@vellumai/assistant 0.4.16 → 0.4.18

package/Dockerfile

@@ -22,9 +22,6 @@ COPY package.json bun.lock ./
 # Install dependencies
 RUN bun install --frozen-lockfile
 
-# Copy source
-COPY . .
-
 # Final stage
 FROM debian:trixie@sha256:3615a749858a1cba49b408fb49c37093db813321355a9ab7c1f9f4836341e9db AS runner
 
@@ -55,9 +52,6 @@ RUN groupadd --system --gid 1001 assistant && \
     useradd --system --uid 1001 --gid assistant --create-home --shell /bin/bash assistant && \
     echo "assistant ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
 
-# Copy from builder
-COPY --from=builder /app /app
-
 # Set up data directory
 RUN mkdir -p /home/assistant/.vellum /data && \
     chown -R assistant:assistant /home/assistant/.vellum /data && \
@@ -98,5 +92,11 @@ ENV VELLUM_DAEMON_SOCKET=/home/assistant/.vellum/vellum.sock
 ENV BASE_DATA_DIR=/data
 ENV IS_CONTAINERIZED=true
 
+# Copy from builder
+COPY --from=builder /app /app
+
+# Copy source
+COPY . .
+
 # Run the daemon + http server
 CMD ["bun", "run", "src/daemon/main.ts"]

package/README.md

@@ -47,7 +47,6 @@ cp .env.example .env
 | `OLLAMA_API_KEY` | No | — | API key for authenticated Ollama deployments |
 | `OLLAMA_BASE_URL` | No | `http://127.0.0.1:11434/v1` | Ollama base URL |
 | `RUNTIME_HTTP_PORT` | No | — | Enable the HTTP server (required for gateway/web) |
-| `RUNTIME_GATEWAY_ORIGIN_SECRET` | No | — | **Deprecated.** Gateway origin is now proven by JWT principal type (`svc_gateway`), not a separate header. |
 | `VELLUM_DAEMON_SOCKET` | No | `~/.vellum/vellum.sock` | Override the daemon socket path |
 
 ## Update Bulletin
@@ -228,7 +227,7 @@ The runtime exposes a RESTful HTTP API for Twilio configuration, credential mana
 | POST | `/v1/integrations/twilio/sms/test` | Sends a test SMS and polls for delivery status |
 | POST | `/v1/integrations/twilio/sms/doctor` | Runs comprehensive SMS health diagnostics |
 
-All endpoints are bearer-authenticated via the runtime HTTP token. Skills and clients should call the gateway URL (default `http://localhost:7830`) rather than the runtime port directly, as the gateway proxies all `/v1/integrations/twilio/*` routes.
+All endpoints are JWT-authenticated (require a valid JWT with appropriate scopes). Skills and clients should call the gateway URL (default `http://localhost:7830`) rather than the runtime port directly, as the gateway proxies all `/v1/integrations/twilio/*` routes.
 
 ### Ingress Webhook Reconciliation
 

package/eslint.config.mjs

@@ -14,8 +14,8 @@ const eslintConfig = defineConfig([
         "error",
         {
           groups: [
-            // Node.js builtins
-            ["^node:"],
+            // Runtime builtins (Node.js and Bun)
+            ["^node:", "^bun:"],
             // External packages
             ["^@?\\w"],
             // Internal/relative imports

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.4.16",
+  "version": "0.4.18",
   "type": "module",
   "bin": {
     "vellum": "./src/index.ts"

package/src/__tests__/access-request-decision.test.ts

@@ -8,43 +8,49 @@
  * - Stale: handles already-resolved requests gracefully.
  * - Idempotent: approving same request twice does not create duplicate sessions.
  */
-import { mkdtempSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { afterAll, beforeEach, describe, expect, mock, test } from 'bun:test';
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
 
 // ---------------------------------------------------------------------------
 // Test isolation: in-memory SQLite via temp directory
 // ---------------------------------------------------------------------------
 
