@vellumai/assistant 0.11.6 → 0.11.7-staging.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (478) hide show
  1. package/ARCHITECTURE.md +31 -19
  2. package/Dockerfile +1 -0
  3. package/docs/architecture/security.md +3 -3
  4. package/docs/flux-turn-detection-spike.md +8 -7
  5. package/docs/runbook-trusted-contacts.md +14 -0
  6. package/docs/stt-provider-onboarding.md +8 -4
  7. package/knip.json +1 -0
  8. package/node_modules/@vellumai/avatar-manifest/package.json +18 -0
  9. package/node_modules/@vellumai/avatar-manifest/src/__tests__/manifest.test.ts +173 -0
  10. package/node_modules/@vellumai/avatar-manifest/src/__tests__/read.test.ts +114 -0
  11. package/node_modules/@vellumai/avatar-manifest/src/index.ts +29 -0
  12. package/node_modules/@vellumai/avatar-manifest/src/layout.ts +18 -0
  13. package/node_modules/@vellumai/avatar-manifest/src/manifest.ts +156 -0
  14. package/node_modules/@vellumai/avatar-manifest/src/read.ts +109 -0
  15. package/node_modules/@vellumai/avatar-manifest/tsconfig.json +20 -0
  16. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/__tests__/ingress.test.ts +37 -0
  17. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/__tests__/remote-web-pairing.test.ts +389 -0
  18. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/ingress.ts +22 -0
  19. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/remote-web-pairing.ts +508 -18
  20. package/node_modules/@vellumai/ces-client/node_modules/@vellumai/service-contracts/src/rpc.ts +174 -0
  21. package/node_modules/@vellumai/ces-client/src/http-credentials.ts +161 -0
  22. package/node_modules/@vellumai/ces-client/src/index.ts +1 -0
  23. package/node_modules/@vellumai/environments/package.json +2 -1
  24. package/node_modules/@vellumai/environments/src/shell.test.ts +56 -0
  25. package/node_modules/@vellumai/environments/src/shell.ts +65 -0
  26. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/__tests__/ingress.test.ts +37 -0
  27. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/__tests__/remote-web-pairing.test.ts +389 -0
  28. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/ingress.ts +22 -0
  29. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/remote-web-pairing.ts +508 -18
  30. package/node_modules/@vellumai/gateway-client/node_modules/@vellumai/service-contracts/src/rpc.ts +174 -0
  31. package/node_modules/@vellumai/gateway-client/src/__tests__/contact-read-contracts.test.ts +32 -0
  32. package/node_modules/@vellumai/gateway-client/src/__tests__/gateway-client.test.ts +1 -0
  33. package/node_modules/@vellumai/gateway-client/src/__tests__/inbound-event-kind.test.ts +82 -0
  34. package/node_modules/@vellumai/gateway-client/src/__tests__/plugin-admission-denied-contract.test.ts +56 -0
  35. package/node_modules/@vellumai/gateway-client/src/__tests__/trust-verdict-contract.test.ts +18 -0
  36. package/node_modules/@vellumai/gateway-client/src/admission-policy-contract.ts +5 -11
  37. package/node_modules/@vellumai/gateway-client/src/channel-permission-contract.ts +3 -1
  38. package/node_modules/@vellumai/gateway-client/src/gateway-ipc-contracts.ts +9 -0
  39. package/node_modules/@vellumai/gateway-client/src/inbound-contract.ts +4 -0
  40. package/node_modules/@vellumai/gateway-client/src/inbound-event-kind.ts +75 -0
  41. package/node_modules/@vellumai/gateway-client/src/index.ts +17 -0
  42. package/node_modules/@vellumai/gateway-client/src/outbound-contract.ts +8 -0
  43. package/node_modules/@vellumai/gateway-client/src/plugin-admission-denied-contract.ts +47 -0
  44. package/node_modules/@vellumai/gateway-client/src/trust-verdict-contract.ts +11 -0
  45. package/node_modules/@vellumai/service-contracts/src/__tests__/ingress.test.ts +37 -0
  46. package/node_modules/@vellumai/service-contracts/src/__tests__/remote-web-pairing.test.ts +389 -0
  47. package/node_modules/@vellumai/service-contracts/src/ingress.ts +22 -0
  48. package/node_modules/@vellumai/service-contracts/src/remote-web-pairing.ts +508 -18
  49. package/node_modules/@vellumai/service-contracts/src/rpc.ts +174 -0
  50. package/openapi.yaml +419 -55
  51. package/package.json +4 -1
  52. package/scripts/sync-llm-catalog.ts +6 -0
  53. package/src/__tests__/approval-card-edit-inbound-handoff.test.ts +199 -0
  54. package/src/__tests__/approval-card-edit.test.ts +153 -0
  55. package/src/__tests__/attachments-store-heic-normalize.test.ts +1 -1
  56. package/src/__tests__/available-skills.test.ts +54 -0
  57. package/src/__tests__/avatar-identity-sync.test.ts +5 -1
  58. package/src/__tests__/catalog-install-normalize.test.ts +9 -1
  59. package/src/__tests__/channel-policy.test.ts +1 -3
  60. package/src/__tests__/channel-readiness-discord.test.ts +9 -70
  61. package/src/__tests__/compactor-call-site-logging.test.ts +61 -0
  62. package/src/__tests__/config-loader-backfill.test.ts +69 -0
  63. package/src/__tests__/config-schema.test.ts +2 -3
  64. package/src/__tests__/conversation-agent-loop.test.ts +238 -0
  65. package/src/__tests__/conversation-attachments.test.ts +0 -1
  66. package/src/__tests__/conversation-error.test.ts +44 -0
  67. package/src/__tests__/conversation-evictor.test.ts +19 -0
  68. package/src/__tests__/conversation-fork-referential.test.ts +73 -63
  69. package/src/__tests__/conversation-fork-retrospective.test.ts +99 -74
  70. package/src/__tests__/conversation-runtime-assembly.test.ts +23 -0
  71. package/src/__tests__/conversation-slash.test.ts +9 -0
  72. package/src/__tests__/conversation-title-service.test.ts +97 -0
  73. package/src/__tests__/conversation-tool-setup-attribution.test.ts +16 -0
  74. package/src/__tests__/credential-broker-server-use.test.ts +0 -218
  75. package/src/__tests__/credential-broker.test.ts +43 -420
  76. package/src/__tests__/credential-record-write-through.test.ts +78 -0
  77. package/src/__tests__/credential-routes.test.ts +17 -1
  78. package/src/__tests__/credential-security-invariants.test.ts +8 -9
  79. package/src/__tests__/default-profile-catalog-fallback.test.ts +289 -0
  80. package/src/__tests__/delete-propagation.test.ts +92 -2
  81. package/src/__tests__/discord-callback-round-trip.test.ts +93 -0
  82. package/src/__tests__/discord-channel-config.test.ts +237 -0
  83. package/src/__tests__/edit-propagation.test.ts +42 -2
  84. package/src/__tests__/evict-conversations-for-reload.test.ts +51 -1
  85. package/src/__tests__/fallback-breaker.test.ts +1335 -0
