@vellumai/assistant 0.8.6 → 0.8.7

package/src/tools/shared/filesystem/image-read.ts

@@ -19,7 +19,7 @@ const MAX_SOURCE_SIZE_BYTES = 100 * 1024 * 1024; // 100 MB — pre-optimization
  * Detect the actual image format from the first bytes of the buffer.
  * Returns the MIME type, or null if unrecognised.
  */
-function detectMediaType(buf: Buffer): string | null {
+export function detectMediaType(buf: Buffer): string | null {
   if (buf.length < 12) return null;
 
   // JPEG: FF D8 FF

package/src/tools/skills/execute.ts

@@ -1,36 +1,40 @@
 import { RiskLevel } from "../../permissions/types.js";
 import { registerTool } from "../registry.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
-class SkillExecuteTool implements Tool {
-  name = "skill_execute";
-  description =
-    "Execute a tool provided by a loaded skill. Use this instead of calling skill tools directly. The skill's instructions (from skill_load) describe available tools and their parameters. For browser automation, use the `assistant browser` CLI commands instead.";
-  category = "skills";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.Low;
+export const skillExecuteTool = {
+  name: "skill_execute",
+  description:
+    "Execute a tool provided by a loaded skill. Use this instead of calling skill tools directly. The skill's instructions (from skill_load) describe available tools and their parameters. For browser automation, use the `assistant browser` CLI commands instead.",
+  category: "skills",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.Low,
 
-  input_schema = {
+  input_schema: {
+    type: "object",
+    properties: {
+      tool: {
+        type: "string",
+        description:
+          "The skill tool name to execute (e.g. 'task_create', 'deploy_run')",
+      },
+      input: {
         type: "object",
-        properties: {
-          tool: {
-            type: "string",
-            description:
-              "The skill tool name to execute (e.g. 'task_create', 'deploy_run')",
-          },
-          input: {
-            type: "object",
-            description:
-              "Tool-specific parameters as documented in the skill's instructions",
-          },
-          activity: {
-            type: "string",
-            description:
-              "Brief non-technical explanation of what you are doing and why, shown as a progress update.",
-          },
-        },
-        required: ["tool", "input", "activity"],
-      };
+        description:
+          "Tool-specific parameters as documented in the skill's instructions",
+      },
+      activity: {
+        type: "string",
+        description:
+          "Brief non-technical explanation of what you are doing and why, shown as a progress update.",
+      },
+    },
+    required: ["tool", "input", "activity"],
+  },
 
   async execute(
     _input: Record<string, unknown>,
@@ -41,8 +45,7 @@ class SkillExecuteTool implements Tool {
         "skill_execute should be intercepted at session level. If you see this error, the session dispatch is not configured.",
       isError: true,
     };
-  }
-}
+  },
+} satisfies ToolDefinition;
 
-export const skillExecuteTool = new SkillExecuteTool();
 registerTool(skillExecuteTool);

package/src/tools/skills/load.ts

@@ -26,7 +26,11 @@ import { computeSkillVersionHash } from "../../skills/version-hash.js";
 import { getLogger } from "../../util/logger.js";
 import { getWorkspaceDirDisplay } from "../../util/platform.js";
 import { registerTool } from "../registry.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
 /** Skill sources eligible for inline command expansion in v1. */
 const INLINE_COMMAND_ELIGIBLE_SOURCES = new Set([
@@ -120,24 +124,28 @@ function formatToolSchemas(
   return lines.join("\n").trimEnd();
 }
 
-export class SkillLoadTool implements Tool {
-  name = "skill_load";
-  description =
-    "Load full instructions for a skill. Works for both bundled skills (listed in the catalog) and custom workspace skills.";
-  category = "skills";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.Low;
-
-  input_schema = {
-        type: "object",
-        properties: {
-          skill: {
-            type: "string",
-            description: "The skill id or skill name to load.",
-          },
-        },
-        required: ["skill"],
-      };
+export const skillLoadTool = {
+  name: "skill_load",
+
+  description:
+    'Load full instructions for a skill. Works for both bundled skills (listed in the catalog) and custom workspace skills. For app, website, dashboard, game, calculator, tracker, visualization, or interactive tool requests, load `app-builder` with `skill: "app-builder"`.',
+
+  category: "skills",
+
+  executionTarget: "sandbox",
+
+  defaultRiskLevel: RiskLevel.Low,
+
+  input_schema: {
+    type: "object",
+    properties: {
+      skill: {
+        type: "string",
+        description: "The skill id or skill name to load.",
+      },
+    },
+    required: ["skill"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -516,8 +524,6 @@ export class SkillLoadTool implements Tool {
       ].join("\n"),
       isError: false,
     };
-  }
-}
-
-export const skillLoadTool = new SkillLoadTool();
+  },
+} satisfies ToolDefinition;
 registerTool(skillLoadTool);

