@vellumai/assistant 0.10.8 → 0.10.9-dev.202607152225.ec6fdbf

package/src/runtime/routes/platform-routes.ts

@@ -3,7 +3,8 @@
  *
  * Serves six operations:
  *   - platform_status (GET platform/status): aggregates platform context,
- *     credentials, assistant ID, webhook secret, and Velay tunnel status.
+ *     credentials, assistant ID, and webhook secret. (Velay tunnel status
+ *     lives on the gateway — see gateway_status.)
  *   - platform_connect (POST platform/connect): checks existing credentials
  *     and emits the show_platform_login signal to connected clients.
  *   - platform_disconnect (POST platform/disconnect): deletes stored platform
@@ -23,7 +24,6 @@ import {
   registerCallbackRoute,
   resolvePlatformCallbackRegistrationContext,
 } from "../../inbound/platform-callback-registration.js";
-import { ipcGetVelayStatus } from "../../ipc/gateway-client.js";
 import { credentialKey } from "../../security/credential-key.js";
 import {
   deleteSecureKeyAsync,
@@ -56,11 +56,6 @@ const CREDENTIAL_KEYS = {
 // Schemas
 // ---------------------------------------------------------------------------
 
-const VelayTunnelStatusSchema = z.object({
-  connected: z.boolean(),
-  publicUrl: z.string().nullable(),
-});
-
 const PlatformStatusResponseSchema = z.object({
   isPlatform: z.boolean(),
   baseUrl: z.string(),
@@ -71,7 +66,6 @@ const PlatformStatusResponseSchema = z.object({
   available: z.boolean(),
   organizationId: z.string().nullable(),
   userId: z.string().nullable(),
-  velayTunnel: VelayTunnelStatusSchema.nullable(),
 });
 type PlatformStatusResponse = z.infer<typeof PlatformStatusResponseSchema>;
 
@@ -137,10 +131,7 @@ type PlatformCreditsResponse = z.infer<typeof PlatformCreditsResponseSchema>;
 async function handlePlatformStatus(
   _args: RouteHandlerArgs,
 ): Promise<PlatformStatusResponse> {
-  const [context, velayTunnel] = await Promise.all([
-    resolvePlatformCallbackRegistrationContext(),
-    ipcGetVelayStatus().catch(() => null),
-  ]);
+  const context = await resolvePlatformCallbackRegistrationContext();
 
   const [orgIdRaw, userIdRaw, webhookSecretRaw] = await Promise.all([
     getSecureKeyAsync(
@@ -172,7 +163,6 @@ async function handlePlatformStatus(
     available: context.enabled,
     organizationId: organizationId || null,
     userId: userId || null,
-    velayTunnel,
   };
 }
 
@@ -433,7 +423,7 @@ export const ROUTES: RouteDefinition[] = [
     },
     summary: "Get platform deployment context and connection status",
     description:
-      "Aggregates platform context, credentials, assistant ID, webhook secret, and Velay tunnel status.",
+      "Aggregates platform context, credentials, assistant ID, and webhook secret. Velay tunnel status is reported separately by gateway_status.",
     tags: ["platform"],
     handler: handlePlatformStatus,
     responseBody: PlatformStatusResponseSchema,

package/src/runtime/routes/playground/__tests__/force-compact.test.ts

@@ -6,10 +6,6 @@ mock.module("../../../../config/assistant-feature-flags.js", () => ({
   isAssistantFeatureFlagEnabled: () => true,
 }));
 
-mock.module("../../../../config/loader.js", () => ({
-  getConfig: () => ({}),
-}));
-
 mock.module("../helpers.js", () => ({
   getConversationById: async () => _mockConversation,
   listConversationsByTitlePrefix: () => [],

package/src/runtime/routes/playground/__tests__/guard.test.ts

@@ -6,10 +6,6 @@ mock.module("../../../../config/assistant-feature-flags.js", () => ({
   isAssistantFeatureFlagEnabled: () => _playgroundEnabled,
 }));
 
