@vellumai/assistant 0.12.3-staging.1 → 0.12.3-staging.2

package/src/config/bundled-skills/computer-use/TOOLS.json

@@ -21,11 +21,16 @@
           },
           "full_tree": {
             "type": "boolean",
-            "description": "Walk the accessibility tree to full depth. Observations list the tree to a limited depth and say when it was cut off; pass this when the element you need is not in the tree."
+            "description": "On connected personal computers, walk the accessibility tree to full depth. The virtual desktop uses a bounded tree; use screenshot coordinates when an element is not listed."
           },
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": []
@@ -65,6 +70,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["reasoning"]
@@ -91,6 +105,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["text", "reasoning"]
@@ -117,6 +140,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["key", "reasoning"]
@@ -160,6 +192,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["direction", "amount", "reasoning"]
@@ -206,6 +247,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["reasoning"]
@@ -233,6 +283,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["duration_ms", "reasoning"]
@@ -259,6 +318,11 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["app_name", "reasoning"]
@@ -286,6 +350,11 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["script", "reasoning"]
@@ -377,6 +446,15 @@
           "target_client_id": {
             "type": "string",
             "description": "ID of the specific client to target. Required when multiple clients support host_cu; omit when only one is connected. Obtain IDs from `assistant clients list --capability host_cu`."
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
+          },
+          "observation_id": {
+            "type": "string",
+            "description": "Required on assistant-desktop: the ID from its latest screenshot. Observe again after browser actions, user handoff, or interruption. Omit for connected-computer. For a sequence, applies to the whole batch."
           }
         },
         "required": ["actions"]
@@ -396,6 +474,11 @@
           "summary": {
             "type": "string",
             "description": "Human-readable summary of what was accomplished"
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["summary"]
@@ -418,6 +501,11 @@
           "reasoning": {
             "type": "string",
             "description": "Explanation of how you determined the answer"
+          },
+          "target": {
+            "type": "string",
+            "enum": ["connected-computer", "assistant-desktop"],
+            "description": "Desktop to control. Platform-hosted web conversations default to assistant-desktop; native desktop apps and non-platform assistants default to connected-computer. Explicit target or target_client_id overrides the default. Use assistant-desktop from a native app only when explicitly requested; do not combine it with target_client_id."
           }
         },
         "required": ["answer", "reasoning"]

package/src/config/bundled-skills/image-studio/SKILL.md

@@ -37,13 +37,27 @@ Pass a concrete model ID only if the user names one explicitly. If the tool reje
 Generate (no model parameter, default is correct):
 
 ```json
-{ "tool": "media_generate_image", "input": { "prompt": "A sunset over the ocean, golden hour, soft haze, 35mm photo style", "variants": 2 } }
+{
+  "tool": "media_generate_image",
+  "input": {
+    "prompt": "A sunset over the ocean, golden hour, soft haze, 35mm photo style",
+    "variants": 2
+  }
+}
 ```
 
 Edit:
 
 ```json
-{ "tool": "media_generate_image", "input": { "prompt": "Remove the watermark text from the background. Keep the subject, framing, lighting, and colors exactly identical. Change nothing else.", "mode": "edit", "source_paths": ["conversations/<conv-id>/attachments/photo.jpeg"], "model": "openai" } }
+{
+  "tool": "media_generate_image",
+  "input": {
+    "prompt": "Remove the watermark text from the background. Keep the subject, framing, lighting, and colors exactly identical. Change nothing else.",
+    "mode": "edit",
+    "source_paths": ["conversations/<conv-id>/attachments/photo.jpeg"],
+    "model": "openai"
+  }
+}
 ```
 
 `source_paths` is a flat array of file path strings. Do NOT pass objects:
@@ -72,6 +86,7 @@ Edits on large photos are slow (1 to 2 minutes). If the tool reports a timeout (
 Each generated image is saved into the workspace under `media/generated/` and the tool result lists the saved paths. The images also come back as inline content blocks so you can judge the result before presenting it.
 
