@vellumai/assistant 0.6.6 → 0.7.0

package/src/config/bundled-skills/settings/TOOLS.json

@@ -87,62 +87,6 @@
       },
       "executor": "tools/navigate-settings-tab.ts",
       "execution_target": "host"
-    },
-    {
-      "name": "set_avatar",
-      "description": "Set the assistant's avatar to an image file. Copies the source image to the canonical avatar location (data/avatar/avatar-image.png), removes any native character avatar files, and notifies the app to refresh. Use this when the user asks to set, change, or update the avatar to a specific image (e.g. from a conversation attachment).",
-      "category": "system",
-      "risk": "low",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "image_path": {
-            "type": "string",
-            "description": "Path to the image file. Can be absolute or relative to the workspace directory (e.g. 'conversations/<id>/attachments/Dropped Image.png')."
-          },
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of what you are doing, shown to the user as a status update."
-          }
-        },
-        "required": ["image_path"]
-      },
-      "executor": "tools/avatar-update.ts",
-      "execution_target": "host"
-    },
-    {
-      "name": "remove_avatar",
-      "description": "Remove the custom avatar image and restore the native character avatar. Only deletes the custom image — preserves character traits so the character avatar is automatically restored. Use this when the user asks to remove, clear, or reset their avatar.",
-      "category": "system",
-      "risk": "low",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of what you are doing, shown to the user as a status update."
-          }
-        }
-      },
-      "executor": "tools/avatar-remove.ts",
-      "execution_target": "host"
-    },
-    {
-      "name": "get_avatar",
-      "description": "Read and return the current avatar image so the user can see it. Use this when the user asks to see, view, or show their avatar. Returns the image inline — do NOT copy the file or use bash commands.",
-      "category": "system",
-      "risk": "low",
-      "input_schema": {
-        "type": "object",
-        "properties": {
-          "activity": {
-            "type": "string",
-            "description": "Brief non-technical explanation of what you are doing, shown to the user as a status update."
-          }
-        }
-      },
-      "executor": "tools/avatar-get.ts",
-      "execution_target": "host"
     }
   ]
 }

package/src/config/bundled-skills/subagent/SKILL.md

@@ -26,6 +26,8 @@ Subagents follow this status flow: `pending` -> `running` -> `completed` / `fail
 
 Each subagent is spawned with a role that determines its tool access. Choose the most restrictive role that can accomplish the task.
 
+`recall` is local information search across memory, the personal knowledge base, past conversations, and workspace files. Use it when a subagent needs prior context that is not already in the prompt.
+
 | Role | Tools | When to use |
 |---|---|---|
 | `general` | Full tool access | Task genuinely needs unrestricted capabilities (rare -- prefer a specialized role) |

package/src/config/bundled-tool-registry.ts

@@ -15,8 +15,10 @@
 import type { SkillToolScript } from "../tools/skills/script-contract.js";
 // ── acp ────────────────────────────────────────────────────────────────────────
 import * as acpAbort from "./bundled-skills/acp/tools/acp-abort.js";
+import * as acpListAgents from "./bundled-skills/acp/tools/acp-list-agents.js";
 import * as acpSpawn from "./bundled-skills/acp/tools/acp-spawn.js";
 import * as acpStatus from "./bundled-skills/acp/tools/acp-status.js";
+import * as acpSteer from "./bundled-skills/acp/tools/acp-steer.js";
 // ── app-builder ────────────────────────────────────────────────────────────────
 import * as appCreate from "./bundled-skills/app-builder/tools/app-create.js";
 import * as appDelete from "./bundled-skills/app-builder/tools/app-delete.js";
@@ -91,9 +93,6 @@ import * as sequenceImport from "./bundled-skills/sequences/tools/sequence-impor
 import * as sequenceList from "./bundled-skills/sequences/tools/sequence-list.js";
 import * as sequenceUpdate from "./bundled-skills/sequences/tools/sequence-update.js";
 // ── settings ───────────────────────────────────────────────────────────────────
-import * as avatarGet from "./bundled-skills/settings/tools/avatar-get.js";
-import * as avatarRemove from "./bundled-skills/settings/tools/avatar-remove.js";
-import * as avatarUpdate from "./bundled-skills/settings/tools/avatar-update.js";
 import * as navigateSettingsTab from "./bundled-skills/settings/tools/navigate-settings-tab.js";
 import * as openSystemSettings from "./bundled-skills/settings/tools/open-system-settings.js";
 import * as voiceConfigUpdate from "./bundled-skills/settings/tools/voice-config-update.js";
@@ -117,6 +116,8 @@ export const bundledToolRegistry = new Map<string, SkillToolScript>([
   ["acp:tools/acp-spawn.ts", acpSpawn],
   ["acp:tools/acp-status.ts", acpStatus],
   ["acp:tools/acp-abort.ts", acpAbort],
+  ["acp:tools/acp-steer.ts", acpSteer],
+  ["acp:tools/acp-list-agents.ts", acpListAgents],
 
