@vellumai/assistant 0.4.44 → 0.4.45

package/src/config/bundled-skills/messaging/tools/gmail-archive.ts

@@ -1,29 +0,0 @@
-import { modifyMessage } from "../../../../messaging/providers/gmail/client.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const messageId = input.message_id as string;
-
-  if (!messageId) {
-    return err("message_id is required.");
-  }
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      await modifyMessage(token, messageId, { removeLabelIds: ["INBOX"] });
-      return ok("Message archived.");
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-batch-archive.ts

@@ -1,56 +0,0 @@
-import { batchModifyMessages } from "../../../../messaging/providers/gmail/client.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { getSenderMessageIds } from "./scan-result-store.js";
-import { err, ok } from "./shared.js";
-
-const BATCH_MODIFY_LIMIT = 1000;
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  if (!context.triggeredBySurfaceAction) {
-    return err(
-      "This tool requires user confirmation via a surface action. Present results in a selection table with action buttons and wait for the user to click before proceeding.",
-    );
-  }
-
-  const scanId = input.scan_id as string | undefined;
-  const senderIds = input.sender_ids as string[] | undefined;
-  let messageIds = input.message_ids as string[] | undefined;
-
-  // Resolve message IDs from scan store if scan_id is provided
-  if (scanId && senderIds?.length) {
-    const resolved = getSenderMessageIds(scanId, senderIds);
-    if (!resolved) {
-      return err(
-        "Scan results have expired (30-minute window). Please re-run the scan to get fresh results.",
-      );
-    }
-    messageIds = resolved;
-  }
-
-  if (!messageIds?.length) {
-    return err(
-      "Either message_ids or scan_id + sender_ids is required, and must resolve to at least one message.",
-    );
-  }
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      for (let i = 0; i < messageIds.length; i += BATCH_MODIFY_LIMIT) {
-        const chunk = messageIds.slice(i, i + BATCH_MODIFY_LIMIT);
-        await batchModifyMessages(token, chunk, { removeLabelIds: ["INBOX"] });
-      }
-      return ok(`Archived ${messageIds.length} message(s).`);
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-batch-label.ts

@@ -1,34 +0,0 @@
-import { batchModifyMessages } from "../../../../messaging/providers/gmail/client.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const messageIds = input.message_ids as string[];
-  const addLabelIds = input.add_label_ids as string[] | undefined;
-  const removeLabelIds = input.remove_label_ids as string[] | undefined;
-
-  if (!messageIds?.length) {
-    return err("message_ids is required and must not be empty.");
-  }
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      await batchModifyMessages(token, messageIds, {
-        addLabelIds,
-        removeLabelIds,
-      });
-      return ok(`Labels updated on ${messageIds.length} message(s).`);
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-download-attachment.ts

@@ -1,47 +0,0 @@
-import { writeFile } from "node:fs/promises";
-import { basename, resolve } from "node:path";
-
-import { getAttachment } from "../../../../messaging/providers/gmail/client.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const messageId = input.message_id as string;
-  const attachmentId = input.attachment_id as string;
-  const filename = input.filename as string;
-
-  if (!messageId) return err("message_id is required.");
-  if (!attachmentId) return err("attachment_id is required.");
-  if (!filename) return err("filename is required.");
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      const attachment = await getAttachment(token, messageId, attachmentId);
-
-      // Gmail returns base64url; convert to standard base64 then to Buffer
-      const base64 = attachment.data.replace(/-/g, "+").replace(/_/g, "/");
-      const buffer = Buffer.from(base64, "base64");
-
-      const outputDir = context.workingDir ?? process.cwd();
-      // Sanitize filename: strip path separators to prevent traversal attacks from crafted MIME filenames
-      const safeName = basename(filename).replace(/\.\./g, "_");
-      const outputPath = resolve(outputDir, safeName);
-      if (!outputPath.startsWith(outputDir))
-        return err("Invalid filename: path traversal detected.");
-      await writeFile(outputPath, buffer);
-
-      return ok(`Attachment saved to ${outputPath} (${buffer.length} bytes).`);
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-label.ts

