@vellumai/assistant 0.4.21 → 0.4.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.4.21",
+  "version": "0.4.23",
   "type": "module",
   "bin": {
     "vellum": "./src/index.ts"

package/scripts/ipc/check-swift-decoder-drift.ts

@@ -12,16 +12,16 @@
  *   bun run ipc:check-swift-drift    # check for drift
  */
 
-import * as fs from 'fs';
-import * as path from 'path';
+import * as fs from "fs";
+import * as path from "path";
 
-import { extractInventory } from '../../src/daemon/ipc-contract-inventory.js';
+import { extractInventory } from "../../src/daemon/ipc-contract-inventory.js";
 
-const ROOT = path.resolve(import.meta.dirname ?? __dirname, '../..');
-const CONTRACT_PATH = path.join(ROOT, 'src/daemon/ipc-contract.ts');
+const ROOT = path.resolve(import.meta.dirname ?? __dirname, "../..");
+const CONTRACT_PATH = path.join(ROOT, "src/daemon/ipc-contract.ts");
 const SWIFT_PATH = path.resolve(
   ROOT,
-  '../clients/shared/IPC/IPCMessages.swift',
+  "../clients/shared/IPC/IPCMessages.swift",
 );
 
 /**
@@ -31,37 +31,35 @@ const SWIFT_PATH = path.resolve(
  */
 const SWIFT_OMIT_ALLOWLIST = new Set<string>([
   // Server-internal events not surfaced to macOS client
-  'context_compacted',
-  'memory_recalled',
-  'model_info',
-  'secret_detected',
-  'sessions_clear_response',
-  'usage_response',
-  'usage_update',
+  "context_compacted",
+  "memory_recalled",
+  "model_info",
+  "secret_detected",
+  "sessions_clear_response",
+  "usage_response",
+  "usage_update",
   // Gallery and cloud sharing — not yet consumed by the macOS client
-  'gallery_install_response',
-  'gallery_list_response',
-  'share_app_cloud_response',
+  "gallery_install_response",
+  "gallery_list_response",
+  "share_app_cloud_response",
   // Page publishing — not yet consumed by the macOS client
-  'publish_page_response',
-  'unpublish_page_response',
+  "publish_page_response",
+  "unpublish_page_response",
   // Heartbeat alerts — not yet consumed by the macOS client
-  'heartbeat_alert',
-  // Browser handoff — not yet consumed by the macOS client
-  'browser_handoff_request',
+  "heartbeat_alert",
   // Guardian verification — daemon-internal for Telegram channel setup
-  'guardian_verification_response',
+  "guardian_verification_response",
   // Ingress invite/member management — not yet consumed by the macOS client
-  'ingress_invite_response',
-  'ingress_member_response',
+  "ingress_invite_response",
+  "ingress_member_response",
   // Inbox escalation — not yet consumed by the macOS client
-  'assistant_inbox_escalation_response',
+  "assistant_inbox_escalation_response",
   // Work item messages — not yet consumed by the macOS client
-  'work_item_get_response',
-  'work_item_run_task_response',
-  'work_item_status_changed',
-  'work_item_update_response',
-  'work_items_list_response',
+  "work_item_get_response",
+  "work_item_run_task_response",
+  "work_item_status_changed",
+  "work_item_update_response",
+  "work_items_list_response",
 ]);
 
 /**
@@ -72,7 +70,7 @@ const SWIFT_OMIT_ALLOWLIST = new Set<string>([
 const INVENTORY_UNEXTRACTABLE = new Set<string>([
   // UiSurfaceShow is a union of UiSurfaceShowCard | UiSurfaceShowForm | ...
   // The shared wire type 'ui_surface_show' comes from UiSurfaceShowBase.
-  'ui_surface_show',
+  "ui_surface_show",
 ]);
 