   // app-builder
   ["app-builder:tools/app-create.ts", appCreate],
@@ -213,9 +214,6 @@ export const bundledToolRegistry = new Map<string, SkillToolScript>([
   ["settings:tools/voice-config-update.ts", voiceConfigUpdate],
   ["settings:tools/open-system-settings.ts", openSystemSettings],
   ["settings:tools/navigate-settings-tab.ts", navigateSettingsTab],
-  ["settings:tools/avatar-update.ts", avatarUpdate],
-  ["settings:tools/avatar-remove.ts", avatarRemove],
-  ["settings:tools/avatar-get.ts", avatarGet],
 
   // skill-management
   ["skill-management:tools/scaffold-managed.ts", scaffoldManaged],

package/src/config/env.ts

@@ -48,7 +48,7 @@ function int(name: string, fallback?: number): number | undefined {
 
 const DEFAULT_GATEWAY_PORT = 7830;
 
-export function getGatewayPort(): number {
+function getGatewayPort(): number {
   return int("GATEWAY_PORT", DEFAULT_GATEWAY_PORT);
 }
 
@@ -87,10 +87,6 @@ export function getRuntimeHttpHost(): string {
   return str("RUNTIME_HTTP_HOST") || "127.0.0.1";
 }
 
-export function getRuntimeGatewayOriginSecret(): string | undefined {
-  return str("RUNTIME_GATEWAY_ORIGIN_SECRET");
-}
-
 /**
  * True when HTTP API auth is disabled via DISABLE_HTTP_AUTH=true AND the
  * safety gate VELLUM_UNSAFE_AUTH_BYPASS=1 is also set. Without the safety
@@ -221,11 +217,14 @@ export function setPlatformAssistantId(value: string | undefined): void {
 }
 
 /**
- * PLATFORM_ASSISTANT_ID — UUID of this assistant on the platform.
- * Required for registering callback routes when containerized.
+ * Platform assistant ID — UUID of this assistant on the platform.
+ *
+ * Resolved from the in-memory override (populated by providers-setup
+ * rehydration from the credential store at daemon startup, or by
+ * secret-routes when the platform pushes the value).
  */
 export function getPlatformAssistantId(): string {
-  return str("PLATFORM_ASSISTANT_ID") ?? _platformAssistantIdOverride ?? "";
+  return _platformAssistantIdOverride ?? "";
 }
 
 let _platformOrganizationIdOverride: string | undefined;