package/src/tools/subagent/notify-parent.ts

@@ -1,7 +1,11 @@
 import { RiskLevel } from "../../permissions/types.js";
 import { getSubagentManager } from "../../subagent/index.js";
 import { registerTool } from "../registry.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
 export async function executeSubagentNotifyParent(
   input: Record<string, unknown>,
@@ -31,43 +35,42 @@ export async function executeSubagentNotifyParent(
   };
 }
 
-class NotifyParentTool implements Tool {
-  name = "notify_parent";
-  description =
-    "Send a notification to the parent conversation. Use this for important findings, when you're blocked, or when you have preliminary results the parent should know about. Do not overuse — notify for significant findings, not after every tool call.";
-  category = "orchestration";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.Low;
+export const notifyParentTool = {
+  name: "notify_parent",
+  description:
+    "Send a notification to the parent conversation. Use this for important findings, when you're blocked, or when you have preliminary results the parent should know about. Do not overuse — notify for significant findings, not after every tool call.",
+  category: "orchestration",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.Low,
 
-  input_schema = {
-        type: "object",
-        properties: {
-          message: {
-            type: "string",
-            description: "The notification content for the parent.",
-          },
-          urgency: {
-            type: "string",
-            enum: ["info", "important", "blocked"],
-            description:
-              "'info' for progress updates, 'important' for key findings, 'blocked' when you need guidance.",
-          },
-          activity: {
-            type: "string",
-            description:
-              "Brief non-technical explanation of what you are doing and why, shown as a status update.",
-          },
-        },
-        required: ["message", "activity"],
-      };
+  input_schema: {
+    type: "object",
+    properties: {
+      message: {
+        type: "string",
+        description: "The notification content for the parent.",
+      },
+      urgency: {
+        type: "string",
+        enum: ["info", "important", "blocked"],
+        description:
+          "'info' for progress updates, 'important' for key findings, 'blocked' when you need guidance.",
+      },
+      activity: {
+        type: "string",
+        description:
+          "Brief non-technical explanation of what you are doing and why, shown as a status update.",
+      },
+    },
+    required: ["message", "activity"],
+  },
 
   async execute(
     input: Record<string, unknown>,
     context: ToolContext,
   ): Promise<ToolExecutionResult> {
     return executeSubagentNotifyParent(input, context);
-  }
-}
+  },
+} satisfies ToolDefinition;
 
-export const notifyParentTool = new NotifyParentTool();
 registerTool(notifyParentTool);

package/src/tools/system/avatar-generator.ts

@@ -1,34 +1,30 @@
-import { randomUUID } from "node:crypto";
-import { mkdirSync, renameSync, writeFileSync } from "node:fs";
-import { dirname } from "node:path";
-
 import { generateAvatar } from "../../media/avatar-router.js";
 import { getLogger } from "../../util/logger.js";
-import { getAvatarImagePath } from "../../util/platform.js";
 
 const log = getLogger("avatar-generator");
 
-/** Canonical path where the custom avatar PNG is stored. */
-function getAvatarPath(): string {
-  return getAvatarImagePath();
-}
-
 export interface AvatarGenerationResult {
+  /** On success, the generated PNG bytes. Null on error. */
+  pngBuffer: Buffer | null;
+  /** User-facing message describing success or the failure reason. */
   content: string;
   isError: boolean;
 }
 
