@vellumai/assistant 0.3.5 → 0.3.7

package/src/daemon/ipc-contract/messages.ts

@@ -0,0 +1,211 @@
+// User/assistant messages, tool results, confirmations, secrets, errors, and generation lifecycle.
+
+import type { ChannelId } from '../../channels/types.js';
+import type { UserMessageAttachment } from './shared.js';
+
+// === Client → Server ===
+
+export interface UserMessage {
+  type: 'user_message';
+  sessionId: string;
+  content?: string;
+  attachments?: UserMessageAttachment[];
+  activeSurfaceId?: string;
+  /** The page currently displayed in the WebView (e.g. "settings.html"). */
+  currentPage?: string;
+  /** When true, skip the secret-ingress check. Set by the client when the user clicks "Send Anyway". */
+  bypassSecretCheck?: boolean;
+  /** Originating channel identifier (e.g. 'macos', 'ios'). Defaults to 'macos' when absent. */
+  channel?: ChannelId;
+}
+
+export interface ConfirmationResponse {
+  type: 'confirmation_response';
+  requestId: string;
+  decision: 'allow' | 'always_allow' | 'always_allow_high_risk' | 'deny' | 'always_deny';
+  selectedPattern?: string;
+  selectedScope?: string;
+}
+
+export interface SecretResponse {
+  type: 'secret_response';
+  requestId: string;
+  value?: string;    // undefined = user cancelled
+  /** How the secret should be delivered: 'store' persists to keychain (default), 'transient_send' for one-time use without persisting. */
+  delivery?: 'store' | 'transient_send';
+}
+
+export interface SuggestionRequest {
+  type: 'suggestion_request';
+  sessionId: string;
+  requestId: string;
+}
+
+// === Server → Client ===
+
+export interface UserMessageEcho {
+  type: 'user_message_echo';
+  text: string;
+  sessionId?: string;
+}
+
+export interface AssistantTextDelta {
+  type: 'assistant_text_delta';
+  text: string;
+  sessionId?: string;
+}
+
+export interface AssistantThinkingDelta {
+  type: 'assistant_thinking_delta';
+  thinking: string;
+}
+
+export interface ToolUseStart {
+  type: 'tool_use_start';
+  toolName: string;
+  input: Record<string, unknown>;
+  sessionId?: string;
+}
+
+export interface ToolOutputChunk {
+  type: 'tool_output_chunk';
+  chunk: string;
+  sessionId?: string;
+  subType?: 'tool_start' | 'tool_complete' | 'status';
+  subToolName?: string;
+  subToolInput?: string;
+  subToolIsError?: boolean;
+  subToolId?: string;
+}
+
+export interface ToolInputDelta {
+  type: 'tool_input_delta';
+  toolName: string;
+  content: string;
+  sessionId?: string;
+}
+
+export interface ToolResult {
+  type: 'tool_result';
+  toolName: string;
+  result: string;
+  isError?: boolean;
+  diff?: { filePath: string; oldContent: string; newContent: string; isNewFile: boolean };
+  status?: string;
+  sessionId?: string;
+  /** Base64-encoded image data extracted from contentBlocks (e.g. browser_screenshot). */
+  imageData?: string;
+}
+
+export interface ConfirmationRequest {
+  type: 'confirmation_request';
+  requestId: string;
+  toolName: string;
+  input: Record<string, unknown>;
+  riskLevel: string;
+  executionTarget?: 'sandbox' | 'host';
+  allowlistOptions: Array<{ label: string; description: string; pattern: string }>;
+  scopeOptions: Array<{ label: string; scope: string }>;
+  diff?: { filePath: string; oldContent: string; newContent: string; isNewFile: boolean };
+  sandboxed?: boolean;
+  sessionId?: string;
+  /** When false, the client should hide "always allow" / trust-rule persistence affordances. */
+  persistentDecisionsAllowed?: boolean;
+}
+
+export interface SecretRequest {
+  type: 'secret_request';
+  requestId: string;
+  service: string;
+  field: string;
+  label: string;
+  description?: string;
+  placeholder?: string;
+  sessionId?: string;
+  /** Intended purpose of the credential (displayed to user). */
+  purpose?: string;
+  /** Tools allowed to use this credential. */
+  allowedTools?: string[];
+  /** Domains where this credential may be used. */
+  allowedDomains?: string[];
+  /** Whether one-time send override is available. */
+  allowOneTimeSend?: boolean;
+}
+
+export interface MessageComplete {
+  type: 'message_complete';
+  sessionId?: string;
+  attachments?: UserMessageAttachment[];
+}
+
+export interface ErrorMessage {
+  type: 'error';
+  message: string;
+  /** Categorizes the error so the client can offer contextual actions (e.g. "Send Anyway" for secret_blocked). */
+  category?: string;
+}
+
+export interface SecretDetected {
+  type: 'secret_detected';
+  toolName: string;
+  matches: Array<{ type: string; redactedValue: string }>;
+  action: 'redact' | 'warn' | 'block' | 'prompt';
+}
+
+export interface MessageQueued {
+  type: 'message_queued';
+  sessionId: string;
+  requestId: string;
+  position: number;
+}
+
+export interface MessageDequeued {
+  type: 'message_dequeued';
+  sessionId: string;
+  requestId: string;
+}
+
+export interface MessageQueuedDeleted {
+  type: 'message_queued_deleted';
+  sessionId: string;
+  requestId: string;
+}
+
+export interface SuggestionResponse {
+  type: 'suggestion_response';
+  requestId: string;
+  suggestion: string | null;
+  source: 'llm' | 'none';
+}
+
+export type TraceEventKind =
+  | 'request_received'
+  | 'request_queued'
+  | 'request_dequeued'
+  | 'llm_call_started'
+  | 'llm_call_finished'
+  | 'assistant_message'
+  | 'tool_started'
+  | 'tool_permission_requested'
+  | 'tool_permission_decided'
+  | 'tool_finished'
+  | 'tool_failed'
+  | 'secret_detected'
+  | 'generation_handoff'
+  | 'message_complete'
+  | 'generation_cancelled'
+  | 'request_error'
+  | 'tool_profiling_summary';
+
+export interface TraceEvent {
+  type: 'trace_event';
+  eventId: string;
+  sessionId: string;
+  requestId?: string;
+  timestampMs: number;
+  sequence: number;
+  kind: TraceEventKind;
+  status?: 'info' | 'success' | 'warning' | 'error';
+  summary: string;
+  attributes?: Record<string, string | number | boolean | null>;
+}

