@vellumai/assistant 0.6.1 → 0.6.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (463) hide show
  1. package/bun.lock +40 -40
  2. package/bunfig.toml +3 -0
  3. package/docker-entrypoint.sh +12 -2
  4. package/docs/architecture/memory.md +1 -1
  5. package/node_modules/@vellumai/ces-contracts/src/handles.ts +7 -9
  6. package/node_modules/@vellumai/ces-contracts/src/rpc.ts +42 -0
  7. package/openapi.yaml +184 -69
  8. package/package.json +41 -41
  9. package/scripts/generate-openapi.ts +1 -2
  10. package/src/__tests__/acp-session.test.ts +43 -0
  11. package/src/__tests__/app-builder-tool-scripts.test.ts +1 -0
  12. package/src/__tests__/app-executors.test.ts +1 -0
  13. package/src/__tests__/app-source-watcher.test.ts +37 -11
  14. package/src/__tests__/approval-routes-http.test.ts +178 -1
  15. package/src/__tests__/assistant-event-hub.test.ts +30 -0
  16. package/src/__tests__/browser-fill-credential.test.ts +229 -94
  17. package/src/__tests__/browser-manager.test.ts +40 -27
  18. package/src/__tests__/catalog-files.test.ts +862 -0
  19. package/src/__tests__/channel-approvals.test.ts +53 -0
  20. package/src/__tests__/checker.test.ts +104 -170
  21. package/src/__tests__/cli-command-risk-guard.test.ts +1 -1
  22. package/src/__tests__/config-managed-gemini-defaults.test.ts +326 -0
  23. package/src/__tests__/config-schema-cmd.test.ts +2 -2
  24. package/src/__tests__/config-schema.test.ts +125 -48
  25. package/src/__tests__/confirmation-request-guardian-bridge.test.ts +23 -0
  26. package/src/__tests__/context-overflow-approval.test.ts +21 -6
  27. package/src/__tests__/conversation-agent-loop-overflow.test.ts +1 -1
  28. package/src/__tests__/conversation-agent-loop.test.ts +1 -1
  29. package/src/__tests__/conversation-analysis-routes.test.ts +169 -0
  30. package/src/__tests__/conversation-attachments.test.ts +80 -4
  31. package/src/__tests__/conversation-confirmation-signals.test.ts +155 -0
  32. package/src/__tests__/conversation-directories-parse.test.ts +105 -0
  33. package/src/__tests__/conversation-fork-crud.test.ts +17 -0
  34. package/src/__tests__/conversation-history-web-search.test.ts +1 -0
  35. package/src/__tests__/conversation-host-access-routes.test.ts +229 -0
  36. package/src/__tests__/conversation-inject-context.test.ts +103 -0
  37. package/src/__tests__/conversation-queue.test.ts +45 -2
  38. package/src/__tests__/conversation-routes-disk-view.test.ts +5 -0
  39. package/src/__tests__/conversation-routes-guardian-reply.test.ts +16 -0
  40. package/src/__tests__/conversation-routes-slash-commands.test.ts +1 -0
  41. package/src/__tests__/conversation-runtime-assembly.test.ts +269 -46
  42. package/src/__tests__/conversation-starter-routes.test.ts +126 -0
  43. package/src/__tests__/conversation-starters-cadence.test.ts +161 -0
  44. package/src/__tests__/conversation-store.test.ts +195 -0
  45. package/src/__tests__/conversation-workspace-cache-state.test.ts +193 -0
  46. package/src/__tests__/credential-execution-approval-bridge.test.ts +32 -3
  47. package/src/__tests__/credential-security-invariants.test.ts +1 -0
  48. package/src/__tests__/credential-vault-unit.test.ts +4 -4
  49. package/src/__tests__/credential-vault.test.ts +152 -13
  50. package/src/__tests__/credentials-cli.test.ts +2 -2
  51. package/src/__tests__/date-context.test.ts +4 -4
  52. package/src/__tests__/embedding-managed-proxy-selection.test.ts +256 -0
  53. package/src/__tests__/extension-id-sync-guard.test.ts +155 -0
  54. package/src/__tests__/fixtures/mock-chrome-extension.ts +375 -0
  55. package/src/__tests__/gateway-only-guard.test.ts +3 -0
  56. package/src/__tests__/gemini-provider.test.ts +2 -2
  57. package/src/__tests__/guardian-routing-invariants.test.ts +70 -2
  58. package/src/__tests__/headless-browser-interactions.test.ts +707 -371
  59. package/src/__tests__/headless-browser-navigate.test.ts +389 -47
  60. package/src/__tests__/headless-browser-read-tools.test.ts +266 -103
  61. package/src/__tests__/headless-browser-snapshot.test.ts +240 -77
  62. package/src/__tests__/host-bash-proxy.test.ts +150 -1
  63. package/src/__tests__/host-browser-e2e-cloud.test.ts +462 -0
  64. package/src/__tests__/host-browser-e2e-self-hosted-capability.test.ts +286 -0
  65. package/src/__tests__/host-browser-e2e-self-hosted.test.ts +374 -0
  66. package/src/__tests__/host-browser-event-routes.test.ts +350 -0
  67. package/src/__tests__/host-browser-proxy.test.ts +444 -0
  68. package/src/__tests__/host-browser-routes.test.ts +198 -0
  69. package/src/__tests__/host-browser-ws-events-e2e.test.ts +320 -0
  70. package/src/__tests__/host-cu-proxy.test.ts +171 -1
  71. package/src/__tests__/host-file-proxy.test.ts +185 -1
  72. package/src/__tests__/host-file-read-tool.test.ts +52 -0
  73. package/src/__tests__/host-proxy-interface.test.ts +165 -0
  74. package/src/__tests__/host-shell-tool.test.ts +1 -11
  75. package/src/__tests__/http-user-message-parity.test.ts +1 -0
  76. package/src/__tests__/init-feature-flag-overrides.test.ts +167 -0
  77. package/src/__tests__/inline-command-runner.test.ts +7 -5
  78. package/src/__tests__/integration-status.test.ts +6 -7
  79. package/src/__tests__/list-messages-tool-merge.test.ts +37 -12
  80. package/src/__tests__/log-export-workspace.test.ts +190 -0
  81. package/src/__tests__/managed-credential-catalog-cli.test.ts +12 -14
  82. package/src/__tests__/mcp-client-auth.test.ts +40 -4
  83. package/src/__tests__/mcp-health-check.test.ts +10 -3
  84. package/src/__tests__/migration-cross-version-compatibility.test.ts +3 -1
  85. package/src/__tests__/migration-export-http.test.ts +61 -2
  86. package/src/__tests__/migration-export-streaming.test.ts +66 -0
  87. package/src/__tests__/migration-import-commit-http.test.ts +101 -1
  88. package/src/__tests__/native-host-marker-sync-guard.test.ts +157 -0
  89. package/src/__tests__/navigate-settings-tab.test.ts +14 -1
  90. package/src/__tests__/notification-broadcaster.test.ts +65 -0
  91. package/src/__tests__/oauth-apps-routes.test.ts +17 -12
