@vellumai/assistant 0.6.5 → 0.7.0

package/src/daemon/conversation-attachments.ts

@@ -4,20 +4,7 @@ import {
   getFilePathForAttachment,
   setAttachmentThumbnail,
 } from "../memory/attachments-store.js";
-import {
-  check,
-  classifyRisk,
-  generateAllowlistOptions,
-  generateScopeOptions,
-} from "../permissions/checker.js";
 import type { PermissionPrompter } from "../permissions/prompter.js";
-import { addRule } from "../permissions/trust-store.js";
-import { isAllowDecision } from "../permissions/types.js";
-import {
-  CONVERSATION_HOST_ACCESS_PROMPT,
-  isConversationHostAccessEnabled,
-  isPermissionControlsV2Enabled,
-} from "../permissions/v2-consent-policy.js";
 import type { ContentBlock } from "../providers/types.js";
 import { getLogger } from "../util/logger.js";
 import {
@@ -51,49 +38,6 @@ export async function approveHostAttachmentRead(
   const toolName = "host_file_read";
   const input = { path: filePath };
 
-  if (isPermissionControlsV2Enabled()) {
-    if (isConversationHostAccessEnabled(conversationId)) {
-      return true;
-    }
-
-    // HTTP-created sessions use a no-op sendToClient — prompting would
-    // block for the full permission timeout before auto-denying.
-    if (hasNoClient) {
-      log.info(
-        { filePath },
-        "Denying host attachment read: no interactive client connected",
-      );
-      return false;
-    }
-
-    const response = await prompter.prompt(
-      toolName,
-      input,
-      "low",
-      CONVERSATION_HOST_ACCESS_PROMPT.allowlistOptions,
-      CONVERSATION_HOST_ACCESS_PROMPT.scopeOptions,
-      undefined,
-      conversationId,
-      "host",
-      CONVERSATION_HOST_ACCESS_PROMPT.persistentDecisionsAllowed,
-      undefined,
-      CONVERSATION_HOST_ACCESS_PROMPT.temporaryOptionsAvailable,
-      undefined,
-      true,
-    );
-
-    return response.decision === "allow";
-  }
-
-  const decision = await check(toolName, input, workingDir);
-
-  if (decision.decision === "allow") {
-    return true;
-  }
-  if (decision.decision === "deny") {
-    return false;
-  }
-
   // HTTP-created sessions use a no-op sendToClient — prompting would
   // block for the full permission timeout before auto-denying.
   if (hasNoClient) {
@@ -107,36 +51,16 @@ export async function approveHostAttachmentRead(
   const response = await prompter.prompt(
     toolName,
     input,
-    (await classifyRisk(toolName, input, workingDir)).level,
-    await generateAllowlistOptions(toolName, input),
-    generateScopeOptions(workingDir, toolName),
+    "low",
+    [],
+    [],
     undefined,
     conversationId,
     "host",
+    false,
   );
 
-  if (
-    response.decision === "always_allow" &&
-    response.selectedPattern &&
-    response.selectedScope
-  ) {
-    addRule(
-      toolName,
-      response.selectedPattern,
-      response.selectedScope,
-      "allow",
-      100,
-    );
-  }
-  if (
-    response.decision === "always_deny" &&
-    response.selectedPattern &&
-    response.selectedScope
-  ) {
-    addRule(toolName, response.selectedPattern, response.selectedScope, "deny");
-  }
-
-  return isAllowDecision(response.decision);
+  return response.decision === "allow";
 }
 
 export interface AttachmentResolutionResult {

package/src/daemon/conversation-error.ts

@@ -125,7 +125,10 @@ export interface ErrorContext {
  * which erases the `AbortError` name. To compensate, the daemon tags every
  * `controller.abort(reason)` call with an `AbortReason` object — when the
  * wrapped `ProviderError` carries that tagged reason, we treat it as a user
- * cancellation regardless of error class.
+ * cancellation regardless of error class. The same tagged object can also
+ * surface directly (e.g. when code calls `AbortSignal.throwIfAborted()`,
+ * which throws `signal.reason` verbatim), so a bare `AbortReason` is
+ * recognized as cancellation too.
  */
 export function isUserCancellation(error: unknown, ctx: ErrorContext): boolean {
   if (!ctx.aborted) return false;
@@ -134,6 +137,7 @@ export function isUserCancellation(error: unknown, ctx: ErrorContext): boolean {
   if (error instanceof ProviderError && isAbortReason(error.abortReason)) {
     return true;
   }
+  if (isAbortReason(error)) return true;
   return false;
 }
 
