@vellumai/assistant 0.4.46 → 0.4.49

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (382) hide show
  1. package/ARCHITECTURE.md +7 -7
  2. package/README.md +2 -23
  3. package/docs/architecture/integrations.md +45 -41
  4. package/docs/architecture/keychain-broker.md +3 -3
  5. package/docs/architecture/security.md +5 -5
  6. package/docs/runbook-trusted-contacts.md +3 -8
  7. package/hook-templates/debug-prompt-logger/hook.json +1 -1
  8. package/hook-templates/debug-prompt-logger/run.sh +1 -3
  9. package/package.json +1 -1
  10. package/src/__tests__/actor-token-service.test.ts +0 -1
  11. package/src/__tests__/anthropic-provider.test.ts +156 -0
  12. package/src/__tests__/approval-cascade.test.ts +810 -0
  13. package/src/__tests__/approval-primitive.test.ts +0 -1
  14. package/src/__tests__/approval-routes-http.test.ts +2 -0
  15. package/src/__tests__/assistant-attachments.test.ts +12 -34
  16. package/src/__tests__/assistant-feature-flag-guardrails.test.ts +76 -0
  17. package/src/__tests__/assistant-feature-flags-integration.test.ts +0 -1
  18. package/src/__tests__/browser-fill-credential.test.ts +5 -2
  19. package/src/__tests__/browser-skill-baseline-tool-payload.test.ts +2 -2
  20. package/src/__tests__/bundled-skill-retrieval-guard.test.ts +2 -1
  21. package/src/__tests__/channel-guardian.test.ts +0 -2
  22. package/src/__tests__/channel-readiness-routes.test.ts +35 -25
  23. package/src/__tests__/channel-readiness-service.test.ts +10 -9
  24. package/src/__tests__/checker.test.ts +9 -29
  25. package/src/__tests__/cli.test.ts +23 -0
  26. package/src/__tests__/computer-use-skill-manifest-regression.test.ts +1 -1
  27. package/src/__tests__/computer-use-tools.test.ts +2 -19
  28. package/src/__tests__/config-watcher.test.ts +0 -1
  29. package/src/__tests__/confirmation-request-guardian-bridge.test.ts +0 -1
  30. package/src/__tests__/context-image-dimensions.test.ts +332 -0
  31. package/src/__tests__/context-token-estimator.test.ts +196 -13
  32. package/src/__tests__/conversation-attention-store.test.ts +0 -1
  33. package/src/__tests__/conversation-attention-telegram.test.ts +0 -1
  34. package/src/__tests__/conversation-routes-guardian-reply.test.ts +144 -0
  35. package/src/__tests__/conversation-routes-slash-commands.test.ts +1 -0
  36. package/src/__tests__/credential-broker-browser-fill.test.ts +23 -22
  37. package/src/__tests__/credential-broker-server-use.test.ts +22 -21
  38. package/src/__tests__/credential-broker.test.ts +2 -1
  39. package/src/__tests__/credential-metadata-store.test.ts +239 -26
  40. package/src/__tests__/credential-resolve.test.ts +5 -4
  41. package/src/__tests__/credential-security-e2e.test.ts +8 -8
  42. package/src/__tests__/credential-security-invariants.test.ts +111 -7
  43. package/src/__tests__/credential-vault-unit.test.ts +287 -54
  44. package/src/__tests__/credential-vault.test.ts +406 -12
  45. package/src/__tests__/credentials-cli.test.ts +82 -6
  46. package/src/__tests__/dynamic-skill-workflow-prompt.test.ts +0 -1
  47. package/src/__tests__/ephemeral-permissions.test.ts +3 -3
  48. package/src/__tests__/gateway-only-enforcement.test.ts +4 -2
  49. package/src/__tests__/gateway-only-guard.test.ts +0 -1
  50. package/src/__tests__/gemini-image-service.test.ts +75 -45
  51. package/src/__tests__/gemini-provider.test.ts +9 -6
  52. package/src/__tests__/guardian-action-conversation-turn.test.ts +1 -33
  53. package/src/__tests__/guardian-action-copy-generator.test.ts +0 -20
  54. package/src/__tests__/guardian-action-followup-executor.test.ts +1 -28
  55. package/src/__tests__/guardian-action-followup-store.test.ts +1 -1
  56. package/src/__tests__/guardian-action-grant-mint-consume.test.ts +0 -1
  57. package/src/__tests__/guardian-decision-primitive-canonical.test.ts +0 -1
  58. package/src/__tests__/guardian-grant-minting.test.ts +35 -0
  59. package/src/__tests__/guardian-routing-invariants.test.ts +0 -1
  60. package/src/__tests__/guardian-verification-voice-binding.test.ts +0 -1
  61. package/src/__tests__/handlers-user-message-approval-consumption.test.ts +0 -39
  62. package/src/__tests__/heartbeat-service.test.ts +0 -1
  63. package/src/__tests__/host-cu-proxy.test.ts +629 -0
  64. package/src/__tests__/host-shell-tool.test.ts +27 -15
  65. package/src/__tests__/http-user-message-parity.test.ts +1 -0
  66. package/src/__tests__/ingress-url-consistency.test.ts +14 -21
  67. package/src/__tests__/integration-status.test.ts +38 -25
  68. package/src/__tests__/intent-routing.test.ts +0 -1
  69. package/src/__tests__/invite-routes-http.test.ts +10 -9
  70. package/src/__tests__/keychain-broker-client.test.ts +11 -43
  71. package/src/__tests__/managed-proxy-context.test.ts +5 -3
  72. package/src/__tests__/media-generate-image.test.ts +63 -2
