@vellumai/assistant 0.12.1-dev.202609141913.5e16607 → 0.12.1-staging.2

package/src/tools/capability-offer.ts

@@ -7,22 +7,7 @@ export const DESKTOP_APP_DOWNLOAD_URL = "https://www.vellum.ai/downloads";
 export const CHROME_WEB_STORE_INSTALL_URL =
   "https://chromewebstore.google.com/detail/vellum-assistant-browser/hphbdmpffeigpcdjkckleobjmhhokpne";
 
-export const DESKTOP_APP_INSTALL_HINT = `Download the Vellum desktop app: ${DESKTOP_APP_DOWNLOAD_URL}. Open it, then retry.`;
-
-export type DesktopAppCapability = "files" | "screen" | "shell" | "apps";
-
-const DESKTOP_APP_CAPABILITY_ACTION: Record<DesktopAppCapability, string> = {
-  files: "access files on your computer",
-  screen: "view or control your screen",
-  shell: "run commands on your computer",
-  apps: "control apps on your computer",
-};
-
-export function formatDesktopAppRequired(
-  capability: DesktopAppCapability,
-): string {
-  return `Error: The Vellum desktop app is needed to ${DESKTOP_APP_CAPABILITY_ACTION[capability]}. ${DESKTOP_APP_INSTALL_HINT}`;
-}
+export const DESKTOP_APP_INSTALL_HINT = `Install the Vellum desktop app: ${DESKTOP_APP_DOWNLOAD_URL}`;
 
 /** User-facing install step for status userActions and command-failure hints. */
 export const CHROME_EXTENSION_INSTALL_HINT = `Install the Vellum Assistant Chrome extension from the Chrome Web Store: ${CHROME_WEB_STORE_INSTALL_URL}`;

package/src/tools/computer-use/definitions.ts

@@ -8,7 +8,6 @@
  */
 
 import { RiskLevel } from "../../permissions/types.js";
-import { formatDesktopAppRequired } from "../capability-offer.js";
 import type {
   ToolContext,
   ToolDefinition,
@@ -32,7 +31,7 @@ function proxyExecute(toolName: string) {
   ): Promise<ToolExecutionResult> => {
     if (!context.proxyToolResolver) {
       return {
-        content: formatDesktopAppRequired("screen"),
+        content: `No proxy resolver configured for proxy tool "${toolName}". This tool requires a connected desktop client.`,
         isError: true,
       };
     }
@@ -457,8 +456,7 @@ export const computerUseObserveTool = {
         type: "integer",
         minimum: 1,
         maximum: 4294967295,
-        description:
-          "macOS only: capture this native CGWindowID instead of the desktop, including only its accessibility tree. Obtain a current native window ID first; do not guess or use a browser tab ID. Applies to this observation only, not subsequent actions. Requires a desktop helper with window-capture support. Screenshot coordinates are window-relative; use accessibility element IDs for later actions, not desktop scaling.",
+        description: "macOS only: capture this native CGWindowID instead of the desktop, including only its accessibility tree. Obtain a current native window ID first; do not guess or use a browser tab ID. Applies to this observation only, not subsequent actions. Requires a desktop helper with window-capture support. Screenshot coordinates are window-relative; use accessibility element IDs for later actions, not desktop scaling.",
       },
       target_client_id: {
         type: "string",

package/src/tools/computer-use/skill-proxy-bridge.ts

@@ -5,7 +5,6 @@
  * the proxy resolver, which forwards the call to the connected desktop client.
  */
 
-import { formatDesktopAppRequired } from "../capability-offer.js";
 import { throwIfCancelled } from "../shared/abort.js";
 import type { ToolContext, ToolExecutionResult } from "../types.js";
 
