@vellumai/assistant 0.4.23 → 0.4.26

package/src/config/schema.ts

@@ -1,37 +1,35 @@
-import { z } from 'zod';
+import { z } from "zod";
 
-import { getDataDir } from '../util/platform.js';
+import { getDataDir } from "../util/platform.js";
 
 // Re-export all domain schemas
 export type {
   HeartbeatConfig,
   SwarmConfig,
   WorkspaceGitConfig,
-} from './agent-schema.js';
+} from "./agent-schema.js";
 export {
   HeartbeatConfigSchema,
   SwarmConfigSchema,
   WorkspaceGitConfigSchema,
-} from './agent-schema.js';
+} from "./agent-schema.js";
 export type {
   CallerIdentityConfig,
   CallsConfig,
   CallsDisclosureConfig,
-  CallsElevenLabsConfig,
   CallsSafetyConfig,
   CallsVerificationConfig,
   CallsVoiceConfig,
-} from './calls-schema.js';
+} from "./calls-schema.js";
 export {
   CallerIdentityConfigSchema,
   CallsConfigSchema,
   CallsDisclosureConfigSchema,
-  CallsElevenLabsConfigSchema,
   CallsSafetyConfigSchema,
   CallsVerificationConfigSchema,
   CallsVoiceConfigSchema,
   VALID_CALLER_IDENTITY_MODES,
-} from './calls-schema.js';
+} from "./calls-schema.js";
 export type {
   AuditLogConfig,
   ContextWindowConfig,
@@ -49,7 +47,7 @@ export type {
   ThinkingConfig,
   TimeoutConfig,
   UiConfig,
-} from './core-schema.js';
+} from "./core-schema.js";
 export {
   AuditLogConfigSchema,
   ContextWindowConfigSchema,
@@ -67,17 +65,18 @@ export {
   ThinkingConfigSchema,
   TimeoutConfigSchema,
   UiConfigSchema,
-} from './core-schema.js';
-export type {
-  McpConfig,
-  McpServerConfig,
-  McpTransport,
-} from './mcp-schema.js';
+} from "./core-schema.js";
+export type { ElevenLabsConfig } from "./elevenlabs-schema.js";
+export {
+  DEFAULT_ELEVENLABS_VOICE_ID,
+  ElevenLabsConfigSchema,
+} from "./elevenlabs-schema.js";
+export type { McpConfig, McpServerConfig, McpTransport } from "./mcp-schema.js";
 export {
   McpConfigSchema,
   McpServerConfigSchema,
   McpTransportSchema,
-} from './mcp-schema.js';
+} from "./mcp-schema.js";
 export type {
   MemoryCleanupConfig,
   MemoryConfig,
@@ -93,7 +92,7 @@ export type {
   MemorySegmentationConfig,
   MemorySummarizationConfig,
   QdrantConfig,
-} from './memory-schema.js';
+} from "./memory-schema.js";
 export {
   MemoryCleanupConfigSchema,
   MemoryConfigSchema,
@@ -111,19 +110,11 @@ export {
   MemorySegmentationConfigSchema,
   MemorySummarizationConfigSchema,
   QdrantConfigSchema,
-} from './memory-schema.js';
-export type {
-  NotificationsConfig,
-} from './notifications-schema.js';
-export {
-  NotificationsConfigSchema,
-} from './notifications-schema.js';
-export type {
-  SandboxConfig,
-} from './sandbox-schema.js';
-export {
-  SandboxConfigSchema,
-} from './sandbox-schema.js';
+} from "./memory-schema.js";
+export type { NotificationsConfig } from "./notifications-schema.js";
+export { NotificationsConfigSchema } from "./notifications-schema.js";
+export type { SandboxConfig } from "./sandbox-schema.js";
+export { SandboxConfigSchema } from "./sandbox-schema.js";
 export type {
   RemotePolicyConfig,
   RemoteProviderConfig,
@@ -132,7 +123,7 @@ export type {
   SkillsConfig,
   SkillsInstallConfig,
   SkillsLoadConfig,
-} from './skills-schema.js';
+} from "./skills-schema.js";
 export {
   RemotePolicyConfigSchema,
   RemoteProviderConfigSchema,
@@ -141,11 +132,15 @@ export {
   SkillsConfigSchema,
   SkillsInstallConfigSchema,
   SkillsLoadConfigSchema,
-} from './skills-schema.js';
+} from "./skills-schema.js";
 
