@vellumai/assistant 0.11.6 → 0.11.7-staging.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (478) hide show
  1. package/ARCHITECTURE.md +31 -19
  2. package/Dockerfile +1 -0
  3. package/docs/architecture/security.md +3 -3
  4. package/docs/flux-turn-detection-spike.md +8 -7
  5. package/docs/runbook-trusted-contacts.md +14 -0
  6. package/docs/stt-provider-onboarding.md +8 -4
  7. package/knip.json +1 -0
  8. package/node_modules/@vellumai/avatar-manifest/package.json +18 -0
  9. package/node_modules/@vellumai/avatar-manifest/src/__tests__/manifest.test.ts +173 -0
  10. package/node_modules/@vellumai/avatar-manifest/src/__tests__/read.test.ts +114 -0
  11. package/node_modules/@vellumai/avatar-manifest/src/index.ts +29 -0
  12. package/node_modules/@vellumai/avatar-manifest/src/layout.ts +18 -0
  13. package/node_modules/@vellumai/avatar-manifest/src/manifest.ts +156 -0
  14. package/node_modules/@vellumai/avatar-manifest/src/read.ts +109 -0
  15. package/node_modules/@vellumai/avatar-manifest/tsconfig.json +20 -0
  16. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/__tests__/ingress.test.ts +37 -0
  17. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/__tests__/remote-web-pairing.test.ts +389 -0
  18. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/ingress.ts +22 -0
  19. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/remote-web-pairing.ts +508 -18
  20. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/rpc.ts +174 -0
  21. package/node_modules/@vellumai/ces-client/src/http-credentials.ts +161 -0
  22. package/node_modules/@vellumai/ces-client/src/index.ts +1 -0
  23. package/node_modules/@vellumai/environments/package.json +2 -1
  24. package/node_modules/@vellumai/environments/src/shell.test.ts +56 -0
  25. package/node_modules/@vellumai/environments/src/shell.ts +65 -0
  26. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/__tests__/ingress.test.ts +37 -0
  27. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/__tests__/remote-web-pairing.test.ts +389 -0
  28. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/ingress.ts +22 -0
  29. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/remote-web-pairing.ts +508 -18
  30. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/rpc.ts +174 -0
  31. package/node_modules/@vellumai/gateway-client/src/__tests__/contact-read-contracts.test.ts +32 -0
  32. package/node_modules/@vellumai/gateway-client/src/__tests__/gateway-client.test.ts +1 -0
  33. package/node_modules/@vellumai/gateway-client/src/__tests__/inbound-event-kind.test.ts +82 -0
  34. package/node_modules/@vellumai/gateway-client/src/__tests__/plugin-admission-denied-contract.test.ts +56 -0
  35. package/node_modules/@vellumai/gateway-client/src/__tests__/trust-verdict-contract.test.ts +18 -0
  36. package/node_modules/@vellumai/gateway-client/src/admission-policy-contract.ts +5 -11
  37. package/node_modules/@vellumai/gateway-client/src/channel-permission-contract.ts +3 -1
  38. package/node_modules/@vellumai/gateway-client/src/gateway-ipc-contracts.ts +9 -0
  39. package/node_modules/@vellumai/gateway-client/src/inbound-contract.ts +4 -0
  40. package/node_modules/@vellumai/gateway-client/src/inbound-event-kind.ts +75 -0
  41. package/node_modules/@vellumai/gateway-client/src/index.ts +17 -0
  42. package/node_modules/@vellumai/gateway-client/src/outbound-contract.ts +8 -0
  43. package/node_modules/@vellumai/gateway-client/src/plugin-admission-denied-contract.ts +47 -0
  44. package/node_modules/@vellumai/gateway-client/src/trust-verdict-contract.ts +11 -0
  45. package/node_modules/@vellumai/service-contracts/src/__tests__/ingress.test.ts +37 -0
  46. package/node_modules/@vellumai/service-contracts/src/__tests__/remote-web-pairing.test.ts +389 -0
  47. package/node_modules/@vellumai/service-contracts/src/ingress.ts +22 -0
  48. package/node_modules/@vellumai/service-contracts/src/remote-web-pairing.ts +508 -18
  49. package/node_modules/@vellumai/service-contracts/src/rpc.ts +174 -0
  50. package/openapi.yaml +419 -55
  51. package/package.json +4 -1
  52. package/scripts/sync-llm-catalog.ts +6 -0
  53. package/src/__tests__/approval-card-edit-inbound-handoff.test.ts +199 -0
  54. package/src/__tests__/approval-card-edit.test.ts +153 -0
  55. package/src/__tests__/attachments-store-heic-normalize.test.ts +1 -1
  56. package/src/__tests__/available-skills.test.ts +54 -0
  57. package/src/__tests__/avatar-identity-sync.test.ts +5 -1
  58. package/src/__tests__/catalog-install-normalize.test.ts +9 -1
  59. package/src/__tests__/channel-policy.test.ts +1 -3
  60. package/src/__tests__/channel-readiness-discord.test.ts +9 -70
  61. package/src/__tests__/compactor-call-site-logging.test.ts +61 -0
  62. package/src/__tests__/config-loader-backfill.test.ts +69 -0
  63. package/src/__tests__/config-schema.test.ts +2 -3
  64. package/src/__tests__/conversation-agent-loop.test.ts +238 -0
  65. package/src/__tests__/conversation-attachments.test.ts +0 -1
  66. package/src/__tests__/conversation-error.test.ts +44 -0
  67. package/src/__tests__/conversation-evictor.test.ts +19 -0
  68. package/src/__tests__/conversation-fork-referential.test.ts +73 -63
  69. package/src/__tests__/conversation-fork-retrospective.test.ts +99 -74
  70. package/src/__tests__/conversation-runtime-assembly.test.ts +23 -0
  71. package/src/__tests__/conversation-slash.test.ts +9 -0
  72. package/src/__tests__/conversation-title-service.test.ts +97 -0
  73. package/src/__tests__/conversation-tool-setup-attribution.test.ts +16 -0
  74. package/src/__tests__/credential-broker-server-use.test.ts +0 -218
  75. package/src/__tests__/credential-broker.test.ts +43 -420
  76. package/src/__tests__/credential-record-write-through.test.ts +78 -0
  77. package/src/__tests__/credential-routes.test.ts +17 -1
  78. package/src/__tests__/credential-security-invariants.test.ts +8 -9
  79. package/src/__tests__/default-profile-catalog-fallback.test.ts +289 -0
  80. package/src/__tests__/delete-propagation.test.ts +92 -2
  81. package/src/__tests__/discord-callback-round-trip.test.ts +93 -0
  82. package/src/__tests__/discord-channel-config.test.ts +237 -0
  83. package/src/__tests__/edit-propagation.test.ts +42 -2
  84. package/src/__tests__/evict-conversations-for-reload.test.ts +51 -1
  85. package/src/__tests__/fallback-breaker.test.ts +1335 -0
  86. package/src/__tests__/gateway-threshold-reader-mock.ts +6 -0
  87. package/src/__tests__/guardian-card-withdrawal.test.ts +30 -0
  88. package/src/__tests__/handlers-user-message-approval-consumption.test.ts +0 -2
  89. package/src/__tests__/image-conversion.test.ts +38 -4
  90. package/src/__tests__/install-skill-routing.test.ts +25 -0