package/src/config/feature-flag-registry.json

@@ -169,14 +169,6 @@
       "description": "Show the Embedding service card in Models & Services settings",
       "defaultEnabled": false
     },
-    {
-      "id": "settings-schedules",
-      "scope": "assistant",
-      "key": "settings-schedules",
-      "label": "Schedules Settings Tab",
-      "description": "Show the Schedules tab in Settings for viewing and managing schedules",
-      "defaultEnabled": false
-    },
     {
       "id": "multi-platform-assistant",
       "scope": "assistant",
@@ -281,14 +273,6 @@
       "description": "Enable teleport UI in General settings for moving assistants between hosting environments",
       "defaultEnabled": false
     },
-    {
-      "id": "permission-controls-v2",
-      "scope": "assistant",
-      "key": "permission-controls-v2",
-      "label": "Permission Controls V2",
-      "description": "Replace risk-level permission system with two independent controls: 'Ask before acting' (LLM behavior toggle) and 'Host access' (system-enforced gate)",
-      "defaultEnabled": false
-    },
     {
       "id": "apple-container",
       "scope": "macos",
@@ -377,14 +361,6 @@
       "description": "Swap the transcript's LazyVStack for a plain VStack so scrollContentHeight is the true sum of row heights (no LazyVStack estimator drift). Row frames are not pinned — the earlier frame-pinning approach was removed because it caused overlap when rows grew past their first measurement (streaming, expanding thinking blocks). Tradeoff: eager layout — every row measures up-front, which can stall for many seconds to minutes on very long conversations.",
       "defaultEnabled": true
     },
-    {
-      "id": "permission-controls-v3",
-      "scope": "assistant",
-      "key": "permission-controls-v3",
-      "label": "Permission Controls v3",
-      "description": "Enables permission controls v3: gateway-backed auto-approve thresholds, risk badges on tool results, simplified Allow/Deny permission prompt, and rule editor modal.",
-      "defaultEnabled": false
-    },
     {
       "id": "compaction-playground",
       "scope": "assistant",
@@ -392,6 +368,22 @@
       "label": "Compaction Playground",
       "description": "Expose the developer-only Compaction Playground tab in macOS Settings and enable the /playground/* HTTP endpoints for exercising compaction conditions. Dev-only; default off.",
       "defaultEnabled": false
+    },
+    {
+      "id": "memory-v2-enabled",
+      "scope": "assistant",
+      "key": "memory-v2-enabled",
+      "label": "Memory v2 (concept-page activation model)",
+      "description": "Enables the v2 memory subsystem: prose concept pages with bidirectional edges, activation-based retrieval, and hourly LLM-driven consolidation. v1 graph + PKB stays write-active until cutover.",
+      "defaultEnabled": false
+    },
+    {
+      "id": "inference-profiles",
+      "scope": "assistant",
+      "key": "inference-profiles",
+      "label": "Inference Profiles",
+      "description": "Show inference profile picker in chat, active profile dropdown, Manage Profiles button, and per-task overrides link in Settings",
+      "defaultEnabled": false
     }
   ]
 }

package/src/config/llm-resolver.ts

@@ -9,58 +9,76 @@ import {
 
 /**
  * Resolves a fully-specified `LLMConfigBase` for a given call site by layering
- * the call-site override on top of an optional named profile on top of the
- * required `llm.default`.
+ * call-site overrides, optional per-call profile, an optional ad-hoc override
+ * profile, the workspace's active profile, and the required `llm.default`.
  *
- * Resolution order (highest precedence wins):
- *   1. `llm.callSites[callSite]` fields (call-site override)
- *   2. `llm.profiles[site.profile]` fields (named profile)
- *   3. `llm.default` fields (required base)
+ * Merge layers (low → high precedence; later layers override earlier):
+ *   1. `llm.default` fields (required base)
+ *   2. `llm.profiles[llm.activeProfile]` (workspace-wide active profile)
+ *   3. `llm.profiles[opts.overrideProfile]` (per-call ad-hoc override)
+ *   4. `llm.profiles[site.profile]` fields (call-site's named profile)
+ *   5. `llm.callSites[callSite]` fields (call-site override)
  *
  * Nested objects (`thinking`, `contextWindow`, and
  * `contextWindow.overflowRecovery`) are deep-merged so partial overrides at
  * any nesting level merge into — rather than replace — the corresponding
  * base value.
  *
+ * `activeProfile` and `overrideProfile` are resolved by name lookup against
+ * `llm.profiles`. Missing references silently fall through (no throw) so the
+ * resolver stays pure; schema validation in `LLMSchema.superRefine` catches
+ * unknown `activeProfile` references at config-load time.
+ *
  * Pure & synchronous: no I/O, no async work.
  */
 export function resolveCallSiteConfig(
   callSite: LLMCallSite,
   llm: z.infer<typeof LLMSchema>,
+  opts: { overrideProfile?: string } = {},
 ): z.infer<typeof LLMConfigBase> {
-  const site = llm.callSites?.[callSite];
+  const layers: Mergeable[] = [llm.default as Mergeable];
 
-  // No site-level entry: deep-merge `default` against an empty fragment so
-  // every code path goes through the same merge codepath.
-  if (site == null) {
-    return finalize(deepMerge(llm.default as Mergeable, {} as Mergeable));
+  // Layer: workspace-wide active profile. Silent fall-through on missing key
+  // — schema validation in LLMSchema.superRefine catches static references.
+  const activeFragment =
+    llm.activeProfile != null ? llm.profiles?.[llm.activeProfile] : undefined;
+  if (activeFragment != null) {
+    layers.push(activeFragment as Mergeable);
   }
 