  73. package/src/__tests__/media-reuse-story.e2e.test.ts +7 -3
  74. package/src/__tests__/messaging-send-tool.test.ts +4 -6
  75. package/src/__tests__/notification-routing-intent.test.ts +0 -1
  76. package/src/__tests__/oauth-cli.test.ts +373 -14
  77. package/src/__tests__/oauth-provider-profiles.test.ts +9 -9
  78. package/src/__tests__/oauth-scope-policy.test.ts +4 -6
  79. package/src/__tests__/oauth-store.test.ts +756 -0
  80. package/src/__tests__/onboarding-starter-tasks.test.ts +0 -1
  81. package/src/__tests__/provider-error-scenarios.test.ts +0 -1
  82. package/src/__tests__/provider-fail-open-selection.test.ts +3 -1
  83. package/src/__tests__/provider-managed-proxy-integration.test.ts +70 -6
  84. package/src/__tests__/provider-streaming.benchmark.test.ts +0 -1
  85. package/src/__tests__/public-ingress-urls.test.ts +15 -21
  86. package/src/__tests__/recording-handler.test.ts +3 -4
  87. package/src/__tests__/registry.test.ts +2 -2
  88. package/src/__tests__/runtime-events-sse.test.ts +55 -7
  89. package/src/__tests__/schedule-store.test.ts +0 -1
  90. package/src/__tests__/scheduler-recurrence.test.ts +0 -1
  91. package/src/__tests__/schema-transforms.test.ts +226 -0
  92. package/src/__tests__/scoped-approval-grants.test.ts +0 -1
  93. package/src/__tests__/scoped-grant-security-matrix.test.ts +0 -1
  94. package/src/__tests__/script-proxy-injection-runtime.test.ts +23 -13
  95. package/src/__tests__/script-proxy-policy-runtime.test.ts +1 -1
  96. package/src/__tests__/script-proxy-session-manager.test.ts +1 -1
  97. package/src/__tests__/secret-ingress-handler.test.ts +0 -1
  98. package/src/__tests__/secret-onetime-send.test.ts +5 -3
  99. package/src/__tests__/send-endpoint-busy.test.ts +21 -6
  100. package/src/__tests__/sequence-store.test.ts +0 -1
  101. package/src/__tests__/session-init.benchmark.test.ts +4 -5
  102. package/src/__tests__/session-messaging-secret-redirect.test.ts +5 -4
  103. package/src/__tests__/skill-include-graph.test.ts +66 -0
  104. package/src/__tests__/skill-load-feature-flag.test.ts +0 -1
  105. package/src/__tests__/skill-load-tool.test.ts +149 -1
  106. package/src/__tests__/skill-projection-feature-flag.test.ts +0 -1
  107. package/src/__tests__/skills-uninstall.test.ts +3 -3
  108. package/src/__tests__/skills.test.ts +3 -12
  109. package/src/__tests__/slack-channel-config.test.ts +76 -11
  110. package/src/__tests__/slack-share-routes.test.ts +17 -14
  111. package/src/__tests__/system-prompt.test.ts +0 -1
  112. package/src/__tests__/telegram-bot-username-resolution.test.ts +3 -0
  113. package/src/__tests__/telegram-invite-adapter.test.ts +18 -22
  114. package/src/__tests__/terminal-tools.test.ts +4 -3
  115. package/src/__tests__/test-support/computer-use-skill-harness.ts +3 -2
  116. package/src/__tests__/tool-approval-handler.test.ts +0 -1
  117. package/src/__tests__/tool-execution-pipeline.benchmark.test.ts +0 -1
  118. package/src/__tests__/tool-executor-lifecycle-events.test.ts +0 -1
  119. package/src/__tests__/tool-executor-shell-integration.test.ts +0 -1
  120. package/src/__tests__/tool-executor.test.ts +0 -1
  121. package/src/__tests__/tool-grant-request-escalation.test.ts +0 -1
  122. package/src/__tests__/trust-store-pattern-matches.test.ts +29 -0
  123. package/src/__tests__/trust-store.test.ts +1 -22
  124. package/src/__tests__/trusted-contact-approval-notifier.test.ts +0 -1
  125. package/src/__tests__/trusted-contact-inline-approval-integration.test.ts +0 -1
  126. package/src/__tests__/twilio-config.test.ts +2 -1
  127. package/src/__tests__/twilio-provider.test.ts +4 -2
  128. package/src/__tests__/twilio-routes.test.ts +5 -20
  129. package/src/__tests__/verification-control-plane-policy.test.ts +0 -1
  130. package/src/__tests__/voice-scoped-grant-consumer.test.ts +0 -1
  131. package/src/agent/ax-tree-compaction.test.ts +235 -0
  132. package/src/agent/loop.ts +76 -130
  133. package/src/calls/call-domain.ts +8 -10
  134. package/src/calls/relay-server.ts +9 -13
  135. package/src/calls/twilio-config.ts +4 -8
  136. package/src/calls/twilio-provider.ts +2 -1
  137. package/src/calls/twilio-rest.ts +2 -1
  138. package/src/calls/twilio-routes.ts +1 -2
  139. package/src/calls/voice-ingress-preflight.ts +1 -1
  140. package/src/cli/commands/browser-relay.ts +46 -15
  141. package/src/cli/commands/completions.ts +0 -3
  142. package/src/cli/commands/credentials.ts +110 -23
  143. package/src/cli/commands/oauth/apps.ts +255 -0
  144. package/src/cli/commands/oauth/connections.ts +299 -0
  145. package/src/cli/commands/oauth/index.ts +52 -0
  146. package/src/cli/commands/oauth/providers.ts +242 -0
  147. package/src/cli/commands/skills.ts +4 -338
  148. package/src/cli/program.ts +1 -5
  149. package/src/cli/reference.ts +1 -3