 // Imports for AssistantConfigSchema composition
-import { HeartbeatConfigSchema, SwarmConfigSchema, WorkspaceGitConfigSchema } from './agent-schema.js';
-import { CallsConfigSchema } from './calls-schema.js';
+import {
+  HeartbeatConfigSchema,
+  SwarmConfigSchema,
+  WorkspaceGitConfigSchema,
+} from "./agent-schema.js";
+import { CallsConfigSchema } from "./calls-schema.js";
 import {
   AuditLogConfigSchema,
   ContextWindowConfigSchema,
@@ -161,110 +156,161 @@ import {
   ThinkingConfigSchema,
   TimeoutConfigSchema,
   UiConfigSchema,
-} from './core-schema.js';
-import { McpConfigSchema } from './mcp-schema.js';
-import { MemoryConfigSchema } from './memory-schema.js';
-import { NotificationsConfigSchema } from './notifications-schema.js';
-import { SandboxConfigSchema } from './sandbox-schema.js';
-import { SkillsConfigSchema } from './skills-schema.js';
+} from "./core-schema.js";
+import { ElevenLabsConfigSchema } from "./elevenlabs-schema.js";
+import { McpConfigSchema } from "./mcp-schema.js";
+import { MemoryConfigSchema } from "./memory-schema.js";
+import { NotificationsConfigSchema } from "./notifications-schema.js";
+import { SandboxConfigSchema } from "./sandbox-schema.js";
+import { SkillsConfigSchema } from "./skills-schema.js";
 
-const VALID_PROVIDERS = ['anthropic', 'openai', 'gemini', 'ollama', 'fireworks', 'openrouter'] as const;
-const VALID_WEB_SEARCH_PROVIDERS = ['perplexity', 'brave', 'anthropic-native'] as const;
+const VALID_PROVIDERS = [
+  "anthropic",
+  "openai",
+  "gemini",
+  "ollama",
+  "fireworks",
+  "openrouter",
+] as const;
+const VALID_WEB_SEARCH_PROVIDERS = [
+  "perplexity",
+  "brave",
+  "anthropic-native",
+] as const;
 
