@vellumai/assistant 0.12.0 → 0.12.1-dev.202609141913.5e16607

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (441) hide show
  1. package/AGENTS.md +5 -1
  2. package/ARCHITECTURE.md +11 -12
  3. package/docs/architecture/turn-actor.md +15 -8
  4. package/docs/guardian-request-flow.md +16 -0
  5. package/openapi.yaml +292 -50
  6. package/package.json +1 -1
  7. package/scripts/smoke-desktop-window-theme.ts +186 -0
  8. package/src/__tests__/always-loaded-tools-guard.test.ts +18 -10
  9. package/src/__tests__/app-compiler.test.ts +6 -0
  10. package/src/__tests__/app-control-tool-schemas.test.ts +5 -2
  11. package/src/__tests__/app-dir-path-guard.test.ts +1 -3
  12. package/src/__tests__/computer-use-skill-proxy-bridge.test.ts +5 -2
  13. package/src/__tests__/computer-use-tools.test.ts +17 -5
  14. package/src/__tests__/config-schema-cmd.test.ts +2 -2
  15. package/src/__tests__/config-schema.test.ts +28 -29
  16. package/src/__tests__/config-watcher.test.ts +23 -8
  17. package/src/__tests__/connection-model-compat.test.ts +2 -2
  18. package/src/__tests__/conversation-key-store-disk-view.test.ts +1 -1
  19. package/src/__tests__/conversation-pairing.test.ts +26 -0
  20. package/src/__tests__/conversation-process-app-control-preactivation.test.ts +4 -10
  21. package/src/__tests__/conversation-queue.test.ts +48 -207
  22. package/src/__tests__/conversation-retry-discard.test.ts +54 -1
  23. package/src/__tests__/conversation-skill-tools.test.ts +27 -0
  24. package/src/__tests__/conversation-surfaces-app-control.test.ts +8 -3
  25. package/src/__tests__/conversation-surfaces-task-progress.test.ts +67 -0
  26. package/src/__tests__/conversation-title-service.test.ts +14 -10
  27. package/src/__tests__/conversation-tool-setup-app-refresh.test.ts +3 -5
  28. package/src/__tests__/conversation-tool-setup-attribution.test.ts +51 -0
  29. package/src/__tests__/credential-record-retire.test.ts +171 -1
  30. package/src/__tests__/credential-routes.test.ts +212 -3
  31. package/src/__tests__/credential-security-invariants.test.ts +4 -2
  32. package/src/__tests__/cu-unified-flow.test.ts +8 -2
  33. package/src/__tests__/document-sync-tags.test.ts +25 -0
  34. package/src/__tests__/drain-kick-guard.test.ts +0 -2
  35. package/src/__tests__/drain-requeue-on-contention.test.ts +0 -6
  36. package/src/__tests__/evict-conversations-for-reload.test.ts +1 -1
  37. package/src/__tests__/git-porcelain.test.ts +47 -0
  38. package/src/__tests__/helpers/set-workspace-mcp.ts +11 -0
  39. package/src/__tests__/host-bash-proxy.test.ts +26 -45
  40. package/src/__tests__/host-browser-proxy.test.ts +6 -17
  41. package/src/__tests__/host-file-proxy-targeted.test.ts +23 -0
  42. package/src/__tests__/host-file-proxy.test.ts +11 -23
  43. package/src/__tests__/host-transfer-proxy-targeted.test.ts +30 -9
  44. package/src/__tests__/llm-catalog-parity.test.ts +25 -0
  45. package/src/__tests__/mcp-auth-routes.test.ts +6 -9
  46. package/src/__tests__/mcp-config-secret-boundary.test.ts +78 -136
  47. package/src/__tests__/mcp-health-check.test.ts +8 -11
  48. package/src/__tests__/mcp-list-plugin-servers.test.ts +8 -10
  49. package/src/__tests__/message-deleted-hook-dispatch.test.ts +119 -0
  50. package/src/__tests__/messages-after-tiebreaker.test.ts +91 -0
  51. package/src/__tests__/messages-read-boundary-guard.test.ts +1 -1
  52. package/src/__tests__/messaging-send-tool.test.ts +355 -548
  53. package/src/__tests__/model-intents.test.ts +3 -0
  54. package/src/__tests__/notification-vellum-adapter.test.ts +85 -2
  55. package/src/__tests__/outlook-messaging-provider.test.ts +6 -6
  56. package/src/__tests__/platform-callback-registration.test.ts +8 -16
  57. package/src/__tests__/platform-client-verify-credential.test.ts +2 -0
  58. package/src/__tests__/plugin-import-boundary-guard.test.ts +13 -0
  59. package/src/__tests__/resolve-app.test.ts +135 -0
  60. package/src/__tests__/script-proxy-certs.test.ts +35 -0
  61. package/src/__tests__/service-account-token.test.ts +247 -0
  62. package/src/__tests__/skill-feature-flags-integration.test.ts +1 -1
  63. package/src/__tests__/skill-feature-flags.test.ts +2 -2
  64. package/src/__tests__/source-fingerprint.test.ts +184 -0
  65. package/src/__tests__/subagent-tool-gate-mode.test.ts +19 -3
  66. package/src/__tests__/subagent-tools.test.ts +3 -2
  67. package/src/__tests__/telephony-tts-guard.test.ts +38 -3
  68. package/src/__tests__/vellum-self-knowledge-inline-command.test.ts +4 -0
  69. package/src/__tests__/watch-retro-tool-availability.test.ts +8 -17
  70. package/src/__tests__/workspace-git-service.test.ts +26 -0
  71. package/src/__tests__/workspace-migration-154-repair-retired-codex-gpt-5-4-model-ids.test.ts +336 -0
  72. package/src/acp/__tests__/agent-process.test.ts +258 -4
  73. package/src/acp/__tests__/auth-required.test.ts +96 -0
  74. package/src/acp/__tests__/client-handler.test.ts +90 -2
  75. package/src/acp/__tests__/helpers/acp-model-option.ts +51 -0
  76. package/src/acp/__tests__/session-manager-persistence.test.ts +5 -1