-mock.module("../../../../config/loader.js", () => ({
-  getConfig: () => ({}),
-}));
-
 import { RouteError } from "../../errors.js";
 import { assertPlaygroundEnabled } from "../guard.js";
 import { ROUTES } from "../index.js";

package/src/runtime/routes/playground/__tests__/inject-failures.test.ts

@@ -12,20 +12,6 @@ mock.module("../../../../config/assistant-feature-flags.js", () => ({
   isAssistantFeatureFlagEnabled: () => true,
 }));
 
-mock.module("../../../../config/loader.js", () => ({
-  getConfig: () => ({
-    llm: {
-      default: {
-        contextWindow: {
-          enabled: true,
-          maxInputTokens: 200_000,
-          compactThreshold: 0.8,
-        },
-      },
-    },
-  }),
-}));
-
 mock.module("../../../../context/token-estimator.js", () => ({
   estimatePromptTokens: (messages: unknown[]): number => messages.length * 10,
 }));

package/src/runtime/routes/playground/__tests__/reset-circuit.test.ts

@@ -1,30 +1,9 @@
 import { beforeEach, describe, expect, mock, test } from "bun:test";
 
-mock.module("../../../../util/logger.js", () => ({
-  getLogger: () =>
-    new Proxy({} as Record<string, unknown>, {
-      get: () => () => {},
-    }),
-}));
-
 mock.module("../../../../config/assistant-feature-flags.js", () => ({
   isAssistantFeatureFlagEnabled: () => true,
 }));
 
-mock.module("../../../../config/loader.js", () => ({
-  getConfig: () => ({
-    llm: {
-      default: {
-        contextWindow: {
-          enabled: true,
-          maxInputTokens: 200_000,
-          compactThreshold: 0.8,
-        },
-      },
-    },
-  }),
-}));
-
 mock.module("../../../../context/token-estimator.js", () => ({
   estimatePromptTokens: () => 1234,
 }));

package/src/runtime/routes/playground/__tests__/seed-conversation.test.ts

@@ -4,10 +4,6 @@ mock.module("../../../../config/assistant-feature-flags.js", () => ({
   isAssistantFeatureFlagEnabled: () => true,
 }));
 
-mock.module("../../../../config/loader.js", () => ({
-  getConfig: () => ({}),
-}));
-
 type AddMessageArgs = [
   string,
   "user" | "assistant",

package/src/runtime/routes/playground/__tests__/seeded-conversations.test.ts

@@ -4,10 +4,6 @@ mock.module("../../../../config/assistant-feature-flags.js", () => ({
   isAssistantFeatureFlagEnabled: () => true,
 }));
 
-mock.module("../../../../config/loader.js", () => ({
-  getConfig: () => ({}),
-}));
-
 let _listRows: Array<{
   id: string;
   title: string;
@@ -27,7 +23,9 @@ mock.module("../helpers.js", () => ({
   },
   deleteConversationById: (id: string) => {
     deleteCalls.push(id);
-    return typeof _deleteReturn === "function" ? _deleteReturn(id) : _deleteReturn;
+    return typeof _deleteReturn === "function"
+      ? _deleteReturn(id)
+      : _deleteReturn;
   },
   createPlaygroundConversation: () => ({ id: "conv-test" }),
   addPlaygroundMessage: async () => ({ id: "msg-test" }),
@@ -68,9 +66,9 @@ describe("GET playground/seeded-conversations", () => {
       },
     ];
 
-    const body = (await findRoute(
-      "playgroundListSeededConversations",
-    ).handler({})) as { conversations: typeof _listRows };
+    const body = (await findRoute("playgroundListSeededConversations").handler(
+      {},
+    )) as { conversations: typeof _listRows };
 
     expect(body.conversations).toEqual(_listRows);
     expect(listCalls).toEqual([PLAYGROUND_TITLE_PREFIX]);
@@ -113,11 +111,11 @@ describe("DELETE playground/seeded-conversations/:id", () => {
       },
     ];
 
