@vellumai/assistant 0.7.1 → 0.7.2

package/src/runtime/routes/inbound-message-handler.ts

@@ -11,7 +11,6 @@ import {
   isChannelId,
   parseInterfaceId,
 } from "../../channels/types.js";
-import { touchContactInteraction } from "../../contacts/contacts-write.js";
 import {
   createApprovalConversationGenerator,
   createApprovalCopyGenerator,
@@ -442,7 +441,7 @@ export async function handleChannelInbound({
           `[Voice message received — ${transcribeResult.reason}]` +
           (trimmedContent ? `\n\n${trimmedContent}` : "");
         break;
-      // "no_audio", "disabled" — no action needed
+      // "no_audio" — no action needed
     }
   }
 
@@ -511,13 +510,6 @@ export async function handleChannelInbound({
     }
   }
 
-  // Track contact interaction only for genuinely new messages (not webhook
-  // retries). This was previously in ACL enforcement which runs before dedup,
-  // causing retries to inflate interaction counts.
-  if (!result.duplicate && resolvedMember) {
-    touchContactInteraction(resolvedMember.channel.id);
-  }
-
   // external_conversation_bindings is assistant-agnostic. Restrict writes to
   // self so assistant-scoped legacy routes do not overwrite each other's
   // channel binding metadata for the same chat.

package/src/runtime/routes/inbound-stages/acl-enforcement.ts

@@ -12,7 +12,6 @@ import {
   findContactChannel,
   findGuardianForChannel,
 } from "../../../contacts/contact-store.js";
-import { touchChannelLastSeen } from "../../../contacts/contacts-write.js";
 import type {
   ChannelStatus,
   ContactChannel,
@@ -689,12 +688,6 @@ export async function enforceIngressAcl(
         };
       }
 
-      // 'allow' or 'escalate' — update last seen timestamp.
-      // touchContactInteraction is intentionally NOT called here because
-      // duplicate detection hasn't run yet. It's called in
-      // inbound-message-handler.ts after dedup so webhook retries don't
-      // inflate interaction counts.
-      touchChannelLastSeen(resolvedMember.channel.id);
     }
   }
 

package/src/runtime/routes/inbound-stages/edit-intercept.ts

@@ -15,7 +15,6 @@
  * focused on orchestration.
  */
 import type { ChannelId } from "../../../channels/types.js";
-import { touchContactInteraction } from "../../../contacts/contacts-write.js";
 import {
   getMessageById,
   updateMessageContent,
@@ -65,7 +64,6 @@ export async function handleEditIntercept(
     canonicalAssistantId,
     assistantId,
     content,
-    channelId,
   } = params;
 
   // Dedup the edit event itself (retried edited_message webhooks)
@@ -84,12 +82,6 @@ export async function handleEditIntercept(
     });
   }
 
-  // Track contact interaction only for genuinely new edit events (not webhook
-  // retries), matching the pattern used for the normal message path.
-  if (channelId) {
-    touchContactInteraction(channelId);
-  }
-
   // Retry lookup a few times -- the original message may still be processing
   // (linkMessage hasn't been called yet). Short backoff avoids losing edits
   // that arrive while the original agent loop is in progress.

package/src/runtime/routes/inbound-stages/transcribe-audio.test.ts

@@ -7,7 +7,6 @@ import { SttError } from "../../../stt/types.js";
 // Mocks — must be set up before importing the module under test
 // ---------------------------------------------------------------------------
 
-let mockFeatureFlagEnabled = true;
 let mockAttachments: Array<{
   id: string;
   mimeType: string;
@@ -20,14 +19,6 @@ let mockAttachments: Array<{
 }> = [];
 let mockTranscriber: BatchTranscriber | null = null;
 
