@vellumai/assistant 0.8.6 → 0.8.7

package/src/daemon/host-proxy-preactivation.ts

@@ -102,6 +102,7 @@ export const HOST_PROXY_SKILL_PREACTIVATIONS: ReadonlyArray<{
 export function evaluateHostProxyAttachment(
   capability: HostProxyCapability,
   sourceInterface: InterfaceId | undefined,
+  sourceActorPrincipalId?: string,
 ): HostProxyAttachmentDecision {
   if (!sourceInterface) {
     return { shouldAttach: false, reason: "denied_no_interface" };
@@ -112,10 +113,18 @@ export function evaluateHostProxyAttachment(
   if (sourceInterface === "chrome-extension") {
     return { shouldAttach: false, reason: "denied_chrome_extension" };
   }
-  const clientCount =
-    assistantEventHub.listClientsByCapability(capability).length;
-  if (clientCount > 0) {
-    return { shouldAttach: true, reason: "cross_client", clientCount };
+  if (sourceActorPrincipalId == null) {
+    return { shouldAttach: false, reason: "denied_no_clients", clientCount: 0 };
+  }
+  const sameActorClients = assistantEventHub
+    .listClientsByCapability(capability)
+    .filter((c) => c.actorPrincipalId === sourceActorPrincipalId);
+  if (sameActorClients.length > 0) {
+    return {
+      shouldAttach: true,
+      reason: "cross_client",
+      clientCount: sameActorClients.length,
+    };
   }
   return { shouldAttach: false, reason: "denied_no_clients", clientCount: 0 };
 }
@@ -128,8 +137,13 @@ export function evaluateHostProxyAttachment(
 export function shouldAttachHostProxyForCapability(
   capability: HostProxyCapability,
   sourceInterface: InterfaceId | undefined,
+  sourceActorPrincipalId?: string,
 ): boolean {
-  return evaluateHostProxyAttachment(capability, sourceInterface).shouldAttach;
+  return evaluateHostProxyAttachment(
+    capability,
+    sourceInterface,
+    sourceActorPrincipalId,
+  ).shouldAttach;
 }
 
 /**
@@ -148,12 +162,17 @@ export function shouldAttachHostProxyForCapability(
 export function preactivateHostProxySkills(
   conversation: HostProxyPreactivationTarget,
   sourceInterface: InterfaceId | undefined,
+  sourceActorPrincipalId?: string,
 ): void {
   const decisions: Record<string, HostProxyAttachmentDecision> = {};
   const preactivatedSkillIds: string[] = [];
 
   for (const { capability, skillId } of HOST_PROXY_SKILL_PREACTIVATIONS) {
-    const decision = evaluateHostProxyAttachment(capability, sourceInterface);
+    const decision = evaluateHostProxyAttachment(
+      capability,
+      sourceInterface,
+      sourceActorPrincipalId,
+    );
     decisions[capability] = decision;
     if (decision.shouldAttach) {
       conversation.addPreactivatedSkillId(skillId);

package/src/daemon/lifecycle.ts

@@ -60,8 +60,6 @@ import { sweepConceptPageFrontmatter } from "../memory/v2/frontmatter-sweep.js";
 import { emitNotificationSignal } from "../notifications/emit-signal.js";
 import { backfillManualTokenConnections } from "../oauth/manual-token-connection.js";
 import { seedOAuthProviders } from "../oauth/seed-providers.js";
-import { installPluginRuntime } from "../plugins/external-api.js";
-import { loadUserPlugins } from "../plugins/user-loader.js";
 import { backfillGuardIfNeeded } from "../proactive-artifact/index.js";
 import { ensurePromptFiles } from "../prompts/system-prompt.js";
 import { runProviderConnectionsBackfill } from "../providers/inference/backfill.js";
@@ -112,7 +110,7 @@ import {
   startDiskPressureGuard,
   stopDiskPressureGuard,
 } from "./disk-pressure-guard.js";
-import { bootstrapPlugins } from "./external-plugins-bootstrap.js";
+import { initializePlugins } from "./external-plugins-bootstrap.js";
 import { backfillSlackInjectionTemplates } from "./handlers/config-slack-channel.js";
 import { installAssistantSymlink } from "./install-symlink.js";
 import {
@@ -710,38 +708,12 @@ export async function runDaemon(): Promise<void> {
       });
     }
 
