@vellumai/assistant 0.4.31 → 0.4.33

package/ARCHITECTURE.md

@@ -883,7 +883,7 @@ graph LR
         C5["user_message<br/>text, attachments"]
         C6["confirmation_response<br/>decision"]
         C7["cancel / undo"]
-        C8["model_get / model_set<br/>sandbox_set (deprecated no-op)"]
+        C8["model_get / model_set"]
         C9["ping"]
         C10["ipc_blob_probe<br/>probeId, nonceSha256"]
         C11["work_items_list / work_item_get<br/>work_item_create / work_item_update<br/>work_item_complete / work_item_run_task<br/>(planned)"]

package/docs/architecture/memory.md

@@ -487,7 +487,7 @@ graph TB
 
 ### How it works
 
-1. **Lazy initialization**: The git repository is created on first use, not at workspace creation. When `ensureInitialized()` is called, it checks for a `.git` directory. If absent, it runs `git init`, creates a `.gitignore` (excluding `data/`, `logs/`, `*.log`, `*.sock`, `*.pid`, `session-token`, `http-token`), sets the git identity to "Vellum Assistant", and creates an initial baseline commit capturing any pre-existing files. The baseline commit is intentional — it makes `git log`, `git diff`, and `git revert` work cleanly from the start. Both new and existing workspaces get the same treatment. For existing repos (e.g. created by older versions or external tools), `.gitignore` rules and git identity are set idempotently on each init, ensuring proper configuration regardless of how the repo was originally created.
+1. **Lazy initialization**: The git repository is created on first use, not at workspace creation. When `ensureInitialized()` is called, it checks for a `.git` directory. If absent, it runs `git init`, creates a `.gitignore` (excluding `data/`, `logs/`, `*.log`, `*.sock`, `*.pid`, `session-token`), sets the git identity to "Vellum Assistant", and creates an initial baseline commit capturing any pre-existing files. The baseline commit is intentional — it makes `git log`, `git diff`, and `git revert` work cleanly from the start. Both new and existing workspaces get the same treatment. For existing repos (e.g. created by older versions or external tools), `.gitignore` rules and git identity are set idempotently on each init, ensuring proper configuration regardless of how the repo was originally created.
 
 2. **Turn-boundary commits**: After each conversation turn (user message + assistant response cycle), `session.ts` commits workspace changes via `commitTurnChanges(workspaceDir, sessionId, turnNumber)`. The commit runs in the `finally` block of `runAgentLoop`, guarded by a `turnStarted` flag that is set once the agent loop begins executing. This guarantees a commit attempt even when post-processing (e.g. `resolveAssistantAttachments`) throws, or when the user cancels mid-turn. The commit is raced against a configurable timeout (`workspaceGit.turnCommitMaxWaitMs`, default 4s) via `Promise.race`. If the commit exceeds the timeout, the turn proceeds immediately while the commit continues in the background. Note: the background commit is NOT awaited before the next turn starts, so brief cross-turn file attribution windows are possible but accepted as a tradeoff for responsiveness. Commit outcomes are logged with structured fields (`sessionId`, `turnNumber`, `filesChanged`, `durationMs`) for observability.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.4.31",
+  "version": "0.4.33",
   "type": "module",
   "bin": {
     "vellum": "./src/index.ts"

package/src/__tests__/__snapshots__/ipc-snapshot.test.ts.snap

@@ -145,13 +145,6 @@ exports[`IPC message snapshots ClientMessage types usage_request serializes to e
 }
 `;
 
