@vellumai/assistant 0.6.5 → 0.7.0

package/src/daemon/message-types/conversations.ts

@@ -211,7 +211,11 @@ export interface ConversationInfo {
   title: string;
   correlationId?: string;
   conversationType?: ConversationType;
-  hostAccess: boolean;
+  /**
+   * Per-conversation override for the LLM inference profile. `undefined`
+   * means the conversation inherits the workspace `llm.activeProfile`.
+   */
+  inferenceProfile?: string;
 }
 
 export interface ConversationTitleUpdated {
@@ -253,7 +257,6 @@ export interface ConversationListResponse {
     updatedAt: number;
     conversationType?: ConversationType;
     source?: string;
-    hostAccess: boolean;
     scheduleJobId?: string;
     channelBinding?: ChannelBinding;
     conversationOriginChannel?: ChannelId;
@@ -262,6 +265,11 @@ export interface ConversationListResponse {
     displayOrder?: number;
     isPinned?: boolean;
     forkParent?: ConversationForkParent;
+    /**
+     * Per-conversation override for the LLM inference profile. Omitted when
+     * the conversation inherits the workspace `llm.activeProfile`.
+     */
+    inferenceProfile?: string;
   }>;
   /** Whether more conversations exist beyond the returned page. */
   hasMore?: boolean;
@@ -337,6 +345,12 @@ export interface HistoryResponseToolCall {
   confirmationDecision?: string;
   /** Friendly label for the confirmation (e.g. "Edit File", "Run Command"). */
   confirmationLabel?: string;
+  /** Risk level at the time of invocation ("low" | "medium" | "high" | "unknown"). */
+  riskLevel?: string;
+  /** Human-readable reason for the risk classification. */
+  riskReason?: string;
+  /** Whether the tool was auto-approved (true) or required explicit user input (false). */
+  autoApproved?: boolean;
 }
 
 export interface HistoryResponseSurface {
@@ -421,8 +435,16 @@ export interface UsageResponse {
   model: string;
 }
 
+/**
+ * Emitted after a compaction turn completes (both auto-compaction and
+ * `/compact`). Carries the fresh `estimatedInputTokens` so clients can refresh
+ * the context-window indicator without waiting for the next `usage_update`.
+ *
+ * Scoped per-conversation — see `CompactionCircuitOpen` doc for why.
+ */
 export interface ContextCompacted {
   type: "context_compacted";
+  conversationId: string;
   previousEstimatedInputTokens: number;
   estimatedInputTokens: number;
   maxInputTokens: number;
@@ -432,6 +454,22 @@ export interface ContextCompacted {
   summaryInputTokens: number;
   summaryOutputTokens: number;
   summaryModel: string;
+  /**
+   * Quality signals for the generated summary. Emitted for every
+   * compaction (including truncation-only paths where the summary text
+   * is unchanged from the prior pass). Consumers can use these to detect
+   * regressions without needing to read the summary text itself.
+   *
+   * - `summaryCharCount`: length of the produced summary text.
+   * - `summaryHeaderCount`: number of `## ` section headers in the summary.
+   * - `summaryHadMemoryEcho`: `true` if the summary contains any runtime
+   *   injection tag (e.g. `<memory`, `<turn_context>`, `<workspace>`).
+   *   Should always be `false` — `true` indicates the compaction strip
+   *   logic failed to remove an injected block from the summarizer input.
+   */
+  summaryCharCount?: number;
+  summaryHeaderCount?: number;
+  summaryHadMemoryEcho?: boolean;
 }
 
 /**
@@ -439,14 +477,38 @@ export interface ContextCompacted {
  * summary-LLM failures (with local fallback covering each), auto-compaction is
  * suspended until `openUntil` to avoid repeatedly hammering a broken provider.
  * User-initiated compaction (`/compact`, `force: true`) bypasses the breaker.
+ *
+ * `conversationId` scopes the event so clients can ignore breaker trips from
+ * other conversations — `EventStreamClient` broadcasts every parsed server
+ * message to all subscribers, so without this field a breaker trip in one
+ * conversation would set the "auto-compaction paused" banner on every open
+ * `ChatViewModel`.
  */
 export interface CompactionCircuitOpen {
   type: "compaction_circuit_open";
+  conversationId: string;
   reason: "3_consecutive_failures";
   /** Timestamp (ms since epoch) when the breaker will allow auto-compaction again. */
   openUntil: number;
 }
 
