/src/runtime/channel-verification-service.ts +9 -11
  656. package/src/runtime/finalize-event-delivery.ts +30 -16
  657. package/src/runtime/guardian-action-service.ts +10 -11
  658. package/src/runtime/guardian-reply-router.ts +122 -21
  659. package/src/runtime/http-server.ts +44 -101
  660. package/src/runtime/introduction-policy.test.ts +214 -0
  661. package/src/runtime/introduction-policy.ts +284 -0
  662. package/src/runtime/invite-service.ts +104 -361
  663. package/src/runtime/local-actor-identity.test.ts +38 -0
  664. package/src/runtime/local-actor-identity.ts +14 -0
  665. package/src/runtime/middleware/__tests__/rate-limiter.test.ts +22 -0
  666. package/src/runtime/middleware/rate-limiter.ts +30 -0
  667. package/src/runtime/middleware/twilio-validation.ts +5 -7
  668. package/src/runtime/migrations/__tests__/gcs-signed-url.test.ts +28 -0
  669. package/src/runtime/migrations/origin-mode.ts +6 -6
  670. package/src/runtime/pre-first-message-gate.ts +1 -0
  671. package/src/runtime/routes/__tests__/channel-verification-revoke.test.ts +6 -35
  672. package/src/runtime/routes/__tests__/consolidation-routes.test.ts +24 -3
  673. package/src/runtime/routes/__tests__/contact-routes.test.ts +80 -15
  674. package/src/runtime/routes/__tests__/conversation-list-routes.test.ts +7 -1
  675. package/src/runtime/routes/__tests__/global-search-routes.test.ts +0 -3
  676. package/src/runtime/routes/__tests__/home-feed-routes.test.ts +142 -1
  677. package/src/runtime/routes/__tests__/invite-relay-routes.test.ts +119 -30
  678. package/src/runtime/routes/__tests__/migration-import-allowed-hosts-env.test.ts +70 -0
  679. package/src/runtime/routes/__tests__/monitoring-routes.test.ts +194 -0
  680. package/src/runtime/routes/__tests__/plugins-routes.test.ts +755 -29
  681. package/src/runtime/routes/__tests__/retrospective-routes.test.ts +4 -0
  682. package/src/runtime/routes/__tests__/schedule-routes-create.test.ts +70 -0
  683. package/src/runtime/routes/__tests__/schedule-worker-routes.test.ts +161 -0
  684. package/src/runtime/routes/__tests__/surface-action-routes.test.ts +1 -1
  685. package/src/runtime/routes/__tests__/surface-content-routes.test.ts +1 -1
  686. package/src/runtime/routes/acp-routes.ts +15 -3
  687. package/src/runtime/routes/app-management-routes.ts +4 -7
  688. package/src/runtime/routes/approval-routes.ts +4 -0
  689. package/src/runtime/routes/attachment-routes.ts +54 -3
  690. package/src/runtime/routes/avatar-routes.ts +0 -4
  691. package/src/runtime/routes/background-tool-routes.ts +34 -5
  692. package/src/runtime/routes/btw-routes.ts +32 -4
  693. package/src/runtime/routes/channel-route-shared.ts +18 -14
  694. package/src/runtime/routes/channel-verification-routes.ts +0 -3
  695. package/src/runtime/routes/contact-routes.ts +298 -117
  696. package/src/runtime/routes/conversation-list-routes.ts +6 -0
  697. package/src/runtime/routes/conversation-management-routes.ts +74 -37
  698. package/src/runtime/routes/conversation-query-routes.ts +5 -2
  699. package/src/runtime/routes/conversation-routes.ts +222 -82
  700. package/src/runtime/routes/conversations-import-routes.ts +8 -1
  701. package/src/runtime/routes/credential-prompt-routes.ts +20 -5
  702. package/src/runtime/routes/debug-routes.ts +1 -0
  703. package/src/runtime/routes/documents-routes.ts +5 -2
  704. package/src/runtime/routes/empty-state-greeting-cache.ts +37 -10
  705. package/src/runtime/routes/global-search-routes.ts +2 -1
  706. package/src/runtime/routes/guardian-approval-interception.ts +51 -0
  707. package/src/runtime/routes/home-feed-routes.ts +60 -1
  708. package/src/runtime/routes/identity-routes.ts +4 -87
  709. package/src/runtime/routes/inbound-message-handler.ts +82 -41
  710. package/src/runtime/routes/inbound-stages/acl-enforcement.test.ts +430 -57
  711. package/src/runtime/routes/inbound-stages/acl-enforcement.ts +302 -572
  712. package/src/runtime/routes/inbound-stages/background-dispatch.test.ts +76 -270
  713. package/src/runtime/routes/inbound-stages/background-dispatch.ts +21 -116
  714. package/src/runtime/routes/inbound-stages/edit-intercept.ts +9 -1
  715. package/src/runtime/routes/inbound-stages/escalation-intercept.test.ts +158 -0
  716. package/src/runtime/routes/inbound-stages/escalation-intercept.ts +22 -1
  717. package/src/runtime/routes/index.ts +6 -0
  718. package/src/runtime/routes/inference-provider-connection-routes.ts +22 -16
  719. package/src/runtime/routes/internal-twilio-routes.ts +0 -15
  720. package/src/runtime/routes/messages-lexical-routes.ts +75 -0
  721. package/src/runtime/routes/migration-routes.ts +69 -6
  722. package/src/runtime/routes/monitoring-routes.ts +237 -0
  723. package/src/runtime/routes/plugins-routes.ts +329 -8
  724. package/src/runtime/routes/schedule-routes.ts +49 -8
  725. package/src/runtime/routes/schedule-worker-routes.ts +210 -0
  726. package/src/runtime/routes/secret-routes.ts +1 -1
  727. package/src/runtime/routes/surface-conversation-resolver.ts +1 -0
  728. package/src/runtime/services/__tests__/analyze-conversation.test.ts +54 -9
  729. package/src/runtime/services/__tests__/auto-analysis-enqueue.test.ts +30 -6
  730. package/src/runtime/services/__tests__/conversation-analyze-job.test.ts +43 -8
  731. package/src/runtime/services/__tests__/conversation-serializer.test.ts +20 -0
  732. package/src/runtime/services/analyze-conversation.ts +14 -4
  733. package/src/runtime/services/conversation-serializer.ts +5 -0
  734. package/src/runtime/slack-no-response.ts +47 -0
  735. package/src/runtime/slack-reply-session.test.ts +633 -0
  736. package/src/runtime/slack-reply-session.ts +382 -0
  737. package/src/runtime/slack-task-progress.ts +95 -0
  738. package/src/runtime/sync/resource-sync-events.ts +25 -0
  739. package/src/runtime/tool-grant-request-helper.ts +17 -1
  740. package/src/runtime/trust-class.test.ts +141 -0
  741. package/src/runtime/trust-class.ts +121 -0
  742. package/src/runtime/trust-verdict-consumer.ts +7 -6
  743. package/src/schedule/__tests__/run-script.test.ts +21 -0
  744. package/src/schedule/__tests__/worker-control.test.ts +241 -0
  745. package/src/schedule/run-script.ts +13 -6
  746. package/src/schedule/schedule-usage-store.ts +1 -0
  747. package/src/schedule/scheduler.ts +178 -127
  748. package/src/schedule/worker-control.ts +118 -0
  749. package/src/schedule/worker.ts +131 -0
  750. package/src/skills/__tests__/categories-cache.test.ts +38 -0
  751. package/src/skills/categories-cache.ts +40 -5
  752. package/src/skills/managed-store.ts +41 -6
  753. package/src/skills/validate-input.ts +47 -0
  754. package/src/stt/types.ts +5 -9
  755. package/src/subagent/manager.ts +267 -39
  756. package/src/subagent/types.ts +6 -2
  757. package/src/subagent/validate-allowlists.ts +65 -0
  758. package/src/telemetry/watchdog-direct-emit.test.ts +109 -0
  759. package/src/telemetry/watchdog-direct-emit.ts +89 -0
  760. package/src/tools/acp/list-agents.test.ts +0 -6
  761. package/src/tools/background-tool-registry.ts +61 -0