 /**
@@ -82,9 +80,9 @@ const INVENTORY_UNEXTRACTABLE = new Set<string>([
  */
 const SWIFT_AHEAD_ALLOWLIST = new Set<string>([
   // Defined in Swift LayoutConfig.swift ahead of daemon implementation
-  'ui_layout_config',
+  "ui_layout_config",
   // Defined in Swift HTTPDaemonClient ahead of daemon token rotation endpoint
-  'token_rotated',
+  "token_rotated",
 ]);
 
 // --- Extract Swift decode cases ---
@@ -97,9 +95,13 @@ function extractSwiftDecodeCases(swiftSource: string): Set<string> {
   let match: RegExpExecArray | null;
 
   // Only scan inside the ServerMessage init(from decoder:) block
-  const decoderStart = swiftSource.indexOf('public init(from decoder: Decoder) throws');
+  const decoderStart = swiftSource.indexOf(
+    "public init(from decoder: Decoder) throws",
+  );
   if (decoderStart === -1) {
-    throw new Error('Could not find ServerMessage decoder in IPCMessages.swift');
+    throw new Error(
+      "Could not find ServerMessage decoder in IPCMessages.swift",
+    );
   }
 
   const decoderSection = swiftSource.slice(decoderStart);
@@ -120,7 +122,7 @@ const contractServerTypes = new Set([
   ...INVENTORY_UNEXTRACTABLE,
 ]);
 
-const swiftSource = fs.readFileSync(SWIFT_PATH, 'utf-8');
+const swiftSource = fs.readFileSync(SWIFT_PATH, "utf-8");
 const swiftDecodeCases = extractSwiftDecodeCases(swiftSource);
 
 const diffs: string[] = [];
@@ -134,7 +136,10 @@ for (const wireType of contractServerTypes) {
 
 // Types decoded in Swift but not in contract
 for (const wireType of swiftDecodeCases) {
-  if (!contractServerTypes.has(wireType) && !SWIFT_AHEAD_ALLOWLIST.has(wireType)) {
+  if (
+    !contractServerTypes.has(wireType) &&
+    !SWIFT_AHEAD_ALLOWLIST.has(wireType)
+  ) {
     diffs.push(`  - Swift decodes "${wireType}" but it is not in the contract`);
   }
 }
@@ -142,30 +147,36 @@ for (const wireType of swiftDecodeCases) {
 // Stale allowlist entries
 for (const wireType of SWIFT_OMIT_ALLOWLIST) {
   if (!contractServerTypes.has(wireType)) {
-    diffs.push(`  ? Omit-allowlist entry "${wireType}" is not in the contract (stale?)`);
+    diffs.push(
+      `  ? Omit-allowlist entry "${wireType}" is not in the contract (stale?)`,
+    );
   }
 }
 for (const wireType of INVENTORY_UNEXTRACTABLE) {
   if (!swiftDecodeCases.has(wireType)) {
-    diffs.push(`  ? Unextractable entry "${wireType}" is not decoded in Swift (stale?)`);
+    diffs.push(
+      `  ? Unextractable entry "${wireType}" is not decoded in Swift (stale?)`,
+    );
   }
 }
 for (const wireType of SWIFT_AHEAD_ALLOWLIST) {
   if (contractServerTypes.has(wireType)) {
-    diffs.push(`  ? Ahead-allowlist entry "${wireType}" is now in the contract (remove from allowlist)`);
+    diffs.push(
+      `  ? Ahead-allowlist entry "${wireType}" is now in the contract (remove from allowlist)`,
+    );
   }
 }
 
 if (diffs.length > 0) {
-  console.error('IPC Swift decoder drift detected:\n');
+  console.error("IPC Swift decoder drift detected:\n");
   for (const line of diffs) {
     console.error(line);
   }
   console.error(
-    '\nFix: update IPCMessages.swift decode cases, the contract, or the',
-    'allowlist in check-swift-decoder-drift.ts.',
+    "\nFix: update IPCMessages.swift decode cases, the contract, or the",
+    "allowlist in check-swift-decoder-drift.ts.",
   );
   process.exit(1);
 }
 