-  let profileFragment: LLMConfigFragment | undefined;
-  if (site.profile != null) {
-    profileFragment = llm.profiles?.[site.profile];
-    if (profileFragment == null) {
-      // Defensive: `LLMSchema.superRefine` already rejects unknown profile
-      // references at config load, so this branch is unreachable for any
-      // config that survived schema validation. Throw a clear error in case
-      // a hand-crafted (un-parsed) config slips through.
-      throw new Error(
-        `LLM call site "${callSite}" references undefined profile "${site.profile}"`,
-      );
-    }
+  // Layer: per-call ad-hoc override (e.g. a chat conversation's pinned
+  // profile). Silent fall-through on missing key keeps the resolver pure.
+  const overrideFragment =
+    opts.overrideProfile != null
+      ? llm.profiles?.[opts.overrideProfile]
+      : undefined;
+  if (overrideFragment != null) {
+    layers.push(overrideFragment as Mergeable);
   }
 
-  // Strip the `profile` discriminator before merging — it isn't a
-  // `LLMConfigBase` field.
-  const { profile: _profile, ...siteFragment } = site;
-
-  const merged = deepMerge(
-    llm.default as Mergeable,
-    (profileFragment ?? {}) as Mergeable,
-    siteFragment as Mergeable,
-  );
+  const site = llm.callSites?.[callSite];
+  if (site != null) {
+    if (site.profile != null) {
+      const profileFragment: LLMConfigFragment | undefined =
+        llm.profiles?.[site.profile];
+      if (profileFragment == null) {
+        // Defensive: `LLMSchema.superRefine` already rejects unknown profile
+        // references at config load, so this branch is unreachable for any
+        // config that survived schema validation. Throw a clear error in case
+        // a hand-crafted (un-parsed) config slips through.
+        throw new Error(
+          `LLM call site "${callSite}" references undefined profile "${site.profile}"`,
+        );
+      }
+      layers.push(profileFragment as Mergeable);
+    }
+    // Strip the `profile` discriminator before merging — it isn't a
+    // `LLMConfigBase` field.
+    const { profile: _profile, ...siteFragment } = site;
+    layers.push(siteFragment as Mergeable);
+  }
 
-  return finalize(merged);
+  return finalize(deepMerge(...layers));
 }
 
 // ---------------------------------------------------------------------------

package/src/config/loader.ts

@@ -3,7 +3,6 @@ import {
   mkdirSync,
   readFileSync,
   renameSync,
-  statSync,
   writeFileSync,
 } from "node:fs";
 import { basename, dirname, join } from "node:path";
@@ -232,6 +231,12 @@ const DEPRECATED_FIELDS: Record<string, string> = {
     "permissions.dangerouslySkipPermissions has been removed. " +
     "Permission prompts are now always shown when required. " +
     "The field will be removed from your config file.",
+  "permissions.mode":
+    "permissions.mode has been removed. The gateway now controls all auto-approve " +
+    "thresholds. The field will be removed from your config file.",
+  "permissions.autoApproveUpTo":
+    "permissions.autoApproveUpTo has been removed. The gateway now controls all " +
+    "auto-approve thresholds. The field will be removed from your config file.",
 };
 
 /**
@@ -239,6 +244,7 @@ const DEPRECATED_FIELDS: Record<string, string> = {
  * and strip them from both the in-memory object and the on-disk config file
  * so the warning is only emitted once.
  */
+
 function warnAndStripDeprecatedFields(
   fileConfig: Record<string, unknown>,
   configPath: string,
@@ -506,9 +512,9 @@ export function mergeDefaultWorkspaceConfig(): void {
 export function loadConfig(): AssistantConfig {
   if (cached) return cached;
 
-  // Re-entrancy guard: log calls during loading (e.g. file-mode warning)
-  // can trigger loadConfig again. Return defaults to break the cycle
-  // instead of recursing to stack overflow.
+  // Re-entrancy guard: log calls during loading can trigger loadConfig
+  // again. Return defaults to break the cycle instead of recursing to
+  // stack overflow.
   if (loading) return cloneDefaultConfig();
   loading = true;
 
