@vellumai/assistant 0.8.1 → 0.8.2

package/openapi.yaml

@@ -3,7 +3,7 @@
 openapi: 3.0.0
 info:
   title: Vellum Assistant API
-  version: 0.8.1
+  version: 0.8.2
   description: Auto-generated OpenAPI specification for the Vellum Assistant runtime HTTP server.
 servers:
   - url: http://127.0.0.1:7821
@@ -3075,6 +3075,70 @@ paths:
           schema:
             type: string
           description: Optional channel ID filter
+  /v1/channels/available:
+    get:
+      operationId: channels_available_get
+      summary: Get available channels
+      description:
+        Return the channels this assistant can surface to clients, with display metadata (label, icon, verification
+        capability, setup copy). Today this is a fixed base list plus `email` when an inbox is registered; will become
+        plugin/skill-driven in future.
+      tags:
+        - channels
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  channels:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                          enum:
+                            - telegram
+                            - phone
+                            - vellum
+                            - whatsapp
+                            - slack
+                            - email
+                            - platform
+                        label:
+                          type: string
+                        subtitle:
+                          type: string
+                        icon:
+                          type: string
+                        supportsVerification:
+                          type: boolean
+                        setupMessages:
+                          type: object
+                          properties:
+                            guardian:
+                              type: string
+                            contact:
+                              type: string
+                          required:
+                            - guardian
+                            - contact
+                          additionalProperties: false
+                      required:
+                        - id
+                        - label
+                        - subtitle
+                        - icon
+                        - supportsVerification
+                        - setupMessages
+                      additionalProperties: false
+                    description: Available channels in display order
+                required:
+                  - channels
+                additionalProperties: false
   /v1/channels/conversation:
     delete:
       operationId: channels_conversation_delete
@@ -4696,7 +4760,7 @@ paths:
     post:
       operationId: conversations_cli_create_post
       summary: Create a conversation (CLI)
-      description: Create a new conversation with an optional title.
+      description: Create a new conversation with an optional title and seeded messages.
       tags:
         - conversations
       responses:
@@ -4711,9 +4775,17 @@ paths:
                     type: string
                   title:
                     type: string
+                  conversationKey:
+                    type: string
+                  messagesInserted:
+                    type: integer
+                    minimum: 0
+                    maximum: 9007199254740991
                 required:
                   - id
                   - title
+                  - conversationKey
+                  - messagesInserted
                 additionalProperties: false
       requestBody:
         required: true
@@ -4724,6 +4796,22 @@ paths:
               properties:
                 title:
                   type: string
+                messages:
+                  type: array
+                  items:
+                    type: object
+                    properties:
+                      role:
+                        type: string
+                        enum:
+                          - user
+                          - assistant
+                      content:
+                        type: string
+                    required:
+                      - role
+                      - content
+                    additionalProperties: false
               additionalProperties: false
   /v1/conversations/cli/export:
     post:
@@ -7773,6 +7861,19 @@ paths:
                           required:
                             - kind
                           additionalProperties: false
+                        category:
+                          type: string
+                          enum:
+                            - security
+                            - scheduling
+                            - background
+                            - email
+                            - system
+                        metadata:
+                          type: object
+                          propertyNames:
+                            type: string
+                          additionalProperties: {}
                         createdAt:
                           type: string
                       required:
@@ -7922,6 +8023,19 @@ paths:
                     required:
                       - kind
                     additionalProperties: false
+                  category:
+                    type: string
+                    enum:
+                      - security
+                      - scheduling
+                      - background
+                      - email
+                      - system
+                  metadata:
+                    type: object
+                    propertyNames:
+                      type: string
+                    additionalProperties: {}
                   createdAt:
                     type: string
                 required:
@@ -8628,6 +8742,9 @@ paths:
                             - ollama
                             - fireworks
                             - openrouter
+                            - zai
+                            - deepseek
+                            - minimax
                         auth:
                           oneOf:
                             - type: object
@@ -8721,7 +8838,9 @@ paths:
           required: false
           schema:
             type: string
-          description: "Filter by provider. One of: anthropic, openai, gemini, ollama, fireworks, openrouter"
+          description:
+            "Filter by provider. One of: anthropic, openai, gemini, ollama, fireworks, openrouter, zai, deepseek,
+            minimax"
     post:
       operationId: inference_providerconnections_post
       summary: Create a provider connection
@@ -8748,6 +8867,9 @@ paths:
                       - ollama
                       - fireworks
                       - openrouter
+                      - zai
+                      - deepseek
+                      - minimax
                   auth:
                     oneOf:
                       - type: object
@@ -8855,6 +8977,9 @@ paths:
                     - ollama
                     - fireworks
                     - openrouter
+                    - zai
+                    - deepseek
+                    - minimax
                 auth:
                   oneOf:
                     - type: object
@@ -8984,6 +9109,9 @@ paths:
                       - ollama
                       - fireworks
                       - openrouter
+                      - zai
+                      - deepseek
+                      - minimax
                   auth:
                     oneOf:
                       - type: object
@@ -9105,6 +9233,9 @@ paths:
                       - ollama
