@vellumai/assistant 0.6.4 → 0.6.6

package/openapi.yaml

@@ -3,7 +3,7 @@
 openapi: 3.0.0
 info:
   title: Vellum Assistant API
-  version: 0.6.4
+  version: 0.6.6
   description: Auto-generated OpenAPI specification for the Vellum Assistant runtime HTTP server.
 servers:
   - url: http://127.0.0.1:7821
@@ -1894,72 +1894,6 @@ paths:
       responses:
         "200":
           description: Successful response
-  /v1/computer-use/watch:
-    post:
-      operationId: computeruse_watch_post
-      summary: Submit watch observation
-      description: Send a screen observation from ambient watch mode.
-      tags:
-        - computer-use
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  ok:
-                    type: boolean
-                required:
-                  - ok
-                additionalProperties: false
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                watchId:
-                  type: string
-                  description: Watch session ID
-                conversationId:
-                  type: string
-                  description: Conversation to associate with
-                ocrText:
-                  type: string
-                  description: OCR text from screen capture
-                appName:
-                  type: string
-                  description: Active application name
-                windowTitle:
-                  type: string
-                  description: Active window title
-                bundleIdentifier:
-                  type: string
-                  description: Application bundle identifier
-                timestamp:
-                  type: number
-                  description: Capture timestamp (epoch ms)
-                captureIndex:
-                  type: integer
-                  minimum: -9007199254740991
-                  maximum: 9007199254740991
-                  description: Index of this capture in the batch
-                totalExpected:
-                  type: integer
-                  minimum: -9007199254740991
-                  maximum: 9007199254740991
-                  description: Total captures expected in the batch
-              required:
-                - watchId
-                - conversationId
-                - ocrText
-                - timestamp
-                - captureIndex
-                - totalExpected
-              additionalProperties: false
   /v1/config:
     get:
       operationId: config_get
@@ -2088,7 +2022,7 @@ paths:
                   description: Pending interaction request ID
                 decision:
                   type: string
-                  description: "One of: allow, allow_10m, allow_conversation, deny, always_allow, always_deny, always_allow_high_risk"
+                  description: "One of: allow, allow_10m, allow_conversation, deny, always_allow, always_deny"
                 selectedPattern:
                   type: string
                   description: Allowlist pattern for persistent decisions
@@ -2880,6 +2814,82 @@ paths:
               required:
                 - name
               additionalProperties: false
+  /v1/conversations/{id}/playground/compact:
+    post:
+      operationId: conversations_by_id_playground_compact_post
+      summary: Force compaction on a conversation (dev-only playground)
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+  /v1/conversations/{id}/playground/compaction-state:
+    get:
+      operationId: conversations_by_id_playground_compactionstate_get
+      summary: Read current compaction state for a conversation
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+  /v1/conversations/{id}/playground/inject-compaction-failures:
+    post:
+      operationId: conversations_by_id_playground_injectcompactionfailures_post
+      summary: Directly mutate compaction circuit-breaker state (dev-only playground)
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                consecutiveFailures:
+                  type: integer
+                  minimum: 0
+                  maximum: 10
+                circuitOpenForMs:
+                  type: integer
+                  minimum: 0
+                  maximum: 86400000
+              additionalProperties: false
+  /v1/conversations/{id}/playground/reset-compaction-circuit:
+    post:
+      operationId: conversations_by_id_playground_resetcompactioncircuit_post
+      summary: Clear compaction circuit-breaker state (dev-only playground)
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
   /v1/conversations/{id}/regenerate:
     post:
       operationId: conversations_by_id_regenerate_post
@@ -4234,6 +4244,7 @@ paths:
                             - slack
                             - calendar
                             - assistant
+                            - telegram
                         timestamp:
                           type: string
                         status:
@@ -4243,6 +4254,7 @@ paths:
                             - new
                             - seen
                             - acted_on
+                            - dismissed
                         expiresAt:
                           type: string
                         minTimeAway:
@@ -4265,6 +4277,30 @@ paths:
                               - label
                               - prompt
                             additionalProperties: false
+                        urgency:
+                          type: string
+                          enum:
+                            - low
+                            - medium
+                            - high
+                            - critical
+                        conversationId:
+                          type: string
+                        detailPanel:
+                          type: object
+                          properties:
+                            kind:
+                              type: string
+                              enum:
+                                - emailDraft
+                                - documentPreview
