@vellumai/assistant 0.4.41 → 0.4.43

package/src/daemon/handlers/workspace-files.ts

@@ -1,84 +0,0 @@
-import { readFileSync } from "node:fs";
-import * as net from "node:net";
-import { join, resolve, sep } from "node:path";
-
-import { pathExists } from "../../util/fs.js";
-import { getWorkspaceDir } from "../../util/platform.js";
-import type { WorkspaceFileReadRequest } from "../ipc-protocol.js";
-import { defineHandlers, type HandlerContext, log } from "./shared.js";
-
-/** Well-known workspace prompt files shown in the Identity panel. */
-const WORKSPACE_FILES = ["IDENTITY.md", "SOUL.md", "USER.md", "skills/"];
-
-function handleWorkspaceFilesList(
-  socket: net.Socket,
-  ctx: HandlerContext,
-): void {
-  const base = getWorkspaceDir();
-  const files = WORKSPACE_FILES.map((name) => ({
-    path: name,
-    name,
-    exists: pathExists(join(base, name)),
-  }));
-  ctx.send(socket, { type: "workspace_files_list_response", files });
-}
-
-function handleWorkspaceFileRead(
-  msg: WorkspaceFileReadRequest,
-  socket: net.Socket,
-  ctx: HandlerContext,
-): void {
-  const base = getWorkspaceDir();
-  const requested = msg.path;
-
-  // Prevent path traversal — reject paths that escape the workspace root.
-  // Use resolve() to canonicalize and check with trailing separator to prevent
-  // sibling directory prefix matches (e.g. "../workspace-evil/secret").
-  const resolved = resolve(base, requested);
-  if (!resolved.startsWith(base + sep) && resolved !== base) {
-    log.warn(
-      { path: requested },
-      "Workspace file read blocked: path traversal attempt",
-    );
-    ctx.send(socket, {
-      type: "workspace_file_read_response",
-      path: requested,
-      content: null,
-      error: "Invalid path",
-    });
-    return;
-  }
-
-  try {
-    if (!pathExists(resolved)) {
-      ctx.send(socket, {
-        type: "workspace_file_read_response",
-        path: requested,
-        content: null,
-        error: "File not found",
-      });
-      return;
-    }
-    const content = readFileSync(resolved, "utf-8");
-    ctx.send(socket, {
-      type: "workspace_file_read_response",
-      path: requested,
-      content,
-    });
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    log.error({ err, path: requested }, "Failed to read workspace file");
-    ctx.send(socket, {
-      type: "workspace_file_read_response",
-      path: requested,
-      content: null,
-      error: message,
-    });
-  }
-}
-
-export const workspaceFileHandlers = defineHandlers({
-  workspace_files_list: (_msg, socket, ctx) =>
-    handleWorkspaceFilesList(socket, ctx),
-  workspace_file_read: handleWorkspaceFileRead,
-});

package/src/daemon/handlers.ts

@@ -1,16 +0,0 @@
-// Re-export everything from the decomposed handler modules.
-// This file exists for backwards compatibility — all imports from
-// './handlers.js' continue to work without changes.