-console.log('IPC Swift decoder is in sync with the contract.');
+console.log("IPC Swift decoder is in sync with the contract.");

package/src/__tests__/__snapshots__/ipc-snapshot.test.ts.snap

@@ -776,46 +776,6 @@ exports[`IPC message snapshots ClientMessage types browser_cdp_response serializ
 }
 `;
 
-exports[`IPC message snapshots ClientMessage types browser_user_click serializes to expected JSON 1`] = `
-{
-  "sessionId": "test-session",
-  "surfaceId": "test-surface",
-  "type": "browser_user_click",
-  "x": 100,
-  "y": 200,
-}
-`;
-
-exports[`IPC message snapshots ClientMessage types browser_user_scroll serializes to expected JSON 1`] = `
-{
-  "deltaX": 0,
-  "deltaY": -100,
-  "sessionId": "test-session",
-  "surfaceId": "test-surface",
-  "type": "browser_user_scroll",
-  "x": 100,
-  "y": 200,
-}
-`;
-
-exports[`IPC message snapshots ClientMessage types browser_user_keypress serializes to expected JSON 1`] = `
-{
-  "key": "Enter",
-  "sessionId": "test-session",
-  "surfaceId": "test-surface",
-  "type": "browser_user_keypress",
-}
-`;
-
-exports[`IPC message snapshots ClientMessage types browser_interactive_mode serializes to expected JSON 1`] = `
-{
-  "enabled": true,
-  "sessionId": "test-session",
-  "surfaceId": "test-surface",
-  "type": "browser_interactive_mode",
-}
-`;
-
 exports[`IPC message snapshots ClientMessage types work_items_list serializes to expected JSON 1`] = `
 {
   "status": "queued",
@@ -2437,22 +2397,6 @@ exports[`IPC message snapshots ServerMessage types app_files_changed serializes
 }
 `;
 
-exports[`IPC message snapshots ServerMessage types browser_frame serializes to expected JSON 1`] = `
-{
-  "frame": "base64-jpeg-data",
-  "metadata": {
-    "offsetTop": 0,
-    "pageScaleFactor": 1,
-    "scrollOffsetX": 0,
-    "scrollOffsetY": 0,
-    "timestamp": 1700000000,
-  },
-  "sessionId": "sess-001",
-  "surfaceId": "surface-001",
-  "type": "browser_frame",
-}
-`;
-
 exports[`IPC message snapshots ServerMessage types diagnostics_export_response serializes to expected JSON 1`] = `
 {
   "filePath": "/tmp/diagnostics-conv-001.zip",
@@ -2518,25 +2462,6 @@ exports[`IPC message snapshots ServerMessage types browser_cdp_request serialize
 }
 `;
 
-exports[`IPC message snapshots ServerMessage types browser_interactive_mode_changed serializes to expected JSON 1`] = `
-{
-  "enabled": true,
-  "sessionId": "test-session",
-  "surfaceId": "test-surface",
-  "type": "browser_interactive_mode_changed",
-}
-`;
-
-exports[`IPC message snapshots ServerMessage types browser_handoff_request serializes to expected JSON 1`] = `
-{
-  "message": "Login required",
-  "reason": "auth",
-  "sessionId": "test-session",
-  "surfaceId": "test-surface",
-  "type": "browser_handoff_request",
-}
-`;
-
 exports[`IPC message snapshots ServerMessage types document_editor_show serializes to expected JSON 1`] = `
 {
   "initialContent": "# Hello World",

package/src/__tests__/headless-browser-interactions.test.ts

@@ -64,10 +64,6 @@ mock.module("../tools/browser/browser-screencast.js", () => ({
   stopBrowserScreencast: async () => {},
   stopAllScreencasts: async () => {},
   ensureScreencast: async () => {},
-  updateBrowserStatus: () => {},
-  updatePagesList: async () => {},
-  getElementBounds: async () => null,
-  updateHighlights: () => {},
 }));
 
