@vellumai/assistant 0.6.0 → 0.6.1

package/src/daemon/conversation-tool-setup.ts

@@ -7,6 +7,7 @@
  */
 
 import { isHttpAuthDisabled } from "../config/env.js";
+import { getIsPlatform } from "../config/env-registry.js";
 import type { CesClient } from "../credential-execution/client.js";
 import { getBindingByConversation } from "../memory/external-conversation-store.js";
 import {
@@ -192,6 +193,7 @@ export function createToolExecutor(
       toolUseId,
       hostBashProxy: ctx.hostBashProxy,
       hostFileProxy: ctx.hostFileProxy,
+      isPlatformHosted: getIsPlatform(),
       cesClient: ctx.cesClient,
       onToolLifecycleEvent: handleToolLifecycleEvent,
       sendToClient: (msg) => {
@@ -320,8 +322,7 @@ export function createProxyApprovalCallback(
       input.matching_patterns = decision.matchingPatterns;
     }
 
-    const riskLevel =
-      decision.kind === "ask_missing_credential" ? "high" : "medium";
+    const riskLevel: string = "medium";
 
     // Check trust store before prompting — build candidates that mirror
     // buildCommandCandidates() in checker.ts for network_request.
@@ -342,10 +343,7 @@ export function createProxyApprovalCallback(
     );
     if (existingRule && existingRule.decision !== "ask") {
       if (existingRule.decision === "deny") return false;
-      // For high-risk proxy decisions, a plain allow rule (without allowHighRisk)
-      // must fall through to prompting — mirroring the checker's behavior.
-      if (riskLevel !== "high" || existingRule.allowHighRisk === true)
-        return true;
+      return true;
     }
 
     // Use the checker's built-in allowlist generation for network_request
@@ -384,12 +382,13 @@ export function createProxyApprovalCallback(
       response.selectedPattern &&
       response.selectedScope
     ) {
+      const allowHighRisk = response.decision === "always_allow_high_risk";
       log.info(
         {
           toolName,
           pattern: response.selectedPattern,
           scope: response.selectedScope,
-          highRisk: response.decision === "always_allow_high_risk",
+          allowHighRisk,
         },
         "Persisting always-allow trust rule (proxy)",
       );
@@ -399,9 +398,7 @@ export function createProxyApprovalCallback(
         response.selectedScope,
         "allow",
         100,
-        response.decision === "always_allow_high_risk"
-          ? { allowHighRisk: true }
-          : undefined,
+        allowHighRisk ? { allowHighRisk: true } : undefined,
       );
     }
     if (
@@ -436,7 +433,7 @@ export function createProxyApprovalCallback(
  * history or explicit preactivation. Without this, their tools are
  * unavailable in fresh conversations until `skill_load` is called.
  */
-const DEFAULT_PREACTIVATED_SKILL_IDS = ["tasks", "notifications"];
+const DEFAULT_PREACTIVATED_SKILL_IDS = ["tasks", "notifications", "subagent"];
 
 /**
  * Subset of Conversation state that the resolveTools callback reads at each
@@ -454,9 +451,14 @@ export interface SkillProjectionContext {
   readonly channelCapabilities?: {
     channel: string;
     supportsDynamicUi: boolean;
+    clientOS?: string;
   };
   /** True when no client is connected (HTTP-only). */
   readonly hasNoClient?: boolean;
+  /** When set, only tools in this set are included in the resolved tool list (subagent delegation). */
+  subagentAllowedTools?: Set<string>;
+  /** True when this conversation belongs to a subagent spawned by SubagentManager. */
+  readonly isSubagent?: boolean;
 }
 
 // ── Conditional tool sets ────────────────────────────────────────────
@@ -471,6 +473,16 @@ const HOST_TOOL_NAMES = new Set([
 const CLIENT_CAPABILITY_TOOL_NAMES = new Set(["app_open"]);
 const PLATFORM_TOOL_NAMES = new Set(["request_system_permission"]);
 