  86. package/src/__tests__/gateway-threshold-reader-mock.ts +6 -0
  87. package/src/__tests__/guardian-card-withdrawal.test.ts +30 -0
  88. package/src/__tests__/handlers-user-message-approval-consumption.test.ts +0 -2
  89. package/src/__tests__/image-conversion.test.ts +38 -4
  90. package/src/__tests__/install-skill-routing.test.ts +25 -0
  91. package/src/__tests__/llm-catalog-parity.test.ts +4 -0
  92. package/src/__tests__/llm-resolver.test.ts +74 -0
  93. package/src/__tests__/llm-schema-fallback-profile.test.ts +359 -0
  94. package/src/__tests__/managed-fallback-dispatch.test.ts +430 -0
  95. package/src/__tests__/managed-profile-guard.test.ts +28 -0
  96. package/src/__tests__/managed-speech-defaults.test.ts +196 -1
  97. package/src/__tests__/mcp-cli.test.ts +23 -1
  98. package/src/__tests__/mcp-tool-annotations-risk.test.ts +43 -34
  99. package/src/__tests__/media-stream-stt-session.test.ts +2 -0
  100. package/src/__tests__/notification-decision-fallback.test.ts +106 -0
  101. package/src/__tests__/notification-discord-adapter.test.ts +162 -0
  102. package/src/__tests__/oauth-connect-orchestrator.test.ts +95 -0
  103. package/src/__tests__/persist-unsendable-image-downscale.test.ts +6 -8
  104. package/src/__tests__/persist-unsendable-image.test.ts +3 -3
  105. package/src/__tests__/platform.test.ts +19 -1
  106. package/src/__tests__/plugin-import-boundary-guard.test.ts +5 -1
  107. package/src/__tests__/provider-catalog-visibility.test.ts +17 -0
  108. package/src/__tests__/provider-platform-proxy-integration.test.ts +8 -1
  109. package/src/__tests__/provider-usage-tracking.test.ts +56 -0
  110. package/src/__tests__/require-fresh-approval.test.ts +5 -2
  111. package/src/__tests__/retry-fallback-escalation.test.ts +1093 -0
  112. package/src/__tests__/schedule-retry.test.ts +183 -4
  113. package/src/__tests__/scheduler-reuse-conversation.test.ts +6 -6
  114. package/src/__tests__/secret-routes-platform-proxy.test.ts +55 -0
  115. package/src/__tests__/skill-load-tool.test.ts +34 -0
  116. package/src/__tests__/skill-tool-factory.test.ts +6 -1
  117. package/src/__tests__/skill-tool-manifest.test.ts +20 -0
  118. package/src/__tests__/skills.test.ts +25 -0
  119. package/src/__tests__/subagent-manager-notify.test.ts +38 -0
  120. package/src/__tests__/terminal-tools.test.ts +2 -0
  121. package/src/__tests__/tool-approval-handler.test.ts +146 -2
  122. package/src/__tests__/tool-approval-seed-content-blocks.test.ts +108 -2
  123. package/src/__tests__/tool-audit.test.ts +111 -40
  124. package/src/__tests__/tool-executor-lifecycle-events.test.ts +228 -18
  125. package/src/__tests__/ui-shape-teaching.test.ts +1 -1
  126. package/src/__tests__/verification-control-plane-policy.test.ts +6 -2
  127. package/src/__tests__/voice-config-update.test.ts +43 -0
  128. package/src/__tests__/workspace-migration-147-rename-colliding-backup-profile-names.test.ts +480 -0
  129. package/src/__tests__/workspace-migration-148-strip-unsupported-fallback-profiles.test.ts +167 -0
  130. package/src/__tests__/workspace-migration-149-repoint-backup-profile-selections.test.ts +144 -0
  131. package/src/agent/loop.ts +31 -2
  132. package/src/approvals/guardian-card-withdrawal.ts +22 -0
  133. package/src/avatar/__tests__/ensure-raster.test.ts +291 -0
  134. package/src/avatar/avatar-manifest.ts +48 -100
  135. package/src/avatar/avatar-store.ts +7 -7
  136. package/src/avatar/ensure-raster.ts +146 -0
  137. package/src/avatar/resvg-lazy.test.ts +0 -1
  138. package/src/avatar/traits-png-sync.ts +9 -10
  139. package/src/background-wake/wake-intent-hooks.test.ts +0 -1
  140. package/src/backup/__tests__/paths.test.ts +6 -2
  141. package/src/backup/paths.ts +6 -4
  142. package/src/bundler/app-compiler.ts +2 -2
  143. package/src/bundler/compiler-tools.test.ts +36 -0
  144. package/src/bundler/compiler-tools.ts +54 -18
  145. package/src/calls/__tests__/telephony-synthesis-language.test.ts +81 -0
  146. package/src/calls/__tests__/voice-session-bridge.test.ts +57 -0
  147. package/src/calls/media-stream-stt-session.ts +2 -1
  148. package/src/calls/telephony-synthesis-language.ts +13 -5
  149. package/src/calls/voice-session-bridge.ts +19 -4
  150. package/src/channels/config.ts +23 -12
  151. package/src/cli/AGENTS.md +3 -1
  152. package/src/cli/commands/backup.help.ts +10 -13
  153. package/src/cli/commands/contacts.help.ts +16 -4
  154. package/src/cli/commands/contacts.ts +5 -1
  155. package/src/cli/commands/credentials.help.ts +1 -1
  156. package/src/cli/commands/inference-providers.ts +18 -53
  157. package/src/cli/commands/mcp.help.ts +6 -5
  158. package/src/cli/commands/mcp.ts +1 -1
  159. package/src/cli/commands/memory/memory-retrospective.ts +1 -0
  160. package/src/cli/commands/stt.help.ts +2 -2
  161. package/src/config/__tests__/backup-schema.test.ts +1 -1
  162. package/src/config/__tests__/default-profile-catalog.test.ts +83 -2
  163. package/src/config/__tests__/loader-sparse-array-cleanup.test.ts +1 -1
  164. package/src/config/__tests__/memory-retrospective-schema.test.ts +12 -15
  165. package/src/config/bundled-skills/computer-use/SKILL.md +6 -6
  166. package/src/config/bundled-skills/computer-use/TOOLS.json +9 -6
  167. package/src/config/bundled-skills/media-processing/services/audio-transcribe.ts +3 -1
  168. package/src/config/bundled-skills/media-processing/services/preprocess.ts +1 -1
  169. package/src/config/bundled-skills/phone-calls/SKILL.md +1 -1
  170. package/src/config/bundled-skills/phone-calls/references/CONFIG.md +16 -15
  171. package/src/config/bundled-skills/phone-calls/references/TROUBLESHOOTING.md +2 -1
  172. package/src/config/bundled-skills/settings/TOOLS.json +11 -5
  173. package/src/config/bundled-skills/settings/tools/open-system-settings.test.ts +85 -0
  174. package/src/config/bundled-skills/settings/tools/open-system-settings.ts +33 -8
  175. package/src/config/bundled-skills/settings/tools/voice-config-update.ts +54 -3
  176. package/src/config/bundled-skills/transcribe/tools/transcribe-media.ts +1 -1
  177. package/src/config/default-profile-catalog.ts +195 -10
  178. package/src/config/default-profile-names.ts +41 -0
  179. package/src/config/feature-flag-registry.json +34 -2
  180. package/src/config/inference-profile-validation.ts +11 -2
  181. package/src/config/llm-resolver.ts +25 -0
  182. package/src/config/loader.ts +3 -0
  183. package/src/config/managed-speech-defaults.ts +160 -10
  184. package/src/config/schema.ts +2 -0