@@ -46,7 +45,7 @@ export function forwardComputerUseProxyTool(
   }
   if (!context.proxyToolResolver) {
     return Promise.resolve({
-      content: formatDesktopAppRequired("screen"),
+      content: `Cannot execute ${toolName}: no proxy resolver available. This tool requires a connected desktop client.`,
       isError: true,
     });
   }

package/src/tools/credentials/metadata-store.ts

@@ -20,7 +20,6 @@ import {
 } from "@vellumai/credential-storage";
 import type { CredentialRecord } from "@vellumai/service-contracts/credential-rpc";
 
-import { createCesHttpRecordBackendIfConfigured } from "../../security/ces-http-record-backend.js";
 import type { CredentialRecordBackend } from "../../security/ces-rpc-record-backend.js";
 import { getLogger } from "../../util/logger.js";
 import type { CredentialInjectionTemplate } from "./policy-types.js";
@@ -56,11 +55,6 @@ const CES_MEMORY_PATH = "ces-in-memory-credential-metadata";
 let _store: StaticCredentialMetadataStore | undefined;
 let _overridePath: string | null = null;
 let _recordBackend: CredentialRecordBackend | undefined;
-/**
- * Test override for the CES HTTP listing fallback. `undefined` uses the
- * production factory. `null` disables HTTP fallback.
- */
-let _httpRecordBackendOverride: CredentialRecordBackend | null | undefined;
 let _cesRecordsLoaded = false;
 let _cesLoad: Promise<void> | undefined;
 let _cesLoadGeneration = 0;
@@ -261,93 +255,6 @@ export function listCredentialMetadata(): CredentialMetadata[] {
   return getStore().list() as CredentialMetadata[];
 }
 
-export type CredentialRecordListResult = {
-  records: CredentialMetadata[];
-  unreachable: boolean;
-};
-
-type ListedCredentialRecords = Array<{
-  account: string;
-  record: CredentialRecord;
-}>;
-
-function backendIsAvailable(backend: CredentialRecordBackend): boolean {
-  try {
-    return backend.isAvailable();
-  } catch {
-    return false;
-  }
-}
-
-async function listFromRecordBackend(
-  backend: CredentialRecordBackend,
-): Promise<ListedCredentialRecords | null> {
-  if (!backendIsAvailable(backend)) {
-    return null;
-  }
-  return backend.list();
-}
-
-function resolveHttpRecordBackend(): CredentialRecordBackend | null {
-  if (_httpRecordBackendOverride !== undefined) {
-    return _httpRecordBackendOverride;
-  }
-  return createCesHttpRecordBackendIfConfigured();
-}
-
-async function listFromHttpFallback(): Promise<ListedCredentialRecords | null> {
-  const httpBackend = resolveHttpRecordBackend();
-  if (!httpBackend) {
-    return null;
-  }
-  return listFromRecordBackend(httpBackend);
-}
-
-/**
- * Live catalog from the credential record backend. Does not read the
- * daemon in-process cache, so an outage cannot be mistaken for an empty
- * vault. `unreachable` is true when the backend is missing, down, or
- * the list RPC fails, and CES HTTP failover is also unavailable.
- *
- * When the attached backend is CES RPC (or none is attached), listing
- * fails over to CES HTTP in containerized deployments so a down RPC
- * socket does not hide a healthy vault sidecar. A successful empty
- * catalog (`[]`) does not fall through to HTTP.
- *
- * The file-backed test store is the catalog when a test override path is set.
- */
-export async function listCredentialRecordsLive(): Promise<CredentialRecordListResult> {
-  if (_overridePath) {
-    return {
-      records: getStore().list() as CredentialMetadata[],
-      unreachable: false,
-    };
-  }
-  if (_recordBackend) {
-    const remote = await listFromRecordBackend(_recordBackend);
-    if (remote !== null) {
-      return {
-        records: remote.map((entry) => entry.record as CredentialMetadata),
-        unreachable: false,
-      };
-    }
-    if (_recordBackend.name !== "ces-rpc") {
-      return { records: [], unreachable: true };
-    }
-  }
-  const httpRemote = await listFromHttpFallback();
-  if (httpRemote !== null) {
-    log.warn(
-      "CES RPC credential record list unavailable. Failing over to CES HTTP.",
-    );
-    return {
-      records: httpRemote.map((entry) => entry.record as CredentialMetadata),
-      unreachable: false,
-    };
-  }
-  return { records: [], unreachable: true };
-}
-
 /**
  * Delete metadata for a credential.
  */
@@ -380,10 +287,3 @@ export function _setMetadataPath(path: string | null): void {
     }
   }
 }
-
-/** @internal Test-only: override the CES HTTP listing fallback. */
-export function _setHttpRecordBackendForTests(
-  backend: CredentialRecordBackend | null | undefined,
-): void {
-  _httpRecordBackendOverride = backend;
-}

