@vellumai/assistant 0.11.4 → 0.11.5-staging.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +2 -2
- package/ARCHITECTURE.md +29 -4
- package/README.md +1 -1
- package/docs/architecture/memory.md +17 -5
- package/docs/architecture/security.md +96 -152
- package/docs/guardian-request-flow.md +13 -2
- package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/package.json +1 -0
- package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/__tests__/url-normalization.test.ts +135 -0
- package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/index.ts +1 -0
- package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/url-normalization.ts +107 -0
- package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/package.json +1 -0
- package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/__tests__/url-normalization.test.ts +135 -0
- package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/index.ts +1 -0
- package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/url-normalization.ts +107 -0
- package/node_modules/@vellumai/gateway-client/src/gateway-ipc-contracts.ts +166 -1
- package/node_modules/@vellumai/gateway-client/src/http-delivery.ts +7 -14
- package/node_modules/@vellumai/gateway-client/src/index.ts +2 -0
- package/node_modules/@vellumai/gateway-client/src/outbound-contract.ts +29 -31
- package/node_modules/@vellumai/service-contracts/package.json +1 -0
- package/node_modules/@vellumai/service-contracts/src/__tests__/url-normalization.test.ts +135 -0
- package/node_modules/@vellumai/service-contracts/src/index.ts +1 -0
- package/node_modules/@vellumai/service-contracts/src/url-normalization.ts +107 -0
- package/openapi.yaml +193 -3
- package/package.json +1 -1
- package/src/__tests__/anthropic-provider.test.ts +10 -3
- package/src/__tests__/approval-interception-trust-gates.test.ts +40 -0
- package/src/__tests__/background-workers-disk-pressure.test.ts +1 -1
- package/src/__tests__/channel-approval-routes.test.ts +4 -0
- package/src/__tests__/channel-inbound-disk-pressure.test.ts +5 -6
- package/src/__tests__/channel-reply-delivery.test.ts +26 -13
- package/src/__tests__/checker.test.ts +20 -314
- package/src/__tests__/cli-memory-v2-reembed-skills.test.ts +6 -2
- package/src/__tests__/client-os-metadata-persistence.test.ts +16 -0
- package/src/__tests__/compactor-retained-image-validation.test.ts +142 -0
- package/src/__tests__/container-cpu-sampler.test.ts +153 -0
- package/src/__tests__/context-search-memory-v2-source.test.ts +0 -1
- package/src/__tests__/conversation-attachments.test.ts +0 -1
- package/src/__tests__/conversation-error.test.ts +17 -0
- package/src/__tests__/conversation-lifecycle.test.ts +20 -26
- package/src/__tests__/conversation-pairing.test.ts +186 -0
- package/src/__tests__/conversation-runtime-assembly.test.ts +21 -2
- package/src/__tests__/credential-broker-server-use.test.ts +24 -5
- package/src/__tests__/credential-routes.test.ts +22 -3
- package/src/__tests__/credential-security-invariants.test.ts +2 -1
- package/src/__tests__/daemon-credential-client.test.ts +88 -0
- package/src/__tests__/default-plugin-names-guard.test.ts +12 -1
- package/src/__tests__/dm-backfill.test.ts +63 -0
- package/src/__tests__/dynamic-skill-background-guard.test.ts +0 -2
- package/src/__tests__/edit-propagation.test.ts +107 -4
- package/src/__tests__/events-client-registration.test.ts +28 -0
- package/src/__tests__/file-write-tool.test.ts +4 -2
- package/src/__tests__/guardian-prompt-notice-privacy.test.ts +133 -0
- package/src/__tests__/guardian-verify-setup-skill-regression.test.ts +143 -97
- package/src/__tests__/helpers/gateway-classify-mock.ts +27 -6
- package/src/__tests__/host-proxy-interface.test.ts +11 -1
- package/src/__tests__/host-shell-tool.test.ts +23 -4
- package/src/__tests__/image-conversion.test.ts +143 -1
- package/src/__tests__/inline-skill-load-permissions.test.ts +47 -36
- package/src/__tests__/input-repairs.test.ts +207 -0
- package/src/__tests__/live-workspace-guard.test.ts +75 -0
- package/src/__tests__/mcp-abort-signal.test.ts +1 -1
- package/src/__tests__/mcp-client-auth.test.ts +1 -1
- package/src/__tests__/mcp-tool-annotations-risk.test.ts +1 -1
- package/src/__tests__/media-resolve-image-validation.test.ts +310 -0
- package/src/__tests__/mtime-cache.test.ts +2 -0
- package/src/__tests__/notification-vellum-adapter.test.ts +124 -1
- package/src/__tests__/openai-provider.test.ts +22 -0
