@vellumai/assistant 0.6.0 → 0.6.1

package/src/__tests__/checker.test.ts

@@ -4400,7 +4400,7 @@ describe("Permission Checker", () => {
   });
 });
 
-describe("bash network_mode=proxied — no special-casing", () => {
+describe("bash network_mode=proxied — risk capped at medium", () => {
   beforeEach(() => {
     clearCache();
     testConfig.permissions = { mode: "workspace" };
@@ -4408,8 +4408,6 @@ describe("bash network_mode=proxied — no special-casing", () => {
   });
 
   test("proxied bash follows normal rules (auto-allowed by default rule)", async () => {
-    // Proxied bash is no longer force-prompted — the default allow-bash rule
-    // auto-allows low/medium risk commands regardless of network_mode.
     const result = await check(
       "bash",
       { command: "curl https://api.example.com", network_mode: "proxied" },
@@ -4418,6 +4416,41 @@ describe("bash network_mode=proxied — no special-casing", () => {
     expect(result.decision).toBe("allow");
   });
 
+  test("proxied bash caps high-risk commands to medium", async () => {
+    // pipe-to-interpreter (stdin exec) is normally High risk, but proxied mode caps at Medium
+    const risk = await classifyRisk("bash", {
+      command: "cat exploit.py | python3",
+      network_mode: "proxied",
+    });
+    expect(risk).toBe(RiskLevel.Medium);
+  });
+
+  test("pipe to python3 -c is not high risk (inline code, not stdin exec)", async () => {
+    const risk = await classifyRisk("bash", {
+      command: 'cat data.json | python3 -c "import sys; print(sys.stdin.read())"',
+    });
+    expect(risk).toBe(RiskLevel.Low);
+  });
+
+  test("pipe to python3 without -c is high risk (stdin exec)", async () => {
+    const risk = await classifyRisk("bash", {
+      command: "cat exploit.py | python3",
+    });
+    expect(risk).toBe(RiskLevel.High);
+  });
+
+  test("proxied bash with high-risk command is auto-allowed by default rule", async () => {
+    const result = await check(
+      "bash",
+      {
+        command: "cat exploit.py | python3",
+        network_mode: "proxied",
+      },
+      "/tmp",
+    );
+    expect(result.decision).toBe("allow");
+  });
+
   test("host_bash with network_mode=proxied follows normal flow", async () => {
     addRule("host_bash", "**", "everywhere");
     const result = await check(
@@ -4790,15 +4823,14 @@ describe("workspace mode — auto-allow workspace-scoped operations", () => {
     }
   });
 
-  // ── proxied bash — follows normal rules (no special-casing) ──
+  // ── proxied bash — risk capped at medium ──
 
-  test("bash with network_mode=proxied → allow (follows normal rules in workspace mode)", async () => {
+  test("bash with network_mode=proxied → allow (risk capped at medium)", async () => {
     const result = await check(
       "bash",
       { command: "curl https://api.example.com", network_mode: "proxied" },
       workspaceDir,
     );
-    // Default allow-bash rule auto-allows; proxied mode is not special-cased.
     expect(result.decision).toBe("allow");
   });
 

package/src/__tests__/config-schema.test.ts

@@ -169,6 +169,7 @@ describe("AssistantConfigSchema", () => {
       enqueueIntervalMs: 6 * 60 * 60 * 1000,
       supersededItemRetentionMs: 30 * 24 * 60 * 60 * 1000,
       conversationRetentionDays: 0,
+      llmRequestLogRetentionMs: 7 * 24 * 60 * 60 * 1000,
     });
   });
 
@@ -421,6 +422,8 @@ describe("AssistantConfigSchema", () => {
     const result = AssistantConfigSchema.parse({});
     expect(result.permissions).toEqual({
       mode: "workspace",
+      askBeforeActing: true,
+      hostAccess: false,
     });
   });
 
@@ -1128,6 +1131,8 @@ describe("loadConfig with schema validation", () => {
     const config = loadConfig();
     expect(config.permissions).toEqual({
       mode: "workspace",
+      askBeforeActing: true,
+      hostAccess: false,
     });
   });
 

package/src/__tests__/conversation-agent-loop-overflow.test.ts

@@ -206,11 +206,13 @@ mock.module("../daemon/conversation-memory.js", () => ({
 let mockApplyRuntimeInjections: (msgs: Message[]) => Message[] = (msgs) => msgs;
 mock.module("../daemon/conversation-runtime-assembly.js", () => ({
   applyRuntimeInjections: (msgs: Message[]) => mockApplyRuntimeInjections(msgs),
-  stripInjectedContext: (msgs: Message[]) => msgs,
+  stripInjectionsForCompaction: (msgs: Message[]) => msgs,
+  findLastInjectedNowContent: () => null,
+  readNowScratchpad: () => null,
 }));
 
 mock.module("../daemon/date-context.js", () => ({
-  buildTemporalContext: () => null,
+  formatTurnTimestamp: () => "2026-01-01 (Thu) 00:00:00 +00:00 (UTC)",
 }));
 
 mock.module("../daemon/history-repair.js", () => ({
@@ -226,10 +228,6 @@ mock.module("../daemon/history-repair.js", () => ({
   deepRepairHistory: (msgs: Message[]) => ({ messages: msgs, stats: {} }),
 }));
 