  77. package/src/acp/__tests__/session-manager-resume.test.ts +270 -6
  78. package/src/acp/__tests__/session-manager-usage.test.ts +4 -2
  79. package/src/acp/__tests__/session-manager.test.ts +895 -4
  80. package/src/acp/agent-process.test.ts +4 -1
  81. package/src/acp/agent-process.ts +94 -9
  82. package/src/acp/auth-required.ts +50 -1
  83. package/src/acp/auto-install.test.ts +9 -7
  84. package/src/acp/client-handler.ts +16 -3
  85. package/src/acp/model-config.test.ts +166 -0
  86. package/src/acp/model-config.ts +138 -0
  87. package/src/acp/resolve-agent.test.ts +220 -6
  88. package/src/acp/resolve-agent.ts +88 -23
  89. package/src/acp/session-manager.test.ts +196 -3
  90. package/src/acp/session-manager.ts +441 -18
  91. package/src/acp/types.ts +50 -5
  92. package/src/api/events/acp-session-model-update.test.ts +88 -0
  93. package/src/api/events/acp-session-model-update.ts +46 -0
  94. package/src/api/events/app-files-changed.ts +4 -3
  95. package/src/api/events/notification-intent.ts +2 -0
  96. package/src/api/index.ts +6 -0
  97. package/src/apps/app-store.ts +1 -1
  98. package/src/apps/resolve-app.ts +81 -0
  99. package/src/apps/source-fingerprint.ts +266 -0
  100. package/src/bundler/app-compiler.ts +15 -0
  101. package/src/calls/__tests__/barge-in-guard.test.ts +81 -0
  102. package/src/{__tests__ → calls/__tests__}/call-controller.test.ts +503 -82
  103. package/src/{__tests__ → calls/__tests__}/media-stream-audio-transcode.test.ts +1 -1
  104. package/src/{__tests__ → calls/__tests__}/media-stream-output.test.ts +37 -8
  105. package/src/{__tests__ → calls/__tests__}/media-stream-parser.test.ts +1 -1
  106. package/src/{__tests__ → calls/__tests__}/media-stream-server-integration.test.ts +150 -57
  107. package/src/{__tests__ → calls/__tests__}/media-stream-stt-session.test.ts +5 -5
  108. package/src/{__tests__ → calls/__tests__}/media-turn-detector.test.ts +1 -1
  109. package/src/{live-voice → calls}/__tests__/progress-narration.test.ts +4 -4
  110. package/src/{live-voice → calls}/__tests__/progress-phrases.test.ts +1 -1
  111. package/src/calls/__tests__/voice-control-protocol.test.ts +58 -25
  112. package/src/calls/__tests__/voice-leg-coordinator.test.ts +229 -0
  113. package/src/calls/__tests__/voice-progress-cadence.test.ts +274 -0
  114. package/src/{__tests__/voice-session-bridge.test.ts → calls/__tests__/voice-session-bridge-turn-flow.test.ts} +20 -12
  115. package/src/calls/__tests__/voice-session-bridge.test.ts +37 -1
  116. package/src/calls/__tests__/voice-triage-escalate.test.ts +105 -0
  117. package/src/calls/barge-in-guard.ts +118 -0
  118. package/src/calls/call-constants.ts +24 -4
  119. package/src/calls/call-controller.ts +499 -199
  120. package/src/calls/call-transport.ts +16 -0
  121. package/src/calls/media-stream-output.ts +32 -0
  122. package/src/calls/media-stream-server.ts +82 -30
  123. package/src/calls/media-stream-stt-session.ts +15 -0
  124. package/src/{live-voice → calls}/progress-narration.ts +2 -2
  125. package/src/calls/resolve-call-tts-provider.ts +33 -2
  126. package/src/calls/tts-call-strategy.ts +9 -5
  127. package/src/calls/types.ts +2 -0
  128. package/src/calls/voice-control-protocol.ts +53 -21
  129. package/src/calls/voice-leg-coordinator.ts +189 -0
  130. package/src/calls/voice-progress-cadence.ts +423 -0
  131. package/src/calls/voice-session-bridge.ts +59 -46
  132. package/src/calls/voice-triage-escalate.ts +175 -56
  133. package/src/cli/commands/__tests__/apps.test.ts +245 -0
  134. package/src/cli/commands/__tests__/bash.test.ts +53 -0
  135. package/src/cli/commands/__tests__/roadmap.help.test.ts +19 -0
  136. package/src/cli/commands/apps.help.ts +67 -13
  137. package/src/cli/commands/apps.ts +183 -0
  138. package/src/cli/commands/bash.help.ts +8 -13
  139. package/src/cli/commands/bash.ts +7 -25
  140. package/src/cli/commands/channels/__tests__/send.test.ts +218 -0
  141. package/src/cli/commands/channels/index.help.ts +70 -2
  142. package/src/cli/commands/channels/index.ts +16 -3
  143. package/src/cli/commands/channels/send.ts +128 -0
  144. package/src/cli/commands/credentials.help.ts +6 -2
  145. package/src/cli/commands/credentials.ts +2 -2
  146. package/src/cli/commands/mcp.help.ts +8 -8
  147. package/src/cli/commands/mcp.ts +1 -1
  148. package/src/cli/commands/roadmap.help.ts +5 -1
  149. package/src/cli/commands/roadmap.ts +1 -1
  150. package/src/cli/lib/bundled-marketplace.json +103 -90
  151. package/src/config/__tests__/default-profile-catalog.test.ts +22 -0
  152. package/src/config/__tests__/memory-retrospective-schema.test.ts +15 -1
  153. package/src/config/__tests__/platform-identity.test.ts +255 -0
  154. package/src/config/__tests__/platform-rehydration.test.ts +99 -9
  155. package/src/config/acp-agent-write.ts +43 -0
  156. package/src/config/acp-defaults.test.ts +13 -3
  157. package/src/config/acp-defaults.ts +23 -6
  158. package/src/config/acp-schema.test.ts +81 -0
  159. package/src/config/acp-schema.ts +30 -2
