@vellumai/assistant 0.6.3 → 0.6.4

package/src/config/assistant-feature-flags.ts

@@ -5,7 +5,7 @@
  * `meta/feature-flags/feature-flag-registry.json` and resolves the effective
  * enabled/disabled state for each declared assistant-scope flag by consulting
  * (in priority order):
- *   1. Override values from the gateway HTTP API (or local file fallback)
+ *   1. Override values from the gateway IPC socket (or local file fallback)
  *   2. Remote values from `feature-flags-remote.json` (platform-pushed,
  *      cached locally; only used in local mode — containerized mode gets
  *      remote values via the gateway)
@@ -17,9 +17,10 @@
  */
 
 import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 
+import { ipcGetFeatureFlags } from "../ipc/gateway-client.js";
+import { getProtectedDir } from "../util/platform.js";
 import type { AssistantConfig } from "./schema.js";
 
 // ---------------------------------------------------------------------------
@@ -110,7 +111,7 @@ function parseRegistryToDefaults(parsed: unknown): FeatureFlagDefaultsRegistry {
 }
 
 // ---------------------------------------------------------------------------
-// Override loading — reads from gateway HTTP API or local file
+// Override loading — reads from gateway IPC socket or local file
 // ---------------------------------------------------------------------------
 
 /**
@@ -119,6 +120,14 @@ function parseRegistryToDefaults(parsed: unknown): FeatureFlagDefaultsRegistry {
  */
 let cachedOverrides: Record<string, boolean> | null = null;
 
+/**
+ * True when `cachedOverrides` was populated by the gateway IPC fetch (or
+ * preseeded by a test). False/unset when the cache was populated by the sync
+ * file fallback in `loadOverrides()`, which must not prevent a subsequent
+ * authoritative gateway fetch from running.
+ */
+let cachedOverridesFromGateway = false;
+
 /**
  * File format for the local feature-flags.json override file, matching the
  * gateway's feature-flag-store.ts schema.
@@ -132,14 +141,15 @@ interface FeatureFlagFileData {
  * Resolve the path to the feature flag overrides file.
  *
  * Docker: `GATEWAY_SECURITY_DIR/feature-flags.json`
- * Local:  `~/.vellum/` + gateway security subdir + `feature-flags.json`
+ * Local:  `<protectedDir>/feature-flags.json` — resolved via `getProtectedDir()`
+ *         so it honors `BASE_DATA_DIR` for per-instance setups.
  */
 function getFeatureFlagOverridesPath(): string {
   const securityDir = process.env.GATEWAY_SECURITY_DIR;
   if (securityDir) {
     return join(securityDir, "feature-flags.json");
   }
-  return join(homedir(), ".vellum", "protected", "feature-flags.json");
+  return join(getProtectedDir(), "feature-flags.json");
 }
 
 /**
@@ -172,60 +182,16 @@ function loadOverridesFromFile(): Record<string, boolean> {
 }
 
