@vellumai/assistant 0.12.2 → 0.12.3-staging.2

package/src/cli/lib/inspect-plugin.ts

@@ -27,7 +27,10 @@ import {
   type InstalledPluginInfo,
   readInstalledPlugin,
 } from "./list-installed-plugins.js";
-import { readBundledLocalPluginCatalog } from "./plugin-catalog-local.js";
+import {
+  arePlatformFeaturesEnabled,
+  readBundledLocalPluginCatalog,
+} from "./plugin-catalog-local.js";
 import { DEFAULT_PLUGIN_REF } from "./plugin-constants.js";
 import {
   compareFingerprint,
@@ -338,17 +341,21 @@ export async function inspectPlugin(
   let remote: PluginRemoteInfo | null = null;
   let remoteError: string | null = null;
   const installedLocalSource = local?.source?.kind === "local";
+  const useBundledLocalCatalog =
+    installedLocalSource || (!installed && !arePlatformFeaturesEnabled());
   try {
-    if (installedLocalSource) {
+    if (useBundledLocalCatalog) {
       const catalog = deps.localCatalog ?? readBundledLocalPluginCatalog();
       const match = catalog.matches.find(
         (candidate) =>
           candidate.name === name &&
           candidate.source.kind === "local" &&
-          candidate.source.path === local.source?.path,
+          (!installedLocalSource ||
+            candidate.source.path === local.source?.path),
       );
       remote = match ? readLocalPackageRemote(match, catalog.ref) : null;
-    } else {
+    }
+    if (!remote && !installedLocalSource) {
       const entries = await fetchMarketplaceEntries(
         { fetch: deps.fetch },
         { ref: marketplaceRef },

package/src/cli/lib/plugin-marketplace.ts

@@ -127,6 +127,14 @@ export const mcpIntegrationSchema = z.object({
   }),
   /** Filename under the web client's bundled integration-image directory. */
   logo: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.-]*$/),
+  /**
+   * Where the integrations catalog files the entry. Any string at this
+   * boundary: a catalog newer than this build can name a category it does not
+   * know, and one unfamiliar slug must not reject the whole catalog. Clients
+   * normalize against the shared vocabulary; the bundled inventory test holds
+   * every entry in this repo to it.
+   */
+  category: z.string().optional(),
   /** Existing main OAuth provider used to group a related MCP connection. */
   oauthProvider: z.string().regex(PLUGIN_NAME_RE).optional(),
 });

package/src/cli/lib/publish-plugin.ts

@@ -337,8 +337,7 @@ export async function postPublishRequest(
     },
   );
 
-  const data = (await resp.json()) as PublishResult;
-  return data;
+  return (await resp.json()) as PublishResult;
 }
 
 /**

package/src/cli/lib/upgrade-plugin.ts

@@ -412,6 +412,24 @@ export async function upgradePlugin(
     };
   }
 
+  const usesMergeStrategy =
+    strategy === "ours" || strategy === "theirs" || strategy === "assistant";
+  const canOverwriteCleanBundledInstall =
+    remote.kind === "local" &&
+    strategy === "theirs" &&
+    local.localChanges?.clean === true;
+
+  if (
+    remote.kind === "local" &&
+    usesMergeStrategy &&
+    !canOverwriteCleanBundledInstall
+  ) {
+    throw new PluginMergeBaselineError(
+      name,
+      "bundled packages do not retain the previous package version needed for a three-way merge",
+    );
+  }
+
   if (dryRun) {
     return {
       name,
@@ -433,17 +451,7 @@ export async function upgradePlugin(
   // `ours`/`theirs`/`assistant` carry local edits forward via a three-way
   // merge; the default `overwrite` discards them and re-installs the pin
   // wholesale.
-  if (
-    strategy === "ours" ||
-    strategy === "theirs" ||
-    strategy === "assistant"
-  ) {
-    if (remote.kind === "local") {
-      throw new PluginMergeBaselineError(
-        name,
-        "bundled packages do not retain the previous package version needed for a three-way merge",
-      );
-    }
+  if (usesMergeStrategy && remote.kind !== "local") {
     const [remoteOwner, remoteRepo] = remote.repo.split("/");
     return mergeUpgrade(
       {

package/src/cli/output.ts

@@ -11,20 +11,34 @@ export function shouldOutputJson(cmd: Command): boolean {
   return false;
 }
 
