@vellumai/assistant 0.4.32 → 0.4.33

package/docs/architecture/memory.md

@@ -487,7 +487,7 @@ graph TB
 
 ### How it works
 
-1. **Lazy initialization**: The git repository is created on first use, not at workspace creation. When `ensureInitialized()` is called, it checks for a `.git` directory. If absent, it runs `git init`, creates a `.gitignore` (excluding `data/`, `logs/`, `*.log`, `*.sock`, `*.pid`, `session-token`, `http-token`), sets the git identity to "Vellum Assistant", and creates an initial baseline commit capturing any pre-existing files. The baseline commit is intentional — it makes `git log`, `git diff`, and `git revert` work cleanly from the start. Both new and existing workspaces get the same treatment. For existing repos (e.g. created by older versions or external tools), `.gitignore` rules and git identity are set idempotently on each init, ensuring proper configuration regardless of how the repo was originally created.
+1. **Lazy initialization**: The git repository is created on first use, not at workspace creation. When `ensureInitialized()` is called, it checks for a `.git` directory. If absent, it runs `git init`, creates a `.gitignore` (excluding `data/`, `logs/`, `*.log`, `*.sock`, `*.pid`, `session-token`), sets the git identity to "Vellum Assistant", and creates an initial baseline commit capturing any pre-existing files. The baseline commit is intentional — it makes `git log`, `git diff`, and `git revert` work cleanly from the start. Both new and existing workspaces get the same treatment. For existing repos (e.g. created by older versions or external tools), `.gitignore` rules and git identity are set idempotently on each init, ensuring proper configuration regardless of how the repo was originally created.
 
 2. **Turn-boundary commits**: After each conversation turn (user message + assistant response cycle), `session.ts` commits workspace changes via `commitTurnChanges(workspaceDir, sessionId, turnNumber)`. The commit runs in the `finally` block of `runAgentLoop`, guarded by a `turnStarted` flag that is set once the agent loop begins executing. This guarantees a commit attempt even when post-processing (e.g. `resolveAssistantAttachments`) throws, or when the user cancels mid-turn. The commit is raced against a configurable timeout (`workspaceGit.turnCommitMaxWaitMs`, default 4s) via `Promise.race`. If the commit exceeds the timeout, the turn proceeds immediately while the commit continues in the background. Note: the background commit is NOT awaited before the next turn starts, so brief cross-turn file attribution windows are possible but accepted as a tradeoff for responsiveness. Commit outcomes are logged with structured fields (`sessionId`, `turnNumber`, `filesChanged`, `durationMs`) for observability.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.4.32",
+  "version": "0.4.33",
   "type": "module",
   "bin": {
     "vellum": "./src/index.ts"

package/src/__tests__/access-request-decision.test.ts

@@ -30,7 +30,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({
@@ -331,4 +330,87 @@ describe("access request notification delivery", () => {
     expect(text).toContain("unable to deliver");
     expect(text).toContain("try again");
   });
+
+  test("slack approval notification is sent as DM using requesterExternalUserId", async () => {
+    await notifyRequesterOfApproval({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/slack?threadTs=1234.5678",
+      requesterChatId: "C12345-channel",
+      requesterExternalUserId: "U98765-user",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    const call = deliverReplyCalls[0];
+    // Should target the user ID (DM) not the channel
+    expect(call.payload.chatId).toBe("U98765-user");
+    // threadTs should be stripped — it belongs to the guardian's channel thread
+    expect(call.url).not.toContain("threadTs");
+  });
+
+  test("slack denial notification is sent as DM using requesterExternalUserId", async () => {
+    await notifyRequesterOfDenial({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/slack?threadTs=1234.5678",
+      requesterChatId: "C12345-channel",
+      requesterExternalUserId: "U98765-user",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    const call = deliverReplyCalls[0];
+    expect(call.payload.chatId).toBe("U98765-user");
+    expect(call.url).not.toContain("threadTs");
+  });
+
+  test("slack delivery failure notification is sent as DM using requesterExternalUserId", async () => {
+    await notifyRequesterOfDeliveryFailure({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/slack?threadTs=1234.5678",
+      requesterChatId: "C12345-channel",
+      requesterExternalUserId: "U98765-user",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    const call = deliverReplyCalls[0];
+    expect(call.payload.chatId).toBe("U98765-user");
+    expect(call.url).not.toContain("threadTs");
+  });
+
+  test("non-slack channels still use requesterChatId and preserve threadTs", async () => {
+    await notifyRequesterOfApproval({
+      replyCallbackUrl:
+        "http://localhost:7830/deliver/telegram?threadTs=1234.5678",
+      requesterChatId: "chat-123",
+      requesterExternalUserId: "user-456",
+      channel: "telegram",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    expect(deliverReplyCalls[0].payload.chatId).toBe("chat-123");
+    // threadTs should be preserved for non-slack channels
+    expect(deliverReplyCalls[0].url).toContain("threadTs=1234.5678");
+  });
+
+  test("slack without requesterExternalUserId falls back to requesterChatId", async () => {
+    await notifyRequesterOfApproval({
+      replyCallbackUrl: "http://localhost:7830/deliver/slack",
+      requesterChatId: "C12345-channel",
+      channel: "slack",
+      assistantId: "self",
+      bearerToken: "test-token",
+    });
+
+    expect(deliverReplyCalls.length).toBe(1);
+    expect(deliverReplyCalls[0].payload.chatId).toBe("C12345-channel");
+  });
 });

