@vellumai/assistant 0.11.1 → 0.11.2-dev.202608042227.b54139c

package/node_modules/@vellumai/slack-text/src/index.ts

@@ -5,7 +5,7 @@ export interface RenderSlackTextOptions {
   channelFallbackLabel?: string;
 }
 
-const SLACK_USER_MENTION_RE = /<@([UW][A-Z0-9]+)>/g;
+const SLACK_USER_MENTION_RE = /<@([UW][A-Z0-9]+)(?:\|[^>]*)?>/g;
 const SLACK_CHANNEL_REFERENCE_RE = /<#([CDG][A-Z0-9]+)(?:\|[^>]*)?>/g;
 
 export function extractSlackUserMentionIds(text: string): string[] {
@@ -107,7 +107,14 @@ export async function buildSlackUserLabelMap(
 
   for (const text of texts) {
     if (!text) continue;
-    for (const id of extractSlackUserMentionIds(text)) {
+    for (const match of text.matchAll(SLACK_USER_MENTION_RE)) {
+      const id = match[1];
+      // A pipe-form mention carrying a usable embedded label renders from
+      // that label directly; only queue a lookup when the label is missing,
+      // empty, or ID-shaped. Mirrors the channel builder below.
+      const [, embeddedLabel] = splitSlackLabel(match[0].slice(1, -1));
+      const sanitizedEmbeddedLabel = sanitizeOptionalLabel(embeddedLabel);
+      if (sanitizedEmbeddedLabel && sanitizedEmbeddedLabel !== id) continue;
       if (seen.has(id)) continue;
       seen.add(id);
       ids.push(id);
@@ -175,17 +182,29 @@ function renderUserMention(
   content: string,
   options: RenderSlackTextOptions,
 ): string {
-  const id = content.slice(1);
+  const [idWithPrefix, label] = splitSlackLabel(content);
+  const id = idWithPrefix.slice(1);
   if (!isSlackUserId(id)) {
     return `<${content}>`;
   }
 
+  // Slack's legacy pipe form (`<@U123|username>`) carries its own label:
+  // prefer it over a lookup, mirroring renderChannelReference. The embedded
+  // label is Slack-sourced (part of the token), so entities decode before
+  // sanitization; the caller-resolved label below is not.
+  const embeddedLabel = sanitizeOptionalLabel(
+    label === undefined ? undefined : decodeSlackHtmlEntities(label),
+  );
+  if (embeddedLabel && embeddedLabel !== id) {
+    return `@${embeddedLabel}`;
+  }
+
   const fallback = sanitizeLabel(options.userFallbackLabel, "unknown-user");
-  const label = sanitizeLabel(options.userLabels?.[id], fallback);
-  if (label === id) {
+  const resolvedLabel = sanitizeLabel(options.userLabels?.[id], fallback);
+  if (resolvedLabel === id) {
     return `@${fallback}`;
   }
-  return `@${label}`;
+  return `@${resolvedLabel}`;
 }
 
 function renderChannelReference(
@@ -282,13 +301,27 @@ function sanitizeLabel(label: string | undefined, fallback: string): string {
   return sanitizedFallback || "unknown";
 }
 
-function sanitizeOptionalLabel(label: string | undefined): string | undefined {
-  return label
+/**
+ * Normalize a mention label to the renderer's semantics: strip angle
+ * brackets, collapse whitespace, strip leading `@`/`#` prefixes. Exported as
+ * the single source of truth so persistence-side validation applies exactly
+ * the normalization rendering applies; returns `undefined` when nothing
+ * usable remains.
+ */
+export function sanitizeSlackLabel(
+  label: string | undefined,
+): string | undefined {
+  const sanitized = label
     ?.replace(/[<>]/g, "")
     .replace(/\s+/g, " ")
     .trim()
     .replace(/^[@#]+/, "")
     .trim();
+  return sanitized || undefined;
+}
+
+function sanitizeOptionalLabel(label: string | undefined): string | undefined {
+  return sanitizeSlackLabel(label);
 }
 