- package/src/__tests__/personal-memory-auth-bypass.test.ts +22 -6
- package/src/__tests__/platform-bash-auto-approve.test.ts +0 -4
- package/src/__tests__/platform.test.ts +16 -1
- package/src/__tests__/plugin-api-resolve-credential.test.ts +22 -13
- package/src/__tests__/plugin-api-shim.test.ts +5 -0
- package/src/__tests__/plugin-api-store-credential.test.ts +268 -0
- package/src/__tests__/plugin-config-data-migration.test.ts +8 -1
- package/src/__tests__/plugin-disabled-state.test.ts +2 -0
- package/src/__tests__/plugin-effective-enabled-set.test.ts +55 -3
- package/src/__tests__/plugin-execution-context.test.ts +73 -0
- package/src/__tests__/plugin-import-boundary-guard.test.ts +0 -1
- package/src/__tests__/plugin-import-boundary-reverse-guard.test.ts +0 -1
- package/src/__tests__/reaction-persistence.test.ts +200 -7
- package/src/__tests__/require-fresh-approval.test.ts +0 -4
- package/src/__tests__/resource-pressure-guard.test.ts +428 -0
- package/src/__tests__/resource-pressure-routes.test.ts +113 -0
- package/src/__tests__/risk-classification-boundary-guard.test.ts +115 -0
- package/src/__tests__/run-conversation-turn-persistence.test.ts +27 -1
- package/src/__tests__/secret-routes-platform-proxy.test.ts +7 -0
- package/src/__tests__/skill-tool-factory.test.ts +161 -0
- package/src/__tests__/tool-execution-pipeline.benchmark.test.ts +1 -1
- package/src/__tests__/tool-executor-lifecycle-events.test.ts +132 -5
- package/src/__tests__/tool-executor.test.ts +63 -38
- package/src/__tests__/tool-policy.test.ts +97 -1
- package/src/__tests__/trusted-contact-inline-approval-integration.test.ts +7 -4
- package/src/__tests__/user-plugin-loader.test.ts +2 -0
- package/src/__tests__/validate-input.test.ts +243 -7
- package/src/__tests__/verification-control-plane-policy.test.ts +0 -2
- package/src/acp/__tests__/acp-claude-oauth.test.ts +97 -29
- package/src/acp/__tests__/prepare-agent-env.test.ts +376 -153
- package/src/acp/acp-claude-oauth.ts +38 -21
- package/src/acp/prepare-agent-env.ts +146 -55
- package/src/agent/loop-tool-dedup.test.ts +161 -0
- package/src/agent/loop.ts +68 -22
- package/src/api/constants/app-tools.ts +34 -0
- package/src/api/events/resource-pressure-status-changed.ts +53 -0
- package/src/api/index.ts +19 -0
- package/src/api/responses/resource-pressure-status.ts +25 -0
- package/src/approvals/guardian-channel-delivery.ts +70 -6
- package/src/approvals/guardian-request-resolvers.ts +32 -66
- package/src/channels/__tests__/message-audience.test.ts +49 -0
- package/src/channels/__tests__/types.test.ts +17 -3
- package/src/channels/message-audience.ts +40 -0
- package/src/channels/types.ts +16 -12
- package/src/cli/__tests__/catalog-search-help.test.ts +50 -0
- package/src/cli/commands/__tests__/channel-verification-sessions.test.ts +31 -0
- package/src/cli/commands/__tests__/conversations-search.test.ts +289 -0
- package/src/cli/commands/__tests__/conversations-slack.test.ts +1 -0
- package/src/cli/commands/__tests__/inference-providers.test.ts +68 -0
- package/src/cli/commands/__tests__/keys.test.ts +89 -8
- package/src/cli/commands/__tests__/plugins.test.ts +57 -1
- package/src/cli/commands/channel-verification-sessions.help.ts +11 -9
- package/src/cli/commands/channel-verification-sessions.ts +11 -21
- package/src/cli/commands/conversations.help.ts +34 -0
- package/src/cli/commands/conversations.ts +125 -0
- package/src/cli/commands/inference-providers.ts +9 -4
- package/src/cli/commands/inference.help.ts +9 -4
- package/src/cli/commands/keys.help.ts +13 -1
- package/src/cli/commands/keys.ts +26 -15
- package/src/cli/commands/memory/__tests__/memory-v2.test.ts +57 -7
- package/src/cli/commands/memory/index.help.ts +41 -27
- package/src/cli/commands/memory/index.ts +2 -0
- package/src/cli/commands/memory/memory-v2.ts +58 -54
- package/src/cli/commands/memory/memory-validate.ts +18 -0
- package/src/cli/commands/monitoring.ts +1 -0
- package/src/cli/commands/plugins.help.ts +28 -31
- package/src/cli/commands/plugins.ts +10 -0
- package/src/cli/commands/skills.help.ts +13 -16
- package/src/cli/commands/trust.ts +3 -14
- package/src/cli/lib/__tests__/install-from-github.test.ts +38 -0
- package/src/cli/lib/__tests__/merge-plugin-tree.test.ts +34 -0
- package/src/cli/lib/__tests__/plugin-surfaces.test.ts +32 -1
- package/src/cli/lib/__tests__/toggle-plugin.test.ts +2 -1
- package/src/cli/lib/__tests__/upgrade-plugin.test.ts +64 -0
- package/src/cli/lib/bundled-marketplace.json +13 -0