  92. package/src/__tests__/oauth-cli.test.ts +707 -60
  93. package/src/__tests__/oauth-connect-orchestrator.test.ts +116 -24
  94. package/src/__tests__/oauth-provider-seed-logos.test.ts +23 -0
  95. package/src/__tests__/oauth-provider-serializer.test.ts +146 -10
  96. package/src/__tests__/oauth-provider-visibility.test.ts +19 -21
  97. package/src/__tests__/oauth-providers-routes.test.ts +50 -14
  98. package/src/__tests__/oauth-store.test.ts +1386 -182
  99. package/src/__tests__/oauth2-gateway-transport.test.ts +211 -20
  100. package/src/__tests__/onboarding-template-contract.test.ts +74 -55
  101. package/src/__tests__/openai-provider.test.ts +2 -2
  102. package/src/__tests__/outlook-categories.test.ts +1 -1
  103. package/src/__tests__/outlook-client-automation.test.ts +1 -1
  104. package/src/__tests__/outlook-compose-tools.test.ts +1 -1
  105. package/src/__tests__/outlook-email-watcher.test.ts +1 -1
  106. package/src/__tests__/outlook-follow-up.test.ts +1 -1
  107. package/src/__tests__/outlook-messaging-provider.test.ts +2 -2
  108. package/src/__tests__/outlook-trash.test.ts +1 -1
  109. package/src/__tests__/outlook-unsubscribe.test.ts +1 -1
  110. package/src/__tests__/permission-checker-host-gate.test.ts +74 -14
  111. package/src/__tests__/permission-mode.test.ts +28 -56
  112. package/src/__tests__/pkb-autoinject.test.ts +96 -0
  113. package/src/__tests__/platform-callback-registration.test.ts +19 -0
  114. package/src/__tests__/post-turn-tool-result-truncation.test.ts +296 -0
  115. package/src/__tests__/proxy-approval-callback.test.ts +18 -0
  116. package/src/__tests__/require-fresh-approval.test.ts +40 -3
  117. package/src/__tests__/sandbox-diagnostics.test.ts +1 -32
  118. package/src/__tests__/sanitize-config-for-transfer.test.ts +132 -0
  119. package/src/__tests__/schedule-routes.test.ts +162 -0
  120. package/src/__tests__/secret-detection-handler.test.ts +84 -0
  121. package/src/__tests__/secret-ingress-http.test.ts +1 -0
  122. package/src/__tests__/send-endpoint-busy.test.ts +3 -0
  123. package/src/__tests__/set-permission-mode.test.ts +13 -250
  124. package/src/__tests__/skills-file-content-endpoint.test.ts +670 -0
  125. package/src/__tests__/skills-files-catalog-fallback.test.ts +450 -0
  126. package/src/__tests__/slack-channel-config.test.ts +12 -15
  127. package/src/__tests__/subagent-detail.test.ts +44 -2
  128. package/src/__tests__/subagent-disposal.test.ts +1 -0
  129. package/src/__tests__/subagent-fork-notifications.test.ts +291 -0
  130. package/src/__tests__/subagent-fork-spawn.test.ts +384 -0
  131. package/src/__tests__/subagent-manager-notify.test.ts +1 -0
  132. package/src/__tests__/subagent-notify-parent.test.ts +1 -0
  133. package/src/__tests__/subagent-spawn-tool-fork.test.ts +411 -0
  134. package/src/__tests__/subagent-tools.test.ts +1 -0
  135. package/src/__tests__/subagent-types.test.ts +1 -0
  136. package/src/__tests__/system-prompt-ask-mode.test.ts +27 -71
  137. package/src/__tests__/system-prompt.test.ts +72 -1
  138. package/src/__tests__/task-scheduler.test.ts +32 -6
  139. package/src/__tests__/telegram-config.test.ts +10 -13
  140. package/src/__tests__/terminal-sandbox.test.ts +1 -1
  141. package/src/__tests__/terminal-tools.test.ts +11 -5
  142. package/src/__tests__/test-preload.ts +14 -0
  143. package/src/__tests__/tool-approval-handler.test.ts +73 -0
  144. package/src/__tests__/tool-domain-event-publisher.test.ts +0 -1
  145. package/src/__tests__/tool-executor-lifecycle-events.test.ts +1 -8
  146. package/src/__tests__/tool-executor.test.ts +0 -1
  147. package/src/__tests__/tool-side-effects-slack-dm.test.ts +22 -0
  148. package/src/__tests__/top-level-renderer.test.ts +73 -1
  149. package/src/__tests__/transport-hints-queue.test.ts +62 -0
  150. package/src/__tests__/trust-store.test.ts +4 -4
  151. package/src/__tests__/trusted-contact-inline-approval-integration.test.ts +109 -0
  152. package/src/__tests__/v2-consent-policy.test.ts +103 -0
  153. package/src/__tests__/workspace-migration-030-seed-pkb-autoinject.test.ts +168 -0
  154. package/src/__tests__/workspace-policy.test.ts +2 -7
  155. package/src/acp/client-handler.ts +30 -4
  156. package/src/agent/loop.ts +12 -35
  157. package/src/approvals/guardian-request-resolvers.ts +21 -15
  158. package/src/browser-session/__tests__/manager.test.ts +297 -0
  159. package/src/browser-session/backends/cdp-inspect.ts +30 -0
  160. package/src/browser-session/backends/extension.ts +26 -0
  161. package/src/browser-session/backends/local.ts +24 -0
  162. package/src/browser-session/events.ts +164 -0
  163. package/src/browser-session/index.ts +27 -0
  164. package/src/browser-session/manager.ts +159 -0
  165. package/src/browser-session/types.ts +28 -0
  166. package/src/channels/__tests__/types.test.ts +134 -0
  167. package/src/channels/types.ts +55 -0
  168. package/src/cli/__tests__/run-assistant-command.ts +34 -7
  169. package/src/cli/__tests__/unknown-command.test.ts +33 -0
  170. package/src/cli/commands/browser-relay.ts +339 -409
  171. package/src/cli/commands/credentials.ts +3 -3
  172. package/src/cli/commands/default-action.ts +68 -1
  173. package/src/cli/commands/email.ts +18 -13
  174. package/src/cli/commands/mcp.ts +16 -4
  175. package/src/cli/commands/oauth/__tests__/connect.test.ts +68 -41
  176. package/src/cli/commands/oauth/__tests__/disconnect.test.ts +21 -21
  177. package/src/cli/commands/oauth/__tests__/mode.test.ts +17 -17
  178. package/src/cli/commands/oauth/__tests__/ping.test.ts +16 -16
  179. package/src/cli/commands/oauth/__tests__/providers-delete.test.ts +31 -33
  180. package/src/cli/commands/oauth/__tests__/providers-register.test.ts +329 -0
  181. package/src/cli/commands/oauth/__tests__/providers-update.test.ts +116 -12
  182. package/src/cli/commands/oauth/__tests__/status.test.ts +10 -10
  183. package/src/cli/commands/oauth/__tests__/token.test.ts +7 -7
  184. package/src/cli/commands/oauth/apps.ts +7 -4
  185. package/src/cli/commands/oauth/connect.ts +16 -2