-    // Install the `globalThis.__vellumPluginRuntime` bridge before scanning
-    // for user plugins. Plugins that touch the bridge from their module body
-    // would throw without this — see `plugins/external-api.ts` for the
-    // rationale (compiled-binary module identity).
-    installPluginRuntime();
-
-    // Populate the registry with user plugins from `<workspaceDir>/plugins/*`
-    // AFTER first-party plugins have already registered via their static
-    // side-effect imports. User plugins may fail to load individually; a
-    // failing user plugin is logged and skipped so one bad install can't
-    // prevent the daemon from starting. Ordering is load-bearing:
-    //   first-party registrations → user registrations → bootstrap (init).
-    // Both groups are fully registered before any `init()` runs so plugins
-    // that depend on each other's registration observably see a stable
-    // registry at init time.
-    await loadUserPlugins();
-
-    // Bootstrap registered plugins. Runs after the plugin registry is
-    // populated (first-party static side-effect imports + user plugins
-    // loaded above) and before the DaemonServer starts handling
-    // conversations. Credential resolution + per-plugin storage directory
-    // creation happen here. Wrapped in try/catch so a failing plugin can't
-    // block daemon startup — bootstrapPlugins internally tears down any
-    // partially-initialized plugins before throwing.
-    try {
-      await bootstrapPlugins({ config, assistantVersion: APP_VERSION });
-    } catch (err) {
-      log.warn(
-        { err },
-        "Plugin bootstrap failed — continuing startup with degraded plugin functionality",
-      );
-    }
+    // Bring up the plugin layer: install the runtime bridge, register the
+    // first-party defaults, load user plugins, and run every plugin's
+    // `init()`. Ordering is load-bearing (defaults register ahead of user
+    // plugins so they compose innermost) and plugin failures are contained so
+    // they can't block daemon startup.
+    await initializePlugins();
 
     // Start the DaemonServer (conversation manager) before Qdrant so HTTP
     // routes can begin accepting requests while Qdrant initializes.
@@ -952,7 +924,6 @@ export async function runDaemon(): Promise<void> {
         await processMessage(
           conversationId,
           message,
-          undefined,
           options
             ? {
                 ...(options.trustClass
@@ -1135,25 +1106,27 @@ export async function runDaemon(): Promise<void> {
 
             let agentLoopError: string | undefined;
             let generatedText = "";
-            await conversation.runAgentLoop(instruction, messageId, (msg) => {
-              if (
-                "type" in msg &&
-                msg.type === "assistant_text_delta" &&
-                "text" in msg
-              ) {
-                generatedText += (msg as { text: string }).text;
-              }
-              if (
-                "type" in msg &&
-                (msg.type === "error" || msg.type === "conversation_error")
-              ) {
-                agentLoopError =
-                  "message" in msg
-                    ? (msg as { message: string }).message
-                    : "userMessage" in msg
-                      ? (msg as { userMessage: string }).userMessage
-                      : "Agent loop failed";
-              }
+            await conversation.runAgentLoop(instruction, messageId, {
+              onEvent: (msg) => {
+                if (
+                  "type" in msg &&
+                  msg.type === "assistant_text_delta" &&
+                  "text" in msg
+                ) {
+                  generatedText += (msg as { text: string }).text;
+                }
+                if (
+                  "type" in msg &&
+                  (msg.type === "error" || msg.type === "conversation_error")
+                ) {
+                  agentLoopError =
+                    "message" in msg
+                      ? (msg as { message: string }).message
+                      : "userMessage" in msg
+                        ? (msg as { userMessage: string }).userMessage
+                        : "Agent loop failed";
+                }
+              },
             });
 
             // Identify messages created during this run by diffing against

package/src/daemon/message-protocol.ts

@@ -21,7 +21,6 @@ export * from "./message-types/computer-use.js";
 export * from "./message-types/contacts.js";
 export * from "./message-types/conversations.js";
 export * from "./message-types/diagnostics.js";
-export * from "./message-types/disk-pressure.js";
 export * from "./message-types/document-comments.js";
 export * from "./message-types/documents.js";
 export * from "./message-types/guardian-actions.js";
@@ -51,6 +50,7 @@ export * from "./message-types/work-items.js";
 export * from "./message-types/workspace.js";
 
 // Import domain-level union aliases for composition
+import type { DiskPressureStatusChangedEvent } from "../api/events/disk-pressure-status-changed.js";
 import type { _AcpServerMessages } from "./message-types/acp.js";
 import type {
   _AppsClientMessages,
@@ -77,7 +77,6 @@ import type {
   _DiagnosticsClientMessages,
   _DiagnosticsServerMessages,
 } from "./message-types/diagnostics.js";
-import type { _DiskPressureServerMessages } from "./message-types/disk-pressure.js";
 import type { _DocumentCommentsServerMessages } from "./message-types/document-comments.js";
 import type {
   _DocumentsClientMessages,
@@ -216,7 +215,7 @@ export type ServerMessage =
   | _UpgradesServerMessages
   | _AcpServerMessages
   | _BookmarksServerMessages
-  | _DiskPressureServerMessages
+  | DiskPressureStatusChangedEvent
   | SubagentEvent;
 