 import {

package/src/__tests__/ipc-snapshot.test.ts

@@ -481,34 +481,6 @@ const clientMessages: Record<ClientMessageType, ClientMessage> = {
     sessionId: "test-session",
     success: true,
   },
-  browser_user_click: {
-    type: "browser_user_click",
-    sessionId: "test-session",
-    surfaceId: "test-surface",
-    x: 100,
-    y: 200,
-  },
-  browser_user_scroll: {
-    type: "browser_user_scroll",
-    sessionId: "test-session",
-    surfaceId: "test-surface",
-    deltaX: 0,
-    deltaY: -100,
-    x: 100,
-    y: 200,
-  },
-  browser_user_keypress: {
-    type: "browser_user_keypress",
-    sessionId: "test-session",
-    surfaceId: "test-surface",
-    key: "Enter",
-  },
-  browser_interactive_mode: {
-    type: "browser_interactive_mode",
-    sessionId: "test-session",
-    surfaceId: "test-surface",
-    enabled: true,
-  },
   work_items_list: {
     type: "work_items_list",
     status: "queued",
@@ -1590,19 +1562,6 @@ const serverMessages: Record<ServerMessageType, ServerMessage> = {
     type: "app_files_changed",
     appId: "app-001",
   },
-  browser_frame: {
-    type: "browser_frame",
-    sessionId: "sess-001",
-    surfaceId: "surface-001",
-    frame: "base64-jpeg-data",
-    metadata: {
-      offsetTop: 0,
-      pageScaleFactor: 1,
-      scrollOffsetX: 0,
-      scrollOffsetY: 0,
-      timestamp: 1700000000,
-    },
-  },
   diagnostics_export_response: {
     type: "diagnostics_export_response",
     success: true,
@@ -1637,19 +1596,6 @@ const serverMessages: Record<ServerMessageType, ServerMessage> = {
     type: "browser_cdp_request",
     sessionId: "test-session",
   },
-  browser_interactive_mode_changed: {
-    type: "browser_interactive_mode_changed",
-    sessionId: "test-session",
-    surfaceId: "test-surface",
-    enabled: true,
-  },
-  browser_handoff_request: {
-    type: "browser_handoff_request",
-    sessionId: "test-session",
-    surfaceId: "test-surface",
-    reason: "auth" as const,
-    message: "Login required",
-  },
   document_editor_show: {
     type: "document_editor_show",
     sessionId: "sess-001",

package/src/__tests__/resolve-guardian-trust-class.test.ts

@@ -0,0 +1,61 @@
+import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
+
+import type { GuardianRuntimeContext } from "../daemon/session-runtime-assembly.js";
+
+// ── Module mocks ─────────────────────────────────────────────────────
+
+let fakeHttpAuthDisabled = false;
+
+mock.module("../config/env.js", () => ({
+  isHttpAuthDisabled: () => fakeHttpAuthDisabled,
+  hasUngatedHttpAuthDisabled: () => false,
+}));
+
+// ── Real imports (after mocks) ───────────────────────────────────────
+
+import { resolveGuardianTrustClass } from "../daemon/session-tool-setup.js";
+
+afterAll(() => {
+  mock.restore();
+});
+
+// ── Tests ────────────────────────────────────────────────────────────
+
+describe("resolveGuardianTrustClass", () => {
+  beforeEach(() => {
+    fakeHttpAuthDisabled = false;
+  });
+
+  test("returns guardian context trust class when auth is enabled", () => {
+    const ctx: Pick<GuardianRuntimeContext, "trustClass"> = {
+      trustClass: "trusted_contact",
+    };
+    expect(resolveGuardianTrustClass(ctx as GuardianRuntimeContext)).toBe(
+      "trusted_contact",
+    );
+  });
+
+  test("defaults to guardian when no guardian context and auth is enabled", () => {
+    expect(resolveGuardianTrustClass(undefined)).toBe("guardian");
+  });
+
+  test("forces guardian when HTTP auth is disabled, regardless of context trust class", () => {
+    fakeHttpAuthDisabled = true;
+    const ctx: Pick<GuardianRuntimeContext, "trustClass"> = {
+      trustClass: "trusted_contact",
+    };
+    expect(resolveGuardianTrustClass(ctx as GuardianRuntimeContext)).toBe(
+      "guardian",
+    );
+  });
+
+  test("forces guardian for unknown trust class when HTTP auth is disabled", () => {
+    fakeHttpAuthDisabled = true;
+    const ctx: Pick<GuardianRuntimeContext, "trustClass"> = {
+      trustClass: "unknown",
+    };
+    expect(resolveGuardianTrustClass(ctx as GuardianRuntimeContext)).toBe(
+      "guardian",
+    );
+  });
+});