  186. package/src/cli/commands/oauth/disconnect.ts +1 -1
  187. package/src/cli/commands/oauth/providers.ts +200 -36
  188. package/src/cli/commands/oauth/shared.ts +5 -5
  189. package/src/cli/commands/platform/__tests__/callback-routes-list.test.ts +259 -0
  190. package/src/cli/commands/platform/__tests__/connect.test.ts +1 -1
  191. package/src/cli/commands/platform/__tests__/disconnect.test.ts +1 -1
  192. package/src/cli/commands/platform/__tests__/status.test.ts +1 -1
  193. package/src/cli/commands/platform/index.ts +107 -10
  194. package/src/cli/commands/usage.ts +10 -9
  195. package/src/cli/lib/daemon-credential-client.ts +4 -0
  196. package/src/cli/program.ts +10 -3
  197. package/src/config/assistant-feature-flags.ts +59 -55
  198. package/src/config/bundled-skills/app-builder/SKILL.md +33 -173
  199. package/src/config/bundled-skills/app-builder/references/CUSTOM_ROUTES.md +105 -0
  200. package/src/config/bundled-skills/app-builder/references/INTERACTION_HOOKS.md +56 -0
  201. package/src/config/bundled-skills/app-builder/references/WIDGETS.md +125 -0
  202. package/src/config/bundled-skills/contacts/SKILL.md +3 -0
  203. package/src/config/bundled-skills/document/SKILL.md +4 -0
  204. package/src/config/bundled-skills/gmail/SKILL.md +12 -7
  205. package/src/config/bundled-skills/gmail/TOOLS.json +1 -1
  206. package/src/config/bundled-skills/gmail/tools/gmail-sender-digest.ts +2 -1
  207. package/src/config/bundled-skills/outlook/SKILL.md +7 -0
  208. package/src/config/bundled-skills/settings/TOOLS.json +1 -1
  209. package/src/config/bundled-skills/settings/tools/navigate-settings-tab.ts +8 -3
  210. package/src/config/bundled-skills/subagent/SKILL.md +21 -0
  211. package/src/config/bundled-skills/subagent/TOOLS.json +8 -4
  212. package/src/config/bundled-skills/tasks/SKILL.md +5 -0
  213. package/src/config/env-registry.ts +14 -0
  214. package/src/config/env.ts +21 -0
  215. package/src/config/feature-flag-registry.json +46 -7
  216. package/src/config/loader.ts +56 -1
  217. package/src/config/sanitize-for-transfer.ts +47 -0
  218. package/src/config/schema.ts +46 -5
  219. package/src/config/schemas/host-browser.ts +66 -0
  220. package/src/config/schemas/memory-lifecycle.ts +1 -1
  221. package/src/config/schemas/memory-retrieval.ts +103 -0
  222. package/src/config/schemas/security.ts +0 -6
  223. package/src/config/schemas/services.ts +16 -0
  224. package/src/config/types.ts +0 -1
  225. package/src/context/post-turn-tool-result-truncation.ts +176 -0
  226. package/src/context/window-manager.ts +19 -1
  227. package/src/credential-execution/approval-bridge.ts +49 -16
  228. package/src/credential-execution/managed-catalog.ts +3 -7
  229. package/src/daemon/__tests__/conversation-tool-setup.test.ts +186 -0
  230. package/src/daemon/app-source-watcher.ts +35 -0
  231. package/src/daemon/config-watcher.ts +6 -2
  232. package/src/daemon/context-overflow-approval.ts +5 -1
  233. package/src/daemon/conversation-agent-loop-handlers.ts +17 -2
  234. package/src/daemon/conversation-agent-loop.ts +74 -19
  235. package/src/daemon/conversation-attachments.ts +40 -1
  236. package/src/daemon/conversation-messaging.ts +3 -0
  237. package/src/daemon/conversation-process.ts +66 -3
  238. package/src/daemon/conversation-queue-manager.ts +8 -0
  239. package/src/daemon/conversation-runtime-assembly.ts +159 -20
  240. package/src/daemon/conversation-surfaces.ts +78 -12
  241. package/src/daemon/conversation-tool-setup.ts +74 -11
  242. package/src/daemon/conversation-workspace.ts +12 -0
  243. package/src/daemon/conversation.ts +227 -11
  244. package/src/daemon/date-context.ts +10 -10
  245. package/src/daemon/first-greeting.ts +3 -2
  246. package/src/daemon/handlers/conversations.ts +9 -139
  247. package/src/daemon/handlers/shared.ts +65 -0
  248. package/src/daemon/handlers/skills.ts +232 -37
  249. package/src/daemon/host-bash-proxy.ts +48 -13
  250. package/src/daemon/host-browser-proxy.ts +191 -0
  251. package/src/daemon/host-cu-proxy.ts +36 -11
  252. package/src/daemon/host-file-proxy.ts +57 -9
  253. package/src/daemon/lifecycle.ts +86 -12
  254. package/src/daemon/message-protocol.ts +7 -0
  255. package/src/daemon/message-types/conversations.ts +59 -13
  256. package/src/daemon/message-types/host-browser.ts +100 -0
  257. package/src/daemon/message-types/messages.ts +5 -6
  258. package/src/daemon/message-types/notifications.ts +12 -0
  259. package/src/daemon/message-types/settings.ts +12 -0
  260. package/src/daemon/message-types/skills.ts +10 -0
  261. package/src/daemon/message-types/subagents.ts +2 -0
  262. package/src/daemon/server.ts +112 -35
  263. package/src/daemon/tool-side-effects.ts +6 -0
  264. package/src/daemon/transport-hints.ts +14 -0
  265. package/src/inbound/platform-callback-registration.ts +18 -17
  266. package/src/index.ts +1 -1
  267. package/src/mcp/client.ts +59 -24
  268. package/src/memory/app-store.ts +31 -1
  269. package/src/memory/conversation-crud.ts +38 -10
  270. package/src/memory/conversation-directories.ts +39 -0
  271. package/src/memory/conversation-group-migration.ts +65 -5
  272. package/src/memory/conversation-starters-cadence.ts +76 -0
  273. package/src/memory/conversation-title-service.ts +5 -2
  274. package/src/memory/db-init.ts +12 -0
  275. package/src/memory/embedding-backend.test.ts +75 -0
  276. package/src/memory/embedding-backend.ts +131 -5
  277. package/src/memory/embedding-gemini.test.ts +54 -0
  278. package/src/memory/embedding-gemini.ts +20 -9
  279. package/src/memory/embedding-local.ts +177 -18
  280. package/src/memory/graph/capability-seed.ts +3 -5
  281. package/src/memory/graph/consolidation.ts +10 -23
  282. package/src/memory/graph/extraction-job.ts +15 -0
  283. package/src/memory/graph/retriever.ts +40 -22
  284. package/src/memory/graph/store.test.ts +7 -3
  285. package/src/memory/graph/store.ts +47 -12
  286. package/src/memory/group-crud.ts +25 -9
  287. package/src/memory/llm-usage-store.ts +45 -4