- package/src/cli/lib/daemon-credential-client.ts +25 -3
- package/src/cli/lib/install-from-github.ts +35 -24
- package/src/cli/lib/merge-plugin-tree.ts +22 -4
- package/src/cli/lib/plugin-surfaces.ts +27 -0
- package/src/config/feature-flag-registry.json +35 -19
- package/src/config/webhook-routing.ts +8 -0
- package/src/context/compactor.ts +31 -2
- package/src/daemon/__tests__/provider-rejection-log-fields.test.ts +272 -0
- package/src/daemon/conversation-agent-loop-handlers.ts +4 -1
- package/src/daemon/conversation-error.ts +13 -0
- package/src/daemon/conversation-messaging.ts +22 -2
- package/src/daemon/conversation-process.ts +11 -0
- package/src/daemon/conversation-store.ts +10 -0
- package/src/daemon/conversation-surfaces.ts +21 -8
- package/src/daemon/conversation.ts +12 -10
- package/src/daemon/lifecycle.ts +6 -2
- package/src/daemon/message-types/conversations.ts +5 -7
- package/src/daemon/provider-rejection-log-fields.ts +124 -0
- package/src/daemon/resource-pressure-guard-lifecycle.ts +66 -0
- package/src/daemon/resource-pressure-guard.ts +387 -0
- package/src/daemon/shutdown-handlers.ts +2 -0
- package/src/daemon/startup-error.ts +16 -0
- package/src/daemon/trust-context.ts +14 -10
- package/src/daemon/unsendable-image-notice.ts +76 -0
- package/src/hooks/registry.ts +65 -51
- package/src/ipc/__tests__/socket-path.test.ts +15 -7
- package/src/ipc/gateway-client.test.ts +1 -1
- package/src/ipc/gateway-client.ts +14 -21
- package/src/ipc/socket-cleanup.ts +2 -11
- package/src/mcp/__tests__/mcp-auth-orchestrator.test.ts +1 -1
- package/src/messaging/provider-message-metadata.ts +128 -0
- package/src/messaging/providers/__tests__/transport-dispatch.test.ts +116 -68
- package/src/messaging/providers/channel-transport.ts +90 -13
- package/src/messaging/providers/discord/send.ts +16 -0
- package/src/messaging/providers/discord/transport.ts +11 -1
- package/src/messaging/providers/index.ts +109 -16
- package/src/messaging/providers/slack/message-metadata.ts +45 -0
- package/src/messaging/providers/slack/render-transcript.ts +1 -4
- package/src/messaging/providers/slack/send.test.ts +6 -9
- package/src/messaging/providers/slack/send.ts +40 -28
- package/src/messaging/providers/slack/transport.ts +22 -26
- package/src/messaging/providers/telegram-bot/send.test.ts +2 -8
- package/src/messaging/providers/telegram-bot/transport.ts +3 -6
- package/src/messaging/read-provider-metadata.test.ts +157 -0
- package/src/messaging/read-provider-metadata.ts +51 -0
- package/src/notifications/__tests__/assistant-reply-producer.test.ts +94 -0
- package/src/notifications/__tests__/edit-notification.test.ts +174 -2
- package/src/notifications/__tests__/home-feed-side-effect.test.ts +536 -4
- package/src/notifications/adapters/macos.ts +55 -0
- package/src/notifications/adapters/slack.ts +10 -5
- package/src/notifications/assistant-reply-producer.ts +37 -4
- package/src/notifications/conversation-pairing.ts +111 -21
- package/src/notifications/edit-notification.ts +38 -8
- package/src/notifications/emit-signal.ts +12 -14
- package/src/notifications/home-feed-side-effect.ts +218 -15
- package/src/notifications/types.ts +5 -0
- package/src/permissions/AGENTS.md +16 -0
- package/src/permissions/checker.test.ts +75 -122
- package/src/permissions/checker.ts +44 -560
- package/src/permissions/confirmation-guardian-request.test.ts +28 -3
- package/src/permissions/confirmation-guardian-request.ts +5 -1
- package/src/persistence/conversation-crud.ts +23 -20
- package/src/persistence/conversation-queries.ts +14 -1
- package/src/persistence/conversation-types.ts +22 -0
- package/src/persistence/delivery-crud.ts +122 -15
- package/src/plugin-api/__tests__/import-graph-partial-mock.test.ts +67 -0
- package/src/plugin-api/conversation-turn.ts +27 -0
- package/src/plugin-api/credential-scope.test.ts +15 -0
- package/src/plugin-api/credential-scope.ts +14 -0
- package/src/plugin-api/index.ts +19 -1
- package/src/plugin-api/resolve-credential.ts +15 -10
- package/src/plugin-api/store-credential.ts +148 -0
- package/src/plugin-api/system-card.ts +36 -0
- package/src/plugin-api/vision-support.test.ts +82 -0
- package/src/plugin-api/vision-support.ts +14 -2
- package/src/plugins/defaults/image-fallback/__tests__/image-fallback.test.ts +361 -110
- package/src/plugins/defaults/image-fallback/__tests__/vision-recovery.test.ts +4 -0
- package/src/plugins/defaults/image-fallback/hooks/user-prompt-submit.ts +58 -0
