@vellumai/assistant 0.8.6 → 0.8.7

package/src/tools/credentials/vault.ts

@@ -17,7 +17,11 @@ import {
   setSecureKeyAsync,
 } from "../../security/secure-keys.js";
 import { getLogger } from "../../util/logger.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 import { credentialBroker } from "./broker.js";
 import {
   assertMetadataWritable,
@@ -69,115 +73,114 @@ function formatSlackChannelStatus(result: SlackChannelConfigResult): string {
   return "";
 }
 
-class CredentialStoreTool implements Tool {
-  name = "credential_store";
-  description =
-    "Store, list, delete, or prompt for credentials in the secure vault";
-  category = "credentials";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.Low;
-
-  input_schema = {
-        type: "object",
-        properties: {
-          action: {
-            type: "string",
-            enum: ["store", "list", "delete", "prompt"],
-            description:
-              'The operation to perform. Use "prompt" to request a secret via secure UI - the value never enters the conversation.',
-          },
-          service: {
-            type: "string",
-            description: "Service name, e.g. google, github",
-          },
-          account: {
-            type: "string",
-            description:
-              "Account identifier (e.g. email address) to target a specific connection when multiple accounts are connected for the same service. If omitted, uses the most recently connected account.",
-          },
-          field: {
-            type: "string",
-            description: "Field name, e.g. password, username, recovery_email",
-          },
-          value: {
-            type: "string",
-            description: "The credential value (only for store action)",
-          },
-          label: {
-            type: "string",
-            description:
-              'Display label for the prompt UI (only for prompt action), e.g. "GitHub Personal Access Token"',
-          },
-          description: {
-            type: "string",
-            description:
-              'Optional context shown in the prompt UI (only for prompt action), e.g. "Needed to push changes"',
-          },
-          placeholder: {
-            type: "string",
-            description:
-              'Placeholder text for the input field (only for prompt action), e.g. "ghp_xxxxxxxxxxxx"',
-          },
-          allowed_tools: {
-            type: "array",
-            items: { type: "string" },
-            description:
-              'Tools/capabilities allowed to use this credential (for store/prompt actions), e.g. ["assistant_browser_fill_credential"]. Empty = deny all.',
-          },
-          allowed_domains: {
-            type: "array",
-            items: { type: "string" },
-            description:
-              'Domains where this credential may be used (for store/prompt actions), e.g. ["github.com"]. Empty = deny all.',
-          },
-          usage_description: {
-            type: "string",
-            description:
-              'Human-readable description of intended usage (for store/prompt actions), e.g. "GitHub login for pushing changes"',
-          },
-          alias: {
-            type: "string",
-            description:
-              'Human-friendly name for this credential (only for store action), e.g. "fal-primary"',
-          },
-          injection_templates: {
-            type: "array",
-            items: {
-              type: "object",
-              properties: {
-                hostPattern: {
-                  type: "string",
-                  description:
-                    'Glob pattern for matching request hosts, e.g. "*.fal.ai"',
-                },
-                injectionType: {
-                  type: "string",
-                  enum: ["header", "query"],
-                  description: "Where to inject the credential value",
-                },
-                headerName: {
-                  type: "string",
-                  description: 'Header name when injectionType is "header"',
-                },
-                valuePrefix: {
-                  type: "string",
-                  description:
-                    'Prefix prepended to the secret value, e.g. "Key ", "Bearer "',
-                },
-                queryParamName: {
-                  type: "string",
-                  description:
-                    'Query parameter name when injectionType is "query"',
-                },
-              },
-              required: ["hostPattern", "injectionType"],
+export const credentialStoreTool = {
+  name: "credential_store",
+  description:
+    "Store, list, delete, or prompt for credentials in the secure vault",
+  category: "credentials",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.Low,
+
+  input_schema: {
+    type: "object",
+    properties: {
+      action: {
+        type: "string",
+        enum: ["store", "list", "delete", "prompt"],
+        description:
+          'The operation to perform. Use "prompt" to request a secret via secure UI - the value never enters the conversation.',
+      },
+      service: {
+        type: "string",
+        description: "Service name, e.g. google, github",
+      },
+      account: {
+        type: "string",
+        description:
+          "Account identifier (e.g. email address) to target a specific connection when multiple accounts are connected for the same service. If omitted, uses the most recently connected account.",
+      },
+      field: {
+        type: "string",
+        description: "Field name, e.g. password, username, recovery_email",
+      },
+      value: {
+        type: "string",
+        description: "The credential value (only for store action)",
+      },
+      label: {
+        type: "string",
+        description:
+          'Display label for the prompt UI (only for prompt action), e.g. "GitHub Personal Access Token"',
+      },
+      description: {
+        type: "string",
+        description:
+          'Optional context shown in the prompt UI (only for prompt action), e.g. "Needed to push changes"',
+      },
+      placeholder: {
+        type: "string",
+        description:
+          'Placeholder text for the input field (only for prompt action), e.g. "ghp_xxxxxxxxxxxx"',
+      },
+      allowed_tools: {
+        type: "array",
+        items: { type: "string" },
+        description:
+          'Tools/capabilities allowed to use this credential (for store/prompt actions), e.g. ["assistant_browser_fill_credential"]. Empty = deny all.',
+      },
+      allowed_domains: {
+        type: "array",
+        items: { type: "string" },
+        description:
+          'Domains where this credential may be used (for store/prompt actions), e.g. ["github.com"]. Empty = deny all.',
+      },
+      usage_description: {
+        type: "string",
+        description:
+          'Human-readable description of intended usage (for store/prompt actions), e.g. "GitHub login for pushing changes"',
+      },
+      alias: {
+        type: "string",
+        description:
+          'Human-friendly name for this credential (only for store action), e.g. "fal-primary"',
+      },
+      injection_templates: {
+        type: "array",
+        items: {
+          type: "object",
+          properties: {
+            hostPattern: {
+              type: "string",
+              description:
+                'Glob pattern for matching request hosts, e.g. "*.fal.ai"',
+            },
+            injectionType: {
+              type: "string",
+              enum: ["header", "query"],
+              description: "Where to inject the credential value",
+            },
+            headerName: {
+              type: "string",
+              description: 'Header name when injectionType is "header"',
+            },
+            valuePrefix: {
+              type: "string",
+              description:
+                'Prefix prepended to the secret value, e.g. "Key ", "Bearer "',
+            },
+            queryParamName: {
+              type: "string",
+              description: 'Query parameter name when injectionType is "query"',
             },
-            description:
-              "Templates describing how to inject this credential into proxied requests (for store and prompt actions)",
           },
+          required: ["hostPattern", "injectionType"],
         },
-        required: ["action"],
-      };
+        description:
+          "Templates describing how to inject this credential into proxied requests (for store and prompt actions)",
+      },
+    },
+    required: ["action"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -816,7 +819,5 @@ class CredentialStoreTool implements Tool {
       default:
         return { content: `Error: unknown action "${action}"`, isError: true };
     }
-  }
-}
-
-export const credentialStoreTool = new CredentialStoreTool();
+  },
+} satisfies ToolDefinition;

