@vellumai/assistant 0.7.1 → 0.7.3

package/src/daemon/message-types/contacts.ts

@@ -36,6 +36,25 @@ export interface ContactsChanged {
   type: "contacts_changed";
 }
 
+/**
+ * Server → Client prompt requesting the user to enter a contact channel address.
+ * Emitted by the `contacts/prompt` IPC route.
+ */
+export interface ContactRequest {
+  type: "contact_request";
+  requestId: string;
+  /** Suggested channel type (e.g. "phone", "email") — used as a hint, not enforced. */
+  channel?: string;
+  /** Placeholder text for the address input field. */
+  placeholder?: string;
+  /** Display label shown above the input field. */
+  label?: string;
+  /** Longer description shown below the label. */
+  description?: string;
+  /** Suggested role for the new contact (guardian / trusted-contact / unknown). */
+  role?: string;
+}
+
 export interface ContactPayload {
   id: string;
   displayName: string;
@@ -68,4 +87,7 @@ export interface ContactChannelPayload {
 
 export type _ContactsClientMessages = ContactsRequest;
 
-export type _ContactsServerMessages = ContactsResponse | ContactsChanged;
+export type _ContactsServerMessages =
+  | ContactsResponse
+  | ContactsChanged
+  | ContactRequest;

package/src/daemon/message-types/conversations.ts

@@ -29,6 +29,8 @@ interface BaseTransportMetadata {
   uxBrief?: string;
   /** Chat type from the gateway (e.g. "private", "group", "supergroup", "channel"). */
   chatType?: string;
+  /** IANA timezone reported by the active client for the current turn. */
+  clientTimezone?: string;
 }
 
 /**
@@ -184,7 +186,7 @@ export interface ReorderConversationsRequest {
 
 // === Server → Client ===
 
-export interface ConversationSearchMatchingMessage {
+interface ConversationSearchMatchingMessage {
   messageId: string;
   role: string;
   /** Plain-text excerpt around the match, truncated to ~200 chars. */
@@ -192,7 +194,7 @@ export interface ConversationSearchMatchingMessage {
   createdAt: number;
 }
 
-export interface ConversationSearchResultItem {
+interface ConversationSearchResultItem {
   conversationId: string;
   conversationTitle: string | null;
   conversationUpdatedAt: number;
@@ -225,7 +227,7 @@ export interface ConversationTitleUpdated {
 }
 
 /** Channel binding metadata exposed in conversation list APIs. */
-export interface ChannelBinding {
+interface ChannelBinding {
   sourceChannel: ChannelId;
   externalChatId: string;
   externalUserId?: string | null;
@@ -234,7 +236,7 @@ export interface ChannelBinding {
 }
 
 /** Attention state metadata for a conversation's latest assistant message. */
-export interface AssistantAttention {
+interface AssistantAttention {
   hasUnseenLatestAssistantMessage: boolean;
   latestAssistantMessageAt?: number;
   lastSeenAssistantMessageAt?: number;
@@ -242,7 +244,7 @@ export interface AssistantAttention {
   lastSeenSignalType?: string;
 }
 
-export interface ConversationForkParent {
+interface ConversationForkParent {
   conversationId: string;
   messageId: string;
   title: string;
@@ -329,7 +331,7 @@ export interface ModelInfo {
   }>;
 }
 
-export interface HistoryResponseToolCall {
+interface HistoryResponseToolCall {
   name: string;
   input: Record<string, unknown>;
   result?: string;
@@ -350,7 +352,10 @@ export interface HistoryResponseToolCall {
   riskLevel?: string;
   /** Human-readable reason for the risk classification. */
   riskReason?: string;
-  /** Whether the tool was auto-approved (true) or required explicit user input (false). */
+  /**
+   * @deprecated Use `approvalMode` and `approvalReason` instead.
+   * Kept for backward compatibility during the migration window.
+   */
   autoApproved?: boolean;
   /** How the approval decision was reached: prompted, auto, blocked, or unknown (legacy). */
   approvalMode?: string;
@@ -360,7 +365,7 @@ export interface HistoryResponseToolCall {
   riskThreshold?: string;
 }
 