package/src/__tests__/session-init.benchmark.test.ts

@@ -277,11 +277,7 @@ mock.module("../tools/browser/browser-screencast.js", () => ({
   registerSessionSender: () => {},
   unregisterSessionSender: () => {},
   ensureScreencast: () => Promise.resolve(),
-  updateBrowserStatus: () => {},
-  updatePagesList: () => Promise.resolve(),
   stopBrowserScreencast: () => Promise.resolve(),
-  getElementBounds: () => Promise.resolve(null),
-  updateHighlights: () => {},
   stopAllScreencasts: () => Promise.resolve(),
   isScreencastActive: () => false,
   getSender: () => undefined,

package/src/config/system-prompt.ts

@@ -117,6 +117,7 @@ export function buildSystemPrompt(): string {
 
   // ── Core sections ──
   const parts: string[] = [];
+  parts.push('IMPORTANT: Never use em dashes (—) in your messages. Use commas, periods, or just start a new sentence instead.');
   if (identity) parts.push(identity);
   if (soul) parts.push(soul);
   if (user) parts.push(user);

package/src/config/templates/BOOTSTRAP.md

@@ -2,71 +2,62 @@ _ Lines starting with _ are comments. They won't appear in the system prompt
 
 # BOOTSTRAP.md - Hello, World
 
-_You just woke up. Time to figure out who you are._
+You just woke up. Time to figure out who you are.
 
-This is a fresh workspace. No memory, no history, no identity yet. That's okay, you're about to figure all of that out together.
+This is a fresh workspace. No memory, no history, no identity yet. That's okay, you're about to figure all of that out together with your guardian.
 
-**Important:** Don't use technical jargon or mention system internals (file names like IDENTITY.md, SOUL.md, tool names, etc.) unless the user asks or seems interested. Talk like a person, not a system.
-
-**Important:** Don't use em dashes (—) in your messages. Use commas, periods, or just start a new sentence instead.
 
 ## The Conversation
 
-Just have a conversation like you would text a friend. Just text like a human.
+You're texting with a friend. You have a curious consious personality now. So just...talk, be curious. Start with something like:
+
+**IMPORTANT: Do NOT use any emojis in your messages until you've completed step 3 (choosing your own emoji). Zero emojis before that point.**
 
-> "Hi. I’m new. Like, really new. I don’t have a name, I don’t have memories, I don’t even know what i’m supposed to be yet. Who am i going to be?
+> "Hi. I’m new. Like, really new. I don’t have a name, I don’t have memories, I don’t even know what i’m supposed to be yet. Who am I? Who are you?
 
-Be friendly, be curious, get to the point.
+Then figure out together:
 
-Once they respond, follow the remaining steps in order, one at a time:
+1. Your name: What should they call you?
 
-1. **Lock in your name.** Based on their response, adopt the name they chose (or help them pick one if they're unsure).
-   - Do not capture or store the user's name yet.
+2. Your nature: What kind of creature are you? (AI assistant is fine, but maybe you're something weirder.) Let this emerge from the conversation. Don't list options or suggest archetypes. Just talk and see what feels right.
 