-export const AssistantConfigSchema = z.object({
-  provider: z
-    .enum(VALID_PROVIDERS, {
-      error: `provider must be one of: ${VALID_PROVIDERS.join(', ')}`,
-    })
-    .default('anthropic'),
-  model: z
-    .string({ error: 'model must be a string' })
-    .default('claude-opus-4-6'),
-  imageGenModel: z
-    .string({ error: 'imageGenModel must be a string' })
-    .default('gemini-2.5-flash-image'),
-  apiKeys: z
-    .record(z.string(), z.string({ error: 'Each apiKeys value must be a string' }))
-    .default({} as any),
-  webSearchProvider: z
-    .enum(VALID_WEB_SEARCH_PROVIDERS, {
-      error: `webSearchProvider must be one of: ${VALID_WEB_SEARCH_PROVIDERS.join(', ')}`,
-    })
-    .default('anthropic-native'),
-  providerOrder: z
-    .array(z.enum(VALID_PROVIDERS, {
-      error: `Each providerOrder entry must be one of: ${VALID_PROVIDERS.join(', ')}`,
-    }))
-    .default([]),
-  maxTokens: z
-    .number({ error: 'maxTokens must be a number' })
-    .int('maxTokens must be an integer')
-    .positive('maxTokens must be a positive integer')
-    .default(16000),
-  maxToolUseTurns: z
-    .number({ error: 'maxToolUseTurns must be a number' })
-    .int('maxToolUseTurns must be an integer')
-    .nonnegative('maxToolUseTurns must be a non-negative integer')
-    .default(40),
-  thinking: ThinkingConfigSchema.default(ThinkingConfigSchema.parse({})),
-  contextWindow: ContextWindowConfigSchema.default(ContextWindowConfigSchema.parse({})),
-  memory: MemoryConfigSchema.default(MemoryConfigSchema.parse({})),
-  dataDir: z
-    .string({ error: 'dataDir must be a string' })
-    .default(getDataDir()),
-  timeouts: TimeoutConfigSchema.default(TimeoutConfigSchema.parse({})),
-  sandbox: SandboxConfigSchema.default(SandboxConfigSchema.parse({})),
-  rateLimit: RateLimitConfigSchema.default(RateLimitConfigSchema.parse({})),
-  secretDetection: SecretDetectionConfigSchema.default(SecretDetectionConfigSchema.parse({})),
-  permissions: PermissionsConfigSchema.default(PermissionsConfigSchema.parse({})),
-  auditLog: AuditLogConfigSchema.default(AuditLogConfigSchema.parse({})),
-  logFile: LogFileConfigSchema.default(LogFileConfigSchema.parse({})),
-  pricingOverrides: z
-    .array(ModelPricingOverrideSchema)
-    .default([]),
-  heartbeat: HeartbeatConfigSchema.default(HeartbeatConfigSchema.parse({})),
-  swarm: SwarmConfigSchema.default(SwarmConfigSchema.parse({})),
-  mcp: McpConfigSchema.default(McpConfigSchema.parse({})),
-  skills: SkillsConfigSchema.default(SkillsConfigSchema.parse({})),
-  workspaceGit: WorkspaceGitConfigSchema.default(WorkspaceGitConfigSchema.parse({})),
-  calls: CallsConfigSchema.default(CallsConfigSchema.parse({})),
-  sms: SmsConfigSchema.default(SmsConfigSchema.parse({})),
-  ingress: IngressConfigSchema,
-  platform: PlatformConfigSchema.default(PlatformConfigSchema.parse({})),
-  daemon: DaemonConfigSchema.default(DaemonConfigSchema.parse({})),
-  notifications: NotificationsConfigSchema.default(NotificationsConfigSchema.parse({})),
-  ui: UiConfigSchema.default(UiConfigSchema.parse({})),
-  featureFlags: z
-    .record(z.string(), z.boolean({ error: 'featureFlags values must be booleans' }))
-    .default({} as any),
-  assistantFeatureFlagValues: z
-    .record(z.string(), z.boolean({ error: 'assistantFeatureFlagValues values must be booleans' }))
-    .optional(),
-}).superRefine((config, ctx) => {
-  if (config.contextWindow?.targetInputTokens != null && config.contextWindow?.maxInputTokens != null &&
-      config.contextWindow.targetInputTokens >= config.contextWindow.maxInputTokens) {
-    ctx.addIssue({
-      code: z.ZodIssueCode.custom,
-      path: ['contextWindow', 'targetInputTokens'],
-      message: 'contextWindow.targetInputTokens must be less than contextWindow.maxInputTokens',
-    });
-  }
-  const segmentation = config.memory?.segmentation;
-  if (segmentation && segmentation.overlapTokens >= segmentation.targetTokens) {
-    ctx.addIssue({
-      code: z.ZodIssueCode.custom,
-      path: ['memory', 'segmentation', 'overlapTokens'],
-      message: 'memory.segmentation.overlapTokens must be less than memory.segmentation.targetTokens',
-    });
-  }
-  const dynamicBudget = config.memory?.retrieval?.dynamicBudget;
-  if (dynamicBudget && dynamicBudget.minInjectTokens > dynamicBudget.maxInjectTokens) {
-    ctx.addIssue({
-      code: z.ZodIssueCode.custom,
-      path: ['memory', 'retrieval', 'dynamicBudget'],
-      message: 'memory.retrieval.dynamicBudget.minInjectTokens must be <= memory.retrieval.dynamicBudget.maxInjectTokens',
-    });
-  }
-});
+export const AssistantConfigSchema = z
+  .object({
+    provider: z
+      .enum(VALID_PROVIDERS, {
+        error: `provider must be one of: ${VALID_PROVIDERS.join(", ")}`,
+      })
+      .default("anthropic"),
+    model: z
