@vellumai/assistant 0.5.16 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (407) hide show
  1. package/ARCHITECTURE.md +1 -1
  2. package/Dockerfile +0 -3
  3. package/knip.json +2 -1
  4. package/openapi.yaml +660 -80
  5. package/package.json +1 -1
  6. package/src/__tests__/actor-token-service.test.ts +68 -0
  7. package/src/__tests__/agent-loop.test.ts +0 -32
  8. package/src/__tests__/always-loaded-tools-guard.test.ts +2 -2
  9. package/src/__tests__/anthropic-provider.test.ts +57 -3
  10. package/src/__tests__/app-compiler.test.ts +120 -0
  11. package/src/__tests__/assistant-feature-flags-integration.test.ts +2 -2
  12. package/src/__tests__/call-conversation-messages.test.ts +2 -6
  13. package/src/__tests__/call-domain.test.ts +2 -6
  14. package/src/__tests__/call-pointer-messages.test.ts +2 -14
  15. package/src/__tests__/call-recovery.test.ts +2 -6
  16. package/src/__tests__/call-routes-http.test.ts +2 -6
  17. package/src/__tests__/call-store.test.ts +2 -6
  18. package/src/__tests__/cancel-resolves-conversation-key.test.ts +2 -6
  19. package/src/__tests__/canonical-guardian-store.test.ts +2 -6
  20. package/src/__tests__/channel-delivery-store.test.ts +2 -6
  21. package/src/__tests__/channel-retry-sweep.test.ts +2 -6
  22. package/src/__tests__/checker.test.ts +25 -3
  23. package/src/__tests__/clawhub.test.ts +54 -24
  24. package/src/__tests__/cli-command-risk-guard.test.ts +14 -0
  25. package/src/__tests__/cli-memory.test.ts +74 -69
  26. package/src/__tests__/config-schema.test.ts +1 -1
  27. package/src/__tests__/config-set-platform-guard.test.ts +302 -0
  28. package/src/__tests__/confirmation-request-guardian-bridge.test.ts +2 -6
  29. package/src/__tests__/contacts-tools.test.ts +31 -0
  30. package/src/__tests__/context-overflow-reducer.test.ts +86 -0
  31. package/src/__tests__/context-token-estimator.test.ts +175 -10
  32. package/src/__tests__/conversation-agent-loop-overflow.test.ts +9 -0
  33. package/src/__tests__/conversation-agent-loop.test.ts +9 -0
  34. package/src/__tests__/conversation-attachments.test.ts +2 -6
  35. package/src/__tests__/conversation-attention-store.test.ts +2 -6
  36. package/src/__tests__/conversation-clear-safety.test.ts +2 -6
  37. package/src/__tests__/conversation-delete-schedule-cleanup.test.ts +4 -10
  38. package/src/__tests__/conversation-disk-view-integration.test.ts +2 -6
  39. package/src/__tests__/conversation-disk-view.test.ts +2 -6
  40. package/src/__tests__/conversation-error.test.ts +33 -2
  41. package/src/__tests__/conversation-fork-crud.test.ts +2 -6
  42. package/src/__tests__/conversation-history-web-search.test.ts +5 -0
  43. package/src/__tests__/conversation-load-history-repair.test.ts +5 -1
  44. package/src/__tests__/conversation-media-retry.test.ts +91 -0
  45. package/src/__tests__/conversation-starter-routes.test.ts +20 -11
  46. package/src/__tests__/conversation-store.test.ts +2 -6
  47. package/src/__tests__/conversation-usage.test.ts +2 -6
  48. package/src/__tests__/conversation-wipe.test.ts +11 -408
  49. package/src/__tests__/credential-execution-feature-gates.test.ts +3 -3
  50. package/src/__tests__/credential-execution-shell-lockdown.test.ts +2 -2
  51. package/src/__tests__/credential-security-e2e.test.ts +2 -0
  52. package/src/__tests__/followup-tools.test.ts +2 -6
  53. package/src/__tests__/graph-extraction-event-date.test.ts +186 -0
  54. package/src/__tests__/guardian-action-conversation-turn.test.ts +2 -6
  55. package/src/__tests__/guardian-action-followup-executor.test.ts +2 -6
  56. package/src/__tests__/guardian-action-followup-store.test.ts +2 -6
  57. package/src/__tests__/guardian-action-grant-mint-consume.test.ts +2 -6
  58. package/src/__tests__/guardian-action-late-reply.test.ts +2 -6
  59. package/src/__tests__/guardian-action-store.test.ts +2 -6
  60. package/src/__tests__/guardian-binding-drift-heal.test.ts +2 -6
  61. package/src/__tests__/guardian-decision-primitive-canonical.test.ts +8 -8
  62. package/src/__tests__/guardian-dispatch.test.ts +2 -6
  63. package/src/__tests__/guardian-grant-minting.test.ts +2 -14
  64. package/src/__tests__/guardian-principal-id-roundtrip.test.ts +2 -6
  65. package/src/__tests__/guardian-routing-invariants.test.ts +192 -6
  66. package/src/__tests__/guardian-routing-state.test.ts +2 -6
  67. package/src/__tests__/guardian-verification-voice-binding.test.ts +2 -6
  68. package/src/__tests__/inbound-invite-redemption.test.ts +2 -6
  69. package/src/__tests__/injection-block.test.ts +154 -0
  70. package/src/__tests__/install-meta.test.ts +506 -0
  71. package/src/__tests__/install-skill-routing.test.ts +292 -0
  72. package/src/__tests__/invite-redemption-service.test.ts +2 -6
  73. package/src/__tests__/invite-routes-http.test.ts +2 -6
  74. package/src/__tests__/jobs-store-qdrant-breaker.test.ts +2 -14
  75. package/src/__tests__/list-messages-attachments.test.ts +2 -6
  76. package/src/__tests__/llm-context-route-provider.test.ts +2 -6
  77. package/src/__tests__/llm-request-log-turn-query.test.ts +2 -6
  78. package/src/__tests__/llm-usage-store.test.ts +2 -6
  79. package/src/__tests__/log-export-workspace.test.ts +2 -6
  80. package/src/__tests__/managed-store.test.ts +38 -11
  81. package/src/__tests__/memory-jobs-worker-backoff.test.ts +2 -8
  82. package/src/__tests__/memory-recall-log-store.test.ts +2 -6
  83. package/src/__tests__/memory-upsert-concurrency.test.ts +4 -112
  84. package/src/__tests__/non-member-access-request.test.ts +2 -6
  85. package/src/__tests__/notification-guardian-path.test.ts +2 -6
  86. package/src/__tests__/oauth-cli.test.ts +364 -2
  87. package/src/__tests__/oauth2-gateway-transport.test.ts +18 -3
  88. package/src/__tests__/outlook-attachments.test.ts +301 -0
  89. package/src/__tests__/outlook-automation-tools.test.ts +425 -0
  90. package/src/__tests__/outlook-categories.test.ts +212 -0
  91. package/src/__tests__/outlook-client-automation.test.ts +246 -0
  92. package/src/__tests__/outlook-compose-tools.test.ts +325 -0
  93. package/src/__tests__/outlook-declutter-tools.test.ts +585 -0
  94. package/src/__tests__/outlook-email-watcher.test.ts +322 -0
  95. package/src/__tests__/outlook-follow-up.test.ts +196 -0
  96. package/src/__tests__/outlook-messaging-provider.test.ts +498 -3
  97. package/src/__tests__/outlook-trash.test.ts +77 -0
  98. package/src/__tests__/outlook-unsubscribe.test.ts +250 -0