 // === Contract schema ===

package/src/daemon/message-provenance.ts

@@ -0,0 +1,49 @@
+/**
+ * Provenance-based message trust filtering.
+ *
+ * Each persisted message row records the trust class of the actor that
+ * produced it under `metadata.provenanceTrustClass`. Untrusted actors
+ * (unknown / trusted_contact viewers) must never see content that
+ * originated from the guardian, so any view assembled for an untrusted
+ * actor filters the history down to rows whose provenance is itself
+ * non-guardian.
+ *
+ * This lives in its own low-dependency module (types only) so both the
+ * conversation lifecycle (history load) and the context compactor (image
+ * manifest) can apply the identical filter without creating an import
+ * cycle through `conversation-lifecycle` ↔ `window-manager` ↔ `compactor`.
+ */
+import type { MessageRow } from "../memory/conversation-crud.js";
+import type { TrustClass } from "../runtime/actor-trust-resolver.js";
+
+export function parseProvenanceTrustClass(
+  metadata: string | null,
+): TrustClass | undefined {
+  if (!metadata) return undefined;
+  try {
+    const parsed = JSON.parse(metadata) as { provenanceTrustClass?: unknown };
+    const trustClass = parsed?.provenanceTrustClass;
+    if (
+      trustClass === "guardian" ||
+      trustClass === "trusted_contact" ||
+      trustClass === "unknown"
+    ) {
+      return trustClass;
+    }
+  } catch {
+    // Ignore malformed metadata and treat as unknown provenance.
+  }
+  return undefined;
+}
+
+export function filterMessagesForUntrustedActor(
+  messages: MessageRow[],
+): MessageRow[] {
+  return messages.filter((m) => {
+    const provenanceTrustClass = parseProvenanceTrustClass(m.metadata);
+    return (
+      provenanceTrustClass === "trusted_contact" ||
+      provenanceTrustClass === "unknown"
+    );
+  });
+}

package/src/daemon/message-types/contacts.ts

@@ -1,5 +1,7 @@
 // Contact management: list, get, update channel status, and delete.
 
+import type { ContactRequestEvent } from "../../api/events/contact-request.js";
+
 // === Client → Server ===
 
 export interface ContactsRequest {
@@ -36,25 +38,6 @@ export interface ContactsChanged {
   type: "contacts_changed";
 }
 
-/**
- * Server → Client prompt requesting the user to enter a contact channel address.
- * Emitted by the `contacts/prompt` IPC route.
- */
-export interface ContactRequest {
-  type: "contact_request";
-  requestId: string;
-  /** Suggested channel type (e.g. "phone", "email") — used as a hint, not enforced. */
-  channel?: string;
-  /** Placeholder text for the address input field. */
-  placeholder?: string;
-  /** Display label shown above the input field. */
-  label?: string;
-  /** Longer description shown below the label. */
-  description?: string;
-  /** Suggested role for the new contact (guardian / trusted-contact / unknown). */
-  role?: string;
-}
-
 export interface ContactPayload {
   id: string;
   displayName: string;
@@ -90,4 +73,4 @@ export type _ContactsClientMessages = ContactsRequest;
 export type _ContactsServerMessages =
   | ContactsResponse
   | ContactsChanged
-  | ContactRequest;
+  | ContactRequestEvent;

package/src/daemon/message-types/conversations.ts

@@ -1,7 +1,13 @@
 // Conversation lifecycle, auth, model config, and history types.
 
+import type { CompactionCircuitClosedEvent } from "../../api/events/compaction-circuit-closed.js";
+import type { CompactionCircuitOpenEvent } from "../../api/events/compaction-circuit-open.js";
+import type { ConversationErrorEvent } from "../../api/events/conversation-error.js";
+import type { ConversationListInvalidatedEvent } from "../../api/events/conversation-list-invalidated.js";
+import type { ConversationTitleUpdatedEvent } from "../../api/events/conversation-title-updated.js";
 import type { GenerationCancelledEvent } from "../../api/events/generation-cancelled.js";
 import type { GenerationHandoffEvent } from "../../api/events/generation-handoff.js";
+import type { UsageUpdateEvent } from "../../api/events/usage-update.js";
 import type {
   ChannelId,
   HostProxyInterfaceId,
@@ -216,12 +222,6 @@ export interface ConversationInfo {
   inferenceProfile?: string;
 }
 