-    const body = (await findRoute(
-      "playgroundDeleteSeededConversation",
-    ).handler({
-      pathParams: { id: "conv-seeded" },
-    })) as { deletedCount: number };
+    const body = (await findRoute("playgroundDeleteSeededConversation").handler(
+      {
+        pathParams: { id: "conv-seeded" },
+      },
+    )) as { deletedCount: number };
 
     expect(body.deletedCount).toBe(1);
     expect(deleteCalls).toEqual(["conv-seeded"]);
@@ -135,11 +133,11 @@ describe("DELETE playground/seeded-conversations/:id", () => {
     ];
     _deleteReturn = false;
 
-    const body = (await findRoute(
-      "playgroundDeleteSeededConversation",
-    ).handler({
-      pathParams: { id: "conv-seeded" },
-    })) as { deletedCount: number };
+    const body = (await findRoute("playgroundDeleteSeededConversation").handler(
+      {
+        pathParams: { id: "conv-seeded" },
+      },
+    )) as { deletedCount: number };
 
     expect(body.deletedCount).toBe(0);
     expect(deleteCalls).toEqual(["conv-seeded"]);

package/src/runtime/routes/playground/__tests__/state.test.ts

@@ -1,19 +1,5 @@
 import { describe, expect, mock, test } from "bun:test";
 
-mock.module("../../../../config/loader.js", () => ({
-  getConfig: () => ({
-    llm: {
-      default: {
-        contextWindow: {
-          enabled: true,
-          maxInputTokens: 200_000,
-          compactThreshold: 0.8,
-        },
-      },
-    },
-  }),
-}));
-
 mock.module("../../../../config/assistant-feature-flags.js", () => ({
   isAssistantFeatureFlagEnabled: () => true,
 }));

package/src/runtime/routes/playground/seed-conversation.ts

@@ -16,7 +16,10 @@ import type { Message } from "../../../providers/types.js";
 import { BadRequestError } from "../errors.js";
 import type { RouteDefinition } from "../types.js";
 import { assertPlaygroundEnabled } from "./guard.js";
-import { addPlaygroundMessage, createPlaygroundConversation } from "./helpers.js";
+import {
+  addPlaygroundMessage,
+  createPlaygroundConversation,
+} from "./helpers.js";
 
 /**
  * Title prefix applied to every seeded-playground conversation. Exported so
@@ -89,9 +92,7 @@ export const ROUTES: RouteDefinition[] = [
       }
 
       for (const msg of messages) {
-        const contentJson = JSON.stringify([
-          { type: "text", text: msg.text },
-        ]);
+        const contentJson = JSON.stringify([{ type: "text", text: msg.text }]);
         await addPlaygroundMessage(conversationId, msg.role, contentJson, {
           skipIndexing: true,
         });

package/src/runtime/routes/playground/seeded-conversations.ts

@@ -42,8 +42,9 @@ export const ROUTES: RouteDefinition[] = [
       assertPlaygroundEnabled();
 
       const id = pathParams!.id;
-      const seeded = listConversationsByTitlePrefix(PLAYGROUND_TITLE_PREFIX)
-        .find((c) => c.id === id);
+      const seeded = listConversationsByTitlePrefix(
+        PLAYGROUND_TITLE_PREFIX,
+      ).find((c) => c.id === id);
       if (!seeded) {
         throw new ForbiddenError("Not a playground conversation");
       }

