@vellumai/assistant 0.4.43 → 0.4.45

package/src/config/bundled-skills/messaging/tools/messaging-reply.ts

@@ -1,201 +0,0 @@
-import {
-  batchGetMessages,
-  createDraft,
-  getProfile,
-  listMessages,
-} from "../../../../messaging/providers/gmail/client.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok, resolveProvider, withProviderToken } from "./shared.js";
-
-function extractHeader(
-  headers: Array<{ name: string; value: string }> | undefined,
-  name: string,
-): string {
-  return (
-    headers?.find((h) => h.name.toLowerCase() === name.toLowerCase())?.value ??
-    ""
-  );
-}
-
-/**
- * RFC 5322-aware address list parser. Splits a header value like
- * `"Doe, Jane" <jane@example.com>, bob@example.com` into individual
- * addresses without breaking on commas inside quoted display names.
- */
-function parseAddressList(header: string): string[] {
-  const addresses: string[] = [];
-  let current = "";
-  let inQuotes = false;
-  let inAngle = false;
-
-  for (let i = 0; i < header.length; i++) {
-    const ch = header[i];
-
-    if (ch === '"' && !inAngle) {
-      inQuotes = !inQuotes;
-      current += ch;
-    } else if (ch === "<" && !inQuotes) {
-      inAngle = true;
-      current += ch;
-    } else if (ch === ">" && !inQuotes) {
-      inAngle = false;
-      current += ch;
-    } else if (ch === "," && !inQuotes && !inAngle) {
-      const trimmed = current.trim();
-      if (trimmed) addresses.push(trimmed);
-      current = "";
-    } else {
-      current += ch;
-    }
-  }
-
-  const trimmed = current.trim();
-  if (trimmed) addresses.push(trimmed);
-
-  return addresses;
-}
-
-/**
- * Extracts the bare email from an address that may be in any of these forms:
- *   - `user@example.com`
- *   - `<user@example.com>`
- *   - `"Display Name" <user@example.com>`
- *   - `Display Name <user@example.com>`
- *   - `"Team <Ops>" <user@example.com>`
- *   - `user@example.com (team <ops>)`
- *
- * Extracts all angle-bracketed segments and picks the last one containing `@`,
- * preferring the actual mailbox over display-name fragments like
- * `"Acme <support@acme.com>" <owner@example.com>`. If no segment contains `@`,
- * strips angle-bracketed portions and parenthetical comments, returning the
- * remaining text. This handles display names with angle brackets and trailing
- * RFC 5322 comments.
- */
-function extractEmail(address: string): string {
-  // Strip parenthetical comments first to avoid matching addresses inside them
-  const cleaned = address.replace(/\(.*?\)/g, "");
-  const segments = [...cleaned.matchAll(/<([^>]+)>/g)].map((m) => m[1]);
-  if (segments.length > 0) {
-    const emailSegment = [...segments].reverse().find((s) => s.includes("@"));
-    if (emailSegment) return emailSegment.trim().toLowerCase();
-  }
-  return address
-    .replace(/<[^>]+>/g, "")
-    .replace(/\(.*?\)/g, "")
-    .trim()
-    .toLowerCase();
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const platform = input.platform as string | undefined;
-  const conversationId = input.conversation_id as string;
-  const threadId = input.thread_id as string;
-  const text = input.text as string;
-
-  if (!conversationId) {
-    return err("conversation_id is required.");
-  }
-  if (!threadId) {
-    return err("thread_id is required.");
-  }
-  if (!text) {
-    return err("text is required.");