  762. package/src/tools/document/document-comment-tool.test.ts +4 -0
  763. package/src/tools/host-terminal/host-shell.test.ts +397 -0
  764. package/src/tools/host-terminal/host-shell.ts +203 -14
  765. package/src/tools/skills/find-similar-skills.test.ts +152 -1
  766. package/src/tools/skills/find-similar-skills.ts +30 -4
  767. package/src/tools/skills/load.ts +36 -0
  768. package/src/tools/skills/scaffold-managed.ts +66 -34
  769. package/src/tools/skills/skill-script-runner.ts +17 -0
  770. package/src/tools/skills/skill-tool-factory.ts +5 -1
  771. package/src/tools/terminal/safe-env.ts +3 -0
  772. package/src/tools/terminal/shell.test.ts +177 -0
  773. package/src/tools/terminal/shell.ts +98 -4
  774. package/src/tools/tool-approval-handler.ts +106 -29
  775. package/{node_modules/@vellumai/skill-host-contracts/src → src/tools}/tool-types.ts +16 -17
  776. package/src/tools/types.ts +29 -17
  777. package/src/tools/ui-surface/definitions.ts +3 -1
  778. package/src/tts/__tests__/provider-adapters.test.ts +37 -0
  779. package/src/tts/__tests__/provider-catalog.test.ts +21 -0
  780. package/src/tts/provider-catalog.ts +40 -9
  781. package/src/tts/providers/fish-audio-provider.ts +19 -10
  782. package/src/tts/types.ts +3 -4
  783. package/src/util/__tests__/process-tree.test.ts +10 -2
  784. package/src/util/__tests__/text-spacing.test.ts +53 -0
  785. package/src/util/cgroup-memory.ts +142 -0
  786. package/src/util/image-conversion.ts +281 -0
  787. package/src/util/phone.ts +1 -8
  788. package/src/util/platform.ts +33 -0
  789. package/src/util/process-tree.ts +10 -2
  790. package/src/util/text-spacing.ts +53 -0
  791. package/src/util/worker-process.ts +271 -0
  792. package/src/workflows/journal-store.ts +16 -1
  793. package/src/workflows/library.test.ts +35 -20
  794. package/src/workflows/library.ts +105 -66
  795. package/src/workspace/git-service.ts +1 -0
  796. package/src/workspace/migrations/011-backfill-installation-id.ts +83 -31
  797. package/src/workspace/migrations/041-backfill-google-gmail-settings-scope.ts +41 -22
  798. package/src/workspace/migrations/070-memory-v2-summary-schema-rebuild.ts +1 -1
  799. package/src/workspace/migrations/118-seed-now-md.ts +64 -0
  800. package/src/workspace/migrations/119-strip-persisted-memory-v3-tuning-defaults.ts +169 -0
  801. package/src/workspace/migrations/120-revise-onboarding-threads.ts +47 -0
  802. package/src/workspace/migrations/121-seed-default-user-guardrails.ts +82 -0
  803. package/src/workspace/migrations/122-relocate-default-user-boundary.ts +111 -0
  804. package/src/workspace/migrations/123-swap-quality-profile-to-fable.ts +85 -0
  805. package/src/workspace/migrations/__tests__/119-strip-persisted-memory-v3-tuning-defaults.test.ts +181 -0
  806. package/src/workspace/migrations/registry.ts +12 -0
  807. package/drizzle/0000_dizzy_maggott.sql +0 -301
  808. package/drizzle/meta/0000_snapshot.json +0 -1933
  809. package/drizzle/meta/_journal.json +0 -13
  810. package/node_modules/@vellumai/skill-host-contracts/__tests__/client.test.ts +0 -887
  811. package/node_modules/@vellumai/skill-host-contracts/bun.lock +0 -24
  812. package/node_modules/@vellumai/skill-host-contracts/package.json +0 -18
  813. package/node_modules/@vellumai/skill-host-contracts/src/assistant-event.ts +0 -97
  814. package/node_modules/@vellumai/skill-host-contracts/src/client.ts +0 -1349
  815. package/node_modules/@vellumai/skill-host-contracts/src/index.ts +0 -6
  816. package/node_modules/@vellumai/skill-host-contracts/src/runtime-mode.ts +0 -11
  817. package/node_modules/@vellumai/skill-host-contracts/src/server-message.ts +0 -32
  818. package/node_modules/@vellumai/skill-host-contracts/src/skill-host.ts +0 -333
  819. package/node_modules/@vellumai/skill-host-contracts/tsconfig.json +0 -20
  820. package/node_modules/@vellumai/skill-host-contracts/tsconfig.test.json +0 -12
  821. package/src/__tests__/invite-redemption-service.test.ts +0 -1180
  822. package/src/__tests__/invite-service-ipc.test.ts +0 -350
  823. package/src/__tests__/job-handler-registry-guard.test.ts +0 -125
  824. package/src/__tests__/regenerate-fire-and-forget-trace.test.ts +0 -203
  825. package/src/__tests__/relay-server.test.ts +0 -6153
  826. package/src/__tests__/telephony-stt-routing.test.ts +0 -329
  827. package/src/__tests__/voice-invite-redemption.test.ts +0 -702
  828. package/src/calls/relay-server.ts +0 -2463
  829. package/src/calls/telephony-stt-routing.ts +0 -145
  830. package/src/contacts/__tests__/contacts-write-revoke-relay.test.ts +0 -128
  831. package/src/daemon/__tests__/daemon-skill-host.test.ts +0 -273
  832. package/src/daemon/daemon-skill-host.ts +0 -262
  833. package/src/daemon/message-types/meet.ts +0 -143
  834. package/src/daemon/shutdown-registry.ts +0 -40
  835. package/src/ipc/__tests__/skill-server-bidirectional.test.ts +0 -253
  836. package/src/ipc/__tests__/skill-server.test.ts +0 -182
  837. package/src/ipc/skill-ipc-types.ts +0 -54
  838. package/src/ipc/skill-routes/__tests__/config.test.ts +0 -146
  839. package/src/ipc/skill-routes/__tests__/events-ipc.test.ts +0 -448
  840. package/src/ipc/skill-routes/__tests__/identity.test.ts +0 -62
  841. package/src/ipc/skill-routes/__tests__/log.test.ts +0 -133
  842. package/src/ipc/skill-routes/__tests__/memory.test.ts +0 -203
  843. package/src/ipc/skill-routes/__tests__/platform.test.ts +0 -111
  844. package/src/ipc/skill-routes/__tests__/providers.test.ts +0 -265
  845. package/src/ipc/skill-routes/__tests__/registries.test.ts +0 -400
  846. package/src/ipc/skill-routes/config.ts +0 -47
  847. package/src/ipc/skill-routes/events.ts +0 -147
  848. package/src/ipc/skill-routes/identity.ts +0 -21
  849. package/src/ipc/skill-routes/index.ts +0 -37
  850. package/src/ipc/skill-routes/log.ts +0 -40
  851. package/src/ipc/skill-routes/memory.ts +0 -92
  852. package/src/ipc/skill-routes/platform.ts +0 -39
  853. package/src/ipc/skill-routes/providers.ts +0 -162
  854. package/src/ipc/skill-routes/registries.ts +0 -338
  855. package/src/ipc/skill-server.ts +0 -831
  856. package/src/ipc/skill-socket-path.ts +0 -20
  857. package/src/jobs/register-job-handlers.ts +0 -74
  858. package/src/persistence/invite-store.ts +0 -481
  859. package/src/plugins/job-handler-registry.ts +0 -94
  860. package/src/providers/cache-control.ts +0 -26
  861. package/src/runtime/__tests__/runtime-mode.test.ts +0 -62
  862. package/src/runtime/invite-redemption-service.ts +0 -828
  863. package/src/runtime/invite-redemption-templates.ts +0 -46
  864. package/src/runtime/runtime-mode.ts +0 -40
  865. package/src/runtime/slack-dm-text-delivery.ts +0 -177
  866. package/src/util/voice-code.ts +0 -31
@@ -63,6 +63,7 @@ function insertMessage(
63
63
  createdAt: number,
64
64
  ): void {
65
65
  rawRun(
66
+ "test:insertMessage",
66
67
  "INSERT INTO messages (id, conversation_id, role, content, created_at) VALUES (?, ?, ?, ?, ?)",
67
68
  `msg-${conversationId}-${role}-${createdAt}`,
68
69
  conversationId,
@@ -74,6 +75,7 @@ function insertMessage(
74
75
 