  91. package/src/__tests__/llm-catalog-parity.test.ts +4 -0
  92. package/src/__tests__/llm-resolver.test.ts +74 -0
  93. package/src/__tests__/llm-schema-fallback-profile.test.ts +359 -0
  94. package/src/__tests__/managed-fallback-dispatch.test.ts +430 -0
  95. package/src/__tests__/managed-profile-guard.test.ts +28 -0
  96. package/src/__tests__/managed-speech-defaults.test.ts +196 -1
  97. package/src/__tests__/mcp-cli.test.ts +23 -1
  98. package/src/__tests__/mcp-tool-annotations-risk.test.ts +43 -34
  99. package/src/__tests__/media-stream-stt-session.test.ts +2 -0
  100. package/src/__tests__/notification-decision-fallback.test.ts +106 -0
  101. package/src/__tests__/notification-discord-adapter.test.ts +162 -0
  102. package/src/__tests__/oauth-connect-orchestrator.test.ts +95 -0
  103. package/src/__tests__/persist-unsendable-image-downscale.test.ts +6 -8
  104. package/src/__tests__/persist-unsendable-image.test.ts +3 -3
  105. package/src/__tests__/platform.test.ts +19 -1
  106. package/src/__tests__/plugin-import-boundary-guard.test.ts +5 -1
  107. package/src/__tests__/provider-catalog-visibility.test.ts +17 -0
  108. package/src/__tests__/provider-platform-proxy-integration.test.ts +8 -1
  109. package/src/__tests__/provider-usage-tracking.test.ts +56 -0
  110. package/src/__tests__/require-fresh-approval.test.ts +5 -2
  111. package/src/__tests__/retry-fallback-escalation.test.ts +1093 -0
  112. package/src/__tests__/schedule-retry.test.ts +183 -4
  113. package/src/__tests__/scheduler-reuse-conversation.test.ts +6 -6
  114. package/src/__tests__/secret-routes-platform-proxy.test.ts +55 -0
  115. package/src/__tests__/skill-load-tool.test.ts +34 -0
  116. package/src/__tests__/skill-tool-factory.test.ts +6 -1
  117. package/src/__tests__/skill-tool-manifest.test.ts +20 -0
  118. package/src/__tests__/skills.test.ts +25 -0
  119. package/src/__tests__/subagent-manager-notify.test.ts +38 -0
  120. package/src/__tests__/terminal-tools.test.ts +2 -0
  121. package/src/__tests__/tool-approval-handler.test.ts +146 -2
  122. package/src/__tests__/tool-approval-seed-content-blocks.test.ts +108 -2
  123. package/src/__tests__/tool-audit.test.ts +111 -40
  124. package/src/__tests__/tool-executor-lifecycle-events.test.ts +228 -18
  125. package/src/__tests__/ui-shape-teaching.test.ts +1 -1
  126. package/src/__tests__/verification-control-plane-policy.test.ts +6 -2
  127. package/src/__tests__/voice-config-update.test.ts +43 -0
  128. package/src/__tests__/workspace-migration-147-rename-colliding-backup-profile-names.test.ts +480 -0
  129. package/src/__tests__/workspace-migration-148-strip-unsupported-fallback-profiles.test.ts +167 -0
  130. package/src/__tests__/workspace-migration-149-repoint-backup-profile-selections.test.ts +144 -0
  131. package/src/agent/loop.ts +31 -2
  132. package/src/approvals/guardian-card-withdrawal.ts +22 -0
  133. package/src/avatar/__tests__/ensure-raster.test.ts +291 -0
  134. package/src/avatar/avatar-manifest.ts +48 -100
  135. package/src/avatar/avatar-store.ts +7 -7
  136. package/src/avatar/ensure-raster.ts +146 -0
  137. package/src/avatar/resvg-lazy.test.ts +0 -1
  138. package/src/avatar/traits-png-sync.ts +9 -10
  139. package/src/background-wake/wake-intent-hooks.test.ts +0 -1
  140. package/src/backup/__tests__/paths.test.ts +6 -2
  141. package/src/backup/paths.ts +6 -4
  142. package/src/bundler/app-compiler.ts +2 -2
  143. package/src/bundler/compiler-tools.test.ts +36 -0
  144. package/src/bundler/compiler-tools.ts +54 -18
  145. package/src/calls/__tests__/telephony-synthesis-language.test.ts +81 -0
  146. package/src/calls/__tests__/voice-session-bridge.test.ts +57 -0
  147. package/src/calls/media-stream-stt-session.ts +2 -1
  148. package/src/calls/telephony-synthesis-language.ts +13 -5
  149. package/src/calls/voice-session-bridge.ts +19 -4
  150. package/src/channels/config.ts +23 -12
  151. package/src/cli/AGENTS.md +3 -1
  152. package/src/cli/commands/backup.help.ts +10 -13
  153. package/src/cli/commands/contacts.help.ts +16 -4
  154. package/src/cli/commands/contacts.ts +5 -1
  155. package/src/cli/commands/credentials.help.ts +1 -1
  156. package/src/cli/commands/inference-providers.ts +18 -53
  157. package/src/cli/commands/mcp.help.ts +6 -5
  158. package/src/cli/commands/mcp.ts +1 -1
  159. package/src/cli/commands/memory/memory-retrospective.ts +1 -0
  160. package/src/cli/commands/stt.help.ts +2 -2
  161. package/src/config/__tests__/backup-schema.test.ts +1 -1
  162. package/src/config/__tests__/default-profile-catalog.test.ts +83 -2
  163. package/src/config/__tests__/loader-sparse-array-cleanup.test.ts +1 -1
  164. package/src/config/__tests__/memory-retrospective-schema.test.ts +12 -15
  165. package/src/config/bundled-skills/computer-use/SKILL.md +6 -6
  166. package/src/config/bundled-skills/computer-use/TOOLS.json +9 -6
  167. package/src/config/bundled-skills/media-processing/services/audio-transcribe.ts +3 -1
  168. package/src/config/bundled-skills/media-processing/services/preprocess.ts +1 -1
  169. package/src/config/bundled-skills/phone-calls/SKILL.md +1 -1
  170. package/src/config/bundled-skills/phone-calls/references/CONFIG.md +16 -15
  171. package/src/config/bundled-skills/phone-calls/references/TROUBLESHOOTING.md +2 -1
  172. package/src/config/bundled-skills/settings/TOOLS.json +11 -5
  173. package/src/config/bundled-skills/settings/tools/open-system-settings.test.ts +85 -0
  174. package/src/config/bundled-skills/settings/tools/open-system-settings.ts +33 -8
  175. package/src/config/bundled-skills/settings/tools/voice-config-update.ts +54 -3
  176. package/src/config/bundled-skills/transcribe/tools/transcribe-media.ts +1 -1
  177. package/src/config/default-profile-catalog.ts +195 -10
  178. package/src/config/default-profile-names.ts +41 -0
  179. package/src/config/feature-flag-registry.json +34 -2
  180. package/src/config/inference-profile-validation.ts +11 -2
  181. package/src/config/llm-resolver.ts +25 -0
  182. package/src/config/loader.ts +3 -0
  183. package/src/config/managed-speech-defaults.ts +160 -10
  184. package/src/config/schema.ts +2 -0
  185. package/src/config/schemas/__tests__/live-voice.test.ts +7 -6
  186. package/src/config/schemas/__tests__/stt.test.ts +94 -0
  187. package/src/config/schemas/backup.ts +1 -1
  188. package/src/config/schemas/channels.ts +32 -0
  189. package/src/config/schemas/live-voice.ts +13 -4
  190. package/src/config/schemas/llm.ts +263 -15
  191. package/src/config/schemas/mcp.ts +10 -2
  192. package/src/config/schemas/memory-retrospective.ts +1 -19
  193. package/src/config/schemas/services.ts +24 -0
  194. package/src/config/schemas/stt.ts +128 -5
