@vellumai/assistant 0.3.14 → 0.3.15

package/Dockerfile

@@ -1,5 +1,5 @@
 # Use debian as base image
-FROM us-central1-docker.pkg.dev/code-executor-service/base-images/debian:bookworm@sha256:940221f8c2564efc4e7909caba7014dc8bcba7f05b7881eb2b557b4058c41269 AS builder
+FROM debian:bookworm AS builder
 
 WORKDIR /app
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.3.14",
+  "version": "0.3.15",
   "type": "module",
   "bin": {
     "vellum": "./src/index.ts"

package/src/__tests__/guardian-control-plane-policy.test.ts

@@ -1,7 +1,5 @@
-import { afterAll, afterEach, beforeEach, describe, expect, mock, test } from 'bun:test';
+import { afterAll, beforeEach, describe, expect, mock, test } from 'bun:test';
 
-import type { PolicyContext } from '../permissions/types.js';
-import { RiskLevel } from '../permissions/types.js';
 import type { ToolExecutionResult, ToolLifecycleEvent, ToolPermissionDeniedEvent } from '../tools/types.js';
 
 // ── Module mocks (must precede real imports) ─────────────────────────

package/src/__tests__/guardian-outbound-http.test.ts

@@ -92,20 +92,20 @@ globalThis.fetch = (async (input: string | URL | Request, init?: RequestInit) =>
 // Now import modules under test (after mocks are in place)
 // ---------------------------------------------------------------------------
 
+import { getDb, initializeDb, resetDb } from '../memory/db.js';
+import {
+  updateSessionDelivery,
+} from '../runtime/channel-guardian-service.js';
 import {
-  startOutbound,
-  resendOutbound,
   cancelOutbound,
+  resendOutbound,
+  startOutbound,
 } from '../runtime/guardian-outbound-actions.js';
 import {
-  handleStartOutbound,
-  handleResendOutbound,
   handleCancelOutbound,
+  handleResendOutbound,
+  handleStartOutbound,
 } from '../runtime/routes/integration-routes.js';
-import {
-  updateSessionDelivery,
-} from '../runtime/channel-guardian-service.js';
-import { getDb, initializeDb, resetDb } from '../memory/db.js';
 
 // Initialize the database (creates all tables)
 initializeDb();

package/src/__tests__/notification-routing-intent.test.ts

@@ -18,7 +18,6 @@ mock.module('../util/logger.js', () => ({
 }));
 
 import { enforceRoutingIntent } from '../notifications/decision-engine.js';
-import type { RoutingIntent } from '../notifications/signal.js';
 import type { NotificationChannel, NotificationDecision } from '../notifications/types.js';
 
 // -- Helpers -----------------------------------------------------------------

package/src/__tests__/recording-intent-fallback.test.ts

@@ -32,7 +32,6 @@ mock.module('../util/logger.js', () => ({
 import {
   classifyRecordingIntentFallback,
   containsRecordingKeywords,
-  type RecordingFallbackResult,
 } from '../daemon/recording-intent-fallback.js';
 
 beforeEach(() => {

package/src/__tests__/recording-intent-handler.test.ts

@@ -83,6 +83,7 @@ let mockIntentResult: RecordingIntentResult = { kind: 'none' };
 // Capture real function references BEFORE mock.module replaces the module.
 // require() at this point returns the real module since mock.module has not
 // been called yet for this specifier.
+// eslint-disable-next-line @typescript-eslint/no-require-imports
 const _realRecordingIntentMod = require('../daemon/recording-intent.js');
 const _realResolveRecordingIntent = _realRecordingIntentMod.resolveRecordingIntent;
 const _realStripDynamicNames = _realRecordingIntentMod.stripDynamicNames;
@@ -125,6 +126,7 @@ let executorCalled = false;
 
 let _realExecuteRecordingIntent: ((...args: any[]) => any) | null = null;
 try {
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
   const _mod = require('../daemon/recording-executor.js');
   _realExecuteRecordingIntent = _mod.executeRecordingIntent;
 } catch {
@@ -152,7 +154,7 @@ mock.module('../daemon/recording-executor.js', () => ({
 // handlers/recording.js, it gets the real behavior.
 