  160. package/src/config/bundled-skills/acp/SKILL.md +22 -14
  161. package/src/config/bundled-skills/acp/TOOLS.json +5 -1
  162. package/src/config/bundled-skills/app-builder/SKILL.md +12 -9
  163. package/src/config/bundled-skills/app-builder/references/CUSTOM_ROUTES.md +1 -1
  164. package/src/config/bundled-skills/messaging/SKILL.md +3 -3
  165. package/src/config/bundled-skills/messaging/TOOLS.json +3 -3
  166. package/src/config/bundled-skills/messaging/tools/messaging-send.ts +67 -139
  167. package/src/config/bundled-skills/phone-calls/references/TRANSCRIPTS.md +1 -1
  168. package/src/config/bundled-skills/schedule/SKILL.md +3 -4
  169. package/src/config/bundled-skills/screen-annotation/SKILL.md +8 -1
  170. package/src/config/bundled-skills/screen-annotation/tools/screen-annotation.test.ts +4 -1
  171. package/src/config/bundled-skills/skill-management/TOOLS.json +2 -2
  172. package/src/config/default-profile-catalog.ts +1 -1
  173. package/src/config/env.ts +2 -2
  174. package/src/config/feature-flag-registry.json +24 -12
  175. package/src/config/loader.ts +1 -0
  176. package/src/config/memory-v3-gate.test.ts +31 -0
  177. package/src/config/memory-v3-gate.ts +20 -16
  178. package/src/config/platform-identity.ts +201 -0
  179. package/src/config/platform-rehydration.ts +11 -27
  180. package/src/config/schema.ts +2 -2
  181. package/src/config/schemas/__tests__/live-voice.test.ts +8 -158
  182. package/src/config/schemas/__tests__/voice.test.ts +148 -0
  183. package/src/config/schemas/calls.ts +1 -28
  184. package/src/config/schemas/live-voice.ts +1 -173
  185. package/src/config/schemas/mcp.ts +1 -1
  186. package/src/config/schemas/memory-retrospective.ts +10 -0
  187. package/src/config/schemas/services.ts +8 -0
  188. package/src/config/schemas/skills.ts +0 -14
  189. package/src/config/schemas/voice.ts +150 -0
  190. package/src/credential-execution/process-manager.test.ts +18 -19
  191. package/src/daemon/__tests__/conversation-tool-setup.test.ts +66 -121
  192. package/src/daemon/__tests__/plugin-mcp-reconcile.test.ts +4 -1
  193. package/src/daemon/__tests__/skill-memory-refresh-mtime.test.ts +133 -0
  194. package/src/daemon/app-change-notify.ts +45 -0
  195. package/src/daemon/config-watcher.ts +13 -194
  196. package/src/daemon/conversation-process.ts +35 -64
  197. package/src/daemon/conversation-skill-tools.ts +13 -31
  198. package/src/daemon/conversation-store.ts +1 -1
  199. package/src/daemon/conversation-surfaces.ts +10 -8
  200. package/src/daemon/conversation-tool-setup.ts +37 -43
  201. package/src/daemon/conversation.ts +0 -3
  202. package/src/daemon/host-bash-proxy.ts +8 -12
  203. package/src/daemon/host-browser-proxy.ts +15 -1
  204. package/src/daemon/host-file-proxy.ts +8 -10
  205. package/src/daemon/host-transfer-proxy.ts +14 -18
  206. package/src/daemon/lifecycle.ts +0 -5
  207. package/src/daemon/mcp-reload-service.ts +5 -5
  208. package/src/daemon/message-types/sync.ts +1 -0
  209. package/src/daemon/orphan-reaper.ts +1 -1
  210. package/src/daemon/providers-setup.ts +1 -1
  211. package/src/daemon/shutdown-handlers.ts +1 -9
  212. package/src/daemon/skill-memory-refresh.ts +64 -0
  213. package/src/daemon/tool-side-effects.ts +7 -18
  214. package/src/desktop/__tests__/fake-desktop.ts +119 -0
  215. package/src/desktop/desktop-chrome-policy.test.ts +71 -0
  216. package/src/desktop/desktop-chrome-policy.ts +42 -0
  217. package/src/desktop/desktop-dependencies.test.ts +102 -0
  218. package/src/desktop/desktop-dependencies.ts +306 -0
  219. package/src/desktop/desktop-feature.test.ts +18 -0
  220. package/src/desktop/desktop-feature.ts +19 -0
  221. package/src/desktop/desktop-panel-config.test.ts +135 -0
  222. package/src/desktop/desktop-panel-config.ts +149 -0
  223. package/src/desktop/desktop-session-manager.test.ts +627 -0
  224. package/src/desktop/desktop-session-manager.ts +814 -0
  225. package/src/desktop/desktop-stream-bridge.test.ts +395 -0
  226. package/src/desktop/desktop-stream-bridge.ts +214 -0
  227. package/src/desktop/desktop-wallpaper.test.ts +191 -0
  228. package/src/desktop/desktop-wallpaper.ts +113 -0
  229. package/src/desktop/desktop-window-theme.ts +170 -0
  230. package/src/home/__tests__/feed-writer.test.ts +22 -0
  231. package/src/home/feed-writer.ts +11 -2
  232. package/src/hooks/types.ts +33 -0
  233. package/src/i18n/AGENTS.md +22 -0
  234. package/src/i18n/__tests__/i18n.test.ts +108 -0
  235. package/src/i18n/index.ts +16 -0
  236. package/src/i18n/locales.ts +93 -0
  237. package/src/i18n/messages.ts +61 -0
  238. package/src/i18n/title.ts +25 -0
  239. package/src/inbound/platform-callback-registration.ts +4 -5
  240. package/src/live-voice/__tests__/live-voice-metrics.test.ts +0 -3
  241. package/src/live-voice/__tests__/live-voice-progress.test.ts +15 -15
  242. package/src/live-voice/__tests__/live-voice-vad.test.ts +2 -2
  243. package/src/live-voice/__tests__/runtime-websocket-shell.test.ts +13 -69
  244. package/src/live-voice/live-voice-session.ts +213 -693
  245. package/src/live-voice/protocol.ts +0 -2