- package/src/plugins/defaults/image-fallback/src/caption-blocks.ts +64 -23
- package/src/plugins/defaults/image-recovery/detect.ts +24 -1
- package/src/plugins/defaults/main.ts +15 -0
- package/src/plugins/defaults/memory/AGENTS.md +11 -3
- package/src/plugins/defaults/memory/__tests__/memory-tier-boundary-guard.test.ts +0 -1
- package/src/plugins/defaults/memory/graph-topology/pending-buffer.ts +9 -12
- package/src/plugins/defaults/memory/memory-retrospective-prompt.ts +1 -1
- package/src/plugins/defaults/memory/src/memory-v2-routes.ts +12 -10
- package/src/plugins/defaults/memory/substrate/__tests__/consolidation-job.test.ts +114 -0
- package/src/plugins/defaults/memory/substrate/__tests__/consolidation-prompt-flag-gating-guard.test.ts +8 -0
- package/src/plugins/defaults/memory/substrate/__tests__/edge-index.test.ts +0 -30
- package/src/plugins/defaults/memory/substrate/__tests__/ingest.test.ts +73 -1
- package/src/plugins/defaults/memory/substrate/__tests__/page-index.test.ts +37 -0
- package/src/plugins/defaults/memory/substrate/__tests__/page-links.test.ts +208 -0
- package/src/plugins/defaults/memory/substrate/__tests__/prompts-consolidation.test.ts +158 -1
- package/src/plugins/defaults/memory/substrate/__tests__/static-context.test.ts +1 -61
- package/src/plugins/defaults/memory/substrate/consolidation-job.ts +68 -6
- package/src/plugins/defaults/memory/substrate/edge-index.ts +0 -31
- package/src/plugins/defaults/memory/substrate/ingest.ts +59 -0
- package/src/plugins/defaults/memory/substrate/page-index.ts +35 -8
- package/src/plugins/defaults/memory/substrate/page-links.ts +133 -0
- package/src/plugins/defaults/memory/substrate/page-store.ts +10 -0
- package/src/plugins/defaults/memory/substrate/prompts/consolidation.ts +124 -34
- package/src/plugins/defaults/memory/substrate/static-context.ts +0 -29
- package/src/plugins/defaults/memory/v3/__tests__/shadow-plugin.test.ts +3 -1
- package/src/plugins/defaults/memory/v3/card.ts +9 -9
- package/src/plugins/defaults/memory/v3/core-set.test.ts +7 -0
- package/src/plugins/defaults/memory/v3/core-set.ts +5 -1
- package/src/plugins/defaults/memory/v3/edge.ts +13 -57
- package/src/plugins/mtime-cache.ts +1 -1
- package/src/plugins/pipeline.ts +14 -7
- package/src/plugins/plugin-execution-context.ts +35 -11
- package/src/plugins/plugin-tree-walk.ts +63 -4
- package/src/providers/anthropic/__tests__/pause-turn-continuation.test.ts +170 -0
- package/src/providers/anthropic/client.ts +332 -241
- package/src/providers/connection-resolution.ts +2 -1
- package/src/providers/content-blocks.ts +22 -0
- package/src/providers/gemini/client.ts +5 -2
- package/src/providers/inference/__tests__/adapter-factory-litellm.test.ts +47 -1
- package/src/providers/inference/__tests__/adapter-factory-ollama.test.ts +83 -0
- package/src/providers/inference/__tests__/adapter-factory-openai-compatible.test.ts +98 -1
- package/src/providers/inference/__tests__/base-url-route-validation.test.ts +38 -0
- package/src/providers/inference/__tests__/base-url-security.test.ts +10 -0
- package/src/providers/inference/__tests__/connections-ollama.test.ts +90 -0
- package/src/providers/inference/__tests__/missing-credential-guard.test.ts +117 -0
- package/src/providers/inference/adapter-factory.ts +33 -2
- package/src/providers/inference/auth.ts +13 -2
- package/src/providers/inference/credential-usage.ts +37 -0
- package/src/providers/inference/missing-credential-guard.ts +110 -0
- package/src/providers/inference/resolve-auth.ts +7 -7
- package/src/providers/media-resolve.ts +176 -15
- package/src/providers/openai/__tests__/chat-completions-provider-reasoning.test.ts +576 -46
- package/src/providers/openai/__tests__/tool-choice-mapping.test.ts +125 -2
- package/src/providers/openai/chat-completions-provider.ts +322 -42
- package/src/routes/route-host-protocol.ts +7 -0
- package/src/routes/worker.ts +31 -10
- package/src/runtime/AGENTS.md +35 -0
- package/src/runtime/__tests__/runtime-http-port-collision.test.ts +131 -0
- package/src/runtime/__tests__/web-presence.test.ts +234 -0
- package/src/runtime/assistant-event-hub.ts +38 -0
- package/src/runtime/channel-reply-delivery.ts +54 -31
- package/src/runtime/channel-retry-sweep.ts +6 -4
- package/src/runtime/effective-capabilities.test.ts +19 -0
- package/src/runtime/effective-capabilities.ts +25 -0
- package/src/runtime/guardian-reply-router.ts +6 -2
