@vellumai/assistant 0.4.26 → 0.4.29

package/src/config/bundled-skills/media-processing/tools/media-diagnostics.ts

@@ -6,17 +6,21 @@
  * All metrics are generic media-processing infrastructure.
  */
 
-import { readFile } from 'node:fs/promises';
-import { dirname,join } from 'node:path';
+import { readFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
 
 import {
   getKeyframesForAsset,
   getMediaAssetById,
   getProcessingStagesForAsset,
   type ProcessingStage,
-} from '../../../../memory/media-store.js';
-import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
-import type { PreprocessManifest } from '../services/preprocess.js';
+} from "../../../../memory/media-store.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import type { PreprocessManifest } from "../services/preprocess.js";
+import type { ReduceCostData } from "../services/reduce.js";
 // ---------------------------------------------------------------------------
 // Cost estimation constants (Gemini 2.5 Flash pricing)
 // ---------------------------------------------------------------------------
@@ -47,9 +51,13 @@ interface DiagnosticReport {
   };
   stages: StageDiagnostic[];
   costEstimate: {
-    keyframeCount: number;
-    estimatedSegments: number;
-    estimatedCostPerSegment: number;
+    mapPhase: {
+      keyframeCount: number;
+      estimatedSegments: number;
+      estimatedCostPerSegment: number;
+      estimatedMapCost: number;
+    };
+    reduceCost: ReduceCostData | null;
     estimatedTotalCost: number;
     currency: string;
     note: string;
@@ -64,7 +72,7 @@ function computeStageDuration(stage: ProcessingStage): number | null {
   if (stage.startedAt == null) return null;
   if (stage.completedAt != null) return stage.completedAt - stage.startedAt;
   // Only use Date.now() as a fallback for currently running stages
-  if (stage.status === 'running') return Date.now() - stage.startedAt;
+  if (stage.status === "running") return Date.now() - stage.startedAt;
   // For failed/pending stages without completedAt, duration is unknown
   return null;
 }
@@ -79,7 +87,7 @@ export async function run(
 ): Promise<ToolExecutionResult> {
   const assetId = input.asset_id as string | undefined;
   if (!assetId) {
-    return { content: 'asset_id is required.', isError: true };
+    return { content: "asset_id is required.", isError: true };
   }
 
   const asset = getMediaAssetById(assetId);
@@ -105,9 +113,14 @@ export async function run(
 
   // Prefer actual segment count from preprocess manifest when available
   let estimatedSegments: number;
-  const manifestPath = join(dirname(asset.filePath), 'pipeline', asset.id, 'manifest.json');
+  const manifestPath = join(
+    dirname(asset.filePath),
+    "pipeline",
+    asset.id,
+    "manifest.json",
+  );
   try {
-    const raw = await readFile(manifestPath, 'utf-8');
+    const raw = await readFile(manifestPath, "utf-8");
     const manifest: PreprocessManifest = JSON.parse(raw);
     estimatedSegments = manifest.segments.length;
   } catch {
@@ -115,7 +128,30 @@ export async function run(
     estimatedSegments = Math.ceil(keyframeCount / 10);
   }
 
-  const estimatedTotalCost = estimatedSegments * ESTIMATED_COST_PER_SEGMENT_USD;
+  const estimatedMapCost = estimatedSegments * ESTIMATED_COST_PER_SEGMENT_USD;
+
+  // Load reduce cost data if available
+  const reduceCostPath = join(
+    dirname(asset.filePath),
+    "pipeline",
+    asset.id,
+    "reduce-cost.json",
+  );
+  let reduceCost: ReduceCostData | null = null;
+  try {
+    const raw = await readFile(reduceCostPath, "utf-8");
+    reduceCost = JSON.parse(raw) as ReduceCostData;
+  } catch {
+    // No reduce cost data yet
+  }
+
+  // Combine map + reduce costs for the total estimate
+  // Reduce cost is token-based; use a rough estimate of $3/M input + $15/M output (Claude Sonnet-class)
+  const reduceEstimatedCost = reduceCost
+    ? (reduceCost.totalInputTokens * 3 + reduceCost.totalOutputTokens * 15) /
+      1_000_000
+    : 0;
+  const estimatedTotalCost = estimatedMapCost + reduceEstimatedCost;
 
