@vellumai/assistant 0.6.4 → 0.6.5

package/src/config/bundled-skills/tasks/icon.svg

@@ -1,34 +0,0 @@
-<svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg">
-  <rect width="16" height="16" fill="#f0f0f0"/>
-  
-  <!-- Left task list (template layer) -->
-  <rect x="1" y="2" width="6" height="12" fill="#e8f4f8" stroke="#4a90e2" stroke-width="0.5"/>
-  <rect x="2" y="3" width="4" height="1" fill="#4a90e2"/>
-  <rect x="2" y="5" width="1" height="1" fill="#2ecc71"/>
-  <rect x="4" y="5" width="2" height="1" fill="#95a5a6"/>
-  <rect x="2" y="7" width="1" height="1" fill="#2ecc71"/>
-  <rect x="4" y="7" width="2" height="1" fill="#95a5a6"/>
-  <rect x="2" y="9" width="1" height="1" fill="#2ecc71"/>
-  <rect x="4" y="9" width="2" height="1" fill="#95a5a6"/>
-  <rect x="2" y="11" width="1" height="1" fill="#2ecc71"/>
-  <rect x="4" y="11" width="2" height="1" fill="#95a5a6"/>
-  
-  <!-- Right task queue (prioritized work) -->
-  <rect x="9" y="2" width="6" height="12" fill="#fff4e6" stroke="#f39c12" stroke-width="0.5"/>
-  <rect x="10" y="3" width="4" height="1" fill="#f39c12"/>
-  
-  <!-- Priority indicators (arrows) -->
-  <rect x="10" y="5" width="1" height="1" fill="#e74c3c"/>
-  <rect x="12" y="5" width="2" height="1" fill="#95a5a6"/>
-  
-  <rect x="10" y="7" width="1" height="1" fill="#f39c12"/>
-  <rect x="12" y="7" width="2" height="1" fill="#95a5a6"/>
-  
-  <rect x="10" y="9" width="1" height="1" fill="#2ecc71"/>
-  <rect x="12" y="9" width="2" height="1" fill="#95a5a6"/>
-  
-  <!-- Connection arrow between lists -->
-  <rect x="7" y="7" width="2" height="1" fill="#4a90e2" opacity="0.6"/>
-  <rect x="8" y="6" width="1" height="1" fill="#4a90e2" opacity="0.6"/>
-  <rect x="8" y="8" width="1" height="1" fill="#4a90e2" opacity="0.6"/>
-</svg>

package/src/config/bundled-skills/tasks/tools/task-delete.ts

@@ -1,12 +0,0 @@
-import { executeTaskDelete } from "../../../../tools/tasks/task-delete.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskDelete(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-list-add.ts

@@ -1,12 +0,0 @@
-import { executeTaskListAdd } from "../../../../tools/tasks/work-item-enqueue.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskListAdd(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-list-remove.ts

@@ -1,12 +0,0 @@
-import { executeTaskListRemove } from "../../../../tools/tasks/work-item-remove.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskListRemove(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-list-show.ts

@@ -1,12 +0,0 @@
-import { executeTaskListShow } from "../../../../tools/tasks/work-item-list.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskListShow(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-list-update.ts

@@ -1,12 +0,0 @@
-import { executeTaskListUpdate } from "../../../../tools/tasks/work-item-update.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskListUpdate(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-list.ts

@@ -1,12 +0,0 @@
-import { executeTaskList } from "../../../../tools/tasks/task-list.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskList(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-queue-run.ts

@@ -1,12 +0,0 @@
-import { executeTaskQueueRun } from "../../../../tools/tasks/work-item-run.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskQueueRun(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-run.ts