-export type {
-  HandlerContext,
-  HistorySurface,
-  HistoryToolCall,
-  ParsedHistoryMessage,
-  RenderedHistoryContent,
-  SessionCreateOptions,
-} from "./handlers/index.js";
-export {
-  handleMessage,
-  mergeToolResults,
-  renderHistoryContent,
-} from "./handlers/index.js";

package/src/daemon/ipc-blob-store.ts

@@ -1,246 +0,0 @@
-import { createHash } from "node:crypto";
-import {
-  existsSync,
-  lstatSync,
-  mkdirSync,
-  realpathSync,
-  unlinkSync,
-} from "node:fs";
-import { lstat, readdir, readFile, realpath, unlink } from "node:fs/promises";
-import { join, relative, resolve, sep } from "node:path";
-
-import { getLogger } from "../util/logger.js";
-import { getIpcBlobDir } from "../util/platform.js";
-import type { IpcBlobRef } from "./ipc-contract.js";
-
-const log = getLogger("ipc-blob-store");
-
-const BLOB_ID_REGEX = /^[0-9a-fA-F-]{36}$/;
-const MAX_SCREENSHOT_BLOB_SIZE = 10 * 1024 * 1024; // 10 MB
-const MAX_AX_BLOB_SIZE = 2 * 1024 * 1024; // 2 MB
-const BLOB_EXTENSION = ".blob";
-
-/** Ensure the blob directory exists. Call at daemon startup. */
-export function ensureBlobDir(): void {
-  const dir = getIpcBlobDir();
-  if (!existsSync(dir)) {
-    mkdirSync(dir, { recursive: true });
-  }
-}
-
-/** Validate a blob ID matches UUID format. */
-export function isValidBlobId(id: string): boolean {
-  return BLOB_ID_REGEX.test(id);
-}
-
-/**
- * Resolve a blob ID to its absolute file path.
- * Throws if the ID is invalid or the resolved path escapes the blob directory.
- */
-export function resolveBlobPath(id: string): string {
-  if (!isValidBlobId(id)) {
-    throw new Error(`Invalid blob ID: ${id}`);
-  }
-  const blobDir = getIpcBlobDir();
-  const candidate = resolve(join(blobDir, `${id}${BLOB_EXTENSION}`));
-
-  // Symlink protection: verify the resolved path stays within the blob dir.
-  // Use relative() for separator-agnostic containment check.
-  const normalizedBlobDir = resolve(blobDir);
-  const rel = relative(normalizedBlobDir, candidate);
-  if (rel.startsWith("..") || rel.startsWith(sep + sep) || rel === "") {
-    throw new Error(`Blob path escapes blob directory: ${id}`);
-  }
-
-  return candidate;
-}
-
-/**
- * Verify that a blob file at the given path is a regular file (not a symlink)
- * and that its realpath stays within the blob directory.
- * Throws if the file is a symlink or escapes the blob directory.
- */
-async function assertRegularFileInBlobDir(filePath: string): Promise<void> {
-  const fileLstat = await lstat(filePath);
-  if (fileLstat.isSymbolicLink()) {
-    throw new Error(`Blob file is a symlink: ${filePath}`);
-  }
-  const real = await realpath(filePath);
-  // Realpath both the file and the blob dir so macOS /var → /private/var is handled
-  const realBlobDir = await realpath(getIpcBlobDir());
-  const realRel = relative(realBlobDir, real);
-  if (
-    realRel.startsWith("..") ||
-    realRel.startsWith(sep + sep) ||
-    realRel === ""
-  ) {
-    throw new Error(`Blob realpath escapes blob directory: ${real}`);
-  }
-}
-
-/**
- * Synchronous variant for use in deleteBlob.
- */
-function assertRegularFileInBlobDirSync(filePath: string): void {
-  const fileLstat = lstatSync(filePath);
-  if (fileLstat.isSymbolicLink()) {
-    throw new Error(`Blob file is a symlink: ${filePath}`);
-  }
-  const real = realpathSync(filePath);
-  const realBlobDir = realpathSync(getIpcBlobDir());
-  const realRel = relative(realBlobDir, real);
-  if (
-    realRel.startsWith("..") ||
-    realRel.startsWith(sep + sep) ||
-    realRel === ""
-  ) {
-    throw new Error(`Blob realpath escapes blob directory: ${real}`);
-  }
-}
-
-/** Expected kind and encoding for each blob field. */
-export const EXPECTED_BLOB_FIELD_METADATA = {
-  axTreeBlob: { kind: "ax_tree" as const, encoding: "utf8" as const },
-  screenshotBlob: {
-    kind: "screenshot_jpeg" as const,
-    encoding: "binary" as const,
-  },
-};
-
-/**
- * Validate that a blob ref's kind and encoding match expectations for a given field.