  185. package/src/config/schemas/__tests__/live-voice.test.ts +7 -6
  186. package/src/config/schemas/__tests__/stt.test.ts +94 -0
  187. package/src/config/schemas/backup.ts +1 -1
  188. package/src/config/schemas/channels.ts +32 -0
  189. package/src/config/schemas/live-voice.ts +13 -4
  190. package/src/config/schemas/llm.ts +263 -15
  191. package/src/config/schemas/mcp.ts +10 -2
  192. package/src/config/schemas/memory-retrospective.ts +1 -19
  193. package/src/config/schemas/services.ts +24 -0
  194. package/src/config/schemas/stt.ts +128 -5
  195. package/src/config/seed-inference-profiles.ts +32 -3
  196. package/src/config/skill-state.ts +5 -0
  197. package/src/config/skills.ts +21 -0
  198. package/src/contacts/notify-contacts-changed.ts +5 -2
  199. package/src/context/compactor.ts +74 -1
  200. package/src/daemon/__tests__/conversation-tool-setup.test.ts +138 -1
  201. package/src/daemon/config-watcher.ts +2 -1
  202. package/src/daemon/conversation-agent-loop-handlers.ts +27 -0
  203. package/src/daemon/conversation-agent-loop.ts +86 -10
  204. package/src/daemon/conversation-error.ts +25 -0
  205. package/src/daemon/conversation-evictor.ts +2 -4
  206. package/src/daemon/conversation-runtime-assembly.ts +19 -7
  207. package/src/daemon/conversation-skill-tools.ts +5 -1
  208. package/src/daemon/conversation-slash.ts +2 -2
  209. package/src/daemon/conversation-store.ts +8 -1
  210. package/src/daemon/conversation-tool-setup.ts +37 -0
  211. package/src/daemon/conversation.ts +0 -4
  212. package/src/daemon/handlers/channel-config-result.ts +30 -0
  213. package/src/daemon/handlers/config-discord-channel.ts +301 -0
  214. package/src/daemon/handlers/config-ingress.ts +9 -0
  215. package/src/daemon/handlers/config-slack-channel.ts +13 -15
  216. package/src/daemon/handlers/config-telegram.ts +2 -5
  217. package/src/daemon/handlers/conversations.ts +0 -2
  218. package/src/daemon/handlers/skills.ts +25 -7
  219. package/src/daemon/lifecycle.ts +3 -1
  220. package/src/daemon/message-types/messages.ts +0 -2
  221. package/src/daemon/tool-setup-types.ts +5 -3
  222. package/src/daemon/trust-context-types.test.ts +33 -0
  223. package/src/heartbeat/__tests__/heartbeat-service.test.ts +0 -1
  224. package/src/live-voice/__tests__/live-voice-flux-turn-end.test.ts +58 -4
  225. package/src/live-voice/__tests__/live-voice-managed-speech-fallback.test.ts +8 -3
  226. package/src/live-voice/__tests__/live-voice-session-manager.test.ts +73 -11
  227. package/src/live-voice/__tests__/live-voice-session-preflight.test.ts +148 -2
  228. package/src/live-voice/__tests__/live-voice-session-telemetry.test.ts +64 -0
  229. package/src/live-voice/__tests__/live-voice-stt.test.ts +3 -0
  230. package/src/live-voice/__tests__/live-voice-text-turn.test.ts +391 -0
  231. package/src/live-voice/__tests__/protocol.test.ts +224 -0
  232. package/src/live-voice/live-voice-credential-preflight.ts +5 -1
  233. package/src/live-voice/live-voice-session-manager.ts +39 -2
  234. package/src/live-voice/live-voice-session.ts +224 -9
  235. package/src/live-voice/protocol.ts +187 -1
  236. package/src/messaging/providers/discord/api.ts +2 -1
  237. package/src/messaging/providers/discord/withdraw.ts +62 -0
  238. package/src/messaging/read-provider-metadata.ts +32 -0
  239. package/src/monitoring/__tests__/file-descriptors.test.ts +32 -0
  240. package/src/monitoring/__tests__/process-memory.test.ts +34 -1
  241. package/src/monitoring/db-integrity-sample.ts +1 -0
  242. package/src/monitoring/file-descriptors.ts +39 -6
  243. package/src/monitoring/process-memory.ts +37 -5
  244. package/src/monitoring/resource-sampler.ts +25 -8
  245. package/src/notifications/__tests__/activity-failed-dedupe.test.ts +161 -0
  246. package/src/notifications/__tests__/background-failure-signal.test.ts +107 -0
  247. package/src/notifications/__tests__/connected-channels.test.ts +12 -0
  248. package/src/notifications/__tests__/copy-composer.test.ts +83 -0
  249. package/src/notifications/__tests__/destination-resolver.test.ts +38 -0
  250. package/src/notifications/activity-failed-dedupe.ts +95 -0
  251. package/src/notifications/adapters/discord.ts +132 -0
  252. package/src/notifications/adapters/shared.ts +16 -0
  253. package/src/notifications/adapters/slack.ts +6 -1
  254. package/src/notifications/adapters/telegram.ts +5 -8
  255. package/src/notifications/approval-card-data.ts +94 -1
  256. package/src/notifications/background-failure-signal.ts +116 -0
  257. package/src/notifications/broadcaster.ts +3 -9
  258. package/src/notifications/copy-composer.ts +41 -8
  259. package/src/notifications/decision-engine.ts +55 -0
  260. package/src/notifications/destination-resolver.ts +45 -5
  261. package/src/notifications/emit-signal.ts +19 -5
  262. package/src/notifications/guardian-question-mode.ts +57 -0
  263. package/src/notifications/types.ts +2 -8
  264. package/src/oauth/__tests__/seed-providers-managed.test.ts +18 -0
  265. package/src/oauth/connect-orchestrator.ts +16 -0
  266. package/src/oauth/seed-providers.ts +262 -0
  267. package/src/permissions/checker.test.ts +21 -0
  268. package/src/permissions/checker.ts +6 -0
  269. package/src/permissions/gateway-threshold-reader.test.ts +184 -0
  270. package/src/permissions/gateway-threshold-reader.ts +144 -10
  271. package/src/permissions/prompter.ts +0 -6
  272. package/src/permissions/types.ts +5 -4
  273. package/src/persistence/__tests__/bulk-write-gate.test.ts +0 -38
  274. package/src/persistence/bulk-write-gate.ts +9 -10
  275. package/src/persistence/conversation-crud.ts +88 -134
  276. package/src/persistence/conversation-title-service.ts +43 -29
  277. package/src/persistence/embeddings/embedding-local.ts +14 -85
  278. package/src/persistence/embeddings/embedding-runtime-manager.ts +1 -0
  279. package/src/persistence/lifecycle-events-store.test.ts +50 -0
  280. package/src/persistence/lifecycle-events-store.ts +75 -5
  281. package/src/platform/platform-patch-queue.test.ts +368 -0
  282. package/src/platform/platform-patch-queue.ts +190 -0
  283. package/src/platform/sync-avatar.test.ts +527 -0
  284. package/src/platform/sync-avatar.ts +209 -0
  285. package/src/platform/sync-identity.test.ts +75 -0
  286. package/src/platform/sync-identity.ts +17 -110
  287. package/src/plugin-api/model-profiles.test.ts +2 -2
  288. package/src/plugin-api/model-profiles.ts +7 -7
  289. package/src/plugin-api/transcription-session.ts +1 -1