  195. package/src/config/seed-inference-profiles.ts +32 -3
  196. package/src/config/skill-state.ts +5 -0
  197. package/src/config/skills.ts +21 -0
  198. package/src/contacts/notify-contacts-changed.ts +5 -2
  199. package/src/context/compactor.ts +74 -1
  200. package/src/daemon/__tests__/conversation-tool-setup.test.ts +138 -1
  201. package/src/daemon/config-watcher.ts +2 -1
  202. package/src/daemon/conversation-agent-loop-handlers.ts +27 -0
  203. package/src/daemon/conversation-agent-loop.ts +86 -10
  204. package/src/daemon/conversation-error.ts +25 -0
  205. package/src/daemon/conversation-evictor.ts +2 -4
  206. package/src/daemon/conversation-runtime-assembly.ts +19 -7
  207. package/src/daemon/conversation-skill-tools.ts +5 -1
  208. package/src/daemon/conversation-slash.ts +2 -2
  209. package/src/daemon/conversation-store.ts +8 -1
  210. package/src/daemon/conversation-tool-setup.ts +37 -0
  211. package/src/daemon/conversation.ts +0 -4
  212. package/src/daemon/handlers/channel-config-result.ts +30 -0
  213. package/src/daemon/handlers/config-discord-channel.ts +301 -0
  214. package/src/daemon/handlers/config-ingress.ts +9 -0
  215. package/src/daemon/handlers/config-slack-channel.ts +13 -15
  216. package/src/daemon/handlers/config-telegram.ts +2 -5
  217. package/src/daemon/handlers/conversations.ts +0 -2
  218. package/src/daemon/handlers/skills.ts +25 -7
  219. package/src/daemon/lifecycle.ts +3 -1
  220. package/src/daemon/message-types/messages.ts +0 -2
  221. package/src/daemon/tool-setup-types.ts +5 -3
  222. package/src/daemon/trust-context-types.test.ts +33 -0
  223. package/src/heartbeat/__tests__/heartbeat-service.test.ts +0 -1
  224. package/src/live-voice/__tests__/live-voice-flux-turn-end.test.ts +58 -4
  225. package/src/live-voice/__tests__/live-voice-managed-speech-fallback.test.ts +8 -3
  226. package/src/live-voice/__tests__/live-voice-session-manager.test.ts +73 -11
  227. package/src/live-voice/__tests__/live-voice-session-preflight.test.ts +148 -2
  228. package/src/live-voice/__tests__/live-voice-session-telemetry.test.ts +64 -0
  229. package/src/live-voice/__tests__/live-voice-stt.test.ts +3 -0
  230. package/src/live-voice/__tests__/live-voice-text-turn.test.ts +391 -0
  231. package/src/live-voice/__tests__/protocol.test.ts +224 -0
  232. package/src/live-voice/live-voice-credential-preflight.ts +5 -1
  233. package/src/live-voice/live-voice-session-manager.ts +39 -2
  234. package/src/live-voice/live-voice-session.ts +224 -9
  235. package/src/live-voice/protocol.ts +187 -1
  236. package/src/messaging/providers/discord/api.ts +2 -1
  237. package/src/messaging/providers/discord/withdraw.ts +62 -0
  238. package/src/messaging/read-provider-metadata.ts +32 -0
  239. package/src/monitoring/__tests__/file-descriptors.test.ts +32 -0
  240. package/src/monitoring/__tests__/process-memory.test.ts +34 -1
  241. package/src/monitoring/db-integrity-sample.ts +1 -0
  242. package/src/monitoring/file-descriptors.ts +39 -6
  243. package/src/monitoring/process-memory.ts +37 -5
  244. package/src/monitoring/resource-sampler.ts +25 -8
  245. package/src/notifications/__tests__/activity-failed-dedupe.test.ts +161 -0
  246. package/src/notifications/__tests__/background-failure-signal.test.ts +107 -0
  247. package/src/notifications/__tests__/connected-channels.test.ts +12 -0
  248. package/src/notifications/__tests__/copy-composer.test.ts +83 -0
  249. package/src/notifications/__tests__/destination-resolver.test.ts +38 -0
  250. package/src/notifications/activity-failed-dedupe.ts +95 -0
  251. package/src/notifications/adapters/discord.ts +132 -0
  252. package/src/notifications/adapters/shared.ts +16 -0
  253. package/src/notifications/adapters/slack.ts +6 -1
  254. package/src/notifications/adapters/telegram.ts +5 -8
  255. package/src/notifications/approval-card-data.ts +94 -1
  256. package/src/notifications/background-failure-signal.ts +116 -0
  257. package/src/notifications/broadcaster.ts +3 -9
  258. package/src/notifications/copy-composer.ts +41 -8
  259. package/src/notifications/decision-engine.ts +55 -0
  260. package/src/notifications/destination-resolver.ts +45 -5
  261. package/src/notifications/emit-signal.ts +19 -5
  262. package/src/notifications/guardian-question-mode.ts +57 -0
  263. package/src/notifications/types.ts +2 -8
  264. package/src/oauth/__tests__/seed-providers-managed.test.ts +18 -0
  265. package/src/oauth/connect-orchestrator.ts +16 -0
  266. package/src/oauth/seed-providers.ts +262 -0
  267. package/src/permissions/checker.test.ts +21 -0
  268. package/src/permissions/checker.ts +6 -0
  269. package/src/permissions/gateway-threshold-reader.test.ts +184 -0
  270. package/src/permissions/gateway-threshold-reader.ts +144 -10
  271. package/src/permissions/prompter.ts +0 -6
  272. package/src/permissions/types.ts +5 -4
  273. package/src/persistence/__tests__/bulk-write-gate.test.ts +0 -38
  274. package/src/persistence/bulk-write-gate.ts +9 -10
  275. package/src/persistence/conversation-crud.ts +88 -134
  276. package/src/persistence/conversation-title-service.ts +43 -29
  277. package/src/persistence/embeddings/embedding-local.ts +14 -85
  278. package/src/persistence/embeddings/embedding-runtime-manager.ts +1 -0
  279. package/src/persistence/lifecycle-events-store.test.ts +50 -0
  280. package/src/persistence/lifecycle-events-store.ts +75 -5
  281. package/src/platform/platform-patch-queue.test.ts +368 -0
  282. package/src/platform/platform-patch-queue.ts +190 -0
  283. package/src/platform/sync-avatar.test.ts +527 -0
  284. package/src/platform/sync-avatar.ts +209 -0
  285. package/src/platform/sync-identity.test.ts +75 -0
  286. package/src/platform/sync-identity.ts +17 -110
  287. package/src/plugin-api/model-profiles.test.ts +2 -2
  288. package/src/plugin-api/model-profiles.ts +7 -7
  289. package/src/plugin-api/transcription-session.ts +1 -1
  290. package/src/plugins/defaults/compaction/window-manager.ts +4 -0
  291. package/src/plugins/defaults/image-recovery/recover.ts +2 -2
  292. package/src/plugins/defaults/memory/__tests__/memory-retrospective-job.test.ts +133 -34
  293. package/src/plugins/defaults/memory/__tests__/memory-retrospective-prompt.test.ts +21 -31
  294. package/src/plugins/defaults/memory/__tests__/memory-retrospective-provider-path.test.ts +13 -9
  295. package/src/plugins/defaults/memory/__tests__/memory-retrospective-wake-chain.test.ts +31 -4
  296. package/src/plugins/defaults/memory/memory-retrospective-constants.ts +0 -11
  297. package/src/plugins/defaults/memory/memory-retrospective-fork-boundary.ts +27 -13
  298. package/src/plugins/defaults/memory/memory-retrospective-job.ts +183 -113