-exports[`IPC message snapshots ClientMessage types sandbox_set serializes to expected JSON 1`] = `
-{
-  "enabled": true,
-  "type": "sandbox_set",
-}
-`;
-
 exports[`IPC message snapshots ClientMessage types cu_session_create serializes to expected JSON 1`] = `
 {
   "screenHeight": 1080,

package/src/__tests__/access-request-decision.test.ts

@@ -30,7 +30,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({
@@ -331,4 +330,87 @@ describe("access request notification delivery", () => {
     expect(text).toContain("unable to deliver");
     expect(text).toContain("try again");
   });
+
+  test("slack approval notification is sent as DM using requesterExternalUserId", async () => {
+    await notifyRequesterOfApproval({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/slack?threadTs=1234.5678",
+      requesterChatId: "C12345-channel",
+      requesterExternalUserId: "U98765-user",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    const call = deliverReplyCalls[0];
+    // Should target the user ID (DM) not the channel
+    expect(call.payload.chatId).toBe("U98765-user");
+    // threadTs should be stripped — it belongs to the guardian's channel thread
+    expect(call.url).not.toContain("threadTs");
+  });
+
+  test("slack denial notification is sent as DM using requesterExternalUserId", async () => {
+    await notifyRequesterOfDenial({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/slack?threadTs=1234.5678",
+      requesterChatId: "C12345-channel",
+      requesterExternalUserId: "U98765-user",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    const call = deliverReplyCalls[0];
+    expect(call.payload.chatId).toBe("U98765-user");
+    expect(call.url).not.toContain("threadTs");
+  });
+
+  test("slack delivery failure notification is sent as DM using requesterExternalUserId", async () => {
+    await notifyRequesterOfDeliveryFailure({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/slack?threadTs=1234.5678",
+      requesterChatId: "C12345-channel",
+      requesterExternalUserId: "U98765-user",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    const call = deliverReplyCalls[0];
+    expect(call.payload.chatId).toBe("U98765-user");
+    expect(call.url).not.toContain("threadTs");
+  });
+
+  test("non-slack channels still use requesterChatId and preserve threadTs", async () => {
+    await notifyRequesterOfApproval({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/telegram?threadTs=1234.5678",
+      requesterChatId: "chat-123",
+      requesterExternalUserId: "user-456",
+      channel: "telegram",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    expect(deliverReplyCalls[0].payload.chatId).toBe("chat-123");
+    // threadTs should be preserved for non-slack channels
+    expect(deliverReplyCalls[0].url).toContain("threadTs=1234.5678");
+  });
+
+  test("slack without requesterExternalUserId falls back to requesterChatId", async () => {
+    await notifyRequesterOfApproval({
+      replyCallbackUrl: "http://localhost:7830/deliver/slack",
+      requesterChatId: "C12345-channel",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    expect(deliverReplyCalls[0].payload.chatId).toBe("C12345-channel");
+  });
 });

package/src/__tests__/actor-token-service.test.ts

@@ -39,7 +39,6 @@ mock.module("../config/env.js", () => ({
   isHttpAuthDisabled: () => false,
   getInternalGatewayTarget: () => "http://localhost:7822",
   getGatewayBaseUrl: () => "http://localhost:7822",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   isHttpAuthDisabledWithoutSafetyGate: () => false,
   getEnableMonitoring: () => false,

package/src/__tests__/anthropic-provider.test.ts

@@ -8,6 +8,7 @@ import type { Message, ToolDefinition } from "../providers/types.js";
 
 let lastStreamParams: Record<string, unknown> | null = null;
 let _lastStreamOptions: Record<string, unknown> | null = null;
+let lastConstructorArgs: Record<string, unknown> | null = null;
 
 const fakeResponse = {
   content: [{ type: "text", text: "Hello" }],
@@ -33,7 +34,9 @@ class FakeAPIError extends Error {
 mock.module("@anthropic-ai/sdk", () => ({
   default: class MockAnthropic {
     static APIError = FakeAPIError;
-    constructor() {}
+    constructor(args: Record<string, unknown>) {
+      lastConstructorArgs = { ...args };
+    }
     messages = {
       stream: (
         params: Record<string, unknown>,
@@ -127,6 +130,7 @@ describe("AnthropicProvider — Cache-Control Characterization", () => {
   beforeEach(() => {
     lastStreamParams = null;
     _lastStreamOptions = null;
+    lastConstructorArgs = null;
     provider = new AnthropicProvider("sk-ant-test", "claude-sonnet-4-6");
   });
 