-export function writeOutput(cmd: Command, payload: unknown): void {
+/**
+ * Write a JSON payload to stdout. `onFlushed` runs once the bytes have left
+ * the process, for a command that must exit itself and would otherwise cut
+ * a piped payload short.
+ */
+export function writeOutput(
+  cmd: Command,
+  payload: unknown,
+  onFlushed?: () => void,
+): void {
   const compact = shouldOutputJson(cmd);
   process.stdout.write(
     compact
       ? JSON.stringify(payload) + "\n"
       : JSON.stringify(payload, null, 2) + "\n",
+    onFlushed,
   );
 }
 
 /** Format-aware error output: JSON envelope with --json, stderr otherwise. */
-export function writeError(cmd: Command, message: string): void {
+export function writeError(
+  cmd: Command,
+  message: string,
+  onFlushed?: () => void,
+): void {
   if (shouldOutputJson(cmd)) {
-    writeOutput(cmd, { ok: false, error: message });
+    writeOutput(cmd, { ok: false, error: message }, onFlushed);
   } else {
-    process.stderr.write(`Error: ${message}\n`);
+    process.stderr.write(`Error: ${message}\n`, onFlushed);
   }
 }

package/src/config/__tests__/default-provider.test.ts

@@ -72,6 +72,12 @@ describe("LLMSchema.defaultProvider", () => {
     ).toThrow();
   });
 
+  test("rejects a structured-decision catalog provider", () => {
+    expect(() =>
+      DefaultProviderSchema.parse({ provider: "typesafe" }),
+    ).toThrow();
+  });
+
   test("rejects an empty connectionName", () => {
     expect(() =>
       DefaultProviderSchema.parse({

package/src/config/__tests__/memory-retrospective-schema.test.ts

@@ -12,10 +12,11 @@ import { describe, expect, test } from "bun:test";
 import { MemoryRetrospectiveConfigSchema } from "../schemas/memory-retrospective.js";
 
 describe("memory.retrospective config schema", () => {
-  test("an empty block leaves retrospectives and skill improvement on", () => {
+  test("an empty block leaves skill improvement on and monitoring off", () => {
     const parsed = MemoryRetrospectiveConfigSchema.parse({});
     expect(parsed.enabled).toBe(true);
     expect(parsed.skillImprovement).toBe(true);
+    expect(parsed.skillImprovementMonitoring).toBe(false);
     expect(parsed).not.toHaveProperty("forkStrategy");
   });
 
@@ -41,6 +42,18 @@ describe("memory.retrospective config schema", () => {
     ).toBe(false);
   });
 
+  test("skillImprovementMonitoring is a boolean-only opt-in", () => {
+    const parsed = MemoryRetrospectiveConfigSchema.parse({
+      skillImprovementMonitoring: true,
+    });
+    expect(parsed.skillImprovementMonitoring).toBe(true);
+    expect(
+      MemoryRetrospectiveConfigSchema.safeParse({
+        skillImprovementMonitoring: "true",
+      }).success,
+    ).toBe(false);
+  });
+
   test("a leftover forkStrategy key is ignored", () => {
     const parsed = MemoryRetrospectiveConfigSchema.parse({
       forkStrategy: "cloning",

package/src/config/bundled-skills/computer-use/SKILL.md

@@ -21,7 +21,7 @@ connected desktop. CU tools run through the main agent loop via HostCuProxy.
 The skill is internally preactivated for conversations with a connected desktop client.
 
 Tools in this skill are proxy tools. Execution is forwarded to a connected
-desktop client and is never handled locally by the assistant.
+desktop client or handled by the assistant's virtual desktop.
 