package/src/__tests__/actor-token-service.test.ts

@@ -39,7 +39,6 @@ mock.module("../config/env.js", () => ({
   isHttpAuthDisabled: () => false,
   getInternalGatewayTarget: () => "http://localhost:7822",
   getGatewayBaseUrl: () => "http://localhost:7822",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   isHttpAuthDisabledWithoutSafetyGate: () => false,
   getEnableMonitoring: () => false,

package/src/__tests__/approval-routes-http.test.ts

@@ -57,7 +57,6 @@ mock.module("../config/env.js", () => ({
   getGatewayPort: () => 7830,
   getRuntimeHttpPort: () => 7821,
   getRuntimeHttpHost: () => "127.0.0.1",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   getIngressPublicBaseUrl: () => undefined,
   setIngressPublicBaseUrl: () => {},

package/src/__tests__/call-controller.test.ts

@@ -27,7 +27,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => null,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/call-routes-http.test.ts

@@ -27,7 +27,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => null,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/channel-guardian.test.ts

@@ -21,7 +21,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/channel-invite-transport.test.ts

@@ -17,19 +17,19 @@ mock.module("../tools/credentials/metadata-store.js", () => ({
 
 import {
   _resetRegistry,
-  type ChannelInviteTransport,
+  type ChannelInviteAdapter,
+  getInviteAdapterRegistry,
   getTransport,
   registerTransport,
 } from "../runtime/channel-invite-transport.js";
-// Importing the Telegram module auto-registers the transport
-import { telegramInviteTransport } from "../runtime/channel-invite-transports/telegram.js";
+import { telegramInviteAdapter } from "../runtime/channel-invite-transports/telegram.js";
 
 describe("channel-invite-transport", () => {
   beforeEach(() => {
     _resetRegistry();
     mockBotUsername = "test_invite_bot";
     // Re-register after reset so Telegram tests work
-    registerTransport(telegramInviteTransport);
+    registerTransport(telegramInviteAdapter);
   });
 
   // =========================================================================
@@ -37,46 +37,58 @@ describe("channel-invite-transport", () => {
   // =========================================================================
 
   describe("registry", () => {
-    test("returns the Telegram transport for telegram channel", () => {
-      const transport = getTransport("telegram");
-      expect(transport).toBeDefined();
-      expect(transport!.channel).toBe("telegram");
+    test("returns the Telegram adapter for telegram channel", () => {
+      const adapter = getTransport("telegram");
+      expect(adapter).toBeDefined();
+      expect(adapter!.channel).toBe("telegram");
     });
 
     test("returns undefined for an unregistered channel", () => {
-      const transport = getTransport("sms");
-      expect(transport).toBeUndefined();
+      const adapter = getTransport("sms");
+      expect(adapter).toBeUndefined();
     });
 
-    test("overwrites a previously registered transport for the same channel", () => {
-      const custom: ChannelInviteTransport = {
+    test("overwrites a previously registered adapter for the same channel", () => {
+      const custom: ChannelInviteAdapter = {
         channel: "telegram",
-        buildShareableInvite: () => ({ url: "custom", displayText: "custom" }),
+        buildShareLink: () => ({ url: "custom", displayText: "custom" }),
         extractInboundToken: () => undefined,
       };
       registerTransport(custom);
-      const transport = getTransport("telegram");
+      const adapter = getTransport("telegram");
       expect(
-        transport!.buildShareableInvite({
+        adapter!.buildShareLink!({
           rawToken: "x",
           sourceChannel: "telegram",
         }).url,
       ).toBe("custom");
     });
 
-    test("_resetRegistry clears all transports", () => {
+    test("_resetRegistry clears all adapters", () => {
       _resetRegistry();
       expect(getTransport("telegram")).toBeUndefined();
     });
+
+    test("getInviteAdapterRegistry returns the singleton registry", () => {
+      const registry = getInviteAdapterRegistry();
+      expect(registry.get("telegram")).toBeDefined();
+    });
+
+    test("registry.getAll returns all registered adapters", () => {
+      const registry = getInviteAdapterRegistry();
+      const all = registry.getAll();
+      expect(all.length).toBeGreaterThanOrEqual(1);
+      expect(all.some((a) => a.channel === "telegram")).toBe(true);
+    });
   });
 
