@vellumai/assistant 0.10.7-dev.202607101836.11f2eba → 0.10.7-dev.202607102035.64f07ea

package/openapi.yaml

@@ -30607,270 +30607,6 @@ paths:
                   - path
                   - mode
                 additionalProperties: false
-  /v1/work-items:
-    get:
-      operationId: workitems_get
-      summary: List work items
-      description: Return work items, optionally filtered by status.
-      tags:
-        - work-items
-      parameters:
-        - name: status
-          in: query
-          required: false
-          schema:
-            type: string
-            enum:
-              - pending
-              - running
-              - awaiting_review
-              - done
-              - failed
-              - cancelled
-              - archived
-          description: Filter by work item status
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  items:
-                    type: array
-                    items: {}
-                required:
-                  - items
-                additionalProperties: false
-  /v1/work-items/{id}:
-    delete:
-      operationId: workitems_by_id_delete
-      summary: Delete a work item
-      description: Permanently remove a work item.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-    get:
-      operationId: workitems_by_id_get
-      summary: Get a work item
-      description: Return a single work item by ID.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-    patch:
-      operationId: workitems_by_id_patch
-      summary: Update a work item
-      description: Partially update a work item's title, notes, status, or priority.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                title:
-                  type: string
-                notes:
-                  type: string
-                status:
-                  type: string
-                priorityTier:
-                  type: integer
-                  minimum: -9007199254740991
-                  maximum: 9007199254740991
-                sortIndex:
-                  type: integer
-                  minimum: -9007199254740991
-                  maximum: 9007199254740991
-              required:
-                - title
-                - notes
-                - status
-                - priorityTier
-                - sortIndex
-      responses:
-        "200":
-          description: Successful response
-  /v1/work-items/{id}/approve-permissions:
-    post:
-      operationId: workitems_by_id_approvepermissions_post
-      summary: Approve tool permissions
-      description: Pre-approve a set of tools for a work item before it runs.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                approvedTools:
-                  type: array
-                  items: {}
-                  description: Array of tool names to approve
-              required:
-                - approvedTools
-      responses:
-        "200":
-          description: Successful response
-  /v1/work-items/{id}/cancel:
-    post:
-      operationId: workitems_by_id_cancel_post
-      summary: Cancel a running work item
-      description: Abort a running work item and set its status to cancelled.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-        "404":
-          description: Work item not found
-        "409":
-          description: Work item is not running
-  /v1/work-items/{id}/complete:
-    post:
-      operationId: workitems_by_id_complete_post
-      summary: Complete a work item
-      description: Transition a work item from awaiting_review to done.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-  /v1/work-items/{id}/output:
-    get:
-      operationId: workitems_by_id_output_get
-      summary: Get work item output
-      description: Return the final output of a completed work item run.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  id:
-                    type: string
-                  success:
-                    type: boolean
-                  output:
-                    type: object
-                    properties: {}
-                    additionalProperties: {}
-                required:
-                  - id
-                  - success
-                  - output
-                additionalProperties: false
-  /v1/work-items/{id}/preflight:
-    post:
-      operationId: workitems_by_id_preflight_post
-      summary: Preflight check
-      description: Check tool permissions needed before running a work item.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  id:
-                    type: string
-                  success:
-                    type: boolean
-                  permissions:
-                    type: object
-                    properties: {}
-                    additionalProperties: {}
-                required:
-                  - id
-                  - success
-                  - permissions
-                additionalProperties: false
-  /v1/work-items/{id}/run:
-    post:
-      operationId: workitems_by_id_run_post
-      summary: Run a work item
-      description: Execute the task associated with a work item. Returns immediately; execution happens in the background.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-        "403":
-          description: Required tool permissions not approved
-        "404":
-          description: Work item or associated task not found
-        "409":
-          description: Work item is already running or not runnable
   /v1/workflows:
     get:
       operationId: workflows_get

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.10.7-dev.202607101836.11f2eba",
+  "version": "0.10.7-dev.202607102035.64f07ea",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/__tests__/conversation-history-web-search.test.ts