 - Present an image to the user by embedding its saved path in your reply: `![short description](vellum://workspace/media/generated/<file>.png)`. The app renders it inline where your text refers to it, and chat channels (Slack, Telegram, WhatsApp) deliver it as a native image upload.
+- Label a plain image link "View image", for example `[View image](vellum://workspace/media/generated/<file>.png)`. The link opens a preview; do not call it "Download" or promise a download in the surrounding text. To save the image, the user can choose Download in the preview.
 - If you do not embed it, the image is still auto-attached to your reply as a file, so it is never lost. Prefer embedding: an attachment chip at the end of the message is a worse presentation than the image inline.
 - To iterate on a result, pass its saved path via `source_paths` with `mode: "edit"`.
 

package/src/config/bundled-skills/image-studio/tools/media-generate-image.ts

@@ -5,10 +5,7 @@ import {
   resolveImageGenCredentials,
   resolveImageGenRouting,
 } from "../../../../media/image-credentials.js";
-import {
-  describeImageModels,
-  resolveImageModel,
-} from "../../../../media/image-models.js";
+import { resolveRequestedImageModel } from "../../../../media/image-models.js";
 import {
   generateImage,
   mapImageGenError,
@@ -115,18 +112,17 @@ export async function run(
   const config = getConfig();
   const svc = config.services["image-generation"];
   let modelOverride = input.model;
-  // Resolve tier aliases (fast, quality, openai) to concrete model IDs via
-  // the registry. Unknown values get an error listing the current catalog so
-  // callers can self-correct without a stale schema enum.
+  // Resolve aliases and OpenRouter slugs against the configured provider.
+  // Built-in providers still list the current catalog on unknown values.
   if (typeof modelOverride === "string" && modelOverride) {
-    const entry = resolveImageModel(modelOverride);
-    if (!entry) {
+    const resolved = resolveRequestedImageModel(modelOverride, svc.provider);
+    if (resolved.error) {
       return {
-        content: `Unknown model "${modelOverride}". Available models and aliases:\n${describeImageModels()}\n\nRetry with one of the aliases above, or omit the model parameter to use the configured default.`,
+        content: `${resolved.error}\n\nRetry with one of the aliases above, or omit the model parameter to use the configured default.`,
         isError: true,
       };
     }
-    modelOverride = entry.id;
+    modelOverride = resolved.model;
   }
   // Backend and managed-ness resolve together: an explicit model re-routes
   // to the model's backend (e.g. `gpt-image-2` under a gemini config routes

package/src/config/bundled-skills/sequences/TOOLS.json

@@ -165,11 +165,7 @@
             },
             "description": "Replacement steps (replaces all existing steps)"
           }
-        },
-        "oneOf": [
-          { "required": ["id"] },
-          { "required": ["enrollment_id", "enrollment_action"] }
-        ]
+        }
       },
       "executor": "tools/sequence-update.ts",
       "execution_target": "host"

package/src/config/call-site-defaults.ts

@@ -153,6 +153,15 @@ export const CALL_SITE_DEFAULTS: Record<LLMCallSite, CallSiteDefaultConfig> = {
     effort: "low",
     thinking: { enabled: false },
   },
+  // The escalation judge only runs when this site resolves to the TypeSafe
+  // provider (see calls/voice-escalation-judge.ts), so the shipped default is
+  // any ordinary profile: the judge stays off until a user pins a TypeSafe
+  // profile here.
+  voiceEscalationJudge: { profile: "cost-optimized" },
+  // Same arrangement for the barge-in continuation judge
+  // (live-voice/continuation-judge.ts): off until a TypeSafe profile is
+  // pinned here.
+  voiceContinuationJudge: { profile: "cost-optimized" },
   // Names the background continuation a barge-in spawns, from the interrupted
   // transcript. The label is fixed at spawn, so the call runs under a short
   // timeout and the deterministic label stands in when it misses; that makes

package/src/config/feature-flag-registry.json

@@ -536,6 +536,14 @@
       "description": "Route all user-facing assistant text through the send_user_message tool instead of streamed assistant text",
       "defaultEnabled": false
     },
+    {
+      "id": "session-groups",
+      "scope": "both",
+      "key": "session-groups",
+      "label": "Session Groups",
+      "description": "Records eligible computer use, browser, live vision, and ambient runs and presents them as collapsible transcript groups. Off preserves ordinary actions and the flat transcript without new session tracking.",
+      "defaultEnabled": false
+    },
     {
       "id": "assistant-desktop",
       "scope": "assistant",
@@ -543,6 +551,14 @@
       "label": "Virtual desktop",
       "description": "Streams an interactive virtual desktop from a platform-hosted, containerized assistant over /v1/desktop/stream. Requires platform hosting; self-hosted assistants are excluded. Off: the virtual desktop is hidden. On: the chat header offers its viewer and controls.",
       "defaultEnabled": false
+    },
+    {
+      "id": "assistant-inbox",
+      "scope": "client",
+      "key": "assistant-inbox",
+      "label": "Assistant Inbox",
+      "description": "Shows an Assistant Inbox entry above Preferences in the web sidebar and the /assistant/inbox page it opens: a mailbox for the assistant's managed vellum.me address (received and sent, with a reading pane), the inline email setup card for entitled orgs with no address yet, and an upgrade card for orgs without the managed_email entitlement. Off hides the entry and redirects the route to chat.",
+      "defaultEnabled": false
     }
   ]
 }

