@vellumai/assistant 0.4.16 → 0.4.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (58) hide show
  1. package/Dockerfile +6 -6
  2. package/README.md +1 -2
  3. package/package.json +1 -1
  4. package/src/__tests__/call-controller.test.ts +1074 -751
  5. package/src/__tests__/call-routes-http.test.ts +329 -279
  6. package/src/__tests__/channel-approval-routes.test.ts +0 -11
  7. package/src/__tests__/channel-approvals.test.ts +227 -182
  8. package/src/__tests__/channel-guardian.test.ts +1 -0
  9. package/src/__tests__/conversation-attention-telegram.test.ts +157 -114
  10. package/src/__tests__/conversation-routes-guardian-reply.test.ts +164 -104
  11. package/src/__tests__/conversation-routes.test.ts +71 -41
  12. package/src/__tests__/daemon-server-session-init.test.ts +258 -191
  13. package/src/__tests__/deterministic-verification-control-plane.test.ts +183 -134
  14. package/src/__tests__/extract-email.test.ts +42 -0
  15. package/src/__tests__/gateway-only-enforcement.test.ts +467 -368
  16. package/src/__tests__/gateway-only-guard.test.ts +54 -55
  17. package/src/__tests__/gmail-integration.test.ts +48 -46
  18. package/src/__tests__/guardian-action-followup-executor.test.ts +215 -150
  19. package/src/__tests__/guardian-outbound-http.test.ts +334 -208
  20. package/src/__tests__/guardian-routing-invariants.test.ts +680 -613
  21. package/src/__tests__/guardian-routing-state.test.ts +257 -209
  22. package/src/__tests__/guardian-verification-voice-binding.test.ts +47 -40
  23. package/src/__tests__/handle-user-message-secret-resume.test.ts +44 -21
  24. package/src/__tests__/handlers-user-message-approval-consumption.test.ts +269 -195
  25. package/src/__tests__/inbound-invite-redemption.test.ts +194 -151
  26. package/src/__tests__/ingress-reconcile.test.ts +184 -142
  27. package/src/__tests__/non-member-access-request.test.ts +291 -247
  28. package/src/__tests__/notification-telegram-adapter.test.ts +60 -46
  29. package/src/__tests__/recording-intent-handler.test.ts +422 -291
  30. package/src/__tests__/runtime-attachment-metadata.test.ts +107 -69
  31. package/src/__tests__/runtime-events-sse.test.ts +67 -50
  32. package/src/__tests__/send-endpoint-busy.test.ts +314 -232
  33. package/src/__tests__/session-approval-overrides.test.ts +93 -91
  34. package/src/__tests__/sms-messaging-provider.test.ts +74 -47
  35. package/src/__tests__/trusted-contact-approval-notifier.test.ts +339 -274
  36. package/src/__tests__/trusted-contact-inline-approval-integration.test.ts +484 -372
  37. package/src/__tests__/trusted-contact-lifecycle-notifications.test.ts +261 -239
  38. package/src/__tests__/trusted-contact-multichannel.test.ts +179 -140
  39. package/src/__tests__/twilio-config.test.ts +49 -41
  40. package/src/__tests__/twilio-routes-elevenlabs.test.ts +189 -162
  41. package/src/__tests__/twilio-routes.test.ts +389 -280
  42. package/src/config/bundled-skills/chatgpt-import/tools/chatgpt-import.ts +29 -4
  43. package/src/config/bundled-skills/messaging/SKILL.md +5 -4
  44. package/src/config/bundled-skills/messaging/tools/messaging-reply.ts +11 -7
  45. package/src/config/env.ts +39 -29
  46. package/src/daemon/handlers/skills.ts +18 -10
  47. package/src/daemon/ipc-contract/messages.ts +1 -0
  48. package/src/daemon/ipc-contract/surfaces.ts +7 -1
  49. package/src/daemon/session-agent-loop-handlers.ts +5 -0
  50. package/src/daemon/session-agent-loop.ts +1 -1
  51. package/src/daemon/session-process.ts +1 -1
  52. package/src/daemon/session-surfaces.ts +42 -2
  53. package/src/runtime/auth/token-service.ts +74 -47
  54. package/src/sequence/reply-matcher.ts +10 -6
  55. package/src/skills/frontmatter.ts +9 -6
  56. package/src/tools/ui-surface/definitions.ts +2 -1
  57. package/src/util/platform.ts +0 -12
  58. package/docs/architecture/http-token-refresh.md +0 -274
package/src/__tests__/channel-approval-routes.test.ts CHANGED
@@ -175,11 +175,6 @@ function registerPendingInteraction(
175
175
  return handleConfirmationResponse;
176
176
  }
177
177
 
178
- /** Legacy bearer token constant — retained for use in X-Gateway-Origin
179
- * headers in test request construction. Gateway-origin proof is now
180
- * handled by JWT auth; these headers are ignored by the handler. */
181
- const TEST_BEARER_TOKEN = 'token';
182
-
183
178
  function makeInboundRequest(overrides: Record<string, unknown> = {}): Request {
184
179
  const body: Record<string, unknown> = {
185
180
  sourceChannel: 'telegram',
@@ -197,7 +192,6 @@ function makeInboundRequest(overrides: Record<string, unknown> = {}): Request {
197
192
  method: 'POST',
198
193
  headers: {
199
194
  'Content-Type': 'application/json',
200
- 'X-Gateway-Origin': TEST_BEARER_TOKEN,
201
195
  },
202
196
  body: JSON.stringify(body),
203
197
  });
@@ -532,7 +526,6 @@ describe('empty content with callbackData bypasses validation', () => {
532
526
  method: 'POST',
533
527
  headers: {
534
528
  'Content-Type': 'application/json',
535
- 'X-Gateway-Origin': TEST_BEARER_TOKEN,
536
529
  },
537
530
  body: JSON.stringify(reqBody),
538
531
  });
@@ -800,7 +793,6 @@ describe('SMS channel approval decisions', () => {
800
793
  method: 'POST',
801
794
  headers: {
802
795
  'Content-Type': 'application/json',
803
- 'X-Gateway-Origin': TEST_BEARER_TOKEN,
804
796
  },
805
797
  body: JSON.stringify(body),
806
798
  });
@@ -908,7 +900,6 @@ describe('SMS guardian verify intercept', () => {
908
900
  method: 'POST',
909
901
  headers: {
910
902
  'Content-Type': 'application/json',
911
- 'X-Gateway-Origin': TEST_BEARER_TOKEN,
912
903
  },
913
904
  body: JSON.stringify({
914
905
  sourceChannel: 'sms',
@@ -949,7 +940,6 @@ describe('SMS guardian verify intercept', () => {
949
940
  method: 'POST',
950
941
  headers: {
951
942
  'Content-Type': 'application/json',
952
- 'X-Gateway-Origin': TEST_BEARER_TOKEN,
953
943
  },
954
944
  body: JSON.stringify({
955
945
  sourceChannel: 'sms',
@@ -1002,7 +992,6 @@ describe('SMS guardian verify intercept', () => {
1002
992
  method: 'POST',
1003
993
  headers: {
1004
994
  'Content-Type': 'application/json',
1005
- 'X-Gateway-Origin': TEST_BEARER_TOKEN,
1006
995
  },
1007
996
  body: JSON.stringify({
1008
997
  sourceChannel: 'sms',