@vellumai/assistant 0.5.13 → 0.5.15

package/src/cli.ts

@@ -153,7 +153,6 @@ export async function startCli(): Promise<void> {
     model: string;
   } | null = null;
   let pendingSessionPick = false;
-  let pendingConfirmation = false;
   let pendingCopySession = false;
   let toolStreaming = false;
   let lastDisplayedError: string | null = null;
@@ -232,91 +231,6 @@ export async function startCli(): Promise<void> {
     rl.prompt();
   }
 
-  /** Send a confirmation decision via signal file (read by the daemon). */
-  function sendConfirmation(requestId: string, decision: string): void {
-    try {
-      const signalsDir = getSignalsDir();
-      mkdirSync(signalsDir, { recursive: true });
-      writeFileSync(
-        join(signalsDir, "confirm"),
-        JSON.stringify({ requestId, decision }),
-      );
-    } catch {
-      process.stdout.write("[Failed to send confirmation]\n");
-    }
-  }
-
-  /** Add a trust rule via signal file, then confirm once the daemon acknowledges. */
-  function sendTrustRuleAndConfirm(
-    requestId: string,
-    pattern: string,
-    scope: string,
-    decision: "allow" | "deny",
-    confirmDecision: string,
-    options?: { allowHighRisk?: boolean },
-  ): void {
-    try {
-      const signalsDir = getSignalsDir();
-      mkdirSync(signalsDir, { recursive: true });
-      const resultPath = join(signalsDir, "trust-rule.result");
-      writeFileSync(
-        join(signalsDir, "trust-rule"),
-        JSON.stringify({
-          requestId,
-          pattern,
-          scope,
-          decision,
-          ...(options?.allowHighRisk ? { allowHighRisk: true } : {}),
-        }),
-      );
-
-      let settled = false;
-
-      const onResult = (): void => {
-        try {
-          const raw = readFileSync(resultPath, "utf-8");
-          const result = JSON.parse(raw) as {
-            ok?: boolean;
-            requestId?: string;
-            error?: string;
-          };
-          if (result.requestId !== requestId) return;
-          settled = true;
-          watcher.close();
-          clearTimeout(timeoutId);
-          if (result.ok) {
-            sendConfirmation(requestId, confirmDecision);
-          } else {
-            process.stdout.write(
-              `[Failed to add trust rule: ${result.error ?? "unknown error"}]\n`,
-            );
-          }
-        } catch {
-          // Result file not yet readable; ignore.
-        }
-      };
-
-      const watcher = watch(signalsDir, (_event, filename) => {
-        if (filename === "trust-rule.result") {
-          onResult();
-        }
-      });
-
-      const timeoutId = setTimeout(() => {
-        if (!settled) {
-          watcher.close();
-          process.stdout.write("[Trust rule timed out]\n");
-        }
-      }, 5_000);
-
-      if (existsSync(resultPath)) {
-        onResult();
-      }
-    } catch {
-      process.stdout.write("[Failed to send trust rule]\n");
-    }
-  }
-
   /** Send a user message via signal file to the daemon. */
   async function sendUserMessage(
     content: string,
@@ -399,211 +313,6 @@ export async function startCli(): Promise<void> {
     }
   }
 
