@vellumai/assistant 0.4.30 → 0.4.32

package/src/calls/voice-control-protocol.ts

@@ -0,0 +1,184 @@
+/**
+ * Voice call control marker constants, regexes, and stripping utilities.
+ *
+ * Centralizes all marker definitions so call-controller.ts and
+ * voice-session-bridge.ts share a single source of truth.
+ */
+
+// ---------------------------------------------------------------------------
+// String constants
+// ---------------------------------------------------------------------------
+
+export const CALL_OPENING_MARKER = "[CALL_OPENING]";
+export const CALL_OPENING_ACK_MARKER = "[CALL_OPENING_ACK]";
+export const END_CALL_MARKER = "[END_CALL]";
+
+// ---------------------------------------------------------------------------
+// Regexes
+// ---------------------------------------------------------------------------
+
+export const ASK_GUARDIAN_CAPTURE_REGEX = /\[ASK_GUARDIAN:\s*(.+?)\]/;
+export const ASK_GUARDIAN_MARKER_REGEX = /\[ASK_GUARDIAN:\s*.+?\]/g;
+
+// Flexible prefix for ASK_GUARDIAN_APPROVAL — tolerates variable whitespace
+// after the colon so the marker is recognized even if the model omits the
+// space or inserts a newline.
+export const ASK_GUARDIAN_APPROVAL_PREFIX_RE = /\[ASK_GUARDIAN_APPROVAL:\s*/;
+
+export const USER_ANSWERED_MARKER_REGEX = /\[USER_ANSWERED:\s*.+?\]/g;
+export const USER_INSTRUCTION_MARKER_REGEX = /\[USER_INSTRUCTION:\s*.+?\]/g;
+export const CALL_OPENING_MARKER_REGEX = /\[CALL_OPENING\]/g;
+export const CALL_OPENING_ACK_MARKER_REGEX = /\[CALL_OPENING_ACK\]/g;
+export const END_CALL_MARKER_REGEX = /\[END_CALL\]/g;
+export const GUARDIAN_TIMEOUT_MARKER_REGEX = /\[GUARDIAN_TIMEOUT\]/g;
+export const GUARDIAN_UNAVAILABLE_MARKER_REGEX = /\[GUARDIAN_UNAVAILABLE\]/g;
+
+// ---------------------------------------------------------------------------
+// Balanced JSON extraction (used by stripGuardianApprovalMarkers)
+// ---------------------------------------------------------------------------
+
+/**
+ * Extract a balanced JSON object from text that starts with an
+ * ASK_GUARDIAN_APPROVAL prefix. Uses brace counting with string-literal
+ * awareness so that `}` or `}]` inside JSON string values does not
+ * terminate the match prematurely.
+ *
+ * Returns the extracted JSON string, the full marker text
+ * (prefix + JSON + "]"), and the start index — or null when:
+ *   - no prefix is found,
+ *   - braces are unbalanced (still streaming), or
+ *   - the closing `]` has not yet arrived (prevents stripping
+ *     the marker body while the bracket leaks into TTS in a later delta).
+ */
+export function extractBalancedJson(
+  text: string,
+): { json: string; fullMatch: string; startIndex: number } | null {
+  const prefixMatch = ASK_GUARDIAN_APPROVAL_PREFIX_RE.exec(text);
+  if (!prefixMatch) return null;
+
+  const prefixIdx = prefixMatch.index;
+  const jsonStart = prefixIdx + prefixMatch[0].length;
+  if (jsonStart >= text.length || text[jsonStart] !== "{") return null;
+
+  let depth = 0;
+  let inString = false;
+  let escape = false;
+
+  for (let i = jsonStart; i < text.length; i++) {
+    const ch = text[i];
+
+    if (escape) {
+      escape = false;
+      continue;
+    }
+
+    if (ch === "\\" && inString) {
+      escape = true;
+      continue;
+    }
+
+    if (ch === '"') {
+      inString = !inString;
+      continue;
+    }
+
+    if (inString) continue;
+
+    if (ch === "{") {
+      depth++;
+    } else if (ch === "}") {
+      depth--;
+      if (depth === 0) {
+        const jsonEnd = i + 1;
+        const json = text.slice(jsonStart, jsonEnd);
+        // Skip any whitespace between the closing '}' and the expected ']'.