@@ -367,7 +371,7 @@ export function isContextTooLarge(message: string): boolean {
 }
 
 /** Check whether an error message indicates a web-search-specific ordering failure. */
-export function isWebSearchOrderingError(message: string): boolean {
+function isWebSearchOrderingError(message: string): boolean {
   return WEB_SEARCH_ORDERING_PATTERNS.some((p) => p.test(message));
 }
 
@@ -376,17 +380,17 @@ export function isWebSearchOrderingError(message: string): boolean {
  * opaque token in a replayed `web_search_tool_result`. See
  * `stripHistoricalWebSearchResults()` for the proactive mitigation.
  */
-export function isStaleWebSearchContent(message: string): boolean {
+function isStaleWebSearchContent(message: string): boolean {
   return STALE_WEB_SEARCH_CONTENT_PATTERNS.some((p) => p.test(message));
 }
 
 /** Check whether an error message indicates a tool_use/tool_result ordering failure. */
-export function isOrderingError(message: string): boolean {
+function isOrderingError(message: string): boolean {
   return ORDERING_ERROR_PATTERNS.some((p) => p.test(message));
 }
 
 /** Check whether an error message indicates an Anthropic SDK streaming corruption. */
-export function isStreamingError(message: string): boolean {
+function isStreamingError(message: string): boolean {
   return STREAMING_ERROR_PATTERNS.some((p) => p.test(message));
 }
 

package/src/daemon/conversation-history.ts

@@ -73,7 +73,7 @@ export function findLastUndoableUserMessageIndex(messages: Message[]): number {
  * Individual deletion failures are logged and enqueued as retry jobs
  * to prevent silently orphaned vectors.
  */
-export async function cleanupQdrantVectors(
+async function cleanupQdrantVectors(
   conversationId: string,
   segmentIds: string[],
 ): Promise<void> {
@@ -191,10 +191,7 @@ export function consolidateAssistantMessages(
 
     // Clean up Qdrant vectors (fire-and-forget)
     if (allSegmentIds.length > 0) {
-      cleanupQdrantVectors(
-        conversationId,
-        allSegmentIds,
-      ).catch((err) => {
+      cleanupQdrantVectors(conversationId, allSegmentIds).catch((err) => {
         log.warn(
           { err, conversationId },
           "Qdrant cleanup after consolidation failed (non-fatal)",
@@ -326,10 +323,7 @@ export function consolidateAssistantMessages(
 
   // Clean up Qdrant vectors (fire-and-forget)
   if (allSegmentIds.length > 0) {
-    cleanupQdrantVectors(
-      conversationId,
-      allSegmentIds,
-    ).catch((err) => {
+    cleanupQdrantVectors(conversationId, allSegmentIds).catch((err) => {
       log.warn(
         { err, conversationId },
         "Qdrant cleanup after consolidation failed (non-fatal)",
@@ -365,7 +359,6 @@ export interface HistoryConversationContext {
     userMessageId: string,
     onEvent: (msg: ServerMessage) => void,
     options?: {
-      skipPreMessageRollback?: boolean;
       isUserMessage?: boolean;
       titleText?: string;
     },
@@ -534,15 +527,14 @@ export async function regenerate(
   }
 
   // Clean up Qdrant vectors (fire-and-forget).
-  cleanupQdrantVectors(
-    conversation.conversationId,
-    allSegmentIds,
-  ).catch((err) => {
-    log.warn(
-      { err, conversationId: conversation.conversationId },
-      "Qdrant cleanup after regenerate failed (non-fatal)",
-    );
-  });
+  cleanupQdrantVectors(conversation.conversationId, allSegmentIds).catch(
+    (err) => {
+      log.warn(
+        { err, conversationId: conversation.conversationId },
+        "Qdrant cleanup after regenerate failed (non-fatal)",
+      );
+    },
+  );
 
