@vellumai/assistant 0.6.3 → 0.6.5

package/openapi.yaml

@@ -3,7 +3,7 @@
 openapi: 3.0.0
 info:
   title: Vellum Assistant API
-  version: 0.6.3
+  version: 0.6.5
   description: Auto-generated OpenAPI specification for the Vellum Assistant runtime HTTP server.
 servers:
   - url: http://127.0.0.1:7821
@@ -948,7 +948,10 @@ paths:
     post:
       operationId: attachments_post
       summary: Upload attachment
-      description: Upload an attachment as base64 data or file path reference.
+      description:
+        Upload an attachment. Supports application/json (base64 data or file path reference), multipart/form-data
+        (file + filename + mimeType fields), and application/octet-stream (raw bytes with filename and mimeType query
+        params).
       tags:
         - attachments
       responses:
@@ -1118,6 +1121,172 @@ paths:
                 - eyeStyle
                 - color
               additionalProperties: false
+  /v1/backups:
+    get:
+      operationId: backups_get
+      summary: List backup snapshots
+      description:
+        Lists local and offsite backup snapshots. Each offsite destination includes a `reachable` flag reflecting
+        whether the backing volume is currently available. When `backup.offsite.enabled` is false the `offsite` array is
+        empty and `offsiteEnabled` is false — clients should gate offsite UI on `offsiteEnabled` rather than
+        `offsite.length`.
+      tags:
+        - backups
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  local:
+                    type: array
+                    items: {}
+                  offsite:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        destination:
+                          type: object
+                          properties: {}
+                          additionalProperties: {}
+                        snapshots:
+                          type: array
+                          items: {}
+                        reachable:
+                          type: boolean
+                      required:
+                        - destination
+                        - snapshots
+                        - reachable
+                      additionalProperties: false
+                  offsiteEnabled:
+                    type: boolean
+                  nextRunAt:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                required:
+                  - local
+                  - offsite
+                  - offsiteEnabled
+                  - nextRunAt
+                additionalProperties: false
+  /v1/backups/create:
+    post:
+      operationId: backups_create_post
+      summary: Create a backup snapshot immediately
+      description:
+        Trigger a manual snapshot. Bypasses the enabled and interval gates, but honors the in-progress mutex — a
+        concurrent caller receives 409.
+      tags:
+        - backups
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  local:
+                    type: object
+                    properties: {}
+                    additionalProperties: {}
+                  offsite:
+                    type: array
+                    items: {}
+                  durationMs:
+                    type: number
+                required:
+                  - local
+                  - offsite
+                  - durationMs
+                additionalProperties: false
+  /v1/backups/restore:
+    post:
+      operationId: backups_restore_post
+      summary: Restore from a backup snapshot
+      description:
+        "Restores a snapshot into the workspace. Destructive: the underlying commit flow backs up existing files
+        before overwriting. The daemon closes the live SQLite handle before writing and invalidates its config/trust
+        caches afterwards. Credentials are NOT included — users re-authenticate integrations after a restore."
+      tags:
+        - backups
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  manifest:
+                    type: object
+                    properties: {}
+                    additionalProperties: {}
+                  restoredFiles:
+                    type: number
+                required:
+                  - manifest
+                  - restoredFiles
+                additionalProperties: false
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                path:
+                  type: string
+                  description: Absolute path to the snapshot file to restore
+              required:
+                - path
+              additionalProperties: false
+  /v1/backups/verify:
+    post:
+      operationId: backups_verify_post
+      summary: Verify a backup snapshot
+      description:
+        Validates a snapshot without restoring. Decrypts encrypted bundles to a temp file, runs the vbundle
+        validator, and returns a pass/fail status.