75
76
  function setCreatedAt(conversationId: string, createdAt: number): void {
76
77
  rawRun(
78
+ "test:setCreatedAt",
77
79
  "UPDATE conversations SET created_at = ? WHERE id = ?",
78
80
  createdAt,
79
81
  conversationId,
@@ -105,6 +107,7 @@ function recordUsageCostAt(
105
107
  { estimatedCostUsd, pricingStatus: "priced" },
106
108
  );
107
109
  rawRun(
110
+ "test:setUsageCreatedAt",
108
111
  "UPDATE llm_usage_events SET created_at = ? WHERE id = ?",
109
112
  createdAt,
110
113
  event.id,
@@ -268,6 +271,7 @@ describe("listRetrospectiveRuns handler", () => {
268
271
  source: MEMORY_RETROSPECTIVE_SOURCE,
269
272
  });
270
273
  rawRun(
274
+ "test:setCreatedAtAndCost",
271
275
  "UPDATE conversations SET created_at = ?, total_estimated_cost = ? WHERE id = ?",
272
276
  1000,
273
277
  0.42,
@@ -0,0 +1,70 @@
1
+ /**
2
+ * The `createSchedule` route accepts `script` mode (not just execute/workflow),
3
+ * so a catalog skill's `setup.ts` can register a script-mode schedule via the
4
+ * CLI/HTTP path instead of the in-assistant `schedule_create` tool.
5
+ */
6
+
7
+ import { describe, expect, test } from "bun:test";
8
+
9
+ import { initializeDb } from "../../../persistence/db-init.js";
10
+ import { ROUTES } from "../schedule-routes.js";
11
+
12
+ await initializeDb();
13
+
14
+ const createHandler = (() => {
15
+ const route = ROUTES.find((r) => r.operationId === "createSchedule");
16
+ if (!route) throw new Error("createSchedule route not found");
17
+ return route.handler;
18
+ })();
19
+
20
+ interface CreateResult {
21
+ schedule: {
22
+ name: string;
23
+ mode: string;
24
+ script: string | null;
25
+ timeoutMs: number | null;
26
+ };
27
+ }
28
+
29
+ async function create(body: Record<string, unknown>): Promise<CreateResult> {
30
+ return (await createHandler({ body })) as CreateResult;
31
+ }
32
+
33
+ describe("createSchedule route — script mode", () => {
34
+ test("returns the created script schedule with its command + timeout", async () => {
35
+ const { schedule } = await create({
36
+ name: "wt-script-create",
37
+ mode: "script",
38
+ script: 'cd "$VELLUM_WORKSPACE_DIR/schedules/$__SCHEDULE_ID" && bun poll.ts',
39
+ expression: "*/15 * * * *",
40
+ description: "polls github",
41
+ timeoutMs: 120000,
42
+ });
43
+ expect(schedule.name).toBe("wt-script-create");
44
+ expect(schedule.mode).toBe("script");
45
+ expect(schedule.script).toContain("bun poll.ts");
46
+ expect(schedule.timeoutMs).toBe(120000);
47
+ });
48
+
49
+ test("script mode does not require a message", async () => {
50
+ const { schedule } = await create({
51
+ name: "wt-script-nomsg",
52
+ mode: "script",
53
+ script: "echo hi",
54
+ expression: "0 * * * *",
55
+ description: "d",
56
+ });
57
+ expect(schedule.mode).toBe("script");
58
+ });
59
+
60
+ test("rejects script mode without a script", async () => {
61
+ await expect(
62
+ create({
63
+ name: "wt-script-missing",
64
+ mode: "script",
65
+ expression: "* * * * *",
66
+ description: "d",
67
+ }),
68
+ ).rejects.toThrow(/script is required/);
69
+ });
70
+ });
@@ -0,0 +1,161 @@
1
+ /**
2
+ * Tests for the schedule worker control routes (start / stop / status).
3
+ *
4
+ * The route handlers run inside the daemon and own the worker process. We mock
5
+ * schedule worker-control and the config loader so the tests assert handler
6
+ * behaviour:
7
+ * - start spawns as a daemon child (detached:false), enables the flag only on
8
+ * success, and throws on spawn failure (flag untouched).
9
+ * - stop disables the flag and signals the worker.
10
+ * - status reports the worker process, the flag, and the in-process runner.
11
+ */
12
+
13
+ import { beforeEach, describe, expect, mock, test } from "bun:test";
14
+
15
+ import * as actualLoader from "../../../config/loader.js";
16
+ import { getScheduleWorkerPidPath } from "../../../util/platform.js";
17
+
18
+ class FakeSpawnError extends Error {}
19
+
20
+ let spawnImpl: () => Promise<{ pid: number; alreadyRunning: boolean }>;
21
+ let spawnArgs: Array<{ detached?: boolean; terminateOnTimeout?: boolean }> = [];
22
+ let stopImpl: () => { status: "running" | "not_running"; pid?: number };
23
+ /** Records the `schedules.worker.enabled` values written via saveRawConfig. */
24
+ let enabledCalls: boolean[] = [];
25
+ let workerProbe: { status: "running" | "not_running"; pid?: number } = {
26
+ status: "not_running",
27
+ };
28
+ let configEnabled = false;
29
+
30
+ mock.module("../../../schedule/worker-control.js", () => ({
31
+ ScheduleWorkerSpawnError: FakeSpawnError,
32
+ spawnScheduleWorkerProcess: async (opts: {
33
+ detached?: boolean;
34
+ terminateOnTimeout?: boolean;
35
+ }) => {
36
+ spawnArgs.push(opts);
37
+ return spawnImpl();
38
+ },
39
+ stopScheduleWorkerProcess: () => stopImpl(),
40
+ probeScheduleWorker: () => workerProbe,
41
+ }));
42
+
43
+ mock.module("../../../config/loader.js", () => ({
44
+ ...actualLoader,
45
+ getConfigReadOnly: () => ({
46
+ schedules: { worker: { enabled: configEnabled } },
47
+ }),
48
+ loadRawConfig: () => ({}),
49
+ saveRawConfig: (cfg: { schedules?: { worker?: { enabled?: boolean } } }) => {
50
+ enabledCalls.push(cfg.schedules?.worker?.enabled === true);
51
+ },
52
+ }));
53
+
54
+ const { ROUTES } = await import("../schedule-worker-routes.js");
55
+
56
+ function handler(operationId: string) {
57
+ const route = ROUTES.find((r) => r.operationId === operationId);
58
+ if (!route) {
59
+ throw new Error(`route ${operationId} not registered`);
60
+ }
61
+ return route.handler as () => Promise<Record<string, unknown>>;
62
+ }
63
+
64
+ beforeEach(() => {
65
+ spawnArgs = [];
66
+ enabledCalls = [];
67
+ spawnImpl = async () => ({ pid: 4242, alreadyRunning: false });
68
+ stopImpl = () => ({ status: "not_running" });
69
+ workerProbe = { status: "not_running" };
70
+ configEnabled = false;
71
+ });
72
+
73
+ describe("schedules_worker_start", () => {
74
+ test("spawns as a daemon child and enables the flag on success", async () => {
75
+ spawnImpl = async () => ({ pid: 4242, alreadyRunning: false });
76
+
77
+ const res = await handler("schedules_worker_start")();
78
+
79
+ expect(spawnArgs).toEqual([{ detached: false, terminateOnTimeout: true }]);
80
+ expect(enabledCalls).toEqual([true]);
81
+ expect(res).toEqual({
82
+ pid: 4242,
83
+ alreadyRunning: false,
84
+ workerEnabled: true,
85
+ pidPath: getScheduleWorkerPidPath(),
86
+ });
87
+ });
88
+
89
+ test("reports an already-running worker without re-spawning", async () => {
90
+ spawnImpl = async () => ({ pid: 99, alreadyRunning: true });
91
+
92
+ const res = await handler("schedules_worker_start")();
93
+
94
+ expect(res).toMatchObject({ pid: 99, alreadyRunning: true });
95
+ expect(enabledCalls).toEqual([true]);
96
+ });
97
+
98
+ test("throws and leaves the flag untouched when the spawn fails", async () => {
99
+ spawnImpl = async () => {
100
+ throw new FakeSpawnError("worker exited during startup");
101
+ };
102
+
103
+ await expect(handler("schedules_worker_start")()).rejects.toThrow(
104
+ "worker exited during startup",
105
+ );
106
+ expect(enabledCalls).toEqual([]);
107
+ });
108
+ });
109
+
110
+ describe("schedules_worker_stop", () => {
111
+ test("disables the flag and reports a signalled running worker", async () => {
112
+ stopImpl = () => ({ status: "running", pid: 555 });
113
+
114
+ const res = await handler("schedules_worker_stop")();
115
+
116
+ expect(enabledCalls).toEqual([false]);
117
+ expect(res).toEqual({
118
+ workerWasRunning: true,
119
+ pid: 555,
120
+ workerEnabled: false,
121
+ });
122
+ });
123
+
124
+ test("disables the flag and succeeds when no worker is running", async () => {
125
+ stopImpl = () => ({ status: "not_running" });
126
+
127
+ const res = await handler("schedules_worker_stop")();
128
+
129
+ expect(enabledCalls).toEqual([false]);
130
+ expect(res).toEqual({ workerWasRunning: false, workerEnabled: false });
131
+ });
132
+ });
133
+
134
+ describe("schedules_worker_status", () => {
135
+ test("reports a running worker with the flag on and the in-process scheduler standing down", async () => {
136
+ workerProbe = { status: "running", pid: 321 };
137
+ configEnabled = true;
138
+
139
+ const res = await handler("schedules_worker_status")();
140
+
141
+ expect(res).toEqual({
142
+ status: "running",
143
+ pid: 321,
144
+ workerEnabled: true,
145
+ inProcessScheduler: { status: "not_running" },
146
+ });
147
+ });
148
+
149
+ test("reports the daemon as the schedule runner when the flag is off", async () => {
150
+ workerProbe = { status: "not_running" };
151
+ configEnabled = false;
152
+
153
+ const res = await handler("schedules_worker_status")();
154
+
155
+ expect(res).toEqual({
156
+ status: "not_running",
157
+ workerEnabled: false,
158
+ inProcessScheduler: { status: "running", pid: process.pid },
159
+ });
160
+ });
161
+ });
@@ -110,7 +110,7 @@ mock.module("../../../daemon/conversation-store.js", () => ({
110
110
  }));
111
111
 
