@vellumai/assistant 0.5.13 → 0.5.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (425) hide show
  1. package/.env.example +1 -6
  2. package/AGENTS.md +4 -0
  3. package/ARCHITECTURE.md +0 -1
  4. package/bunfig.toml +1 -0
  5. package/docs/architecture/memory.md +3 -3
  6. package/openapi.yaml +127 -22
  7. package/package.json +1 -1
  8. package/src/__tests__/access-request-decision.test.ts +2 -32
  9. package/src/__tests__/actor-token-service.test.ts +1 -31
  10. package/src/__tests__/anthropic-provider.test.ts +53 -40
  11. package/src/__tests__/app-git-history.test.ts +9 -17
  12. package/src/__tests__/app-git-service.test.ts +14 -20
  13. package/src/__tests__/app-store-dir-names.test.ts +10 -20
  14. package/src/__tests__/approval-cascade.test.ts +2 -19
  15. package/src/__tests__/approval-primitive.test.ts +2 -27
  16. package/src/__tests__/approval-routes-http.test.ts +2 -30
  17. package/src/__tests__/assistant-events-sse-hardening.test.ts +2 -28
  18. package/src/__tests__/assistant-feature-flags-integration.test.ts +2 -45
  19. package/src/__tests__/attachments-store.test.ts +5 -32
  20. package/src/__tests__/audit-log-rotation.test.ts +5 -36
  21. package/src/__tests__/avatar-e2e.test.ts +1 -9
  22. package/src/__tests__/avatar-generator.test.ts +1 -7
  23. package/src/__tests__/browser-fill-credential.test.ts +0 -4
  24. package/src/__tests__/browser-manager.test.ts +0 -6
  25. package/src/__tests__/call-controller.test.ts +1 -22
  26. package/src/__tests__/call-conversation-messages.test.ts +0 -21
  27. package/src/__tests__/call-domain.test.ts +0 -25
  28. package/src/__tests__/call-pointer-messages.test.ts +0 -21
  29. package/src/__tests__/call-recovery.test.ts +0 -22
  30. package/src/__tests__/call-routes-http.test.ts +0 -24
  31. package/src/__tests__/call-store.test.ts +0 -21
  32. package/src/__tests__/cancel-resolves-conversation-key.test.ts +0 -24
  33. package/src/__tests__/canonical-guardian-store.test.ts +48 -21
  34. package/src/__tests__/channel-approval-routes.test.ts +6 -26
  35. package/src/__tests__/channel-approvals.test.ts +1 -38
  36. package/src/__tests__/channel-delivery-store.test.ts +0 -21
  37. package/src/__tests__/channel-guardian.test.ts +0 -26
  38. package/src/__tests__/channel-reply-delivery.test.ts +5 -0
  39. package/src/__tests__/channel-retry-sweep.test.ts +0 -21
  40. package/src/__tests__/checker.test.ts +26 -61
  41. package/src/__tests__/clawhub.test.ts +9 -25
  42. package/src/__tests__/cli-command-risk-guard.test.ts +0 -18
  43. package/src/__tests__/config-loader-backfill.test.ts +9 -28
  44. package/src/__tests__/config-schema-cmd.test.ts +5 -25
  45. package/src/__tests__/config-schema.test.ts +21 -40
  46. package/src/__tests__/config-watcher.test.ts +4 -91
  47. package/src/__tests__/confirmation-request-guardian-bridge.test.ts +0 -21
  48. package/src/__tests__/contacts-tools.test.ts +0 -21
  49. package/src/__tests__/context-memory-e2e.test.ts +0 -21
  50. package/src/__tests__/context-window-manager.test.ts +130 -3
  51. package/src/__tests__/conversation-abort-tool-results.test.ts +0 -4
  52. package/src/__tests__/conversation-agent-loop-overflow.test.ts +0 -4
  53. package/src/__tests__/conversation-agent-loop.test.ts +0 -4
  54. package/src/__tests__/conversation-attachments.test.ts +1 -24
  55. package/src/__tests__/conversation-attention-store.test.ts +0 -21
  56. package/src/__tests__/conversation-attention-telegram.test.ts +0 -22
  57. package/src/__tests__/conversation-clear-safety.test.ts +0 -22
  58. package/src/__tests__/conversation-confirmation-signals.test.ts +2 -21
  59. package/src/__tests__/conversation-delete-schedule-cleanup.test.ts +0 -24
  60. package/src/__tests__/conversation-disk-view-integration.test.ts +1 -23
  61. package/src/__tests__/conversation-disk-view.test.ts +5 -27
  62. package/src/__tests__/conversation-error.test.ts +1 -1
  63. package/src/__tests__/conversation-fork-crud.test.ts +1 -33
  64. package/src/__tests__/conversation-fork-route.test.ts +0 -27
  65. package/src/__tests__/conversation-history-web-search.test.ts +23 -16
  66. package/src/__tests__/conversation-init.benchmark.test.ts +22 -43
  67. package/src/__tests__/conversation-key-store-disk-view.test.ts +8 -34
  68. package/src/__tests__/conversation-load-history-repair.test.ts +0 -4
  69. package/src/__tests__/conversation-pre-run-repair.test.ts +0 -4
  70. package/src/__tests__/conversation-provider-retry-repair.test.ts +0 -4
  71. package/src/__tests__/conversation-queue.test.ts +8 -8
  72. package/src/__tests__/conversation-routes-disk-view.test.ts +13 -51
  73. package/src/__tests__/conversation-runtime-assembly.test.ts +64 -38
  74. package/src/__tests__/conversation-slash-commands.test.ts +5 -0
  75. package/src/__tests__/conversation-slash-queue.test.ts +0 -4
  76. package/src/__tests__/conversation-slash-unknown.test.ts +0 -4
  77. package/src/__tests__/conversation-speed-override.test.ts +326 -0
  78. package/src/__tests__/conversation-starter-routes.test.ts +0 -23
  79. package/src/__tests__/conversation-store.test.ts +0 -21
  80. package/src/__tests__/conversation-unread-route.test.ts +0 -24
  81. package/src/__tests__/conversation-usage.test.ts +56 -21
  82. package/src/__tests__/conversation-wipe.test.ts +0 -21
  83. package/src/__tests__/conversation-workspace-cache-state.test.ts +0 -4
  84. package/src/__tests__/conversation-workspace-injection.test.ts +0 -4
  85. package/src/__tests__/conversation-workspace-tool-tracking.test.ts +0 -4
  86. package/src/__tests__/credential-execution-shell-lockdown.test.ts +8 -5
  87. package/src/__tests__/credential-vault-unit.test.ts +9 -428
  88. package/src/__tests__/credentials-cli.test.ts +10 -10
  89. package/src/__tests__/daemon-assistant-events.test.ts +0 -19
  90. package/src/__tests__/date-context.test.ts +77 -97
  91. package/src/__tests__/db-conversation-fork-lineage-migration.test.ts +7 -24
  92. package/src/__tests__/db-llm-request-log-provider-migration.test.ts +29 -42
  93. package/src/__tests__/delete-managed-skill-tool.test.ts +2 -10
  94. package/src/__tests__/deterministic-verification-control-plane.test.ts +1 -26
  95. package/src/__tests__/docker-signing-key-bootstrap.test.ts +61 -15
  96. package/src/__tests__/dynamic-skill-workflow-prompt.test.ts +2 -36
  97. package/src/__tests__/email-cli.test.ts +6 -6
  98. package/src/__tests__/ephemeral-permissions.test.ts +5 -17
  99. package/src/__tests__/first-greeting.test.ts +4 -32
  100. package/src/__tests__/followup-tools.test.ts +0 -21
  101. package/src/__tests__/gateway-only-enforcement.test.ts +0 -20
  102. package/src/__tests__/guardian-action-conversation-turn.test.ts +0 -23
  103. package/src/__tests__/guardian-action-followup-executor.test.ts +0 -23
  104. package/src/__tests__/guardian-action-followup-store.test.ts +0 -21
  105. package/src/__tests__/guardian-action-grant-mint-consume.test.ts +0 -21
  106. package/src/__tests__/guardian-action-late-reply.test.ts +0 -21
  107. package/src/__tests__/guardian-action-store.test.ts +0 -21
  108. package/src/__tests__/guardian-action-sweep.test.ts +0 -21
  109. package/src/__tests__/guardian-binding-drift-heal.test.ts +0 -23
  110. package/src/__tests__/guardian-decision-primitive-canonical.test.ts +172 -22
  111. package/src/__tests__/guardian-dispatch.test.ts +0 -21
  112. package/src/__tests__/guardian-grant-minting.test.ts +0 -22
  113. package/src/__tests__/guardian-outbound-http.test.ts +0 -22
  114. package/src/__tests__/guardian-principal-id-roundtrip.test.ts +0 -23
  115. package/src/__tests__/guardian-routing-invariants.test.ts +0 -22
  116. package/src/__tests__/guardian-routing-state.test.ts +0 -22
  117. package/src/__tests__/guardian-verification-voice-binding.test.ts +0 -24
  118. package/src/__tests__/headless-browser-interactions.test.ts +0 -4
  119. package/src/__tests__/headless-browser-navigate.test.ts +0 -4
  120. package/src/__tests__/headless-browser-read-tools.test.ts +0 -4
  121. package/src/__tests__/headless-browser-snapshot.test.ts +0 -4
  122. package/src/__tests__/heartbeat-service.test.ts +99 -26
  123. package/src/__tests__/hooks-blocking.test.ts +3 -3
  124. package/src/__tests__/hooks-config.test.ts +7 -7
  125. package/src/__tests__/hooks-discovery.test.ts +3 -3
  126. package/src/__tests__/hooks-integration.test.ts +5 -5
  127. package/src/__tests__/hooks-manager.test.ts +3 -3
  128. package/src/__tests__/hooks-runner.test.ts +5 -23
  129. package/src/__tests__/hooks-settings.test.ts +3 -3
  130. package/src/__tests__/hooks-templates.test.ts +3 -3
  131. package/src/__tests__/http-conversation-lineage.test.ts +0 -27
  132. package/src/__tests__/identity-intro-cache.test.ts +0 -4
  133. package/src/__tests__/inbound-invite-redemption.test.ts +0 -22
  134. package/src/__tests__/inline-skill-load-permissions.test.ts +5 -16
