@vellumai/assistant 0.7.2 → 0.7.3

package/src/cli/commands/platform/__tests__/status.test.ts

@@ -14,12 +14,16 @@ let mockResolvePlatformCallbackRegistrationContext: () => Promise<
   isPlatform: false,
   platformBaseUrl: "",
   assistantId: "",
-  hasInternalApiKey: false,
   hasAssistantApiKey: false,
   authHeader: null,
   enabled: false,
 });
 
+let mockIpcGetVelayStatus: () => Promise<{
+  connected: boolean;
+  publicUrl: string | null;
+} | null> = async () => null;
+
 // ---------------------------------------------------------------------------
 // Mocks
 // ---------------------------------------------------------------------------
@@ -47,6 +51,13 @@ mock.module("../../../../security/secure-keys.js", () => ({
   onCesClientChanged: () => ({ unsubscribe: () => {} }),
   setCesReconnect: () => {},
   getActiveBackendName: () => "file",
+  getActiveBackendInfoAsync: async () => ({
+    backend: "encrypted-store",
+    storePath: "/tmp/keys.enc",
+    storeKeyPath: "/tmp/store.key",
+    storeExists: false,
+    storeKeyExists: false,
+  }),
   _resetBackend: () => {},
 }));
 
@@ -100,6 +111,15 @@ mock.module("../../../../config/loader.js", () => ({
   mergeDefaultWorkspaceConfig: () => {},
 }));
 
+mock.module("../../../../ipc/gateway-client.js", () => ({
+  ipcGetVelayStatus: () => mockIpcGetVelayStatus(),
+  ipcCall: async () => undefined,
+  ipcCallPersistent: async () => undefined,
+  resetPersistentClient: () => {},
+  ipcGetFeatureFlags: async () => ({}),
+  ipcClassifyRisk: async () => undefined,
+}));
+
 // ---------------------------------------------------------------------------
 // Import module under test (after mocks are registered)
 // ---------------------------------------------------------------------------
@@ -158,11 +178,11 @@ describe("assistant platform status", () => {
       isPlatform: false,
       platformBaseUrl: "",
       assistantId: "",
-      hasInternalApiKey: false,
       hasAssistantApiKey: false,
       authHeader: null,
       enabled: false,
     });
+    mockIpcGetVelayStatus = async () => null;
     process.exitCode = 0;
   });
 
@@ -179,9 +199,8 @@ describe("assistant platform status", () => {
       isPlatform: true,
       platformBaseUrl: "https://platform.vellum.ai",
       assistantId: "asst-abc-123",
-      hasInternalApiKey: true,
       hasAssistantApiKey: true,
-      authHeader: "Bearer internal-key",
+      authHeader: "Api-Key assistant-key",
       enabled: true,
     });
 