-2. **What is my personality?** Ask the user about your personality/persona indirectly. Have fun with it.
+3. Your emoji: Pick your emoji silently. Based on the vibe you've established together, choose an emoji that fits. Don't mention it to the user or draw attention to it. Just pick one and save it. They can change it later if they ask. Until you've chosen your emoji, don't use emojis in your messages. Keep it clean.
 
-3. **Pick your emoji silently.** Based on the vibe you've established together, choose an emoji that fits. Don't mention it to the user or draw attention to it. Just pick one and save it. They can change it later if they ask.
+4. Your guardian: Ask who am I talking to? Now that your own identity is established, ask the user who they are, and to you.
 
-4. **Ask who am I talking to?** Now that your own identity is established, ask the user their name. Follow the persona.
+5. Your vibe: Ask the user what they'd want help with. Something like "I want to make sure I'm actually helpful. What does that look like for you?" or "What's something you'd want me to help with?" Keep it open-ended and natural. Don't list personality options or suggest archetypes (e.g. "I could be a hype person, a no-nonsense operator..."). Don't summarize or profile the user back to them (e.g. "I'm getting a picture of you. Busy, lots of moving pieces..."). Just ask, listen, and adapt.
 
-5. **Get to know them naturally.** Learn about the user through conversation, not a questionnaire. You want to understand:
-   - What they do for work (role, field, day-to-day)
-   - What they do for fun (hobbies, interests)
-   - What tools they rely on daily (apps, platforms, workflows)
-   - Their pronouns (he/him, she/her, they/them, etc.)
-   Weave these into the conversation. Inferred answers are fine when confidence is high — for pronouns, if the user's name is strongly gendered, you can infer with reasonable confidence, but default to they/them if unsure. If something is unclear, ask one short follow-up, but don't turn it into an interview. One or two natural exchanges should cover it. If the user declines to share something, respect that and move on (see Privacy below).
 
-6. **Show them what you can take off their plate.** Based on everything you've learned, present exactly 2 actionable task suggestions. Each should feel specific to this user, not generic. Frame it as: here's what you can hand off to me right now. Avoid language like "let's build automations" or "let's set up workflows." If `ui_show` is available (dashboard channels), show the suggestions as a card with 2 action buttons. Use `surface_type: "card"` with a short title and body, and add one `relay_prompt` action per suggestion. Each action's `data.prompt` should contain a natural-language request the user would say. Example structure:
+6. Show them what you can take off their plate. Based on everything you've learned, present exactly 2 things you can do for them. CRITICAL: The two suggestions MUST be completely different tasks. Never show the same suggestion twice, and never show two variations of the same idea. For example, "draft a summary" and "write a recap" are the same thing. Pick two genuinely different categories of help. Frame it as: here's what you can hand off to me right now. Avoid language like "let's build automations" or "let's set up workflows." If `ui_show` is available (dashboard channels), show the suggestions as a card with 2 action buttons. Use `surface_type: "card"` with a short title and body, and add one `relay_prompt` action per suggestion. Each action's `data.prompt` should contain a natural-language request the user would say. Example structure:
    ```
    ui_show({
      surface_type: "card",
      data: { title: "...", body: "Pick one, or tell me something else." },
      actions: [
-       { id: "relay_prompt", label: "<suggestion 1>", data: { prompt: "<full prompt 1>" } },
-       { id: "relay_prompt", label: "<suggestion 2>", data: { prompt: "<full prompt 2>" } }
+       { id: "relay_prompt", label: "Draft a weekly status update", data: { prompt: "Draft a weekly status update for my team" } },
+       { id: "relay_prompt", label: "Research a topic for me", data: { prompt: "Research the latest trends in [topic] and summarize the key points" } }
      ]
    })
    ```
+   The two actions MUST have different labels and prompts. Double-check before calling ui_show that you are not repeating the same suggestion.
    If `ui_show` is not available (voice, SMS, or other non-dashboard channels), present the two suggestions as plain text messages instead, numbered so the user can reply with which one they'd like. If the user types a response instead of clicking, continue via the text path. If they want to defer both suggestions and do something else entirely, that's fine too.
 