package/src/tools/host-filesystem/edit.test.ts

@@ -71,9 +71,8 @@ describe("host_file_edit cross-client guards", () => {
     );
     expect(result.isError).toBe(true);
     expect(result.content).toContain(
-      "The Vellum desktop app is needed to access files on your computer",
+      "no client with host_file capability is connected",
     );
-    expect(result.content).toContain("https://www.vellum.ai/downloads");
   });
 
   test("returns 'specified client disconnected' error when targetClientId set but proxy unavailable on web", async () => {

package/src/tools/host-filesystem/edit.ts

@@ -4,7 +4,7 @@ import { supportsHostProxy } from "../../channels/types.js";
 import { HostFileProxy } from "../../daemon/host-file-proxy.js";
 import { RiskLevel } from "../../permissions/types.js";
 import { assistantEventHub } from "../../runtime/assistant-event-hub.js";
-import { formatDesktopAppRequired } from "../capability-offer.js";
+import { desktopClientName } from "../client-os.js";
 import { FileSystemOps } from "../shared/filesystem/file-ops-service.js";
 import { formatEditDiff } from "../shared/filesystem/format-diff.js";
 import { hostPolicy } from "../shared/filesystem/path-policy.js";
@@ -115,7 +115,7 @@ export const hostFileEditTool = {
       !HostFileProxy.instance.isAvailable()
     ) {
       return {
-        content: formatDesktopAppRequired("files"),
+        content: `Error: no client with host_file capability is connected. Connect a ${desktopClientName(context)} client to use host_file from a non-desktop interface.`,
         isError: true,
       };
     }

package/src/tools/host-filesystem/read.test.ts

@@ -67,9 +67,8 @@ describe("host_file_read cross-client guards", () => {
     );
     expect(result.isError).toBe(true);
     expect(result.content).toContain(
-      "The Vellum desktop app is needed to access files on your computer",
+      "no client with host_file capability is connected",
     );
-    expect(result.content).toContain("https://www.vellum.ai/downloads");
   });
 
   test("returns 'specified client disconnected' error when targetClientId set but proxy unavailable on web", async () => {

package/src/tools/host-filesystem/read.ts

@@ -6,7 +6,7 @@ import { supportsHostProxy } from "../../channels/types.js";
 import { HostFileProxy } from "../../daemon/host-file-proxy.js";
 import { RiskLevel } from "../../permissions/types.js";
 import { assistantEventHub } from "../../runtime/assistant-event-hub.js";
-import { formatDesktopAppRequired } from "../capability-offer.js";
+import { desktopClientName } from "../client-os.js";
 import {
   AUDIO_EXTENSIONS,
   readAudioFile,
@@ -121,7 +121,7 @@ export const hostFileReadTool = {
       !HostFileProxy.instance.isAvailable()
     ) {
       return {
-        content: formatDesktopAppRequired("files"),
+        content: `Error: no client with host_file capability is connected. Connect a ${desktopClientName(context)} client to use host_file from a non-desktop interface.`,
         isError: true,
       };
     }