  299. package/src/plugins/defaults/memory/memory-retrospective-prompt.ts +13 -13
  300. package/src/plugins/defaults/memory/src/memory-v2-routes.ts +2 -2
  301. package/src/plugins/defaults/memory/substrate/__tests__/consolidation-job.test.ts +1 -1
  302. package/src/plugins/defaults/memory/substrate/consolidation-job.ts +4 -2
  303. package/src/plugins/defaults/memory/substrate/sweep-job.ts +9 -42
  304. package/src/plugins/defaults/memory/v2/rerank-local.ts +1 -0
  305. package/src/plugins/defaults/memory/worker.ts +7 -0
  306. package/src/providers/__tests__/provider-secret-catalog.test.ts +1 -0
  307. package/src/providers/__tests__/retry-callsite.test.ts +55 -0
  308. package/src/providers/__tests__/vellum-connection-routing.test.ts +21 -3
  309. package/src/providers/connection-resolution.ts +2 -17
  310. package/src/providers/fallback-breaker.ts +389 -0
  311. package/src/providers/inference/__tests__/adapter-factory-opencode.test.ts +92 -0
  312. package/src/providers/inference/__tests__/base-url-route-validation.test.ts +16 -0
  313. package/src/providers/inference/__tests__/base-url-security.test.ts +12 -0
  314. package/src/providers/inference/adapter-factory.ts +246 -3
  315. package/src/providers/inference/auth.ts +15 -14
  316. package/src/providers/inference/chatgpt-subscription-auth.ts +70 -0
  317. package/src/providers/inference/chatgpt-subscription-credentials.ts +84 -0
  318. package/src/providers/inference/resolve-auth.ts +1 -1
  319. package/src/providers/media-resolve.ts +2 -3
  320. package/src/providers/model-catalog.ts +100 -0
  321. package/src/providers/openai/__tests__/api-error-normalization.test.ts +22 -0
  322. package/src/providers/openai/__tests__/chat-template-flatten.test.ts +198 -0
  323. package/src/providers/openai/api-error-normalization.ts +13 -0
  324. package/src/providers/openai/chat-completions-provider.ts +84 -0
  325. package/src/providers/opencode/client.test.ts +150 -0
  326. package/src/providers/opencode/client.ts +61 -0
  327. package/src/providers/platform-proxy/constants.ts +5 -0
  328. package/src/providers/provider-resolvability.ts +20 -0
  329. package/src/providers/provider-secret-catalog.ts +3 -2
  330. package/src/providers/retry.ts +956 -68
  331. package/src/providers/speech-to-text/__tests__/deepgram-flux-frames.test.ts +42 -0
  332. package/src/providers/speech-to-text/__tests__/deepgram-flux-realtime.test.ts +136 -0
  333. package/src/providers/speech-to-text/__tests__/provider-catalog.test.ts +120 -0
  334. package/src/providers/speech-to-text/__tests__/resolve.test.ts +316 -12
  335. package/src/providers/speech-to-text/deepgram-flux-frames.ts +83 -3
  336. package/src/providers/speech-to-text/deepgram-flux-realtime.ts +132 -4
  337. package/src/providers/speech-to-text/provider-catalog.ts +191 -3
  338. package/src/providers/speech-to-text/resolve.ts +132 -24
  339. package/src/providers/speech-to-text/vellum-managed-flux-realtime.ts +296 -0
  340. package/src/providers/types.ts +39 -0
  341. package/src/providers/usage-tracking.ts +12 -1
  342. package/src/providers/vellum/client.ts +29 -0
  343. package/src/providers/vellum-model-routing.test.ts +2 -0
  344. package/src/providers/vellum-model-routing.ts +3 -3
  345. package/src/runtime/AGENTS.md +1 -2
  346. package/src/runtime/__tests__/agent-wake.test.ts +105 -3
  347. package/src/runtime/__tests__/background-job-runner.test.ts +89 -3
  348. package/src/runtime/agent-wake.ts +44 -5
  349. package/src/runtime/background-job-runner.ts +68 -50
  350. package/src/runtime/channel-readiness-service.ts +0 -39
  351. package/src/runtime/http-server.ts +12 -4
  352. package/src/runtime/routes/__tests__/avatar-state-routes.test.ts +18 -18
  353. package/src/runtime/routes/__tests__/backup-routes.test.ts +9 -5
  354. package/src/runtime/routes/__tests__/chatgpt-subscription-auth-routes.test.ts +372 -0
  355. package/src/runtime/routes/__tests__/contact-routes.test.ts +7 -0
  356. package/src/runtime/routes/__tests__/conversation-query-routes.test.ts +96 -0
  357. package/src/runtime/routes/__tests__/inference-profiles-routes.test.ts +37 -0
  358. package/src/runtime/routes/__tests__/ingress-status-routes.test.ts +2 -1
  359. package/src/runtime/routes/__tests__/mcp-add-default-risk.test.ts +87 -0
  360. package/src/runtime/routes/acp-claude-auth-routes.ts +25 -54
  361. package/src/runtime/routes/approval-routes.ts +0 -12
  362. package/src/runtime/routes/avatar-routes.ts +17 -30
  363. package/src/runtime/routes/backup-routes.ts +2 -2
  364. package/src/runtime/routes/chatgpt-subscription-auth-routes.ts +296 -113
  365. package/src/runtime/routes/contact-prompt-routes.ts +65 -6
  366. package/src/runtime/routes/contact-routes.ts +20 -15
  367. package/src/runtime/routes/conversation-query-routes.ts +98 -10
  368. package/src/runtime/routes/conversation-routes.ts +2 -2
  369. package/src/runtime/routes/credential-routes.ts +2 -1
  370. package/src/runtime/routes/guardian-approval-interception.ts +12 -9
  371. package/src/runtime/routes/inbound-message-handler.ts +47 -48
  372. package/src/runtime/routes/inbound-stages/acl-enforcement.ts +18 -13
  373. package/src/runtime/routes/inbound-stages/admission-policy.ts +2 -2
  374. package/src/runtime/routes/inbound-stages/edit-intercept.ts +20 -2
  375. package/src/runtime/routes/inbound-stages/reaction-intercept.ts +9 -8
  376. package/src/runtime/routes/inbound-stages/transcribe-audio.ts +1 -1
  377. package/src/runtime/routes/index.ts +2 -0
  378. package/src/runtime/routes/inference-profile-session-handler.ts +2 -2
  379. package/src/runtime/routes/inference-profiles-routes.ts +12 -7
  380. package/src/runtime/routes/inference-provider-connection-routes.ts +2 -2
  381. package/src/runtime/routes/inference-send-routes.ts +2 -2
  382. package/src/runtime/routes/ingress-status-routes.ts +2 -2
  383. package/src/runtime/routes/integrations/discord.ts +119 -0
  384. package/src/runtime/routes/llm-call-sites-routes.ts +2 -2
  385. package/src/runtime/routes/mcp-auth-routes.ts +12 -6
  386. package/src/runtime/routes/migration-routes.ts +3 -1
  387. package/src/runtime/routes/oauth-pending-flows.ts +136 -0
  388. package/src/runtime/routes/secret-routes.ts +7 -0
  389. package/src/runtime/routes/stt-routes.ts +38 -6
  390. package/src/runtime/routes/wake-conversation-routes.ts +8 -1
  391. package/src/runtime/routes/watch-routes.ts +9 -5
  392. package/src/runtime/sync/resource-sync-events.ts +2 -0
  393. package/src/runtime/trust-verdict-consumer.ts +3 -3
  394. package/src/schedule/__tests__/worker-feature-flags.test.ts +58 -0
  395. package/src/schedule/retry-policy.ts +8 -8
  396. package/src/schedule/run-script.ts +14 -23