- package/src/runtime/http-errors.ts +1 -0
- package/src/runtime/http-server.ts +20 -5
- package/src/runtime/routes/__tests__/client-routes.test.ts +150 -0
- package/src/runtime/routes/__tests__/conversation-list-routes.test.ts +133 -0
- package/src/runtime/routes/__tests__/credential-delete-in-use.test.ts +155 -0
- package/src/runtime/routes/__tests__/inference-provider-connection-routes.test.ts +52 -1
- package/src/runtime/routes/__tests__/monitoring-routes.test.ts +1 -0
- package/src/runtime/routes/__tests__/pending-interactions-route.test.ts +175 -0
- package/src/runtime/routes/__tests__/plugins-routes.test.ts +88 -35
- package/src/runtime/routes/__tests__/surface-action-routes.test.ts +55 -6
- package/src/runtime/routes/__tests__/system-card-turn-termination.test.ts +107 -0
- package/src/runtime/routes/__tests__/user-route-dispatcher-host.test.ts +52 -1
- package/src/runtime/routes/__tests__/user-route-dispatcher.test.ts +75 -4
- package/src/runtime/routes/approval-routes.ts +37 -4
- package/src/runtime/routes/approval-strategies/guardian-text-engine-strategy.ts +16 -22
- package/src/runtime/routes/canned-message-complete.ts +68 -29
- package/src/runtime/routes/client-routes.ts +113 -0
- package/src/runtime/routes/conversation-list-routes.ts +22 -7
- package/src/runtime/routes/conversation-management-routes.ts +15 -9
- package/src/runtime/routes/conversation-routes.ts +36 -22
- package/src/runtime/routes/credential-in-use.ts +85 -0
- package/src/runtime/routes/credential-routes.ts +55 -85
- package/src/runtime/routes/guardian-approval-interception.ts +22 -22
- package/src/runtime/routes/guardian-approval-reply-helpers.ts +14 -12
- package/src/runtime/routes/identity-routes.ts +5 -121
- package/src/runtime/routes/inbound-message-handler.ts +71 -27
- package/src/runtime/routes/inbound-stages/acl-enforcement.ts +16 -17
- package/src/runtime/routes/inbound-stages/background-dispatch.test.ts +77 -50
- package/src/runtime/routes/inbound-stages/background-dispatch.ts +61 -97
- package/src/runtime/routes/inbound-stages/edit-intercept.ts +101 -77
- package/src/runtime/routes/inbound-stages/guardian-reply-intercept.ts +17 -8
- package/src/runtime/routes/inbound-stages/reaction-intercept.test.ts +91 -7
- package/src/runtime/routes/inbound-stages/reaction-intercept.ts +72 -70
- package/src/runtime/routes/index.ts +2 -0
- package/src/runtime/routes/inference-provider-connection-routes.ts +9 -7
- package/src/runtime/routes/monitoring-routes.ts +9 -1
- package/src/runtime/routes/plugins-routes.ts +17 -5
- package/src/runtime/routes/resource-pressure-routes.ts +22 -0
- package/src/runtime/routes/secret-routes.ts +39 -8
- package/src/runtime/routes/settings-routes.ts +6 -6
- package/src/runtime/routes/surface-action-routes.ts +20 -19
- package/src/runtime/routes/user-route-dispatcher.ts +31 -2
- package/src/runtime/routes/user-route-resolution.ts +18 -1
- package/src/runtime/slack-reply-session.test.ts +23 -13
- package/src/runtime/slack-reply-session.ts +38 -55
- package/src/runtime/web-presence.ts +90 -0
- package/src/skills/validate-input.ts +177 -40
- package/src/subagent/__tests__/consult-context-gating.test.ts +6 -10
- package/src/subagent/consult-context.ts +7 -23
- package/src/tools/credentials/broker.ts +24 -79
- package/src/tools/credentials/ref-parse.ts +35 -0
- package/src/tools/credentials/resolve.ts +4 -10
- package/src/tools/credentials/store.ts +168 -0
- package/src/tools/credentials/tool-policy.ts +67 -0
- package/src/tools/executor.ts +53 -15
- package/src/tools/network/__tests__/web-search.test.ts +41 -1
- package/src/tools/network/url-safety.ts +9 -16
- package/src/tools/network/web-search.ts +21 -3
- package/src/tools/permission-checker.ts +43 -52
- package/src/tools/schema-transforms.ts +40 -5
- package/src/tools/shared/input-repairs.ts +160 -0
- package/src/tools/skills/skill-tool-factory.ts +18 -4
- package/src/tools/subagent/spawn.ts +0 -1
- package/src/tools/tool-approval-handler.ts +16 -10
- package/src/tools/tool-types.ts +26 -13
- package/src/tools/types.ts +6 -6
- package/src/util/__tests__/cgroup-memory.test.ts +3 -0
- package/src/util/cgroup-memory.ts +3 -0
- package/src/util/container-cpu-sampler.ts +250 -0
- package/src/util/image-conversion.ts +178 -14
- package/src/util/platform.ts +93 -10
- package/src/permissions/ipc-risk-types.ts +0 -143
- package/src/permissions/risk-types.ts +0 -76
|
@@ -15,9 +15,30 @@
|
|
|
15
15
|
* root (`realpathSync`) before walking.