 ## Observations
 

package/src/config/bundled-skills/computer-use/TOOLS.json

@@ -21,11 +21,16 @@
           },
           "full_tree": {
             "type": "boolean",
-            "description": "Walk the accessibility tree to full depth. Observations list the tree to a limited depth and say when it was cut off; pass this when the element you need is not in the tree."
+            "description": "On connected personal computers, walk the accessibility tree to full depth. The virtual desktop uses a bounded tree; use screenshot coordinates when an element is not listed."
           },
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": []
@@ -65,6 +70,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["reasoning"]
@@ -91,6 +105,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["text", "reasoning"]
@@ -117,6 +140,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["key", "reasoning"]
@@ -160,6 +192,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["direction", "amount", "reasoning"]
@@ -206,6 +247,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["reasoning"]
@@ -233,6 +283,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["duration_ms", "reasoning"]
@@ -259,6 +318,11 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["app_name", "reasoning"]
@@ -286,6 +350,11 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["script", "reasoning"]
@@ -377,6 +446,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["actions"]
@@ -396,6 +474,11 @@
           "summary": {
             "type": "string",
             "description": "Human-readable summary of what was accomplished"
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["summary"]
@@ -418,6 +501,11 @@
           "reasoning": {
             "type": "string",
             "description": "Explanation of how you determined the answer"
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["answer", "reasoning"]

package/src/config/bundled-skills/image-studio/SKILL.md

@@ -37,13 +37,27 @@ Pass a concrete model ID only if the user names one explicitly. If the tool reje
 Generate (no model parameter, default is correct):
 
 ```json
-{ "tool": "media_generate_image", "input": { "prompt": "A sunset over the ocean, golden hour, soft haze, 35mm photo style", "variants": 2 } }
+{
+  "tool": "media_generate_image",
+  "input": {
+    "prompt": "A sunset over the ocean, golden hour, soft haze, 35mm photo style",
+    "variants": 2
+  }
+}
 ```
 
 Edit:
 
 ```json
-{ "tool": "media_generate_image", "input": { "prompt": "Remove the watermark text from the background. Keep the subject, framing, lighting, and colors exactly identical. Change nothing else.", "mode": "edit", "source_paths": ["conversations/<conv-id>/attachments/photo.jpeg"], "model": "openai" } }
+{
+  "tool": "media_generate_image",
+  "input": {
+    "prompt": "Remove the watermark text from the background. Keep the subject, framing, lighting, and colors exactly identical. Change nothing else.",
+    "mode": "edit",
+    "source_paths": ["conversations/<conv-id>/attachments/photo.jpeg"],
+    "model": "openai"
+  }
+}
 ```
 
 `source_paths` is a flat array of file path strings. Do NOT pass objects:
@@ -72,6 +86,7 @@ Edits on large photos are slow (1 to 2 minutes). If the tool reports a timeout (
 Each generated image is saved into the workspace under `media/generated/` and the tool result lists the saved paths. The images also come back as inline content blocks so you can judge the result before presenting it.
 
 - Present an image to the user by embedding its saved path in your reply: `![short description](vellum://workspace/media/generated/<file>.png)`. The app renders it inline where your text refers to it, and chat channels (Slack, Telegram, WhatsApp) deliver it as a native image upload.
+- Label a plain image link "View image", for example `[View image](vellum://workspace/media/generated/<file>.png)`. The link opens a preview; do not call it "Download" or promise a download in the surrounding text. To save the image, the user can choose Download in the preview.
 - If you do not embed it, the image is still auto-attached to your reply as a file, so it is never lost. Prefer embedding: an attachment chip at the end of the message is a worse presentation than the image inline.
 - To iterate on a result, pass its saved path via `source_paths` with `mode: "edit"`.
 