+/**
+ * Tools that should only be visible to subagent conversations. Main (parent)
+ * conversations never see these in the LLM tool definitions. Subsequent PRs
+ * will populate this set; it starts empty so there is no behavioral change.
+ */
+export const SUBAGENT_ONLY_TOOL_NAMES = new Set<string>([
+  "file_list",
+  "notify_parent",
+]);
+
 /**
  * Determine whether a tool should be included in the LLM tool definitions
  * for the current turn based on conversation context. Tools not active for the
@@ -495,7 +507,12 @@ export function isToolActiveForContext(
     return !ctx.hasNoClient;
   }
   if (PLATFORM_TOOL_NAMES.has(name)) {
-    return process.platform === "darwin" && !ctx.hasNoClient;
+    // Check the *client's* platform, not the daemon's process.platform.
+    // In Docker the daemon runs on Linux but the connected client may be macOS.
+    return ctx.channelCapabilities?.clientOS === "macos" && !ctx.hasNoClient;
+  }
+  if (SUBAGENT_ONLY_TOOL_NAMES.has(name)) {
+    return ctx.isSubagent === true;
   }
   return true;
 }
@@ -548,18 +565,27 @@ export function createResolveToolsCallback(
       isToolActiveForContext(d.name, ctx),
     );
 
+    // When the conversation is acting as a subagent, restrict core tools to
+    // only those explicitly allowed by the parent orchestrator.
+    const scopedCoreDefs = ctx.subagentAllowedTools
+      ? filteredCoreDefs.filter((d) => ctx.subagentAllowedTools!.has(d.name))
+      : filteredCoreDefs;
+
     // Re-read MCP tool definitions from the registry each turn so conversations
     // automatically pick up tools added/removed by `vellum mcp reload`.
     const currentMcpDefs = getMcpToolDefinitions();
     log.debug(
       {
-        coreCount: filteredCoreDefs.length,
+        coreCount: scopedCoreDefs.length,
         mcpCount: currentMcpDefs.length,
         mcpTools: currentMcpDefs.map((d) => d.name),
       },
       "MCP tools resolved for turn",
     );
-    const allBaseDefs = [...filteredCoreDefs, ...currentMcpDefs];
+    const scopedMcpDefs = ctx.subagentAllowedTools
+      ? currentMcpDefs.filter((d) => ctx.subagentAllowedTools!.has(d.name))
+      : currentMcpDefs;
+    const allBaseDefs = [...scopedCoreDefs, ...scopedMcpDefs];
 
     const effectivePreactivated = [
       ...DEFAULT_PREACTIVATED_SKILL_IDS,
@@ -572,6 +598,10 @@ export function createResolveToolsCallback(
     });
     const turnAllowed = new Set(allBaseDefs.map((d) => d.name));
     for (const name of projection.allowedToolNames) {
+      // When a subagent allowlist is active, exclude skill tools not on it.
+      if (ctx.subagentAllowedTools && !ctx.subagentAllowedTools.has(name)) {
+        continue;
+      }
       turnAllowed.add(name);
     }
     ctx.allowedToolNames = turnAllowed;

package/src/daemon/conversation-workspace.ts

@@ -33,8 +33,7 @@ export function refreshWorkspaceTopLevelContextIfNeeded(
     currentConversationPath = `conversations/${resolvedDirName}/`;
   }
   ctx.workspaceTopLevelContext = renderWorkspaceTopLevelContext(snapshot, {
-    currentConversationPath,
-    currentConversationAttachmentsPath: currentConversationPath
+    conversationAttachmentsPath: currentConversationPath
       ? `${currentConversationPath}attachments/`
       : null,
   });

