@vellumai/assistant 0.7.2 → 0.7.3

package/openapi.yaml

@@ -3,7 +3,7 @@
 openapi: 3.0.0
 info:
   title: Vellum Assistant API
-  version: 0.7.2
+  version: 0.7.3
   description: Auto-generated OpenAPI specification for the Vellum Assistant runtime HTTP server.
 servers:
   - url: http://127.0.0.1:7821
@@ -2886,21 +2886,6 @@ paths:
                 - assistantMetadata
               additionalProperties: false
   /v1/contacts/{id}:
-    delete:
-      operationId: contacts_by_id_delete
-      summary: Delete a contact
-      description: Delete a contact by ID.
-      tags:
-        - contacts
-      responses:
-        "204":
-          description: Successful response
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
     get:
       operationId: contacts_by_id_get
       summary: Get a contact
@@ -4244,6 +4229,55 @@ paths:
                   - schedules
                   - timestamp
                 additionalProperties: false
+  /v1/debug/bash:
+    post:
+      operationId: debug_bash_post
+      summary: Execute a shell command in the assistant process
+      description: Developer debugging tool. Requires the assistant to be running with VELLUM_DEBUG=1.
+      tags:
+        - debug
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  stdout:
+                    type: string
+                  stderr:
+                    type: string
+                  exitCode:
+                    anyOf:
+                      - type: number
+                      - type: "null"
+                  timedOut:
+                    type: boolean
+                  error:
+                    type: string
+                required:
+                  - stdout
+                  - stderr
+                  - exitCode
+                  - timedOut
+                additionalProperties: false
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                command:
+                  type: string
+                  description: Shell command to execute via bash -c
+                timeoutMs:
+                  description: "Execution timeout in milliseconds (default: 30000)"
+                  type: number
+              required:
+                - command
+              additionalProperties: false
   /v1/defer/cancel:
     post:
       operationId: defer_cancel_post
@@ -4454,6 +4488,275 @@ paths:
                 - transcription
                 - context
               additionalProperties: false
+  /v1/disk-pressure/acknowledge:
+    post:
+      operationId: diskpressure_acknowledge_post
+      summary: Acknowledge disk pressure
+      description: Acknowledge the current disk pressure lock and enter cleanup mode without overriding assistant protections.
+      tags:
+        - disk-pressure
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  status:
+                    type: object
+                    properties:
+                      enabled:
+                        type: boolean
+                      state:
+                        type: string
+                        enum:
+                          - disabled
+                          - ok
+                          - critical
+                          - unknown
+                      locked:
+                        type: boolean
+                      acknowledged:
+                        type: boolean
+                      overrideActive:
+                        type: boolean
+                      effectivelyLocked:
+                        type: boolean
+                      lockId:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      usagePercent:
+                        anyOf:
+                          - type: number
+                          - type: "null"
+                      thresholdPercent:
+                        type: number
+                      path:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      lastCheckedAt:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      blockedCapabilities:
+                        type: array
+                        items:
+                          type: string
+                          enum:
+                            - agent-turns
+                            - background-work
+                            - remote-ingress
+                      error:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                    required:
+                      - enabled
+                      - state
+                      - locked
+                      - acknowledged
+                      - overrideActive
+                      - effectivelyLocked
+                      - lockId
+                      - usagePercent
+                      - thresholdPercent
+                      - path
+                      - lastCheckedAt
+                      - blockedCapabilities
+                      - error
+                    additionalProperties: false
+                required:
+                  - status
+                additionalProperties: false
+        "409":
+          description: No active lock or lock already acknowledged.
+  /v1/disk-pressure/override:
+    post:
+      operationId: diskpressure_override_post
+      summary: Override disk pressure
+      description: Override the current disk pressure lock only after confirming "I understand the risks".
+      tags:
+        - disk-pressure
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  status:
+                    type: object
+                    properties:
+                      enabled:
+                        type: boolean
+                      state:
+                        type: string
+                        enum:
+                          - disabled
+                          - ok
+                          - critical
+                          - unknown
+                      locked:
+                        type: boolean
+                      acknowledged:
+                        type: boolean
+                      overrideActive:
+                        type: boolean
+                      effectivelyLocked:
+                        type: boolean
+                      lockId:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      usagePercent:
+                        anyOf:
+                          - type: number
+                          - type: "null"
+                      thresholdPercent:
+                        type: number
+                      path:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      lastCheckedAt:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      blockedCapabilities:
+                        type: array
+                        items:
+                          type: string
+                          enum:
+                            - agent-turns
+                            - background-work
+                            - remote-ingress
+                      error:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                    required:
+                      - enabled
+                      - state
+                      - locked
+                      - acknowledged
+                      - overrideActive
+                      - effectivelyLocked
+                      - lockId
+                      - usagePercent
+                      - thresholdPercent
+                      - path
+                      - lastCheckedAt
+                      - blockedCapabilities
+                      - error
+                    additionalProperties: false
+                required:
+                  - status
+                additionalProperties: false
+        "400":
+          description: Confirmation phrase is invalid.
+        "409":
+          description: No active lock or lock already overridden.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                confirmation:
+                  type: string
+              required:
+                - confirmation
+              additionalProperties: false
+  /v1/disk-pressure/status:
+    get:
+      operationId: diskpressure_status_get
+      summary: Get disk pressure status
+      description:
+        Return the current disk pressure status snapshot. When safe storage limits are disabled, returns a disabled
+        status.
+      tags:
+        - disk-pressure
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  status:
+                    type: object
+                    properties:
+                      enabled:
+                        type: boolean
+                      state:
+                        type: string
+                        enum:
+                          - disabled
+                          - ok
+                          - critical
+                          - unknown
+                      locked:
+                        type: boolean
+                      acknowledged:
+                        type: boolean
+                      overrideActive:
+                        type: boolean
+                      effectivelyLocked:
+                        type: boolean
+                      lockId:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      usagePercent:
+                        anyOf:
+                          - type: number
+                          - type: "null"
+                      thresholdPercent:
+                        type: number
+                      path:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      lastCheckedAt:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                      blockedCapabilities:
+                        type: array
+                        items:
+                          type: string
+                          enum:
+                            - agent-turns
+                            - background-work
+                            - remote-ingress
+                      error:
+                        anyOf:
+                          - type: string
+                          - type: "null"
+                    required:
+                      - enabled
+                      - state
+                      - locked
+                      - acknowledged
+                      - overrideActive
+                      - effectivelyLocked
+                      - lockId
+                      - usagePercent
+                      - thresholdPercent
+                      - path
+                      - lastCheckedAt
+                      - blockedCapabilities
+                      - error
+                    additionalProperties: false
+                required:
+                  - status
+                additionalProperties: false
   /v1/documents:
     get:
       operationId: documents_get
@@ -4615,6 +4918,32 @@ paths:
           schema:
             type: string
           description: Scope to a single conversation
+  /v1/events/emit:
+    post:
+      operationId: events_emit_post
+      summary: Emit an assistant event
+      description:
+        Trigger an in-process assistant event by kind. Used by the gateway after owning a write that the assistant
+        runtime would normally emit.
+      tags:
+        - events
+      responses:
+        "204":
+          description: Successful response
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                kind:
+                  type: string
+                  enum:
+                    - contacts_changed
+              required:
+                - kind
+              additionalProperties: false
   /v1/export:
     post:
       operationId: export_post
@@ -6083,7 +6412,9 @@ paths:
         "400":
           description: x-vellum-client-id header is missing for a targeted host bash request.
         "403":
-          description: Submitting client does not match the targeted client for this request.
+          description:
+            Submitting client does not match the targeted client, or the submitting actor's principal does not match
+            the target client's actor.
         "404":
           description: No pending interaction found for the given requestId.
         "409":
@@ -6241,7 +6572,9 @@ paths:
         "400":