- * Throws with a descriptive message if they don't match.
- */
-export function validateBlobKindEncoding(
-  ref: IpcBlobRef,
-  field: keyof typeof EXPECTED_BLOB_FIELD_METADATA,
-): void {
-  const expected = EXPECTED_BLOB_FIELD_METADATA[field];
-  if (ref.kind !== expected.kind) {
-    throw new Error(
-      `Blob kind mismatch for ${field}: expected "${expected.kind}", got "${ref.kind}"`,
-    );
-  }
-  if (ref.encoding !== expected.encoding) {
-    throw new Error(
-      `Blob encoding mismatch for ${field}: expected "${expected.encoding}", got "${ref.encoding}"`,
-    );
-  }
-}
-
-/**
- * Read a blob file and validate it against the ref metadata.
- * Verifies the file is a regular file (not a symlink) and its realpath
- * stays within the blob directory before reading.
- * Returns the raw bytes.
- */
-export async function readBlob(ref: IpcBlobRef): Promise<Buffer> {
-  const filePath = resolveBlobPath(ref.id);
-
-  // Enforce hard size limits by kind against declared byteLength before any I/O
-  const maxSize =
-    ref.kind === "screenshot_jpeg"
-      ? MAX_SCREENSHOT_BLOB_SIZE
-      : MAX_AX_BLOB_SIZE;
-  if (ref.byteLength > maxSize) {
-    throw new Error(
-      `Blob ${ref.id} declared size exceeds limit for kind "${ref.kind}": ${ref.byteLength} > ${maxSize}`,
-    );
-  }
-
-  // Symlink-safe: verify the file is a regular file with realpath inside blob dir.
-  // assertRegularFileInBlobDir also lstat()s, giving us symlink detection.
-  await assertRegularFileInBlobDir(filePath);
-
-  const buf = await readFile(filePath);
-
-  // Validate actual size matches declared byteLength
-  if (buf.byteLength !== ref.byteLength) {
-    throw new Error(
-      `Blob size mismatch for ${ref.id}: expected ${ref.byteLength} bytes, got ${buf.byteLength}`,
-    );
-  }
-
-  // Double-check actual size against limit (in case byteLength was spoofed to be small)
-  if (buf.byteLength > maxSize) {
-    throw new Error(
-      `Blob ${ref.id} exceeds size limit for kind "${ref.kind}": ${buf.byteLength} > ${maxSize}`,
-    );
-  }
-
-  // Verify SHA-256 if provided
-  if (ref.sha256) {
-    const hash = createHash("sha256").update(buf).digest("hex");
-    if (hash !== ref.sha256) {
-      throw new Error(
-        `Blob SHA-256 mismatch for ${ref.id}: expected ${ref.sha256}, got ${hash}`,
-      );
-    }
-  }
-
-  return buf;
-}
-
-/** Delete a blob file by ID. Best-effort, logs warning on failure. */
-export function deleteBlob(id: string): void {
-  try {
-    const filePath = resolveBlobPath(id);
-    // Symlink-safe: verify the file is a regular file before deleting
-    assertRegularFileInBlobDirSync(filePath);
-    unlinkSync(filePath);
-  } catch (err) {
-    // ENOENT is expected when the blob was already cleaned up
-    if ((err as NodeJS.ErrnoException).code !== "ENOENT") {
-      log.warn({ err, blobId: id }, "Failed to delete blob");
-    }
-  }
-}
-
-/** Sweep stale blob files older than maxAgeMs. Returns count of deleted files. */
-export async function sweepStaleBlobs(maxAgeMs: number): Promise<number> {
-  const blobDir = getIpcBlobDir();
-  let entries: string[];
-  try {
-    entries = await readdir(blobDir);
-  } catch (err) {
-    // Directory may not exist yet if no blobs have been written
-    if ((err as NodeJS.ErrnoException).code === "ENOENT") {
-      return 0;
-    }
-    log.warn({ err }, "Failed to read blob directory for sweep");
-    return 0;
-  }
-
-  const now = Date.now();
-  let deleted = 0;
-
-  for (const entry of entries) {