+/**
+ * Emitted when the compaction circuit breaker transitions from open → closed
+ * because a successful compaction reset
+ * `ctx.compactionCircuitOpenUntil`. The Swift client clears its banner state
+ * on receipt so the "auto-compaction paused" indicator dismisses immediately
+ * instead of lingering until the original `openUntil` deadline (up to 1h).
+ *
+ * Only fires on the open→closed transition — successful compactions while
+ * the breaker was already closed would be noise.
+ *
+ * Scoped per-conversation — see `CompactionCircuitOpen` doc for why.
+ */
+export interface CompactionCircuitClosed {
+  type: "compaction_circuit_closed";
+  conversationId: string;
+}
+
 export type ConversationErrorCode =
   | "PROVIDER_NETWORK"
   | "PROVIDER_RATE_LIMIT"
@@ -545,6 +607,7 @@ export type _ConversationsServerMessages =
   | UsageResponse
   | ContextCompacted
   | CompactionCircuitOpen
+  | CompactionCircuitClosed
   | ConversationErrorMessage
   | ConversationInfo
   | ConversationTitleUpdated

package/src/daemon/message-types/host-transfer.ts

@@ -0,0 +1,41 @@
+// Host transfer proxy types.
+// Enables bidirectional file transfer between sandbox and host machine
+// when running as a managed assistant.
+
+// === Server → Client ===
+
+export interface HostTransferToHostRequest {
+  type: "host_transfer_request";
+  requestId: string;
+  conversationId: string;
+  direction: "to_host";
+  transferId: string;
+  destPath: string;
+  sizeBytes: number;
+  sha256: string;
+  overwrite: boolean;
+}
+
+export interface HostTransferToSandboxRequest {
+  type: "host_transfer_request";
+  requestId: string;
+  conversationId: string;
+  direction: "to_sandbox";
+  transferId: string;
+  sourcePath: string;
+}
+
+export type HostTransferRequest =
+  | HostTransferToHostRequest
+  | HostTransferToSandboxRequest;
+
+export interface HostTransferCancelRequest {
+  type: "host_transfer_cancel";
+  requestId: string;
+}
+
+// --- Domain-level union aliases (consumed by the barrel file) ---
+
+export type _HostTransferServerMessages =
+  | HostTransferRequest
+  | HostTransferCancelRequest;

package/src/daemon/message-types/integrations.ts

@@ -98,6 +98,12 @@ export interface IngressConfigResponse {
   publicBaseUrl: string;
   /** Read-only gateway target computed from GATEWAY_PORT env var (default 7830) + loopback host. */
   localGatewayTarget: string;
+  /**
+   * When true, this assistant uses platform-managed callback routing.
+   * Webhook delivery is handled by the platform — no local tunnel or
+   * ngrok setup is needed. `publicBaseUrl` reflects the platform callback URL.
+   */
+  managedCallbacks?: boolean;
   success: boolean;
   error?: string;
 }

package/src/daemon/message-types/messages.ts

@@ -32,13 +32,7 @@ export interface UserMessage {
 export interface ConfirmationResponse {
   type: "confirmation_response";
   requestId: string;
-  decision:
-    | "allow"
-    | "allow_10m"
-    | "allow_conversation"
-    | "always_allow"
-    | "deny"
-    | "always_deny";
+  decision: "allow" | "deny";
   selectedPattern?: string;
   selectedScope?: string;
 }
@@ -145,6 +139,16 @@ export interface ToolResult {
   imageDataList?: string[];
   /** The tool_use block ID for client-side correlation. */
   toolUseId?: string;
+  /** Risk level from the classifier ("low" | "medium" | "high" | "unknown"). */
+  riskLevel?: string;
+  /** Human-readable reason for the risk classification. */
+  riskReason?: string;
+  /** Whether the daemon is running in a containerized (Docker) environment. */
+  isContainerized?: boolean;
+  /** Scope options ladder for the rule editor modal (narrowest to broadest). */
+  riskScopeOptions?: Array<{ pattern: string; label: string }>;
+  /** Directory scope ladder for the rule editor modal (narrowest to broadest). */
+  riskDirectoryScopeOptions?: Array<{ scope: string; label: string }>;
 }
 
 export interface ConfirmationRequest {
@@ -153,6 +157,10 @@ export interface ConfirmationRequest {
   toolName: string;
   input: Record<string, unknown>;
   riskLevel: string;
+  /** Human-readable reason for the risk classification (e.g. "Modifies remote repository state"). */
+  riskReason?: string;
+  /** Whether the daemon is running in a containerized (Docker) environment. */
+  isContainerized?: boolean;
   executionTarget?: "sandbox" | "host";
   allowlistOptions: Array<{
     label: string;
@@ -160,6 +168,7 @@ export interface ConfirmationRequest {
     pattern: string;
   }>;
   scopeOptions: Array<{ label: string; scope: string }>;
+  directoryScopeOptions?: Array<{ scope: string; label: string }>;
   diff?: {
     filePath: string;
     oldContent: string;
@@ -169,8 +178,6 @@ export interface ConfirmationRequest {
   conversationId?: string;
   /** When false, the client should hide "always allow" / trust-rule persistence affordances. */
   persistentDecisionsAllowed?: boolean;
-  /** Which temporary approval options the client should render (e.g. "Allow for 10 minutes", "Allow for this conversation"). */
-  temporaryOptionsAvailable?: Array<"allow_10m" | "allow_conversation">;
   /** The tool_use block ID for client-side correlation with specific tool calls. */
   toolUseId?: string;
   /** ACP tool kind from the agent (e.g. "read", "edit", "execute"). Present only for ACP permission requests. */
@@ -329,11 +336,16 @@ export interface AssistantActivityState {
   statusText?: string;
 }
 