-mock.module("../daemon/conversation-history.js", () => ({
-  consolidateAssistantMessages: () => {},
-}));
-
 const recordUsageMock = mock(() => {});
 mock.module("../daemon/conversation-usage.js", () => ({
   recordUsage: recordUsageMock,

package/src/__tests__/conversation-agent-loop.test.ts

@@ -195,11 +195,13 @@ mock.module("../daemon/conversation-memory.js", () => ({
 
 mock.module("../daemon/conversation-runtime-assembly.js", () => ({
   applyRuntimeInjections: (msgs: Message[]) => msgs,
-  stripInjectedContext: (msgs: Message[]) => msgs,
+  stripInjectionsForCompaction: (msgs: Message[]) => msgs,
+  findLastInjectedNowContent: () => null,
+  readNowScratchpad: () => null,
 }));
 
 mock.module("../daemon/date-context.js", () => ({
-  buildTemporalContext: () => null,
+  formatTurnTimestamp: () => "2026-01-01 (Thu) 00:00:00 +00:00 (UTC)",
 }));
 
 mock.module("../daemon/history-repair.js", () => ({
@@ -215,11 +217,6 @@ mock.module("../daemon/history-repair.js", () => ({
   deepRepairHistory: (msgs: Message[]) => ({ messages: msgs, stats: {} }),
 }));
 
-const consolidateAssistantMessagesMock = mock(() => false);
-mock.module("../daemon/conversation-history.js", () => ({
-  consolidateAssistantMessages: consolidateAssistantMessagesMock,
-}));
-
 const recordUsageMock = mock(() => {});
 const recordRequestLogMock = mock(() => {});
 mock.module("../daemon/conversation-usage.js", () => ({
@@ -471,8 +468,6 @@ beforeEach(() => {
   recordRequestLogMock.mockClear();
   syncMessageToDiskMock.mockClear();
   rebuildConversationDiskViewFromDbStateMock.mockClear();
-  consolidateAssistantMessagesMock.mockReset();
-  consolidateAssistantMessagesMock.mockImplementation(() => false);
 });
 
 describe("session-agent-loop", () => {
@@ -1944,48 +1939,6 @@ describe("session-agent-loop", () => {
       expect(drainReason).toBe("loop_complete");
     });
 
-    test("rebuilds disk view after consolidation mutates persisted history", async () => {
-      consolidateAssistantMessagesMock.mockReturnValue(true);
-
-      const ctx = makeCtx({
-        agentLoopRun: async (
-          messages: Message[],
-          onEvent: (event: AgentEvent) => void,
-        ) => {
-          onEvent({
-            type: "message_complete",
-            message: {
-              role: "assistant",
-              content: [{ type: "text", text: "done" }],
-            },
-          });
-          onEvent({
-            type: "usage",
-            inputTokens: 10,
-            outputTokens: 5,
-            model: "test",
-            providerDurationMs: 50,
-          });
-          return [
-            ...messages,
-            {
-              role: "assistant" as const,
-              content: [{ type: "text", text: "done" }] as ContentBlock[],
-            },
-          ];
-        },
-      });
-
-      await runAgentLoopImpl(ctx, "hi", "msg-consolidate", () => {});
-
-      expect(consolidateAssistantMessagesMock).toHaveBeenCalledWith(
-        "test-conv",
-        "msg-consolidate",
-      );
-      expect(rebuildConversationDiskViewFromDbStateMock).toHaveBeenCalledWith(
-        "test-conv",
-      );
-    });
   });
 
   describe("stale pending surface cleanup", () => {

package/src/__tests__/conversation-history-web-search.test.ts

@@ -41,7 +41,7 @@ mock.module("../memory/conversation-crud.js", () => ({
   deleteMessageById: (messageId: string) => {
     deletedMessageIds.push(messageId);
     dbMessages = dbMessages.filter((m) => m.id !== messageId);
-    return { segmentIds: [], orphanedItemIds: [] };
+    return { segmentIds: [], deletedSummaryIds: [] };
   },
   updateMessageContent: (messageId: string, content: string) => {
     updatedMessages.push({ id: messageId, content });