@vellumai/assistant 0.7.0 → 0.7.1

package/src/daemon/host-transfer-proxy.ts

@@ -5,6 +5,11 @@ import { dirname } from "node:path";
 
 import { v4 as uuid } from "uuid";
 
+import {
+  assistantEventHub,
+  broadcastMessage,
+} from "../runtime/assistant-event-hub.js";
+import * as pendingInteractions from "../runtime/pending-interactions.js";
 import type { ToolExecutionResult } from "../tools/types.js";
 import { AssistantError, ErrorCode } from "../util/errors.js";
 import { getLogger } from "../util/logger.js";
@@ -18,6 +23,7 @@ interface PendingTransfer {
   timer: ReturnType<typeof setTimeout>;
   requestId: string;
   transferId: string;
+  conversationId: string;
   direction: "to_host" | "to_sandbox";
   filePath: string;
   overwrite?: boolean;
@@ -41,6 +47,8 @@ function computeTimeoutMs(sizeBytes?: number): number {
 }
 
 export class HostTransferProxy {
+  private static _instance: HostTransferProxy | null = null;
+
   /**
    * Override for tests: when set, all timeout durations use this value instead
    * of the size-adaptive computation.  Reset to `undefined` after tests.
@@ -48,28 +56,49 @@ export class HostTransferProxy {
    */
   static _testTimeoutOverrideMs: number | undefined;
 
+  /**
+   * Lazily-initialized singleton. Availability of an actual desktop
+   * connection is checked at send time via the assistant event hub,
+   * not at construction time.
+   */
+  static get instance(): HostTransferProxy {
+    if (!HostTransferProxy._instance) {
+      log.info("Creating singleton HostTransferProxy");
+      HostTransferProxy._instance = new HostTransferProxy();
+    }
+    return HostTransferProxy._instance;
+  }
+
+  /** Dispose the singleton. Called during graceful shutdown. */
+  static disposeInstance(): void {
+    if (HostTransferProxy._instance) {
+      HostTransferProxy._instance.dispose();
+      HostTransferProxy._instance = null;
+    }
+  }
+
+  /** For tests. */
+  static reset(): void {
+    HostTransferProxy._instance = null;
+  }
+
   /** Pending transfers keyed by requestId (for resolution from client results). */
   private pending = new Map<string, PendingTransfer>();
   /** Pending transfers keyed by transferId (for content endpoint lookups). */
   private transfers = new Map<string, PendingTransfer>();
-  private sendToClient: (msg: ServerMessage) => void;
-  private onInternalResolve?: (requestId: string) => void;
-  private clientConnected = false;
-
-  constructor(
-    sendToClient: (msg: ServerMessage) => void,
-    onInternalResolve?: (requestId: string) => void,
-  ) {
-    this.sendToClient = sendToClient;
-    this.onInternalResolve = onInternalResolve;
+
+  /**
+   * Whether a client with `host_file` capability is connected.
+   * Transfers piggyback on the host_file capability.
+   */
+  isAvailable(): boolean {
+    return (
+      assistantEventHub.getMostRecentClientByCapability("host_file") != null
+    );
   }
 
-  updateSender(
-    sendToClient: (msg: ServerMessage) => void,
-    clientConnected: boolean,
-  ): void {
-    this.sendToClient = sendToClient;
-    this.clientConnected = clientConnected;
+  private send(msg: ServerMessage): void {
+    broadcastMessage(msg, undefined, { targetCapability: "host_file" });
   }
 
   /**
@@ -116,7 +145,7 @@ export class HostTransferProxy {
             this.pending.delete(requestId);
             this.transfers.delete(transferId);
             detachAbort();
-            this.onInternalResolve?.(requestId);
+            pendingInteractions.resolve(requestId);
             log.warn(
               { requestId, transferId, direction: "to_host" },
               "Host transfer proxy request timed out",
@@ -135,12 +164,13 @@ export class HostTransferProxy {
                 this.pending.delete(requestId);
                 this.transfers.delete(transferId);
                 detachAbort();
-                this.onInternalResolve?.(requestId);
+                pendingInteractions.resolve(requestId);
                 try {
-                  this.sendToClient({
+                  this.send({
                     type: "host_transfer_cancel",
                     requestId,
-                  } as ServerMessage);
+                    conversationId: input.conversationId,
+                  });
                 } catch {
                   // Best-effort cancel notification — connection may already be closed.
                 }
@@ -157,6 +187,7 @@ export class HostTransferProxy {
             timer,
             requestId,
             transferId,
+            conversationId: input.conversationId,
             direction: "to_host",
             filePath: input.destPath,
             sizeBytes,
@@ -168,7 +199,7 @@ export class HostTransferProxy {
           this.transfers.set(transferId, entry);
 