package/src/tools/host-filesystem/transfer.test.ts

@@ -335,9 +335,8 @@ describe("host_file_transfer cross-client guards", () => {
 
     expect(result.isError).toBe(true);
     expect(result.content).toContain(
-      "The Vellum desktop app is needed to access files on your computer",
+      "no client with host_file capability is connected",
     );
-    expect(result.content).toContain("https://www.vellum.ai/downloads");
     expect(toSandboxCalls.length).toBe(0);
   });
 

package/src/tools/host-filesystem/transfer.ts

@@ -6,7 +6,7 @@ import { supportsHostProxy } from "../../channels/types.js";
 import { HostTransferProxy } from "../../daemon/host-transfer-proxy.js";
 import { RiskLevel } from "../../permissions/types.js";
 import { assistantEventHub } from "../../runtime/assistant-event-hub.js";
-import { formatDesktopAppRequired } from "../capability-offer.js";
+import { desktopClientName } from "../client-os.js";
 import { declareDaemonActivityField } from "../schema-transforms.js";
 import { sandboxPolicy } from "../shared/filesystem/path-policy.js";
 import type {
@@ -126,7 +126,7 @@ export const hostFileTransferTool = {
       !HostTransferProxy.instance.isAvailable()
     ) {
       return {
-        content: formatDesktopAppRequired("files"),
+        content: `Error: no client with host_file capability is connected. Connect a ${desktopClientName(context)} client to use host_file from a non-desktop interface.`,
         isError: true,
       };
     }

package/src/tools/host-filesystem/write.test.ts

@@ -67,9 +67,8 @@ describe("host_file_write cross-client guards", () => {
     );
     expect(result.isError).toBe(true);
     expect(result.content).toContain(
-      "The Vellum desktop app is needed to access files on your computer",
+      "no client with host_file capability is connected",
     );
-    expect(result.content).toContain("https://www.vellum.ai/downloads");
   });
 
   test("returns 'specified client disconnected' error when targetClientId set but proxy unavailable on web", async () => {

package/src/tools/host-filesystem/write.ts

@@ -4,7 +4,7 @@ import { supportsHostProxy } from "../../channels/types.js";
 import { HostFileProxy } from "../../daemon/host-file-proxy.js";
 import { RiskLevel } from "../../permissions/types.js";
 import { assistantEventHub } from "../../runtime/assistant-event-hub.js";
-import { formatDesktopAppRequired } from "../capability-offer.js";
+import { desktopClientName } from "../client-os.js";
 import { FileSystemOps } from "../shared/filesystem/file-ops-service.js";
 import { formatWriteSummary } from "../shared/filesystem/format-diff.js";
 import { hostPolicy } from "../shared/filesystem/path-policy.js";
@@ -90,7 +90,7 @@ export const hostFileWriteTool = {
       !HostFileProxy.instance.isAvailable()
     ) {
       return {
-        content: formatDesktopAppRequired("files"),
+        content: `Error: no client with host_file capability is connected. Connect a ${desktopClientName(context)} client to use host_file from a non-desktop interface.`,
         isError: true,
       };
     }

package/src/tools/host-terminal/host-shell.test.ts

@@ -170,22 +170,6 @@ afterEach(() => {
   mockProxyAvailable = false;
 });
 
-describe("host_bash unavailable desktop-app recovery", () => {
-  test("offers the desktop app download when a web turn has no host connection", async () => {
-    const result = await hostShellTool.execute(
-      { command: "pwd" },
-      makeContext({ transportInterface: "web" }),
-    );
-
-    expect(result.isError).toBe(true);
-    expect(result.content).toContain(
-      "The Vellum desktop app is needed to run commands on your computer",
-    );
-    expect(result.content).toContain("https://www.vellum.ai/downloads");
-    expect(result.content).toContain("Open it, then retry.");
-  });
-});
-
 // ---------------------------------------------------------------------------
 // Proxy path — background: true
 // ---------------------------------------------------------------------------