  135. package/src/__tests__/intent-routing.test.ts +2 -55
  136. package/src/__tests__/invite-redemption-service.test.ts +0 -21
  137. package/src/__tests__/invite-routes-http.test.ts +0 -21
  138. package/src/__tests__/jobs-store-qdrant-breaker.test.ts +0 -17
  139. package/src/__tests__/journal-context.test.ts +8 -75
  140. package/src/__tests__/list-messages-attachments.test.ts +0 -22
  141. package/src/__tests__/llm-context-route-provider.test.ts +0 -21
  142. package/src/__tests__/llm-request-log-turn-query.test.ts +46 -28
  143. package/src/__tests__/llm-usage-store.test.ts +0 -21
  144. package/src/__tests__/log-export-workspace.test.ts +1 -1
  145. package/src/__tests__/managed-skill-lifecycle.test.ts +1 -1
  146. package/src/__tests__/managed-store.test.ts +1 -1
  147. package/src/__tests__/mcp-cli.test.ts +7 -10
  148. package/src/__tests__/memory-context-benchmark.benchmark.test.ts +0 -21
  149. package/src/__tests__/memory-jobs-worker-backoff.test.ts +0 -11
  150. package/src/__tests__/memory-lifecycle-e2e.test.ts +0 -21
  151. package/src/__tests__/memory-recall-log-store.test.ts +0 -27
  152. package/src/__tests__/memory-recall-quality.test.ts +0 -21
  153. package/src/__tests__/memory-regressions.experimental.test.ts +31 -30
  154. package/src/__tests__/memory-regressions.test.ts +282 -70
  155. package/src/__tests__/memory-retrieval.benchmark.test.ts +0 -21
  156. package/src/__tests__/memory-upsert-concurrency.test.ts +0 -21
  157. package/src/__tests__/messaging-send-tool.test.ts +201 -0
  158. package/src/__tests__/migration-cross-version-compatibility.test.ts +18 -13
  159. package/src/__tests__/migration-export-http.test.ts +7 -1
  160. package/src/__tests__/migration-import-commit-http.test.ts +16 -14
  161. package/src/__tests__/migration-import-preflight-http.test.ts +27 -44
  162. package/src/__tests__/migration-validate-http.test.ts +1 -28
  163. package/src/__tests__/native-web-search.test.ts +25 -22
  164. package/src/__tests__/non-member-access-request.test.ts +0 -22
  165. package/src/__tests__/notification-guardian-path.test.ts +0 -21
  166. package/src/__tests__/notification-schedule-dedup.test.ts +1 -25
  167. package/src/__tests__/oauth-apps-routes.test.ts +103 -2
  168. package/src/__tests__/oauth-cli.test.ts +52 -0
  169. package/src/__tests__/oauth-provider-profiles.test.ts +0 -16
  170. package/src/__tests__/oauth-provider-serializer.test.ts +232 -0
  171. package/src/__tests__/oauth-providers-routes.test.ts +257 -0
  172. package/src/__tests__/oauth-store.test.ts +0 -21
  173. package/src/__tests__/onboarding-template-contract.test.ts +2 -2
  174. package/src/__tests__/openai-provider.test.ts +261 -0
  175. package/src/__tests__/pairing-concurrent.test.ts +6 -6
  176. package/src/__tests__/pairing-routes.test.ts +7 -1
  177. package/src/__tests__/path-policy.test.ts +1 -1
  178. package/src/__tests__/platform.test.ts +64 -88
  179. package/src/__tests__/playbook-execution.test.ts +0 -21
  180. package/src/__tests__/playbook-tools.test.ts +0 -21
  181. package/src/__tests__/pricing.test.ts +100 -0
  182. package/src/__tests__/relay-server.test.ts +1 -25
  183. package/src/__tests__/runtime-attachment-metadata.test.ts +0 -24
  184. package/src/__tests__/runtime-events-sse-parity.test.ts +2 -24
  185. package/src/__tests__/runtime-events-sse.test.ts +0 -24
  186. package/src/__tests__/sandbox-diagnostics.test.ts +2 -1
  187. package/src/__tests__/scaffold-managed-skill-tool.test.ts +1 -1
  188. package/src/__tests__/schedule-store.test.ts +0 -21
  189. package/src/__tests__/schedule-tools.test.ts +0 -21
  190. package/src/__tests__/scheduler-recurrence.test.ts +0 -21
  191. package/src/__tests__/scoped-approval-grants.test.ts +0 -21
  192. package/src/__tests__/scoped-grant-security-matrix.test.ts +0 -21
  193. package/src/__tests__/secret-allowlist.test.ts +1 -1
  194. package/src/__tests__/secret-ingress-channel.test.ts +0 -5
  195. package/src/__tests__/secret-ingress-cli.test.ts +0 -6
  196. package/src/__tests__/secret-ingress-http.test.ts +0 -5
  197. package/src/__tests__/secret-ingress.test.ts +0 -5
  198. package/src/__tests__/send-endpoint-busy.test.ts +0 -24
  199. package/src/__tests__/sequence-store.test.ts +0 -21
  200. package/src/__tests__/server-history-render.test.ts +0 -24
  201. package/src/__tests__/shell-tool-proxy-mode.test.ts +0 -4
  202. package/src/__tests__/skill-load-inline-command.test.ts +9 -0
  203. package/src/__tests__/skill-load-inline-includes.test.ts +9 -0
  204. package/src/__tests__/skill-load-tool.test.ts +11 -0
  205. package/src/__tests__/skills-uninstall.test.ts +10 -8
  206. package/src/__tests__/skills.test.ts +1 -1
  207. package/src/__tests__/slack-channel-config.test.ts +1 -1
  208. package/src/__tests__/slack-inbound-verification.test.ts +0 -22
  209. package/src/__tests__/starter-bundle.test.ts +4 -1
  210. package/src/__tests__/suggestion-routes.test.ts +2 -0
  211. package/src/__tests__/system-prompt.test.ts +1 -1
  212. package/src/__tests__/terminal-tools.test.ts +1 -1
  213. package/src/__tests__/test-preload.ts +31 -0
  214. package/src/__tests__/tool-execution-abort-cleanup.test.ts +1 -1
  215. package/src/__tests__/tool-execution-pipeline.benchmark.test.ts +1 -1
  216. package/src/__tests__/tool-executor.test.ts +0 -20
  217. package/src/__tests__/tool-input-summary.test.ts +124 -0
  218. package/src/__tests__/tool-preview-lifecycle.test.ts +2 -1
  219. package/src/__tests__/trust-store.test.ts +7 -1
  220. package/src/__tests__/trusted-contact-inline-approval-integration.test.ts +1 -1
  221. package/src/__tests__/trusted-contact-lifecycle-notifications.test.ts +1 -1
  222. package/src/__tests__/trusted-contact-multichannel.test.ts +1 -1
  223. package/src/__tests__/trusted-contact-verification.test.ts +1 -1
  224. package/src/__tests__/turn-boundary-resolution.test.ts +1 -1
  225. package/src/__tests__/twilio-routes.test.ts +1 -1
  226. package/src/__tests__/update-bulletin.test.ts +1 -1
  227. package/src/__tests__/vbundle-pax-and-symlink.test.ts +1 -1
  228. package/src/__tests__/vellum-self-knowledge-inline-command.test.ts +1 -0
  229. package/src/__tests__/voice-scoped-grant-consumer.test.ts +1 -1
  230. package/src/__tests__/voice-session-bridge.test.ts +1 -1
  231. package/src/__tests__/workspace-migration-009-backfill-conversation-disk-view.test.ts +4 -4
  232. package/src/__tests__/workspace-migration-013-repair-conversation-disk-view.test.ts +1 -1
  233. package/src/__tests__/workspace-migration-down-functions.test.ts +15 -3
  234. package/src/__tests__/workspace-migration-seed-device-id.test.ts +40 -4
  235. package/src/agent/loop.ts +6 -9
  236. package/src/approvals/guardian-decision-primitive.ts +46 -18
  237. package/src/approvals/guardian-request-resolvers.ts +19 -2
  238. package/src/calls/active-call-lease.ts +2 -2
  239. package/src/cli/AGENTS.md +1 -1
  240. package/src/cli/commands/doctor.ts +9 -9
  241. package/src/cli/commands/memory.ts +142 -0
  242. package/src/cli/commands/oauth/__tests__/connect.test.ts +13 -11
  243. package/src/cli/commands/oauth/__tests__/ping.test.ts +1 -1
  244. package/src/cli/commands/oauth/connect.ts +13 -12
  245. package/src/cli/commands/oauth/index.ts +1 -1
  246. package/src/cli/commands/oauth/providers.ts +47 -62
  247. package/src/cli/commands/platform/__tests__/connect.test.ts +72 -46
  248. package/src/cli/commands/platform/__tests__/disconnect.test.ts +54 -1
  249. package/src/cli/commands/platform/__tests__/status.test.ts +36 -0
  250. package/src/cli/commands/platform/connect.ts +17 -7
  251. package/src/cli/commands/platform/disconnect.ts +28 -3
  252. package/src/cli/commands/platform/index.ts +3 -3
  253. package/src/cli.ts +1 -299
  254. package/src/config/assistant-feature-flags.ts +23 -15
  255. package/src/config/bundled-skills/app-builder/TOOLS.json +16 -0
  256. package/src/config/bundled-skills/app-builder/tools/app-create.ts +4 -0
  257. package/src/config/bundled-skills/app-builder/tools/app-delete.ts +5 -1
  258. package/src/config/bundled-skills/app-builder/tools/app-generate-icon.ts +9 -1
  259. package/src/config/bundled-skills/app-builder/tools/app-refresh.ts +5 -1
  260. package/src/config/bundled-skills/contacts/TOOLS.json +8 -0
  261. package/src/config/bundled-skills/contacts/tools/contact-search.ts +10 -1
  262. package/src/config/bundled-skills/contacts/tools/contact-upsert.ts +16 -2
  263. package/src/config/bundled-skills/media-processing/tools/ingest-media.ts +1 -0
  264. package/src/config/bundled-skills/messaging/SKILL.md +7 -7
  265. package/src/config/bundled-skills/messaging/tools/messaging-send.ts +37 -0
  266. package/src/config/bundled-skills/slack/SKILL.md +18 -0
  267. package/src/config/env-registry.ts +15 -11
  268. package/src/config/env.ts +1 -11
  269. package/src/config/feature-flag-registry.json +16 -0
  270. package/src/config/schema.ts +4 -0