 /**
- * Fetch override values from the gateway via async HTTP.
+ * Fetch override values from the gateway via IPC (Unix domain socket).
  *
  * Returns the gateway's merged feature flag map (persisted > remote >
- * registry), or an empty record on any failure (network, auth, parse).
+ * registry), or an empty record on any failure (socket not found,
+ * timeout, parse error). No auth needed — the IPC socket is
+ * access-controlled by file-system permissions on the shared volume.
  */
 async function fetchOverridesFromGateway(): Promise<Record<string, boolean>> {
   try {
-    // Lazy-import to avoid circular dependency and keep this module
-    // importable from bootstrap code when not in containerized mode.
-    const { getGatewayInternalBaseUrl } =
-      // eslint-disable-next-line @typescript-eslint/no-require-imports
-      require("./env.js") as typeof import("./env.js");
-    const {
-      mintEdgeRelayToken,
-      isSigningKeyInitialized,
-      initAuthSigningKey,
-      resolveSigningKey,
-    } =
-      // eslint-disable-next-line @typescript-eslint/no-require-imports
-      require("../runtime/auth/token-service.js") as typeof import("../runtime/auth/token-service.js");
-
-    // CLI subprocesses don't run daemon startup, so the signing key
-    // may not be initialized yet. Initialize it now so mintEdgeRelayToken
-    // can produce a valid JWT for the gateway request.
-    if (!isSigningKeyInitialized()) {
-      initAuthSigningKey(resolveSigningKey());
-    }
-
-    const url = `${getGatewayInternalBaseUrl()}/v1/feature-flags`;
-    const token = mintEdgeRelayToken();
-
-    const response = await fetch(url, {
-      method: "GET",
-      headers: {
-        Authorization: `Bearer ${token}`,
-        Accept: "application/json",
-      },
-      signal: AbortSignal.timeout(10_000),
-    });
-
-    if (!response.ok) return {};
-
-    const parsed = (await response.json()) as {
-      flags?: Array<{ key: string; enabled: boolean }>;
-    };
-    if (!Array.isArray(parsed.flags)) return {};
-
-    const result: Record<string, boolean> = {};
-    for (const entry of parsed.flags) {
-      if (typeof entry.key === "string" && typeof entry.enabled === "boolean") {
-        result[entry.key] = entry.enabled;
-      }
-    }
-    return result;
+    return await ipcGetFeatureFlags();
   } catch {
     return {};
   }
@@ -242,17 +208,25 @@ async function fetchOverridesFromGateway(): Promise<Record<string, boolean>> {
  * On failure, the cache is left unset so subsequent sync calls fall
  * through to the file-based fallback rather than caching an empty map
  * that masks all overrides for the process lifetime.
+ *
+ * No-ops when the cache is already populated — callers that want to
+ * refresh must call `clearFeatureFlagOverridesCache()` first. This lets
+ * tests preseed flag state via `_setOverridesForTesting()` without the
+ * gateway IPC call clobbering their setup.
  */
 export async function initFeatureFlagOverrides(): Promise<void> {
+  if (cachedOverridesFromGateway) return;
+
   const gatewayOverrides = await fetchOverridesFromGateway();
   if (Object.keys(gatewayOverrides).length > 0) {
     cachedOverrides = gatewayOverrides;
+    cachedOverridesFromGateway = true;
     return;
   }
 
-  // Gateway returned empty or failed. Leave the cache unset so
-  // loadOverrides() falls through to file on the next sync read,
-  // regardless of containerized vs local mode.
+  // Gateway returned empty or failed. If the cache was populated from the
+  // file fallback, leave it in place for the next sync read. Otherwise leave
+  // unset so `loadOverrides()` falls through to file on first sync read.
 }
 
 /**
@@ -265,9 +239,6 @@ export async function initFeatureFlagOverrides(): Promise<void> {
 function loadOverrides(): Record<string, boolean> {
   if (cachedOverrides != null) return cachedOverrides;
 
-  // Cache not yet populated (initFeatureFlagOverrides wasn't called or
-  // hasn't finished). Fall back to the local file so the resolver still
-  // works, just without gateway data.
   cachedOverrides = loadOverridesFromFile();
   return cachedOverrides;
 }
@@ -333,6 +304,7 @@ function loadRemoteValues(): Record<string, boolean> {
  */
 export function clearFeatureFlagOverridesCache(): void {
   cachedOverrides = null;
+  cachedOverridesFromGateway = false;
   cachedRemoteValues = null;
 }
 
@@ -343,12 +315,19 @@ export function clearFeatureFlagOverridesCache(): void {
  * flag state without writing to disk. Production code should never call this;
  * use `clearFeatureFlagOverridesCache()` instead and let the resolver
  * re-read from the appropriate source.
+ *
+ * Forces `cachedRemoteValues` to an empty record (not `null`) so the resolver
+ * does not fall through to reading `feature-flags-remote.json` from disk. This
+ * matters because a developer's local remote-cache file can leak platform-set
+ * values into the test environment (e.g. `email-channel: true`), defeating
+ * test isolation.
  */
 export function _setOverridesForTesting(
   overrides: Record<string, boolean>,
 ): void {
   cachedOverrides = { ...overrides };
-  cachedRemoteValues = null;
+  cachedOverridesFromGateway = true;
+  cachedRemoteValues = {};
 }
 