package/src/daemon/conversation.ts

@@ -160,6 +160,7 @@ export class Conversation {
   /** @internal */ allowedToolNames?: Set<string>;
   /** @internal */ toolsDisabledDepth = 0;
   /** @internal */ preactivatedSkillIds?: string[];
+  /** @internal */ subagentAllowedTools?: Set<string>;
   /** @internal */ coreToolNames: Set<string>;
   /** @internal */ readonly skillProjectionState = new Map<string, string>();
   /** @internal */ readonly skillProjectionCache: SkillProjectionCache = {};
@@ -174,6 +175,7 @@ export class Conversation {
   /** @internal */ contextCompactedAt: number | null = null;
   /** @internal */ currentRequestId?: string;
   /** @internal */ hasNoClient = false;
+  /** @internal */ isSubagent = false;
   /** @internal */ headlessLock = false;
   /** @internal */ taskRunId?: string;
   /** @internal */ callSessionId?: string;
@@ -248,6 +250,8 @@ export class Conversation {
   public readonly hasSystemPromptOverride: boolean;
   public memoryPolicy: ConversationMemoryPolicy;
   /** @internal */ readonly graphMemory: ConversationGraphMemory;
+  /** @internal */ activeContextNodeIds?: string[];
+  /** @internal */ memoryScopeId?: string;
   /** @internal */ streamThinking: boolean;
   /** @internal */ turnCount = 0;
   public lastAssistantAttachments: AssistantAttachmentDraft[] = [];
@@ -277,6 +281,7 @@ export class Conversation {
     memoryPolicy?: ConversationMemoryPolicy,
     sharedCesClient?: CesClient,
     speedOverride?: Speed,
+    cacheTtl?: "5m" | "1h",
   ) {
     this.conversationId = conversationId;
     this.systemPrompt = systemPrompt;
@@ -415,6 +420,7 @@ export class Conversation {
         ...(fastModeEnabled && resolvedSpeed === "fast"
           ? { speed: resolvedSpeed }
           : {}),
+        ...(cacheTtl ? { cacheTtl } : {}),
       },
       toolDefs.length > 0 ? toolDefs : undefined,
       toolDefs.length > 0 ? toolExecutor : undefined,
@@ -439,6 +445,7 @@ export class Conversation {
   async loadFromDb(): Promise<void> {
     await loadFromDbImpl(this);
     this.restoreSurfaceStateFromHistory();
+    this.graphMemory.restoreState();
   }
 
   /**
@@ -537,6 +544,14 @@ export class Conversation {
     this.sandboxOverride = enabled;
   }
 
+  setSubagentAllowedTools(tools: Set<string> | undefined): void {
+    this.subagentAllowedTools = tools;
+  }
+
+  setIsSubagent(value: boolean): void {
+    this.isSubagent = value;
+  }
+
   isProcessing(): boolean {
     return this.processing;
   }
@@ -564,6 +579,9 @@ export class Conversation {
     // CES client is owned by DaemonServer — just drop the reference.
     // Do NOT close it here; the server manages the CES lifecycle.
     this.cesClient = undefined;
+    this.activeContextNodeIds = this.graphMemory.tracker.getActiveNodeIds();
+    this.memoryScopeId = this.memoryPolicy.scopeId;
+    this.graphMemory.persistState();
     disposeConversation(this);
   }
 

package/src/daemon/date-context.ts

@@ -290,31 +290,14 @@ function formatLocalDate(date: Date, timeZone: string): string {
 }
 
 /**
- * Format HH:MM and UTC offset for the given instant in the given timezone.
- */
-function formatCompactTimeAndOffset(
-  date: Date,
-  timeZone: string,
-): { time: string; offset: string } {
-  const fmt = new Intl.DateTimeFormat("en-US", {
-    timeZone,
-    hour: "2-digit",
-    minute: "2-digit",
-    hourCycle: "h23",
-    timeZoneName: "shortOffset",
-  });
-  const parts = fmt.formatToParts(date);
-  const get = (t: string) => parts.find((p) => p.type === t)?.value ?? "";
-  const hour = get("hour");
-  const minute = get("minute");
-  const offset = normalizeOffsetToken(get("timeZoneName"));
-  return { time: `${hour}:${minute}`, offset };
-}
-
-/**
- * Build a compact temporal context string for model injection.
+ * Format time as HH:MM:SS with UTC offset and timezone name.
+ *
+ * Uses the timezone resolution cascade:
+ * explicit override → configured user tz → profile user tz → host fallback.
+ *
+ * Returns format: `2026-04-02 (Thu) 01:52:33 -05:00 (America/Chicago)`
  */
-export function buildTemporalContext(
+export function formatTurnTimestamp(
   options: TemporalContextOptions = {},
 ): string {
   const now = new Date(options.nowMs ?? Date.now());
@@ -336,36 +319,26 @@ export function buildTemporalContext(
     resolvedConfiguredUserTimeZone ??
     resolvedUserTimeZone ??
     resolvedHostTimeZone;
-  const userTimeZone = resolvedConfiguredUserTimeZone ?? resolvedUserTimeZone;
-  const timeZoneSource = resolvedTimeZone
-    ? "explicit_override"
-    : resolvedConfiguredUserTimeZone
-      ? "user_settings"
-      : resolvedUserTimeZone
-        ? "user_profile_memory"
-        : "assistant_host_fallback";
-  const todayParts = localDateParts(now, timeZone);
-  const todayStr = formatLocalDate(now, timeZone);
-  const todayWeekday = WEEKDAY_SHORT[todayParts.weekday];
-  const { time, offset } = formatCompactTimeAndOffset(now, timeZone);
-
-  const tzSuffix =
-    timeZoneSource === "assistant_host_fallback" ? " (host fallback)" : "";
 