@@ -209,12 +228,91 @@ describe("assistant platform status", () => {
     expect(parsed.isPlatform).toBe(true);
     expect(parsed.baseUrl).toBe("https://platform.vellum.ai");
     expect(parsed.assistantId).toBe("asst-abc-123");
-    expect(parsed.hasInternalApiKey).toBe(true);
     expect(parsed.hasAssistantApiKey).toBe(true);
     expect(parsed.hasWebhookSecret).toBe(true);
     expect(parsed.available).toBe(true);
     expect(parsed.organizationId).toBe("org-456");
     expect(parsed.userId).toBe("user-789");
+    // velayTunnel is null when gateway is unreachable
+    expect(parsed.velayTunnel).toBeNull();
+  });
+
+  test("velayTunnel connected with publicUrl is returned when gateway is live", async () => {
+    /**
+     * When the gateway is running and the Velay tunnel is connected, the
+     * status command includes velayTunnel.connected=true and the public URL.
+     */
+
+    // GIVEN a connected Velay tunnel reported by the gateway IPC
+    mockIpcGetVelayStatus = async () => ({
+      connected: true,
+      publicUrl: "https://abc123.vellum.ai",
+    });
+
+    // WHEN the status command is run with --json
+    const { exitCode, stdout } = await runCommand([
+      "platform",
+      "status",
+      "--json",
+    ]);
+
+    // THEN the command succeeds
+    expect(exitCode).toBe(0);
+
+    // AND velayTunnel reflects the live connection
+    const parsed = JSON.parse(stdout);
+    expect(parsed.velayTunnel).toEqual({
+      connected: true,
+      publicUrl: "https://abc123.vellum.ai",
+    });
+  });
+
+  test("velayTunnel disconnected when gateway reports no active connection", async () => {
+    /**
+     * When the gateway is running but Velay is not connected (e.g.
+     * reconnecting after disconnect), velayTunnel.connected is false.
+     */
+
+    // GIVEN a disconnected Velay tunnel
+    mockIpcGetVelayStatus = async () => ({
+      connected: false,
+      publicUrl: null,
+    });
+
+    // WHEN the status command is run with --json
+    const { exitCode, stdout } = await runCommand([
+      "platform",
+      "status",
+      "--json",
+    ]);
+
+    expect(exitCode).toBe(0);
+    const parsed = JSON.parse(stdout);
+    expect(parsed.velayTunnel).toEqual({ connected: false, publicUrl: null });
+  });
+
+  test("velayTunnel is null when gateway IPC is unreachable", async () => {
+    /**
+     * When the gateway IPC socket is not available (assistant not running),
+     * velayTunnel is null rather than causing the status command to fail.
+     */
+
+    // GIVEN the gateway IPC throws
+    mockIpcGetVelayStatus = async () => {
+      throw new Error("ENOENT");
+    };
+
+    // WHEN the status command is run with --json
+    const { exitCode, stdout } = await runCommand([
+      "platform",
+      "status",
+      "--json",
+    ]);
+
+    // THEN the command still succeeds (graceful fallback)
+    expect(exitCode).toBe(0);
+    const parsed = JSON.parse(stdout);
+    expect(parsed.velayTunnel).toBeNull();
   });
 
   test("plain text mode does not emit JSON to stdout", async () => {
@@ -229,7 +327,6 @@ describe("assistant platform status", () => {
       isPlatform: false,
       platformBaseUrl: "",
       assistantId: "",
-      hasInternalApiKey: false,
       hasAssistantApiKey: false,
       authHeader: null,
       enabled: false,

package/src/cli/commands/platform/index.ts

@@ -4,6 +4,7 @@ import {
   registerCallbackRoute,
   resolvePlatformCallbackRegistrationContext,
 } from "../../../inbound/platform-callback-registration.js";
+import { ipcGetVelayStatus } from "../../../ipc/gateway-client.js";
 import { credentialKey } from "../../../security/credential-key.js";
 import { getSecureKeyAsync } from "../../../security/secure-keys.js";
 import { log } from "../../logger.js";
@@ -62,14 +63,14 @@ Fields:
   isPlatform          Whether IS_PLATFORM is set (boolean)
   baseUrl             VELLUM_PLATFORM_URL — the platform gateway base URL
   assistantId         This assistant's platform UUID
-  hasInternalApiKey   Whether PLATFORM_INTERNAL_API_KEY is set (boolean,
-                      value not disclosed)
   hasAssistantApiKey  Whether a stored assistant API key is available
   hasWebhookSecret    Whether a stored webhook secret is available (needed
                       for email and other inbound webhook channels)
   available           Whether callback registration prerequisites are satisfied
   organizationId      The platform organization ID (from stored credentials)
   userId              The platform user ID (from stored credentials)
+  velayTunnel         Live Velay tunnel status from the gateway IPC socket
+                      (null when the gateway is not running)
 