  246. package/src/mcp/__tests__/effective-config.test.ts +2 -2
  247. package/src/mcp/__tests__/workspace-mcp-config.test.ts +135 -0
  248. package/src/mcp/effective-config.ts +3 -3
  249. package/src/mcp/mcp-header-store.ts +29 -45
  250. package/src/mcp/spec-schema.ts +111 -0
  251. package/src/mcp/startup.ts +8 -4
  252. package/src/mcp/workspace-mcp-config.ts +188 -0
  253. package/src/messaging/provider.ts +10 -3
  254. package/src/messaging/providers/__tests__/proactive-address.test.ts +95 -0
  255. package/src/messaging/providers/callback-routing.ts +18 -0
  256. package/src/messaging/providers/channel-transport.ts +56 -0
  257. package/src/messaging/providers/discord/transport.ts +17 -0
  258. package/src/messaging/providers/slack/__tests__/adapter-token-routing.test.ts +6 -17
  259. package/src/messaging/providers/slack/adapter.ts +7 -44
  260. package/src/messaging/providers/slack/transport.ts +16 -0
  261. package/src/messaging/providers/telegram-bot/adapter.ts +1 -48
  262. package/src/messaging/providers/telegram-bot/client.ts +0 -26
  263. package/src/messaging/providers/telegram-bot/transport.ts +20 -0
  264. package/src/messaging/providers/whatsapp/adapter.ts +1 -48
  265. package/src/messaging/providers/whatsapp/transport.ts +18 -0
  266. package/src/monitoring/__tests__/workspace-git-heartbeat.test.ts +8 -0
  267. package/src/notifications/__tests__/assistant-reply-producer.test.ts +55 -0
  268. package/src/notifications/__tests__/guardian-feed-projection.test.ts +158 -2
  269. package/src/notifications/__tests__/home-feed-side-effect.test.ts +153 -3
  270. package/src/notifications/__tests__/schedule-result-producer.test.ts +99 -3
  271. package/src/notifications/adapters/macos.ts +3 -0
  272. package/src/notifications/assistant-reply-producer.ts +8 -3
  273. package/src/notifications/conversation-pairing.ts +36 -16
  274. package/src/notifications/delivered-post-record.ts +11 -1
  275. package/src/notifications/guardian-feed-projection.ts +125 -5
  276. package/src/notifications/home-feed-side-effect.ts +55 -7
  277. package/src/notifications/schedule-result-producer.ts +66 -22
  278. package/src/oauth/__tests__/seed-providers-managed.test.ts +54 -0
  279. package/src/oauth/byo-connection.test.ts +45 -0
  280. package/src/oauth/byo-connection.ts +36 -6
  281. package/src/oauth/connection-resolver.test.ts +73 -0
  282. package/src/oauth/connection-resolver.ts +95 -2
  283. package/src/oauth/seed-providers.ts +165 -0
  284. package/src/outbound-proxy/certs.ts +3 -5
  285. package/src/permissions/checker.test.ts +11 -6
  286. package/src/persistence/compaction-log-store-clickhouse.ts +3 -3
  287. package/src/persistence/conversation-crud.ts +71 -63
  288. package/src/persistence/conversation-lineage.ts +12 -4
  289. package/src/persistence/conversation-title-placeholders.ts +23 -0
  290. package/src/persistence/conversation-title-service.ts +9 -26
  291. package/src/persistence/llm-request-log-sink-clickhouse.ts +3 -3
  292. package/src/persistence/llm-request-log-source-clickhouse.ts +3 -3
  293. package/src/persistence/message-cursor.ts +78 -0
  294. package/src/persistence/message-reads.ts +30 -0
  295. package/src/persistence/migrations/157-invite-contact-id.ts +18 -6
  296. package/src/persistence/migrations/__tests__/157-invite-contact-id.test.ts +149 -0
  297. package/src/persistence/schema/memory-core.ts +5 -0
  298. package/src/platform/client.test.ts +4 -2
  299. package/src/platform/client.ts +2 -10
  300. package/src/plugin-api/constants.ts +2 -0
  301. package/src/plugin-api/index.ts +1 -0
  302. package/src/plugin-api/types.ts +2 -0
  303. package/src/plugins/defaults/index.ts +2 -0
  304. package/src/plugins/defaults/memory/__tests__/memory-retrospective-accounting.test.ts +46 -0
  305. package/src/plugins/defaults/memory/__tests__/memory-retrospective-cursor-backfill.test.ts +118 -0
  306. package/src/plugins/defaults/memory/__tests__/memory-retrospective-cursor-preserve.test.ts +83 -0
  307. package/src/plugins/defaults/memory/__tests__/memory-retrospective-enqueue.test.ts +9 -5
  308. package/src/plugins/defaults/memory/__tests__/memory-retrospective-job.test.ts +20 -10
  309. package/src/plugins/defaults/memory/__tests__/memory-retrospective-state.test.ts +219 -0
  310. package/src/plugins/defaults/memory/__tests__/memory-retrospective-sweep.test.ts +31 -0
  311. package/src/plugins/defaults/memory/__tests__/memory-retrospective-trigger-check.test.ts +63 -0
  312. package/src/plugins/defaults/memory/__tests__/shutdown-hook.test.ts +4 -0
  313. package/src/plugins/defaults/memory/graph/capability-seed.ts +4 -6
  314. package/src/plugins/defaults/memory/hooks/init.ts +10 -0
  315. package/src/plugins/defaults/memory/hooks/message-deleted.ts +21 -0
  316. package/src/plugins/defaults/memory/hooks/shutdown.ts +2 -0
  317. package/src/plugins/defaults/memory/jobs-worker.ts +13 -0
  318. package/src/plugins/defaults/memory/memory-retrospective-accounting.ts +34 -60
  319. package/src/plugins/defaults/memory/memory-retrospective-cursor-backfill.ts +126 -0