-/** Broadcast to clients when a conversation's host-access setting changes. */
-export interface ConversationHostAccessUpdated {
-  type: "conversation_host_access_updated";
+/**
+ * Broadcast to clients when a conversation's inference-profile override
+ * changes. `profile` is the profile name (a key in `llm.profiles`) or
+ * `null` when the override is cleared and the conversation falls back to
+ * the workspace `llm.activeProfile` resolution.
+ */
+export interface ConversationInferenceProfileUpdated {
+  type: "conversation_inference_profile_updated";
   conversationId: string;
-  hostAccess: boolean;
+  profile: string | null;
 }
 
 export type TraceEventKind =
@@ -398,4 +410,4 @@ export type _MessagesServerMessages =
   | TraceEvent
   | ConfirmationStateChanged
   | AssistantActivityState
-  | ConversationHostAccessUpdated;
+  | ConversationInferenceProfileUpdated;

package/src/daemon/message-types/schedules.ts

@@ -84,6 +84,7 @@ export interface SchedulesListResponse {
     status: string;
     routingIntent: string;
     reuseConversation: boolean;
+    wakeConversationId: string | null;
     isOneShot: boolean;
   }>;
 }

package/src/daemon/message-types/settings.ts

@@ -44,11 +44,6 @@ export interface SoundsConfigUpdated {
   type: "sounds_config_updated";
 }
 
-/** Sent by the daemon when feature flag files change on disk. */
-export interface FeatureFlagsChanged {
-  type: "feature_flags_changed";
-}
-
 /** Response to a generate_avatar request indicating success or failure. */
 export interface GenerateAvatarResponse {
   type: "generate_avatar_response";
@@ -68,5 +63,4 @@ export type _SettingsServerMessages =
   | AvatarUpdated
   | ConfigChanged
   | SoundsConfigUpdated
-  | FeatureFlagsChanged
   | GenerateAvatarResponse;

package/src/daemon/message-types/shared.ts

@@ -1,12 +1,15 @@
 // Shared types used across multiple message domains.
 
-export type ConversationType = "standard" | "private";
+export type ConversationType = "standard" | "background" | "scheduled";
 
 /** Runtime normalizer — collapses unknown/legacy DB values to 'standard'. */
 export function normalizeConversationType(
   raw: string | null | undefined,
 ): ConversationType {
-  return raw === "private" ? "private" : "standard";
+  if (raw === "background" || raw === "scheduled") {
+    return raw;
+  }
+  return "standard";
 }
 
 export interface UsageStats {

package/src/daemon/message-types/subagents.ts

@@ -1,5 +1,6 @@
 // Subagent lifecycle and communication types.
 
+import type { SubagentStatus } from "../../subagent/types.js";
 import type { UsageStats } from "./shared.js";
 
 // === Server → Client ===
@@ -16,7 +17,7 @@ export interface SubagentSpawned {
 export interface SubagentStatusChanged {
   type: "subagent_status_changed";
   subagentId: string;
-  status: import("../../subagent/types.js").SubagentStatus;
+  status: SubagentStatus;
   error?: string;
   usage?: UsageStats;
 }

package/src/daemon/message-types/workspace.ts

@@ -26,8 +26,6 @@ export interface ToolPermissionSimulateRequest {
   workingDir?: string;
   /** Whether the simulated context is interactive (default true). */
   isInteractive?: boolean;
-  /** When true, side-effect tools that would normally be auto-allowed get promoted to prompt. */
-  forcePromptSideEffects?: boolean;
 }
 
 export interface ToolNamesListRequest {

package/src/daemon/pkb-reminder-builder.test.ts

@@ -2,28 +2,28 @@ import { describe, expect, test } from "bun:test";
 
 import { buildPkbReminder } from "./pkb-reminder-builder.js";
 