112
112
  mock.module("../../../persistence/raw-query.js", () => ({
113
- rawGet: (sql: string, ...params: unknown[]) => {
113
+ rawGet: (_label: string, sql: string, ...params: unknown[]) => {
114
114
  rawGetCalls.push({ sql, params });
115
115
  return rawGetReturn;
116
116
  },
@@ -75,7 +75,7 @@ mock.module("../../../daemon/conversation-store.js", () => ({
75
75
  }));
76
76
 
77
77
  mock.module("../../../persistence/raw-query.js", () => ({
78
- rawGet: (sql: string, ...params: unknown[]) => {
78
+ rawGet: (_label: string, sql: string, ...params: unknown[]) => {
79
79
  rawGetCalls.push({ sql, params });
80
80
  return rawGetReturn;
81
81
  },
@@ -13,7 +13,10 @@ import { resolveAgentWithAutoInstall } from "../../acp/auto-install.js";
13
13
  import { getAcpSessionManager } from "../../acp/index.js";
14
14
  import { prepareAgentEnv } from "../../acp/prepare-agent-env.js";
15
15
  import { formatResolveFailure } from "../../acp/resolve-agent.js";
16
- import { AcpResumeError } from "../../acp/session-manager.js";
16
+ import {
17
+ AcpResumeError,
18
+ AcpSessionNotFoundError,
19
+ } from "../../acp/session-manager.js";
17
20
  import type { AcpSessionState } from "../../acp/types.js";
18
21
  import { getConfig } from "../../config/loader.js";
19
22
  import type { UserDecision } from "../../permissions/types.js";
@@ -29,6 +32,7 @@ import {
29
32
  ConflictError,
30
33
  FailedDependencyError,
31
34
  ForbiddenError,
35
+ InternalError,
32
36
  NotFoundError,
33
37
  } from "./errors.js";
34
38
  import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
@@ -387,8 +391,16 @@ async function cancelSession({ pathParams }: RouteHandlerArgs) {
387
391
  const manager = getAcpSessionManager();
388
392
  try {
389
393
  await manager.cancel(id);
390
- } catch {
391
- throw new NotFoundError("ACP session not found");
394
+ } catch (err) {
395
+ // Only a genuinely unknown session is a 404. A protocol-cancel failure on a
396
+ // still-live session is a real error, not a missing session, so it surfaces
397
+ // as a 500 rather than a misleading not-found.
398
+ if (err instanceof AcpSessionNotFoundError) {
399
+ throw new NotFoundError("ACP session not found");
400
+ }
401
+ throw new InternalError(
402
+ err instanceof Error ? err.message : "Failed to cancel ACP session",
403
+ );
392
404
  }
393
405
  return { acpSessionId: id, cancelled: true };
394
406
  }
@@ -49,7 +49,10 @@ import { compareSemver } from "../../daemon/handlers/shared.js";
49
49
  import { computeContentId } from "../../util/content-id.js";
50
50
  import { getLogger } from "../../util/logger.js";
51
51
  import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
52
- import { publishAppsChanged } from "../sync/resource-sync-events.js";
52
+ import {
53
+ getOriginClientId,
54
+ publishAppsChanged,
55
+ } from "../sync/resource-sync-events.js";
53
56
  import {
54
57
  BadRequestError,
55
58
  NotFoundError,
@@ -63,12 +66,6 @@ const log = getLogger("app-management-routes");
63
66
  // Helpers
64
67
  // ---------------------------------------------------------------------------
65
68
 