  99. package/src/__tests__/platform-callback-registration.test.ts +4 -4
  100. package/src/__tests__/playbook-execution.test.ts +76 -80
  101. package/src/__tests__/playbook-tools.test.ts +5 -7
  102. package/src/__tests__/provider-error-scenarios.test.ts +21 -0
  103. package/src/__tests__/rebuild-index-graph-nodes.test.ts +273 -0
  104. package/src/__tests__/registry.test.ts +2 -2
  105. package/src/__tests__/require-fresh-approval.test.ts +64 -2
  106. package/src/__tests__/runtime-events-sse-parity.test.ts +2 -6
  107. package/src/__tests__/runtime-events-sse.test.ts +2 -6
  108. package/src/__tests__/schedule-store.test.ts +2 -6
  109. package/src/__tests__/schedule-tools.test.ts +2 -6
  110. package/src/__tests__/scheduler-recurrence.test.ts +1 -5
  111. package/src/__tests__/scoped-approval-grants.test.ts +2 -6
  112. package/src/__tests__/scoped-grant-security-matrix.test.ts +2 -6
  113. package/src/__tests__/search-skills-unified.test.ts +421 -0
  114. package/src/__tests__/secret-onetime-send.test.ts +2 -0
  115. package/src/__tests__/send-endpoint-busy.test.ts +2 -6
  116. package/src/__tests__/sequence-store.test.ts +2 -6
  117. package/src/__tests__/server-history-render.test.ts +2 -6
  118. package/src/__tests__/skill-feature-flags-integration.test.ts +38 -31
  119. package/src/__tests__/skill-feature-flags.test.ts +6 -6
  120. package/src/__tests__/skill-load-feature-flag.test.ts +11 -11
  121. package/src/__tests__/skill-memory.test.ts +140 -98
  122. package/src/__tests__/skills-uninstall.test.ts +2 -2
  123. package/src/__tests__/skills.test.ts +1 -1
  124. package/src/__tests__/slack-inbound-verification.test.ts +2 -6
  125. package/src/__tests__/task-compiler.test.ts +2 -6
  126. package/src/__tests__/task-management-tools.test.ts +2 -6
  127. package/src/__tests__/task-memory-cleanup.test.ts +173 -229
  128. package/src/__tests__/task-runner.test.ts +2 -6
  129. package/src/__tests__/task-scheduler.test.ts +2 -6
  130. package/src/__tests__/test-preload.ts +3 -0
  131. package/src/__tests__/tool-approval-handler.test.ts +2 -6
  132. package/src/__tests__/tool-grant-request-escalation.test.ts +2 -6
  133. package/src/__tests__/tool-side-effects-slack-dm.test.ts +276 -0
  134. package/src/__tests__/trust-store.test.ts +1 -1
  135. package/src/__tests__/trusted-contact-inline-approval-integration.test.ts +2 -6
  136. package/src/__tests__/trusted-contact-lifecycle-notifications.test.ts +2 -6
  137. package/src/__tests__/trusted-contact-multichannel.test.ts +2 -6
  138. package/src/__tests__/trusted-contact-verification.test.ts +2 -6
  139. package/src/__tests__/turn-boundary-resolution.test.ts +2 -6
  140. package/src/__tests__/usage-cache-backfill-migration.test.ts +1 -6
  141. package/src/__tests__/usage-routes.test.ts +2 -6
  142. package/src/__tests__/verification-control-plane-policy.test.ts +0 -2
  143. package/src/__tests__/voice-invite-redemption.test.ts +2 -6
  144. package/src/__tests__/voice-scoped-grant-consumer.test.ts +2 -6
  145. package/src/__tests__/voice-session-bridge.test.ts +2 -6
  146. package/src/__tests__/volume-security-guard.test.ts +2 -0
  147. package/src/__tests__/workspace-lifecycle.test.ts +29 -1
  148. package/src/__tests__/workspace-migration-009-backfill-conversation-disk-view.test.ts +2 -6
  149. package/src/__tests__/workspace-migration-013-repair-conversation-disk-view.test.ts +2 -6
  150. package/src/__tests__/workspace-migration-026-backfill-install-meta.test.ts +558 -0
  151. package/src/__tests__/workspace-policy.test.ts +1 -1
  152. package/src/agent/attachments.ts +7 -2
  153. package/src/agent/image-optimize.ts +165 -0
  154. package/src/agent/loop.ts +1 -15
  155. package/src/bundler/app-compiler.ts +179 -2
  156. package/src/bundler/package-resolver.ts +3 -5
  157. package/src/cli/__tests__/notifications.test.ts +1 -2
  158. package/src/cli/cli-memory.ts +67 -64
  159. package/src/cli/commands/avatar.ts +3 -3
  160. package/src/cli/commands/config.ts +26 -13
  161. package/src/cli/commands/doctor.ts +2 -2
  162. package/src/cli/commands/memory.ts +41 -55
  163. package/src/cli/commands/oauth/__tests__/connect.test.ts +2 -2
  164. package/src/cli/commands/oauth/__tests__/disconnect.test.ts +2 -2
  165. package/src/cli/commands/oauth/__tests__/mode.test.ts +8 -1
  166. package/src/cli/commands/oauth/__tests__/status.test.ts +2 -2
  167. package/src/cli/commands/oauth/connect.ts +11 -6
  168. package/src/cli/commands/oauth/mode.ts +7 -0
  169. package/src/cli/commands/oauth/shared.ts +39 -3
  170. package/src/cli/commands/platform/__tests__/connect.test.ts +1 -1
  171. package/src/cli/commands/platform/__tests__/disconnect.test.ts +1 -1
  172. package/src/cli/commands/platform/__tests__/status.test.ts +5 -5
  173. package/src/cli/commands/platform/index.ts +16 -16
  174. package/src/cli/commands/skills.ts +88 -16
  175. package/src/cli/commands/trust.ts +2 -2
  176. package/src/cli/lib/daemon-credential-client.ts +2 -3
  177. package/src/config/bundled-skills/acp/TOOLS.json +1 -1
  178. package/src/config/bundled-skills/contacts/SKILL.md +0 -1
  179. package/src/config/bundled-skills/contacts/TOOLS.json +0 -8
  180. package/src/config/bundled-skills/contacts/tools/contact-upsert.ts +0 -4
  181. package/src/config/bundled-skills/gmail/SKILL.md +2 -10
  182. package/src/config/bundled-skills/google-calendar/SKILL.md +1 -9
  183. package/src/config/bundled-skills/messaging/SKILL.md +10 -18
  184. package/src/config/bundled-skills/messaging/tools/messaging-analyze-style.ts +40 -33
  185. package/src/config/bundled-skills/outlook/SKILL.md +189 -0
  186. package/src/config/bundled-skills/outlook/TOOLS.json +530 -0
  187. package/src/config/bundled-skills/outlook/tools/outlook-attachments.ts +85 -0
  188. package/src/config/bundled-skills/outlook/tools/outlook-categories.ts +77 -0
  189. package/src/config/bundled-skills/outlook/tools/outlook-draft.ts +84 -0
  190. package/src/config/bundled-skills/outlook/tools/outlook-follow-up.ts +94 -0
  191. package/src/config/bundled-skills/outlook/tools/outlook-forward.ts +49 -0
  192. package/src/config/bundled-skills/outlook/tools/outlook-outreach-scan.ts +237 -0
  193. package/src/config/bundled-skills/outlook/tools/outlook-rules.ts +161 -0
  194. package/src/config/bundled-skills/outlook/tools/outlook-send-draft.ts +32 -0