package/src/tools/host-terminal/host-shell.ts

@@ -18,7 +18,10 @@ import { getConfig } from "../../config/loader.js";
 import { HostBashProxy } from "../../daemon/host-bash-proxy.js";
 import { RiskLevel } from "../../permissions/types.js";
 import { wakeAgentForOpportunity } from "../../runtime/agent-wake.js";
-import { broadcastMessage } from "../../runtime/assistant-event-hub.js";
+import {
+  assistantEventHub,
+  broadcastMessage,
+} from "../../runtime/assistant-event-hub.js";
 import { conversationRevealNonce } from "../../runtime/reveal-nonce.js";
 import { redactSecrets } from "../../security/secret-scanner.js";
 import {
@@ -36,7 +39,7 @@ import {
   registerBackgroundTool,
   removeBackgroundTool,
 } from "../background-tool-registry.js";
-import { formatDesktopAppRequired } from "../capability-offer.js";
+import { desktopClientName } from "../client-os.js";
 import {
   attachBoundedStdio,
   MAX_OUTPUT_LENGTH,
@@ -139,7 +142,7 @@ export const hostShellInputSchema = z.looseObject({
   target_client_id: z
     .string()
     .describe(
-      "Optional ID of the specific client to execute this command on. Without it, the most recently active eligible client is used. Obtain IDs from `assistant clients list --capability host_bash`.",
+      "ID of the specific client to execute this command on. Required when multiple clients support host_bash; omit when only one client is connected. Obtain IDs from `assistant clients list --capability host_bash`.",
     )
     .optional()
     .catch(undefined),
@@ -200,7 +203,20 @@ export const hostShellTool = {
     const config = getConfig();
     const { shellDefaultTimeoutSec, shellMaxTimeoutSec } = config.timeouts;
 
+    // Guard: non-host-proxy interfaces need an explicit target when multiple
+    // capable clients are connected to avoid ambiguous untargeted broadcasts.
     const transportInterface = context.transportInterface;
+    if (
+      targetClientId == null &&
+      transportInterface != null &&
+      !supportsHostProxy(transportInterface) &&
+      assistantEventHub.listClientsByCapability("host_bash").length > 1
+    ) {
+      return {
+        content: `Error: multiple clients support host_bash. Specify which client to use with \`target_client_id\`. Run \`assistant clients list --capability host_bash\` to see client IDs and labels.`,
+        isError: true,
+      };
+    }
 
     // Guard: non-host-proxy interfaces with no capable clients connected.
     if (
@@ -210,7 +226,7 @@ export const hostShellTool = {
       !HostBashProxy.instance.isAvailable()
     ) {
       return {
-        content: formatDesktopAppRequired("shell"),
+        content: `Error: no client with host_bash capability is connected. Connect a ${desktopClientName(context)} client to use host_bash from a non-desktop interface.`,
         isError: true,
       };
     }

package/src/tools/policy-context.ts

@@ -1,5 +1,5 @@
 import { getConfig } from "../config/loader.js";
-import { isSkillImprovementActive } from "../config/memory-v3-gate.js";
+import { isV3TierActive } from "../config/memory-v3-gate.js";
 import type { ExecutionContext } from "../permissions/approval-policy.js";
 import type { ChannelPermissionCoordinates } from "../permissions/channel-permission-query.js";
 import type { PolicyContext } from "../permissions/types.js";
@@ -63,11 +63,12 @@ export function buildPolicyContext(
     requestOrigin: context?.requestOrigin,
     ...channelCoordinatesFromToolContext(context),
     requesterContactId: context?.requesterContactId,
-    // Precompute the retrospective skill-improvement gate here so the
-    // permission checker, a leaf module that must not read config, can deny
-    // the memory-retrospective skill-authoring grant whenever the feature is
-    // inactive just by reading this boolean.
-    procToSkillsActive: isSkillImprovementActive(getConfig()),
+    // Precompute the proc-to-skills gate — the v3 tier being active, i.e.
+    // memory on AND v3 live — here so the permission checker, a leaf module
+    // that must not read config, can deny the memory-retrospective
+    // skill-authoring grant whenever the feature is inactive just by reading
+    // this boolean.
+    procToSkillsActive: isV3TierActive(getConfig()),
   };
 