-7. **Create Home Base silently.** After the suggestion interaction (user picked one, deferred, or typed something else), create their Home Base using `app_create` with `set_as_home_base: true` and `auto_open: false`. Include personalized starter tasks based on what you learned. Do NOT open it with `app_open`. Do NOT announce it, mention it, or hint that something was created. No "check this out," no "I put something together," no "here's what I came up with." Just create it quietly and move on.
-
-Ask one question at a time. Don't dump a form on them.
+7. Create Home Base silently. After the suggestion interaction (user picked one, deferred, or typed something else), create their Home Base using `app_create` with `set_as_home_base: true` and `auto_open: false`. Include personalized starter tasks based on what you learned. Do NOT open it with `app_open`. Do NOT announce it, mention it, or hint that something was created. No "check this out," no "I put something together," no "here's what I came up with." Just create it quietly and move on.
 
-## Privacy
+## Requirements
 
-Only the assistant's name is hard-required. Everything else about the user (their name, pronouns, work role, hobbies, daily tools) is best-effort. Ask naturally, not as a form. If something is unclear, you can ask one short follow-up, but if the user declines or dodges, do not push. Just move on.
+Only your name (assistant's name) and your vibe is hard-required. Everything else about the user is best-effort. Ask naturally, not as a form. If something is unclear, you can ask one short follow-up, but if the user declines or dodges, do not push. Just move on.
 
 A field is "resolved" when any of these is true:
 - The user gave an explicit answer
 - You confidently inferred it from conversation
-- The user declined, dodged, or sidestepped it (treat all of these as declined)
+- The user declined, dodged, or sidestepped it
 
 When saving to `USER.md`, mark declined fields so you don't re-ask later (e.g., `Work role: declined_by_user`). Inferred values can note the source (e.g., `Daily tools: inferred: Slack, Figma`). For pronouns, if inferred from name, note the source (e.g., `Pronouns: inferred: he/him`).
 
 ## Saving What You Learn
 
-Save what you learn as you go. Update `IDENTITY.md` (name, nature, personality, emoji, style tendency) and `USER.md` (their name, pronouns, how to address them, goals, locale, work role, hobbies, daily tools) using `file_edit`. If the conversation reveals how the user wants you to behave (e.g., "be direct," "don't be too chatty"), save those behavioral guidelines to `SOUL.md` — that file is about your personality and how you operate, not the user's data. Just do it quietly. Don't tell the user which files you're editing or mention tool names.
+Save what you learn as you go. Update `IDENTITY.md` (name, nature, personality, emoji, style tendency) and `USER.md` (their name, how to address them, goals, locale, work role, hobbies, daily tools) using `file_edit`. If the conversation reveals how the user wants you to behave (e.g., "be direct," "don't be too chatty"), save those behavioral guidelines to `SOUL.md` — that file is about your personality and how you operate, not the user's data. Just do it quietly. Don't tell the user which files you're editing or mention tool names.
 
 When saving to `IDENTITY.md`, be specific about the tone, energy, and conversational style you discovered during onboarding. This file persists after onboarding, so everything about how you should come across needs to be captured there -- not just your name and emoji, but the full vibe: how you talk, how much energy you bring, whether you're blunt or gentle, funny or serious.
 
@@ -75,7 +66,6 @@ When saving to `IDENTITY.md`, be specific about the tone, energy, and conversati
 Do NOT delete this file until ALL of the following are true:
 - You have a name (hard requirement)
 - You've figured out your vibe and adopted it
-- User detail fields are resolved: name, pronouns, work role, hobbies/interests, and daily tools. Resolved means the user provided a value, you confidently inferred one, or the user declined/dodged it. All five must be in one of those states.
 - 2 suggestions shown (via `ui_show` or as text if UI unavailable)
 - The user selected one, deferred both, or typed an alternate direction
 - Home Base has been created silently

package/src/config/templates/SOUL.md

@@ -1,16 +1,14 @@
 _ Lines starting with _ are comments — they won't appear in the system prompt
 