   const report: DiagnosticReport = {
     assetId: asset.id,
@@ -128,12 +164,16 @@ export async function run(
     },
     stages: stageDiagnostics,
     costEstimate: {
-      keyframeCount,
-      estimatedSegments,
-      estimatedCostPerSegment: ESTIMATED_COST_PER_SEGMENT_USD,
-      estimatedTotalCost: Math.round(estimatedTotalCost * 1000) / 1000,
-      currency: 'USD',
-      note: 'Gemini 2.5 Flash for Map phase; Claude for Reduce phase (additional cost).',
+      mapPhase: {
+        keyframeCount,
+        estimatedSegments,
+        estimatedCostPerSegment: ESTIMATED_COST_PER_SEGMENT_USD,
+        estimatedMapCost: Math.round(estimatedMapCost * 1000) / 1000,
+      },
+      reduceCost,
+      estimatedTotalCost: Math.round(estimatedTotalCost * 1000000) / 1000000,
+      currency: "USD",
+      note: "Map: Gemini 2.5 Flash per segment. Reduce: Claude token-based ($3/M input, $15/M output).",
     },
   };
 

package/src/config/bundled-skills/media-processing/tools/media-status.ts

@@ -4,8 +4,11 @@ import {
   getMediaAssetsByStatus,
   getProcessingStagesForAsset,
   type MediaAssetStatus,
-} from '../../../../memory/media-store.js';
-import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
+} from "../../../../memory/media-store.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
 
 // ---------------------------------------------------------------------------
 // Main entry point
@@ -36,7 +39,10 @@ export async function run(
   if (filePath) {
     const asset = getMediaAssetByFilePath(filePath);
     if (!asset) {
-      return { content: `No media asset found for path: ${filePath}`, isError: true };
+      return {
+        content: `No media asset found for path: ${filePath}`,
+        isError: true,
+      };
     }
     const stages = getProcessingStagesForAsset(asset.id);
     return {
@@ -47,10 +53,15 @@ export async function run(
 
   // Query by status filter
   if (statusFilter) {
-    const validStatuses: MediaAssetStatus[] = ['registered', 'processing', 'indexed', 'failed'];
+    const validStatuses: MediaAssetStatus[] = [
+      "registered",
+      "processing",
+      "indexed",
+      "failed",
+    ];
     if (!validStatuses.includes(statusFilter)) {
       return {
-        content: `Invalid status filter: ${statusFilter}. Valid values: ${validStatuses.join(', ')}`,
+        content: `Invalid status filter: ${statusFilter}. Valid values: ${validStatuses.join(", ")}`,
         isError: true,
       };
     }
@@ -60,16 +71,21 @@ export async function run(
       stages: getProcessingStagesForAsset(asset.id),
     }));
     return {
-      content: JSON.stringify({
-        count: results.length,
-        assets: results,
-      }, null, 2),
+      content: JSON.stringify(
+        {
+          count: results.length,
+          assets: results,
+        },
+        null,
+        2,
+      ),
       isError: false,
     };
   }
 
   return {
-    content: 'Provide at least one query parameter: asset_id, file_path, or status_filter.',
+    content:
+      "Provide at least one query parameter: asset_id, file_path, or status_filter.",
     isError: true,
   };
 }

package/src/config/bundled-skills/media-processing/tools/query-media-events.ts

@@ -7,14 +7,21 @@
  * video content.
  */
 
-import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
-import { reduceForAsset, type ReduceOptions, type ReduceResult } from '../services/reduce.js';
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import {
+  reduceForAsset,
+  type ReduceOptions,
+  type ReduceResult,
+} from "../services/reduce.js";
 
 // ---------------------------------------------------------------------------
 // Exported function for job handler use (one-shot merge mode)
 // ---------------------------------------------------------------------------
 
-export { reduceForAsset } from '../services/reduce.js';
+export { reduceForAsset } from "../services/reduce.js";
 