 // ---------------------------------------------------------------------------
@@ -359,7 +338,7 @@ export function _setOverridesForTesting(
  * Resolve whether an assistant feature flag is enabled.
  *
  * Resolution order:
- *   1. Override from gateway HTTP API (or local file fallback)
+ *   1. Override from gateway IPC socket (or local file fallback)
  *   2. Remote value from `feature-flags-remote.json` (platform-pushed,
  *      cached locally)
  *   3. defaults registry `defaultEnabled`         (for declared assistant-scope keys)
@@ -395,3 +374,23 @@ export function isAssistantFeatureFlagEnabled(
 export function getAssistantFeatureFlagDefaults(): FeatureFlagDefaultsRegistry {
   return loadDefaultsRegistry();
 }
+
+// ---------------------------------------------------------------------------
+// Named flag helpers
+// ---------------------------------------------------------------------------
+
+/**
+ * Canonical key for the `home-feed` flag — gates the activity feed section on
+ * the macOS Home page (nudges, digests, actions, threads). Requires the
+ * `home-tab` flag to also be enabled. Declared in
+ * `meta/feature-flags/feature-flag-registry.json` with scope `macos`.
+ */
+export const HOME_FEED_FLAG = "home-feed";
+
+/**
+ * Resolve whether the `home-feed` flag is enabled for the current assistant
+ * config. Wraps `isAssistantFeatureFlagEnabled` with the canonical key.
+ */
+export function isHomeFeedEnabled(config: AssistantConfig): boolean {
+  return isAssistantFeatureFlagEnabled(HOME_FEED_FLAG, config);
+}

package/src/config/bundled-skills/app-builder/references/CUSTOM_ROUTES.md

@@ -6,7 +6,7 @@ When the app needs server-side persistence, custom API logic, or workspace file
 
 ## Handler file convention
 
-Each handler file exports named functions for the HTTP methods it supports (`GET`, `POST`, `PUT`, `PATCH`, `DELETE`). Handlers use the standard Web API `Request`/`Response` signature.
+Each handler file exports named functions for the HTTP methods it supports (`GET`, `POST`, `PUT`, `PATCH`, `DELETE`). Handlers receive two arguments: the standard Web API `Request` and an optional `context` object with runtime singletons.
 
 ```
 {workspaceDir}/routes/
@@ -76,6 +76,42 @@ const createRes = await window.vellum.fetch("/v1/x/items", {
 if (!createRes.ok) throw new Error(`HTTP ${createRes.status}`);
 ```
 
+## Runtime context
+
+Every handler receives a frozen `context` object as its second argument. This provides access to daemon singletons that are otherwise unreachable from dynamically imported route modules.
+
+```typescript
+export async function POST(request: Request, context): Promise<Response> {
+  // context.assistantEventHub — publish events to connected SSE clients
+  // context.assistantId       — the daemon's logical assistant ID ("self")
+}
+```
+
+### Publishing events to the client
+
+Use `context.assistantEventHub` to push real-time events to connected desktop/mobile clients. This is how route handlers can trigger client-side navigation, update UI, or deliver notifications.
+
+```typescript
+// routes/open-conversation.ts
+export async function POST(request: Request, context): Promise<Response> {
+  const { conversationId } = await request.json();
+
+  await context.assistantEventHub.publish({
+    id: crypto.randomUUID(),
+    assistantId: context.assistantId,
+    conversationId,
+    emittedAt: new Date().toISOString(),
+    message: { type: "open_conversation", conversationId },
+  });
+
+  return Response.json({ ok: true });
+}
+```
+
+The context object is **immutable** — attempting to reassign its properties will throw in strict mode (ESM). This prevents user route handlers from accidentally corrupting shared state.
+
+Legacy handlers that only accept `(request)` continue to work — the context is passed positionally but ignored if the handler doesn't declare the parameter.
+
 ## Key rules
 