+        // Models sometimes emit formatted markers with spaces or newlines
+        // before the bracket (e.g. `{ ... }\n]` or `{ ... } ]`).
+        let bracketIdx = jsonEnd;
+        while (bracketIdx < text.length && /\s/.test(text[bracketIdx])) {
+          bracketIdx++;
+        }
+        // Require the closing ']' to be present before considering this
+        // a complete match. If it hasn't arrived yet (streaming), return
+        // null so the caller keeps buffering.
+        if (bracketIdx >= text.length || text[bracketIdx] !== "]") {
+          return null;
+        }
+        const fullMatchEnd = bracketIdx + 1;
+        const fullMatch = text.slice(prefixIdx, fullMatchEnd);
+        return { json, fullMatch, startIndex: prefixIdx };
+      }
+    }
+  }
+
+  return null; // Unbalanced braces — still streaming
+}
+
+// ---------------------------------------------------------------------------
+// Marker stripping
+// ---------------------------------------------------------------------------
+
+/**
+ * Strip all balanced ASK_GUARDIAN_APPROVAL markers from text, handling
+ * nested braces, string literals, and flexible whitespace correctly.
+ * Only strips complete markers (prefix + balanced JSON + closing `]`).
+ */
+export function stripGuardianApprovalMarkers(text: string): string {
+  let result = text;
+  for (;;) {
+    const match = extractBalancedJson(result);
+    if (!match) break;
+    result =
+      result.slice(0, match.startIndex) +
+      result.slice(match.startIndex + match.fullMatch.length);
+  }
+  return result;
+}
+
+export function stripInternalSpeechMarkers(text: string): string {
+  let result = stripGuardianApprovalMarkers(text);
+  result = result
+    .replace(ASK_GUARDIAN_MARKER_REGEX, "")
+    .replace(USER_ANSWERED_MARKER_REGEX, "")
+    .replace(USER_INSTRUCTION_MARKER_REGEX, "")
+    .replace(CALL_OPENING_MARKER_REGEX, "")
+    .replace(CALL_OPENING_ACK_MARKER_REGEX, "")
+    .replace(END_CALL_MARKER_REGEX, "")
+    .replace(GUARDIAN_TIMEOUT_MARKER_REGEX, "")
+    .replace(GUARDIAN_UNAVAILABLE_MARKER_REGEX, "");
+  return result;
+}
+
+// ---------------------------------------------------------------------------
+// Control marker detection
+// ---------------------------------------------------------------------------
+
+/**
+ * All known control marker prefixes. Used by couldBeControlMarker to detect
+ * whether a buffer that starts with `[` might be the beginning of a control
+ * marker (and should therefore be held rather than flushed to TTS).
+ */
+const CONTROL_MARKER_STRINGS = [
+  "[ASK_GUARDIAN_APPROVAL:",
+  "[ASK_GUARDIAN:",
+  "[USER_ANSWERED:",
+  "[USER_INSTRUCTION:",
+  "[CALL_OPENING]",
+  "[CALL_OPENING_ACK]",
+  "[END_CALL]",
+  "[GUARDIAN_TIMEOUT]",
+  "[GUARDIAN_UNAVAILABLE]",
+];
+
+/**
+ * Check whether `text` could be a partial or complete control marker.
+ *
+ * Returns true if any known marker string is a prefix of `text`
+ * (text starts with the marker) or `text` is a prefix of a marker
+ * (the marker starts with text — i.e. text is still being streamed).
+ */
+export function couldBeControlMarker(text: string): boolean {
+  return CONTROL_MARKER_STRINGS.some(
+    (marker) => marker.startsWith(text) || text.startsWith(marker),
+  );
+}

package/src/calls/voice-session-bridge.ts

@@ -24,14 +24,7 @@ import { checkIngressForSecrets } from "../security/secret-ingress.js";
 import { computeToolApprovalDigest } from "../security/tool-approval-digest.js";
 import { IngressBlockedError } from "../util/errors.js";
 import { getLogger } from "../util/logger.js";
-
-/**
- * Matches the exact `[CALL_OPENING]` marker that call-controller sends for
- * the initial greeting turn. We replace it with a benign content string before
- * persisting so the marker never appears in session history where it could
- * retrigger opener behavior after a barge-in interruption.