                       - fireworks
                       - openrouter
+                      - zai
+                      - deepseek
+                      - minimax
                   auth:
                     oneOf:
                       - type: object
@@ -10920,6 +11051,7 @@ paths:
                         - low
                         - medium
                         - high
+                        - critical
                     deadlineAt:
                       type: number
                     isAsyncBackground:
@@ -11128,6 +11260,26 @@ paths:
       responses:
         "200":
           description: Successful response
+  /v1/oauth/connection-changed:
+    post:
+      operationId: oauth_connectionchanged_post
+      summary: Notify the assistant that an OAuth connection changed
+      description: Invalidates the config cache so the assistant picks up mode and credential changes immediately.
+      tags:
+        - oauth
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  refreshed:
+                    type: boolean
+                required:
+                  - refreshed
+                additionalProperties: false
   /v1/oauth/connections/{id}:
     delete:
       operationId: oauth_connections_by_id_delete
@@ -11761,6 +11913,129 @@ paths:
                       - name
                       - status
                     additionalProperties: false
+  /v1/question-response:
+    post:
+      operationId: questionresponse_post
+      summary: Resolve a pending ask-question prompt
+      description:
+        Submit the user's batched response (or close the card) for a pending question prompt by requestId. Legacy
+        single-question payloads remain accepted as syntactic sugar for a one-element batch.
+      tags:
+        - approvals
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                required:
+                  - success
+                additionalProperties: false
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              oneOf:
+                - type: object
+                  properties:
+                    requestId:
+                      type: string
+                    kind:
+                      type: string
+                      const: submit
+                    responses:
+                      minItems: 1
+                      type: array
+                      items:
+                        oneOf:
+                          - type: object
+                            properties:
+                              questionId:
+                                type: string
+                              kind:
+                                type: string
+                                const: option
+                              optionId:
+                                type: string
+                            required:
+                              - questionId
+                              - kind
+                              - optionId
+                            additionalProperties: false
+                          - type: object
+                            properties:
+                              questionId:
+                                type: string
+                              kind:
+                                type: string
+                                const: free_text
+                              text:
+                                type: string
+                            required:
+                              - questionId
+                              - kind
+                              - text
+                            additionalProperties: false
+                          - type: object
+                            properties:
+                              questionId:
+                                type: string
+                              kind:
+                                type: string
+                                const: skip
+                            required:
+                              - questionId
+                              - kind
+                            additionalProperties: false
+                  required:
+                    - requestId
+                    - kind
+                    - responses
+                  additionalProperties: false
+                - type: object
+                  properties:
+                    requestId:
+                      type: string
+                    kind:
+                      type: string
+                      const: close
+                  required:
+                    - requestId
+                    - kind
+                  additionalProperties: false
+                - type: object
+                  properties:
+                    requestId:
+                      type: string
+                    kind:
+                      type: string
+                      const: option
+                    optionId:
+                      type: string
+                  required:
+                    - requestId
+                    - kind
+                    - optionId
+                  additionalProperties: false
+                - type: object
+                  properties:
+                    requestId:
+                      type: string
+                    kind:
+                      type: string
+                      const: free_text
+                    text:
+                      type: string
+                  required:
+                    - requestId
+                    - kind
+                    - text
+                  additionalProperties: false
   /v1/recordings/pause:
     post:
       operationId: recordings_pause_post
@@ -14117,6 +14392,20 @@ paths:
                     type: string
                   objective:
                     type: string
+                  usage:
+                    type: object
+                    properties:
+                      inputTokens:
+                        type: number
+                      outputTokens:
+                        type: number
+                      estimatedCost:
+                        type: number
+                    required:
+                      - inputTokens
+                      - outputTokens
+                      - estimatedCost
+                    additionalProperties: false
                   events:
                     type: array
                     items: {}
@@ -14752,6 +15041,39 @@ paths:
                   type: string
                   minLength: 1
               additionalProperties: false
+  /v1/telemetry/flush:
+    post:
+      operationId: telemetry_flush_post
+      summary: Flush pending telemetry events
+      description: Force-flush all pending usage, turn, and lifecycle telemetry events to the platform.
+      tags:
+        - telemetry
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                anyOf:
+                  - type: object
+                    properties:
+                      flushed:
+                        type: boolean
+                        const: true
+                    required:
+                      - flushed
+                    additionalProperties: false
+                  - type: object
+                    properties:
+                      flushed:
+                        type: boolean
+                        const: false
+                      reason:
+                        type: string
+                    required:
+                      - flushed
+                      - reason
+                    additionalProperties: false
   /v1/telemetry/lifecycle:
     post:
       operationId: telemetry_lifecycle_post

