@vellumai/assistant 0.8.6 → 0.8.7

package/src/tools/computer-use/definitions.ts

@@ -8,7 +8,11 @@
  */
 
 import { RiskLevel } from "../../permissions/types.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
 // ---------------------------------------------------------------------------
 // Helpers
@@ -39,7 +43,7 @@ function proxyExecute(toolName: string) {
 // click (unified - click_type selects single / double / right)
 // ---------------------------------------------------------------------------
 
-export const computerUseClickTool: Tool = {
+export const computerUseClickTool = {
   name: "computer_use_click",
   description:
     "Click an element on screen. Prefer element_id (from the accessibility tree) over x/y coordinates.",
@@ -83,13 +87,13 @@ export const computerUseClickTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_click"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // type_text
 // ---------------------------------------------------------------------------
 
-export const computerUseTypeTextTool: Tool = {
+export const computerUseTypeTextTool = {
   name: "computer_use_type_text",
   description:
     "Type text at the current cursor position. First click a text field (by element_id) to focus it, then call this tool. If a field shows 'FOCUSED', skip the click.",
@@ -118,13 +122,13 @@ export const computerUseTypeTextTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_type_text"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // key
 // ---------------------------------------------------------------------------
 
-export const computerUseKeyTool: Tool = {
+export const computerUseKeyTool = {
   name: "computer_use_key",
   description:
     "Press a key or keyboard shortcut. Supported: enter, tab, escape, backspace, delete, up, down, left, right, space, cmd+a, cmd+c, cmd+v, cmd+z, cmd+tab, cmd+w, shift+tab, option+tab",
@@ -153,13 +157,13 @@ export const computerUseKeyTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_key"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // scroll
 // ---------------------------------------------------------------------------
 
-export const computerUseScrollTool: Tool = {
+export const computerUseScrollTool = {
   name: "computer_use_scroll",
   description:
     "Scroll within an element by its [ID], or at raw screen coordinates as fallback.",
@@ -206,13 +210,13 @@ export const computerUseScrollTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_scroll"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // drag
 // ---------------------------------------------------------------------------
 
-export const computerUseDragTool: Tool = {
+export const computerUseDragTool = {
   name: "computer_use_drag",
   description:
     "Drag from one element or position to another. Use for moving files, resizing windows, rearranging items, or adjusting sliders.",
@@ -264,13 +268,13 @@ export const computerUseDragTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_drag"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // wait
 // ---------------------------------------------------------------------------
 
-export const computerUseWaitTool: Tool = {
+export const computerUseWaitTool = {
   name: "computer_use_wait",
   description: "Wait for the UI to update",
   category: "computer-use",
@@ -298,13 +302,13 @@ export const computerUseWaitTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_wait"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // open_app
 // ---------------------------------------------------------------------------
 
-export const computerUseOpenAppTool: Tool = {
+export const computerUseOpenAppTool = {
   name: "computer_use_open_app",
   description:
     "Open or switch to a macOS application by name. Preferred over cmd+tab for switching apps - more reliable and explicit.",
@@ -335,13 +339,13 @@ export const computerUseOpenAppTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_open_app"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // run_applescript
 // ---------------------------------------------------------------------------
 
-export const computerUseRunAppleScriptTool: Tool = {
+export const computerUseRunAppleScriptTool = {
   name: "computer_use_run_applescript",
   description:
     "Run an AppleScript command. Prefer this over click/type when possible - it doesn't move the cursor or interrupt foreground activity. Never use 'do shell script' inside AppleScript (blocked for security).",
@@ -371,13 +375,13 @@ export const computerUseRunAppleScriptTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_run_applescript"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // done
 // ---------------------------------------------------------------------------
 
-export const computerUseDoneTool: Tool = {
+export const computerUseDoneTool = {
   name: "computer_use_done",
   description:
     "Signal that the computer use task is complete. Provide a summary of what was accomplished. This ends the computer use session.",
@@ -397,13 +401,13 @@ export const computerUseDoneTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_done"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // respond
 // ---------------------------------------------------------------------------
 
-export const computerUseRespondTool: Tool = {
+export const computerUseRespondTool = {
   name: "computer_use_respond",
   description:
     "Reply with a text answer instead of performing computer actions. Use this when you can answer directly without interacting with the screen.",
@@ -427,13 +431,13 @@ export const computerUseRespondTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_respond"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // observe
 // ---------------------------------------------------------------------------
 
-const computerUseObserveTool: Tool = {
+const computerUseObserveTool = {
   name: "computer_use_observe",
   description:
     "Capture the current screen state. Returns the accessibility tree with [ID] element references and optionally a screenshot.\n\nThe accessibility tree shows interactive elements like [3] AXButton 'Save' or [17] AXTextField 'Search'. Use element_id to target these elements in subsequent actions - this is much more reliable than pixel coordinates.\n\nCall this before your first computer use action, or to check screen state without acting.",
@@ -448,13 +452,13 @@ const computerUseObserveTool: Tool = {
   },
 
   execute: proxyExecute("computer_use_observe"),
-};
+} satisfies ToolDefinition;
 