- */
-const CALL_OPENING_MARKER = "[CALL_OPENING]";
+import { CALL_OPENING_MARKER } from "./voice-control-protocol.js";
 
 const log = getLogger("voice-session-bridge");
 

package/src/config/agent-schema.ts

@@ -82,7 +82,7 @@ export const SwarmConfigSchema = z.object({
       coder: z.number().int().positive().optional(),
       reviewer: z.number().int().positive().optional(),
     })
-    .default({} as any),
+    .default({}),
   plannerModelIntent: z
     .enum(["latency-optimized", "quality-optimized", "vision-optimized"], {
       error: "swarm.plannerModelIntent must be a valid model intent",

package/src/config/bundled-skills/contacts/SKILL.md

@@ -25,10 +25,7 @@ curl -s -X POST "$INTERNAL_GATEWAY_BASE_URL/v1/contacts" \
   -H "Authorization: Bearer $GATEWAY_AUTH_TOKEN" \
   -d '{
     "displayName": "<name>",
-    "relationship": "<relationship>",
-    "importance": 0.5,
-    "responseExpectation": "<speed>",
-    "preferredTone": "<tone>",
+    "notes": "<free-text notes about this contact>",
     "channels": [
       {
         "type": "<channel_type>",
@@ -48,15 +45,12 @@ Required fields:
 Optional fields:
 
 - `id` -- contact ID to update (omit to create new, or auto-match by channel address)
-- `relationship` -- e.g. colleague, friend, manager, client, family
-- `importance` -- score from 0 to 1 (default 0.5), higher means more important
-- `responseExpectation` -- expected response speed: immediate, within_hours, within_day, casual
-- `preferredTone` -- communication tone: formal, casual, friendly, professional
+- `notes` -- free-text notes about this contact (e.g. relationship, communication preferences, response expectations)
 - `channels` -- list of communication channels
 
 ### Search contacts
 
-Search for contacts by name, channel address, relationship type, or other criteria using the gateway API.
+Search for contacts by name, channel address, or other criteria using the gateway API.
 
 ```bash
 curl -s "$INTERNAL_GATEWAY_BASE_URL/v1/contacts?query=<search_term>" \
@@ -68,7 +62,6 @@ Optional query parameters:
 - `query` -- search by display name (partial match)
 - `channelAddress` -- search by channel address (email, phone, handle)
 - `channelType` -- filter by channel type when searching by address
-- `relationship` -- filter by relationship type (exact match)
 - `limit` -- maximum results to return (default 50, max 100)
 
 ### Merge contacts
@@ -76,7 +69,7 @@ Optional query parameters:
 When you discover two contacts are the same person (e.g. same person on email and Slack), merge them to consolidate. Merging:
 
 - Combines all channels from both contacts
-- Keeps the higher importance score
+- Merges notes from both contacts
 - Sums interaction counts
 - Deletes the donor contact
 
@@ -404,10 +397,7 @@ Replace `<invite_id>` with the invite's `id` from the list response. The same re
 ## Contact Fields
 
 - **displayName** -- the contact's name (required)
-- **relationship** -- e.g. colleague, friend, manager, client, family
-- **importance** -- score from 0 to 1 (default 0.5), higher means more important
-- **responseExpectation** -- expected response speed: immediate, within_hours, within_day, casual
-- **preferredTone** -- communication tone: formal, casual, friendly, professional
+- **notes** -- free-text notes about this contact (e.g. relationship, communication preferences, response expectations)
 - **channels** -- list of communication channels (email, slack, whatsapp, phone, telegram, discord, other)
 
 ### Channel Types
@@ -446,9 +436,8 @@ Each channel has:
 ## Tips
 
 - Use contact search with `channelAddress` to find contacts by their email, phone, or handle.