-export interface ConversationTitleUpdated {
-  type: "conversation_title_updated";
-  conversationId: string;
-  title: string;
-}
-
 /** Channel binding metadata exposed in conversation list APIs. */
 interface ChannelBinding {
   sourceChannel: ChannelId;
@@ -425,19 +425,6 @@ export interface UndoComplete {
   conversationId?: string;
 }
 
-export interface UsageUpdate {
-  type: "usage_update";
-  conversationId: string;
-  inputTokens: number;
-  outputTokens: number;
-  totalInputTokens: number;
-  totalOutputTokens: number;
-  estimatedCost: number;
-  model: string;
-  contextWindowTokens?: number;
-  contextWindowMaxTokens?: number;
-}
-
 /**
  * Emitted after each LLM call with per-call token deltas and estimated cost.
  * Clients accumulate these additively for live-updating usage metrics.
@@ -465,7 +452,7 @@ export interface UsageResponse {
  * `/compact`). Carries the fresh `estimatedInputTokens` so clients can refresh
  * the context-window indicator without waiting for the next `usage_update`.
  *
- * Scoped per-conversation — see `CompactionCircuitOpen` doc for why.
+ * Scoped per-conversation — see `CompactionCircuitOpenEvent` doc for why.
  */
 export interface ContextCompacted {
   type: "context_compacted";
@@ -509,91 +496,6 @@ export interface ContextCompacted {
  * conversation would set the "auto-compaction paused" banner on every open
  * `ChatViewModel`.
  */
-export interface CompactionCircuitOpen {
-  type: "compaction_circuit_open";
-  conversationId: string;
-  reason: "3_consecutive_failures";
-  /** Timestamp (ms since epoch) when the breaker will allow auto-compaction again. */
-  openUntil: number;
-}
-
-/**
- * Emitted when the compaction circuit breaker transitions from open → closed
- * because a successful compaction reset
- * `ctx.compactionCircuitOpenUntil`. The Swift client clears its banner state
- * on receipt so the "auto-compaction paused" indicator dismisses immediately
- * instead of lingering until the original `openUntil` deadline (up to 1h).
- *
- * Only fires on the open→closed transition — successful compactions while
- * the breaker was already closed would be noise.
- *
- * Scoped per-conversation — see `CompactionCircuitOpen` doc for why.
- */
-export interface CompactionCircuitClosed {
-  type: "compaction_circuit_closed";
-  conversationId: string;
-}
-
-export type ConversationErrorCode =
-  | "PROVIDER_NETWORK"
-  | "PROVIDER_RATE_LIMIT"
-  | "MANAGED_USAGE_LIMIT"
-  | "PROVIDER_OVERLOADED"
-  | "PROVIDER_API"
-  | "IMAGE_TOO_LARGE"
-  | "PROVIDER_BILLING"
-  | "PROVIDER_ORDERING"
-  | "PROVIDER_WEB_SEARCH"
-  | "PROVIDER_NOT_CONFIGURED"
-  | "PROVIDER_INVALID_KEY"
-  | "MANAGED_KEY_INVALID"
-  | "CONTEXT_TOO_LARGE"
-  | "BUDGET_YIELD_UNRECOVERED"
-  | "MAX_TOKENS_REACHED"
-  | "CONVERSATION_ABORTED"
-  | "CONVERSATION_PROCESSING_FAILED"
-  | "DISK_SPACE_CRITICAL"
-  | "REGENERATE_FAILED"
-  | "UNKNOWN";
-
-export interface ConversationErrorMessage {
-  type: "conversation_error";
-  conversationId: string;
-  code: ConversationErrorCode;
-  userMessage: string;
-  retryable: boolean;
-  debugDetails?: string;
-  /** Machine-readable error category for log report metadata and triage. */
-  errorCategory?: string;
-  /**
-   * Name of the `provider_connections` row in play when the error occurred.
-   * Surfaced by the macOS chat banner so users know which connection to fix
-   * (e.g. an invalid API key on `my-anthropic`). Optional because some
-   * errors fire before a connection is resolved.
-   */
-  connectionName?: string;
-  /**
-   * Name of the resolved profile (`llm.activeProfile` or per-call override)
-   * in play when the error occurred. Lets the macOS chat banner point
-   * users at the right profile even when the connection name is generic.
-   * Optional because some errors fire before a profile is resolved.
-   */
-  profileName?: string;
-}
-
-/** Reason the conversation list was invalidated. */
-export type ConversationListInvalidatedReason =
-  | "created"
-  | "renamed"
-  | "deleted"
-  | "reordered"
-  | "seen_changed";
-
-/** Server push — tells clients their sidebar conversation list is stale. */
-export interface ConversationListInvalidated {
-  type: "conversation_list_invalidated";
-  reason: ConversationListInvalidatedReason;
-}
 