@@ -519,15 +525,6 @@ export function loadConfig(): AssistantConfig {
     let fileConfig: Record<string, unknown> = {};
     let configFileExisted = true;
     if (existsSync(configPath)) {
-      const mode = statSync(configPath).mode;
-      if (mode & 0o077) {
-        log.warn(
-          `Config file ${configPath} is readable by other users (mode ${(
-            mode & 0o777
-          ).toString(8)}). ` + `Run: chmod 600 ${configPath}`,
-        );
-      }
-
       try {
         fileConfig = JSON.parse(readFileSync(configPath, "utf-8"));
       } catch (err) {
@@ -567,7 +564,7 @@ export function loadConfig(): AssistantConfig {
           setNestedValue(
             fileConfig,
             "memory.embeddings.geminiModel",
-            "gemini-embedding-2-preview",
+            "gemini-embedding-2",
           );
           setNestedValue(
             fileConfig,
@@ -577,7 +574,7 @@ export function loadConfig(): AssistantConfig {
           setNestedValue(fileConfig, "memory.qdrant.vectorSize", 3072);
           writeFileSync(configPath, JSON.stringify(fileConfig, null, 2) + "\n");
           log.info(
-            "Applied managed Gemini embedding defaults (provider=gemini, model=gemini-embedding-2-preview, dimensions=3072, vectorSize=3072)",
+            "Applied managed Gemini embedding defaults (provider=gemini, model=gemini-embedding-2, dimensions=3072, vectorSize=3072)",
           );
           // Re-validate so the returned config reflects the migration.
           config = validateWithSchema(fileConfig);

package/src/config/schema.ts

@@ -3,64 +3,11 @@ import { z } from "zod";
 import { getDataDir } from "../util/platform.js";
 
 // Re-export all domain schemas
-export type { PermissionMode } from "../permissions/permission-mode.js";
-export {
-  DEFAULT_PERMISSION_MODE,
-  PermissionModeSchema,
-} from "../permissions/permission-mode.js";
-export type { AcpAgentConfig, AcpConfig } from "./acp-schema.js";
-export { AcpAgentConfigSchema, AcpConfigSchema } from "./acp-schema.js";
-export type { AnalysisConfig } from "./schemas/analysis.js";
 export { AnalysisConfigSchema } from "./schemas/analysis.js";
 export type { BackupConfig, BackupDestination } from "./schemas/backup.js";
 export { BackupConfigSchema } from "./schemas/backup.js";
-export type {
-  CallerIdentityConfig,
-  CallsConfig,
-  CallsDisclosureConfig,
-  CallsSafetyConfig,
-  CallsVerificationConfig,
-  CallsVoiceConfig,
-} from "./schemas/calls.js";
-export {
-  CallerIdentityConfigSchema,
-  CallsConfigSchema,
-  CallsDisclosureConfigSchema,
-  CallsSafetyConfigSchema,
-  CallsVerificationConfigSchema,
-  CallsVoiceConfigSchema,
-  VALID_CALLER_IDENTITY_MODES,
-} from "./schemas/calls.js";
-export type {
-  SlackConfig,
-  TelegramConfig,
-  TwilioConfig,
-  WhatsAppConfig,
-} from "./schemas/channels.js";
-export {
-  SlackConfigSchema,
-  TelegramConfigSchema,
-  TwilioConfigSchema,
-  WhatsAppConfigSchema,
-} from "./schemas/channels.js";
-export type { ConversationsConfig } from "./schemas/conversations.js";
-export { ConversationsConfigSchema } from "./schemas/conversations.js";
-export {
-  DEFAULT_ELEVENLABS_VOICE_ID,
-  VALID_CONVERSATION_TIMEOUTS,
-} from "./schemas/elevenlabs.js";
-export type { HeartbeatConfig } from "./schemas/heartbeat.js";
-export { HeartbeatConfigSchema } from "./schemas/heartbeat.js";
-export type {
-  DesktopAutoCdpInspectConfig,
-  HostBrowserCdpInspectConfig,
-  HostBrowserConfig,
-} from "./schemas/host-browser.js";
-export {
-  DesktopAutoCdpInspectConfigSchema,
-  HostBrowserCdpInspectConfigSchema,
-  HostBrowserConfigSchema,
-} from "./schemas/host-browser.js";
+export { VALID_CALLER_IDENTITY_MODES } from "./schemas/calls.js";
+export { DEFAULT_ELEVENLABS_VOICE_ID } from "./schemas/elevenlabs.js";
 export type {
   ContextOverflowRecoveryConfig,
   ContextWindowConfig,
@@ -81,7 +28,6 @@ export type {
 export {
   IngressConfigSchema,
   IngressRateLimitConfigSchema,
-  IngressWebhookConfigSchema,
 } from "./schemas/ingress.js";
 export type { JournalConfig } from "./schemas/journal.js";
 export { JournalConfigSchema } from "./schemas/journal.js";
@@ -156,15 +102,8 @@ export {
   PlatformConfigSchema,
   UiConfigSchema,
 } from "./schemas/platform.js";
-export type {
-  PermissionsConfig,
-  SecretDetectionConfig,
-} from "./schemas/security.js";
-export {
-  PermissionsConfigSchema,
-  SecretDetectionConfigSchema,
-  VALID_PERMISSIONS_MODES,
-} from "./schemas/security.js";
+export type { SecretDetectionConfig } from "./schemas/security.js";
+export { SecretDetectionConfigSchema } from "./schemas/security.js";
 export type {
   ImageGenerationService,
   InferenceService,
@@ -261,10 +200,7 @@ import {
   PlatformConfigSchema,
   UiConfigSchema,
 } from "./schemas/platform.js";
-import {
-  PermissionsConfigSchema,
-  SecretDetectionConfigSchema,
-} from "./schemas/security.js";
+import { SecretDetectionConfigSchema } from "./schemas/security.js";
 import { ServicesSchema } from "./schemas/services.js";
 import { SkillsConfigSchema } from "./schemas/skills.js";
 import {
@@ -287,9 +223,6 @@ export const AssistantConfigSchema = z
     secretDetection: SecretDetectionConfigSchema.default(
       SecretDetectionConfigSchema.parse({}),
     ),
-    permissions: PermissionsConfigSchema.default(
-      PermissionsConfigSchema.parse({}),
-    ),
     auditLog: AuditLogConfigSchema.default(AuditLogConfigSchema.parse({})),
     logFile: LogFileConfigSchema.default(
       LogFileConfigSchema.parse({ dir: getDataDir() + "/logs" }),

