@vellumai/assistant 0.4.32 → 0.4.34

package/src/__tests__/guardian-action-late-reply.test.ts

@@ -151,7 +151,6 @@ describe("guardian-action-late-reply", () => {
     });
 
     const deliveries = getExpiredDeliveriesByDestination(
-      "self",
       "telegram",
       "chat-abc",
     );
@@ -163,11 +162,7 @@ describe("guardian-action-late-reply", () => {
   test("getExpiredDeliveriesByDestination returns empty for non-matching channel", () => {
     createExpiredRequest("conv-late-2", { chatId: "chat-abc" });
 
-    const deliveries = getExpiredDeliveriesByDestination(
-      "self",
-      "sms",
-      "chat-abc",
-    );
+    const deliveries = getExpiredDeliveriesByDestination("sms", "chat-abc");
     expect(deliveries).toHaveLength(0);
   });
 
@@ -180,7 +175,6 @@ describe("guardian-action-late-reply", () => {
     startFollowupFromExpiredRequest(request.id, "late answer text");
 
     const deliveries = getExpiredDeliveriesByDestination(
-      "self",
       "telegram",
       "chat-started",
     );
@@ -311,7 +305,6 @@ describe("guardian-action-late-reply", () => {
 
     // Should not appear in expired queries
     const expiredByDest = getExpiredDeliveriesByDestination(
-      "self",
       "telegram",
       "chat-answered",
     );

package/src/__tests__/guardian-dispatch.test.ts

@@ -18,7 +18,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => null,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/guardian-grant-minting.test.ts

@@ -104,7 +104,6 @@ function createTestGuardianApproval(
     runId: `run-${requestId}`,
     requestId,
     conversationId: CONVERSATION_ID,
-    assistantId: ASSISTANT_ID,
     channel: "telegram",
     requesterExternalUserId: REQUESTER_USER,
     requesterChatId: REQUESTER_CHAT,

package/src/__tests__/guardian-outbound-http.test.ts

@@ -34,7 +34,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/guardian-routing-state.test.ts

@@ -185,7 +185,6 @@ describe("inbound-message-handler trusted-contact interactivity", () => {
     // Insert a test contact so the contacts-based ACL lookup passes
     upsertContact({
       displayName: "Test User",
-      assistantId: "self",
       channels: [
         {
           type: "telegram",
@@ -225,7 +224,6 @@ describe("inbound-message-handler trusted-contact interactivity", () => {
   test("trusted contact with guardian binding gets interactive turn", async () => {
     // Create guardian binding in contacts table so the trust resolver finds it
     createGuardianBinding({
-      assistantId: "self",
       channel: "telegram",
       guardianExternalUserId: "guardian-user-for-tc",
       guardianDeliveryChatId: "guardian-chat-for-tc",
@@ -326,7 +324,6 @@ describe("inbound-message-handler trusted-contact interactivity", () => {
   test("guardian actors remain interactive regardless", async () => {
     // Guardian binding matches the sender — use contacts-first so trust resolver finds it
     createGuardianBinding({
-      assistantId: "self",
       channel: "telegram",
       guardianExternalUserId: "telegram-user-default",
       guardianDeliveryChatId: "chat-123",

package/src/__tests__/handlers-telegram-config.test.ts

@@ -34,7 +34,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => undefined,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/inbound-invite-redemption.test.ts

@@ -27,7 +27,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({
@@ -204,9 +203,7 @@ describe("inbound invite redemption intercept", () => {
     expect(deliverReplyCalls.length).toBe(1);
     const replyText = (deliverReplyCalls[0].payload as Record<string, unknown>)
       .text;
-    expect(replyText).toContain(
-      "Welcome! You've been granted access via invite link.",
-    );
+    expect(replyText).toContain("Welcome! You've been granted access.");
   });
 
   test("non-member with invalid token gets refusal text", async () => {
@@ -332,7 +329,6 @@ describe("inbound invite redemption intercept", () => {
   test("existing active member sending normal message is unaffected", async () => {
     // Pre-create an active member
     upsertMember({
-      assistantId: "self",
       sourceChannel: "telegram",
       externalUserId: "user-active-member",
       externalChatId: "chat-active",
@@ -382,7 +378,6 @@ describe("inbound invite redemption intercept", () => {
 