  271. package/src/config/schemas/heartbeat.ts +6 -1
  272. package/src/config/schemas/inference.ts +14 -3
  273. package/src/config/schemas/memory-processing.ts +16 -8
  274. package/src/config/schemas/memory-retrieval.ts +3 -3
  275. package/src/config/skills.ts +1 -1
  276. package/src/context/window-manager.ts +174 -51
  277. package/src/credential-execution/executable-discovery.ts +2 -2
  278. package/src/daemon/approved-devices-store.ts +2 -2
  279. package/src/daemon/assistant-attachments.ts +2 -0
  280. package/src/daemon/config-watcher.ts +4 -50
  281. package/src/daemon/conversation-agent-loop-handlers.ts +9 -1
  282. package/src/daemon/conversation-agent-loop.ts +12 -0
  283. package/src/daemon/conversation-error.ts +3 -5
  284. package/src/daemon/conversation-history.ts +7 -3
  285. package/src/daemon/conversation-lifecycle.ts +16 -0
  286. package/src/daemon/conversation-messaging.ts +1 -0
  287. package/src/daemon/conversation-notifiers.ts +67 -30
  288. package/src/daemon/conversation-process.ts +161 -2
  289. package/src/daemon/conversation-queue-manager.ts +2 -0
  290. package/src/daemon/conversation-runtime-assembly.ts +33 -11
  291. package/src/daemon/conversation-slash.ts +14 -3
  292. package/src/daemon/conversation-tool-setup.ts +2 -0
  293. package/src/daemon/conversation-usage.ts +32 -4
  294. package/src/daemon/conversation.ts +33 -1
  295. package/src/daemon/daemon-control.ts +32 -16
  296. package/src/daemon/date-context.ts +47 -45
  297. package/src/daemon/dictation-profile-store.ts +2 -2
  298. package/src/daemon/handlers/conversations.ts +19 -0
  299. package/src/daemon/handlers/shared.ts +14 -21
  300. package/src/daemon/lifecycle.ts +5 -7
  301. package/src/daemon/message-types/conversations.ts +2 -0
  302. package/src/daemon/message-types/guardian-actions.ts +3 -17
  303. package/src/daemon/message-types/integrations.ts +11 -1
  304. package/src/daemon/message-types/messages.ts +1 -0
  305. package/src/daemon/pairing-store.ts +2 -79
  306. package/src/daemon/server.ts +154 -8
  307. package/src/daemon/watch-handler.ts +65 -21
  308. package/src/email/guardrails.ts +3 -3
  309. package/src/heartbeat/heartbeat-service.ts +14 -7
  310. package/src/hooks/cli.ts +2 -2
  311. package/src/hooks/config.ts +2 -2
  312. package/src/hooks/discovery.ts +2 -2
  313. package/src/hooks/manager.ts +2 -2
  314. package/src/hooks/runner.ts +5 -2
  315. package/src/hooks/templates.ts +2 -2
  316. package/src/memory/admin.ts +181 -2
  317. package/src/memory/app-git-service.ts +61 -4
  318. package/src/memory/attachments-store.ts +2 -0
  319. package/src/memory/canonical-guardian-store.ts +16 -0
  320. package/src/memory/db-init.ts +8 -0
  321. package/src/memory/embedding-local.ts +5 -2
  322. package/src/memory/indexer.ts +44 -26
  323. package/src/memory/items-extractor.ts +34 -82
  324. package/src/memory/job-handlers/batch-extraction.ts +741 -0
  325. package/src/memory/job-handlers/journal-carry-forward.test.ts +383 -0
  326. package/src/memory/job-handlers/journal-carry-forward.ts +255 -0
  327. package/src/memory/jobs-store.ts +28 -0
  328. package/src/memory/jobs-worker.ts +56 -9
  329. package/src/memory/lifecycle-events-store.ts +4 -2
  330. package/src/memory/llm-request-log-store.ts +40 -2
  331. package/src/memory/llm-usage-store.ts +4 -3
  332. package/src/memory/migrations/199-guardian-request-enrichment-columns.ts +71 -0
  333. package/src/memory/migrations/200-usage-llm-call-count.ts +20 -0
  334. package/src/memory/migrations/index.ts +2 -0
  335. package/src/memory/query-expansion.ts +83 -0
  336. package/src/memory/retriever.test.ts +119 -0
  337. package/src/memory/retriever.ts +513 -105
  338. package/src/memory/schema/guardian.ts +4 -0
  339. package/src/memory/schema/infrastructure.ts +1 -0
  340. package/src/memory/search/formatting.test.ts +140 -0
  341. package/src/memory/search/formatting.ts +143 -198
  342. package/src/memory/search/mmr.ts +136 -0
  343. package/src/memory/search/staleness.ts +0 -15
  344. package/src/memory/search/tier-classifier.ts +10 -21
  345. package/src/memory/search/types.ts +17 -0
  346. package/src/messaging/providers/slack/adapter.ts +51 -5
  347. package/src/notifications/broadcaster.ts +13 -0
  348. package/src/notifications/copy-composer.ts +8 -0
  349. package/src/oauth/connect-orchestrator.ts +1 -1
  350. package/src/oauth/connection-resolver.ts +2 -2
  351. package/src/oauth/provider-serializer.ts +116 -0
  352. package/src/permissions/trust-store.ts +24 -7
  353. package/src/prompts/__tests__/build-cli-reference-section.test.ts +5 -0
  354. package/src/prompts/journal-context.ts +50 -35
  355. package/src/prompts/persona-resolver.ts +1 -1
  356. package/src/prompts/system-prompt.ts +27 -28
  357. package/src/prompts/templates/BOOTSTRAP.md +14 -1
  358. package/src/prompts/templates/HEARTBEAT.md +10 -0
  359. package/src/prompts/templates/NOW.md +19 -25
  360. package/src/prompts/templates/SOUL.md +13 -1
  361. package/src/prompts/templates/UPDATES.md +12 -0
  362. package/src/prompts/update-bulletin.ts +1 -1
  363. package/src/providers/anthropic/client.ts +89 -18
  364. package/src/providers/model-catalog.ts +22 -2
  365. package/src/providers/model-intents.ts +2 -2
  366. package/src/providers/openai/client.ts +40 -1
  367. package/src/providers/retry.ts +23 -4
  368. package/src/providers/types.ts +2 -0
  369. package/src/runtime/assistant-scope.ts +1 -1
  370. package/src/runtime/auth/__tests__/credential-service.test.ts +1 -0
  371. package/src/runtime/auth/route-policy.ts +1 -0
  372. package/src/runtime/auth/token-service.ts +51 -29
  373. package/src/runtime/confirmation-request-guardian-bridge.ts +3 -1
  374. package/src/runtime/guardian-decision-types.ts +16 -10
  375. package/src/runtime/http-server.ts +3 -14
  376. package/src/runtime/http-types.ts +1 -0
  377. package/src/runtime/migrations/vbundle-builder.ts +7 -4
  378. package/src/runtime/migrations/vbundle-import-analyzer.ts +0 -4
  379. package/src/runtime/migrations/vbundle-importer.ts +1 -1
  380. package/src/runtime/routes/conversation-query-routes.ts +40 -8
  381. package/src/runtime/routes/conversation-routes.ts +125 -3
  382. package/src/runtime/routes/guardian-action-routes.ts +9 -3
  383. package/src/runtime/routes/identity-routes.ts +25 -4
  384. package/src/runtime/routes/llm-context-normalization.ts +1 -0
  385. package/src/runtime/routes/log-export-routes.ts +34 -12
  386. package/src/runtime/routes/migration-routes.ts +6 -10
  387. package/src/runtime/routes/oauth-apps.ts +2 -9
  388. package/src/runtime/routes/oauth-providers.ts +60 -0
  389. package/src/runtime/routes/pairing-routes.ts +0 -8
  390. package/src/runtime/routes/settings-routes.ts +0 -1
  391. package/src/runtime/routes/telemetry-routes.ts +16 -4
  392. package/src/security/encrypted-store.ts +2 -2
  393. package/src/security/secret-allowlist.ts +3 -3
  394. package/src/signals/emit-event.ts +42 -0
  395. package/src/signals/user-message.ts +37 -0
  396. package/src/telemetry/usage-telemetry-reporter.test.ts +83 -19
  397. package/src/telemetry/usage-telemetry-reporter.ts +23 -17
  398. package/src/tools/browser/runtime-check.ts +2 -2
  399. package/src/tools/credentials/vault.ts +2 -249
  400. package/src/tools/memory/definitions.ts +1 -1
  401. package/src/tools/memory/handlers.test.ts +50 -8
  402. package/src/tools/memory/handlers.ts +3 -1
  403. package/src/tools/side-effects.ts +1 -6
  404. package/src/tools/terminal/safe-env.ts +3 -2
  405. package/src/tools/terminal/shell.ts +11 -14
  406. package/src/tools/tool-approval-handler.ts +20 -1
  407. package/src/tools/tool-input-summary.ts +66 -0
  408. package/src/tools/types.ts +4 -0
  409. package/src/usage/types.ts +4 -0
  410. package/src/util/device-id.ts +10 -10
  411. package/src/util/platform.ts +71 -33
  412. package/src/util/pricing.ts +19 -6
  413. package/src/util/strip-comment-lines.ts +28 -0
  414. package/src/workspace/git-service.ts +8 -18
  415. package/src/workspace/migrations/003-seed-device-id.ts +6 -4
  416. package/src/workspace/migrations/016-extract-feature-flags-to-protected.ts +7 -1
  417. package/src/workspace/migrations/017-seed-persona-dirs.ts +2 -4
  418. package/src/workspace/migrations/021-move-signals-to-workspace.ts +84 -0
  419. package/src/workspace/migrations/022-move-hooks-to-workspace.ts +94 -0
  420. package/src/workspace/migrations/023-move-config-files-to-workspace.ts +86 -0
  421. package/src/workspace/migrations/024-move-runtime-files-to-workspace.ts +126 -0
  422. package/src/workspace/migrations/migrate-to-workspace-volume.ts +3 -6
  423. package/src/workspace/migrations/registry.ts +8 -0
  424. package/src/signals/confirm.ts +0 -82
  425. package/src/signals/trust-rule.ts +0 -174
@@ -6,7 +6,6 @@ import { beforeEach, describe, expect, mock, test } from "bun:test";
6
6
 