-  function renderConfirmationPrompt(req: ConfirmationRequest): void {
-    const preview = formatConfirmationCommandPreview(req);
-    const inputLines = formatConfirmationInputLines(req.input);
-    process.stdout.write("\n");
-    process.stdout.write(`\u250C ${req.toolName}: ${preview}\n`);
-    process.stdout.write(
-      `\u2502 Risk: ${req.riskLevel}${req.sandboxed ? "  [sandboxed]" : ""}\n`,
-    );
-    if (req.executionTarget) {
-      process.stdout.write(`\u2502 Target: ${req.executionTarget}\n`);
-    }
-    if (inputLines.length > 0) {
-      process.stdout.write(`\u2502\n`);
-      for (const line of inputLines) {
-        process.stdout.write(`\u2502 ${line}\n`);
-      }
-    }
-    if (req.diff) {
-      const diffOutput = req.diff.isNewFile
-        ? formatNewFileDiff(req.diff.newContent, req.diff.filePath, null)
-        : formatDiff(
-            req.diff.oldContent,
-            req.diff.newContent,
-            req.diff.filePath,
-          );
-      if (diffOutput) {
-        process.stdout.write(`\u2502\n`);
-        for (const line of diffOutput.split("\n")) {
-          if (line) process.stdout.write(`\u2502 ${line}\n`);
-        }
-      }
-    }
-    process.stdout.write(`\u2502\n`);
-    process.stdout.write(`\u2502 [a] Allow once\n`);
-    if (req.temporaryOptionsAvailable?.includes("allow_10m")) {
-      process.stdout.write(`\u2502 [t] Allow 10m\n`);
-    }
-    if (req.temporaryOptionsAvailable?.includes("allow_conversation")) {
-      process.stdout.write(`\u2502 [T] Allow Conversation\n`);
-    }
-    process.stdout.write(`\u2502 [d] Deny once\n`);
-    if (req.allowlistOptions.length > 0 && req.scopeOptions.length > 0) {
-      process.stdout.write(`\u2502 [A] Allowlist...\n`);
-      process.stdout.write(`\u2502 [H] Allowlist (high-risk)...\n`);
-      process.stdout.write(`\u2502 [D] Denylist...\n`);
-    }
-    process.stdout.write(`\u2514 > `);
-
-    pendingConfirmation = true;
-    rl.once("line", (answer) => {
-      const trimmed = answer.trim();
-      const choice = trimmed.toLowerCase();
-
-      // Uppercase 'A' → allowlist pattern selection (check before lowercase 'a')
-      // Only process when scope options exist, matching the display guard above
-      if (
-        (trimmed === "A" || choice === "allowlist") &&
-        req.allowlistOptions.length > 0 &&
-        req.scopeOptions.length > 0
-      ) {
-        // pendingConfirmation stays true through sub-prompts
-        renderPatternSelection(req, "always_allow");
-        return;
-      }
-
-      // Uppercase 'H' → high-risk allowlist pattern selection
-      if (
-        trimmed === "H" &&
-        req.allowlistOptions.length > 0 &&
-        req.scopeOptions.length > 0
-      ) {
-        // pendingConfirmation stays true through sub-prompts
-        renderPatternSelection(req, "always_allow_high_risk");
-        return;
-      }
-
-      // Uppercase 'D' → denylist pattern selection (check before lowercase 'd')
-      if (
-        (trimmed === "D" || choice === "denylist") &&
-        req.allowlistOptions.length > 0 &&
-        req.scopeOptions.length > 0
-      ) {
-        // pendingConfirmation stays true through sub-prompts
-        renderPatternSelection(req, "always_deny");
-        return;
-      }
-
-      pendingConfirmation = false;
-      if (choice === "a") {
-        sendConfirmation(req.requestId, "allow");
-        return;
-      }
-
-      if (
-        choice === "t" &&
-        trimmed === "t" &&
-        req.temporaryOptionsAvailable?.includes("allow_10m")
-      ) {
-        sendConfirmation(req.requestId, "allow_10m");
-        return;
-      }
-
-      if (
-        trimmed === "T" &&
-        req.temporaryOptionsAvailable?.includes("allow_conversation")
-      ) {
-        sendConfirmation(req.requestId, "allow_conversation");
-        return;
-      }
-
-      if (choice === "d") {
-        sendConfirmation(req.requestId, "deny");
-        return;
-      }
-
-      // Default to deny for unrecognized input
-      sendConfirmation(req.requestId, "deny");
-    });
-  }
-
-  function renderPatternSelection(
-    req: ConfirmationRequest,
-    decision: "always_allow" | "always_allow_high_risk" | "always_deny",
-  ): void {
-    const label =
-      decision === "always_deny"
-        ? "Denylist"
-        : decision === "always_allow_high_risk"
-          ? "Allowlist (high-risk)"
-          : "Allowlist";
-    process.stdout.write("\n");
-    process.stdout.write(`\u250C ${label}: choose command pattern\n`);
-    for (let i = 0; i < req.allowlistOptions.length; i++) {
-      process.stdout.write(
-        `\u2502 [${i + 1}] ${req.allowlistOptions[i].label}\n`,
-      );
-    }
-    process.stdout.write(`\u2514 > `);
-
-    rl.once("line", (answer) => {
-      const parsed = parseInt(answer.trim(), 10);
-      if (Number.isNaN(parsed)) {
-        process.stdout.write("  Invalid input — enter a number.\n");
-        renderPatternSelection(req, decision);
-        return;
-      }
-      const idx = parsed - 1;
-      if (idx >= 0 && idx < req.allowlistOptions.length) {
-        const selectedPattern = req.allowlistOptions[idx].pattern;
-        // pendingConfirmation stays true through scope selection
-        renderScopeSelection(req, selectedPattern, decision);
-      } else {
-        // Invalid selection → deny
-        pendingConfirmation = false;
-        sendConfirmation(req.requestId, "deny");
-      }
-    });
-  }
-
-  function renderScopeSelection(
-    req: ConfirmationRequest,
-    selectedPattern: string,
-    decision: "always_allow" | "always_allow_high_risk" | "always_deny",
-  ): void {
-    const label =
-      decision === "always_deny"
-        ? "Denylist"
-        : decision === "always_allow_high_risk"
-          ? "Allowlist (high-risk)"
-          : "Allowlist";
-    process.stdout.write("\n");
-    process.stdout.write(`\u250C ${label}: choose scope\n`);
-    for (let i = 0; i < req.scopeOptions.length; i++) {
-      process.stdout.write(`\u2502 [${i + 1}] ${req.scopeOptions[i].label}\n`);
-    }
-    process.stdout.write(`\u2514 > `);
-
-    rl.once("line", (answer) => {
-      const parsed = parseInt(answer.trim(), 10);
-      if (Number.isNaN(parsed)) {
-        process.stdout.write("  Invalid input — enter a number.\n");
-        renderScopeSelection(req, selectedPattern, decision);
-        return;
-      }
-      pendingConfirmation = false;
-      const idx = parsed - 1;
-      if (idx >= 0 && idx < req.scopeOptions.length) {
-        const trustDecision = decision === "always_deny" ? "deny" : "allow";
-        sendTrustRuleAndConfirm(
-          req.requestId,
-          selectedPattern,
-          req.scopeOptions[idx].scope,
-          trustDecision,
-          trustDecision,
-          decision === "always_allow_high_risk"
-            ? { allowHighRisk: true }
-            : undefined,
-        );
-      } else {
-        // Invalid selection → deny
-        sendConfirmation(req.requestId, "deny");
-      }
-    });
-  }
-
   function renderConversationPicker(
     conversations: Array<{ id: string; title: string; updatedAt: number }>,
   ): void {
@@ -875,11 +584,6 @@ export async function startCli(): Promise<void> {
         spinner.start("Thinking...");
         break;
 