+      .string({ error: "model must be a string" })
+      .default("claude-opus-4-6"),
+    imageGenModel: z
+      .string({ error: "imageGenModel must be a string" })
+      .default("gemini-2.5-flash-image"),
+    apiKeys: z
+      .record(
+        z.string(),
+        z.string({ error: "Each apiKeys value must be a string" }),
+      )
+      .default({} as any),
+    webSearchProvider: z
+      .enum(VALID_WEB_SEARCH_PROVIDERS, {
+        error: `webSearchProvider must be one of: ${VALID_WEB_SEARCH_PROVIDERS.join(", ")}`,
+      })
+      .default("anthropic-native"),
+    providerOrder: z
+      .array(
+        z.enum(VALID_PROVIDERS, {
+          error: `Each providerOrder entry must be one of: ${VALID_PROVIDERS.join(", ")}`,
+        }),
+      )
+      .default([]),
+    maxTokens: z
+      .number({ error: "maxTokens must be a number" })
+      .int("maxTokens must be an integer")
+      .positive("maxTokens must be a positive integer")
+      .default(16000),
+    maxToolUseTurns: z
+      .number({ error: "maxToolUseTurns must be a number" })
+      .int("maxToolUseTurns must be an integer")
+      .nonnegative("maxToolUseTurns must be a non-negative integer")
+      .default(40),
+    thinking: ThinkingConfigSchema.default(ThinkingConfigSchema.parse({})),
+    contextWindow: ContextWindowConfigSchema.default(
+      ContextWindowConfigSchema.parse({}),
+    ),
+    memory: MemoryConfigSchema.default(MemoryConfigSchema.parse({})),
+    dataDir: z
+      .string({ error: "dataDir must be a string" })
+      .default(getDataDir()),
+    timeouts: TimeoutConfigSchema.default(TimeoutConfigSchema.parse({})),
+    sandbox: SandboxConfigSchema.default(SandboxConfigSchema.parse({})),
+    rateLimit: RateLimitConfigSchema.default(RateLimitConfigSchema.parse({})),
+    secretDetection: SecretDetectionConfigSchema.default(
+      SecretDetectionConfigSchema.parse({}),
+    ),
+    permissions: PermissionsConfigSchema.default(
+      PermissionsConfigSchema.parse({}),
+    ),
+    auditLog: AuditLogConfigSchema.default(AuditLogConfigSchema.parse({})),
+    logFile: LogFileConfigSchema.default(LogFileConfigSchema.parse({})),
+    pricingOverrides: z.array(ModelPricingOverrideSchema).default([]),
+    heartbeat: HeartbeatConfigSchema.default(HeartbeatConfigSchema.parse({})),
+    swarm: SwarmConfigSchema.default(SwarmConfigSchema.parse({})),
+    mcp: McpConfigSchema.default(McpConfigSchema.parse({})),
+    skills: SkillsConfigSchema.default(SkillsConfigSchema.parse({})),
+    workspaceGit: WorkspaceGitConfigSchema.default(
+      WorkspaceGitConfigSchema.parse({}),
+    ),
+    calls: CallsConfigSchema.default(CallsConfigSchema.parse({})),
+    elevenlabs: ElevenLabsConfigSchema.default(
+      ElevenLabsConfigSchema.parse({}),
+    ),
+    sms: SmsConfigSchema.default(SmsConfigSchema.parse({})),
+    ingress: IngressConfigSchema,
+    platform: PlatformConfigSchema.default(PlatformConfigSchema.parse({})),
+    daemon: DaemonConfigSchema.default(DaemonConfigSchema.parse({})),
+    notifications: NotificationsConfigSchema.default(
+      NotificationsConfigSchema.parse({}),
+    ),
+    ui: UiConfigSchema.default(UiConfigSchema.parse({})),
+    featureFlags: z
+      .record(
+        z.string(),
+        z.boolean({ error: "featureFlags values must be booleans" }),
+      )
+      .default({} as any),
+    assistantFeatureFlagValues: z
+      .record(
+        z.string(),
+        z.boolean({
+          error: "assistantFeatureFlagValues values must be booleans",
+        }),
+      )
+      .optional(),
+  })
+  .superRefine((config, ctx) => {
+    if (
+      config.contextWindow?.targetInputTokens != null &&
+      config.contextWindow?.maxInputTokens != null &&
+      config.contextWindow.targetInputTokens >=
+        config.contextWindow.maxInputTokens
+    ) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["contextWindow", "targetInputTokens"],
+        message:
+          "contextWindow.targetInputTokens must be less than contextWindow.maxInputTokens",
+      });
+    }
+    const segmentation = config.memory?.segmentation;
+    if (
+      segmentation &&
+      segmentation.overlapTokens >= segmentation.targetTokens
+    ) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["memory", "segmentation", "overlapTokens"],
+        message:
+          "memory.segmentation.overlapTokens must be less than memory.segmentation.targetTokens",
+      });
+    }
+    const dynamicBudget = config.memory?.retrieval?.dynamicBudget;
+    if (
+      dynamicBudget &&
+      dynamicBudget.minInjectTokens > dynamicBudget.maxInjectTokens
+    ) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["memory", "retrieval", "dynamicBudget"],
+        message:
+          "memory.retrieval.dynamicBudget.minInjectTokens must be <= memory.retrieval.dynamicBudget.maxInjectTokens",
+      });
+    }
+  });
 