7
7
  let mockRouterResult: unknown;
8
8
  let mockRouterError: Error | undefined;
9
- let mockWorkspaceDir = "/tmp/test-workspace";
10
9
 
11
10
  const generateAvatarFn = mock(async () => {
12
11
  if (mockRouterError) throw mockRouterError;
@@ -34,10 +33,6 @@ mock.module("../util/logger.js", () => ({
34
33
  }),
35
34
  }));
36
35
 
37
- mock.module("../util/platform.js", () => ({
38
- getWorkspaceDir: () => mockWorkspaceDir,
39
- }));
40
-
41
36
  mock.module("node:fs", () => ({
42
37
  mkdirSync: mkdirSyncFn,
43
38
  writeFileSync: writeFileSyncFn,
@@ -70,7 +65,6 @@ describe("generateAndSaveAvatar", () => {
70
65
  beforeEach(() => {
71
66
  mockRouterResult = successResult();
72
67
  mockRouterError = undefined;
73
- mockWorkspaceDir = "/tmp/test-workspace";
74
68
  generateAvatarFn.mockClear();
75
69
  mkdirSyncFn.mockClear();
76
70
  writeFileSyncFn.mockClear();
@@ -116,7 +110,7 @@ describe("generateAndSaveAvatar", () => {
116
110
  test("atomic write — file is written to .tmp then renamed", async () => {
117
111
  await executeAvatar("a friendly cat");
118
112
 