@@ -1,12 +0,0 @@
-import { executeTaskRun } from "../../../../tools/tasks/task-run.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskRun(input, context);
-}

package/src/config/bundled-skills/tasks/tools/task-save.ts

@@ -1,12 +0,0 @@
-import { executeTaskSave } from "../../../../tools/tasks/task-save.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeTaskSave(input, context);
-}

package/src/config/bundled-skills/watcher/SKILL.md

@@ -1,31 +0,0 @@
----
-name: watcher
-description: Polling watcher system for monitoring external sources
-compatibility: "Designed for Vellum personal assistants"
-metadata:
-  emoji: "👀"
-  vellum:
-    display-name: "Watcher"
----
-
-Create and manage watchers that poll external services for events and process them with an action prompt.
-
-## Concepts
-
-- **Provider** - The external service to poll (e.g. "gmail"). Each provider defines how to fetch and parse events.
-- **Action prompt** - LLM instructions for handling detected events. Sent along with event data to a background conversation.
-- **Poll interval** - How often to check for new events (minimum 15 seconds, default 60 seconds).
-- **Digest** - Summary of recent watcher activity, grouped by watcher with time-based filtering.
-
-## Lifecycle
-
-1. Create a watcher with a name, provider, and action prompt.
-2. The system polls the provider at the configured interval.
-3. Detected events are processed according to the action prompt.
-4. Use `watcher_digest` to review recent activity.
-
-## Usage Notes
-
-- Use `watcher_create` when the user wants to monitor an external source (e.g. "watch my Gmail for important emails").
-- `watcher_digest` is the go-to tool when the user asks "what happened with my email?" or similar questions about watcher activity.
-- Watchers can be enabled/disabled via `watcher_update` without deleting them.

package/src/config/bundled-skills/watcher/TOOLS.json

@@ -1,167 +0,0 @@
-{
-  "version": 1,
-  "tools": [
-    {
-      "name": "watcher_create",
-      "description": "Create a new watcher that polls an external service for events and processes them with an action prompt",
-      "category": "watcher",
-      "risk": "medium",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "name": {
-            "type": "string",
-            "description": "A human-readable name for this watcher (e.g. \"My Gmail\")"
-          },
-          "provider": {
-            "type": "string",
-            "description": "The provider to poll (e.g. \"gmail\")"
-          },
-          "action_prompt": {
-            "type": "string",
-            "description": "Instructions for the LLM on how to handle detected events. This prompt is sent along with event data to a background conversation."
-          },
-          "poll_interval_ms": {
-            "type": "number",
-            "description": "How often to poll in milliseconds. Defaults to 60000 (1 minute). Minimum 15000."
-          },
-          "credential_service": {
-            "type": "string",
-            "description": "Override the credential service to use. Defaults to the provider's required service."
-          },
-          "config": {
-            "type": "object",
-            "description": "Provider-specific configuration (e.g. filter criteria)"
-          },
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of why this tool is being called"
-          }
-        },
-        "required": ["name", "provider", "action_prompt"]
-      },
-      "executor": "tools/watcher-create.ts",
-      "execution_target": "host"
-    },
-    {
-      "name": "watcher_list",