66
- function getOriginClientId(
67
- headers: RouteHandlerArgs["headers"],
68
- ): string | undefined {
69
- return headers?.["x-vellum-client-id"]?.trim() || undefined;
70
- }
71
-
72
69
  function getSharedAppsDir(): string {
73
70
  return join(
74
71
  homedir(),
@@ -179,6 +179,10 @@ function handleSecret({ body }: RouteHandlerArgs) {
179
179
  (resolved?.rpcResolve as ((r: SecretPromptResult) => void) | undefined)?.({
180
180
  value: value ?? null,
181
181
  delivery: (effectiveDelivery as SecretDelivery) ?? "store",
182
+ // A missing value here is a deliberate user cancel (the client dismissed
183
+ // the prompt), distinct from the timeout path. Tag it so downstream callers
184
+ // can treat it as a valid outcome rather than a failure.
185
+ ...(value === undefined ? { reason: "cancelled" as const } : {}),
182
186
  });
183
187
  return { accepted: true };
184
188
  }
@@ -2,11 +2,17 @@
2
2
  * Route handlers for attachment upload, download, and deletion.
3
3
  */
4
4
  import {
5
+ closeSync,
5
6
  copyFileSync,
6
7
  existsSync,
7
8
  mkdirSync,
9
+ openSync,
10
+ readFileSync,
11
+ readSync,
8
12
  realpathSync,
9
13
  statSync,
14
+ unlinkSync,
15
+ writeFileSync,
10
16
  } from "node:fs";
11
17
  import { join, resolve, sep } from "node:path";
12
18
 