119
- const expectedPath = "/tmp/test-workspace/data/avatar/avatar-image.png";
113
+ const expectedPath = `${process.env.VELLUM_WORKSPACE_DIR}/data/avatar/avatar-image.png`;
120
114
 
121
115
  // Verify mkdirSync was called for the directory
122
116
  expect(mkdirSyncFn).toHaveBeenCalledTimes(1);
@@ -9,10 +9,6 @@ mock.module("../util/logger.js", () => ({
9
9
  }),
10
10
  }));
11
11
 
12
- mock.module("../util/platform.js", () => ({
13
- getDataDir: () => "/tmp/browser-fill-credential-test",
14
- }));
15
-
16
12
  let mockPage: {
17
13
  click: ReturnType<typeof mock>;
18
14
  fill: ReturnType<typeof mock>;
@@ -1,11 +1,5 @@
1
1
  import { beforeEach, describe, expect, mock, test } from "bun:test";
2
2
 
3
- // Mock platform so we don't touch real ~/.vellum
4
- const testDataDir = "/tmp/browser-manager-test";
5
- mock.module("../util/platform.js", () => ({
6
- getDataDir: () => testDataDir,
7
- }));
8
-
9
3
  mock.module("../util/logger.js", () => ({
10
4
  getLogger: () =>
11
5
  new Proxy({} as Record<string, unknown>, {
@@ -1,6 +1,3 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import {
5
2
  afterAll,
6
3
  beforeEach,
@@ -13,20 +10,7 @@ import {
13
10
 
14
11
  mock.module("../config/env.js", () => ({ isHttpAuthDisabled: () => true }));
15
12
 
16
- const testDir = mkdtempSync(join(tmpdir(), "call-controller-test-"));
17
-
18
- // ── Platform + logger mocks (must come before any source imports) ────
19
-
20
- mock.module("../util/platform.js", () => ({
21
- getDataDir: () => testDir,
22
- isMacOS: () => process.platform === "darwin",
23
- isLinux: () => process.platform === "linux",
24
- isWindows: () => process.platform === "win32",
25
- getPidPath: () => join(testDir, "test.pid"),
26
- getDbPath: () => join(testDir, "test.db"),
27
- getLogPath: () => join(testDir, "test.log"),
28
- ensureDataDir: () => {},
29
- }));
13
+ // ── Logger mock (must come before any source imports) ────
30
14
 
31
15
  mock.module("../util/logger.js", () => ({
32
16
  getLogger: () =>
@@ -168,11 +152,6 @@ initializeDb();
168
152
 
169
153
  afterAll(() => {
170
154
  resetDb();
171
- try {
172
- rmSync(testDir, { recursive: true });
173
- } catch {
174
- /* best effort */
175
- }
176
155
  });
177
156
 
178
157
  // ── RelayConnection mock factory ────────────────────────────────────
@@ -1,21 +1,5 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
5
2
 