-// Byte-for-byte fixture of the original PKB_SYSTEM_REMINDER from
-// conversation-runtime-assembly.ts. If this ever needs to change, the
-// matching string in conversation-runtime-assembly.ts must change too.
-const ORIGINAL_REMINDER =
+// Byte-for-byte fixture of the base PKB reminder.
+const BASE_REMINDER =
   "<system_reminder>" +
-  "\nRead any unread Personal Knowledge Base files that might be even partially relevant to this conversation" +
-  "\nUse `remember` for anything you learn immediately" +
+  "\nCall `remember` this turn for anything concrete the user said — facts, preferences, plans, names, dates, decisions, corrections, felt moments. Default to remembering; skip only obvious noise. This should be your most frequently used tool." +
+  "\nIf you're unsure about something that may live in the workspace — past decisions, prior conversations, files — use `recall` before asking or guessing." +
+  "\nRead any unread workspace files that look even partially relevant." +
   "\n</system_reminder>";
 
 describe("buildPkbReminder", () => {
-  test("empty hints returns exact original reminder byte-for-byte", () => {
-    expect(buildPkbReminder([])).toBe(ORIGINAL_REMINDER);
+  test("empty hints returns exact base reminder byte-for-byte", () => {
+    expect(buildPkbReminder([])).toBe(BASE_REMINDER);
   });
 
   test("single hint renders one bullet with no duplicates or trailing blank line", () => {
     const out = buildPkbReminder(["projects/alpha.md"]);
     const expected =
       "<system_reminder>" +
-      "\nRead any unread Personal Knowledge Base files that might be even partially relevant to this conversation." +
+      "\nCall `remember` this turn for anything concrete the user said — facts, preferences, plans, names, dates, decisions, corrections, felt moments. Default to remembering; skip only obvious noise. This should be your most frequently used tool." +
+      "\nIf you're unsure about something that may live in the workspace — past decisions, prior conversations, files — use `recall` before asking or guessing." +
+      "\nRead any unread workspace files that look even partially relevant." +
       "\nBased on the current context, these files look especially relevant:" +
       "\n- projects/alpha.md" +
-      "\nUse `remember` for anything you learn immediately" +
       "\n</system_reminder>";
     expect(out).toBe(expected);
 
@@ -40,12 +40,13 @@ describe("buildPkbReminder", () => {
     const out = buildPkbReminder(hints);
     const expected =
       "<system_reminder>" +
-      "\nRead any unread Personal Knowledge Base files that might be even partially relevant to this conversation." +
+      "\nCall `remember` this turn for anything concrete the user said — facts, preferences, plans, names, dates, decisions, corrections, felt moments. Default to remembering; skip only obvious noise. This should be your most frequently used tool." +
+      "\nIf you're unsure about something that may live in the workspace — past decisions, prior conversations, files — use `recall` before asking or guessing." +
+      "\nRead any unread workspace files that look even partially relevant." +
       "\nBased on the current context, these files look especially relevant:" +
       "\n- a.md" +
       "\n- sub/b.md" +
       "\n- c/d/e.md" +
-      "\nUse `remember` for anything you learn immediately" +
       "\n</system_reminder>";
     expect(out).toBe(expected);
 

package/src/daemon/pkb-reminder-builder.ts

@@ -1,8 +1,13 @@
+const BODY =
+  "\nCall `remember` this turn for anything concrete the user said — facts, preferences, plans, names, dates, decisions, corrections, felt moments. Default to remembering; skip only obvious noise. This should be your most frequently used tool." +
+  "\nIf you're unsure about something that may live in the workspace — past decisions, prior conversations, files — use `recall` before asking or guessing." +
+  "\nRead any unread workspace files that look even partially relevant.";
+
 /**
  * Render the PKB system_reminder text, optionally with a bulleted list of
  * hint paths that look especially relevant to the current conversation.
  *
- * When `hints` is empty, returns the legacy two-line reminder byte-for-byte.
+ * When `hints` is empty, returns the base reminder byte-for-byte.
  * When `hints` is non-empty, renders an extended reminder with a bullet per
  * hint. Hints are emitted verbatim — they are trusted internal paths, not
  * user input, so no escaping is performed.
@@ -11,21 +16,8 @@
  */
 export function buildPkbReminder(hints: ReadonlyArray<string>): string {
   if (hints.length === 0) {
-    return (
-      "<system_reminder>" +
-      "\nRead any unread Personal Knowledge Base files that might be even partially relevant to this conversation" +
-      "\nUse `remember` for anything you learn immediately" +
-      "\n</system_reminder>"
-    );
+    return `<system_reminder>${BODY}\n</system_reminder>`;
   }
-
   const bullets = hints.map((h) => `- ${h}`).join("\n");
-  return (
-    "<system_reminder>" +
-    "\nRead any unread Personal Knowledge Base files that might be even partially relevant to this conversation." +
-    "\nBased on the current context, these files look especially relevant:" +
-    `\n${bullets}` +
-    "\nUse `remember` for anything you learn immediately" +
-    "\n</system_reminder>"
-  );
+  return `<system_reminder>${BODY}\nBased on the current context, these files look especially relevant:\n${bullets}\n</system_reminder>`;
 }