-- When creating follow-ups, provide a `contact_id` to link the follow-up to a specific contact for grace period calculations.
-- Contacts with higher importance scores get shorter default response deadlines.
-- When merging contacts, the surviving contact keeps the higher importance score and gains all channels from the donor.
+- When creating follow-ups, provide a `contact_id` to link the follow-up to a specific contact.
+- When merging contacts, the surviving contact gains all channels and merged notes from the donor.
 
 ## Typical Workflows
 

package/src/config/bundled-skills/contacts/TOOLS.json

@@ -17,21 +17,9 @@
             "type": "string",
             "description": "Display name for the contact"
           },
-          "relationship": {
+          "notes": {
             "type": "string",
-            "description": "Relationship type (e.g. colleague, friend, manager, client, family)"
-          },
-          "importance": {
-            "type": "number",
-            "description": "Importance score 0-1 (default 0.5). Higher = more important."
-          },
-          "response_expectation": {
-            "type": "string",
-            "description": "Expected response speed (e.g. immediate, within_hours, within_day, casual)"
-          },
-          "preferred_tone": {
-            "type": "string",
-            "description": "Preferred communication tone (e.g. formal, casual, friendly, professional)"
+            "description": "Free-text notes about this contact (e.g. relationship, communication preferences, response expectations)"
           },
           "channels": {
             "type": "array",
@@ -76,7 +64,7 @@
     },
     {
       "name": "contact_search",
-      "description": "Search for contacts by name, channel address, relationship type, or other criteria. Returns matching contacts with their channel information.",
+      "description": "Search for contacts by name, channel address, or other criteria. Returns matching contacts with their channel information.",
       "category": "contacts",
       "risk": "low",
       "input_schema": {
@@ -94,10 +82,6 @@
             "type": "string",
             "description": "Filter by channel type when searching by address (email, slack, whatsapp, phone, etc.)"
           },
-          "relationship": {
-            "type": "string",
-            "description": "Filter by relationship type (exact match)"
-          },
           "limit": {
             "type": "number",
             "description": "Maximum results to return (default 20, max 100)"
@@ -114,7 +98,7 @@
     },
     {
       "name": "contact_merge",
-      "description": "Merge two contacts when you discover they are the same person (e.g. same person on email and Slack). Combines channels, keeps the higher importance, and deletes the donor contact.",
+      "description": "Merge two contacts when you discover they are the same person (e.g. same person on email and Slack). Combines channels, merges notes, and deletes the donor contact.",
       "category": "contacts",
       "risk": "medium",
       "input_schema": {

package/src/config/bundled-skills/contacts/tools/contact-merge.ts

@@ -17,8 +17,7 @@ interface ContactChannel {
 interface ContactResponse {
   id: string;
   displayName: string;
-  relationship: string | null;
-  importance: number;
+  notes: string | null;
   interactionCount: number;
   channels: ContactChannel[];
 }
@@ -96,9 +95,8 @@ export async function executeContactMerge(
         ``,
         `Surviving contact (${merged.id}):`,
         `  Name: ${merged.displayName}`,
-        `  Importance: ${merged.importance.toFixed(2)}`,
         `  Interactions: ${merged.interactionCount}`,
-        merged.relationship ? `  Relationship: ${merged.relationship}` : null,
+        merged.notes ? `  Notes: ${merged.notes}` : null,
         merged.channels.length > 0 ? `  Channels:\n${channelList}` : null,
         ``,
         `Deleted contact: ${mergeContact.displayName} (${mergeId})`,

package/src/config/bundled-skills/contacts/tools/contact-search.ts

@@ -16,20 +16,16 @@ interface ContactChannel {
 interface ContactResponse {
   id: string;
   displayName: string;
-  relationship: string | null;
-  importance: number;
+  notes: string | null;
   interactionCount: number;
   channels: ContactChannel[];
 }
 
 function formatContactSummary(c: ContactResponse): string {
   const parts = [`- **${c.displayName}** (ID: ${c.id})`];