package/src/config/bundled-skills/image-studio/tools/media-generate-image.ts

@@ -5,10 +5,7 @@ import {
   resolveImageGenCredentials,
   resolveImageGenRouting,
 } from "../../../../media/image-credentials.js";
-import {
-  describeImageModels,
-  resolveImageModel,
-} from "../../../../media/image-models.js";
+import { resolveRequestedImageModel } from "../../../../media/image-models.js";
 import {
   generateImage,
   mapImageGenError,
@@ -115,18 +112,17 @@ export async function run(
   const config = getConfig();
   const svc = config.services["image-generation"];
   let modelOverride = input.model;
-  // Resolve tier aliases (fast, quality, openai) to concrete model IDs via
-  // the registry. Unknown values get an error listing the current catalog so
-  // callers can self-correct without a stale schema enum.
+  // Resolve aliases and OpenRouter slugs against the configured provider.
+  // Built-in providers still list the current catalog on unknown values.
   if (typeof modelOverride === "string" && modelOverride) {
-    const entry = resolveImageModel(modelOverride);
-    if (!entry) {
+    const resolved = resolveRequestedImageModel(modelOverride, svc.provider);
+    if (resolved.error) {
       return {
-        content: `Unknown model "${modelOverride}". Available models and aliases:\n${describeImageModels()}\n\nRetry with one of the aliases above, or omit the model parameter to use the configured default.`,
+        content: `${resolved.error}\n\nRetry with one of the aliases above, or omit the model parameter to use the configured default.`,
         isError: true,
       };
     }
-    modelOverride = entry.id;
+    modelOverride = resolved.model;
   }
   // Backend and managed-ness resolve together: an explicit model re-routes
   // to the model's backend (e.g. `gpt-image-2` under a gemini config routes

package/src/config/bundled-skills/schedule/SKILL.md

@@ -249,18 +249,18 @@ If any required capability is missing:
 
 Scheduled messages run without user interaction, in a conversation nobody has open. If the task produces output the user should see (a digest, summary, report, or a check whose answer is "nothing changed"), the scheduled message **must** end with an explicit instruction to deliver it. Without one, the output lives in a conversation log the user never opens.
 
-Write the delivery step into the `message` when you create the schedule — not as a vague "let me know", but as the actual call, with a real title:
+Write the delivery step into the `message` when you create the schedule, not as a vague "let me know", but as the actual call, with a real title:
 
-> "…then send the summary with `assistant notifications send --title \"Inbox digest\" --message \"<the summary>\"`."
+> "…then send the summary with `assistant notifications send --source-channel scheduler --title \"Inbox digest\" --message \"<the summary>\"`."
 
 A schedule whose message has no delivery step is not finished. Before calling `schedule_create` in `execute` mode, read your own message back and check that it says where the output goes.
 
-There is a safety net, and it is not a substitute for the above. When an execute-mode run finishes with user-facing output and nothing delivered it, the assistant sends a notification carrying the run's final reply, so a schedule can no longer run and leave no trace. `messaging_send` counts as a delivery only when the call reported success, and `assistant notifications send` once the notification pipeline has taken it: a send the channel refused, or one that never reported at all, leaves the run eligible for the net, so the failure reaches you instead of vanishing into a conversation nobody has open. A Slack `chat.postMessage` never counts, because Slack refuses a call with a successful HTTP status and `ok: false` in the body, so the command succeeding proves nothing; a run that posts Block Kit that way also gets the net's notification. It fires on the raw reply, whatever the run happened to end on, at whatever length. An authored delivery step gets a title and body you chose, sent at the moment you chose. Rely on the net and you get the machine's guess instead.
+There is a safety net, and it is not a substitute for the above. When an execute-mode run finishes with user-facing output and nothing delivered it, the assistant sends a notification carrying the run's final reply, so a schedule can no longer run and leave no trace. `messaging_send` counts as a delivery only when the call reported success, and `assistant notifications send` once the notification pipeline has taken it: a send the channel refused, or one that never reported at all, leaves the run eligible for the net, so the failure reaches you instead of vanishing into a conversation nobody has open. A Slack `chat.postMessage` never counts, because the net recognizes only the recorded routes; a run that posts Block Kit that way also gets the net's notification. It fires on the raw reply, whatever the run happened to end on, at whatever length. An authored delivery step gets a title and body you chose, sent at the moment you chose. Rely on the net and you get the machine's guess instead.
 