 let recordingStartCalled = false;
-let recordingStopCalled = false;
+let _recordingStopCalled = false;
 let recordingRestartCalled = false;
 let recordingPauseCalled = false;
 let recordingResumeCalled = false;
@@ -167,6 +169,7 @@ let _realRecordingHandlers: any = {};
 let _realResetRecordingState: ((...args: any[]) => any) | null = null;
 
 try {
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
   const _mod = require('../daemon/handlers/recording.js');
   _realHandleRecordingStart = _mod.handleRecordingStart;
   _realHandleRecordingStop = _mod.handleRecordingStop;
@@ -190,7 +193,7 @@ mock.module('../daemon/handlers/recording.js', () => ({
   },
   handleRecordingStop: (...args: any[]) => {
     if ((globalThis as any).__riHandlerUseMockIntent) {
-      recordingStopCalled = true;
+      _recordingStopCalled = true;
       return 'mock-recording-id';
     }
     return _realHandleRecordingStop?.(...args);
@@ -420,7 +423,7 @@ function resetMockState(): void {
   mockExecuteResult = { handled: false };
   mockAssistantName = null;
   recordingStartCalled = false;
-  recordingStopCalled = false;
+  _recordingStopCalled = false;
   recordingRestartCalled = false;
   recordingPauseCalled = false;
   recordingResumeCalled = false;

package/src/__tests__/recording-intent.test.ts

@@ -1,7 +1,7 @@
-import { describe, test, expect, mock, beforeEach } from 'bun:test';
+import { beforeEach,describe, expect, mock, test } from 'bun:test';
+
 import {
   resolveRecordingIntent,
-  type RecordingIntentResult,
 } from '../daemon/recording-intent.js';
 
 // ─── resolveRecordingIntent ─────────────────────────────────────────────────

package/src/__tests__/recording-state-machine.test.ts

@@ -1,7 +1,7 @@
-/* eslint-disable @typescript-eslint/no-explicit-any */
-import { describe, test, expect, beforeEach, mock } from 'bun:test';
 import * as net from 'node:net';
 
+import { beforeEach, describe, expect, mock,test } from 'bun:test';
+
 // ─── Mocks (must be before any imports that depend on them) ─────────────────
 
 const noop = () => {};
@@ -66,8 +66,8 @@ mock.module('../memory/attachments-store.js', () => ({
 }));
 
 // Mock node:fs
-mock.module('node:fs', () => {
-  const realFs = require('fs');
+mock.module('node:fs', async () => {
+  const realFs = await import('fs');
   return {
     ...realFs,
     existsSync: (p: string) => {
@@ -89,19 +89,19 @@ mock.module('../daemon/video-thumbnail.js', () => ({
 // ─── Imports (after mocks) ──────────────────────────────────────────────────
 
 import {
-  handleRecordingStart,
-  handleRecordingStop,
-  handleRecordingRestart,
+  __resetRecordingState,
+  getActiveRestartToken,
   handleRecordingPause,
+  handleRecordingRestart,
   handleRecordingResume,
+  handleRecordingStart,
+  handleRecordingStop,
   isRecordingIdle,
-  getActiveRestartToken,
   recordingHandlers,
-  __resetRecordingState,
 } from '../daemon/handlers/recording.js';
-import { executeRecordingIntent } from '../daemon/recording-executor.js';
 import type { HandlerContext } from '../daemon/handlers/shared.js';
 import type { RecordingStatus } from '../daemon/ipc-contract/computer-use.js';
+import { executeRecordingIntent } from '../daemon/recording-executor.js';
 import { DebouncerMap } from '../util/debounce.js';
 
 // ─── Test helpers ───────────────────────────────────────────────────────────
@@ -996,7 +996,7 @@ describe('deferred restart prevents race condition', () => {
 
   test('stop-ack timeout cleans up deferred restart state', () => {
     // This test uses a real timer via bun's jest-compatible API
-    const { ctx, sent, fakeSocket } = createCtx();
+    const { ctx, fakeSocket } = createCtx();
     const conversationId = 'conv-deferred-timeout';
     ctx.socketToSession.set(fakeSocket, conversationId);
 

package/src/daemon/handlers/config-channels.ts

@@ -1,22 +1,22 @@
 import * as net from 'node:net';
 