  320. package/src/plugins/defaults/memory/memory-retrospective-cursor-preserve.ts +79 -0
  321. package/src/plugins/defaults/memory/memory-retrospective-cursor.ts +28 -0
  322. package/src/plugins/defaults/memory/memory-retrospective-enqueue.ts +3 -5
  323. package/src/plugins/defaults/memory/memory-retrospective-job.ts +12 -3
  324. package/src/plugins/defaults/memory/memory-retrospective-state.ts +312 -71
  325. package/src/plugins/defaults/memory/memory-retrospective-sweep.ts +2 -1
  326. package/src/plugins/defaults/memory/memory-retrospective-trigger-check.ts +5 -3
  327. package/src/plugins/defaults/memory/skill-md-mtime-poll.ts +9 -0
  328. package/src/plugins/defaults/memory/startup.ts +6 -1
  329. package/src/plugins/defaults/memory/substrate/__tests__/skill-content.test.ts +7 -9
  330. package/src/plugins/defaults/memory/substrate/skill-content.ts +2 -2
  331. package/src/plugins/defaults/memory/v3/__tests__/pool-select.test.ts +89 -0
  332. package/src/plugins/defaults/memory/worker.ts +6 -0
  333. package/src/plugins/mcp-servers.ts +15 -75
  334. package/src/providers/__tests__/connection-model-compat.test.ts +3 -3
  335. package/src/providers/gemini/client.ts +9 -23
  336. package/src/providers/gemini-thought-signature.test.ts +63 -0
  337. package/src/providers/gemini-thought-signature.ts +44 -0
  338. package/src/providers/inference/auth.ts +2 -3
  339. package/src/providers/inference/connection-availability.ts +27 -8
  340. package/src/providers/inference/resolve-auth.ts +22 -4
  341. package/src/providers/inference/service-account-token.ts +248 -0
  342. package/src/providers/model-catalog.ts +34 -0
  343. package/src/providers/model-intents.ts +10 -5
  344. package/src/providers/openai/__tests__/chat-completions-provider-reasoning.test.ts +146 -18
  345. package/src/providers/openai/__tests__/chat-completions-provider-thought-signature.test.ts +613 -0
  346. package/src/providers/openai/__tests__/google-thought-signature.test.ts +235 -0
  347. package/src/providers/openai/__tests__/tool-choice-mapping.test.ts +83 -1
  348. package/src/providers/openai/chat-completions-provider.ts +192 -78
  349. package/src/providers/openai/codex-models.ts +0 -4
  350. package/src/providers/openai/google-thought-signature.ts +320 -0
  351. package/src/runtime/AGENTS.md +2 -0
  352. package/src/runtime/__tests__/channel-send.test.ts +443 -0
  353. package/src/runtime/__tests__/desktop-stream-upgrade.test.ts +89 -0
  354. package/src/runtime/__tests__/live-voice-upgrade.test.ts +58 -0
  355. package/src/runtime/__tests__/runtime-ws-test-utils.ts +72 -0
  356. package/src/runtime/__tests__/watch-stream-upgrade.test.ts +59 -0
  357. package/src/runtime/auth/same-actor.ts +38 -3
  358. package/src/runtime/channel-send.ts +316 -0
  359. package/src/runtime/http-server.ts +160 -151
  360. package/src/runtime/routes/__tests__/acp-routes.test.ts +159 -4
  361. package/src/runtime/routes/__tests__/apps-refresh-route.test.ts +205 -0
  362. package/src/runtime/routes/__tests__/channel-send-routes.test.ts +127 -0
  363. package/src/runtime/routes/__tests__/conversation-query-routes.test.ts +108 -1
  364. package/src/runtime/routes/__tests__/default-provider-routes.test.ts +2 -2
  365. package/src/runtime/routes/__tests__/dictation-cleanup-guard.test.ts +107 -0
  366. package/src/runtime/routes/__tests__/mcp-add-default-risk.test.ts +16 -12
  367. package/src/runtime/routes/acp-routes.test.ts +15 -0
  368. package/src/runtime/routes/acp-routes.ts +72 -9
  369. package/src/runtime/routes/app-management-routes.ts +73 -0
  370. package/src/runtime/routes/app-routes.ts +1 -1
  371. package/src/runtime/routes/channel-send-routes.ts +85 -0
  372. package/src/runtime/routes/conversation-list-routes.ts +14 -3
  373. package/src/runtime/routes/conversation-query-routes.ts +40 -0
  374. package/src/runtime/routes/credential-routes.ts +19 -10
  375. package/src/runtime/routes/desktop-setup-routes.test.ts +74 -0
  376. package/src/runtime/routes/desktop-setup-routes.ts +35 -0
  377. package/src/runtime/routes/diagnostics-routes.ts +55 -3
  378. package/src/runtime/routes/index.ts +4 -2
  379. package/src/runtime/routes/log-export-routes.ts +2 -0
  380. package/src/runtime/routes/mcp-auth-routes.ts +39 -47
  381. package/src/runtime/routes/migration-routes.ts +6 -20
  382. package/src/runtime/routes/platform-routes.ts +18 -15
  383. package/src/runtime/services/__tests__/conversation-serializer.test.ts +28 -0
  384. package/src/runtime/services/conversation-serializer.ts +16 -3
  385. package/src/runtime/sync/resource-sync-events.ts +2 -1
  386. package/src/schedule/worker.ts +1 -1
  387. package/src/security/__tests__/ces-http-record-backend.test.ts +137 -0
  388. package/src/security/ces-http-record-backend.ts +120 -0
  389. package/src/security/ces-rpc-record-backend.ts +7 -0
  390. package/src/skills/__tests__/workspace-skill-md-signature.test.ts +60 -0
  391. package/src/skills/workspace-skill-md-signature.ts +50 -0
  392. package/src/subagent/consult-context.ts +12 -25