package/src/runtime/routes/plugins-routes.ts

@@ -49,6 +49,7 @@ import {
   listInstalledPlugins,
 } from "../../cli/lib/list-installed-plugins.js";
 import { getPluginCatalog } from "../../cli/lib/plugin-catalog-cache.js";
+import { resolvePluginSourceFromCatalog } from "../../cli/lib/plugin-catalog-resolve.js";
 import {
   DEFAULT_PIN_HISTORY_LIMIT,
   DEFAULT_PLUGIN_REF,
@@ -87,9 +88,12 @@ import {
   PluginNotUpgradableError,
   upgradePlugin,
 } from "../../cli/lib/upgrade-plugin.js";
+import { getPlatformBaseUrl } from "../../config/env.js";
 import { isPluginDisabled } from "../../plugins/disabled-state.js";
 import { ensurePluginApiShim } from "../../plugins/ensure-plugin-api-shim.js";
+import { reconcilePluginSourcesNow } from "../../plugins/mtime-cache.js";
 import { getLocalCategorySlugs } from "../../skills/categories-cache.js";
+import { getLogger } from "../../util/logger.js";
 import { getWorkspacePluginsDir } from "../../util/platform.js";
 import { ACTOR_PRINCIPALS } from "../auth/route-policy.js";
 import {
@@ -211,6 +215,12 @@ const pluginSearchMatchSchema = z.object({
     .string()
     .optional()
     .describe("Short description, when known (external entries only today)."),
+  icon: z
+    .string()
+    .optional()
+    .describe(
+      "Plugin icon: a curated emoji from the marketplace entry, or an icon URL served by the platform catalog when the plugin ships a bundled image.",
+    ),
   category: z
     .string()
     .nullable()
@@ -694,6 +704,37 @@ const pluginDiffResponseSchema = z.object({
 // Helpers
 // ---------------------------------------------------------------------------
 
+const log = getLogger("plugins-routes");
+
+/**
+ * Emit a structured log for a platform plugin-catalog outage before the caller
+ * maps it to a client-facing error.
+ *
+ * The catalog fetcher (`plugin-catalog-platform.ts`) throws
+ * `PluginCatalogUnavailableError` without logging, and the transport adapters
+ * return the resulting `RouteError` (a 503) without any Sentry capture — so an
+ * outage on the platform-first paths (`search`, `install`, the remote-only
+ * detail view) otherwise leaves no trace beyond the daemon access-log status
+ * code, and the real upstream status / URL is lost. Log at `error` so the
+ * outage is time-correlatable in the daemon log and surfaces in Sentry;
+ * `upstreamStatus` preserves the true platform status (e.g. 404 / 500 / 503)
+ * that the client-facing 503 collapses.
+ */
+function logPluginCatalogUnavailable(
+  operation: string,
+  err: PluginCatalogUnavailableError,
+): void {
+  log.error(
+    {
+      err,
+      operation,
+      upstreamStatus: err.status,
+      platformBaseUrl: getPlatformBaseUrl(),
+    },
+    "Platform plugin catalog unavailable",
+  );
+}
+
 interface PluginView {
   id: string;
   name: string;
@@ -787,6 +828,7 @@ interface PluginMatchView {
   name: string;
   path: string;
   description?: string;
+  icon?: string;
   category: string | null;
   source: { kind: "github"; repo: string; path?: string; ref: string };
 }
@@ -814,6 +856,9 @@ function projectMatch(
   if (m.description !== undefined) {
     view.description = m.description;
   }
+  if (m.icon !== undefined) {
+    view.icon = m.icon;
+  }
   return view;
 }
 
@@ -869,10 +914,31 @@ export async function loadCategoryMapBounded(
       }),
     ]);
     if (!catalog) {
+      // Timed out past the budget: the installed list degrades to no
+      // categories rather than stalling. Non-fatal, but log it so a slow
+      // marketplace is diagnosable and not silently invisible.
+      log.warn(
+        { timeoutMs, platformBaseUrl: getPlatformBaseUrl() },
+        "Plugin catalog lookup timed out; listing without categories",
+      );
       return new Map();
     }
     return new Map(catalog.matches.map((m) => [m.name, m.category]));
-  } catch {
+  } catch (err) {
+    // The installed list must never fail on a catalog outage, so this degrades
+    // to no categories — but log it (warn: the request still succeeds) so the
+    // same platform outage that hard-fails search/install is not invisible on
+    // the list path. `upstreamStatus` is preserved when the failure carries one.
+    log.warn(
+      {
+        err,
+        platformBaseUrl: getPlatformBaseUrl(),
+        ...(err instanceof PluginCatalogUnavailableError
+          ? { upstreamStatus: err.status }
+          : {}),
+      },
+      "Plugin catalog lookup failed; listing without categories",
+    );
     return new Map();
   } finally {
     if (timer) {
@@ -958,12 +1024,11 @@ async function handleSearchPlugins({
 