   // Re-extract the user message content for the agent loop.
   // Use all content blocks (text, image, file) so attachments are
@@ -581,7 +573,6 @@ export async function regenerate(
   // observability contract is preserved on those paths too.
   void conversation
     .runAgentLoop(content, existingUserMessageId, onEvent, {
-      skipPreMessageRollback: true,
       isUserMessage: true,
     })
     .catch((err) => {

package/src/daemon/conversation-launch.ts

@@ -21,9 +21,9 @@ import { assistantEventHub } from "../runtime/assistant-event-hub.js";
 import { DAEMON_INTERNAL_ASSISTANT_ID } from "../runtime/assistant-scope.js";
 import { getLogger } from "../util/logger.js";
 import type { Conversation } from "./conversation.js";
-import type { TrustContext } from "./conversation-runtime-assembly.js";
 import type { ConversationCreateOptions } from "./handlers/shared.js";
 import type { ServerMessage } from "./message-protocol.js";
+import type { TrustContext } from "./trust-context.js";
 
 const log = getLogger("conversation-launch");
 

package/src/daemon/conversation-lifecycle.ts

@@ -8,7 +8,6 @@ import { createContextSummaryMessage } from "../context/window-manager.js";
 import type { EventBus } from "../events/bus.js";
 import type { AssistantDomainEvents } from "../events/domain-events.js";
 import type { ToolProfiler } from "../events/tool-profiling-listener.js";
-import { getHookManager } from "../hooks/manager.js";
 import { enqueueAutoAnalysisIfEnabled } from "../memory/auto-analysis-enqueue.js";
 import { isAutoAnalysisConversation } from "../memory/auto-analysis-guard.js";
 import {
@@ -27,10 +26,7 @@ import {
 import { unregisterConversationSender } from "../tools/browser/browser-screencast.js";
 import { type AbortReason, createAbortReason } from "../util/abort-reasons.js";
 import { getLogger } from "../util/logger.js";
-import {
-  unregisterCallNotifiers,
-  unregisterWatchNotifiers,
-} from "./conversation-notifiers.js";
+import { unregisterCallNotifiers } from "./conversation-notifiers.js";
 import type { MessageQueue } from "./conversation-queue-manager.js";
 import { resetSkillToolProjection } from "./conversation-skill-tools.js";
 import { repairHistory } from "./history-repair.js";
@@ -208,21 +204,34 @@ export async function loadFromDb(ctx: LoadFromDbContext): Promise<void> {
 
       content = reinjectImageSourcePaths(content, role, m.metadata);
 
-      // Re-inject persisted memory block from metadata so it survives
+      // Re-inject persisted injection blocks from metadata so it survives
       // conversation reloads (eviction, restart, fork).
       if (role === "user" && m.metadata) {
         try {
           const meta = JSON.parse(m.metadata);
           const isTail = index === arr.length - 1;
 
-          // turn_context and system_reminder rehydrate for historical rows
-          // only; the tail gets fresh blocks via applyRuntimeInjections on
-          // the next turn. All three rehydration steps are prepends — the
-          // ordering below (system_reminder first, memory second,
-          // turn_context last) builds the documented shape right-to-left,
-          // since each prepend shifts previously-prepended blocks one slot
-          // right:
-          //   [<turn_context>, <memory __injected>, <system_reminder>, ...original]
+          // All rehydration steps are prepends — the ordering below
+          // (innermost block first, outermost last) builds the documented
+          // shape right-to-left, since each prepend shifts previously-
+          // prepended blocks one slot right:
+          //   [<workspace>, <turn_context>, <NOW.md>, <memory __injected>,
+          //    <system_reminder>, <knowledge_base>, ...original]
+          //
+          // Persisted non-tail rows rehydrate the full set so Anthropic's
+          // prefix cache keeps matching msg[0] across daemon restarts and
+          // conversation eviction. The tail row gets fresh blocks via
+          // applyRuntimeInjections on the next turn, so rehydration for the
+          // tail is limited to blocks that the next turn's injection pipeline
+          // cannot reconstruct (currently just `memoryInjectedBlock`, which
+          // is not always re-injected on the next turn).
+          if (!isTail && typeof meta.pkbContextBlock === "string") {
+            content = [
+              { type: "text" as const, text: meta.pkbContextBlock },
+              ...content,
+            ];
+          }
+
           if (!isTail && typeof meta.pkbSystemReminderBlock === "string") {
             content = [
               { type: "text" as const, text: meta.pkbSystemReminderBlock },
@@ -241,12 +250,26 @@ export async function loadFromDb(ctx: LoadFromDbContext): Promise<void> {
             ];
           }
 