-  const lines = [
-    `<temporal_context>`,
-    `Today: ${todayStr} (${todayWeekday}) ${time} ${offset}`,
-    `TZ: ${timeZone}${tzSuffix}`,
-  ];
-
-  if (userTimeZone && userTimeZone !== timeZone) {
-    lines.push(`User TZ: ${userTimeZone}`);
-  }
-  if (resolvedHostTimeZone !== timeZone) {
-    lines.push(`Host TZ: ${resolvedHostTimeZone}`);
-  }
+  const dateStr = formatLocalDate(now, timeZone);
+  const todayParts = localDateParts(now, timeZone);
+  const dayName = WEEKDAY_SHORT[todayParts.weekday];
 
-  lines.push(`</temporal_context>`);
+  const fmt = new Intl.DateTimeFormat("en-US", {
+    timeZone,
+    hour: "2-digit",
+    minute: "2-digit",
+    second: "2-digit",
+    hourCycle: "h23",
+    timeZoneName: "shortOffset",
+  });
+  const parts = fmt.formatToParts(now);
+  const get = (t: string) => parts.find((p) => p.type === t)?.value ?? "";
+  const hour = get("hour");
+  const minute = get("minute");
+  const second = get("second");
+  const offset = normalizeOffsetToken(get("timeZoneName"));
 
-  return lines.join("\n");
+  return `${dateStr} (${dayName}) ${hour}:${minute}:${second} ${offset} (${timeZone})`;
 }
+

package/src/daemon/first-greeting.ts

@@ -8,7 +8,7 @@ import { getWorkspacePromptPath } from "../util/platform.js";
  * time," "I'm ready to be useful," and "you're in control."
  */
 export const CANNED_FIRST_GREETING =
-  "Hey. I'm brand new, no name, no memories, nothing yet. The more we work together, the more context and memory I build, and the better I get. But let's not wait around. Throw a question at me, give me a task, or ask what I can do.";
+  "Hey, I'm brand new. No name, no memories, nothing yet. Think of me like a new colleague on their first day: I'll get better the more we work together. First things first, let's figure out how we work best. What should I call you?";
 
 /**
  * Returns `true` when all of the following are true:

package/src/daemon/handlers/conversations.ts

@@ -103,13 +103,10 @@ export function makeEventSender(params: {
             guardianPrincipalId: trustContext?.guardianPrincipalId ?? undefined,
             toolName: event.toolName,
             commandPreview:
-              redactSecrets(
-                summarizeToolInput(event.toolName, inputRecord),
-              ) || undefined,
+              redactSecrets(summarizeToolInput(event.toolName, inputRecord)) ||
+              undefined,
             riskLevel: event.riskLevel,
-            activityText: activityRaw
-              ? redactSecrets(activityRaw)
-              : undefined,
+            activityText: activityRaw ? redactSecrets(activityRaw) : undefined,
             executionTarget: event.executionTarget,
             status: "pending",
             requestCode: generateCanonicalRequestCode(),
@@ -304,7 +301,7 @@ export async function handleConversationCreate(
     // Only create the host bash proxy for desktop client interfaces that can
     // execute commands on the user's machine. Set before updateClient so
     // updateClient's call to hostBashProxy.updateSender targets the new proxy.
-    if (transportInterface === "macos" || transportInterface === "ios") {
+    if (transportInterface === "macos") {
       const proxy = new HostBashProxy(sendEvent, (requestId) => {
         pendingInteractions.resolve(requestId);
       });