+      tags:
+        - backups
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  valid:
+                    type: boolean
+                  manifest:
+                    type: object
+                    properties: {}
+                    additionalProperties: {}
+                  error:
+                    type: string
+                required:
+                  - valid
+                additionalProperties: false
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                path:
+                  type: string
+                  description: Absolute path to the snapshot file to verify
+              required:
+                - path
+              additionalProperties: false
   /v1/brain-graph:
     get:
       operationId: braingraph_get
@@ -1169,12 +1338,6 @@ paths:
       responses:
         "200":
           description: Successful response
-  /v1/browser-cdp:
-    post:
-      operationId: browsercdp_post
-      responses:
-        "200":
-          description: Successful response
   /v1/btw:
     post:
       operationId: btw_post
@@ -1925,7 +2088,7 @@ paths:
                   description: Pending interaction request ID
                 decision:
                   type: string
-                  description: "One of: allow, allow_10m, allow_conversation, deny, always_allow, always_deny, always_allow_high_risk"
+                  description: "One of: allow, allow_10m, allow_conversation, deny, always_allow, always_deny"
                 selectedPattern:
                   type: string
                   description: Allowlist pattern for persistent decisions
@@ -2120,6 +2283,56 @@ paths:
           required: true
           schema:
             type: string
+  /v1/contacts/guardian/channel:
+    post:
+      operationId: contacts_guardian_channel_post
+      summary: Add a channel to the guardian contact
+      description: Used by the guardian to auto-verify their own channel.
+      tags:
+        - contacts
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  ok:
+                    type: boolean
+                  contact:
+                    type: object
+                    properties: {}
+                    additionalProperties: {}
+                    description: Updated guardian contact
+                required:
+                  - ok
+                  - contact
+                additionalProperties: false
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                type:
+                  type: string
+                  description: Channel type, e.g. 'email'
+                address:
+                  type: string
+                  description: Channel address, e.g. 'user@example.com'
+                externalUserId:
+                  type: string
+                  description: External user ID for trust resolution
+                status:
+                  description: "Channel status (default: active)"
+                  type: string
+              required:
+                - type
+                - address
+                - externalUserId
+              additionalProperties: false
   /v1/contacts/invites:
     get:
       operationId: contacts_invites_get
@@ -2536,6 +2749,24 @@ paths:
           required: true
           schema:
             type: string
+  /v1/conversations/{id}/archive:
+    post:
+      operationId: conversations_by_id_archive_post
+      summary: Archive a conversation
+      description:
+        Move a conversation to the archived state. Archived conversations are hidden from the default sidebar but
+        preserved for search and recall.
+      tags:
+        - conversations
+      responses:
+        "200":
+          description: Successful response
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
   /v1/conversations/{id}/cancel:
     post:
       operationId: conversations_by_id_cancel_post
@@ -2665,6 +2896,22 @@ paths:
           required: true
           schema:
             type: string
+  /v1/conversations/{id}/unarchive:
+    post:
+      operationId: conversations_by_id_unarchive_post
+      summary: Unarchive a conversation
+      description: Restore an archived conversation back to the default sidebar.
+      tags:
+        - conversations
+      responses:
+        "200":
+          description: Successful response
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
   /v1/conversations/{id}/undo:
     post:
       operationId: conversations_by_id_undo_post
@@ -3223,6 +3470,76 @@ paths:
                   description: Upper bound epoch ms
                   type: number
               additionalProperties: false
+  /v1/filing/config:
+    get:
+      operationId: filing_config_get
+      summary: Get filing config
+      description: Return the current filing schedule configuration.
+      tags:
+        - filing
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  enabled:
+                    type: boolean
+                  intervalMs:
+                    type: number
+                  activeHoursStart:
+                    anyOf:
+                      - type: number
+                      - type: "null"
+                  activeHoursEnd:
+                    anyOf:
+                      - type: number
+                      - type: "null"
+                  nextRunAt:
+                    anyOf:
+                      - type: number
+                      - type: "null"
+                  lastRunAt:
+                    anyOf:
+                      - type: number
+                      - type: "null"
+                  success:
+                    type: boolean
+                required:
+                  - enabled
+                  - intervalMs
+                  - activeHoursStart
+                  - activeHoursEnd
+                  - nextRunAt
+                  - lastRunAt
+                  - success
+                additionalProperties: false
+  /v1/filing/run-now:
+    post:
+      operationId: filing_runnow_post
+      summary: Run filing now
+      description: Trigger an immediate filing run.