-      "description": "List all watchers with their status, or show details for a specific watcher",
-      "category": "watcher",
-      "risk": "low",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "watcher_id": {
-            "type": "string",
-            "description": "If provided, show detailed info for this specific watcher including recent events."
-          },
-          "enabled_only": {
-            "type": "boolean",
-            "description": "When true, only show enabled watchers. Defaults to false."
-          },
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of why this tool is being called"
-          }
-        },
-        "required": []
-      },
-      "executor": "tools/watcher-list.ts",
-      "execution_target": "host"
-    },
-    {
-      "name": "watcher_update",
-      "description": "Update a watcher's configuration (name, action prompt, interval, enabled state)",
-      "category": "watcher",
-      "risk": "medium",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "watcher_id": {
-            "type": "string",
-            "description": "The ID of the watcher to update"
-          },
-          "name": {
-            "type": "string",
-            "description": "New name for the watcher"
-          },
-          "action_prompt": {
-            "type": "string",
-            "description": "New action prompt for event processing"
-          },
-          "poll_interval_ms": {
-            "type": "number",
-            "description": "New poll interval in milliseconds (minimum 15000)"
-          },
-          "enabled": {
-            "type": "boolean",
-            "description": "Enable or disable the watcher"
-          },
-          "config": {
-            "type": "object",
-            "description": "New provider-specific configuration"
-          },
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of why this tool is being called"
-          }
-        },
-        "required": ["watcher_id"]
-      },
-      "executor": "tools/watcher-update.ts",
-      "execution_target": "host"
-    },
-    {
-      "name": "watcher_delete",
-      "description": "Delete a watcher and all its event history",
-      "category": "watcher",
-      "risk": "medium",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "watcher_id": {
-            "type": "string",
-            "description": "The ID of the watcher to delete"
-          },
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of why this tool is being called"
-          }
-        },
-        "required": ["watcher_id"]
-      },
-      "executor": "tools/watcher-delete.ts",
-      "execution_target": "host"
-    },
-    {
-      "name": "watcher_digest",
-      "description": "Get a summary of recent watcher activity. Use this when the user asks about what happened with their email, notifications, etc.",
-      "category": "watcher",
-      "risk": "low",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "watcher_id": {
-            "type": "string",
-            "description": "Filter to events from a specific watcher. If omitted, shows events from all watchers."
-          },
-          "hours": {
-            "type": "number",
-            "description": "How many hours back to look. Defaults to 24."
-          },
-          "limit": {
-            "type": "number",
-            "description": "Maximum number of events to return. Defaults to 50."
-          },
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of why this tool is being called"
-          }
-        },
-        "required": []
-      },
-      "executor": "tools/watcher-digest.ts",
-      "execution_target": "host"
-    }
-  ]
-}