           description: x-vellum-client-id header is missing for a targeted host CU request.
         "403":
-          description: Submitting client does not match the targeted client for this request.
+          description:
+            Submitting client does not match the targeted client, or the submitting actor's principal does not match
+            the target client's actor.
         "404":
           description: No pending interaction found for the given requestId, or the conversation/proxy no longer exists.
         "409":
@@ -6307,7 +6640,9 @@ paths:
         "400":
           description: x-vellum-client-id header is missing for a targeted host file request.
         "403":
-          description: Submitting client does not match the targeted client for this request.
+          description:
+            Submitting client does not match the targeted client, or the submitting actor's principal does not match
+            the target client's actor.
         "404":
           description: No pending interaction found for the given requestId.
         "409":
@@ -6357,7 +6692,9 @@ paths:
         "400":
           description: x-vellum-client-id header is missing for a targeted host transfer request.
         "403":
-          description: Submitting client does not match the targeted client for this transfer.
+          description:
+            Submitting client does not match the targeted client, or the submitting actor's principal does not match
+            the target client's actor.
       requestBody:
         required: true
         content:
@@ -6784,6 +7121,61 @@ paths:
               required:
                 - state
               additionalProperties: false
+  /v1/internal/oauth/connect/start:
+    post:
+      operationId: internal_oauth_connect_start_post
+      summary: Start daemon-owned OAuth connect flow
+      description: Starts an OAuth connect flow in the daemon and returns the authorization URL for the CLI to open in the browser.
+      tags:
+        - internal
+      responses:
+        "200":
+          description: Successful response
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                service:
+                  type: string
+                clientId:
+                  type: string
+                clientSecret:
+                  type: string
+                callbackTransport:
+                  type: string
+                  enum:
+                    - loopback
+                    - gateway
+                requestedScopes:
+                  type: array
+                  items:
+                    type: string
+              required:
+                - service
+                - clientId
+                - callbackTransport
+              additionalProperties: false
+  /v1/internal/oauth/connect/status/{state}:
+    get:
+      operationId: internal_oauth_connect_status_by_state_get
+      summary: Poll daemon OAuth connect flow status
+      description: Returns the current status of an in-flight daemon-owned OAuth connect flow (pending/complete/error).
+      tags:
+        - internal
+      responses:
+        "200":
+          description: Successful response
+        "404":
+          description: No active OAuth connect flow for the given state token
+      parameters:
+        - name: state
+          in: path
+          required: true
+          schema:
+            type: string
   /v1/internal/twilio/connect-action:
     post:
       operationId: internal_twilio_connectaction_post
@@ -7118,6 +7510,35 @@ paths:
               required:
                 - op
               additionalProperties: false
+  /v1/memory/v2/concept-frequency:
+    post:
+      operationId: memory_v2_conceptfrequency_post
+      summary: Aggregate per-concept injection frequency from activation logs
+      description:
+        "Debug-only. Aggregates the existing memory_v2_activation_logs table by (slug, status) and cross-references
+        on-disk concept pages so an operator can see which concepts get injected often, which get scored but rejected,
+        and which on-disk pages never even surface as candidates. Optional filters: conversationId narrows to a single
+        conversation; sinceMs restricts to logs created at-or-after the given epoch ms timestamp."
+      tags:
+        - memory
+      responses:
+        "200":
+          description: Successful response
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                conversationId:
+                  type: string
+                  minLength: 1
+                sinceMs:
+                  type: integer
+                  minimum: 0
+                  maximum: 9007199254740991
+              additionalProperties: false
   /v1/memory/v2/concept-page:
     post:
       operationId: memory_v2_conceptpage_post
@@ -7340,6 +7761,8 @@ paths:
                   type: string
                 slashCommand:
                   type: string
+                clientTimezone:
+                  type: string
                 inferenceProfile:
                   anyOf:
                     - type: string
@@ -11403,7 +11826,9 @@ paths:
         "400":
           description: x-vellum-client-id header is missing for a targeted transfer.
         "403":
-          description: Submitting client does not match the targeted client for this transfer.
+          description:
+            Submitting client does not match the targeted client, or the submitting actor's principal does not match
+            the target client's actor.
       parameters:
         - name: transferId
           in: path
@@ -11422,7 +11847,9 @@ paths:
         "400":
           description: x-vellum-client-id header is missing for a targeted transfer.
         "403":
-          description: Submitting client does not match the targeted client for this transfer.
+          description:
+            Submitting client does not match the targeted client, or the submitting actor's principal does not match
+            the target client's actor.
       parameters:
         - name: transferId
           in: path