 /** Server push — broadcast when a schedule creates a conversation. */
 export interface ScheduleConversationCreated {
@@ -647,19 +549,19 @@ export type _ConversationsServerMessages =
   | ModelInfo
   | HistoryResponse
   | UndoComplete
-  | UsageUpdate
+  | UsageUpdateEvent
   | UsageProgress
   | UsageResponse
   | ContextCompacted
-  | CompactionCircuitOpen
-  | CompactionCircuitClosed
-  | ConversationErrorMessage
+  | CompactionCircuitOpenEvent
+  | CompactionCircuitClosedEvent
+  | ConversationErrorEvent
   | ConversationInfo
-  | ConversationTitleUpdated
+  | ConversationTitleUpdatedEvent
   | ConversationListResponse
   | ConversationsClearResponse
   | ConversationSearchResponse
   | MessageContentResponse
-  | ConversationListInvalidated
+  | ConversationListInvalidatedEvent
   | ScheduleConversationCreated
   | OpenConversation;

package/src/daemon/message-types/documents.ts

@@ -1,5 +1,7 @@
 // Document editor and document persistence types.
 
+import type { DocumentEditorUpdateEvent } from "../../api/events/document-editor-update.js";
+
 // === Server → Client ===
 
 export interface DocumentEditorShow {
@@ -10,14 +12,6 @@ export interface DocumentEditorShow {
   initialContent: string;
 }
 
-export interface DocumentEditorUpdate {
-  type: "document_editor_update";
-  conversationId: string;
-  surfaceId: string;
-  markdown: string;
-  mode: string;
-}
-
 // === Client → Server ===
 
 export interface DocumentSaveRequest {
@@ -82,7 +76,7 @@ export type _DocumentsClientMessages =
 
 export type _DocumentsServerMessages =
   | DocumentEditorShow
-  | DocumentEditorUpdate
+  | DocumentEditorUpdateEvent
   | DocumentSaveResponse
   | DocumentLoadResponse
   | DocumentListResponse;

package/src/daemon/message-types/home.ts

@@ -7,22 +7,9 @@
  * just enough metadata to invalidate a cache and trigger a refetch.
  */
 
+import type { HomeFeedUpdatedEvent } from "../../api/events/home-feed-updated.js";
 import type { RelationshipStateUpdatedEvent } from "../../api/events/relationship-state-updated.js";
 
-/**
- * Broadcast after the daemon successfully writes a fresh home activity
- * feed snapshot. Subscribers (e.g. `HomeFeedStore` on the client) should
- * refetch the authoritative feed from its HTTP route.
- *
- * Only emitted on the success branch of the feed writer — if the
- * underlying write fails, this event is NOT published.
- */
-export interface HomeFeedUpdated {
-  type: "home_feed_updated";
-  /** ISO-8601 timestamp of when the feed was written. */
-  updatedAt: string;
-  /** Count of items with `status === "new"` after this write. */
-  newItemCount: number;
-}
-
-export type _HomeServerMessages = RelationshipStateUpdatedEvent | HomeFeedUpdated;
+export type _HomeServerMessages =
+  | RelationshipStateUpdatedEvent
+  | HomeFeedUpdatedEvent;

package/src/daemon/message-types/integrations.ts

@@ -1,5 +1,6 @@
 // External service integrations: Slack, Telegram, Vercel, ingress, guardian.
 
+import type { NavigateSettingsEvent } from "../../api/events/navigate-settings.js";
 import type { OpenUrlEvent } from "../../api/events/open-url.js";
 import type { ChannelId } from "../../channels/types.js";
 
@@ -207,11 +208,6 @@ export interface OAuthConnectResultResponse {
   error?: string;
 }
 
-export interface NavigateSettings {
-  type: "navigate_settings";
-  tab: string;
-}
-
 export interface ShowPlatformLogin {
   type: "show_platform_login";
 }
@@ -246,6 +242,6 @@ export type _IntegrationsServerMessages =
   | IntegrationConnectResult
   | OAuthConnectResultResponse
   | OpenUrlEvent
-  | NavigateSettings
+  | NavigateSettingsEvent
   | ShowPlatformLogin
   | PlatformDisconnected;