package/src/daemon/handlers/shared.test.ts

@@ -0,0 +1,143 @@
+import { describe, expect, test } from "bun:test";
+
+import { compareSemver } from "./shared.js";
+
+describe("compareSemver", () => {
+  // ── Basic numeric comparison ──────────────────────────────────────
+  test("equal versions return 0", () => {
+    expect(compareSemver("1.2.3", "1.2.3")).toBe(0);
+  });
+
+  test("higher major returns positive", () => {
+    expect(compareSemver("2.0.0", "1.0.0")).toBeGreaterThan(0);
+  });
+
+  test("lower major returns negative", () => {
+    expect(compareSemver("1.0.0", "2.0.0")).toBeLessThan(0);
+  });
+
+  test("higher minor returns positive", () => {
+    expect(compareSemver("1.3.0", "1.2.0")).toBeGreaterThan(0);
+  });
+
+  test("higher patch returns positive", () => {
+    expect(compareSemver("1.2.4", "1.2.3")).toBeGreaterThan(0);
+  });
+
+  // ── v/V prefix handling ───────────────────────────────────────────
+  test("strips v prefix", () => {
+    expect(compareSemver("v1.2.3", "1.2.3")).toBe(0);
+  });
+
+  test("strips V prefix", () => {
+    expect(compareSemver("V1.2.3", "1.2.3")).toBe(0);
+  });
+
+  test("compares with mixed v prefix", () => {
+    expect(compareSemver("v2.0.0", "1.0.0")).toBeGreaterThan(0);
+  });
+
+  // ── Pre-release vs release ────────────────────────────────────────
+  test("pre-release sorts lower than release", () => {
+    expect(compareSemver("0.6.0-staging.1", "0.6.0")).toBeLessThan(0);
+  });
+
+  test("release sorts higher than pre-release", () => {
+    expect(compareSemver("0.6.0", "0.6.0-staging.1")).toBeGreaterThan(0);
+  });
+
+  test("both without pre-release and same version return 0", () => {
+    expect(compareSemver("0.6.0", "0.6.0")).toBe(0);
+  });
+
+  // ── Pre-release numeric comparison ────────────────────────────────
+  test("staging.1 < staging.2", () => {
+    expect(compareSemver("0.6.0-staging.1", "0.6.0-staging.2")).toBeLessThan(0);
+  });
+
+  test("staging.10 > staging.2 (numeric, not lexical)", () => {
+    expect(
+      compareSemver("0.6.0-staging.10", "0.6.0-staging.2"),
+    ).toBeGreaterThan(0);
+  });
+
+  test("equal pre-release returns 0", () => {
+    expect(compareSemver("0.6.0-staging.5", "0.6.0-staging.5")).toBe(0);
+  });
+
+  // ── Pre-release lexical comparison ────────────────────────────────
+  test("alpha < beta (lexical)", () => {
+    expect(compareSemver("1.0.0-alpha", "1.0.0-beta")).toBeLessThan(0);
+  });
+
+  test("rc < staging (lexical)", () => {
+    expect(compareSemver("1.0.0-rc", "1.0.0-staging")).toBeLessThan(0);
+  });
+
+  // ── Pre-release fewer identifiers sorts earlier ───────────────────
+  test("fewer pre-release identifiers sorts earlier", () => {
+    expect(compareSemver("1.0.0-alpha", "1.0.0-alpha.1")).toBeLessThan(0);
+  });
+
+  // ── Mixed numeric vs non-numeric per §11.4.4 ─────────────────────
+  test("numeric identifier sorts lower than non-numeric", () => {
+    expect(compareSemver("1.0.0-1", "1.0.0-alpha")).toBeLessThan(0);
+  });
+
+  test("non-numeric identifier sorts higher than numeric", () => {
+    expect(compareSemver("1.0.0-alpha", "1.0.0-1")).toBeGreaterThan(0);
+  });
+
+  // ── Multi-segment pre-release ─────────────────────────────────────
+  test("multi-segment pre-release comparison", () => {
+    expect(
+      compareSemver("1.0.0-alpha.beta.1", "1.0.0-alpha.beta.2"),
+    ).toBeLessThan(0);
+  });
+
+  // ── Hyphenated pre-release identifiers ────────────────────────────
+  test("pre-release with multiple hyphens", () => {
+    expect(
+      compareSemver("1.0.0-pre-release-1", "1.0.0-pre-release-2"),
+    ).toBeLessThan(0);
+  });
+
+  // ── Different major.minor.patch trumps pre-release ────────────────
+  test("higher patch wins regardless of pre-release", () => {
+    expect(compareSemver("0.6.1", "0.6.0-staging.99")).toBeGreaterThan(0);
+  });
+
+  test("lower patch loses regardless of pre-release absence", () => {
+    expect(compareSemver("0.5.9", "0.6.0-staging.1")).toBeLessThan(0);
+  });
+
+  // ── Edge cases ────────────────────────────────────────────────────
+  test("missing segments default to 0", () => {
+    expect(compareSemver("1", "1.0.0")).toBe(0);
+  });
+
+  test("two-segment version", () => {
+    expect(compareSemver("1.2", "1.2.0")).toBe(0);
+  });
+
+  // ── Sort integration ──────────────────────────────────────────────
+  test("Array.sort produces correct semver order", () => {
+    const versions = [
+      "0.6.0",
+      "0.6.0-staging.2",
+      "0.5.9",
+      "0.6.0-staging.10",
+      "v0.6.0-staging.1",
+      "0.6.1",
+    ];
+    const sorted = [...versions].sort(compareSemver);
+    expect(sorted).toEqual([
+      "0.5.9",
+      "v0.6.0-staging.1",
+      "0.6.0-staging.2",
+      "0.6.0-staging.10",
+      "0.6.0",
+      "0.6.1",
+    ]);
+  });
+});