-export interface HistoryResponseSurface {
+interface HistoryResponseSurface {
   surfaceId: string;
   surfaceType: string;
   title?: string;
@@ -519,6 +524,7 @@ export interface CompactionCircuitClosed {
 export type ConversationErrorCode =
   | "PROVIDER_NETWORK"
   | "PROVIDER_RATE_LIMIT"
+  | "MANAGED_USAGE_LIMIT"
   | "PROVIDER_OVERLOADED"
   | "PROVIDER_API"
   | "PROVIDER_BILLING"
@@ -529,6 +535,7 @@ export type ConversationErrorCode =
   | "CONTEXT_TOO_LARGE"
   | "CONVERSATION_ABORTED"
   | "CONVERSATION_PROCESSING_FAILED"
+  | "DISK_SPACE_CRITICAL"
   | "REGENERATE_FAILED"
   | "UNKNOWN";
 

package/src/daemon/message-types/disk-pressure.ts

@@ -0,0 +1,9 @@
+import type { DiskPressureStatus } from "../disk-pressure-guard.js";
+
+/** Server push when the disk pressure status snapshot changes. */
+export interface DiskPressureStatusChanged {
+  type: "disk_pressure_status_changed";
+  status: DiskPressureStatus;
+}
+
+export type _DiskPressureServerMessages = DiskPressureStatusChanged;

package/src/daemon/message-types/host-app-control.ts

@@ -0,0 +1,150 @@
+// Host app-control proxy types.
+// Enables proxying app-control actions (start, observe, press, combo, type,
+// click, drag, stop) to the desktop client (host machine) when running as a
+// managed assistant. Targets a specific application by bundle ID or process
+// name — distinct from the system-wide computer-use proxy in host-cu.ts.
+
+// === Tool input discriminated union ===
+
+/** Inputs accepted by the nine app-control tool variants. */
+export type HostAppControlInput =
+  | HostAppControlStartInput
+  | HostAppControlObserveInput
+  | HostAppControlPressInput
+  | HostAppControlComboInput
+  | HostAppControlSequenceInput
+  | HostAppControlTypeInput
+  | HostAppControlClickInput
+  | HostAppControlDragInput
+  | HostAppControlStopInput;
+
+export interface HostAppControlStartInput {
+  tool: "start";
+  /** Bundle ID (preferred) or process name. */
+  app: string;
+  /** Optional command-line arguments to launch the app with. */
+  args?: string[];
+}
+
+export interface HostAppControlObserveInput {
+  tool: "observe";
+  app: string;
+  /**
+   * Milliseconds to wait between receiving the request and capturing the
+   * window. Lets the target app process pending input and the WindowServer
+   * composite a fresh frame. When omitted, the client uses its default
+   * (~200ms, sized for emulator-class apps at 60fps). Pass `0` for static
+   * UIs to make `observe` snappier; raise it for slow-feedback apps.
+   */
+  settle_ms?: number;
+}
+
+export interface HostAppControlPressInput {
+  tool: "press";
+  app: string;
+  /** Single key identifier, e.g. "return", "a", "f12". */
+  key: string;
+  /** Modifier list, e.g. ["cmd", "shift"]. */
+  modifiers?: string[];
+  /** Hold duration in milliseconds. */
+  duration_ms?: number;
+}
+
+export interface HostAppControlComboInput {
+  tool: "combo";
+  app: string;
+  /** Sequence of keys pressed simultaneously, e.g. ["cmd", "shift", "4"]. */
+  keys: string[];
+  /** Hold duration in milliseconds. */
+  duration_ms?: number;
+}
+
+/** A single step inside a sequence: one key press with optional modifiers, hold duration, and post-press gap. */
+export interface HostAppControlSequenceStep {
+  /** Single key identifier, e.g. "right", "a", "return". */
+  key: string;
+  /** Modifier list, e.g. ["cmd", "shift"]. Omit for no modifiers. */
+  modifiers?: string[];
+  /** Hold duration for this key in milliseconds. */
+  duration_ms?: number;
+  /** Pause after this step before starting the next, in milliseconds. */
+  gap_ms?: number;
+}
+
+export interface HostAppControlSequenceInput {
+  tool: "sequence";
+  app: string;
+  /** Ordered list of single-key presses to execute serially. */
+  steps: HostAppControlSequenceStep[];
+}
+
+export interface HostAppControlTypeInput {
+  tool: "type";
+  app: string;
+  text: string;
+}
+
+export interface HostAppControlClickInput {
+  tool: "click";
+  app: string;
+  x: number;
+  y: number;
+  button?: "left" | "right" | "middle";
+  double?: boolean;
+}
+
+export interface HostAppControlDragInput {
+  tool: "drag";
+  app: string;
+  from_x: number;
+  from_y: number;
+  to_x: number;
+  to_y: number;
+  button?: "left" | "right" | "middle";
+}
+
+export interface HostAppControlStopInput {
+  tool: "stop";
+  /** Optional — when omitted the proxy stops whichever app currently holds the session. */
+  app?: string;
+  /** Free-form reason, surfaced for logging. */
+  reason?: string;
+}
+
+// === Server → Client ===
+
+export interface HostAppControlRequest {
+  type: "host_app_control_request";
+  requestId: string;
+  conversationId: string;
+  toolName: string; // "app_control_start", "app_control_observe", etc.
+  input: HostAppControlInput;
+}
+
+export interface HostAppControlCancel {
+  type: "host_app_control_cancel";
+  requestId: string;
+  conversationId: string;
+}
+
+// === Result payload (HTTP /v1/host-app-control-result body) ===
+
+/** Lifecycle state of the targeted application as seen by the client. */
+export type HostAppControlState = "running" | "missing" | "minimized";
+
+export interface HostAppControlResultPayload {
+  requestId: string;
+  state: HostAppControlState;
+  /** Base64-encoded PNG screenshot of the targeted app window, when available. */
+  pngBase64?: string;
+  /** Window bounds in screen-space points. */
+  windowBounds?: { x: number; y: number; width: number; height: number };
+  executionResult?: string;
+  executionError?: string;
+}
+
+// --- Domain-level union aliases (consumed by the barrel file) ---
+
+export type _HostAppControlServerMessages =
+  | HostAppControlRequest
+  | HostAppControlCancel;