-Choose the right delivery tool based on the content:
+Choose the right delivery tool based on the destination:
 
-- **Rich content** (digests, summaries, reports): Use `messaging_send` with the target platform and conversation ID. It reaches Gmail or Outlook as a draft, and posts to a Slack, Telegram, or Discord chat through that channel's own transport, where the post is recorded and can be found again afterwards. Reach for `chat.postMessage` through `assistant oauth request` only for a Block Kit shape `messaging_send` cannot carry, with the provider the **slack** skill says to pass for posting on this workspace (`slack_channel` when the bot is set up; where only the `slack` integration exists, the skill says to tell the user before posting as them), never through `curl` or a revealed token. Either way the full content posts directly.
-- **Short alerts** (status updates, completion notices): Use `assistant notifications send` via `bash` to let the notification router pick the best channel. Note: the router's decision engine rewrites content into short alerts, so it is not suitable for rich content.
+- **A specific chat or mailbox** (a named Slack, Telegram, or Discord conversation, or an email draft): Use `messaging_send` with the target platform and conversation ID. It reaches Gmail or Outlook as a draft, and posts to a Slack, Telegram, or Discord chat through that channel's own transport, where the post is recorded and can be found again afterwards. Reach for `chat.postMessage` through `assistant oauth request` only for a Block Kit shape `messaging_send` cannot carry, with the provider the **slack** skill says to pass for posting on this workspace (`slack_channel` when the bot is set up; where only the `slack` integration exists, the skill says to tell the user before posting as them), never through `curl` or a revealed token. Either way the full content posts directly.
+- **The user's notification surfaces** (Vellum inbox, Telegram, platform push): Use `assistant notifications send` via `bash`. Pass `--source-channel scheduler` and the complete authored body as `--message`. The pipeline keeps that body. Do not summarize the report before sending.
 
 Example schedule message for a Slack digest:
 

package/src/config/bundled-skills/sequences/TOOLS.json

@@ -165,11 +165,7 @@
             },
             "description": "Replacement steps (replaces all existing steps)"
           }
-        },
-        "oneOf": [
-          { "required": ["id"] },
-          { "required": ["enrollment_id", "enrollment_action"] }
-        ]
+        }
       },
       "executor": "tools/sequence-update.ts",
       "execution_target": "host"

package/src/config/call-site-defaults.ts

@@ -153,6 +153,15 @@ export const CALL_SITE_DEFAULTS: Record<LLMCallSite, CallSiteDefaultConfig> = {
     effort: "low",
     thinking: { enabled: false },
   },
+  // The escalation judge only runs when this site resolves to the TypeSafe
+  // provider (see calls/voice-escalation-judge.ts), so the shipped default is
+  // any ordinary profile: the judge stays off until a user pins a TypeSafe
+  // profile here.
+  voiceEscalationJudge: { profile: "cost-optimized" },
+  // Same arrangement for the barge-in continuation judge
+  // (live-voice/continuation-judge.ts): off until a TypeSafe profile is
+  // pinned here.
+  voiceContinuationJudge: { profile: "cost-optimized" },
   // Names the background continuation a barge-in spawns, from the interrupted
   // transcript. The label is fixed at spawn, so the call runs under a short
   // timeout and the deterministic label stands in when it misses; that makes