 function isSlackUserId(value: string): boolean {

package/openapi.yaml

@@ -3,7 +3,7 @@
 openapi: 3.1.0
 info:
   title: Vellum Assistant API
-  version: 0.11.1
+  version: 0.11.2
   description: Auto-generated OpenAPI specification for the Vellum Assistant runtime HTTP server.
 servers:
   - url: http://127.0.0.1:7821
@@ -699,6 +699,52 @@ paths:
                 required:
                   - ok
                 additionalProperties: false
+  /v1/admin/workspace-compact-history:
+    post:
+      operationId: admin_workspacecompacthistory_post
+      summary: Compact workspace git history
+      description:
+        Squash workspace git history older than the retention window into a single base commit and prune reclaimed
+        objects. By default acts only when an oversized blob is reclaimable; with force, the squash runs
+        unconditionally.
+      tags:
+        - admin
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                force:
+                  description: Squash aged history even when no oversized blob is reclaimable
+                  type: boolean
+                retentionDays:
+                  description: Retention window override in days (default 7)
+                  type: integer
+                  exclusiveMinimum: 0
+                  maximum: 9007199254740991
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  rewrote:
+                    type: boolean
+                  squashedCommits:
+                    type: number
+                  keptCommits:
+                    type: number
+                  retryAfterMs:
+                    type: number
+                required:
+                  - rewrote
+                  - squashedCommits
+                  - keptCommits
+                additionalProperties: false
   /v1/apps:
     get:
       operationId: apps_get
@@ -4691,6 +4737,8 @@ paths:
                           type: string
                         defaultProfile:
                           type: string
+                        shippedDefaultProfile:
+                          type: string
                       required:
                         - id
                         - displayName
@@ -10665,6 +10713,11 @@ paths:
                     type: number
                   updatedAt:
                     type: number
+                  workspacePath:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                    description: Workspace-relative file this document is bound to, or null
                 required:
                   - success
                   - surfaceId
@@ -10674,6 +10727,7 @@ paths:
                   - wordCount
                   - createdAt
                   - updatedAt
+                  - workspacePath
                 additionalProperties: false
   /v1/documents/{id}/comments:
     get:
@@ -11091,6 +11145,74 @@ paths:
               schema:
                 type: string
                 format: binary
+  /v1/documents/for-workspace-file:
+    post:
+      operationId: documents_forworkspacefile_post
+      summary: Get or create the document for a workspace markdown file
+      description:
+        "Return the document bound to a workspace markdown file, creating it on first open. The file is the source
+        of truth at open time: stored content that has drifted from the file is refreshed from disk before the document
+        is returned."
+      tags:
+        - documents
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                path:
+                  type: string
+                  description: Workspace-relative path to a .md/.markdown file
+                conversationId:
+                  type: string
+                  description: Conversation the document is opened from
+              required:
+                - path
+                - conversationId
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  surfaceId:
+                    type: string
+                  conversationId:
+                    type: string
+                  title:
+                    type: string
+                  content:
+                    type: string
+                  wordCount:
+                    type: number
+                  createdAt:
+                    type: number
+                  updatedAt:
+                    type: number
+                  workspacePath:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                    description: Workspace-relative file this document is bound to, or null
+                required:
+                  - success
+                  - surfaceId
+                  - conversationId
+                  - title
+                  - content
+                  - wordCount
+                  - createdAt
+                  - updatedAt
+                  - workspacePath
+                additionalProperties: false
+        "422":
+          description: Path is not a markdown file
   /v1/domain/register:
     post:
       operationId: domain_register_post
@@ -14517,7 +14639,9 @@ paths:
         "404":
           description: Profile not found
         "409":
-          description: Profile is still referenced by activeProfile, advisorProfile, a call site, or a mix arm
+          description:
+            Profile is still referenced by activeProfile, advisorProfile, a call site, a default-tier override, or a
+            mix arm
     get:
       operationId: inference_profiles_by_name_get
       summary: Get an effective inference profile
@@ -14633,8 +14757,9 @@ paths:
       summary: Create a provider connection
       description:
         Create a new named provider connection. When auth is omitted it is derived from the provider (keyless
-        providers get none, vellum gets platform, everything else needs credential for api_key auth). Fails with 409 if
-        a connection with this name already exists.
+        providers get none, vellum gets platform, everything else needs credential for api_key auth). An explicit auth
+        object must agree with the provider; platform auth belongs to vellum and only to vellum. Fails with 409 if a
+        connection with this name already exists.
       tags:
         - inference
       requestBody:
@@ -14743,8 +14868,9 @@ paths:
       summary: Update a provider connection
       description:
         Update an existing connection. Cannot rename or change the provider. Omitting auth keeps the stored auth;
-        passing credential alone rotates the key via provider-derived api_key auth. For the Vellum-managed connection
-        (vellum) the auth is locked to platform; label remains editable.
+        passing credential alone rotates the key via provider-derived api_key auth. An explicit auth object must agree
+        with the connection's provider; platform auth belongs to vellum and only to vellum. For the Vellum-managed
+        connection (vellum) the auth is locked to platform; label remains editable.
       tags:
         - inference
       parameters:
@@ -18930,6 +19056,76 @@ paths:
                                   - requestId
                                   - entries
                                 additionalProperties: false
+                              answeredQuestion:
+                                type: object
+                                properties:
+                                  requestId:
+                                    type: string
+                                  questions:
+                                    type: array
+                                    items:
+                                      type: object
+                                      properties:
+                                        id:
+                                          type: string
+                                        question:
+                                          type: string
+                                        description:
+                                          type: string
+                                        options:
+                                          type: array
+                                          items:
+                                            type: object
+                                            properties:
+                                              id:
+                                                type: string
+                                              label:
+                                                type: string
+                                              description:
+                                                type: string
+                                            required:
+                                              - id
+                                              - label
+                                            additionalProperties: false
+                                        freeTextPlaceholder:
+                                          type: string
+                                      required:
+                                        - id
+                                        - question
+                                        - options
+                                      additionalProperties: false
+                                  responses:
+                                    type: array
+                                    items:
+                                      type: object
+                                      properties:
+                                        questionId:
+                                          type: string
+                                        decision:
+                                          type: string
+                                          enum:
+                                            - option
+                                            - free_text
+                                            - skipped
+                                        optionId:
+                                          type: string
+                                        text:
+                                          type: string
+                                      required:
+                                        - questionId
+                                        - decision
+                                      additionalProperties: false
+                                  overall:
+                                    type: string
+                                    enum:
+                                      - completed
+                                      - closed
+                                required:
+                                  - requestId
+                                  - questions
+                                  - responses
+                                  - overall
+                                additionalProperties: false
                             required:
                               - name
                               - input
@@ -19369,6 +19565,76 @@ paths:
                                           - requestId
                                           - entries
                                         additionalProperties: false
+                                      answeredQuestion:
+                                        type: object
+                                        properties:
+                                          requestId:
+                                            type: string
+                                          questions:
+                                            type: array
+                                            items:
+                                              type: object
+                                              properties:
+                                                id:
+                                                  type: string
+                                                question:
+                                                  type: string
+                                                description:
+                                                  type: string
+                                                options:
+                                                  type: array
+                                                  items:
+                                                    type: object
+                                                    properties:
+                                                      id:
+                                                        type: string
+                                                      label:
+                                                        type: string
+                                                      description:
+                                                        type: string
+                                                    required:
+                                                      - id
+                                                      - label
+                                                    additionalProperties: false
+                                                freeTextPlaceholder:
+                                                  type: string
+                                              required:
+                                                - id
+                                                - question
+                                                - options
+                                              additionalProperties: false
+                                          responses:
+                                            type: array
+                                            items:
+                                              type: object
+                                              properties:
+                                                questionId:
+                                                  type: string
+                                                decision:
+                                                  type: string
+                                                  enum:
+                                                    - option
+                                                    - free_text
+                                                    - skipped
+                                                optionId:
+                                                  type: string
+                                                text:
+                                                  type: string
+                                              required:
+                                                - questionId
+                                                - decision
+                                              additionalProperties: false
+                                          overall:
+                                            type: string
+                                            enum:
+                                              - completed
+                                              - closed
+                                        required:
+                                          - requestId
+                                          - questions
+                                          - responses
+                                          - overall
+                                        additionalProperties: false
                                     required:
                                       - name
                                       - input
@@ -19543,6 +19809,14 @@ paths:
                           additionalProperties: false
                         systemCard:
                           type: boolean
+                        providerError:
+                          type: object
+                          properties:
+                            code:
+                              type: string
+                            category:
+                              type: string
+                          additionalProperties: false
                         slackMessage:
                           type: object
                           properties:
@@ -19709,6 +19983,13 @@ paths:
                     Client OS surface ("web" | "ios" | "macos" | "android"), reported separately from `interface`. Drives the