package/src/daemon/message-types/host-bash.ts

@@ -13,12 +13,16 @@ export interface HostBashRequest {
   timeout_seconds?: number;
   /** Extra environment variables to inject into the subprocess (e.g. VELLUM_UNTRUSTED_SHELL). */
   env?: Record<string, string>;
+  /** When set, route this request only to the client with this ID. */
+  targetClientId?: string;
 }
 
 export interface HostBashCancelRequest {
   type: "host_bash_cancel";
   requestId: string;
   conversationId: string;
+  /** When set, route this cancel only to the client that owns the request. */
+  targetClientId?: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/host-cu.ts

@@ -8,6 +8,7 @@ export interface HostCuRequest {
   type: "host_cu_request";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
   toolName: string; // "computer_use_click", "computer_use_type_text", etc.
   input: Record<string, unknown>;
   stepNumber: number;
@@ -18,6 +19,7 @@ export interface HostCuCancelRequest {
   type: "host_cu_cancel";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/host-file.ts

@@ -8,6 +8,7 @@ export interface HostFileReadRequest {
   type: "host_file_request";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
   operation: "read";
   path: string;
   offset?: number;
@@ -18,6 +19,7 @@ export interface HostFileWriteRequest {
   type: "host_file_request";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
   operation: "write";
   path: string;
   content: string;
@@ -27,6 +29,7 @@ export interface HostFileEditRequest {
   type: "host_file_request";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
   operation: "edit";
   path: string;
   old_string: string;
@@ -43,6 +46,7 @@ export interface HostFileCancelRequest {
   type: "host_file_cancel";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/host-transfer.ts

@@ -8,6 +8,7 @@ export interface HostTransferToHostRequest {
   type: "host_transfer_request";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
   direction: "to_host";
   transferId: string;
   destPath: string;
@@ -20,6 +21,7 @@ export interface HostTransferToSandboxRequest {
   type: "host_transfer_request";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
   direction: "to_sandbox";
   transferId: string;
   sourcePath: string;
@@ -33,6 +35,7 @@ export interface HostTransferCancelRequest {
   type: "host_transfer_cancel";
   requestId: string;
   conversationId: string;
+  targetClientId?: string;
 }
 
 // --- Domain-level union aliases (consumed by the barrel file) ---

package/src/daemon/message-types/messages.ts

@@ -236,10 +236,13 @@ export interface MessageComplete {
 export interface ErrorMessage {
   type: "error";
   conversationId?: string;
+  requestId?: string;
   code?: string;
   message: string;
   /** Categorizes the error so the client can offer contextual actions (e.g. "Send Anyway" for secret_blocked). */
   category?: string;
+  /** Machine-readable conversation error category for clients that need source-aware recovery UI. */
+  errorCategory?: string;
 }
 
 export interface MessageQueued {

package/src/daemon/message-types/schedules.ts

@@ -118,10 +118,15 @@ export interface HeartbeatRunsListResponse {
   type: "heartbeat_runs_list_response";
   runs: Array<{
     id: string;
-    title: string;
+    scheduledFor: number;
+    startedAt: number | null;
+    finishedAt: number | null;
+    durationMs: number | null;
+    status: string;
+    skipReason: string | null;
+    error: string | null;
+    conversationId: string | null;
     createdAt: number;
-    result: string;
-    summary?: string;
   }>;
 }
 

package/src/daemon/message-types/skills.ts

@@ -1,9 +1,9 @@
 // Skill management types.
 