  290. package/src/plugins/defaults/compaction/window-manager.ts +4 -0
  291. package/src/plugins/defaults/image-recovery/recover.ts +2 -2
  292. package/src/plugins/defaults/memory/__tests__/memory-retrospective-job.test.ts +133 -34
  293. package/src/plugins/defaults/memory/__tests__/memory-retrospective-prompt.test.ts +21 -31
  294. package/src/plugins/defaults/memory/__tests__/memory-retrospective-provider-path.test.ts +13 -9
  295. package/src/plugins/defaults/memory/__tests__/memory-retrospective-wake-chain.test.ts +31 -4
  296. package/src/plugins/defaults/memory/memory-retrospective-constants.ts +0 -11
  297. package/src/plugins/defaults/memory/memory-retrospective-fork-boundary.ts +27 -13
  298. package/src/plugins/defaults/memory/memory-retrospective-job.ts +183 -113
  299. package/src/plugins/defaults/memory/memory-retrospective-prompt.ts +13 -13
  300. package/src/plugins/defaults/memory/src/memory-v2-routes.ts +2 -2
  301. package/src/plugins/defaults/memory/substrate/__tests__/consolidation-job.test.ts +1 -1
  302. package/src/plugins/defaults/memory/substrate/consolidation-job.ts +4 -2
  303. package/src/plugins/defaults/memory/substrate/sweep-job.ts +9 -42
  304. package/src/plugins/defaults/memory/v2/rerank-local.ts +1 -0
  305. package/src/plugins/defaults/memory/worker.ts +7 -0
  306. package/src/providers/__tests__/provider-secret-catalog.test.ts +1 -0
  307. package/src/providers/__tests__/retry-callsite.test.ts +55 -0
  308. package/src/providers/__tests__/vellum-connection-routing.test.ts +21 -3
  309. package/src/providers/connection-resolution.ts +2 -17
  310. package/src/providers/fallback-breaker.ts +389 -0
  311. package/src/providers/inference/__tests__/adapter-factory-opencode.test.ts +92 -0
  312. package/src/providers/inference/__tests__/base-url-route-validation.test.ts +16 -0
  313. package/src/providers/inference/__tests__/base-url-security.test.ts +12 -0
  314. package/src/providers/inference/adapter-factory.ts +246 -3
  315. package/src/providers/inference/auth.ts +15 -14
  316. package/src/providers/inference/chatgpt-subscription-auth.ts +70 -0
  317. package/src/providers/inference/chatgpt-subscription-credentials.ts +84 -0
  318. package/src/providers/inference/resolve-auth.ts +1 -1
  319. package/src/providers/media-resolve.ts +2 -3
  320. package/src/providers/model-catalog.ts +100 -0
  321. package/src/providers/openai/__tests__/api-error-normalization.test.ts +22 -0
  322. package/src/providers/openai/__tests__/chat-template-flatten.test.ts +198 -0
  323. package/src/providers/openai/api-error-normalization.ts +13 -0
  324. package/src/providers/openai/chat-completions-provider.ts +84 -0
  325. package/src/providers/opencode/client.test.ts +150 -0
  326. package/src/providers/opencode/client.ts +61 -0
  327. package/src/providers/platform-proxy/constants.ts +5 -0
  328. package/src/providers/provider-resolvability.ts +20 -0
  329. package/src/providers/provider-secret-catalog.ts +3 -2
  330. package/src/providers/retry.ts +956 -68
  331. package/src/providers/speech-to-text/__tests__/deepgram-flux-frames.test.ts +42 -0
  332. package/src/providers/speech-to-text/__tests__/deepgram-flux-realtime.test.ts +136 -0
  333. package/src/providers/speech-to-text/__tests__/provider-catalog.test.ts +120 -0
  334. package/src/providers/speech-to-text/__tests__/resolve.test.ts +316 -12
  335. package/src/providers/speech-to-text/deepgram-flux-frames.ts +83 -3
  336. package/src/providers/speech-to-text/deepgram-flux-realtime.ts +132 -4
  337. package/src/providers/speech-to-text/provider-catalog.ts +191 -3
  338. package/src/providers/speech-to-text/resolve.ts +132 -24
  339. package/src/providers/speech-to-text/vellum-managed-flux-realtime.ts +296 -0
  340. package/src/providers/types.ts +39 -0
  341. package/src/providers/usage-tracking.ts +12 -1
  342. package/src/providers/vellum/client.ts +29 -0
  343. package/src/providers/vellum-model-routing.test.ts +2 -0
  344. package/src/providers/vellum-model-routing.ts +3 -3
  345. package/src/runtime/AGENTS.md +1 -2
  346. package/src/runtime/__tests__/agent-wake.test.ts +105 -3
  347. package/src/runtime/__tests__/background-job-runner.test.ts +89 -3
  348. package/src/runtime/agent-wake.ts +44 -5
  349. package/src/runtime/background-job-runner.ts +68 -50
  350. package/src/runtime/channel-readiness-service.ts +0 -39
  351. package/src/runtime/http-server.ts +12 -4
  352. package/src/runtime/routes/__tests__/avatar-state-routes.test.ts +18 -18
  353. package/src/runtime/routes/__tests__/backup-routes.test.ts +9 -5
  354. package/src/runtime/routes/__tests__/chatgpt-subscription-auth-routes.test.ts +372 -0
  355. package/src/runtime/routes/__tests__/contact-routes.test.ts +7 -0
  356. package/src/runtime/routes/__tests__/conversation-query-routes.test.ts +96 -0
  357. package/src/runtime/routes/__tests__/inference-profiles-routes.test.ts +37 -0
  358. package/src/runtime/routes/__tests__/ingress-status-routes.test.ts +2 -1
  359. package/src/runtime/routes/__tests__/mcp-add-default-risk.test.ts +87 -0
  360. package/src/runtime/routes/acp-claude-auth-routes.ts +25 -54
  361. package/src/runtime/routes/approval-routes.ts +0 -12
  362. package/src/runtime/routes/avatar-routes.ts +17 -30
  363. package/src/runtime/routes/backup-routes.ts +2 -2
  364. package/src/runtime/routes/chatgpt-subscription-auth-routes.ts +296 -113
  365. package/src/runtime/routes/contact-prompt-routes.ts +65 -6
  366. package/src/runtime/routes/contact-routes.ts +20 -15
  367. package/src/runtime/routes/conversation-query-routes.ts +98 -10
  368. package/src/runtime/routes/conversation-routes.ts +2 -2
  369. package/src/runtime/routes/credential-routes.ts +2 -1
  370. package/src/runtime/routes/guardian-approval-interception.ts +12 -9
  371. package/src/runtime/routes/inbound-message-handler.ts +47 -48
  372. package/src/runtime/routes/inbound-stages/acl-enforcement.ts +18 -13
  373. package/src/runtime/routes/inbound-stages/admission-policy.ts +2 -2
  374. package/src/runtime/routes/inbound-stages/edit-intercept.ts +20 -2
  375. package/src/runtime/routes/inbound-stages/reaction-intercept.ts +9 -8
  376. package/src/runtime/routes/inbound-stages/transcribe-audio.ts +1 -1
  377. package/src/runtime/routes/index.ts +2 -0
  378. package/src/runtime/routes/inference-profile-session-handler.ts +2 -2
  379. package/src/runtime/routes/inference-profiles-routes.ts +12 -7