+          if (!isTail && typeof meta.nowScratchpadBlock === "string") {
+            content = [
+              { type: "text" as const, text: meta.nowScratchpadBlock },
+              ...content,
+            ];
+          }
+
           if (!isTail && typeof meta.turnContextBlock === "string") {
             content = [
               { type: "text" as const, text: meta.turnContextBlock },
               ...content,
             ];
           }
+
+          if (!isTail && typeof meta.workspaceBlock === "string") {
+            content = [
+              { type: "text" as const, text: meta.workspaceBlock },
+              ...content,
+            ];
+          }
         } catch {
           /* ignore parse errors — metadata may be malformed */
         }
@@ -314,7 +337,6 @@ export function abortConversation(
     ctx.surfaceActionRequestIds.clear();
     ctx.surfaceState.clear();
     ctx.accumulatedSurfaceState.clear();
-    unregisterWatchNotifiers(ctx.conversationId);
     for (const queued of ctx.queue) {
       queued.onEvent({
         type: "generation_cancelled",
@@ -328,10 +350,6 @@ export function abortConversation(
 // ── dispose ──────────────────────────────────────────────────────────
 
 export function disposeConversation(ctx: DisposeContext): void {
-  void getHookManager().trigger("conversation-end", {
-    conversationId: ctx.conversationId,
-  });
-
   // Trigger graph extraction for end-of-conversation sweep.
   // Only extract from guardian conversations to preserve the memory trust
   // boundary — untrusted content must not influence future memory retrieval.

package/src/daemon/conversation-messaging.ts

@@ -40,13 +40,13 @@ import type { SecretPrompter } from "../permissions/secret-prompter.js";
 import type { Message } from "../providers/types.js";
 import { getLogger } from "../util/logger.js";
 import type { MessageQueue } from "./conversation-queue-manager.js";
-import type { TrustContext } from "./conversation-runtime-assembly.js";
 import type { SlackInboundMessageMetadata } from "./handlers/shared.js";
 import type {
   ServerMessage,
   UserMessageAttachment,
 } from "./message-protocol.js";
 import type { ConversationTransportMetadata } from "./message-types/conversations.js";
+import type { TrustContext } from "./trust-context.js";
 
 const log = getLogger("conversation-messaging");
 

package/src/daemon/conversation-notifiers.ts

@@ -1,5 +1,5 @@
 /**
- * Watch and call notifier registration/unregistration, extracted from
+ * Call notifier registration/unregistration, extracted from
  * the Conversation constructor and dispose/abort methods.
  *
  * Notifier callbacks read from the provided context object at invocation
@@ -22,24 +22,9 @@ import {
   addMessage,
   provenanceFromTrustContext,
 } from "../memory/conversation-crud.js";
-import { setMessageIdOnLogs } from "../memory/llm-request-log-store.js";
 import type { Message } from "../providers/types.js";
-import type { WatchSession } from "../tools/watch/watch-state.js";
-import {
-  pruneWatchSessions,
-  registerWatchCommentaryNotifier,
-  registerWatchCompletionNotifier,
-  registerWatchStartNotifier,
-  unregisterWatchCommentaryNotifier,
-  unregisterWatchCompletionNotifier,
-  unregisterWatchStartNotifier,
-} from "../tools/watch/watch-state.js";
-import type { TrustContext } from "./conversation-runtime-assembly.js";
 import type { ServerMessage } from "./message-protocol.js";
-import {
-  lastCommentaryByConversation,
-  lastSummaryByConversation,
-} from "./watch-handler.js";
+import type { TrustContext } from "./trust-context.js";
 
 /**
  * Subset of Conversation state that notifier callbacks need to read at
@@ -52,7 +37,7 @@ export interface NotifierConversationContext {
 }
 