  397. package/src/schedule/schedule-recovery.ts +0 -1
  398. package/src/schedule/scheduler.ts +89 -51
  399. package/src/schedule/worker.ts +57 -0
  400. package/src/security/__tests__/openai-device-auth.test.ts +355 -0
  401. package/src/security/ces-rpc-record-backend.ts +123 -0
  402. package/src/security/oauth2.ts +7 -0
  403. package/src/security/openai-device-auth.ts +364 -0
  404. package/src/security/secure-keys.ts +15 -0
  405. package/src/skills/available-skills.ts +10 -1
  406. package/src/skills/catalog-install.ts +19 -1
  407. package/src/skills/inline-command-runner.ts +6 -2
  408. package/src/skills/platform-compatibility.test.ts +49 -0
  409. package/src/skills/platform-compatibility.ts +65 -0
  410. package/src/skills/tool-manifest.ts +20 -0
  411. package/src/stt/__tests__/roles.test.ts +152 -0
  412. package/src/stt/daemon-batch-transcriber.ts +4 -1
  413. package/src/stt/roles.ts +180 -0
  414. package/src/stt/stt-stream-session.ts +3 -2
  415. package/src/stt/types.ts +33 -3
  416. package/src/subagent/manager.ts +12 -0
  417. package/src/telemetry/__tests__/live-voice-funnel.test.ts +34 -0
  418. package/src/telemetry/live-voice-funnel.ts +12 -2
  419. package/src/telemetry/telemetry-wire.generated.ts +6 -0
  420. package/src/telemetry/tool-audit.ts +83 -30
  421. package/src/telemetry/tool-executed-events-store.test.ts +0 -1
  422. package/src/telemetry/turn-outcome.ts +75 -4
  423. package/src/tools/client-os.ts +115 -0
  424. package/src/tools/computer-use/definitions.ts +11 -7
  425. package/src/tools/computer-use/skill-proxy-bridge.ts +2 -2
  426. package/src/tools/credentials/broker-types.ts +0 -71
  427. package/src/tools/credentials/broker.ts +6 -201
  428. package/src/tools/credentials/metadata-store.ts +65 -16
  429. package/src/tools/credentials/store.ts +2 -0
  430. package/src/tools/executor.ts +2 -8
  431. package/src/tools/host-shell.test.ts +75 -0
  432. package/src/tools/host-shell.ts +24 -0
  433. package/src/tools/host-terminal/host-shell.ts +15 -44
  434. package/src/tools/mcp/mcp-tool-factory.ts +44 -9
  435. package/src/tools/permission-checker.ts +73 -21
  436. package/src/tools/policy-context.ts +1 -0
  437. package/src/tools/shared/filesystem/image-read.ts +1 -1
  438. package/src/tools/skills/find-similar-skills.ts +10 -2
  439. package/src/tools/skills/load.ts +41 -6
  440. package/src/tools/skills/sandbox-runner.ts +8 -16
  441. package/src/tools/skills/skill-tool-factory.ts +1 -0
  442. package/src/tools/terminal/__tests__/safe-env.test.ts +64 -1
  443. package/src/tools/terminal/safe-env.ts +39 -9
  444. package/src/tools/terminal/shell.ts +12 -31
  445. package/src/tools/tool-approval-handler.ts +64 -10
  446. package/src/tools/tool-types.ts +10 -0
  447. package/src/tools/types.ts +19 -3
  448. package/src/tools/ui-surface/surface-shape-docs.ts +4 -3
  449. package/src/tools/workflows/manage-workflows.ts +2 -2
  450. package/src/tools/workflows/run-workflow.test.ts +2 -1
  451. package/src/util/__tests__/file-use.test.ts +61 -0
  452. package/src/util/__tests__/process-table.test.ts +66 -0
  453. package/src/util/__tests__/process-tree.test.ts +46 -0
  454. package/src/util/errors.ts +1 -0
  455. package/src/util/file-use.ts +91 -0
  456. package/src/util/host-process.test.ts +17 -0
  457. package/src/util/host-process.ts +75 -0
  458. package/src/util/image-conversion.ts +39 -7
  459. package/src/util/platform.ts +32 -13
  460. package/src/util/process-table.ts +249 -0
  461. package/src/util/process-tree.ts +85 -129
  462. package/src/util/provider-error-patterns.ts +20 -0
  463. package/src/util/spawn.ts +9 -2
  464. package/src/watch/__tests__/watch-retro.test.ts +48 -1
  465. package/src/watch/watch-retro.ts +46 -4
  466. package/src/workspace/git-service.ts +4 -14
  467. package/src/workspace/migrations/147-rename-colliding-backup-profile-names.ts +360 -0
  468. package/src/workspace/migrations/148-strip-unsupported-fallback-profiles.ts +117 -0
  469. package/src/workspace/migrations/149-repoint-backup-profile-selections.ts +204 -0
  470. package/src/workspace/migrations/150-stt-flux-provider-to-model-family.ts +139 -0
  471. package/src/workspace/migrations/__tests__/150-stt-flux-provider-to-model-family.test.ts +160 -0
  472. package/src/workspace/migrations/registry.ts +8 -0
  473. package/src/__tests__/permission-types.test.ts +0 -17
  474. package/src/channels/gateway-discord-admission.ts +0 -32
  475. package/src/persistence/fork-message-copy.ts +0 -239
  476. package/src/plugins/defaults/memory/__tests__/fork-message-copy.test.ts +0 -221
  477. package/src/security/__tests__/oauth2-device-code.test.ts +0 -431
  478. package/src/security/oauth2-device-code.ts +0 -312
@@ -0,0 +1,480 @@
1
+ import {
2
+ existsSync,
3
+ mkdirSync,
4
+ readFileSync,
5
+ rmSync,
6
+ writeFileSync,
7
+ } from "node:fs";
8
+ import { tmpdir } from "node:os";
9
+ import { join } from "node:path";
10
+ import { Database } from "bun:sqlite";
11
+ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
12
+
13
+ import {
14
+ BACKUP_PROFILE_KEYS,
15
+ DEFAULT_PROFILE_KEYS,
16
+ } from "../config/default-profile-names.js";
17
+ import { LLMSchema } from "../config/schemas/llm.js";
18
+ import { renameCollidingBackupProfileNamesMigration } from "../workspace/migrations/147-rename-colliding-backup-profile-names.js";
19
+ import { stripUnsupportedFallbackProfilesMigration } from "../workspace/migrations/148-strip-unsupported-fallback-profiles.js";
20
+ import { WORKSPACE_MIGRATIONS } from "../workspace/migrations/registry.js";
21
+ import {
22
+ loadCheckpoints,
23
+ runWorkspaceMigrations,
24
+ } from "../workspace/migrations/runner.js";
25
+ import { assertNotLiveDb } from "./assert-not-live-db.js";
26
+
27
+ let workspaceDir: string;
28
+
29
+ function freshWorkspace(): void {
30
+ workspaceDir = join(
31
+ tmpdir(),
32
+ `vellum-migration-147-test-${Date.now()}-${Math.random().toString(36).slice(2)}`,
33
+ );
34
+ mkdirSync(workspaceDir, { recursive: true });
35
+ }
36
+
37
+ function writeConfig(data: Record<string, unknown>): void {
38
+ writeFileSync(
39
+ join(workspaceDir, "config.json"),
40
+ JSON.stringify(data, null, 2) + "\n",
41
+ );
42
+ }
43
+
44
+ function readConfig(): Record<string, any> {
45
+ return JSON.parse(readFileSync(join(workspaceDir, "config.json"), "utf-8"));
46
+ }
47
+
48
+ function dbPath(): string {
49
+ return join(workspaceDir, "data", "db", "assistant.db");
50
+ }
51
+
52
+ function seedProfilePinTables(rows: {
53
+ conversations: string[];
54
+ cronJobs: string[];
55
+ }): void {
56
+ mkdirSync(join(workspaceDir, "data", "db"), { recursive: true });
57
+ const db = new Database(join(workspaceDir, "data", "db", "assistant.db"));
58
+ db.run(