  380. package/src/runtime/routes/inference-provider-connection-routes.ts +2 -2
  381. package/src/runtime/routes/inference-send-routes.ts +2 -2
  382. package/src/runtime/routes/ingress-status-routes.ts +2 -2
  383. package/src/runtime/routes/integrations/discord.ts +119 -0
  384. package/src/runtime/routes/llm-call-sites-routes.ts +2 -2
  385. package/src/runtime/routes/mcp-auth-routes.ts +12 -6
  386. package/src/runtime/routes/migration-routes.ts +3 -1
  387. package/src/runtime/routes/oauth-pending-flows.ts +136 -0
  388. package/src/runtime/routes/secret-routes.ts +7 -0
  389. package/src/runtime/routes/stt-routes.ts +38 -6
  390. package/src/runtime/routes/wake-conversation-routes.ts +8 -1
  391. package/src/runtime/routes/watch-routes.ts +9 -5
  392. package/src/runtime/sync/resource-sync-events.ts +2 -0
  393. package/src/runtime/trust-verdict-consumer.ts +3 -3
  394. package/src/schedule/__tests__/worker-feature-flags.test.ts +58 -0
  395. package/src/schedule/retry-policy.ts +8 -8
  396. package/src/schedule/run-script.ts +14 -23
  397. package/src/schedule/schedule-recovery.ts +0 -1
  398. package/src/schedule/scheduler.ts +89 -51
  399. package/src/schedule/worker.ts +57 -0
  400. package/src/security/__tests__/openai-device-auth.test.ts +355 -0
  401. package/src/security/ces-rpc-record-backend.ts +123 -0
  402. package/src/security/oauth2.ts +7 -0
  403. package/src/security/openai-device-auth.ts +364 -0
  404. package/src/security/secure-keys.ts +15 -0
  405. package/src/skills/available-skills.ts +10 -1
  406. package/src/skills/catalog-install.ts +19 -1
  407. package/src/skills/inline-command-runner.ts +6 -2
  408. package/src/skills/platform-compatibility.test.ts +49 -0
  409. package/src/skills/platform-compatibility.ts +65 -0
  410. package/src/skills/tool-manifest.ts +20 -0
  411. package/src/stt/__tests__/roles.test.ts +152 -0
  412. package/src/stt/daemon-batch-transcriber.ts +4 -1
  413. package/src/stt/roles.ts +180 -0
  414. package/src/stt/stt-stream-session.ts +3 -2
  415. package/src/stt/types.ts +33 -3
  416. package/src/subagent/manager.ts +12 -0
  417. package/src/telemetry/__tests__/live-voice-funnel.test.ts +34 -0
  418. package/src/telemetry/live-voice-funnel.ts +12 -2
  419. package/src/telemetry/telemetry-wire.generated.ts +6 -0
  420. package/src/telemetry/tool-audit.ts +83 -30
  421. package/src/telemetry/tool-executed-events-store.test.ts +0 -1
  422. package/src/telemetry/turn-outcome.ts +75 -4
  423. package/src/tools/client-os.ts +115 -0
  424. package/src/tools/computer-use/definitions.ts +11 -7
  425. package/src/tools/computer-use/skill-proxy-bridge.ts +2 -2
  426. package/src/tools/credentials/broker-types.ts +0 -71
  427. package/src/tools/credentials/broker.ts +6 -201
  428. package/src/tools/credentials/metadata-store.ts +65 -16
  429. package/src/tools/credentials/store.ts +2 -0
  430. package/src/tools/executor.ts +2 -8
  431. package/src/tools/host-shell.test.ts +75 -0
  432. package/src/tools/host-shell.ts +24 -0
  433. package/src/tools/host-terminal/host-shell.ts +15 -44
  434. package/src/tools/mcp/mcp-tool-factory.ts +44 -9
  435. package/src/tools/permission-checker.ts +73 -21
  436. package/src/tools/policy-context.ts +1 -0
  437. package/src/tools/shared/filesystem/image-read.ts +1 -1
  438. package/src/tools/skills/find-similar-skills.ts +10 -2
  439. package/src/tools/skills/load.ts +41 -6
  440. package/src/tools/skills/sandbox-runner.ts +8 -16
  441. package/src/tools/skills/skill-tool-factory.ts +1 -0
  442. package/src/tools/terminal/__tests__/safe-env.test.ts +64 -1
  443. package/src/tools/terminal/safe-env.ts +39 -9
  444. package/src/tools/terminal/shell.ts +12 -31
  445. package/src/tools/tool-approval-handler.ts +64 -10
  446. package/src/tools/tool-types.ts +10 -0
  447. package/src/tools/types.ts +19 -3
  448. package/src/tools/ui-surface/surface-shape-docs.ts +4 -3
  449. package/src/tools/workflows/manage-workflows.ts +2 -2
  450. package/src/tools/workflows/run-workflow.test.ts +2 -1
  451. package/src/util/__tests__/file-use.test.ts +61 -0
  452. package/src/util/__tests__/process-table.test.ts +66 -0
  453. package/src/util/__tests__/process-tree.test.ts +46 -0
  454. package/src/util/errors.ts +1 -0
  455. package/src/util/file-use.ts +91 -0
  456. package/src/util/host-process.test.ts +17 -0
  457. package/src/util/host-process.ts +75 -0
  458. package/src/util/image-conversion.ts +39 -7
  459. package/src/util/platform.ts +32 -13
  460. package/src/util/process-table.ts +249 -0
  461. package/src/util/process-tree.ts +85 -129
  462. package/src/util/provider-error-patterns.ts +20 -0
  463. package/src/util/spawn.ts +9 -2
  464. package/src/watch/__tests__/watch-retro.test.ts +48 -1
  465. package/src/watch/watch-retro.ts +46 -4
  466. package/src/workspace/git-service.ts +4 -14
  467. package/src/workspace/migrations/147-rename-colliding-backup-profile-names.ts +360 -0
  468. package/src/workspace/migrations/148-strip-unsupported-fallback-profiles.ts +117 -0
  469. package/src/workspace/migrations/149-repoint-backup-profile-selections.ts +204 -0
  470. package/src/workspace/migrations/150-stt-flux-provider-to-model-family.ts +139 -0
  471. package/src/workspace/migrations/__tests__/150-stt-flux-provider-to-model-family.test.ts +160 -0
  472. package/src/workspace/migrations/registry.ts +8 -0
  473. package/src/__tests__/permission-types.test.ts +0 -17
  474. package/src/channels/gateway-discord-admission.ts +0 -32
  475. package/src/persistence/fork-message-copy.ts +0 -239
  476. package/src/plugins/defaults/memory/__tests__/fork-message-copy.test.ts +0 -221
  477. package/src/security/__tests__/oauth2-device-code.test.ts +0 -431
  478. package/src/security/oauth2-device-code.ts +0 -312
@@ -0,0 +1,527 @@
1
+ import {
2
+ existsSync,
3
+ mkdirSync,
4
+ mkdtempSync,
5
+ readFileSync,
6
+ rmSync,
7
+ statSync,
8
+ symlinkSync,
9
+ writeFileSync,
10
+ } from "node:fs";
11
+ import { tmpdir } from "node:os";
12
+ import { dirname, join } from "node:path";
13
+ import {
14
+ afterAll,
15
+ beforeEach,
16
+ describe,
17
+ expect,
18
+ mock,
19
+ setSystemTime,
20
+ spyOn,
21
+ test,
22
+ } from "bun:test";
23
+
24
+ import type { AvatarState } from "../avatar/avatar-manifest.js";
25
+ import * as realEnsureRaster from "../avatar/ensure-raster.js";
26
+
27
+ // Captured before mock.module swaps the module so the real, fd-validated
28
+ // read path is what the sync exercises.