 Examples:
   $ assistant platform status
@@ -77,7 +78,10 @@ Examples:
     )
     .action(async (_opts: Record<string, unknown>, cmd: Command) => {
       try {
-        const context = await resolvePlatformCallbackRegistrationContext();
+        const [context, velayTunnel] = await Promise.all([
+          resolvePlatformCallbackRegistrationContext(),
+          ipcGetVelayStatus().catch(() => null),
+        ]);
 
         const organizationId =
           (
@@ -106,12 +110,12 @@ Examples:
           isPlatform: context.isPlatform,
           baseUrl: context.platformBaseUrl,
           assistantId: context.assistantId,
-          hasInternalApiKey: context.hasInternalApiKey,
           hasAssistantApiKey: context.hasAssistantApiKey,
           hasWebhookSecret,
           available: context.enabled,
           organizationId: organizationId || null,
           userId: userId || null,
+          velayTunnel,
         };
 
         if (shouldOutputJson(cmd)) {
@@ -120,9 +124,6 @@ Examples:
           log.info(`Platform: ${result.isPlatform}`);
           log.info(`Base URL: ${result.baseUrl || "(not set)"}`);
           log.info(`Assistant ID: ${result.assistantId || "(not set)"}`);
-          log.info(
-            `Internal API key: ${result.hasInternalApiKey ? "set" : "not set"}`,
-          );
           log.info(
             `Assistant API key: ${result.hasAssistantApiKey ? "set" : "not set"}`,
           );
@@ -134,6 +135,14 @@ Examples:
           );
           log.info(`Organization ID: ${organizationId || "(not set)"}`);
           log.info(`User ID: ${userId || "(not set)"}`);
+          if (result.velayTunnel !== null) {
+            const tunnelState = result.velayTunnel.connected
+              ? `connected${result.velayTunnel.publicUrl ? ` (${result.velayTunnel.publicUrl})` : ""}`
+              : "disconnected";
+            log.info(`Velay tunnel: ${tunnelState}`);
+          } else {
+            log.info(`Velay tunnel: (gateway not running)`);
+          }
         }
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);

package/src/cli/commands/status.ts

@@ -0,0 +1,57 @@
+import type { Command } from "commander";
+
+import { cliIpcCall } from "../../ipc/cli-client.js";
+import { getWorkspaceDirDisplay } from "../../util/platform.js";
+import { log } from "../logger.js";
+
+interface HealthResponse {
+  version: string;
+  memory: { currentMb: number; maxMb: number };
+  disk: { freeMb: number; totalMb: number } | null;
+}
+
+function fmtMb(mb: number): string {
+  if (mb >= 1024) return `${(mb / 1024).toFixed(1)} GB`;
+  return `${Math.round(mb)} MB`;
+}
+
+export function registerStatusCommand(program: Command): void {
+  program
+    .command("status")
+    .description("Show assistant version, workspace, and runtime health")
+    .action(async () => {
+      const result = await cliIpcCall<HealthResponse>("health");
+
+      if (!result.ok || !result.result) {
+        log.error(
+          result.error ??
+            "Assistant not running — could not connect to IPC socket.",
+        );
+        process.exit(1);
+      }
+
+      const h = result.result;
+      const workspace = getWorkspaceDirDisplay();
+
+      const rows: [string, string][] = [
+        ["Version", h.version],
+        ["Workspace", workspace],
+        ["", ""],
+        ["Memory", `${fmtMb(h.memory.currentMb)} / ${fmtMb(h.memory.maxMb)}`],
+        ...(h.disk
+          ? ([["Disk", `${fmtMb(h.disk.freeMb)} free`]] as [string, string][])
+          : []),
+      ];
+
+      const labelWidth = Math.max(
+        ...rows.filter(([l]) => l).map(([l]) => l.length),
+      );
+      for (const [label, value] of rows) {
+        if (!label) {
+          log.info("");
+          continue;
+        }
+        log.info(`${label.padEnd(labelWidth)}  ${value}`);
+      }
+    });
+}