6
- const testDir = mkdtempSync(join(tmpdir(), "call-conversation-messages-test-"));
7
-
8
- mock.module("../util/platform.js", () => ({
9
- getDataDir: () => testDir,
10
- isMacOS: () => process.platform === "darwin",
11
- isLinux: () => process.platform === "linux",
12
- isWindows: () => process.platform === "win32",
13
- getPidPath: () => join(testDir, "test.pid"),
14
- getDbPath: () => join(testDir, "test.db"),
15
- getLogPath: () => join(testDir, "test.log"),
16
- ensureDataDir: () => {},
17
- }));
18
-
19
3
  mock.module("../util/logger.js", () => ({
20
4
  getLogger: () =>
21
5
  new Proxy({} as Record<string, unknown>, {
@@ -83,11 +67,6 @@ describe("call-conversation-messages", () => {
83
67
 
84
68
  afterAll(() => {
85
69
  resetDb();
86
- try {
87
- rmSync(testDir, { recursive: true });
88
- } catch {
89
- // best-effort cleanup
90
- }
91
70
  });
92
71
 
93
72
  test("buildCallCompletionMessage labels failed calls correctly", () => {
@@ -7,25 +7,8 @@
7
7
  * - Voice-ingress preflight blocks doomed outbound calls before Twilio dialing.
8
8
  * - Pointer messages are written on successful call start and on failure.
9
9
  */
10
- import { mkdtempSync, realpathSync, rmSync } from "node:fs";
11
- import { tmpdir } from "node:os";
12
- import { join } from "node:path";
13
10
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
14
11
 
15
- const testDir = realpathSync(mkdtempSync(join(tmpdir(), "call-domain-test-")));
16
-
17
- mock.module("../util/platform.js", () => ({
18
- getRootDir: () => testDir,
19
- getDataDir: () => testDir,
20
- isMacOS: () => process.platform === "darwin",
21
- isLinux: () => process.platform === "linux",
22
- isWindows: () => process.platform === "win32",
23
- getPidPath: () => join(testDir, "test.pid"),
24
- getDbPath: () => join(testDir, "test.db"),
25
- getLogPath: () => join(testDir, "test.log"),
26
- ensureDataDir: () => {},
27
- }));
28
-
29
12
  mock.module("../util/logger.js", () => ({
30
13
  getLogger: () =>
31
14
  new Proxy({} as Record<string, unknown>, {
@@ -40,7 +23,6 @@ let twilioInitiateCallArgs: Array<Record<string, unknown>> = [];
40
23
  let mockIngressEnabled = true;
41
24
  let mockIngressPublicBaseUrl = "https://test.example.com";
42
25
 
43
-
44
26
  mock.module("../calls/twilio-config.js", () => ({
45
27
  getTwilioConfig: (assistantId?: string) => ({
46
28
  accountSid: "AC_test",
@@ -120,7 +102,6 @@ mock.module("../memory/conversation-title-service.js", () => ({
120
102
  queueGenerateConversationTitle: () => {},
121
103
  }));
122
104
 
123
-
124
105
  mock.module("../daemon/handlers/config-ingress.js", () => ({
125
106
  computeGatewayTarget: () => "http://127.0.0.1:7830",
126
107
  handleIngressConfig: async () => {},
@@ -206,11 +187,6 @@ function getLatestAssistantText(conversationId: string): string | null {
206
187
 
207
188
  afterAll(() => {
208
189
  resetDb();
209
- try {
210
- rmSync(testDir, { recursive: true });
211
- } catch {
212
- /* best effort */
213
- }
214
190
  });
215
191
 
216
192
  function makeConfig(
@@ -397,7 +373,6 @@ describe("startCall — pointer message regression", () => {
397
373
  expect(text!).toContain("failed");
398
374
  });
399
375
 
400
-
401
376
  test("failed call writes a failed pointer to the initiating conversation", async () => {
402
377
  const convId = "conv-domain-ptr-fail";
403
378
  ensureConversation(convId);
@@ -1,6 +1,3 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import {
5
2
  afterAll,
6
3
  afterEach,
@@ -11,19 +8,6 @@ import {
11
8
  test,
12
9
  } from "bun:test";
13
10
 
14
- const testDir = mkdtempSync(join(tmpdir(), "call-pointer-messages-test-"));
15
-
16
- mock.module("../util/platform.js", () => ({
17
- getDataDir: () => testDir,
18
- isMacOS: () => process.platform === "darwin",
19
- isLinux: () => process.platform === "linux",
20
- isWindows: () => process.platform === "win32",
21
- getPidPath: () => join(testDir, "test.pid"),
22
- getDbPath: () => join(testDir, "test.db"),
23
- getLogPath: () => join(testDir, "test.log"),
24
- ensureDataDir: () => {},
25
- }));
26
-
27
11
  mock.module("../util/logger.js", () => ({
28
12
  getLogger: () =>
29
13
  new Proxy({} as Record<string, unknown>, {
@@ -128,11 +112,6 @@ describe("addPointerMessage", () => {
128
112
 
129
113
  afterAll(() => {
130
114
  resetDb();
131
- try {
132
- rmSync(testDir, { recursive: true });
133
- } catch {
134
- /* best effort */
135
- }
136
115
  });
137
116
 
138
117
  test("adds a started pointer message", () => {
@@ -1,22 +1,5 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
5
2
 
6
- const testDir = mkdtempSync(join(tmpdir(), "call-recovery-test-"));
7
-
8
- mock.module("../util/platform.js", () => ({
9
- getRootDir: () => testDir,
10
- getDataDir: () => testDir,
11
- isMacOS: () => process.platform === "darwin",
12
- isLinux: () => process.platform === "linux",
13
- isWindows: () => process.platform === "win32",
14
- getPidPath: () => join(testDir, "test.pid"),
15
- getDbPath: () => join(testDir, "test.db"),
16
- getLogPath: () => join(testDir, "test.log"),
17
- ensureDataDir: () => {},
18
- }));
19
-
20
3
  mock.module("../util/logger.js", () => ({
21
4
  getLogger: () =>
22
5
  new Proxy({} as Record<string, unknown>, {
@@ -50,11 +33,6 @@ initializeDb();
50
33
 
51
34
  afterAll(() => {
52
35
  resetDb();
53
- try {
54
- rmSync(testDir, { recursive: true });
55
- } catch {
56
- /* best effort */
57
- }
58
36
  });
59
37
 
60
38
  /** Ensure a conversation row exists for the given ID so FK constraints pass. */
@@ -5,29 +5,10 @@
5
5
  * POST /v1/calls/:id/cancel, and POST /v1/calls/:id/answer
6
6
  * through RuntimeHttpServer.
7
7
  */
8
- import { mkdtempSync, realpathSync, rmSync } from "node:fs";
9
- import { tmpdir } from "node:os";
10
- import { join } from "node:path";
11
8
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
12
9
 
13
10
  mock.module("../config/env.js", () => ({ isHttpAuthDisabled: () => true }));
14
11
 