-import type { PartnerAudit } from "../../skills/skillssh-registry.js";
+import type { PartnerAudit } from "../../skills/skillssh-audit-types.js";
 
 // Re-export so consumers can access the audit types from this module.
-export type { PartnerAudit } from "../../skills/skillssh-registry.js";
+export type { PartnerAudit } from "../../skills/skillssh-audit-types.js";
 
 // === Client → Server ===
 

package/src/daemon/process-message.ts

@@ -45,7 +45,9 @@ import {
   mergeConversationOptions,
 } from "./conversation-store.js";
 import type { ConversationCreateOptions } from "./handlers/shared.js";
+import { HostAppControlProxy } from "./host-app-control-proxy.js";
 import { HostCuProxy } from "./host-cu-proxy.js";
+import { preactivateHostProxySkills } from "./host-proxy-preactivation.js";
 
 const log = getLogger("process-message");
 
@@ -156,10 +158,25 @@ async function prepareConversationForMessage(
     if (!conversation.isProcessing() || !conversation.hostCuProxy) {
       conversation.setHostCuProxy(new HostCuProxy());
     }
-    conversation.addPreactivatedSkillId("computer-use");
   } else if (!conversation.isProcessing()) {
     conversation.setHostCuProxy(undefined);
   }
+  // App-control mirrors CU's per-conversation lifecycle. The proxy attaches
+  // unconditionally when the client supports the capability — feature-flag
+  // gating is enforced by the skill-projection layer via SKILL.md
+  // frontmatter, so an attached proxy is harmless when the flag is off.
+  if (supportsHostProxy(resolvedInterface, "host_app_control")) {
+    if (!conversation.isProcessing() || !conversation.hostAppControlProxy) {
+      conversation.setHostAppControlProxy(
+        new HostAppControlProxy(conversationId),
+      );
+    }
+  } else if (!conversation.isProcessing()) {
+    conversation.setHostAppControlProxy(undefined);
+  }
+  // The early `isProcessing()` throw above guarantees the conversation is
+  // idle here, so preactivation is unconditional once the proxies are wired.
+  preactivateHostProxySkills(conversation, resolvedInterface);
   conversation.setCommandIntent(options?.commandIntent ?? null);
   conversation.setTurnChannelContext({
     userMessageChannel: resolvedChannel,

package/src/daemon/profiler-run-store.ts

@@ -73,7 +73,7 @@ const DEFAULT_MIN_FREE_MB = 200;
 
 // ── Result type ─────────────────────────────────────────────────────────
 
-export interface ProfilerSweepResult {
+interface ProfilerSweepResult {
   /** Number of completed runs pruned during this sweep. */
   prunedCount: number;
   /** Total bytes freed by pruning. */
@@ -159,7 +159,7 @@ function getFreeDiskBytes(path: string): number {
 // ── Core operations ─────────────────────────────────────────────────────
 
 /** Options for {@link rescanRuns}. */
-export interface RescanRunsOptions {
+interface RescanRunsOptions {
   /**
    * When true, skip all `writeManifest()` calls — just read existing
    * manifests and recompute sizes without mutating the filesystem.
@@ -384,7 +384,7 @@ export function runProfilerSweep(): ProfilerSweepResult {
 // health-endpoint reporting and control-plane polling.
 
 /** Budget state for the active profiler run. */
-export interface ProfilerBudgetStatus {
+interface ProfilerBudgetStatus {
   /** Configured maximum bytes across all runs. */
   maxBytes: number;
   /** Bytes remaining before the byte-count budget is exceeded. */
@@ -398,7 +398,7 @@ export interface ProfilerBudgetStatus {
 }
 
 /** Summary of the most recently completed profiler run. */
-export interface ProfilerLastCompletedRun {
+interface ProfilerLastCompletedRun {
   runId: string;
   totalBytes: number;
   artifactCount: number;
@@ -407,7 +407,7 @@ export interface ProfilerLastCompletedRun {
 }
 
 /** Full runtime status snapshot for health-endpoint embedding. */
-export interface ProfilerRuntimeStatus {
+interface ProfilerRuntimeStatus {
   /** Whether profiling is enabled (env vars present). */
   enabled: boolean;
   /** The profiling mode ("cpu", "heap", "cpu+heap"), or null when disabled. */

package/src/daemon/shutdown-handlers.ts

@@ -1,6 +1,5 @@
 import * as Sentry from "@sentry/node";
 