+import type { ChannelId } from '../../channels/types.js';
 import * as externalConversationStore from '../../memory/external-conversation-store.js';
 import {
   createVerificationChallenge,
+  findActiveSession,
   getGuardianBinding,
   getPendingChallenge,
   revokeBinding as revokeGuardianBinding,
   revokePendingChallenges,
-  findActiveSession,
 } from '../../runtime/channel-guardian-service.js';
 import { type ChannelReadinessService, createReadinessService } from '../../runtime/channel-readiness-service.js';
 import {
-  startOutbound,
-  resendOutbound,
   cancelOutbound,
+  resendOutbound,
+  startOutbound,
 } from '../../runtime/guardian-outbound-actions.js';
 import { normalizeAssistantId } from '../../util/platform.js';
-import type { ChannelId } from '../../channels/types.js';
 import type {
   ChannelReadinessRequest,
   GuardianVerificationRequest,
@@ -34,10 +34,10 @@ export type GuardianVerificationResult = Omit<GuardianVerificationResponse, 'typ
 // ---------------------------------------------------------------------------
 
 export {
+  DESTINATION_RATE_WINDOW_MS,
+  MAX_SENDS_PER_DESTINATION_WINDOW,
   MAX_SENDS_PER_SESSION,
   RESEND_COOLDOWN_MS,
-  MAX_SENDS_PER_DESTINATION_WINDOW,
-  DESTINATION_RATE_WINDOW_MS,
 } from '../../runtime/guardian-outbound-actions.js';
 
 // ---------------------------------------------------------------------------

package/src/daemon/handlers/index.ts

@@ -1,6 +1,6 @@
 import * as net from 'node:net';
 
-import { recordConversationSeenSignal, type Confidence, type SignalType } from '../../memory/conversation-attention-store.js';
+import { type Confidence, recordConversationSeenSignal, type SignalType } from '../../memory/conversation-attention-store.js';
 import { updateDeliveryClientOutcome } from '../../notifications/deliveries-store.js';
 import type { ClientMessage } from '../ipc-protocol.js';
 import { handleRideShotgunStart, handleRideShotgunStop } from '../ride-shotgun-handler.js';

package/src/daemon/handlers/misc.ts

@@ -22,8 +22,8 @@ import type {
   TaskSubmit,
 } from '../ipc-protocol.js';
 import { executeRecordingIntent } from '../recording-executor.js';
-import { classifyRecordingIntentFallback, containsRecordingKeywords } from '../recording-intent-fallback.js';
 import { resolveRecordingIntent } from '../recording-intent.js';
+import { classifyRecordingIntentFallback, containsRecordingKeywords } from '../recording-intent-fallback.js';
 import { buildSessionErrorMessage,classifySessionError } from '../session-error.js';
 import { handleCuSessionCreate } from './computer-use.js';
 import { handleRecordingPause, handleRecordingRestart, handleRecordingResume, handleRecordingStart, handleRecordingStop, isRecordingIdle } from './recording.js';

package/src/daemon/handlers/sessions.ts

@@ -36,8 +36,8 @@ import type {
 } from '../ipc-protocol.js';
 import { normalizeThreadType } from '../ipc-protocol.js';
 import { executeRecordingIntent } from '../recording-executor.js';
-import { classifyRecordingIntentFallback, containsRecordingKeywords } from '../recording-intent-fallback.js';
 import { resolveRecordingIntent } from '../recording-intent.js';
+import { classifyRecordingIntentFallback, containsRecordingKeywords } from '../recording-intent-fallback.js';
 import { buildSessionErrorMessage,classifySessionError } from '../session-error.js';
 import { generateVideoThumbnail } from '../video-thumbnail.js';
 import { handleRecordingPause, handleRecordingRestart, handleRecordingResume, handleRecordingStart, handleRecordingStop } from './recording.js';
@@ -479,12 +479,12 @@ export function handleSessionList(socket: net.Socket, ctx: HandlerContext, offse
       const originInterface = parseInterfaceId(c.originInterface);
       const attn = attentionStates.get(c.id);
       const assistantAttention = attn ? {
-        hasUnseenLatestAssistantMessage: attn.latestAssistantMessageAt !== null &&
-          (attn.lastSeenAssistantMessageAt === null || attn.lastSeenAssistantMessageAt < attn.latestAssistantMessageAt),
-        ...(attn.latestAssistantMessageAt !== null ? { latestAssistantMessageAt: attn.latestAssistantMessageAt } : {}),
-        ...(attn.lastSeenAssistantMessageAt !== null ? { lastSeenAssistantMessageAt: attn.lastSeenAssistantMessageAt } : {}),
-        ...(attn.lastSeenConfidence !== null ? { lastSeenConfidence: attn.lastSeenConfidence } : {}),
-        ...(attn.lastSeenSignalType !== null ? { lastSeenSignalType: attn.lastSeenSignalType } : {}),
+        hasUnseenLatestAssistantMessage: attn.latestAssistantMessageAt != null &&
+          (attn.lastSeenAssistantMessageAt == null || attn.lastSeenAssistantMessageAt < attn.latestAssistantMessageAt),
+        ...(attn.latestAssistantMessageAt != null ? { latestAssistantMessageAt: attn.latestAssistantMessageAt } : {}),
+        ...(attn.lastSeenAssistantMessageAt != null ? { lastSeenAssistantMessageAt: attn.lastSeenAssistantMessageAt } : {}),
+        ...(attn.lastSeenConfidence != null ? { lastSeenConfidence: attn.lastSeenConfidence } : {}),
+        ...(attn.lastSeenSignalType != null ? { lastSeenSignalType: attn.lastSeenSignalType } : {}),
       } : undefined;
       return {
         id: c.id,