|
|
16
16
|
*/
|
|
17
17
|
|
|
18
|
-
import {
|
|
18
|
+
import {
|
|
19
|
+
copyFileSync,
|
|
20
|
+
cpSync,
|
|
21
|
+
existsSync,
|
|
22
|
+
readdirSync,
|
|
23
|
+
rmSync,
|
|
24
|
+
statSync,
|
|
25
|
+
} from "node:fs";
|
|
19
26
|
import { join } from "node:path";
|
|
20
27
|
|
|
28
|
+
/**
|
|
29
|
+
* Top-level runtime-owned entries that belong to the live install, not the
|
|
30
|
+
* plugin's source tree. An upgrade must never take these from the incoming
|
|
31
|
+
* pin: `config.json` is user-edited, `data/` is whatever the plugin wrote at
|
|
32
|
+
* runtime, and `.disabled` is created by `assistant plugins disable`.
|
|
33
|
+
*
|
|
34
|
+
* The provenance sidecar is not in this list. Install rewrites `install-meta.json`
|
|
35
|
+
* at the swap boundary; carrying the outgoing copy forward would pin the
|
|
36
|
+
* upgrade to the previous commit.
|
|
37
|
+
*/
|
|
38
|
+
export const USER_STATE_ENTRIES = ["config.json", "data", ".disabled"] as const;
|
|
39
|
+
|
|
40
|
+
const USER_STATE_NAME_SET: ReadonlySet<string> = new Set(USER_STATE_ENTRIES);
|
|
41
|
+
|
|
21
42
|
/**
|
|
22
43
|
* Top-level entries that are preserved across upgrades and excluded from
|
|
23
44
|
* fingerprinting / drift detection / content hashing. These are runtime-owned
|
|
@@ -35,11 +56,49 @@ import { join } from "node:path";
|
|
|
35
56
|
*/
|
|
36
57
|
export const PRESERVED_ENTRIES = [
|
|
37
58
|
"install-meta.json",
|
|
38
|
-
|
|
39
|
-
"data",
|
|
40
|
-
".disabled",
|
|
59
|
+
...USER_STATE_ENTRIES,
|
|
41
60
|
] as const;
|
|
42
61
|
|
|
62
|
+
/** True when `name` is a top-level user-state entry (`config.json`, `data`, `.disabled`). */
|
|
63
|
+
export function isPluginUserStateEntry(name: string): boolean {
|
|
64
|
+
return USER_STATE_NAME_SET.has(name);
|
|
65
|
+
}
|
|
66
|
+
|
|
67
|
+
/**
|
|
68
|
+
* Remove user-state entries from `dir` so a pin-shipped `config.json` or
|
|
69
|
+
* `data/` cannot ride the swap. No-op when those paths are already absent.
|
|
70
|
+
*/
|
|
71
|
+
export function stripPreservedUserState(dir: string): void {
|
|
72
|
+
for (const entry of USER_STATE_ENTRIES) {
|
|
73
|
+
rmSync(join(dir, entry), { recursive: true, force: true });
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
|
|
77
|
+
/**
|
|
78
|
+
* Copy live user-state (`config.json`, `data/`, `.disabled`) from `fromDir`
|
|
79
|
+
* into `toDir`, replacing any copy already at the destination so the live
|
|
80
|
+
* bytes win whole-file / whole-tree.
|
|
81
|
+
*/
|
|
82
|
+
export function copyPreservedUserState(fromDir: string, toDir: string): void {
|
|
83
|
+
if (!existsSync(fromDir)) {
|
|
84
|
+
return;
|
|
85
|
+
}
|
|
86
|
+
for (const entry of USER_STATE_ENTRIES) {
|
|
87
|
+
const src = join(fromDir, entry);
|
|
88
|
+
if (!existsSync(src)) {
|
|
89
|
+
continue;
|
|
90
|
+
}
|
|
91
|
+
const dest = join(toDir, entry);
|
|
92
|
+
rmSync(dest, { recursive: true, force: true });
|
|
93
|
+
const stat = statSync(src);
|
|
94
|
+
if (stat.isDirectory()) {
|
|
95
|
+
cpSync(src, dest, { recursive: true });
|
|
96
|
+
} else {
|
|
97
|
+
copyFileSync(src, dest);
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
}
|
|
101
|
+
|
|
43
102
|
/**
|
|
44
103
|
* Directory names {@link walkPluginTree} skips at any depth, unconditionally.