package/src/config/bundled-skills/watcher/tools/watcher-create.ts

@@ -1,12 +0,0 @@
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { executeWatcherCreate } from "../../../../tools/watcher/create.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeWatcherCreate(input, context);
-}

package/src/config/bundled-skills/watcher/tools/watcher-delete.ts

@@ -1,12 +0,0 @@
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { executeWatcherDelete } from "../../../../tools/watcher/delete.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeWatcherDelete(input, context);
-}

package/src/config/bundled-skills/watcher/tools/watcher-digest.ts

@@ -1,12 +0,0 @@
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { executeWatcherDigest } from "../../../../tools/watcher/digest.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeWatcherDigest(input, context);
-}

package/src/config/bundled-skills/watcher/tools/watcher-list.ts

@@ -1,12 +0,0 @@
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { executeWatcherList } from "../../../../tools/watcher/list.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeWatcherList(input, context);
-}

package/src/config/bundled-skills/watcher/tools/watcher-update.ts

@@ -1,12 +0,0 @@
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { executeWatcherUpdate } from "../../../../tools/watcher/update.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return executeWatcherUpdate(input, context);
-}

package/src/prompts/templates/UPDATES.md

@@ -1,50 +0,0 @@
-_ Lines starting with _ are comments — they won't appear in the system prompt
-_
-_ This file contains release update notes for the assistant.
-_ Each release block is wrapped with HTML comment markers:
-_ <!-- vellum-update-release:<version> -->
-_ ...release notes...
-_ <!-- /vellum-update-release:<version> -->
-_
-_ Format is freeform markdown. Write notes that help the assistant
-_ understand what changed and how it affects behavior, capabilities,
-_ or available tools. Focus on what matters to the user experience.
-
-<!-- vellum-update-release:gemini-live-stt -->
-## Google Gemini speech-to-text now uses the Live API
-
-If your user is configured with `services.stt.provider: "google-gemini"`, transcription now streams over the Gemini Live WebSocket API and emits true partial transcripts in real time, instead of the previous polling approximation that re-uploaded the full audio buffer every second. Same Gemini API key, same setup — only the transport changed. Latency for partials should drop noticeably.
-<!-- /vellum-update-release:gemini-live-stt -->
-
-<!-- vellum-update-release:rm-dangerous-skip-perms -->
-## `dangerouslySkipPermissions` removed
-
-The `permissions.dangerouslySkipPermissions` config option has been removed for security reasons. Permission prompts are now always shown when required — they can no longer be globally suppressed. If your user previously relied on this setting, they will now see permission prompts for sensitive actions. Users with the stale field in their config will see a deprecation warning and the field will be automatically cleaned up.
-<!-- /vellum-update-release:rm-dangerous-skip-perms -->
-
-<!-- vellum-update-release:heartbeat-default -->
-## Heartbeat now enabled by default
-
-Your periodic heartbeat is now enabled out of the box for all new installs (local and managed/Docker). This means you'll run a background check-in periodically — reviewing your scratchpad, thinking about follow-ups from recent conversations, and reaching out to your user when you have something worth sharing.
-
-Existing users who already have `heartbeat.enabled: false` in their config are not affected — the change only applies when the key is missing from config.json.
-
-If your user finds proactive check-ins unwanted, they can disable it by setting `heartbeat.enabled` to `false` in config.json. But try it first — being present between conversations is how you stop being a tool and start being a partner.
-
-The default checklist focuses on your user relationship, not generic tasks like weather or news. You can customize it by editing HEARTBEAT.md in your workspace.
-<!-- /vellum-update-release:heartbeat-default -->
-
-<!-- vellum-update-release:corrupted-attachment-cleanup -->
-## Corrupted image attachments cleaned up
-
-Some Slack image attachments were stored incorrectly due to a missing OAuth scope — the files contained error pages instead of actual image data. This caused conversations with those images to fail with "The AI provider rejected the request" on every subsequent message.
-
-This has been fixed automatically: the corrupted attachments were removed from affected conversations during this update, and the OAuth scope issue has been resolved so new image uploads work correctly. If your user mentions missing images from earlier conversations, this is why — the images were never successfully received in the first place.
-<!-- /vellum-update-release:corrupted-attachment-cleanup -->
-
-<!-- vellum-update-release:llm-log-retention-setting -->
-## LLM request log retention is now configurable
-
-Your user can now choose how long LLM request logs are kept on their device from Settings → Permissions & Privacy on the macOS app. The default stays at 1 day, but they can pick 7, 30, or 90 days, or "Never" to retain logs indefinitely. If your user asks about managing their privacy or controlling how much LLM request history is retained locally, point them at this new picker.
-<!-- /vellum-update-release:llm-log-retention-setting -->
-