@@ -935,3 +939,84 @@ describe("AnthropicProvider — Cache-Control Characterization", () => {
     expect(userMsgs[2].content[1].cache_control).toEqual({ type: "ephemeral" });
   });
 });
+
+// ---------------------------------------------------------------------------
+// Tests — Managed Proxy Fallback
+// ---------------------------------------------------------------------------
+
+describe("AnthropicProvider — Managed Proxy Fallback", () => {
+  beforeEach(() => {
+    lastStreamParams = null;
+    _lastStreamOptions = null;
+    lastConstructorArgs = null;
+  });
+
+  test("constructor passes baseURL to Anthropic SDK when provided", () => {
+    new AnthropicProvider("managed-key", "claude-sonnet-4-6", {
+      baseURL: "https://platform.example.com/v1/runtime-proxy/anthropic",
+    });
+
+    expect(lastConstructorArgs).not.toBeNull();
+    expect(lastConstructorArgs!.apiKey).toBe("managed-key");
+    expect(lastConstructorArgs!.baseURL).toBe(
+      "https://platform.example.com/v1/runtime-proxy/anthropic",
+    );
+  });
+
+  test("constructor does not set baseURL when option is omitted", () => {
+    new AnthropicProvider("sk-ant-user-key", "claude-sonnet-4-6");
+
+    expect(lastConstructorArgs).not.toBeNull();
+    expect(lastConstructorArgs!.apiKey).toBe("sk-ant-user-key");
+    expect(lastConstructorArgs!.baseURL).toBeUndefined();
+  });
+
+  test("managed mode provider preserves tool-pairing behavior", async () => {
+    const provider = new AnthropicProvider("managed-key", "claude-sonnet-4-6", {
+      baseURL: "https://platform.example.com/v1/runtime-proxy/anthropic",
+    });
+
+    const messages: Message[] = [
+      userMsg("Read file"),
+      toolUseMsg("tu_1", "file_read"),
+      toolResultMsg("tu_1", "file contents"),
+    ];
+    await provider.sendMessage(messages);
+
+    const sent = lastStreamParams!.messages as Array<{
+      role: string;
+      content: Array<{ type: string; tool_use_id?: string }>;
+    }>;
+
+    expect(sent).toHaveLength(3);
+    const toolResults = sent[2].content.filter((b) => b.type === "tool_result");
+    expect(toolResults).toHaveLength(1);
+    expect(toolResults[0].tool_use_id).toBe("tu_1");
+  });
+
+  test("managed mode provider preserves cache-control behavior", async () => {
+    const provider = new AnthropicProvider("managed-key", "claude-sonnet-4-6", {
+      baseURL: "https://platform.example.com/v1/runtime-proxy/anthropic",
+    });
+
+    await provider.sendMessage(
+      [userMsg("Hi")],
+      sampleTools,
+      "You are helpful.",
+    );
+
+    // System prompt cache control
+    const system = lastStreamParams!.system as Array<{
+      cache_control?: { type: string };
+    }>;
+    expect(system[0].cache_control).toEqual({ type: "ephemeral" });
+
+    // Last tool cache control
+    const tools = lastStreamParams!.tools as Array<{
+      cache_control?: { type: string };
+    }>;
+    expect(tools[tools.length - 1].cache_control).toEqual({
+      type: "ephemeral",
+    });
+  });
+});

package/src/__tests__/approval-routes-http.test.ts

@@ -57,7 +57,6 @@ mock.module("../config/env.js", () => ({
   getGatewayPort: () => 7830,
   getRuntimeHttpPort: () => 7821,
   getRuntimeHttpHost: () => "127.0.0.1",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   getIngressPublicBaseUrl: () => undefined,
   setIngressPublicBaseUrl: () => {},

package/src/__tests__/assistant-feature-flags-integration.test.ts

@@ -241,8 +241,8 @@ describe("buildSystemPrompt assistant feature flag filtering", () => {
 
     const result = buildSystemPrompt();
 