           try {
-            this.sendToClient({
+            this.send({
               type: "host_transfer_request",
               requestId,
               conversationId: input.conversationId,
@@ -178,13 +209,13 @@ export class HostTransferProxy {
               sizeBytes,
               sha256,
               overwrite: input.overwrite,
-            } as ServerMessage);
+            });
           } catch (err) {
             clearTimeout(timer);
             this.pending.delete(requestId);
             this.transfers.delete(transferId);
             detachAbort();
-            this.onInternalResolve?.(requestId);
+            pendingInteractions.resolve(requestId);
             log.warn(
               { requestId, transferId, err },
               "Host transfer proxy send failed",
@@ -237,7 +268,7 @@ export class HostTransferProxy {
         this.pending.delete(requestId);
         this.transfers.delete(transferId);
         detachAbort();
-        this.onInternalResolve?.(requestId);
+        pendingInteractions.resolve(requestId);
         log.warn(
           { requestId, transferId, direction: "to_sandbox" },
           "Host transfer proxy request timed out",
@@ -255,12 +286,13 @@ export class HostTransferProxy {
             this.pending.delete(requestId);
             this.transfers.delete(transferId);
             detachAbort();
-            this.onInternalResolve?.(requestId);
+            pendingInteractions.resolve(requestId);
             try {
-              this.sendToClient({
+              this.send({
                 type: "host_transfer_cancel",
                 requestId,
-              } as ServerMessage);
+                conversationId: input.conversationId,
+              });
             } catch {
               // Best-effort cancel notification — connection may already be closed.
             }
@@ -277,6 +309,7 @@ export class HostTransferProxy {
         timer,
         requestId,
         transferId,
+        conversationId: input.conversationId,
         direction: "to_sandbox",
         filePath: input.destPath,
         overwrite: input.overwrite,
@@ -286,20 +319,20 @@ export class HostTransferProxy {
       this.transfers.set(transferId, entry);
 
       try {
-        this.sendToClient({
+        this.send({
           type: "host_transfer_request",
           requestId,
           conversationId: input.conversationId,
           direction: "to_sandbox",
           transferId,
           sourcePath: input.sourcePath,
-        } as ServerMessage);
+        });
       } catch (err) {
         clearTimeout(timer);
         this.pending.delete(requestId);
         this.transfers.delete(transferId);
         detachAbort();
-        this.onInternalResolve?.(requestId);
+        pendingInteractions.resolve(requestId);
         log.warn(
           { requestId, transferId, err },
           "Host transfer proxy send failed",
@@ -311,9 +344,6 @@ export class HostTransferProxy {
 
   /**
    * Resolve a to_host transfer result from the client.
-   *
-   * Called when the client POSTs the result after downloading content
-   * and writing it to the host filesystem.
    */
   resolveTransferResult(
     requestId: string,
@@ -454,12 +484,13 @@ export class HostTransferProxy {
     entry.detachAbort();
     this.pending.delete(requestId);
     this.transfers.delete(entry.transferId);
-    this.onInternalResolve?.(requestId);
+    pendingInteractions.resolve(requestId);
     try {
-      this.sendToClient({
+      this.send({
         type: "host_transfer_cancel",
         requestId,
-      } as ServerMessage);
+        conversationId: entry.conversationId,
+      });
     } catch {
       // Best-effort cancel notification — connection may already be closed.
     }
@@ -470,23 +501,30 @@ export class HostTransferProxy {
     return this.transfers.has(transferId);
   }
 
-  isAvailable(): boolean {
-    return this.clientConnected;
+  /**
+   * Look up the requestId for a given transferId.
+   * Used by route handlers to correlate transfer content endpoints with
+   * pending interactions.
+   */
+  getRequestIdForTransfer(transferId: string): string | null {
+    const entry = this.transfers.get(transferId);
+    return entry?.requestId ?? null;
   }
 
   dispose(): void {
     for (const [requestId, entry] of this.pending) {
       clearTimeout(entry.timer);
       entry.detachAbort();
-      this.onInternalResolve?.(requestId);
+      pendingInteractions.resolve(requestId);
       try {
-        this.sendToClient({
-          type: "host_transfer_cancel",
-          requestId,
-        } as ServerMessage);
-      } catch {
-        // Best-effort cancel notification — connection may already be closed.
-      }
+          this.send({
+            type: "host_transfer_cancel",
+            requestId,
+            conversationId: entry.conversationId,
+          });
+        } catch {
+          // Best-effort cancel notification — connection may already be closed.
+        }
       entry.reject(
         new AssistantError(
           "Host transfer proxy disposed",