  150. package/src/cli.ts +3 -2
  151. package/src/config/assistant-feature-flags.ts +0 -3
  152. package/src/config/bundled-skills/_shared/CLI_RETRIEVAL_PATTERN.md +1 -1
  153. package/src/config/bundled-skills/claude-code/TOOLS.json +0 -4
  154. package/src/config/bundled-skills/computer-use/SKILL.md +3 -6
  155. package/src/config/bundled-skills/computer-use/TOOLS.json +22 -4
  156. package/src/config/bundled-skills/contacts/tools/google-contacts.ts +29 -32
  157. package/src/config/bundled-skills/gmail/SKILL.md +4 -4
  158. package/src/config/bundled-skills/gmail/tools/gmail-archive.ts +54 -61
  159. package/src/config/bundled-skills/gmail/tools/gmail-attachments.ts +25 -28
  160. package/src/config/bundled-skills/gmail/tools/gmail-draft.ts +14 -17
  161. package/src/config/bundled-skills/gmail/tools/gmail-filters.ts +39 -44
  162. package/src/config/bundled-skills/gmail/tools/gmail-follow-up.ts +61 -58
  163. package/src/config/bundled-skills/gmail/tools/gmail-forward.ts +50 -49
  164. package/src/config/bundled-skills/gmail/tools/gmail-label.ts +11 -13
  165. package/src/config/bundled-skills/gmail/tools/gmail-outreach-scan.ts +148 -146
  166. package/src/config/bundled-skills/gmail/tools/gmail-send-draft.ts +4 -7
  167. package/src/config/bundled-skills/gmail/tools/gmail-sender-digest.ts +175 -173
  168. package/src/config/bundled-skills/gmail/tools/gmail-trash.ts +4 -7
  169. package/src/config/bundled-skills/gmail/tools/gmail-unsubscribe.ts +71 -76
  170. package/src/config/bundled-skills/gmail/tools/gmail-vacation.ts +32 -38
  171. package/src/config/bundled-skills/google-calendar/SKILL.md +2 -2
  172. package/src/config/bundled-skills/google-calendar/calendar-client.ts +90 -44
  173. package/src/config/bundled-skills/google-calendar/tools/calendar-check-availability.ts +9 -10
  174. package/src/config/bundled-skills/google-calendar/tools/calendar-create-event.ts +5 -6
  175. package/src/config/bundled-skills/google-calendar/tools/calendar-get-event.ts +4 -5
  176. package/src/config/bundled-skills/google-calendar/tools/calendar-list-events.ts +14 -15
  177. package/src/config/bundled-skills/google-calendar/tools/calendar-rsvp.ts +37 -37
  178. package/src/config/bundled-skills/google-calendar/tools/shared.ts +4 -9
  179. package/src/config/bundled-skills/image-studio/tools/media-generate-image.ts +24 -3
  180. package/src/config/bundled-skills/messaging/SKILL.md +6 -6
  181. package/src/config/bundled-skills/messaging/tools/messaging-analyze-style.ts +62 -63
  182. package/src/config/bundled-skills/messaging/tools/messaging-archive-by-sender.ts +15 -16
  183. package/src/config/bundled-skills/messaging/tools/messaging-auth-test.ts +4 -5
  184. package/src/config/bundled-skills/messaging/tools/messaging-list-conversations.ts +6 -7
  185. package/src/config/bundled-skills/messaging/tools/messaging-mark-read.ts +4 -5
  186. package/src/config/bundled-skills/messaging/tools/messaging-read.ts +14 -15
  187. package/src/config/bundled-skills/messaging/tools/messaging-search.ts +4 -5
  188. package/src/config/bundled-skills/messaging/tools/messaging-send.ts +128 -128
  189. package/src/config/bundled-skills/messaging/tools/messaging-sender-digest.ts +33 -34
  190. package/src/config/bundled-skills/messaging/tools/shared.ts +12 -15
  191. package/src/config/bundled-skills/settings/SKILL.md +1 -1
  192. package/src/config/bundled-skills/settings/TOOLS.json +2 -8
  193. package/src/config/bundled-skills/settings/tools/voice-config-update.ts +5 -33
  194. package/src/config/bundled-skills/slack/tools/shared.ts +4 -10
  195. package/src/config/bundled-skills/slack/tools/slack-add-reaction.ts +4 -5
  196. package/src/config/bundled-skills/slack/tools/slack-channel-details.ts +15 -16
  197. package/src/config/bundled-skills/slack/tools/slack-delete-message.ts +4 -5
  198. package/src/config/bundled-skills/slack/tools/slack-edit-message.ts +4 -5
  199. package/src/config/bundled-skills/slack/tools/slack-leave-channel.ts +4 -5
  200. package/src/config/bundled-skills/slack/tools/slack-scan-digest.ts +95 -92
  201. package/src/config/env-registry.ts +14 -83
  202. package/src/config/env.ts +11 -50
  203. package/src/config/feature-flag-registry.json +16 -16
  204. package/src/config/schema.ts +3 -1
  205. package/src/config/skills.ts +21 -2
  206. package/src/context/image-dimensions.ts +229 -0
  207. package/src/context/token-estimator.ts +75 -12
  208. package/src/context/window-manager.ts +49 -10
  209. package/src/daemon/assistant-attachments.ts +1 -13
  210. package/src/daemon/guardian-action-generators.ts +4 -5
  211. package/src/daemon/handlers/config-ingress.ts +8 -33
  212. package/src/daemon/handlers/config-slack-channel.ts +76 -56
  213. package/src/daemon/handlers/config-telegram.ts +53 -24
  214. package/src/daemon/handlers/sessions.ts +10 -24