15
- const testDir = realpathSync(
16
- mkdtempSync(join(tmpdir(), "call-routes-http-test-")),
17
- );
18
-
19
- mock.module("../util/platform.js", () => ({
20
- getRootDir: () => testDir,
21
- getDataDir: () => testDir,
22
- isMacOS: () => process.platform === "darwin",
23
- isLinux: () => process.platform === "linux",
24
- isWindows: () => process.platform === "win32",
25
- getPidPath: () => join(testDir, "test.pid"),
26
- getDbPath: () => join(testDir, "test.db"),
27
- getLogPath: () => join(testDir, "test.log"),
28
- ensureDataDir: () => {},
29
- }));
30
-
31
12
  mock.module("../util/logger.js", () => ({
32
13
  getLogger: () =>
33
14
  new Proxy({} as Record<string, unknown>, {
@@ -183,11 +164,6 @@ describe("runtime call routes — HTTP layer", () => {
183
164
 
184
165
  afterAll(() => {
185
166
  resetDb();
186
- try {
187
- rmSync(testDir, { recursive: true, force: true });
188
- } catch {
189
- /* best effort */
190
- }
191
167
  });
192
168
 
193
169
  async function startServer(): Promise<void> {
@@ -1,21 +1,5 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
5
2
 
6
- const testDir = mkdtempSync(join(tmpdir(), "call-store-test-"));
7
-
8
- mock.module("../util/platform.js", () => ({
9
- getDataDir: () => testDir,
10
- isMacOS: () => process.platform === "darwin",
11
- isLinux: () => process.platform === "linux",
12
- isWindows: () => process.platform === "win32",
13
- getPidPath: () => join(testDir, "test.pid"),
14
- getDbPath: () => join(testDir, "test.db"),
15
- getLogPath: () => join(testDir, "test.log"),
16
- ensureDataDir: () => {},
17
- }));
18
-
19
3
  mock.module("../util/logger.js", () => ({
20
4
  getLogger: () =>
21
5
  new Proxy({} as Record<string, unknown>, {
@@ -46,11 +30,6 @@ initializeDb();
46
30
 
47
31
  afterAll(() => {
48
32
  resetDb();
49
- try {
50
- rmSync(testDir, { recursive: true });
51
- } catch {
52
- /* best effort */
53
- }
54
33
  });
55
34
 
56
35
  /** Ensure a conversation row exists for the given ID so FK constraints pass. */
@@ -6,29 +6,10 @@
6
6
  * from the daemon's internal ID), fails to find the conversation, and
7
7
  * silently ignores the cancel — leaving the stream running.
8
8
  */
9
- import { mkdtempSync, realpathSync, rmSync } from "node:fs";
10
- import { tmpdir } from "node:os";
11
- import { join } from "node:path";
12
9
  import { afterAll, describe, expect, mock, test } from "bun:test";
13
10
 
14
11
  mock.module("../config/env.js", () => ({ isHttpAuthDisabled: () => true }));
15
12
 
16
- const testDir = realpathSync(
17
- mkdtempSync(join(tmpdir(), "cancel-resolve-key-test-")),
18
- );
19
-
20
- mock.module("../util/platform.js", () => ({
21
- getRootDir: () => testDir,
22
- getDataDir: () => testDir,
23
- isMacOS: () => process.platform === "darwin",
24
- isLinux: () => process.platform === "linux",
25
- isWindows: () => process.platform === "win32",
26
- getPidPath: () => join(testDir, "test.pid"),
27
- getDbPath: () => join(testDir, "test.db"),
28
- getLogPath: () => join(testDir, "test.log"),
29
- ensureDataDir: () => {},
30
- }));
31
-
32
13
  mock.module("../util/logger.js", () => ({
33
14
  getLogger: () =>
34
15
  new Proxy({} as Record<string, unknown>, {
@@ -69,11 +50,6 @@ initializeDb();
69
50
 
70
51
  afterAll(() => {
71
52
  resetDb();
72
- try {
73
- rmSync(testDir, { recursive: true, force: true });
74
- } catch {
75
- /* best effort */
76
- }
77
53
  });
78
54
 
79
55
  describe("POST /v1/conversations/:id/cancel", () => {
@@ -1,21 +1,5 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
5
2
 
6
- const testDir = mkdtempSync(join(tmpdir(), "canonical-guardian-store-test-"));
7
-
8
- mock.module("../util/platform.js", () => ({
9
- getDataDir: () => testDir,
10
- isMacOS: () => process.platform === "darwin",
11
- isLinux: () => process.platform === "linux",
12
- isWindows: () => process.platform === "win32",
13
- getPidPath: () => join(testDir, "test.pid"),
14
- getDbPath: () => join(testDir, "test.db"),
15
- getLogPath: () => join(testDir, "test.log"),
16
- ensureDataDir: () => {},
17
- }));
18
-
19
3
  mock.module("../util/logger.js", () => ({
20
4
  getLogger: () =>
21
5
  new Proxy({} as Record<string, unknown>, {
@@ -58,11 +42,6 @@ describe("canonical-guardian-store", () => {
58
42
 
59
43
  afterAll(() => {
60
44
  resetDb();
61
- try {
62
- rmSync(testDir, { recursive: true });
63
- } catch {
64
- // best-effort cleanup
65
- }
66
45
  });
67
46
 
68
47
  // ── createCanonicalGuardianRequest ────────────────────────────────
@@ -111,6 +90,54 @@ describe("canonical-guardian-store", () => {
111
90
  expect(req.status).toBe("pending");
112
91
  });
113
92
 
93
+ // ── Enrichment columns ──────────────────────────────────────────────
94
+
95
+ test("enrichment columns round-trip through create and read", () => {
96
+ const req = createCanonicalGuardianRequest({
97
+ kind: "tool_approval",
98
+ sourceType: "desktop",
99
+ guardianPrincipalId: TEST_PRINCIPAL,
100
+ commandPreview: "rm -rf /tmp/test",
101
+ riskLevel: "high",
102
+ activityText: "Deleting temporary test files",
103
+ executionTarget: "host",
104
+ });
105
+
106
+ expect(req.commandPreview).toBe("rm -rf /tmp/test");
107
+ expect(req.riskLevel).toBe("high");
108
+ expect(req.activityText).toBe("Deleting temporary test files");
109
+ expect(req.executionTarget).toBe("host");
110
+
111
+ // Verify round-trip via read
112
+ const fetched = getCanonicalGuardianRequest(req.id);
113
+ expect(fetched).not.toBeNull();
114
+ expect(fetched!.commandPreview).toBe("rm -rf /tmp/test");
115
+ expect(fetched!.riskLevel).toBe("high");
116
+ expect(fetched!.activityText).toBe("Deleting temporary test files");
117
+ expect(fetched!.executionTarget).toBe("host");
118
+ });
119
+
120
+ test("enrichment columns default to null when omitted", () => {
121
+ const req = createCanonicalGuardianRequest({
122
+ kind: "tool_approval",
123
+ sourceType: "desktop",
124
+ guardianPrincipalId: TEST_PRINCIPAL,
125
+ });
126
+
127
+ expect(req.commandPreview).toBeNull();
128
+ expect(req.riskLevel).toBeNull();
129
+ expect(req.activityText).toBeNull();
130
+ expect(req.executionTarget).toBeNull();
131
+
132
+ // Verify via read as well
133
+ const fetched = getCanonicalGuardianRequest(req.id);
134
+ expect(fetched).not.toBeNull();
135
+ expect(fetched!.commandPreview).toBeNull();
136
+ expect(fetched!.riskLevel).toBeNull();
137
+ expect(fetched!.activityText).toBeNull();
138
+ expect(fetched!.executionTarget).toBeNull();
139
+ });
140
+
114
141
  // ── getCanonicalGuardianRequest ───────────────────────────────────
115
142
 