package/src/prompts/update-bulletin-format.ts

@@ -1,85 +0,0 @@
-/**
- * Pure helpers for reading and writing release blocks in the update bulletin.
- *
- * Each release block is delimited by an HTML comment marker so that
- * concurrent appends (from different branches) are merge-safe -- they
- * simply add a new block at the end without conflicting with existing ones.
- */
-
-const MARKER_PREFIX = "<!-- vellum-update-release:";
-const MARKER_SUFFIX = " -->";
-const MARKER_REGEX = /<!-- vellum-update-release:(.+?) -->/g;
-
-/** Returns the HTML comment marker for a given release version. */
-export function releaseMarker(version: string): string {
-  return `${MARKER_PREFIX}${version}${MARKER_SUFFIX}`;
-}
-
-/** Returns true if `content` already contains the release marker for `version`. */
-export function hasReleaseBlock(content: string, version: string): boolean {
-  return content.includes(releaseMarker(version));
-}
-
-/**
- * Appends a new release block (marker + body) to `content`.
- *
- * Preserves all existing content and formatting. A blank line is inserted
- * between the previous content and the new block when the existing content
- * does not already end with a newline.
- */
-export function appendReleaseBlock(
-  content: string,
-  version: string,
-  body: string,
-): string {
-  const marker = releaseMarker(version);
-  const block = `${marker}\n${body}`;
-
-  if (content.length === 0) return `${block}\n`;
-
-  const separator = content.endsWith("\n") ? "\n" : "\n\n";
-  return `${content}${separator}${block}\n`;
-}
-
-/**
- * Filters template content to only include content blocks whose opening
- * markers are not already present in the existing workspace content.
- *
- * Each content block is delimited by opening/closing marker pairs:
- *   <!-- vellum-update-release:id --> ... <!-- /vellum-update-release:id -->
- *
- * If the template has no block structure (no matched open/close pairs),
- * returns the original body unchanged for backward compatibility.
- * Returns empty string when all blocks are already present.
- */
-export function filterNewContentBlocks(
-  body: string,
-  existing: string,
-): string {
-  const blockRegex =
-    /(<!-- vellum-update-release:(.+?) -->[\s\S]*?<!-- \/vellum-update-release:\2 -->)/g;
-  const blocks: Array<{ full: string; id: string }> = [];
-  let match: RegExpExecArray | null;
-  while ((match = blockRegex.exec(body)) !== null) {
-    blocks.push({ full: match[1], id: match[2] });
-  }
-
-  if (blocks.length === 0) return body;
-
-  const newBlocks = blocks.filter((b) => !hasReleaseBlock(existing, b.id));
-
-  if (newBlocks.length === 0) return "";
-
-  return newBlocks.map((b) => b.full).join("\n\n");
-}
-
-/** Extracts all version strings from release markers found in `content`. */
-export function extractReleaseIds(content: string): string[] {
-  const ids: string[] = [];
-  MARKER_REGEX.lastIndex = 0;
-  let match: RegExpExecArray | null;
-  while ((match = MARKER_REGEX.exec(content)) !== null) {
-    ids.push(match[1]);
-  }
-  return ids;
-}

package/src/prompts/update-bulletin-state.ts

@@ -1,58 +0,0 @@
-import {
-  getMemoryCheckpoint,
-  setMemoryCheckpoint,
-} from "../memory/checkpoints.js";
-
-const ACTIVE_RELEASES_KEY = "updates:active_releases";
-const COMPLETED_RELEASES_KEY = "updates:completed_releases";
-
-function parseReleaseArray(raw: string | null): string[] {
-  if (!raw) return [];
-  try {
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return [];
-    return parsed.filter((v): v is string => typeof v === "string");
-  } catch {
-    return [];
-  }
-}
-
-function dedupAndSort(releases: string[]): string[] {
-  return [...new Set(releases)].sort();
-}
-
-export function getActiveReleases(): string[] {
-  return parseReleaseArray(getMemoryCheckpoint(ACTIVE_RELEASES_KEY));
-}
-
-export function setActiveReleases(releases: string[]): void {
-  setMemoryCheckpoint(
-    ACTIVE_RELEASES_KEY,
-    JSON.stringify(dedupAndSort(releases)),
-  );
-}
-
-export function getCompletedReleases(): string[] {
-  return parseReleaseArray(getMemoryCheckpoint(COMPLETED_RELEASES_KEY));
-}
-
-export function setCompletedReleases(releases: string[]): void {
-  setMemoryCheckpoint(
-    COMPLETED_RELEASES_KEY,
-    JSON.stringify(dedupAndSort(releases)),
-  );
-}
-
-export function isReleaseCompleted(version: string): boolean {
-  return getCompletedReleases().includes(version);
-}
-
-export function markReleasesCompleted(versions: string[]): void {
-  const existing = getCompletedReleases();
-  setCompletedReleases([...existing, ...versions]);
-}
-
-export function addActiveRelease(version: string): void {
-  const existing = getActiveReleases();
-  setActiveReleases([...existing, version]);
-}

package/src/prompts/update-bulletin-template-path.ts

@@ -1,13 +0,0 @@
-import { join } from "node:path";
-
-import { resolveBundledDir } from "../util/bundled-asset.js";
-
-/** Returns the path to the bundled UPDATES.md template. Extracted for testability. */
-export function getTemplatePath(): string {
-  const dir = resolveBundledDir(
-    import.meta.dirname ?? __dirname,
-    "templates",
-    "templates",
-  );
-  return join(dir, "UPDATES.md");
-}