  288. package/src/memory/migrations/213-oauth-providers-scope-separator.ts +13 -0
  289. package/src/memory/migrations/214-oauth-providers-refresh-url.ts +11 -0
  290. package/src/memory/migrations/215-oauth-providers-revoke.ts +14 -0
  291. package/src/memory/migrations/216-oauth-providers-token-auth-method.ts +30 -0
  292. package/src/memory/migrations/217-conversation-host-access.ts +40 -0
  293. package/src/memory/migrations/218-oauth-providers-logo-url.ts +11 -0
  294. package/src/memory/migrations/index.ts +6 -0
  295. package/src/memory/migrations/registry.ts +8 -0
  296. package/src/memory/schema/conversations.ts +1 -0
  297. package/src/memory/schema/oauth.ts +18 -13
  298. package/src/messaging/provider.ts +1 -1
  299. package/src/notifications/broadcaster.ts +6 -0
  300. package/src/notifications/conversation-pairing.ts +12 -4
  301. package/src/notifications/emit-signal.ts +14 -0
  302. package/src/notifications/signal.ts +11 -0
  303. package/src/oauth/AGENTS.md +76 -0
  304. package/src/oauth/__tests__/identity-verifier.test.ts +24 -19
  305. package/src/oauth/__tests__/seed-providers-managed.test.ts +32 -0
  306. package/src/oauth/byo-connection.test.ts +8 -8
  307. package/src/oauth/byo-connection.ts +7 -7
  308. package/src/oauth/connect-orchestrator.ts +23 -21
  309. package/src/oauth/connect-types.ts +3 -3
  310. package/src/oauth/connection-resolver.test.ts +17 -4
  311. package/src/oauth/connection-resolver.ts +16 -16
  312. package/src/oauth/connection.ts +1 -1
  313. package/src/oauth/manual-token-connection.ts +13 -13
  314. package/src/oauth/oauth-store.ts +214 -100
  315. package/src/oauth/platform-connection.test.ts +5 -5
  316. package/src/oauth/platform-connection.ts +4 -4
  317. package/src/oauth/provider-serializer.ts +31 -5
  318. package/src/oauth/revoke.ts +76 -0
  319. package/src/oauth/seed-providers.ts +127 -87
  320. package/src/oauth/token-persistence.ts +1 -1
  321. package/src/permissions/checker.ts +3 -3
  322. package/src/permissions/defaults.ts +7 -8
  323. package/src/permissions/permission-mode.ts +4 -11
  324. package/src/permissions/prompter.ts +13 -3
  325. package/src/permissions/v2-consent-policy.ts +87 -0
  326. package/src/platform/client.ts +1 -1
  327. package/src/prompts/system-prompt.ts +18 -21
  328. package/src/prompts/templates/BOOTSTRAP-REFERENCE.md +3 -65
  329. package/src/prompts/templates/BOOTSTRAP.md +59 -96
  330. package/src/prompts/templates/SOUL.md +11 -11
  331. package/src/providers/anthropic/client.ts +1 -0
  332. package/src/providers/types.ts +1 -1
  333. package/src/runtime/AGENTS.md +23 -0
  334. package/src/runtime/__tests__/browser-extension-pair-routes.test.ts +715 -0
  335. package/src/runtime/__tests__/capability-tokens.test.ts +258 -0
  336. package/src/runtime/__tests__/chrome-extension-registry.test.ts +518 -0
  337. package/src/runtime/assistant-event-hub.ts +24 -2
  338. package/src/runtime/auth/__tests__/guard-tests.test.ts +1 -0
  339. package/src/runtime/auth/__tests__/middleware.test.ts +116 -1
  340. package/src/runtime/auth/__tests__/route-policy.test.ts +8 -0
  341. package/src/runtime/auth/middleware.ts +98 -0
  342. package/src/runtime/auth/route-policy.ts +6 -7
  343. package/src/runtime/auth/token-service.ts +8 -0
  344. package/src/runtime/capability-tokens.ts +414 -0
  345. package/src/runtime/channel-approvals.ts +18 -5
  346. package/src/runtime/chrome-extension-registry.ts +332 -0
  347. package/src/runtime/confirmation-request-guardian-bridge.ts +6 -0
  348. package/src/runtime/guardian-decision-types.ts +7 -0
  349. package/src/runtime/http-server.ts +425 -70
  350. package/src/runtime/migrations/__tests__/rebind-secrets-credentials.test.ts +172 -0
  351. package/src/runtime/migrations/__tests__/vbundle-builder-credentials.test.ts +276 -0
  352. package/src/runtime/migrations/__tests__/vbundle-import-credentials.test.ts +162 -0
  353. package/src/runtime/migrations/migration-transport.ts +6 -0
  354. package/src/runtime/migrations/migration-wizard.ts +22 -2
  355. package/src/runtime/migrations/rebind-secrets-screen.ts +76 -15
  356. package/src/runtime/migrations/vbundle-builder.ts +145 -38
  357. package/src/runtime/migrations/vbundle-import-analyzer.ts +19 -0
  358. package/src/runtime/migrations/vbundle-importer.ts +55 -5
  359. package/src/runtime/pending-interactions.ts +29 -13
  360. package/src/runtime/routes/approval-routes.ts +90 -16
  361. package/src/runtime/routes/browser-cdp-routes.ts +229 -0
  362. package/src/runtime/routes/browser-extension-pair-routes.ts +497 -0
  363. package/src/runtime/routes/conversation-analysis-routes.ts +18 -5
  364. package/src/runtime/routes/conversation-management-routes.ts +108 -0
  365. package/src/runtime/routes/conversation-routes.ts +308 -28
  366. package/src/runtime/routes/conversation-starter-routes.ts +78 -16
  367. package/src/runtime/routes/group-routes.ts +22 -8
  368. package/src/runtime/routes/guardian-action-routes.ts +24 -13
  369. package/src/runtime/routes/host-browser-routes.ts +279 -0
  370. package/src/runtime/routes/host-file-routes.ts +9 -1
  371. package/src/runtime/routes/identity-routes.ts +259 -16
  372. package/src/runtime/routes/log-export/AGENTS.md +104 -0
  373. package/src/runtime/routes/log-export/__tests__/workspace-allowlist-error-contract.test.ts +103 -0
  374. package/src/runtime/routes/log-export/__tests__/workspace-allowlist.test.ts +716 -0
  375. package/src/runtime/routes/log-export/workspace-allowlist.ts +458 -0
  376. package/src/runtime/routes/log-export-routes.ts +60 -25
  377. package/src/runtime/routes/memory-item-routes.ts +1 -7
  378. package/src/runtime/routes/migration-routes.ts +87 -2
  379. package/src/runtime/routes/oauth-apps.ts +15 -17
  380. package/src/runtime/routes/oauth-providers.ts +4 -0
  381. package/src/runtime/routes/schedule-routes.ts +24 -11
  382. package/src/runtime/routes/settings-routes.ts +9 -97
  383. package/src/runtime/routes/skills-routes.ts +52 -2
  384. package/src/runtime/routes/subagents-routes.ts +14 -10
  385. package/src/runtime/routes/usage-routes.ts +8 -7