package/src/tools/execution-target.ts

@@ -15,7 +15,7 @@ export interface ManifestOverride {
  *   3. Default sandbox.
  *
  * Called once per tool at load/construction time. The returned value is
- * stamped onto every `LoadedTool`, so runtime reads are just a field read.
+ * stamped onto every `Tool`, so runtime reads are just a field read.
  */
 export function resolveExecutionTarget(tool: {
   name: string;

package/src/tools/execution-timeout.ts

@@ -1,9 +1,8 @@
+import { DEFAULT_TOOL_EXECUTION_TIMEOUT_SEC } from "../api/constants/tool-execution.js";
 import type { ToolExecutionResult } from "./types.js";
 
 const TIMEOUT_SENTINEL = Symbol("tool-timeout");
 
-const DEFAULT_TOOL_TIMEOUT_SEC = 120;
-
 /**
  * Convert a config-provided seconds value to a safe milliseconds value,
  * falling back to the default if the input is NaN, non-finite, zero, or negative.
@@ -11,7 +10,7 @@ const DEFAULT_TOOL_TIMEOUT_SEC = 120;
 export function safeTimeoutMs(sec: unknown): number {
   const n = Number(sec);
   if (!Number.isFinite(n) || n <= 0) {
-    return DEFAULT_TOOL_TIMEOUT_SEC * 1000;
+    return DEFAULT_TOOL_EXECUTION_TIMEOUT_SEC * 1000;
   }
   return n * 1000;
 }
@@ -29,7 +28,7 @@ export async function executeWithTimeout(
   const safeMs =
     Number.isFinite(timeoutMs) && timeoutMs > 0
       ? timeoutMs
-      : DEFAULT_TOOL_TIMEOUT_SEC * 1000;
+      : DEFAULT_TOOL_EXECUTION_TIMEOUT_SEC * 1000;
   let timeoutHandle: ReturnType<typeof setTimeout>;
   const timeoutPromise = new Promise<typeof TIMEOUT_SENTINEL>((resolve) => {
     timeoutHandle = setTimeout(() => resolve(TIMEOUT_SENTINEL), safeMs);