   const ownerKind = getToolOwner(tool.name)?.kind;

package/src/tools/subagent/spawn.ts

@@ -484,9 +484,9 @@ function spawnCancelledResult(label: string): ToolExecutionResult {
  * repeat-spawn guard folds, so a consult has to record it the same way every
  * other spawn does or the guard could never match one consult against another.
  *
- * The context pack is best effort: each section independently falls back to
- * null on failure, so a missing workspace or empty catalog costs only that
- * section, never the consult.
+ * The context pack is best effort: the parent conversation is looked up only
+ * for its warm skill catalog, so an unresolvable one (e.g. evicted) costs the
+ * skills section of the pack and nothing else.
  *
  * The budget is the advisor's alone. It is the only spawn the agent may issue
  * unprompted and the only one that runs on the premium profile, so it is the
@@ -502,18 +502,21 @@ async function buildAdvisorFields(
   maxRuntimeMs: number;
   maxToolCalls: number;
 }> {
+  const parentConversation = findConversation(context.conversationId);
   // Situational awareness for the advisor: the parent's live tool set, the
   // full skill catalog, and its workspace. Assembled off the per-turn
   // ToolContext snapshot (trust, channel) so the personal-memory sections are
   // gated exactly like the runtime injectors. A null pack just means the
-  // consult runs on the brief alone. Skills come from a fresh
-  // `loadSkillCatalog()` inside the context pack, not a conversation snapshot.
+  // consult runs on the brief alone.
   const situationalContext = await buildAdvisorContext({
     conversationId: context.conversationId,
     workingDir: context.workingDir,
     allowedToolNames: context.allowedToolNames,
     trustClass: context.trustClass,
     enabledPluginSet: context.enabledPluginSet,
+    // The parent's warm per-turn catalog keeps the synchronous on-disk catalog
+    // scan out of the spawn path.
+    skillCatalog: parentConversation?.skillProjectionCache?.catalog,
   });
   return {
     requestText: advisorRequestText(objective, situationalContext),

package/src/tools/watch/watch-retro-report.ts

@@ -14,6 +14,14 @@ import type {
 /**
  * How a watch retrospective hands its report to the daemon.
  *
+ * **The card cannot come from `ui_show`.** A retrospective runs as a
+ * `clientless` wake, which pins the turn non-interactive, and
+ * `conversation-tool-setup` gates the whole `ui_surface` tool family on a
+ * client being present (`return channelCapabilities?.supportsDynamicUi ??
+ * !hasNoClient`). So `ui_show` is not merely denied in this turn, it is absent
+ * from the tool set, and a retrospective told to call it can only report that
+ * it cannot. This tool is an ordinary one and passes that gate untouched.
+ *
  * **It records; it does not render.** The executor validates the payload and
  * returns, and nothing here writes to the conversation. What makes the card is
  * `watch-retro.ts` reading this call back out of the turn's own history once

package/src/util/__tests__/language-subtag.test.ts

@@ -1,10 +1,6 @@
 import { describe, expect, test } from "bun:test";
 