@@ -26,6 +32,11 @@ import {
26
32
  getFilePathForAttachment,
27
33
  validateAttachmentUpload,
28
34
  } from "../../persistence/attachments-store.js";
35
+ import {
36
+ isHeifImage,
37
+ jpegFilenameFor,
38
+ normalizeImageBytes,
39
+ } from "../../util/image-conversion.js";
29
40
  import { getWorkspaceDir } from "../../util/platform.js";
30
41
  import { ACTOR_PRINCIPALS, LOCAL_PRINCIPALS } from "../auth/route-policy.js";
31
42
  import {
@@ -45,6 +56,18 @@ const MAX_UPLOAD_BODY_BYTES = 150 * 1024 * 1024;
45
56
  /** 100 MB — maximum file size for file-backed uploads (matches client memorySafetyLimit). */
46
57
  const MAX_FILE_BACKED_UPLOAD_BYTES = 100 * 1024 * 1024;
47
58
 
59
+ /** Read the first `length` bytes of a file without loading the rest. */
60
+ function readFileHead(path: string, length: number): Buffer {
61
+ const fd = openSync(path, "r");
62
+ try {
63
+ const head = Buffer.alloc(length);
64
+ const bytesRead = readSync(fd, head, 0, length, 0);
65
+ return head.subarray(0, bytesRead);
66
+ } finally {
67
+ closeSync(fd);
68
+ }
69
+ }
70
+
48
71
  function resolveCanonicalPath(filePath: string): string {
49
72
  try {
50
73
  return realpathSync(filePath);
@@ -315,6 +338,8 @@ function handleJsonUpload(
315
338
 
316
339
  if (filePath && typeof filePath === "string" && (!data || data === "")) {
317
340
  let resolvedPath = resolveAllowedFileBackedAttachmentPath(filePath);
341
+ let storedFilename = filename;
342
+ let storedMimeType = mimeType;
318
343
 