29
+ const realReadContainedAvatarRaster =
30
+ realEnsureRaster.readContainedAvatarRaster;
31
+
32
+ let mockState: AvatarState;
33
+ let mockRasterPath: string | null;
34
+ let mockClient: {
35
+ baseUrl: string;
36
+ platformAssistantId: string;
37
+ fetch: (path: string, init: RequestInit) => Promise<Response>;
38
+ } | null;
39
+ let mockResvgAvailable = false;
40
+ let mockRenderedPng = Buffer.from("small");
41
+ let lastResvgSvg = "";
42
+ let rasterCalls = 0;
43
+
44
+ mock.module("./client.js", () => ({
45
+ VellumPlatformClient: { create: async () => mockClient },
46
+ }));
47
+
48
+ mock.module("../avatar/avatar-manifest.js", () => ({
49
+ readAvatarState: () => mockState,
50
+ computeImageMeta: (path: string) => {
51
+ const stats = statSync(path);
52
+ return { updatedAt: "", etag: `${stats.size}:${stats.mtimeMs}` };
53
+ },
54
+ }));
55
+
56
+ mock.module("../avatar/ensure-raster.js", () => ({
57
+ ensureAvatarRasterPath: async () => {
58
+ rasterCalls += 1;
59
+ return mockRasterPath;
60
+ },
61
+ readContainedAvatarRaster: realReadContainedAvatarRaster,
62
+ }));
63
+
64
+ mock.module("../avatar/resvg-lazy.js", () => ({
65
+ isResvgAvailable: () => mockResvgAvailable,
66
+ getResvg: () =>
67
+ class {
68
+ constructor(svg: string) {
69
+ lastResvgSvg = svg;
70
+ }
71
+ render() {
72
+ return { asPng: () => mockRenderedPng };
73
+ }
74
+ },
75
+ }));
76
+
77
+ import {
78
+ _resetSyncAvatarStateForTests,
79
+ AVATAR_SYNC_KEY_TTL_MS,
80
+ syncAvatarToPlatform,
81
+ } from "./sync-avatar.js";
82
+
83
+ const PNG_MAGIC = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
84
+
85
+ /** Small PNG-signed raster whose tail makes the bytes distinguishable. */
86
+ function png(label: string): Buffer {
87
+ return Buffer.concat([Buffer.from(PNG_MAGIC), Buffer.from(`png-${label}`)]);
88
+ }
89
+
90
+ /** Just over the 256 KB upload cap, with a PNG signature. */
91
+ const OVERSIZED = withMagic(PNG_MAGIC);
92
+ const OVERSIZED_JPEG = withMagic([0xff, 0xd8, 0xff, 0xe0]);
93
+ const OVERSIZED_WEBP = withMagic([
94
+ 0x52, 0x49, 0x46, 0x46, 0, 0, 0, 0, 0x57, 0x45, 0x42, 0x50,
95
+ ]);
96
+
97
+ function withMagic(magic: number[]): Buffer<ArrayBuffer> {
98
+ const buf = Buffer.alloc(256 * 1024 + 1);
99
+ Buffer.from(magic).copy(buf);
100
+ return buf;
101
+ }
102
+
103
+ const dir = mkdtempSync(join(tmpdir(), "sync-avatar-test-"));
104
+ const workspaceDir = join(dir, "workspace");
105
+ const avatarDir = join(workspaceDir, "data", "avatar");
106
+ const syncStatePath = join(dir, "protected", "platform-sync", "avatar.json");
107
+ const prevWorkspaceDir = process.env.VELLUM_WORKSPACE_DIR;
108
+ process.env.VELLUM_WORKSPACE_DIR = workspaceDir;
109
+ afterAll(() => {
110
+ if (prevWorkspaceDir === undefined) {
111
+ delete process.env.VELLUM_WORKSPACE_DIR;
112
+ } else {
113
+ process.env.VELLUM_WORKSPACE_DIR = prevWorkspaceDir;
114
+ }
115
+ rmSync(dir, { recursive: true, force: true });
116
+ });
117
+
118
+ function writeRaster(name: string, bytes: Buffer): string {
119
+ const path = join(avatarDir, name);
120
+ writeFileSync(path, bytes);
121
+ return path;
122
+ }
123
+
124
+ function imageState(etag: string): AvatarState {
125
+ return {
126
+ kind: "image",
127
+ traits: null,
128
+ source: "upload",
129
+ image: { updatedAt: "2026-01-01T00:00:00.000Z", etag },
130
+ };
131
+ }
132
+
133
+ const NONE: AvatarState = {
134
+ kind: "none",
135
+ traits: null,
136
+ source: null,
137
+ image: null,
138
+ };
139
+
140
+ interface Patch {
141
+ path: string;
142
+ body: { avatar_base64: string | null };
143
+ }
144
+
145
+ let patches: Patch[];
146
+ let respond: () => Response;
147
+
148
+ function makeClient(assistantId = "asst-1", baseUrl = "https://platform.a") {
149
+ return {
150
+ baseUrl,
151
+ platformAssistantId: assistantId,
152
+ fetch: async (path: string, init: RequestInit) => {
153
+ patches.push({ path, body: JSON.parse(init.body as string) });
154
+ return respond();
155
+ },
156
+ };
157
+ }
158
+
159
+ async function settle(): Promise<void> {
160
+ for (let i = 0; i < 10; i++) {
161
+ await new Promise((r) => setTimeout(r, 5));
162
+ }
163
+ }
164
+
165
+ describe("syncAvatarToPlatform", () => {
166
+ beforeEach(() => {
167
+ rmSync(workspaceDir, { recursive: true, force: true });
168
+ rmSync(join(dir, "protected"), { recursive: true, force: true });
169
+ mkdirSync(avatarDir, { recursive: true });
170
+ _resetSyncAvatarStateForTests();
171
+ patches = [];
172
+ rasterCalls = 0;
173
+ respond = () => new Response("{}", { status: 200 });
174
+ mockClient = makeClient();
175
+ mockResvgAvailable = false;
176
+ mockState = imageState("etag-a");
177
+ mockRasterPath = writeRaster("a.png", png("a"));
178
+ });
179
+
180
+ test("PATCHes the base64 raster once and dedups an unchanged etag", async () => {
181
+ syncAvatarToPlatform();
182
+ await settle();
183
+ syncAvatarToPlatform();
184
+ await settle();
185
+
186
+ expect(patches).toHaveLength(1);
187
+ expect(patches[0].path).toBe("/v1/assistants/asst-1/");
188
+ expect(patches[0].body).toEqual({
189
+ avatar_base64: png("a").toString("base64"),
190
+ });
191
+ });
192
+
193
+ test("a changed etag re-sends", async () => {
194
+ syncAvatarToPlatform();
195
+ await settle();
196
+ mockState = imageState("etag-b");
197
