npm - @vellumai/assistant - Versions diffs - 0.4.16 → 0.4.17 - Mend

@vellumai/assistant 0.4.16 → 0.4.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (58) hide show

package/Dockerfile +6 -6
package/README.md +1 -2
package/package.json +1 -1
package/src/__tests__/call-controller.test.ts +1074 -751
package/src/__tests__/call-routes-http.test.ts +329 -279
package/src/__tests__/channel-approval-routes.test.ts +0 -11
package/src/__tests__/channel-approvals.test.ts +227 -182
package/src/__tests__/channel-guardian.test.ts +1 -0
package/src/__tests__/conversation-attention-telegram.test.ts +157 -114
package/src/__tests__/conversation-routes-guardian-reply.test.ts +164 -104
package/src/__tests__/conversation-routes.test.ts +71 -41
package/src/__tests__/daemon-server-session-init.test.ts +258 -191
package/src/__tests__/deterministic-verification-control-plane.test.ts +183 -134
package/src/__tests__/extract-email.test.ts +42 -0
package/src/__tests__/gateway-only-enforcement.test.ts +467 -368
package/src/__tests__/gateway-only-guard.test.ts +54 -55
package/src/__tests__/gmail-integration.test.ts +48 -46
package/src/__tests__/guardian-action-followup-executor.test.ts +215 -150
package/src/__tests__/guardian-outbound-http.test.ts +334 -208
package/src/__tests__/guardian-routing-invariants.test.ts +680 -613
package/src/__tests__/guardian-routing-state.test.ts +257 -209
package/src/__tests__/guardian-verification-voice-binding.test.ts +47 -40
package/src/__tests__/handle-user-message-secret-resume.test.ts +44 -21
package/src/__tests__/handlers-user-message-approval-consumption.test.ts +269 -195
package/src/__tests__/inbound-invite-redemption.test.ts +194 -151
package/src/__tests__/ingress-reconcile.test.ts +184 -142
package/src/__tests__/non-member-access-request.test.ts +291 -247
package/src/__tests__/notification-telegram-adapter.test.ts +60 -46
package/src/__tests__/recording-intent-handler.test.ts +422 -291
package/src/__tests__/runtime-attachment-metadata.test.ts +107 -69
package/src/__tests__/runtime-events-sse.test.ts +67 -50
package/src/__tests__/send-endpoint-busy.test.ts +314 -232
package/src/__tests__/session-approval-overrides.test.ts +93 -91
package/src/__tests__/sms-messaging-provider.test.ts +74 -47
package/src/__tests__/trusted-contact-approval-notifier.test.ts +339 -274
package/src/__tests__/trusted-contact-inline-approval-integration.test.ts +484 -372
package/src/__tests__/trusted-contact-lifecycle-notifications.test.ts +261 -239
package/src/__tests__/trusted-contact-multichannel.test.ts +179 -140
package/src/__tests__/twilio-config.test.ts +49 -41
package/src/__tests__/twilio-routes-elevenlabs.test.ts +189 -162
package/src/__tests__/twilio-routes.test.ts +389 -280
package/src/config/bundled-skills/chatgpt-import/tools/chatgpt-import.ts +29 -4
package/src/config/bundled-skills/messaging/SKILL.md +5 -4
package/src/config/bundled-skills/messaging/tools/messaging-reply.ts +11 -7
package/src/config/env.ts +39 -29
package/src/daemon/handlers/skills.ts +18 -10
package/src/daemon/ipc-contract/messages.ts +1 -0
package/src/daemon/ipc-contract/surfaces.ts +7 -1
package/src/daemon/session-agent-loop-handlers.ts +5 -0
package/src/daemon/session-agent-loop.ts +1 -1
package/src/daemon/session-process.ts +1 -1
package/src/daemon/session-surfaces.ts +42 -2
package/src/runtime/auth/token-service.ts +74 -47
package/src/sequence/reply-matcher.ts +10 -6
package/src/skills/frontmatter.ts +9 -6
package/src/tools/ui-surface/definitions.ts +2 -1
package/src/util/platform.ts +0 -12
package/docs/architecture/http-token-refresh.md +0 -274

package/Dockerfile CHANGED Viewed

@@ -22,9 +22,6 @@ COPY package.json bun.lock ./
 # Install dependencies
 RUN bun install --frozen-lockfile
-# Copy source
-COPY . .
 # Final stage
 FROM debian:trixie@sha256:3615a749858a1cba49b408fb49c37093db813321355a9ab7c1f9f4836341e9db AS runner
@@ -55,9 +52,6 @@ RUN groupadd --system --gid 1001 assistant && \
     useradd --system --uid 1001 --gid assistant --create-home --shell /bin/bash assistant && \
     echo "assistant ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
-# Copy from builder
-COPY --from=builder /app /app
 # Set up data directory
 RUN mkdir -p /home/assistant/.vellum /data && \
     chown -R assistant:assistant /home/assistant/.vellum /data && \
@@ -98,5 +92,11 @@ ENV VELLUM_DAEMON_SOCKET=/home/assistant/.vellum/vellum.sock
 ENV BASE_DATA_DIR=/data
 ENV IS_CONTAINERIZED=true
+# Copy from builder
+COPY --from=builder /app /app
+# Copy source
+COPY . .
 # Run the daemon + http server
 CMD ["bun", "run", "src/daemon/main.ts"]

package/README.md CHANGED Viewed

@@ -47,7 +47,6 @@ cp .env.example .env
 | `OLLAMA_API_KEY` | No | — | API key for authenticated Ollama deployments |
 | `OLLAMA_BASE_URL` | No | `http://127.0.0.1:11434/v1` | Ollama base URL |
 | `RUNTIME_HTTP_PORT` | No | — | Enable the HTTP server (required for gateway/web) |
-| `RUNTIME_GATEWAY_ORIGIN_SECRET` | No | — | **Deprecated.** Gateway origin is now proven by JWT principal type (`svc_gateway`), not a separate header. |
 | `VELLUM_DAEMON_SOCKET` | No | `~/.vellum/vellum.sock` | Override the daemon socket path |
 ## Update Bulletin
@@ -228,7 +227,7 @@ The runtime exposes a RESTful HTTP API for Twilio configuration, credential mana
 | POST | `/v1/integrations/twilio/sms/test` | Sends a test SMS and polls for delivery status |
 | POST | `/v1/integrations/twilio/sms/doctor` | Runs comprehensive SMS health diagnostics |
-All endpoints are bearer-authenticated via the runtime HTTP token. Skills and clients should call the gateway URL (default `http://localhost:7830`) rather than the runtime port directly, as the gateway proxies all `/v1/integrations/twilio/*` routes.
+All endpoints are JWT-authenticated (require a valid JWT with appropriate scopes). Skills and clients should call the gateway URL (default `http://localhost:7830`) rather than the runtime port directly, as the gateway proxies all `/v1/integrations/twilio/*` routes.
 ### Ingress Webhook Reconciliation

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.4.16",
+  "version": "0.4.17",
   "type": "module",
   "bin": {
     "vellum": "./src/index.ts"