+      tags:
+        - filing
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  ran:
+                    type: boolean
+                    description: Whether the filing actually ran
+                required:
+                  - success
+                  - ran
+                additionalProperties: false
   /v1/groups:
     get:
       operationId: groups_get
@@ -3783,16 +4100,374 @@ paths:
                     type: number
                   nextRunAt:
                     type: string
-                  success:
-                    type: boolean
+                  success:
+                    type: boolean
+                required:
+                  - enabled
+                  - intervalMs
+                  - activeHoursStart
+                  - activeHoursEnd
+                  - nextRunAt
+                  - success
+                additionalProperties: false
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                enabled:
+                  type: boolean
+                  description: Enable or disable heartbeat
+                intervalMs:
+                  type: number
+                  description: Heartbeat interval in ms
+                activeHoursStart:
+                  type: number
+                  description: Active hours start (0–23)
+                activeHoursEnd:
+                  type: number
+                  description: Active hours end (0–23)
+              required:
+                - enabled
+                - intervalMs
+                - activeHoursStart
+                - activeHoursEnd
+              additionalProperties: false
+  /v1/heartbeat/run-now:
+    post:
+      operationId: heartbeat_runnow_post
+      summary: Run heartbeat now
+      description: Trigger an immediate heartbeat run.
+      tags:
+        - heartbeat
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  ran:
+                    type: boolean
+                    description: Whether the heartbeat actually ran
+                required:
+                  - success
+                  - ran
+                additionalProperties: false
+  /v1/heartbeat/runs:
+    get:
+      operationId: heartbeat_runs_get
+      summary: List heartbeat runs
+      description: Return recent heartbeat conversation runs.
+      tags:
+        - heartbeat
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  runs:
+                    type: array
+                    items: {}
+                    description: Heartbeat run records
+                required:
+                  - runs
+                additionalProperties: false
+      parameters:
+        - name: limit
+          in: query
+          required: false
+          schema:
+            type: integer
+          description: Max runs to return (default 20)
+  /v1/home/feed:
+    get:
+      operationId: home_feed_get
+      summary: Get home activity feed
+      description:
+        Return the current Home activity feed with TTL + time-away filtering applied. Also returns a context banner
+        (greeting, relative time-away label, new-item count).
+      tags:
+        - home
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  items:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        type:
+                          type: string
+                          enum:
+                            - nudge
+                            - digest
+                            - action
+                            - thread
+                        priority:
+                          type: integer
+                          minimum: 0
+                          maximum: 100
+                        title:
+                          type: string
+                        summary:
+                          type: string
+                        source:
+                          type: string
+                          enum:
+                            - gmail
+                            - slack
+                            - calendar
+                            - assistant
+                        timestamp:
+                          type: string
+                        status:
+                          default: new
+                          type: string
+                          enum:
+                            - new
+                            - seen
+                            - acted_on
+                            - dismissed
+                        expiresAt:
+                          type: string
+                        minTimeAway:
+                          type: integer
+                          minimum: 0
+                          maximum: 9007199254740991
+                        actions:
+                          type: array
+                          items:
+                            type: object
+                            properties:
+                              id:
+                                type: string
+                              label:
+                                type: string
+                              prompt:
+                                type: string
+                            required:
+                              - id
+                              - label
+                              - prompt
+                            additionalProperties: false
+                        urgency:
+                          type: string
+                          enum:
+                            - low
+                            - medium
+                            - high
+                            - critical
+                        author:
+                          type: string
+                          enum:
+                            - assistant
+                            - platform
+                        createdAt:
+                          type: string
+                      required:
+                        - id
+                        - type
+                        - priority
+                        - title
+                        - summary
+                        - timestamp
+                        - status
+                        - author
+                        - createdAt
+                      additionalProperties: false
+                  updatedAt:
+                    type: string
+                  contextBanner:
+                    type: object
+                    properties:
+                      greeting:
+                        type: string
+                      timeAwayLabel:
+                        type: string
+                      newCount:
+                        type: integer
+                        minimum: 0
+                        maximum: 9007199254740991
+                    required:
+                      - greeting
+                      - timeAwayLabel
+                      - newCount
+                    additionalProperties: false
+                  suggestedPrompts:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        label:
+                          type: string
+                        icon:
+                          type: string
+                        prompt:
+                          type: string
+                        source:
+                          type: string
+                          enum:
+                            - deterministic
+                            - assistant
+                      required:
+                        - id
+                        - label
+                        - prompt
+                        - source
+                      additionalProperties: false
+                  lowPriorityCollapsed:
+                    type: object
+                    properties:
+                      count:
+                        type: integer
+                        minimum: 0
+                        maximum: 9007199254740991
+                      itemIds:
+                        type: array
+                        items:
+                          type: string
+                    required:
+                      - count
+                      - itemIds
+                    additionalProperties: false
+                required:
+                  - items
+                  - updatedAt
+                  - contextBanner
+                  - suggestedPrompts
+                  - lowPriorityCollapsed
+                additionalProperties: false
+      parameters:
+        - name: timeAwaySeconds
+          in: query
+          required: true
+          schema:
+            type: integer
+          description:
+            Seconds since the user was last active in the client. Used to filter items with a `minTimeAway` gate and to
+            compute the context-banner relative-time label.