                     per-turn `client_os` context only; does not affect transport/host-proxy capabilities.
                   type: string
+                visibleAppId:
+                  description:
+                    'Id of the app the client currently has open on screen (app viewer or the app-editing split). Drives the
+                    per-turn `visible_app:` context line so the assistant can resolve "the app" to what the user is
+                    looking at. View state only: it never affects transport, routing, or tool gating, and is omitted
+                    whenever no app is in view.'
+                  type: string
                 clientMessageId:
                   type: string
                   description:
@@ -19752,6 +20033,16 @@ paths:
                     snapshots, emits no echo, and does not supersede pending interactions. Honored on the standard send
                     path only — slash-command content bypasses it."
                   type: boolean
+                scripted:
+                  description:
+                    "When true, this turn was auto-sent on the user's behalf rather than typed by them: onboarding research
+                    prompts, the personality rewrite message, research corrections, hidden kickoff greetings, the legacy
+                    pre-chat bootstrap. Stamped onto the persisted message and forwarded to turn telemetry, where
+                    activation metrics exclude it. Send false for a genuine typed message; OMIT the field only if the
+                    client genuinely cannot tell, since absent means UNKNOWN and a wrong false is trusted downstream.
+                    Independent of `hidden`: a turn can be visible and scripted (the research prompt) or hidden and
+                    scripted (the kickoff greeting)."
+                  type: boolean
                 onboarding:
                   type: object
                   properties:
@@ -21372,6 +21663,7 @@ paths:
                   minLength: 1
                   description: Feed item id (notif:<uuid>) or bare uuid
                 title:
+                  description: New title. An empty value is ignored, never cleared.
                   type: string
                 body:
                   type: string
@@ -22765,6 +23057,145 @@ paths:
                   - disconnected
                   - previousBaseUrl
                 additionalProperties: false
+  /v1/platform/invoices:
+    get:
+      operationId: platform_invoices_get
+      summary: List one page of the organization's Stripe invoices
+      description:
+        Fetches one page of the org's Stripe invoice history (newest first) from the platform billing invoices
+        endpoint. Amounts are in the currency's minor units. When has_more is true, pass the last invoice's id as
+        starting_after to fetch the next page.
+      tags:
+        - platform
+      parameters:
+        - name: starting_after
+          in: query
+          required: false
+          schema:
+            type: string
+          description: "Cursor: return invoices older than the invoice with this id (from the previous page's last entry)."
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  invoices:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        number:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                        status:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                        currency:
+                          type: string
+                        amount_due:
+                          type: number
+                        amount_paid:
+                          type: number
+                        amount_remaining:
+                          type: number
+                        created:
+                          type: number
+                        hosted_invoice_url:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                        invoice_pdf:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                      required:
+                        - id
+                        - number
+                        - status
+                        - currency
+                        - amount_due
+                        - amount_paid
+                        - amount_remaining
+                        - created
+                        - hosted_invoice_url
+                        - invoice_pdf
+                      additionalProperties: false
+                  has_more:
+                    type: boolean
+                required:
+                  - invoices
+                  - has_more
+                additionalProperties: false
+  /v1/platform/invoices/{id}:
+    get:
+      operationId: platform_invoices_by_id_get
+      summary: Get a single Stripe invoice by ID
+      description:
+        Pages through the org's invoice list from the platform and returns the invoice matching the given Stripe
+        invoice ID (e.g. in_xxx). 404 if no such invoice.
+      tags:
+        - platform
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  number:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                  status:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                  currency:
+                    type: string
+                  amount_due:
+                    type: number
+                  amount_paid:
+                    type: number
+                  amount_remaining:
+                    type: number
+                  created:
+                    type: number
+                  hosted_invoice_url:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                  invoice_pdf:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                required:
+                  - id
+                  - number
+                  - status
+                  - currency
+                  - amount_due
+                  - amount_paid
+                  - amount_remaining
+                  - created
+                  - hosted_invoice_url
+                  - invoice_pdf
+                additionalProperties: false
   /v1/platform/plans:
     get:
       operationId: platform_plans_get
@@ -26999,10 +27430,13 @@ paths:
                     type: string
                   name:
                     type: string
+                  error:
+                    description:
+                      Why the secret was not stored (e.g. provider-side API key validation failed). Present only when success is
+                      false.
+                    type: string
                 required:
                   - success
-                  - type
-                  - name
                 additionalProperties: false
   /v1/secrets/read:
     post:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.11.1",
+  "version": "0.11.2-dev.202608042227.b54139c",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/__tests__/agent-image-optimize.test.ts

@@ -115,9 +115,9 @@ describe("upscaleTargetDimensions", () => {
 });
 
 describe("upscaleImageToMinimum", () => {
-  it("returns null when dimensions are unparseable", () => {
+  it("returns null when dimensions are unparseable", async () => {
     expect(
-      upscaleImageToMinimum(
+      await upscaleImageToMinimum(
         Buffer.from("not an image").toString("base64"),
         "image/png",
       ),
@@ -126,12 +126,12 @@ describe("upscaleImageToMinimum", () => {
 });
 
 describe("optimizeImageForTransport", () => {
-  it("passes an undersized image through unchanged — the minimum floor is rejection-path only", () => {
+  it("passes an undersized image through unchanged: the minimum floor is rejection-path only", async () => {
     // The floor is undocumented provider behavior, so pre-send transport
     // never enforces it; only the image-recovery plugin reacts to an actual
     // "Could not process image" rejection.
     const tiny = makePngBase64(16, 14);
-    expect(optimizeImageForTransport(tiny, "image/png")).toEqual({
+    expect(await optimizeImageForTransport(tiny, "image/png")).toEqual({
       data: tiny,
       mediaType: "image/png",
     });