@vellumai/assistant 0.4.41 → 0.4.43

package/src/daemon/{guardian-verification-intent.ts → verification-session-intent.ts}

@@ -1,19 +1,19 @@
-// Guardian verification intent resolution for deterministic first-turn routing.
-// Exports `resolveGuardianVerificationIntent` as the single public entry point.
+// Verification session intent resolution for deterministic first-turn routing.
+// Exports `resolveVerificationSessionIntent` as the single public entry point.
 // When a direct guardian setup request is detected, the session pipeline
 // rewrites the message to force immediate entry into the guardian-verify-setup
 // skill flow, bypassing the normal agent loop's tendency to produce conceptual
 // preambles before loading the skill.
 
-export type GuardianVerificationIntentResult =
+export type VerificationSessionIntentResult =
   | { kind: "none" }
   | {
       kind: "direct_setup";
       rewrittenContent: string;
-      channelHint?: "voice" | "telegram" | "slack";
+      channelHint?: "phone" | "telegram" | "slack";
     };
 
-// ── Direct setup patterns ────────────────────────────────────────────────
+// -- Direct setup patterns ----------------------------------------------------
 // These capture imperative requests to start guardian verification.
 
 const DIRECT_SETUP_PATTERNS: RegExp[] = [
@@ -24,12 +24,12 @@ const DIRECT_SETUP_PATTERNS: RegExp[] = [
   /\bguardian\s+verif(?:y|ication)\s*(?:setup|set\s*up)?\b/i,
   /\bset\s*up\s+guardian\s+verif(?:y|ication)\b/i,
   /\b(?:help\s+me\s+)?set\s+(?:myself\s+)?(?:up\s+)?as\s+(?:your\s+)?guardian\s+(?:for|via|by|over|on|through)\s+/i,
-  /\bguardian\s+(?:for|via|by|over|on|through)\s+(?:sms|text|phone|voice|telegram|slack|call)\b/i,
+  /\bguardian\s+(?:for|via|by|over|on|through)\s+(?:text|phone|voice|telegram|slack|call)\b/i,
   /\bbecome\s+(?:your\s+|the\s+)?guardian\b/i,
   /\bregister\s+(?:me\s+)?as\s+(?:your\s+|the\s+)?guardian\b/i,
 ];
 
-// ── Conceptual / security question patterns ──────────────────────────────
+// -- Conceptual / security question patterns ----------------------------------
 // These indicate the user is asking *about* guardian verification
 // rather than requesting to start it. Return passthrough for these.
 
@@ -44,13 +44,13 @@ const CONCEPTUAL_PATTERNS: RegExp[] = [
   /\bcan\s+(?:you\s+)?(?:tell|explain|describe)\b/i,
 ];
 
-// ── Channel hint extraction ──────────────────────────────────────────────
+// -- Channel hint extraction --------------------------------------------------
 
 const CHANNEL_HINT_PATTERNS: Array<{
   pattern: RegExp;
-  channel: "voice" | "telegram" | "slack";
+  channel: "phone" | "telegram" | "slack";
 }> = [
-  { pattern: /\b(?:voice|call|phone\s*call|by\s+phone)\b/i, channel: "voice" },
+  { pattern: /\b(?:voice|call|phone\s*call|by\s+phone)\b/i, channel: "phone" },
   { pattern: /\btelegram\b/i, channel: "telegram" },
   { pattern: /\bslack\b/i, channel: "slack" },
 ];
@@ -59,7 +59,7 @@ const CHANNEL_HINT_PATTERNS: Array<{
 const FILLER_PATTERN =
   /\b(please|pls|plz|can\s+you|could\s+you|would\s+you|now|right\s+now|thanks|thank\s+you|thx|ty|for\s+me|ok(ay)?|hey|hi|hello|just|i\s+want\s+to|i'd\s+like\s+to|i\s+need\s+to|let's|let\s+me)\b/gi;
 
