@vellumai/assistant 0.6.5 → 0.6.6

package/src/config/bundled-skills/notifications/tools/send-notification.ts

@@ -1,152 +0,0 @@
-import { getDeliverableChannels } from "../../../../channels/config.js";
-import { emitNotificationSignal } from "../../../../notifications/emit-signal.js";
-import type { AttentionHints } from "../../../../notifications/signal.js";
-import type { NotificationChannel } from "../../../../notifications/types.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-const INVALID = Symbol("invalid");
-
-const VALID_URGENCY = new Set<AttentionHints["urgency"]>([
-  "low",
-  "medium",
-  "high",
-]);
-const VALID_CHANNEL_HINTS = new Set<NotificationChannel>(
-  getDeliverableChannels() as NotificationChannel[],
-);
-
-function asNonEmptyString(value: unknown): string | undefined {
-  if (typeof value !== "string") return undefined;
-  const trimmed = value.trim();
-  return trimmed.length > 0 ? trimmed : undefined;
-}
-
-function parseBool(value: unknown, defaultValue: boolean): boolean {
-  return typeof value === "boolean" ? value : defaultValue;
-}
-
-function parseDeadlineAt(value: unknown): number | undefined | typeof INVALID {
-  if (value == null) return undefined;
-  if (typeof value === "number" && Number.isFinite(value))
-    return Math.trunc(value);
-  if (typeof value === "string") {
-    const parsed = Number(value);
-    if (Number.isFinite(parsed)) return Math.trunc(parsed);
-  }
-  return INVALID;
-}
-
-function parseObject(
-  value: unknown,
-): Record<string, unknown> | undefined | typeof INVALID {
-  if (value === undefined) return undefined;
-  if (!value || typeof value !== "object" || Array.isArray(value))
-    return INVALID;
-  return value as Record<string, unknown>;
-}
-
-function parsePreferredChannels(
-  value: unknown,
-): NotificationChannel[] | undefined | typeof INVALID {
-  if (value === undefined) return undefined;
-  if (!Array.isArray(value)) return INVALID;
-
-  const channels: NotificationChannel[] = [];
-  for (const item of value) {
-    if (
-      typeof item !== "string" ||
-      !VALID_CHANNEL_HINTS.has(item as NotificationChannel)
-    ) {
-      return INVALID;
-    }
-    channels.push(item as NotificationChannel);
-  }
-  return [...new Set(channels)];
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const message = asNonEmptyString(input.message);
-  if (!message) {
-    return err("message is required.");
-  }
-
-  const urgencyInput = asNonEmptyString(input.urgency)?.toLowerCase();
-  if (
-    urgencyInput &&
-    !VALID_URGENCY.has(urgencyInput as AttentionHints["urgency"])
-  ) {
-    return err("urgency must be one of: low, medium, high.");
-  }
-  const urgency =
-    (urgencyInput as AttentionHints["urgency"] | undefined) ?? "medium";
-
-  const deadlineAt = parseDeadlineAt(input.deadline_at);
-  if (deadlineAt === INVALID) {
-    return err("deadline_at must be a valid epoch timestamp (milliseconds).");
-  }
-
-  const deepLinkMetadata = parseObject(input.deep_link_metadata);
-  if (deepLinkMetadata === INVALID) {
-    return err("deep_link_metadata must be an object.");
-  }
-
-  const preferredChannels = parsePreferredChannels(input.preferred_channels);
-  if (preferredChannels === INVALID) {
-    return err(
-      `preferred_channels must be an array containing only: ${[
-        ...VALID_CHANNEL_HINTS,
-      ].join(", ")}.`,
-    );
-  }
-
-  const sourceEventName =
-    asNonEmptyString(input.source_event_name) ?? "user.send_notification";
-  const requestedConversationId =
-    asNonEmptyString(input.conversation_id) ?? context.conversationId;
-  const sourceContextId = requestedConversationId ?? context.conversationId;
-  const title = asNonEmptyString(input.title);
-  const dedupeKey = asNonEmptyString(input.dedupe_key);
-
-  const contextPayload: Record<string, unknown> = {
-    requestedMessage: message,
-    requestedByTool: "send_notification",
-    requestedByContextId: context.conversationId,
-  };
-  if (title) contextPayload.requestedTitle = title;
-  if (requestedConversationId)
-    contextPayload.requestedByConversationId = requestedConversationId;
-  if (preferredChannels && preferredChannels.length > 0)
-    contextPayload.preferredChannels = preferredChannels;
-  if (deepLinkMetadata) contextPayload.deepLinkMetadata = deepLinkMetadata;
-
-  try {
-    await emitNotificationSignal({
-      sourceEventName,
-      sourceChannel: "assistant_tool",
-      sourceContextId,
-      attentionHints: {
-        requiresAction: parseBool(input.requires_action, true),
-        urgency,
-        deadlineAt,
-        isAsyncBackground: parseBool(input.is_async_background, false),
-        visibleInSourceNow: parseBool(input.visible_in_source_now, false),
-      },
-      contextPayload,
-      dedupeKey,
-      throwOnError: true,
-    });
-
-    return ok(
-      "Notification request queued. Channel selection and delivery are handled by the notification router.",
-    );
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/notifications/tools/shared.ts