package/src/tools/filesystem/edit.ts

@@ -3,45 +3,49 @@ import { registerTool } from "../registry.js";
 import { FileSystemOps } from "../shared/filesystem/file-ops-service.js";
 import { formatEditDiff } from "../shared/filesystem/format-diff.js";
 import { sandboxPolicy } from "../shared/filesystem/path-policy.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
-
-class FileEditTool implements Tool {
-  name = "file_edit";
-  description =
-    "Replace an exact string in a file on your own machine with a new string. Use this for surgical edits instead of rewriting entire files. Use host_file_edit for files on your guardian's device instead.";
-  category = "filesystem";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.Low;
-
-  input_schema = {
-        type: "object",
-        properties: {
-          path: {
-            type: "string",
-            description:
-              "The path to the file to edit (absolute or relative to working directory)",
-          },
-          old_string: {
-            type: "string",
-            description: "The exact text to find in the file",
-          },
-          new_string: {
-            type: "string",
-            description: "The replacement text",
-          },
-          replace_all: {
-            type: "boolean",
-            description:
-              "Replace all occurrences of old_string instead of requiring a unique match (default: false)",
-          },
-          activity: {
-            type: "string",
-            description:
-              "Brief non-technical explanation of what you are doing and why, shown as a status update.",
-          },
-        },
-        required: ["path", "old_string", "new_string", "activity"],
-      };
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
+
+export const fileEditTool = {
+  name: "file_edit",
+  description:
+    "Replace an exact string in a file on your own machine with a new string. Use this for surgical edits instead of rewriting entire files. Use host_file_edit for files on your guardian's device instead.",
+  category: "filesystem",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.Low,
+
+  input_schema: {
+    type: "object",
+    properties: {
+      path: {
+        type: "string",
+        description:
+          "The path to the file to edit (absolute or relative to working directory)",
+      },
+      old_string: {
+        type: "string",
+        description: "The exact text to find in the file",
+      },
+      new_string: {
+        type: "string",
+        description: "The replacement text",
+      },
+      replace_all: {
+        type: "boolean",
+        description:
+          "Replace all occurrences of old_string instead of requiring a unique match (default: false)",
+      },
+      activity: {
+        type: "string",
+        description:
+          "Brief non-technical explanation of what you are doing and why, shown as a status update.",
+      },
+    },
+    required: ["path", "old_string", "new_string", "activity"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -152,8 +156,7 @@ class FileEditTool implements Tool {
       isError: false,
       diff: { filePath, oldContent, newContent, isNewFile: false },
     };
-  }
-}
+  },
+} satisfies ToolDefinition;
 
-export const fileEditTool = new FileEditTool();
 registerTool(fileEditTool);

package/src/tools/filesystem/list.ts

@@ -2,35 +2,39 @@ import { RiskLevel } from "../../permissions/types.js";
 import { registerTool } from "../registry.js";
 import { FileSystemOps } from "../shared/filesystem/file-ops-service.js";
 import { sandboxPolicy } from "../shared/filesystem/path-policy.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
-class FileListTool implements Tool {
-  name = "file_list";
-  description =
-    "List the contents of a directory on your own machine. Returns file and subdirectory names with type indicators and sizes.";
-  category = "filesystem";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.Low;
+export const fileListTool = {
+  name: "file_list",
+  description:
+    "List the contents of a directory on your own machine. Returns file and subdirectory names with type indicators and sizes.",
+  category: "filesystem",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.Low,
 