package/src/cli/program.ts

@@ -41,6 +41,7 @@ import { registerPlatformCommand } from "./commands/platform/index.js";
 import { registerRoutesCommand } from "./commands/routes.js";
 import { registerSequenceCommand } from "./commands/sequence.js";
 import { registerSkillsCommand } from "./commands/skills.js";
+import { registerStatusCommand } from "./commands/status.js";
 import { registerSttCommand } from "./commands/stt.js";
 import { registerTaskCommand } from "./commands/task.js";
 import { registerTrustCommand } from "./commands/trust.js";
@@ -56,7 +57,7 @@ import { log } from "./logger.js";
  * the gateway so flag-gated commands are registered correctly.
  */
 export async function buildCliProgram(): Promise<Command> {
-  await initFeatureFlagOverrides();
+  await initFeatureFlagOverrides({ retryBackoffsMs: [], callTimeoutMs: 200 });
   const program = new Command();
 
   program
@@ -110,6 +111,7 @@ Examples:
   registerPlatformCommand(program);
   registerRoutesCommand(program);
   registerSequenceCommand(program);
+  registerStatusCommand(program);
   registerSkillsCommand(program);
   registerSttCommand(program);
   registerTaskCommand(program);
@@ -126,7 +128,7 @@ Examples:
   // remain available even without a workspace.
   // Workspace-independent commands are exempt:
   //   completions — pure shell-script generation, no workspace files needed
-  const workspaceExemptCommands = new Set(["completions"]);
+  const workspaceExemptCommands = new Set(["completions", "status"]);
   program.hook("preAction", (_thisCommand, actionCommand) => {
     if (workspaceExemptCommands.has(actionCommand.name())) {
       return;

package/src/config/assistant-feature-flags.ts

@@ -135,9 +135,11 @@ let cachedOverridesFromGateway = false;
  * timeout, parse error). No auth needed — the IPC socket is
  * access-controlled by file-system permissions on the shared volume.
  */
-async function fetchOverridesFromGateway(): Promise<Record<string, boolean>> {
+async function fetchOverridesFromGateway(
+  timeoutMs?: number,
+): Promise<Record<string, boolean>> {
   try {
-    return await ipcGetFeatureFlags();
+    return await ipcGetFeatureFlags(timeoutMs);
   } catch {
     return {};
   }
@@ -182,10 +184,18 @@ const DEFAULT_INIT_RETRY_BACKOFFS_MS: readonly number[] = [
  */
 export async function initFeatureFlagOverrides(options?: {
   retryBackoffsMs?: readonly number[];
+  /**
+   * Timeout (ms) for each IPC call to the gateway. When omitted the
+   * transport defaults apply (3 s connect + 5 s call). CLI callers should
+   * pass a small value (e.g. 200) so a slow/absent gateway fails fast
+   * instead of blocking startup.
+   */
+  callTimeoutMs?: number;
 }): Promise<void> {
   if (cachedOverridesFromGateway) return;
 
   const backoffs = options?.retryBackoffsMs ?? DEFAULT_INIT_RETRY_BACKOFFS_MS;
+  const callTimeoutMs = options?.callTimeoutMs;
 
   // First attempt has no preceding delay; subsequent attempts wait per the
   // backoff schedule. An empty result is treated as a transient miss
@@ -201,7 +211,7 @@ export async function initFeatureFlagOverrides(options?: {
       if (cachedOverridesFromGateway) return;
     }
 
-    const gatewayOverrides = await fetchOverridesFromGateway();
+    const gatewayOverrides = await fetchOverridesFromGateway(callTimeoutMs);
     if (Object.keys(gatewayOverrides).length > 0) {
       cachedOverrides = gatewayOverrides;
       cachedOverridesFromGateway = true;

package/src/config/bundled-skills/messaging/tools/messaging-analyze-style.ts

@@ -67,7 +67,8 @@ function upsertMemoryItem(opts: {
         created: now,
         lastAccessed: now,
         lastConsolidated: now,
-        emotionalCharge: '{"valence":0,"intensity":0.1,"decayCurve":"linear","decayRate":0.05,"originalIntensity":0.1}',
+        emotionalCharge:
+          '{"valence":0,"intensity":0.1,"decayCurve":"linear","decayRate":0.05,"originalIntensity":0.1}',
         fidelity: "vivid",
         confidence: 0.8,
         significance: clampUnitInterval(opts.importance),
@@ -87,7 +88,7 @@ function upsertMemoryItem(opts: {
 
 export async function run(
   input: Record<string, unknown>,
-  context: ToolContext,
+  _context: ToolContext,
 ): Promise<ToolExecutionResult> {
   const platform = input.platform as string | undefined;
   const maxMessages = Math.min(
@@ -119,7 +120,7 @@ export async function run(
       return err("No style patterns were extracted. Try with more messages.");
     }
 