package/src/daemon/recording-executor.ts

@@ -5,7 +5,6 @@
 
 import type * as net from 'node:net';
 
-import type { HandlerContext } from './handlers/shared.js';
 import {
   handleRecordingPause,
   handleRecordingRestart,
@@ -14,6 +13,7 @@ import {
   handleRecordingStop,
   isRecordingIdle,
 } from './handlers/recording.js';
+import type { HandlerContext } from './handlers/shared.js';
 import type { RecordingIntentResult } from './recording-intent.js';
 
 export interface RecordingExecutionContext {

package/src/daemon/recording-intent.ts

@@ -383,7 +383,7 @@ function isInterrogative(text: string, dynamicNames?: string[]): boolean {
  * If `dynamicNames` are provided, they are stripped from the beginning of the
  * text before classification (e.g., "Nova, record my screen" -> "record my screen").
  */
-function classifyRecordingIntent(
+function _classifyRecordingIntent(
   taskText: string,
   dynamicNames?: string[],
 ): RecordingIntentClass {

package/src/daemon/session-tool-setup.ts

@@ -25,8 +25,8 @@ import { requestComputerControlTool } from '../tools/computer-use/request-comput
 import type { ProxyApprovalCallback, ProxyApprovalRequest } from '../tools/network/script-proxy/index.js';
 import { getAllToolDefinitions } from '../tools/registry.js';
 import { allUiSurfaceTools } from '../tools/ui-surface/definitions.js';
-import { projectSkillTools, type SkillProjectionCache } from './session-skill-tools.js';
 import type { GuardianRuntimeContext } from './session-runtime-assembly.js';
+import { projectSkillTools, type SkillProjectionCache } from './session-skill-tools.js';
 import type { SurfaceSessionContext } from './session-surfaces.js';
 import {
   surfaceProxyResolver,

package/src/memory/conversation-attention-store.ts

@@ -13,7 +13,7 @@ import { getLogger } from '../util/logger.js';
 import { getDb } from './db.js';
 import { conversationAssistantAttentionState, conversationAttentionEvents, conversations, messages } from './schema.js';
 
-const log = getLogger('conversation-attention-store');
+const _log = getLogger('conversation-attention-store');
 
 // ── Types ────────────────────────────────────────────────────────────
 
@@ -138,7 +138,7 @@ export function projectAssistantMessage(params: {
   }
 
   // Monotonic: only advance if the new message is strictly later
-  if (existing.latestAssistantMessageAt !== null && messageAt <= existing.latestAssistantMessageAt) {
+  if (existing.latestAssistantMessageAt != null && messageAt <= existing.latestAssistantMessageAt) {
     return;
   }
 
@@ -251,8 +251,8 @@ export function recordConversationSeenSignal(params: {
     // Only advance the seen cursor if there is a latest assistant message to mark as seen,
     // and the seen cursor hasn't already reached or passed it (monotonic invariant).
     const shouldAdvanceSeen =
-      state.latestAssistantMessageAt !== null &&
-      (state.lastSeenAssistantMessageAt === null ||
+      state.latestAssistantMessageAt != null &&
+      (state.lastSeenAssistantMessageAt == null ||
         state.latestAssistantMessageAt > state.lastSeenAssistantMessageAt);
 