-    if (!entry.endsWith(BLOB_EXTENSION)) continue;
-
-    const filePath = join(blobDir, entry);
-    try {
-      // Use lstat (not stat) to detect symlinks without following them
-      const fileLstat = await lstat(filePath);
-      if (fileLstat.isSymbolicLink()) {
-        log.warn({ filePath }, "Skipping symlink during blob sweep");
-        continue;
-      }
-      const ageMs = now - fileLstat.mtimeMs;
-      if (ageMs > maxAgeMs) {
-        await unlink(filePath);
-        deleted++;
-      }
-    } catch (err) {
-      // File may have been deleted between readdir and stat/unlink
-      if ((err as NodeJS.ErrnoException).code !== "ENOENT") {
-        log.warn({ err, filePath }, "Failed to stat/delete blob during sweep");
-      }
-    }
-  }
-
-  if (deleted > 0) {
-    log.info({ deleted, total: entries.length }, "Swept stale blobs");
-  }
-
-  return deleted;
-}

package/src/daemon/ipc-contract-inventory.json

@@ -1,348 +0,0 @@
-{
-  "clientMessageTypes": [
-    "_AppsClientMessages",
-    "_BrowserClientMessages",
-    "_ComputerUseClientMessages",
-    "_ContactsClientMessages",
-    "_DiagnosticsClientMessages",
-    "_DocumentsClientMessages",
-    "_GuardianActionsClientMessages",
-    "_InboxClientMessages",
-    "_IntegrationsClientMessages",
-    "_MessagesClientMessages",
-    "_NotificationsClientMessages",
-    "_PairingClientMessages",
-    "_SchedulesClientMessages",
-    "_SessionsClientMessages",
-    "_SettingsClientMessages",
-    "_SkillsClientMessages",
-    "_SubagentsClientMessages",
-    "_SurfacesClientMessages",
-    "_TrustClientMessages",
-    "_WorkItemsClientMessages",
-    "_WorkspaceClientMessages"
-  ],
-  "serverMessageTypes": [
-    "SubagentEvent",
-    "_AppsServerMessages",
-    "_BrowserServerMessages",
-    "_ComputerUseServerMessages",
-    "_ContactsServerMessages",
-    "_DiagnosticsServerMessages",
-    "_DocumentsServerMessages",
-    "_GuardianActionsServerMessages",
-    "_InboxServerMessages",
-    "_IntegrationsServerMessages",
-    "_MemoryServerMessages",
-    "_MessagesServerMessages",
-    "_NotificationsServerMessages",
-    "_PairingServerMessages",
-    "_SchedulesServerMessages",
-    "_SessionsServerMessages",
-    "_SettingsServerMessages",
-    "_SkillsServerMessages",
-    "_SubagentsServerMessages",
-    "_SurfacesServerMessages",
-    "_TrustServerMessages",
-    "_WorkItemsServerMessages",
-    "_WorkspaceServerMessages"
-  ],
-  "clientWireTypes": [
-    "accept_starter_bundle",
-    "add_trust_rule",
-    "app_data_request",
-    "app_delete",
-    "app_diff_request",
-    "app_file_at_version_request",
-    "app_history_request",
-    "app_open_request",
-    "app_preview_request",
-    "app_restore_request",
-    "app_update_preview",
-    "approved_device_remove",
-    "approved_devices_clear",
-    "approved_devices_list",
-    "apps_list",
-    "assistant_inbox_escalation",
-    "auth",
-    "bundle_app",
-    "cancel",
-    "confirmation_response",
-    "contacts",
-    "contacts_invite",
-    "conversation_search",
-    "conversation_seen_signal",
-    "cu_observation",
-    "cu_session_abort",
-    "cu_session_create",
-    "delete_queued_message",
-    "diagnostics_export_request",
-    "dictation_request",
-    "document_list",
-    "document_load",
-    "document_save",
-    "env_vars_request",
-    "fork_shared_app",
-    "gallery_install",
-    "gallery_list",
-    "generate_avatar",
-    "get_signing_identity_response",
-    "guardian_action_decision",
-    "guardian_actions_pending_request",
-    "guardian_verification",