+                                - permissionChat
+                                - paymentAuth
+                                - toolPermission
+                                - updatesList
+                          required:
+                            - kind
+                          additionalProperties: false
                         author:
                           type: string
                           enum:
@@ -4301,10 +4337,51 @@ paths:
                       - timeAwayLabel
                       - newCount
                     additionalProperties: false
+                  suggestedPrompts:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        label:
+                          type: string
+                        icon:
+                          type: string
+                        prompt:
+                          type: string
+                        source:
+                          type: string
+                          enum:
+                            - deterministic
+                            - assistant
+                      required:
+                        - id
+                        - label
+                        - prompt
+                        - source
+                      additionalProperties: false
+                  lowPriorityCollapsed:
+                    type: object
+                    properties:
+                      count:
+                        type: integer
+                        minimum: 0
+                        maximum: 9007199254740991
+                      itemIds:
+                        type: array
+                        items:
+                          type: string
+                    required:
+                      - count
+                      - itemIds
+                    additionalProperties: false
                 required:
                   - items
                   - updatedAt
                   - contextBanner
+                  - suggestedPrompts
+                  - lowPriorityCollapsed
                 additionalProperties: false
       parameters:
         - name: timeAwaySeconds
@@ -4356,6 +4433,7 @@ paths:
                       - slack
                       - calendar
                       - assistant
+                      - telegram
                   timestamp:
                     type: string
                   status:
@@ -4365,6 +4443,7 @@ paths:
                       - new
                       - seen
                       - acted_on
+                      - dismissed
                   expiresAt:
                     type: string
                   minTimeAway:
@@ -4387,6 +4466,30 @@ paths:
                         - label
                         - prompt
                       additionalProperties: false
+                  urgency:
+                    type: string
+                    enum:
+                      - low
+                      - medium
+                      - high
+                      - critical
+                  conversationId:
+                    type: string
+                  detailPanel:
+                    type: object
+                    properties:
+                      kind:
+                        type: string
+                        enum:
+                          - emailDraft
+                          - documentPreview
+                          - permissionChat
+                          - paymentAuth
+                          - toolPermission
+                          - updatesList
+                    required:
+                      - kind
+                    additionalProperties: false
                   author:
                     type: string
                     enum:
@@ -4424,6 +4527,7 @@ paths:
                     - new
                     - seen
                     - acted_on
+                    - dismissed
               required:
                 - status
               additionalProperties: false
@@ -4915,6 +5019,14 @@ paths:
       responses:
         "200":
           description: Successful response
+  /v1/integrations/slack/channel/oauth-install:
+    post:
+      operationId: integrations_slack_channel_oauthinstall_post
+      tags:
+        - channel
+      responses:
+        "200":
+          description: Successful response
   /v1/integrations/telegram/commands:
     post:
       operationId: integrations_telegram_commands_post
@@ -5525,7 +5637,10 @@ paths:
     post:
       operationId: migrations_import_post
       summary: Import a .vbundle archive
-      description: Commit a .vbundle archive import to disk — destructive. Backs up existing files before overwriting.
+      description:
+        Commit a .vbundle archive import to disk — destructive. Accepts the bundle as raw bytes
+        (application/octet-stream), multipart/form-data, or a JSON body carrying a signed URL the daemon fetches and
+        streams through the importer.
       tags:
         - migrations
       responses:
@@ -5559,6 +5674,56 @@ paths:
                   - manifest
                   - warnings
                 additionalProperties: false
+        "502":
+          description:
+            "Upstream fetch failed (URL body only). Body shape: { success: false, reason: 'fetch_failed',
+            upstream_status?: number }."
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  reason:
+                    type: string
+                    enum:
+                      - fetch_failed
+                  upstream_status:
+                    type: integer
+                required:
+                  - success
+                  - reason
+      requestBody:
+        required: true
+        content:
+          application/octet-stream:
+            schema:
+              type: string
+              format: binary
+              description: Raw .vbundle archive bytes.
+          multipart/form-data:
+            schema:
+              type: object
+              properties:
+                file:
+                  type: string
+                  format: binary