  386. package/src/runtime/routes/workspace-routes.test.ts +22 -0
  387. package/src/runtime/routes/workspace-routes.ts +8 -1
  388. package/src/runtime/routes/workspace-utils.ts +2 -0
  389. package/src/schedule/scheduler.ts +7 -5
  390. package/src/security/ces-credential-client.ts +20 -0
  391. package/src/security/ces-rpc-credential-backend.ts +17 -0
  392. package/src/security/credential-backend.ts +5 -0
  393. package/src/security/oauth2.ts +42 -25
  394. package/src/security/secure-keys.ts +118 -25
  395. package/src/security/token-manager.ts +23 -10
  396. package/src/skills/catalog-files.ts +492 -0
  397. package/src/skills/inline-command-runner.ts +12 -14
  398. package/src/subagent/manager.ts +131 -26
  399. package/src/subagent/types.ts +19 -0
  400. package/src/tools/apps/executors.ts +11 -2
  401. package/src/tools/browser/__tests__/auth-detector.test.ts +202 -108
  402. package/src/tools/browser/auth-detector.ts +43 -12
  403. package/src/tools/browser/browser-execution.ts +645 -340
  404. package/src/tools/browser/browser-manager.ts +36 -12
  405. package/src/tools/browser/cdp-client/__tests__/accessibility-snapshot.test.ts +318 -0
  406. package/src/tools/browser/cdp-client/__tests__/cdp-dom-helpers.test.ts +1175 -0
  407. package/src/tools/browser/cdp-client/__tests__/cdp-inspect-client.test.ts +870 -0
  408. package/src/tools/browser/cdp-client/__tests__/extension-cdp-client.test.ts +330 -0
  409. package/src/tools/browser/cdp-client/__tests__/factory.test.ts +377 -0
  410. package/src/tools/browser/cdp-client/__tests__/fixtures/ax-tree-nested-frames.json +64 -0
  411. package/src/tools/browser/cdp-client/__tests__/fixtures/ax-tree-simple.json +69 -0
  412. package/src/tools/browser/cdp-client/__tests__/local-cdp-client.test.ts +310 -0
  413. package/src/tools/browser/cdp-client/__tests__/types.test.ts +96 -0
  414. package/src/tools/browser/cdp-client/accessibility-snapshot.ts +387 -0
  415. package/src/tools/browser/cdp-client/cdp-dom-helpers.ts +695 -0
  416. package/src/tools/browser/cdp-client/cdp-inspect/__tests__/discovery.test.ts +743 -0
  417. package/src/tools/browser/cdp-client/cdp-inspect/__tests__/ws-transport.test.ts +580 -0
  418. package/src/tools/browser/cdp-client/cdp-inspect/discovery.ts +578 -0
  419. package/src/tools/browser/cdp-client/cdp-inspect/ws-transport.ts +579 -0
  420. package/src/tools/browser/cdp-client/cdp-inspect-client.ts +635 -0
  421. package/src/tools/browser/cdp-client/errors.ts +34 -0
  422. package/src/tools/browser/cdp-client/extension-cdp-client.ts +125 -0
  423. package/src/tools/browser/cdp-client/factory.ts +204 -0
  424. package/src/tools/browser/cdp-client/index.ts +14 -0
  425. package/src/tools/browser/cdp-client/local-cdp-client.ts +187 -0
  426. package/src/tools/browser/cdp-client/types.ts +52 -0
  427. package/src/tools/filesystem/edit.ts +1 -1
  428. package/src/tools/filesystem/list.ts +1 -1
  429. package/src/tools/filesystem/read.ts +1 -1
  430. package/src/tools/filesystem/write.ts +2 -1
  431. package/src/tools/host-filesystem/edit.ts +1 -1
  432. package/src/tools/host-filesystem/read.ts +12 -15
  433. package/src/tools/host-filesystem/write.ts +1 -1
  434. package/src/tools/host-terminal/host-shell.ts +21 -16
  435. package/src/tools/permission-checker.ts +77 -100
  436. package/src/tools/registry.ts +0 -2
  437. package/src/tools/secret-detection-handler.ts +34 -1
  438. package/src/tools/shared/filesystem/image-read.ts +61 -40
  439. package/src/tools/skills/sandbox-runner.ts +3 -6
  440. package/src/tools/subagent/spawn.ts +47 -3
  441. package/src/tools/subagent/status.ts +2 -0
  442. package/src/tools/system/register.ts +2 -16
  443. package/src/tools/terminal/safe-env.ts +7 -0
  444. package/src/tools/terminal/sandbox-diagnostics.ts +4 -4
  445. package/src/tools/terminal/sandbox.ts +4 -1
  446. package/src/tools/terminal/shell.ts +24 -21
  447. package/src/tools/tool-approval-handler.ts +48 -2
  448. package/src/tools/types.ts +2 -3
  449. package/src/util/platform.ts +14 -19
  450. package/src/watcher/provider-types.ts +1 -1
  451. package/src/workspace/migrations/029-seed-pkb.ts +1 -0
  452. package/src/workspace/migrations/030-seed-pkb-autoinject.ts +73 -0
  453. package/src/workspace/migrations/registry.ts +2 -0
  454. package/src/workspace/top-level-renderer.ts +19 -1
  455. package/src/__tests__/chrome-cdp.test.ts +0 -419
  456. package/src/__tests__/permission-mode-sse.test.ts +0 -418
  457. package/src/__tests__/permission-mode-store.test.ts +0 -277
  458. package/src/browser-extension-relay/protocol.ts +0 -63
  459. package/src/browser-extension-relay/server.ts +0 -203
  460. package/src/config/schemas/sandbox.ts +0 -14
  461. package/src/permissions/permission-mode-store.ts +0 -180
  462. package/src/tools/browser/chrome-cdp.ts +0 -239
  463. package/src/tools/system/set-permission-mode.ts +0 -103
@@ -0,0 +1,450 @@
1
+ /**
2
+ * Tests for `getSkillFiles` catalog fallback.
3
+ *
4
+ * When a skill id isn't resolvable via `findSkillById` (i.e. not installed
5
+ * locally, not bundled, not a managed skill), `getSkillFiles` falls back to
6
+ * the Vellum catalog via `readCatalogSkillFiles`. Catalog fallback entries
7
+ * carry `content: null` because the catalog-files helper defers content
8
+ * fetching to a follow-up per-file endpoint. When a skill IS resolved by
9
+ * `findSkillById` but its on-disk directory is missing, `getSkillFiles`
10
+ * returns a 404 without falling through to the catalog so the listing and
11
+ * detail responses agree on `isInstalled`.
12
+ *
13
+ * Coverage:
14
+ * - Uninstalled catalog skill: returns `{ skill: catalog/vellum/available, files }` with `content: null` for every entry.
15
+ * - Neither installed nor in catalog: returns 404.
16
+ * - Installed skill: preserves the disk-read behavior with inline `content`.
17
+ * - Installed skill with missing directory: returns 404 without consulting the catalog.
18
+ * - `catalogSkillToSlim` mapping: `metadata.vellum["display-name"]` wins over `cs.name`.
