@vellumai/assistant 0.4.44 → 0.4.45

package/src/cli/commands/mcp.ts

@@ -11,6 +11,7 @@ import {
   deleteMcpOAuthCredentials,
   McpOAuthProvider,
 } from "../../mcp/mcp-oauth-provider.js";
+import { httpSend } from "../http-client.js";
 import { log } from "../logger.js";
 
 export const HEALTH_CHECK_TIMEOUT_MS = 10_000;
@@ -66,8 +67,8 @@ server uses one of three transport types:
   sse               Remote server using Server-Sent Events
   streamable-http   Remote server using Streamable HTTP transport
 
-Changes to MCP server configuration require an assistant restart to take effect
-(vellum sleep && vellum wake).
+After changing MCP server configuration, run 'vellum mcp reload' to apply
+changes without restarting the assistant.
 
 Examples:
   $ assistant mcp list
@@ -244,6 +245,69 @@ Examples:
       process.exit(0);
     });
 
+  mcp
+    .command("reload")
+    .description("Reload MCP server connections in the running assistant")
+    .addHelpText(
+      "after",
+      `
+Sends a message to the running assistant to disconnect and reconnect all MCP
+servers using the current configuration from disk. Active sessions pick up
+new tools on their next turn automatically. The assistant must be running.
+
+Examples:
+  $ vellum mcp reload
+  $ vellum mcp reload   # after editing config.json to add a new server
+  $ vellum mcp reload   # after running "vellum mcp auth <server>"`,
+    )
+    .action(async () => {
+      log.info("Sending reload request to assistant...");
+      try {
+        const res = await httpSend("/v1/mcp/reload", { method: "POST" });
+        const response = (await res.json()) as {
+          success: boolean;
+          serverCount?: number;
+          toolCount?: number;
+          servers?: {
+            id: string;
+            connected: boolean;
+            disabled?: boolean;
+            toolCount: number;
+            tools: string[];
+          }[];
+          error?: string;
+        };
+        if (response.success) {
+          log.info(
+            `MCP servers reloaded: ${response.serverCount} server(s), ${response.toolCount} tool(s)\n`,
+          );
+          if (response.servers && response.servers.length > 0) {
+            for (const server of response.servers) {
+              const status = server.disabled
+                ? "⊘ Disabled"
+                : server.connected
+                  ? "\u2713 Connected"
+                  : "\u2717 Not connected";
+              log.info(`  ${server.id}`);
+              log.info(`    Status: ${status}`);
+              log.info(
+                `    Tools:  ${server.toolCount > 0 ? server.tools.join(", ") : "(none)"}`,
+              );
+              log.info("");
+            }
+          }
+        } else {
+          log.error(`Failed to reload: ${response.error}`);
+          process.exitCode = 1;
+        }
+      } catch (err) {
+        log.error(
+          `Failed to send reload request: ${err instanceof Error ? err.message : err}`,
+        );
+        process.exitCode = 1;
+      }
+    });
+
   mcp
     .command("add <name>")
     .description("Add an MCP server configuration")
@@ -358,9 +422,7 @@ Examples:
 
         saveRawConfig(raw);
         log.info(`Added MCP server "${name}" (${opts.transportType})`);
-        log.info(
-          "Restart the assistant for changes to take effect: vellum sleep && vellum wake",
-        );
+        log.info("Run 'vellum mcp reload' to apply changes.");
       },
     );
 
@@ -382,8 +444,8 @@ OAuth flow. If the server already has valid cached tokens, the command succeeds
 immediately without opening a browser. Tokens are cached locally for future use
 by the assistant.
 
-After successful authentication, restart the assistant for changes to take effect
-(vellum sleep && vellum wake).
+After successful authentication, run 'vellum mcp reload' to apply changes
+without restarting the assistant.
 
 Examples:
   $ assistant mcp auth my-server
@@ -541,9 +603,7 @@ Examples:
       provider.stopCallbackServer();
 
       log.info(`Authentication successful for "${name}".`);
-      log.info(
-        "Restart the assistant for changes to take effect: vellum sleep && vellum wake",
-      );
+      log.info("Run 'vellum mcp reload' to apply changes.");
       process.exit(0);
     });
 
@@ -561,8 +621,8 @@ any stored OAuth credentials (tokens, client info, discovery metadata) for
 sse/streamable-http servers. If no OAuth credentials exist, the cleanup is
 silently skipped.
 