+  /v1/home/feed/{id}:
+    patch:
+      operationId: home_feed_by_id_patch
+      summary: Patch home feed item status
+      description:
+        Update the `status` field of a single feed item (e.g. mark it seen or acted_on). Returns the updated item
+        on success, 404 if the item does not exist, 500 if the underlying write fails.
+      tags:
+        - home
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  id:
+                    type: string
+                  type:
+                    type: string
+                    enum:
+                      - nudge
+                      - digest
+                      - action
+                      - thread
+                  priority:
+                    type: integer
+                    minimum: 0
+                    maximum: 100
+                  title:
+                    type: string
+                  summary:
+                    type: string
+                  source:
+                    type: string
+                    enum:
+                      - gmail
+                      - slack
+                      - calendar
+                      - assistant
+                  timestamp:
+                    type: string
+                  status:
+                    default: new
+                    type: string
+                    enum:
+                      - new
+                      - seen
+                      - acted_on
+                      - dismissed
+                  expiresAt:
+                    type: string
+                  minTimeAway:
+                    type: integer
+                    minimum: 0
+                    maximum: 9007199254740991
+                  actions:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        label:
+                          type: string
+                        prompt:
+                          type: string
+                      required:
+                        - id
+                        - label
+                        - prompt
+                      additionalProperties: false
+                  urgency:
+                    type: string
+                    enum:
+                      - low
+                      - medium
+                      - high
+                      - critical
+                  author:
+                    type: string
+                    enum:
+                      - assistant
+                      - platform
+                  createdAt:
+                    type: string
                 required:
-                  - enabled
-                  - intervalMs
-                  - activeHoursStart
-                  - activeHoursEnd
-                  - nextRunAt
-                  - success
+                  - id
+                  - type
+                  - priority
+                  - title
+                  - summary
+                  - timestamp
+                  - status
+                  - author
+                  - createdAt
                 additionalProperties: false
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
       requestBody:
         required: true
         content:
@@ -3800,31 +4475,25 @@ paths:
             schema:
               type: object
               properties:
-                enabled:
-                  type: boolean
-                  description: Enable or disable heartbeat
-                intervalMs:
-                  type: number
-                  description: Heartbeat interval in ms
-                activeHoursStart:
-                  type: number
-                  description: Active hours start (0–23)
-                activeHoursEnd:
-                  type: number
-                  description: Active hours end (0–23)
+                status:
+                  type: string
+                  enum:
+                    - new
+                    - seen
+                    - acted_on
+                    - dismissed
               required:
-                - enabled
-                - intervalMs
-                - activeHoursStart
-                - activeHoursEnd
+                - status
               additionalProperties: false
-  /v1/heartbeat/run-now:
+  /v1/home/feed/{id}/actions/{actionId}:
     post:
-      operationId: heartbeat_runnow_post
-      summary: Run heartbeat now
-      description: Trigger an immediate heartbeat run.
+      operationId: home_feed_by_id_actions_by_actionId_post
+      summary: Trigger home feed action
+      description:
+        Create a new conversation pre-seeded with the action's prompt as the first user message. Returns the new
+        `conversationId`.
       tags:
-        - heartbeat
+        - home
       responses:
         "200":
           description: Successful response
@@ -3833,22 +4502,31 @@ paths:
               schema:
                 type: object
                 properties:
-                  success:
-                    type: boolean
-                  ran:
-                    type: boolean
-                    description: Whether the heartbeat actually ran
+                  conversationId:
+                    type: string
                 required:
-                  - success
-                  - ran
+                  - conversationId
                 additionalProperties: false
-  /v1/heartbeat/runs:
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: actionId
+          in: path
+          required: true
+          schema:
+            type: string
+  /v1/home/state:
     get:
-      operationId: heartbeat_runs_get
-      summary: List heartbeat runs
-      description: Return recent heartbeat conversation runs.