-    // browser is declared in the registry with defaultEnabled: false
-    expect(result).not.toContain('id="browser"');
+    // browser is declared in the registry with defaultEnabled: true
+    expect(result).toContain('id="browser"');
   });
 });
 

package/src/__tests__/call-controller.test.ts

@@ -27,7 +27,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => null,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/call-routes-http.test.ts

@@ -27,7 +27,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => null,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/channel-guardian.test.ts

@@ -21,7 +21,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/channel-invite-transport.test.ts

@@ -17,19 +17,19 @@ mock.module("../tools/credentials/metadata-store.js", () => ({
 
 import {
   _resetRegistry,
-  type ChannelInviteTransport,
+  type ChannelInviteAdapter,
+  getInviteAdapterRegistry,
   getTransport,
   registerTransport,
 } from "../runtime/channel-invite-transport.js";
-// Importing the Telegram module auto-registers the transport
-import { telegramInviteTransport } from "../runtime/channel-invite-transports/telegram.js";
+import { telegramInviteAdapter } from "../runtime/channel-invite-transports/telegram.js";
 
 describe("channel-invite-transport", () => {
   beforeEach(() => {
     _resetRegistry();
     mockBotUsername = "test_invite_bot";
     // Re-register after reset so Telegram tests work
-    registerTransport(telegramInviteTransport);
+    registerTransport(telegramInviteAdapter);
   });
 
   // =========================================================================
@@ -37,46 +37,58 @@ describe("channel-invite-transport", () => {
   // =========================================================================
 
   describe("registry", () => {
-    test("returns the Telegram transport for telegram channel", () => {
-      const transport = getTransport("telegram");
-      expect(transport).toBeDefined();
-      expect(transport!.channel).toBe("telegram");
+    test("returns the Telegram adapter for telegram channel", () => {
+      const adapter = getTransport("telegram");
+      expect(adapter).toBeDefined();
+      expect(adapter!.channel).toBe("telegram");
     });
 
     test("returns undefined for an unregistered channel", () => {
-      const transport = getTransport("sms");
-      expect(transport).toBeUndefined();
+      const adapter = getTransport("sms");
+      expect(adapter).toBeUndefined();
     });
 
-    test("overwrites a previously registered transport for the same channel", () => {
-      const custom: ChannelInviteTransport = {
+    test("overwrites a previously registered adapter for the same channel", () => {
+      const custom: ChannelInviteAdapter = {
         channel: "telegram",
-        buildShareableInvite: () => ({ url: "custom", displayText: "custom" }),
+        buildShareLink: () => ({ url: "custom", displayText: "custom" }),
         extractInboundToken: () => undefined,
       };
       registerTransport(custom);
-      const transport = getTransport("telegram");
+      const adapter = getTransport("telegram");
       expect(
-        transport!.buildShareableInvite({
+        adapter!.buildShareLink!({
           rawToken: "x",
           sourceChannel: "telegram",
         }).url,
       ).toBe("custom");
     });
 
-    test("_resetRegistry clears all transports", () => {
+    test("_resetRegistry clears all adapters", () => {
       _resetRegistry();
       expect(getTransport("telegram")).toBeUndefined();
     });
+
+    test("getInviteAdapterRegistry returns the singleton registry", () => {
+      const registry = getInviteAdapterRegistry();
+      expect(registry.get("telegram")).toBeDefined();
+    });
+
+    test("registry.getAll returns all registered adapters", () => {
+      const registry = getInviteAdapterRegistry();
+      const all = registry.getAll();
+      expect(all.length).toBeGreaterThanOrEqual(1);
+      expect(all.some((a) => a.channel === "telegram")).toBe(true);
+    });
   });
 
   // =========================================================================
-  // Telegram adapter — buildShareableInvite
+  // Telegram adapter — buildShareLink
   // =========================================================================
 
