@vellumai/assistant 0.11.4-staging.2 → 0.11.4-staging.4

package/src/__tests__/plugin-api-webhook-url.test.ts

@@ -26,7 +26,7 @@ describe("resolveWebhookUrl", () => {
     });
 
     expect(url).toBe(
-      "https://callbacks.vellum.ai/abc/webhooks/plugins/imessage/events-photon",
+      "https://callbacks.vellum.ai/abc/webhooks/plugins/imessage/events-photon/",
     );
     expect(spy.mock.calls[0]![1]).toBe(
       "webhooks/plugins/imessage/events-photon",
@@ -124,10 +124,10 @@ describe("resolveWebhookUrl", () => {
     }
   });
 
-  test("hands the vendor a URL with no trailing slash", async () => {
-    // The platform appends one, and a provider delivers to the URL it was
-    // given verbatim. The gateway matches the declared path, which never ends
-    // in a slash, so a registration carrying one 404s every delivery.
+  test("hands the vendor a URL with a trailing slash", async () => {
+    // Django in front of managed callbacks canonicalizes onto `/`. A vendor
+    // given the slashless spelling is 301'd, and clients that follow a 301
+    // on POST typically retry as GET and drop the body.
     const spy = spyOn(registration, "resolveCallbackUrl").mockResolvedValue(
       "https://callbacks.vellum.ai/abc/webhooks/plugins/imessage/events-comms/",
     );
@@ -135,13 +135,16 @@ describe("resolveWebhookUrl", () => {
     await expect(
       resolveWebhookUrl({ plugin: "imessage", path: "events-comms" }),
     ).resolves.toBe(
-      "https://callbacks.vellum.ai/abc/webhooks/plugins/imessage/events-comms",
+      "https://callbacks.vellum.ai/abc/webhooks/plugins/imessage/events-comms/",
+    );
+    expect(spy.mock.calls[0]![1]).toBe(
+      "webhooks/plugins/imessage/events-comms",
     );
     spy.mockRestore();
   });
 
   test("leaves a URL carrying a query string alone", async () => {
-    // Trimming there would cut into the query rather than the path.
+    // Appending there would cut into the query rather than the path.
     const spy = spyOn(registration, "resolveCallbackUrl").mockResolvedValue(
       "https://example.test/webhooks/plugins/imessage/events-comms?token=abc/",
     );

package/src/__tests__/plugin-import-boundary-reverse-guard.test.ts

@@ -22,6 +22,7 @@ import { Glob } from "bun";
  *     barrel. Bundled defaults are compiled into the daemon, so the barrel is
  *     their loading mechanism: the in-process analog of loading an external
  *     plugin from its manifest.
+ *   - `src/plugins/defaults/worker-entrypoints.ts`, the compiled sidecar loader.
  *   - Imports of modules directly under `defaults/` (e.g.
  *     `injector-order.js`) — those are host-level shared modules, not plugin
  *     internals.
@@ -47,8 +48,11 @@ import { Glob } from "bun";
 const DEFAULTS_REL = join("src", "plugins", "defaults");
 const DEFAULTS_ABS = join(process.cwd(), DEFAULTS_REL);
 
-/** The bundled-plugin registration barrel — the sanctioned host→plugin edge. */
-const COMPOSITION_ROOT = join(DEFAULTS_REL, "index.ts");
+/** Bundled-plugin composition roots allowed to load plugin internals. */
+const COMPOSITION_ROOTS = new Set([
+  join(DEFAULTS_REL, "index.ts"),
+  join(DEFAULTS_REL, "worker-entrypoints.ts"),
+]);
 
 /**
  * Allowed host→plugin reaches: plugin name → sorted list of host files (paths
@@ -151,7 +155,7 @@ function collectHostFiles(): HostFile[] {
       if (norm.split(sep).includes("__tests__")) {
         continue;
       }
-      if (norm === COMPOSITION_ROOT) {
+      if (COMPOSITION_ROOTS.has(norm)) {
         continue;
       }
       // A file at least two segments below defaults/ belongs to a plugin —

package/src/__tests__/proxy-approval-callback.test.ts

@@ -34,6 +34,7 @@ function makeContext(overrides?: Partial<Conversation>): Conversation {
     workingDir: "/tmp/test-project",
     abortController: null,
     sendToClient: () => {},
+    emit: () => {},
     surfacesByAppId: new Map(),
     ...overrides,
   } as unknown as Conversation;

package/src/__tests__/qdrant-manager.test.ts

@@ -20,7 +20,10 @@ import {
 
 const testDataDir = process.env.VELLUM_WORKSPACE_DIR!;
 
-import { QdrantManager } from "../persistence/embeddings/qdrant-manager.js";
+import {
+  QdrantManager,
+  resolveQdrantReleaseAsset,
+} from "../persistence/embeddings/qdrant-manager.js";
 
 /**
  * Short timeouts so tests complete fast but with enough headroom for CI and
@@ -96,6 +99,16 @@ describe("QdrantManager", () => {
     });
   });
 
+  test("selects the pinned Windows x64 zip release", () => {
+    expect(resolveQdrantReleaseAsset("win32", "x64")).toEqual({
+      binaryName: "qdrant.exe",
+      filename: "qdrant-x86_64-pc-windows-msvc.zip",
+      format: "zip",
+      sha256:
+        "9d3b1d1fa58566bc71709347c4c9b83a0111d23a550daa93c3ee48e3150c4470",
+    });
+  });
+
   // ── getUrl ───────────────────────────────────────────────────
 
   describe("getUrl", () => {

package/src/__tests__/run-due-schedules.test.ts

@@ -57,6 +57,7 @@ mock.module("../persistence/lifecycle-quiesce.js", () => ({
 
 import { getDb } from "../persistence/db-connection.js";
 import { initializeDb } from "../persistence/db-init.js";
+import { isPluginDirActivated } from "../plugins/mtime-cache.js";
 import {
   createSchedule,
   deferClaimedSchedule,
@@ -342,6 +343,26 @@ describe("fire-time source-availability gate", () => {
     expect(skipRunsFor(job.id)).toHaveLength(1);
   });
 
+  test("executes an armed sourced row even though no plugin is activated in this process", async () => {
+    const job = await seedDueSourcedScript();
+    // The tick runs in the schedule worker, which activates no plugins, so the
+    // activation ledger is empty here. The gate must therefore read the disk
+    // alone: reading activation would skip every plugin schedule. Arming is
+    // the daemon-side reconciler's call.
+    expect(isPluginDirActivated(pluginDir)).toBe(false);
+
+    const result = await runDueSchedulesOnce();
+
+    expect(result.completed).toBe(1);
+    expect(result.skipped).toBe(0);
+    expect(existsSync(marker)).toBe(true);
+    const runs = rawDb()
+      .query("SELECT status FROM cron_runs WHERE job_id = ?")
+      .all(job.id) as Array<{ status: string }>;
+    expect(runs).toHaveLength(1);
+    expect(runs[0].status).toBe("ok");
+  });
+
   test("does not execute a due sourced row while the feature flag is off", async () => {
     const job = await seedDueSourcedScript();
     setOverridesForTesting({ "plugin-schedules": false });