319
344
  if (!resolvedPath) {
320
345
  const canonicalSource = resolveCanonicalPath(filePath);
@@ -335,8 +360,34 @@ function handleJsonUpload(
335
360
  );
336
361
  mkdirSync(workspaceAttachmentsDir, { recursive: true });
337
362
  const destFilename = `${Date.now()}-${filename.replace(/[^a-zA-Z0-9._-]/g, "_")}`;
338
- const destPath = join(workspaceAttachmentsDir, destFilename);
363
+ let destPath = join(workspaceAttachmentsDir, destFilename);
339
364
  copyFileSync(canonicalSource, destPath);
365
+ // The staged copy is daemon-owned, so HEIF/HEIC content can be stored
366
+ // as a JPEG master without mutating the caller's file. Allowlisted
367
+ // in-place paths (recordings, conversation attachments) are registered
368
+ // verbatim — the daemon does not own those files. The head sniff keeps
369
+ // non-HEIF files (e.g. large videos) from being read into memory.
370
+ try {
371
+ if (isHeifImage(readFileHead(destPath, 12))) {
372
+ const norm = normalizeImageBytes(mimeType, readFileSync(destPath));
373
+ if (
374
+ norm.converted &&
375
+ norm.bytes.length <= MAX_FILE_BACKED_UPLOAD_BYTES
376
+ ) {
377
+ const convertedPath = join(
378
+ workspaceAttachmentsDir,
379
+ jpegFilenameFor(destFilename),
380
+ );
381
+ writeFileSync(convertedPath, norm.bytes);
382
+ unlinkSync(destPath);
383
+ destPath = convertedPath;
384
+ storedFilename = jpegFilenameFor(filename);
385
+ storedMimeType = norm.mimeType;
386
+ }
387
+ }
388
+ } catch {
389
+ // Conversion is best-effort; the raw copy is registered on failure.
390
+ }
340
391
  resolvedPath = resolveCanonicalPath(destPath);
341
392
  }
342
393
 
@@ -345,8 +396,8 @@ function handleJsonUpload(
345
396
  }
346
397
  const sizeBytes = statSync(resolvedPath).size;
347
398
  attachment = uploadFileBackedAttachment(
348
- filename,
349
- mimeType,
399
+ storedFilename,
400
+ storedMimeType,
350
401
  resolvedPath,
351
402
  sizeBytes,
352
403
  );
@@ -120,7 +120,6 @@ function handleRenderFromTraits({ body, headers }: RouteHandlerArgs) {
120
120
  }
121
121
  }
122
122
 
123
- updateIdentityAvatarSection(null, log);
124
123
  publishAvatarChanged(headers?.["x-vellum-client-id"]?.trim() || undefined);
125
124
  return { ok: true };
126
125
  }
@@ -153,7 +152,6 @@ async function handleGenerateAvatar({ body, headers }: RouteHandlerArgs) {
153
152
  // character sidecars (traits + ASCII), and records an AI-sourced manifest.
154
153
  setImage(result.pngBuffer, "ai");
155
154
 
156
- updateIdentityAvatarSection(null, log);
157
155
  publishAvatarChanged(headers?.["x-vellum-client-id"]?.trim() || undefined);
158
156
  return { ok: true, message: result.content };
159
157
  }
@@ -202,7 +200,6 @@ function handleUploadAvatarImage({ body, headers }: RouteHandlerArgs) {
202
200
  // character sidecars (traits + ASCII), and records an uploaded-image manifest.
203
201
  setImage(buffer, "upload");
204
202
 
205
- updateIdentityAvatarSection(null, log);
206
203
  publishAvatarChanged(headers?.["x-vellum-client-id"]?.trim() || undefined);
207
204
  return { ok: true };
208
205
  }
@@ -235,7 +232,6 @@ function handleSetAvatar({ body, headers }: RouteHandlerArgs) {
235
232
  // recorded as an uploaded image atomically (no more stale both-files state).
236
233
  setImage(readFileSync(normalized), "upload");
237
234
 
238
- updateIdentityAvatarSection(null, log);
239
235
  publishAvatarChanged(headers?.["x-vellum-client-id"]?.trim() || undefined);
240
236
  return { ok: true };
241
237
  }
@@ -11,8 +11,9 @@ import { z } from "zod";
11
11
  import {
12
12
  cancelBackgroundTool,
13
13
  listBackgroundTools,
14
+ listCompletedBackgroundTools,
14
15
  } from "../../tools/background-tool-registry.js";
15
- import { LOCAL_PRINCIPALS } from "../auth/route-policy.js";
16
+ import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
16
17
  import { BadRequestError } from "./errors.js";
17
18
  import type { RouteDefinition, RouteHandlerArgs } from "./types.js";
18
19
 
@@ -23,6 +24,7 @@ async function handleBackgroundToolList({
23
24
  }: RouteHandlerArgs) {
24
25
  const conversationId = queryParams.conversationId || undefined;
25
26
  const tools = listBackgroundTools(conversationId);
27
+ const completed = listCompletedBackgroundTools(conversationId);
26
28
 
27
29
  return {
28
30
  tools: tools.map((t) => ({
@@ -32,6 +34,20 @@ async function handleBackgroundToolList({
32
34
  command: t.command,
33
35
  startedAt: t.startedAt,
34
36
  })),
37
+ // Recently-completed tools let a client that missed the live completion
38
+ // event (chat unmounted / different conversation active) recover the
39
+ // terminal status on rehydration instead of wrongly retiring as cancelled.
40
+ completed: completed.map((t) => ({
41
+ id: t.id,
42
+ toolName: t.toolName,
43
+ conversationId: t.conversationId,
44
+ command: t.command,
45
+ startedAt: t.startedAt,
46
+ status: t.status,
47
+ exitCode: t.exitCode,
48
+ output: t.output,
49
+ completedAt: t.completedAt,
50
+ })),
35
51
  };
36
52
  }
37
53
 
@@ -55,14 +71,24 @@ const BackgroundToolSchema = z.object({
55
71
  startedAt: z.number(),
56
72
  });
57
73
 