+      operationId: home_state_get
+      summary: Get relationship state
+      description:
+        Return the current `RelationshipState` snapshot. Reads the persisted `relationship-state.json` when
+        present; falls back to an on-demand compute so fresh installs never see a 404.
       tags:
-        - heartbeat
+        - home
       responses:
         "200":
           description: Successful response
@@ -3857,20 +4535,107 @@ paths:
               schema:
                 type: object
                 properties:
-                  runs:
+                  version:
+                    type: number
+                    const: 1
+                  assistantId:
+                    type: string
+                  tier:
+                    anyOf:
+                      - type: number
+                        const: 1
+                      - type: number
+                        const: 2
+                      - type: number
+                        const: 3
+                      - type: number
+                        const: 4
+                  progressPercent:
+                    type: number
+                  facts:
                     type: array
-                    items: {}
-                    description: Heartbeat run records
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        category:
+                          type: string
+                          enum:
+                            - voice
+                            - world
+                            - priorities
+                        text:
+                          type: string
+                        confidence:
+                          type: string
+                          enum:
+                            - strong
+                            - uncertain
+                        source:
+                          type: string
+                          enum:
+                            - onboarding
+                            - inferred
+                      required:
+                        - id
+                        - category
+                        - text
+                        - confidence
+                        - source
+                      additionalProperties: false
+                  capabilities:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        name:
+                          type: string
+                        description:
+                          type: string
+                        tier:
+                          type: string
+                          enum:
+                            - unlocked
+                            - next-up
+                            - earned
+                        gate:
+                          type: string
+                        unlockHint:
+                          type: string
+                        ctaLabel:
+                          type: string
+                      required:
+                        - id
+                        - name
+                        - description
+                        - tier
+                        - gate
+                      additionalProperties: false
+                  conversationCount:
+                    type: number
+                  hatchedDate:
+                    type: string
+                  assistantName:
+                    type: string
+                  userName:
+                    type: string
+                  updatedAt:
+                    type: string
                 required:
-                  - runs
+                  - version
+                  - assistantId
+                  - tier
+                  - progressPercent
+                  - facts
+                  - capabilities
+                  - conversationCount
+                  - hatchedDate
+                  - assistantName
+                  - updatedAt
                 additionalProperties: false
-      parameters:
-        - name: limit
-          in: query
-          required: false
-          schema:
-            type: integer
-          description: Max runs to return (default 20)
   /v1/host-bash-result:
     post:
       operationId: hostbashresult_post
@@ -4208,6 +4973,14 @@ paths:
       responses:
         "200":
           description: Successful response
+  /v1/integrations/slack/channel/oauth-install:
+    post:
+      operationId: integrations_slack_channel_oauthinstall_post
+      tags:
+        - channel
+      responses:
+        "200":
+          description: Successful response
   /v1/integrations/telegram/commands:
     post:
       operationId: integrations_telegram_commands_post
@@ -4757,7 +5530,7 @@ paths:
     post:
       operationId: messages_by_id_tts_post
       summary: Synthesize message to speech
-      description: Synthesize a message's text content to audio using Fish Audio TTS.
+      description: Synthesize a message's text content to audio using the configured TTS provider.
       tags:
         - messages
       responses:
@@ -4818,7 +5591,10 @@ paths:
     post:
       operationId: migrations_import_post
       summary: Import a .vbundle archive
-      description: Commit a .vbundle archive import to disk — destructive. Backs up existing files before overwriting.
+      description:
+        Commit a .vbundle archive import to disk — destructive. Accepts the bundle as raw bytes
+        (application/octet-stream), multipart/form-data, or a JSON body carrying a signed URL the daemon fetches and
+        streams through the importer.
       tags:
         - migrations
       responses:
@@ -4852,6 +5628,56 @@ paths:
                   - manifest
                   - warnings
                 additionalProperties: false
+        "502":
+          description:
+            "Upstream fetch failed (URL body only). Body shape: { success: false, reason: 'fetch_failed',
+            upstream_status?: number }."
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  reason:
+                    type: string
+                    enum:
+                      - fetch_failed
+                  upstream_status:
+                    type: integer
+                required:
+                  - success
+                  - reason
+      requestBody:
+        required: true
+        content:
+          application/octet-stream:
+            schema:
+              type: string
+              format: binary
+              description: Raw .vbundle archive bytes.
+          multipart/form-data:
+            schema:
+              type: object
+              properties:
+                file:
+                  type: string
+                  format: binary
+                  description: The .vbundle archive uploaded as a file field.