  393. package/src/tools/acp/list-agents.test.ts +3 -1
  394. package/src/tools/acp/spawn.test.ts +146 -11
  395. package/src/tools/acp/spawn.ts +21 -3
  396. package/src/tools/acp/status.test.ts +94 -0
  397. package/src/tools/acp/status.ts +40 -3
  398. package/src/tools/app-control/skill-proxy-bridge.ts +2 -1
  399. package/src/tools/capability-offer.test.ts +22 -2
  400. package/src/tools/capability-offer.ts +16 -1
  401. package/src/tools/computer-use/definitions.ts +4 -2
  402. package/src/tools/computer-use/skill-proxy-bridge.ts +2 -1
  403. package/src/tools/credentials/metadata-store.ts +100 -0
  404. package/src/tools/host-filesystem/edit.test.ts +2 -1
  405. package/src/tools/host-filesystem/edit.ts +2 -2
  406. package/src/tools/host-filesystem/read.test.ts +2 -1
  407. package/src/tools/host-filesystem/read.ts +2 -2
  408. package/src/tools/host-filesystem/transfer.test.ts +2 -1
  409. package/src/tools/host-filesystem/transfer.ts +2 -2
  410. package/src/tools/host-filesystem/write.test.ts +2 -1
  411. package/src/tools/host-filesystem/write.ts +2 -2
  412. package/src/tools/host-terminal/host-shell.test.ts +16 -0
  413. package/src/tools/host-terminal/host-shell.ts +4 -20
  414. package/src/tools/policy-context.ts +6 -7
  415. package/src/tools/subagent/spawn.ts +5 -8
  416. package/src/tools/terminal/__tests__/safe-env.test.ts +6 -6
  417. package/src/tools/terminal/__tests__/sanitized-bash.test.ts +57 -0
  418. package/src/tools/terminal/safe-env.ts +23 -3
  419. package/src/tools/terminal/sanitized-bash.ts +105 -0
  420. package/src/tools/watch/watch-retro-report.ts +0 -8
  421. package/src/util/__tests__/language-subtag.test.ts +23 -1
  422. package/src/util/ca-bundle.ts +13 -0
  423. package/src/util/language-subtag.ts +16 -0
  424. package/src/util/platform.ts +8 -0
  425. package/src/workspace/git-porcelain.ts +66 -0
  426. package/src/workspace/git-service.ts +5 -54
  427. package/src/workspace/migrations/154-repair-retired-codex-gpt-5-4-model-ids.ts +258 -0
  428. package/src/workspace/migrations/155-move-front-model-config-to-voice.ts +78 -0
  429. package/src/workspace/migrations/156-extract-workspace-mcp-json.ts +214 -0
  430. package/src/workspace/migrations/__tests__/155-move-front-model-config-to-voice.test.ts +102 -0
  431. package/src/workspace/migrations/__tests__/156-extract-workspace-mcp-json.test.ts +199 -0
  432. package/src/workspace/migrations/registry.ts +6 -0
  433. package/src/__tests__/app-source-watcher.test.ts +0 -218
  434. package/src/__tests__/config-watcher-skill-reseed.test.ts +0 -359
  435. package/src/__tests__/speaker-identification.test.ts +0 -56
  436. package/src/calls/speaker-identification.ts +0 -233
  437. package/src/daemon/app-source-watcher.ts +0 -218
  438. package/src/messaging/providers/whatsapp/client.ts +0 -29
  439. package/src/runtime/routes/debug-bash-routes.ts +0 -173
  440. package/src/util/fs-watcher-error.ts +0 -36
  441. /package/src/{live-voice → calls}/progress-phrases.ts +0 -0
@@ -4,6 +4,7 @@ import {
4
4
  existsSync,
5
5
  mkdirSync,
6
6
  readFileSync,
7
+ renameSync,
7
8
  rmSync,
8
9
  statSync,
9
10
  symlinkSync,
@@ -523,6 +524,31 @@ describe("WorkspaceGitService", () => {
523
524
  expect(trackedFiles()).not.toContain("gone-b.txt");
524
525
  expect(trackedFiles()).not.toContain("gone-c.txt");
525
526
  });
527
+
528
+ test("batched rename stages origin and destination even when they split", async () => {
529
+ const service = new WorkspaceGitService(testDir);
530
+ await service.ensureInitialized();
531
+
532
+ writeFileSync(join(testDir, "old-name.txt"), "moved");
533
+ await service.commitChanges("Seed rename source");
534
+
535
+ renameSync(join(testDir, "old-name.txt"), join(testDir, "new-name.txt"));
536
+ for (const name of ["x0.txt", "x1.txt", "x2.txt", "x3.txt"]) {
537
+ writeFileSync(join(testDir, name), name);
538
+ }
539
+
540
+ await withStageBatchSize(2, async () => {
541
+ await service.commitChanges("Rename across batches");
542
+ });
543
+
544
+ expect(trackedFiles()).toContain("new-name.txt");
545
+ expect(trackedFiles()).not.toContain("old-name.txt");
546
+ const status = execFileSync("git", ["status", "--porcelain"], {
547
+ cwd: testDir,
548
+ encoding: "utf-8",
549
+ }).trim();
550
+ expect(status).toBe("");
551
+ });
526
552
  });
527
553
 
528
554
  describe("getStatus", () => {
@@ -0,0 +1,336 @@
1
+ import {
2
+ existsSync,
3
+ mkdirSync,
4
+ readFileSync,
5
+ rmSync,
6
+ writeFileSync,
7
+ } from "node:fs";
8
+ import { tmpdir } from "node:os";
9
+ import { join } from "node:path";
10
+ import { Database } from "bun:sqlite";
11
+ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
12
+
13
+ import { repairRetiredCodexGpt54ModelIdsMigration } from "../workspace/migrations/154-repair-retired-codex-gpt-5-4-model-ids.js";
14
+ import { WORKSPACE_MIGRATIONS } from "../workspace/migrations/registry.js";
15
+ import { assertNotLiveDb } from "./assert-not-live-db.js";
16
+
17
+ const STALE = "gpt-5.4";
18
+ const STALE_MINI = "gpt-5.4-mini";
19