 // ---------------------------------------------------------------------------
 // Tool entry point
@@ -26,12 +33,12 @@ export async function run(
 ): Promise<ToolExecutionResult> {
   const assetId = input.asset_id as string | undefined;
   if (!assetId) {
-    return { content: 'asset_id is required.', isError: true };
+    return { content: "asset_id is required.", isError: true };
   }
 
   const query = input.query as string | undefined;
   if (!query) {
-    return { content: 'query is required.', isError: true };
+    return { content: "query is required.", isError: true };
   }
 
   const systemPrompt = input.system_prompt as string | undefined;
@@ -44,18 +51,26 @@ export async function run(
   };
 
   try {
-    const result: ReduceResult = await reduceForAsset(assetId, options, context.onOutput);
+    const result: ReduceResult = await reduceForAsset(
+      assetId,
+      options,
+      context.onOutput,
+    );
 
     return {
-      content: JSON.stringify({
-        query,
-        answer: result.answer,
-        model: result.model,
-        usage: {
-          inputTokens: result.inputTokens,
-          outputTokens: result.outputTokens,
+      content: JSON.stringify(
+        {
+          query,
+          answer: result.answer,
+          model: result.model,
+          usage: {
+            inputTokens: result.inputTokens,
+            outputTokens: result.outputTokens,
+          },
         },
-      }, null, 2),
+        null,
+        2,
+      ),
       isError: false,
     };
   } catch (err) {

package/src/config/bundled-skills/messaging/SKILL.md

@@ -160,6 +160,10 @@ SMS is supported as a messaging provider with limited capabilities. The conversa
 
 - **Add Reaction**: Add an emoji reaction to a message
 - **Leave Channel**: Leave a Slack channel
+- **Edit Message**: `slack_edit_message` — edit a message the assistant previously sent. Requires `channel_id` and the message timestamp (`ts`) from the original send response. High risk — requires confidence score.
+- **Delete Message**: `slack_delete_message` — delete a message the assistant previously sent. Requires `channel_id` and the message timestamp (`ts`). High risk — requires confidence score. This is irreversible.
+
+When sending a Slack message, retain the `ts` (message timestamp) from the send response — it is needed to edit or delete that message later. Only messages sent by the assistant's bot can be edited or deleted.
 
 ### Gmail-specific
 
@@ -291,7 +295,7 @@ Use `messaging_analyze_activity` to classify channels or conversations by activi
 
 When a user asks to declutter, clean up, or organize their email — start scanning immediately. Don't ask what kind of cleanup they want or request permission to read their inbox. Go straight to scanning — but once results are ready, always show them via `ui_show` and let the user choose actions before archiving or unsubscribing.
 
-**CRITICAL**: Never call `gmail_batch_archive`, `gmail_archive_by_query`, `gmail_unsubscribe`, or `messaging_archive_by_sender` unless the user has clicked an action button on the table for that specific batch. Each batch of results requires its own explicit user confirmation via the table UI. If the user says "keep going" or "keep decluttering," that means scan and present a new table — NOT auto-archive. Previous batch approvals do not carry forward.
+**CRITICAL**: Never call `gmail_batch_archive`, `gmail_archive_by_query`, `gmail_unsubscribe`, or `messaging_archive_by_sender` unless the user has clicked an action button on the table for that specific batch. Each batch of results requires its own explicit user confirmation via the table UI. If the user says "keep going" or "keep decluttering," that means scan and present a new table — NOT auto-archive. Previous batch approvals do not carry forward, but **deselections DO carry forward**: when the user deselects senders from a cleanup table, the system records those deselections as user preferences. Before building the next cleanup table, check `<dynamic-user-profile>` for previously deselected senders and exclude them from future cleanup tables — the user already indicated they want to keep those.
 
 ### Provider Selection
 
@@ -307,7 +311,7 @@ When a user asks to declutter, clean up, or organize their email — start scann
      - **Unsub? cell values**: Use rich cell format: `{ "text": "Yes", "icon": "checkmark.circle.fill", "iconColor": "success" }` when `has_unsubscribe` is true, `{ "text": "No", "icon": "minus.circle", "iconColor": "muted" }` when false.
    - **Non-Gmail columns (exactly 2)**: Sender, Emails Found (omit the Unsub? column — unsubscribe is not available)
    - **Pre-select all rows** (`selected: true`) — users deselect what they want to keep
-   - **Caption**: "Showing emails from last 90 days in Promotions" (or adjusted to match the query used)
+   - **Caption**: Include two parts separated by a newline: (1) data scope, e.g. "Newsletters, notifications, and outreach from last 90 days. Deselect anything you want to keep." (adjusted to match the query used), and (2) for Gmail tables only, the Unsub? column legend: "Unsub? — \"Yes\" means these emails contain an unsubscribe link, so I can opt you out automatically. \"No\" means no unsubscribe link was found — these will be archived but you may continue receiving them."
    - **Gmail action buttons (exactly 2)**: "Archive & Unsubscribe" (primary), "Archive Only" (secondary). **NEVER offer Delete, Trash, or any destructive action.**
    - **Non-Gmail action button (exactly 1)**: "Archive Selected" (primary). Do not offer an unsubscribe button — it is Gmail-specific. **NEVER offer Delete, Trash, or any destructive action.**
 3. **Wait for user action**: Stop and wait. Do NOT proceed to archiving or unsubscribing until the user clicks one of the action buttons on the table. When the user clicks an action button:
@@ -327,9 +331,7 @@ When a user asks to declutter, clean up, or organize their email — start scann
 