 /**
- * Generate a custom avatar image from a text description and save it
- * as the assistant's avatar PNG.
+ * Generate a custom avatar image from a text description and return the PNG
+ * bytes. Persistence is the caller's responsibility — the route handler routes
+ * the bytes through the avatar store (`setImage`) so the manifest and artifacts
+ * stay consistent.
  *
  * Used by the HTTP route handler at POST /v1/settings/avatar/generate.
  */
-export async function generateAndSaveAvatar(
+export async function generateAvatarImage(
   description: string,
 ): Promise<AvatarGenerationResult> {
   if (typeof description !== "string" || description.trim() === "") {
     return {
+      pngBuffer: null,
       content: "Error: description is required and must be a non-empty string.",
       isError: true,
     };
@@ -47,23 +43,17 @@ export async function generateAndSaveAvatar(
     const result = await generateAvatar(prompt);
     if (!result.imageBase64) {
       return {
+        pngBuffer: null,
         content: "Error: No image data returned. Please try again.",
         isError: true,
       };
     }
     const pngBuffer = Buffer.from(result.imageBase64, "base64");
 
-    const avatarPath = getAvatarPath();
-    const avatarDir = dirname(avatarPath);
-
-    const tmpPath = `${avatarPath}.${randomUUID()}.tmp`;
-    mkdirSync(avatarDir, { recursive: true });
-    writeFileSync(tmpPath, pngBuffer);
-    renameSync(tmpPath, avatarPath);
-
-    log.info({ avatarPath }, "Avatar saved successfully");
+    log.info("Avatar generated successfully");
 
     return {
+      pngBuffer,
       content: "Avatar updated! Your new avatar will appear shortly.",
       isError: false,
     };
@@ -76,6 +66,7 @@ export async function generateAndSaveAvatar(
         : "An unexpected error occurred during image generation.";
     log.error({ error: message }, "Avatar generation failed");
     return {
+      pngBuffer: null,
       content: `Avatar generation failed: ${message}`,
       isError: true,
     };

package/src/tools/system/request-permission.ts

@@ -1,6 +1,10 @@
 import { RiskLevel } from "../../permissions/types.js";
 import { registerTool } from "../registry.js";
-import type { Tool, ToolContext, ToolExecutionResult } from "../types.js";
+import type {
+  ToolContext,
+  ToolDefinition,
+  ToolExecutionResult,
+} from "../types.js";
 
 const PERMISSION_TYPES = [
   "full_disk_access",
@@ -49,32 +53,32 @@ const FRIENDLY_NAMES: Record<PermissionType, string> = {
   camera: "Camera",
 };
 
-class RequestSystemPermissionTool implements Tool {
-  name = "request_system_permission";
-  description =
+export const requestSystemPermissionTool = {
+  name: "request_system_permission",
+  description:
     "Request a macOS system permission via System Settings. " +
     "Use when a tool fails with a permission/access error (e.g. 'Operation not permitted', 'EACCES', sandbox denial). " +
-    "Do not explain how to open System Settings manually - this tool handles it with a clickable button.";
-  category = "system";
-  executionTarget = "sandbox" as const;
-  defaultRiskLevel = RiskLevel.High;
+    "Do not explain how to open System Settings manually - this tool handles it with a clickable button.",
+  category: "system",
+  executionTarget: "sandbox",
+  defaultRiskLevel: RiskLevel.High,
 
-  input_schema = {
-        type: "object",
-        properties: {
-          permission_type: {
-            type: "string",
-            enum: [...PERMISSION_TYPES],
-            description: "The macOS system permission to request",
-          },
-          activity: {
-            type: "string",
-            description:
-              "Short explanation of why this permission is needed (shown in the prompt)",
-          },
-        },
-        required: ["permission_type", "activity"],
-      };
+  input_schema: {
+    type: "object",
+    properties: {
+      permission_type: {
+        type: "string",
+        enum: [...PERMISSION_TYPES],
+        description: "The macOS system permission to request",
+      },
+      activity: {
+        type: "string",
+        description:
+          "Short explanation of why this permission is needed (shown in the prompt)",
+      },
+    },
+    required: ["permission_type", "activity"],
+  },
 
   async execute(
     input: Record<string, unknown>,
@@ -102,8 +106,7 @@ class RequestSystemPermissionTool implements Tool {
       ].join("\n"),
       isError: false,
     };
-  }
-}
+  },
+} satisfies ToolDefinition;
 
-export const requestSystemPermissionTool = new RequestSystemPermissionTool();
 registerTool(requestSystemPermissionTool);