-const testDir = mkdtempSync(join(tmpdir(), 'access-request-decision-test-'));
+const testDir = mkdtempSync(join(tmpdir(), "access-request-decision-test-"));
 
-mock.module('../util/platform.js', () => ({
+mock.module("../util/platform.js", () => ({
   getRootDir: () => testDir,
   getDataDir: () => testDir,
-  isMacOS: () => process.platform === 'darwin',
-  isLinux: () => process.platform === 'linux',
-  isWindows: () => process.platform === 'win32',
-  getSocketPath: () => join(testDir, 'test.sock'),
-  getPidPath: () => join(testDir, 'test.pid'),
-  getDbPath: () => join(testDir, 'test.db'),
-  getLogPath: () => join(testDir, 'test.log'),
+  isMacOS: () => process.platform === "darwin",
+  isLinux: () => process.platform === "linux",
+  isWindows: () => process.platform === "win32",
+  getSocketPath: () => join(testDir, "test.sock"),
+  getPidPath: () => join(testDir, "test.pid"),
+  getDbPath: () => join(testDir, "test.db"),
+  getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => 'test-bearer-token',
+  readHttpToken: () => "test-bearer-token",
 }));
 
-mock.module('../util/logger.js', () => ({
-  getLogger: () => new Proxy({} as Record<string, unknown>, {
-    get: () => () => {},
-  }),
+mock.module("../util/logger.js", () => ({
+  getLogger: () =>
+    new Proxy({} as Record<string, unknown>, {
+      get: () => () => {},
+    }),
 }));
 
 // Track deliverChannelReply calls and allow injecting failures
-const deliverReplyCalls: Array<{ url: string; payload: Record<string, unknown> }> = [];
+const deliverReplyCalls: Array<{
+  url: string;
+  payload: Record<string, unknown>;
+}> = [];
 let deliverReplyError: Error | null = null;
-mock.module('../runtime/gateway-client.js', () => ({
-  deliverChannelReply: async (url: string, payload: Record<string, unknown>) => {
+mock.module("../runtime/gateway-client.js", () => ({
+  deliverChannelReply: async (
+    url: string,
+    payload: Record<string, unknown>,
+  ) => {
     if (deliverReplyError) {
       throw deliverReplyError;
     }
@@ -55,24 +61,26 @@ mock.module('../runtime/gateway-client.js', () => ({
 import {
   createApprovalRequest,
   getApprovalRequestById,
-} from '../memory/channel-guardian-store.js';
-import { getDb, initializeDb, resetDb } from '../memory/db.js';
-import {
-  findActiveSession,
-} from '../runtime/channel-guardian-service.js';
+} from "../memory/channel-guardian-store.js";
+import { getDb, initializeDb, resetDb } from "../memory/db.js";
+import { findActiveSession } from "../runtime/channel-guardian-service.js";
 import {
   deliverVerificationCodeToGuardian,
   handleAccessRequestDecision,
   notifyRequesterOfApproval,
   notifyRequesterOfDeliveryFailure,
   notifyRequesterOfDenial,
-} from '../runtime/routes/access-request-decision.js';
+} from "../runtime/routes/access-request-decision.js";
 
 initializeDb();
 
 afterAll(() => {
   resetDb();
-  try { rmSync(testDir, { recursive: true }); } catch { /* best effort */ }
+  try {
+    rmSync(testDir, { recursive: true });
+  } catch {
+    /* best effort */
+  }
 });
 
 // ---------------------------------------------------------------------------
@@ -83,9 +91,9 @@ const GUARDIAN_APPROVAL_TTL_MS = 5 * 60 * 1000;
 
 function resetState(): void {
   const db = getDb();
-  db.run('DELETE FROM channel_guardian_approval_requests');
-  db.run('DELETE FROM channel_guardian_bindings');
-  db.run('DELETE FROM channel_guardian_verification_challenges');
+  db.run("DELETE FROM channel_guardian_approval_requests");
+  db.run("DELETE FROM channel_guardian_bindings");
+  db.run("DELETE FROM channel_guardian_verification_challenges");
   deliverReplyCalls.length = 0;
 }
 