     // Guard seen metadata monotonicity: only update lastSeen* metadata when the
@@ -260,7 +260,7 @@ export function recordConversationSeenSignal(params: {
     // Out-of-order delivery (e.g. delayed channel callbacks) must not regress
     // the projected channel/source/confidence metadata.
     const isNewerSignal =
-      state.lastSeenEventAt === null || eventObservedAt >= state.lastSeenEventAt;
+      state.lastSeenEventAt == null || eventObservedAt >= state.lastSeenEventAt;
 
     const updates: Record<string, unknown> = {
       updatedAt: now,

package/src/runtime/guardian-outbound-actions.ts

@@ -7,8 +7,16 @@
  * IPC handler (config-channels.ts) and the HTTP route layer (integration-routes.ts).
  */
 
-import { randomBytes, createHash } from 'node:crypto';
+import { createHash,randomBytes } from 'node:crypto';
 
+import { startGuardianVerificationCall } from '../calls/call-domain.js';
+import type { ChannelId } from '../channels/types.js';
+import { getGatewayInternalBaseUrl } from '../config/env.js';
+import { sendMessage as sendSms } from '../messaging/providers/sms/client.js';
+import { getCredentialMetadata } from '../tools/credentials/metadata-store.js';
+import { getLogger } from '../util/logger.js';
+import { normalizePhoneNumber } from '../util/phone.js';
+import { normalizeAssistantId, readHttpToken } from '../util/platform.js';
 import {
   countRecentSendsToDestination,
   createOutboundSession,
@@ -22,14 +30,6 @@ import {
   composeVerificationTelegram,
   GUARDIAN_VERIFY_TEMPLATE_KEYS,
 } from './guardian-verification-templates.js';
-import { startGuardianVerificationCall } from '../calls/call-domain.js';
-import { sendMessage as sendSms } from '../messaging/providers/sms/client.js';
-import { getGatewayInternalBaseUrl } from '../config/env.js';
-import { getCredentialMetadata } from '../tools/credentials/metadata-store.js';
-import { normalizePhoneNumber } from '../util/phone.js';
-import { normalizeAssistantId, readHttpToken } from '../util/platform.js';
-import { getLogger } from '../util/logger.js';
-import type { ChannelId } from '../channels/types.js';
 
 const log = getLogger('guardian-outbound-actions');
 

package/src/runtime/http-server.ts

@@ -29,7 +29,7 @@ import {
 } from '../config/env.js';
 import type { ServerMessage } from '../daemon/ipc-contract.js';
 import { PairingStore } from '../daemon/pairing-store.js';
-import { type Confidence, type SignalType, getAttentionStateByConversationIds, recordConversationSeenSignal } from '../memory/conversation-attention-store.js';
+import { type Confidence, getAttentionStateByConversationIds, recordConversationSeenSignal,type SignalType } from '../memory/conversation-attention-store.js';
 import * as conversationStore from '../memory/conversation-store.js';
 import * as externalConversationStore from '../memory/external-conversation-store.js';
 import { consumeCallback, consumeCallbackError } from '../security/oauth-callback-registry.js';
@@ -549,12 +549,12 @@ export class RuntimeHttpServer {
             const originChannel = parseChannelId(c.originChannel);
             const attn = attentionStates.get(c.id);
             const assistantAttention = attn ? {
-              hasUnseenLatestAssistantMessage: attn.latestAssistantMessageAt !== null &&
-                (attn.lastSeenAssistantMessageAt === null || attn.lastSeenAssistantMessageAt < attn.latestAssistantMessageAt),
-              ...(attn.latestAssistantMessageAt !== null ? { latestAssistantMessageAt: attn.latestAssistantMessageAt } : {}),
-              ...(attn.lastSeenAssistantMessageAt !== null ? { lastSeenAssistantMessageAt: attn.lastSeenAssistantMessageAt } : {}),
-              ...(attn.lastSeenConfidence !== null ? { lastSeenConfidence: attn.lastSeenConfidence } : {}),
-              ...(attn.lastSeenSignalType !== null ? { lastSeenSignalType: attn.lastSeenSignalType } : {}),
+              hasUnseenLatestAssistantMessage: attn.latestAssistantMessageAt != null &&
+                (attn.lastSeenAssistantMessageAt == null || attn.lastSeenAssistantMessageAt < attn.latestAssistantMessageAt),
+              ...(attn.latestAssistantMessageAt != null ? { latestAssistantMessageAt: attn.latestAssistantMessageAt } : {}),
+              ...(attn.lastSeenAssistantMessageAt != null ? { lastSeenAssistantMessageAt: attn.lastSeenAssistantMessageAt } : {}),
+              ...(attn.lastSeenConfidence != null ? { lastSeenConfidence: attn.lastSeenConfidence } : {}),
+              ...(attn.lastSeenSignalType != null ? { lastSeenSignalType: attn.lastSeenSignalType } : {}),
             } : undefined;
             return {
               id: c.id,