+ mockRasterPath = writeRaster("b.png", png("bb"));
198
+ syncAvatarToPlatform();
199
+ await settle();
200
+
201
+ expect(patches.map((p) => p.body.avatar_base64)).toEqual([
202
+ png("a").toString("base64"),
203
+ png("bb").toString("base64"),
204
+ ]);
205
+ });
206
+
207
+ test("a raster overwritten in place re-sends without a manifest change", async () => {
208
+ syncAvatarToPlatform();
209
+ await settle();
210
+ writeRaster("a.png", png("a-rewritten"));
211
+ syncAvatarToPlatform();
212
+ await settle();
213
+
214
+ expect(patches.map((p) => p.body.avatar_base64)).toEqual([
215
+ png("a").toString("base64"),
216
+ png("a-rewritten").toString("base64"),
217
+ ]);
218
+ });
219
+
220
+ test("re-registering to another assistant id re-sends the same raster", async () => {
221
+ syncAvatarToPlatform();
222
+ await settle();
223
+ mockClient = makeClient("asst-2");
224
+ syncAvatarToPlatform();
225
+ await settle();
226
+ syncAvatarToPlatform();
227
+ await settle();
228
+
229
+ expect(patches.map((p) => p.path)).toEqual([
230
+ "/v1/assistants/asst-1/",
231
+ "/v1/assistants/asst-2/",
232
+ ]);
233
+ expect(patches[1].body.avatar_base64).toBe(png("a").toString("base64"));
234
+ });
235
+
236
+ test("rapid changes collapse into one PATCH carrying the newest raster", async () => {
237
+ syncAvatarToPlatform();
238
+ syncAvatarToPlatform();
239
+ mockState = imageState("etag-c");
240
+ mockRasterPath = writeRaster("c.png", png("c"));
241
+ syncAvatarToPlatform();
242
+ await settle();
243
+
244
+ expect(patches).toHaveLength(1);
245
+ expect(patches[0].body.avatar_base64).toBe(png("c").toString("base64"));
246
+ expect(rasterCalls).toBe(1);
247
+ });
248
+
249
+ test("removing the avatar sends avatar_base64: null", async () => {
250
+ syncAvatarToPlatform();
251
+ await settle();
252
+ mockState = NONE;
253
+ mockRasterPath = null;
254
+ syncAvatarToPlatform();
255
+ await settle();
256
+
257
+ expect(patches[1].body).toEqual({ avatar_base64: null });
258
+ });
259
+
260
+ test("an image avatar with a missing PNG is skipped, not cleared", async () => {
261
+ syncAvatarToPlatform();
262
+ await settle();
263
+ mockRasterPath = null;
264
+ syncAvatarToPlatform();
265
+ await settle();
266
+
267
+ expect(patches).toHaveLength(1);
268
+ });
269
+
270
+ test("a character whose re-render failed is skipped, not cleared", async () => {
271
+ syncAvatarToPlatform();
272
+ await settle();
273
+ mockState = {
274
+ kind: "character",
275
+ traits: { bodyShape: "blob", eyeStyle: "curious", color: "green" },
276
+ source: null,
277
+ image: null,
278
+ };
279
+ mockRasterPath = null;
280
+ syncAvatarToPlatform();
281
+ await settle();
282
+
283
+ expect(patches).toHaveLength(1);
284
+ });
285
+
286
+ test("a symlinked raster is never uploaded", async () => {
287
+ const outside = join(dir, "outside.png");
288
+ writeFileSync(outside, png("secret"));
289
+ mockRasterPath = join(avatarDir, "avatar-image.png");
290
+ symlinkSync(outside, mockRasterPath);
291
+ syncAvatarToPlatform();
292
+ await settle();
293
+
294
+ expect(patches).toHaveLength(0);
295
+ });
296
+
297
+ test("a raster whose bytes are not an image is never uploaded", async () => {
298
+ mockRasterPath = writeRaster(
299
+ "avatar-image.png",
300
+ Buffer.from("AKIA-not-an-image-at-all"),
301
+ );
302
+ syncAvatarToPlatform();
303
+ await settle();
304
+
305
+ expect(patches).toHaveLength(0);
306
+ });
307
+
308
+ test("a raster outside the avatar dir is never uploaded", async () => {
309
+ const outside = join(dir, "elsewhere.png");
310
+ writeFileSync(outside, png("elsewhere"));
311
+ mockRasterPath = outside;
312
+ syncAvatarToPlatform();
313
+ await settle();
314
+
315
+ expect(patches).toHaveLength(0);
316
+ });
317
+
318
+ test("skips oversized rasters when resvg is unavailable", async () => {
319
+ mockRasterPath = writeRaster("big.png", OVERSIZED);
320
+ syncAvatarToPlatform();
321
+ await settle();
322
+
323
+ expect(patches).toHaveLength(0);
324
+ });
325
+
326
+ test("downscales oversized rasters through resvg", async () => {
327
+ mockResvgAvailable = true;
328
+ mockRenderedPng = Buffer.from("tiny");
329
+ mockRasterPath = writeRaster("big.png", OVERSIZED);
330
+ syncAvatarToPlatform();
331
+ await settle();
332
+
333
+ expect(patches).toHaveLength(1);
334
+ expect(patches[0].body.avatar_base64).toBe(
335
+ Buffer.from("tiny").toString("base64"),
336
+ );
337
+ });
338
+
339
+ test("downscales an oversized JPEG through resvg", async () => {
340
+ mockResvgAvailable = true;
341
+ mockRenderedPng = Buffer.from("tiny");
342
+ mockRasterPath = writeRaster("big.png", OVERSIZED_JPEG);
343
+ syncAvatarToPlatform();
344
+ await settle();
345
+
346
+ expect(patches).toHaveLength(1);
347
+ expect(patches[0].body.avatar_base64).toBe(
348
+ Buffer.from("tiny").toString("base64"),
349
+ );
350
+ expect(lastResvgSvg).toContain('href="data:image/jpeg;base64,');
351
+ });
352
+
353
+ test("skips an oversized WebP instead of uploading a blank render", async () => {
354
+ mockResvgAvailable = true;
355
+ mockRenderedPng = Buffer.from("tiny");
356
+ lastResvgSvg = "";
357
+ mockRasterPath = writeRaster("big.png", OVERSIZED_WEBP);
358
+ syncAvatarToPlatform();
359
+ await settle();
360
+
361
+ expect(patches).toHaveLength(0);
362
+ expect(lastResvgSvg).toBe("");
363
+ });