|
|
45
104
|
* `node_modules` holds a plugin's installed dependencies — derived from the
|
|
@@ -0,0 +1,170 @@
|
|
|
1
|
+
import { describe, expect, test } from "bun:test";
|
|
2
|
+
|
|
3
|
+
import type Anthropic from "@anthropic-ai/sdk";
|
|
4
|
+
|
|
5
|
+
import { AnthropicProvider, MAX_PAUSE_TURN_CONTINUATIONS } from "../client.js";
|
|
6
|
+
|
|
7
|
+
function makeMessage(overrides: {
|
|
8
|
+
stop_reason: Anthropic.Message["stop_reason"];
|
|
9
|
+
content: Anthropic.ContentBlock[];
|
|
10
|
+
usage?: Partial<Anthropic.Usage>;
|
|
11
|
+
}): Anthropic.Message {
|
|
12
|
+
return {
|
|
13
|
+
id: "msg_test",
|
|
14
|
+
type: "message",
|
|
15
|
+
role: "assistant",
|
|
16
|
+
model: "claude-opus-4-6",
|
|
17
|
+
stop_sequence: null,
|
|
18
|
+
content: overrides.content,
|
|
19
|
+
stop_reason: overrides.stop_reason,
|
|
20
|
+
usage: {
|
|
21
|
+
input_tokens: 0,
|
|
22
|
+
output_tokens: 0,
|
|
23
|
+
cache_creation_input_tokens: null,
|
|
24
|
+
cache_read_input_tokens: null,
|
|
25
|
+
...overrides.usage,
|
|
26
|
+
} as Anthropic.Usage,
|
|
27
|
+
} as Anthropic.Message;
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
function textBlock(text: string): Anthropic.ContentBlock {
|
|
31
|
+
return { type: "text", text, citations: null } as Anthropic.ContentBlock;
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
function serverToolUseBlock(id: string): Anthropic.ContentBlock {
|
|
35
|
+
return {
|
|
36
|
+
type: "server_tool_use",
|
|
37
|
+
id,
|
|
38
|
+
name: "web_search",
|
|
39
|
+
input: { query: "test" },
|
|
40
|
+
} as Anthropic.ContentBlock;
|
|
41
|
+
}
|
|
42
|
+
|
|
43
|
+
/**
|
|
44
|
+
* Stub the SDK client on a provider instance. Every stream call records its
|
|
45
|
+
* params and resolves to the next response in `responses` (repeating the last
|
|
46
|
+
* one once exhausted). Both the plain and beta endpoints share the recorder —
|
|
47
|
+
* which endpoint fires depends on the model's beta set.
|
|
48
|
+
*/
|
|
49
|
+
function stubProvider(responses: Anthropic.Message[]): {
|
|
50
|
+
provider: AnthropicProvider;
|
|
51
|
+
calls: Anthropic.MessageStreamParams[];
|
|
52
|
+
} {
|
|
53
|
+
const provider = new AnthropicProvider("test-key", "claude-opus-4-6");
|
|
54
|
+
const calls: Anthropic.MessageStreamParams[] = [];
|
|
55
|
+
const stream = (params: Anthropic.MessageStreamParams) => {
|
|
56
|
+
calls.push(params);
|
|
57
|
+
const response =
|
|
58
|
+
responses[Math.min(calls.length - 1, responses.length - 1)];
|
|
59
|
+
return {
|
|
60
|
+
on() {
|
|
61
|
+
return this;
|
|
62
|
+
},
|
|
63
|
+
async finalMessage() {
|
|
64
|
+
return response;
|
|
65
|
+
},
|
|
66
|
+
};
|
|
67
|
+
};
|
|
68
|
+
(provider as unknown as { client: unknown }).client = {
|
|
69
|
+
baseURL: "https://api.anthropic.com",
|
|
70
|
+
messages: { stream },
|
|
71
|
+
beta: { messages: { stream } },
|
|
72
|
+
};
|
|
73
|
+
return { provider, calls };
|
|
74
|
+
}
|
|
75
|
+
|
|
76
|
+
describe("pause_turn continuation", () => {
|
|
77
|
+
test("resends the paused assistant content as-is and merges the segments", async () => {
|
|
78
|
+
const pausedContent = [
|
|
79
|
+
textBlock("Searching..."),
|
|
80
|
+
serverToolUseBlock("srvtoolu_1"),
|
|
81
|
+
];
|
|
82
|
+
const { provider, calls } = stubProvider([
|
|
83
|
+
makeMessage({
|
|
84
|
+
stop_reason: "pause_turn",
|
|
85
|
+
content: pausedContent,
|
|
86
|
+
usage: { input_tokens: 10, output_tokens: 5 },
|
|
87
|
+
}),
|
|
88
|
+
makeMessage({
|
|
89
|
+
stop_reason: "end_turn",
|
|
90
|
+
content: [textBlock("Done")],
|
|
91
|
+
usage: {
|
|
92
|
+
input_tokens: 20,
|
|
93
|
+
output_tokens: 7,
|
|
94
|
+
cache_creation_input_tokens: 3,
|
|
95
|
+
cache_read_input_tokens: 4,
|
|
96
|
+
},
|
|
97
|
+
}),
|
|
98
|
+
]);
|
|
99
|
+
|
|
100
|
+
const result = await provider.sendMessage([
|
|
101
|
+
{ role: "user", content: [{ type: "text", text: "search something" }] },
|
|
102
|
+
]);
|
|
103
|
+
|
|
104
|
+
expect(calls.length).toBe(2);
|
|
105
|
+
// The continuation appends the paused assistant message unchanged.