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/assistant",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "license": "MIT",
   "type": "module",
   "exports": {
@@ -62,6 +62,7 @@
     "openai": "6.29.0",
     "pino": "9.14.0",
     "pino-pretty": "13.1.3",
+    "semver": "7.8.0",
     "playwright": "1.58.2",
     "postgres": "3.4.8",
     "rrule": "2.8.1",
@@ -94,6 +95,7 @@
     "@types/archiver": "7.0.0",
     "@types/bun": "1.3.10",
     "@types/node": "25.5.0",
+    "@types/semver": "7.5.8",
     "@types/uuid": "10.0.0",
     "drizzle-kit": "0.30.6",
     "eslint": "10.0.3",

package/scripts/generate-openapi.ts

@@ -183,14 +183,26 @@ function toJSONSchemaObject(
 async function collectRoutesFromModules(): Promise<RouteEntry[]> {
   const routes: RouteEntry[] = [];
 
-  const files = (await readdir(ROUTES_DIR, { recursive: true })).filter(
-    (f) =>
-      typeof f === "string" &&
-      f.endsWith(".ts") &&
-      !f.endsWith(".test.ts") &&
-      !f.endsWith(".benchmark.test.ts") &&
-      !f.includes("node_modules"),
-  );
+  // Skip the `index.ts` barrel: it re-exports every other route module's
+  // ROUTES into a single combined array, so importing it would double-count
+  // every entry. The duplicate `method:endpoint` keys are deduped later by
+  // first-seen, but the surviving entry's `sourceModule` (used to derive
+  // OpenAPI `tags`) depends on `readdir` order — which is filesystem
+  // dependent and diverges between local sandbox and the CI runner, making
+  // the generator non-reproducible. Sort the file list as well so directory
+  // entry order can never affect the output.
+  const files = (await readdir(ROUTES_DIR, { recursive: true }))
+    .filter(
+      (f) =>
+        typeof f === "string" &&
+        f.endsWith(".ts") &&
+        !f.endsWith(".test.ts") &&
+        !f.endsWith(".benchmark.test.ts") &&
+        !f.includes("node_modules") &&
+        f !== "index.ts" &&
+        !f.endsWith("/index.ts"),
+    )
+    .sort();
 
   for (const file of files) {
     const filePath = join(ROUTES_DIR, file);
@@ -204,8 +216,20 @@ async function collectRoutesFromModules(): Promise<RouteEntry[]> {
       continue;
     }
 