364
+
365
+ test("skips when the downscaled raster still exceeds the cap", async () => {
366
+ mockResvgAvailable = true;
367
+ mockRenderedPng = OVERSIZED;
368
+ mockRasterPath = writeRaster("big.png", OVERSIZED);
369
+ syncAvatarToPlatform();
370
+ await settle();
371
+
372
+ expect(patches).toHaveLength(0);
373
+ });
374
+
375
+ test("a restart with the same raster and destination does not re-upload", async () => {
376
+ syncAvatarToPlatform();
377
+ await settle();
378
+ expect(JSON.parse(readFileSync(syncStatePath, "utf-8"))).toEqual({
379
+ key: expect.stringMatching(/^https:\/\/platform\.a\|asst-1\|image:/),
380
+ syncedAt: expect.any(Number),
381
+ });
382
+ expect(
383
+ existsSync(join(workspaceDir, "data", "avatar", "avatar-sync.json")),
384
+ ).toBe(false);
385
+
386
+ _resetSyncAvatarStateForTests();
387
+ syncAvatarToPlatform();
388
+ await settle();
389
+
390
+ expect(patches).toHaveLength(1);
391
+ });
392
+
393
+ test("a restart re-uploads when the destination or raster changed", async () => {
394
+ syncAvatarToPlatform();
395
+ await settle();
396
+
397
+ _resetSyncAvatarStateForTests();
398
+ mockClient = makeClient("asst-2");
399
+ syncAvatarToPlatform();
400
+ await settle();
401
+
402
+ _resetSyncAvatarStateForTests();
403
+ writeRaster("a.png", png("a-rewritten"));
404
+ syncAvatarToPlatform();
405
+ await settle();
406
+
407
+ expect(patches.map((p) => p.path)).toEqual([
408
+ "/v1/assistants/asst-1/",
409
+ "/v1/assistants/asst-2/",
410
+ "/v1/assistants/asst-2/",
411
+ ]);
412
+ expect(patches[2].body.avatar_base64).toBe(
413
+ png("a-rewritten").toString("base64"),
414
+ );
415
+ });
416
+
417
+ test("a persisted key older than the TTL re-uploads once and is refreshed", async () => {
418
+ syncAvatarToPlatform();
419
+ await settle();
420
+ const stale = JSON.parse(readFileSync(syncStatePath, "utf-8"));
421
+ stale.syncedAt = Date.now() - AVATAR_SYNC_KEY_TTL_MS - 24 * 60 * 60 * 1000;
422
+ writeFileSync(syncStatePath, JSON.stringify(stale));
423
+
424
+ _resetSyncAvatarStateForTests();
425
+ syncAvatarToPlatform();
426
+ await settle();
427
+ _resetSyncAvatarStateForTests();
428
+ syncAvatarToPlatform();
429
+ await settle();
430
+
431
+ expect(patches).toHaveLength(2);
432
+ const refreshed = JSON.parse(readFileSync(syncStatePath, "utf-8"));
433
+ expect(refreshed.key).toBe(stale.key);
434
+ expect(refreshed.syncedAt).toBeGreaterThan(stale.syncedAt);
435
+ });
436
+
437
+ test("a key older than the TTL re-uploads without a restart", async () => {
438
+ const start = Date.now();
439
+ setSystemTime(new Date(start));
440
+ try {
441
+ syncAvatarToPlatform();
442
+ await settle();
443
+ setSystemTime(new Date(start + AVATAR_SYNC_KEY_TTL_MS - 1));
444
+ syncAvatarToPlatform();
445
+ await settle();
446
+ expect(patches).toHaveLength(1);
447
+
448
+ setSystemTime(new Date(start + AVATAR_SYNC_KEY_TTL_MS));
449
+ syncAvatarToPlatform();
450
+ await settle();
451
+ syncAvatarToPlatform();
452
+ await settle();
453
+ } finally {
454
+ setSystemTime();
455
+ }
456
+
457
+ expect(patches).toHaveLength(2);
458
+ expect(JSON.parse(readFileSync(syncStatePath, "utf-8"))).toEqual({
459
+ key: expect.stringMatching(/^https:\/\/platform\.a\|asst-1\|image:/),
460
+ syncedAt: start + AVATAR_SYNC_KEY_TTL_MS,
461
+ });
462
+ });
463
+
464
+ test("arms an unref'd timer that re-uploads at the TTL without a caller", async () => {
465
+ const armed: Array<{ delay: number; fire: () => void }> = [];
466
+ const realSetTimeout = globalThis.setTimeout;
467
+ const spy = spyOn(globalThis, "setTimeout").mockImplementation(((
468
+ fn: () => void,
469
+ delay?: number,
470
+ ) => {
471
+ if (
472
+ delay !== undefined &&
473
+ delay > AVATAR_SYNC_KEY_TTL_MS - 1000 &&
474
+ delay <= AVATAR_SYNC_KEY_TTL_MS
475
+ ) {
476
+ armed.push({ delay, fire: fn });
477
+ return { unref: () => undefined } as unknown as NodeJS.Timeout;
478
+ }
479
+ return realSetTimeout(fn, delay);
480
+ }) as typeof setTimeout);
481
+ try {
482
+ syncAvatarToPlatform();
483
+ await settle();
484
+ expect(patches).toHaveLength(1);
485
+ expect(armed).toHaveLength(1);
486
+
487
+ setSystemTime(new Date(Date.now() + AVATAR_SYNC_KEY_TTL_MS));
488
+ armed[0]!.fire();
489
+ await settle();
490
+ } finally {
491
+ spy.mockRestore();
492
+ setSystemTime();
493
+ }
494
+
495
+ expect(patches).toHaveLength(2);
496
+ expect(armed).toHaveLength(2);
497
+ });
498
+
499
+ test("a corrupt persisted key re-uploads", async () => {
500
+ mkdirSync(dirname(syncStatePath), { recursive: true });
501
+ writeFileSync(syncStatePath, "{not json");
502
+ syncAvatarToPlatform();
503
+ await settle();
504
+
505
+ expect(patches).toHaveLength(1);
506
+ });
507
+
508
+ test("a failed PATCH leaves the persisted key untouched", async () => {
509
+ respond = () => new Response("nope", { status: 500 });
510
+ syncAvatarToPlatform();
511
+ await settle();
512
+
513
+ expect(() => readFileSync(syncStatePath)).toThrow();
514
+ });
515
+
516
+ test("no-op without a platform client or assistant id", async () => {
517
+ mockClient = null;
518
+ syncAvatarToPlatform();
519
+ await settle();
520
+ mockClient = makeClient("");
521
+ syncAvatarToPlatform();
522
+ await settle();
523
+
524
+ expect(patches).toHaveLength(0);
525
+ expect(rasterCalls).toBe(0);
526
+ });
527
+ });