package/src/daemon/ipc-contract/pairing.ts

@@ -0,0 +1,45 @@
+// Pairing approval and approved-device management types.
+
+// === Client → Server ===
+
+export interface PairingApprovalResponse {
+  type: 'pairing_approval_response';
+  pairingRequestId: string;
+  decision: 'approve_once' | 'always_allow' | 'deny';
+}
+
+export interface ApprovedDevicesList {
+  type: 'approved_devices_list';
+}
+
+export interface ApprovedDeviceRemove {
+  type: 'approved_device_remove';
+  hashedDeviceId: string;
+}
+
+export interface ApprovedDevicesClear {
+  type: 'approved_devices_clear';
+}
+
+// === Server → Client ===
+
+export interface PairingApprovalRequest {
+  type: 'pairing_approval_request';
+  pairingRequestId: string;
+  deviceId: string;
+  deviceName: string;
+}
+
+export interface ApprovedDevicesListResponse {
+  type: 'approved_devices_list_response';
+  devices: Array<{
+    hashedDeviceId: string;
+    deviceName: string;
+    lastPairedAt: number;
+  }>;
+}
+
+export interface ApprovedDeviceRemoveResponse {
+  type: 'approved_device_remove_response';
+  success: boolean;
+}

package/src/daemon/ipc-contract/parental-control.ts

@@ -0,0 +1,95 @@
+// Parental control IPC types.
+//
+// The parental control system lets a parent or guardian lock the assistant
+// behind a 6-digit PIN and configure per-topic content restrictions and
+// per-category tool blocks. All mutating operations require the PIN when
+// one has been set.
+
+// === Shared data types ===
+
+/**
+ * Topics that can be individually blocked.
+ * All unlisted topics are allowed.
+ */
+export type ParentalContentTopic =
+  | 'violence'
+  | 'adult_content'
+  | 'political'
+  | 'gambling'
+  | 'drugs';
+
+/**
+ * Broad tool categories that can be disabled for age-appropriate use.
+ * When a category is blocked, individual tool invocations within that
+ * category are rejected before the permission pipeline runs.
+ */
+export type ParentalToolCategory =
+  | 'computer_use'
+  | 'network'
+  | 'shell'
+  | 'file_write';
+
+// === Client → Server ===
+
+/** Retrieve the current parental control settings and PIN status. */
+export interface ParentalControlGetRequest {
+  type: 'parental_control_get';
+}
+
+/** Verify a PIN attempt without changing any state. Useful to gate an unlock-settings flow before showing the full panel. */
+export interface ParentalControlVerifyPinRequest {
+  type: 'parental_control_verify_pin';
+  pin: string;
+}
+
+/** Set, change, or clear the parental control PIN. To set for the first time provide only new_pin. To change provide current_pin and new_pin. To clear provide current_pin and set clear:true. */
+export interface ParentalControlSetPinRequest {
+  type: 'parental_control_set_pin';
+  current_pin?: string;
+  new_pin?: string;
+  clear?: boolean;
+}
+
+/** Update parental control settings. Requires the PIN when parental mode is already enabled. */
+export interface ParentalControlUpdateRequest {
+  type: 'parental_control_update';
+  /** Current PIN — required when parental mode is already enabled. */