-      case "confirmation_request":
-        spinner.stop();
-        renderConfirmationPrompt(msg);
-        break;
-
       case "conversation_error":
         spinner.stop();
         if (lastDisplayedError !== msg.userMessage) {
@@ -891,8 +595,7 @@ export async function startCli(): Promise<void> {
       case "error":
         spinner.stop();
         generating = false;
-        if (pendingConfirmation || pendingSessionPick || pendingCopySession) {
-          pendingConfirmation = false;
+        if (pendingSessionPick || pendingCopySession) {
           pendingSessionPick = false;
           pendingCopySession = false;
           rl.removeAllListeners("line");
@@ -1042,7 +745,6 @@ export async function startCli(): Promise<void> {
     const content = line.trim();
     if (!content) return;
     if (pendingSessionPick) return;
-    if (pendingConfirmation) return;
 
     // Persist to history file (ensure parent directory exists)
     try {

package/src/config/assistant-feature-flags.ts

@@ -5,8 +5,7 @@
  * `meta/feature-flags/feature-flag-registry.json` and resolves the effective
  * enabled/disabled state for each declared assistant-scope flag by consulting
  * (in priority order):
- *   1. Override values from `~/.vellum/protected/feature-flags.json` (local)
- *      or via the gateway HTTP API (Docker/containerized)
+ *   1. Override values from the gateway HTTP API (or local file fallback)
  *   2. Remote values from `feature-flags-remote.json` (platform-pushed,
  *      cached locally; only used in local mode — containerized mode gets
  *      remote values via the gateway)
@@ -18,9 +17,9 @@
  */
 
 import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 
-import { getRootDir } from "../util/platform.js";
 import { getIsContainerized } from "./env-registry.js";
 import type { AssistantConfig } from "./schema.js";
 
