@vellumai/assistant 0.3.4 → 0.3.6

package/src/__tests__/contradiction-checker.test.ts

@@ -15,22 +15,37 @@ const classifyRelationshipMock = mock(async () => {
   return {
     content: [
       {
-        type: 'tool_use',
+        type: 'tool_use' as const,
+        id: 'test-tool-use-id',
+        name: 'classify_relationship',
         input: {
           relationship: nextRelationship,
           explanation: nextExplanation,
         },
       },
     ],
+    model: 'claude-haiku-4-5-20251001',
+    stopReason: 'tool_use',
+    usage: { inputTokens: 0, outputTokens: 0 },
   };
 });
 
-mock.module('@anthropic-ai/sdk', () => ({
-  default: class MockAnthropic {
-    messages = {
-      create: classifyRelationshipMock,
+mock.module('../providers/provider-send-message.js', () => ({
+  getConfiguredProvider: () => ({
+    sendMessage: classifyRelationshipMock,
+  }),
+  createTimeout: (ms: number) => {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), ms);
+    return {
+      signal: controller.signal,
+      cleanup: () => clearTimeout(timer),
     };
   },
+  extractToolUse: (response: { content: Array<{ type: string }> }) => {
+    return response.content.find((b: { type: string }) => b.type === 'tool_use');
+  },
+  userMessage: (text: string) => ({ role: 'user', content: [{ type: 'text', text }] }),
 }));
 
 mock.module('../util/platform.js', () => ({

package/src/__tests__/credential-security-invariants.test.ts

@@ -180,7 +180,10 @@ describe('Invariant 2: no generic plaintext secret read API', () => {
       'tools/credentials/broker.ts',   // brokered credential access
       'tools/network/web-search.ts',   // web search API key lookup
       'daemon/handlers.ts',            // Vercel API token + integration OAuth
-      'daemon/handlers/config.ts',     // Vercel API token + integration OAuth (split handler)
+      'daemon/handlers/config-integrations.ts', // Vercel API token + Twitter integration OAuth
+      'daemon/handlers/config-telegram.ts',     // Telegram bot token management
+      'daemon/handlers/config-twilio.ts',       // Twilio credential management
+      'daemon/handlers/config-ingress.ts',      // Ingress config (reads Twilio credentials for webhook sync)
       'security/token-manager.ts',     // OAuth token refresh flow
       'email/providers/index.ts',      // email provider API key lookup
       'tools/network/script-proxy/session-manager.ts', // proxy credential injection at runtime
@@ -197,6 +200,8 @@ describe('Invariant 2: no generic plaintext secret read API', () => {
       'calls/elevenlabs-config.ts',      // ElevenLabs credential lookup
       'cli/config-commands.ts',          // CLI config management
       'messaging/providers/telegram-bot/adapter.ts', // Telegram bot token lookup for connectivity check
+      'messaging/providers/sms/adapter.ts', // Twilio credential lookup for SMS connectivity check
+      'runtime/channel-readiness-service.ts', // channel readiness probes for SMS/Telegram connectivity
     ]);
 
     const thisDir = dirname(fileURLToPath(import.meta.url));
@@ -312,7 +317,7 @@ describe('Invariant 3: secrets never logged in plaintext', () => {
         const logCallPattern = /log\.\w+\(\{([^}]*)}/g;
         const loggedFields: string[] = [];
         let match;
-        while ((match = logCallPattern.exec(prompterSrc)) !== null) {
+        while ((match = logCallPattern.exec(prompterSrc)) != null) {
           // Collect field names from the structured log object
           const fields = match[1].split(',').map(f => f.trim().split(':')[0].trim());
           loggedFields.push(...fields);

package/src/__tests__/daemon-lifecycle.test.ts

@@ -1,4 +1,4 @@
-import { afterEach, beforeEach, describe, expect, mock, test } from 'bun:test';
+import { beforeEach, describe, expect, mock, test } from 'bun:test';
 import type * as net from 'node:net';
 
 // ── Mocks ────────────────────────────────────────────────────────────
@@ -141,7 +141,7 @@ mock.module('../daemon/session.js', () => ({
 
 import { DaemonServer } from '../daemon/server.js';
 import { SessionEvictor, type EvictableSession } from '../daemon/session-evictor.js';
-import { createMessageParser, serialize, MAX_LINE_SIZE } from '../daemon/ipc-protocol.js';
+import { createMessageParser, serialize } from '../daemon/ipc-protocol.js';
 
 // ── Test Helpers ─────────────────────────────────────────────────────
 
@@ -165,7 +165,7 @@ function internals(server: DaemonServer): DaemonServerInternals {
 
 function createFakeSocket(overrides?: Partial<net.Socket>) {
   const writes: string[] = [];
-  const socket = {
+  const base: Record<string, unknown> = {
     destroyed: false,
     writable: true,
     remoteAddress: '127.0.0.1',
@@ -174,16 +174,17 @@ function createFakeSocket(overrides?: Partial<net.Socket>) {
       return true;
     },
     destroy(): void {
-      this.destroyed = true;
+      base.destroyed = true;
     },
     on(_event: string, _handler: (...args: unknown[]) => void): unknown {
-      return this;
+      return socket;
     },
     once(_event: string, _handler: (...args: unknown[]) => void): unknown {
-      return this;
+      return socket;
     },
     ...overrides,
-  } as unknown as net.Socket;
+  };
+  const socket = base as unknown as net.Socket;
   return { socket, writes };
 }
 
@@ -586,7 +587,7 @@ describe('IPC protocol', () => {
       const parser = createMessageParser();
       const messages = parser.feed('{"type":"ping"}\n');
       expect(messages).toHaveLength(1);
-      expect((messages[0] as Record<string, unknown>).type).toBe('ping');
+      expect((messages[0] as unknown as Record<string, unknown>).type).toBe('ping');
     });
 
     test('buffers partial messages until newline arrives', () => {
@@ -597,22 +598,22 @@ describe('IPC protocol', () => {
 
       const partial2 = parser.feed('"ping"}\n');
       expect(partial2).toHaveLength(1);
-      expect((partial2[0] as Record<string, unknown>).type).toBe('ping');
+      expect((partial2[0] as unknown as Record<string, unknown>).type).toBe('ping');
     });
 
     test('handles multiple messages in a single chunk', () => {
       const parser = createMessageParser();
       const messages = parser.feed('{"type":"ping"}\n{"type":"pong"}\n');
       expect(messages).toHaveLength(2);
-      expect((messages[0] as Record<string, unknown>).type).toBe('ping');
-      expect((messages[1] as Record<string, unknown>).type).toBe('pong');
+      expect((messages[0] as unknown as Record<string, unknown>).type).toBe('ping');
+      expect((messages[1] as unknown as Record<string, unknown>).type).toBe('pong');
     });
 
     test('skips malformed JSON lines gracefully', () => {
       const parser = createMessageParser();
       const messages = parser.feed('not json\n{"type":"valid"}\n');
       expect(messages).toHaveLength(1);
-      expect((messages[0] as Record<string, unknown>).type).toBe('valid');
+      expect((messages[0] as unknown as Record<string, unknown>).type).toBe('valid');
     });
 
     test('throws when line exceeds maxLineSize', () => {