  195. package/src/config/bundled-skills/outlook/tools/outlook-sender-digest.ts +272 -0
  196. package/src/config/bundled-skills/outlook/tools/outlook-trash.ts +29 -0
  197. package/src/config/bundled-skills/outlook/tools/outlook-unsubscribe.ts +129 -0
  198. package/src/config/bundled-skills/outlook/tools/outlook-vacation.ts +87 -0
  199. package/src/config/bundled-skills/outlook/tools/shared.ts +20 -0
  200. package/src/config/bundled-skills/outlook-calendar/SKILL.md +51 -0
  201. package/src/config/bundled-skills/outlook-calendar/TOOLS.json +221 -0
  202. package/src/config/bundled-skills/outlook-calendar/calendar-client.ts +252 -0
  203. package/src/config/bundled-skills/outlook-calendar/tools/outlook-calendar-check-availability.ts +53 -0
  204. package/src/config/bundled-skills/outlook-calendar/tools/outlook-calendar-create-event.ts +74 -0
  205. package/src/config/bundled-skills/outlook-calendar/tools/outlook-calendar-get-event.ts +18 -0
  206. package/src/config/bundled-skills/outlook-calendar/tools/outlook-calendar-list-events.ts +46 -0
  207. package/src/config/bundled-skills/outlook-calendar/tools/outlook-calendar-rsvp.ts +36 -0
  208. package/src/config/bundled-skills/outlook-calendar/tools/shared.ts +17 -0
  209. package/src/config/bundled-skills/outlook-calendar/types.ts +120 -0
  210. package/src/config/bundled-skills/playbooks/tools/playbook-create.ts +47 -40
  211. package/src/config/bundled-skills/playbooks/tools/playbook-delete.ts +16 -29
  212. package/src/config/bundled-skills/playbooks/tools/playbook-list.ts +16 -18
  213. package/src/config/bundled-skills/playbooks/tools/playbook-update.ts +39 -47
  214. package/src/config/bundled-skills/slack/SKILL.md +1 -7
  215. package/src/config/bundled-tool-registry.ts +56 -4
  216. package/src/config/env-registry.ts +15 -8
  217. package/src/config/feature-flag-registry.json +21 -124
  218. package/src/config/schemas/platform.ts +8 -0
  219. package/src/config/schemas/timeouts.ts +1 -1
  220. package/src/config/skills.ts +18 -7
  221. package/src/context/token-estimator.ts +25 -18
  222. package/src/context/window-manager.ts +6 -2
  223. package/src/credential-execution/process-manager.ts +3 -1
  224. package/src/daemon/context-overflow-reducer.ts +46 -2
  225. package/src/daemon/conversation-agent-loop-handlers.ts +123 -82
  226. package/src/daemon/conversation-agent-loop.ts +96 -61
  227. package/src/daemon/conversation-error.ts +31 -8
  228. package/src/daemon/conversation-lifecycle.ts +33 -0
  229. package/src/daemon/conversation-media-retry.ts +85 -7
  230. package/src/daemon/conversation-notifiers.ts +4 -1
  231. package/src/daemon/conversation-runtime-assembly.ts +5 -0
  232. package/src/daemon/conversation.ts +41 -2
  233. package/src/daemon/daemon-control.ts +8 -2
  234. package/src/daemon/handlers/shared.ts +22 -12
  235. package/src/daemon/handlers/skills.ts +416 -202
  236. package/src/daemon/lifecycle.ts +40 -1
  237. package/src/daemon/main.ts +5 -1
  238. package/src/daemon/message-types/conversations.ts +4 -1
  239. package/src/daemon/message-types/messages.ts +3 -1
  240. package/src/daemon/message-types/skills.ts +97 -36
  241. package/src/daemon/providers-setup.ts +5 -0
  242. package/src/daemon/server.ts +11 -2
  243. package/src/daemon/tool-side-effects.ts +27 -5
  244. package/src/heartbeat/heartbeat-service.ts +1 -0
  245. package/src/hooks/cli.ts +2 -2
  246. package/src/hooks/runner.ts +15 -38
  247. package/src/inbound/platform-callback-registration.ts +14 -14
  248. package/src/memory/admin.ts +11 -45
  249. package/src/memory/conversation-bootstrap.ts +2 -0
  250. package/src/memory/conversation-crud.ts +242 -348
  251. package/src/memory/conversation-group-migration.ts +157 -0
  252. package/src/memory/conversation-queries.ts +4 -2
  253. package/src/memory/db-init.ts +30 -3
  254. package/src/memory/embed.ts +73 -0
  255. package/src/memory/embedding-backend.ts +8 -14
  256. package/src/memory/embedding-runtime-manager.ts +12 -114
  257. package/src/memory/fingerprint.ts +2 -2
  258. package/src/memory/graph/bootstrap.ts +512 -0
  259. package/src/memory/graph/capability-seed.ts +297 -0
  260. package/src/memory/graph/consolidation.ts +691 -0
  261. package/src/memory/graph/conversation-graph-memory.ts +630 -0
  262. package/src/memory/graph/decay.test.ts +208 -0
  263. package/src/memory/graph/decay.ts +195 -0
  264. package/src/memory/graph/extraction-job.ts +69 -0
  265. package/src/memory/graph/extraction.test.ts +936 -0
  266. package/src/memory/graph/extraction.ts +1254 -0
  267. package/src/memory/graph/graph-search.ts +266 -0
  268. package/src/memory/graph/image-ref-utils.ts +29 -0
  269. package/src/memory/graph/injection.test.ts +513 -0
  270. package/src/memory/graph/injection.ts +439 -0
  271. package/src/memory/graph/inspect.ts +534 -0
  272. package/src/memory/graph/narrative.ts +267 -0
  273. package/src/memory/graph/pattern-scan.ts +269 -0
  274. package/src/memory/graph/retriever.ts +1008 -0
  275. package/src/memory/graph/scoring.test.ts +548 -0
  276. package/src/memory/graph/scoring.ts +232 -0
  277. package/src/memory/graph/serendipity.ts +65 -0
  278. package/src/memory/graph/store.test.ts +1050 -0
  279. package/src/memory/graph/store.ts +699 -0
  280. package/src/memory/graph/tool-handlers.ts +426 -0
  281. package/src/memory/graph/tools.ts +141 -0
  282. package/src/memory/graph/triggers.test.ts +487 -0
  283. package/src/memory/graph/triggers.ts +223 -0
  284. package/src/memory/graph/types.ts +271 -0
  285. package/src/memory/group-crud.ts +191 -0
  286. package/src/memory/indexer.ts +37 -19
  287. package/src/memory/job-handlers/cleanup.ts +0 -53
  288. package/src/memory/job-handlers/conversation-starters.ts +91 -53
  289. package/src/memory/job-handlers/embedding.ts +5 -31
  290. package/src/memory/job-handlers/index-maintenance.ts +23 -11
  291. package/src/memory/job-handlers/summarization.ts +32 -17
  292. package/src/memory/job-utils.ts +1 -1
  293. package/src/memory/jobs-store.ts +50 -70
  294. package/src/memory/jobs-worker.ts +147 -112
  295. package/src/memory/message-content.ts +1 -0
  296. package/src/memory/migrations/202-memory-graph-tables.ts +130 -0
  297. package/src/memory/migrations/203-drop-memory-items-tables.ts +23 -0
  298. package/src/memory/migrations/204-rename-memory-graph-type-values.ts +46 -0
  299. package/src/memory/migrations/205-memory-graph-image-refs.ts +11 -0