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "license": "MIT",
   "type": "module",
   "exports": {

package/src/__tests__/app-control-flow.test.ts

@@ -13,8 +13,9 @@
  * differs in two notable ways:
  *  1. Result payloads carry `pngBase64` (not screenshots-as-strings) and
  *     surface as image content blocks with `media_type: "image/png"`.
- *  2. A module-level singleton lock guards `app_control_start` — only one
- *     conversation may hold an active session at a time.
+ *  2. A module-level session lock binds `(conversationId, app)` — only
+ *     one conversation may hold an active session at a time, and non-start
+ *     tools must target the same `app` the user approved at start time.
  */
 import { afterEach, beforeEach, describe, expect, mock, test } from "bun:test";
 
@@ -87,8 +88,9 @@ mock.module("../runtime/pending-interactions.js", () => ({
 
 const {
   HostAppControlProxy,
-  _getActiveAppControlConversationId,
-  _resetActiveAppControlConversationId,
+  _getActiveAppControlSession,
+  _resetActiveAppControlSession,
+  _setActiveAppControlSession,
 } = await import("../daemon/host-app-control-proxy.js");
 const { ROUTES } = await import("../runtime/routes/host-app-control-routes.js");
 const { surfaceProxyResolver } =
@@ -176,11 +178,11 @@ describe("app-control end-to-end flow", () => {
     pending.clear();
     clearConversations();
     mockHasClient = true;
-    _resetActiveAppControlConversationId();
+    _resetActiveAppControlSession();
   });
 
   afterEach(() => {
-    _resetActiveAppControlConversationId();
+    _resetActiveAppControlSession();
     clearConversations();
   });
 
@@ -238,8 +240,10 @@ describe("app-control end-to-end flow", () => {
       },
     });
 
-    // Singleton lock is held by this conversation now.
-    expect(_getActiveAppControlConversationId()).toBe(conversationId);
+    // Session lock is held by this conversation now, bound to the started app.
+    const session = _getActiveAppControlSession();
+    expect(session?.conversationId).toBe(conversationId);
+    expect(session?.app).toBe("com.example.app");
 
     proxy.dispose();
   });
@@ -253,6 +257,12 @@ describe("app-control end-to-end flow", () => {
     const proxy = new HostAppControlProxy(conversationId);
     const ctx = buildContext(proxy, conversationId);
     registerConversation(conversationId, proxy);
+    // Prime a session so observe passes the auth gate. This test exercises
+    // the result-formatting path, not the start flow.
+    _setActiveAppControlSession({
+      conversationId,
+      app: "com.example.app",
+    });
 
     const resultPromise = surfaceProxyResolver(ctx, "app_control_observe", {
       tool: "observe",
@@ -306,7 +316,7 @@ describe("app-control end-to-end flow", () => {
     });
     await postResult({ state: "running", pngBase64: TINY_PNG_B64 });
     await startPromise;
-    expect(_getActiveAppControlConversationId()).toBe(conversationId);
+    expect(_getActiveAppControlSession()?.conversationId).toBe(conversationId);
 
     // Wrap dispose to verify it was called by the resolver.
     let disposeCalls = 0;
@@ -328,7 +338,7 @@ describe("app-control end-to-end flow", () => {
     expect(sentMessages).toHaveLength(0);
     expect(disposeCalls).toBe(1);
     // Lock released.
-    expect(_getActiveAppControlConversationId()).toBeUndefined();
+    expect(_getActiveAppControlSession()).toBeUndefined();
   });
 
   // -------------------------------------------------------------------------
@@ -347,7 +357,7 @@ describe("app-control end-to-end flow", () => {
     await postResult({ state: "running", pngBase64: TINY_PNG_B64 });
     const resultA = await startA;
     expect(resultA.isError).toBe(false);
-    expect(_getActiveAppControlConversationId()).toBe("conv-a");
+    expect(_getActiveAppControlSession()?.conversationId).toBe("conv-a");
 
     // Second conversation tries to start while conv-a holds the lock.
     sentMessages.length = 0;