-// ── Internal helpers ─────────────────────────────────────────────────────
+// -- Internal helpers ---------------------------------------------------------
 
 function isConceptualQuestion(text: string): boolean {
   const cleaned = text.replace(/^\s*(hey|hi|hello|please|pls|plz)[,\s]+/i, "");
@@ -72,17 +72,17 @@ function isDirectSetupIntent(text: string): boolean {
 
 function extractChannelHint(
   text: string,
-): "voice" | "telegram" | "slack" | undefined {
+): "phone" | "telegram" | "slack" | undefined {
   for (const { pattern, channel } of CHANNEL_HINT_PATTERNS) {
     if (pattern.test(text)) return channel;
   }
   return undefined;
 }
 
-// ── Structured intent resolver ───────────────────────────────────────────
+// -- Structured intent resolver -----------------------------------------------
 
 /**
- * Resolves guardian verification intent from user text.
+ * Resolves verification session intent from user text.
  *
  * Pipeline:
  * 1. Skip slash commands entirely
@@ -90,9 +90,9 @@ function extractChannelHint(
  * 3. Detect direct setup patterns
  * 4. On match, build a deterministic model instruction to load guardian-verify-setup
  */
-export function resolveGuardianVerificationIntent(
+export function resolveVerificationSessionIntent(
   text: string,
-): GuardianVerificationIntentResult {
+): VerificationSessionIntentResult {
   const trimmed = text.trim();
 
   // Never intercept slash commands

package/src/daemon/watch-handler.ts

@@ -1,5 +1,3 @@
-import type * as net from "node:net";
-
 import {
   extractText,
   getConfiguredProvider,
@@ -16,8 +14,8 @@ import {
   watchSessions,
 } from "../tools/watch/watch-state.js";
 import { getLogger } from "../util/logger.js";
-import type { HandlerContext } from "./handlers.js";
-import type { WatchObservation } from "./ipc-protocol.js";
+import type { HandlerContext } from "./handlers/shared.js";
+import type { WatchObservation } from "./message-protocol.js";
 
 const log = getLogger("watch-handler");
 
@@ -30,7 +28,6 @@ export const lastSummaryBySession = new Map<string, string>();
 
 export async function handleWatchObservation(
   msg: WatchObservation,
-  _socket: net.Socket,
   _ctx: HandlerContext,
 ): Promise<void> {
   try {

package/src/email/service.ts

@@ -5,6 +5,13 @@
  * The CLI layer calls only this; never the provider directly.
  */
 
+import {
+  getNestedValue,
+  loadRawConfig,
+  saveRawConfig,
+  setNestedValue,
+} from "../config/loader.js";
+import { ConfigError } from "../util/errors.js";
 import {
   addAddressRule,
   type AddressRule,
@@ -15,14 +22,7 @@ import {
   removeAddressRule,
   setDailySendCap,
   setOutboundPaused,
-} from "../cli/email-guardrails.js";
-import {
-  getNestedValue,
-  loadRawConfig,
-  saveRawConfig,
-  setNestedValue,
-} from "../config/loader.js";
-import { ConfigError } from "../util/errors.js";
+} from "./guardrails.js";
 import type { EmailProvider } from "./provider.js";
 import {
   createProvider,

package/src/events/domain-events.ts

@@ -70,7 +70,6 @@ export interface ToolDomainEvents {
 export interface DaemonDomainEvents {
   "daemon.lifecycle.started": {
     pid: number;
-    socketPath: string;
     startedAtMs: number;
   };
   "daemon.lifecycle.stopped": {

package/src/events/tool-notification-listener.ts

@@ -1,4 +1,4 @@
-import type { ServerMessage } from "../daemon/ipc-protocol.js";
+import type { ServerMessage } from "../daemon/message-protocol.js";
 import type { EventBus, Subscription } from "./bus.js";
 import type { AssistantDomainEvents } from "./domain-events.js";
 