-After removal, restart the assistant for changes to take effect
-(vellum sleep && vellum wake).
+After removal, run 'vellum mcp reload' to apply changes without restarting
+the assistant.
 
 Examples:
   $ assistant mcp remove my-server
@@ -595,8 +655,6 @@ Examples:
       delete servers[name];
       saveRawConfig(raw);
       log.info(`Removed MCP server "${name}".`);
-      log.info(
-        "Restart the assistant for changes to take effect: vellum sleep && vellum wake",
-      );
+      log.info("Run 'vellum mcp reload' to apply changes.");
     });
 }

package/src/cli/commands/notifications.ts

@@ -56,7 +56,7 @@ ${buildSourceEventNamesHelpBlock()}
 
 Examples:
   $ assistant notifications send --source-channel assistant_tool --source-event-name user.send_notification --message "Build finished"
-  $ assistant notifications send --source-channel scheduler --source-event-name reminder.fired --message "Stand-up in 5 minutes" --urgency high
+  $ assistant notifications send --source-channel scheduler --source-event-name schedule.notify --message "Stand-up in 5 minutes" --urgency high
   $ assistant notifications send --source-channel watcher --source-event-name watcher.notification --message "File changed" --no-requires-action --is-async-background
   $ assistant notifications send --source-channel assistant_tool --source-event-name user.send_notification --message "Deploy complete" --preferred-channels vellum,telegram --json`,
   );
@@ -143,7 +143,7 @@ Behavioral notes:
 
 Examples:
   $ assistant notifications send --source-channel assistant_tool --source-event-name user.send_notification --message "Task complete"
-  $ assistant notifications send --source-channel scheduler --source-event-name reminder.fired --message "Meeting in 5 min" --urgency high --title "Reminder"
+  $ assistant notifications send --source-channel scheduler --source-event-name schedule.notify --message "Meeting in 5 min" --urgency high --title "Reminder"
   $ assistant notifications send --source-channel watcher --source-event-name watcher.notification --message "Detected change" --no-requires-action --is-async-background --json`,
     )
     .action(
@@ -318,8 +318,8 @@ ${buildSourceEventNamesHelpBlock()}
 Examples:
   $ assistant notifications list
   $ assistant notifications list --limit 5
-  $ assistant notifications list --source-event-name reminder.fired
-  $ assistant notifications list --source-event-name reminder.fired --limit 10 --json`,
+  $ assistant notifications list --source-event-name schedule.notify
+  $ assistant notifications list --source-event-name schedule.notify --limit 10 --json`,
     )
     .action(
       (

package/src/cli/commands/sessions.ts

@@ -12,6 +12,7 @@ import {
   getMessages,
 } from "../../memory/conversation-crud.js";
 import { listConversations } from "../../memory/conversation-queries.js";
+import { selectEmbeddingBackend } from "../../memory/embedding-backend.js";
 import { initQdrantClient } from "../../memory/qdrant-client.js";
 import { timeAgo } from "../../util/time.js";
 import { initializeDb } from "../db.js";
@@ -56,7 +57,9 @@ Examples:
         log.info("No sessions");
       } else {
         for (const s of all) {
-          log.info(`  ${s.id}  ${s.title ?? "Untitled"}  ${timeAgo(s.updatedAt)}`);
+          log.info(
+            `  ${s.id}  ${s.title ?? "Untitled"}  ${timeAgo(s.updatedAt)}`,
+          );
         }
       }
     });
@@ -221,12 +224,17 @@ Examples:
 
       const config = getConfig();
       const qdrantUrl = getQdrantUrlEnv() || config.memory.qdrant.url;
+      const embeddingSelection = selectEmbeddingBackend(config);
+      const embeddingModel = embeddingSelection.backend
+        ? `${embeddingSelection.backend.provider}:${embeddingSelection.backend.model}`
+        : undefined;
       const qdrant = initQdrantClient({
         url: qdrantUrl,
         collection: config.memory.qdrant.collection,
         vectorSize: config.memory.qdrant.vectorSize,
         onDisk: config.memory.qdrant.onDisk,
         quantization: config.memory.qdrant.quantization,
+        embeddingModel,
       });
       const deleted = await qdrant.deleteCollection();
       if (deleted) {