 - Always create the route handler files via `file_write` before calling `app_refresh`

package/src/config/bundled-skills/browser/SKILL.md

@@ -13,10 +13,12 @@ metadata:
 
 Use this skill to browse the web. After loading this skill, the following browser tools become available:
 
+- `browser_attach` - Attach the Chrome debugger to the active tab
 - `browser_navigate` - Navigate to a URL
 - `browser_snapshot` - List interactive elements on the current page
 - `browser_screenshot` - Take a visual screenshot
 - `browser_close` - Close the browser page
+- `browser_detach` - Detach the Chrome debugger from the active tab
 - `browser_click` - Click an element
 - `browser_type` - Type text into an input
 - `browser_press_key` - Press a keyboard key
@@ -27,18 +29,41 @@ Use this skill to browse the web. After loading this skill, the following browse
 - `browser_extract` - Extract page text content
 - `browser_wait_for_download` - Wait for a file download to complete
 - `browser_fill_credential` - Fill a stored credential into a form field
+- `browser_status` - Diagnose browser backend readiness and setup steps
 
 ## Capabilities
 
 This browser runs **full Chromium with JavaScript enabled**. It can handle SPAs, React/Vue/Angular apps, dynamic content, date pickers, booking systems, reservation flows, and any JavaScript-heavy interactive site. Never tell the user you "can't handle interactive JavaScript" - you can.
 
+## Browser Mode
+
+Every browser tool accepts an optional `browser_mode` parameter that controls which backend executes the command:
+
+| Value | Backend | Description |
+|---|---|---|
+| `auto` | Automatic | Default. The assistant picks the best available backend based on context (extension > cdp-inspect > local). |
+| `extension` | Chrome extension | Routes through the user's Chrome browser via the extension debugger. |
+| `cdp-inspect` | CDP inspect | Connects to an already-running Chrome instance via the DevTools protocol. Alias: `cdp-debugger`. |
+| `local` | Playwright | Drives a dedicated Playwright-managed Chromium instance. Alias: `playwright`. |
+
+**When to use `auto`**: Prefer `auto` (or omit `browser_mode` entirely) unless you have a specific reason to pin. The automatic backend selection handles extension availability, fallback, and session reuse.
+
+**When to pin a mode**: Pin explicitly when:
+- The user requests interaction with their own browser (use `extension` or `cdp-inspect`).
+- A tool only works on a specific backend (e.g. `browser_wait_for_download` requires `local`).
+- You want to avoid fallback behavior for diagnostic clarity.
+
+**Unsupported mode errors**: Some tools restrict which modes they support. For example, `browser_wait_for_download` only supports `auto` and `local` because file downloads require the Playwright backend. Passing an unsupported mode returns a clear error with the accepted alternatives.
+
 ## Typical Workflow
 
-1. `browser_navigate` to load a page
-2. `browser_snapshot` to discover interactive elements
-3. Use `browser_click`, `browser_type`, `browser_press_key`, `browser_scroll`, `browser_select_option`, or `browser_hover` to interact
-4. `browser_extract` or `browser_screenshot` to capture results
-5. `browser_close` when done
+1. (Optional) `browser_status` to diagnose backend availability and remediation when setup is unclear
+2. `browser_attach` to establish the debugger session (extension path; optional on other backends)
+3. `browser_navigate` to load a page
+4. `browser_snapshot` to discover interactive elements
+5. Use `browser_click`, `browser_type`, `browser_press_key`, `browser_scroll`, `browser_select_option`, or `browser_hover` to interact
+6. `browser_extract` or `browser_screenshot` to capture results
+7. `browser_detach` to end the debugger session, or `browser_close` to close the page entirely
 