  215. package/src/daemon/handlers/shared.ts +0 -130
  216. package/src/daemon/host-cu-proxy.ts +401 -0
  217. package/src/daemon/lifecycle.ts +39 -63
  218. package/src/daemon/message-protocol.ts +3 -0
  219. package/src/daemon/message-types/computer-use.ts +2 -119
  220. package/src/daemon/message-types/host-cu.ts +19 -0
  221. package/src/daemon/message-types/integrations.ts +1 -0
  222. package/src/daemon/message-types/messages.ts +3 -0
  223. package/src/daemon/server.ts +14 -21
  224. package/src/daemon/session-agent-loop-handlers.ts +2 -0
  225. package/src/daemon/session-attachments.ts +1 -2
  226. package/src/daemon/session-messaging.ts +3 -1
  227. package/src/daemon/session-slash.ts +1 -1
  228. package/src/daemon/session-surfaces.ts +40 -28
  229. package/src/daemon/session-tool-setup.ts +20 -11
  230. package/src/daemon/session.ts +139 -16
  231. package/src/daemon/tool-side-effects.ts +2 -8
  232. package/src/daemon/watch-handler.ts +2 -2
  233. package/src/email/providers/index.ts +2 -1
  234. package/src/events/tool-metrics-listener.ts +2 -2
  235. package/src/hooks/manager.ts +1 -4
  236. package/src/inbound/public-ingress-urls.ts +7 -7
  237. package/src/instrument.ts +15 -1
  238. package/src/logfire.ts +16 -5
  239. package/src/media/app-icon-generator.ts +30 -4
  240. package/src/media/avatar-router.ts +26 -3
  241. package/src/media/gemini-image-service.ts +28 -2
  242. package/src/memory/conversation-key-store.ts +21 -0
  243. package/src/memory/db-init.ts +4 -0
  244. package/src/memory/guardian-action-store.ts +1 -1
  245. package/src/memory/migrations/149-oauth-tables.ts +60 -0
  246. package/src/memory/migrations/index.ts +1 -0
  247. package/src/memory/schema/guardian.ts +1 -1
  248. package/src/memory/schema/index.ts +1 -0
  249. package/src/memory/schema/oauth.ts +65 -0
  250. package/src/messaging/provider.ts +19 -13
  251. package/src/messaging/providers/gmail/adapter.ts +40 -23
  252. package/src/messaging/providers/gmail/client.ts +283 -122
  253. package/src/messaging/providers/gmail/people-client.ts +32 -24
  254. package/src/messaging/providers/slack/adapter.ts +29 -19
  255. package/src/messaging/providers/slack/client.ts +265 -78
  256. package/src/messaging/providers/telegram-bot/adapter.ts +19 -18
  257. package/src/messaging/providers/whatsapp/adapter.ts +17 -11
  258. package/src/messaging/registry.ts +2 -31
  259. package/src/notifications/copy-composer.ts +0 -5
  260. package/src/notifications/signal.ts +4 -5
  261. package/src/oauth/byo-connection.test.ts +537 -0
  262. package/src/oauth/byo-connection.ts +128 -0
  263. package/src/oauth/connect-orchestrator.ts +139 -56
  264. package/src/oauth/connect-types.ts +17 -23
  265. package/src/oauth/connection-resolver.ts +58 -0
  266. package/src/oauth/connection.ts +38 -0
  267. package/src/oauth/manual-token-connection.ts +104 -0
  268. package/src/oauth/oauth-store.ts +496 -0
  269. package/src/oauth/platform-connection.test.ts +192 -0
  270. package/src/oauth/platform-connection.ts +111 -0
  271. package/src/oauth/provider-behaviors.ts +124 -0
  272. package/src/oauth/scope-policy.ts +9 -2
  273. package/src/oauth/seed-providers.ts +161 -0
  274. package/src/oauth/token-persistence.ts +74 -78
  275. package/src/permissions/checker.ts +8 -4
  276. package/src/permissions/defaults.ts +0 -1
  277. package/src/permissions/prompter.ts +10 -1
  278. package/src/permissions/trust-store.ts +13 -0
  279. package/src/prompts/__tests__/build-cli-reference-section.test.ts +3 -1
  280. package/src/prompts/system-prompt.ts +70 -45
  281. package/src/providers/anthropic/client.ts +133 -24
  282. package/src/providers/gemini/client.ts +15 -6
  283. package/src/providers/managed-proxy/constants.ts +2 -2
  284. package/src/providers/managed-proxy/context.ts +5 -1
  285. package/src/providers/ratelimit.ts +17 -0
  286. package/src/providers/registry.ts +2 -2
  287. package/src/providers/retry.ts +1 -27
  288. package/src/runtime/AGENTS.md +17 -0
  289. package/src/runtime/auth/route-policy.ts +0 -3
  290. package/src/runtime/channel-invite-transports/telegram.ts +2 -1
  291. package/src/runtime/channel-readiness-service.ts +168 -195
  292. package/src/runtime/channel-readiness-types.ts +4 -0
  293. package/src/runtime/channel-reply-delivery.ts +0 -40
  294. package/src/runtime/gateway-client.ts +0 -7
  295. package/src/runtime/guardian-action-conversation-turn.ts +1 -3
  296. package/src/runtime/guardian-action-followup-executor.ts +1 -1
  297. package/src/runtime/guardian-action-message-composer.ts +3 -23
  298. package/src/runtime/http-server.ts +17 -10
  299. package/src/runtime/http-types.ts +2 -3
  300. package/src/runtime/middleware/rate-limiter.ts +74 -20
  301. package/src/runtime/middleware/twilio-validation.ts +1 -11