+              required:
+                - file
+          application/json:
+            schema:
+              type: object
+              properties:
+                url:
+                  type: string
+                  format: uri
+                  description:
+                    A signed GCS URL pointing to the .vbundle archive. The daemon fetches the URL and streams the body through
+                    the importer.
+              required:
+                - url
   /v1/migrations/import-preflight:
     post:
       operationId: migrations_importpreflight_post
@@ -6176,7 +7002,9 @@ paths:
     get:
       operationId: skills_get
       summary: List all skills
-      description: Return all installed skills. Pass ?include=catalog to also include available catalog skills.
+      description:
+        "Return all installed skills. Pass ?include=catalog to also include available catalog skills. Supports
+        optional filter params: origin, kind, q, category."
       tags:
         - skills
       responses:
@@ -6261,6 +7089,8 @@ paths:
                               type: number
                             publishedAt:
                               type: string
+                            version:
+                              type: string
                           required:
                             - id
                             - name
@@ -6273,6 +7103,7 @@ paths:
                             - stars
                             - installs
                             - reports
+                            - version
                           additionalProperties: false
                         - type: object
                           properties:
@@ -6305,6 +7136,32 @@ paths:
                               type: string
                             installs:
                               type: number
+                            audit:
+                              type: object
+                              propertyNames:
+                                type: string
+                              additionalProperties:
+                                type: object
+                                properties:
+                                  risk:
+                                    type: string
+                                    enum:
+                                      - safe
+                                      - low
+                                      - medium
+                                      - high
+                                      - critical
+                                      - unknown
+                                  alerts:
+                                    type: number
+                                  score:
+                                    type: number
+                                  analyzedAt:
+                                    type: string
+                                required:
+                                  - risk
+                                  - analyzedAt
+                                additionalProperties: false
                           required:
                             - id
                             - name
@@ -6350,6 +7207,16 @@ paths:
                             - origin
                           additionalProperties: false
                     description: Skill objects
+                  categoryCounts:
+                    description: Count of skills per category (before category filter is applied)
+                    type: object
+                    propertyNames:
+                      type: string
+                    additionalProperties:
+                      type: number
+                  totalCount:
+                    description: Total number of skills matching non-category filters
+                    type: number
                 required:
                   - skills
                 additionalProperties: false
@@ -6362,6 +7229,30 @@ paths:
             enum:
               - catalog
           description: Optional inclusion flag. Use 'catalog' to merge available Vellum catalog skills into the response.
+        - name: origin
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Filter by skill origin (e.g. 'vellum', 'clawhub', 'skillssh', 'custom').
+        - name: kind
+          in: query
+          required: false
+          schema:
+            type: string
+          description: "Filter by kind: 'installed' (includes bundled), 'available', or pass through as skill.kind."
+        - name: q
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Text search across skill name, description, id, and origin label.
+        - name: category
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Filter by inferred category (e.g. 'communication', 'productivity').
     post:
       operationId: skills_post
       summary: Create skill
@@ -6504,6 +7395,8 @@ paths:
                             type: number
                           publishedAt:
                             type: string
+                          version:
+                            type: string
                           owner:
                             anyOf:
                               - type: object
@@ -6570,6 +7463,7 @@ paths:
                           - stars
                           - installs
                           - reports
+                          - version
                         additionalProperties: false
                       - type: object
                         properties:
@@ -6602,6 +7496,32 @@ paths:
                             type: string
                           installs:
                             type: number
+                          audit:
+                            type: object
+                            propertyNames:
+                              type: string
+                            additionalProperties:
+                              type: object
+                              properties:
+                                risk:
+                                  type: string
+                                  enum:
+                                    - safe
+                                    - low
+                                    - medium
+                                    - high
+                                    - critical
+                                    - unknown
+                                alerts:
+                                  type: number
+                                score:
+                                  type: number
+                                analyzedAt:
+                                  type: string
+                              required:
+                                - risk
+                                - analyzedAt
+                              additionalProperties: false
                         required:
                           - id
                           - name
@@ -6930,6 +7850,8 @@ paths:
                 properties:
                   ok:
                     type: boolean
+                  skillId:
+                    type: string
                 required:
                   - ok
                 additionalProperties: false
@@ -7052,6 +7974,8 @@ paths:
                               type: number
                             publishedAt:
                               type: string
+                            version:
+                              type: string
                           required:
                             - id
                             - name
@@ -7064,6 +7988,7 @@ paths:
                             - stars
                             - installs
                             - reports
+                            - version
                           additionalProperties: false
                         - type: object
                           properties:
@@ -7096,6 +8021,32 @@ paths:
                               type: string
                             installs:
                               type: number
+                            audit:
+                              type: object
+                              propertyNames:
+                                type: string
+                              additionalProperties:
+                                type: object
+                                properties:
+                                  risk:
+                                    type: string
+                                    enum:
+                                      - safe
+                                      - low
+                                      - medium
+                                      - high
+                                      - critical
+                                      - unknown
+                                  alerts:
+                                    type: number
+                                  score:
+                                    type: number
+                                  analyzedAt:
+                                    type: string
+                                required:
+                                  - risk
+                                  - analyzedAt
+                                additionalProperties: false
                           required:
                             - id
                             - name
@@ -7167,6 +8118,38 @@ paths:
       responses:
         "200":
           description: Successful response
+  /v1/stt/transcribe:
+    post:
+      operationId: stt_transcribe_post
+      summary: Transcribe audio to text
+      description:
+        Transcribe base64-encoded audio to text using the configured STT provider. Provider selection is resolved
+        globally via config.