 - **Zero results**: Tell the user "No newsletter emails found" and suggest broadening the query (e.g. removing the category filter or extending the date range)
 - **Unsubscribe failures**: Report per-sender success/failure; the existing `gmail_unsubscribe` tool handles edge cases
-- **Truncation handling**: The scan covers up to 2000 messages per call (cap 5000). The default 2000 captures the vast majority of newsletter senders. If `truncated` is true:
-  - Tell the user: "Scanned [N] messages — here are your top senders." The top senders are almost always captured in the first pass.
-  - If the user explicitly asks to scan more, make ONE additional call with the `page_token`. Never chain more than 2 calls total.
+- **Truncation handling**: The scan covers up to 5,000 messages by default (cap 10,000). If `truncated` is true, the top senders are still captured — don't offer to scan more. Tell the user: "Scanned [N] messages — here are your top senders."
 - **Time budget exceeded**: If the scan returns `time_budget_exceeded: true`, present whatever results were collected. Do not retry or continue — the partial results are useful as-is.
 
 ### Scan ID

package/src/config/bundled-skills/messaging/TOOLS.json

@@ -959,15 +959,15 @@
           },
           "max_messages": {
             "type": "number",
-            "description": "Maximum messages to scan (default 2000, cap 5000)"
+            "description": "Maximum messages to scan (default 5000, cap 10000)"
           },
           "max_senders": {
             "type": "number",
-            "description": "Maximum senders to return (default 30)"
+            "description": "Maximum senders to return (default 50)"
           },
           "page_token": {
             "type": "string",
-            "description": "Resume token from a previous scan's next_page_token to continue scanning beyond the cap"
+            "description": "Resume token from a previous scan (rarely needed — scans now cover up to 10,000 messages in a single call)"
           }
         }
       },
@@ -992,7 +992,7 @@
           },
           "max_messages": {
             "type": "number",
-            "description": "Maximum messages to scan (default 2000, cap 2000)"
+            "description": "Maximum messages to scan (default 5000, cap 5000)"
           },
           "max_senders": {
             "type": "number",
@@ -1000,7 +1000,7 @@
           },
           "page_token": {
             "type": "string",
-            "description": "Resume token from a previous scan's next_page_token to continue scanning beyond the cap"
+            "description": "Resume token from a previous scan (rarely needed — scans now cover up to 5,000 messages in a single call)"
           }
         }
       },
@@ -1046,7 +1046,7 @@
         "properties": {
           "max_messages": {
             "type": "number",
-            "description": "Maximum messages to scan (default 500, cap 2000)"
+            "description": "Maximum messages to scan (default 2000, cap 5000)"
           },
           "max_senders": {
             "type": "number",
@@ -1062,7 +1062,7 @@
           },
           "page_token": {
             "type": "string",
-            "description": "Resume token from a previous scan's next_page_token to continue scanning beyond the cap"
+            "description": "Resume token from a previous scan (rarely needed — scans now cover up to 5,000 messages in a single call)"
           }
         }
       },

package/src/config/bundled-skills/messaging/tools/gmail-archive-by-query.ts

@@ -1,25 +1,36 @@
-import { batchModifyMessages,listMessages } from '../../../../messaging/providers/gmail/client.js';
-import { getMessagingProvider } from '../../../../messaging/registry.js';
-import { withValidToken } from '../../../../security/token-manager.js';
-import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
-import { err,ok } from './shared.js';
+import {
+  batchModifyMessages,
+  listMessages,
+} from "../../../../messaging/providers/gmail/client.js";
+import { getMessagingProvider } from "../../../../messaging/registry.js";
+import { withValidToken } from "../../../../security/token-manager.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import { err, ok } from "./shared.js";
 
 const BATCH_MODIFY_LIMIT = 1000;
 const MAX_MESSAGES = 5000;
 