@@ -703,10 +703,6 @@ describe("web_search_tool_result structural guard", () => {
     // web_search_tool_result is not emitted through the subagent event path.
     "runtime/routes/subagents-routes.ts",
 
-    // Extracts tool results from persisted message content for work-item
-    // display. web_search_tool_result blocks are not relevant here.
-    "runtime/routes/work-items-routes.ts",
-
     // Media token counting iterates tool_result.contentBlocks for nested
     // image/file blocks. web_search_tool_result has opaque content with no
     // contentBlocks property, so it cannot contain nested media.

package/src/__tests__/helpers/set-config.ts

@@ -0,0 +1,40 @@
+/**
+ * Shared test helper: seed workspace config for real instead of mocking
+ * `config/loader`.
+ *
+ * Writes a top-level key into `$VELLUM_WORKSPACE_DIR/config.json`
+ * (read-modify-write, so seeding several keys composes) and bumps the file
+ * mtime monotonically so the loader's file-signature cache re-reads on the
+ * next `getConfig()`/`getConfigReadOnly()`. The production loader
+ * schema-merges the partial file over defaults — the same path a user's
+ * config.json takes.
+ *
+ * Node stdlib only, per the test-machinery isolation rules.
+ */
+import { existsSync, readFileSync, utimesSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+
+let mtimeSeq = 0;
+
+export function setConfig(key: string, value: unknown): void {
+  const path = join(process.env.VELLUM_WORKSPACE_DIR!, "config.json");
+  let config: Record<string, unknown> = {};
+  if (existsSync(path)) {
+    try {
+      const parsed = JSON.parse(readFileSync(path, "utf8")) as unknown;
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+        config = parsed as Record<string, unknown>;
+      }
+    } catch {
+      // Unparseable prior seed — start fresh; the loader treats a corrupt
+      // file as defaults anyway.
+    }
+  }
+  config[key] = value;
+  writeFileSync(path, JSON.stringify(config));
+  // Force a distinct mtime per write so the loader's size+mtime+ctime
+  // signature can never read two consecutive seeds as identical.
+  mtimeSeq += 1;
+  const stamp = new Date(Date.now() + mtimeSeq);
+  utimesSync(path, stamp, stamp);
+}

package/src/__tests__/llm-request-log-disabled-writes.test.ts

@@ -5,24 +5,7 @@
  * prompt/completion payload lands on disk — and return `null`. The read-side
  * 4xx is exercised separately at the route layer.
  */
-import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
-
-// Mutable so each test toggles the flag the store reads via `getConfigReadOnly`.
-let enabled = true;
-mock.module("../config/loader.js", () => ({
-  getConfig: () => ({
-    llmRequestLogs: { readSource: "local", enabled },
-  }),
-  getConfigReadOnly: () => ({
-    llmRequestLogs: { readSource: "local", enabled },
-  }),
-}));
-
-// `mock.module()` persists process-wide; reset so other files don't inherit a
-// stale value.
-afterAll(() => {
-  enabled = true;
-});
+import { beforeEach, describe, expect, test } from "bun:test";
 
 import { getLogsDb } from "../persistence/db-connection.js";
 import { initializeDb } from "../persistence/db-init.js";
@@ -33,6 +16,11 @@ import {
   recordSyntheticAgentErrorMessageLog,
 } from "../persistence/llm-request-log-store.js";
 import { llmRequestLogs } from "../persistence/schema/index.js";
+import { setConfig } from "./helpers/set-config.js";
+
+function setLlmRequestLogging(enabled: boolean): void {
+  setConfig("llmRequestLogs", { readSource: "local", enabled });
+}
 
 await initializeDb();
 