package/src/daemon/lifecycle.ts

@@ -9,7 +9,10 @@ import { reconcileCallsOnStartup } from "../calls/call-recovery.js";
 import { setRelayBroadcast } from "../calls/relay-server.js";
 import { TwilioConversationRelayProvider } from "../calls/twilio-provider.js";
 import { setVoiceBridgeDeps } from "../calls/voice-session-bridge.js";
-import { initFeatureFlagOverrides } from "../config/assistant-feature-flags.js";
+import {
+  initFeatureFlagOverrides,
+  isAssistantFeatureFlagEnabled,
+} from "../config/assistant-feature-flags.js";
 import {
   getPlatformAssistantId,
   getRuntimeHttpHost,
@@ -19,6 +22,7 @@ import {
 } from "../config/env.js";
 import { loadConfig, mergeDefaultWorkspaceConfig } from "../config/loader.js";
 import type { AssistantConfig } from "../config/schema.js";
+import { seedInferenceProfiles } from "../config/seed-inference-profiles.js";
 import type { CesClient } from "../credential-execution/client.js";
 import { createCesClient } from "../credential-execution/client.js";
 import {
@@ -69,6 +73,7 @@ import { seedOAuthProviders } from "../oauth/seed-providers.js";
 import { loadUserPlugins } from "../plugins/user-loader.js";
 import { ensurePromptFiles } from "../prompts/system-prompt.js";
 import { resolveManagedProxyContext } from "../providers/managed-proxy/context.js";
+import { broadcastMessage } from "../runtime/assistant-event-hub.js";
 import {
   initAuthSigningKey,
   resolveSigningKey,
@@ -455,6 +460,20 @@ export async function runDaemon(): Promise<void> {
       }
     } // end if (dbReady)
 
+    // Seed managed inference profiles into the workspace config. Runs
+    // after workspace migrations (which may have created the initial
+    // profile slots) and before mergeDefaultWorkspaceConfig / loadConfig
+    // so the profiles are on disk for the first config load.
+    try {
+      seedInferenceProfiles();
+      log.info("Inference profile seeding complete");
+    } catch (err) {
+      log.warn(
+        { err },
+        "Inference profile seeding failed — continuing startup",
+      );
+    }
+
     // Merge CLI-provided default config (from VELLUM_DEFAULT_WORKSPACE_CONFIG_PATH)
     // into the workspace config file before the first loadConfig() call so
     // onboarding preferences are persisted alongside schema defaults.
@@ -797,7 +816,7 @@ export async function runDaemon(): Promise<void> {
 
     // Register the broadcast function for the notification signal pipeline's
     // macOS adapter so it can deliver notification_intent messages to clients.
-    registerBroadcastFn((msg) => server.broadcast(msg));
+    registerBroadcastFn((msg) => broadcastMessage(msg));
 
     const scheduler = startScheduler(
       async (conversationId, message, options) => {
@@ -884,7 +903,7 @@ export async function runDaemon(): Promise<void> {
         });
       },
       (info) => {
-        server.broadcast({
+        broadcastMessage({
           type: "schedule_conversation_created",
           conversationId: info.conversationId,
           scheduleJobId: info.scheduleJobId,
@@ -961,7 +980,7 @@ export async function runDaemon(): Promise<void> {
     });
     try {
       await runtimeHttp.start();
-      setRelayBroadcast((msg) => server.broadcast(msg));
+      setRelayBroadcast((msg) => broadcastMessage(msg));
       setPointerMessageProcessor(
         async (conversationId, instruction, requiredFacts) => {
           const conversation =
@@ -1201,9 +1220,9 @@ export async function runDaemon(): Promise<void> {
 
     const heartbeatConfig = config.heartbeat;
     const heartbeat = new HeartbeatService({
-      alerter: (alert) => server.broadcast(alert),
+      alerter: (alert) => broadcastMessage(alert),
       onConversationCreated: (info) =>
-        server.broadcast({
+        broadcastMessage({
           type: "heartbeat_conversation_created",
           conversationId: info.conversationId,
           title: info.title,
@@ -1218,16 +1237,31 @@ export async function runDaemon(): Promise<void> {
       "Heartbeat service configured",
     );
 
-    const filingConfig = config.filing;
-    const filing = new FilingService();
-    filing.start();
-    log.info(
-      {
-        enabled: filingConfig.enabled,
-        intervalMs: filingConfig.intervalMs,
-      },
-      "Filing service configured",
+    // Filing yields to the memory v2 consolidation job when the flag is on —
+    // both serve the same role (periodic background memory processing) and
+    // running both is redundant. The consolidation job runs through the
+    // memory jobs worker (see `maybeEnqueueGraphMaintenanceJobs`).
+    const memoryV2Enabled = isAssistantFeatureFlagEnabled(
+      "memory-v2-enabled",
+      config,
     );
+    let filing: FilingService | null = null;
+    if (!memoryV2Enabled) {
+      const filingConfig = config.filing;
+      filing = new FilingService();
+      filing.start();
+      log.info(
+        {
+          enabled: filingConfig.enabled,
+          intervalMs: filingConfig.intervalMs,
+        },
+        "Filing service configured",
+      );
+    } else {
+      log.info(
+        "Filing service skipped — memory v2 consolidation is the active background memory job",
+      );
+    }
 