59
+ `CREATE TABLE conversations (id TEXT PRIMARY KEY, inference_profile TEXT)`,
60
+ );
61
+ db.run(
62
+ `CREATE TABLE cron_jobs (id TEXT PRIMARY KEY, inference_profile TEXT)`,
63
+ );
64
+ rows.conversations.forEach((profile, index) => {
65
+ db.query(
66
+ `INSERT INTO conversations (id, inference_profile) VALUES (?, ?)`,
67
+ ).run(`conv-${index}`, profile);
68
+ });
69
+ rows.cronJobs.forEach((profile, index) => {
70
+ db.query(`INSERT INTO cron_jobs (id, inference_profile) VALUES (?, ?)`).run(
71
+ `job-${index}`,
72
+ profile,
73
+ );
74
+ });
75
+ db.close();
76
+ }
77
+
78
+ function readPins(table: string): string[] {
79
+ const db = new Database(join(workspaceDir, "data", "db", "assistant.db"));
80
+ try {
81
+ return (
82
+ db
83
+ .query(`SELECT inference_profile AS p FROM ${table} ORDER BY id`)
84
+ .all() as Array<{ p: string }>
85
+ ).map((row) => row.p);
86
+ } finally {
87
+ db.close();
88
+ }
89
+ }
90
+
91
+ beforeEach(() => {
92
+ freshWorkspace();
93
+ });
94
+
95
+ afterEach(() => {
96
+ if (existsSync(workspaceDir)) {
97
+ assertNotLiveDb(workspaceDir);
98
+ rmSync(workspaceDir, { recursive: true, force: true });
99
+ }
100
+ });
101
+
102
+ describe("147-rename-colliding-backup-profile-names migration", () => {
103
+ test("has correct migration id and is registered", async () => {
104
+ expect(renameCollidingBackupProfileNamesMigration.id).toBe(
105
+ "147-rename-colliding-backup-profile-names",
106
+ );
107
+ expect(WORKSPACE_MIGRATIONS.map((m) => m.id)).toContain(
108
+ "147-rename-colliding-backup-profile-names",
109
+ );
110
+ });
111
+
112
+ test("renames a colliding user profile and rewrites supported references", async () => {
113
+ writeConfig({
114
+ llm: {
115
+ defaultProvider: { provider: "vellum" },
116
+ profiles: {
117
+ "balanced-backup": {
118
+ source: "user",
119
+ provider: "anthropic",
120
+ model: "claude-opus-4-7",
121
+ label: "My Backup",
122
+ },
123
+ scratch: { source: "user", fallbackProfile: "balanced-backup" },
124
+ armA: { source: "user", speed: "fast" },
125
+ blend: {
126
+ source: "user",
127
+ mix: [
128
+ { profile: "balanced-backup", weight: 1 },
129
+ { profile: "armA", weight: 1 },
130
+ ],
131
+ },
132
+ },
133
+ profileOrder: ["balanced", "balanced-backup", "blend"],
134
+ activeProfile: "balanced-backup",
135
+ advisorProfile: "balanced-backup",
136
+ callSites: { recall: { profile: "balanced-backup", maxTokens: 4096 } },
137
+ },
138
+ });
139
+
140
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
141
+
142
+ const llm = readConfig().llm;
143
+ expect(llm.profiles["balanced-backup"]).toBeUndefined();
144
+ expect(llm.profiles["balanced-backup-custom"]).toEqual({
145
+ source: "user",
146
+ provider: "anthropic",
147
+ model: "claude-opus-4-7",
148
+ label: "My Backup",
149
+ });
150
+ expect(llm.activeProfile).toBe("balanced-backup-custom");
151
+ expect(llm.advisorProfile).toBe("balanced-backup-custom");
152
+ expect(llm.callSites.recall.profile).toBe("balanced-backup-custom");
153
+ expect(llm.callSites.recall.maxTokens).toBe(4096);
154
+ expect(llm.profiles.scratch.fallbackProfile).toBe("balanced-backup-custom");
155
+ expect(llm.profiles.blend.mix[0].profile).toBe("balanced-backup-custom");
156
+ expect(llm.profiles.blend.mix[1].profile).toBe("armA");
157
+ expect(llm.profileOrder).toEqual([
158
+ "balanced",
159
+ "balanced-backup-custom",
160
+ "blend",
161
+ ]);
162
+ });
163
+
164
+ test("the code-owned backup is available under the reserved name afterwards", async () => {
165
+ writeConfig({
166
+ llm: {
167
+ defaultProvider: { provider: "vellum" },
168
+ profiles: {
169
+ "balanced-backup": {
170
+ source: "user",
171
+ provider: "anthropic",
172
+ model: "claude-opus-4-7",
173
+ },
174
+ },
175
+ activeProfile: "balanced-backup",
176
+ },
177
+ });
178
+
179
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
180
+
181
+ const llm = readConfig().llm;
182
+ // The reserved key is free, so it resolves to the code-owned backup body
183
+ // rather than the user's profile, and the user's selection still points
184
+ // at their own profile.
185
+ expect(llm.profiles["balanced-backup"]).toBeUndefined();
186
+ expect(llm.activeProfile).toBe("balanced-backup-custom");
187
+ // A reference to the now-free reserved key remains valid on the managed
188
+ // column, which is what the schema's always-available set encodes.
189
+ const parsed = LLMSchema.safeParse({
190
+ ...llm,
191
+ activeProfile: "balanced-backup",
192
+ });
193
+ expect(parsed.success).toBe(true);
194
+ });
195
+
196
+ test("the 147-to-148 migration sequence parses under LLMSchema", async () => {
197
+ writeConfig({
198
+ llm: {
199
+ defaultProvider: { provider: "vellum" },
200
+ profiles: {
201
+ "cost-optimized-backup": {
202
+ source: "user",
203
+ provider: "anthropic",
204
+ model: "claude-opus-4-7",
205
+ },
206
+ scratch: {
207
+ source: "user",
208
+ fallbackProfile: "cost-optimized-backup",
209
+ },
210
+ },
211
+ profileOrder: ["cost-optimized-backup", "scratch"],
212
+ activeProfile: "cost-optimized-backup",
213
+ callSites: { recall: { profile: "cost-optimized-backup" } },
214
+ },
215
+ });
216
+
217
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
218
+ await stripUnsupportedFallbackProfilesMigration.run(workspaceDir);
219
+
220
+ const migrated = readConfig().llm;
221
+ const parsed = LLMSchema.safeParse(migrated);
222
+ expect(parsed.success).toBe(true);
223
+ if (parsed.success) {
224
+ expect(parsed.data.activeProfile).toBe("cost-optimized-backup-custom");
225
+ }
226
+ expect(migrated.profiles.scratch.fallbackProfile).toBeUndefined();
227
+ });
228
+
229
+ test("renames every colliding key and keeps suffixing past taken names", async () => {
230
+ const profiles: Record<string, unknown> = {
231
+ "balanced-backup-custom": { source: "user", speed: "fast" },
232
+ "balanced-backup-custom-2": { source: "user", speed: "fast" },
233
+ };
234
+ for (const key of BACKUP_PROFILE_KEYS) {
235
+ profiles[key] = { source: "user", provider: "anthropic" };
236
+ }
237
+ writeConfig({ llm: { profiles } });
238
+
239
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
240
+
241
+ const renamed = readConfig().llm.profiles;
242
+ expect(renamed["balanced-backup-custom-3"]).toBeDefined();
243
+ for (const key of BACKUP_PROFILE_KEYS) {
244
+ expect(renamed[key]).toBeUndefined();
245
+ }
246
+ for (const key of BACKUP_PROFILE_KEYS.slice(1)) {
247
+ expect(renamed[`${key}-custom`]).toBeDefined();
248
+ }
249
+ });
250
+
251
+ test("never renames onto another reserved code-defined name", async () => {
252
+ // Contrived: a profile literally named `<backup>-custom` would be a
253
+ // legitimate rename target, but a reserved name never is.