-    if ("ROUTES" in mod && Array.isArray(mod.ROUTES)) {
-      for (const raw of mod.ROUTES) {
+    // Collect every export whose name is `ROUTES` or ends in `_ROUTES`.
+    // A handful of route files (e.g. `channel-route-definitions.ts`,
+    // `contact-prompt-routes.ts`) export under domain-prefixed names like
+    // `CHANNEL_ROUTES` and `CONTACT_PROMPT_ROUTES` rather than the
+    // canonical `ROUTES`. Without this fan-out the only way those routes
+    // reached the spec was via the `index.ts` barrel — which is excluded
+    // above for reproducibility.
+    const exportNames = Object.keys(mod)
+      .filter((k) => k === "ROUTES" || k.endsWith("_ROUTES"))
+      .sort();
+    for (const name of exportNames) {
+      const arr = mod[name];
+      if (!Array.isArray(arr)) continue;
+      for (const raw of arr) {
         const result = RouteEntrySchema.safeParse({
           ...(typeof raw === "object" && raw !== null ? raw : {}),
           sourceModule: file,
@@ -545,6 +569,55 @@ async function main() {
     }
     if (existing !== yamlOutput) {
       console.error("openapi.yaml is stale. Run: bun run generate:openapi");
+      // Emit the first byte-level divergence and a windowed diff around it
+      // so CI logs are actionable without a follow-up local repro.
+      const maxLen = Math.max(existing.length, yamlOutput.length);
+      let firstDiff = -1;
+      for (let i = 0; i < maxLen; i++) {
+        if (existing[i] !== yamlOutput[i]) {
+          firstDiff = i;
+          break;
+        }
+      }
+      if (firstDiff >= 0) {
+        const lineNo = (existing.slice(0, firstDiff).match(/\n/g) ?? []).length + 1;
+        const winStart = Math.max(0, firstDiff - 120);
+        const winEnd = Math.min(maxLen, firstDiff + 120);
+        console.error(`First divergence at byte ${firstDiff} (~line ${lineNo}):`);
+        console.error(`  existing[${winStart}..${winEnd}]:`);
+        console.error(`    ${JSON.stringify(existing.slice(winStart, winEnd))}`);
+        console.error(`  generated[${winStart}..${winEnd}]:`);
+        console.error(`    ${JSON.stringify(yamlOutput.slice(winStart, winEnd))}`);
+      }
+      // Also flag which path operations are present in one but not the other —
+      // the common failure mode is a missing or duplicated route entry, and
+      // the path keys are the actionable thing for the human reading the log.
+      const pathsRe = /^\s\s(\/\S+):/gm;
+      const existingPaths = new Set(
+        Array.from(existing.matchAll(pathsRe), (m) => m[1]),
+      );
+      const generatedPaths = new Set(
+        Array.from(yamlOutput.matchAll(pathsRe), (m) => m[1]),
+      );
+      const inExistingOnly = [...existingPaths].filter(
+        (p) => !generatedPaths.has(p),
+      );
+      const inGeneratedOnly = [...generatedPaths].filter(
+        (p) => !existingPaths.has(p),
+      );
+      if (inExistingOnly.length || inGeneratedOnly.length) {
+        console.error(
+          `Path set drift: existing has ${existingPaths.size} paths, generated has ${generatedPaths.size}`,
+        );
+        if (inGeneratedOnly.length) {
+          console.error(`  Only in generated (missing from committed yaml):`);
+          for (const p of inGeneratedOnly.slice(0, 20)) console.error(`    + ${p}`);
+        }
+        if (inExistingOnly.length) {
+          console.error(`  Only in existing (stale entries in committed yaml):`);
+          for (const p of inExistingOnly.slice(0, 20)) console.error(`    - ${p}`);
+        }
+      }
       process.exit(1);
     }
     console.log("openapi.yaml is up to date.");

package/scripts/sync-llm-catalog.ts

@@ -97,8 +97,8 @@ function projectProvider(entry: ProviderCatalogEntry): Record<string, unknown> {
     projected.apiKeyPlaceholder = entry.apiKeyPlaceholder;
   if (entry.credentialsGuide !== undefined)
     projected.credentialsGuide = entry.credentialsGuide;
-  if (entry.supportsManagedAuth !== undefined)
-    projected.supportsManagedAuth = entry.supportsManagedAuth;
+  if (entry.supportsPlatformAuth !== undefined)
+    projected.supportsPlatformAuth = entry.supportsPlatformAuth;
   projected.defaultModel = entry.defaultModel;
   projected.models = entry.models.map(projectModel);
   // NOTE: `apiKeyUrl` intentionally omitted — clients use