 ## Interaction Strategies
 

package/src/config/bundled-skills/browser/TOOLS.json

@@ -17,6 +17,10 @@
             "type": "boolean",
             "description": "If true, allows navigation to localhost/private-network hosts. Disabled by default for SSRF safety."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -35,6 +39,10 @@
       "input_schema": {
         "type": "object",
         "properties": {
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -56,6 +64,10 @@
             "type": "boolean",
             "description": "Capture the full scrollable page instead of just the viewport."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -77,6 +89,10 @@
             "type": "boolean",
             "description": "If true, close all browser pages and the browser context. Default: false (close only the current conversation page)."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -86,6 +102,48 @@
       "executor": "tools/browser-close.ts",
       "execution_target": "host"
     },
+    {
+      "name": "browser_attach",
+      "description": "Explicitly attach the Chrome debugger to the active browser tab. Use at the start of a browser session to establish the debugging connection before navigating or interacting. On the extension path this attaches the debugger; on other backends this is a no-op that returns success.",
+      "category": "browser",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          }
+        }
+      },
+      "executor": "tools/browser-attach.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "browser_detach",
+      "description": "Explicitly detach the Chrome debugger from the active browser tab. Use when done with browser interaction to cleanly end the debugging session. On the extension path this detaches the debugger and clears the Chrome debugging banner; on other backends this clears stale snapshot state.",
+      "category": "browser",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          }
+        }
+      },
+      "executor": "tools/browser-detach.ts",
+      "execution_target": "host"
+    },
     {
       "name": "browser_click",
       "description": "Click an element on the page. Always use element_id from browser_snapshot \u2014 do not fabricate CSS selectors. For native <select> elements, use browser_select_option instead. For ARIA/custom dropdowns (mat-select, role=listbox, or any dropdown whose options appear as role=\"option\" in browser_snapshot), click to open, take a new browser_snapshot, then click the desired option by element_id. For autocomplete inputs where options don't appear in the snapshot, use browser_press_key with ArrowDown/ArrowUp + Enter.",
@@ -102,6 +160,10 @@
             "type": "string",
             "description": "A CSS selector to target. Used as fallback when element_id is not available."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -139,6 +201,10 @@
             "type": "boolean",
             "description": "If true, press Enter after typing the text."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -169,6 +235,10 @@
             "type": "string",
             "description": "Optional CSS selector to target."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -204,6 +274,10 @@
             "type": "string",
             "description": "Optional CSS selector of element to scroll within."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -242,6 +316,10 @@
             "type": "number",
             "description": "The zero-based index of the <option> to select."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -267,6 +345,10 @@
             "type": "string",
             "description": "A CSS selector to target. Used as fallback when element_id is not available."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -300,6 +382,10 @@
             "type": "number",
             "description": "Maximum wait time in milliseconds (default and max: 30000)."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -321,6 +407,10 @@
             "type": "boolean",
             "description": "If true, include a list of links found on the page (up to 200)."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -342,6 +432,10 @@
             "type": "number",
             "description": "Maximum wait time in milliseconds (default: 30000, max: 120000)."
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Only auto (default) and local (alias: playwright) are supported for this tool — file downloads require the local Playwright backend. Other modes (extension, cdp-inspect) are not supported and will be rejected."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -379,6 +473,10 @@
             "type": "boolean",
             "description": "Press Enter after filling"
           },
+          "browser_mode": {
+            "type": "string",
+            "description": "Override backend selection. Values: auto (default), extension, cdp-inspect (alias: cdp-debugger), local (alias: playwright). Omit or use auto to let the assistant choose."
+          },
           "activity": {
             "type": "string",
             "description": "Brief non-technical explanation of why this tool is being called"
@@ -388,6 +486,31 @@
       },
       "executor": "tools/browser-fill-credential.ts",
       "execution_target": "host"
+    },
+    {
+      "name": "browser_status",
+      "description": "Check browser backend readiness and remediation guidance. Reports per-mode availability, verification method, setup steps, and trade-offs for extension, cdp-inspect, and local Playwright modes.",
+      "category": "browser",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "browser_mode": {
+            "type": "string",
+            "description": "Optional scope override for this status check. Use auto (default) to check all modes, or set extension/cdp-inspect/local to check only one mode. Aliases: cdp-debugger -> cdp-inspect, playwright -> local."
+          },
+          "check_local_launch": {
+            "type": "boolean",
+            "description": "If true, run an active local Playwright launch probe. Default false (preflight-only) to avoid creating a new local browser page during diagnostics."
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          }
+        }
+      },
+      "executor": "tools/browser-status.ts",
+      "execution_target": "host"
     }
   ]
 }