 // ---------------------------------------------------------------------------
 // All tools exported as array for convenience
 // ---------------------------------------------------------------------------
 
-export const allComputerUseTools: Tool[] = [
+export const allComputerUseTools: ToolDefinition[] = [
   computerUseObserveTool,
   computerUseClickTool,
   computerUseTypeTextTool,

package/src/tools/credential-execution/make-authenticated-request.ts

@@ -10,61 +10,68 @@
  * straight through to the CES RPC call with no transformation.
  */
 
-import { GrantProposalSchema, renderProposal } from "@vellumai/service-contracts/credential-rpc";
+import {
+  GrantProposalSchema,
+  renderProposal,
+} from "@vellumai/service-contracts/credential-rpc";
 
 import { RiskLevel } from "../../permissions/types.js";
 import { getLogger } from "../../util/logger.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
 const log = getLogger("ces-tool:make-authenticated-request");
 
-class MakeAuthenticatedRequestTool implements Tool {
-  name = "make_authenticated_request";
-  description =
-    "Execute an authenticated HTTP request through CES. CES injects the credential and returns the response - the assistant never sees raw secrets.";
-  category = "credential-execution";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.High;
+export const makeAuthenticatedRequestTool = {
+  name: "make_authenticated_request",
+  description:
+    "Execute an authenticated HTTP request through CES. CES injects the credential and returns the response - the assistant never sees raw secrets.",
+  category: "credential-execution",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.High,
 
-  input_schema = {
+  input_schema: {
+    type: "object",
+    properties: {
+      credentialHandle: {
+        type: "string",
+        description:
+          "CES credential handle to use for authentication (e.g. local_static:github/api_key).",
+      },
+      method: {
+        type: "string",
+        description: "HTTP method (GET, POST, PUT, DELETE, PATCH, etc.).",
+      },
+      url: {
+        type: "string",
+        description: "Target URL for the request.",
+      },
+      headers: {
         type: "object",
-        properties: {
-          credentialHandle: {
-            type: "string",
-            description:
-              "CES credential handle to use for authentication (e.g. local_static:github/api_key).",
-          },
-          method: {
-            type: "string",
-            description: "HTTP method (GET, POST, PUT, DELETE, PATCH, etc.).",
-          },
-          url: {
-            type: "string",
-            description: "Target URL for the request.",
-          },
-          headers: {
-            type: "object",
-            additionalProperties: { type: "string" },
-            description:
-              "Optional request headers. Credential headers are injected by CES - do not include secrets here.",
-          },
-          body: {
-            description:
-              "Optional request body (string or JSON-serialisable object).",
-          },
-          purpose: {
-            type: "string",
-            description:
-              "Human-readable purpose for this request, shown in audit logs and approval prompts.",
-          },
-          grantId: {
-            type: "string",
-            description:
-              "Existing grant ID to consume, if the caller holds one from a prior approval.",
-          },
-        },
-        required: ["credentialHandle", "method", "url", "purpose"],
-      };
+        additionalProperties: { type: "string" },
+        description:
+          "Optional request headers. Credential headers are injected by CES - do not include secrets here.",
+      },
+      body: {
+        description:
+          "Optional request body (string or JSON-serialisable object).",
+      },
+      purpose: {
+        type: "string",
+        description:
+          "Human-readable purpose for this request, shown in audit logs and approval prompts.",
+      },
+      grantId: {
+        type: "string",
+        description:
+          "Existing grant ID to consume, if the caller holds one from a prior approval.",
+      },
+    },
+    required: ["credentialHandle", "method", "url", "purpose"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -186,7 +193,5 @@ class MakeAuthenticatedRequestTool implements Tool {
         isError: true,
       };
     }
-  }
-}
-
-export const makeAuthenticatedRequestTool = new MakeAuthenticatedRequestTool();
+  },
+} satisfies ToolDefinition;

package/src/tools/credential-execution/manage-secure-command-tool.ts

@@ -19,11 +19,11 @@ import type { ManageSecureCommandTool } from "@vellumai/service-contracts/rpc";
 
 import { RiskLevel } from "../../permissions/types.js";
 import { getLogger } from "../../util/logger.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type { ToolContext, ToolDefinition, ToolExecutionResult } from "../types.js";
 
 const log = getLogger("ces-tool:manage-secure-command-tool");
 
-class ManageSecureCommandToolImpl implements Tool {
+class ManageSecureCommandToolImpl implements ToolDefinition {
   name = "manage_secure_command_tool";
   description =
     "Request installation, update, or removal of a secure command tool bundle. " +

package/src/tools/credential-execution/run-authenticated-command.ts

@@ -10,90 +10,97 @@
  * straight through to the CES RPC call with no transformation.
  */
 