74
+ const CompletedBackgroundToolSchema = BackgroundToolSchema.extend({
75
+ status: z.enum(["completed", "failed", "cancelled"]),
76
+ exitCode: z.number().nullable(),
77
+ output: z.string(),
78
+ completedAt: z.number(),
79
+ });
80
+
58
81
  export const ROUTES: RouteDefinition[] = [
59
82
  {
60
83
  operationId: "background_tool_list",
61
84
  endpoint: "background-tools",
62
85
  method: "GET",
86
+ // Read path for the chat UI's background-task rehydration, like the ACP
87
+ // `acp_list_sessions` route — so the web actor (not just a local CLI
88
+ // caller) can re-seed inline cards on reload.
63
89
  policy: {
64
- requiredScopes: ["settings.read"],
65
- allowedPrincipalTypes: LOCAL_PRINCIPALS,
90
+ requiredScopes: ["chat.read"],
91
+ allowedPrincipalTypes: ACTOR_PRINCIPALS,
66
92
  },
67
93
  handler: handleBackgroundToolList,
68
94
  summary: "List active background tools",
@@ -79,15 +105,18 @@ export const ROUTES: RouteDefinition[] = [
79
105
  ],
80
106
  responseBody: z.object({
81
107
  tools: z.array(BackgroundToolSchema),
108
+ completed: z.array(CompletedBackgroundToolSchema),
82
109
  }),
83
110
  },
84
111
  {
85
112
  operationId: "background_tool_cancel",
86
113
  endpoint: "background-tools/cancel",
87
114
  method: "POST",
115
+ // Write path for the inline card's Stop button, like ACP `acp_cancel` —
116
+ // the web actor cancels a running task it can see.
88
117
  policy: {
89
- requiredScopes: ["settings.write"],
90
- allowedPrincipalTypes: LOCAL_PRINCIPALS,
118
+ requiredScopes: ["chat.write"],
119
+ allowedPrincipalTypes: ACTOR_PRINCIPALS,
91
120
  },
92
121
  handler: handleBackgroundToolCancel,
93
122
  summary: "Cancel a background tool",
@@ -16,6 +16,11 @@ import { z } from "zod";
16
16
 
17
17
  import { getConfig } from "../../config/loader.js";
18
18
  import { getOrCreateConversation } from "../../daemon/conversation-store.js";
19
+ import {
20
+ canonicalizeTimeZone,
21
+ formatTurnTimestamp,
22
+ resolveTurnTimezoneContext,
23
+ } from "../../daemon/date-context.js";
19
24
  import { readNowScratchpad } from "../../daemon/now-scratchpad.js";
20
25
  import { getConversationByKey } from "../../persistence/conversation-key-store.js";
21
26
  import { getAllToolDefinitions } from "../../tools/registry.js";
@@ -64,6 +69,20 @@ async function handleBtw({
64
69
  }
65
70
 
66
71
  const trimmedContent = content.trim();
72
+ const config = getConfig();
73
+ const clientTimezone =
74
+ typeof body?.clientTimezone === "string"
75
+ ? canonicalizeTimeZone(body.clientTimezone)
76
+ : null;
77
+ const timezoneOptions = {
78
+ configuredUserTimeZone: config.ui?.userTimezone ?? null,
79
+ clientTimezone,
80
+ detectedTimezone: config.ui?.detectedTimezone ?? null,
81
+ };
82
+ const greetingCacheScope =
83
+ conversationKey === GREETING_KEY
84
+ ? resolveTurnTimezoneContext(timezoneOptions).effectiveTimezone
85
+ : null;
67
86
 
68
87
  // ----- Empty-state greeting fast-path -----
69
88
  // User-authored `## Greetings` win; otherwise replay a cached greeting when
@@ -76,7 +95,7 @@ async function handleBtw({
76
95
  log.debug("Returning authored empty-state greeting");
77
96
  return streamText(pickRandom(authored));
78
97
  }
79
- const cached = getCachedEmptyStateGreeting();
98
+ const cached = getCachedEmptyStateGreeting(greetingCacheScope);
80
99
  if (cached) {
81
100
  log.debug("Returning cached empty-state greeting");
82
101
  return streamText(cached);
@@ -85,13 +104,18 @@ async function handleBtw({
85
104
 
86
105
  // ----- Greeting context enrichment -----
87
106
  let effectiveContent = trimmedContent;
107
+ if (conversationKey === GREETING_KEY) {
108
+ effectiveContent = `${effectiveContent}\n\n<turn_context>\ncurrent_time: ${formatTurnTimestamp(
109
+ timezoneOptions,
110
+ )}\n</turn_context>`;
111
+ }
88
112
  if (
89
113
  conversationKey === GREETING_KEY &&
90
- getConfig().memory.retrieval.scratchpadInjection.enabled
114
+ config.memory.retrieval.scratchpadInjection.enabled
91
115
  ) {
92
116
  const now = readNowScratchpad();
93
117
  if (now) {
94
- effectiveContent = `${trimmedContent}\n\n<context>\n${now}\n</context>`;
118
+ effectiveContent = `${effectiveContent}\n\n<context>\n${now}\n</context>`;
95
119
  }
96
120
  }
97
121
 
@@ -138,7 +162,7 @@ async function handleBtw({
138
162
 
139
163
  if (isGreeting && result.text) {
140
164
  // setCachedEmptyStateGreeting is a no-op when the TTL is 0.
141
- setCachedEmptyStateGreeting(result.text);
165
+ setCachedEmptyStateGreeting(result.text, greetingCacheScope);
142
166
  log.debug("Cached empty-state greeting text");
143
167
  }
144
168
 
@@ -200,6 +224,10 @@ export const ROUTES: RouteDefinition[] = [
200
224
  .string()
201
225
  .describe("Conversation key to scope the call"),
202
226
  content: z.string().describe("User prompt content"),
227
+ clientTimezone: z
228
+ .string()
229
+ .optional()
230
+ .describe("IANA timezone reported by the active client"),
203
231
  }),
204
232
  handler: handleBtw,
205
233
  },