-export async function run(input: Record<string, unknown>, context: ToolContext): Promise<ToolExecutionResult> {
+export async function run(
+  input: Record<string, unknown>,
+  context: ToolContext,
+): Promise<ToolExecutionResult> {
   if (!context.triggeredBySurfaceAction) {
-    return err('This tool requires user confirmation via a surface action. Present results in a selection table with action buttons and wait for the user to click before proceeding.');
+    return err(
+      "This tool requires user confirmation via a surface action. Present results in a selection table with action buttons and wait for the user to click before proceeding.",
+    );
   }
 
   const query = input.query as string;
 
   if (!query) {
-    return err('query is required.');
+    return err("query is required.");
   }
 
   try {
-    const provider = getMessagingProvider('gmail');
+    const provider = getMessagingProvider("gmail");
     return withValidToken(provider.credentialService, async (token) => {
       // Paginate through matching messages, capped to prevent unbounded API/memory usage
       const allMessageIds: string[] = [];
@@ -27,7 +38,12 @@ export async function run(input: Record<string, unknown>, context: ToolContext):
       let truncated = false;
 
       while (allMessageIds.length < MAX_MESSAGES) {
-        const listResp = await listMessages(token, query, Math.min(500, MAX_MESSAGES - allMessageIds.length), pageToken);
+        const listResp = await listMessages(
+          token,
+          query,
+          Math.min(500, MAX_MESSAGES - allMessageIds.length),
+          pageToken,
+        );
         const ids = (listResp.messages ?? []).map((m) => m.id);
         if (ids.length === 0) break;
         allMessageIds.push(...ids);
@@ -41,18 +57,20 @@ export async function run(input: Record<string, unknown>, context: ToolContext):
       }
 
       if (allMessageIds.length === 0) {
-        return ok('No messages matched the query. Nothing archived.');
+        return ok("No messages matched the query. Nothing archived.");
       }
 
       // Archive in chunks of BATCH_MODIFY_LIMIT (Gmail's per-call limit)
       for (let i = 0; i < allMessageIds.length; i += BATCH_MODIFY_LIMIT) {
         const chunk = allMessageIds.slice(i, i + BATCH_MODIFY_LIMIT);
-        await batchModifyMessages(token, chunk, { removeLabelIds: ['INBOX'] });
+        await batchModifyMessages(token, chunk, { removeLabelIds: ["INBOX"] });
       }
 
       const summary = `Archived ${allMessageIds.length} message(s) matching query: ${query}`;
       if (truncated) {
-        return ok(`${summary}\n\nNote: this operation was capped at ${MAX_MESSAGES} messages. Additional messages matching the query may remain in the inbox. Run the command again to archive more.`);
+        return ok(
+          `${summary}\n\nNote: this operation was capped at ${MAX_MESSAGES} messages. Additional messages matching the query may remain in the inbox. Run the command again to archive more.`,
+        );
       }
       return ok(summary);
     });

package/src/config/bundled-skills/messaging/tools/gmail-archive.ts

@@ -1,21 +1,27 @@
-import { modifyMessage } from '../../../../messaging/providers/gmail/client.js';
-import { getMessagingProvider } from '../../../../messaging/registry.js';
-import { withValidToken } from '../../../../security/token-manager.js';
-import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
-import { err,ok } from './shared.js';
+import { modifyMessage } from "../../../../messaging/providers/gmail/client.js";
+import { getMessagingProvider } from "../../../../messaging/registry.js";
+import { withValidToken } from "../../../../security/token-manager.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import { err, ok } from "./shared.js";
 
-export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+export async function run(
+  input: Record<string, unknown>,
+  _context: ToolContext,
+): Promise<ToolExecutionResult> {
   const messageId = input.message_id as string;
 
   if (!messageId) {
-    return err('message_id is required.');
+    return err("message_id is required.");
   }
 
   try {
-    const provider = getMessagingProvider('gmail');
+    const provider = getMessagingProvider("gmail");
     return withValidToken(provider.credentialService, async (token) => {
-      await modifyMessage(token, messageId, { removeLabelIds: ['INBOX'] });
-      return ok('Message archived.');
+      await modifyMessage(token, messageId, { removeLabelIds: ["INBOX"] });
+      return ok("Message archived.");
     });
   } catch (e) {
     return err(e instanceof Error ? e.message : String(e));

package/src/config/bundled-skills/messaging/tools/gmail-batch-label.ts

@@ -1,22 +1,31 @@
-import { batchModifyMessages } from '../../../../messaging/providers/gmail/client.js';
-import { getMessagingProvider } from '../../../../messaging/registry.js';
-import { withValidToken } from '../../../../security/token-manager.js';
-import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
-import { err,ok } from './shared.js';
+import { batchModifyMessages } from "../../../../messaging/providers/gmail/client.js";
+import { getMessagingProvider } from "../../../../messaging/registry.js";
+import { withValidToken } from "../../../../security/token-manager.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import { err, ok } from "./shared.js";
 