-  if (c.relationship) parts.push(`  Relationship: ${c.relationship}`);
-  parts.push(
-    `  Importance: ${c.importance.toFixed(2)} | Interactions: ${
-      c.interactionCount
-    }`,
-  );
+  if (c.notes) parts.push(`  Notes: ${c.notes}`);
+  if (c.interactionCount > 0)
+    parts.push(`  Interactions: ${c.interactionCount}`);
   if (c.channels.length > 0) {
     const channelList = c.channels
       .map((ch) => `${ch.type}:${ch.address}${ch.isPrimary ? "*" : ""}`)
@@ -46,13 +42,12 @@ export async function executeContactSearch(
   const query = input.query as string | undefined;
   const channelAddress = input.channel_address as string | undefined;
   const channelType = input.channel_type as string | undefined;
-  const relationship = input.relationship as string | undefined;
   const limit = input.limit as number | undefined;
 
-  if (!query && !channelAddress && !relationship) {
+  if (!query && !channelAddress) {
     return {
       content:
-        "Error: At least one search criterion is required (query, channel_address, or relationship)",
+        "Error: At least one search criterion is required (query or channel_address)",
       isError: true,
     };
   }
@@ -62,7 +57,6 @@ export async function executeContactSearch(
     if (query) params.set("query", query);
     if (channelAddress) params.set("channelAddress", channelAddress);
     if (channelType) params.set("channelType", channelType);
-    if (relationship) params.set("relationship", relationship);
     if (limit !== undefined) params.set("limit", String(limit));
 
     const qs = params.toString();

package/src/config/bundled-skills/contacts/tools/contact-upsert.ts

@@ -16,21 +16,14 @@ interface ContactChannel {
 interface ContactResponse {
   id: string;
   displayName: string;
-  relationship: string | null;
-  importance: number;
-  responseExpectation: string | null;
-  preferredTone: string | null;
+  notes: string | null;
   interactionCount: number;
   channels: ContactChannel[];
 }
 
 function formatContact(c: ContactResponse): string {
   const lines = [`Contact ${c.id}`, `  Name: ${c.displayName}`];
-  if (c.relationship) lines.push(`  Relationship: ${c.relationship}`);
-  lines.push(`  Importance: ${c.importance.toFixed(2)}`);
-  if (c.responseExpectation)
-    lines.push(`  Response expectation: ${c.responseExpectation}`);
-  if (c.preferredTone) lines.push(`  Preferred tone: ${c.preferredTone}`);
+  if (c.notes) lines.push(`  Notes: ${c.notes}`);
   if (c.interactionCount > 0)
     lines.push(`  Interactions: ${c.interactionCount}`);
   if (c.channels.length > 0) {
@@ -59,17 +52,6 @@ export async function executeContactUpsert(
     };
   }
 
-  const importance = input.importance as number | undefined;
-  if (
-    importance !== undefined &&
-    (typeof importance !== "number" || importance < 0 || importance > 1)
-  ) {
-    return {
-      content: "Error: importance must be a number between 0 and 1",
-      isError: true,
-    };
-  }
-
   const rawChannels = input.channels as
     | Array<{ type: string; address: string; is_primary?: boolean }>
     | undefined;
@@ -86,10 +68,7 @@ export async function executeContactUpsert(
     }>("/v1/contacts", {
       id: input.id as string | undefined,
       displayName: displayName.trim(),
-      relationship: input.relationship as string | undefined,
-      importance,
-      responseExpectation: input.response_expectation as string | undefined,
-      preferredTone: input.preferred_tone as string | undefined,
+      notes: input.notes as string | undefined,
       channels,
     });
 

package/src/config/bundled-skills/followups/TOOLS.json

@@ -29,10 +29,6 @@
             "type": "string",
             "description": "Optional recurrence schedule ID to fire a reminder when overdue"
           },
-          "reminder_cron_id": {
-            "type": "string",
-            "description": "Deprecated alias for reminder_schedule_id. Use reminder_schedule_id instead."
-          },
           "reason": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"

package/src/config/bundled-skills/schedule/SKILL.md

@@ -63,7 +63,7 @@ Exclusions (EXDATE, EXRULE) always take precedence over inclusions (RRULE, RDATE
 
 ## Tool Input
 
-Use `syntax` + `expression` to specify the schedule type explicitly, or just `expression` to auto-detect. The legacy `cron_expression` field is still accepted as a cron alias.