@@ -1,31 +0,0 @@
-import { modifyMessage } from "../../../../messaging/providers/gmail/client.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const messageId = input.message_id as string;
-  const addLabelIds = input.add_label_ids as string[] | undefined;
-  const removeLabelIds = input.remove_label_ids as string[] | undefined;
-
-  if (!messageId) {
-    return err("message_id is required.");
-  }
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      await modifyMessage(token, messageId, { addLabelIds, removeLabelIds });
-      return ok("Labels updated.");
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-list-attachments.ts

@@ -1,67 +0,0 @@
-import { getMessage } from "../../../../messaging/providers/gmail/client.js";
-import type { GmailMessagePart } from "../../../../messaging/providers/gmail/types.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-interface AttachmentInfo {
-  partId: string;
-  filename: string;
-  mimeType: string;
-  size: number;
-  attachmentId: string;
-}
-
-/** Recursively walk the MIME parts tree to find attachments. */
-function collectAttachments(
-  parts: GmailMessagePart[] | undefined,
-): AttachmentInfo[] {
-  if (!parts) return [];
-  const result: AttachmentInfo[] = [];
-  for (const part of parts) {
-    if (part.filename && part.body?.attachmentId) {
-      result.push({
-        partId: part.partId ?? "",
-        filename: part.filename,
-        mimeType: part.mimeType ?? "application/octet-stream",
-        size: part.body.size ?? 0,
-        attachmentId: part.body.attachmentId,
-      });
-    }
-    if (part.parts) {
-      result.push(...collectAttachments(part.parts));
-    }
-  }
-  return result;
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const messageId = input.message_id as string;
-
-  if (!messageId) {
-    return err("message_id is required.");
-  }
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      const message = await getMessage(token, messageId, "full");
-      const attachments = collectAttachments(message.payload?.parts);
-
-      if (attachments.length === 0) {
-        return ok("No attachments found on this message.");
-      }
-
-      return ok(JSON.stringify(attachments, null, 2));
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-send-with-attachments.ts

@@ -1,97 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { basename, extname } from "node:path";
-
-import { createDraftRaw } from "../../../../messaging/providers/gmail/client.js";
-import { buildMultipartMime } from "../../../../messaging/providers/gmail/mime-builder.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-const MIME_MAP: Record<string, string> = {
-  ".pdf": "application/pdf",
-  ".zip": "application/zip",
-  ".gz": "application/gzip",
-  ".tar": "application/x-tar",
-  ".doc": "application/msword",
-  ".docx":
-    "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
-  ".xls": "application/vnd.ms-excel",
-  ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-  ".ppt": "application/vnd.ms-powerpoint",
-  ".pptx":
-    "application/vnd.openxmlformats-officedocument.presentationml.presentation",
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".gif": "image/gif",
-  ".svg": "image/svg+xml",
-  ".webp": "image/webp",
-  ".mp3": "audio/mpeg",
-  ".mp4": "video/mp4",
-  ".wav": "audio/wav",
-  ".txt": "text/plain",
-  ".html": "text/html",
-  ".css": "text/css",
-  ".js": "text/javascript",
-  ".json": "application/json",
-  ".xml": "application/xml",
-  ".csv": "text/csv",
-};
-
-function guessMimeType(filePath: string): string {
-  return (
-    MIME_MAP[extname(filePath).toLowerCase()] ?? "application/octet-stream"
-  );
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const to = input.to as string;
-  const subject = input.subject as string;
-  const body = input.body as string;
-  const attachmentPaths = input.attachment_paths as string[];
-  const inReplyTo = input.in_reply_to as string | undefined;
-  const threadId = input.thread_id as string | undefined;
-
-  if (!to) return err("to is required.");
-  if (!subject) return err("subject is required.");
-  if (!body) return err("body is required.");
-  if (!attachmentPaths?.length)
-    return err("attachment_paths is required and must not be empty.");
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      const attachments = await Promise.all(
-        attachmentPaths.map(async (filePath) => {
-          const data = await readFile(filePath);
-          const filename = basename(filePath);
-          const mimeType = guessMimeType(filePath);
-          return { filename, mimeType, data };
-        }),
-      );
-
-      const raw = buildMultipartMime({
-        to,
-        subject,
-        body,
-        inReplyTo,
-        attachments,
-      });
-      const draft = await createDraftRaw(token, raw, threadId);
-
-      const filenames = attachments.map((a) => a.filename).join(", ");
-      return ok(
-        `Gmail draft created with ${attachments.length} attachment(s): ${filenames} (Draft ID: ${draft.id}). Review in Gmail Drafts, then tell me to send it or send it yourself.`,
-      );
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-summarize-thread.ts