-mock.module("../../../config/assistant-feature-flags.js", () => ({
-  isAssistantFeatureFlagEnabled: () => mockFeatureFlagEnabled,
-}));
-
-mock.module("../../../config/loader.js", () => ({
-  getConfig: () => ({}),
-}));
-
 mock.module("../../../memory/attachments-store.js", () => ({
   getAttachmentsByIds: (ids: string[]) =>
     mockAttachments.filter((a) => ids.includes(a.id)),
@@ -115,7 +106,6 @@ function makeImageAttachment(id: string) {
 
 describe("tryTranscribeAudioAttachments", () => {
   beforeEach(() => {
-    mockFeatureFlagEnabled = true;
     mockAttachments = [];
     mockTranscriber = null;
   });
@@ -189,16 +179,6 @@ describe("tryTranscribeAudioAttachments", () => {
     );
   });
 
-  test("feature flag disabled returns disabled", async () => {
-    mockFeatureFlagEnabled = false;
-    const audio = makeAudioAttachment("a1");
-    mockAttachments = [audio];
-
-    const result = await tryTranscribeAudioAttachments(["a1"]);
-
-    expect(result).toEqual({ status: "disabled" });
-  });
-
   test("30-second timeout fires and returns error without blocking", async () => {
     const audio = makeAudioAttachment("a1");
     mockAttachments = [audio];

package/src/runtime/routes/inbound-stages/transcribe-audio.ts

@@ -2,22 +2,21 @@
  * Auto-transcribe audio attachments from channel inbound messages.
  *
  * Returns a discriminated result type so callers can handle each outcome
- * (transcribed, no audio, disabled, no provider, error) without exceptions.
+ * (transcribed, no audio, no provider, error) without exceptions.
  * Never throws — failures are represented as result variants so that message
  * delivery is never blocked by transcription issues.
  */
 
-import { isAssistantFeatureFlagEnabled } from "../../../config/assistant-feature-flags.js";
-import { getConfig } from "../../../config/loader.js";
-import { getAttachmentById, getAttachmentsByIds } from "../../../memory/attachments-store.js";
+import {
+  getAttachmentById,
+  getAttachmentsByIds,
+} from "../../../memory/attachments-store.js";
 import { resolveBatchTranscriber } from "../../../providers/speech-to-text/resolve.js";
 import { normalizeSttError } from "../../../stt/daemon-batch-transcriber.js";
 import { getLogger } from "../../../util/logger.js";
 
 const log = getLogger("transcribe-audio");
 
-const VOICE_TRANSCRIPTION_FLAG_KEY = "channel-voice-transcription" as const;
-
 /** Timeout for the entire transcription pipeline (all attachments). */
 const TRANSCRIPTION_TIMEOUT_MS = 30_000;
 
@@ -28,7 +27,6 @@ const TRANSCRIPTION_TIMEOUT_MS = 30_000;
 export type TranscribeResult =
   | { status: "transcribed"; text: string }
   | { status: "no_audio" }
-  | { status: "disabled" }
   | { status: "no_provider"; reason: string }
   | { status: "error"; reason: string };
 
@@ -40,12 +38,6 @@ export async function tryTranscribeAudioAttachments(
   attachmentIds: string[],
 ): Promise<TranscribeResult> {
   try {
-    // Check feature flag
-    const config = getConfig();
-    if (!isAssistantFeatureFlagEnabled(VOICE_TRANSCRIPTION_FLAG_KEY, config)) {
-      return { status: "disabled" };
-    }
-
     // Look up attachments and filter to audio MIME types
     const resolved = getAttachmentsByIds(attachmentIds);
     const audioAttachments = resolved.filter((a) =>