|
|
106
|
+
expect(calls[1].messages.length).toBe(calls[0].messages.length + 1);
|
|
107
|
+
const appended = calls[1].messages[calls[1].messages.length - 1];
|
|
108
|
+
expect(appended.role).toBe("assistant");
|
|
109
|
+
expect(appended.content).toBe(pausedContent);
|
|
110
|
+
|
|
111
|
+
// Content is the concatenation of the paused segment and the final one.
|
|
112
|
+
expect(result.content).toEqual([
|
|
113
|
+
{ type: "text", text: "Searching..." },
|
|
114
|
+
{
|
|
115
|
+
type: "server_tool_use",
|
|
116
|
+
id: "srvtoolu_1",
|
|
117
|
+
name: "web_search",
|
|
118
|
+
input: { query: "test" },
|
|
119
|
+
},
|
|
120
|
+
{ type: "text", text: "Done" },
|
|
121
|
+
]);
|
|
122
|
+
expect(result.stopReason).toBe("end_turn");
|
|
123
|
+
|
|
124
|
+
// Usage sums across both billed requests (input includes cache tokens).
|
|
125
|
+
expect(result.usage.inputTokens).toBe(10 + 20 + 3 + 4);
|
|
126
|
+
expect(result.usage.outputTokens).toBe(12);
|
|
127
|
+
expect(result.usage.cacheCreationInputTokens).toBe(3);
|
|
128
|
+
expect(result.usage.cacheReadInputTokens).toBe(4);
|
|
129
|
+
});
|
|
130
|
+
|
|
131
|
+
test("a turn that never pauses issues a single request", async () => {
|
|
132
|
+
const { provider, calls } = stubProvider([
|
|
133
|
+
makeMessage({
|
|
134
|
+
stop_reason: "end_turn",
|
|
135
|
+
content: [textBlock("Hi")],
|
|
136
|
+
usage: { input_tokens: 8, output_tokens: 2 },
|
|
137
|
+
}),
|
|
138
|
+
]);
|
|
139
|
+
|
|
140
|
+
const result = await provider.sendMessage([
|
|
141
|
+
{ role: "user", content: [{ type: "text", text: "hello" }] },
|
|
142
|
+
]);
|
|
143
|
+
|
|
144
|
+
expect(calls.length).toBe(1);
|
|
145
|
+
expect(result.content).toEqual([{ type: "text", text: "Hi" }]);
|
|
146
|
+
expect(result.stopReason).toBe("end_turn");
|
|
147
|
+
expect(result.usage.inputTokens).toBe(8);
|
|
148
|
+
expect(result.usage.cacheCreationInputTokens).toBeUndefined();
|
|
149
|
+
expect(result.usage.cacheReadInputTokens).toBeUndefined();
|
|
150
|
+
});
|
|
151
|
+
|
|
152
|
+
test("stops resending at the continuation cap and returns the paused response", async () => {
|
|
153
|
+
const { provider, calls } = stubProvider([
|
|
154
|
+
makeMessage({
|
|
155
|
+
stop_reason: "pause_turn",
|
|
156
|
+
content: [serverToolUseBlock("srvtoolu_stuck")],
|
|
157
|
+
usage: { input_tokens: 1, output_tokens: 1 },
|
|
158
|
+
}),
|
|
159
|
+
]);
|
|
160
|
+
|
|
161
|
+
const result = await provider.sendMessage([
|
|
162
|
+
{ role: "user", content: [{ type: "text", text: "search forever" }] },
|
|
163
|
+
]);
|
|
164
|
+
|
|
165
|
+
expect(calls.length).toBe(1 + MAX_PAUSE_TURN_CONTINUATIONS);
|
|
166
|
+
expect(result.stopReason).toBe("pause_turn");
|
|
167
|
+
// Every billed request's usage is accounted for.
|
|
168
|
+
expect(result.usage.inputTokens).toBe(1 + MAX_PAUSE_TURN_CONTINUATIONS);
|
|
169
|
+
});
|
|
170
|
+
});
|