-  }
-
-  try {
-    const provider = resolveProvider(platform);
-
-    // Gmail: create a threaded draft with reply-all recipients
-    if (provider.id === "gmail") {
-      return withProviderToken(provider, async (token) => {
-        // Fetch thread messages to extract recipients and threading headers
-        const list = await listMessages(token, `thread:${threadId}`, 10);
-        if (!list.messages?.length) {
-          return err("No messages found in this thread.");
-        }
-
-        const messages = await batchGetMessages(
-          token,
-          list.messages.map((m) => m.id),
-          "metadata",
-          ["From", "To", "Cc", "Message-ID", "Subject"],
-        );
-
-        // Use the latest message for threading and recipient extraction
-        const latest = messages[messages.length - 1];
-        const latestHeaders = latest.payload?.headers ?? [];
-
-        const messageIdHeader = extractHeader(latestHeaders, "Message-ID");
-        let subject = extractHeader(latestHeaders, "Subject");
-        if (subject && !subject.startsWith("Re:")) {
-          subject = `Re: ${subject}`;
-        }
-
-        // Build reply-all recipient list, excluding the user's own email
-        const profile = await getProfile(token);
-        const userEmail = profile.emailAddress.toLowerCase();
-
-        const allRecipients = new Set<string>();
-        const allCc = new Set<string>();
-
-        // From the latest message: From goes to To, original To/Cc go to Cc
-        const fromAddr = extractHeader(latestHeaders, "From");
-        const toAddrs = extractHeader(latestHeaders, "To");
-        const ccAddrs = extractHeader(latestHeaders, "Cc");
-
-        if (fromAddr) allRecipients.add(fromAddr);
-        for (const addr of parseAddressList(toAddrs)) {
-          allRecipients.add(addr);
-        }
-        for (const addr of parseAddressList(ccAddrs)) {
-          allCc.add(addr);
-        }
-
-        // Remove user's own email from recipients using exact email comparison
-        const filterSelf = (addr: string) => extractEmail(addr) !== userEmail;
-        const toList = [...allRecipients].filter(filterSelf);
-        const ccList = [...allCc].filter(filterSelf);
-
-        if (toList.length === 0) {
-          return err("Could not determine reply recipients from thread.");
-        }
-
-        const draft = await createDraft(
-          token,
-          toList.join(", "),
-          subject,
-          text,
-          messageIdHeader || undefined,
-          ccList.length > 0 ? ccList.join(", ") : undefined,
-          undefined,
-          threadId,
-        );
-
-        const recipientSummary =
-          ccList.length > 0
-            ? `To: ${toList.join(", ")}; Cc: ${ccList.join(", ")}`
-            : `To: ${toList.join(", ")}`;
-        return ok(
-          `Gmail draft created (ID: ${draft.id}). ${recipientSummary}. Review in Gmail Drafts, then tell me to send it or send it yourself.`,
-        );
-      });
-    }
-
-    return withProviderToken(provider, async (token) => {
-      const result = await provider.sendMessage(token, conversationId, text, {
-        threadId,
-        assistantId: context.assistantId,
-      });
-
-      return ok(`Reply sent (ID: ${result.id}).`);
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/send-notification.ts