  300. package/src/memory/migrations/index.ts +4 -0
  301. package/src/memory/migrations/registry.ts +8 -0
  302. package/src/memory/qdrant-client.ts +44 -17
  303. package/src/memory/schema/index.ts +1 -0
  304. package/src/memory/schema/memory-graph.ts +139 -0
  305. package/src/memory/search/semantic.ts +47 -91
  306. package/src/memory/task-memory-cleanup.ts +28 -50
  307. package/src/messaging/providers/outlook/adapter.ts +8 -1
  308. package/src/messaging/providers/outlook/client.ts +299 -0
  309. package/src/messaging/providers/outlook/types.ts +118 -0
  310. package/src/notifications/adapters/macos.ts +1 -0
  311. package/src/notifications/copy-composer.ts +9 -0
  312. package/src/notifications/signal.ts +16 -0
  313. package/src/oauth/seed-providers.ts +2 -1
  314. package/src/permissions/checker.ts +24 -3
  315. package/src/permissions/defaults.ts +4 -4
  316. package/src/permissions/workspace-policy.ts +1 -1
  317. package/src/playbooks/playbook-compiler.ts +19 -18
  318. package/src/playbooks/types.ts +4 -3
  319. package/src/prompts/system-prompt.ts +3 -29
  320. package/src/providers/anthropic/client.ts +47 -19
  321. package/src/providers/gemini/client.ts +1 -1
  322. package/src/providers/openai/client.ts +1 -1
  323. package/src/providers/registry.ts +1 -1
  324. package/src/providers/retry.ts +19 -3
  325. package/src/runtime/actor-trust-resolver.ts +5 -1
  326. package/src/runtime/auth/route-policy.ts +7 -0
  327. package/src/runtime/guardian-reply-router.ts +5 -1
  328. package/src/runtime/http-server.ts +23 -3
  329. package/src/runtime/middleware/auth.ts +20 -0
  330. package/src/runtime/routes/attachment-routes.test.ts +106 -0
  331. package/src/runtime/routes/attachment-routes.ts +106 -16
  332. package/src/runtime/routes/brain-graph-routes.ts +21 -22
  333. package/src/runtime/routes/btw-routes.ts +8 -0
  334. package/src/runtime/routes/conversation-management-routes.ts +2 -0
  335. package/src/runtime/routes/conversation-starter-routes.ts +2 -2
  336. package/src/runtime/routes/debug-routes.ts +1 -1
  337. package/src/runtime/routes/global-search-routes.ts +21 -19
  338. package/src/runtime/routes/group-routes.ts +207 -0
  339. package/src/runtime/routes/guardian-action-routes.ts +21 -10
  340. package/src/runtime/routes/guardian-bootstrap-routes.ts +23 -19
  341. package/src/runtime/routes/inbound-message-handler.ts +19 -0
  342. package/src/runtime/routes/inbound-stages/guardian-activation-intercept.test.ts +292 -0
  343. package/src/runtime/routes/inbound-stages/guardian-activation-intercept.ts +207 -0
  344. package/src/runtime/routes/memory-item-routes.test.ts +2 -14
  345. package/src/runtime/routes/memory-item-routes.ts +341 -388
  346. package/src/runtime/routes/schedule-routes.ts +2 -0
  347. package/src/runtime/routes/skills-routes.ts +103 -37
  348. package/src/runtime/routes/work-items-routes.test.ts +2 -6
  349. package/src/schedule/scheduler.ts +8 -1
  350. package/src/security/oauth2.ts +1 -1
  351. package/src/security/secure-keys.ts +4 -8
  352. package/src/shared/provider-env-vars.ts +19 -0
  353. package/src/skills/catalog-cache.ts +5 -0
  354. package/src/skills/catalog-install.ts +15 -14
  355. package/src/skills/clawhub.ts +134 -154
  356. package/src/skills/install-meta.ts +208 -0
  357. package/src/skills/managed-store.ts +27 -16
  358. package/src/skills/skill-memory.ts +152 -77
  359. package/src/skills/skillssh-registry.ts +19 -17
  360. package/src/tasks/task-runner.ts +3 -1
  361. package/src/telemetry/usage-telemetry-reporter.test.ts +3 -5
  362. package/src/tools/browser/runtime-check.ts +3 -1
  363. package/src/tools/memory/register.ts +63 -46
  364. package/src/tools/permission-checker.ts +7 -1
  365. package/src/tools/shared/filesystem/image-read.ts +22 -85
  366. package/src/tools/terminal/safe-env.ts +1 -0
  367. package/src/tools/tool-manifest.ts +3 -3
  368. package/src/util/browser.ts +25 -10
  369. package/src/util/bun-runtime.ts +172 -0
  370. package/src/watcher/providers/outlook-calendar.ts +343 -0
  371. package/src/watcher/providers/outlook.ts +198 -0
  372. package/src/workspace/migrations/025-remove-oauth-app-setup-skills.ts +76 -0
  373. package/src/workspace/migrations/026-backfill-install-meta.ts +325 -0
  374. package/src/workspace/migrations/027-remove-orphaned-optimized-images-cache.ts +42 -0
  375. package/src/workspace/migrations/registry.ts +6 -0
  376. package/src/__tests__/context-memory-e2e.test.ts +0 -415
  377. package/src/__tests__/journal-context.test.ts +0 -268
  378. package/src/__tests__/memory-context-benchmark.benchmark.test.ts +0 -297
  379. package/src/__tests__/memory-lifecycle-e2e.test.ts +0 -459
  380. package/src/__tests__/memory-query-builder.test.ts +0 -59
  381. package/src/__tests__/memory-recall-quality.test.ts +0 -1046
  382. package/src/__tests__/memory-regressions.experimental.test.ts +0 -629
  383. package/src/__tests__/memory-regressions.test.ts +0 -3696
  384. package/src/__tests__/memory-retrieval.benchmark.test.ts +0 -295
  385. package/src/daemon/conversation-memory.ts +0 -207
  386. package/src/memory/conversation-starters-cadence.ts +0 -74
  387. package/src/memory/items-extractor.ts +0 -860
  388. package/src/memory/job-handlers/batch-extraction.ts +0 -753
  389. package/src/memory/job-handlers/extraction.ts +0 -40
  390. package/src/memory/job-handlers/journal-carry-forward.test.ts +0 -355
  391. package/src/memory/job-handlers/journal-carry-forward.ts +0 -255
  392. package/src/memory/journal-memory.ts +0 -224
  393. package/src/memory/query-builder.ts +0 -47
  394. package/src/memory/query-expansion.ts +0 -83
  395. package/src/memory/retriever.test.ts +0 -1592
  396. package/src/memory/retriever.ts +0 -1331
  397. package/src/memory/search/formatting.test.ts +0 -140
  398. package/src/memory/search/formatting.ts +0 -262
  399. package/src/memory/search/mmr.ts +0 -139
  400. package/src/memory/search/ranking.ts +0 -15
  401. package/src/memory/search/staleness.ts +0 -40
  402. package/src/memory/search/tier-classifier.ts +0 -18
  403. package/src/memory/search/types.ts +0 -121
  404. package/src/prompts/journal-context.ts +0 -154
  405. package/src/tools/memory/definitions.ts +0 -69
  406. package/src/tools/memory/handlers.test.ts +0 -562
  407. package/src/tools/memory/handlers.ts +0 -434
@@ -6,7 +6,13 @@
6
6
  * in the same flow a real daemon conversation would follow.