@@ -43,7 +31,7 @@ function resetLogs(): void {
 describe("llmRequestLogs.enabled write gate", () => {
   beforeEach(() => {
     resetLogs();
-    enabled = true;
+    setLlmRequestLogging(true);
   });
 
   test("recordRequestLog writes normally when logging is enabled", () => {
@@ -53,14 +41,14 @@ describe("llmRequestLogs.enabled write gate", () => {
   });
 
   test("recordRequestLog skips the write when logging is disabled", () => {
-    enabled = false;
+    setLlmRequestLogging(false);
     const id = recordRequestLog("conv-1", '{"req":1}', '{"res":1}');
     expect(id).toBeNull();
     expect(getRequestLogsByConversationId("conv-1")).toEqual([]);
   });
 
   test("recordSyntheticAgentErrorMessageLog skips the write when disabled", () => {
-    enabled = false;
+    setLlmRequestLogging(false);
     const id = recordSyntheticAgentErrorMessageLog({
       conversationId: "conv-2",
       messageId: "msg-2",
@@ -74,9 +62,9 @@ describe("llmRequestLogs.enabled write gate", () => {
   });
 
   test("re-enabling logging restores writes", () => {
-    enabled = false;
+    setLlmRequestLogging(false);
     expect(recordRequestLog("conv-3", '{"req":1}', '{"res":1}')).toBeNull();
-    enabled = true;
+    setLlmRequestLogging(true);
     const id = recordRequestLog("conv-3", '{"req":2}', '{"res":2}');
     expect(id).not.toBeNull();
     expect(getRequestLogsByConversationId("conv-3")).toHaveLength(1);

package/src/__tests__/plugin-import-boundary-guard.test.ts

@@ -137,7 +137,6 @@ const BASELINE: Record<string, readonly string[]> = {
     "../../../../telemetry/watchdog-events-store.js",
     "../../../../tools/skills/delete-managed.js",
     "../../../channels/types.js",
-    "../../../config/assistant-feature-flags.js",
     "../../../config/loader.js",
     "../../../config/memory-v3-gate.js",
     "../../../config/schema.js",

package/src/__tests__/tool-execution-abort-cleanup.test.ts

@@ -16,32 +16,11 @@ import { join } from "node:path";
 import { afterEach, beforeEach, describe, expect, mock, test } from "bun:test";
 
 // ── Shared mock setup ────────────────────────────────────────────────────────
-// Config mock must be declared before importing tool modules so that the
-// mock.module calls are hoisted above the dynamic imports.
-
-mock.module("../config/loader.js", () => ({
-  getConfig: () => ({
-    ui: {},
-
-    provider: "anthropic",
-    model: "test",
-    maxTokens: 4096,
-    dataDir: "/tmp",
-    timeouts: {
-      shellDefaultTimeoutSec: 120,
-      shellMaxTimeoutSec: 600,
-      permissionTimeoutSec: 300,
-    },
-    rateLimit: { maxRequestsPerMinute: 0 },
-    secretDetection: {
-      enabled: false,
-    },
-  }),
-  loadConfig: () => ({}),
-  invalidateConfigCache: () => {},
-  loadRawConfig: () => ({}),
-  saveRawConfig: () => {},
-}));
+// The real config loader serves these tests: it reads from the per-test temp
+// workspace and returns schema defaults (the timeout values the shell tool
+// needs are the documented defaults). Mocking `config/loader` here would force
+// the mock to mirror the loader's full export surface — modules under test
+// import it by name, and a partial mock fails to link.
 
 // shell.ts uses the script proxy — stub it to avoid network side-effects.
 mock.module("../tools/network/script-proxy/index.js", () => ({

package/src/cli/AGENTS.md

@@ -123,9 +123,10 @@ registerFooCommand(program);
    _synchronously_ at command registration (so it can't be a lazy
    `import()`) may stay hoisted behind a scoped
    `// eslint-disable-next-line cli/no-daemon-internals` with a comment
-   explaining why. The only current case is `browser/operation-meta` in
+   explaining why. The only current case is `browser/operation-meta`, in
    `commands/browser.ts` (it drives synchronous subcommand generation and
-   deliberately pulls no Playwright graph).
+   deliberately pulls no Playwright graph) and `commands/browser.help.ts`
+   (which derives the declarative help from the same contract).
 
 2. **Lazy-import daemon functionality inside the action.** Running daemon
    logic in-process is encouraged where it avoids an IPC round-trip (which