package/src/config/profile-text-generation.test.ts

@@ -9,7 +9,7 @@ describe("profileSupportsTextGeneration", () => {
   test("false for a structured-decision catalog model", () => {
     expect(
       profileSupportsTextGeneration(
-        { provider: "jev", model: "jev-latest" },
+        { provider: "typesafe", model: "jev-latest" },
         {},
       ),
     ).toBe(false);
@@ -35,7 +35,7 @@ describe("profileSupportsTextGeneration", () => {
       profileSupportsTextGeneration(
         { mix: [{ profile: "jev" }, { profile: "balanced" }] },
         {
-          jev: { provider: "jev", model: "jev-latest" },
+          jev: { provider: "typesafe", model: "jev-latest" },
           balanced: { provider: "anthropic", model: "claude-opus-4-8" },
         },
       ),

package/src/config/schemas/__tests__/tools.test.ts

@@ -0,0 +1,31 @@
+import { describe, expect, test } from "bun:test";
+
+import { MCP_GLOBAL_MAX_TOOLS } from "../mcp.js";
+import { ToolsConfigSchema } from "../tools.js";
+
+describe("ToolsConfigSchema.mcpGlobalMaxTools", () => {
+  test("omits the override so the shipped MCP cap remains in force", () => {
+    const parsed = ToolsConfigSchema.parse({});
+    expect(parsed.mcpGlobalMaxTools).toBeUndefined();
+    expect(parsed.exclude).toEqual([]);
+  });
+
+  test("accepts a workspace override", () => {
+    expect(
+      ToolsConfigSchema.parse({ mcpGlobalMaxTools: 80 }).mcpGlobalMaxTools,
+    ).toBe(80);
+    expect(
+      ToolsConfigSchema.parse({
+        mcpGlobalMaxTools: MCP_GLOBAL_MAX_TOOLS,
+      }).mcpGlobalMaxTools,
+    ).toBe(MCP_GLOBAL_MAX_TOOLS);
+    expect(
+      ToolsConfigSchema.parse({ mcpGlobalMaxTools: 1000 }).mcpGlobalMaxTools,
+    ).toBe(1000);
+  });
+
+  test("rejects zero and fractions", () => {
+    expect(() => ToolsConfigSchema.parse({ mcpGlobalMaxTools: 0 })).toThrow();
+    expect(() => ToolsConfigSchema.parse({ mcpGlobalMaxTools: 1.5 })).toThrow();
+  });
+});

package/src/config/schemas/call-site-catalog.ts

@@ -303,6 +303,20 @@ const CATALOG_RECORD: CatalogRecord = {
       "Fast front-door leg fronting live-voice turns under triage-and-escalate: leading-token verdict, holding phrase, or the direct answer.",
     domain: "agentLoop",
   },
+  voiceEscalationJudge: {
+    id: "voiceEscalationJudge",
+    displayName: "Voice Escalation Judge",
+    description:
+      "Second opinion on the voice front door's escalate decision. Runs only when pinned to a TypeSafe profile; a confident 'needs tools' verdict hands the turn to the escalated leg.",
+    domain: "agentLoop",
+  },
+  voiceContinuationJudge: {
+    id: "voiceContinuationJudge",
+    displayName: "Voice Continuation Judge",
+    description:
+      "Decides from the caller's interruption whether a barged-in request should keep running in the background. Runs only when pinned to a TypeSafe profile.",
+    domain: "agentLoop",
+  },
   voiceContinuationLabel: {
     id: "voiceContinuationLabel",
     displayName: "Voice Continuation Label",