     // Pre-create an active member that will click the invite link
     upsertMember({
-      assistantId: "self",
       sourceChannel: "telegram",
       externalUserId: "user-already-active",
       externalChatId: "chat-invite-test",
@@ -409,7 +404,6 @@ describe("inbound invite redemption intercept", () => {
     });
 
     upsertMember({
-      assistantId: "self",
       sourceChannel: "telegram",
       externalUserId: "user-invite-123",
       externalChatId: "chat-invite-test",

package/src/__tests__/ingress-reconcile.test.ts

@@ -24,9 +24,6 @@ mock.module("../config/loader.js", () => ({
   invalidateConfigCache: () => {},
 }));
 
-// readHttpToken return value — controlled per test
-let httpTokenValue: string | null = null;
-
 mock.module("../util/platform.js", () => ({
   getRootDir: () => testDir,
   getDataDir: () => testDir,
@@ -39,7 +36,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => httpTokenValue,
 }));
 
 mock.module("../util/logger.js", () => ({
@@ -66,8 +62,8 @@ mock.module("../providers/registry.js", () => ({
   initializeProviders: () => {},
 }));
 
-// Mock token service — triggerGatewayReconcile now uses mintDaemonDeliveryToken
-// instead of readHttpToken for the Bearer token.
+// Mock token service — triggerGatewayReconcile uses mintDaemonDeliveryToken
+// for the Bearer token.
 let mintedToken: string | null = null;
 mock.module("../runtime/auth/token-service.js", () => ({
   mintDaemonDeliveryToken: () => mintedToken ?? "test-delivery-token",
@@ -127,7 +123,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
 
   beforeEach(() => {
     rawConfigStore = {};
-    httpTokenValue = null;
     mintedToken = null;
     reconcileCalls = [];
     fetchShouldFail = false;
@@ -194,9 +189,7 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
 
   // ── Token present/missing behavior ──────────────────────────────────────
 
-  test("always triggers reconcile even when readHttpToken returns null (uses mintDaemonDeliveryToken)", async () => {
-    httpTokenValue = null;
-
+  test("always triggers reconcile using mintDaemonDeliveryToken", async () => {
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -243,8 +236,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   // ── Request payload normalization ───────────────────────────────────────
 
   test("sends ingressPublicBaseUrl in reconcile body when URL is set", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -263,8 +254,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("sends POST to /internal/telegram/reconcile with correct content type", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -283,8 +272,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("normalizes trailing slashes in publicBaseUrl before sending reconcile", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -304,7 +291,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("uses GATEWAY_INTERNAL_BASE_URL when set", async () => {
-    httpTokenValue = "test-token";
     process.env.GATEWAY_INTERNAL_BASE_URL = "http://custom-gateway:9999";
 
     const msg: IngressConfigRequest = {
@@ -326,8 +312,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("defaults to localhost:7830 when no GATEWAY env vars set", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -347,7 +331,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("uses GATEWAY_PORT when GATEWAY_INTERNAL_BASE_URL is not set", async () => {
-    httpTokenValue = "test-token";
     process.env.GATEWAY_PORT = "8888";
 
     const msg: IngressConfigRequest = {
@@ -371,7 +354,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   // ── Non-fatal failure behavior ──────────────────────────────────────────
 
   test("reconcile failure does not cause handleIngressConfig to fail", async () => {
-    httpTokenValue = "test-token";
     fetchShouldFail = true;
 
     const msg: IngressConfigRequest = {
@@ -404,8 +386,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("response is sent before reconcile fetch completes", async () => {
-    httpTokenValue = "test-token";
-
     // Track timing: response should be sent before fetch resolves
     let fetchResolved = false;
     const originalMockFetch = globalThis.fetch;
@@ -456,8 +436,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   // ── Set flow ────────────────────────────────────────────────────────────
 
   test("set action with enabled=true and URL triggers reconcile with the URL", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -483,8 +461,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   // ── Clear flow ──────────────────────────────────────────────────────────
 
   test("set action with empty URL and enabled=true (clear URL) still triggers reconcile", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -512,8 +488,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   // ── Disable flow ────────────────────────────────────────────────────────
 