   // =========================================================================
-  // Telegram adapter — buildShareableInvite
+  // Telegram adapter — buildShareLink
   // =========================================================================
 
-  describe("telegram buildShareableInvite", () => {
+  describe("telegram buildShareLink", () => {
     test("produces a valid Telegram deep link", () => {
-      const result = telegramInviteTransport.buildShareableInvite!({
+      const result = telegramInviteAdapter.buildShareLink!({
         rawToken: "abc123_test-token",
         sourceChannel: "telegram",
       });
@@ -90,11 +102,11 @@ describe("channel-invite-transport", () => {
     });
 
     test("deep link is deterministic for the same token", () => {
-      const a = telegramInviteTransport.buildShareableInvite!({
+      const a = telegramInviteAdapter.buildShareLink!({
         rawToken: "tok1",
         sourceChannel: "telegram",
       });
-      const b = telegramInviteTransport.buildShareableInvite!({
+      const b = telegramInviteAdapter.buildShareLink!({
         rawToken: "tok1",
         sourceChannel: "telegram",
       });
@@ -104,7 +116,7 @@ describe("channel-invite-transport", () => {
 
     test("uses the configured bot username", () => {
       mockBotUsername = "my_custom_bot";
-      const result = telegramInviteTransport.buildShareableInvite!({
+      const result = telegramInviteAdapter.buildShareLink!({
         rawToken: "token",
         sourceChannel: "telegram",
       });
@@ -118,7 +130,7 @@ describe("channel-invite-transport", () => {
       delete process.env.TELEGRAM_BOT_USERNAME;
       try {
         expect(() =>
-          telegramInviteTransport.buildShareableInvite!({
+          telegramInviteAdapter.buildShareLink!({
             rawToken: "token",
             sourceChannel: "telegram",
           }),
@@ -133,7 +145,7 @@ describe("channel-invite-transport", () => {
       const prev = process.env.TELEGRAM_BOT_USERNAME;
       process.env.TELEGRAM_BOT_USERNAME = "env_bot";
       try {
-        const result = telegramInviteTransport.buildShareableInvite!({
+        const result = telegramInviteAdapter.buildShareLink!({
           rawToken: "token",
           sourceChannel: "telegram",
         });
@@ -154,7 +166,7 @@ describe("channel-invite-transport", () => {
 
   describe("telegram extractInboundToken", () => {
     test("extracts token from structured commandIntent", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_abc123" },
         content: "/start iv_abc123",
       });
@@ -162,7 +174,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("extracts base64url token from commandIntent", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_YWJjMTIz-_test" },
         content: "/start iv_YWJjMTIz-_test",
       });
@@ -170,7 +182,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent has no payload", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start" },
         content: "/start",
       });
@@ -178,7 +190,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload has wrong prefix (gv_)", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "gv_abc123" },
         content: "/start gv_abc123",
       });
@@ -186,7 +198,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload has no prefix", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "abc123" },
         content: "/start abc123",
       });
@@ -194,7 +206,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent type is not start", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "help", payload: "iv_abc123" },
         content: "/help iv_abc123",
       });
@@ -202,7 +214,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload is iv_ with empty token", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_" },
         content: "/start iv_",
       });
@@ -210,7 +222,7 @@ describe("channel-invite-transport", () => {
     });
 
     test("returns undefined when commandIntent payload is iv_ with whitespace-only token", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_   " },
         content: "/start iv_   ",
       });
@@ -218,49 +230,49 @@ describe("channel-invite-transport", () => {
     });
 
     test("extracts token from raw content fallback", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start iv_abc123",
       });
       expect(token).toBe("abc123");
     });
 
     test("extracts token from raw content with extra whitespace", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start   iv_token123",
       });
       expect(token).toBe("token123");
     });
 
     test("returns undefined for empty content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "",
       });
       expect(token).toBeUndefined();
     });
 
     test("returns undefined for content without /start", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "hello world",
       });
       expect(token).toBeUndefined();
     });
 
     test("returns undefined for /start without iv_ prefix in content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start gv_abc123",
       });
       expect(token).toBeUndefined();
     });
 
     test("returns undefined for malformed /start with only iv_ in content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         content: "/start iv_",
       });
       expect(token).toBeUndefined();
     });
 
     test("prefers commandIntent over raw content", () => {
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "iv_from_intent" },
         content: "/start iv_from_content",
       });
@@ -269,7 +281,7 @@ describe("channel-invite-transport", () => {
 