package/src/followups/followup-store.ts

@@ -18,7 +18,6 @@ function parseFollowUp(row: typeof followups.$inferSelect): FollowUp {
     expectedResponseBy: row.expectedResponseBy,
     status: row.status as FollowUpStatus,
     reminderScheduleId: scheduleId,
-    reminderCronId: scheduleId,
     createdAt: row.createdAt,
     updatedAt: row.updatedAt,
   };
@@ -40,7 +39,7 @@ export function createFollowUp(input: FollowUpCreateInput): FollowUp {
       sentAt: input.sentAt ?? now,
       expectedResponseBy: input.expectedResponseBy ?? null,
       status: "pending",
-      reminderCronId: input.reminderScheduleId ?? input.reminderCronId ?? null,
+      reminderCronId: input.reminderScheduleId ?? null,
       createdAt: now,
       updatedAt: now,
     })

package/src/followups/types.ts

@@ -8,10 +8,7 @@ export interface FollowUp {
   sentAt: number;
   expectedResponseBy: number | null;
   status: FollowUpStatus;
-  /** Canonical field — the recurrence schedule ID linked to this follow-up. */
   reminderScheduleId: string | null;
-  /** @deprecated Use {@link reminderScheduleId}. Kept for migration compatibility. */
-  reminderCronId: string | null;
   createdAt: number;
   updatedAt: number;
 }
@@ -22,8 +19,5 @@ export interface FollowUpCreateInput {
   contactId?: string | null;
   sentAt?: number;
   expectedResponseBy?: number | null;
-  /** Canonical field — the recurrence schedule ID to link. */
   reminderScheduleId?: string | null;
-  /** @deprecated Use {@link reminderScheduleId}. Kept for migration compatibility. */
-  reminderCronId?: string | null;
 }

package/src/heartbeat/heartbeat-service.ts

@@ -1,5 +1,5 @@
 import { getConfig } from "../config/loader.js";
-import type { HeartbeatAlert } from "../daemon/ipc-contract.js";
+import type { HeartbeatAlert } from "../daemon/message-protocol.js";
 import { bootstrapConversation } from "../memory/conversation-bootstrap.js";
 import { readTextFileSync } from "../util/fs.js";
 import { getLogger } from "../util/logger.js";

package/src/inbound/platform-callback-registration.ts

@@ -52,7 +52,7 @@ interface RegisterCallbackRouteResponse {
  * @param callbackPath - The path portion after the ingress base URL
  *   (e.g. "webhooks/twilio/voice"). Leading/trailing slashes are stripped
  *   by the platform.
- * @param type - The route type identifier (e.g. "twilio_voice", "twilio_sms",
+ * @param type - The route type identifier (e.g. "twilio_voice",
  *   "twilio_status", "oauth", "telegram").
  * @returns The platform-provided callback URL that external services should use.
  * @throws If the platform request fails.

package/src/inbound/public-ingress-urls.ts

@@ -128,14 +128,6 @@ export function getOAuthCallbackUrl(config: IngressConfig): string {
   return `${base}/webhooks/oauth/callback`;
 }
 
-/**
- * Build the Twilio SMS webhook URL.
- */
-export function getTwilioSmsWebhookUrl(config: IngressConfig): string {
-  const base = getPublicBaseUrl(config);
-  return `${base}/webhooks/twilio/sms`;
-}
-
 /**
  * Build the Telegram webhook URL.
  */

package/src/index.ts

@@ -1,5 +1,17 @@
 #!/usr/bin/env bun
 
 import { buildCliProgram } from "./cli/program.js";
+import { resolveInstanceDataDir } from "./util/platform.js";
+
+// Auto-resolve BASE_DATA_DIR from the lockfile when running as a standalone CLI.
+// The daemon always has BASE_DATA_DIR set by the launcher (cli/src/lib/local.ts),
+// but the CLI process doesn't — so credential commands and other path-dependent
+// operations would read from ~/.vellum instead of the instance-scoped directory.
+if (!process.env.BASE_DATA_DIR) {
+  const instanceDir = resolveInstanceDataDir();
+  if (instanceDir) {
+    process.env.BASE_DATA_DIR = instanceDir;
+  }
+}
 