@@ -1,87 +0,0 @@
-import {
-  batchGetMessages,
-  listMessages,
-} from "../../../../messaging/providers/gmail/client.js";
-import type {
-  GmailMessage,
-  GmailMessagePart,
-} from "../../../../messaging/providers/gmail/types.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { summarizeThread } from "../../../../messaging/thread-summarizer.js";
-import type { ThreadMessage } from "../../../../messaging/types.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-function extractHeader(
-  headers: Array<{ name: string; value: string }> | undefined,
-  name: string,
-): string {
-  return (
-    headers?.find((h) => h.name.toLowerCase() === name.toLowerCase())?.value ??
-    ""
-  );
-}
-
-function extractPlainTextBody(part: GmailMessagePart | undefined): string {
-  if (!part) return "";
-  if (part.mimeType === "text/plain" && part.body?.data) {
-    return Buffer.from(
-      part.body.data.replace(/-/g, "+").replace(/_/g, "/"),
-      "base64",
-    ).toString("utf-8");
-  }
-  if (part.parts) {
-    for (const child of part.parts) {
-      const text = extractPlainTextBody(child);
-      if (text) return text;
-    }
-  }
-  return "";
-}
-
-function gmailToThreadMessage(msg: GmailMessage): ThreadMessage {
-  const from = extractHeader(msg.payload?.headers, "From");
-  const senderName = from.replace(/<[^>]+>/, "").trim() || from;
-  return {
-    id: msg.id,
-    sender: senderName,
-    body: extractPlainTextBody(msg.payload),
-    timestamp: Number(msg.internalDate ?? 0),
-    channel: "email",
-  };
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const threadId = input.thread_id as string;
-
-  if (!threadId) {
-    return err("thread_id is required.");
-  }
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      const listResp = await listMessages(token, `thread:${threadId}`, 50);
-      const messageIds = (listResp.messages ?? []).map((m) => m.id);
-
-      if (messageIds.length === 0) {
-        return err("No messages found in this thread.");
-      }
-
-      const messages = await batchGetMessages(token, messageIds, "full");
-      const threadMessages = messages.map(gmailToThreadMessage);
-      const summary = await summarizeThread(threadMessages);
-
-      return ok(JSON.stringify(summary, null, 2));
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/gmail-triage.ts