   test("set action with enabled=false triggers reconcile with empty URL", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -539,8 +513,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("disabling ingress removes INGRESS_PUBLIC_BASE_URL env var", () => {
-    httpTokenValue = "test-token";
-
     // First set ingress to populate env var
     process.env.INGRESS_PUBLIC_BASE_URL =
       "https://should-be-removed.example.com";
@@ -562,7 +534,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   // ── Get action does not trigger reconcile ───────────────────────────────
 
   test("get action does not trigger reconcile", async () => {
-    httpTokenValue = "test-token";
     rawConfigStore = {
       ingress: { publicBaseUrl: "https://existing.example.com", enabled: true },
     };
@@ -593,8 +564,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   // ── Env var propagation ─────────────────────────────────────────────────
 
   test("set action propagates URL to process.env when enabled", () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",
@@ -611,8 +580,6 @@ describe("Ingress reconcile trigger in handleIngressConfig", () => {
   });
 
   test("reconcile uses effective URL from process.env (not raw value)", async () => {
-    httpTokenValue = "test-token";
-
     const msg: IngressConfigRequest = {
       type: "ingress_config",
       action: "set",

package/src/__tests__/migration-cross-version-compatibility.test.ts

@@ -98,7 +98,6 @@ mock.module("../config/env.js", () => ({
   getGatewayPort: () => 7830,
   getRuntimeHttpPort: () => 7821,
   getRuntimeHttpHost: () => "127.0.0.1",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   getIngressPublicBaseUrl: () => undefined,
   setIngressPublicBaseUrl: () => {},

package/src/__tests__/migration-export-http.test.ts

@@ -72,7 +72,6 @@ mock.module("../config/env.js", () => ({
   getGatewayPort: () => 7830,
   getRuntimeHttpPort: () => 7821,
   getRuntimeHttpHost: () => "127.0.0.1",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   getIngressPublicBaseUrl: () => undefined,
   setIngressPublicBaseUrl: () => {},

package/src/__tests__/migration-import-commit-http.test.ts

@@ -93,7 +93,6 @@ mock.module("../config/env.js", () => ({
   getGatewayPort: () => 7830,
   getRuntimeHttpPort: () => 7821,
   getRuntimeHttpHost: () => "127.0.0.1",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   getIngressPublicBaseUrl: () => undefined,
   setIngressPublicBaseUrl: () => {},

package/src/__tests__/migration-import-preflight-http.test.ts

@@ -79,7 +79,6 @@ mock.module("../config/env.js", () => ({
   getGatewayPort: () => 7830,
   getRuntimeHttpPort: () => 7821,
   getRuntimeHttpHost: () => "127.0.0.1",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   getIngressPublicBaseUrl: () => undefined,
   setIngressPublicBaseUrl: () => {},

package/src/__tests__/migration-validate-http.test.ts

@@ -68,7 +68,6 @@ mock.module("../config/env.js", () => ({
   getGatewayPort: () => 7830,
   getRuntimeHttpPort: () => 7821,
   getRuntimeHttpHost: () => "127.0.0.1",
-  getRuntimeProxyBearerToken: () => undefined,
   getRuntimeGatewayOriginSecret: () => undefined,
   getIngressPublicBaseUrl: () => undefined,
   setIngressPublicBaseUrl: () => {},

package/src/__tests__/non-member-access-request.test.ts

@@ -29,7 +29,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => "test-bearer-token",
 }));
 
 mock.module("../util/logger.js", () => ({
@@ -190,7 +189,6 @@ describe("non-member access request notification", () => {
   test("guardian is notified when a non-member messages and a guardian binding exists", async () => {
     // Set up a guardian binding for this channel
     createGuardianBinding({
-      assistantId: "self",
       channel: "telegram",
       guardianExternalUserId: "guardian-user-789",
       guardianDeliveryChatId: "guardian-chat-789",
@@ -236,7 +234,6 @@ describe("non-member access request notification", () => {
 
   test("no duplicate approval requests for repeated messages from same non-member", async () => {
     createGuardianBinding({
-      assistantId: "self",
       channel: "telegram",
       guardianExternalUserId: "guardian-user-789",
       guardianDeliveryChatId: "guardian-chat-789",
@@ -307,7 +304,6 @@ describe("non-member access request notification", () => {
   test("cross-channel fallback: SMS guardian binding resolves for Telegram access request", async () => {
     // Only an SMS guardian binding exists — no Telegram binding
     createGuardianBinding({
-      assistantId: "self",
       channel: "sms",
       guardianExternalUserId: "guardian-sms-user",
       guardianDeliveryChatId: "guardian-sms-chat",
@@ -343,7 +339,6 @@ describe("non-member access request notification", () => {
 