package/src/config/schemas/__tests__/filing.test.ts

@@ -0,0 +1,58 @@
+import { describe, expect, test } from "bun:test";
+
+import { FilingConfigSchema } from "../filing.js";
+
+describe("FilingConfigSchema", () => {
+  test("defaults compactionEnabled to true", () => {
+    const parsed = FilingConfigSchema.parse({});
+    expect(parsed.compactionEnabled).toBe(true);
+  });
+
+  test("defaults compactionIntervalMs to 24 hours", () => {
+    const parsed = FilingConfigSchema.parse({});
+    expect(parsed.compactionIntervalMs).toBe(24 * 3_600_000);
+  });
+
+  test("defaults intervalMs to 4 hours (regression check)", () => {
+    const parsed = FilingConfigSchema.parse({});
+    expect(parsed.intervalMs).toBe(4 * 3_600_000);
+  });
+
+  test("rejects negative compactionIntervalMs", () => {
+    expect(() =>
+      FilingConfigSchema.parse({ compactionIntervalMs: -1 }),
+    ).toThrow();
+  });
+
+  test("rejects zero compactionIntervalMs", () => {
+    expect(() =>
+      FilingConfigSchema.parse({ compactionIntervalMs: 0 }),
+    ).toThrow();
+  });
+
+  test("rejects non-integer compactionIntervalMs", () => {
+    expect(() =>
+      FilingConfigSchema.parse({ compactionIntervalMs: 1.5 }),
+    ).toThrow();
+  });
+
+  test("accepts custom compactionIntervalMs", () => {
+    const parsed = FilingConfigSchema.parse({ compactionIntervalMs: 60_000 });
+    expect(parsed.compactionIntervalMs).toBe(60_000);
+  });
+
+  test("rejects non-boolean compactionEnabled", () => {
+    expect(() =>
+      FilingConfigSchema.parse({ compactionEnabled: "yes" }),
+    ).toThrow();
+  });
+
+  test("compaction fields are independent of filing.enabled", () => {
+    const parsed = FilingConfigSchema.parse({
+      enabled: false,
+      compactionEnabled: true,
+    });
+    expect(parsed.enabled).toBe(false);
+    expect(parsed.compactionEnabled).toBe(true);
+  });
+});