@@ -112,7 +111,7 @@ function parseRegistryToDefaults(parsed: unknown): FeatureFlagDefaultsRegistry {
 }
 
 // ---------------------------------------------------------------------------
-// Override loading — reads from protected directory or gateway HTTP
+// Override loading — reads from gateway HTTP API or local file
 // ---------------------------------------------------------------------------
 
 /**
@@ -122,7 +121,7 @@ function parseRegistryToDefaults(parsed: unknown): FeatureFlagDefaultsRegistry {
 let cachedOverrides: Record<string, boolean> | null = null;
 
 /**
- * File format for `~/.vellum/protected/feature-flags.json`, matching the
+ * File format for the local feature-flags.json override file, matching the
  * gateway's feature-flag-store.ts schema.
  */
 interface FeatureFlagFileData {
@@ -134,18 +133,18 @@ interface FeatureFlagFileData {
  * Resolve the path to the feature flag overrides file.
  *
  * Docker: `GATEWAY_SECURITY_DIR/feature-flags.json`
- * Local:  `~/.vellum/protected/feature-flags.json`
+ * Local:  `~/.vellum/` + gateway security subdir + `feature-flags.json`
  */
 function getFeatureFlagOverridesPath(): string {
   const securityDir = process.env.GATEWAY_SECURITY_DIR;
   if (securityDir) {
     return join(securityDir, "feature-flags.json");
   }
-  return join(getRootDir(), "protected", "feature-flags.json");
+  return join(homedir(), ".vellum", "protected", "feature-flags.json");
 }
 
 /**
- * Load override values from the protected feature-flags.json file.
+ * Load override values from the local feature-flags.json file.
  * Returns an empty record if the file doesn't exist or is malformed.
  */
 function loadOverridesFromFile(): Record<string, boolean> {
@@ -246,16 +245,26 @@ function loadOverridesFromGateway(): Record<string, boolean> {
 }
 
 /**
- * Load overrides from the appropriate source based on runtime mode.
+ * Load overrides, preferring the gateway HTTP API.
+ *
+ * In containerized mode, always uses the gateway. In local mode, tries
+ * the gateway first and falls back to `loadOverridesFromFile()` when
+ * the gateway is not yet available (startup race).
+ *
  * Results are cached at module level.
  */
 function loadOverrides(): Record<string, boolean> {
   if (cachedOverrides != null) return cachedOverrides;
 
-  cachedOverrides = getIsContainerized()
-    ? loadOverridesFromGateway()
-    : loadOverridesFromFile();
+  const gatewayOverrides = loadOverridesFromGateway();
+  if (Object.keys(gatewayOverrides).length > 0 || getIsContainerized()) {
+    cachedOverrides = gatewayOverrides;
+    return cachedOverrides;
+  }
 
+  // Graceful fallback: in local mode, if the gateway hasn't started yet
+  // (empty response), read overrides from file as a temporary measure.
+  cachedOverrides = loadOverridesFromFile();
   return cachedOverrides;
 }
 
@@ -346,8 +355,7 @@ export function _setOverridesForTesting(
  * Resolve whether an assistant feature flag is enabled.
  *
  * Resolution order:
- *   1. Override from `~/.vellum/protected/feature-flags.json` (local) or
- *      gateway HTTP (Docker/containerized)
+ *   1. Override from gateway HTTP API (or local file fallback)
  *   2. Remote value from `feature-flags-remote.json` (platform-pushed,
  *      cached locally)
  *   3. defaults registry `defaultEnabled`         (for declared assistant-scope keys)
@@ -361,7 +369,7 @@ export function isAssistantFeatureFlagEnabled(
   const declared = defaults[key];
   const overrides = loadOverrides();
 