254
+ writeConfig({
255
+ llm: {
256
+ profiles: Object.fromEntries(
257
+ [...DEFAULT_PROFILE_KEYS, ...BACKUP_PROFILE_KEYS, "os-beta"].map(
258
+ (key) => [key, { source: "user", provider: "anthropic" }],
259
+ ),
260
+ ),
261
+ },
262
+ });
263
+
264
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
265
+
266
+ const renamed = Object.keys(readConfig().llm.profiles);
267
+ for (const key of BACKUP_PROFILE_KEYS) {
268
+ expect(renamed).toContain(`${key}-custom`);
269
+ }
270
+ // The user-owned entries on the non-reserved-for-this-migration names are
271
+ // untouched: only the backup keys became newly reserved.
272
+ for (const key of [...DEFAULT_PROFILE_KEYS, "os-beta"]) {
273
+ expect(renamed).toContain(key);
274
+ }
275
+ });
276
+
277
+ test("leaves managed stubs and non-object values alone", async () => {
278
+ writeConfig({
279
+ llm: {
280
+ profiles: {
281
+ "balanced-backup": { source: "managed", status: "disabled" },
282
+ "quality-optimized-backup": "not-a-profile",
283
+ },
284
+ activeProfile: "balanced-backup",
285
+ },
286
+ });
287
+
288
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
289
+
290
+ const llm = readConfig().llm;
291
+ expect(llm.profiles["balanced-backup"]).toEqual({
292
+ source: "managed",
293
+ status: "disabled",
294
+ });
295
+ expect(llm.profiles["quality-optimized-backup"]).toBe("not-a-profile");
296
+ expect(llm.activeProfile).toBe("balanced-backup");
297
+ });
298
+
299
+ test("repoints conversation and schedule profile pins", async () => {
300
+ seedProfilePinTables({
301
+ conversations: ["balanced-backup", "balanced", "balanced-backup"],
302
+ cronJobs: ["balanced-backup", "scratch"],
303
+ });
304
+ writeConfig({
305
+ llm: {
306
+ profiles: {
307
+ "balanced-backup": { source: "user", provider: "anthropic" },
308
+ scratch: { source: "user", speed: "fast" },
309
+ },
310
+ },
311
+ });
312
+
313
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
314
+
315
+ expect(readPins("conversations")).toEqual([
316
+ "balanced-backup-custom",
317
+ "balanced",
318
+ "balanced-backup-custom",
319
+ ]);
320
+ expect(readPins("cron_jobs")).toEqual([
321
+ "balanced-backup-custom",
322
+ "scratch",
323
+ ]);
324
+ });
325
+
326
+ test("is a no-op without a collision and idempotent on re-run", async () => {
327
+ const config = {
328
+ llm: {
329
+ defaultProvider: { provider: "vellum" },
330
+ profiles: {
331
+ scratch: { source: "user", speed: "fast" },
332
+ },
333
+ activeProfile: "balanced",
334
+ callSites: { recall: { profile: "balanced-backup" } },
335
+ },
336
+ };
337
+ writeConfig(config);
338
+
339
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
340
+ expect(readConfig()).toEqual(config);
341
+
342
+ // With a collision, a second run finds nothing left to rename.
343
+ writeConfig({
344
+ llm: {
345
+ profiles: { "balanced-backup": { source: "user", speed: "fast" } },
346
+ activeProfile: "balanced-backup",
347
+ },
348
+ });
349
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
350
+ const first = readConfig();
351
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
352
+ expect(readConfig()).toEqual(first);
353
+ });
354
+
355
+ test("handles missing config, missing llm block, and invalid JSON", async () => {
356
+ await expect(
357
+ renameCollidingBackupProfileNamesMigration.run(workspaceDir),
358
+ ).resolves.toBeUndefined();
359
+
360
+ writeConfig({ theme: "dark" });
361
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
362
+ expect(readConfig()).toEqual({ theme: "dark" });
363
+
364
+ writeFileSync(join(workspaceDir, "config.json"), "{not json");
365
+ await expect(
366
+ renameCollidingBackupProfileNamesMigration.run(workspaceDir),
367
+ ).resolves.toBeUndefined();
368
+ });
369
+
370
+ test("retries a pin rewrite the database refuses, then completes", async () => {
371
+ seedProfilePinTables({
372
+ conversations: ["balanced-backup", "balanced"],
373
+ cronJobs: ["balanced-backup"],
374
+ });
375
+ writeConfig({
376
+ llm: {
377
+ profiles: {
378
+ "balanced-backup": { source: "user", provider: "anthropic" },
379
+ },
380
+ activeProfile: "balanced-backup",
381
+ },
382
+ });
383
+
384
+ // A second connection holding the write lock makes every UPDATE fail with
385
+ // SQLITE_BUSY until it commits, which is the contention the retry exists
386
+ // for.
387
+ const blocker = new Database(dbPath());
388
+ blocker.run("BEGIN IMMEDIATE");
389
+ let released = false;
390
+ const release = setTimeout(() => {
391
+ blocker.run("COMMIT");
392
+ blocker.close();
393
+ released = true;
394
+ }, 10);
395
+
396
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
397
+ clearTimeout(release);
398
+
399
+ // The lock is released from a timer, which can only fire while the
400
+ // migration is waiting out a backoff: a first attempt that had succeeded
401
+ // would have finished the run before this point.
402
+ expect(released).toBe(true);
403
+ expect(readPins("conversations")).toEqual([
404
+ "balanced-backup-custom",
405
+ "balanced",
406
+ ]);
407
+ expect(readPins("cron_jobs")).toEqual(["balanced-backup-custom"]);
408
+ expect(readConfig().llm.activeProfile).toBe("balanced-backup-custom");
409
+ });
410
+
411
+ test("stays unapplied and retries on the next boot when the pins cannot be rewritten", async () => {
412
+ seedProfilePinTables({
413
+ conversations: ["balanced-backup"],
414
+ cronJobs: ["balanced-backup"],
415
+ });
416
+ const config = {
417
+ llm: {
418
+ profiles: {
419
+ "balanced-backup": { source: "user", provider: "anthropic" },
420
+ },
421
+ activeProfile: "balanced-backup",
422
+ },
423
+ };
424
+ writeConfig(config);
425
+
426
+ const blocker = new Database(dbPath());
427
+ blocker.run("BEGIN IMMEDIATE");
428
+
429
+ const firstBoot = await runWorkspaceMigrations(workspaceDir, [
430
+ renameCollidingBackupProfileNamesMigration,
431
+ ]);
432
+
433
+ // Failed, not completed: the config keeps the old key, so the rename is
434
+ // still pending and the mapping is still derivable from it.
435
+ expect(firstBoot).toEqual({ applied: 0, skipped: 0, failed: 1 });
436
+ expect(
437
+ loadCheckpoints(workspaceDir).applied[
438
+ "147-rename-colliding-backup-profile-names"
439
+ ]?.status,
440
+ ).toBe("failed");
441
+ expect(readConfig()).toEqual(config);
442
+ expect(readPins("conversations")).toEqual(["balanced-backup"]);
443
+
444
+ blocker.run("COMMIT");
445
+ blocker.close();
446
+
447
+ const secondBoot = await runWorkspaceMigrations(workspaceDir, [
448
+ renameCollidingBackupProfileNamesMigration,
449
+ ]);
450
+
451
+ expect(secondBoot).toEqual({ applied: 1, skipped: 0, failed: 0 });
452
+ expect(readConfig().llm.activeProfile).toBe("balanced-backup-custom");
453
+ expect(readPins("conversations")).toEqual(["balanced-backup-custom"]);
454
+ expect(readPins("cron_jobs")).toEqual(["balanced-backup-custom"]);
455
+ });
456
+
457
+ test("touches the database not at all without a collision", async () => {
458
+ seedProfilePinTables({
459
+ conversations: ["balanced-backup"],
460
+ cronJobs: ["scratch"],
461
+ });
462
+ writeConfig({
463
+ llm: {
464
+ profiles: { scratch: { source: "user", speed: "fast" } },
465
+ activeProfile: "balanced",
466
+ },
467
+ });
468
+
469
+ // Holding the write lock for the whole run proves no write is attempted:
470
+ // one would fail, and a failure now throws.