package/src/config/bundled-skills/browser/tools/browser-attach.ts

@@ -0,0 +1,12 @@
+import { executeBrowserAttach } from "../../../../tools/browser/browser-execution.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+
+export async function run(
+  input: Record<string, unknown>,
+  context: ToolContext,
+): Promise<ToolExecutionResult> {
+  return executeBrowserAttach(input, context);
+}

package/src/config/bundled-skills/browser/tools/browser-detach.ts

@@ -0,0 +1,12 @@
+import { executeBrowserDetach } from "../../../../tools/browser/browser-execution.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+
+export async function run(
+  input: Record<string, unknown>,
+  context: ToolContext,
+): Promise<ToolExecutionResult> {
+  return executeBrowserDetach(input, context);
+}

package/src/config/bundled-skills/browser/tools/browser-status.ts

@@ -0,0 +1,12 @@
+import { executeBrowserStatus } from "../../../../tools/browser/browser-execution.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+
+export async function run(
+  input: Record<string, unknown>,
+  context: ToolContext,
+): Promise<ToolExecutionResult> {
+  return executeBrowserStatus(input, context);
+}

package/src/config/bundled-skills/browser/tools/browser-wait-for-download.ts

@@ -1,4 +1,5 @@
 import { browserManager } from "../../../../tools/browser/browser-manager.js";
+import { normalizeBrowserMode } from "../../../../tools/browser/browser-mode.js";
 import type {
   ToolContext,
   ToolExecutionResult,
@@ -8,6 +9,22 @@ export async function run(
   input: Record<string, unknown>,
   context: ToolContext,
 ): Promise<ToolExecutionResult> {
+  // Validate browser_mode: only auto/local are supported for downloads.
+  const modeResult = normalizeBrowserMode(input.browser_mode);
+  if ("error" in modeResult) {
+    return { content: `Error: ${modeResult.error}`, isError: true };
+  }
+  const { mode } = modeResult;
+  if (mode !== "auto" && mode !== "local") {
+    return {
+      content:
+        `Error: browser_wait_for_download does not support browser_mode "${mode}". ` +
+        `File downloads require the local Playwright backend. ` +
+        `Use browser_mode "auto" or "local" instead.`,
+      isError: true,
+    };
+  }
+
   const timeout =
     typeof input.timeout === "number"
       ? Math.min(Math.max(input.timeout, 1000), 120_000)

package/src/config/bundled-skills/contacts/SKILL.md

@@ -308,7 +308,7 @@ The response contains `{ ok: true, invite: { id, token, inviteCode, guardianInst
 
 - `inviteCode` is the 6-digit code the invitee must send to redeem the invite. It is only returned at creation time.
 - `guardianInstruction` is a generated instruction telling the guardian how to share the invite.
-- `channelHandle` is the assistant's email address (e.g. `hello@domain.agentmail.to`).
+- `channelHandle` is the assistant's email address (e.g. `hello@vellum.me`).
 
 **Presenting to the guardian**: Give the guardian the invite code and the assistant's email address:
 
@@ -320,7 +320,7 @@ The response contains `{ ok: true, invite: { id, token, inviteCode, guardianInst
 >
 > This code can be used <maxUses> time(s)<and expires in X hours/days if applicable>.
 
-If the assistant's email address is not available (AgentMail not configured), tell the guardian they need to set up email integration first.
+If the assistant's email address is not available, tell the guardian they need to register one with `assistant email register <username>`.
 
 ### Create a WhatsApp invite