7
7
  */
8
8
  import { execFileSync } from "node:child_process";
9
- import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
9
+ import {
10
+ existsSync,
11
+ mkdirSync,
12
+ rmSync,
13
+ unlinkSync,
14
+ writeFileSync,
15
+ } from "node:fs";
10
16
  import { tmpdir } from "node:os";
11
17
  import { join } from "node:path";
12
18
  import {
@@ -23,6 +29,7 @@ import {
23
29
  getEnrichmentService,
24
30
  } from "../workspace/commit-message-enrichment-service.js";
25
31
  import {
32
+ _resetBreaker,
26
33
  _resetGitServiceRegistry,
27
34
  getWorkspaceGitService,
28
35
  WorkspaceGitService,
@@ -184,6 +191,27 @@ describe("Workspace git lifecycle (integration)", () => {
184
191
  await commitTurnChanges(testDir, conversationId, 3);
185
192
  expect(commitCount(testDir)).toBe(3); // Still 3
186
193
 
194
+ // Drain fire-and-forget enrichment from turn commits before heartbeat
195
+ // testing. Enrichment's writeNote() can leave a stale index.lock on
196
+ // some git versions (see heartbeat-service.ts:240-242), causing the
197
+ // heartbeat commit to fail with "index.lock: File exists".
198
+ await getEnrichmentService().shutdown();
199
+ _resetEnrichmentService();
200
+
201
+ // On CI, the enrichment service's spawned git child processes may still
202
+ // be alive briefly after the queue drains, holding index.lock. Remove it
203
+ // unconditionally and reset the circuit breaker so the heartbeat portion
204
+ // starts clean.
205
+ const lockPath = join(testDir, ".git", "index.lock");
206
+ if (existsSync(lockPath)) {
207
+ try {
208
+ unlinkSync(lockPath);
209
+ } catch {
210
+ /* race: already gone */
211
+ }
212
+ }
213
+ _resetBreaker(service);
214
+
187
215
  // ----------------------------------------------------------------
188
216
  // Step 5: Heartbeat safety net — simulate uncommitted changes
189
217
  // that linger past the age threshold
@@ -7,7 +7,7 @@ import {
7
7
  writeFileSync,
8
8
  } from "node:fs";
9
9
  import { join } from "node:path";
10
- import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
10
+ import { beforeEach, describe, expect, mock, test } from "bun:test";
11
11
 
12
12
  // ---------------------------------------------------------------------------
13
13
  // Mocks — must come before any imports that depend on them
@@ -40,7 +40,7 @@ mock.module("../config/loader.js", () => ({
40
40
  // ---------------------------------------------------------------------------
41
41
 
42
42
  import { getConversationDirPath } from "../memory/conversation-disk-view.js";
43
- import { getDb, initializeDb, resetDb } from "../memory/db.js";
43
+ import { getDb, initializeDb } from "../memory/db.js";
44
44
  import {
45
45
  attachments,
46
46
  conversations,
@@ -51,10 +51,6 @@ import { backfillConversationDiskViewMigration } from "../workspace/migrations/0
51
51
 
52
52
  initializeDb();
53
53
 
54
- afterAll(() => {
55
- resetDb();
56
- });
57
-
58
54
  function resetTables() {
59
55
  const db = getDb();
60
56
  db.run("DELETE FROM message_attachments");
@@ -7,7 +7,7 @@ import {
7
7
  writeFileSync,
8
8
  } from "node:fs";
9
9
  import { join } from "node:path";
10
- import { afterAll, beforeEach, describe, expect, mock, test } from "bun:test";
10
+ import { beforeEach, describe, expect, mock, test } from "bun:test";
11
11
 
12
12
  // ---------------------------------------------------------------------------
13
13
  // Mocks — must come before any imports that depend on them
@@ -40,7 +40,7 @@ mock.module("../config/loader.js", () => ({
40
40
  // ---------------------------------------------------------------------------
41
41
 
42
42
  import { getConversationDirPath } from "../memory/conversation-disk-view.js";
43
- import { getDb, initializeDb, rawRun, resetDb } from "../memory/db.js";
43
+ import { getDb, initializeDb, rawRun } from "../memory/db.js";
44
44
  import {
45
45
  attachments,
46
46
  conversations,
@@ -51,10 +51,6 @@ import { repairConversationDiskViewMigration } from "../workspace/migrations/013
51
51
 
52
52
  initializeDb();
53
53
 
54
- afterAll(() => {
55
- resetDb();
56
- });
57
-
58
54
  function resetTables() {
59
55
  const db = getDb();
60
56
  db.run("DELETE FROM message_attachments");
@@ -0,0 +1,558 @@
1
+ import {
2
+ existsSync,
3
+ mkdirSync,
4
+ readFileSync,
5
+ rmSync,
6
+ writeFileSync,
7
+ } from "node:fs";
8
+ import { tmpdir } from "node:os";
9
+ import { join } from "node:path";
10
+ import { afterEach, beforeEach, describe, expect, test } from "bun:test";
11
+
12
+ import { backfillInstallMetaMigration } from "../workspace/migrations/026-backfill-install-meta.js";
13
+
14
+ // ---------------------------------------------------------------------------
15
+ // Helpers
16
+ // ---------------------------------------------------------------------------
17
+
18
+ let workspaceDir: string;
19
+ let skillsDir: string;
20
+
21
+ function freshWorkspace(): void {
22
+ workspaceDir = join(
23
+ tmpdir(),
24
+ `vellum-migration-026-test-${Date.now()}-${Math.random().toString(36).slice(2)}`,
25
+ );
26
+ skillsDir = join(workspaceDir, "skills");
27
+ mkdirSync(skillsDir, { recursive: true });
28
+ }
29
+
30
+ function createSkillDir(
31
+ name: string,
32
+ opts?: {
33
+ skillMd?: string;
34
+ versionJson?: Record<string, unknown>;
35
+ installMetaJson?: Record<string, unknown>;
36
+ extraFiles?: Record<string, string>;
37
+ },
38
+ ): string {
39
+ const dir = join(skillsDir, name);
40
+ mkdirSync(dir, { recursive: true });
41
+
42
+ if (opts?.skillMd !== undefined) {
43
+ writeFileSync(join(dir, "SKILL.md"), opts.skillMd, "utf-8");
44
+ } else {
45
+ // Default: create a SKILL.md so the dir is recognized as a skill
46
+ writeFileSync(join(dir, "SKILL.md"), `# ${name}\n`, "utf-8");
47
+ }
48
+
49
+ if (opts?.versionJson) {
50
+ writeFileSync(
51
+ join(dir, "version.json"),
52
+ JSON.stringify(opts.versionJson, null, 2),
53
+ "utf-8",
54
+ );
55
+ }
56
+
57
+ if (opts?.installMetaJson) {
58
+ writeFileSync(
59
+ join(dir, "install-meta.json"),