116
143
  test("gets a request by ID", () => {
@@ -1,6 +1,3 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import {
5
2
  afterAll,
6
3
  beforeEach,
@@ -13,24 +10,6 @@ import {
13
10
 
14
11
  import { eq } from "drizzle-orm";
15
12
 
16
- // ---------------------------------------------------------------------------
17
- // Test isolation: in-memory SQLite via temp directory
18
- // ---------------------------------------------------------------------------
19
-
20
- const testDir = mkdtempSync(join(tmpdir(), "channel-approval-routes-test-"));
21
-
22
- mock.module("../util/platform.js", () => ({
23
- getRootDir: () => testDir,
24
- getDataDir: () => testDir,
25
- isMacOS: () => process.platform === "darwin",
26
- isLinux: () => process.platform === "linux",
27
- isWindows: () => process.platform === "win32",
28
- getPidPath: () => join(testDir, "test.pid"),
29
- getDbPath: () => join(testDir, "test.db"),
30
- getLogPath: () => join(testDir, "test.log"),
31
- ensureDataDir: () => {},
32
- }));
33
-
34
13
  mock.module("../util/logger.js", () => ({
35
14
  getLogger: () =>
36
15
  new Proxy({} as Record<string, unknown>, {
@@ -42,6 +21,12 @@ mock.module("../util/logger.js", () => ({
42
21
  mock.module("../daemon/handlers/shared.js", () => ({
43
22
  renderHistoryContent: (content: unknown) => ({
44
23
  text: typeof content === "string" ? content : JSON.stringify(content),
24
+ toolCalls: [],
25
+ toolCallsBeforeText: false,
26
+ textSegments: [],
27
+ contentOrder: [],
28
+ surfaces: [],
29
+ thinkingSegments: [],
45
30
  }),
46
31
  }));
47
32
 
@@ -77,11 +62,6 @@ initAuthSigningKey(Buffer.from("test-signing-key-at-least-32-bytes-long"));
77
62
 
78
63
  afterAll(() => {
79
64
  resetDb();
80
- try {
81
- rmSync(testDir, { recursive: true });
82
- } catch {
83
- /* best effort */
84
- }
85
65
  });
86
66
 
87
67
  // ---------------------------------------------------------------------------
@@ -1,36 +1,7 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
- import {
5
- afterAll,
6
- beforeEach,
7
- describe,
8
- expect,
9
- mock,
10
- spyOn,
11
- test,
12
- } from "bun:test";
1
+ import { beforeEach, describe, expect, mock, spyOn, test } from "bun:test";
13
2
 
14
3
  mock.module("../config/env.js", () => ({ isHttpAuthDisabled: () => true }));
15
4
 
16
- // ---------------------------------------------------------------------------
17
- // Test isolation: in-memory SQLite via temp directory
18
- // ---------------------------------------------------------------------------
19
-
20
- const testDir = mkdtempSync(join(tmpdir(), "channel-approvals-test-"));
21
-
22
- mock.module("../util/platform.js", () => ({
23
- getRootDir: () => testDir,
24
- getDataDir: () => testDir,
25
- isMacOS: () => process.platform === "darwin",
26
- isLinux: () => process.platform === "linux",
27
- isWindows: () => process.platform === "win32",
28
- getPidPath: () => join(testDir, "test.pid"),
29
- getDbPath: () => join(testDir, "test.db"),
30
- getLogPath: () => join(testDir, "test.log"),
31
- ensureDataDir: () => {},
32
- }));
33
-
34
5
  mock.module("../util/logger.js", () => ({
35
6
  getLogger: () =>
36
7
  new Proxy({} as Record<string, unknown>, {
@@ -54,14 +25,6 @@ import {
54
25
  } from "../runtime/channel-approvals.js";
55
26
  import * as pendingInteractions from "../runtime/pending-interactions.js";
56
27
 
57
- afterAll(() => {
58
- try {
59
- rmSync(testDir, { recursive: true });
60
- } catch {
61
- /* best effort */
62
- }
63
- });
64
-
65
28
  // ---------------------------------------------------------------------------
66
29
  // Helpers
67
30
  // ---------------------------------------------------------------------------
@@ -1,21 +1,5 @@
1
- import { mkdtempSync, rmSync } from "node:fs";
2
- import { tmpdir } from "node:os";
3
- import { join } from "node:path";
4
1
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
5
2
 
6
- const testDir = mkdtempSync(join(tmpdir(), "channel-delivery-store-test-"));
7
-
8
- mock.module("../util/platform.js", () => ({
9
- getDataDir: () => testDir,
10
- isMacOS: () => process.platform === "darwin",
11
- isLinux: () => process.platform === "linux",
12
- isWindows: () => process.platform === "win32",
13
- getPidPath: () => join(testDir, "test.pid"),
14
- getDbPath: () => join(testDir, "test.db"),
15
- getLogPath: () => join(testDir, "test.log"),
16
- ensureDataDir: () => {},
17
- }));
18
-
19
3
  mock.module("../util/logger.js", () => ({
20
4
  getLogger: () =>
21
5
  new Proxy({} as Record<string, unknown>, {
@@ -58,11 +42,6 @@ initializeDb();
58
42
 
59
43
  afterAll(() => {
60
44
  resetDb();
61
- try {
62
- rmSync(testDir, { recursive: true });
63
- } catch {
64
- /* best effort */
65
- }
66
45
  });
67
46
 
68
47
  function resetTables() {
@@ -1,27 +1,6 @@
1
1
  import { createHash } from "node:crypto";
2
- import { mkdtempSync, rmSync } from "node:fs";
3
- import { tmpdir } from "node:os";
4
- import { join } from "node:path";
5
2
  import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
6
3
 
7
- // ---------------------------------------------------------------------------
8
- // Test isolation: in-memory SQLite via temp directory
9
- // ---------------------------------------------------------------------------
10
-
11
- const testDir = mkdtempSync(join(tmpdir(), "channel-guardian-test-"));
12
-
13
- mock.module("../util/platform.js", () => ({
14
- getRootDir: () => testDir,
15
- getDataDir: () => testDir,
16
- isMacOS: () => process.platform === "darwin",
17
- isLinux: () => process.platform === "linux",
18
- isWindows: () => process.platform === "win32",
19
- getPidPath: () => join(testDir, "test.pid"),
20
- getDbPath: () => join(testDir, "test.db"),
21
- getLogPath: () => join(testDir, "test.log"),
22
- ensureDataDir: () => {},
23
- }));
24
-
25
4
  mock.module("../util/logger.js", () => ({
26
5
  getLogger: () =>
27
6
  new Proxy({} as Record<string, unknown>, {
@@ -152,11 +131,6 @@ initializeDb();
152
131
  afterAll(() => {
153
132
  globalThis.fetch = originalFetch;
154
133
  resetDb();
155
- try {
156
- rmSync(testDir, { recursive: true });
157
- } catch {
158
- /* best effort */
159
- }
160
134
  });
161
135
 
162
136
  function resetTables(): void {