package/src/config/schemas/channels.ts

@@ -23,12 +23,6 @@ export const WhatsAppConfigSchema = z
       .string({ error: "whatsapp.phoneNumber must be a string" })
       .default("")
       .describe("WhatsApp Business phone number"),
-    deliverAuthBypass: z
-      .boolean({ error: "whatsapp.deliverAuthBypass must be a boolean" })
-      .default(false)
-      .describe(
-        "Whether to bypass authentication when delivering WhatsApp messages",
-      ),
     timeoutMs: z
       .number({ error: "whatsapp.timeoutMs must be a number" })
       .int("whatsapp.timeoutMs must be an integer")
@@ -81,12 +75,6 @@ export const TelegramConfigSchema = z
       .describe(
         "Webhook URL this deployment last registered with Telegram (managed by the gateway)",
       ),
-    deliverAuthBypass: z
-      .boolean({ error: "telegram.deliverAuthBypass must be a boolean" })
-      .default(false)
-      .describe(
-        "Whether to bypass authentication when delivering Telegram messages",
-      ),
     timeoutMs: z
       .number({ error: "telegram.timeoutMs must be a number" })
       .int("telegram.timeoutMs must be an integer")
@@ -155,12 +143,6 @@ export const DiscordConfigSchema = z
 
 export const SlackConfigSchema = z
   .object({
-    deliverAuthBypass: z
-      .boolean({ error: "slack.deliverAuthBypass must be a boolean" })
-      .default(false)
-      .describe(
-        "Whether to bypass authentication when delivering Slack messages",
-      ),
     teamId: z
       .string({ error: "slack.teamId must be a string" })
       .default("")

package/src/config/schemas/llm.ts

@@ -62,7 +62,7 @@ export const KNOWN_LLM_PROVIDERS = [
   "opencode",
   "baseten",
   "poolside",
-  "jev",
+  "typesafe",
   // Routing identities: "vellum" = the platform-managed route (upstream
   // derived from the model at dispatch) and the catalog owner of
   // Vellum-hosted GPU models; "chatgpt" = the subscription route to OpenAI.
@@ -229,6 +229,8 @@ export const LLMCallSiteEnum = z.enum([
   "vision",
   "voiceProgressNarration",
   "voiceFrontDoor",
+  "voiceEscalationJudge",
+  "voiceContinuationJudge",
   "voiceContinuationLabel",
   "trustRuleSuggestion",
   "homeGreeting",

package/src/config/schemas/mcp.ts

@@ -18,7 +18,8 @@ export const PLUGIN_MCP_RISK_LEVEL = "low" as const;
 export const MCP_MAX_TOOLS_PER_SERVER = 20;
 
 /**
- * Cap on tools registered across every MCP server. Selection is a
+ * Cap on tools registered across every MCP server when the workspace
+ * does not set `tools.mcpGlobalMaxTools` in config.json. Selection is a
  * deterministic round-robin by server id (see `mcp/tool-caps.ts`), so a
  * later server is not emptied just because earlier ones filled the budget.
  */

package/src/config/schemas/memory-retrospective.ts

@@ -11,14 +11,23 @@ export const MemoryRetrospectiveConfigSchema = z
 
     skillImprovement: z
       .boolean({
-        error:
-          "memory.retrospective.skillImprovement must be a boolean",
+        error: "memory.retrospective.skillImprovement must be a boolean",
       })
       .default(true)
       .describe(
         "Whether retrospectives may discover, refine, and create managed skills from observed procedures. When false, retrospectives still capture ordinary memories through `remember`, but cannot load skill management, search for similar skills, or scaffold managed skills.",
       ),
 
+    skillImprovementMonitoring: z
+      .boolean({
+        error:
+          "memory.retrospective.skillImprovementMonitoring must be a boolean",
+      })
+      .default(false)
+      .describe(
+        "Reserved opt-in for monitoring retrospective skill-improvement decisions. This setting currently has no effect.",
+      ),
+
     timeThresholdMs: z
       .number({
         error: "memory.retrospective.timeThresholdMs must be a number",

package/src/config/schemas/services.ts

@@ -22,7 +22,12 @@ export const VALID_INFERENCE_PROVIDERS = [
 
 // `vellum` generates through the platform runtime proxy; the backend
 // (gemini/openai) derives from the selected model's prefix at request time.
-const VALID_IMAGE_GEN_PROVIDERS = ["vellum", "gemini", "openai"] as const;
+const VALID_IMAGE_GEN_PROVIDERS = [
+  "vellum",
+  "gemini",
+  "openai",
+  "openrouter",
+] as const;
 