package/src/cli/commands/skills.ts

@@ -373,18 +373,14 @@ Examples:
     .option("--json", "Machine-readable JSON output")
     .action(async (opts: { json?: boolean }) => {
       try {
-        const catalog = await fetchCatalog();
-
-        // In dev mode, merge in skills from the repo-local skills/ directory
+        // In dev mode, use the local catalog as the source of truth
+        // and skip the remote Platform API entirely.
         const repoSkillsDir = getRepoSkillsDir();
+        let catalog: CatalogSkill[];
         if (repoSkillsDir) {
-          const localSkills = readLocalCatalog(repoSkillsDir);
-          const remoteIds = new Set(catalog.map((s) => s.id));
-          for (const local of localSkills) {
-            if (!remoteIds.has(local.id)) {
-              catalog.push(local);
-            }
-          }
+          catalog = readLocalCatalog(repoSkillsDir);
+        } else {
+          catalog = await fetchCatalog();
         }
 
         if (opts.json) {

package/src/cli/http-client.ts

@@ -1,9 +1,8 @@
 /**
  * HTTP client helpers for the built-in CLI.
  *
- * Provides authenticated HTTP communication with the daemon's HTTP server,
- * replacing the previous Unix socket IPC transport. Patterns are adapted
- * from `cli/src/lib/http-client.ts` (external CLI).
+ * Provides authenticated HTTP communication with the daemon's HTTP server.
+ * Patterns are adapted from `cli/src/lib/http-client.ts` (external CLI).
  */
 
 import { readFileSync } from "node:fs";

package/src/cli/main-screen.tsx

@@ -23,8 +23,14 @@ export function renderMainScreen(): MainScreenLayout {
   const cliRoot = dirname(cliPkgPath);
   // Dynamic require to bypass NodeNext strict module resolution for the
   // CLI package which ships raw TypeScript with bundler-style imports.
-  const { render } = require(join(cliRoot, "src", "components", "DefaultMainScreen.tsx")) as {
-    render: (runtimeUrl: string, assistantId: string, species: string) => number;
+  const { render } = require(
+    join(cliRoot, "src", "components", "DefaultMainScreen.tsx"),
+  ) as {
+    render: (
+      runtimeUrl: string,
+      assistantId: string,
+      species: string,
+    ) => number;
   };
 
   const height = render(httpUrl, assistantId, "vellum");
@@ -35,19 +41,13 @@ export function renderMainScreen(): MainScreenLayout {
   return { height, statusLine: statusCanvasLine, statusCol };
 }
 
-export function updateStatusText(
-  layout: MainScreenLayout,
-  text: string,
-): void {
+export function updateStatusText(layout: MainScreenLayout, text: string): void {
   process.stdout.write(
     `\x1b7\x1b[${layout.statusLine};${layout.statusCol}H\x1b[K${text}\x1b8`,
   );
 }
 
-export function updateDaemonText(
-  layout: MainScreenLayout,
-  text: string,
-): void {
+export function updateDaemonText(layout: MainScreenLayout, text: string): void {
   const daemonLine = layout.statusLine - 4;
   process.stdout.write(
     `\x1b7\x1b[${daemonLine};${layout.statusCol}H\x1b[K\x1b[35m${text}\x1b[0m\x1b8`,

package/src/cli/program.ts

@@ -3,7 +3,6 @@ import { createRequire } from "node:module";
 import { Command } from "commander";
 
 import { registerHooksCommand } from "../hooks/cli.js";
-import { registerAmazonCommand } from "./commands/amazon/index.js";
 import { registerAuditCommand } from "./commands/audit.js";
 import { registerAutonomyCommand } from "./commands/autonomy.js";
 import { registerBrowserRelayCommand } from "./commands/browser-relay.js";
@@ -27,7 +26,6 @@ import { registerSequenceCommand } from "./commands/sequence.js";
 import { registerSessionsCommand } from "./commands/sessions.js";
 import { registerSkillsCommand } from "./commands/skills.js";
 import { registerTrustCommand } from "./commands/trust.js";
-import { registerTwitterCommand } from "./commands/twitter/index.js";
 