   try {
     // Reject a malformed regex before any network I/O so a user typo is a
-    // cheap deterministic 400 — never a wasted GitHub request that could
-    // surface as 503 on a cold cache when upstream is rate-limited.
+    // cheap deterministic 400 rather than a wasted catalog fetch.
     assertValidSearchPattern(query);
-    // The catalog is cached per ref (and served stale on upstream failure),
-    // so repeated searches don't re-hit GitHub's unauthenticated rate limit.
-    // Filtering by the query is an in-memory operation over that catalog.
+    // getPluginCatalog is platform-first (or the bundled manifest when platform
+    // features are disabled) and fails hard on a platform error — never served
+    // stale. Filtering by the query is in-memory over the resolved catalog.
     const catalog = await getPluginCatalog(ref, {
       fetch: globalThis.fetch.bind(globalThis),
     });
@@ -984,11 +1049,12 @@ async function handleSearchPlugins({
     if (err instanceof InvalidSearchPatternError) {
       throw new BadRequestError(err.message);
     }
-    // A rate-limited or unavailable upstream (with no cache to fall back on)
-    // is transient and retryable — surface it as 503 rather than a
+    // A rate-limited or unavailable platform (no stale catalog to fall back
+    // on) is transient and retryable — surface it as 503 rather than a
     // misleading 500 so the client can show a "temporarily unavailable"
     // state and retry later.
     if (err instanceof PluginCatalogUnavailableError) {
+      logPluginCatalogUnavailable("search", err);
       throw new ServiceUnavailableError(err.message);
     }
     throw new InternalError(
@@ -1027,7 +1093,15 @@ async function handleUninstallPlugin({
   await ensurePluginApiShim().catch(() => {});
 
   try {
+    // `uninstallPlugin` runs the plugin's `shutdown` hook (while its files are
+    // still present) and then removes the directory — both in this daemon
+    // process. Following it with a reconcile drops the plugin's now-absent
+    // tools and hooks from the in-memory caches immediately (the `shutdown`
+    // already ran, so the reconcile's deactivation does not run it again),
+    // rather than leaving that to the background source watcher. Symmetric to
+    // the install route, which reconciles to bring a new plugin up.
     const result = await uninstallPlugin({ name: rawName });
+    await reconcilePluginSourcesNow();
     publishPluginsChanged(getOriginClientId(headers));
     return { name: result.name, target: result.target };
   } catch (err) {
@@ -1066,6 +1140,13 @@ async function handleGetPluginDetails({
     if (err instanceof PluginDetailsNotFoundError) {
       throw new NotFoundError(err.message);
     }
+    // A catalog outage blocking a remote-only (not-installed) detail view is
+    // transient — surface it as retryable rather than a misleading 404/500 so
+    // clients retry instead of treating the plugin as permanently gone.
+    if (err instanceof PluginCatalogUnavailableError) {
+      logPluginCatalogUnavailable("details", err);
+      throw new ServiceUnavailableError(err.message);
+    }
     throw new InternalError(
       err instanceof Error ? err.message : "plugin detail lookup failed",
     );
@@ -1103,29 +1184,65 @@ async function resolveInstallMarketplaceRef(
 }
 
 async function handleInstallPlugin({ body = {}, headers }: RouteHandlerArgs) {
-  const name = typeof body.name === "string" ? body.name : "";
-  if (!name) {
+  const rawName = typeof body.name === "string" ? body.name : "";
+  if (!rawName) {
     throw new BadRequestError("`name` is required");
   }
   const force = typeof body.force === "boolean" ? body.force : undefined;
   const pin = typeof body.pin === "string" ? body.pin : undefined;
 