  302. package/src/runtime/pending-interactions.ts +14 -12
  303. package/src/runtime/routes/channel-delivery-routes.ts +0 -1
  304. package/src/runtime/routes/channel-readiness-routes.ts +2 -0
  305. package/src/runtime/routes/conversation-routes.ts +73 -19
  306. package/src/runtime/routes/diagnostics-routes.ts +11 -9
  307. package/src/runtime/routes/events-routes.ts +21 -11
  308. package/src/runtime/routes/guardian-approval-interception.ts +20 -5
  309. package/src/runtime/routes/host-cu-routes.ts +97 -0
  310. package/src/runtime/routes/inbound-stages/background-dispatch.ts +12 -111
  311. package/src/runtime/routes/integrations/slack/share.ts +6 -6
  312. package/src/runtime/routes/integrations/twilio.ts +6 -5
  313. package/src/runtime/routes/log-export-routes.ts +126 -8
  314. package/src/runtime/routes/secret-routes.ts +3 -2
  315. package/src/runtime/routes/settings-routes.ts +113 -48
  316. package/src/runtime/routes/surface-action-routes.ts +1 -1
  317. package/src/runtime/routes/watch-routes.ts +128 -0
  318. package/src/schedule/integration-status.ts +10 -8
  319. package/src/security/credential-key.ts +14 -0
  320. package/src/security/keychain-broker-client.ts +5 -6
  321. package/src/security/oauth2.ts +1 -1
  322. package/src/security/token-manager.ts +145 -43
  323. package/src/skills/catalog-install.ts +358 -0
  324. package/src/skills/include-graph.ts +32 -0
  325. package/src/telegram/bot-username.ts +2 -3
  326. package/src/tools/apps/definitions.ts +0 -5
  327. package/src/tools/assets/materialize.ts +0 -5
  328. package/src/tools/assets/search.ts +0 -5
  329. package/src/tools/browser/headless-browser.ts +1 -67
  330. package/src/tools/browser/network-recorder.ts +1 -1
  331. package/src/tools/browser/network-recording-types.ts +1 -1
  332. package/src/tools/claude-code/claude-code.ts +0 -5
  333. package/src/tools/computer-use/definitions.ts +46 -11
  334. package/src/tools/computer-use/registry.ts +4 -5
  335. package/src/tools/credentials/broker.ts +5 -4
  336. package/src/tools/credentials/metadata-store.ts +22 -74
  337. package/src/tools/credentials/resolve.ts +2 -1
  338. package/src/tools/credentials/vault.ts +139 -151
  339. package/src/tools/filesystem/edit.ts +1 -6
  340. package/src/tools/filesystem/read.ts +0 -5
  341. package/src/tools/filesystem/write.ts +1 -6
  342. package/src/tools/host-filesystem/edit.ts +1 -6
  343. package/src/tools/host-filesystem/read.ts +1 -6
  344. package/src/tools/host-filesystem/write.ts +1 -6
  345. package/src/tools/mcp/mcp-tool-factory.ts +18 -1
  346. package/src/tools/memory/definitions.ts +0 -5
  347. package/src/tools/network/web-fetch.ts +0 -5
  348. package/src/tools/network/web-search.ts +0 -5
  349. package/src/tools/registry.ts +2 -7
  350. package/src/tools/schema-transforms.ts +99 -0
  351. package/src/tools/skills/load.ts +62 -8
  352. package/src/tools/swarm/delegate.ts +0 -5
  353. package/src/tools/system/avatar-generator.ts +0 -5
  354. package/src/tools/ui-surface/definitions.ts +0 -15
  355. package/src/tools/watch/screen-watch.ts +0 -5
  356. package/src/tools/watch/watch-state.ts +0 -12
  357. package/src/util/logger.ts +7 -41
  358. package/src/util/platform.ts +9 -28
  359. package/src/version.ts +10 -0
  360. package/src/watcher/providers/github.ts +51 -52
  361. package/src/watcher/providers/gmail.ts +88 -80
  362. package/src/watcher/providers/google-calendar.ts +94 -86
  363. package/src/watcher/providers/linear.ts +87 -93
  364. package/src/__tests__/computer-use-session-compaction.test.ts +0 -143
  365. package/src/__tests__/computer-use-session-lifecycle.test.ts +0 -322
  366. package/src/__tests__/computer-use-session-working-dir.test.ts +0 -166
  367. package/src/__tests__/computer-use-skill-baseline.test.ts +0 -78
  368. package/src/__tests__/computer-use-skill-endstate.test.ts +0 -105
  369. package/src/__tests__/computer-use-skill-lifecycle-cleanup.test.ts +0 -249
  370. package/src/__tests__/ride-shotgun-handler.test.ts +0 -452
  371. package/src/cli/commands/dev.ts +0 -129
  372. package/src/cli/commands/map.ts +0 -391
  373. package/src/cli/commands/oauth.ts +0 -77
  374. package/src/config/bundled-skills/computer-use/tools/computer-use-request-control.ts +0 -16
  375. package/src/daemon/computer-use-session.ts +0 -1020
  376. package/src/daemon/ride-shotgun-handler.ts +0 -567
  377. package/src/oauth/provider-profiles.ts +0 -192
  378. package/src/prompts/computer-use-prompt.ts +0 -98
  379. package/src/runtime/routes/computer-use-routes.ts +0 -641
  380. package/src/runtime/telegram-streaming-delivery.test.ts +0 -597
  381. package/src/runtime/telegram-streaming-delivery.ts +0 -383
  382. package/src/tools/computer-use/request-computer-control.ts +0 -61
@@ -13,7 +13,8 @@
13
13
  * and issues.
14
14
  */
15
15
 