package/src/runtime/routes/index.ts

@@ -27,6 +27,7 @@ import { CHANNEL_ROUTES } from "./channel-route-definitions.js";
 import { ROUTES as CHANNEL_VERIFICATION_ROUTES } from "./channel-verification-routes.js";
 import { ROUTES as CLIENT_ROUTES } from "./client-routes.js";
 import { ROUTES as CONSOLIDATION_ROUTES } from "./consolidation-routes.js";
+import { CONTACT_PROMPT_ROUTES } from "./contact-prompt-routes.js";
 import { ROUTES as CONTACT_ROUTES } from "./contact-routes.js";
 import { ROUTES as CONVERSATION_ANALYSIS_ROUTES } from "./conversation-analysis-routes.js";
 import { ROUTES as CONVERSATION_ATTENTION_ROUTES } from "./conversation-attention-routes.js";
@@ -42,12 +43,14 @@ import { ROUTES as DIAGNOSTICS_ROUTES } from "./diagnostics-routes.js";
 import { ROUTES as DOCUMENT_ROUTES } from "./documents-routes.js";
 import { ROUTES as EVENTS_ROUTES } from "./events-routes.js";
 import { ROUTES as FILING_ROUTES } from "./filing-routes.js";
+import { ROUTES as GATEWAY_LOG_ROUTES } from "./gateway-log-routes.js";
 import { ROUTES as GLOBAL_SEARCH_ROUTES } from "./global-search-routes.js";
 import { ROUTES as GROUP_ROUTES } from "./group-routes.js";
 import { ROUTES as GUARDIAN_ACTION_ROUTES } from "./guardian-action-routes.js";
 import { ROUTES as HEARTBEAT_ROUTES } from "./heartbeat-routes.js";
 import { ROUTES as HOME_FEED_ROUTES } from "./home-feed-routes.js";
 import { ROUTES as HOME_STATE_ROUTES } from "./home-state-routes.js";
+import { ROUTES as HOST_APP_CONTROL_ROUTES } from "./host-app-control-routes.js";
 import { ROUTES as HOST_BASH_ROUTES } from "./host-bash-routes.js";
 import { ROUTES as HOST_BROWSER_ROUTES } from "./host-browser-routes.js";
 import { ROUTES as HOST_CU_ROUTES } from "./host-cu-routes.js";
@@ -64,6 +67,7 @@ import { ROUTES as INTERNAL_OAUTH_ROUTES } from "./internal-oauth-routes.js";
 import { ROUTES as INTERNAL_TWILIO_ROUTES } from "./internal-twilio-routes.js";
 import { ROUTES as LLM_CALL_SITES_ROUTES } from "./llm-call-sites-routes.js";
 import { ROUTES as LOG_EXPORT_ROUTES } from "./log-export-routes.js";
+import { ROUTES as MCP_AUTH_ROUTES } from "./mcp-auth-routes.js";
 import { ROUTES as MEMORY_ITEM_ROUTES } from "./memory-item-routes.js";
 import { ROUTES as MEMORY_V2_ROUTES } from "./memory-v2-routes.js";
 import { ROUTES as MIGRATION_ROLLBACK_ROUTES } from "./migration-rollback-routes.js";
@@ -121,6 +125,7 @@ export const ROUTES: RouteDefinition[] = [
   ...BTW_ROUTES,
   ...BRAIN_GRAPH_ROUTES,
   ...CLIENT_ROUTES,
+  ...CONTACT_PROMPT_ROUTES,
   ...CONTACT_ROUTES,
   ...CONVERSATION_ANALYSIS_ROUTES,
   ...CONVERSATION_ATTENTION_ROUTES,
@@ -137,12 +142,14 @@ export const ROUTES: RouteDefinition[] = [
   ...DOCUMENT_ROUTES,
   ...EVENTS_ROUTES,
   ...FILING_ROUTES,
+  ...GATEWAY_LOG_ROUTES,
   ...GLOBAL_SEARCH_ROUTES,
   ...GROUP_ROUTES,
   ...GUARDIAN_ACTION_ROUTES,
   ...HEARTBEAT_ROUTES,
   ...HOME_FEED_ROUTES,
   ...HOME_STATE_ROUTES,
+  ...HOST_APP_CONTROL_ROUTES,
   ...HOST_BASH_ROUTES,
   ...HOST_BROWSER_ROUTES,
   ...HOST_CU_ROUTES,
@@ -151,6 +158,7 @@ export const ROUTES: RouteDefinition[] = [
   ...IDENTITY_ROUTES,
   ...INTERFACE_ROUTES,
   ...INTERNAL_OAUTH_ROUTES,
+  ...MCP_AUTH_ROUTES,
   ...INTERNAL_TWILIO_ROUTES,
   ...LOG_EXPORT_ROUTES,
   ...LLM_CALL_SITES_ROUTES,