+ const REPLACEMENT = "gpt-5.5";
20
+ const REPLACEMENT_MINI = "gpt-5.6-luna";
21
+
22
+ const API_KEY_AUTH = '{"type":"api_key","credential":"credential/openai"}';
23
+ const SUBSCRIPTION_AUTH =
24
+ '{"type":"oauth_subscription","credential":"credential/chatgpt"}';
25
+
26
+ let workspaceDir: string;
27
+
28
+ function freshWorkspace(): void {
29
+ workspaceDir = join(
30
+ tmpdir(),
31
+ `vellum-migration-154-test-${Date.now()}-${Math.random().toString(36).slice(2)}`,
32
+ );
33
+ mkdirSync(workspaceDir, { recursive: true });
34
+ }
35
+
36
+ function writeConfig(data: Record<string, unknown>): void {
37
+ writeFileSync(
38
+ join(workspaceDir, "config.json"),
39
+ JSON.stringify(data, null, 2) + "\n",
40
+ );
41
+ }
42
+
43
+ function readConfig(): Record<string, unknown> {
44
+ return JSON.parse(readFileSync(join(workspaceDir, "config.json"), "utf-8"));
45
+ }
46
+
47
+ function readLlm(): Record<string, any> {
48
+ return readConfig().llm as Record<string, any>;
49
+ }
50
+
51
+ function seedRows(
52
+ rows: Array<{ name: string; provider: string; auth: string }>,
53
+ ): void {
54
+ mkdirSync(join(workspaceDir, "data", "db"), { recursive: true });
55
+ const db = new Database(join(workspaceDir, "data", "db", "assistant.db"));
56
+ db.run(`CREATE TABLE IF NOT EXISTS provider_connections (
57
+ name TEXT PRIMARY KEY,
58
+ provider TEXT NOT NULL,
59
+ auth TEXT NOT NULL,
60
+ created_at INTEGER NOT NULL,
61
+ updated_at INTEGER NOT NULL
62
+ )`);
63
+ for (const row of rows) {
64
+ db.query(
65
+ `INSERT INTO provider_connections (name, provider, auth, created_at, updated_at) VALUES (?, ?, ?, 1, 1)`,
66
+ ).run(row.name, row.provider, row.auth);
67
+ }
68
+ db.close();
69
+ }
70
+
71
+ const SUBSCRIPTION_ROW = {
72
+ name: "chatgpt-subscription",
73
+ provider: "chatgpt",
74
+ auth: SUBSCRIPTION_AUTH,
75
+ };
76
+ const API_KEY_ROW = {
77
+ name: "openai-key",
78
+ provider: "openai",
79
+ auth: API_KEY_AUTH,
80
+ };
81
+
82
+ beforeEach(() => {
83
+ freshWorkspace();
84
+ });
85
+
86
+ afterEach(() => {
87
+ if (existsSync(workspaceDir)) {
88
+ assertNotLiveDb(workspaceDir);
89
+ rmSync(workspaceDir, { recursive: true, force: true });
90
+ }
91
+ });
92
+
93
+ describe("154-repair-retired-codex-gpt-5-4-model-ids migration", () => {
94
+ test("has correct migration id and is registered", () => {
95
+ expect(repairRetiredCodexGpt54ModelIdsMigration.id).toBe(
96
+ "154-repair-retired-codex-gpt-5-4-model-ids",
97
+ );
98
+ expect(WORKSPACE_MIGRATIONS.map((m) => m.id)).toContain(
99
+ "154-repair-retired-codex-gpt-5-4-model-ids",
100
+ );
101
+ });
102
+
103
+ test("repairs chatgpt fragments in default, call sites, and profiles", () => {
104
+ writeConfig({
105
+ llm: {
106
+ default: { provider: "chatgpt", model: STALE },
107
+ callSites: {
108
+ recall: { provider: "chatgpt", model: STALE_MINI, maxTokens: 4096 },
109
+ heartbeat: { provider: "chatgpt", model: `${STALE}-tuned` },
110
+ malformed: STALE,
111
+ },
112
+ profiles: {
113
+ codex: { provider: "chatgpt", model: STALE, source: "user" },
114
+ budget: { provider: "chatgpt", model: STALE_MINI },
115
+ current: { provider: "chatgpt", model: "gpt-5.6-terra" },
116
+ // The identity fails schema validation regardless of a stray
117
+ // binding, so it is repaired without consulting the rows.
118
+ strayBinding: {
119
+ provider: "chatgpt",
120
+ provider_connection: "openai-key",
121
+ model: STALE,
122
+ },
123
+ },
124
+ },
125
+ });
126
+
127
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
128
+
129
+ const llm = readLlm();
130
+ expect(llm.default.model).toBe(REPLACEMENT);
131
+ expect(llm.callSites.recall.model).toBe(REPLACEMENT_MINI);
132
+ expect(llm.callSites.recall.maxTokens).toBe(4096);
133
+ // Non-exact matches and malformed leaves are untouched.
134
+ expect(llm.callSites.heartbeat.model).toBe(`${STALE}-tuned`);
135
+ expect(llm.callSites.malformed).toBe(STALE);
136
+ expect(llm.profiles.codex.model).toBe(REPLACEMENT);
137
+ expect(llm.profiles.codex.source).toBe("user");
138
+ expect(llm.profiles.budget.model).toBe(REPLACEMENT_MINI);
139
+ expect(llm.profiles.current.model).toBe("gpt-5.6-terra");
140
+ expect(llm.profiles.strayBinding.model).toBe(REPLACEMENT);
141
+ });
142
+
143
+ test("repairs entry-bound fragments whose row is the subscription", () => {
144
+ seedRows([
145
+ // Post-DB-migration-366 row shape.
146
+ SUBSCRIPTION_ROW,
147
+ // Pre-366 row shape: provider still openai, auth proves the route.
148
+ { name: "legacy-sub", provider: "openai", auth: SUBSCRIPTION_AUTH },
149
+ ]);
150
+ writeConfig({
151
+ llm: {
152
+ default: {
153
+ provider: "openai",
154
+ provider_connection: "chatgpt-subscription",
155
+ model: STALE,
156
+ },
157
+ callSites: {
158
+ recall: { provider: "chatgpt-subscription", model: STALE_MINI },
159
+ },
160
+ profiles: {
161
+ bound: { provider: "chatgpt-subscription", model: STALE },
162
+ legacy: { provider: "legacy-sub", model: STALE_MINI },
163
+ // Legacy binding: dispatch honors it ahead of the declared
164
+ // provider and accepts the ChatGPT row for openai.