16
- import { withValidToken } from "../../security/token-manager.js";
16
+ import type { OAuthConnection } from "../../oauth/connection.js";
17
+ import { resolveOAuthConnection } from "../../oauth/connection-resolver.js";
17
18
  import { getLogger } from "../../util/logger.js";
18
19
  import { truncate } from "../../util/truncate.js";
19
20
  import type {
@@ -24,8 +25,6 @@ import type {
24
25
 
25
26
  const log = getLogger("watcher:linear");
26
27
 
27
- const LINEAR_GRAPHQL_URL = "https://api.linear.app/graphql";
28
-
29
28
  // ── GraphQL response types ────────────────────────────────────────────────────
30
29
 
31
30
  interface LinearNotification {
@@ -89,27 +88,23 @@ interface LinearViewer {
89
88
  // ── GraphQL helpers ───────────────────────────────────────────────────────────
90
89
 
91
90
  async function graphql<T>(
92
- token: string,
91
+ connection: OAuthConnection,
93
92
  query: string,
94
93
  variables?: Record<string, unknown>,
95
94
  ): Promise<T> {
96
- const resp = await fetch(LINEAR_GRAPHQL_URL, {
95
+ const resp = await connection.request({
97
96
  method: "POST",
98
- headers: {
99
- // Linear accepts both personal API keys and OAuth tokens; the Bearer scheme
100
- // is required for all token types per Linear's API docs.
101
- Authorization: `Bearer ${token}`,
102
- "Content-Type": "application/json",
103
- },
104
- body: JSON.stringify({ query, variables }),
97
+ path: "/graphql",
98
+ body: { query, variables },
105
99
  });
106
100
 
107
- if (!resp.ok) {
108
- const body = await resp.text().catch(() => "");
101
+ if (resp.status >= 400) {
102
+ const body =
103
+ typeof resp.body === "string" ? resp.body : JSON.stringify(resp.body);
109
104
  throw new Error(`Linear API ${resp.status}: ${body}`);
110
105
  }
111
106
 
112
- const result = (await resp.json()) as {
107
+ const result = resp.body as {
113
108
  data?: T;
114
109
  errors?: Array<{ message: string }>;
115
110
  };
@@ -128,9 +123,9 @@ async function graphql<T>(
128
123
  }
129
124
 
130
125
  /** Fetch the authenticated user's ID and name. */
131
- async function fetchViewer(token: string): Promise<LinearViewer> {
126
+ async function fetchViewer(connection: OAuthConnection): Promise<LinearViewer> {
132
127
  const data = await graphql<{ viewer: LinearViewer }>(
133
- token,
128
+ connection,
134
129
  `
135
130
  query {
136
131
  viewer {
@@ -150,7 +145,7 @@ async function fetchViewer(token: string): Promise<LinearViewer> {
150
145
  * between polls.
151
146
  */
152
147
  async function fetchNotifications(
153
- token: string,
148
+ connection: OAuthConnection,
154
149
  since: string,
155
150
  ): Promise<LinearNotification[]> {
156
151
  const allNodes: LinearNotification[] = [];
@@ -165,7 +160,7 @@ async function fetchNotifications(
165
160
 
166
161
  do {
167
162
  const data: NotificationsResponse = await graphql<NotificationsResponse>(
168
- token,
163
+ connection,
169
164
  `
170
165
  query FetchNotifications($after: DateTime, $cursor: String) {
171
166
  notifications(
@@ -242,7 +237,7 @@ async function fetchNotifications(
242
237
  * `pageInfo.hasNextPage` is false so updates beyond the first 50 aren't skipped.
243
238
  */
244
239
  async function fetchAssignedIssueUpdates(
245
- token: string,
240
+ connection: OAuthConnection,
246
241
  viewerId: string,
247
242
  since: string,
248
243
  ): Promise<LinearIssue[]> {
@@ -258,7 +253,7 @@ async function fetchAssignedIssueUpdates(
258
253
 
259
254
  do {
260
255
  const data: IssuesResponse = await graphql<IssuesResponse>(
261
- token,
256
+ connection,
262
257
  `
263
258
  query FetchAssignedIssues(
264
259
  $assigneeId: ID
@@ -319,7 +314,7 @@ async function fetchAssignedIssueUpdates(
319
314
  * complete set — needed for accurate eviction and reassignment detection.
320
315
  */
321
316
  async function fetchAllAssignedIssueIds(
322
- token: string,
317
+ connection: OAuthConnection,
323
318
  viewerId: string,
324
319
  ): Promise<Set<string>> {
325
320
  const ids = new Set<string>();
@@ -334,7 +329,7 @@ async function fetchAllAssignedIssueIds(
334
329
 
335
330
  do {
336
331
  const data: IdsResponse = await graphql<IdsResponse>(
337
- token,
332
+ connection,
338
333
  `
339
334
  query FetchAllAssignedIssueIds($assigneeId: ID, $cursor: String) {
340
335
  issues(
@@ -517,87 +512,86 @@ export const linearProvider: WatcherProvider = {
517
512
  _config: Record<string, unknown>,
518
513
  watcherKey: string,
519
514
  ): Promise<FetchResult> {
520
- return withValidToken(credentialService, async (token) => {
521
- const since = watermark ?? new Date().toISOString();
515
+ const connection = resolveOAuthConnection(credentialService);
516
+ const since = watermark ?? new Date().toISOString();
522
517
 
523
- // Resolve the authenticated viewer's ID once per poll for the assigned-issues query
524
- const viewer = await fetchViewer(token);
518
+ // Resolve the authenticated viewer's ID once per poll for the assigned-issues query
519
+ const viewer = await fetchViewer(connection);
525
520
 
526
- // Fetch notifications (assignments, mentions, status changes via notification feed)
527
- const notifications = await fetchNotifications(token, since);
521
+ // Fetch notifications (assignments, mentions, status changes via notification feed)
522
+ const notifications = await fetchNotifications(connection, since);
528
523
 
529
- // Only surface notification types that warrant attention
530
- const relevantTypes = new Set([
531
- "issueAssignedToYou",
532
- "issueMentionedYou",
533
- "issueCommentMentionedYou",
534
- "issueStatusChanged",
535
- ]);
524
+ // Only surface notification types that warrant attention
525
+ const relevantTypes = new Set([
526
+ "issueAssignedToYou",
527
+ "issueMentionedYou",
528
+ "issueCommentMentionedYou",
529
+ "issueStatusChanged",
530
+ ]);
536
531
 
537
- const items: WatcherItem[] = [];
532
+ const items: WatcherItem[] = [];
538
533
 
539
- for (const n of notifications) {
540
- if (!relevantTypes.has(n.type)) continue;
541
- items.push(notificationToItem(n));
542
- }
534
+ for (const n of notifications) {
535
+ if (!relevantTypes.has(n.type)) continue;
536
+ items.push(notificationToItem(n));
537
+ }
543
538
 