-import { GrantProposalSchema, renderProposal } from "@vellumai/service-contracts/credential-rpc";
+import {
+  GrantProposalSchema,
+  renderProposal,
+} from "@vellumai/service-contracts/credential-rpc";
 
 import { RiskLevel } from "../../permissions/types.js";
 import { getLogger } from "../../util/logger.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
 const log = getLogger("ces-tool:run-authenticated-command");
 
-class RunAuthenticatedCommandTool implements Tool {
-  name = "run_authenticated_command";
-  description =
-    "Execute a command with credential environment variables injected by CES. The command runs inside the CES sandbox - the assistant never sees raw secrets.";
-  category = "credential-execution";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.High;
-
-  input_schema = {
-        type: "object",
-        properties: {
-          credentialHandle: {
-            type: "string",
-            description:
-              "CES credential handle to use for environment injection (e.g. local_static:aws/key).",
-          },
-          command: {
-            type: "string",
-            description:
-              "Secure command reference in format '<bundleDigest>/<profileName> [argv...]'. Only manifest-driven secure commands are supported.",
-          },
-          cwd: {
-            type: "string",
-            description:
-              "Optional path used for resolving workspace input/output staging, not as the actual execution working directory (CES always runs commands in the scratch directory).",
-          },
-          purpose: {
-            type: "string",
-            description:
-              "Human-readable purpose for this command, shown in audit logs and approval prompts.",
-          },
-          inputs: {
-            type: "array",
-            items: {
-              type: "object",
-              properties: {
-                workspacePath: {
-                  type: "string",
-                  description:
-                    "Relative path within the assistant workspace to stage as a read-only input.",
-                },
-              },
-              required: ["workspacePath"],
+export const runAuthenticatedCommandTool = {
+  name: "run_authenticated_command",
+  description:
+    "Execute a command with credential environment variables injected by CES. The command runs inside the CES sandbox - the assistant never sees raw secrets.",
+  category: "credential-execution",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.High,
+
+  input_schema: {
+    type: "object",
+    properties: {
+      credentialHandle: {
+        type: "string",
+        description:
+          "CES credential handle to use for environment injection (e.g. local_static:aws/key).",
+      },
+      command: {
+        type: "string",
+        description:
+          "Secure command reference in format '<bundleDigest>/<profileName> [argv...]'. Only manifest-driven secure commands are supported.",
+      },
+      cwd: {
+        type: "string",
+        description:
+          "Optional path used for resolving workspace input/output staging, not as the actual execution working directory (CES always runs commands in the scratch directory).",
+      },
+      purpose: {
+        type: "string",
+        description:
+          "Human-readable purpose for this command, shown in audit logs and approval prompts.",
+      },
+      inputs: {
+        type: "array",
+        items: {
+          type: "object",
+          properties: {
+            workspacePath: {
+              type: "string",
+              description:
+                "Relative path within the assistant workspace to stage as a read-only input.",
             },
-            description:
-              "Workspace files to stage as read-only inputs in the CES scratch directory before command execution.",
           },
-          outputs: {
-            type: "array",
-            items: {
-              type: "object",
-              properties: {
-                scratchPath: {
-                  type: "string",
-                  description:
-                    "Relative path within the scratch directory where the command writes output.",
-                },
-                workspacePath: {
-                  type: "string",
-                  description:
-                    "Relative path within the assistant workspace where the output is copied after execution.",
-                },
-              },
-              required: ["scratchPath", "workspacePath"],
+          required: ["workspacePath"],
+        },
+        description:
+          "Workspace files to stage as read-only inputs in the CES scratch directory before command execution.",
+      },
+      outputs: {
+        type: "array",
+        items: {
+          type: "object",
+          properties: {
+            scratchPath: {
+              type: "string",
+              description:
+                "Relative path within the scratch directory where the command writes output.",
+            },
+            workspacePath: {
+              type: "string",
+              description:
+                "Relative path within the assistant workspace where the output is copied after execution.",
             },
-            description:
-              "Workspace files to copy back from the CES scratch directory after command execution.",
-          },
-          grantId: {
-            type: "string",
-            description:
-              "Existing grant ID to consume, if the caller holds one from a prior approval.",
           },
+          required: ["scratchPath", "workspacePath"],
         },
-        required: ["credentialHandle", "command", "purpose"],
-      };
+        description:
+          "Workspace files to copy back from the CES scratch directory after command execution.",
+      },
+      grantId: {
+        type: "string",
+        description:
+          "Existing grant ID to consume, if the caller holds one from a prior approval.",
+      },
+    },
+    required: ["credentialHandle", "command", "purpose"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -249,7 +256,5 @@ class RunAuthenticatedCommandTool implements Tool {
         isError: true,
       };
     }
-  }
-}
-
-export const runAuthenticatedCommandTool = new RunAuthenticatedCommandTool();
+  },
+} satisfies ToolDefinition;