 /**
- * Register watch and call notifiers for a conversation. Call once during
+ * Register call notifiers for a conversation. Call once during
  * construction; the notifier callbacks close over `ctx` so they see
  * live sendToClient/messages values.
  */
@@ -60,88 +45,6 @@ export function registerConversationNotifiers(
   conversationId: string,
   ctx: NotifierConversationContext,
 ): void {
-  registerWatchStartNotifier(conversationId, (session: WatchSession) => {
-    ctx.sendToClient({
-      type: "watch_started",
-      conversationId: conversationId,
-      watchId: session.watchId,
-      durationSeconds: session.durationSeconds,
-      intervalSeconds: session.intervalSeconds,
-    });
-  });
-
-  registerWatchCommentaryNotifier(
-    conversationId,
-    async (_session: WatchSession) => {
-      const result = lastCommentaryByConversation.get(conversationId);
-      if (result) {
-        lastCommentaryByConversation.delete(conversationId);
-
-        const msg = await addMessage(
-          conversationId,
-          "assistant",
-          JSON.stringify([{ type: "text", text: result.text }]),
-          provenanceFromTrustContext(ctx.trustContext),
-        );
-        ctx.messages.push(createAssistantMessage(result.text));
-
-        try {
-          setMessageIdOnLogs(result.logIds, msg.id);
-        } catch {
-          // non-fatal — message is persisted even if log linkage fails
-        }
-
-        ctx.sendToClient({
-          type: "assistant_text_delta",
-          text: result.text,
-          conversationId: conversationId,
-        });
-        ctx.sendToClient({
-          type: "message_complete",
-          conversationId: conversationId,
-          messageId: msg.id,
-          source: "aux",
-        });
-      }
-    },
-  );
-
-  registerWatchCompletionNotifier(
-    conversationId,
-    async (_session: WatchSession) => {
-      const result = lastSummaryByConversation.get(conversationId);
-      if (result) {
-        lastSummaryByConversation.delete(conversationId);
-
-        const msg = await addMessage(
-          conversationId,
-          "assistant",
-          JSON.stringify([{ type: "text", text: result.text }]),
-          provenanceFromTrustContext(ctx.trustContext),
-        );
-        ctx.messages.push(createAssistantMessage(result.text));
-
-        try {
-          setMessageIdOnLogs(result.logIds, msg.id);
-        } catch {
-          // non-fatal — message is persisted even if log linkage fails
-        }
-
-        ctx.sendToClient({
-          type: "assistant_text_delta",
-          text: result.text,
-          conversationId: conversationId,
-        });
-        ctx.sendToClient({
-          type: "message_complete",
-          conversationId: conversationId,
-          messageId: msg.id,
-          source: "aux",
-        });
-      }
-    },
-  );
-
   registerCallQuestionNotifier(
     conversationId,
     async (callSessionId: string, question: string) => {
@@ -213,17 +116,6 @@ export function registerConversationNotifiers(
   });
 }
 
-/**
- * Unregister watch notifiers and prune watch sessions. Called during
- * abort when the conversation is actively processing.
- */
-export function unregisterWatchNotifiers(conversationId: string): void {
-  unregisterWatchStartNotifier(conversationId);
-  unregisterWatchCommentaryNotifier(conversationId);
-  unregisterWatchCompletionNotifier(conversationId);
-  pruneWatchSessions(conversationId);
-}
-
 /**
  * Unregister call notifiers. Called during dispose regardless of
  * processing state (notifiers are registered in the constructor).

package/src/daemon/conversation-process.ts

@@ -40,16 +40,14 @@ import type {
   QueuedMessage,
   QueueDrainReason,
 } from "./conversation-queue-manager.js";
-import type {
-  ChannelCapabilities,
-  TrustContext,
-} from "./conversation-runtime-assembly.js";
+import type { ChannelCapabilities } from "./conversation-runtime-assembly.js";
 import {
   classifySlash,
   resolveSlash,
   type SlashContext,
 } from "./conversation-slash.js";
 import { getModelInfo } from "./handlers/config-model.js";
+import type { HostBrowserProxy } from "./host-browser-proxy.js";
 import type {
   ServerMessage,
   UsageStats,
@@ -58,6 +56,7 @@ import type {
 import type { ConversationTransportMetadata } from "./message-types/conversations.js";
 import type { TraceEmitter } from "./trace-emitter.js";
 import { buildTransportHints } from "./transport-hints.js";
+import type { TrustContext } from "./trust-context.js";
 import { resolveVerificationSessionIntent } from "./verification-session-intent.js";
 