-  // The marketplace ref is never taken raw from the request: a caller-supplied
+  // The install source is never taken raw from the request: a caller-supplied
   // ref would let any `settings.write` principal install from an unreviewed
   // revision (a PR branch, fork ref, ...) whose manifest could carry attacker
-  // code the loader then dynamically imports. Installs over HTTP therefore
-  // resolve only against reviewed history. A `pin` is honored by mapping it —
-  // server-side — to the marketplace commit that introduced it, but only if it
-  // appears in the plugin's reviewed pin history; an unreviewed SHA is refused.
-  // The default install reads the current catalog on `DEFAULT_PLUGIN_REF`.
-  // Operators who need an unreviewed revision use the local CLI's
-  // `assistant plugins install --pin <sha> --allow-unreviewed`.
+  // code the loader then dynamically imports. The default (no-pin) install
+  // resolves owner/repo/ref from the gated catalog — platform-first, or the
+  // bundled manifest when platform features are disabled — which is the same
+  // reviewed source of truth `handleSearchPlugins` advertises, and installs via
+  // a trusted pre-resolved source (no direct `plugins/marketplace.json` fetch).
+  // A `pin` is honored by mapping it — server-side — to the marketplace commit
+  // that introduced it through the plugin's reviewed pin history; an unreviewed
+  // SHA is refused. Operators who need an unreviewed revision use the local
+  // CLI's `assistant plugins install --pin <sha> --allow-unreviewed`.
   try {
-    const marketplaceRef = await resolveInstallMarketplaceRef(name, pin);
-    const result = await installPlugin(
-      { name, ref: marketplaceRef, force },
-      { fetch: globalThis.fetch.bind(globalThis) },
-    );
+    // Validate the name up front — before any catalog/pin/network work — so a
+    // malformed name (`../escape`) is a deterministic 400 rather than a 404/503
+    // from the catalog lookup. `installPlugin` sanitizes too; this restores the
+    // advertised 400 across both the no-pin and pin paths.
+    const name = sanitizePluginName(rawName);
+    let result;
+    if (pin) {
+      const marketplaceRef = await resolveInstallMarketplaceRef(name, pin);
+      result = await installPlugin(
+        { name, ref: marketplaceRef, force },
+        { fetch: globalThis.fetch.bind(globalThis) },
+      );
+    } else {
+      const source = await resolvePluginSourceFromCatalog(name, {
+        fetch: globalThis.fetch.bind(globalThis),
+      });
+      if (!source) {
+        throw new NotFoundError(`No plugin named "${name}" in the catalog.`);
+      }
+      result = await installPlugin(
+        {
+          name,
+          force,
+          trustedSource: {
+            owner: source.owner,
+            repo: source.repo,
+            rootPath: source.path,
+            ref: source.ref,
+          },
+        },
+        { fetch: globalThis.fetch.bind(globalThis) },
+      );
+    }
+    // Bring the freshly materialized plugin up in-process right now — register
+    // its tools and run its `init` hook — instead of waiting for the resource
+    // monitor to republish the sentinel and a later turn to apply it. This is
+    // what makes `init` fire as part of the install rather than at the next
+    // daemon boot. Never throws; a failure is contained and logged.
+    await reconcilePluginSourcesNow();
     publishPluginsChanged(getOriginClientId(headers));
     return {
       ok: true as const,
@@ -1135,7 +1252,7 @@ async function handleInstallPlugin({ body = {}, headers }: RouteHandlerArgs) {
       ref: result.ref,
     };
   } catch (err) {
-    // Pin resolution already maps unreviewed/bad-pin cases to a RouteError;
+    // Pin resolution and the not-in-catalog case already map to a RouteError;
     // re-throw those verbatim rather than masking them as a 500.
     if (err instanceof RouteError) {
       throw err;
@@ -1158,6 +1275,12 @@ async function handleInstallPlugin({ body = {}, headers }: RouteHandlerArgs) {
     if (err instanceof PluginPinHistoryError) {
       throw new ServiceUnavailableError(err.message);
     }
+    // A rate-limited or unavailable platform catalog (no stale fallback) is
+    // transient — surface it as retryable rather than a misleading 500.
+    if (err instanceof PluginCatalogUnavailableError) {
+      logPluginCatalogUnavailable("install", err);
+      throw new ServiceUnavailableError(err.message);
+    }
     throw new InternalError(
       err instanceof Error ? err.message : "plugin install failed",
     );
@@ -1295,6 +1418,21 @@ async function handleUpgradePlugin({
       { name: rawName, dryRun, strategy },
       { fetch: globalThis.fetch.bind(globalThis) },
     );
+    // An upgrade that actually moved files (outcome `upgraded`) rewrites the
+    // plugin's on-disk source; bring the change up in-process right now — run
+    // the old version's `shutdown` and the new version's `init` via the
+    // reconcile — instead of waiting for the resource monitor to republish the
+    // sentinel and a later turn to apply it. This is what makes the lifecycle
+    // fire as part of the upgrade rather than at the next daemon boot,
+    // symmetric to the install and uninstall routes. A no-op or dry run leaves
+    // the tree unchanged, so there is nothing to reconcile. Ensure the
+    // workspace `@vellumai/plugin-api` shim first (as uninstall does) so a hook
+    // that imports the package resolves even inside the daemon boot window.
+    // Never throws; a failure is contained and logged.
+    if (result.outcome === "upgraded") {
+      await ensurePluginApiShim().catch(() => {});
+      await reconcilePluginSourcesNow();
+    }
     publishPluginsChanged(getOriginClientId(headers));
     return {
       name: result.name,
@@ -1497,7 +1635,7 @@ export const ROUTES: RouteDefinition[] = [
         name: "ref",
         schema: { type: "string" },
         description:
-          "Optional git ref to list the catalog at. Defaults to the CLI's `DEFAULT_PLUGIN_REF` (typically `main`).",
+          "Accepted for backward compatibility. The catalog is resolved from the Vellum platform (or the bundled manifest when platform features are disabled); this ref does not select a git revision — it is echoed back and used as the cache key. Defaults to the CLI's `DEFAULT_PLUGIN_REF` (typically `main`).",
       },
     ],
     responseBody: pluginsSearchResponseSchema,