-    "heartbeat_checklist_read",
-    "heartbeat_checklist_write",
-    "heartbeat_config",
-    "heartbeat_run_now",
-    "heartbeat_runs_list",
-    "history_request",
-    "home_base_get",
-    "identity_get",
-    "image_gen_model_set",
-    "ingress_config",
-    "integration_connect",
-    "integration_disconnect",
-    "integration_list",
-    "ipc_blob_probe",
-    "link_open_request",
-    "message_content_request",
-    "model_get",
-    "model_set",
-    "notification_intent_result",
-    "oauth_connect_start",
-    "open_bundle",
-    "pairing_approval_response",
-    "ping",
-    "platform_config",
-    "publish_page",
-    "recording_status",
-    "regenerate",
-    "reminder_cancel",
-    "reminders_list",
-    "remove_trust_rule",
-    "reorder_threads",
-    "ride_shotgun_start",
-    "ride_shotgun_stop",
-    "schedule_remove",
-    "schedule_run_now",
-    "schedule_toggle",
-    "schedules_list",
-    "secret_response",
-    "session_create",
-    "session_list",
-    "session_rename",
-    "session_switch",
-    "sessions_clear",
-    "share_app_cloud",
-    "shared_app_delete",
-    "shared_apps_list",
-    "sign_bundle_payload_response",
-    "skill_detail",
-    "skills_check_updates",
-    "skills_configure",
-    "skills_create",
-    "skills_disable",
-    "skills_draft",
-    "skills_enable",
-    "skills_inspect",
-    "skills_install",
-    "skills_list",
-    "skills_search",
-    "skills_uninstall",
-    "skills_update",
-    "slack_webhook_config",
-    "subagent_abort",
-    "subagent_detail_request",
-    "subagent_message",
-    "subagent_status",
-    "suggestion_request",
-    "task_submit",
-    "telegram_config",
-    "tool_names_list",
-    "tool_permission_simulate",
-    "trust_rules_list",
-    "twitter_auth_start",
-    "twitter_auth_status",
-    "twitter_integration_config",
-    "ui_surface_action",
-    "ui_surface_undo",
-    "undo",
-    "unpublish_page",
-    "update_trust_rule",
-    "usage_request",
-    "user_message",
-    "vercel_api_config",
-    "voice_config_update",
-    "watch_observation",
-    "work_item_approve_permissions",
-    "work_item_cancel",
-    "work_item_complete",
-    "work_item_delete",
-    "work_item_get",
-    "work_item_output",
-    "work_item_preflight",
-    "work_item_run_task",
-    "work_item_update",
-    "work_items_list",
-    "workspace_file_read",
-    "workspace_files_list"
-  ],
-  "serverWireTypes": [
-    "accept_starter_bundle_response",
-    "app_data_response",
-    "app_delete_response",
-    "app_diff_response",
-    "app_file_at_version_response",
-    "app_files_changed",
-    "app_history_response",
-    "app_preview_response",
-    "app_restore_response",
-    "app_update_preview_response",
-    "approved_device_remove_response",
-    "approved_devices_list_response",
-    "apps_list_response",
-    "assistant_activity_state",
-    "assistant_inbox_escalation_response",
-    "assistant_text_delta",
-    "assistant_thinking_delta",
-    "auth_result",
-    "avatar_updated",
-    "bundle_app_response",
-    "client_settings_update",
-    "confirmation_request",
-    "confirmation_state_changed",
-    "contacts_changed",
-    "contacts_invite_response",
-    "contacts_response",
-    "context_compacted",
-    "conversation_search_response",
-    "cu_action",
-    "cu_complete",
-    "cu_error",
-    "daemon_status",
-    "diagnostics_export_response",
-    "dictation_response",
-    "document_editor_show",
-    "document_editor_update",
-    "document_list_response",