-  describe("telegram buildShareableInvite", () => {
+  describe("telegram buildShareLink", () => {
     test("produces a valid Telegram deep link", () => {
-      const result = telegramInviteTransport.buildShareableInvite!({
+      const result = telegramInviteAdapter.buildShareLink!({
         rawToken: "abc123_test-token",
         sourceChannel: "telegram",
       });
@@ -90,11 +102,11 @@ describe("channel-invite-transport", () => {
     });
 
     test("deep link is deterministic for the same token", () => {
-      const a = telegramInviteTransport.buildShareableInvite!({
+      const a = telegramInviteAdapter.buildShareLink!({
         rawToken: "tok1",
         sourceChannel: "telegram",
       });
-      const b = telegramInviteTransport.buildShareableInvite!({
+      const b = telegramInviteAdapter.buildShareLink!({
         rawToken: "tok1",
         sourceChannel: "telegram",
       });
@@ -104,7 +116,7 @@ describe("channel-invite-transport", () => {
 
     test("uses the configured bot username", () => {
       mockBotUsername = "my_custom_bot";
-      const result = telegramInviteTransport.buildShareableInvite!({
+      const result = telegramInviteAdapter.buildShareLink!({
         rawToken: "token",
         sourceChannel: "telegram",
       });
@@ -118,7 +130,7 @@ describe("channel-invite-transport", () => {
       delete process.env.TELEGRAM_BOT_USERNAME;
       try {
         expect(() =>
-          telegramInviteTransport.buildShareableInvite!({
+          telegramInviteAdapter.buildShareLink!({
             rawToken: "token",
             sourceChannel: "telegram",
           }),
@@ -133,7 +145,7 @@ describe("channel-invite-transport", () => {
       const prev = process.env.TELEGRAM_BOT_USERNAME;
       process.env.TELEGRAM_BOT_USERNAME = "env_bot";
       try {
-        const result = telegramInviteTransport.buildShareableInvite!({
+        const result = telegramInviteAdapter.buildShareLink!({
           rawToken: "token",
           sourceChannel: "telegram",
         });
@@ -154,7 +166,7 @@ describe("channel-invite-transport", () => {
 
   describe("telegram extractInboundToken", () => {
     test("extracts token from structured commandIntent", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_abc123" },
         content: "/start iv_abc123",
       });
@@ -162,7 +174,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("extracts base64url token from commandIntent", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_YWJjMTIz-_test" },
         content: "/start iv_YWJjMTIz-_test",
       });
@@ -170,7 +182,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent has no payload", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start" },
         content: "/start",
       });
@@ -178,7 +190,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload has wrong prefix (gv_)", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "gv_abc123" },
         content: "/start gv_abc123",
       });
@@ -186,7 +198,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload has no prefix", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "abc123" },
         content: "/start abc123",
       });
@@ -194,7 +206,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent type is not start", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "help", payload: "iv_abc123" },
         content: "/help iv_abc123",
       });
@@ -202,7 +214,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload is iv_ with empty token", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_" },
         content: "/start iv_",
       });
@@ -210,7 +222,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload is iv_ with whitespace-only token", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_   " },
         content: "/start iv_   ",
       });
@@ -218,49 +230,49 @@ describe("channel-invite-transport", () => {
     });
 
     test("extracts token from raw content fallback", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start iv_abc123",
       });
       expect(token).toBe("abc123");
     });
 
     test("extracts token from raw content with extra whitespace", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start   iv_token123",
       });
       expect(token).toBe("token123");
     });
 
     test("returns undefined for empty content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "",
       });
       expect(token).toBeUndefined();
     });
 
     test("returns undefined for content without /start", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "hello world",
       });
       expect(token).toBeUndefined();
     });
 
     test("returns undefined for /start without iv_ prefix in content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start gv_abc123",
       });
       expect(token).toBeUndefined();
     });
 
     test("returns undefined for malformed /start with only iv_ in content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start iv_",
       });
       expect(token).toBeUndefined();
     });
 
     test("prefers commandIntent over raw content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_from_intent" },
         content: "/start iv_from_content",
       });
@@ -269,7 +281,7 @@ describe("channel-invite-transport", () => {
 
     test("returns undefined when commandIntent rejects, even if content has token", () => {
       // commandIntent present but payload has wrong prefix
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "gv_abc123" },
         content: "/start iv_valid_token",
       });