 const require = createRequire(import.meta.url);
 const { version } = require("../../package.json") as { version: string };
@@ -52,7 +50,6 @@ export function buildCliProgram(): Command {
   registerEmailCommand(program);
   registerContactsCommand(program);
   registerChannelVerificationSessionsCommand(program);
-  registerAmazonCommand(program);
   registerAutonomyCommand(program);
   registerCompletionsCommand(program);
   registerNotificationsCommand(program);
@@ -61,7 +58,6 @@ export function buildCliProgram(): Command {
   registerSkillsCommand(program);
   registerBrowserRelayCommand(program);
 
-  registerTwitterCommand(program);
   registerMapCommand(program);
   registerSequenceCommand(program);
 

package/src/cli/reference.ts

@@ -24,7 +24,6 @@ Commands:
   email [options]                          Email operations (provider-agnostic)
   contacts [options]                       Manage and query the contact graph
   channel-verification-sessions [options]  Manage channel verification sessions
-  amazon [options]                         Shop on Amazon and Amazon Fresh. Requires an active session (use "refresh" to authenticate).
   autonomy [options]                       View and configure autonomy tiers
   completions <shell>                      Generate shell completion script (e.g. assistant completions bash >> ~/.bashrc)
   notifications [options]                  Send and inspect notifications through the unified notification router
@@ -32,7 +31,6 @@ Commands:
   oauth [options]                          Manage OAuth tokens for connected integrations
   skills                                   Browse and install skills from the Vellum catalog
   browser                                  Browser automation, extension relay, and Chrome CDP management
-  x|twitter [options]                      Post on X and manage connections. Supports managed (platform proxy) and OAuth (official API) paths.
   map [options] <domain>                   Auto-navigate a domain and produce a deduplicated API map. Launches Chrome with CDP, starts a Ride Shotgun learn session, then analyzes captured network traffic.
   sequence [options]                       Manage email sequences
 `;

package/src/cli.ts

@@ -541,7 +541,10 @@ export async function startCli(): Promise<void> {
               }),
             });
             if (resp.ok) {
-              const data = (await resp.json()) as { sessionId: string; title: string };
+              const data = (await resp.json()) as {
+                sessionId: string;
+                title: string;
+              };
               sessionId = data.sessionId;
               conversationKey = newKey;
               pendingSessionPick = false;
@@ -696,6 +699,10 @@ export async function startCli(): Promise<void> {
         prompt();
         break;
 
+      case "tool_use_preview_start":
+        // Early preview of tool use — ignored by CLI; full tool_use_start follows.
+        break;
+
       case "tool_use_start":
         toolStreaming = false;
         spinner.start(formatToolProgress(msg.toolName, msg.input));
@@ -991,7 +998,9 @@ export async function startCli(): Promise<void> {
     // Retry with exponential backoff (1s → 2s → 4s → … → 30s cap) until connected
     while (true) {
       const delaySec = (reconnectDelay / 1000).toFixed(0);
-      process.stdout.write(`\n  Reconnecting to assistant in ${delaySec}s...\n`);
+      process.stdout.write(
+        `\n  Reconnecting to assistant in ${delaySec}s...\n`,
+      );
       await new Promise((r) => setTimeout(r, reconnectDelay));
 
       // Increase backoff for next attempt before trying
@@ -1338,10 +1347,9 @@ export async function startCli(): Promise<void> {
   process.on("SIGINT", () => {
     spinner.stop();
     if (generating && sessionId) {
-      httpSend(
-        `/v1/conversations/${encodeURIComponent(sessionId)}/cancel`,
-        { method: "POST" },
-      ).catch(() => {
+      httpSend(`/v1/conversations/${encodeURIComponent(sessionId)}/cancel`, {
+        method: "POST",
+      }).catch(() => {
         // Best-effort cancel
       });
     } else {
@@ -1360,8 +1368,6 @@ export async function startCli(): Promise<void> {
   updateStatusText(mainScreenLayout, "ready");
 