package/src/daemon/handlers/shared.ts

@@ -497,13 +497,71 @@ export function ensureSkillEntry(
   return entries[name] as Record<string, unknown>;
 }
 
-/** Compare two semver strings. Returns negative if a < b, 0 if equal, positive if a > b. */
+/**
+ * Parse a version string into its core numeric parts and optional pre-release tag.
+ * Handles optional `v`/`V` prefix (e.g. "v0.6.0-staging.5").
+ */
+function parseSemverParts(v: string): {
+  nums: [number, number, number];
+  pre: string | null;
+} {
+  const stripped = v.replace(/^[vV]/, "");
+  const [core, ...rest] = stripped.split("-");
+  const pre = rest.length > 0 ? rest.join("-") : null;
+  const segs = (core ?? "").split(".").map(Number);
+  return {
+    nums: [segs[0] || 0, segs[1] || 0, segs[2] || 0],
+    pre,
+  };
+}
+
+/**
+ * Compare two pre-release strings per semver §11:
+ *   - Dot-separated identifiers compared left to right.
+ *   - Both numeric → compare as integers.
+ *   - Both non-numeric → compare lexically.
+ *   - Numeric vs non-numeric → numeric sorts lower (§11.4.4).
+ *   - Fewer identifiers sorts earlier when all preceding are equal.
+ */
+function comparePreRelease(a: string, b: string): number {
+  const pa = a.split(".");
+  const pb = b.split(".");
+  const len = Math.max(pa.length, pb.length);
+  for (let i = 0; i < len; i++) {
+    if (i >= pa.length) return -1; // a has fewer fields → a < b
+    if (i >= pb.length) return 1;
+    const aIsNum = /^\d+$/.test(pa[i]);
+    const bIsNum = /^\d+$/.test(pb[i]);
+    if (aIsNum && bIsNum) {
+      const diff = Number(pa[i]) - Number(pb[i]);
+      if (diff !== 0) return diff;
+    } else if (aIsNum !== bIsNum) {
+      return aIsNum ? -1 : 1; // numeric < non-numeric per §11.4.4
+    } else {
+      const cmp = (pa[i] ?? "").localeCompare(pb[i] ?? "");
+      if (cmp !== 0) return cmp;
+    }
+  }
+  return 0;
+}
+
+/**
+ * Compare two semver strings. Returns negative if a < b, 0 if equal, positive if a > b.
+ *
+ * Handles pre-release suffixes per semver spec:
+ *   - `0.6.0-staging.1 < 0.6.0` (pre-release < release)
+ *   - `0.6.0-staging.1 < 0.6.0-staging.2` (numeric postfix comparison)
+ */
 export function compareSemver(a: string, b: string): number {
-  const pa = a.split(".").map(Number);
-  const pb = b.split(".").map(Number);
+  const pa = parseSemverParts(a);
+  const pb = parseSemverParts(b);
   for (let i = 0; i < 3; i++) {
-    const diff = (pa[i] ?? 0) - (pb[i] ?? 0);
+    const diff = pa.nums[i] - pb.nums[i];
     if (diff !== 0) return diff;
   }
-  return 0;
+  // Same major.minor.patch — compare pre-release
+  if (pa.pre === null && pb.pre === null) return 0;
+  if (pa.pre !== null && pb.pre === null) return -1; // pre-release < release
+  if (pa.pre === null && pb.pre !== null) return 1;
+  return comparePreRelease(pa.pre!, pb.pre!);
 }