package/src/runtime/routes/mcp-auth-routes.ts

@@ -0,0 +1,132 @@
+/**
+ * Internal routes for daemon-owned MCP OAuth flows.
+ *
+ * POST internal/mcp/auth/start   — kicks off the OAuth flow in the daemon
+ *                                  and returns the authorization URL
+ * GET  internal/mcp/auth/status/:serverId — polls current flow status
+ */
+
+import { z } from "zod";
+
+import { loadRawConfig } from "../../config/loader.js";
+import type { McpConfig } from "../../config/schemas/mcp.js";
+import { reloadMcpServers } from "../../daemon/mcp-reload-service.js";
+import { orchestrateMcpOAuthConnect } from "../../mcp/mcp-auth-orchestrator.js";
+import { getMcpAuthState } from "../../mcp/mcp-auth-state.js";
+import { getLogger } from "../../util/logger.js";
+import { BadRequestError, InternalError, NotFoundError } from "./errors.js";
+import type { RouteDefinition } from "./types.js";
+
+const log = getLogger("mcp-auth-routes");
+
+async function handleMcpAuthStart({
+  body,
+}: {
+  body?: Record<string, unknown>;
+}): Promise<{ auth_url: string; state: string; already_authenticated?: boolean }> {
+  const { serverId } = body as { serverId: string };
+
+  const raw = loadRawConfig();
+  const servers =
+    (raw.mcp as Partial<McpConfig> | undefined)?.servers ?? {};
+  const serverConfig = servers[serverId];
+
+  if (!serverConfig) {
+    throw new BadRequestError(`MCP server "${serverId}" not configured`);
+  }
+
+  const transport = serverConfig.transport;
+  if (transport.type !== "sse" && transport.type !== "streamable-http") {
+    throw new BadRequestError(
+      `OAuth only supported for sse/streamable-http transports (server "${serverId}" uses ${transport.type})`,
+    );
+  }
+
+  let result: { auth_url: string; already_authenticated?: boolean };
+  try {
+    result = await orchestrateMcpOAuthConnect({
+      serverId,
+      transport: {
+        url: transport.url,
+        type: transport.type,
+        headers: transport.headers,
+      },
+    });
+  } catch (err) {
+    throw new InternalError(err instanceof Error ? err.message : String(err));
+  }
+
+  return { auth_url: result.auth_url, state: serverId, already_authenticated: result.already_authenticated };
+}
+
+function handleMcpAuthStatus({
+  pathParams,
+}: {
+  pathParams?: Record<string, string>;
+}):
+  | { status: "pending"; auth_url: string }
+  | { status: "complete" }
+  | { status: "error"; error: string } {
+  const { serverId } = pathParams as { serverId: string };
+  const state = getMcpAuthState(serverId);
+
+  if (state === null) {
+    throw new NotFoundError(`No active OAuth flow for server "${serverId}"`);
+  }
+
+  if (state.status === "pending") return { status: "pending", auth_url: state.authUrl };
+  if (state.status === "complete") return { status: "complete" };
+  return { status: "error", error: state.error };
+}
+
+function handleMcpReload(_args: {
+  body?: Record<string, unknown>;
+}): { ok: true } {
+  // Fire-and-forget: reloadMcpServers() has its own reloadInProgress mutex,
+  // so concurrent calls coalesce.
+  void reloadMcpServers().catch((err) => {
+    log.warn(
+      { err: err instanceof Error ? err.message : String(err) },
+      "internal_mcp_reload background reload failed",
+    );
+  });
+  return { ok: true };
+}
+
+export const ROUTES: RouteDefinition[] = [
+  {
+    operationId: "internal_mcp_auth_start",
+    endpoint: "internal/mcp/auth/start",
+    method: "POST",
+    summary: "Start MCP OAuth flow",
+    description:
+      "Starts a daemon-owned MCP OAuth flow and returns the authorization URL for the CLI to open in the browser.",
+    tags: ["internal"],
+    requestBody: z.object({ serverId: z.string() }),
+    handler: handleMcpAuthStart,
+  },
+  {
+    operationId: "internal_mcp_auth_status",
+    endpoint: "internal/mcp/auth/status/:serverId",
+    method: "GET",
+    summary: "Poll MCP OAuth flow status",
+    description:
+      "Returns the current status of an in-flight MCP OAuth flow (pending/complete/error).",
+    tags: ["internal"],
+    pathParams: [{ name: "serverId" }],
+    additionalResponses: {
+      "404": { description: "No active OAuth flow for the given serverId" },
+    },
+    handler: handleMcpAuthStatus,
+  },
+  {
+    operationId: "internal_mcp_reload",
+    endpoint: "internal/mcp/reload",
+    method: "POST",
+    summary: "Trigger MCP server reload",
+    description:
+      "Kicks off reloadMcpServers() async on the daemon. Returns immediately.",
+    tags: ["internal"],
+    handler: handleMcpReload,
+  },
+];