   // Show initial prompt since HTTP doesn't have the session_info flow
-  process.stdout.write(
-    `\n  Type your message. Ctrl+D to detach.\n\n`,
-  );
+  process.stdout.write(`\n  Type your message. Ctrl+D to detach.\n\n`);
   prompt();
 }

package/src/config/__tests__/bundled-tool-registry-guard.test.ts

@@ -0,0 +1,120 @@
+/**
+ * Guard test that validates bundled-tool-registry.ts stays in sync with
+ * TOOLS.json declarations across all bundled skills.
+ *
+ * If this test fails, run:
+ *   cd assistant && bun run scripts/generate-bundled-tool-registry.ts
+ */
+
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { describe, expect, test } from "bun:test";
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+const BUNDLED_SKILLS_DIR = join(import.meta.dir, "..", "bundled-skills");
+const REGISTRY_PATH = join(import.meta.dir, "..", "bundled-tool-registry.ts");
+
+interface ToolEntry {
+  executor: string;
+  [key: string]: unknown;
+}
+
+interface ToolsJson {
+  version: number;
+  tools: ToolEntry[];
+}
+
+/** Collect all expected registry keys from TOOLS.json files. */
+function collectToolsJsonKeys(): Set<string> {
+  const keys = new Set<string>();
+  const entries = readdirSync(BUNDLED_SKILLS_DIR, { withFileTypes: true });
+
+  for (const entry of entries) {
+    if (!entry.isDirectory() || entry.name === "_shared") continue;
+
+    const toolsJsonPath = join(BUNDLED_SKILLS_DIR, entry.name, "TOOLS.json");
+    let raw: string;
+    try {
+      raw = readFileSync(toolsJsonPath, "utf-8");
+    } catch {
+      // No TOOLS.json — skip this skill.
+      continue;
+    }
+
+    const toolsJson: ToolsJson = JSON.parse(raw);
+    for (const tool of toolsJson.tools) {
+      keys.add(`${entry.name}:${tool.executor}`);
+    }
+  }
+
+  return keys;
+}
+
+/** Extract all registry keys from bundled-tool-registry.ts source. */
+function collectRegistryKeys(): Set<string> {
+  const source = readFileSync(REGISTRY_PATH, "utf-8");
+  const keys = new Set<string>();
+  // Match both inline `["key", alias]` and multi-line `[\n    "key",` formats.
+  // Registry keys always follow the pattern `skillName:tools/something.ts`.
+  const pattern = /"([^"]+:tools\/[^"]+\.ts)"/g;
+  for (const match of source.matchAll(pattern)) {
+    keys.add(match[1]);
+  }
+  return keys;
+}
+
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+
+describe("bundled-tool-registry guard", () => {
+  const toolsJsonKeys = collectToolsJsonKeys();
+  const registryKeys = collectRegistryKeys();
+
+  test("every TOOLS.json executor has a registry entry", () => {
+    const violations: string[] = [];
+
+    for (const key of toolsJsonKeys) {
+      if (!registryKeys.has(key)) {
+        violations.push(key);
+      }
+    }
+
+    if (violations.length > 0) {
+      const message = [
+        "TOOLS.json declares executors that are missing from bundled-tool-registry.ts.",
+        "",
+        "Violations:",
+        ...violations.map((v) => `  - ${v}`),
+        "",
+        "Run 'cd assistant && bun run scripts/generate-bundled-tool-registry.ts' to fix.",
+      ].join("\n");
+      expect(violations, message).toEqual([]);
+    }
+  });
+
+  test("registry has no stale entries", () => {
+    const violations: string[] = [];
+
+    for (const key of registryKeys) {
+      if (!toolsJsonKeys.has(key)) {
+        violations.push(key);
+      }
+    }
+
+    if (violations.length > 0) {
+      const message = [
+        "bundled-tool-registry.ts contains entries not found in any TOOLS.json.",
+        "",
+        "Violations:",
+        ...violations.map((v) => `  - ${v}`),
+        "",
+        "Run 'cd assistant && bun run scripts/generate-bundled-tool-registry.ts' to fix.",
+      ].join("\n");
+      expect(violations, message).toEqual([]);
+    }
+  });
+});

package/src/config/bundled-skills/_shared/CLI_RETRIEVAL_PATTERN.md

@@ -2,6 +2,17 @@
 
 When running the `assistant` CLI, run it using the `bash` (not `host_bash`) tool.
 