 buildCliProgram().parse();

package/src/mcp/client.ts

@@ -4,7 +4,7 @@ import { SSEClientTransport } from "@modelcontextprotocol/sdk/client/sse.js";
 import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 
-import type { McpTransport } from "../config/mcp-schema.js";
+import type { McpTransport } from "../config/schemas/mcp.js";
 import { getSecureKeyAsync } from "../security/secure-keys.js";
 import { getLogger } from "../util/logger.js";
 import { McpOAuthProvider } from "./mcp-oauth-provider.js";

package/src/mcp/manager.ts

@@ -1,4 +1,4 @@
-import type { McpConfig, McpServerConfig } from "../config/mcp-schema.js";
+import type { McpConfig, McpServerConfig } from "../config/schemas/mcp.js";
 import { getLogger } from "../util/logger.js";
 import { McpClient, type McpToolInfo } from "./client.js";
 

package/src/memory/app-store.ts

@@ -269,17 +269,6 @@ export function getApp(id: string): AppDefinition | null {
     ? readFileSync(indexPath, "utf-8")
     : (app.htmlDefinition ?? "");
 
-  // Migrate inline preview to companion file if present
-  if (app.preview) {
-    const previewPath = join(dir, `${id}.preview`);
-    if (!existsSync(previewPath)) {
-      writeFileSync(previewPath, app.preview, "utf-8");
-    }
-    // Rewrite JSON without preview
-    const { preview: _p, ...clean } = JSON.parse(raw);
-    writeFileSync(filePath, JSON.stringify(clean, null, 2));
-  }
-
   // Load preview from companion file
   const previewPath = join(dir, `${id}.preview`);
   if (existsSync(previewPath)) {
@@ -306,16 +295,7 @@ export function getAppPreview(id: string): string | null {
   if (existsSync(previewPath)) {
     return readFileSync(previewPath, "utf-8");
   }
-  // Fallback: check if preview is still inline in JSON (pre-migration)
-  const jsonPath = join(dir, `${id}.json`);
-  if (!existsSync(jsonPath)) return null;
-  try {
-    const raw = readFileSync(jsonPath, "utf-8");
-    const app = JSON.parse(raw);
-    return app.preview ?? null;
-  } catch {
-    return null;
-  }
+  return null;
 }
 
 export function listApps(): AppDefinition[] {
@@ -329,19 +309,6 @@ export function listApps(): AppDefinition[] {
       const raw = readFileSync(filePath, "utf-8");
       const app = JSON.parse(raw) as AppDefinition;
 
-      // Lazy migration: extract inline preview to companion file
-      if (app.preview) {
-        const id = entry.replace(".json", "");
-        const previewPath = join(dir, `${id}.preview`);
-        if (!existsSync(previewPath)) {
-          writeFileSync(previewPath, app.preview, "utf-8");
-        }
-        // Rewrite JSON without preview so future reads are fast
-        const { preview: _p, ...clean } = app;
-        writeFileSync(filePath, JSON.stringify(clean, null, 2));
-        delete app.preview;
-      }
-
       apps.push(app);
     } catch {
       // skip malformed files
@@ -406,14 +373,6 @@ export function updateApp(
     updated.htmlDefinition = htmlUpdate;
     mkdirSync(appDir, { recursive: true });
     writeFileSync(join(appDir, "index.html"), htmlUpdate, "utf-8");
-  } else if (
-    !existsSync(join(appDir, "index.html")) &&
-    updated.htmlDefinition
-  ) {
-    // Backfill: migrate existing htmlDefinition to index.html before stripping from JSON
-    // to prevent data loss on metadata-only updates of pre-migration apps.
-    mkdirSync(appDir, { recursive: true });
-    writeFileSync(join(appDir, "index.html"), updated.htmlDefinition, "utf-8");
   }
 
   // Write preview to companion file