@@ -1 +0,0 @@
-export { run } from "../../notifications/tools/send-notification.js";

package/src/config/bundled-skills/messaging/tools/sequence-cancel.ts

@@ -1,27 +0,0 @@
-import { exitEnrollment, getEnrollment } from "../../../../sequence/store.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const enrollmentId = input.enrollment_id as string;
-  if (!enrollmentId) return err("enrollment_id is required.");
-
-  try {
-    const enrollment = getEnrollment(enrollmentId);
-    if (!enrollment) return err(`Enrollment not found: ${enrollmentId}`);
-    if (enrollment.status !== "active" && enrollment.status !== "paused") {
-      return ok(`Enrollment already in terminal state: ${enrollment.status}`);
-    }
-
-    exitEnrollment(enrollmentId, "cancelled");
-    return ok(`Enrollment for ${enrollment.contactEmail} cancelled.`);
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/sequence-pause.ts

@@ -1,48 +0,0 @@
-import {
-  getEnrollment,
-  getSequence,
-  pauseEnrollment,
-  updateSequence,
-} from "../../../../sequence/store.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const sequenceId = input.sequence_id as string | undefined;
-  const enrollmentId = input.enrollment_id as string | undefined;
-
-  if (!sequenceId && !enrollmentId)
-    return err("Either sequence_id or enrollment_id is required.");
-
-  try {
-    if (enrollmentId) {
-      const enrollment = getEnrollment(enrollmentId);
-      if (!enrollment) return err(`Enrollment not found: ${enrollmentId}`);
-      if (enrollment.status !== "active")
-        return err(`Enrollment is not active (status: ${enrollment.status}).`);
-      pauseEnrollment(enrollmentId);
-      return ok(
-        `Enrollment ${enrollmentId} paused. Resume it later to continue from step ${
-          enrollment.currentStep + 1
-        }.`,
-      );
-    }
-
-    const seq = getSequence(sequenceId!);
-    if (!seq) return err(`Sequence not found: ${sequenceId}`);
-    if (seq.status === "paused") return ok("Sequence is already paused.");
-
-    updateSequence(sequenceId!, { status: "paused" });
-    return ok(
-      `Sequence "${seq.name}" paused. Active enrollments will not be processed until resumed.`,
-    );
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/sequence-resume.ts

@@ -1,27 +0,0 @@
-import { getSequence, updateSequence } from "../../../../sequence/store.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const sequenceId = input.sequence_id as string;
-  if (!sequenceId) return err("sequence_id is required.");
-
-  try {
-    const seq = getSequence(sequenceId);
-    if (!seq) return err(`Sequence not found: ${sequenceId}`);
-    if (seq.status === "active") return ok("Sequence is already active.");
-
-    updateSequence(sequenceId, { status: "active" });
-    return ok(
-      `Sequence "${seq.name}" resumed. Active enrollments will be processed on the next scheduler tick.`,
-    );
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/sequence-update.ts

@@ -1,56 +0,0 @@
-import { updateSequence } from "../../../../sequence/store.js";
-import type {
-  SequenceStatus,
-  SequenceStep,
-} from "../../../../sequence/types.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const id = input.id as string;
-  if (!id) return err("id is required.");
-
-  const name = input.name as string | undefined;
-  const description = input.description as string | undefined;
-  const status = input.status as SequenceStatus | undefined;
-  const exitOnReply = input.exit_on_reply as boolean | undefined;
-  const stepsRaw = input.steps as Array<Record<string, unknown>> | undefined;
-
-  try {
-    const steps = stepsRaw?.map(
-      (s, i): SequenceStep => ({
-        index: i,
-        delaySeconds: (s.delay_seconds as number) ?? 0,
-        subjectTemplate: (s.subject as string) ?? `Step ${i + 1}`,
-        bodyPrompt: (s.body_prompt as string) ?? "",
-        replyToThread: (s.reply_to_thread as boolean) ?? i > 0,
-        requireApproval: (s.require_approval as boolean) ?? false,
-      }),
-    );
-
-    if (steps !== undefined && steps.length === 0) {
-      return err(
-        "steps must not be empty. A sequence requires at least one step.",
-      );
-    }
-
-    const updated = updateSequence(id, {
-      name,
-      description,
-      status,
-      exitOnReply,
-      steps,
-    });
-    if (!updated) return err(`Sequence not found: ${id}`);
-
-    return ok(`Sequence updated: ${updated.name} (${updated.status})`);
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/notion/SKILL.md