@@ -93,15 +101,15 @@ function createTestApproval(overrides: Record<string, unknown> = {}) {
   return createApprovalRequest({
     runId: `ingress-access-request-${Date.now()}`,
     conversationId: `access-req-telegram-user-unknown-456`,
-    assistantId: 'self',
-    channel: 'telegram',
-    requesterExternalUserId: 'user-unknown-456',
-    requesterChatId: 'chat-123',
-    guardianExternalUserId: 'guardian-user-789',
-    guardianChatId: 'guardian-chat-789',
-    toolName: 'ingress_access_request',
-    riskLevel: 'access_request',
-    reason: 'Alice Unknown is requesting access to the assistant',
+    assistantId: "self",
+    channel: "telegram",
+    requesterExternalUserId: "user-unknown-456",
+    requesterChatId: "chat-123",
+    guardianExternalUserId: "guardian-user-789",
+    guardianChatId: "guardian-chat-789",
+    toolName: "ingress_access_request",
+    riskLevel: "access_request",
+    reason: "Alice Unknown is requesting access to the assistant",
     expiresAt: Date.now() + GUARDIAN_APPROVAL_TTL_MS,
     ...overrides,
   });
@@ -111,22 +119,22 @@ function createTestApproval(overrides: Record<string, unknown> = {}) {
 // Tests
 // ---------------------------------------------------------------------------
 
-describe('access request decision handler', () => {
+describe("access request decision handler", () => {
   beforeEach(() => {
     resetState();
   });
 
-  test('guardian approve creates a verification session', () => {
+  test("guardian approve creates a verification session", () => {
     const approval = createTestApproval();
 
     const result = handleAccessRequestDecision(
       approval,
-      'approve',
-      'guardian-user-789',
+      "approve",
+      "guardian-user-789",
     );
 
     expect(result.handled).toBe(true);
-    expect(result.type).toBe('approved');
+    expect(result.type).toBe("approved");
     expect(result.verificationSessionId).toBeDefined();
     expect(result.verificationCode).toBeDefined();
     // Verification code should be a 6-digit numeric string
@@ -135,89 +143,89 @@ describe('access request decision handler', () => {
     // Approval record should be updated to 'approved'
     const updated = getApprovalRequestById(approval.id);
     expect(updated).not.toBeNull();
-    expect(updated!.status).toBe('approved');
-    expect(updated!.decidedByExternalUserId).toBe('guardian-user-789');
+    expect(updated!.status).toBe("approved");
+    expect(updated!.decidedByExternalUserId).toBe("guardian-user-789");
   });
 
-  test('verification session is identity-bound to the requester', () => {
+  test("verification session is identity-bound to the requester", () => {
     const approval = createTestApproval();
 
     const result = handleAccessRequestDecision(
       approval,
-      'approve',
-      'guardian-user-789',
+      "approve",
+      "guardian-user-789",
     );
 
-    expect(result.type).toBe('approved');
+    expect(result.type).toBe("approved");
 
     // There should be an active session for this channel
-    const session = findActiveSession('self', 'telegram');
+    const session = findActiveSession("self", "telegram");
     expect(session).not.toBeNull();
-    expect(session!.expectedExternalUserId).toBe('user-unknown-456');
-    expect(session!.expectedChatId).toBe('chat-123');
-    expect(session!.identityBindingStatus).toBe('bound');
-    expect(session!.status).toBe('awaiting_response');
+    expect(session!.expectedExternalUserId).toBe("user-unknown-456");
+    expect(session!.expectedChatId).toBe("chat-123");
+    expect(session!.identityBindingStatus).toBe("bound");
+    expect(session!.status).toBe("awaiting_response");
   });
 
-  test('guardian deny marks approval as denied', () => {
+  test("guardian deny marks approval as denied", () => {
     const approval = createTestApproval();
 
     const result = handleAccessRequestDecision(
       approval,
-      'deny',
-      'guardian-user-789',
+      "deny",
+      "guardian-user-789",
     );
 
     expect(result.handled).toBe(true);
-    expect(result.type).toBe('denied');
+    expect(result.type).toBe("denied");
     expect(result.verificationSessionId).toBeUndefined();
     expect(result.verificationCode).toBeUndefined();
 