19
+ */
20
+
21
+ import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
22
+ import { tmpdir } from "node:os";
23
+ import { join } from "node:path";
24
+ import { afterEach, beforeEach, describe, expect, mock, test } from "bun:test";
25
+
26
+ import type { SkillSummary } from "../config/skills.js";
27
+ import type { SkillFileEntry } from "../skills/catalog-files.js";
28
+ import type { CatalogSkill } from "../skills/catalog-install.js";
29
+
30
+ // ---------------------------------------------------------------------------
31
+ // Mock state — mutated by individual tests via reset helpers below
32
+ // ---------------------------------------------------------------------------
33
+
34
+ type ResolvedSkillEntry = {
35
+ summary: SkillSummary;
36
+ state: "enabled" | "disabled";
37
+ };
38
+
39
+ let mockResolvedStates: ResolvedSkillEntry[] = [];
40
+ let mockCatalog: CatalogSkill[] = [];
41
+ let mockCatalogFiles: SkillFileEntry[] | null = null;
42
+ const catalogFilesCalls: string[] = [];
43
+
44
+ // ---------------------------------------------------------------------------
45
+ // Module mocks — must be declared before importing the module under test
46
+ // ---------------------------------------------------------------------------
47
+
48
+ mock.module("../util/logger.js", () => ({
49
+ getLogger: () =>
50
+ new Proxy({} as Record<string, unknown>, {
51
+ get: () => () => {},
52
+ }),
53
+ }));
54
+
55
+ mock.module("../config/loader.js", () => ({
56
+ getConfig: () => ({}),
57
+ invalidateConfigCache: () => {},
58
+ loadRawConfig: () => ({}),
59
+ saveRawConfig: () => {},
60
+ }));
61
+
62
+ mock.module("../config/skills.js", () => ({
63
+ loadSkillCatalog: () => [],
64
+ }));
65
+
66
+ mock.module("../config/skill-state.js", () => ({
67
+ resolveSkillStates: () => mockResolvedStates,
68
+ skillFlagKey: () => null,
69
+ }));
70
+
71
+ mock.module("../config/assistant-feature-flags.js", () => ({
72
+ isAssistantFeatureFlagEnabled: () => true,
73
+ }));
74
+
75
+ mock.module("../skills/install-meta.js", () => ({
76
+ readInstallMeta: () => null,
77
+ }));
78
+
79
+ mock.module("../skills/catalog-cache.js", () => ({
80
+ getCatalog: async () => mockCatalog,
81
+ }));
82
+
83
+ mock.module("../skills/catalog-files.js", () => ({
84
+ readCatalogSkillFiles: async (skillId: string) => {
85
+ catalogFilesCalls.push(skillId);
86
+ return mockCatalogFiles;
87
+ },
88
+ }));
89
+
90
+ mock.module("../skills/catalog-install.js", () => ({
91
+ installSkillLocally: async () => {},
92
+ upsertSkillsIndex: () => {},
93
+ }));
94
+
95
+ mock.module("../skills/catalog-search.js", () => ({
96
+ filterByQuery: () => [],
97
+ }));
98
+
99
+ mock.module("../skills/clawhub.js", () => ({
100
+ clawhubCheckUpdates: async () => [],
101
+ clawhubInspect: async () => ({}),
102
+ clawhubInstall: async () => ({ success: true }),
103
+ clawhubSearch: async () => ({ skills: [] }),
104
+ clawhubUpdate: async () => ({ success: true }),
105
+ }));
106
+
107
+ mock.module("../skills/skillssh-registry.js", () => ({
108
+ installExternalSkill: async () => {},
109
+ resolveSkillSource: () => ({ owner: "", repo: "", skillSlug: "" }),
110
+ searchSkillsRegistry: async () => [],
111
+ }));
112
+
113
+ mock.module("../skills/managed-store.js", () => ({
114
+ createManagedSkill: () => ({ created: true }),
115
+ deleteManagedSkill: () => ({ deleted: true }),
116
+ removeSkillsIndexEntry: () => {},
117
+ validateManagedSkillId: () => null,
118
+ }));
119
+
120
+ mock.module("../memory/graph/capability-seed.js", () => ({
121
+ deleteSkillCapabilityNode: () => {},
122
+ seedSkillGraphNodes: () => {},
123
+ seedUninstalledCatalogSkillMemories: async () => {},
124
+ }));
125
+
126
+ mock.module("../providers/provider-send-message.js", () => ({
127
+ createTimeout: () => ({
128
+ signal: AbortSignal.timeout(1000),
129
+ cleanup: () => {},
130
+ }),
131
+ extractText: () => "",
132
+ getConfiguredProvider: async () => null,
133
+ userMessage: () => ({}),
134
+ }));
135
+
136
+ mock.module("../util/platform.js", () => ({
137
+ getWorkspaceSkillsDir: () => "/tmp/test-skills-fallback",
138
+ }));
139
+
140
+ mock.module("../daemon/handlers/shared.js", () => ({
141
+ CONFIG_RELOAD_DEBOUNCE_MS: 100,
142
+ ensureSkillEntry: (_raw: Record<string, unknown>, _id: string) => ({
143
+ enabled: false,
144
+ }),
145
+ log: {
146
+ info: () => {},
147
+ warn: () => {},
148
+ error: () => {},
149
+ debug: () => {},
150
+ },
151
+ }));
152
+
153
+ // ---------------------------------------------------------------------------
154
+ // Import after mocks
155
+ // ---------------------------------------------------------------------------
156
+
157
+ import { getSkillFiles } from "../daemon/handlers/skills.js";
158
+
159
+ // ---------------------------------------------------------------------------
160
+ // Helpers
161
+ // ---------------------------------------------------------------------------
162
+
163
+ const dummyCtx = {
164
+ debounceTimers: { schedule: () => {} },
165
+ setSuppressConfigReload: () => {},
166
+ updateConfigFingerprint: () => {},
167
+ broadcast: () => {},
168
+ } as unknown as Parameters<typeof getSkillFiles>[1];
169
+
170
+ function makeSummary(overrides: Partial<SkillSummary>): SkillSummary {
171
+ return {
172
+ id: overrides.id ?? "summary-id",
173
+ name: overrides.name ?? "summary-id",
174
+ displayName: overrides.displayName ?? "Summary",
175
+ description: overrides.description ?? "",
176
+ directoryPath: overrides.directoryPath ?? "/tmp/nonexistent-skill-dir",
177
+ skillFilePath:
178
+ overrides.skillFilePath ??
179
+ join(overrides.directoryPath ?? "/tmp/nonexistent-skill-dir", "SKILL.md"),
180
+ source: overrides.source ?? "workspace",
181
+ bundled: overrides.bundled,
182
+ icon: overrides.icon,
183
+ emoji: overrides.emoji,
184
+ toolManifest: overrides.toolManifest,
185
+ includes: overrides.includes,
186
+ featureFlag: overrides.featureFlag,
187
+ activationHints: overrides.activationHints,
188
+ avoidWhen: overrides.avoidWhen,
189
+ inlineCommandExpansions: overrides.inlineCommandExpansions,
190
+ };
191
+ }
192
+
193
+ // ---------------------------------------------------------------------------
194
+ // Tests
195
+ // ---------------------------------------------------------------------------
196
+
197
+ describe("getSkillFiles — catalog fallback", () => {
198
+ beforeEach(() => {
199
+ mockResolvedStates = [];
200
+ mockCatalog = [];
201
+ mockCatalogFiles = null;
202
+ catalogFilesCalls.length = 0;
203
+ });
204
+
205
+ test("returns catalog skill with files (content: null) when skill is uninstalled but present in catalog", async () => {
206
+ mockCatalog = [
207
+ {
208
+ id: "acme-seo",
209
+ name: "acme-seo",
210
+ description: "SEO helper",
211
+ emoji: "\u{1F50D}",
212
+ metadata: { vellum: { "display-name": "Acme SEO" } },
213
+ },
214
+ ];
215
+ mockCatalogFiles = [
216
+ {
217
+ path: "SKILL.md",
218
+ name: "SKILL.md",
219
+ size: 42,
220
+ mimeType: "",
221
+ isBinary: false,
222
+ content: null,
223
+ },
224
+ {
225
+ path: "assets/logo.png",
226
+ name: "logo.png",
227
+ size: 1024,
228
+ mimeType: "",
229
+ isBinary: true,
230
+ content: null,
231
+ },
232
+ ];
233
+
234
+ const result = await getSkillFiles("acme-seo", dummyCtx);
235
+
236
+ expect("error" in result).toBe(false);
237
+ if ("error" in result) return;
238
+
239
+ expect(result.skill).toEqual({
240
+ id: "acme-seo",
241
+ name: "Acme SEO",
242
+ description: "SEO helper",
243
+ emoji: "\u{1F50D}",
244
+ kind: "catalog",
245
+ origin: "vellum",
246
+ status: "available",
247
+ });
248
+ expect(result.files).toHaveLength(2);
249
+ for (const entry of result.files) {
250
+ expect(entry.content).toBeNull();
251
+ }
252
+ // Files should be sorted by path via localeCompare (not codepoint) —
253
+ // so "assets/logo.png" sorts before "SKILL.md" under default collation.