@@ -1,135 +0,0 @@
-import {
-  type ClassifiedEmail,
-  classifyEmails,
-  type EmailMetadata,
-} from "../../../../messaging/email-classifier.js";
-import {
-  batchGetMessages,
-  batchModifyMessages,
-  createLabel,
-  listLabels,
-  listMessages,
-} from "../../../../messaging/providers/gmail/client.js";
-import { getMessagingProvider } from "../../../../messaging/registry.js";
-import { withValidToken } from "../../../../security/token-manager.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-const FOLLOW_UP_LABEL_NAME = "Follow-up";
-
-async function getOrCreateLabel(token: string, name: string): Promise<string> {
-  const labels = await listLabels(token);
-  const existing = labels.find((l) => l.name === name);
-  if (existing) return existing.id;
-  const created = await createLabel(token, name);
-  return created.id;
-}
-
-function groupByCategory(
-  classifications: ClassifiedEmail[],
-): Record<string, ClassifiedEmail[]> {
-  const groups: Record<string, ClassifiedEmail[]> = {};
-  for (const c of classifications) {
-    (groups[c.category] ??= []).push(c);
-  }
-  return groups;
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const maxResults = (input.max_results as number) ?? 20;
-  const autoApply = (input.auto_apply as boolean) ?? false;
-  const query = (input.query as string) ?? "is:unread in:inbox";
-
-  try {
-    const provider = getMessagingProvider("gmail");
-    return withValidToken(provider.credentialService, async (token) => {
-      const listResp = await listMessages(token, query, maxResults);
-      const messageIds = (listResp.messages ?? []).map((m) => m.id);
-
-      if (messageIds.length === 0) {
-        return ok("No messages to triage.");
-      }
-
-      const messages = await batchGetMessages(token, messageIds, "metadata", [
-        "From",
-        "Subject",
-      ]);
-      const emailMetadata: EmailMetadata[] = messages.map((m) => {
-        const headers = m.payload?.headers ?? [];
-        return {
-          id: m.id,
-          from:
-            headers.find((h) => h.name.toLowerCase() === "from")?.value ?? "",
-          subject:
-            headers.find((h) => h.name.toLowerCase() === "subject")?.value ??
-            "",
-          snippet: m.snippet ?? "",
-          labels: m.labelIds ?? [],
-        };
-      });
-
-      const result = await classifyEmails(emailMetadata);
-
-      if (result.classifications.length === 0) {
-        return ok("Classification unavailable. Try again later.");
-      }
-
-      const groups = groupByCategory(result.classifications);
-      const actions: string[] = [];
-
-      if (autoApply) {
-        // Archive can_archive emails
-        const archivable = groups["can_archive"] ?? [];
-        if (archivable.length > 0) {
-          await batchModifyMessages(
-            token,
-            archivable.map((c) => c.id),
-            { removeLabelIds: ["INBOX"] },
-          );
-          actions.push(`Archived ${archivable.length} message(s)`);
-        }
-
-        // Label needs_reply as Follow-up
-        const needsReply = groups["needs_reply"] ?? [];
-        if (needsReply.length > 0) {
-          const followUpLabelId = await getOrCreateLabel(
-            token,
-            FOLLOW_UP_LABEL_NAME,
-          );
-          await batchModifyMessages(
-            token,
-            needsReply.map((c) => c.id),
-            { addLabelIds: [followUpLabelId] },
-          );
-          actions.push(`Labeled ${needsReply.length} message(s) as Follow-up`);
-        }
-      }
-
-      const report = {
-        total: result.classifications.length,
-        groups: Object.fromEntries(
-          Object.entries(groups).map(([cat, items]) => [
-            cat,
-            items.map((c) => ({
-              id: c.id,
-              reasoning: c.reasoning,
-              suggestedAction: c.suggestedAction,
-              urgencyScore: c.urgencyScore,
-            })),
-          ]),
-        ),
-        actionsApplied: actions,
-      };
-
-      return ok(JSON.stringify(report, null, 2));
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/messaging/tools/messaging-analyze-activity.ts

@@ -1,24 +0,0 @@
-import { classifyActivity } from "../../../../messaging/activity-analyzer.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok, resolveProvider, withProviderToken } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const platform = input.platform as string | undefined;
-
-  try {
-    const provider = resolveProvider(platform);
-    return withProviderToken(provider, async (token) => {
-      const conversations = await provider.listConversations(token);
-      const summary = classifyActivity(conversations, provider.id);
-      return ok(JSON.stringify(summary, null, 2));
-    });
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}