60
+ JSON.stringify(opts.installMetaJson, null, 2),
61
+ "utf-8",
62
+ );
63
+ }
64
+
65
+ if (opts?.extraFiles) {
66
+ for (const [filePath, content] of Object.entries(opts.extraFiles)) {
67
+ const fullPath = join(dir, filePath);
68
+ mkdirSync(join(fullPath, ".."), { recursive: true });
69
+ writeFileSync(fullPath, content, "utf-8");
70
+ }
71
+ }
72
+
73
+ return dir;
74
+ }
75
+
76
+ function writeIntegrityManifest(
77
+ manifest: Record<string, { sha256: string; installedAt: string }>,
78
+ ): void {
79
+ writeFileSync(
80
+ join(skillsDir, ".integrity.json"),
81
+ JSON.stringify(manifest, null, 2),
82
+ "utf-8",
83
+ );
84
+ }
85
+
86
+ function readInstallMeta(skillName: string): Record<string, unknown> | null {
87
+ const path = join(skillsDir, skillName, "install-meta.json");
88
+ if (!existsSync(path)) return null;
89
+ return JSON.parse(readFileSync(path, "utf-8"));
90
+ }
91
+
92
+ // ---------------------------------------------------------------------------
93
+ // Setup / Teardown
94
+ // ---------------------------------------------------------------------------
95
+
96
+ const dirs: string[] = [];
97
+
98
+ beforeEach(() => {
99
+ freshWorkspace();
100
+ dirs.push(workspaceDir);
101
+ });
102
+
103
+ afterEach(() => {
104
+ for (const dir of dirs.splice(0)) {
105
+ rmSync(dir, { recursive: true, force: true });
106
+ }
107
+ });
108
+
109
+ // ---------------------------------------------------------------------------
110
+ // Tests
111
+ // ---------------------------------------------------------------------------
112
+
113
+ describe("026-backfill-install-meta migration", () => {
114
+ test("has correct migration id", () => {
115
+ expect(backfillInstallMetaMigration.id).toBe("026-backfill-install-meta");
116
+ });
117
+
118
+ // ─── No-op cases ────────────────────────────────────────────────────────
119
+
120
+ test("no-op when skills dir does not exist", () => {
121
+ rmSync(skillsDir, { recursive: true, force: true });
122
+ // Should not throw
123
+ backfillInstallMetaMigration.run(workspaceDir);
124
+ });
125
+
126
+ test("no-op when skills dir is empty", () => {
127
+ backfillInstallMetaMigration.run(workspaceDir);
128
+ // No install-meta.json should be created
129
+ });
130
+
131
+ test("skips directories without SKILL.md", () => {
132
+ const dir = join(skillsDir, "not-a-skill");
133
+ mkdirSync(dir, { recursive: true });
134
+ writeFileSync(join(dir, "README.md"), "# Not a skill", "utf-8");
135
+
136
+ backfillInstallMetaMigration.run(workspaceDir);
137
+
138
+ expect(existsSync(join(dir, "install-meta.json"))).toBe(false);
139
+ });
140
+
141
+ test("skips non-directory entries", () => {
142
+ writeFileSync(join(skillsDir, "some-file.txt"), "not a dir", "utf-8");
143
+
144
+ backfillInstallMetaMigration.run(workspaceDir);
145
+ // Should not throw
146
+ });
147
+
148
+ // ─── Idempotency ───────────────────────────────────────────────────────
149
+
150
+ test("skips skills that already have install-meta.json", () => {
151
+ const existingMeta = {
152
+ origin: "clawhub",
153
+ installedAt: "2025-01-01T00:00:00.000Z",
154
+ installedBy: "user-123",
155
+ slug: "existing-skill",
156
+ };
157
+ createSkillDir("my-skill", { installMetaJson: existingMeta });
158
+
159
+ backfillInstallMetaMigration.run(workspaceDir);
160
+
161
+ const meta = readInstallMeta("my-skill");
162
+ expect(meta).not.toBeNull();
163
+ expect(meta!.installedBy).toBe("user-123"); // preserved, not overwritten
164
+ expect(meta!.origin).toBe("clawhub");
165
+ });
166
+
167
+ test("is idempotent — running twice produces same result", () => {
168
+ createSkillDir("my-skill", {
169
+ versionJson: {
170
+ version: "1.0.0",
171
+ installedAt: "2025-03-01T00:00:00.000Z",
172
+ },
173
+ });
174
+
175
+ backfillInstallMetaMigration.run(workspaceDir);
176
+ const meta1 = readInstallMeta("my-skill");
177
+
178
+ backfillInstallMetaMigration.run(workspaceDir);
179
+ const meta2 = readInstallMeta("my-skill");
180
+
181
+ expect(meta1).toEqual(meta2);
182
+ });
183
+
184
+ // ─── Case 1: skills.sh origin ──────────────────────────────────────────
185
+
186
+ test("infers skillssh origin from version.json with origin: skills.sh", () => {
187
+ createSkillDir("skillssh-skill", {
188
+ versionJson: {
189
+ origin: "skills.sh",
190
+ source: "vercel-labs/agent-skills",
191
+ skillSlug: "react-best-practices",
192
+ installedAt: "2025-02-15T12:00:00.000Z",
193
+ },
194
+ });
195
+
196
+ backfillInstallMetaMigration.run(workspaceDir);
197
+
198
+ const meta = readInstallMeta("skillssh-skill");
199
+ expect(meta).not.toBeNull();
200
+ expect(meta!.origin).toBe("skillssh");
201
+ expect(meta!.sourceRepo).toBe("vercel-labs/agent-skills");
202
+ expect(meta!.slug).toBe("react-best-practices");
203
+ expect(meta!.installedAt).toBe("2025-02-15T12:00:00.000Z");
204
+ expect(meta!.installedBy).toBeUndefined();
205
+ expect(meta!.contentHash).toMatch(/^v2:[0-9a-f]{64}$/);
206
+ });
207
+
208
+ // ─── Case 2: version with no origin (vellum or clawhub) ───────────────
209
+
210
+ test("infers vellum origin from version.json with version and no origin", () => {
211
+ createSkillDir("vellum-skill", {
212
+ versionJson: {
213
+ version: "v1:abc123",
214
+ installedAt: "2025-01-20T08:00:00.000Z",
215
+ },
216
+ });
217
+
218
+ backfillInstallMetaMigration.run(workspaceDir);
219
+
220
+ const meta = readInstallMeta("vellum-skill");
221
+ expect(meta).not.toBeNull();
222
+ expect(meta!.origin).toBe("vellum");
223
+ expect(meta!.version).toBe("v1:abc123");
224
+ expect(meta!.installedAt).toBe("2025-01-20T08:00:00.000Z");
225
+ expect(meta!.installedBy).toBeUndefined();
226
+ expect(meta!.contentHash).toMatch(/^v2:[0-9a-f]{64}$/);
227
+ });
228
+
229
+ test("infers clawhub origin when version.json has version, no origin, and integrity entry exists", () => {
230
+ createSkillDir("clawhub-skill", {
231
+ versionJson: {
232
+ version: "1.2.3",
233
+ installedAt: "2025-03-10T10:00:00.000Z",
234
+ },
235
+ });
236
+ writeIntegrityManifest({