@@ -1,240 +0,0 @@
----
-name: notion
-description: Read and write Notion pages and databases using the Notion API
-compatibility: "Designed for Vellum personal assistants"
-metadata: {"emoji":"📝","vellum":{"display-name":"Notion","user-invocable":false}}
----
-
-You have access to the Notion API via the stored OAuth token for `integration:notion`. Use `bash` with `network_mode: "proxied"` to call the Notion API — the proxy automatically injects the Bearer token for `api.notion.com`.
-
-## Authentication
-
-The Notion access token is stored securely and never exposed as plaintext. Use the credential proxy to inject the Bearer token automatically.
-
-**Step 1 — Get the credential ID:**
-```
-credential_store action=list
-```
-Find the entry with `service: "integration:notion"` and `field: "access_token"`. Note its `credential_id`.
-
-If no such entry exists, tell the user: "Notion is not connected yet. Load the **notion-oauth-setup** skill to set it up first."
-
-**Step 2 — Make authenticated API calls via the proxy:**
-
-Use `bash` with `network_mode: "proxied"` and `credential_ids: ["<credential_id>"]`. The proxy automatically injects `Authorization: Bearer <token>` and any required headers into requests to `api.notion.com`.
-
-Example:
-```
-bash:
-  network_mode: proxied
-  credential_ids: ["<credential_id from step 1>"]
-  command: |
-    curl -s -X POST https://api.notion.com/v1/search \
-      -H "Notion-Version: 2022-06-28" \
-      -H "Content-Type: application/json" \
-      -d '{}'
-```
-
-All Notion API calls go to `https://api.notion.com/v1/`. Always include the `Notion-Version: 2022-06-28` header.
-
-## Reading Pages
-
-### Get a page by ID
-```
-GET https://api.notion.com/v1/pages/{page_id}
-```
-Returns page properties. Use the page ID from a Notion URL — the last segment of the URL, e.g. for `https://notion.so/My-Page-abc123def456` the ID is `abc123def456` (formatted as UUID: `abc123de-f456-...`).
-
-### Get page content (blocks)
-```
-GET https://api.notion.com/v1/blocks/{block_id}/children?page_size=100
-```
-Pages are blocks too — use the page ID as the `block_id`. Iterates through the page's child blocks. Use `start_cursor` for pagination when `has_more` is `true`.
-
-**Block types and how to render them:**
-- `paragraph`: Read `paragraph.rich_text[].plain_text`
-- `heading_1`, `heading_2`, `heading_3`: Read `heading_N.rich_text[].plain_text`
-- `bulleted_list_item`, `numbered_list_item`: Read `*.rich_text[].plain_text`
-- `to_do`: Read `to_do.rich_text[].plain_text` and `to_do.checked`
-- `toggle`: Read `toggle.rich_text[].plain_text`; children are nested blocks
-- `code`: Read `code.rich_text[].plain_text` and `code.language`
-- `quote`: Read `quote.rich_text[].plain_text`
-- `callout`: Read `callout.rich_text[].plain_text`
-- `divider`: Render as `---`
-- `image`: Read `image.external.url` or `image.file.url`
-- `child_page`: Read `child_page.title`; use its `id` to recursively fetch if needed
-
-## Searching
-
-### Search pages and databases
-```
-POST https://api.notion.com/v1/search
-{
-  "query": "your search term",
-  "filter": { "value": "page", "property": "object" },
-  "sort": { "direction": "descending", "timestamp": "last_edited_time" },
-  "page_size": 10
-}
-```
-Omit `filter` to search both pages and databases. Use `filter.value: "database"` to search only databases.
-
-Returns `results[]` with `id`, `url`, `properties.title` (for pages), and `title[]` (for databases).
-
-## Reading Databases
-
-### Get database metadata
-```
-GET https://api.notion.com/v1/databases/{database_id}
-```
-Returns the database schema (all property definitions).
-
-### Query a database
-```
-POST https://api.notion.com/v1/databases/{database_id}/query
-{
-  "filter": {
-    "property": "Status",
-    "select": { "equals": "In Progress" }
-  },
-  "sorts": [
-    { "property": "Created", "direction": "descending" }
-  ],
-  "page_size": 20
-}
-```
-Omit `filter` to retrieve all rows. Returns `results[]` where each item is a page (database row).
-
-**Extracting property values from database rows:**