     // Retrieve the MCP manager if MCP servers were configured.
     // The manager is a singleton created during initializeProvidersAndTools().

package/src/daemon/message-types/conversations.ts

@@ -314,6 +314,7 @@ export interface GenerationHandoff {
 
 export interface ModelInfo {
   type: "model_info";
+  conversationId?: string;
   model: string;
   provider: string;
   configuredProviders?: string[];
@@ -351,6 +352,12 @@ export interface HistoryResponseToolCall {
   riskReason?: string;
   /** Whether the tool was auto-approved (true) or required explicit user input (false). */
   autoApproved?: boolean;
+  /** How the approval decision was reached: prompted, auto, blocked, or unknown (legacy). */
+  approvalMode?: string;
+  /** Why the approval decision was reached (stable enum for client display). */
+  approvalReason?: string;
+  /** Snapshot of the auto-approve threshold at execution time. */
+  riskThreshold?: string;
 }
 
 export interface HistoryResponseSurface {

package/src/daemon/message-types/host-bash.ts

@@ -18,6 +18,7 @@ export interface HostBashRequest {
 export interface HostBashCancelRequest {
   type: "host_bash_cancel";
   requestId: string;
+  conversationId: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/host-cu.ts

@@ -17,6 +17,7 @@ export interface HostCuRequest {
 export interface HostCuCancelRequest {
   type: "host_cu_cancel";
   requestId: string;
+  conversationId: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/host-file.ts

@@ -42,6 +42,7 @@ export type HostFileRequest =
 export interface HostFileCancelRequest {
   type: "host_file_cancel";
   requestId: string;
+  conversationId: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/host-transfer.ts

@@ -32,6 +32,7 @@ export type HostTransferRequest =
 export interface HostTransferCancelRequest {
   type: "host_transfer_cancel";
   requestId: string;
+  conversationId: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/messages.ts

@@ -143,12 +143,20 @@ export interface ToolResult {
   riskLevel?: string;
   /** Human-readable reason for the risk classification. */
   riskReason?: string;
+  /** ID of the trust rule that matched this invocation (if any). */
+  matchedTrustRuleId?: string;
   /** Whether the daemon is running in a containerized (Docker) environment. */
   isContainerized?: boolean;
   /** Scope options ladder for the rule editor modal (narrowest to broadest). */
   riskScopeOptions?: Array<{ pattern: string; label: string }>;
   /** Directory scope ladder for the rule editor modal (narrowest to broadest). */
   riskDirectoryScopeOptions?: Array<{ scope: string; label: string }>;
+  /** How the approval decision was reached: prompted, auto, blocked, or unknown (legacy). */
+  approvalMode?: string;
+  /** Why the approval decision was reached (stable enum for client display). */
+  approvalReason?: string;
+  /** Snapshot of the auto-approve threshold at execution time. */
+  riskThreshold?: string;
 }
 
 export interface ConfirmationRequest {
@@ -227,18 +235,13 @@ export interface MessageComplete {
 
 export interface ErrorMessage {
   type: "error";
+  conversationId?: string;
+  code?: string;
   message: string;
   /** Categorizes the error so the client can offer contextual actions (e.g. "Send Anyway" for secret_blocked). */
   category?: string;
 }
 
-export interface SecretDetected {
-  type: "secret_detected";
-  toolName: string;
-  matches: Array<{ type: string; redactedValue: string }>;
-  action: "redact" | "warn" | "block" | "prompt";
-}
-
 export interface MessageQueued {
   type: "message_queued";
   conversationId: string;
@@ -360,7 +363,6 @@ export type TraceEventKind =
   | "tool_permission_decided"
   | "tool_finished"
   | "tool_failed"
-  | "secret_detected"
   | "generation_handoff"
   | "message_complete"
   | "generation_cancelled"
@@ -401,7 +403,6 @@ export type _MessagesServerMessages =
   | SecretRequest
   | MessageComplete
   | ErrorMessage
-  | SecretDetected
   | MessageQueued
   | MessageDequeued
   | MessageRequestComplete

package/src/daemon/message-types/workspace.ts

@@ -90,7 +90,7 @@ export interface ToolPermissionSimulateResponse {
   /** Resolved execution target for the tool. */
   executionTarget?: "host" | "sandbox";
   /** ID of the trust rule that matched (if any). */
-  matchedRuleId?: string;
+  matchedTrustRuleId?: string;
   /** Error message when success is false. */
   error?: string;
 }