     test("returns undefined when commandIntent rejects, even if content has token", () => {
       // commandIntent present but payload has wrong prefix
-      const token = telegramInviteTransport.extractInboundToken({
+      const token = telegramInviteAdapter.extractInboundToken!({
         commandIntent: { type: "start", payload: "gv_abc123" },
         content: "/start iv_valid_token",
       });

package/src/__tests__/commit-message-enrichment-service.test.ts

@@ -2,15 +2,7 @@ import { execFileSync } from "node:child_process";
 import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import {
-  afterAll,
-  afterEach,
-  beforeAll,
-  beforeEach,
-  describe,
-  expect,
-  test,
-} from "bun:test";
+import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 
 import {
   _resetEnrichmentService,
@@ -27,7 +19,9 @@ describe("CommitEnrichmentService", () => {
   let testDir: string;
   let gitService: WorkspaceGitService;
 
-  beforeAll(async () => {
+  beforeEach(async () => {
+    _resetGitServiceRegistry();
+    _resetEnrichmentService();
     testDir = join(
       tmpdir(),
       `vellum-enrichment-test-${Date.now()}-${Math.random()
@@ -39,11 +33,6 @@ describe("CommitEnrichmentService", () => {
     await gitService.ensureInitialized();
   });
 
-  beforeEach(() => {
-    _resetGitServiceRegistry();
-    _resetEnrichmentService();
-  });
-
   afterEach(async () => {
     try {
       await getEnrichmentService().shutdown();
@@ -52,22 +41,6 @@ describe("CommitEnrichmentService", () => {
     }
     _resetEnrichmentService();
 
-    // Remove stale index.lock left by async enrichment jobs that ran git
-    // commands concurrently. Without this, the next test's createCommit()
-    // can fail with "Unable to create index.lock: File exists".
-    const lockFile = join(testDir, ".git", "index.lock");
-    if (existsSync(lockFile)) {
-      rmSync(lockFile, { force: true });
-    }
-  });
-
-  afterAll(async () => {
-    try {
-      await getEnrichmentService().shutdown();
-    } catch {
-      /* ignore */
-    }
-    _resetEnrichmentService();
     if (existsSync(testDir)) {
       rmSync(testDir, { recursive: true, force: true });
     }
@@ -86,13 +59,6 @@ describe("CommitEnrichmentService", () => {
   }
 
   async function createCommit(): Promise<string> {
-    // Remove stale index.lock left by async enrichment jobs that ran git
-    // commands concurrently in a previous test. Without this, git add -A
-    // can fail with "Unable to create index.lock: File exists".
-    const lockFile = join(testDir, ".git", "index.lock");
-    if (existsSync(lockFile)) {
-      rmSync(lockFile, { force: true });
-    }
     writeFileSync(join(testDir, `file-${Date.now()}.txt`), "content");
     await gitService.commitChanges("test commit");
     return await gitService.getHeadHash();

package/src/__tests__/computer-use-session-working-dir.test.ts

@@ -49,7 +49,6 @@ mock.module("../util/platform.js", () => ({
   isMacOS: () => false,
   isLinux: () => true,
   isWindows: () => false,
-  readHttpToken: () => null,
   normalizeAssistantId: (id: string) => id,
 }));
 

package/src/__tests__/credential-security-invariants.test.ts

@@ -229,6 +229,7 @@ describe("Invariant 2: no generic plaintext secret read API", () => {
       "calls/twilio-config.ts", // call infrastructure credential lookup
       "calls/twilio-provider.ts", // call infrastructure credential lookup
       "calls/twilio-rest.ts", // Twilio REST API credential lookup
+      "runtime/channel-invite-transports/sms.ts", // SMS invite transport phone number lookup
       "cli/config-commands.ts", // CLI credential management commands
       "runtime/http-server.ts", // HTTP server credential lookup
       "daemon/handlers/twitter-auth.ts", // Twitter OAuth token storage

package/src/__tests__/deterministic-verification-control-plane.test.ts

@@ -31,7 +31,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/guardian-action-followup-executor.test.ts

@@ -17,7 +17,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-token",
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/guardian-dispatch.test.ts

@@ -18,7 +18,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => null,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/guardian-outbound-http.test.ts

@@ -34,7 +34,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/handlers-telegram-config.test.ts

@@ -34,7 +34,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => undefined,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/inbound-invite-redemption.test.ts

@@ -27,7 +27,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({
@@ -204,9 +203,7 @@ describe("inbound invite redemption intercept", () => {
     expect(deliverReplyCalls.length).toBe(1);
     const replyText = (deliverReplyCalls[0].payload as Record<string, unknown>)
       .text;
-    expect(replyText).toContain(
-      "Welcome! You've been granted access via invite link.",
-    );
+    expect(replyText).toContain("Welcome! You've been granted access.");
   });
 
   test("non-member with invalid token gets refusal text", async () => {