237
+ "clawhub-skill": {
238
+ sha256:
239
+ "v2:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890",
240
+ installedAt: "2025-03-10T10:00:00.000Z",
241
+ },
242
+ });
243
+
244
+ backfillInstallMetaMigration.run(workspaceDir);
245
+
246
+ const meta = readInstallMeta("clawhub-skill");
247
+ expect(meta).not.toBeNull();
248
+ expect(meta!.origin).toBe("clawhub");
249
+ expect(meta!.version).toBe("1.2.3");
250
+ expect(meta!.installedAt).toBe("2025-03-10T10:00:00.000Z");
251
+ expect(meta!.installedBy).toBeUndefined();
252
+ });
253
+
254
+ // ─── Case 3: version.json with unknown pattern ─────────────────────────
255
+
256
+ test("infers custom origin from version.json with unrecognized structure", () => {
257
+ createSkillDir("weird-skill", {
258
+ versionJson: {
259
+ origin: "some-unknown-registry",
260
+ installedAt: "2025-04-01T00:00:00.000Z",
261
+ },
262
+ });
263
+
264
+ backfillInstallMetaMigration.run(workspaceDir);
265
+
266
+ const meta = readInstallMeta("weird-skill");
267
+ expect(meta).not.toBeNull();
268
+ expect(meta!.origin).toBe("custom");
269
+ expect(meta!.installedAt).toBe("2025-04-01T00:00:00.000Z");
270
+ expect(meta!.installedBy).toBeUndefined();
271
+ });
272
+
273
+ test("infers custom origin from version.json with version AND origin fields", () => {
274
+ createSkillDir("both-fields", {
275
+ versionJson: {
276
+ origin: "some-origin",
277
+ version: "2.0.0",
278
+ installedAt: "2025-05-01T00:00:00.000Z",
279
+ },
280
+ });
281
+
282
+ backfillInstallMetaMigration.run(workspaceDir);
283
+
284
+ const meta = readInstallMeta("both-fields");
285
+ expect(meta).not.toBeNull();
286
+ // Has `origin` field (not "skills.sh") AND `version` -> doesn't match case 2
287
+ // (case 2 requires no `origin` field), falls through to case 3 (custom)
288
+ expect(meta!.origin).toBe("custom");
289
+ });
290
+
291
+ // ─── Case 4: no version.json ──────────────────────────────────────────
292
+
293
+ test("infers clawhub origin when no version.json but integrity entry exists", () => {
294
+ createSkillDir("clawhub-no-version", {});
295
+ writeIntegrityManifest({
296
+ "clawhub-no-version": {
297
+ sha256:
298
+ "v2:1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef",
299
+ installedAt: "2025-06-01T00:00:00.000Z",
300
+ },
301
+ });
302
+
303
+ backfillInstallMetaMigration.run(workspaceDir);
304
+
305
+ const meta = readInstallMeta("clawhub-no-version");
306
+ expect(meta).not.toBeNull();
307
+ expect(meta!.origin).toBe("clawhub");
308
+ expect(meta!.installedBy).toBeUndefined();
309
+ // installedAt should be directory mtime (an ISO string)
310
+ expect(typeof meta!.installedAt).toBe("string");
311
+ expect(new Date(meta!.installedAt as string).getTime()).not.toBeNaN();
312
+ });
313
+
314
+ test("infers custom origin when no version.json and no integrity entry", () => {
315
+ createSkillDir("custom-skill", {});
316
+
317
+ backfillInstallMetaMigration.run(workspaceDir);
318
+
319
+ const meta = readInstallMeta("custom-skill");
320
+ expect(meta).not.toBeNull();
321
+ expect(meta!.origin).toBe("custom");
322
+ expect(meta!.installedBy).toBeUndefined();
323
+ expect(typeof meta!.installedAt).toBe("string");
324
+ });
325
+
326
+ // ─── Malformed version.json ───────────────────────────────────────────
327
+
328
+ test("handles malformed version.json gracefully", () => {
329
+ const dir = createSkillDir("bad-version");
330
+ writeFileSync(join(dir, "version.json"), "{bad json!", "utf-8");
331
+
332
+ backfillInstallMetaMigration.run(workspaceDir);
333
+
334
+ const meta = readInstallMeta("bad-version");
335
+ expect(meta).not.toBeNull();
336
+ expect(meta!.origin).toBe("custom");
337
+ expect(meta!.installedBy).toBeUndefined();
338
+ });
339
+
340
+ test("handles malformed version.json with integrity entry as clawhub", () => {
341
+ const dir = createSkillDir("bad-version-clawhub");
342
+ writeFileSync(join(dir, "version.json"), "{{{", "utf-8");
343
+ writeIntegrityManifest({
344
+ "bad-version-clawhub": {
345
+ sha256: "v2:aaa",
346
+ installedAt: "2025-01-01T00:00:00.000Z",
347
+ },
348
+ });
349
+
350
+ backfillInstallMetaMigration.run(workspaceDir);
351
+
352
+ const meta = readInstallMeta("bad-version-clawhub");
353
+ expect(meta).not.toBeNull();
354
+ expect(meta!.origin).toBe("clawhub");
355
+ });
356
+
357
+ // ─── Content hash ─────────────────────────────────────────────────────
358
+
359
+ test("computes contentHash for all backfilled skills", () => {
360
+ createSkillDir("hash-test", {
361
+ versionJson: {
362
+ version: "1.0.0",
363
+ installedAt: "2025-01-01T00:00:00.000Z",
364
+ },
365
+ extraFiles: { "executor.ts": "export const run = () => {};" },
366
+ });
367
+
368
+ backfillInstallMetaMigration.run(workspaceDir);
369
+
370
+ const meta = readInstallMeta("hash-test");
371
+ expect(meta).not.toBeNull();
372
+ expect(meta!.contentHash).toMatch(/^v2:[0-9a-f]{64}$/);
373
+ });
374
+
375
+ // ─── Legacy file preservation ─────────────────────────────────────────
376
+
377
+ test("preserves legacy version.json after backfill", () => {
378
+ const versionData = {
379
+ version: "1.0.0",
380
+ installedAt: "2025-01-01T00:00:00.000Z",
381
+ };
382
+ const dir = createSkillDir("preserve-version", {
383
+ versionJson: versionData,
384
+ });
385
+
386
+ backfillInstallMetaMigration.run(workspaceDir);
387
+
388
+ // version.json should still exist
389
+ const versionPath = join(dir, "version.json");
390
+ expect(existsSync(versionPath)).toBe(true);
391
+ const preserved = JSON.parse(readFileSync(versionPath, "utf-8"));
392
+ expect(preserved.version).toBe("1.0.0");
393
+ });
394
+
395
+ test("preserves .integrity.json after backfill", () => {
396
+ createSkillDir("preserve-integrity", {
397
+ versionJson: {
398
+ version: "1.0.0",
399
+ installedAt: "2025-01-01T00:00:00.000Z",
400
+ },
401
+ });
402
+ const manifestData = {
403
+ "preserve-integrity": {
404
+ sha256: "v2:abc",
405
+ installedAt: "2025-01-01T00:00:00.000Z",
406
+ },
407
+ };
408
+ writeIntegrityManifest(manifestData);