 const log = getLogger("conversation-process");
@@ -137,7 +136,6 @@ export interface ProcessConversationContext {
     userMessageId: string,
     onEvent: (msg: ServerMessage) => void,
     options?: {
-      skipPreMessageRollback?: boolean;
       isInteractive?: boolean;
       isUserMessage?: boolean;
       titleText?: string;
@@ -157,7 +155,7 @@ export interface ProcessConversationContext {
    * separately with the correct registry-routed sender.
    */
   restoreProxyAvailability(options?: { skipBrowser?: boolean }): void;
-  /** Restore only the host browser proxy (used by chrome-extension and macOS+extension drains). */
+  /** Restore only the host browser proxy (used by chrome-extension and macOS drains). */
   restoreBrowserProxyAvailability(): void;
   /**
    * Registry-routed sender override for the host browser proxy. When set,
@@ -167,9 +165,7 @@ export interface ProcessConversationContext {
    */
   hostBrowserSenderOverride?: (msg: ServerMessage) => void;
   /** Replace or clear the conversation's host browser proxy. */
-  setHostBrowserProxy(
-    proxy: import("./host-browser-proxy.js").HostBrowserProxy | undefined,
-  ): void;
+  setHostBrowserProxy(proxy: HostBrowserProxy | undefined): void;
   emitActivityState(
     phase:
       | "idle"
@@ -290,10 +286,9 @@ async function buildPassthroughBatch(
     head,
     conversation.getTurnInterfaceContext(),
   );
-  // Pure classifier — no side effects. `resolveSlash` runs /pair's side
-  // effects (pairing registration, QR PNG write); if we called it here the
-  // real drain would invoke those again and the second call would fail with
-  // "active pairing already in progress".
+  // Pure classifier — no side effects. `resolveSlash` may run side effects
+  // (e.g. /compact); if we called it here the real drain would invoke those
+  // again.
   if (classifySlash(head.content) !== "passthrough") return [];
   if (resolveVerificationSessionIntent(head.content).kind === "direct_setup") {
     // Verification intents stay on the single-message path so their per-turn
@@ -477,6 +472,10 @@ async function drainSingleMessage(
       // When hostBrowserSenderOverride is set, skip the browser proxy here
       // — restoreBrowserProxyAvailability() below will handle it with the
       // correct registry-routed sender instead of the SSE hub emitter.
+      // When no override is set (macOS without extension), restoring the
+      // browser proxy via restoreProxyAvailability is correct — it will
+      // use the SSE sender so host_browser_request frames reach the
+      // desktop client directly.
       conversation.restoreProxyAvailability(
         conversation.hostBrowserSenderOverride
           ? { skipBrowser: true }
@@ -485,11 +484,11 @@ async function drainSingleMessage(
       conversation.addPreactivatedSkillId("computer-use");
     }
     // Tear down a stale hostBrowserProxy inherited from a prior turn on a
-    // different interface (e.g. chrome-extension installed one, then a CLI
-    // turn drains). Without this, restoreProxyAvailability() above would
-    // re-enable the proxy and getCdpClient() would route browser tools
-    // through host_browser_request and hang waiting for a client that this
-    // turn's interface can't service.
+    // different interface (e.g. chrome-extension or macOS installed one,
+    // then a CLI turn drains). Without this, restoreProxyAvailability()
+    // above would re-enable the proxy and getCdpClient() would route
+    // browser tools through host_browser_request and hang waiting for a
+    // client that this turn's interface can't service.
     //
     // Skip teardown only when BOTH conditions hold:
     //   1. `hostBrowserSenderOverride` is set (live registry-routed sender)
@@ -498,6 +497,10 @@ async function drainSingleMessage(
     // Without the interface check, queued turns from CLI/iOS/Vellum would
     // inherit a stale override left by a prior extension-connected turn
     // and keep the proxy alive, causing cross-interface misrouting.
+    //
+    // macOS and chrome-extension both support host_browser natively, so
+    // this teardown only fires for interfaces that do not support
+    // host_browser at all (CLI, iOS, Vellum, channels).
     const currentTurnCanServiceBrowser =
       !!sourceInterface && canServiceRegistryBrowser(sourceInterface);
     if (
@@ -1354,9 +1357,9 @@ export async function processMessage(
       const routerChannelMeta = {
         userMessageChannel: "vellum" as const,
         assistantMessageChannel: "vellum" as const,
-        userMessageInterface: guardianIfCtx?.userMessageInterface ?? "vellum",
+        userMessageInterface: guardianIfCtx?.userMessageInterface ?? "web",
         assistantMessageInterface:
-          guardianIfCtx?.assistantMessageInterface ?? "vellum",
+          guardianIfCtx?.assistantMessageInterface ?? "web",
         provenanceTrustClass: "guardian" as const,
         ...(Object.keys(guardianImageSourcePaths).length > 0
           ? { imageSourcePaths: guardianImageSourcePaths }