544
- // Fetch the complete set of currently assigned issue IDs (no updatedAt
545
- // filter) so we can accurately evict stale cache entries and guard against
546
- // false-positive status change events on reassignment.
547
- const currentAssignedIds = await fetchAllAssignedIssueIds(
548
- token,
549
- viewer.id,
550
- );
551
- const previousAssignedIds = lastSeenAssignedIdsByWatcher.get(watcherKey);
552
-
553
- // Also poll assigned issues directly for status changes not covered by
554
- // notifications (e.g., bulk team updates). We only emit an event when the
555
- // state ID differs from what we recorded on the previous poll — any other
556
- // field update (title, description, etc.) does not constitute a status change.
557
- // On first sight of an issue we seed the map without emitting, so we don't
558
- // fire false-positive events after a daemon restart.
559
- const assignedIssues = await fetchAssignedIssueUpdates(
560
- token,
561
- viewer.id,
562
- since,
563
- );
564
- const stateCache = getStateCache(watcherKey);
565
- for (const issue of assignedIssues) {
566
- const previousStateId = stateCache.get(issue.id);
567
- // Only emit a status change if: (1) we have a cached state that differs,
568
- // AND (2) the issue was also assigned in the previous poll. Condition (2)
569
- // prevents false-positive events when an issue is unassigned, changes
570
- // state while unassigned, and is then reassigned.
571
- const wasPreviouslySeen = previousAssignedIds?.has(issue.id) ?? false;
572
- if (
573
- previousStateId !== undefined &&
574
- previousStateId !== issue.state.id &&
575
- wasPreviouslySeen
576
- ) {
577
- items.push(issueToStatusChangeItem(issue, previousStateId));
578
- }
579
- stateCache.set(issue.id, issue.state.id);
539
+ // Fetch the complete set of currently assigned issue IDs (no updatedAt
540
+ // filter) so we can accurately evict stale cache entries and guard against
541
+ // false-positive status change events on reassignment.
542
+ const currentAssignedIds = await fetchAllAssignedIssueIds(
543
+ connection,
544
+ viewer.id,
545
+ );
546
+ const previousAssignedIds = lastSeenAssignedIdsByWatcher.get(watcherKey);
547
+
548
+ // Also poll assigned issues directly for status changes not covered by
549
+ // notifications (e.g., bulk team updates). We only emit an event when the
550
+ // state ID differs from what we recorded on the previous poll — any other
551
+ // field update (title, description, etc.) does not constitute a status change.
552
+ // On first sight of an issue we seed the map without emitting, so we don't
553
+ // fire false-positive events after a daemon restart.
554
+ const assignedIssues = await fetchAssignedIssueUpdates(
555
+ connection,
556
+ viewer.id,
557
+ since,
558
+ );
559
+ const stateCache = getStateCache(watcherKey);
560
+ for (const issue of assignedIssues) {
561
+ const previousStateId = stateCache.get(issue.id);
562
+ // Only emit a status change if: (1) we have a cached state that differs,
563
+ // AND (2) the issue was also assigned in the previous poll. Condition (2)
564
+ // prevents false-positive events when an issue is unassigned, changes
565
+ // state while unassigned, and is then reassigned.
566
+ const wasPreviouslySeen = previousAssignedIds?.has(issue.id) ?? false;
567
+ if (
568
+ previousStateId !== undefined &&
569
+ previousStateId !== issue.state.id &&
570
+ wasPreviouslySeen
571
+ ) {
572
+ items.push(issueToStatusChangeItem(issue, previousStateId));
580
573
  }
574
+ stateCache.set(issue.id, issue.state.id);
575
+ }
581
576
 
582
- // Evict cached state for issues that left the assigned set so stale
583
- // entries don't accumulate and don't cause false-positive events if the
584
- // issue is later reassigned.
585
- if (previousAssignedIds) {
586
- for (const id of previousAssignedIds) {
587
- if (!currentAssignedIds.has(id)) {
588
- stateCache.delete(id);
589
- }
577
+ // Evict cached state for issues that left the assigned set so stale
578
+ // entries don't accumulate and don't cause false-positive events if the
579
+ // issue is later reassigned.
580
+ if (previousAssignedIds) {
581
+ for (const id of previousAssignedIds) {
582
+ if (!currentAssignedIds.has(id)) {
583
+ stateCache.delete(id);
590
584
  }
591
585
  }
592
- lastSeenAssignedIdsByWatcher.set(watcherKey, currentAssignedIds);
586
+ }
587
+ lastSeenAssignedIdsByWatcher.set(watcherKey, currentAssignedIds);
593
588
 
594
- const newWatermark = new Date().toISOString();
595
- log.info(
596
- { count: items.length, viewer: viewer.name, watermark: newWatermark },
597
- "Linear: fetched new notifications",
598
- );
589
+ const newWatermark = new Date().toISOString();
590
+ log.info(
591
+ { count: items.length, viewer: viewer.name, watermark: newWatermark },
592
+ "Linear: fetched new notifications",
593
+ );
599
594
 