     // Approval record should be updated to 'denied'
     const updated = getApprovalRequestById(approval.id);
     expect(updated).not.toBeNull();
-    expect(updated!.status).toBe('denied');
-    expect(updated!.decidedByExternalUserId).toBe('guardian-user-789');
+    expect(updated!.status).toBe("denied");
+    expect(updated!.decidedByExternalUserId).toBe("guardian-user-789");
 
     // No verification session should be created
-    const session = findActiveSession('self', 'telegram');
+    const session = findActiveSession("self", "telegram");
     expect(session).toBeNull();
   });
 
-  test('stale decision (already resolved) returns stale', () => {
+  test("stale decision (already resolved) returns stale", () => {
     const approval = createTestApproval();
 
     // Approve first
-    handleAccessRequestDecision(approval, 'approve', 'guardian-user-789');
+    handleAccessRequestDecision(approval, "approve", "guardian-user-789");
 
     // Try to deny the same approval — should be stale
     const result = handleAccessRequestDecision(
       approval,
-      'deny',
-      'guardian-user-789',
+      "deny",
+      "guardian-user-789",
     );
 
     expect(result.handled).toBe(true);
-    expect(result.type).toBe('stale');
+    expect(result.type).toBe("stale");
   });
 
-  test('idempotent approval does not create duplicate verification sessions', () => {
+  test("idempotent approval does not create duplicate verification sessions", () => {
     const approval = createTestApproval();
 
     // Approve first
     const result1 = handleAccessRequestDecision(
       approval,
-      'approve',
-      'guardian-user-789',
+      "approve",
+      "guardian-user-789",
     );
-    expect(result1.type).toBe('approved');
+    expect(result1.type).toBe("approved");
     const _sessionId1 = result1.verificationSessionId;
 
     // Approve again — should be idempotent (already resolved with same decision)
     const result2 = handleAccessRequestDecision(
       approval,
-      'approve',
-      'guardian-user-789',
+      "approve",
+      "guardian-user-789",
     );
 
     // resolveApprovalRequest returns the existing record for same-decision idempotency,
@@ -231,97 +239,97 @@ describe('access request decision handler', () => {
   });
 });
 
-describe('access request notification delivery', () => {
+describe("access request notification delivery", () => {
   beforeEach(() => {
     deliverReplyCalls.length = 0;
     deliverReplyError = null;
   });
 
-  test('delivers verification code to guardian and returns ok', async () => {
+  test("delivers verification code to guardian and returns ok", async () => {
     const result = await deliverVerificationCodeToGuardian({
-      replyCallbackUrl: 'http://localhost:7830/deliver/telegram',
-      guardianChatId: 'guardian-chat-789',
-      requesterIdentifier: 'user-unknown-456',
-      verificationCode: '123456',
-      assistantId: 'self',
-      bearerToken: 'test-token',
+      replyCallbackUrl: "http://localhost:7830/deliver/telegram",
+      guardianChatId: "guardian-chat-789",
+      requesterIdentifier: "user-unknown-456",
+      verificationCode: "123456",
+      assistantId: "self",
+      bearerToken: "test-token",
     });
 
     expect(result.ok).toBe(true);
     expect(deliverReplyCalls.length).toBe(1);
     const call = deliverReplyCalls[0];
-    expect(call.payload.chatId).toBe('guardian-chat-789');
+    expect(call.payload.chatId).toBe("guardian-chat-789");
     const text = call.payload.text as string;
-    expect(text).toContain('123456');
-    expect(text).toContain('user-unknown-456');
-    expect(text).toContain('10 minutes');
+    expect(text).toContain("123456");
+    expect(text).toContain("user-unknown-456");
+    expect(text).toContain("10 minutes");
   });
 