-  // 1. Check overrides from protected feature-flags file / gateway
+  // 1. Check overrides from gateway / local file
   const explicit = overrides[key];
   if (typeof explicit === "boolean") return explicit;
 

package/src/config/bundled-skills/app-builder/TOOLS.json

@@ -75,6 +75,10 @@
             },
             "required": ["title"]
           },
+          "change_summary": {
+            "type": "string",
+            "description": "Short summary of what changed, using git conventional commit format (e.g. 'feat: add coin flip app', 'fix: correct button alignment'). Used as the version history entry."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -97,6 +101,10 @@
             "type": "string",
             "description": "The ID of the app to delete"
           },
+          "change_summary": {
+            "type": "string",
+            "description": "Short summary of what changed, using git conventional commit format (e.g. 'chore: delete unused app'). Used as the version history entry."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -119,6 +127,10 @@
             "type": "string",
             "description": "The ID of the app to refresh"
           },
+          "change_summary": {
+            "type": "string",
+            "description": "Short summary of what changed, using git conventional commit format (e.g. 'feat: add dark mode toggle', 'fix: form validation'). Used as the version history entry."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -145,6 +157,10 @@
             "type": "string",
             "description": "Optional description to guide icon generation (e.g. 'a blue calendar with a checkmark'). If omitted, the app name and description are used."
           },
+          "change_summary": {
+            "type": "string",
+            "description": "Short summary of what changed, using git conventional commit format (e.g. 'feat: generate app icon'). Used as the version history entry."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"

package/src/config/bundled-skills/app-builder/tools/app-create.ts

@@ -1,5 +1,6 @@
 import { isAssistantFeatureFlagEnabled } from "../../../../config/assistant-feature-flags.js";
 import { getConfig } from "../../../../config/loader.js";
+import { setAppCommitMessage } from "../../../../memory/app-git-service.js";
 import * as appStore from "../../../../memory/app-store.js";
 import type { AppCreateInput } from "../../../../tools/apps/executors.js";
 import { executeAppCreate } from "../../../../tools/apps/executors.js";
@@ -12,6 +13,9 @@ export async function run(
   input: Record<string, unknown>,
   context: ToolContext,
 ): Promise<ToolExecutionResult> {
+  if (typeof input.change_summary === "string" && input.change_summary.trim()) {
+    setAppCommitMessage(context.conversationId, input.change_summary.trim());
+  }
   const multifileEnabled = isAssistantFeatureFlagEnabled(
     "app-builder-multifile",
     getConfig(),

package/src/config/bundled-skills/app-builder/tools/app-delete.ts

@@ -1,3 +1,4 @@
+import { setAppCommitMessage } from "../../../../memory/app-git-service.js";
 import * as appStore from "../../../../memory/app-store.js";
 import { executeAppDelete } from "../../../../tools/apps/executors.js";
 import type {
@@ -7,7 +8,10 @@ import type {
 
 export async function run(
   input: Record<string, unknown>,
-  _context: ToolContext,
+  context: ToolContext,
 ): Promise<ToolExecutionResult> {
+  if (typeof input.change_summary === "string" && input.change_summary.trim()) {
+    setAppCommitMessage(context.conversationId, input.change_summary.trim());
+  }
   return executeAppDelete({ app_id: input.app_id as string }, appStore);
 }

package/src/config/bundled-skills/app-builder/tools/app-generate-icon.ts

@@ -1,11 +1,19 @@
+import { setAppCommitMessage } from "../../../../memory/app-git-service.js";
 import * as appStore from "../../../../memory/app-store.js";
 import type { AppGenerateIconInput } from "../../../../tools/apps/executors.js";
 import { executeAppGenerateIcon } from "../../../../tools/apps/executors.js";
-import type { ToolExecutionResult } from "../../../../tools/types.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
 
 export async function run(
   input: Record<string, unknown>,
+  context: ToolContext,
 ): Promise<ToolExecutionResult> {
+  if (typeof input.change_summary === "string" && input.change_summary.trim()) {
+    setAppCommitMessage(context.conversationId, input.change_summary.trim());
+  }
   return executeAppGenerateIcon(
     input as unknown as AppGenerateIconInput,
     appStore,

package/src/config/bundled-skills/app-builder/tools/app-refresh.ts

@@ -1,3 +1,4 @@
+import { setAppCommitMessage } from "../../../../memory/app-git-service.js";
 import * as appStore from "../../../../memory/app-store.js";
 import { executeAppRefresh } from "../../../../tools/apps/executors.js";
 import type {
@@ -7,7 +8,10 @@ import type {
 