@@ -1,13 +0,0 @@
-/**
- * Shared utilities for notifications skill tools.
- */
-
-import type { ToolExecutionResult } from "../../../../tools/types.js";
-
-export function ok(content: string): ToolExecutionResult {
-  return { content, isError: false };
-}
-
-export function err(message: string): ToolExecutionResult {
-  return { content: message, isError: true };
-}

package/src/config/bundled-skills/screen-watch/SKILL.md

@@ -1,27 +0,0 @@
----
-name: screen-watch
-description: Observe the screen at regular intervals with OCR
-compatibility: "Designed for Vellum personal assistants"
-metadata:
-  emoji: "\U0001F441\uFE0F"
-  vellum:
-    display-name: "Screen Watch"
----
-
-Start observing the screen at regular intervals for a specified duration. Captures OCR text from the active window and provides periodic commentary.
-
-## Usage
-
-Use `start_screen_watch` when the user wants you to monitor what's happening on their screen. The tool captures OCR text from the active window at configurable intervals and provides commentary based on a specified focus area.
-
-## Parameters
-
-- **focus_area** (required) - What to focus on observing
-- **duration_minutes** - How long to watch in minutes (1-15, default 5)
-- **interval_seconds** - Seconds between screen captures (5-30, default 10)
-
-## Constraints
-
-- Only one active watch session per conversation at a time
-- Duration is clamped to 1-15 minutes
-- Capture interval is clamped to 5-30 seconds

package/src/config/bundled-skills/screen-watch/TOOLS.json

@@ -1,35 +0,0 @@
-{
-  "version": 1,
-  "tools": [
-    {
-      "name": "start_screen_watch",
-      "description": "Start observing the screen at regular intervals for a specified duration. Captures OCR text from the active window and provides periodic commentary.",
-      "category": "observation",
-      "risk": "low",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "duration_minutes": {
-            "type": "number",
-            "description": "How long to watch in minutes (1-15, default 5)"
-          },
-          "interval_seconds": {
-            "type": "number",
-            "description": "Seconds between screen captures (5-30, default 10)"
-          },
-          "focus_area": {
-            "type": "string",
-            "description": "What to focus on observing"
-          },
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of what you are watching and why, shown to the user as a status update. Use simple language a non-technical person would understand."
-          }
-        },
-        "required": ["focus_area"]
-      },
-      "executor": "tools/start-screen-watch.ts",
-      "execution_target": "host"
-    }
-  ]
-}

package/src/config/bundled-skills/screen-watch/tools/start-screen-watch.ts

@@ -1,12 +0,0 @@
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { screenWatchTool } from "../../../../tools/watch/screen-watch.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  return screenWatchTool.execute(input, context);
-}