409
+
410
+ backfillInstallMetaMigration.run(workspaceDir);
411
+
412
+ const integrityPath = join(skillsDir, ".integrity.json");
413
+ expect(existsSync(integrityPath)).toBe(true);
414
+ const preserved = JSON.parse(readFileSync(integrityPath, "utf-8"));
415
+ expect(preserved["preserve-integrity"]).toBeDefined();
416
+ });
417
+
418
+ // ─── Multiple skills ──────────────────────────────────────────────────
419
+
420
+ test("processes multiple skill directories in a single run", () => {
421
+ createSkillDir("skill-a", {
422
+ versionJson: {
423
+ version: "1.0.0",
424
+ installedAt: "2025-01-01T00:00:00.000Z",
425
+ },
426
+ });
427
+ createSkillDir("skill-b", {
428
+ versionJson: {
429
+ origin: "skills.sh",
430
+ source: "org/repo",
431
+ skillSlug: "slug-b",
432
+ installedAt: "2025-02-01T00:00:00.000Z",
433
+ },
434
+ });
435
+ createSkillDir("skill-c", {}); // no version.json
436
+
437
+ backfillInstallMetaMigration.run(workspaceDir);
438
+
439
+ const metaA = readInstallMeta("skill-a");
440
+ const metaB = readInstallMeta("skill-b");
441
+ const metaC = readInstallMeta("skill-c");
442
+
443
+ expect(metaA).not.toBeNull();
444
+ expect(metaA!.origin).toBe("vellum");
445
+
446
+ expect(metaB).not.toBeNull();
447
+ expect(metaB!.origin).toBe("skillssh");
448
+
449
+ expect(metaC).not.toBeNull();
450
+ expect(metaC!.origin).toBe("custom");
451
+ });
452
+
453
+ // ─── installedAt fallback ─────────────────────────────────────────────
454
+
455
+ test("uses directory mtime as installedAt when version.json lacks it", () => {
456
+ createSkillDir("no-installed-at", {
457
+ versionJson: { version: "1.0.0" },
458
+ });
459
+
460
+ backfillInstallMetaMigration.run(workspaceDir);
461
+
462
+ const meta = readInstallMeta("no-installed-at");
463
+ expect(meta).not.toBeNull();
464
+ // Should be an ISO date from dir mtime
465
+ expect(typeof meta!.installedAt).toBe("string");
466
+ expect(new Date(meta!.installedAt as string).getTime()).not.toBeNaN();
467
+ });
468
+
469
+ test("uses directory mtime as installedAt when no version.json exists", () => {
470
+ createSkillDir("mtime-fallback", {});
471
+
472
+ backfillInstallMetaMigration.run(workspaceDir);
473
+
474
+ const meta = readInstallMeta("mtime-fallback");
475
+ expect(meta).not.toBeNull();
476
+ expect(typeof meta!.installedAt).toBe("string");
477
+ expect(new Date(meta!.installedAt as string).getTime()).not.toBeNaN();
478
+ });
479
+
480
+ // ─── down() rollback ──────────────────────────────────────────────────
481
+
482
+ describe("down()", () => {
483
+ test("removes backfilled install-meta.json files", () => {
484
+ createSkillDir("rollback-skill", {
485
+ versionJson: {
486
+ version: "1.0.0",
487
+ installedAt: "2025-01-01T00:00:00.000Z",
488
+ },
489
+ });
490
+
491
+ backfillInstallMetaMigration.run(workspaceDir);
492
+ expect(
493
+ existsSync(join(skillsDir, "rollback-skill", "install-meta.json")),
494
+ ).toBe(true);
495
+
496
+ backfillInstallMetaMigration.down(workspaceDir);
497
+ expect(
498
+ existsSync(join(skillsDir, "rollback-skill", "install-meta.json")),
499
+ ).toBe(false);
500
+ });
501
+
502
+ test("preserves install-meta.json with installedBy (not backfilled)", () => {
503
+ createSkillDir("keep-skill", {
504
+ installMetaJson: {
505
+ origin: "clawhub",
506
+ installedAt: "2025-01-01T00:00:00.000Z",
507
+ installedBy: "user-abc",
508
+ slug: "my-skill",
509
+ },
510
+ });
511
+
512
+ backfillInstallMetaMigration.down(workspaceDir);
513
+
514
+ expect(
515
+ existsSync(join(skillsDir, "keep-skill", "install-meta.json")),
516
+ ).toBe(true);
517
+ });
518
+
519
+ test("is idempotent — calling down() twice is safe", () => {
520
+ createSkillDir("double-down", {
521
+ versionJson: {
522
+ version: "1.0.0",
523
+ installedAt: "2025-01-01T00:00:00.000Z",
524
+ },
525
+ });
526
+
527
+ backfillInstallMetaMigration.run(workspaceDir);
528
+ backfillInstallMetaMigration.down(workspaceDir);
529
+ backfillInstallMetaMigration.down(workspaceDir); // second call
530
+
531
+ expect(
532
+ existsSync(join(skillsDir, "double-down", "install-meta.json")),
533
+ ).toBe(false);
534
+ });
535
+
536
+ test("no-op when skills dir does not exist", () => {
537
+ rmSync(skillsDir, { recursive: true, force: true });
538
+ // Should not throw
539
+ backfillInstallMetaMigration.down(workspaceDir);
540
+ });
541
+
542
+ test("no-op when skills dir is empty", () => {
543
+ // Should not throw
544
+ backfillInstallMetaMigration.down(workspaceDir);
545
+ });
546
+
547
+ test("handles malformed install-meta.json in down() gracefully", () => {
548
+ const dir = createSkillDir("bad-meta");
549
+ writeFileSync(join(dir, "install-meta.json"), "{not valid}", "utf-8");
550
+
551
+ // Should not throw
552
+ backfillInstallMetaMigration.down(workspaceDir);
553
+
554
+ // The malformed file is left in place (skip, not crash)
555
+ expect(existsSync(join(dir, "install-meta.json"))).toBe(true);
556
+ });
557
+ });
558
+ });
@@ -257,7 +257,7 @@ describe("isWorkspaceScopedInvocation", () => {
257
257
  describe("always-scoped tools", () => {
258
258
  const safeTools = [
259
259
  "skill_load",
260
- "memory_recall",
260
+ "recall",
261
261
  "ui_update",
262
262
  "ui_dismiss",
263
263
  ];
@@ -1,4 +1,5 @@
1
1
  import type { ContentBlock, Message } from "../providers/types.js";
2
+ import { optimizeImageForTransport } from "./image-optimize.js";
2
3
 
3
4
  export interface MessageAttachmentInput {
4
5
  id?: string;
@@ -14,12 +15,16 @@ export function attachmentsToContentBlocks(
14
15
  ): ContentBlock[] {
15
16
  return attachments.map((attachment) => {
16
17
  if (attachment.mimeType.toLowerCase().startsWith("image/")) {
18
+ const { data, mediaType } = optimizeImageForTransport(
19
+ attachment.data,
20
+ attachment.mimeType,
21
+ );
17
22
  return {
18
23
  type: "image",
19
24
  source: {
20
25
  type: "base64",
21
- media_type: attachment.mimeType,
22
- data: attachment.data,
26
+ media_type: mediaType,
27
+ data,
23
28
  },
24
29
  } as ContentBlock;
25
30
  }