+Use `syntax` + `expression` to specify the schedule type explicitly, or just `expression` to auto-detect.
 
 ## Lifecycle
 

package/src/config/bundled-skills/schedule/TOOLS.json

@@ -20,11 +20,7 @@
           },
           "expression": {
             "type": "string",
-            "description": "Canonical schedule expression (cron or RRULE). Preferred over cron_expression."
-          },
-          "cron_expression": {
-            "type": "string",
-            "description": "Deprecated alias for expression with cron syntax. Use expression + syntax instead."
+            "description": "Schedule expression (cron or RRULE)"
           },
           "timezone": {
             "type": "string",
@@ -97,11 +93,7 @@
           },
           "expression": {
             "type": "string",
-            "description": "New schedule expression (cron or RRULE). Preferred over cron_expression."
-          },
-          "cron_expression": {
-            "type": "string",
-            "description": "Deprecated alias for expression with cron syntax. Use expression + syntax instead."
+            "description": "New schedule expression (cron or RRULE)"
           },
           "timezone": {
             "type": "string",

package/src/config/bundled-tool-registry.ts

@@ -175,8 +175,6 @@ import * as watcherDelete from "./bundled-skills/watcher/tools/watcher-delete.js
 import * as watcherDigest from "./bundled-skills/watcher/tools/watcher-digest.js";
 import * as watcherList from "./bundled-skills/watcher/tools/watcher-list.js";
 import * as watcherUpdate from "./bundled-skills/watcher/tools/watcher-update.js";
-// ── weather ──────────────────────────────────────────────────────────────────
-import * as getWeather from "./bundled-skills/weather/tools/get-weather.js";
 
 // ─── Registry ────────────────────────────────────────────────────────────────
 
@@ -375,7 +373,4 @@ export const bundledToolRegistry = new Map<string, SkillToolScript>([
   ["watcher:tools/watcher-update.ts", watcherUpdate],
   ["watcher:tools/watcher-delete.ts", watcherDelete],
   ["watcher:tools/watcher-digest.ts", watcherDigest],
-
-  // weather
-  ["weather:tools/get-weather.ts", getWeather],
 ]);

package/src/config/core-schema.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 
 const VALID_SECRET_ACTIONS = ["redact", "warn", "block", "prompt"] as const;
-const VALID_PERMISSIONS_MODES = ["legacy", "strict", "workspace"] as const;
+const VALID_PERMISSIONS_MODES = ["strict", "workspace"] as const;
 const VALID_SMS_PROVIDERS = ["twilio"] as const;
 
 export const TimeoutConfigSchema = z.object({

package/src/config/env.ts

@@ -131,10 +131,6 @@ export function getTwilioUserPhoneNumber(): string | undefined {
   return str("TWILIO_USER_PHONE_NUMBER");
 }
 
-export function getTwilioWssBaseUrl(): string | undefined {
-  return str("TWILIO_WSS_BASE_URL");
-}
-
 export function isTwilioWebhookValidationDisabled(): boolean {
   // Intentionally strict: only exact "true" disables validation (not "1").
   // This is a security-sensitive bypass — we don't want environments that
@@ -212,12 +208,6 @@ export function validateEnv(): void {
     throw new Error(`Invalid RUNTIME_HTTP_PORT: ${httpPort} (must be 1-65535)`);
   }
 
-  if (getTwilioWssBaseUrl()) {
-    log.warn(
-      "TWILIO_WSS_BASE_URL env var is deprecated. Relay URL is now derived from ingress.publicBaseUrl.",
-    );
-  }
-
   for (const warning of checkUnrecognizedEnvVars()) {
     log.warn(warning);
   }

package/src/config/feature-flag-registry.json

@@ -31,7 +31,7 @@
       "key": "feature_flags.browser.enabled",
       "label": "Browser",
       "description": "Enable browser skill prerequisites section in the system prompt",
-      "defaultEnabled": false
+      "defaultEnabled": true
     },
     {
       "id": "twitter",

package/src/config/loader.ts

@@ -55,6 +55,21 @@ function ensureMigratedDataDir(): void {
   ensureDataDir();
 }
 
+/**
+ * Migrate deprecated raw config values before Zod validation.