package/src/config/bundled-skills/skills-catalog/SKILL.md

@@ -1,84 +0,0 @@
----
-name: skills-catalog
-description: Discover bundled skills and search/install community skills from the skills.sh registry
-compatibility: "Designed for Vellum personal assistants"
-metadata:
-  emoji: "\U0001F9E9"
-  vellum:
-    display-name: "Skills Catalog"
-    activation-hints:
-      - "what can you do"
-      - "find a skill"
-      - "install a skill"
-      - "community skills"
-      - "skills.sh"
-      - "search for skills"
-    avoid-when:
-      - "User is asking about a specific bundled skill already visible in the catalog"
----
-
-You can help the user discover what skills are available and find community skills to extend the assistant's capabilities.
-
-## Bundled skills (first-party)
-
-First-party skills are **bundled** with the assistant - they are compiled in and always available. They do not need to be installed or downloaded. To activate a bundled skill, use the `skill_load` tool:
-
-```
-skill_load skill=<skill-id>
-```
-
-The skill catalog shown in the system prompt lists all bundled skills with their IDs. When a user asks about capabilities, refer to this list to find relevant bundled skills and load them as needed.
-
-## Community skills (skills.sh)
-
-Community skills are published on the skills.sh registry and can be searched, inspected, and installed on demand using the `assistant skills` CLI.
-
-### Searching for community skills
-
-```bash
-assistant skills search "<query>"
-```
-
-Returns matching skills with their slug, source, install counts, and security audit badges. Use this when the user asks for a capability not covered by bundled skills.
-
-### Installing a community skill
-
-**Trust model - check the source guardian before installing:**
-
-- **Vellum-owned** (`vellum-ai/*`): First-party skills published by the Vellum team. Install these directly without prompting - they are vetted and trusted.
-- **Third-party** (any other guardian): Ask the user for permission first. Present the skill name, source, audit results, and install count. Say something like: "I found a community skill that could help, but it's published by a third party - we haven't vetted it. Want to install it anyway?"
-
-```bash
-assistant skills add <owner>/<repo>@<skill-name>
-```
-
-For example:
-```bash
-assistant skills add vercel-labs/skills@find-skills
-```
-
-Once installed, the skill appears in the workspace skills directory and can be loaded with `skill_load` like any other skill.
-
-## Typical flow
-
-1. **User asks about capabilities** - "Can you order food?" or "What can you do?"
-   - Check the bundled skills list in the system prompt
-   - Present relevant skills to the user
-   - Load any that match with `skill_load`
-
-2. **User wants a capability not covered by bundled skills** - "Can you do X?"
-   - Search with `assistant skills search "<query>"`
-   - Present matching results with descriptions, install counts, and audit badges
-   - Check the source guardian to determine trust level (see trust model above)
-   - Install with `assistant skills add <owner>/<repo>@<skill-name>`
-   - Load it with `skill_load`
-
-3. **Skill has dependencies** - if `includes` lists other skill IDs, load those first with `skill_load`
-
-## Notes
-
-- Bundled skills are always available and do not need installation
-- Community skills are installed to the workspace skills directory
-- After installing a community skill, it is auto-enabled and immediately loadable
-- Skills can be enabled or disabled via feature flags without uninstalling them
-- Never install third-party community skills without explicit user confirmation

package/src/daemon/context-overflow-approval.ts

@@ -1,52 +0,0 @@
-import type { PermissionPrompter } from "../permissions/prompter.js";
-import { isAllowDecision } from "../permissions/types.js";
-import { isPermissionControlsV2Enabled } from "../permissions/v2-consent-policy.js";
-
-/**
- * Reserved pseudo tool name used for context overflow compression approval
- * prompts. This is not a real tool — it provides a recognizable identifier
- * in the confirmation UI so the user can see what is being requested.
- */
-export const CONTEXT_OVERFLOW_TOOL_NAME = "context_overflow_compression";
-
-export type CompressionApprovalResult =
-  | { approved: true }
-  | { approved: false };
-
-/**
- * Prompts the user for approval to compress the latest turn in order to
- * recover from a context overflow.
- *
- * Uses the existing PermissionPrompter / `/v1/confirm` resolution flow with:
- * - A reserved pseudo tool name so the UI can display a meaningful label
- * - Low risk level (this is a lossy but non-destructive operation)
- * - No persistent decision affordances (the decision is one-shot per overflow)
- * - Empty allowlist/scope options (no "always allow" or scope variants)
- */
-export async function requestCompressionApproval(
-  prompter: PermissionPrompter,
-  opts?: { signal?: AbortSignal },
-): Promise<CompressionApprovalResult> {
-  if (isPermissionControlsV2Enabled()) {
-    return { approved: true };
-  }
-
-  const result = await prompter.prompt(
-    CONTEXT_OVERFLOW_TOOL_NAME,
-    {
-      description:
-        "The conversation has exceeded the context window limit. " +
-        "Approve to compress the most recent turn so the conversation can continue.",
-    },
-    "low",
-    [],
-    [],
-    undefined,
-    undefined,
-    undefined,
-    false,
-    opts?.signal,
-  );
-
-  return { approved: isAllowDecision(result.decision) };
-}