+                  description: The .vbundle archive uploaded as a file field.
+              required:
+                - file
+          application/json:
+            schema:
+              type: object
+              properties:
+                url:
+                  type: string
+                  format: uri
+                  description:
+                    A signed GCS URL pointing to the .vbundle archive. The daemon fetches the URL and streams the body through
+                    the importer.
+              required:
+                - url
   /v1/migrations/import-preflight:
     post:
       operationId: migrations_importpreflight_post
@@ -5937,6 +6102,70 @@ paths:
           schema:
             type: string
           description: Conversation ID
+  /v1/playground/seed-conversation:
+    post:
+      operationId: playground_seedconversation_post
+      summary: Create a synthetic seeded conversation for compaction testing
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                turns:
+                  type: integer
+                  exclusiveMinimum: 0
+                  maximum: 500
+                avgTokensPerTurn:
+                  default: 500
+                  type: integer
+                  exclusiveMinimum: 0
+                  maximum: 5000
+                title:
+                  type: string
+                  maxLength: 120
+              required:
+                - turns
+                - avgTokensPerTurn
+              additionalProperties: false
+  /v1/playground/seeded-conversations:
+    delete:
+      operationId: playground_seededconversations_delete
+      summary: Delete every seeded playground conversation (prefix-gated)
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+    get:
+      operationId: playground_seededconversations_get
+      summary: List conversations created by the seed-conversation endpoint
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+  /v1/playground/seeded-conversations/{id}:
+    delete:
+      operationId: playground_seededconversations_by_id_delete
+      summary: Delete a single seeded conversation (prefix-gated)
+      tags:
+        - playground
+      responses:
+        "200":
+          description: Successful response
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
   /v1/profiler/runs:
     get:
       operationId: profiler_runs_get
@@ -6413,9 +6642,14 @@ paths:
                   type: string
                 message:
                   type: string
+                script:
+                  anyOf:
+                    - type: string
+                    - type: "null"
+                  description: Shell command for script mode
                 mode:
                   type: string
-                  description: notify or execute
+                  description: notify, execute, or script
                 routingIntent:
                   type: string
                   description: single_channel, multi_channel, or all_channels
@@ -6428,6 +6662,7 @@ paths:
                 - expression
                 - timezone
                 - message
+                - script
                 - mode
                 - routingIntent
                 - quiet
@@ -6489,6 +6724,34 @@ paths:
           required: true
           schema:
             type: string
+  /v1/schedules/{id}/runs:
+    get:
+      operationId: schedules_by_id_runs_get
+      summary: List schedule runs
+      description: Return recent invocation history for a schedule.
+      tags:
+        - schedules
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  runs:
+                    type: array
+                    items: {}
+                    description: Schedule run objects
+                required:
+                  - runs
+                additionalProperties: false
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: string
   /v1/schedules/{id}/toggle:
     post:
       operationId: schedules_by_id_toggle_post
@@ -8488,9 +8751,6 @@ paths:
                 decision:
                   type: string
                   description: allow or deny
-                allowHighRisk:
-                  type: boolean
-                  description: Allow high-risk invocations
               required:
                 - requestId
                 - pattern
@@ -8556,20 +8816,16 @@ paths:
                   description: Allowlist pattern
                 scope:
                   type: string
-                  description: Scope
+                  description: Scope (required for scoped tools, ignored for others)
                 decision:
                   type: string
                   description: allow, deny, or ask
-                allowHighRisk:
-                  type: boolean
-                  description: Allow high-risk invocations
                 executionTarget:
                   type: string
                   description: Execution target
               required:
                 - toolName
                 - pattern
-                - scope
                 - decision
               additionalProperties: false
   /v1/trust-rules/manage/{id}:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "license": "MIT",
   "type": "module",
   "exports": {
@@ -35,6 +35,8 @@
     "@modelcontextprotocol/sdk": "1.27.1",
     "@qdrant/js-client-rest": "1.17.0",
     "@resvg/resvg-js": "2.6.2",
+    "@resvg/resvg-js-darwin-arm64": "2.6.2",
+    "@resvg/resvg-js-darwin-x64": "2.6.2",
     "@sentry/node": "10.43.0",
     "@vellumai/ces-contracts": "file:../packages/ces-contracts",
     "@vellumai/credential-storage": "file:../packages/credential-storage",
@@ -54,6 +56,7 @@
     "postgres": "3.4.8",
     "qrcode": "1.5.4",
     "rrule": "2.8.1",
+    "tar-stream": "3.1.7",
     "tldts": "7.0.25",
     "tree-sitter-bash": "0.25.1",
     "uuid": "11.1.0",
@@ -70,8 +73,8 @@
     "@vellumai/egress-proxy"
   ],
   "overrides": {
-    "lodash": "^4.18.0",
-    "path-to-regexp": "^8.4.0"
+    "lodash": "4.18.1",
+    "path-to-regexp": "8.4.2"
   },
   "devDependencies": {
     "@types/archiver": "7.0.0",