+  pin?: string;
+  /** Enable or disable parental control mode. */
+  enabled?: boolean;
+  /** Full replacement list of blocked content topics. */
+  content_restrictions?: ParentalContentTopic[];
+  /** Full replacement list of blocked tool categories. */
+  blocked_tool_categories?: ParentalToolCategory[];
+}
+
+// === Server → Client ===
+
+export interface ParentalControlGetResponse {
+  type: 'parental_control_get_response';
+  enabled: boolean;
+  has_pin: boolean;
+  content_restrictions: ParentalContentTopic[];
+  blocked_tool_categories: ParentalToolCategory[];
+}
+
+export interface ParentalControlVerifyPinResponse {
+  type: 'parental_control_verify_pin_response';
+  verified: boolean;
+}
+
+export interface ParentalControlSetPinResponse {
+  type: 'parental_control_set_pin_response';
+  success: boolean;
+  error?: string;
+}
+
+export interface ParentalControlUpdateResponse {
+  type: 'parental_control_update_response';
+  success: boolean;
+  error?: string;
+  enabled: boolean;
+  has_pin: boolean;
+  content_restrictions: ParentalContentTopic[];
+  blocked_tool_categories: ParentalToolCategory[];
+}

package/src/daemon/ipc-contract/schedules.ts

@@ -0,0 +1,97 @@
+// Schedule, reminder, watcher, and heartbeat types.
+
+// === Client → Server ===
+
+export interface SchedulesList {
+  type: 'schedules_list';
+}
+
+export interface RemindersList {
+  type: 'reminders_list';
+}
+
+export interface ReminderCancel {
+  type: 'reminder_cancel';
+  id: string;
+}
+
+export interface ScheduleToggle {
+  type: 'schedule_toggle';
+  id: string;
+  enabled: boolean;
+}
+
+export interface ScheduleRemove {
+  type: 'schedule_remove';
+  id: string;
+}
+
+export interface ScheduleRunNow {
+  type: 'schedule_run_now';
+  id: string;
+}
+
+// === Server → Client ===
+
+export interface SchedulesListResponse {
+  type: 'schedules_list_response';
+  schedules: Array<{
+    id: string;
+    name: string;
+    enabled: boolean;
+    syntax: string;
+    expression: string;
+    cronExpression: string;
+    timezone: string | null;
+    message: string;
+    nextRunAt: number;
+    lastRunAt: number | null;
+    lastStatus: string | null;
+    description: string;
+  }>;
+}
+
+export interface RemindersListResponse {
+  type: 'reminders_list_response';
+  reminders: Array<{
+    id: string;
+    label: string;
+    message: string;
+    fireAt: number;
+    mode: string;
+    status: string;
+    firedAt: number | null;
+    createdAt: number;
+  }>;
+}
+
+export interface ReminderFired {
+  type: 'reminder_fired';
+  reminderId: string;
+  label: string;
+  message: string;
+}
+
+export interface ScheduleComplete {
+  type: 'schedule_complete';
+  scheduleId: string;
+  name: string;
+}
+
+export interface WatcherNotification {
+  type: 'watcher_notification';
+  title: string;
+  body: string;
+}
+
+export interface WatcherEscalation {
+  type: 'watcher_escalation';
+  title: string;
+  body: string;
+}
+
+export interface AgentHeartbeatAlert {
+  type: 'agent_heartbeat_alert';
+  title: string;
+  body: string;
+}