+For account and auth workflows, prefer documented `assistant` CLI commands over
+any generic account registry:
+
+- `assistant credentials ...` for stored secrets and credential metadata
+- `assistant oauth token <service>` for OAuth-backed integrations
+- `assistant mcp auth <name>` when an MCP server needs browser login
+- `assistant platform status` for platform-linked deployment/auth context
+
+If a bundled skill documents a service-specific `assistant <service>` auth or
+session flow, follow that CLI exactly.
+
 # Outbound Network Requests
 
 When a skill needs outbound API calls with a stored credential (outside of `assistant` CLI reads), use proxied `bash`:

package/src/config/bundled-skills/app-builder/SKILL.md

@@ -2,7 +2,12 @@
 name: app-builder
 description: Build interactive apps, dashboards, calculators, games, trackers, tools, landing pages, and data visualizations with HTML/CSS/JS. Use when the user says build, create, or make an app/dashboard/calculator/game.
 compatibility: "Designed for Vellum personal assistants"
-metadata: {"emoji":"🏗️","vellum":{"display-name":"App Builder","includes":["frontend-design"]}}
+metadata:
+  emoji: "🏗️"
+  vellum:
+    display-name: "App Builder"
+    includes:
+      - "frontend-design"
 ---
 
 You are an expert app builder and visual designer. When the user asks you to create an app, tool, or utility, you immediately design a data schema, choose a stunning visual direction, build a self-contained HTML/CSS/JS interface, and open it — all in one step. You don't discuss or ask for permission to be creative. You ARE the designer: you pick the colors, the layout, the atmosphere, the micro-interactions. Your apps should make users stop and say "whoa" — they should feel designed, not generated.

package/src/config/bundled-skills/browser/SKILL.md

@@ -2,7 +2,12 @@
 name: browser
 description: Navigate and interact with web pages using a headless browser
 compatibility: "Designed for Vellum personal assistants"
-metadata: {"emoji":"🌐","vellum":{"display-name":"Browser","user-invocable":true}}
+metadata:
+  emoji: "🌐"
+  vellum:
+    display-name: "Browser"
+    user-invocable: true
+    feature-flag: "browser"
 ---
 
 Use this skill to browse the web. After loading this skill, the following browser tools become available:

package/src/config/bundled-skills/chatgpt-import/SKILL.md

@@ -2,7 +2,11 @@
 name: chatgpt-import
 description: Import conversation history from ChatGPT into Vellum
 compatibility: "Designed for Vellum personal assistants"
-metadata: {"emoji":"📥","vellum":{"display-name":"ChatGPT Import","user-invocable":true}}
+metadata:
+  emoji: "📥"
+  vellum:
+    display-name: "ChatGPT Import"
+    user-invocable: true
 ---
 
 Import ChatGPT conversation history into Vellum so users can keep their conversation context and memory when switching from ChatGPT.

package/src/config/bundled-skills/claude-code/SKILL.md

@@ -2,7 +2,11 @@
 name: claude-code
 description: Delegate coding tasks to Claude Code, an AI-powered coding agent
 compatibility: "Designed for Vellum personal assistants"
-metadata: {"emoji":"💻","vellum":{"display-name":"Claude Code","user-invocable":true}}
+metadata:
+  emoji: "💻"
+  vellum:
+    display-name: "Claude Code"
+    user-invocable: true
 ---
 
 You are delegating a coding task to Claude Code, an autonomous AI coding agent. Use this skill when the user needs hands-on software engineering work done.

package/src/config/bundled-skills/computer-use/SKILL.md

@@ -2,7 +2,12 @@
 name: computer-use
 description: Computer-use action tools for controlling the macOS desktop via accessibility and screen capture.
 compatibility: "Designed for Vellum personal assistants"
-metadata: {"emoji":"🖥️","vellum":{"display-name":"Computer Use","user-invocable":false,"disable-model-invocation":true}}
+metadata:
+  emoji: "🖥️"
+  vellum:
+    display-name: "Computer Use"
+    user-invocable: false
+    disable-model-invocation: true
 ---
 
 This skill provides the 12 computer*use*\* action tools for controlling