 export async function run(
   input: Record<string, unknown>,
-  _context: ToolContext,
+  context: ToolContext,
 ): Promise<ToolExecutionResult> {
+  if (typeof input.change_summary === "string" && input.change_summary.trim()) {
+    setAppCommitMessage(context.conversationId, input.change_summary.trim());
+  }
   return executeAppRefresh({ app_id: input.app_id as string }, appStore);
 }

package/src/config/bundled-skills/contacts/TOOLS.json

@@ -47,6 +47,14 @@
                 "is_primary": {
                   "type": "boolean",
                   "description": "Whether this is the primary channel for this type"
+                },
+                "external_user_id": {
+                  "type": "string",
+                  "description": "Platform-native user ID (e.g. Slack user ID like U12345). Used to cache user lookups."
+                },
+                "external_chat_id": {
+                  "type": "string",
+                  "description": "Platform-native chat/DM channel ID (e.g. Slack DM channel like D12345). Used to cache DM channel lookups."
                 }
               },
               "required": ["type", "address"]

package/src/config/bundled-skills/contacts/tools/contact-search.ts

@@ -11,6 +11,8 @@ interface ContactChannel {
   type: string;
   address: string;
   isPrimary: boolean;
+  externalUserId?: string | null;
+  externalChatId?: string | null;
 }
 
 interface ContactResponse {
@@ -28,7 +30,14 @@ function formatContactSummary(c: ContactResponse): string {
     parts.push(`  Interactions: ${c.interactionCount}`);
   if (c.channels.length > 0) {
     const channelList = c.channels
-      .map((ch) => `${ch.type}:${ch.address}${ch.isPrimary ? "*" : ""}`)
+      .map((ch) => {
+        let s = `${ch.type}:${ch.address}${ch.isPrimary ? "*" : ""}`;
+        const extras: string[] = [];
+        if (ch.externalUserId) extras.push(`userId: ${ch.externalUserId}`);
+        if (ch.externalChatId) extras.push(`chatId: ${ch.externalChatId}`);
+        if (extras.length > 0) s += ` (${extras.join(", ")})`;
+        return s;
+      })
       .join(", ");
     parts.push(`  Channels: ${channelList}`);
   }

package/src/config/bundled-skills/contacts/tools/contact-upsert.ts

@@ -11,6 +11,8 @@ interface ContactChannel {
   type: string;
   address: string;
   isPrimary: boolean;
+  externalUserId?: string | null;
+  externalChatId?: string | null;
 }
 
 interface ContactResponse {
@@ -30,7 +32,11 @@ function formatContact(c: ContactResponse): string {
     lines.push("  Channels:");
     for (const ch of c.channels) {
       const primary = ch.isPrimary ? " (primary)" : "";
-      lines.push(`    - ${ch.type}: ${ch.address}${primary}`);
+      const extras: string[] = [];
+      if (ch.externalUserId) extras.push(`userId: ${ch.externalUserId}`);
+      if (ch.externalChatId) extras.push(`chatId: ${ch.externalChatId}`);
+      const extrasStr = extras.length > 0 ? ` (${extras.join(", ")})` : "";
+      lines.push(`    - ${ch.type}: ${ch.address}${primary}${extrasStr}`);
     }
   }
   return lines.join("\n");
@@ -53,12 +59,20 @@ export async function executeContactUpsert(
   }
 
   const rawChannels = input.channels as
-    | Array<{ type: string; address: string; is_primary?: boolean }>
+    | Array<{
+        type: string;
+        address: string;
+        is_primary?: boolean;
+        external_user_id?: string;
+        external_chat_id?: string;
+      }>
     | undefined;
   const channels = rawChannels?.map((ch) => ({
     type: ch.type,
     address: ch.address,
     isPrimary: ch.is_primary,
+    externalUserId: ch.external_user_id,
+    externalChatId: ch.external_chat_id,
   }));
 
   try {

package/src/config/bundled-skills/media-processing/tools/ingest-media.ts

@@ -55,6 +55,7 @@ const MIME_MAP: Record<string, string> = {
   ".tiff": "image/tiff",
   ".svg": "image/svg+xml",
   ".heic": "image/heic",
+  ".heif": "image/heif",
 };
 
 function detectMimeType(filePath: string): string | null {