-import type { BackupWorkerHandle } from "../backup/backup-worker.js";
 import type { FilingService } from "../filing/filing-service.js";
 import type { HeartbeatService } from "../heartbeat/heartbeat-service.js";
 import type { McpServerManager } from "../mcp/manager.js";
@@ -26,7 +25,6 @@ export interface ShutdownDeps {
   scheduler: { stop(): void };
   feedScheduler: { stop(): void } | null;
   getMemoryWorker: () => { stop(): void } | null;
-  getBackupWorker: () => BackupWorkerHandle | null;
   getQdrantManager: () => QdrantManager | null;
   mcpManager: McpServerManager | null;
   telemetryReporter: { stop(): Promise<void> } | null;
@@ -123,7 +121,6 @@ export function installShutdownHandlers(deps: ShutdownDeps): void {
     deps.scheduler.stop();
     deps.feedScheduler?.stop();
     deps.getMemoryWorker()?.stop();
-    deps.getBackupWorker()?.stop();
 
     if (deps.mcpManager) {
       try {

package/src/daemon/tool-setup-types.ts

@@ -0,0 +1,51 @@
+/**
+ * Types extracted from conversation-tool-setup.ts to break the
+ * tool-setup ↔ doordash-steps and tool-setup ↔ tool-side-effects cycles.
+ */
+
+import type { InterfaceId } from "../channels/types.js";
+import type { CesClient } from "../credential-execution/client.js";
+import type { SurfaceConversationContext } from "./conversation-surfaces.js";
+import type { TrustContext } from "./trust-context.js";
+
+/**
+ * Subset of Conversation state that the tool executor callback reads at
+ * call time (not construction time). These are captured by the
+ * returned closure, so they must be live references.
+ */
+export interface ToolSetupContext extends SurfaceConversationContext {
+  readonly conversationId: string;
+  assistantId?: string;
+  currentRequestId?: string;
+  workingDir: string;
+  abortController: AbortController | null;
+  /** When set, only tools in this set may execute during the current turn. */
+  allowedToolNames?: Set<string>;
+  /** Turn-scoped disk-pressure cleanup mode flag. */
+  diskPressureCleanupModeActive?: boolean;
+  /** True when the conversation has no connected client (HTTP-only path). */
+  hasNoClient?: boolean;
+  /** When true, the conversation is executing a task run and must not become interactive. */
+  headlessLock?: boolean;
+  /** When set, this conversation is executing a task run. Used to retrieve ephemeral permission rules. */
+  taskRunId?: string;
+  /** Guardian runtime context for the conversation — trustClass is propagated into ToolContext for control-plane policy enforcement. */
+  trustContext?: TrustContext;
+  /** Voice/call session ID, if the conversation originates from a call. Propagated into ToolContext for scoped grant consumption. */
+  callSessionId?: string;
+  /** CES RPC client for credential execution operations. Injected when CES tools are enabled and the CES process is available. */
+  cesClient?: CesClient;
+  /** The interface ID of the connected client driving the current turn (e.g. "macos", "chrome-extension"). Propagated into ToolContext for browser backend selection. */
+  readonly transportInterface?: InterfaceId;
+
+  /** Turn-scoped flag: true when any tool call in the current turn received explicit user approval via interactive prompt. Cleared at turn end. */
+  approvedViaPromptThisTurn?: boolean;
+  /**
+   * Per-turn snapshot of the resolved inference-profile override, set by
+   * `runAgentLoopImpl`. Propagated into `ToolContext.overrideProfile` so
+   * tools that spawn nested invocations (e.g. `subagent_spawn`) can forward
+   * the override without round-tripping through a row read that would
+   * return `undefined` for the in-flight (background) subagent.
+   */
+  currentTurnOverrideProfile?: string;
+}

package/src/daemon/tool-side-effects.ts

@@ -22,9 +22,9 @@ import { getLogger } from "../util/logger.js";
 import { getWorkspaceDir } from "../util/platform.js";
 import { ensureAppSourceWatcher } from "./app-source-watcher.js";
 import { refreshSurfacesForApp } from "./conversation-surfaces.js";
-import type { ToolSetupContext } from "./conversation-tool-setup.js";
 import { isDoordashCommand, updateDoordashProgress } from "./doordash-steps.js";
 import type { ServerMessage } from "./message-protocol.js";
+import type { ToolSetupContext } from "./tool-setup-types.js";
 
 const log = getLogger("tool-side-effects");