-  input_schema = {
-        type: "object",
-        properties: {
-          path: {
-            type: "string",
-            description: "The directory path to list",
-          },
-          glob: {
-            type: "string",
-            description: "Filter entries by glob pattern, e.g. '*.md'",
-          },
-          activity: {
-            type: "string",
-            description:
-              "Brief non-technical explanation of what you are doing and why, shown as a status update.",
-          },
-        },
-        required: ["path", "activity"],
-      };
+  input_schema: {
+    type: "object",
+    properties: {
+      path: {
+        type: "string",
+        description: "The directory path to list",
+      },
+      glob: {
+        type: "string",
+        description: "Filter entries by glob pattern, e.g. '*.md'",
+      },
+      activity: {
+        type: "string",
+        description:
+          "Brief non-technical explanation of what you are doing and why, shown as a status update.",
+      },
+    },
+    required: ["path", "activity"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -80,8 +84,7 @@ class FileListTool implements Tool {
     }
 
     return { content: result.value.listing, isError: false };
-  }
-}
+  },
+} satisfies ToolDefinition;
 
-export const fileListTool = new FileListTool();
 registerTool(fileListTool);

package/src/tools/filesystem/read.ts

@@ -2,46 +2,54 @@ import { extname } from "node:path";
 
 import { RiskLevel } from "../../permissions/types.js";
 import { registerTool } from "../registry.js";
+import {
+  AUDIO_EXTENSIONS,
+  readAudioFile,
+} from "../shared/filesystem/audio-read.js";
 import { FileSystemOps } from "../shared/filesystem/file-ops-service.js";
 import {
   IMAGE_EXTENSIONS,
   readImageFile,
 } from "../shared/filesystem/image-read.js";
 import { sandboxPolicy } from "../shared/filesystem/path-policy.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
-class FileReadTool implements Tool {
-  name = "file_read";
-  description =
-    "Read the contents of a file on your own machine. For image files (JPEG, PNG, GIF, WebP), returns the image for visual analysis. Use host_file_read for files on your guardian's device instead.";
-  category = "filesystem";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.Low;
+export const fileReadTool = {
+  name: "file_read",
+  description:
+    "Read the contents of a file on your own machine. For image files (JPEG, PNG, GIF, WebP), returns the image for visual analysis. For audio files (MP3, WAV, OGG, FLAC, AAC, M4A), returns the audio for listening. Use host_file_read for files on your guardian's device instead.",
+  category: "filesystem",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.Low,
 
-  input_schema = {
-        type: "object",
-        properties: {
-          path: {
-            type: "string",
-            description:
-              "The path to the file to read (absolute or relative to working directory)",
-          },
-          offset: {
-            type: "number",
-            description: "Line number to start reading from (1-indexed)",
-          },
-          limit: {
-            type: "number",
-            description: "Maximum number of lines to read",
-          },
-          activity: {
-            type: "string",
-            description:
-              "Brief non-technical explanation of what you are doing and why, shown as a status update.",
-          },
-        },
-        required: ["path", "activity"],
-      };
+  input_schema: {
+    type: "object",
+    properties: {
+      path: {
+        type: "string",
+        description:
+          "The path to the file to read (absolute or relative to working directory)",
+      },
+      offset: {
+        type: "number",
+        description: "Line number to start reading from (1-indexed)",
+      },
+      limit: {
+        type: "number",
+        description: "Maximum number of lines to read",
+      },
+      activity: {
+        type: "string",
+        description:
+          "Brief non-technical explanation of what you are doing and why, shown as a status update.",
+      },
+    },
+    required: ["path", "activity"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -68,6 +76,18 @@ class FileReadTool implements Tool {
       return readImageFile(pathCheck.resolved);
     }
 
+    // For audio files, delegate to the shared audio reader.
+    if (AUDIO_EXTENSIONS.has(ext)) {
+      const pathCheck = sandboxPolicy(rawPath, context.workingDir);
+      if (!pathCheck.ok) {
+        return {
+          content: `Error: ${pathCheck.error}. To read files outside the workspace, use the host_file_read tool instead.`,
+          isError: true,
+        };
+      }
+      return readAudioFile(pathCheck.resolved);
+    }
+
     const ops = new FileSystemOps((path, opts) =>
       sandboxPolicy(path, context.workingDir, opts),
     );
@@ -105,8 +125,7 @@ class FileReadTool implements Tool {
     }
 
     return { content: result.value.content, isError: false };
-  }
-}
+  },
+} satisfies ToolDefinition;
 
-export const fileReadTool = new FileReadTool();
 registerTool(fileReadTool);