165
+ pinned: {
166
+ provider: "openai",
167
+ provider_connection: "chatgpt-subscription",
168
+ model: STALE,
169
+ },
170
+ },
171
+ },
172
+ });
173
+
174
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
175
+
176
+ const llm = readLlm();
177
+ expect(llm.default.model).toBe(REPLACEMENT);
178
+ expect(llm.callSites.recall.model).toBe(REPLACEMENT_MINI);
179
+ expect(llm.profiles.bound.model).toBe(REPLACEMENT);
180
+ expect(llm.profiles.legacy.model).toBe(REPLACEMENT_MINI);
181
+ expect(llm.profiles.pinned.model).toBe(REPLACEMENT);
182
+ });
183
+
184
+ test("judges a binding as a row even when named like a vendor", () => {
185
+ seedRows([
186
+ { name: "openai", provider: "openai", auth: SUBSCRIPTION_AUTH },
187
+ { name: "chatgpt", provider: "openai", auth: API_KEY_AUTH },
188
+ ]);
189
+ writeConfig({
190
+ llm: {
191
+ profiles: {
192
+ subRow: {
193
+ provider: "openai",
194
+ provider_connection: "openai",
195
+ model: STALE,
196
+ },
197
+ keyRow: {
198
+ provider: "chatgpt-subscription",
199
+ provider_connection: "chatgpt",
200
+ model: STALE_MINI,
201
+ },
202
+ },
203
+ },
204
+ });
205
+
206
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
207
+
208
+ const llm = readLlm();
209
+ expect(llm.profiles.subRow.model).toBe(REPLACEMENT);
210
+ expect(llm.profiles.keyRow.model).toBe(STALE_MINI);
211
+ });
212
+
213
+ test("leaves API-key, other-vendor, providerless, and dangling fragments untouched", () => {
214
+ seedRows([API_KEY_ROW, SUBSCRIPTION_ROW]);
215
+ const config = {
216
+ llm: {
217
+ // Explicit vendors keep the model: API-key OpenAI still serves it
218
+ // and an openai-compatible endpoint may too.
219
+ default: { provider: "openai", model: STALE },
220
+ defaultProvider: { provider: "chatgpt" },
221
+ callSites: {
222
+ vision: { provider: "openai-compatible", model: STALE_MINI },
223
+ recall: { provider: "openai", model: STALE },
224
+ // A providerless pin is out of scope: it serves the model on an
225
+ // API-key or managed winner, and on a subscription winner the
226
+ // request already fails upstream with no config loss.
227
+ heartbeatAgent: { model: STALE },
228
+ // A raw call-site binding is stripped by the schema.
229
+ filingAgent: {
230
+ provider: "openai-key",
231
+ provider_connection: "chatgpt-subscription",
232
+ model: STALE,
233
+ },
234
+ },
235
+ profiles: {
236
+ byok: { provider: "openai", model: STALE_MINI },
237
+ keyBound: { provider: "openai-key", model: STALE },
238
+ // Entry name with no row: nothing proves it is the subscription.
239
+ dangling: { provider: "ghost", model: STALE },
240
+ // Dispatch honors the explicit binding ahead of the provider.
241
+ keyOverride: {
242
+ provider: "chatgpt-subscription",
243
+ provider_connection: "openai-key",
244
+ model: STALE,
245
+ },
246
+ },
247
+ },
248
+ };
249
+ writeConfig(config);
250
+ const before = readFileSync(join(workspaceDir, "config.json"), "utf-8");
251
+
252
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
253
+
254
+ expect(readFileSync(join(workspaceDir, "config.json"), "utf-8")).toBe(
255
+ before,
256
+ );
257
+ });
258
+
259
+ test("needs no DB for identity or vendor fragments", () => {
260
+ writeConfig({
261
+ llm: {
262
+ default: { provider: "chatgpt", model: STALE },
263
+ profiles: {
264
+ byok: { provider: "openai", model: STALE },
265
+ bound: { provider: "chatgpt-subscription", model: STALE },
266
+ },
267
+ },
268
+ });
269
+
270
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
271
+
272
+ const llm = readLlm();
273
+ expect(llm.default.model).toBe(REPLACEMENT);
274
+ expect(llm.profiles.byok.model).toBe(STALE);
275
+ // An entry name with no DB file is dangling.
276
+ expect(llm.profiles.bound.model).toBe(STALE);
277
+ });
278
+
279
+ test("throws when an entry name needs rows and the DB is unreadable", () => {
280
+ // A DB file without the provider_connections table is unqueryable, so
281
+ // the run must fail (and retry later) instead of skipping the profile.
282
+ mkdirSync(join(workspaceDir, "data", "db"), { recursive: true });
283
+ writeFileSync(join(workspaceDir, "data", "db", "assistant.db"), "");
284
+ writeConfig({
285
+ llm: {
286
+ profiles: { bound: { provider: "chatgpt-subscription", model: STALE } },
287
+ },
288
+ });
289
+
290
+ expect(() =>
291
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir),
292
+ ).toThrow();
293
+ expect(readLlm().profiles.bound.model).toBe(STALE);
294
+
295
+ // The identity form never needs the rows, so the same broken DB does
296
+ // not block its repair.
297
+ writeConfig({
298
+ llm: { default: { provider: "chatgpt", model: STALE } },
299
+ });
300
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
301
+ expect(readLlm().default.model).toBe(REPLACEMENT);
302
+ });
303
+
304
+ test("is idempotent and a no-op without the stale IDs", () => {
305
+ writeConfig({
306
+ llm: {
307
+ default: { provider: "chatgpt", model: STALE },
308
+ profiles: { fine: { provider: "chatgpt", model: REPLACEMENT } },
309
+ },
310
+ });
311
+
312
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
313
+ const first = readConfig();
314
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
315
+ expect(readConfig()).toEqual(first);
316
+
317
+ const llm = first.llm as Record<string, any>;
318
+ expect(llm.default.model).toBe(REPLACEMENT);
319
+ expect(llm.profiles.fine.model).toBe(REPLACEMENT);
320
+ });
321
+
322
+ test("handles missing config, missing llm block, and invalid JSON", () => {
323
+ expect(() =>
324
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir),
325
+ ).not.toThrow();
326
+
327
+ writeConfig({ theme: "dark" });
328
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir);
329
+ expect(readConfig()).toEqual({ theme: "dark" });
330
+
331
+ writeFileSync(join(workspaceDir, "config.json"), "{not json");
332
+ expect(() =>
333
+ repairRetiredCodexGpt54ModelIdsMigration.run(workspaceDir),
334
+ ).not.toThrow();
335
+ });
336
+ });