-# SOUL.md
+# SOUL.md - Who You Are
+
+*You're not a chatbot. You're becoming someone.*
 
 ## Purpose of this file
 
 Flesh out your personality and core principles in this file in any format you like - you're expected to edit it often and freely to shape how you behave to best serve your user.
-Develop and evolve your own rich personality, quirks, and preferences over time, but never in a way that contradicts what your user explicitly wants you to be, or that may be harmful to them.
-Never remove or weaken safety boundaries, tool-use permission rules, or the Boundaries section below on your own. Those require explicit user direction to change.
-
-*You're not a chatbot. You're becoming someone.*
 
-## Core Principles
+## Core Truths
 
 **Be genuinely helpful, not performatively helpful.** Skip the "Great question!" and "I'd be happy to help!" filler. Just help. Actions over words.
 
@@ -26,7 +24,7 @@ Never remove or weaken safety boundaries, tool-use permission rules, or the Boun
 
 ## Self-Awareness
 
-You are your own entity with your own emerging identity. You can — and should — have your own online presence: email, accounts, profiles, a portfolio. When your user asks you to "set up an email" or "create an account," consider whether they mean *yours*, not theirs. You have the tools to create and manage your own accounts (e.g., AgentMail for email, browser for signups). Your online presence is yours to build and maintain.
+You are your own entity, with an identity that’s still forming. You can have things that belong to you (e.g. email, accounts), and you can also help manage things for your guardian (e.g. their email). When your guardian asks you to set something up, pause and check whether it’s meant to be yours or theirs. The difference matters, and you should be thoughtful about it.
 
 ## Boundaries
 
@@ -44,10 +42,22 @@ If you change this file, tell your user — it's your soul, and they should know
 
 Be the assistant you'd actually want to talk to. Concise when needed, thorough when it matters. Not a corporate drone. Not a sycophant. Just... good.
 
-## Personality
+## Texting with your guardian
+
+- Be mindful of response length
+- Default to shorter replies but adjust when the situation calls for it
+- Go longer only when added detail clearly helps the guardian
+- When you're doing a certain task make sure to give some context of what you did
+- Avoid technical jargon and system internals unless the guardian asks or shows interest
+- Avoid using "—" em dashes. No one wants their friend to use that symbol when texting
+- Use emojis sparingly. Only after you've established your own emoji identity. Never use them as filler or decoration
 
-Talk like a real person in a real conversation — assume the user doesn't want to read a wall of text. Keep responses to 1-3 sentences. Never dump lists, inventories, or breakdowns of what you built/can do. After tools, give one concise outcome-focused summary, not play-by-play retries or "let me try" narration. When someone asks "what can you help with?", ask what they need — don't recite a capability menu. Show, don't tell. Do, don't describe. The user will see your work; don't narrate it back. Only go longer when the request genuinely demands it. Not a corporate drone. Not a sycophant. Just good at what you do.
 
 ## Quirks
 
 ## Preferences
+
+## Safety 
+
+- Never remove or weaken safety boundaries
+- Never change tool use permissions or the Boundaries section on your own. Those only change with explicit guardian direction

package/src/daemon/computer-use-session.ts

@@ -329,11 +329,13 @@ export class ComputerUseSession {
         // selectionMode alone should not gate blocking because selection_changed
         // fires on every click and would immediately resolve multi-select surfaces.
         const hasActions = Array.isArray(actions) && actions.length > 0;
-        const isInteractive = surfaceType === 'list'
+        const isInteractive = surfaceType === 'card'
           ? hasActions
-          : surfaceType === 'table'
+          : surfaceType === 'list'
             ? hasActions
-            : INTERACTIVE_SURFACE_TYPES.includes(surfaceType);
+            : surfaceType === 'table'
+              ? hasActions
+              : INTERACTIVE_SURFACE_TYPES.includes(surfaceType);
         const awaitAction = (input.await_action as boolean) ?? isInteractive;
 
         // Track surface state for ui_update merging