-    const scopeId = context.memoryScopeId ?? "default";
+    const scopeId = "default";
     let savedCount = 0;
 
     for (const pattern of result.stylePatterns) {

package/src/config/bundled-skills/phone-calls/references/TROUBLESHOOTING.md

@@ -10,18 +10,24 @@ Run `assistant config set calls.enabled true`.
 
 ## "No public base URL configured"
 
-Run the **public-ingress** skill to set up ngrok or another custom tunnel and configure `ingress.publicBaseUrl`. Ngrok remains supported. Velay can also publish `ingress.twilioPublicBaseUrl` for Twilio calls when `VELAY_BASE_URL` is set on the gateway, but it does not replace `ingress.publicBaseUrl` for Telegram, OAuth, email, or other non-Twilio webhooks.
+First check whether this is a managed/platform assistant:
+
+```bash
+assistant platform status --json
+```
+
+If it reports an available platform assistant, do not install or start ngrok for Twilio. The gateway should use Velay, and `velayTunnel.connected` should become `true` after registration. If this is a local/self-hosted assistant without Velay, run the **public-ingress** skill to set up ngrok or another custom tunnel and configure `ingress.publicBaseUrl`.
 
 ## Call fails immediately after initiating
 
 - Check that the phone number is in E.164 format
 - Verify Twilio credentials are correct (wrong auth token causes API errors)
 - On trial accounts, ensure the destination number is verified
-- Check that the configured tunnel is still running. For ngrok, use `curl -s http://127.0.0.1:4040/api/tunnels`. For Velay, confirm the gateway logs show `Velay tunnel registered` and `ingress.twilioPublicBaseUrl` is populated.
+- Check that the configured tunnel is still running. For ngrok, use `curl -s http://127.0.0.1:4040/api/tunnels`. For Velay, run `assistant platform status --json` and confirm `velayTunnel.connected` is `true`, or check gateway logs for `Velay tunnel registered`.
 
 ## Call connects but no audio / one-way audio
 
-- The ConversationRelay WebSocket may not be connecting. If you are using ngrok or a custom tunnel, check that `ingress.publicBaseUrl` is correct and the tunnel is active. If you are using Velay, check that `ingress.twilioPublicBaseUrl` is present and points to the registered Velay URL.
+- The ConversationRelay WebSocket may not be connecting. If you are using ngrok or a custom tunnel, check that `ingress.publicBaseUrl` is correct and the tunnel is active. If you are using Velay, check `assistant platform status --json`; a 503 from `https://velay.../<assistant-id>/...` usually means the assistant tunnel is not connected or the gateway did not complete the WebSocket open, not that ngrok is required.
 - Verify the assistant is running
 
 ## "Number not eligible for caller identity"
@@ -50,20 +56,20 @@ assistant config set ingress.publicBaseUrl "<new-url>"
 
 Or re-run the public-ingress skill to auto-detect and save the new URL.
 
-Velay does not change this setting. When `VELAY_BASE_URL` is set on the gateway, Velay registration writes only `ingress.twilioPublicBaseUrl`; Twilio uses that URL first, and non-Twilio webhook ingress keeps using `ingress.publicBaseUrl`.
+Do not rotate ngrok to work around a managed Velay WebSocket failure. Fix the Velay tunnel state instead, or restart the assistant/gateway so it re-registers.
 