-    "document_load_response",
-    "document_save_response",
-    "env_vars_response",
-    "error",
-    "fork_shared_app_response",
-    "gallery_install_response",
-    "gallery_list_response",
-    "generate_avatar_response",
-    "generation_cancelled",
-    "generation_handoff",
-    "get_signing_identity",
-    "guardian_action_decision_response",
-    "guardian_actions_pending_response",
-    "guardian_verification_response",
-    "heartbeat_alert",
-    "heartbeat_checklist_response",
-    "heartbeat_checklist_write_response",
-    "heartbeat_config_response",
-    "heartbeat_run_now_response",
-    "heartbeat_runs_list_response",
-    "history_response",
-    "home_base_get_response",
-    "identity_changed",
-    "identity_get_response",
-    "ingress_config_response",
-    "integration_connect_result",
-    "integration_list_response",
-    "ipc_blob_probe_result",
-    "memory_recalled",
-    "memory_status",
-    "message_complete",
-    "message_content_response",
-    "message_dequeued",
-    "message_queued",
-    "message_queued_deleted",
-    "message_request_complete",
-    "model_info",
-    "navigate_settings",
-    "notification_intent",
-    "notification_thread_created",
-    "oauth_connect_result",
-    "open_bundle_response",
-    "open_url",
-    "pairing_approval_request",
-    "platform_config_response",
-    "pong",
-    "publish_page_response",
-    "recording_pause",
-    "recording_resume",
-    "recording_start",
-    "recording_stop",
-    "reminders_list_response",
-    "ride_shotgun_error",
-    "ride_shotgun_progress",
-    "ride_shotgun_result",
-    "schedule_thread_created",
-    "schedules_list_response",
-    "secret_detected",
-    "secret_request",
-    "session_error",
-    "session_info",
-    "session_list_response",
-    "session_title_updated",
-    "sessions_clear_response",
-    "share_app_cloud_response",
-    "shared_app_delete_response",
-    "shared_apps_list_response",
-    "sign_bundle_payload",
-    "skill_detail_response",
-    "skills_draft_response",
-    "skills_inspect_response",
-    "skills_list_response",
-    "skills_operation_response",
-    "skills_state_changed",
-    "slack_webhook_config_response",
-    "subagent_detail_response",
-    "subagent_event",
-    "subagent_spawned",
-    "subagent_status_changed",
-    "suggestion_response",
-    "task_routed",
-    "task_run_thread_created",
-    "tasks_changed",
-    "telegram_config_response",
-    "tool_input_delta",
-    "tool_names_list_response",
-    "tool_output_chunk",
-    "tool_permission_simulate_response",
-    "tool_result",
-    "tool_use_start",
-    "trace_event",
-    "trust_rules_list_response",
-    "twitter_auth_result",
-    "twitter_auth_status_response",
-    "twitter_integration_config_response",
-    "ui_surface_complete",
-    "ui_surface_dismiss",
-    "ui_surface_undo_result",
-    "ui_surface_update",
-    "undo_complete",
-    "unpublish_page_response",
-    "usage_response",
-    "usage_update",
-    "user_message_echo",
-    "vercel_api_config_response",
-    "watch_complete_request",
-    "watch_started",
-    "work_item_approve_permissions_response",
-    "work_item_cancel_response",
-    "work_item_delete_response",
-    "work_item_get_response",
-    "work_item_output_response",
-    "work_item_preflight_response",
-    "work_item_run_task_response",
-    "work_item_status_changed",
-    "work_item_update_response",
-    "work_items_list_response",
-    "workspace_file_read_response",
-    "workspace_files_list_response"
-  ]
-}