254
+ expect(result.files.map((f) => f.path)).toEqual(
255
+ [...result.files.map((f) => f.path)].sort((a, b) => a.localeCompare(b)),
256
+ );
257
+ expect(new Set(result.files.map((f) => f.path))).toEqual(
258
+ new Set(["SKILL.md", "assets/logo.png"]),
259
+ );
260
+ expect(catalogFilesCalls).toEqual(["acme-seo"]);
261
+ });
262
+
263
+ test("returns 404 when skill is neither installed nor in the catalog", async () => {
264
+ mockResolvedStates = [];
265
+ mockCatalog = [];
266
+
267
+ const result = await getSkillFiles("ghost-skill", dummyCtx);
268
+
269
+ expect("error" in result).toBe(true);
270
+ if (!("error" in result)) return;
271
+ expect(result.status).toBe(404);
272
+ expect(result.error).toContain("ghost-skill");
273
+ expect(catalogFilesCalls).toEqual([]);
274
+ });
275
+
276
+ test("returns 404 when skill is in catalog but readCatalogSkillFiles returns null", async () => {
277
+ mockCatalog = [
278
+ {
279
+ id: "broken-skill",
280
+ name: "broken-skill",
281
+ description: "",
282
+ },
283
+ ];
284
+ mockCatalogFiles = null;
285
+
286
+ const result = await getSkillFiles("broken-skill", dummyCtx);
287
+
288
+ expect("error" in result).toBe(true);
289
+ if (!("error" in result)) return;
290
+ expect(result.status).toBe(404);
291
+ expect(result.error).toContain("broken-skill");
292
+ });
293
+
294
+ test("installed skill returns inline disk content (no catalog call)", async () => {
295
+ // Create a real temp directory for the installed-skill path to read.
296
+ const workspaceRoot = mkdtempSync(
297
+ join(tmpdir(), "vellum-skill-files-test-"),
298
+ );
299
+ const installedDir = join(workspaceRoot, "installed-skill");
300
+ mkdirSync(installedDir, { recursive: true });
301
+ writeFileSync(
302
+ join(installedDir, "SKILL.md"),
303
+ "# Installed\n\nBody of the installed skill.",
304
+ );
305
+ writeFileSync(
306
+ join(installedDir, "notes.txt"),
307
+ "Some notes about the skill.",
308
+ );
309
+
310
+ try {
311
+ mockResolvedStates = [
312
+ {
313
+ summary: makeSummary({
314
+ id: "installed-skill",
315
+ name: "installed-skill",
316
+ displayName: "Installed Skill",
317
+ description: "A pre-installed skill",
318
+ directoryPath: installedDir,
319
+ source: "workspace",
320
+ }),
321
+ state: "enabled",
322
+ },
323
+ ];
324
+
325
+ const result = await getSkillFiles("installed-skill", dummyCtx);
326
+
327
+ expect("error" in result).toBe(false);
328
+ if ("error" in result) return;
329
+
330
+ // Catalog fallback should NOT have been consulted for an installed skill.
331
+ expect(catalogFilesCalls).toEqual([]);
332
+
333
+ expect(result.files).toHaveLength(2);
334
+ const skillMd = result.files.find((f) => f.path === "SKILL.md");
335
+ const notes = result.files.find((f) => f.path === "notes.txt");
336
+ expect(skillMd).toBeDefined();
337
+ expect(notes).toBeDefined();
338
+ expect(skillMd!.content).toBe(
339
+ "# Installed\n\nBody of the installed skill.",
340
+ );
341
+ expect(notes!.content).toBe("Some notes about the skill.");
342
+
343
+ // Sort-by-path behavior (localeCompare order) is preserved.
344
+ expect(result.files.map((f) => f.path)).toEqual(
345
+ [...result.files.map((f) => f.path)].sort((a, b) => a.localeCompare(b)),
346
+ );
347
+ } finally {
348
+ rmSync(workspaceRoot, { recursive: true, force: true });
349
+ }
350
+ });
351
+
352
+ test("returns 404 without catalog fallback when installed skill directory is missing on disk", async () => {
353
+ // `findSkillById` resolves the skill (resolver lists it as installed)
354
+ // but the on-disk directoryPath does not exist — simulates a corrupted
355
+ // install, mid-delete race, or external unmount. The handler must
356
+ // return 404 so the listing response (`kind: "installed"`) and the
357
+ // detail response stay consistent; falling through to the catalog
358
+ // would flip the detail to `kind: "catalog"` and break the
359
+ // client-side `isInstalled` contract.
360
+ mockResolvedStates = [
361
+ {
362
+ summary: makeSummary({
363
+ id: "ghost-installed",
364
+ name: "ghost-installed",
365
+ displayName: "Ghost Installed",
366
+ description: "Installed in resolver but directory is gone",
367
+ directoryPath: "/tmp/definitely-does-not-exist-" + Date.now(),
368
+ source: "workspace",
369
+ }),
370
+ state: "enabled",
371
+ },
372
+ ];
373
+ // Even if the same id is present in the catalog, the handler must NOT
374
+ // fall through — return 404 instead to avoid masking the missing
375
+ // install directory with a catalog response.
376
+ mockCatalog = [
377
+ {
378
+ id: "ghost-installed",
379
+ name: "ghost-installed",
380
+ description: "Also present in catalog",
381
+ },
382
+ ];
383
+ mockCatalogFiles = [
384
+ {
385
+ path: "SKILL.md",
386
+ name: "SKILL.md",
387
+ size: 10,
388
+ mimeType: "",
389
+ isBinary: false,
390
+ content: null,
391
+ },
392
+ ];
393
+
394
+ const result = await getSkillFiles("ghost-installed", dummyCtx);
395
+
396
+ expect("error" in result).toBe(true);
397
+ if (!("error" in result)) return;
398
+ expect(result.status).toBe(404);
399
+ expect(result.error).toContain("ghost-installed");
400
+ expect(result.error).toContain("directory missing");
401
+ // Catalog fallback must not have been consulted.