471
+ const blocker = new Database(dbPath());
472
+ blocker.run("BEGIN IMMEDIATE");
473
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
474
+ blocker.run("COMMIT");
475
+ blocker.close();
476
+
477
+ expect(readPins("conversations")).toEqual(["balanced-backup"]);
478
+ expect(readPins("cron_jobs")).toEqual(["scratch"]);
479
+ });
480
+ });
@@ -0,0 +1,167 @@
1
+ import {
2
+ existsSync,
3
+ mkdirSync,
4
+ readFileSync,
5
+ rmSync,
6
+ writeFileSync,
7
+ } from "node:fs";
8
+ import { tmpdir } from "node:os";
9
+ import { join } from "node:path";
10
+ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
11
+
12
+ import { renameCollidingBackupProfileNamesMigration } from "../workspace/migrations/147-rename-colliding-backup-profile-names.js";
13
+ import { stripUnsupportedFallbackProfilesMigration } from "../workspace/migrations/148-strip-unsupported-fallback-profiles.js";
14
+ import { WORKSPACE_MIGRATIONS } from "../workspace/migrations/registry.js";
15
+ import { assertNotLiveDb } from "./assert-not-live-db.js";
16
+
17
+ let workspaceDir: string;
18
+
19
+ function writeConfig(data: Record<string, unknown>): void {
20
+ writeFileSync(
21
+ join(workspaceDir, "config.json"),
22
+ JSON.stringify(data, null, 2) + "\n",
23
+ );
24
+ }
25
+
26
+ function readConfig(): Record<string, any> {
27
+ return JSON.parse(readFileSync(join(workspaceDir, "config.json"), "utf-8"));
28
+ }
29
+
30
+ beforeEach(() => {
31
+ workspaceDir = join(
32
+ tmpdir(),
33
+ `vellum-migration-148-test-${Date.now()}-${Math.random().toString(36).slice(2)}`,
34
+ );
35
+ mkdirSync(workspaceDir, { recursive: true });
36
+ });
37
+
38
+ afterEach(() => {
39
+ if (existsSync(workspaceDir)) {
40
+ assertNotLiveDb(workspaceDir);
41
+ rmSync(workspaceDir, { recursive: true, force: true });
42
+ }
43
+ });
44
+
45
+ describe("148-strip-unsupported-fallback-profiles migration", () => {
46
+ test("has the next migration id and is registered", () => {
47
+ expect(stripUnsupportedFallbackProfilesMigration.id).toBe(
48
+ "148-strip-unsupported-fallback-profiles",
49
+ );
50
+ expect(WORKSPACE_MIGRATIONS.map((migration) => migration.id)).toContain(
51
+ "148-strip-unsupported-fallback-profiles",
52
+ );
53
+ });
54
+
55
+ test("cleans a legacy pointer after migration 147 rewrites its target", async () => {
56
+ writeConfig({
57
+ llm: {
58
+ profiles: {
59
+ "balanced-backup": {
60
+ source: "user",
61
+ provider: "anthropic",
62
+ model: "legacy-model",
63
+ },
64
+ custom: {
65
+ source: "user",
66
+ fallbackProfile: "balanced-backup",
67
+ },
68
+ },
69
+ },
70
+ });
71
+
72
+ await renameCollidingBackupProfileNamesMigration.run(workspaceDir);
73
+ expect(readConfig().llm.profiles.custom.fallbackProfile).toBe(
74
+ "balanced-backup-custom",
75
+ );
76
+
77
+ stripUnsupportedFallbackProfilesMigration.run(workspaceDir);
78
+ expect(readConfig().llm.profiles.custom.fallbackProfile).toBeUndefined();
79
+
80
+ const once = readConfig();
81
+ stripUnsupportedFallbackProfilesMigration.run(workspaceDir);
82
+ expect(readConfig()).toEqual(once);
83
+ });
84
+
85
+ test("removes every custom pointer and preserves exact managed defaults", () => {
86
+ writeConfig({
87
+ llm: {
88
+ profiles: {
89
+ balanced: {
90
+ source: "managed",
91
+ fallbackProfile: "balanced-backup",
92
+ },
93
+ "quality-optimized": {
94
+ source: "managed",
95
+ fallbackProfile: "custom-backup",
96
+ },
97
+ custom: {
98
+ source: "user",
99
+ fallbackProfile: "other-custom",
100
+ },
101
+ "managed-custom": {
102
+ source: "managed",
103
+ fallbackProfile: "balanced-backup",
104
+ },
105
+ cleared: {
106
+ source: "user",
107
+ fallbackProfile: null,
108
+ },
109
+ untouched: { source: "user", model: "custom-model" },
110
+ },
111
+ },
112
+ });
113
+
114
+ stripUnsupportedFallbackProfilesMigration.run(workspaceDir);
115
+
116
+ const profiles = readConfig().llm.profiles;
117
+ expect(profiles.balanced.fallbackProfile).toBe("balanced-backup");
118
+ expect(profiles["quality-optimized"].fallbackProfile).toBeUndefined();
119
+ expect(profiles.custom.fallbackProfile).toBeUndefined();
120
+ expect(profiles["managed-custom"].fallbackProfile).toBeUndefined();
121
+ expect(profiles.cleared.fallbackProfile).toBeUndefined();
122
+ expect(profiles.untouched).toEqual({
123
+ source: "user",
124
+ model: "custom-model",
125
+ });
126
+ });
127
+
128
+ test.each(["openai", "chatgpt"] as const)(
129
+ "strips managed pointers when backups do not resolve under %s",
130
+ (provider) => {
131
+ writeConfig({
132
+ llm: {
133
+ defaultProvider: { provider },
134
+ profiles: {
135
+ balanced: {
136
+ source: "managed",
137
+ fallbackProfile: "balanced-backup",
138
+ },
139
+ "quality-optimized": {
140
+ source: "managed",
141
+ fallbackProfile: "quality-optimized-backup",
142
+ },
143
+ },
144
+ },
145
+ });
146
+
147
+ stripUnsupportedFallbackProfilesMigration.run(workspaceDir);
148
+
149
+ const profiles = readConfig().llm.profiles;
150
+ expect(profiles.balanced.fallbackProfile).toBeUndefined();
151
+ expect(profiles["quality-optimized"].fallbackProfile).toBeUndefined();
152
+ },
153
+ );
154
+
155
+ test("handles missing config, missing profiles, and invalid JSON", () => {
156
+ stripUnsupportedFallbackProfilesMigration.run(workspaceDir);
157
+
158
+ writeConfig({ theme: "dark" });
159
+ stripUnsupportedFallbackProfilesMigration.run(workspaceDir);
160
+ expect(readConfig()).toEqual({ theme: "dark" });
161
+
162
+ writeFileSync(join(workspaceDir, "config.json"), "{not json");
163
+ expect(() =>
164
+ stripUnsupportedFallbackProfilesMigration.run(workspaceDir),
165
+ ).not.toThrow();
166
+ });
167
+ });