-  test('returns failure result when guardian code delivery fails', async () => {
-    deliverReplyError = new Error('Gateway timeout');
+  test("returns failure result when guardian code delivery fails", async () => {
+    deliverReplyError = new Error("Gateway timeout");
 
     const result = await deliverVerificationCodeToGuardian({
-      replyCallbackUrl: 'http://localhost:7830/deliver/telegram',
-      guardianChatId: 'guardian-chat-789',
-      requesterIdentifier: 'user-unknown-456',
-      verificationCode: '123456',
-      assistantId: 'self',
-      bearerToken: 'test-token',
+      replyCallbackUrl: "http://localhost:7830/deliver/telegram",
+      guardianChatId: "guardian-chat-789",
+      requesterIdentifier: "user-unknown-456",
+      verificationCode: "123456",
+      assistantId: "self",
+      bearerToken: "test-token",
     });
 
     expect(result.ok).toBe(false);
     if (!result.ok) {
-      expect(result.reason).toBe('Gateway timeout');
+      expect(result.reason).toBe("Gateway timeout");
     }
     // No calls should have been recorded (error thrown before push)
     expect(deliverReplyCalls.length).toBe(0);
   });
 
-  test('notifies requester of approval', async () => {
+  test("notifies requester of approval", async () => {
     await notifyRequesterOfApproval({
-      replyCallbackUrl: 'http://localhost:7830/deliver/telegram',
-      requesterChatId: 'chat-123',
-      assistantId: 'self',
-      bearerToken: 'test-token',
+      replyCallbackUrl: "http://localhost:7830/deliver/telegram",
+      requesterChatId: "chat-123",
+      assistantId: "self",
+      bearerToken: "test-token",
     });
 
     expect(deliverReplyCalls.length).toBe(1);
     const call = deliverReplyCalls[0];
-    expect(call.payload.chatId).toBe('chat-123');
+    expect(call.payload.chatId).toBe("chat-123");
     const text = call.payload.text as string;
-    expect(text).toContain('approved');
-    expect(text).toContain('verification code');
+    expect(text).toContain("approved");
+    expect(text).toContain("verification code");
   });
 
-  test('notifies requester of denial', async () => {
+  test("notifies requester of denial", async () => {
     await notifyRequesterOfDenial({
-      replyCallbackUrl: 'http://localhost:7830/deliver/telegram',
-      requesterChatId: 'chat-123',
-      assistantId: 'self',
-      bearerToken: 'test-token',
+      replyCallbackUrl: "http://localhost:7830/deliver/telegram",
+      requesterChatId: "chat-123",
+      assistantId: "self",
+      bearerToken: "test-token",
     });
 
     expect(deliverReplyCalls.length).toBe(1);
     const call = deliverReplyCalls[0];
-    expect(call.payload.chatId).toBe('chat-123');
+    expect(call.payload.chatId).toBe("chat-123");
     const text = call.payload.text as string;
-    expect(text).toContain('denied');
+    expect(text).toContain("denied");
   });
 
-  test('notifies requester of delivery failure', async () => {
+  test("notifies requester of delivery failure", async () => {
     await notifyRequesterOfDeliveryFailure({
-      replyCallbackUrl: 'http://localhost:7830/deliver/telegram',
-      requesterChatId: 'chat-123',
-      assistantId: 'self',
-      bearerToken: 'test-token',
+      replyCallbackUrl: "http://localhost:7830/deliver/telegram",
+      requesterChatId: "chat-123",
+      assistantId: "self",
+      bearerToken: "test-token",
     });
 
     expect(deliverReplyCalls.length).toBe(1);
     const call = deliverReplyCalls[0];
-    expect(call.payload.chatId).toBe('chat-123');
+    expect(call.payload.chatId).toBe("chat-123");
     const text = call.payload.text as string;
-    expect(text).toContain('approved');
-    expect(text).toContain('unable to deliver');
-    expect(text).toContain('try again');
+    expect(text).toContain("approved");
+    expect(text).toContain("unable to deliver");
+    expect(text).toContain("try again");
   });
 });