package/scripts/generate-openapi.ts

@@ -56,6 +56,17 @@ const RouteBodySchemaSchema = z.any().refine(
   { message: "Expected a Zod schema or a plain JSON Schema object" },
 );
 
+const RouteRequestBodyVariantSchema = z.object({
+  contentType: z.string(),
+  /** Zod schema OR plain JSON Schema fragment. */
+  schema: z.any(),
+});
+
+const RouteAdditionalResponseSchema = z.object({
+  description: z.string(),
+  schema: z.any().optional(),
+});
+
 const RouteEntrySchema = z.object({
   method: z.string(),
   /** Endpoint path relative to /v1/ (e.g. "conversations/:id"). */
@@ -70,8 +81,14 @@ const RouteEntrySchema = z.object({
   queryParams: z.array(RouteQueryParamSchema).optional(),
   /** JSON Schema for the request body. */
   requestBody: RouteBodySchemaSchema.optional(),
+  /** Multi-content-type request body variants (overrides `requestBody` when present). */
+  requestBodies: z.array(RouteRequestBodyVariantSchema).optional(),
   /** JSON Schema for the 200 response body. */
   responseBody: RouteBodySchemaSchema.optional(),
+  /** Extra non-200 responses documented in the spec. */
+  additionalResponses: z
+    .record(z.string(), RouteAdditionalResponseSchema)
+    .optional(),
   /** Source module filename, used for auto-deriving tags. */
   sourceModule: z.string().optional(),
 });
@@ -298,21 +315,13 @@ interface OpenApiOperation {
   parameters?: OpenApiParameter[];
   requestBody?: {
     required: boolean;
-    content: {
-      "application/json": {
-        schema: JSONSchemaObject;
-      };
-    };
+    content: Record<string, { schema: JSONSchemaObject }>;
   };
   responses: Record<
     string,
     {
       description: string;
-      content?: {
-        "application/json": {
-          schema: JSONSchemaObject;
-        };
-      };
+      content?: Record<string, { schema: JSONSchemaObject }>;
     }
   >;
 }
@@ -446,7 +455,19 @@ function buildSpec(
       operation.parameters = parameters;
     }
 
-    if (entry.requestBody) {
+    // Multi-content-type request bodies take precedence over the single
+    // application/json requestBody. This lets an endpoint advertise a
+    // `oneOf`-style choice between `application/octet-stream`,
+    // `multipart/form-data`, and `application/json` on the same URL.
+    if (entry.requestBodies && entry.requestBodies.length > 0) {
+      const content: Record<string, { schema: JSONSchemaObject }> = {};
+      for (const variant of entry.requestBodies) {
+        content[variant.contentType] = {
+          schema: toJSONSchemaObject(variant.schema),
+        };
+      }
+      operation.requestBody = { required: true, content };
+    } else if (entry.requestBody) {
       operation.requestBody = {
         required: true,
         content: {
@@ -457,6 +478,24 @@ function buildSpec(
       };
     }
 
+    // Extra documented response variants (e.g. 502 fetch_failed).
+    if (entry.additionalResponses) {
+      for (const [status, resp] of Object.entries(entry.additionalResponses)) {
+        operation.responses[status] = {
+          description: resp.description,
+          ...(resp.schema
+            ? {
+                content: {
+                  "application/json": {
+                    schema: toJSONSchemaObject(resp.schema),
+                  },
+                },
+              }
+            : {}),
+        };
+      }
+    }
+
     paths[route.path][methodLower] = operation;
   }