 /**
  * Derived from `SEARCH_PROVIDER_CATALOG`. Adding a new web-search provider
@@ -56,8 +61,9 @@ const InferenceServiceSchema = z.object({});
 /**
  * Image generation carries no `mode`: `provider` is the only axis. `"vellum"`
  * generates through the platform runtime proxy for the model-appropriate
- * backend, billed to Vellum credits; `"gemini"`/`"openai"` use the user's
- * key. A `mode` key sent by an older client is stripped at parse.
+ * backend, billed to Vellum credits; `"gemini"`/`"openai"`/`"openrouter"`
+ * use the user's key. A `mode` key sent by an older client is stripped at
+ * parse.
  */
 const ImageGenerationServiceSchema = z.object({
   provider: z.enum(VALID_IMAGE_GEN_PROVIDERS).default("gemini"),
@@ -76,8 +82,10 @@ const WebSearchServiceSchema = z.object({
   provider: z
     .enum(VALID_WEB_SEARCH_PROVIDERS)
     .default("inference-provider-native"),
-  // Origin for providers that support a custom API base (e.g. fastCRW).
-  // Empty / omitted uses the provider's cloud default.
+  // Origin for providers that support a custom API base (e.g. fastCRW,
+  // SearXNG, TinyFish). Empty / omitted uses the provider's cloud default
+  // when one exists. SearXNG has no cloud default and requires a user-supplied
+  // URL.
   apiBase: z.string().optional(),
 });
 
@@ -91,7 +99,8 @@ const WebFetchServiceSchema = z.object({
   // `firecrawl`) scrape via their hosted API and reuse the same stored key as
   // their web-search counterpart.
   provider: z.enum(VALID_WEB_FETCH_PROVIDERS).default("default"),
-  // Origin for providers that support a custom API base (e.g. fastCRW).
+  // Origin for providers that support a custom API base (e.g. fastCRW,
+  // TinyFish).
   // Empty / omitted uses the provider's cloud default.
   apiBase: z.string().optional(),
 });

package/src/config/schemas/tools.ts

@@ -1,5 +1,7 @@
 import { z } from "zod";
 
+import { MCP_GLOBAL_MAX_TOOLS } from "./mcp.js";
+
 export const ToolsConfigSchema = z
   .object({
     exclude: z
@@ -8,6 +10,14 @@ export const ToolsConfigSchema = z
       .describe(
         "Tool names to suppress. Excluded tools are not sent to the LLM. Names match `ToolDefinition.name` exactly (e.g. `bash`, `mcp__server__tool`).",
       ),
+    mcpGlobalMaxTools: z
+      .number({ error: "tools.mcpGlobalMaxTools must be a number" })
+      .int("tools.mcpGlobalMaxTools must be an integer")
+      .min(1, "tools.mcpGlobalMaxTools must be >= 1")
+      .optional()
+      .describe(
+        `Override the code-owned cap on MCP tools registered across every server. Omit to use the shipped default of ${MCP_GLOBAL_MAX_TOOLS}. Selection is a fair round-robin by server id.`,
+      ),
   })
   .describe("Tool visibility configuration");
 

package/src/config/session-groups-gate.ts

@@ -0,0 +1,21 @@
+import { isAssistantFeatureFlagEnabled } from "./assistant-feature-flags.js";
+
+export const SESSION_GROUPS_FLAG_KEY = "session-groups";
+
+let recoveryHealthy = true;
+
+/** Recovery is a process prerequisite, independent of rollout targeting. */
+export function setModeSessionRecoveryHealthy(healthy: boolean): void {
+  recoveryHealthy = healthy;
+}
+
+export function isModeSessionRecoveryHealthy(): boolean {
+  return recoveryHealthy;
+}
+
+/** Whether this assistant may admit new transcript mode-session tracking. */
+export function isSessionGroupsEnabled(): boolean {
+  return (
+    recoveryHealthy && isAssistantFeatureFlagEnabled(SESSION_GROUPS_FLAG_KEY)
+  );
+}

package/src/config/skills.ts

@@ -225,10 +225,6 @@ export interface SkillToolManifestMeta {
 
 // ─── Helpers ─────────────────────────────────────────────────────────────────
 
-function getSkillsDir(): string {
-  return getWorkspaceSkillsDir();
-}
-
 export function getBundledSkillsDir(): string {
   const dir = import.meta.dir;
 
@@ -1114,7 +1110,7 @@ export function loadSkillCatalog(
   }
 
   // Load managed (user) skills, which take precedence over bundled skills with the same ID
-  const skillsDir = getSkillsDir();
+  const skillsDir = getWorkspaceSkillsDir();
   const directories = discoverSkillDirectories(skillsDir);
 
   for (const directory of directories) {
@@ -1354,7 +1350,7 @@ function loadSkillDefinition(skill: SkillSummary): SkillLookupResult {
   } else {
     loaded = readSkillFromDirectory(
       skill.directoryPath,
-      getSkillsDir(),
+      getWorkspaceSkillsDir(),
       skill.source,
     );
   }