402
+ expect(catalogFilesCalls).toEqual([]);
403
+ });
404
+
405
+ test("catalogSkillToSlim falls back to cs.name when metadata.vellum.display-name is absent", async () => {
406
+ mockCatalog = [
407
+ {
408
+ id: "plain-skill",
409
+ name: "plain-skill",
410
+ description: "Minimal",
411
+ },
412
+ ];
413
+ mockCatalogFiles = [];
414
+
415
+ const result = await getSkillFiles("plain-skill", dummyCtx);
416
+
417
+ expect("error" in result).toBe(false);
418
+ if ("error" in result) return;
419
+ expect(result.skill.name).toBe("plain-skill");
420
+ expect(result.skill.kind).toBe("catalog");
421
+ expect(result.skill.origin).toBe("vellum");
422
+ expect(result.skill.status).toBe("available");
423
+ });
424
+
425
+ test("catalogSkillToSlim prefers metadata.vellum.display-name over cs.name", async () => {
426
+ mockCatalog = [
427
+ {
428
+ id: "fancy-skill",
429
+ name: "raw-fancy-name",
430
+ description: "",
431
+ metadata: { vellum: { "display-name": "Pretty Fancy Name" } },
432
+ },
433
+ ];
434
+ mockCatalogFiles = [];
435
+
436
+ const result = await getSkillFiles("fancy-skill", dummyCtx);
437
+
438
+ expect("error" in result).toBe(false);
439
+ if ("error" in result) return;
440
+ expect(result.skill.name).toBe("Pretty Fancy Name");
441
+ });
442
+ });
443
+
444
+ // ---------------------------------------------------------------------------
445
+ // Cleanup: ensure we don't leak temp dirs if a test fails mid-way.
446
+ // ---------------------------------------------------------------------------
447
+
448
+ afterEach(() => {
449
+ // Nothing to clean up outside test scope — temp dirs are cleaned per-test.
450
+ });
@@ -82,8 +82,8 @@ let oauthConnectionStore: Record<
82
82
  > = {};
83
83
 
84
84
  mock.module("../oauth/oauth-store.js", () => ({
85
- getConnectionByProvider: (providerKey: string) =>
86
- oauthConnectionStore[providerKey] ?? undefined,
85
+ getConnectionByProvider: (provider: string) =>
86
+ oauthConnectionStore[provider] ?? undefined,
87
87
  createConnection: () => ({ id: "test-conn-id" }),
88
88
  updateConnection: () => true,
89
89
  deleteConnection: (id: string) => {
@@ -101,24 +101,21 @@ mock.module("../oauth/oauth-store.js", () => ({
101
101
  // Mock manual-token-connection
102
102
  mock.module("../oauth/manual-token-connection.js", () => ({
103
103
  ensureManualTokenConnection: async (
104
- providerKey: string,
104
+ provider: string,
105
105
  accountInfo?: string,
106
106
  ) => {
107
- oauthConnectionStore[providerKey] = {
108
- id: `conn-${providerKey}`,
107
+ oauthConnectionStore[provider] = {
108
+ id: `conn-${provider}`,
109
109
  status: "active",
110
110
  accountInfo: accountInfo ?? null,
111
111
  };
112
112
  },
113
- removeManualTokenConnection: (providerKey: string) => {
114
- delete oauthConnectionStore[providerKey];
113
+ removeManualTokenConnection: (provider: string) => {
114
+ delete oauthConnectionStore[provider];
115
115
  },
116
- syncManualTokenConnection: async (
117
- providerKey: string,
118
- accountInfo?: string,
119
- ) => {
116
+ syncManualTokenConnection: async (provider: string, accountInfo?: string) => {
120
117
  const { getSecureKeyAsync } = await import("../security/secure-keys.js");
121
- if (providerKey !== "slack_channel") return;
118
+ if (provider !== "slack_channel") return;
122
119
  const hasBotToken = !!(await getSecureKeyAsync(
123
120
  credentialKey("slack_channel", "bot_token"),
124
121
  ));
@@ -126,14 +123,14 @@ mock.module("../oauth/manual-token-connection.js", () => ({
126
123
  credentialKey("slack_channel", "app_token"),
127
124
  ));
128
125
  if (hasBotToken && hasAppToken) {
129
- oauthConnectionStore[providerKey] = {
130
- id: `conn-${providerKey}`,
126
+ oauthConnectionStore[provider] = {
127
+ id: `conn-${provider}`,
131
128
  status: "active",
132
129
  accountInfo: accountInfo ?? null,
133
130
  };
134
131
  return;
135
132
  }
136
- delete oauthConnectionStore[providerKey];
133
+ delete oauthConnectionStore[provider];
137
134
  },
138
135
  }));
139
136
 
@@ -5,10 +5,20 @@
5
5
 
6
6
  import { describe, expect, test } from "bun:test";
7
7
 
8
+ import type { MessageRow } from "../memory/conversation-crud.js";
8
9
  import { parseSubagentMessages } from "../runtime/routes/subagents-routes.js";
9
10
 
10
- function msg(role: string, content: unknown[]) {
11
- return { role, content: JSON.stringify(content) };
11
+ let msgCounter = 0;
12
+ function msg(role: string, content: unknown[]): MessageRow {
13
+ msgCounter += 1;
14
+ return {
15
+ id: `msg-${msgCounter}`,
16
+ conversationId: "conv-1",
17
+ role,
18
+ content: JSON.stringify(content),
19
+ createdAt: Date.now(),
20
+ metadata: null,
21
+ };
12
22
  }
13
23
 
14
24
  describe("parseSubagentMessages", () => {
@@ -81,4 +91,36 @@ describe("parseSubagentMessages", () => {
81
91
  const result = parseSubagentMessages("sub-1", messages);
82
92
  expect(result.objective).toBe("Research vampire lore");
83
93
  });
94
+
95
+ test("strips fork directive framing from objective", () => {
96
+ const forkPrompt = [
97
+ "⎯⎯⎯ FORK TASK ⎯⎯⎯",
98
+ "You have been forked from the parent conversation to execute a specific task.",
99
+ "The conversation above is context — do NOT continue it. Do NOT spawn sub-agents.",
100
+ "Complete this task directly and return only your findings:",
101
+ "",
102
+ "Research vampire lore",
103
+ "⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯",
104
+ ].join("\n");
105
+
106
+ const messages = [
107
+ msg("user", [{ type: "text", text: forkPrompt }]),
108
+ msg("assistant", [{ type: "text", text: "On it." }]),
109
+ ];
110
+
111
+ const result = parseSubagentMessages("sub-1", messages);
112
+ expect(result.objective).toBe("Research vampire lore");
113
+ });
114
+
115
+ test("includes messageId on text events from assistant messages", () => {
116
+ const messages = [
117
+ msg("user", [{ type: "text", text: "Do something" }]),
118
+ msg("assistant", [{ type: "text", text: "Done." }]),
119
+ ];
120
+
121
+ const result = parseSubagentMessages("sub-1", messages);
122
+ const textEvent = result.events.find((e) => e.type === "text");
123
+ expect(textEvent).toBeDefined();
124
+ expect(textEvent!.messageId).toBe(messages[1].id);
125
+ });
84
126
  });
@@ -89,6 +89,7 @@ function makeState(
89
89
  },
90
90
  status: "running",
91
91
  conversationId: "conv-sub-1",
92
+ isFork: false,
92
93
  createdAt: Date.now(),
93
94
  usage: { inputTokens: 0, outputTokens: 0, estimatedCost: 0 },
94
95
  ...overrides,