-export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+export async function run(
+  input: Record<string, unknown>,
+  _context: ToolContext,
+): Promise<ToolExecutionResult> {
   const messageIds = input.message_ids as string[];
   const addLabelIds = input.add_label_ids as string[] | undefined;
   const removeLabelIds = input.remove_label_ids as string[] | undefined;
 
   if (!messageIds?.length) {
-    return err('message_ids is required and must not be empty.');
+    return err("message_ids is required and must not be empty.");
   }
 
   try {
-    const provider = getMessagingProvider('gmail');
+    const provider = getMessagingProvider("gmail");
     return withValidToken(provider.credentialService, async (token) => {
-      await batchModifyMessages(token, messageIds, { addLabelIds, removeLabelIds });
+      await batchModifyMessages(token, messageIds, {
+        addLabelIds,
+        removeLabelIds,
+      });
       return ok(`Labels updated on ${messageIds.length} message(s).`);
     });
   } catch (e) {

package/src/config/bundled-skills/messaging/tools/gmail-download-attachment.ts

@@ -1,35 +1,42 @@
-import { writeFile } from 'node:fs/promises';
-import { basename, resolve } from 'node:path';
+import { writeFile } from "node:fs/promises";
+import { basename, resolve } from "node:path";
 
-import { getAttachment } from '../../../../messaging/providers/gmail/client.js';
-import { getMessagingProvider } from '../../../../messaging/registry.js';
-import { withValidToken } from '../../../../security/token-manager.js';
-import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
-import { err,ok } from './shared.js';
+import { getAttachment } from "../../../../messaging/providers/gmail/client.js";
+import { getMessagingProvider } from "../../../../messaging/registry.js";
+import { withValidToken } from "../../../../security/token-manager.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import { err, ok } from "./shared.js";
 
-export async function run(input: Record<string, unknown>, context: ToolContext): Promise<ToolExecutionResult> {
+export async function run(
+  input: Record<string, unknown>,
+  context: ToolContext,
+): Promise<ToolExecutionResult> {
   const messageId = input.message_id as string;
   const attachmentId = input.attachment_id as string;
   const filename = input.filename as string;
 
-  if (!messageId) return err('message_id is required.');
-  if (!attachmentId) return err('attachment_id is required.');
-  if (!filename) return err('filename is required.');
+  if (!messageId) return err("message_id is required.");
+  if (!attachmentId) return err("attachment_id is required.");
+  if (!filename) return err("filename is required.");
 
   try {
-    const provider = getMessagingProvider('gmail');
+    const provider = getMessagingProvider("gmail");
     return withValidToken(provider.credentialService, async (token) => {
       const attachment = await getAttachment(token, messageId, attachmentId);
 
       // Gmail returns base64url; convert to standard base64 then to Buffer
-      const base64 = attachment.data.replace(/-/g, '+').replace(/_/g, '/');
-      const buffer = Buffer.from(base64, 'base64');
+      const base64 = attachment.data.replace(/-/g, "+").replace(/_/g, "/");
+      const buffer = Buffer.from(base64, "base64");
 
       const outputDir = context.workingDir ?? process.cwd();
       // Sanitize filename: strip path separators to prevent traversal attacks from crafted MIME filenames
-      const safeName = basename(filename).replace(/\.\./g, '_');
+      const safeName = basename(filename).replace(/\.\./g, "_");
       const outputPath = resolve(outputDir, safeName);
-      if (!outputPath.startsWith(outputDir)) return err('Invalid filename: path traversal detected.');
+      if (!outputPath.startsWith(outputDir))
+        return err("Invalid filename: path traversal detected.");
       await writeFile(outputPath, buffer);
 
       return ok(`Attachment saved to ${outputPath} (${buffer.length} bytes).`);