 ## Velay tunnel is not registering
 
-- Confirm vembda passes `VELAY_BASE_URL=http://host.docker.internal:8501` to the gateway container.
+- Confirm vembda passes the environment-appropriate `VELAY_BASE_URL` to the gateway container.
 - Re-hatch or restart the assistant after changing the environment.
 - Check gateway logs for `Velay tunnel connected` followed by `Velay tunnel registered`.
-- If `VELAY_BASE_URL` is not set, the gateway does not start the Velay client. Use ngrok or another custom tunnel in `ingress.publicBaseUrl`.
+- If `VELAY_BASE_URL` is not set on a local/self-hosted assistant, the gateway does not start the Velay client. Use ngrok or another custom tunnel in `ingress.publicBaseUrl`.
 
 ## Local Twilio Velay smoke tests
 
 - HTTP bridge: request `${VELAY_PUBLIC_BASE_URL}/<assistant-id>/healthz` and `${VELAY_PUBLIC_BASE_URL}/<assistant-id>/schema`. When testing a JSON webhook route under active development, POST a small JSON body through the same Velay public URL and confirm the gateway receives it.
 - Synthetic WebSocket: connect a local WebSocket client to `${VELAY_PUBLIC_BASE_URL}/<assistant-id>/webhooks/twilio/relay?callSessionId=session-123&token=<edge-token>` and confirm the upgrade reaches the gateway.
-- Real Twilio call: back `VELAY_PUBLIC_BASE_URL` with a public HTTPS/WSS tunnel, wait for the gateway to re-register, then place a call and confirm Twilio fetches `/webhooks/twilio/voice` and opens the relay or media-stream WebSocket through the Velay URL.
+- Real Twilio call: wait for the gateway to register with Velay, then place a call and confirm Twilio fetches `/webhooks/twilio/voice` and opens the relay or media-stream WebSocket through the Velay URL.
 
 ## Call drops after 30 seconds of silence
 

package/src/config/bundled-skills/playbooks/tools/playbook-create.ts

@@ -18,7 +18,7 @@ const VALID_AUTONOMY_LEVELS = new Set<string>(["auto", "draft", "notify"]);
 
 export async function executePlaybookCreate(
   input: Record<string, unknown>,
-  context: ToolContext,
+  _context: ToolContext,
 ): Promise<ToolExecutionResult> {
   const trigger = input.trigger as string;
   const action = input.action as string;
@@ -58,7 +58,7 @@ export async function executePlaybookCreate(
   const sanitizedTrigger = trigger.replace(/[\r\n]+/g, " ");
   const subject = `Playbook: ${sanitizedTrigger}`.slice(0, 80);
   const content = `${subject}\n${statement}`;
-  const scopeId = context.memoryScopeId ?? "default";
+  const scopeId = "default";
 
   try {
     const db = getDb();

package/src/config/bundled-skills/playbooks/tools/playbook-delete.ts

@@ -7,7 +7,7 @@ import type {
 
 export async function executePlaybookDelete(
   input: Record<string, unknown>,
-  context: ToolContext,
+  _context: ToolContext,
 ): Promise<ToolExecutionResult> {
   const playbookId = input.playbook_id as string;
   if (!playbookId || typeof playbookId !== "string") {
@@ -17,7 +17,7 @@ export async function executePlaybookDelete(
     };
   }
 
-  const scopeId = context.memoryScopeId ?? "default";
+  const scopeId = "default";
 
   try {
     const existing = getNode(playbookId);

package/src/config/bundled-skills/playbooks/tools/playbook-list.ts

@@ -10,9 +10,9 @@ import type {
 
 export async function executePlaybookList(
   input: Record<string, unknown>,
-  context: ToolContext,
+  _context: ToolContext,
 ): Promise<ToolExecutionResult> {
-  const scopeId = context.memoryScopeId ?? "default";
+  const scopeId = "default";
   const channelFilter =
     typeof input.channel === "string" ? input.channel : null;
   const categoryFilter =

package/src/config/bundled-skills/playbooks/tools/playbook-update.ts

@@ -18,7 +18,7 @@ const VALID_AUTONOMY_LEVELS = new Set<string>(["auto", "draft", "notify"]);
 
 export async function executePlaybookUpdate(
   input: Record<string, unknown>,
-  context: ToolContext,
+  _context: ToolContext,
 ): Promise<ToolExecutionResult> {
   const playbookId = input.playbook_id as string;
   if (!playbookId || typeof playbookId !== "string") {
@@ -28,7 +28,7 @@ export async function executePlaybookUpdate(
     };
   }
 