package/src/runtime/routes/memory-item-routes.ts

@@ -25,6 +25,7 @@ import {
 import { z } from "zod";
 
 import { getConfig } from "../../config/loader.js";
+import { isMemoryV2ReadActive } from "../../memory/context-search/sources/memory-v2.js";
 import { getDb } from "../../memory/db-connection.js";
 import {
   embedWithBackend,
@@ -49,11 +50,7 @@ import { withQdrantBreaker } from "../../memory/qdrant-circuit-breaker.js";
 import { getQdrantClient } from "../../memory/qdrant-client.js";
 import { memoryGraphNodes } from "../../memory/schema.js";
 import { getLogger } from "../../util/logger.js";
-import {
-  BadRequestError,
-  ConflictError,
-  NotFoundError,
-} from "./errors.js";
+import { BadRequestError, ConflictError, NotFoundError } from "./errors.js";
 import type { RouteDefinition } from "./types.js";
 
 const log = getLogger("memory-item-routes");
@@ -179,6 +176,11 @@ async function searchNodesSemantic(
 ): Promise<{ ids: string[]; total: number } | null> {
   try {
     const config = getConfig();
+    // v2 owns the read path when both gates are on. Fall back to SQL search
+    // (the caller's `null` branch) instead of querying the v1 collection,
+    // which is in active retirement and a corrupted sparse segment can
+    // OOM-crash the shared Qdrant process.
+    if (isMemoryV2ReadActive(config)) return null;
     const backendStatus = await getMemoryBackendStatus(config);
     if (!backendStatus.provider) return null;
 
@@ -249,9 +251,7 @@ function rowToNode(row: typeof memoryGraphNodes.$inferSelect): MemoryNode {
       | "told-by-other",
     narrativeRole: row.narrativeRole as MemoryNode["narrativeRole"],
     partOfStory: row.partOfStory,
-    imageRefs: row.imageRefs
-      ? (JSON.parse(row.imageRefs) as ImageRef[])
-      : null,
+    imageRefs: row.imageRefs ? (JSON.parse(row.imageRefs) as ImageRef[]) : null,
     scopeId: row.scopeId ?? "default",
   };
 }
@@ -555,8 +555,7 @@ async function handleUpdateMemoryItem(
   // Rebuild content if subject or statement changed
   const { subject: existingSubject, statement: existingStatement } =
     splitContent(existing.content);
-  const newSubject =
-    subject !== undefined ? subject.trim() : existingSubject;
+  const newSubject = subject !== undefined ? subject.trim() : existingSubject;
   const newStatement =
     statement !== undefined ? statement.trim() : existingStatement;
 
@@ -702,8 +701,7 @@ export const ROUTES: RouteDefinition[] = [
       items: z.array(z.unknown()).describe("Memory item objects"),
       total: z.number(),
     }),
-    handler: ({ queryParams }) =>
-      handleListMemoryItems(queryParams ?? {}),
+    handler: ({ queryParams }) => handleListMemoryItems(queryParams ?? {}),
   },
 
   {