package/src/runtime/routes/profiler-routes.ts

@@ -79,8 +79,7 @@ const DEFAULT_MAX_BYTES = 500 * 1024 * 1024;
 function handleListRuns() {
   const manifests = rescanRuns({ readOnly: true });
   manifests.sort(
-    (a, b) =>
-      new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),
+    (a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),
   );
 
   return {
@@ -124,9 +123,7 @@ function handleGetRun({ pathParams = {} }: RouteHandlerArgs) {
   };
 }
 
-function handleExportRun({
-  pathParams = {},
-}: RouteHandlerArgs): Uint8Array {
+function handleExportRun({ pathParams = {} }: RouteHandlerArgs): Uint8Array {
   const runId = validateRunId(pathParams.runId);
 
   const runDir = getProfilerRunDir(runId);

package/src/runtime/routes/publish-routes.ts

@@ -16,7 +16,6 @@ import { z } from "zod";
 import {
   getApp,
   getAppDirPath,
-  isMultifileApp,
   resolveEffectiveAppHtml,
 } from "../../apps/app-store.js";
 import {
@@ -45,23 +44,21 @@ async function handlePublish({ pathParams }: RouteHandlerArgs) {
     throw new NotFoundError(`App not found: ${appId}`);
   }
 
-  // Compile multi-file apps if needed (same pattern as handleOpenApp)
-  if (isMultifileApp(app)) {
-    const appDir = getAppDirPath(appId);
-    const distIndex = join(appDir, "dist", "index.html");
-    if (!existsSync(distIndex)) {
-      const result = await compileApp(appDir);
-      if (!result.ok) {
-        log.warn(
-          { appId, errors: result.errors },
-          "Auto-compile failed before publish",
-        );
-        return {
-          success: false,
-          errorCode: "compile_failed",
-          error: `App failed to compile: ${result.errors?.join("; ") ?? "unknown error"}`,
-        };
-      }
+  // Compile if needed (same pattern as handleOpenApp)
+  const appDir = getAppDirPath(appId);
+  const distIndex = join(appDir, "dist", "index.html");
+  if (!existsSync(distIndex)) {
+    const result = await compileApp(appDir);
+    if (!result.ok) {
+      log.warn(
+        { appId, errors: result.errors },
+        "Auto-compile failed before publish",
+      );
+      return {
+        success: false,
+        errorCode: "compile_failed",
+        error: `App failed to compile: ${result.errors?.join("; ") ?? "unknown error"}`,
+      };
     }
   }