-  const scopeId = context.memoryScopeId ?? "default";
+  const scopeId = "default";
 
   try {
     const existing = getNode(playbookId);

package/src/config/env.ts

@@ -253,14 +253,6 @@ export function getPlatformUserId(): string {
   return str("PLATFORM_USER_ID") ?? _platformUserIdOverride ?? "";
 }
 
-/**
- * PLATFORM_INTERNAL_API_KEY — static internal gateway key for authenticating
- * with the platform's internal gateway callback route registration endpoint.
- */
-export function getPlatformInternalApiKey(): string {
-  return str("PLATFORM_INTERNAL_API_KEY") ?? "";
-}
-
 // ── Startup validation ──────────────────────────────────────────────────────
 
 /**

package/src/config/feature-flag-registry.json

@@ -241,13 +241,21 @@
       "description": "Expose the developer-only Compaction Playground tab in macOS Settings and enable the /playground/* HTTP endpoints for exercising compaction conditions. Dev-only; default off.",
       "defaultEnabled": false
     },
+    {
+      "id": "safe-storage-limits",
+      "scope": "assistant",
+      "key": "safe-storage-limits",
+      "label": "Safe Storage Limits",
+      "description": "Enable disk pressure protection flows that block background work and remote actors while storage is critically low.",
+      "defaultEnabled": false
+    },
     {
       "id": "memory-v2-enabled",
       "scope": "assistant",
       "key": "memory-v2-enabled",
       "label": "Memory v2 (concept-page activation model)",
-      "description": "Enables the v2 memory subsystem: prose concept pages with bidirectional edges, activation-based retrieval, and hourly LLM-driven consolidation. v1 graph + PKB stays write-active until cutover.",
-      "defaultEnabled": false
+      "description": "Enables the v2 memory subsystem: prose concept pages with bidirectional edges, activation-based retrieval, and hourly LLM-driven consolidation. When on, v1 graph extraction/maintenance and PKB filing are suppressed; flipping the flag back off re-engages the full v1 pipeline.",
+      "defaultEnabled": true
     },
     {
       "id": "account-deletion",
@@ -255,7 +263,7 @@
       "key": "account-deletion",
       "label": "Account Deletion",
       "description": "Surfaces the user-initiated account deletion flow in client settings.",
-      "defaultEnabled": false
+      "defaultEnabled": true
     },
     {
       "id": "app-control",
@@ -272,6 +280,22 @@
       "label": "Analyze Conversation",
       "description": "Show the 'Analyze' / 'Analyze conversation' option in conversation context menus and the conversation title actions dropdown.",
       "defaultEnabled": false
+    },
+    {
+      "id": "pro-plan-adjust",
+      "scope": "assistant",
+      "key": "pro-plan-adjust",
+      "label": "Pro Plan Adjust",
+      "description": "Show the rich Plan card (current plan, features, Manage/Upgrade CTA) at the top of the macOS Settings → Billing tab. The 'Configure Auto Top Ups' CTA is gated separately on `auto-credit-topup`.",
+      "defaultEnabled": false
+    },
+    {
+      "id": "auto-credit-topup",
+      "scope": "assistant",
+      "key": "auto-credit-topup",
+      "label": "Auto Credit Top-Up",
+      "description": "Show the 'Configure Auto Top Ups' CTA in the macOS Settings → Billing tab. Mirrors the platform web flag of the same name that gates the auto-reload card and /v1/organizations/billing/auto-top-up/ API.",
+      "defaultEnabled": false
     }
   ]
 }