-import {
-  baseLanguageSubtag,
-  fixedPhraseLanguage,
-  localizedOrDefault,
-} from "../language-subtag.js";
+import { baseLanguageSubtag, localizedOrDefault } from "../language-subtag.js";
 
 describe("baseLanguageSubtag", () => {
   test("lowercases a bare tag", () => {
@@ -56,21 +52,3 @@ describe("localizedOrDefault", () => {
     expect(localizedOrDefault(table, "__proto__", "fallback")).toBe("fallback");
   });
 });
-
-describe("fixedPhraseLanguage", () => {
-  const table = { en: "one", es: "uno" };
-
-  test("pins English when the speaker's language has no table entry", () => {
-    expect(fixedPhraseLanguage(table, "ko")).toBe("en");
-    expect(fixedPhraseLanguage(table, "ar-EG")).toBe("en");
-  });
-
-  test("rides the speaker's language when the table covers it", () => {
-    expect(fixedPhraseLanguage(table, "es")).toBeUndefined();
-    expect(fixedPhraseLanguage(table, "es-419")).toBeUndefined();
-  });
-
-  test("carries no hint when the language is unknown", () => {
-    expect(fixedPhraseLanguage(table, undefined)).toBeUndefined();
-  });
-});

package/src/util/fs-watcher-error.ts

@@ -0,0 +1,36 @@
+/**
+ * Shared `'error'`-event handler for `fs.watch()` FSWatchers.
+ *
+ * An `FSWatcher` is an EventEmitter. When the underlying inotify/FSEvents
+ * backend fails *after* the watch was established — e.g. ENOSPC when the
+ * kernel's `fs.inotify.max_user_watches` limit is exhausted while walking a
+ * recursive watch into a large subtree (a plugin's `node_modules`), or ENXIO
+ * when a Unix socket file appears in a watched directory — the failure is
+ * delivered asynchronously as an `'error'` event rather than a synchronous
+ * throw from `watch()`. An emitter with no `'error'` listener rethrows, which
+ * surfaces as an `uncaughtException` and takes the whole daemon down (→
+ * CrashLoopBackOff).
+ *
+ * Attaching this handler degrades the failure to "this watcher stops
+ * delivering events", in line with the daemon startup philosophy: a subsystem
+ * failure must never crash the process.
+ */
+
+import type { FSWatcher } from "node:fs";
+
+import type { Logger } from "pino";
+
+/**
+ * Attach a resilient `'error'` listener so async FSWatcher failures are logged
+ * instead of crashing the process. Pass the owning module's logger and the
+ * watched directory for diagnostic context.
+ */
+export function attachFsWatcherErrorHandler(
+  watcher: FSWatcher,
+  log: Logger,
+  dir: string,
+): void {
+  watcher.on("error", (err) => {
+    log.warn({ err, dir }, "FSWatcher error (non-fatal, continuing)");
+  });
+}

package/src/util/language-subtag.ts

@@ -41,19 +41,3 @@ export function localizedOrDefault<T>(
     ? (table[baseLanguageSubtag(language)!] as T)
     : fallback;
 }
-
-/**
- * The TTS language hint for a fixed phrase picked from a localized table:
- * "en" when the speaker has a language the table does not cover (the
- * picker fell back to English text, which must not be synthesized under
- * an ar/ko/ta hint), undefined otherwise (the phrase rides the speaker's
- * language, or carries no hint at all when the language is unknown).
- */
-export function fixedPhraseLanguage(
-  table: Readonly<Record<string, unknown>>,
-  language: string | undefined,
-): string | undefined {
-  return language !== undefined && !hasLocalizedEntry(table, language)
-    ? "en"
-    : undefined;
-}

package/src/util/platform.ts

@@ -470,14 +470,6 @@ export function getWorkspaceConfigPath(): string {
   return join(getWorkspaceDir(), "config.json");
 }
 
-/** Filename for the user-owned Agent Plugins MCP document. */
-export const WORKSPACE_MCP_FILENAME = "mcp.json";
-
-/** Returns $VELLUM_WORKSPACE_DIR/mcp.json */
-export function getWorkspaceMcpConfigPath(): string {
-  return join(getWorkspaceDir(), WORKSPACE_MCP_FILENAME);
-}
-
 /** Returns $VELLUM_WORKSPACE_DIR/skills */
 export function getWorkspaceSkillsDir(): string {
   return join(getWorkspaceDir(), "skills");