+ * This prevents `validateWithSchema` from silently dropping fields whose
+ * values were valid in older releases but have since been removed from the
+ * schema enum, which would cause a fallback to the default and silently
+ * change behavior on upgrade.
+ */
+function migrateRawConfig(raw: Record<string, unknown>): void {
+  const permissions = raw.permissions as Record<string, unknown> | undefined;
+  if (permissions?.mode === "legacy") {
+    permissions.mode = "workspace";
+    log.info('Migrated permissions.mode from "legacy" to "workspace".');
+  }
+}
+
 /**
  * Zod 4's .default({}) returns {} as output without running inner-schema
  * parsing, so nested object defaults are never applied. Re-parse the config
@@ -227,6 +242,10 @@ export function loadConfig(): AssistantConfig {
       }
     }
 
+    // Migrate removed config values before validation so existing configs
+    // don't silently change behavior when Zod drops unknown enum values.
+    migrateRawConfig(fileConfig);
+
     // Validate and apply defaults via Zod schema
     const config = validateWithSchema(fileConfig);
 

package/src/config/memory-schema.ts

@@ -509,11 +509,6 @@ export const MemoryConflictsConfigSchema = z.object({
   gateMode: z
     .enum(["soft"], { error: 'memory.conflicts.gateMode must be "soft"' })
     .default("soft"),
-  reaskCooldownTurns: z
-    .number({ error: "memory.conflicts.reaskCooldownTurns must be a number" })
-    .int("memory.conflicts.reaskCooldownTurns must be an integer")
-    .positive("memory.conflicts.reaskCooldownTurns must be a positive integer")
-    .default(3),
   resolverLlmTimeoutMs: z
     .number({ error: "memory.conflicts.resolverLlmTimeoutMs must be a number" })
     .int("memory.conflicts.resolverLlmTimeoutMs must be an integer")
@@ -526,11 +521,6 @@ export const MemoryConflictsConfigSchema = z.object({
     .min(0, "memory.conflicts.relevanceThreshold must be >= 0")
     .max(1, "memory.conflicts.relevanceThreshold must be <= 1")
     .default(0.3),
-  askOnIrrelevantTurns: z
-    .boolean({
-      error: "memory.conflicts.askOnIrrelevantTurns must be a boolean",
-    })
-    .default(false),
   conflictableKinds: z
     .array(
       z.enum(VALID_MEMORY_ITEM_KINDS, {

package/src/config/schema.ts

@@ -201,7 +201,7 @@ export const AssistantConfigSchema = z
         z.string(),
         z.string({ error: "Each apiKeys value must be a string" }),
       )
-      .default({} as any),
+      .default({} as Record<string, string>),
     webSearchProvider: z
       .enum(VALID_WEB_SEARCH_PROVIDERS, {
         error: `webSearchProvider must be one of: ${VALID_WEB_SEARCH_PROVIDERS.join(
@@ -273,7 +273,7 @@ export const AssistantConfigSchema = z
         z.string(),
         z.boolean({ error: "featureFlags values must be booleans" }),
       )
-      .default({} as any),
+      .default({} as Record<string, boolean>),
     assistantFeatureFlagValues: z
       .record(
         z.string(),

package/src/config/system-prompt.ts

@@ -944,5 +944,11 @@ function formatSkillsCatalog(skills: SkillSummary[]): string {
     "When a credential is missing, check if any skill declares `credential-setup-for` matching that service — if so, load that skill.",
     "",
     lines.join("\n"),
+    "",
+    "### Installing additional skills",
+    "If `skill_load` fails because a skill is not found, additional first-party skills may be available in the Vellum catalog.",
+    "Use `bash` to discover and install them:",
+    "- `vellum skills list` — list all available catalog skills",
+    "- `vellum skills install <skill-id>` — install a skill, then retry `skill_load`",
   ].join("\n");
 }