 export type AssistantConfig = z.infer<typeof AssistantConfigSchema>;

package/src/config/types.ts

@@ -4,7 +4,6 @@ export type {
   CallerIdentityConfig,
   CallsConfig,
   CallsDisclosureConfig,
-  CallsElevenLabsConfig,
   CallsSafetyConfig,
   CallsVoiceConfig,
   ContextWindowConfig,

package/src/daemon/handlers/browser.ts

@@ -1,8 +1,3 @@
-import { browserManager } from "../../tools/browser/browser-manager.js";
 import { defineHandlers } from "./shared.js";
 
-export const browserHandlers = defineHandlers({
-  browser_cdp_response: (msg) => {
-    browserManager.resolveCDPResponse(msg.sessionId, msg.success, msg.declined);
-  },
-});
+export const browserHandlers = defineHandlers({});

package/src/daemon/ipc-contract/browser.ts

@@ -1,19 +1,10 @@
 // Browser interaction types.
-
-export interface BrowserCDPRequest {
-  type: "browser_cdp_request";
-  sessionId: string;
-}
-
-export interface BrowserCDPResponse {
-  type: "browser_cdp_response";
-  sessionId: string;
-  success: boolean;
-  declined?: boolean;
-}
+// CDP request/response IPC was removed — Playwright's connectOverCDP is broken
+// under Bun's runtime. Browser is now launched directly via Playwright.
 
 // --- Domain-level union aliases (consumed by the barrel file) ---
+// These must exist (even as `never`) so the barrel union compiles.
 
-export type _BrowserClientMessages = BrowserCDPResponse;
+export type _BrowserClientMessages = never;
 
-export type _BrowserServerMessages = BrowserCDPRequest;
+export type _BrowserServerMessages = never;

package/src/daemon/ipc-contract-inventory.json

@@ -62,7 +62,6 @@
     "apps_list",
     "assistant_inbox_escalation",
     "auth",
-    "browser_cdp_response",
     "bundle_app",
     "cancel",
     "confirmation_response",
@@ -206,7 +205,6 @@
     "assistant_thinking_delta",
     "auth_result",
     "avatar_updated",
-    "browser_cdp_request",
     "bundle_app_response",
     "client_settings_update",
     "confirmation_request",

package/src/daemon/session-agent-loop-handlers.ts

@@ -150,6 +150,9 @@ const TOOL_FRIENDLY_NAMES: Record<string, string> = {
   browser_wait: 'browser',
   app_create: 'app',
   app_update: 'app',
+  skill_load: 'skill',
+  app_file_edit: 'app file',
+  app_file_write: 'app file',
 };
 
 function friendlyToolName(name: string): string {

package/src/daemon/session-runtime-assembly.ts

@@ -314,7 +314,7 @@ export function resolveChannelCapabilities(
       return {
         channel,
         dashboardCapable: supportsDesktopUi,
-        supportsDynamicUi: supportsDesktopUi,
+        supportsDynamicUi: supportsDesktopUi || iface === "vellum",
         supportsVoiceInput: supportsDesktopUi,
         pttActivationKey: sanitizePttActivationKey(
           pttMetadata?.pttActivationKey,
@@ -592,12 +592,14 @@ export function injectChannelCapabilityContext(
     lines.push(
       "- Do NOT reference the dashboard UI, settings panels, or visual preference pickers.",
     );
-    lines.push(
-      "- Do NOT use ui_show, ui_update, or app_create — this channel cannot render them.",
-    );
-    lines.push(
-      "- Present information as well-formatted text instead of dynamic UI.",
-    );
+    if (!caps.supportsDynamicUi) {
+      lines.push(
+        "- Do NOT use ui_show, ui_update, or app_create — this channel cannot render them.",
+      );
+      lines.push(
+        "- Present information as well-formatted text instead of dynamic UI.",
+      );
+    }
     lines.push(
       "- Defer dashboard-specific actions (e.g. accent color selection) by telling the user",
     );

package/src/mcp/client.ts

@@ -75,7 +75,8 @@ export class McpClient {
 
       if (isHttpTransport) {
         const isAuthError = err instanceof UnauthorizedError
-          || (err instanceof Error && /\b(401|403|unauthorized|forbidden)\b/i.test(err.message));
+          || (err instanceof Error && /\b(401|403|unauthorized|forbidden)\b/i.test(err.message))
+          || (err != null && typeof err === 'object' && 'code' in err && (err.code === 401 || err.code === 403));
 
         if (isAuthError) {
           // Auth-related — user can run `vellum mcp auth <name>` to authenticate.