package/src/runtime/routes/conversation-attention-routes.ts

@@ -61,9 +61,9 @@ export function handleListConversationAttention(url: URL): Response {
   const results = pageStates.map((attn) => {
     const conv = conversationMap.get(attn.conversationId);
     const convSource = conv?.source ?? 'user';
-    const hasUnseen = attn.latestAssistantMessageAt !== null &&
-      (attn.lastSeenAssistantMessageAt === null || attn.lastSeenAssistantMessageAt < attn.latestAssistantMessageAt);
-    const state: 'seen' | 'unseen' | 'no_assistant_message' = attn.latestAssistantMessageAt === null
+    const hasUnseen = attn.latestAssistantMessageAt != null &&
+      (attn.lastSeenAssistantMessageAt == null || attn.lastSeenAssistantMessageAt < attn.latestAssistantMessageAt);
+    const state: 'seen' | 'unseen' | 'no_assistant_message' = attn.latestAssistantMessageAt == null
       ? 'no_assistant_message'
       : hasUnseen ? 'unseen' : 'seen';
 

package/src/runtime/routes/integration-routes.ts

@@ -21,11 +21,6 @@ import {
   createGuardianChallenge,
   getGuardianStatus,
 } from '../../daemon/handlers/config-channels.js';
-import {
-  startOutbound,
-  resendOutbound,
-  cancelOutbound,
-} from '../guardian-outbound-actions.js';
 import {
   clearTelegramConfig,
   getTelegramConfig,
@@ -33,6 +28,11 @@ import {
   setTelegramConfig,
   setupTelegram,
 } from '../../daemon/handlers/config-telegram.js';
+import {
+  cancelOutbound,
+  resendOutbound,
+  startOutbound,
+} from '../guardian-outbound-actions.js';
 
 /**
  * GET /v1/integrations/telegram/config

package/src/schedule/scheduler.ts

@@ -2,7 +2,7 @@ import { createConversation } from '../memory/conversation-store.js';
 import { GENERATING_TITLE, queueGenerateConversationTitle } from '../memory/conversation-title-service.js';
 import { invalidateAssistantInferredItemsForConversation } from '../memory/task-memory-cleanup.js';
 import { runSequencesOnce } from '../sequence/engine.js';
-import { claimDueReminders, completeReminder, failReminder, setReminderConversationId, type RoutingIntent } from '../tools/reminder/reminder-store.js';
+import { claimDueReminders, completeReminder, failReminder, type RoutingIntent,setReminderConversationId } from '../tools/reminder/reminder-store.js';
 import { getLogger } from '../util/logger.js';
 import { runWatchersOnce, type WatcherEscalator,type WatcherNotifier } from '../watcher/engine.js';
 import { hasSetConstructs } from './recurrence-engine.js';

package/src/tools/executor.ts

@@ -15,8 +15,8 @@ import { PermissionDeniedError,ToolError } from '../util/errors.js';
 import { pathExists, safeStatSync } from '../util/fs.js';
 import { getLogger } from '../util/logger.js';
 import { resolveExecutionTarget } from './execution-target.js';
-import { enforceGuardianOnlyPolicy } from './guardian-control-plane-policy.js';
 import { executeWithTimeout,safeTimeoutMs } from './execution-timeout.js';
+import { enforceGuardianOnlyPolicy } from './guardian-control-plane-policy.js';
 import { buildPolicyContext } from './policy-context.js';
 import { getAllTools,getTool } from './registry.js';
 import { applyEdit } from './shared/filesystem/edit-engine.js';