-- `title`: `properties.Name.title[].plain_text`
-- `rich_text`: `properties.Notes.rich_text[].plain_text`
-- `number`: `properties.Price.number`
-- `select`: `properties.Status.select.name`
-- `multi_select`: `properties.Tags.multi_select[].name`
-- `date`: `properties.Due.date.start` (ISO 8601)
-- `checkbox`: `properties.Done.checkbox`
-- `url`: `properties.Link.url`
-- `email`: `properties.Email.email`
-- `people`: `properties.Owner.people[].name`
-- `relation`: `properties.Projects.relation[].id` (array of page IDs)
-
-## Creating Pages
-
-### Create a new page
-```
-POST https://api.notion.com/v1/pages
-{
-  "parent": { "page_id": "<parent_page_id>" },
-  "properties": {
-    "title": {
-      "title": [{ "text": { "content": "My New Page" } }]
-    }
-  },
-  "children": [
-    {
-      "object": "block",
-      "type": "paragraph",
-      "paragraph": {
-        "rich_text": [{ "text": { "content": "Page content here." } }]
-      }
-    }
-  ]
-}
-```
-
-For database rows, use `"parent": { "database_id": "<database_id>" }` and include the database's required properties.
-
-## Updating Pages
-
-### Update page properties
-```
-PATCH https://api.notion.com/v1/pages/{page_id}
-{
-  "properties": {
-    "Status": { "select": { "name": "Done" } },
-    "Due": { "date": { "start": "2024-12-31" } }
-  }
-}
-```
-
-### Append blocks to a page
-```
-PATCH https://api.notion.com/v1/blocks/{block_id}/children
-{
-  "children": [
-    {
-      "object": "block",
-      "type": "paragraph",
-      "paragraph": {
-        "rich_text": [{ "text": { "content": "Appended content." } }]
-      }
-    },
-    {
-      "object": "block",
-      "type": "heading_2",
-      "heading_2": {
-        "rich_text": [{ "text": { "content": "A heading" } }]
-      }
-    },
-    {
-      "object": "block",
-      "type": "bulleted_list_item",
-      "bulleted_list_item": {
-        "rich_text": [{ "text": { "content": "A bullet point" } }]
-      }
-    },
-    {
-      "object": "block",
-      "type": "to_do",
-      "to_do": {
-        "rich_text": [{ "text": { "content": "A task" } }],
-        "checked": false
-      }
-    }
-  ]
-}
-```
-
-### Update a block's content
-```
-PATCH https://api.notion.com/v1/blocks/{block_id}
-{
-  "paragraph": {
-    "rich_text": [{ "text": { "content": "Updated text." } }]
-  }
-}
-```
-
-### Delete (archive) a block
-```
-DELETE https://api.notion.com/v1/blocks/{block_id}
-```
-
-## Archive / Delete Pages
-
-Notion does not permanently delete pages via the API — it archives them:
-```
-PATCH https://api.notion.com/v1/pages/{page_id}
-{
-  "archived": true
-}
-```
-
-## Pagination
-
-When a response includes `"has_more": true`, pass `"start_cursor": response.next_cursor` in the next request to get the next page of results.
-
-## Error Handling
-
-- **401 Unauthorized**: The access token is missing or expired. Ask the user to reconnect Notion via the **notion-oauth-setup** skill.
-- **403 Forbidden**: The integration doesn't have access to the requested page or database. Remind the user that they need to share the page/database with the "Vellum Assistant" integration in Notion (via the Share menu → "Add connections").
-- **404 Not Found**: The page or database ID doesn't exist or the integration can't see it. Verify the ID and check sharing settings.
-- **400 Bad Request**: Check the request body structure. The Notion API error response includes a `message` field with details.
-- **429 Too Many Requests**: Wait a few seconds and retry.
-
-## Tips
-
-- Notion page IDs in URLs are formatted without hyphens. The API accepts both forms: `abc123def456...` or `abc123de-f456-...`.
-- When extracting IDs from Notion URLs, strip any query parameters and trailing path components after the 32-character ID segment.
-- Always include `Notion-Version: 2022-06-28` header to get stable API behavior.
-- For rich text, concatenate all `plain_text` values in the array to get the full text content.
-- When creating content with rich text formatting (bold, italic, links), use the `annotations` and `href` fields in rich_text objects.