package/src/config/feature-flag-registry.json

@@ -536,6 +536,14 @@
       "description": "Route all user-facing assistant text through the send_user_message tool instead of streamed assistant text",
       "defaultEnabled": false
     },
+    {
+      "id": "session-groups",
+      "scope": "both",
+      "key": "session-groups",
+      "label": "Session Groups",
+      "description": "Records eligible computer use, browser, live vision, and ambient runs and presents them as collapsible transcript groups. Off preserves ordinary actions and the flat transcript without new session tracking.",
+      "defaultEnabled": false
+    },
     {
       "id": "assistant-desktop",
       "scope": "assistant",
@@ -543,6 +551,14 @@
       "label": "Virtual desktop",
       "description": "Streams an interactive virtual desktop from a platform-hosted, containerized assistant over /v1/desktop/stream. Requires platform hosting; self-hosted assistants are excluded. Off: the virtual desktop is hidden. On: the chat header offers its viewer and controls.",
       "defaultEnabled": false
+    },
+    {
+      "id": "assistant-inbox",
+      "scope": "client",
+      "key": "assistant-inbox",
+      "label": "Assistant Inbox",
+      "description": "Shows an Assistant Inbox entry above Preferences in the web sidebar and the /assistant/inbox page it opens: a mailbox for the assistant's managed vellum.me address (received and sent, with a reading pane), the inline email setup card for entitled orgs with no address yet, and an upgrade card for orgs without the managed_email entitlement. Off hides the entry and redirects the route to chat.",
+      "defaultEnabled": false
     }
   ]
 }

package/src/config/loader.ts

@@ -58,14 +58,6 @@ type ConfigFileSignature =
       exists: false;
     };
 
-function getConfigPath(): string {
-  return getWorkspaceConfigPath();
-}
-
-function ensureMigratedDataDir(): void {
-  ensureDataDir();
-}
-
 function readConfigFileSignature(configPath: string): ConfigFileSignature {
   const stats = safeStatSync(configPath);
   if (!stats) {
@@ -104,7 +96,7 @@ function getCachedConfigIfFresh(): AssistantConfig | null {
     return null;
   }
 
-  const currentSignature = readConfigFileSignature(getConfigPath());
+  const currentSignature = readConfigFileSignature(getWorkspaceConfigPath());
   if (configFileSignaturesEqual(cachedFileSignature, currentSignature)) {
     return cached;
   }
@@ -1002,7 +994,7 @@ export function mergeDefaultWorkspaceConfig(): DefaultWorkspaceConfigMergeResult
       Object.prototype.hasOwnProperty.call(llmDefaults, "activeProfile"),
   };
 
-  const configPath = getConfigPath();
+  const configPath = getWorkspaceConfigPath();
   let existing: Record<string, unknown> = {};
   if (existsSync(configPath)) {
     try {
@@ -1070,8 +1062,8 @@ export function loadConfig(): AssistantConfig {
   loading = true;
 
   try {
-    ensureMigratedDataDir();
-    const configPath = getConfigPath();
+    ensureDataDir();
+    const configPath = getWorkspaceConfigPath();
 
     let fileConfig: Record<string, unknown> = {};
     let configFileExisted = true;
@@ -1259,7 +1251,7 @@ export function getConfigReadOnly(): AssistantConfig {
     return freshCached;
   }
 
-  const configPath = getConfigPath();
+  const configPath = getWorkspaceConfigPath();
   let fileConfig: Record<string, unknown> = {};
   if (existsSync(configPath)) {
     try {
@@ -1312,8 +1304,8 @@ export function withSuppressedConfigDiskWritesSync<T>(fn: () => T): T {
  * type without runtime shape-checking — the boundary check happens here.
  */
 export function loadRawConfig(): Record<string, unknown> {
-  ensureMigratedDataDir();
-  const configPath = getConfigPath();
+  ensureDataDir();
+  const configPath = getWorkspaceConfigPath();
   if (!existsSync(configPath)) {
     return {};
   }
@@ -1372,8 +1364,8 @@ function describeJsonShape(value: unknown): string {
 }
 
 export function saveRawConfig(config: Record<string, unknown>): void {
-  ensureMigratedDataDir();
-  const configPath = getConfigPath();
+  ensureDataDir();
+  const configPath = getWorkspaceConfigPath();
 
   // Strip legacy apiKeys — provider keys belong in secure storage, not plaintext config
   delete config.apiKeys;