600
- return { items, watermark: newWatermark };
601
- });
595
+ return { items, watermark: newWatermark };
602
596
  },
603
597
  };
@@ -1,143 +0,0 @@
1
- import { describe, expect, test } from "bun:test";
2
-
3
- import { ComputerUseSession } from "../daemon/computer-use-session.js";
4
- import type { Message } from "../providers/types.js";
5
-
6
- /**
7
- * Helper to create a user message with a tool_result block containing
8
- * an AX tree wrapped in markers.
9
- */
10
- function toolResultMsg(content: string): Message {
11
- return {
12
- role: "user",
13
- content: [
14
- {
15
- type: "tool_result",
16
- tool_use_id: "test-id",
17
- content,
18
- },
19
- ],
20
- };
21
- }
22
-
23
- describe("ComputerUseSession.escapeAxTreeContent", () => {
24
- test("escapes a literal closing tag in the content", () => {
25
- const input = "some text </ax-tree> more text";
26
- const escaped = ComputerUseSession.escapeAxTreeContent(input);
27
- expect(escaped).toBe("some text &lt;/ax-tree&gt; more text");
28
- });
29
-
30
- test("escapes multiple occurrences", () => {
31
- const input = "</ax-tree> hello </ax-tree>";
32
- const escaped = ComputerUseSession.escapeAxTreeContent(input);
33
- expect(escaped).toBe("&lt;/ax-tree&gt; hello &lt;/ax-tree&gt;");
34
- });
35
-
36
- test("is case-insensitive", () => {
37
- const input = "</AX-TREE> and </Ax-Tree>";
38
- const escaped = ComputerUseSession.escapeAxTreeContent(input);
39
- expect(escaped).toBe("&lt;/ax-tree&gt; and &lt;/ax-tree&gt;");
40
- });
41
-
42
- test("leaves content without closing tags unchanged", () => {
43
- const input = 'Window "My App" [1]\n Button "OK" [2]';
44
- expect(ComputerUseSession.escapeAxTreeContent(input)).toBe(input);
45
- });
46
- });
47
-
48
- describe("ComputerUseSession.compactHistory", () => {
49
- test("[experimental] strips old AX trees and keeps the most recent ones", () => {
50
- const messages: Message[] = [
51
- { role: "assistant", content: [{ type: "text", text: "thinking..." }] },
52
- toolResultMsg(
53
- '<ax-tree>CURRENT SCREEN STATE:\nWindow "App" [1]</ax-tree>',
54
- ),
55
- { role: "assistant", content: [{ type: "text", text: "action 1" }] },
56
- toolResultMsg(
57
- '<ax-tree>CURRENT SCREEN STATE:\nWindow "App" [2]</ax-tree>',
58
- ),
59
- { role: "assistant", content: [{ type: "text", text: "action 2" }] },
60
- toolResultMsg(
61
- '<ax-tree>CURRENT SCREEN STATE:\nWindow "App" [3]</ax-tree>',
62
- ),
63
- ];
64
-
65
- const compacted = ComputerUseSession.compactHistory(messages);
66
-
67
- // First AX tree (index 1) should be stripped
68
- const firstToolResult = compacted[1].content[0];
69
- expect(firstToolResult.type).toBe("tool_result");
70
- if (firstToolResult.type === "tool_result") {
71
- expect(firstToolResult.content).toContain("<ax_tree_omitted />");
72
- expect(firstToolResult.content).not.toContain("<ax-tree>");
73
- }
74
-
75
- // Last two AX trees should be preserved
76
- const secondToolResult = compacted[3].content[0];
77
- if (secondToolResult.type === "tool_result") {
78
- expect(secondToolResult.content).toContain("<ax-tree>");
79
- }
80
- const thirdToolResult = compacted[5].content[0];
81
- if (thirdToolResult.type === "tool_result") {
82
- expect(thirdToolResult.content).toContain("<ax-tree>");
83
- }
84
- });
85
-
86
- test("[experimental] handles AX tree content containing literal </ax-tree> (escaped)", () => {
87
- // Simulate content where the AX tree text includes an escaped closing tag,
88
- // e.g. user is viewing XML source code with "</ax-tree>" in it.
89
- const escapedContent =
90
- '<ax-tree>CURRENT SCREEN STATE:\nTextArea "editor" [1]\n ' +
91
- "Line: &lt;/ax-tree&gt; some xml\n</ax-tree>";
92
-
93
- const messages: Message[] = [
94
- { role: "assistant", content: [{ type: "text", text: "action 0" }] },
95
- toolResultMsg(escapedContent),
96
- { role: "assistant", content: [{ type: "text", text: "action 1" }] },
97
- toolResultMsg(escapedContent),
98
- { role: "assistant", content: [{ type: "text", text: "action 2" }] },
99
- toolResultMsg(
100
- '<ax-tree>CURRENT SCREEN STATE:\nWindow "App" [3]</ax-tree>',
101
- ),
102
- ];
103
-
104
- const compacted = ComputerUseSession.compactHistory(messages);
105
-
106
- // The first message with escaped content should be fully stripped
107
- const firstToolResult = compacted[1].content[0];
108
- if (firstToolResult.type === "tool_result") {
109
- expect(firstToolResult.content).not.toContain("<ax-tree>");
110
- expect(firstToolResult.content).toContain("<ax_tree_omitted />");
111
- }
112
- });
113
-
114
- test("regex fails on unescaped </ax-tree> inside content (demonstrating the bug)", () => {
115
- // This test demonstrates what happens WITHOUT escaping: the regex
116
- // only partially removes the AX tree block.
117
- const unescapedContent =
118
- '<ax-tree>CURRENT SCREEN STATE:\nTextArea "editor" [1]\n ' +
119
- "Line: </ax-tree> some xml leftover\n</ax-tree>";
120
-
121
- const messages: Message[] = [
122
- { role: "assistant", content: [{ type: "text", text: "action 0" }] },
123
- toolResultMsg(unescapedContent),
124
- { role: "assistant", content: [{ type: "text", text: "action 1" }] },
125
- toolResultMsg(unescapedContent),
126
- { role: "assistant", content: [{ type: "text", text: "action 2" }] },
127
- toolResultMsg(
128
- '<ax-tree>CURRENT SCREEN STATE:\nWindow "App" [3]</ax-tree>',
129
- ),
130
- ];
131
-
132
- const compacted = ComputerUseSession.compactHistory(messages);
133
-
134
- // Without escaping, the first tool result has leftover content after
135
- // the regex only matched up to the FIRST </ax-tree>.
136
- const firstToolResult = compacted[1].content[0];
137
- if (firstToolResult.type === "tool_result") {
138
- // The non-greedy regex stops at the first </ax-tree>, leaving
139
- // " some xml leftover\n</ax-tree>" behind.
140
- expect(firstToolResult.content).toContain("some xml leftover");
141
- }
142
- });
143
- });