   test("no notification when actorExternalId is absent", async () => {
     createGuardianBinding({
-      assistantId: "self",
       channel: "telegram",
       guardianExternalUserId: "guardian-user-789",
       guardianDeliveryChatId: "guardian-chat-789",
@@ -420,7 +415,6 @@ describe("access-request-helper unit tests", () => {
   test("notifyGuardianOfAccessRequest uses cross-channel binding when source-channel binding is missing", () => {
     // Only SMS binding exists
     createGuardianBinding({
-      assistantId: "self",
       channel: "sms",
       guardianExternalUserId: "guardian-sms",
       guardianDeliveryChatId: "sms-chat",
@@ -456,7 +450,6 @@ describe("access-request-helper unit tests", () => {
   test("notifyGuardianOfAccessRequest prefers source-channel binding over cross-channel fallback", () => {
     // Both Telegram and SMS bindings exist
     createGuardianBinding({
-      assistantId: "self",
       channel: "telegram",
       guardianExternalUserId: "guardian-tg",
       guardianDeliveryChatId: "tg-chat",
@@ -464,7 +457,6 @@ describe("access-request-helper unit tests", () => {
       verifiedVia: "test",
     });
     createGuardianBinding({
-      assistantId: "self",
       channel: "sms",
       guardianExternalUserId: "guardian-sms",
       guardianDeliveryChatId: "sms-chat",

package/src/__tests__/notification-broadcaster.test.ts

@@ -23,7 +23,7 @@ mock.module("../util/logger.js", () => ({
 
 // Mock destination-resolver to return a destination for every requested channel
 mock.module("../notifications/destination-resolver.js", () => ({
-  resolveDestinations: (_assistantId: string, channels: string[]) => {
+  resolveDestinations: (channels: string[]) => {
     const m = new Map();
     for (const ch of channels) {
       m.set(ch, { channel: ch, endpoint: `mock-${ch}` });
@@ -84,7 +84,6 @@ function makeSignal(
 ): NotificationSignal {
   return {
     signalId: "sig-broadcast-001",
-    assistantId: "self",
     createdAt: Date.now(),
     sourceChannel: "scheduler",
     sourceSessionId: "sess-001",

package/src/__tests__/notification-decision-fallback.test.ts

@@ -63,7 +63,6 @@ function makeSignal(
 ): NotificationSignal {
   return {
     signalId: "sig-fallback-guardian-1",
-    assistantId: "self",
     createdAt: Date.now(),
     sourceChannel: "voice",
     sourceSessionId: "call-session-1",
@@ -307,7 +306,6 @@ describe("access-request instruction enforcement", () => {
   ): NotificationSignal {
     return {
       signalId: "sig-access-req-1",
-      assistantId: "self",
       createdAt: Date.now(),
       sourceChannel: "telegram",
       sourceSessionId: "tg-session-1",

package/src/__tests__/notification-decision-strategy.test.ts

@@ -36,7 +36,6 @@ function makeSignal(
 ): NotificationSignal {
   return {
     signalId: "sig-test-001",
-    assistantId: "self",
     createdAt: Date.now(),
     sourceChannel: "scheduler",
     sourceSessionId: "sess-001",

package/src/__tests__/notification-guardian-path.test.ts

@@ -25,7 +25,6 @@ mock.module("../util/platform.js", () => ({
   getDbPath: () => join(testDir, "test.db"),
   getLogPath: () => join(testDir, "test.log"),
   ensureDataDir: () => {},
-  readHttpToken: () => null,
 }));
 
 mock.module("../util/logger.js", () => ({

package/src/__tests__/notification-telegram-adapter.test.ts

@@ -21,10 +21,6 @@ mock.module("../runtime/gateway-client.js", () => ({
   },
 }));
 
-mock.module("../util/platform.js", () => ({
-  readHttpToken: () => "test-http-token",
-}));
-
 mock.module("../util/logger.js", () => ({
   getLogger: () =>
     new Proxy({} as Record<string, unknown>, {