+      tags:
+        - stt
+      responses:
+        "200":
+          description: Successful response
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                audioBase64:
+                  type: string
+                  description: Base64-encoded audio data to transcribe
+                mimeType:
+                  type: string
+                  description: MIME type of the audio data (must start with "audio/", e.g. "audio/wav", "audio/ogg")
+                source:
+                  description: Optional source identifier for analytics (e.g. 'dictation', 'voice-mode')
+                  type: string
+              required:
+                - audioBase64
+                - mimeType
+              additionalProperties: false
   /v1/subagents/{id}:
     get:
       operationId: subagents_by_id_get
@@ -7335,6 +8318,11 @@ paths:
                 properties:
                   ok:
                     type: boolean
+                  conversationId:
+                    type: string
+                    description:
+                      Id of a newly launched conversation when the action dispatched one (e.g. launch_conversation). Omitted
+                      otherwise.
                 required:
                   - ok
                 additionalProperties: false
@@ -7619,9 +8607,6 @@ paths:
                 decision:
                   type: string
                   description: allow or deny
-                allowHighRisk:
-                  type: boolean
-                  description: Allow high-risk invocations
               required:
                 - requestId
                 - pattern
@@ -7687,20 +8672,16 @@ paths:
                   description: Allowlist pattern
                 scope:
                   type: string
-                  description: Scope
+                  description: Scope (required for scoped tools, ignored for others)
                 decision:
                   type: string
                   description: allow, deny, or ask
-                allowHighRisk:
-                  type: boolean
-                  description: Allow high-risk invocations
                 executionTarget:
                   type: string
                   description: Execution target
               required:
                 - toolName
                 - pattern
-                - scope
                 - decision
               additionalProperties: false
   /v1/trust-rules/manage/{id}:
@@ -7783,6 +8764,39 @@ paths:
                 - decision
                 - priority
               additionalProperties: false
+  /v1/tts/synthesize:
+    post:
+      operationId: tts_synthesize_post
+      summary: Synthesize text to speech
+      description:
+        Synthesize arbitrary text to audio using the configured TTS provider. Provider selection is resolved
+        globally via config — callers do not specify a provider.
+      tags:
+        - tts
+      responses:
+        "200":
+          description: Successful response
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                text:
+                  type: string
+                  description: Text to synthesize into speech
+                context:
+                  description:
+                    Optional context hint for output policy or capability selection (e.g. voice-mode). Does not affect provider
+                    selection.
+                  type: string
+                conversationId:
+                  description: Optional conversation ID for scoping or analytics.
+                  type: string
+              required:
+                - text
+              additionalProperties: false
   /v1/usage/breakdown:
     get:
       operationId: usage_breakdown_get
@@ -7868,6 +8882,14 @@ paths:
               - daily
               - hourly
           description: 'Bucket granularity: "daily" (default) or "hourly"'
+        - name: tz
+          in: query
+          required: false
+          schema:
+            type: string
+          description:
+            IANA timezone identifier (e.g. "America/Los_Angeles"). Bucket boundaries and display labels are computed in
+            this timezone. Defaults to "UTC" for backwards compatibility.
   /v1/usage/totals:
     get:
       operationId: usage_totals_get