package/src/daemon/handlers/skills.ts

@@ -20,6 +20,11 @@ import {
 } from "../../config/loader.js";
 import { resolveSkillStates, skillFlagKey } from "../../config/skill-state.js";
 import { loadSkillCatalog, type SkillSummary } from "../../config/skills.js";
+import {
+  deleteSkillCapabilityNode,
+  seedSkillGraphNodes,
+  seedUninstalledCatalogSkillMemories,
+} from "../../memory/graph/capability-seed.js";
 import {
   createTimeout,
   extractText,
@@ -51,11 +56,6 @@ import {
   removeSkillsIndexEntry,
   validateManagedSkillId,
 } from "../../skills/managed-store.js";
-import {
-  deleteSkillCapabilityMemory,
-  seedCatalogSkillMemories,
-  seedUninstalledCatalogSkillMemories,
-} from "../../skills/skill-memory.js";
 import {
   installExternalSkill,
   resolveSkillSource,
@@ -242,7 +242,7 @@ export function postInstallSkill(
   }
 
   // Seed skill memories
-  seedCatalogSkillMemories();
+  seedSkillGraphNodes();
   void seedUninstalledCatalogSkillMemories().catch(() => {});
 }
 
@@ -603,7 +603,7 @@ export function enableSkill(
       name: skillId,
       state: "enabled",
     });
-    seedCatalogSkillMemories();
+    seedSkillGraphNodes();
     void seedUninstalledCatalogSkillMemories().catch(() => {});
     return { success: true };
   } catch (err) {
@@ -626,7 +626,7 @@ export function disableSkill(
       name: skillId,
       state: "disabled",
     });
-    seedCatalogSkillMemories();
+    seedSkillGraphNodes();
     void seedUninstalledCatalogSkillMemories().catch(() => {});
     return { success: true };
   } catch (err) {
@@ -719,7 +719,7 @@ export async function installSkill(
           "Failed to auto-enable bundled skill",
         );
       }
-      seedCatalogSkillMemories();
+      seedSkillGraphNodes();
       void seedUninstalledCatalogSkillMemories().catch(() => {});
       return { success: true };
     }
@@ -847,14 +847,7 @@ export async function uninstallSkill(
       }
       // Best-effort cleanup of capability memory for uninstalled skill
       // (managed path handles this internally via deleteManagedSkill)
-      deleteSkillCapabilityMemory(skillId);
-      try {
-        const { deleteSkillCapabilityNode } =
-          await import("../../memory/graph/capability-seed.js");
-        deleteSkillCapabilityNode(skillId);
-      } catch {
-        /* best effort */
-      }
+      deleteSkillCapabilityNode(skillId);
     }
 
     // Clean config entry
@@ -1255,7 +1248,7 @@ export async function createSkill(
       );
     }
 
-    seedCatalogSkillMemories();
+    seedSkillGraphNodes();
     void seedUninstalledCatalogSkillMemories().catch(() => {});
     return { success: true };
   } catch (err) {